@gajae-code/coding-agent 0.11.0 → 0.11.1

package/CHANGELOG.md

@@ -2,15 +2,23 @@
 
 ## [Unreleased]
 
+## [0.11.1] - 2026-07-16
+
+### Fixed
+- Published the Windows Bun workflow-gate durability fix that tolerates unsupported `EPERM` directory `fsync` failures after an already-committed atomic rename; the 0.11.0 package changelog described the fix, but the released artifact did not contain it (#2316).
+
 ## [0.11.0] - 2026-07-15
 
 ### Fixed
+- Discord inbound lease recovery now exposes a deterministic scheduler seam, preserves exponential retry wakeups after transient endpoint lookup failures, and cancels pending recovery exactly on daemon stop instead of relying on wall-clock sleeps in regression coverage.
 - Input-free interactive TTY startup now keeps the TUI reachable when configured model profiles are missing required provider credentials, skips only the blocked profiles, and preserves later `--mpreset` and explicit model/thinking precedence; redirected terminals, input-bearing, resume-continuation, image-only, print/text, and unrelated activation failures remain fail-closed (#2277).
+- Windows Bun runtimes no longer crash while committing the durable workflow-gate store when directory `fsync` reports the unsupported-operation code `EPERM`; unexpected directory-sync failures remain fail-closed.
 - Browser geo settings now propagate coherently across request `Accept-Language`, navigator languages, and `Intl` locale/timezone surfaces; configured managed browsers are isolated by geo/profile posture, concurrent acquisition is serialized, and unset geo preserves Chromium's native locale/timezone instead of injecting a fixed New York profile.
 
 - Cooperative mid-run context maintenance now waits at a cancellation-aware FIFO consumer-drain checkpoint before flushing or rewriting session history. Materialized tool results and steering messages are synchronously canonicalized first; aborted barriers and hook/signal-cancelled compactions settle without rewriting or scheduling a continuation. Promotion, pruning, and compaction each start a clean provider/prompt-cache epoch. Script-aware #2067 unsent-delta accounting remains cache-free and distinct from the lifecycle checkpoint.
 - Classified the cooperative mid-run maintenance driver and token estimator test seams as locked non-public SDK exclusions, restoring deterministic operation-inventory generation and post-merge dev CI coverage.
 - Accepted SDK prompts now deliver correlated `agent_start` and exactly one terminal lifecycle frame directly to the requesting authenticated WebSocket connection while retaining replayable host events. Harness owner observation also waits for every previously accepted frame to finish serial persistence, so message-update storms and polling gaps cannot hide sticky completion evidence (#2169).
+- `/new` now fails closed while owned subagent shutdown is unproven: it preserves the current session identity and shows an actionable cleanup notice. Successful replacement waits for cooperative child cancellation, cancels owner jobs before switching identity, and `/drop` creates the replacement before attempting old-session deletion (#2261).
 
 ### Added
 
@@ -27,7 +35,7 @@
 - Removed the `--mode rpc`, `--mode rpc-ui`, and `--mode bridge` external ingress modes. Machine clients must use the SDK WebSocket interfaces documented in `docs/sdk.md`; no RPC or Bridge compatibility path remains.
 - Documented the current GPT-5.6 Codex and combo profile mappings as product judgments, including the durable `opus-codex` `anthropic/claude-sonnet-5` planner override and `fable-opus-codex` `anthropic/claude-opus-4-8:medium` planner.
 - Resolved the SDK v3 workflow-gate shipping classification (#2171): `workflowGateId` and Q12 diagnostics are additive SDK v3 surfaces, while `action_needed.id` remains the transient, generic `reply.id` authority. `expectedSessionId` omission remains accepted and audited for the entire SDK v3 line; new clients must send it, and mandatory enforcement or removal can occur no earlier than SDK v4 only after at least one full published deprecation release/window with deployed-client notice. Explicit session mismatches fail closed before resolution; mismatched sessions, stale/reissued actions, and unsafe ambiguity never regain authority.
-- Documented release pairing: the `@gajae-code/coding-agent` runtime and `@gajae-code/natives` native addon ship from the same source release at exact matching package versions (currently `0.10.2`), with the native loader version sentinel enforcing the pair. Mixed native/runtime versions are unsupported and cannot claim SDK compatibility.
+- Documented release pairing: the `@gajae-code/coding-agent` runtime and `@gajae-code/natives` native addon ship from the same source release at exact matching package versions, with the native loader version sentinel enforcing the pair. Mixed native/runtime versions are unsupported and cannot claim SDK compatibility.
 ### Fixed
 - Startup continuation now participates in the existing managed fallback and in-flight recovery envelope, preventing a retryable resumed turn from publishing `agent_end`/idle before retry success, exhaustion, cancellation, or startup failure has settled (#2092).
 

