gsd-pi 2.78.0 → 2.78.1-dev.84a383f51

package/dist/headless-query.js

@@ -19,11 +19,31 @@ import { join } from 'node:path';
 import { homedir } from 'node:os';
 import { resolveBundledSourceResource } from './bundled-resource-path.js';
 const jiti = createJiti(fileURLToPath(import.meta.url), { interopDefault: true, debug: false });
-// Resolve extensions from the synced agent directory so headless-query
-// loads the same extension copy as interactive/auto modes (#3471).
-// Falls back to bundled source for source-tree dev workflows.
-const agentExtensionsDir = join(process.env.GSD_AGENT_DIR || join(homedir(), '.gsd', 'agent'), 'extensions', 'gsd');
 const { existsSync } = await import('node:fs');
+/**
+ * Resolve the GSD extensions root for headless-query. Prefers the synced
+ * agent directory (so headless-query loads the same extension copy as
+ * interactive/auto modes — #3471) and falls back to the bundled source
+ * resource for source-tree dev workflows.
+ *
+ * Pure on the given inputs (env + fs probe + bundled resolver) so the
+ * #3471 contract can be exercised in tests without spawning a subprocess.
+ */
+export function resolveGsdAgentExtensionsDir(env = process.env) {
+    return join(env.GSD_AGENT_DIR || join(homedir(), '.gsd', 'agent'), 'extensions', 'gsd');
+}
+/**
+ * Decide whether headless-query should load extensions from the agent
+ * sync directory (#3471) or fall back to bundled source. Returns the
+ * agent dir alongside the decision so a caller can use it directly.
+ */
+export function shouldUseAgentExtensionsDir(opts) {
+    const env = opts.env ?? process.env;
+    const fileExists = opts.fileExists ?? existsSync;
+    const agentDir = resolveGsdAgentExtensionsDir(env);
+    return { agentDir, useAgentDir: fileExists(join(agentDir, 'state.ts')) };
+}
+const agentExtensionsDir = resolveGsdAgentExtensionsDir();
 const useAgentDir = existsSync(join(agentExtensionsDir, 'state.ts'));
 const gsdExtensionPath = (...segments) => useAgentDir
     ? join(agentExtensionsDir, ...segments)

package/dist/headless.d.ts

@@ -32,6 +32,16 @@ export interface HeadlessOptions {
     resumeSession?: string;
     bare?: boolean;
 }
+/**
+ * Commands classified as multi-turn in headless mode: they involve multiple
+ * question rounds, codebase scanning, and artifact writing before the workflow
+ * completes (#3547). Multi-turn commands suppress single-execution-complete
+ * exit and disable the default 5-minute timeout.
+ *
+ * Exported so the regression test can exercise the real classifier rather
+ * than grepping the source for identifier names.
+ */
+export declare function isMultiTurnHeadlessCommand(command: string): boolean;
 export interface ResumeSessionResult {
     session?: SessionInfo;
     error?: string;

package/dist/headless.js

@@ -21,6 +21,21 @@ import { isTerminalNotification, isBlockedNotification, isMilestoneReadyNotifica
 import { VALID_OUTPUT_FORMATS } from './headless-types.js';
 import { handleExtensionUIRequest, formatProgress, formatThinkingLine, formatTextStart, formatTextEnd, formatThinkingStart, formatThinkingEnd, startSupervisedStdinReader, } from './headless-ui.js';
 import { loadContext, bootstrapGsdProject, } from './headless-context.js';
+/**
+ * Commands classified as multi-turn in headless mode: they involve multiple
+ * question rounds, codebase scanning, and artifact writing before the workflow
+ * completes (#3547). Multi-turn commands suppress single-execution-complete
+ * exit and disable the default 5-minute timeout.
+ *
+ * Exported so the regression test can exercise the real classifier rather
+ * than grepping the source for identifier names.
+ */
+export function isMultiTurnHeadlessCommand(command) {
+    return (command === 'auto' ||
+        command === 'next' ||
+        command === 'discuss' ||
+        command === 'plan');
+}
 /**
  * Resolve a session prefix to a single session.
  * Exact id match is preferred over prefix match.
@@ -186,7 +201,7 @@ async function runHeadlessOnce(options, restartCount) {
     const isAutoMode = options.command === 'auto';
     // discuss and plan are multi-turn: they involve multiple question rounds,
     // codebase scanning, and artifact writing before the workflow completes (#3547).
-    const isMultiTurnCommand = options.command === 'auto' || options.command === 'next' || options.command === 'discuss' || options.command === 'plan';
+    const isMultiTurnCommand = isMultiTurnHeadlessCommand(options.command);
     if (isAutoMode && options.timeout === 300_000) {
         options.timeout = 0;
     }

