@gajae-code/coding-agent 0.11.11 → 0.12.0

package/dist/types/gjc-runtime/deep-interview-state.d.ts

@@ -1,4 +1,3 @@
-import { computeAmbiguityFloor, type DeepInterviewAmbiguityMilestone } from "./deep-interview-ambiguity";
 /**
  * Pure, dependency-free foundation for deep-interview state shape.
  *
@@ -36,6 +35,10 @@ export interface DeepInterviewTriggerMetadata {
     status: DeepInterviewTriggerStatus;
     component: string;
     dimension: string;
+    priorDimensionScore?: number;
+    newDimensionScore?: number;
+    priorAmbiguity?: number;
+    newAmbiguity?: number;
     evidence?: string;
     contradictedFactId?: string;
     /** Required when status is `disputed` or `unresolved` to exempt the invariant. */
@@ -65,11 +68,9 @@ export interface DeepInterviewRoundRecord {
     /** Deterministic floor in effect when this round was scored, when it clamped. */
     ambiguity_floor?: number;
     triggers?: DeepInterviewTriggerMetadata[];
-    round_result_digest?: string;
 }
 export interface DeepInterviewStateEnvelope {
     threshold?: number;
-    threshold_units?: number;
     threshold_source?: string;
     state?: Record<string, unknown>;
     [key: string]: unknown;
@@ -196,135 +197,3 @@ export declare function assertDeepInterviewIntentReview(value: unknown, locked:
     round: unknown;
     answer_hash: unknown;
 }[]): asserts value is DeepInterviewIntentReview;
-export type DeepInterviewDimension = "goal" | "constraints" | "criteria" | "context";
-export type DeepInterviewResolution = "auto_research_accepted" | "auto_answer" | "direct" | "refined" | "cited_confirmation";
-export interface DeepInterviewFactOperation {
-    op: "add" | "dispute" | "supersede";
-    id: string;
-    statement?: string;
-    component?: string;
-    dimension?: DeepInterviewDimension;
-    evidence?: string;
-    target_id?: string;
-}
-export interface DeepInterviewOntologyEntity {
-    id: string;
-    name: string;
-    type: string;
-    fields: string[];
-}
-export interface DeepInterviewOntologyRelationship {
-    id: string;
-    from_entity_id: string;
-    to_entity_id: string;
-    type: string;
-}
-export interface DeepInterviewOntologyReasoning {
-    statement: string;
-    evidence?: string;
-}
-export interface DeepInterviewOntologyInput {
-    entities: DeepInterviewOntologyEntity[];
-    relationships: DeepInterviewOntologyRelationship[];
-    reasoning: DeepInterviewOntologyReasoning[];
-}
-export interface DeepInterviewComponentUpdate {
-    component_id: string;
-    scores: Record<DeepInterviewDimension, number>;
-}
-/**
- * Optional legacy assertions accepted only when they agree with the native
- * target. The persisted target is always derived from component scores.
- */
-export interface DeepInterviewTargetingInput {
-    target_component_id?: string;
-    target_dimension?: DeepInterviewDimension;
-    weakest_component_id?: string;
-    weakest_dimension?: DeepInterviewDimension;
-    last_targeted_component_id?: string | null;
-}
-export interface DeepInterviewRoundBookkeeping {
-    resolution: DeepInterviewResolution;
-    round_ids?: string[];
-    counter_deltas?: Record<string, number>;
-}
-/**
- * Closed evidence submitted for one scoring transaction. All convergence values
- * (ambiguity, floor, milestone, ontology counts, rotation, and streak) are
- * native-derived and intentionally cannot be supplied here.
- */
-export interface DeepInterviewRoundResultV1 {
-    global_scores: Record<DeepInterviewDimension, number>;
-    component_updates?: DeepInterviewComponentUpdate[];
-    targeting?: DeepInterviewTargetingInput;
-    triggers?: DeepInterviewTriggerMetadata[];
-    fact_ops?: DeepInterviewFactOperation[];
-    ontology?: DeepInterviewOntologyInput | DeepInterviewOntologyEntity[];
-    bookkeeping?: DeepInterviewRoundBookkeeping;
-    /** Compatibility adapter for recorder callers; never persisted as the v1 wire shape. */
-    component_scores?: Record<string, Record<DeepInterviewDimension, number>>;
-    auto_answered?: boolean;
-}
-/**
- * Version 1 native projection returned by `apply-round-result` as
- * `native_projection`. This is the complete renderable convergence surface;
- * callers must not derive or supplement it from candidate scorer input.
- */
-export interface DeepInterviewRoundResultProjection {
-    score_units: Partial<Record<DeepInterviewDimension, number>>;
-    weighted_ambiguity: number;
-    weighted_ambiguity_units: number;
-    floor: number;
-    floor_units: number;
-    floor_cause: ReturnType<typeof computeAmbiguityFloor>;
-    effective_ambiguity: number;
-    effective_ambiguity_units: number;
-    prior_effective_ambiguity: number | null;
-    direction: "increased" | "decreased" | "unchanged" | "initial";
-    ambiguity_milestone: DeepInterviewAmbiguityMilestone;
-    topology: unknown;
-    topology_counts: {
-        active: number;
-        deferred: number;
-        total: number;
-    };
-    ontology: unknown;
-    ontology_counts: {
-        stable: number;
-        changed: number;
-        new: number;
-        basis: string;
-    };
-    targeting: {
-        target_component_id: string | null;
-        target_dimension: DeepInterviewDimension | null;
-        last_targeted_component_id: string | null;
-    };
-    transition: {
-        round_key: string;
-        lifecycle: "scored";
-        auto_answer_streak: number;
-    };
-}
-export type DeepInterviewApplyRoundResult = {
-    kind: "noop";
-    envelope: DeepInterviewStateEnvelope;
-    projection?: DeepInterviewRoundResultProjection;
-} | {
-    kind: "write";
-    envelope: DeepInterviewStateEnvelope;
-    projection: DeepInterviewRoundResultProjection;
-};
-/** Strict UTF-8 JSON serialization used by v1 replay digests. */
-export declare function canonicalDeepInterviewJson(value: unknown): string;
-export declare function deepInterviewRoundResultDigest(input: {
-    round: number;
-    question_id: string;
-    round_id?: string | null;
-    result: unknown;
-}): string;
-/** Complete persisted answer identity; omitted optional values normalize to null. */
-export declare function deepInterviewAnswerIdentityEqual(a: Pick<DeepInterviewRoundRecord, "round" | "round_key" | "round_id" | "question_id" | "component" | "dimension" | "question_text" | "question_hash" | "selected_options" | "custom_input">, b: Pick<DeepInterviewRoundRecord, "round" | "round_key" | "round_id" | "question_id" | "component" | "dimension" | "question_text" | "question_hash" | "selected_options" | "custom_input">): boolean;
-/** Apply one closed v1 scoring round. The input contains evidence only; all convergence state is derived here. */
-export declare function applyDeepInterviewRoundResultV1(envelopeValue: unknown, roundKey: string, result: DeepInterviewRoundResultV1, now: string): DeepInterviewApplyRoundResult;
-export declare function validateDeepInterviewV1Envelope(value: Record<string, unknown>): void;

