gsd-pi 2.77.0-dev.538325aea → 2.77.0

package/README.md

@@ -27,31 +27,49 @@ One command. Walk away. Come back to a built project with clean git history.
 
 ---
 
-## What's New in v2.77
+## What's New in v2.76
 
-### Context Mode & Execution
+### Memory System
 
-- **Context Mode** — a dispatch behavior that builds task-ready context automatically: it pulls in the most relevant project artifacts, prior session state, milestone/slice signals, and execution metadata before the model runs. This reduces manual prompt assembly, improves continuity across turns, and helps tasks start with the right files and constraints from the first dispatch. Enabled by default for new projects (opt out with `enabled: false`).
-- **Sandboxed execution tools** — added `gsd_exec_search`, `gsd_resume`, and sandboxed tool-output execution paths for context-mode flows, so search/resume and follow-up execution can run with tighter boundaries and more predictable runtime behavior.
-- **Preflight hardening** — milestone completion now performs stricter clean-root preflight checks and can auto-stash when needed, reducing accidental dirty-tree transitions and helping completion flows fail fast with clearer remediation.
+- **Persistent agent memory** — new `capture_thought`, `memory_query`, and `gsd_graph` tools let GSD store, retrieve, and relate thoughts across sessions (Phase 1).
+- **Ingestion + scopes/tags** — memories can be scoped (project, milestone, slice) and tagged for filtering (Phase 2).
+- **Hybrid retrieval** — keyword + semantic search over stored memory for higher-recall lookup (Phase 3).
+- **Knowledge graph relationships** — memories link into a queryable graph, feeding planning and dispatch context (Phase 4).
+- **Maintenance & observability** — cap cascade, decay metrics, and export/import for memory stores (Phase 5).
 
-### Memory Architecture (ADR-013)
+### Progressive Planning (ADR-011)
 
-- **Memories table is now authoritative** — all memory reads and writes now flow through the `memories` table as the single source of truth. By removing split legacy paths, memory state stays consistent across agents, tools, and UI surfaces, with fewer reconciliation edge cases and less sync drift.
-- **Structured memory fields** — `structured_fields` adds typed metadata (instead of only free-form text), so memories can carry machine-usable attributes for more accurate retrieval, stronger filtering, and more dependable downstream automation and tooling.
-- **Dual-write migration completed** — the staged migration that wrote to both old and new paths is now fully landed, including decisions backfill and parity wiring across agents, MCP tools, and extract-learnings flows. That gives a safer upgrade path while preserving historical data and reducing cutover risk.
+- **Sketch-then-refine planning** — Phase 1 introduces progressive plan elaboration so GSD drafts a lightweight sketch before locking a full plan (#3789).
+- **Mid-execution escalation** — Phase 2 lets tasks escalate complexity mid-run with compensating rollback on write failure (#3789).
 
-### Skills, Tooling, and UX
+### Workflow & Onboarding
 
-- **Skill coverage expanded** — 9 gap-closing skills landed and 6 planning/design skills were surfaced, improving end-to-end workflow coverage and making specialized guidance easier to discover at the point of use.
-- **Hook stack upgrades** — Layer 0 shell hooks and additional Layer 2 events were added to widen extension integration points: hooks can act earlier in command execution, and lifecycle consumers now receive richer event signals for orchestration, policy checks, and observability.
-- **TUI polish** — skill invocations now render in a dedicated chat-frame style for clearer scanability, and active-row overflow handling was fixed to prevent terminal layout breakage during long outputs.
+- **Unified workflow plugin system** — new plugin architecture with modes and remote install. Manage via `/gsd workflow list|run|install|info|validate`.
+- **`/gsd onboarding` re-entry** — revisit setup without restarting the TUI; setup hub disambiguation prevents duplicate banners.
+- **`/gsd scan`** — new lightweight command for rapid codebase assessment, writing to `.gsd/codebase/`.
 
