gsd-pi 2.76.0-dev.fe143342a → 2.77.0-dev.538325aea

package/README.md

@@ -27,49 +27,31 @@ One command. Walk away. Come back to a built project with clean git history.
 
 ---
 
-## What's New in v2.76
+## What's New in v2.77
 
-### Memory System
+### Context Mode & Execution
 
-- **Persistent agent memory** — new `capture_thought`, `memory_query`, and `gsd_graph` tools let GSD store, retrieve, and relate thoughts across sessions (Phase 1).
-- **Ingestion + scopes/tags** — memories can be scoped (project, milestone, slice) and tagged for filtering (Phase 2).
-- **Hybrid retrieval** — keyword + semantic search over stored memory for higher-recall lookup (Phase 3).
-- **Knowledge graph relationships** — memories link into a queryable graph, feeding planning and dispatch context (Phase 4).
-- **Maintenance & observability** — cap cascade, decay metrics, and export/import for memory stores (Phase 5).
+- **Context Mode** — a dispatch behavior that builds task-ready context automatically: it pulls in the most relevant project artifacts, prior session state, milestone/slice signals, and execution metadata before the model runs. This reduces manual prompt assembly, improves continuity across turns, and helps tasks start with the right files and constraints from the first dispatch. Enabled by default for new projects (opt out with `enabled: false`).
+- **Sandboxed execution tools** — added `gsd_exec_search`, `gsd_resume`, and sandboxed tool-output execution paths for context-mode flows, so search/resume and follow-up execution can run with tighter boundaries and more predictable runtime behavior.
+- **Preflight hardening** — milestone completion now performs stricter clean-root preflight checks and can auto-stash when needed, reducing accidental dirty-tree transitions and helping completion flows fail fast with clearer remediation.
 
-### Progressive Planning (ADR-011)
+### Memory Architecture (ADR-013)
 
-- **Sketch-then-refine planning** — Phase 1 introduces progressive plan elaboration so GSD drafts a lightweight sketch before locking a full plan (#3789).
-- **Mid-execution escalation** — Phase 2 lets tasks escalate complexity mid-run with compensating rollback on write failure (#3789).
+- **Memories table is now authoritative** — all memory reads and writes now flow through the `memories` table as the single source of truth. By removing split legacy paths, memory state stays consistent across agents, tools, and UI surfaces, with fewer reconciliation edge cases and less sync drift.
+- **Structured memory fields** — `structured_fields` adds typed metadata (instead of only free-form text), so memories can carry machine-usable attributes for more accurate retrieval, stronger filtering, and more dependable downstream automation and tooling.
+- **Dual-write migration completed** — the staged migration that wrote to both old and new paths is now fully landed, including decisions backfill and parity wiring across agents, MCP tools, and extract-learnings flows. That gives a safer upgrade path while preserving historical data and reducing cutover risk.
 
-### Workflow & Onboarding
+### Skills, Tooling, and UX
 
-- **Unified workflow plugin system** — new plugin architecture with modes and remote install. Manage via `/gsd workflow list|run|install|info|validate`.
-- **`/gsd onboarding` re-entry** — revisit setup without restarting the TUI; setup hub disambiguation prevents duplicate banners.
-- **`/gsd scan`** — new lightweight command for rapid codebase assessment, writing to `.gsd/codebase/`.
+- **Skill coverage expanded** — 9 gap-closing skills landed and 6 planning/design skills were surfaced, improving end-to-end workflow coverage and making specialized guidance easier to discover at the point of use.
+- **Hook stack upgrades** — Layer 0 shell hooks and additional Layer 2 events were added to widen extension integration points: hooks can act earlier in command execution, and lifecycle consumers now receive richer event signals for orchestration, policy checks, and observability.
+- **TUI polish** — skill invocations now render in a dedicated chat-frame style for clearer scanability, and active-row overflow handling was fixed to prevent terminal layout breakage during long outputs.
 