package/dist/types/gjc-runtime/gc-runtime.d.ts

@@ -12,7 +12,7 @@
  *   error all mean KEEP — a live process is never signalled or killed.
  * - Dry-run by default: nothing is deleted unless `--prune`/`--force`.
  */
-export type GcStore = "harness_leases" | "team_workers" | "file_locks" | "tmux_sessions" | "registry_entries";
+export type GcStore = "harness_leases" | "team_workers" | "file_locks" | "tmux_sessions" | "registry_entries" | "local_roots";
 export declare const GC_STORES: readonly GcStore[];
 /** Why a probed pid is kept instead of treated as dead. */
 export type GcPidKeepReason = "alive" | "eperm" | "unknown";

package/dist/types/gjc-runtime/memory-guard-owner-claims.d.ts

@@ -0,0 +1,47 @@
+import { type LinuxProcPidProbeResult } from "./linux-proc";
+declare const MEMORY_GUARD_CLAIM_RESOURCES: readonly ["writer", "tty"];
+type MemoryGuardClaimResource = (typeof MEMORY_GUARD_CLAIM_RESOURCES)[number];
+export interface MemoryGuardClaimOwner {
+    sessionId: string;
+    generation: string;
+    runId: string;
+    childToken: string;
+    pid: number;
+    processStartTime: string;
+    ttyDevice: string;
+}
+export interface MemoryGuardClaimsLease {
+    writerEpoch: number;
+    ttyEpoch: number;
+    owner: MemoryGuardClaimOwner;
+    claimStorePath: string;
+}
+export declare function isMemoryGuardClaimsLease(value: unknown): value is MemoryGuardClaimsLease;
+export declare function isMemoryGuardClaimsLeaseForStateDir(value: unknown, stateDir: string): value is MemoryGuardClaimsLease;
+export type MemoryGuardClaimsReleasedProof = MemoryGuardClaimsLease;
+interface PersistedMemoryGuardClaimRow {
+    resource: MemoryGuardClaimResource;
+    epoch: number;
+    session_id: string;
+    generation: string;
+    run_id: string;
+    child_token: string;
+    pid: number;
+    process_start_time: string;
+    tty_device: string;
+    acquired_at: string;
+}
+export interface MemoryGuardOwnerClaimsDeps {
+    probePid(pid: number): Promise<LinuxProcPidProbeResult>;
+    now(): string;
+}
+export declare function memoryGuardClaimsDatabaseFile(stateDir: string, sessionId: string): string;
+export declare function acquireMemoryGuardClaims(stateDir: string, owner: MemoryGuardClaimOwner, deps?: MemoryGuardOwnerClaimsDeps): Promise<MemoryGuardClaimsLease>;
+export declare function releaseMemoryGuardClaims(stateDir: string, claim: MemoryGuardClaimsLease): Promise<void>;
+export declare function probeMemoryGuardClaimsReleased(stateDir: string, owner: MemoryGuardClaimOwner, deps?: MemoryGuardOwnerClaimsDeps): Promise<MemoryGuardClaimsReleasedProof>;
+export interface PersistedMemoryGuardClaimsSnapshot {
+    epoch: number;
+    claims: PersistedMemoryGuardClaimRow[];
+}
+export declare function readMemoryGuardClaimsForTest(stateDir: string, sessionId: string): Promise<PersistedMemoryGuardClaimsSnapshot>;
+export {};

package/dist/types/gjc-runtime/ralplan-runtime.d.ts

@@ -13,7 +13,7 @@ import { type RalplanIndexRow } from "./ledger-event-renderer";
  *
  * 2. **Artifact write**: `gjc ralplan --write --stage <type> --stage_n <N>
  *    (--artifact <path-or-string> | --artifact-env GJC_RALPLAN_ARTIFACT)
- *    [--run-id <id>] [--session-id <id>] [--json]` persists Planner / Architect
+ *    [--run-id <id>] [--session-id <id>] [--lane-verdict <token>] [--json]` persists Planner / Architect
  *    / Critic / revision / post-interview / ADR / final markdown under `.gjc/plans/ralplan/<run-id>/`, maintains
  *    an `index.jsonl` audit log, copies `final` stages to `pending-approval.md`, and advances
  *    the HUD chip to reflect the latest persisted stage.