-### Reliability & Safety
+### Remote Control & TUI
 
-- **Worktree and dispatch resilience** — crash-recovery dispatch is more robust, path derivation is safer, and worktree context fallback is improved, reducing stuck states and misrouted artifact operations after interruptions.
-- **DB/schema guardrails** — migration/index ordering and schema version stamping were tightened so upgrades apply deterministically and avoid index/version drift across mixed or legacy states.
-- **Security and validation fixes** — multiple hardening fixes landed across redaction paths, file/path checks, and pre-execution validation, closing false-positive/false-negative gaps while improving safety boundaries.
+- **Telegram command interface** — control auto-mode remotely via Telegram alongside existing Slack/Discord routes.
+- **Chat, footer, and welcome refresh** — TUI visuals updated; onboarding no longer hangs on re-entry.
+- **New themes** — `tui-classic` and web `classic`/`vivid` palettes added (#4301).
+
+### Models & Providers
+
+- **Claude Opus 4.7** — added across Anthropic, Bedrock, Antigravity, and OpenRouter (#4348).
+- **GPT-5.4-mini** — added to the OpenAI Codex model list (#1215).
+- **Anthropic proxy support** — `ANTHROPIC_BASE_URL` env var honored for custom proxy endpoints (#4140).
+- **Flat-rate provider opt-in** — `allow_flat_rate_providers` routing toggle (#4386).
+- **Ask User Questions** — optional markdown preview panel with side-by-side layout.
+
+### Auto-Mode & Reliability
+
+- **Stuck-loop hardening** — repeated units detected across the stuck window; research-dispatch stuck loop fixed (#4414).
+- **Branch isolation** — milestone branch is created on entry in `isolation: branch` mode with `main_branch` validation (#4389).
+- **Model fallback on limits** — auto-mode limit errors now trigger model fallback (#4373).
+- **Python/Windows verification** — python invocations normalized on Windows in the verification gate (#4416).
+- **Self-healing `.gsd/`** — symlinked `.gsd` staging self-heals to prevent silent data loss (#4423); `.gsd.migrating` healed on resume.
+- **Stale OAuth recovery** — stale Anthropic OAuth credentials self-heal (#4399).
 
 See the full [Changelog](./CHANGELOG.md) for details on every release.
 

package/dist/cli.js

@@ -1,6 +1,4 @@
-import { AuthStorage, DefaultResourceLoader, ModelRegistry, SettingsManager, SessionManager, } from '@gsd/pi-coding-agent';
-import { runInteractiveMode as InteractiveMode, runPrintMode, runRpcMode, } from '@gsd/agent-modes';
-import { createAgentSession } from '@gsd/agent-core';
+import { AuthStorage, DefaultResourceLoader, ModelRegistry, runPackageCommand, SettingsManager, SessionManager, createAgentSession, InteractiveMode, runPrintMode, runRpcMode, } from '@gsd/pi-coding-agent';
 import { readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { agentDir, sessionsDir, authFilePath } from './app-paths.js';
@@ -235,8 +233,18 @@ const hasSubcommand = cliFlags.messages.length > 0;
 if (!process.stdin.isTTY && !isPrintMode && !hasSubcommand && !cliFlags.listModels && !cliFlags.web) {
     printNonTtyErrorAndExit(undefined, false);
 }
-// Package management subcommands (install, remove, list) were handled here
-// via pi-coding-agent prior to 0.67.2. That API was removed upstream.
+const packageCommand = await runPackageCommand({
+    appName: 'gsd',
+    args: process.argv.slice(2),
+    cwd: process.cwd(),
+    agentDir,
+    stdout: process.stdout,
+    stderr: process.stderr,
+    allowedCommands: new Set(['install', 'remove', 'list']),
+});
+if (packageCommand.handled) {
+    process.exit(packageCommand.exitCode);
+}
 // `gsd config` — replay the setup wizard and exit
 if (cliFlags.messages[0] === 'config') {
     const authStorage = AuthStorage.create(authFilePath);
@@ -417,7 +425,7 @@ if (cliFlags.listModels !== undefined) {
     let filtered = models;
     if (searchPattern) {
         const q = searchPattern.toLowerCase();
-        filtered = models.filter((model) => `${model.provider} ${model.id} ${model.name}`.toLowerCase().includes(q));
+        filtered = models.filter((m) => `${m.provider} ${m.id} ${m.name}`.toLowerCase().includes(q));
     }
     // Sort by name descending (newest first), then provider, then id
     filtered.sort((a, b) => {
@@ -430,13 +438,13 @@ if (cliFlags.listModels !== undefined) {
         return a.id.localeCompare(b.id);
     });
     const fmt = (n) => n >= 1_000_000 ? `${n / 1_000_000}M` : n >= 1_000 ? `${n / 1_000}K` : `${n}`;
-    const rows = filtered.map((model) => [
-        model.provider,
-        model.id,
-        model.name,
-        fmt(model.contextWindow),
-        fmt(model.maxTokens),
-        model.reasoning ? 'yes' : 'no',
+    const rows = filtered.map((m) => [
+        m.provider,
+        m.id,
+        m.name,
+        fmt(m.contextWindow),
+        fmt(m.maxTokens),
+        m.reasoning ? 'yes' : 'no',
     ]);
     const hdrs = ['provider', 'model', 'name', 'context', 'max-out', 'thinking'];
     const widths = hdrs.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));