-### Remote Control & TUI
+### Reliability & Safety
 
-- **Telegram command interface** — control auto-mode remotely via Telegram alongside existing Slack/Discord routes.
-- **Chat, footer, and welcome refresh** — TUI visuals updated; onboarding no longer hangs on re-entry.
-- **New themes** — `tui-classic` and web `classic`/`vivid` palettes added (#4301).
-
-### Models & Providers
-
-- **Claude Opus 4.7** — added across Anthropic, Bedrock, Antigravity, and OpenRouter (#4348).
-- **GPT-5.4-mini** — added to the OpenAI Codex model list (#1215).
-- **Anthropic proxy support** — `ANTHROPIC_BASE_URL` env var honored for custom proxy endpoints (#4140).
-- **Flat-rate provider opt-in** — `allow_flat_rate_providers` routing toggle (#4386).
-- **Ask User Questions** — optional markdown preview panel with side-by-side layout.
-
-### Auto-Mode & Reliability
-
-- **Stuck-loop hardening** — repeated units detected across the stuck window; research-dispatch stuck loop fixed (#4414).
-- **Branch isolation** — milestone branch is created on entry in `isolation: branch` mode with `main_branch` validation (#4389).
-- **Model fallback on limits** — auto-mode limit errors now trigger model fallback (#4373).
-- **Python/Windows verification** — python invocations normalized on Windows in the verification gate (#4416).
-- **Self-healing `.gsd/`** — symlinked `.gsd` staging self-heals to prevent silent data loss (#4423); `.gsd.migrating` healed on resume.
-- **Stale OAuth recovery** — stale Anthropic OAuth credentials self-heal (#4399).
+- **Worktree and dispatch resilience** — crash-recovery dispatch is more robust, path derivation is safer, and worktree context fallback is improved, reducing stuck states and misrouted artifact operations after interruptions.
+- **DB/schema guardrails** — migration/index ordering and schema version stamping were tightened so upgrades apply deterministically and avoid index/version drift across mixed or legacy states.
+- **Security and validation fixes** — multiple hardening fixes landed across redaction paths, file/path checks, and pre-execution validation, closing false-positive/false-negative gaps while improving safety boundaries.
 
 See the full [Changelog](./CHANGELOG.md) for details on every release.
 

package/dist/claude-cli-check.js

@@ -12,12 +12,41 @@ import { execFileSync } from 'node:child_process';
  * `src/resources/extensions/gsd/pre-execution-checks.ts`.
  */
 export const CLAUDE_COMMAND = process.platform === 'win32' ? 'claude.cmd' : 'claude';
+/**
+ * Ordered list of binary names to probe for the Claude Code CLI.
+ *
+ * Windows installs vary: npm-global installs produce a `claude.cmd` shim,
+ * direct binary installs produce `claude.exe`, and Git Bash wrappers may
+ * expose a bare `claude` shim. Try all three so no valid install is missed.
+ */
+const CLAUDE_COMMAND_CANDIDATES = process.platform === 'win32' ? [CLAUDE_COMMAND, 'claude.exe', 'claude'] : [CLAUDE_COMMAND];
+/**
+ * Try to run `args` against each candidate binary.
+ * Returns the output buffer on first success, throws the last error if all fail.
+ */
+function execClaudeCheck(args) {
+    let lastError;
+    for (const command of CLAUDE_COMMAND_CANDIDATES) {
+        try {
+            return execFileSync(command, args, { timeout: 5_000, stdio: 'pipe' });
+        }
+        catch (error) {
+            lastError = error;
+            const code = error?.code;
+            // EINVAL can surface on Windows Git Bash for .cmd spawn failures.
+            if (code === 'ENOENT' || code === 'EINVAL')
+                continue;
+            throw error;
+        }
+    }
+    throw lastError ?? new Error(`Claude CLI not found (tried: ${CLAUDE_COMMAND_CANDIDATES.join(', ')})`);
+}
 /**
  * Check if the `claude` binary is installed (regardless of auth state).
  */
 export function isClaudeBinaryInstalled() {
     try {
-        execFileSync(CLAUDE_COMMAND, ['--version'], { timeout: 5_000, stdio: 'pipe' });
+        execClaudeCheck(['--version']);
         return true;
     }
     catch {
@@ -29,13 +58,13 @@ export function isClaudeBinaryInstalled() {
  */
 export function isClaudeCliReady() {
     try {
-        execFileSync(CLAUDE_COMMAND, ['--version'], { timeout: 5_000, stdio: 'pipe' });
+        execClaudeCheck(['--version']);
     }
     catch {
         return false;
     }
     try {
-        const output = execFileSync(CLAUDE_COMMAND, ['auth', 'status'], { timeout: 5_000, stdio: 'pipe' })
+        const output = execClaudeCheck(['auth', 'status'])
             .toString()
             .toLowerCase();
         return !(/not logged in|no credentials|unauthenticated|not authenticated/i.test(output));