@@ -29,6 +29,10 @@ export declare const RALPLAN_DEFAULT_MAX_ITERATIONS = 5;
 export declare const RALPLAN_MAX_ITERATIONS_LIMIT = 20;
 /** Operator-visible stuck signal for headless/CI orchestration (#3165). */
 export declare const PLANNING_STUCK_MARKER = "PLANNING-STUCK";
+/** Default architect/critic review passes per consensus iteration. */
+export declare const RALPLAN_DEFAULT_MAX_REVIEW_PASSES_PER_LANE = 1;
+/** Inclusive upper bound for `gjc.ralplan.maxReviewPassesPerLane` settings overrides. */
+export declare const RALPLAN_MAX_REVIEW_PASSES_PER_LANE_LIMIT = 10;
 export type RalplanIterationCapDecision = {
     allowed: true;
     currentIterations: number;
@@ -58,11 +62,52 @@ export declare function evaluateRalplanIterationCap(input: {
     /** Minimum opener count (e.g. on-disk stage-*-{planner,revision}.md). */
     iterationFloor?: number;
 }): RalplanIterationCapDecision;
+export type RalplanReviewLane = "architect" | "critic";
+export type RalplanReviewLaneBudgetDecision = {
+    allowed: true;
+    lane?: RalplanReviewLane;
+    currentPasses: number;
+    projectedPasses: number;
+    maxReviewPassesPerLane: number;
+    finalSlot: boolean;
+    ledgerNote?: string;
+} | {
+    allowed: false;
+    lane: RalplanReviewLane;
+    currentPasses: number;
+    projectedPasses: number;
+    maxReviewPassesPerLane: number;
+    finalSlot: false;
+    ledgerNote?: string;
+    reason: string;
+};
+/**
+ * Pure per-lane review-pass budget gate. Architect and critic passes are limited
+ * within the current consensus iteration; all other stages remain unconditionally
+ * available as escalation paths.
+ */
+export declare function evaluateRalplanReviewLaneBudget(input: {
+    rows: readonly RalplanIndexRow[];
+    stage: string;
+    maxReviewPassesPerLane?: unknown;
+    onDiskLaneCounts?: {
+        architect: number;
+        critic: number;
+    };
+}): RalplanReviewLaneBudgetDecision;
 /**
  * Count on-disk planner/revision stage artifacts for a run. Used as a floor when
  * `index.jsonl` is missing, empty, truncated, or otherwise under-counts openers.
  */
 export declare function countRalplanOnDiskOpeners(cwd: string, sessionId: string, runId: string): Promise<number>;
+/**
+ * Count on-disk Architect/Critic stage artifacts for a run. This is the
+ * fail-closed floor for a missing, truncated, or malformed `index.jsonl`.
+ */
+export declare function countRalplanOnDiskLaneArtifacts(cwd: string, sessionId: string, runId: string): Promise<{
+    architect: number;
+    critic: number;
+}>;
 /**
  * Load index rows for cap enforcement. Unlike HUD reads, returns structural
  * signals so callers can fail closed when the ledger is empty/malformed while
@@ -73,6 +118,7 @@ export declare function loadRalplanIndexForCap(cwd: string, sessionId: string, r
     indexPresent: boolean;
     parseableLines: number;
     rawLineCount: number;
+    rawText?: string;
 }>;
 /**
  * Resolve ralplan consensus iteration cap. Project `./.gjc/settings.json` overrides
@@ -82,5 +128,10 @@ export declare function resolveRalplanMaxIterations(cwd: string): Promise<{
     maxIterations: number;
     source: string;
 }>;
+/** Resolve the per-lane review-pass budget with project-over-user precedence. */
+export declare function resolveRalplanMaxReviewPassesPerLane(cwd: string): Promise<{
+    maxReviewPassesPerLane: number;
+    source: string;
+}>;
 export declare function isRalplanArtifactWriteInvocation(args: readonly string[]): boolean;
 export declare function runNativeRalplanCommand(args: string[], cwd?: string): Promise<RalplanCommandResult>;