package/dist/extension-registry.js

@@ -150,7 +150,7 @@ export function ensureRegistryEntries(extensionsDir) {
         return;
     const registry = loadRegistry();
     let changed = false;
-    for (const [id, _manifest] of manifests) {
+    for (const [id, manifest] of manifests) {
         if (!registry.entries[id]) {
             registry.entries[id] = {
                 id,

package/dist/headless-ui.d.ts

@@ -5,7 +5,7 @@
  * formats progress events for stderr output, and reads orchestrator
  * commands from stdin in supervised mode.
  */
-import { RpcClient } from '@gsd/agent-modes';
+import { RpcClient } from '@gsd/pi-coding-agent';
 interface ExtensionUIRequest {
     type: 'extension_ui_request';
     id: string;

package/dist/headless.js

@@ -14,8 +14,7 @@
 import { existsSync, mkdirSync, writeFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { resolve } from 'node:path';
-import { RpcClient } from '@gsd/agent-modes';
-import { SessionManager } from '@gsd/pi-coding-agent';
+import { RpcClient, SessionManager } from '@gsd/pi-coding-agent';
 import { getProjectSessionsDir } from './project-sessions.js';
 import { loadAndValidateAnswerFile, AnswerInjector } from './headless-answers.js';
 import { isTerminalNotification, isBlockedNotification, isMilestoneReadyNotification, isQuickCommand, FIRE_AND_FORGET_METHODS, IDLE_TIMEOUT_MS, NEW_MILESTONE_IDLE_TIMEOUT_MS, isInteractiveHeadlessTool, shouldArmHeadlessIdleTimeout, EXIT_SUCCESS, EXIT_ERROR, EXIT_BLOCKED, EXIT_CANCELLED, mapStatusToExitCode, } from './headless-events.js';
@@ -649,8 +648,10 @@ async function runHeadlessOnce(options, restartCount) {
         process.exit(1);
     }
     // v2 protocol negotiation — attempt init for structured completion events
+    let v2Enabled = false;
     try {
         await client.init({ clientId: 'gsd-headless' });
+        v2Enabled = true;
     }
     catch {
         process.stderr.write('[headless] Warning: v2 init failed, falling back to v1 string-matching\n');
@@ -742,6 +743,7 @@ async function runHeadlessOnce(options, restartCount) {
         if (timeoutTimer)
             clearTimeout(timeoutTimer);
         completed = false;
+        milestoneReady = false;
         blocked = false;
         const autoCompletionPromise = new Promise((resolve) => {
             resolveCompletion = resolve;