package/dist/loader.js

@@ -1,6 +1,5 @@
 #!/usr/bin/env node
 // GSD Startup Loader
-// Copyright (c) 2026 Jeremy McSpadden <jeremy@fluxlabs.net>
 import { fileURLToPath } from 'url';
 import { dirname, resolve, join, relative, delimiter } from 'path';
 import { existsSync, readFileSync, readdirSync, statSync, mkdirSync, symlinkSync, cpSync } from 'fs';
@@ -32,14 +31,14 @@ if (firstArg === '--help' || firstArg === '-h') {
 // package.json (already parsed above) and verifies git is available.
 // ---------------------------------------------------------------------------
 {
-    const MIN_NODE_MAJOR = 22;
+    const { MIN_NODE_MAJOR, checkNodeVersion, requireGit } = await import('./runtime-checks.js');
     const red = '\x1b[31m';
     const bold = '\x1b[1m';
     const dim = '\x1b[2m';
     const reset = '\x1b[0m';
     // -- Node version --
-    const nodeMajor = parseInt(process.versions.node.split('.')[0], 10);
-    if (nodeMajor < MIN_NODE_MAJOR) {
+    const nodeCheck = checkNodeVersion(process.versions.node, MIN_NODE_MAJOR);
+    if (!nodeCheck.ok) {
         process.stderr.write(`\n${red}${bold}Error:${reset} GSD requires Node.js >= ${MIN_NODE_MAJOR}.0.0\n` +
             `       You are running Node.js ${process.versions.node}\n\n` +
             `${dim}Install a supported version:${reset}\n` +
@@ -49,11 +48,9 @@ if (firstArg === '--help' || firstArg === '-h') {
         process.exit(1);
     }
     // -- git --
-    try {
-        const { execFileSync } = await import('child_process');
-        execFileSync('git', ['--version'], { stdio: 'ignore' });
-    }
-    catch {
+    const { execFileSync } = await import('child_process');
+    const gitOk = requireGit((cmd, args) => execFileSync(cmd, args, { stdio: 'ignore' }));
+    if (!gitOk) {
         process.stderr.write(`\n${red}${bold}Error:${reset} GSD requires git but it was not found on PATH.\n\n` +
             `${dim}Install git:${reset}\n` +
             `  https://git-scm.com/downloads\n\n`);
@@ -61,7 +58,7 @@ if (firstArg === '--help' || firstArg === '-h') {
     }
 }
 import { agentDir, appRoot } from './app-paths.js';
-import { applyRtkProcessEnv } from './rtk.js';
+import { applyRtkProcessEnv } from './rtk-shared.js';
 import { serializeBundledExtensionPaths } from './bundled-extension-paths.js';
 import { discoverExtensionEntryPaths } from './extension-discovery.js';
 import { loadRegistry, readManifestFromEntryPath, isExtensionEnabled } from './extension-registry.js';