package/dist/types/async/job-manager.d.ts

@@ -59,6 +59,31 @@ export type SubagentRunOutcome = {
 };
 /** Canonical lifecycle of a subagent across pause/resume cycles. */
 export type SubagentLifecycle = "running" | "paused" | "queued" | "completed" | "failed" | "cancelled";
+/** Maximum time allowed to prove owned subagents have stopped before replacement. */
+export declare const OWNER_SUBAGENT_SHUTDOWN_TIMEOUT_MS = 5000;
+export declare class OwnerSubagentShutdownError extends Error {
+    readonly code = "owner_shutdown_in_progress";
+    constructor();
+}
+export interface OwnerSubagentShutdownTarget {
+    subagentId: string;
+    jobId: string | null;
+    source: "record" | "metadata_job";
+}
+export interface OwnerSubagentShutdownLease {
+    ownerId: string;
+    id: string;
+    targets: readonly OwnerSubagentShutdownTarget[];
+}
+export interface OwnerSubagentShutdownProof {
+    ownerId: string;
+    leaseId: string;
+    confirmed: boolean;
+    reason: "confirmed" | "deadline_exceeded" | "missing_terminal_evidence" | "lease_lost";
+    targets: readonly OwnerSubagentShutdownTarget[];
+    terminalIds: readonly string[];
+    unresolvedIds: readonly string[];
+}
 /**
  * Live, executor-owned control handle for a RUNNING subagent. Registered when a
  * subagent run starts and removed on pause/terminal so a paused subagent retains
@@ -106,6 +131,11 @@ export interface ResumeDescriptor {
     ownerId?: string;
     data: unknown;
 }
+/**
+ * In-memory resume runner bound to the session that originally launched a
+ * subagent. Never serialized: process restart drops it so resume fails closed.
+ */
+export type ResumeRunner = (subagentId: string, message?: string, descriptor?: ResumeDescriptor) => string | undefined;
 export interface AsyncJobManagerOptions {
     onJobComplete: (jobId: string, text: string, job?: AsyncJob) => void | Promise<void>;
     maxRunningJobs?: number;
@@ -241,9 +271,16 @@ export declare class AsyncJobManager {
      */
     hasLiveSubagent(subagentId: string, filter?: AsyncJobFilter): boolean;
     /** Install the TaskTool-owned resume runner. Returns the new job id, or undefined on failure. */
-    setResumeRunner(runner: (subagentId: string, message?: string, descriptor?: ResumeDescriptor) => string | undefined): void;
-    registerResumeDescriptor(descriptor: ResumeDescriptor): void;
+    setResumeRunner(runner: ResumeRunner): void;
+    registerResumeDescriptor(descriptor: ResumeDescriptor, runner?: ResumeRunner): void;
     getResumeDescriptor(subagentId: string, filter?: AsyncJobFilter): ResumeDescriptor | undefined;
+    beginOwnerSubagentShutdown(ownerId: string): OwnerSubagentShutdownLease | undefined;
+    runOwnerProducerCleanups(filter?: AsyncJobFilter): void;
+    runOwnerProducerCleanupsStrict(filter?: AsyncJobFilter): void;
+    cancelAndProveOwnerSubagents(lease: OwnerSubagentShutdownLease, options?: {
+        timeoutMs?: number;
+    }): Promise<OwnerSubagentShutdownProof>;
+    finishOwnerSubagentShutdown(lease: OwnerSubagentShutdownLease, outcome: "commit" | "release"): void;
     /** Request a graceful safe-boundary pause of a running subagent. */
     pauseSubagent(subagentId: string, filter?: AsyncJobFilter): {
         ok: boolean;
@@ -298,11 +335,7 @@ export declare class AsyncJobManager {
      * teardown.
      */
     registerOwnerCleanup(ownerId: string, cleanup: () => void): () => void;
-    /**
-     * Run and clear every registered cleanup for the given filter. Idempotent
-     * and error-isolated: a throwing cleanup does not prevent siblings from
-     * running and never escalates to the caller.
-     */
+    /** Run producer cleanups, then perform the legacy destructive subagent purge. */
     runOwnerCleanups(filter?: AsyncJobFilter): void;
     getDeliveryState(filter?: AsyncJobFilter): AsyncJobDeliveryState;
     hasPendingDeliveries(filter?: AsyncJobFilter): boolean;
@@ -315,6 +348,12 @@ export declare class AsyncJobManager {
      * (used by `dispose()` to nuke the manager's state).
      */
     cancelAll(filter?: AsyncJobFilter): void;
+    waitForOwnerInFlightDeliveries(ownerId: string, options?: {
+        timeoutMs?: number;
+    }): Promise<boolean>;
+    cancelAndSettleOwnerJobs(ownerId: string, options?: {
+        timeoutMs?: number;
+    }): Promise<boolean>;
     getLastDisposeDiagnostics(): AsyncJobDisposeDiagnostics;
     waitForAll(): Promise<void>;
     drainDeliveries(options?: {

