@gajae-code/coding-agent 0.11.9 → 0.11.11

package/CHANGELOG.md

@@ -2,21 +2,76 @@
 
 ## [Unreleased]
 
+## [0.11.11] - 2026-07-26
+
+### Added
+
+- Added cross-platform memory-pressure observability with effective host/cgroup limits, configurable GC and restart advisory thresholds, typed Linux process probes, and a Windows Job Object native probe; unsupported lifecycle actions remain advisory-only.
+- Ralplan consensus planning now enforces a finite planner/revision iteration budget at the native write path (default 5, configurable via `gjc.ralplan.maxIterations`). Opening another planner/revision pass past the cap fails closed with exit code 3 and an operator-visible `PLANNING-STUCK` marker instead of silent unbounded re-review; `final`/post-interview escalation remains allowed without auto-implementation. The cap also floors against on-disk `stage-*-{planner,revision}.md` artifacts so a wiped, truncated, or malformed `index.jsonl` cannot fail open after prior openers (#3165).
+- Added `grok-45-eco`, `grok-45-medium`, and `grok-45-pro` built-in xAI presets for `grok-4.5`; every role stays within the model's `high` reasoning cap, while the `xai` provider recommendation remains `grok-medium` to preserve existing defaults (#3177).
+- JetBrains Air ACP sessions now preserve final answers across fast prompt completion, expose tool/retry/goal/notices and session title updates, apply Air's legacy `session/set_model` preset changes through the canonical session configuration path, accept client-supplied stdio/HTTP/SSE MCP servers, reject unsupported additional directories, and reject unavailable model presets before provider dispatch.
+- Mouse support can now be enabled inside tmux and screen with `mouse.enabled: true`, so the wheel scrolls GJC's virtual session viewport before multiplexer scrollback. Dragging highlights rendered terminal text and copies it to the system clipboard on release while GJC owns mouse input. Mouse support remains disabled by default to preserve native terminal or tmux scrollback and selection behavior.
+- macOS queue controls are now discoverable and platform-native throughout the composer, status/help surfaces, and queue editor: Option+Q queues while busy, Option+Up/Down selects queued messages, and the queue pane documents edit/remove/reorder controls. Added Windows-to-macOS default-shortcut parity coverage and terminal guidance for Option-as-Meta, enhanced protocols, and Control-key remaps.
+
+### Changed
+
+- Telegram per-tool activity is now opt-in and remains durably controllable with `/toolactivity on|off` or the Notifications preferences UI; disabling it suppresses tool start/completion success and error bubbles without hiding assistant, ask, or session notifications.
+- Model preset landing now shows explicit `Enter: apply` and `d: set as default` hints; pressing `d` applies the highlighted profile as the default while Enter keeps the session-only apply path (#3161).
+
+### Fixed
+- The #3216 win32 cleanup-producer regression no longer hardcodes divergent directory size `4096`; it injects `nativeRoot.size + 1` so the test stays hermetic when Linux directory size is already `4096` (post-merge Dev CI red on `79f0de870`).
+
+- The synchronous `local://` resolver now accepts a `cleanup_pending` legacy-migration marker instead of rejecting it as unsafe. The async gate already treats that state as settled — entries are installed and content-verified, and only retirement of the legacy source is outstanding — so a managed session whose migration ended in `cleanup_pending` previously failed closed with "Unsafe local:// migration marker" on every `local://` read even though `initializeLocalRoot()` had succeeded. Both marker checks now share one settled-state definition; unrecognized marker values are still rejected. Follow-up to #3080; the asymmetry has been reachable since #2797.
+- `/new`, `fork()`, handoff, `/resume`, and branch/tree-jump transitions privately prepare successor identity/transcript/artifacts and immutable managed migration authority, run verified managed `local://` readiness as the last fallible action, then synchronously adopt and publish — so no public manager/agent getter sees the successor before readiness. Pre-commit failure exact-discards staged state; cleanup authority survives dispose/shutdown; handoff/post-commit faults use committed-degraded contracts. Managed staging renames are sorted for deterministic partial-install rollback. Closes the residual #3080 manager-identity window (#3138; builds on #2797 / #2925).
+- Workflow-state readers and handoff paths no longer write corrupt-state warnings straight to `process.stderr`, which painted raw bytes over the live TUI composer during interactive sessions. Warnings now route through the TUI-safe file logger while `gjc state read`/`status`/`handoff` still surface them on the structured command-result `stderr`, so corrupt state stays distinguishable from absent state for CLI/automation (#3002).