package/dist/onboarding.d.ts

@@ -24,6 +24,16 @@ interface RunOnboardingOptions {
     /** Show logo + intro banner. Disable when onboarding is launched inside an active TUI session. */
     showIntro?: boolean;
 }
+export declare const OTHER_PROVIDERS: ({
+    value: string;
+    label: string;
+    hint: string;
+} | {
+    value: string;
+    label: string;
+    hint?: undefined;
+})[];
+export declare function detectNativeProviderFromBaseUrl(baseUrl: string): 'minimax' | 'minimax-cn' | null;
 /**
  * Determine if the onboarding wizard should run.
  *

package/dist/onboarding.js

@@ -54,7 +54,7 @@ const API_KEY_PREFIXES = {
     anthropic: ['sk-ant-'],
     openai: ['sk-'],
 };
-const OTHER_PROVIDERS = [
+export const OTHER_PROVIDERS = [
     { value: 'google', label: 'Google (Gemini)', hint: 'aistudio.google.com/app/apikey' },
     { value: 'groq', label: 'Groq', hint: 'console.groq.com/keys' },
     { value: 'xai', label: 'xAI (Grok)', hint: 'console.x.ai' },
@@ -148,7 +148,7 @@ function persistDefaultModel(modelId) {
         // Non-fatal: startup fallback logic will still run.
     }
 }
-function detectNativeProviderFromBaseUrl(baseUrl) {
+export function detectNativeProviderFromBaseUrl(baseUrl) {
     try {
         const hostname = new URL(baseUrl).hostname.toLowerCase();
         if (hostname === 'api.minimax.io' || hostname.endsWith('.minimax.io')) {

package/dist/provider-migrations.d.ts

@@ -1,7 +1,7 @@
 import type { AuthStorage } from "@gsd/pi-coding-agent";
 type AnthropicMigrationDeps = {
     authStorage: Pick<AuthStorage, "getCredentialsForProvider">;
-    isClaudeCodeReady: boolean;
+    isClaudeCodeReady: boolean | (() => boolean);
     defaultProvider: string | undefined;
     env?: NodeJS.ProcessEnv;
 };
@@ -11,7 +11,7 @@ type MigrationModel = {
 };
 type AnthropicDefaultMigrationDeps = {
     authStorage: Pick<AuthStorage, "getCredentialsForProvider">;
-    isClaudeCodeReady: boolean;
+    isClaudeCodeReady: boolean | (() => boolean);
     settingsManager: {
         getDefaultProvider(): string | undefined;
         getDefaultModel(): string | undefined;

package/dist/provider-migrations.js

@@ -5,10 +5,13 @@ export function hasDirectAnthropicApiKey(authStorage, env = process.env) {
     return authStorage.getCredentialsForProvider("anthropic").some((credential) => credential?.type === "api_key" && typeof credential?.key === "string" && credential.key.trim().length > 0);
 }
 export function shouldMigrateAnthropicToClaudeCode({ authStorage, isClaudeCodeReady, defaultProvider, env = process.env, }) {
-    if (!isClaudeCodeReady || defaultProvider !== "anthropic") {
+    if (defaultProvider !== "anthropic") {
         return false;
     }
-    return !hasDirectAnthropicApiKey(authStorage, env);
+    if (hasDirectAnthropicApiKey(authStorage, env)) {
+        return false;
+    }
+    return typeof isClaudeCodeReady === "function" ? isClaudeCodeReady() : isClaudeCodeReady;
 }
 export function migrateAnthropicDefaultToClaudeCode({ authStorage, isClaudeCodeReady, settingsManager, modelRegistry, env = process.env, }) {
     const defaultProvider = settingsManager.getDefaultProvider();