package/dist/types/gjc-runtime/state-writer.d.ts

@@ -46,47 +46,6 @@ export interface WorkflowEnvelopeIntegrityMismatch {
     expected: string;
     actual: string;
 }
-export type WorkflowReceiptVerification = "legacy" | "native-valid" | "receipt-malformed" | "receipt-missing" | "checksum-mismatch";
-export interface GuardedWorkflowEnvelopeTransformOptions extends StateWriterOptions {
-    expectedRevision: number;
-    /** Additional native schema validation applied to both current and candidate envelopes. */
-    validate?: (value: Record<string, unknown>, legacy: boolean) => void;
-    transform: (current: Record<string, unknown>, context: {
-        revision: number;
-        legacy: boolean;
-    }) => {
-        kind: "noop";
-    } | {
-        kind: "write";
-        value: Record<string, unknown>;
-    } | Promise<{
-        kind: "noop";
-    } | {
-        kind: "write";
-        value: Record<string, unknown>;
-    }>;
-}
-export interface GuardedWorkflowEnvelopeWarning {
-    code: "DI_POST_COMMIT_AUDIT_FAILED";
-    message: string;
-}
-export type GuardedWorkflowEnvelopeTransformResult = {
-    path: string;
-    written: false;
-    reason: "noop";
-    revision: number;
-    warnings: [];
-} | {
-    path: string;
-    written: true;
-    revision: number;
-    stamped: Record<string, unknown>;
-    warnings: GuardedWorkflowEnvelopeWarning[];
-};
-export declare class GuardedWorkflowEnvelopeError extends Error {
-    readonly code: string;
-    constructor(code: string);
-}
 export interface WorkflowTransactionJournal {
     version: 1;
     mutation_id: string;
@@ -103,7 +62,6 @@ export interface GuardedStateWriterOptions extends StateWriterOptions {
     policy: StateWritePolicy;
     expectedRevision?: number;
     sourceRevision?: number;
-    lockHeld?: boolean;
 }
 export type GuardedWriteResult = {
     path: string;
@@ -121,13 +79,17 @@ export interface StateWriterOptions {
     receipt?: StateWriterReceiptContext;
     audit?: StateWriterAuditContext;
     sourceRevision?: number;
-    orderingRevision?: number;
     /**
      * Cross-process lock tuning for read-modify-write paths that route through
      * `withWorkflowStateLock` / `updateJsonAtomic`. Omit for the hardened
      * `withFileLock` defaults.
      */
     lock?: FileLockOptions;
+    /**
+     * Caller already holds the workflow state lock for this target path (via
+     * `withWorkflowStateLock`). Skip re-acquisition to avoid self-deadlock.
+     */
+    lockHeld?: boolean;
 }
 export declare class StateWriteConflictError extends Error {
     readonly path: string;
@@ -183,8 +145,6 @@ export type StrictMutationReadResult = {
 };
 export declare function readExistingStateForMutation(filePath: string): Promise<StrictMutationReadResult>;
 export declare function workflowEnvelopeContentSha256(value: unknown): string;
-export declare function isNativeDeepInterviewV1(value: Record<string, unknown>): boolean;
-export declare function verifyWorkflowEnvelopeReceiptValue(value: unknown, filePath: string): WorkflowReceiptVerification;
 export declare function stampWorkflowEnvelopeChecksum<T>(value: T, filePath: string, computedAt?: string): T;
 export declare function detectWorkflowEnvelopeIntegrityMismatch(filePath: string): Promise<WorkflowEnvelopeIntegrityMismatch | undefined>;
 type ActiveStateCacheInvalidator = (cwd?: string, sessionId?: string) => void;
@@ -192,7 +152,6 @@ export declare function setActiveStateCacheInvalidator(invalidator: ActiveStateC
 export declare function persistedStateRevision(value: unknown): number;
 export declare function writeGuardedJsonAtomic(targetPath: string, value: unknown, options: GuardedStateWriterOptions): Promise<GuardedWriteResult>;
 export declare function writeGuardedWorkflowEnvelopeAtomic(targetPath: string, value: unknown, options: GuardedStateWriterOptions): Promise<GuardedWriteResult>;
-export declare function transformGuardedWorkflowEnvelopeAtomic(targetPath: string, options: GuardedWorkflowEnvelopeTransformOptions): Promise<GuardedWorkflowEnvelopeTransformResult>;
 export declare function writeJsonAtomic(targetPath: string, value: unknown, options?: StateWriterOptions): Promise<string>;
 export declare function writeWorkflowEnvelopeAtomic(targetPath: string, value: unknown, options?: StateWriterOptions): Promise<string>;
 export declare function writeTextAtomic(targetPath: string, text: string, options?: StateWriterOptions): Promise<string>;