package/dist/cli.js

@@ -1,4 +1,6 @@
-import { AuthStorage, DefaultResourceLoader, ModelRegistry, runPackageCommand, SettingsManager, SessionManager, createAgentSession, InteractiveMode, runPrintMode, runRpcMode, } from '@gsd/pi-coding-agent';
+import { AuthStorage, DefaultResourceLoader, ModelRegistry, SettingsManager, SessionManager, } from '@gsd/pi-coding-agent';
+import { runInteractiveMode as InteractiveMode, runPrintMode, runRpcMode, } from '@gsd/agent-modes';
+import { createAgentSession } from '@gsd/agent-core';
 import { readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { agentDir, sessionsDir, authFilePath } from './app-paths.js';
@@ -233,18 +235,8 @@ const hasSubcommand = cliFlags.messages.length > 0;
 if (!process.stdin.isTTY && !isPrintMode && !hasSubcommand && !cliFlags.listModels && !cliFlags.web) {
     printNonTtyErrorAndExit(undefined, false);
 }
-const packageCommand = await runPackageCommand({
-    appName: 'gsd',
-    args: process.argv.slice(2),
-    cwd: process.cwd(),
-    agentDir,
-    stdout: process.stdout,
-    stderr: process.stderr,
-    allowedCommands: new Set(['install', 'remove', 'list']),
-});
-if (packageCommand.handled) {
-    process.exit(packageCommand.exitCode);
-}
+// Package management subcommands (install, remove, list) were handled here
+// via pi-coding-agent prior to 0.67.2. That API was removed upstream.
 // `gsd config` — replay the setup wizard and exit
 if (cliFlags.messages[0] === 'config') {
     const authStorage = AuthStorage.create(authFilePath);
@@ -425,7 +417,7 @@ if (cliFlags.listModels !== undefined) {
     let filtered = models;
     if (searchPattern) {
         const q = searchPattern.toLowerCase();
-        filtered = models.filter((m) => `${m.provider} ${m.id} ${m.name}`.toLowerCase().includes(q));
+        filtered = models.filter((model) => `${model.provider} ${model.id} ${model.name}`.toLowerCase().includes(q));
     }
     // Sort by name descending (newest first), then provider, then id
     filtered.sort((a, b) => {
@@ -438,13 +430,13 @@ if (cliFlags.listModels !== undefined) {
         return a.id.localeCompare(b.id);
     });
     const fmt = (n) => n >= 1_000_000 ? `${n / 1_000_000}M` : n >= 1_000 ? `${n / 1_000}K` : `${n}`;
-    const rows = filtered.map((m) => [
-        m.provider,
-        m.id,
-        m.name,
-        fmt(m.contextWindow),
-        fmt(m.maxTokens),
-        m.reasoning ? 'yes' : 'no',
+    const rows = filtered.map((model) => [
+        model.provider,
+        model.id,
+        model.name,
+        fmt(model.contextWindow),
+        fmt(model.maxTokens),
+        model.reasoning ? 'yes' : 'no',
     ]);
     const hdrs = ['provider', 'model', 'name', 'context', 'max-out', 'thinking'];
     const widths = hdrs.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));

package/dist/extension-registry.js

@@ -150,7 +150,7 @@ export function ensureRegistryEntries(extensionsDir) {
         return;
     const registry = loadRegistry();
     let changed = false;
-    for (const [id, manifest] of manifests) {
+    for (const [id, _manifest] of manifests) {
         if (!registry.entries[id]) {
             registry.entries[id] = {
                 id,

package/dist/headless-ui.d.ts

@@ -5,7 +5,7 @@
  * formats progress events for stderr output, and reads orchestrator
  * commands from stdin in supervised mode.
  */
-import { RpcClient } from '@gsd/pi-coding-agent';
+import { RpcClient } from '@gsd/agent-modes';
 interface ExtensionUIRequest {
     type: 'extension_ui_request';
     id: string;