package/dist/types/gjc-runtime/ultragoal-receipt-freshness.d.ts

@@ -26,6 +26,17 @@ export declare function validateReceiptFreshBase(input: {
     receipt: UltragoalCompletionVerification;
     receiptKind: UltragoalReceiptKind;
 }): UltragoalReceiptFreshnessDiagnostic | null;
+/**
+ * Validate a final-aggregate receipt that was legitimately superseded — its
+ * aggregate claim staled by later plan growth (e.g. `steer add_subgoal`
+ * appending goals after a terminal run) — as historical evidence for its own
+ * goal. Returns null when the receipt stands.
+ */
+export declare function validateSupersededFinalAggregateReceipt(input: {
+    ledger: readonly UltragoalLedgerEvent[];
+    goal: UltragoalGoal;
+    receipt: UltragoalCompletionVerification;
+}): UltragoalReceiptFreshnessDiagnostic | null;
 export declare function findFreshBatchCloseReceipt(input: {
     plan: UltragoalPlan;
     ledger: readonly UltragoalLedgerEvent[];

package/dist/types/modes/controllers/command-controller.d.ts

@@ -22,9 +22,9 @@ export declare class CommandController {
     handleToolsCommand(): void;
     handleContextCommand(): void;
     handleMemoryCommand(text: string): Promise<void>;
-    handleClearCommand(): Promise<void>;
+    handleClearCommand(): Promise<boolean>;
     handleContextClearCommand(): Promise<void>;
-    handleDropCommand(): Promise<void>;
+    handleDropCommand(): Promise<boolean>;
     handleForkCommand(): Promise<void>;
     handleMoveCommand(targetPath: string): Promise<void>;
     handleRenameCommand(title: string): Promise<void>;

package/dist/types/modes/controllers/extension-ui-controller.d.ts

@@ -7,6 +7,7 @@ export declare class ExtensionUiController {
     #private;
     private ctx;
     constructor(ctx: InteractiveModeContext);
+    captureSessionUiCleanup(): () => void;
     /**
      * Initialize the hook system with TUI-based UI context.
      */