package/dist/types/gjc-runtime/team-launch.d.ts

@@ -2,7 +2,7 @@ import type { GjcTeamConfig, GjcTeamSnapshot, GjcTeamStartOptions, GjcTeamTask,
 /** Launch-specific option wiring kept separate from runtime dispatch. */
 export declare function withTeamLaunchTransport(options: GjcTeamStartOptions, mailboxDeliveryTransport: GjcTeamStartOptions["mailboxDeliveryTransport"]): GjcTeamStartOptions;
 /** @internal Exported for unit tests. */
-export declare function buildWorkerCommand(config: GjcTeamConfig, worker: GjcTeamWorker, platform?: NodeJS.Platform): string;
+export declare function buildWorkerCommand(config: GjcTeamConfig, worker: GjcTeamWorker, platform?: NodeJS.Platform, promptOverride?: string): string;
 interface GjcTmuxBinary {
     command: string;
     isPsmux: boolean;

package/dist/types/gjc-runtime/team-runtime.d.ts

@@ -186,6 +186,7 @@ export interface WorkerHeartbeatFile {
     last_turn_at: string;
     turn_count: number;
     alive: boolean;
+    process_start_time?: string;
 }
 export interface GjcWorkerIntegrationAttemptRequestResult {
     requested: boolean;
@@ -199,7 +200,7 @@ export interface GjcWorkerIntegrationAttemptRequestResult {
 export interface GjcWorkerIntegrationAttemptOptions {
     signal?: AbortSignal;
 }
-export declare const GJC_TEAM_API_OPERATIONS: readonly ["send-message", "broadcast", "mailbox-list", "mailbox-mark-delivered", "mailbox-mark-notified", "notification-list", "notification-read", "notification-replay", "notification-mark-pane-attempt", "worker-startup-ack", "create-task", "read-task", "list-tasks", "update-task", "claim-task", "transition-task-status", "transition-task", "release-task-claim", "read-config", "read-manifest", "read-worker-status", "update-worker-status", "read-worker-heartbeat", "recover-stale-claims", "update-worker-heartbeat", "write-worker-inbox", "write-worker-identity", "append-event", "read-events", "read-traces", "await-event", "write-shutdown-request", "read-shutdown-ack", "read-monitor-snapshot", "write-monitor-snapshot", "read-task-approval", "write-task-approval"];
+export declare const GJC_TEAM_API_OPERATIONS: readonly ["send-message", "broadcast", "mailbox-list", "mailbox-mark-delivered", "mailbox-mark-notified", "notification-list", "notification-read", "notification-replay", "notification-mark-pane-attempt", "worker-startup-ack", "create-task", "read-task", "list-tasks", "update-task", "claim-task", "transition-task-status", "transition-task", "release-task-claim", "read-config", "read-manifest", "read-worker-status", "update-worker-status", "read-worker-heartbeat", "recover-stale-claims", "update-worker-heartbeat", "read-worker-memory-guard", "update-worker-memory-guard", "apply-worker-memory-guard", "write-worker-inbox", "write-worker-identity", "append-event", "read-events", "read-traces", "await-event", "write-shutdown-request", "read-shutdown-ack", "read-monitor-snapshot", "write-monitor-snapshot", "read-task-approval", "write-task-approval"];
 export interface GjcTeamRuntimeTestSeams {
     nowMs?: () => number;
     continuationTmuxDispatch?: (command: string, args: readonly string[]) => {