package/dist/loader.js

@@ -110,6 +110,7 @@ process.env.NODE_PATH = [gsdNodeModules, process.env.NODE_PATH]
     .join(delimiter);
 // Force Node to re-evaluate module search paths with the updated NODE_PATH.
 // Must happen synchronously before cli.js imports → extension loading.
+// eslint-disable-next-line @typescript-eslint/no-require-imports
 const { Module } = await import('module');
 Module._initPaths?.();
 // GSD_VERSION — expose package version so extensions can display it

package/dist/onboarding.js

@@ -749,11 +749,10 @@ export async function runToolKeysStep(p, pc, authStorage) {
 }
 // ─── Remote Questions Step ────────────────────────────────────────────────────
 export async function runRemoteQuestionsStep(p, pc, authStorage) {
-    // Check existing config — use authStorage.get() and validate the key
-    const hasValidKey = (provider) => {
-        const c = authStorage.get(provider);
-        return c?.type === 'api_key' && typeof c.key === 'string' && c.key.length > 0;
-    };
+    // Check existing config — use getCredentialsForProvider to skip empty-key entries
+    const hasValidKey = (provider) => authStorage
+        .getCredentialsForProvider(provider)
+        .some((c) => c.type === 'api_key' && typeof c.key === 'string' && c.key.length > 0);
     const hasDiscord = hasValidKey('discord_bot');
     const hasSlack = hasValidKey('slack_bot');
     const hasTelegram = hasValidKey('telegram_bot');
@@ -951,6 +950,7 @@ async function runDiscordChannelStep(p, pc, token) {
         if (p.isCancel(choice))
             return null;
         guildId = choice;
+        guildName = guilds.find(g => g.id === guildId)?.name ?? guildId;
     }
     // Fetch channels
     let channels;

package/dist/provider-migrations.d.ts

@@ -1,10 +1,10 @@
 import type { AuthStorage } from "@gsd/pi-coding-agent";
 type AnthropicMigrationDeps = {
-    authStorage: Pick<AuthStorage, "get">;
+    authStorage: Pick<AuthStorage, "getCredentialsForProvider">;
     isClaudeCodeReady: boolean;
     defaultProvider: string | undefined;
     env?: NodeJS.ProcessEnv;
 };
-export declare function hasDirectAnthropicApiKey(authStorage: Pick<AuthStorage, "get">, env?: NodeJS.ProcessEnv): boolean;
+export declare function hasDirectAnthropicApiKey(authStorage: Pick<AuthStorage, "getCredentialsForProvider">, env?: NodeJS.ProcessEnv): boolean;
 export declare function shouldMigrateAnthropicToClaudeCode({ authStorage, isClaudeCodeReady, defaultProvider, env, }: AnthropicMigrationDeps): boolean;
 export {};

package/dist/provider-migrations.js

@@ -2,8 +2,7 @@ export function hasDirectAnthropicApiKey(authStorage, env = process.env) {
     if ((env.ANTHROPIC_API_KEY ?? "").trim()) {
         return true;
     }
-    const credential = authStorage.get("anthropic");
-    return credential?.type === "api_key" && typeof credential?.key === "string" && credential.key.trim().length > 0;
+    return authStorage.getCredentialsForProvider("anthropic").some((credential) => credential?.type === "api_key" && typeof credential?.key === "string" && credential.key.trim().length > 0);
 }
 export function shouldMigrateAnthropicToClaudeCode({ authStorage, isClaudeCodeReady, defaultProvider, env = process.env, }) {
     if (!isClaudeCodeReady || defaultProvider !== "anthropic") {

package/dist/remote-questions-config.js

@@ -26,7 +26,7 @@ export function saveRemoteQuestionsConfig(channel, channelId) {
     ].join("\n");
     const content = existsSync(prefsPath) ? readFileSync(prefsPath, "utf-8") : "";
     const fmMatch = content.match(/^---\n([\s\S]*?)\n---/);
-    let next;
+    let next = content;
     if (fmMatch) {
         let frontmatter = fmMatch[1];
         const regex = /remote_questions:[\s\S]*?(?=\n[a-zA-Z_]|\n---|$)/;