package/dist/types/modes/interactive-mode.d.ts

@@ -211,9 +211,9 @@ export declare class InteractiveMode implements InteractiveModeContext {
     handleHelpCommand(): void;
     handleToolsCommand(): void;
     handleContextCommand(): void;
-    handleClearCommand(): Promise<void>;
+    handleClearCommand(): Promise<boolean>;
     handleContextClearCommand(): Promise<void>;
-    handleDropCommand(): Promise<void>;
+    handleDropCommand(): Promise<boolean>;
     handleForkCommand(): Promise<void>;
     handleMoveCommand(targetPath: string): Promise<void>;
     handleRenameCommand(title: string): Promise<void>;

package/dist/types/modes/shared/agent-wire/workflow-gate-broker.d.ts

@@ -145,6 +145,7 @@ export declare class MemoryGateStore implements GateStore {
     beginRuntimeInstance(instanceId: string): void;
     list(): PersistedGate[];
 }
+export declare function isUnsupportedWindowsDirectorySyncError(error: unknown, platform?: NodeJS.Platform): boolean;
 /** A write may have reached `rename` but not the directory fsync durability barrier. */
 export declare class GateStoreWriteError extends Error {
     readonly certainty: "not_committed" | "uncertain";

package/dist/types/modes/types.d.ts

@@ -239,9 +239,9 @@ export interface InteractiveModeContext {
     handleContextCommand(): void;
     handleDumpCommand(): void;
     handleDebugTranscriptCommand(): Promise<void>;
-    handleClearCommand(): Promise<void>;
+    handleClearCommand(): Promise<boolean>;
     handleContextClearCommand(): Promise<void>;
-    handleDropCommand(): Promise<void>;
+    handleDropCommand(): Promise<boolean>;
     handleForkCommand(): Promise<void>;
     handleBashCommand(command: string, excludeFromContext?: boolean): Promise<void>;
     handlePythonCommand(code: string, excludeFromContext?: boolean): Promise<void>;

package/dist/types/sdk/broker/ensure.d.ts

@@ -11,6 +11,13 @@ export interface EnsureBrokerSettings {
      */
     env?: NodeJS.ProcessEnv;
 }
+export interface FixtureBrokerLease {
+    close(): Promise<void>;
+}
+export interface StartedFixtureBroker {
+    discovery: BrokerDiscovery;
+    lease: FixtureBrokerLease;
+}
 interface BrokerOwner {
     stop(): Promise<void>;
     canReuse(discovery: BrokerDiscovery | null): boolean;
@@ -22,6 +29,8 @@ interface ReapTiming {
 }
 /** Starts the detached broker entrypoint when discovery has no live owner. */
 export declare function ensureBroker(settings: EnsureBrokerSettings): Promise<BrokerDiscovery>;
+/** Starts one fresh fixture broker and returns its sole exact-child close lease. */
+export declare function startFixtureBrokerWithLeaseForTest(settings: EnsureBrokerSettings): Promise<StartedFixtureBroker>;
 /** Test hook: returns a stop handle for the detached broker this process spawned. */
 export declare function brokerOwnerForTest(agentDir: string): BrokerOwner | undefined;
 /** Test hook: drives the detached-broker reap on a controllable child surface. */