+- Managed model fallback now gives each exhausted entry at most one retry with a rotated credential before advancing, so repeated quota failures cannot consume the attempts reserved for downstream models.
+- Windows managed-session artifact migration now uses the native directory-tree root for retained cleanup identity both when producing `cleanup_pending` records and when validating them, avoiding Bun's zero-valued directory `lstat` metadata and false `durability_failed` results while preserving fail-closed authority checks (#2913).
+- Legacy-session artifact migration now retries transient EINTR interruptions during no-replace artifact publishes and classifies exhausted interruptions as pre-mutation failures instead of surfacing `durability_failed` (#3077).
+- Alibaba Token Plan first-event timeouts also match the exported lazy-stream watchdog text, preserve sticky fallback selection across later turns, avoid same-candidate auto-compaction replay, and reset attempt/overflow budgets only when an accepted queued steering/follow-up successor starts (#3026).
+- Legacy auto-compaction now caps provider `Retry-After` delays at `retry.maxDelayMs` instead of sleeping for an unbounded server hint (#3156).
+- Queued steering and follow-up successors now reset predecessor fallback attempt budgets and overflow-maintenance counters only after `continue()` accepts the queued turn, without clearing the sticky fallback cursor.
+- Questions about `ultragoal` behavior now stay on the direct-answer path instead of being misclassified as requests to start the durable workflow.
+- Workflow intent routing now requires a leading `/skill:ultragoal` for slash-command escalation and recognizes Korean object-particle requests such as `ultragoal을 사용해줘` without routing questions that merely mention the command.
+- Aligned the startup GJC Forge splash border with the composer trailing gutter, including the one-row constrained fallback.
+- `gjc resume` and delete no longer pay a durable (fsync-backed) lock acquisition for managed session tombstones that have nothing left to reconcile; a scope with many accumulated already-completed tombstones opens noticeably faster (#3067).
+- `gjc deep-interview apply-round-result` no longer fails with `DI_INTERNAL_ERROR` on every call, which made the deep-interview workflow unable to score a single round. Three defects stacked: the Round-0 topology gate is recorded as a permanently unscorable `answered` shell (`--round` must be >= 1) yet counted toward the "earlier rounds must be scored" precondition, deadlocking every later round; the round-result decoder materializes omitted optional keys as `undefined`, which canonical JSON rejected outright, so any request omitting `targeting`/`ontology`/`bookkeeping` could not be digested; and `scoreToUnits` tested the raw float product, so ordinary scores whose scaling misses the integer grid (`0.69 * 10_000` is `6900.000000000001`) were rejected as non-integral 1e-4 units. Round-0 gate shells are now excluded from the ordering precondition, canonical JSON drops `undefined` object properties like `JSON.stringify` (array elements and the top-level value stay strict), and 1e-4 unit conversion is decided from the shortest round-trip decimal so genuinely off-grid precision such as `0.00005` and `0.05000000000000001` is still rejected.
+- Task output-limit environment overrides now accept only complete positive decimal safe integers; malformed, fractional, exponent-form, whitespace-padded, and precision-losing values fall back to the documented defaults instead of being partially parsed (#3175).
+- Task output-limit environment overrides now honor values loaded from agent, config-root, and home dotenv files through the shared utils env loader while retaining strict positive safe-integer validation and canonical GJC-first alias precedence.
+- `--thinking` now advertises the supported Effort levels and fails closed with a usage error for invalid, missing, empty, or flag-adjacent values, rather than silently ignoring a token or consuming another flag.
+- MCP servers configured with a large `timeout` no longer widen the startup hang window for every consumer. The long startup ceiling now applies only to ACP lifecycle launches that supply their own MCP servers, derived from the session readiness deadline with reserved headroom; ordinary CLI/SDK `mcpConfigPath`, project, user, and plugin-bundle consumers keep the short default. An ACP launch that reaches the readiness cutoff before MCP startup now fails fast as a pending startup instead of silently falling back to the ordinary ceiling.
+
+## [0.11.10] - 2026-07-25
+### Changed
+
+- The built-in `claude-opus`, `opus-codex`, and `fable-opus-codex` presets now use `anthropic/claude-opus-5` instead of `anthropic/claude-opus-4-8`, with effort suffixes preserved; `packages/ai/src/models.json` was regenerated so `anthropic/claude-opus-5` resolves; non-opus roles (`anthropic/claude-sonnet-5` executor/planner overrides, codex and fable roles) are unchanged.
+
 ## [0.11.9] - 2026-07-24
 