package/dist/resources/extensions/async-jobs/async-bash-tool.js

@@ -5,7 +5,7 @@
  * immediately. The LLM can continue working and check results later
  * with await_job.
  */
-import { getShellConfig, DEFAULT_MAX_BYTES, DEFAULT_MAX_LINES, sanitizeCommand, } from "@gsd/pi-coding-agent";
+import { getShellConfig, sanitizeCommand, DEFAULT_MAX_BYTES, DEFAULT_MAX_LINES, } from "@gsd/pi-coding-agent";
 import { Type } from "@sinclair/typebox";
 import { spawn, spawnSync } from "node:child_process";
 import { createWriteStream } from "node:fs";

package/dist/resources/extensions/aws-auth/index.js

@@ -133,7 +133,6 @@ export default function (pi) {
         const refreshed = await runRefresh(refreshCommand, (m, level) => ctx.ui.notify(m, level));
         if (!refreshed)
             return;
-        // retryLastTurn removed in pi 0.67.2 — notify user to retry manually
-        ctx.ui.notify("AWS credentials refreshed. Please resend your message to retry.", "info");
+        pi.retryLastTurn();
     });
 }

package/dist/resources/extensions/bg-shell/bg-shell-lifecycle.js

@@ -3,7 +3,7 @@
  * context injection, process discovery, footer widget, and periodic maintenance.
  */
 import { truncateToWidth, visibleWidth, } from "@gsd/pi-tui";
-import { processes, pendingAlerts, pushAlert, cleanupAll, persistManifest, loadManifest, pruneDeadProcesses, } from "./process-manager.js";
+import { processes, pendingAlerts, pushAlert, cleanupAll, cleanupSessionProcesses, persistManifest, loadManifest, pruneDeadProcesses, } from "./process-manager.js";
 import { formatUptime, getBgShellLiveCwd, resolveBgShellPersistenceCwd } from "./utilities.js";
 import { formatTokenCount } from "../shared/format-utils.js";
 export function registerBgShellLifecycle(pi, state) {
@@ -66,11 +66,14 @@ export function registerBgShellLifecycle(pi, state) {
         buildProcessStateAlert("Session tree was navigated.");
     });
     // Session switch resets the agent's context.
-    pi.on("session_start", async (_event, ctx) => {
+    pi.on("session_switch", async (event, ctx) => {
         state.latestCtx = ctx;
-        syncLatestCtxCwd();
-        if (state.latestCtx)
-            persistManifest(state.latestCtx.cwd);
+        if (event.reason === "new" && event.previousSessionFile) {
+            await cleanupSessionProcesses(event.previousSessionFile);
+            syncLatestCtxCwd();
+            if (state.latestCtx)
+                persistManifest(state.latestCtx.cwd);
+        }
         buildProcessStateAlert("Session was switched.");
     });
     // ── Context Injection: Proactive Alerts ────────────────────────────
@@ -338,7 +341,7 @@ export function registerBgShellLifecycle(pi, state) {
     pi.on("turn_end", refreshHandler);
     pi.on("agent_end", refreshHandler);
     pi.on("session_start", refreshHandler);
-    pi.on("session_before_switch", refreshHandler);
+    pi.on("session_switch", refreshHandler);
     pi.on("tool_execution_end", async (_event, ctx) => {
         state.latestCtx = ctx;
         refreshWidget();

package/dist/resources/extensions/bg-shell/process-manager.js

@@ -6,8 +6,7 @@ import { spawn, spawnSync } from "node:child_process";
 import { randomUUID } from "node:crypto";
 import { writeFileSync, readFileSync, existsSync, mkdirSync } from "node:fs";
 import { join } from "node:path";
-import { getShellConfig } from "@gsd/pi-coding-agent";
-import { sanitizeCommand } from "@gsd/pi-coding-agent";
+import { getShellConfig, sanitizeCommand } from "@gsd/pi-coding-agent";
 import { rewriteCommandWithRtk } from "../shared/rtk.js";
 import { MAX_BUFFER_LINES, MAX_EVENTS, DEAD_PROCESS_TTL, } from "./types.js";
 import { restoreWindowsVTInput, formatUptime } from "./utilities.js";