package/dist/types/sdk/bus/discord-daemon.d.ts

@@ -9,6 +9,10 @@ export interface DiscordEndpointBinding {
     isCurrent(): boolean;
     send(frame: Record<string, unknown>): void | Promise<void>;
 }
+export interface DiscordLeaseRecoveryScheduler {
+    setTimeout(callback: () => void | Promise<void>, delayMs: number): unknown;
+    clearTimeout(handle: unknown): void;
+}
 export interface DiscordNotificationDaemonOptions {
     agentDir: string;
     repo: string;
@@ -16,6 +20,7 @@ export interface DiscordNotificationDaemonOptions {
     parentChannelId: string;
     provider: DiscordProvider;
     now?: () => number;
+    leaseRecoveryScheduler?: DiscordLeaseRecoveryScheduler;
     resolveEndpoint: (sessionId: string, expectedGeneration?: number) => Promise<DiscordEndpointBinding | null>;
     onCommand?: (sessionId: string, content: string, endpoint: DiscordEndpointBinding, idempotencyKey: string) => Promise<boolean>;
 }

package/dist/types/sdk/bus/telegram-daemon.d.ts

@@ -230,17 +230,40 @@ export declare class TelegramBotTransport implements BotApi {
     }): Promise<unknown>;
 }
 export type TelegramUpdateOutcome = "consumed" | "retry";
+export type TelegramPollResult = {
+    kind: "success";
+    updateCount: number;
+} | {
+    kind: "aborted";
+} | {
+    kind: "getUpdates_failed";
+    error: string;
+} | {
+    kind: "api_failure";
+    errorCode?: number;
+    description: string;
+} | {
+    kind: "conflict";
+    description: string;
+    backoffMs: number;
+};
 export interface TelegramUpdatePollerOptions {
     botApi: BotApi;
     runtime: NotificationOperatorRuntime;
     backoff: OperatorBackoffPolicy;
     processUpdate: (update: unknown) => Promise<TelegramUpdateOutcome>;
+    health?: TelegramPollHealth;
+}
+export declare class TelegramPollHealth {
+    #private;
+    record(result: TelegramPollResult): void;
 }
 /** Owns getUpdates offset, conflict backoff, and per-update error isolation. */
 export declare class TelegramUpdatePoller {
     #private;
     constructor(opts: TelegramUpdatePollerOptions);
     pollOnce(signal?: AbortSignal): Promise<number>;
+    pollOnceResult(signal?: AbortSignal): Promise<TelegramPollResult>;
 }
 /** Mutable dispatch state shared by session frames and inbound Telegram updates. */
 export declare class TelegramEventDispatchState {

package/dist/types/tools/subagent-render.d.ts

@@ -11,6 +11,7 @@ import type { Component } from "@gajae-code/tui";
 import type { RenderResultOptions } from "../extensibility/custom-tools/types";
 import type { Theme } from "../modes/theme/theme";
 import { type SubagentToolDetails } from "./subagent";
+export { subagentAwaitRenderedStateSignature } from "./subagent";
 /** Test-only seam (PR3 deterministic cache-hit assertions). */
 export declare const subagentBodyCacheTestHooks: {
     readonly bodyRenders: number;

package/dist/types/tools/subagent.d.ts

@@ -56,8 +56,13 @@ export interface SubagentSnapshot {
     /** True when the requested model lacked credentials and fell back to the parent model. */
     modelFellBack?: boolean;
 }
+export type SubagentAwaitOutcome = "completed" | "timed_out" | "interrupted";
 export interface SubagentToolDetails {
     subagents: SubagentSnapshot[];
+    /** Await outcome for a live await receipt; omitted when no wait was started. */
+    awaitOutcome?: SubagentAwaitOutcome;
+    /** True only when the parent await was interrupted; the child was not cancelled. */
+    interrupted?: true;
 }
 export declare class SubagentTool implements AgentTool<typeof subagentSchema, SubagentToolDetails> {
     #private;
@@ -113,5 +118,5 @@ export declare class SubagentTool implements AgentTool<typeof subagentSchema, Su
  * countdown ticking is sacrificed by design; every real transition still changes
  * the signature.
  */
-export declare function subagentAwaitRenderedStateSignature(subagents: readonly SubagentSnapshot[]): string;
+export declare function subagentAwaitRenderedStateSignature(subagents: readonly SubagentSnapshot[], receipt?: Pick<SubagentToolDetails, "awaitOutcome" | "interrupted">): string;
 export {};