package/dist/resource-loader.d.ts

@@ -1,4 +1,4 @@
-import { DefaultResourceLoader } from '@gsd/pi-coding-agent';
+import type { DefaultResourceLoader as DefaultResourceLoaderType } from '@gsd/pi-coding-agent';
 export { discoverExtensionEntryPaths } from './extension-discovery.js';
 export declare function getExtensionKey(entryPath: string, extensionsDir: string): string;
 export declare function readManagedResourceVersion(agentDir: string): string | null;
@@ -63,4 +63,7 @@ export declare function mergedFingerprint(hoisted: string, internal: string): st
  */
 export declare function initResources(agentDir: string, skillsDir?: string): void;
 export declare function hasStaleCompiledExtensionSiblings(extensionsDir: string, sourceDir?: string): boolean;
-export declare function buildResourceLoader(agentDir: string): DefaultResourceLoader;
+interface BuildResourceLoaderOptions {
+    additionalExtensionPaths?: string[];
+}
+export declare function buildResourceLoader(agentDir: string, options?: BuildResourceLoaderOptions): Promise<DefaultResourceLoaderType>;

package/dist/resource-loader.js

@@ -1,4 +1,3 @@
-import { DefaultResourceLoader, sortExtensionPaths } from '@gsd/pi-coding-agent';
 import { createHash } from 'node:crypto';
 import { homedir } from 'node:os';
 import { chmodSync, copyFileSync, cpSync, existsSync, lstatSync, mkdirSync, openSync, closeSync, readFileSync, readlinkSync, readdirSync, rmSync, statSync, symlinkSync, unlinkSync, writeFileSync } from 'node:fs';
@@ -7,6 +6,10 @@ import { fileURLToPath } from 'node:url';
 import { compareSemver } from './update-check.js';
 import { discoverExtensionEntryPaths } from './extension-discovery.js';
 import { loadRegistry, readManifestFromEntryPath, isExtensionEnabled, ensureRegistryEntries } from './extension-registry.js';
+let piCodingAgentModulePromise;
+function loadPiCodingAgentModule() {
+    return (piCodingAgentModulePromise ??= import('@gsd/pi-coding-agent'));
+}
 // Resolve resources directory — prefer dist/resources/ (stable, set at build time)
 // over src/resources/ (live working tree, changes with git branch).
 //
@@ -26,6 +29,7 @@ const resourcesDir = (existsSync(distResources) && existsSync(join(distResources
     : srcResources;
 const bundledExtensionsDir = join(resourcesDir, 'extensions');
 const resourceVersionManifestName = 'managed-resources.json';
+const resourceFingerprintFileName = '.managed-resources-content-hash';
 export { discoverExtensionEntryPaths } from './extension-discovery.js';
 export function getExtensionKey(entryPath, extensionsDir) {
     const relPath = relative(extensionsDir, entryPath);
@@ -77,7 +81,7 @@ function writeManagedResourceManifest(agentDir) {
     const manifest = {
         gsdVersion: getBundledGsdVersion(),
         syncedAt: Date.now(),
-        contentHash: computeResourceFingerprint(),
+        contentHash: getCurrentResourceFingerprint(),
         installedExtensionRootFiles,
         installedExtensionDirs,
     };
@@ -125,10 +129,24 @@ export function computeResourceFingerprint(rootDir = resourcesDir) {
     entries.sort();
     return createHash('sha256').update(entries.join('\n')).digest('hex').slice(0, 16);
 }
+function getCurrentResourceFingerprint() {
+    try {
+        const precomputed = readFileSync(join(resourcesDir, resourceFingerprintFileName), 'utf-8').trim();
+        if (/^[a-f0-9]{16}$/i.test(precomputed)) {
+            return precomputed;
+        }
+    }
+    catch {
+        // Source-tree and partial-build workflows may not have a precomputed hash.
+    }
+    return computeResourceFingerprint();
+}
 function collectFileEntries(dir, root, out) {
     if (!existsSync(dir))
         return;
     for (const entry of readdirSync(dir, { withFileTypes: true })) {
+        if (entry.name === resourceFingerprintFileName)
+            continue;
         const fullPath = join(dir, entry.name);
         if (entry.isDirectory()) {
             collectFileEntries(fullPath, root, out);
@@ -548,7 +566,7 @@ export function initResources(agentDir, skillsDir = join(homedir(), '.agents', '
     // hotfixes within a release). The content hash catches those at ~1ms cost.
     if (manifest && manifest.gsdVersion === currentVersion) {
         // Version matches — check content fingerprint for same-version staleness.
-        const currentHash = computeResourceFingerprint();
+        const currentHash = getCurrentResourceFingerprint();
         const hasStaleExtensionFiles = hasStaleCompiledExtensionSiblings(extensionsDir, bundledExtensionsDir);
         if (manifest.contentHash && manifest.contentHash === currentHash && !hasStaleExtensionFiles) {
             return;
@@ -736,7 +754,8 @@ function getBundledExtensionKeys() {
     }
     return _bundledExtensionKeys;
 }
-export function buildResourceLoader(agentDir) {
+export async function buildResourceLoader(agentDir, options = {}) {
+    const { DefaultResourceLoader, sortExtensionPaths } = await loadPiCodingAgentModule();
     const registry = loadRegistry();
     const piAgentDir = join(homedir(), '.pi', 'agent');
     const piExtensionsDir = join(piAgentDir, 'extensions');
@@ -749,9 +768,13 @@ export function buildResourceLoader(agentDir) {
             return true;
         return isExtensionEnabled(registry, manifest.id);
     });
+    const additionalExtensionPaths = [
+        ...piExtensionPaths,
+        ...(options.additionalExtensionPaths ?? []),
+    ];
     return new DefaultResourceLoader({
         agentDir,
-        additionalExtensionPaths: piExtensionPaths,
+        additionalExtensionPaths,
         bundledExtensionKeys: bundledKeys,
         extensionPathsTransform: (paths) => {
             // 1. Filter community extensions through the GSD registry