package/dist/resources/extensions/browser-tools/index.js

@@ -1,3 +1,4 @@
+/** browser-tools — pi extension: full browser interaction via Playwright. */
 import { importExtensionModule } from "@gsd/pi-coding-agent";
 let registrationPromise = null;
 async function registerBrowserTools(pi) {

package/dist/resources/extensions/claude-code-cli/index.js

@@ -16,9 +16,9 @@ import { streamViaClaudeCode } from "./stream-adapter.js";
 export default function claudeCodeCli(pi) {
     pi.registerProvider("claude-code", {
         authMode: "externalCli",
-        isReady: isClaudeCodeReady,
         api: "anthropic-messages",
         baseUrl: "local://claude-code",
+        isReady: isClaudeCodeReady,
         streamSimple: streamViaClaudeCode,
         models: CLAUDE_CODE_MODELS,
     });

package/dist/resources/extensions/claude-code-cli/partial-builder.js

@@ -4,103 +4,7 @@
  * Translates the Claude Agent SDK's `BetaRawMessageStreamEvent` sequence
  * into GSD's `AssistantMessageEvent` deltas for incremental TUI rendering.
  */
-// ---------------------------------------------------------------------------
-// XML parameter tag utilities (inline replacements for removed pi-ai symbols)
-// ---------------------------------------------------------------------------
-/**
- * Detects XML parameter tags (inline <parameter name="...">...</parameter> form)
- * or XML wrapper (<parameters>...</parameters>) in streaming tool call JSON.
- * Replaces removed pi-ai utility (removed in pi 0.67.2).
- * T-10-05: regex only detects tag presence; does not evaluate content.
- */
-function hasXmlParameterTags(s) {
-    return /<parameter[s\s>]/i.test(s);
-}
-/**
- * Repairs malformed LLM-generated tool JSON using three strategies:
- *
- * 1. XML parameter extraction: When inline <parameter name="key">value</parameter>
- *    tags appear inside a JSON string value, extract each as a top-level key and
- *    clean the containing string value by truncating at the closing tag boundary.
- *
- * 2. YAML bullet repair: When bare "- item" patterns appear as JSON values (not
- *    quoted), convert each bullet sequence into a JSON array.
- *
- * 3. XML wrapper extraction: Extract content from <parameters>...</parameters> wrapper.
- *
- * Replaces removed pi-ai utility (removed in pi 0.67.2).
- * T-10-05: extracts text content only, no evaluation.
- */
-function repairToolJson(s) {
-    // Strategy 1: XML parameter tags inside JSON string values (#3751)
-    // The raw JSON string may have escaped quotes: <parameter name=\"key\">val</parameter>
-    // or unescaped: <parameter name="key">val</parameter>
-    // We match both forms.
-    if (/<parameter\s+name=/i.test(s)) {
-        try {
-            // Match <parameter name="key"> or <parameter name=\"key\"> in raw JSON text
-            const paramPattern = /<parameter\s+name=(?:\\"|")([^"\\]+)(?:\\"|")>([\s\S]*?)<\/parameter>/gi;
-            const extracted = {};
-            let match;
-            while ((match = paramPattern.exec(s)) !== null) {
-                const key = match[1];
-                // rawVal may contain JSON-escaped characters; unescape for parsing
-                const rawVal = match[2].trim().replace(/\\"/g, '"').replace(/\\n/g, "\n");
-                // Attempt to parse value as JSON; fall back to string
-                try {
-                    extracted[key] = JSON.parse(rawVal);
-                }
-                catch {
-                    extracted[key] = rawVal;
-                }
-            }
-            if (Object.keys(extracted).length > 0) {
-                // Remove the XML parameter block and preceding closing tag from the raw string.
-                // The block looks like: </tagName>\n<parameter ...>...</parameter>...\n (with escaped chars)
-                // We remove from the first </...> closing tag through the last </parameter> tag.
-                const cleaned = s
-                    .replace(/<\/[^>]+>(?:\\n|\n)*(?:<parameter[\s\S]*?<\/parameter>(?:\\n|\n)*)+/gi, "")
-                    .trim();
-                // Parse cleaned base JSON and merge extracted params
-                const base = JSON.parse(cleaned);
-                return JSON.stringify({ ...base, ...extracted });
-            }
-        }
-        catch {
-            // Fall through to next strategy