package/dist/types/gjc-runtime/team-store.d.ts

@@ -107,6 +107,18 @@ export interface GjcTeamApiClaimResult {
     claim_token?: string;
     reason?: string;
 }
+export type GjcTeamWorkerClaimSelection = {
+    kind: "none";
+} | {
+    kind: "exact";
+    task: GjcTeamTask;
+    claim: GjcTeamTaskClaim;
+} | {
+    kind: "ambiguous";
+    tasks: GjcTeamTask[];
+};
+export declare function selectCurrentClaimedTaskForWorker(tasks: readonly GjcTeamTask[], workerId: string): GjcTeamWorkerClaimSelection;
+export declare function findGjcTeamClaimedTaskForWorker(tasks: readonly GjcTeamTask[], workerId: string): GjcTeamTask | undefined;
 type EventAppender = (event: {
     type: string;
     task_id?: string;

package/dist/types/gjc-runtime/team-worker-memory-guard.d.ts

@@ -0,0 +1,92 @@
+import { type StateWriterOptions } from "./state-writer";
+export type GjcTeamWorkerMemoryGuardState = "idle" | "advisory" | "retrying" | "checkpointed" | "replaced" | "blocked";
+export type GjcTeamWorkerMemoryGuardCheckpointKind = "clean" | "eligible" | "protected_only" | "conflicted" | "git_error";
+export type GjcTeamWorkerMemoryGuardPidProbe = {
+    kind: "live";
+    start_time: string;
+} | {
+    kind: "absent";
+} | {
+    kind: "unverifiable";
+    reason: string;
+};
+export interface GjcTeamWorkerMemoryGuardCheckpoint {
+    kind: GjcTeamWorkerMemoryGuardCheckpointKind;
+    files: string[];
+    head?: string | null;
+    commit?: string | null;
+    recorded_at: string;
+}
+export interface GjcTeamWorkerMemoryGuardReplacement {
+    old_pane_id?: string;
+    new_pane_id?: string;
+    recorded_at: string;
+}
+export interface GjcTeamWorkerMemoryGuardLedger {
+    schema_version: 1;
+    worker_id: string;
+    platform: string;
+    state: GjcTeamWorkerMemoryGuardState;
+    automatic_action_allowed: boolean;
+    retry_count: number;
+    retry_limit: number;
+    current_task_id?: string;
+    last_incident_id?: string;
+    last_reason?: string;
+    last_pid_probe?: GjcTeamWorkerMemoryGuardPidProbe;
+    last_checkpoint?: GjcTeamWorkerMemoryGuardCheckpoint;
+    last_replacement?: GjcTeamWorkerMemoryGuardReplacement;
+    updated_at: string;
+}
+export interface GjcTeamWorkerMemoryGuardSelectionCandidate {
+    worker_id: string;
+    platform: string;
+    excess_bytes: number;
+    retry_count: number;
+    retry_limit: number;
+    blocked?: boolean;
+    current_task_id?: string;
+}
+export interface GjcTeamWorkerMemoryGuardSelection {
+    worker_id: string;
+    excess_bytes: number;
+    retry_count: number;
+    current_task_id?: string;
+}
+export declare function workerMemoryGuardLedgerPath(dir: string, workerId: string): string;
+export declare function normalizeGjcTeamWorkerMemoryGuardPidProbe(value: unknown): GjcTeamWorkerMemoryGuardPidProbe | undefined;
+export declare function isCanonicalGjcTeamWorkerMemoryGuardCheckpoint(value: unknown): value is GjcTeamWorkerMemoryGuardCheckpoint;
+export declare function isCanonicalGjcTeamWorkerMemoryGuardReplacement(value: unknown): value is GjcTeamWorkerMemoryGuardReplacement;
+export declare function isCanonicalGjcTeamWorkerMemoryGuardPidProbe(value: unknown): value is GjcTeamWorkerMemoryGuardPidProbe;
+export declare function isCanonicalGjcTeamWorkerMemoryGuardLedger(value: unknown): value is GjcTeamWorkerMemoryGuardLedger;
+export declare function createInitialGjcTeamWorkerMemoryGuardLedger(input: {
+    workerId: string;
+    platform: string;
+    now: string;
+    retryLimit?: number;
+}): GjcTeamWorkerMemoryGuardLedger;
+export declare function selectGjcTeamWorkerMemoryGuardCandidate(candidates: readonly GjcTeamWorkerMemoryGuardSelectionCandidate[]): GjcTeamWorkerMemoryGuardSelection | undefined;
+export type TeamWorkerMemoryGuardAction = "advisory" | "replace" | "blocked";
+export type TeamWorkerMemoryGuardResult = "noop" | "scheduled" | "succeeded" | "failed" | "blocked";
+export interface TeamWorkerMemoryGuardLedgerEntry {
+    schema_version: 1;
+    recorded_at: string;
+    incident_id: string;
+    team_name: string;
+    worker_id: string;
+    task_id: string;
+    claim_token: string;
+    attempt: number;
+    platform: NodeJS.Platform;
+    action: TeamWorkerMemoryGuardAction;
+    result: TeamWorkerMemoryGuardResult;
+    reason: string;
+}
+export declare function isCanonicalTeamWorkerMemoryGuardLedgerEntry(value: unknown): value is TeamWorkerMemoryGuardLedgerEntry;
+export declare function teamWorkerMemoryGuardDir(workerDirPath: string): string;
+export declare function teamWorkerMemoryGuardLedgerPath(workerDirPath: string): string;
+export declare function canMutateTeamWorkerMemoryGuard(platform: NodeJS.Platform): boolean;
+export declare function advisoryReasonForTeamWorkerMemoryGuard(platform: NodeJS.Platform): string | undefined;
+export declare function appendTeamWorkerMemoryGuardLedgerEntry(workerDirPath: string, entry: TeamWorkerMemoryGuardLedgerEntry, options?: StateWriterOptions): Promise<string>;
+export declare function readTeamWorkerMemoryGuardLedger(workerDirPath: string): Promise<TeamWorkerMemoryGuardLedgerEntry[]>;
+export declare function nextTeamWorkerMemoryGuardAttempt(entries: readonly TeamWorkerMemoryGuardLedgerEntry[], incidentId: string): number;