package/dist/resources/.managed-resources-content-hash

@@ -0,0 +1 @@
+afb1073f61989a78

package/dist/resources/extensions/claude-code-cli/readiness.js

@@ -5,8 +5,13 @@
  * Results are cached for 30 seconds to avoid shelling out on every
  * model-availability check.
  *
- * Auth verification follows the T3 Code pattern: run `claude auth status`
- * and check the exit code + output for an authenticated session.
+ * Auth verification runs `claude auth status --json` and inspects the
+ * `loggedIn` field, falling back to plain `claude auth status` and a text
+ * heuristic when the JSON shape is unavailable (older Claude CLI builds).
+ *
+ * Set GSD_CLAUDE_DEBUG=1 to print the probe's binary selection and auth
+ * outputs to stderr — useful when diagnosing platform-specific detection
+ * failures (Issue #4997).
  */
 import { execFileSync } from "node:child_process";
 /**
@@ -23,33 +28,117 @@ const CLAUDE_COMMAND = process.platform === "win32" ? "claude.cmd" : "claude";
  * installed" results in readiness checks.
  */
 const CLAUDE_COMMAND_CANDIDATES = process.platform === "win32" ? [CLAUDE_COMMAND, "claude.exe", "claude"] : [CLAUDE_COMMAND];
-function execClaude(args) {
-    let lastError;
+// Keep the version probe snappy — `claude --version` is a quick path.
+const VERSION_TIMEOUT_MS = 5_000;
+// Auth status can be much slower on Windows because the spawn goes through
+// cmd.exe → claude.cmd → node → Claude CLI. 15s leaves headroom on cold spawns
+// without making startup feel hung when the CLI is genuinely missing.
+const AUTH_TIMEOUT_MS = 15_000;
+function debugLog(...parts) {
+    if (process.env.GSD_CLAUDE_DEBUG) {
+        process.stderr.write(`[claude-readiness] ${parts.map((p) => (typeof p === "string" ? p : JSON.stringify(p))).join(" ")}\n`);
+    }
+}
+/**
+ * Find the first candidate that responds to `--version`. Returns the
+ * candidate name on success, null if none worked.
+ *
+ * On Windows with `shell: true`, a missing candidate surfaces as a
+ * non-zero exit from cmd.exe rather than ENOENT — so we cannot rely on
+ * the error code to decide "try next". Treat any failure as "try next"
+ * for the version probe; the only thing that matters for binary
+ * detection is whether *some* candidate produces a `claude --version`
+ * line.
+ */
+function findWorkingCommand() {
     for (const command of CLAUDE_COMMAND_CANDIDATES) {
         try {
-            return execFileSync(command, args, {
-                timeout: 5_000,
+            execFileSync(command, ["--version"], {
+                timeout: VERSION_TIMEOUT_MS,
                 stdio: "pipe",
                 shell: process.platform === "win32",
             });
+            debugLog("version probe ok via", command);
+            return command;
         }
         catch (error) {
-            lastError = error;
-            const code = error?.code;
-            // Windows Git Bash can surface `.cmd` spawn failures as EINVAL instead
-            // of ENOENT. Treat both as "try next candidate".
-            if (code === "ENOENT" || code === "EINVAL") {
-                continue;
+            debugLog("version probe failed for", command, "code=", error?.code);
+            continue;
+        }
+    }
+    return null;
+}
+/**
+ * Decide auth state from `claude auth status` output.
+ *
+ * Newer Claude CLI builds emit JSON by default with a `loggedIn` boolean.
+ * Older builds emit free-form text. We prefer the structured signal and fall
+ * back to a text heuristic. Note: the text heuristic only covers English
+ * phrasing — the JSON path is the durable signal.
+ */
+function parseAuthStatus(output) {
+    const trimmed = output.trim();
+    if (!trimmed)
+        return null;