-        }
-    }
-    // Strategy 2: YAML bullet lists as unquoted JSON values (#2660)
-    // Pattern: "key": - item1, "key2": - item2
-    if (/:\s*-\s+/.test(s)) {
-        try {
-            // Replace bare YAML bullet sequences with JSON arrays.
-            // Match: "key": - val1, - val2, "nextKey" or end
-            // We need to handle: "key": - item, "nextKey" where - item is the unquoted value
-            const repaired = s.replace(
-            // Match a quoted key followed by colon, then one or more "- item" bullets
-            // terminated by either a comma+quote (next key) or closing brace
-            /"([^"]+)":\s*((?:-\s+[^,\n\-"{}[\]]+(?:,\s*(?![-"\s*{]))?)+)/g, (fullMatch, key, bulletBlock) => {
-                // Extract individual bullet items
-                const items = bulletBlock
-                    .split(/,?\s*-\s+/)
-                    .map((item) => item.trim().replace(/,\s*$/, "").trim())
-                    .filter((item) => item.length > 0);
-                if (items.length === 0)
-                    return fullMatch;
-                return `"${key}": ${JSON.stringify(items)}`;
-            });
-            const parsed = JSON.parse(repaired);
-            return JSON.stringify(parsed);
-        }
-        catch {
-            // Fall through to next strategy
-        }
-    }
-    // Strategy 3: XML wrapper extraction (<parameters>...</parameters>)
-    const m = /<parameters[^>]*>([\s\S]*?)<\/parameters>/i.exec(s);
-    return m ? m[1].trim() : s;
-}
+import { hasXmlParameterTags, repairToolJson } from "@gsd/pi-ai";
 // ---------------------------------------------------------------------------
 // MCP tool name parsing
 // ---------------------------------------------------------------------------
@@ -158,16 +62,17 @@ export function mapContentBlock(block) {
         case "tool_use":
             return toolCallFromBlock(block.id, block.name, block.input);
         case "server_tool_use":
-            // ServerToolUseContent removed from pi-ai in pi 0.67.2 — represent as text
             return {
-                type: "text",
-                text: `[server tool use: ${block.name ?? "unknown"}]`,
+                type: "serverToolUse",
+                id: block.id,
+                name: block.name,
+                input: block.input,
             };
         case "web_search_tool_result":
-            // WebSearchResultContent removed from pi-ai in pi 0.67.2 — represent as text
             return {
-                type: "text",
-                text: `[web search result]`,
+                type: "webSearchResult",
+                toolUseId: block.tool_use_id,
+                content: block.content,
             };
         default: {
             const unknown = block;
@@ -280,7 +185,15 @@ export class PartialMessageBuilder {
                     this.partial.content.push(toolCallFromBlock(block.id, block.name, {}));
                     return { type: "toolcall_start", contentIndex, partial: this.partial };
                 }
-                // server_tool_use removed from pi-ai content types in pi 0.67.2 — skip
+                if (block.type === "server_tool_use") {
+                    this.partial.content.push({
+                        type: "serverToolUse",
+                        id: block.id,
+                        name: block.name,
+                        input: block.input,
+                    });
+                    return { type: "server_tool_use", contentIndex, partial: this.partial };
+                }
                 return null;
             }
             // ---- Block delta ----
@@ -338,8 +251,6 @@ export class PartialMessageBuilder {
                             // malformation explicitly so downstream consumers can
                             // distinguish this from a healthy tool completion (#2574).
                             block.arguments = { _raw: jsonStr };
-                            // malformedArguments removed from the toolcall_end type in pi 0.67.2;
-                            // cast to any to preserve the runtime signal for downstream consumers (#2574)
                             return { type: "toolcall_end", contentIndex, toolCall: block, partial: this.partial, malformedArguments: true };
                         }
                     }