package/dist/headless.js

@@ -14,7 +14,8 @@
 import { existsSync, mkdirSync, writeFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { resolve } from 'node:path';
-import { RpcClient, SessionManager } from '@gsd/pi-coding-agent';
+import { RpcClient } from '@gsd/agent-modes';
+import { SessionManager } from '@gsd/pi-coding-agent';
 import { getProjectSessionsDir } from './project-sessions.js';
 import { loadAndValidateAnswerFile, AnswerInjector } from './headless-answers.js';
 import { isTerminalNotification, isBlockedNotification, isMilestoneReadyNotification, isQuickCommand, FIRE_AND_FORGET_METHODS, IDLE_TIMEOUT_MS, NEW_MILESTONE_IDLE_TIMEOUT_MS, isInteractiveHeadlessTool, shouldArmHeadlessIdleTimeout, EXIT_SUCCESS, EXIT_ERROR, EXIT_BLOCKED, EXIT_CANCELLED, mapStatusToExitCode, } from './headless-events.js';
@@ -648,10 +649,8 @@ async function runHeadlessOnce(options, restartCount) {
         process.exit(1);
     }
     // v2 protocol negotiation — attempt init for structured completion events
-    let v2Enabled = false;
     try {
         await client.init({ clientId: 'gsd-headless' });
-        v2Enabled = true;
     }
     catch {
         process.stderr.write('[headless] Warning: v2 init failed, falling back to v1 string-matching\n');
@@ -743,7 +742,6 @@ async function runHeadlessOnce(options, restartCount) {
         if (timeoutTimer)
             clearTimeout(timeoutTimer);
         completed = false;
-        milestoneReady = false;
         blocked = false;
         const autoCompletionPromise = new Promise((resolve) => {
             resolveCompletion = resolve;

package/dist/loader.js

@@ -110,7 +110,6 @@ process.env.NODE_PATH = [gsdNodeModules, process.env.NODE_PATH]
     .join(delimiter);
 // Force Node to re-evaluate module search paths with the updated NODE_PATH.
 // Must happen synchronously before cli.js imports → extension loading.
-// eslint-disable-next-line @typescript-eslint/no-require-imports
 const { Module } = await import('module');
 Module._initPaths?.();
 // GSD_VERSION — expose package version so extensions can display it

package/dist/onboarding.js

@@ -60,6 +60,8 @@ const OTHER_PROVIDERS = [
     { value: 'xai', label: 'xAI (Grok)', hint: 'console.x.ai' },
     { value: 'openrouter', label: 'OpenRouter', hint: '200+ models — openrouter.ai/keys' },
     { value: 'mistral', label: 'Mistral', hint: 'console.mistral.ai/api-keys' },
+    { value: 'minimax', label: 'MiniMax', hint: 'platform.minimax.io (Anthropic-compatible recommended)' },
+    { value: 'minimax-cn', label: 'MiniMax CN', hint: 'api.minimaxi.com (Anthropic-compatible)' },
     { value: 'ollama-cloud', label: 'Ollama Cloud' },
     { value: 'custom-openai', label: 'Custom (OpenAI-compatible)', hint: 'Ollama, LM Studio, vLLM, proxies — see docs/providers.md' },
 ];
@@ -131,6 +133,36 @@ function persistDefaultProvider(providerId) {
         // Non-fatal: startup fallback logic will still run.
     }
 }
+/**
+ * Persist the selected default model to settings.json.
+ */
+function persistDefaultModel(modelId) {
+    const settingsPath = join(agentDir, 'settings.json');
+    try {
+        const raw = existsSync(settingsPath) ? JSON.parse(readFileSync(settingsPath, 'utf-8')) : {};
+        raw.defaultModel = modelId;
+        mkdirSync(dirname(settingsPath), { recursive: true });
+        writeFileSync(settingsPath, JSON.stringify(raw, null, 2), 'utf-8');
+    }
+    catch {
+        // Non-fatal: startup fallback logic will still run.
+    }
+}
+function detectNativeProviderFromBaseUrl(baseUrl) {
+    try {
+        const hostname = new URL(baseUrl).hostname.toLowerCase();
+        if (hostname === 'api.minimax.io' || hostname.endsWith('.minimax.io')) {
+            return 'minimax';
+        }
+        if (hostname === 'api.minimaxi.com' || hostname.endsWith('.minimaxi.com')) {
+            return 'minimax-cn';
+        }
+    }
+    catch {
+        // ignore parse failures; handled by prior validation
+    }
+    return null;
+}
 /** Sentinel returned by runStep when the user cancels — tells the caller
  *  to abort the entire wizard. */
 const STEP_CANCELLED = Symbol('step-cancelled');
@@ -558,9 +590,22 @@ async function runCustomOpenAIFlow(p, pc, authStorage) {
     if (p.isCancel(modelId) || !modelId)
         return false;
     const trimmedModelId = modelId.trim();
+    const nativeProvider = detectNativeProviderFromBaseUrl(trimmedUrl);
+    if (nativeProvider) {
+        const envVar = nativeProvider === 'minimax' ? 'MINIMAX_API_KEY' : 'MINIMAX_CN_API_KEY';
+        authStorage.set(nativeProvider, { type: 'api_key', key: trimmedKey });
+        persistDefaultProvider(nativeProvider);
+        persistDefaultModel(trimmedModelId);
+        process.env[envVar] = trimmedKey;
+        p.log.success(`${pc.green('MiniMax')} detected — configured as native provider (${pc.cyan(nativeProvider)})`);
+        p.log.info(`Model: ${pc.cyan(trimmedModelId)}`);
+        p.log.info(pc.dim('Using Anthropic-compatible MiniMax integration for full model metadata and clean thinking output.'));
+        return true;
+    }
     // Save API key to auth storage
     authStorage.set('custom-openai', { type: 'api_key', key: trimmedKey });
     persistDefaultProvider('custom-openai');
+    persistDefaultModel(trimmedModelId);
     // Write or merge into models.json
     const modelsJsonPath = join(agentDir, 'models.json');
     let config = { providers: {} };
@@ -704,10 +749,11 @@ export async function runToolKeysStep(p, pc, authStorage) {
 }
 // ─── Remote Questions Step ────────────────────────────────────────────────────
 export async function runRemoteQuestionsStep(p, pc, authStorage) {
-    // Check existing config — use getCredentialsForProvider to skip empty-key entries
-    const hasValidKey = (provider) => authStorage
-        .getCredentialsForProvider(provider)
-        .some((c) => c.type === 'api_key' && typeof c.key === 'string' && c.key.length > 0);
+    // Check existing config — use authStorage.get() and validate the key
+    const hasValidKey = (provider) => {
+        const c = authStorage.get(provider);
+        return c?.type === 'api_key' && typeof c.key === 'string' && c.key.length > 0;
+    };
     const hasDiscord = hasValidKey('discord_bot');
     const hasSlack = hasValidKey('slack_bot');
     const hasTelegram = hasValidKey('telegram_bot');
@@ -905,7 +951,6 @@ async function runDiscordChannelStep(p, pc, token) {
         if (p.isCancel(choice))
             return null;
         guildId = choice;
-        guildName = guilds.find(g => g.id === guildId)?.name ?? guildId;
     }
     // Fetch channels
     let channels;