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@gajae-code/coding-agent",
-	"version": "0.11.0",
+	"version": "0.11.1",
 	"description": "Gajae Code CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://gajae-code.com",
 	"author": "Yeachan-Heo and Gajae Code Contributors",
@@ -51,13 +51,13 @@
 		"@agentclientprotocol/sdk": "1.2.1",
 		"@babel/parser": "^7.29.3",
 		"@mozilla/readability": "^0.6.0",
-		"@gajae-code/stats": "0.11.0",
-		"@gajae-code/agent-core": "0.11.0",
-		"@gajae-code/ai": "0.11.0",
-		"@gajae-code/bridge-client": "0.11.0",
-		"@gajae-code/natives": "0.11.0",
-		"@gajae-code/tui": "0.11.0",
-		"@gajae-code/utils": "0.11.0",
+		"@gajae-code/stats": "0.11.1",
+		"@gajae-code/agent-core": "0.11.1",
+		"@gajae-code/ai": "0.11.1",
+		"@gajae-code/bridge-client": "0.11.1",
+		"@gajae-code/natives": "0.11.1",
+		"@gajae-code/tui": "0.11.1",
+		"@gajae-code/utils": "0.11.1",
 		"@puppeteer/browsers": "^2.13.0",
 		"@types/turndown": "5.0.6",
 		"@xterm/headless": "^6.0.0",

package/scripts/build-sdk-package-smoke.ts

@@ -8,6 +8,7 @@ const packageDir = path.resolve(import.meta.dir, "..");
 const packageName = "@gajae-code/coding-agent";
 const aiPackageDir = path.resolve(packageDir, "../ai");
 const bridgeClientPackageDir = path.resolve(packageDir, "../bridge-client");
+const tuiPackageDir = path.resolve(packageDir, "../tui");
 const manifestsDir = path.join(packageDir, "test/manifests");
 const baselinePath = path.join(manifestsDir, "sdk-public-surface-v1.json");
 const generatedPath = path.join(manifestsDir, "sdk-public-surface.generated.json");
@@ -34,11 +35,13 @@ async function runSmoke(): Promise<Surface> {
 			["bun", "pm", "pack", "--destination", tempDir, "--quiet"],
 			bridgeClientPackageDir,
 		);
+		const tuiTarball = run(["bun", "pm", "pack", "--destination", tempDir, "--quiet"], tuiPackageDir);
 		const codingAgentTarball = run(["bun", "pm", "pack", "--destination", tempDir, "--quiet"], packageDir);
 		const aiTarballPath = path.isAbsolute(aiTarball) ? aiTarball : path.join(aiPackageDir, aiTarball);
 		const bridgeClientTarballPath = path.isAbsolute(bridgeClientTarball)
 			? bridgeClientTarball
 			: path.join(bridgeClientPackageDir, bridgeClientTarball);
+		const tuiTarballPath = path.isAbsolute(tuiTarball) ? tuiTarball : path.join(tuiPackageDir, tuiTarball);
 		const codingAgentTarballPath = path.isAbsolute(codingAgentTarball)
 			? codingAgentTarball
 			: path.join(packageDir, codingAgentTarball);
@@ -52,10 +55,12 @@ async function runSmoke(): Promise<Surface> {
 						"@gajae-code/ai": `file:${aiTarballPath}`,
 						"@gajae-code/bridge-client": `file:${bridgeClientTarballPath}`,
 						[packageName]: `file:${codingAgentTarballPath}`,
+						"@gajae-code/tui": `file:${tuiTarballPath}`,
 					},
 					overrides: {
 						"@gajae-code/ai": `file:${aiTarballPath}`,
 						"@gajae-code/bridge-client": `file:${bridgeClientTarballPath}`,
+						"@gajae-code/tui": `file:${tuiTarballPath}`,
 					},
 				},
 				null,