package/dist/types/gjc-runtime/tmux-owner-isolation.d.ts

@@ -267,6 +267,13 @@ export interface LifecyclePaths {
     journalFile: string;
 }
 export declare function lifecyclePaths(stateDir: string, sessionId: string, generation: string): LifecyclePaths;
+export interface MemoryGuardClaimPaths {
+    root: string;
+    databaseFile: string;
+    walFile: string;
+    shmFile: string;
+}
+export declare function memoryGuardClaimPaths(stateDir: string, sessionId: string): MemoryGuardClaimPaths;
 export declare function replaceOwnerGeneration(stateDir: string, sessionId: string, generation?: string, expectedBaseline?: OwnerGenerationBaseline): Promise<string>;
 export type OwnerGenerationBaseline = {
     state: "absent";

package/dist/types/gjc-runtime/ultragoal-receipt-freshness.d.ts

@@ -39,6 +39,14 @@ export declare function computeUltragoalPlanGeneration(input: {
     basis: UltragoalCompletionVerification["basis"];
 };
 export declare function findLedgerReceiptEvent(ledger: readonly UltragoalLedgerEvent[], receipt: UltragoalCompletionVerification): UltragoalLedgerEvent | null;
+/**
+ * A final-aggregate receipt whose recorded ledger checkpoint quality gate is
+ * missing a clean `criticReview` OKAY can never satisfy the completion guard,
+ * yet is not "stale" under {@link validateReceiptFreshBase}. Detect it so an
+ * identical-evidence complete replay can re-verify and re-mint with a
+ * corrected gate instead of no-opping into a permanently blocked run.
+ */
+export declare function finalAggregateReceiptMissingCriticOkay(ledger: readonly UltragoalLedgerEvent[], receipt: UltragoalCompletionVerification): boolean;
 export declare function validateReceiptFreshBase(input: {
     plan: UltragoalPlan;
     ledger: readonly UltragoalLedgerEvent[];

package/dist/types/gjc-runtime/workflow-manifest.d.ts

@@ -1,6 +1,7 @@
 /**
  * TypeScript is the authoritative source of truth for GJC workflow manifests.
- * Keep the checked-in JSON projection synchronized manually with this module.
+ * Any JSON manifest projection is derived from this module and must never be
+ * hand-edited.
  */
 import { type CanonicalGjcWorkflowSkill } from "../skill-state/canonical-skills";
 export interface WorkflowState {
@@ -17,9 +18,7 @@ export interface WorkflowVerb {
     name: string;
     planned?: boolean;
     /** Invocation surface that exposes this verb in the real CLI parser. */
-    surface?: "state-action" | "command-positional" | "command-flag" | "draft-action";
-    /** Legacy surface retained for callers that have not migrated to normal typed commands. */
-    compatibilityOnly?: boolean;
+    surface?: "state-action" | "command-positional" | "command-flag";
 }
 export interface TypedArgSpec {
     name: string;
@@ -27,7 +26,6 @@ export interface TypedArgSpec {
     enumValues?: string[];
     required?: boolean;
     appliesToVerbs?: string[];
-    compatibilityOnly?: boolean;
     planned?: boolean;
 }
 export interface RetentionPolicy {