package/dist/provider-migrations.d.ts

@@ -1,10 +1,10 @@
 import type { AuthStorage } from "@gsd/pi-coding-agent";
 type AnthropicMigrationDeps = {
-    authStorage: Pick<AuthStorage, "getCredentialsForProvider">;
+    authStorage: Pick<AuthStorage, "get">;
     isClaudeCodeReady: boolean;
     defaultProvider: string | undefined;
     env?: NodeJS.ProcessEnv;
 };
-export declare function hasDirectAnthropicApiKey(authStorage: Pick<AuthStorage, "getCredentialsForProvider">, env?: NodeJS.ProcessEnv): boolean;
+export declare function hasDirectAnthropicApiKey(authStorage: Pick<AuthStorage, "get">, env?: NodeJS.ProcessEnv): boolean;
 export declare function shouldMigrateAnthropicToClaudeCode({ authStorage, isClaudeCodeReady, defaultProvider, env, }: AnthropicMigrationDeps): boolean;
 export {};

package/dist/provider-migrations.js

@@ -2,7 +2,8 @@ export function hasDirectAnthropicApiKey(authStorage, env = process.env) {
     if ((env.ANTHROPIC_API_KEY ?? "").trim()) {
         return true;
     }
-    return authStorage.getCredentialsForProvider("anthropic").some((credential) => credential?.type === "api_key" && typeof credential?.key === "string" && credential.key.trim().length > 0);
+    const credential = authStorage.get("anthropic");
+    return credential?.type === "api_key" && typeof credential?.key === "string" && credential.key.trim().length > 0;
 }
 export function shouldMigrateAnthropicToClaudeCode({ authStorage, isClaudeCodeReady, defaultProvider, env = process.env, }) {
     if (!isClaudeCodeReady || defaultProvider !== "anthropic") {

package/dist/remote-questions-config.js

@@ -26,7 +26,7 @@ export function saveRemoteQuestionsConfig(channel, channelId) {
     ].join("\n");
     const content = existsSync(prefsPath) ? readFileSync(prefsPath, "utf-8") : "";
     const fmMatch = content.match(/^---\n([\s\S]*?)\n---/);
-    let next = content;
+    let next;
     if (fmMatch) {
         let frontmatter = fmMatch[1];
         const regex = /remote_questions:[\s\S]*?(?=\n[a-zA-Z_]|\n---|$)/;