+    if (trimmed.startsWith("{")) {
+        try {
+            const parsed = JSON.parse(trimmed);
+            if (typeof parsed.loggedIn === "boolean") {
+                return parsed.loggedIn;
             }
-            throw error;
         }
+        catch {
+            // Fall through to text heuristic.
+        }
+    }
+    const lower = trimmed.toLowerCase();
+    if (/not logged in|no credentials|unauthenticated|not authenticated/.test(lower)) {
+        return false;
+    }
+    if (/logged in|authenticated|signed in|email|subscription/.test(lower)) {
+        return true;
+    }
+    return null;
+}
+function probeAuth(command) {
+    // Try --json first (newer CLIs).
+    try {
+        const out = execFileSync(command, ["auth", "status", "--json"], {
+            timeout: AUTH_TIMEOUT_MS,
+            stdio: "pipe",
+            shell: process.platform === "win32",
+        }).toString();
+        debugLog("auth status --json output:", out.slice(0, 200));
+        const parsed = parseAuthStatus(out);
+        if (parsed !== null)
+            return parsed;
+    }
+    catch (error) {
+        debugLog("auth status --json threw:", error.message?.slice(0, 200));
+    }
+    // Fallback: plain `auth status` (older CLIs that don't accept --json).
+    try {
+        const out = execFileSync(command, ["auth", "status"], {
+            timeout: AUTH_TIMEOUT_MS,
+            stdio: "pipe",
+            shell: process.platform === "win32",
+        }).toString();
+        debugLog("auth status output:", out.slice(0, 200));
+        return parseAuthStatus(out);
+    }
+    catch (error) {
+        debugLog("auth status threw:", error.message?.slice(0, 200));
+        return null;
     }
-    throw lastError ?? new Error(`Claude CLI executable not found (tried: ${CLAUDE_COMMAND_CANDIDATES.join(", ")})`);
 }
 let cachedBinaryPresent = null;
 let cachedAuthed = null;
 let lastCheckMs = 0;
 const CHECK_INTERVAL_MS = 30_000;
+/**
+ * Refresh the cached binary/auth state when the cache window has expired.
+ * Preserves a known auth state across soft-fail auth probes.
+ */
 function refreshCache() {
     const now = Date.now();
     if (cachedBinaryPresent !== null && now - lastCheckMs < CHECK_INTERVAL_MS) {
@@ -57,28 +146,23 @@ function refreshCache() {
     }
     // Set timestamp first to prevent re-entrant checks during the same window
     lastCheckMs = now;
-    // Check binary presence
-    try {
-        execClaude(["--version"]);
-        cachedBinaryPresent = true;
-    }
-    catch {
+    const command = findWorkingCommand();
+    if (!command) {
         cachedBinaryPresent = false;
         cachedAuthed = false;
         return;
     }
-    // Check auth status — exit code 0 with non-error output means authenticated
-    try {
-        const output = execClaude(["auth", "status"])
-            .toString()
-            .toLowerCase();
-        // The CLI outputs "not logged in", "no credentials", or similar when unauthenticated
-        cachedAuthed = !(/not logged in|no credentials|unauthenticated|not authenticated/i.test(output));
-    }
-    catch {
-        // Non-zero exit code means not authenticated
-        cachedAuthed = false;
+    cachedBinaryPresent = true;
+    const authed = probeAuth(command);
+    if (authed === null) {
+        // Couldn't determine auth state from CLI output. Don't clobber a
+        // previously known-good cache; otherwise default to false so we don't
+        // silently route requests to an unauthenticated CLI.
+        if (cachedAuthed === null)
+            cachedAuthed = false;
+        return;
     }
+    cachedAuthed = authed;
 }
 /**
  * Whether the `claude` binary is installed (regardless of auth state).