package/dist/types/internal-urls/local-root-gc.d.ts

@@ -0,0 +1,2 @@
+import type { GcStoreAdapter } from "../gjc-runtime/gc-runtime";
+export declare const localRootsGcAdapter: GcStoreAdapter;

package/dist/types/main.d.ts

@@ -96,7 +96,7 @@ export declare const BARE_RESUME_INTERACTIVE_ERROR = "--resume requires an inter
 export declare function resolveManagedAgentDirForScope(_cwd: string): string;
 export declare const BARE_RESUME_OPEN_ERROR = "Could not open the selected session. Use --resume <id>.";
 export declare function runInteractiveMode(session: AgentSession, version: string, changelogMarkdown: string | undefined, notifs: (InteractiveModeNotify | null)[], startupUpdate: StartupUpdateOrchestrator, initialMessages: string[], setExtensionUIContext: (uiContext: ExtensionUIContext, hasUI: boolean) => void, lspServers: LspStartupServerInfo[] | undefined, mcpManager: MCPManager | undefined, eventBus?: EventBus, initialMessage?: string, initialImages?: ImageContent[], createInteractiveMode?: CreateInteractiveMode, resumeAction?: "continue-tail" | "open-idle"): Promise<void>;
-declare function getChangelogForDisplay(parsed: Args): Promise<string | undefined>;
+export declare function getChangelogForDisplay(parsed: Args): Promise<string | undefined>;
 export declare function createSessionManager(parsed: Args, cwd: string, activeSettings?: Settings): Promise<SessionManager | undefined>;
 /**
  * Research-mode (RLM) preset hook. Lets `gjc rlm` augment the session options

package/dist/types/memories/index.d.ts

@@ -25,4 +25,6 @@ export declare function clearMemoryData(agentDir: string, cwd: string): Promise<
  * Force-enqueue global consolidation maintenance work.
  */
 export declare function enqueueMemoryConsolidation(agentDir: string, cwd: string, sourceUpdatedAt?: number): void;
+/** Secret scrubbing applied to every phase-2 consolidation output. Test seam. */
+export declare function redactMemorySecretsForTesting(input: string): string;
 export declare function getMemoryRoot(agentDir: string, cwd: string): string;

package/dist/types/modes/acp/acp-agent.d.ts

@@ -195,6 +195,14 @@ export declare function acpPromptPayload(blocks: PromptRequest["prompt"]): {
         mimeType: string;
     }>;
 };
+/**
+ * `AcpSdkAdapterError.code` is an internal string, but the SDK only derives a
+ * JSON-RPC code from a `RequestError`. Everything else collapses to an opaque
+ * `-32603 Internal error`, which hides the reason and defeats client-side
+ * recovery (an ACP client cannot see that it must authenticate). Map the codes
+ * that have a defined ACP/JSON-RPC counterpart onto a real `RequestError`.
+ */
+export declare function acpRequestFailure(error: unknown): unknown;
 /** Registers a permission provider only when the ACP client requires prompts. */
 export declare function acpProviderRegistrations(capabilities: ClientCapabilities | undefined, env?: NodeJS.ProcessEnv): AcpProviderRegistration[];
 /** Maps ACP permission handling to the session's canonical SDK policy. */

package/dist/types/modes/components/assistant-message.d.ts

@@ -10,11 +10,13 @@ export declare class AssistantMessageComponent extends Container {
     #private;
     private hideThinkingBlock;
     private readonly onImageUpdate?;
-    constructor(message?: AssistantMessage, hideThinkingBlock?: boolean, onImageUpdate?: (() => void) | undefined, viewportAnchorId?: string);
+    private readonly onVisibleMutation?;
+    constructor(message?: AssistantMessage, hideThinkingBlock?: boolean, onImageUpdate?: (() => void) | undefined, viewportAnchorId?: string, onVisibleMutation?: (() => void) | undefined);
     invalidate(): void;
     setHideThinkingBlock(hide: boolean): void;
     setToolResultImages(toolCallId: string, images: ImageContent[]): void;
     setUsageInfo(usage: Usage): void;
     updateContent(message: AssistantMessage, options?: AssistantMessageUpdateOptions): void;
+    dispose(): void;
 }
 export {};