package/dist/resources/extensions/async-jobs/async-bash-tool.js

@@ -5,7 +5,7 @@
  * immediately. The LLM can continue working and check results later
  * with await_job.
  */
-import { getShellConfig, sanitizeCommand, DEFAULT_MAX_BYTES, DEFAULT_MAX_LINES, } from "@gsd/pi-coding-agent";
+import { getShellConfig, DEFAULT_MAX_BYTES, DEFAULT_MAX_LINES, sanitizeCommand, } from "@gsd/pi-coding-agent";
 import { Type } from "@sinclair/typebox";
 import { spawn, spawnSync } from "node:child_process";
 import { createWriteStream } from "node:fs";

package/dist/resources/extensions/aws-auth/index.js

@@ -133,6 +133,7 @@ export default function (pi) {
         const refreshed = await runRefresh(refreshCommand, (m, level) => ctx.ui.notify(m, level));
         if (!refreshed)
             return;
-        pi.retryLastTurn();
+        // retryLastTurn removed in pi 0.67.2 — notify user to retry manually
+        ctx.ui.notify("AWS credentials refreshed. Please resend your message to retry.", "info");
     });
 }

package/dist/resources/extensions/bg-shell/bg-shell-lifecycle.js

@@ -3,7 +3,7 @@
  * context injection, process discovery, footer widget, and periodic maintenance.
  */
 import { truncateToWidth, visibleWidth, } from "@gsd/pi-tui";
-import { processes, pendingAlerts, pushAlert, cleanupAll, cleanupSessionProcesses, persistManifest, loadManifest, pruneDeadProcesses, } from "./process-manager.js";
+import { processes, pendingAlerts, pushAlert, cleanupAll, persistManifest, loadManifest, pruneDeadProcesses, } from "./process-manager.js";
 import { formatUptime, getBgShellLiveCwd, resolveBgShellPersistenceCwd } from "./utilities.js";
 import { formatTokenCount } from "../shared/format-utils.js";
 export function registerBgShellLifecycle(pi, state) {
@@ -66,14 +66,11 @@ export function registerBgShellLifecycle(pi, state) {
         buildProcessStateAlert("Session tree was navigated.");
     });
     // Session switch resets the agent's context.
-    pi.on("session_switch", async (event, ctx) => {
+    pi.on("session_start", async (_event, ctx) => {
         state.latestCtx = ctx;
-        if (event.reason === "new" && event.previousSessionFile) {
-            await cleanupSessionProcesses(event.previousSessionFile);
-            syncLatestCtxCwd();
-            if (state.latestCtx)
-                persistManifest(state.latestCtx.cwd);
-        }
+        syncLatestCtxCwd();
+        if (state.latestCtx)
+            persistManifest(state.latestCtx.cwd);
         buildProcessStateAlert("Session was switched.");
     });
     // ── Context Injection: Proactive Alerts ────────────────────────────
@@ -341,7 +338,7 @@ export function registerBgShellLifecycle(pi, state) {
     pi.on("turn_end", refreshHandler);
     pi.on("agent_end", refreshHandler);
     pi.on("session_start", refreshHandler);
-    pi.on("session_switch", refreshHandler);
+    pi.on("session_before_switch", refreshHandler);
     pi.on("tool_execution_end", async (_event, ctx) => {
         state.latestCtx = ctx;
         refreshWidget();

package/dist/resources/extensions/bg-shell/process-manager.js

@@ -6,7 +6,8 @@ import { spawn, spawnSync } from "node:child_process";
 import { randomUUID } from "node:crypto";
 import { writeFileSync, readFileSync, existsSync, mkdirSync } from "node:fs";
 import { join } from "node:path";
-import { getShellConfig, sanitizeCommand } from "@gsd/pi-coding-agent";
+import { getShellConfig } from "@gsd/pi-coding-agent";
+import { sanitizeCommand } from "@gsd/pi-coding-agent";
 import { rewriteCommandWithRtk } from "../shared/rtk.js";
 import { MAX_BUFFER_LINES, MAX_EVENTS, DEAD_PROCESS_TTL, } from "./types.js";
 import { restoreWindowsVTInput, formatUptime } from "./utilities.js";

package/dist/resources/extensions/browser-tools/index.js

@@ -1,4 +1,3 @@
-/** browser-tools — pi extension: full browser interaction via Playwright. */
 import { importExtensionModule } from "@gsd/pi-coding-agent";
 let registrationPromise = null;
 async function registerBrowserTools(pi) {