 ### Fixed
 
+- Restricted role-agent `bash` now accepts literal mid-word tildes, so git revision syntax such as `git diff HEAD~1` no longer has to be quoted. Bash performs tilde expansion only at the start of a word, so word-initial forms (`~`, `~/path`, `~user`) remain blocked.
+- Restricted role-agent `bash` now rejects unquoted tildes at every bash expansion position inside assignment words, including the compound `name+=value` form, so `A=~`, `A+=~`, `foo=~root/bar`, `A=x:~`, `A+=x:~`, and repeated colon segments such as `a=x:~:y:~` fail closed. Tildes bash does not expand — mid-word git revisions (`HEAD~1`), non-assignment words (`--opt=~`, `1abc=~`, `a++=~`, `a+b=~`), and quoted forms — remain allowed (#3117).
+- Read-only role agents (`architect`, `planner`, `critic`) now receive the `irc` coordination tool and a read-only git prefix set (`status`, `log`, `show`, `diff`, `blame`, `rev-parse`, `ls-files`) in restricted bash; mutating git and arbitrary shell stay blocked. `irc` also stays in the initial active tool set for subagents whenever the parent runtime reports IRC availability, instead of costing a discovery round-trip (#3109).
+- The restricted-bash workflow guard now allows `/dev/null` redirects (so `cmd 2>/dev/null` is no longer treated as a repository write during planning phases) while keeping `/dev/stdout`, `/dev/stderr`, and `/dev/fd/<n>` blocked, failing closed on `exec` redirections, and recognizing `>|`, `>&path`, `<>`, path-qualified writers, and every `dd of=` operand. Hook-seeded deep-interview state is now gated on `isNativeDeepInterviewV1` and seeded as a native v1 envelope, so typed operations no longer fail with `DI_STATE_SCHEMA_INVALID` and run the interview manually (#3127).
+- The vendored `insane-search` engine no longer treats a `429` as terminal: rate-limited probe and grid candidates back off (linear escalation honoring `Retry-After`, hard-capped at 30s) and continue through grid diversity and browser fallback. The backoff base from `INSANE_RATE_LIMIT_BACKOFF_S` is validated and clamped, so non-numeric, `NaN`, infinite, negative, or huge values can no longer raise, hang, or defeat a per-attempt deadline, and sleeps stay short enough to honor cancellation (#3131).
+- ACP sessions now apply execution permission decisions to eval calls and to tools invoked from JavaScript or Python eval contexts, while non-ACP session behavior remains unchanged.
+- Interactive prompt cancellation now reaches API-key preflight through `ModelRegistry`, allowing aborted submissions to clear immediately even while a shared credential-usage request continues in the background.
 - Alibaba Token Plan canonical first-event timeouts now surface without session retry/fallback replay and are not internally retried by auto-compaction, preventing repeated provider usage (#3026).
+- Delegated-task and subagent status surfaces now distinguish provider recovery from normal running, identify first-event versus idle-stream stalls, show retry budget and provider-progress age, and aggregate concurrent degradation by provider (#3071).
+- Telegram notification daemon ownership hardening (#3048): Bot API outcomes now share one honest classifier so both the initiating `429` response and cooldown-suppressed calls settle retryably instead of being lost or falsely rejected, including selected acknowledgements; exclusive operator work is registered before its callback can throw; notification health degrades corrupt daemon-state JSON to a warning; root-registration ownership tokens propagate through injected and built-in ensure, rollback, reconciliation, teardown, and abandoned-startup cleanup seams, with token-bearing rows refusing tokenless cleanup while genuinely legacy rows retain root-match behavior; and initial daemon readiness is published only after the matching heartbeat sidecar rename is durable, so no waiter can attach during the proof window.
+- `/new`, `fork()`, handoff, `/resume`, and branch/tree-jump transitions now complete verified managed `local://` legacy-root migration for the successor session identity *before* that identity is published to the agent, the workflow-gate emitter, or extension hooks, so no observer can resolve `local://` against an ungated root across the gate's `await` boundary. Matches cold-start `createAgentSession()` (#2797) and extends `/resume` (#2925). Sending a prompt right after `/new` no longer fails with "local:// legacy migration must complete before path resolution".
 