package/dist/resources/extensions/gsd/auto/loop.js

@@ -163,6 +163,17 @@ function resolveDispatchNodeKind(unitType, sidecarItem) {
     }
     return "unit";
 }
+async function enforceMinRequestInterval(s, prefs) {
+    const minInterval = prefs?.min_request_interval_ms ?? 0;
+    if (minInterval > 0 && s.lastRequestTimestamp > 0) {
+        const elapsed = Date.now() - s.lastRequestTimestamp;
+        if (elapsed < minInterval) {
+            const waitMs = minInterval - elapsed;
+            debugLog("autoLoop", { phase: "rate-limit-wait", waitMs });
+            await new Promise(r => setTimeout(r, waitMs));
+        }
+    }
+}
 async function runUnitPhaseViaContract(dispatchContract, ic, iterData, loopState, sidecarItem) {
     if (dispatchContract === "legacy-direct") {
         return runUnitPhase(ic, iterData, loopState, sidecarItem);
@@ -392,7 +403,13 @@ export async function autoLoop(ctx, pi, s, deps, options) {
                     break;
                 }
                 // ── Unit execution (shared with dev path) ──
+                await enforceMinRequestInterval(s, prefs);
                 const unitPhaseResult = await runUnitPhaseViaContract(dispatchContract, ic, iterData, loopState);
+                if (unitPhaseResult.action === "next") {
+                    const requestTimestamp = unitPhaseResult.data.requestDispatchedAt ?? unitPhaseResult.data.unitStartedAt;
+                    if (typeof requestTimestamp === "number")
+                        s.lastRequestTimestamp = requestTimestamp;
+                }
                 deps.uokObserver?.onPhaseResult("unit", unitPhaseResult.action, {
                     unitType: iterData.unitType,
                     unitId: iterData.unitId,
@@ -555,7 +572,13 @@ export async function autoLoop(ctx, pi, s, deps, options) {
                     sidecarKind: sidecarItem.kind,
                 });
             }
+            await enforceMinRequestInterval(s, prefs);
             const unitPhaseResult = await runUnitPhaseViaContract(dispatchContract, ic, iterData, loopState, sidecarItem);
+            if (unitPhaseResult.action === "next") {
+                const requestTimestamp = unitPhaseResult.data.requestDispatchedAt ?? unitPhaseResult.data.unitStartedAt;
+                if (typeof requestTimestamp === "number")
+                    s.lastRequestTimestamp = requestTimestamp;
+            }
             deps.uokObserver?.onPhaseResult("unit", unitPhaseResult.action, {
                 unitType: iterData.unitType,
                 unitId: iterData.unitId,