package/dist/resources/extensions/claude-code-cli/index.js

@@ -16,9 +16,9 @@ import { streamViaClaudeCode } from "./stream-adapter.js";
 export default function claudeCodeCli(pi) {
     pi.registerProvider("claude-code", {
         authMode: "externalCli",
+        isReady: isClaudeCodeReady,
         api: "anthropic-messages",
         baseUrl: "local://claude-code",
-        isReady: isClaudeCodeReady,
         streamSimple: streamViaClaudeCode,
         models: CLAUDE_CODE_MODELS,
     });

package/dist/resources/extensions/claude-code-cli/partial-builder.js

@@ -4,7 +4,103 @@
  * Translates the Claude Agent SDK's `BetaRawMessageStreamEvent` sequence
  * into GSD's `AssistantMessageEvent` deltas for incremental TUI rendering.
  */
-import { hasXmlParameterTags, repairToolJson } from "@gsd/pi-ai";
+// ---------------------------------------------------------------------------
+// XML parameter tag utilities (inline replacements for removed pi-ai symbols)
+// ---------------------------------------------------------------------------
+/**
+ * Detects XML parameter tags (inline <parameter name="...">...</parameter> form)
+ * or XML wrapper (<parameters>...</parameters>) in streaming tool call JSON.
+ * Replaces removed pi-ai utility (removed in pi 0.67.2).
+ * T-10-05: regex only detects tag presence; does not evaluate content.
+ */
+function hasXmlParameterTags(s) {
+    return /<parameter[s\s>]/i.test(s);
+}
+/**
+ * Repairs malformed LLM-generated tool JSON using three strategies:
+ *
+ * 1. XML parameter extraction: When inline <parameter name="key">value</parameter>
+ *    tags appear inside a JSON string value, extract each as a top-level key and
+ *    clean the containing string value by truncating at the closing tag boundary.
+ *
+ * 2. YAML bullet repair: When bare "- item" patterns appear as JSON values (not
+ *    quoted), convert each bullet sequence into a JSON array.
+ *
+ * 3. XML wrapper extraction: Extract content from <parameters>...</parameters> wrapper.
+ *
+ * Replaces removed pi-ai utility (removed in pi 0.67.2).
+ * T-10-05: extracts text content only, no evaluation.
+ */
+function repairToolJson(s) {
+    // Strategy 1: XML parameter tags inside JSON string values (#3751)
+    // The raw JSON string may have escaped quotes: <parameter name=\"key\">val</parameter>
+    // or unescaped: <parameter name="key">val</parameter>
+    // We match both forms.
+    if (/<parameter\s+name=/i.test(s)) {
+        try {
+            // Match <parameter name="key"> or <parameter name=\"key\"> in raw JSON text
+            const paramPattern = /<parameter\s+name=(?:\\"|")([^"\\]+)(?:\\"|")>([\s\S]*?)<\/parameter>/gi;
+            const extracted = {};
+            let match;
+            while ((match = paramPattern.exec(s)) !== null) {
+                const key = match[1];
+                // rawVal may contain JSON-escaped characters; unescape for parsing
+                const rawVal = match[2].trim().replace(/\\"/g, '"').replace(/\\n/g, "\n");
+                // Attempt to parse value as JSON; fall back to string
+                try {
+                    extracted[key] = JSON.parse(rawVal);
+                }
+                catch {
+                    extracted[key] = rawVal;
+                }
+            }
+            if (Object.keys(extracted).length > 0) {
+                // Remove the XML parameter block and preceding closing tag from the raw string.
+                // The block looks like: </tagName>\n<parameter ...>...</parameter>...\n (with escaped chars)
+                // We remove from the first </...> closing tag through the last </parameter> tag.
+                const cleaned = s
+                    .replace(/<\/[^>]+>(?:\\n|\n)*(?:<parameter[\s\S]*?<\/parameter>(?:\\n|\n)*)+/gi, "")
+                    .trim();
+                // Parse cleaned base JSON and merge extracted params
+                const base = JSON.parse(cleaned);
+                return JSON.stringify({ ...base, ...extracted });
+            }
+        }
+        catch {
+            // Fall through to next strategy
+        }
+    }
+    // Strategy 2: YAML bullet lists as unquoted JSON values (#2660)
+    // Pattern: "key": - item1, "key2": - item2
+    if (/:\s*-\s+/.test(s)) {
+        try {
+            // Replace bare YAML bullet sequences with JSON arrays.
+            // Match: "key": - val1, - val2, "nextKey" or end
+            // We need to handle: "key": - item, "nextKey" where - item is the unquoted value
+            const repaired = s.replace(
+            // Match a quoted key followed by colon, then one or more "- item" bullets