 - Telegram notification topics now fence malformed successful `createForumTopic` responses per session endpoint, preventing repeated ambiguous topic creation while keeping explicit Bot API failures retryable.
 - Windows managed-session resume no longer reports `durability_failed` when Bun rejects `fsync` on the read-only descriptor used to revalidate an existing canonical binding; Windows now uses an owner-writable descriptor for that durability fence while retaining no-follow and pre/post identity/content checks.
-- SDK daemon CLI end-to-end tests now drain spawned child stdout and stderr concurrently with process exit, preventing CI pipe teardown races from replacing the product exit contract with SIGPIPE status 141 (#3024).
+- SDK daemon CLI end-to-end tests now capture spawned child stdout and stderr through temporary files instead of pipes, removing the CI pipe teardown race that replaced the product exit contract with SIGPIPE status 141 (#3024).
 - Interactive launch bootstrap is now suppressed for parser-accepted `--print=`, `--help=`, and `--version=` equals forms, keeping non-interactive output free of the warming-workspace preamble on TTYs.
 - Managed legacy-session artifact migration now accepts up to 50,000 files, processes copy work in bounded batches, and reports capacity exhaustion separately from unsafe artifact topology (#2935).
 - Kimi Code first-event timeouts now surface after the provider's continuous first-event wait instead of replaying the full request from zero.
 
 - Rejected subagent schema payloads now retain their complete structured data in canonical output artifacts; inline results remain bounded while `agent://` output stays lossless (#2894).
 - Managed legacy-session artifact migration now validates Windows directory roots from the native tree snapshot, tolerates only lazy metadata on plain Windows directories, and replays both clean and cleanup-pending detaches while retaining fail-closed receipt validation. Canonical binding durability sync uses a writable no-follow handle on Windows NTFS stacks that reject `FlushFileBuffers` on read-only handles (#3015, #2913).
+- A single managed session tombstone that fails to reconcile (e.g. an artifact directory identity mismatch) no longer blocks resume or delete of every other session in the same managed scope; the failure is isolated to that tombstone and logged, unless it belongs to the session currently being opened, which still fails closed.
+
 ## [0.11.8] - 2026-07-23
 ### Added
 

package/dist/types/cli.d.ts

@@ -7,6 +7,12 @@ import "@gajae-code/utils/postmortem";
 import { Command, type CommandEntry } from "@gajae-code/utils/cli";
 export declare const commands: CommandEntry[];
 export declare function interactiveBootstrapText(argv: readonly string[], stdinIsTTY?: boolean, stdoutIsTTY?: boolean): string | undefined;
+type MemoryGuardNativeSmokeLoad = () => Record<string, unknown>;
+export declare function isMemoryGuardNativeSmokeFastPath(argv: readonly string[]): boolean;
+export declare function runMemoryGuardNativeSmokeFastPath(options?: {
+    loadNative?: MemoryGuardNativeSmokeLoad;
+    writeStdout?: (text: string) => void;
+}): void;
 export declare class RootHelpCommand extends Command {
     static description: string;
     static hidden: boolean;
@@ -99,7 +105,7 @@ export declare class RootHelpCommand extends Command {
         };
         thinking: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
             description: string;
-            options: string[];
+            options: import("@gajae-code/ai").Effort[];
         };
         hook: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
             description: string;
@@ -142,3 +148,4 @@ export declare function normalizeResumeAlias(argv: readonly string[]): string[];
 export declare function routeRootArgv(argv: readonly string[]): string[];
 /** Run the CLI with the given argv (no `process.argv` prefix). */
 export declare function runCli(argv: string[]): Promise<void>;
+export {};

