@gajae-code/agent-core 0.12.1 → 0.12.2

package/CHANGELOG.md

@@ -2,6 +2,8 @@
 
 ## [Unreleased]
 
+## [0.12.2] - 2026-07-30
+
 ## [0.12.1] - 2026-07-29
 - Agent session configuration can carry an explicit first-event stream timeout while preserving provider defaults when the setting is absent.
 
@@ -9,6 +11,7 @@
 
 - The `invalid_prompt` circuit breaker no longer replays the rejected turn on its repaired resend. The streaming path commits the failed assistant message to the context before the breaker runs, so the one repaired resend re-sent that errored turn as if the model had spoken it — re-triggering `Request blocked (code=invalid_prompt)` and leaving a second assistant tail that no continuation can resume from. The breaker now repairs and resends only the history that preceded the rejection.
 - Compaction pruning now protects the newest two user/`bashExecution` turns, uses conservative read supersession, preserves bounded error-first diagnostics, and exposes reversible artifact-backed originals with exact savings accounting.
+- Cancelling a prompt no longer fails its terminal closed. `agent_end` is published before the run resource ledger is sealed, so the event's own handlers register post-prompt work against an already-sealed run; that late registration was treated as an escaped resource and quarantined the run, making `waitForSettlement` report `unfenced` forever. Cancel therefore never obtained settlement proof and the SDK refused to publish a terminal, surfacing over ACP as `-32603 "Prompt resources did not settle before the terminalization grace expired."` Sealing now only freezes admission of genuinely new work; post-seal registration joins ordinary settlement accounting so the run stays unsettled until it actually completes.
 
 ## [0.11.11] - 2026-07-26
 

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@gajae-code/agent-core",
-	"version": "0.12.1",
+	"version": "0.12.2",
 	"description": "General-purpose agent with transport abstraction, state management, and attachment support",
 	"homepage": "https://gajae-code.com",
 	"author": "Yeachan-Heo and Gajae Code Contributors",
@@ -32,9 +32,9 @@
 		"fmt": "biome format --write ."
 	},
 	"dependencies": {
-		"@gajae-code/ai": "0.12.1",
-		"@gajae-code/natives": "0.12.1",
-		"@gajae-code/utils": "0.12.1",
+		"@gajae-code/ai": "0.12.2",
+		"@gajae-code/natives": "0.12.2",
+		"@gajae-code/utils": "0.12.2",
 		"@opentelemetry/api": "^1.9.0"
 	},
 	"devDependencies": {

package/src/run-resource-ledger.ts

@@ -137,11 +137,15 @@ export function createRunResourceLedger(): RunResourceLedger {
 			}
 
 			if (state.lifecycle === "sealed") {
-				// A sealed run cannot be reopened. Late registration is fenced as
-				// quarantine rather than creating a false settled run.
-				quarantineState(state);
-				appendTombstone(state, entry);
-				observeSettlement(settled, () => {});
+				// Sealing only freezes admission of *new* work; it does not mean the run's
+				// resources have all been registered yet. `agent_end` is published before
+				// seal(), and its handlers register their own post-prompt work while the
+				// event is still draining, so this late registration is the normal
+				// lifecycle rather than an escaped resource. Admit it into ordinary
+				// settlement accounting so the run stays unsettled until it completes;
+				// quarantining here would make every cancel unfenced forever.
+				state.resources.set(id, { entry });
+				observeSettlement(settled, () => settleTracked(state!, id));
 				return;
 			}