+            // terminated by either a comma+quote (next key) or closing brace
+            /"([^"]+)":\s*((?:-\s+[^,\n\-"{}[\]]+(?:,\s*(?![-"\s*{]))?)+)/g, (fullMatch, key, bulletBlock) => {
+                // Extract individual bullet items
+                const items = bulletBlock
+                    .split(/,?\s*-\s+/)
+                    .map((item) => item.trim().replace(/,\s*$/, "").trim())
+                    .filter((item) => item.length > 0);
+                if (items.length === 0)
+                    return fullMatch;
+                return `"${key}": ${JSON.stringify(items)}`;
+            });
+            const parsed = JSON.parse(repaired);
+            return JSON.stringify(parsed);
+        }
+        catch {
+            // Fall through to next strategy
+        }
+    }
+    // Strategy 3: XML wrapper extraction (<parameters>...</parameters>)
+    const m = /<parameters[^>]*>([\s\S]*?)<\/parameters>/i.exec(s);
+    return m ? m[1].trim() : s;
+}
 // ---------------------------------------------------------------------------
 // MCP tool name parsing
 // ---------------------------------------------------------------------------
@@ -62,17 +158,16 @@ export function mapContentBlock(block) {
         case "tool_use":
             return toolCallFromBlock(block.id, block.name, block.input);
         case "server_tool_use":
+            // ServerToolUseContent removed from pi-ai in pi 0.67.2 — represent as text
             return {
-                type: "serverToolUse",
-                id: block.id,
-                name: block.name,
-                input: block.input,
+                type: "text",
+                text: `[server tool use: ${block.name ?? "unknown"}]`,
             };
         case "web_search_tool_result":
+            // WebSearchResultContent removed from pi-ai in pi 0.67.2 — represent as text
             return {
-                type: "webSearchResult",
-                toolUseId: block.tool_use_id,
-                content: block.content,
+                type: "text",
+                text: `[web search result]`,
             };
         default: {
             const unknown = block;
@@ -185,15 +280,7 @@ export class PartialMessageBuilder {
                     this.partial.content.push(toolCallFromBlock(block.id, block.name, {}));
                     return { type: "toolcall_start", contentIndex, partial: this.partial };
                 }
-                if (block.type === "server_tool_use") {
-                    this.partial.content.push({
-                        type: "serverToolUse",
-                        id: block.id,
-                        name: block.name,
-                        input: block.input,
-                    });
-                    return { type: "server_tool_use", contentIndex, partial: this.partial };
-                }
+                // server_tool_use removed from pi-ai content types in pi 0.67.2 — skip
                 return null;
             }
             // ---- Block delta ----
@@ -251,6 +338,8 @@ export class PartialMessageBuilder {
                             // malformation explicitly so downstream consumers can
                             // distinguish this from a healthy tool completion (#2574).
                             block.arguments = { _raw: jsonStr };
+                            // malformedArguments removed from the toolcall_end type in pi 0.67.2;
+                            // cast to any to preserve the runtime signal for downstream consumers (#2574)
                             return { type: "toolcall_end", contentIndex, toolCall: block, partial: this.partial, malformedArguments: true };
                         }
                     }

package/dist/resources/extensions/claude-code-cli/readiness.js

@@ -18,10 +18,11 @@ import { execFileSync } from "node:child_process";
 const CLAUDE_COMMAND = process.platform === "win32" ? "claude.cmd" : "claude";
 /**
  * Windows installs vary: some environments expose `claude.cmd` (npm shim),
- * others expose a `claude` shim on PATH (for example Git Bash wrappers).
- * Try both to avoid false "not installed" results in readiness checks.
+ * `claude.exe` (direct binary install), or a bare `claude` shim on PATH
+ * (for example Git Bash wrappers). Try all three to avoid false "not
+ * installed" results in readiness checks.
  */
-const CLAUDE_COMMAND_CANDIDATES = process.platform === "win32" ? [CLAUDE_COMMAND, "claude"] : [CLAUDE_COMMAND];
+const CLAUDE_COMMAND_CANDIDATES = process.platform === "win32" ? [CLAUDE_COMMAND, "claude.exe", "claude"] : [CLAUDE_COMMAND];
 function execClaude(args) {
     let lastError;
     for (const command of CLAUDE_COMMAND_CANDIDATES) {