package/dist/resources/extensions/gsd/auto/phases.js

@@ -1365,7 +1365,7 @@ export async function runUnitPhase(ic, iterData, loopState, sidecarItem) {
                 ctx.ui.notify(`${unitType} ${unitId} completed with 0 tool calls — context exhaustion, will retry`, "warning");
                 // Fall through to next iteration where dispatch will re-derive
                 // and re-dispatch this unit.
-                return { action: "next", data: { unitStartedAt: s.currentUnit?.startedAt } };
+                return { action: "next", data: { unitStartedAt: s.currentUnit?.startedAt, requestDispatchedAt: unitResult.requestDispatchedAt } };
             }
         }
     }
@@ -1418,7 +1418,7 @@ export async function runUnitPhase(ic, iterData, loopState, sidecarItem) {
         }
         s.checkpointSha = null;
     }
-    return { action: "next", data: { unitStartedAt: s.currentUnit?.startedAt } };
+    return { action: "next", data: { unitStartedAt: s.currentUnit?.startedAt, requestDispatchedAt: unitResult.requestDispatchedAt } };
 }
 // ─── runFinalize ──────────────────────────────────────────────────────────────
 /**

package/dist/resources/extensions/gsd/auto/run-unit.js

@@ -138,6 +138,7 @@ export async function runUnit(ctx, pi, s, unitType, unitId, prompt) {
     const capturedTurnGen = getCurrentTurnGeneration();
     // ── Send the prompt ──
     debugLog("runUnit", { phase: "send-message", unitType, unitId });
+    const requestDispatchedAt = Date.now();
     pi.sendMessage({ customType: "gsd-auto", content: prompt, display: s.verbose }, { triggerTurn: true });
     // ── Await agent_end with absolute timeout (H4 fix) ──
     // If supervision fails to resolve unitPromise within 30s, treat as cancelled.
@@ -160,6 +161,7 @@ export async function runUnit(ctx, pi, s, unitType, unitId, prompt) {
         unitId,
         status: result.status,
     });
+    const finalResult = { ...result, requestDispatchedAt };
     // Discard trailing follow-up messages (e.g. async_job_result notifications)
     // from the completed unit. Without this, queued follow-ups trigger wasteful
     // LLM turns before the next session can start (#1642).
@@ -174,5 +176,5 @@ export async function runUnit(ctx, pi, s, unitType, unitId, prompt) {
     catch (e) {
         logWarning("engine", "clearQueue failed after unit completion", { error: String(e) });
     }
-    return result;
+    return finalResult;
 }

package/dist/resources/extensions/gsd/auto/session.js

@@ -118,6 +118,8 @@ export class AutoSession {
     lastPromptCharCount;
     lastBaselineCharCount;
     pendingQuickTasks = [];
+    /** Timestamp of the last LLM request dispatch (ms since epoch). Used for proactive rate limiting. */
+    lastRequestTimestamp = 0;
     // ── Safety harness ───────────────────────────────────────────────────────
     /** SHA of the pre-unit git checkpoint ref. Cleared on success or rollback. */
     checkpointSha = null;
@@ -215,6 +217,7 @@ export class AutoSession {
         this.lastPromptCharCount = undefined;
         this.lastBaselineCharCount = undefined;
         this.pendingQuickTasks = [];
+        this.lastRequestTimestamp = 0;
         this.sidecarQueue = [];
         this.rewriteAttemptCount = 0;
         this.consecutiveCompleteBootstraps = 0;