package/dist/resources/extensions/claude-code-cli/stream-adapter.js

@@ -365,9 +365,8 @@ async function promptElicitationWithDialogs(request, questions, ui, signal) {
     for (const question of questions) {
         const title = buildElicitationPromptTitle(request, question);
         if (question.allowMultiple) {
-            // allowMultiple removed from ExtensionUIDialogOptions in pi 0.67.2;
-            // fall back to single-select (result is wrapped in array below)
             const selected = await ui.select(title, question.options.map((option) => option.label), {
+                allowMultiple: true,
                 signal,
             });
             if (Array.isArray(selected)) {
@@ -495,22 +494,12 @@ export function makeAbortedMessage(model, lastTextContent) {
  * Set `GSD_CLAUDE_CODE_PERMISSION_MODE` to `bypassPermissions` to restore
  * the old always-approve behaviour, or to `default` / `plan` for stricter
  * modes.
- *
- * When `GSD_HEADLESS=1` is set (auto-mode / non-interactive runs), the
- * default flips to `bypassPermissions` because there is no UI to approve
- * permission dialogs — `acceptEdits` would hang verification commands like
- * `npx tsc --noEmit` or `npx vitest run` indefinitely (#4657). Explicit
- * overrides still win, so users can opt back into `acceptEdits` in headless.
  */
 export async function resolveClaudePermissionMode(env = process.env) {
     const override = env.GSD_CLAUDE_CODE_PERMISSION_MODE?.trim();
     if (override === "bypassPermissions" || override === "acceptEdits" || override === "default" || override === "plan") {
         return override;
     }
-    if (env.GSD_HEADLESS === "1") {
-        console.warn("[claude-code-cli] Headless mode detected (GSD_HEADLESS=1): defaulting permissionMode to 'bypassPermissions' so verification Bash commands can run. Set GSD_CLAUDE_CODE_PERMISSION_MODE=acceptEdits to opt out.");
-        return "bypassPermissions";
-    }
     return "acceptEdits";
 }
 // NOTE: These helpers intentionally mirror @gsd/pi-ai anthropic-shared
@@ -756,8 +745,7 @@ export function extractToolResultsFromSdkUserMessage(message) {
 /** Attach external tool results from the SDK synthetic user message to their corresponding tool-call blocks by ID. */
 function attachExternalResultsToToolBlocks(toolBlocks, toolResultsById) {
     for (const block of toolBlocks) {
-        // serverToolUse removed from AssistantMessage content in pi 0.67.2
-        if (block.type !== "toolCall")
+        if (block.type !== "toolCall" && block.type !== "serverToolUse")
             continue;
         const externalResult = toolResultsById.get(block.id);
         if (!externalResult)
@@ -910,9 +898,8 @@ async function pumpSdkMessages(model, context, options, stream) {
                             else if (block.type === "thinking" && block.thinking) {
                                 lastThinkingContent = block.thinking;
                             }
-                            else if (block.type === "toolCall") {
+                            else if (block.type === "toolCall" || block.type === "serverToolUse") {
                                 // Collect tool blocks for externalToolExecution rendering
-                                // (serverToolUse removed from pi-ai content types in pi 0.67.2)
                                 intermediateToolBlocks.push(block);
                             }
                         }
@@ -944,7 +931,13 @@ async function pumpSdkMessages(model, context, options, stream) {
                                     partial: builder.message,
                                 });
                             }
-                            // serverToolUse/server_tool_use removed from pi-ai in pi 0.67.2
+                            else if (block.type === "serverToolUse") {
+                                stream.push({
+                                    type: "server_tool_use",
+                                    contentIndex,
+                                    partial: builder.message,
+                                });
+                            }
                         }
                     }
                     builder = null;