package/dist/types/config/model-profile-activation.d.ts

@@ -76,6 +76,7 @@ export interface MaterializeModelProfileAssignmentsOptions {
 export declare function materializeActiveModelProfileAssignment(options: MaterializeModelProfileAssignmentOptions): boolean;
 export declare function materializeActiveModelProfileAssignments(options: MaterializeModelProfileAssignmentsOptions): boolean;
 export declare class ModelProfileCredentialError extends Error {
+    readonly code = "authentication_failed";
     readonly profileLabel: string;
     readonly providers: readonly string[];
     constructor(profileLabel: string, providers: readonly string[]);

package/dist/types/config/model-profile-contract.d.ts

@@ -5,6 +5,7 @@ export interface ModelProfileCatalogItem {
     id: string;
     displayName: string;
     source: "builtin" | "configured";
+    available?: boolean;
 }
 export interface UnknownModelProfileDetails {
     requestedProfile: string;
@@ -31,6 +32,7 @@ export declare class ModelProfileRegistryError extends Error {
 export declare function resolveModelProfileName(profileName: string, profiles: ReadonlyMap<string, unknown>): string;
 export declare function validateModelProfileName(profileName: string, profiles: ReadonlyMap<string, unknown>, registryError?: unknown): string;
 export declare function projectModelProfileCatalog(profiles: ReadonlyMap<string, ModelProfileDefinition>, registryError?: unknown): ModelProfileCatalogItem[];
+export declare function isModelProfileProviderAvailable(profile: ModelProfileDefinition, authenticatedProviders: ReadonlySet<string>): boolean;
 export declare function isModelProfileError(value: unknown): value is {
     code: ModelProfileErrorCode;
     message: string;

package/dist/types/config/model-registry.d.ts

@@ -387,12 +387,14 @@ export declare class ModelRegistry {
      */
     getApiKey(model: Model<Api>, sessionId?: string, options?: {
         credentialSelector?: AuthCredentialSelector;
+        signal?: AbortSignal;
     }): Promise<string | undefined>;
     /**
      * Get API key for a provider (e.g., "openai").
      */
     getApiKeyForProvider(provider: string, sessionId?: string, baseUrl?: string, options?: {
         credentialSelector?: AuthCredentialSelector;
+        signal?: AbortSignal;
     }): Promise<string | undefined>;
     /**
      * Check if a model is using OAuth credentials (subscription).

package/dist/types/config/settings-schema.d.ts

@@ -180,7 +180,7 @@ export declare const SETTINGS_SCHEMA: {
     };
     readonly "notifications.telegram.toolActivity.enabled": {
         readonly type: "boolean";
-        readonly default: true;
+        readonly default: false;
         readonly ui: {
             readonly tab: "notifications";
             readonly label: "Telegram Tool Activity";
@@ -423,6 +423,11 @@ export declare const SETTINGS_SCHEMA: {
         readonly default: 0.05;
         readonly validate: (value: number) => boolean;
     };
+    readonly "gjc.ralplan.maxIterations": {
+        readonly type: "number";
+        readonly default: 5;
+        readonly validate: (value: number) => boolean;
+    };
     readonly "theme.dark": {
         readonly type: "string";
         readonly default: "red-claw";
@@ -1461,7 +1466,7 @@ export declare const SETTINGS_SCHEMA: {
         readonly ui: {
             readonly tab: "interaction";
             readonly label: "Mouse Support";
-            readonly description: "Enable SGR mouse wheel scrolling and overlay row selection. Disabled in tmux and screen.";
+            readonly description: "Enable GJC session scrolling, drag-to-copy text selection, and overlay row selection with the mouse. Disabled by default to preserve native terminal or tmux scrollback and selection.";
         };
     };
     readonly steeringMode: {
@@ -3103,6 +3108,45 @@ export declare const SETTINGS_SCHEMA: {
             readonly description: "How often the resource GC sweeps browser tabs and stale screenshot directories.";
         };
     };
+    readonly "memoryGuard.enabled": {
+        readonly type: "boolean";
+        readonly default: false;
+    };
+    readonly "memoryGuard.checkIntervalMs": {
+        readonly type: "number";
+        readonly default: 30000;
+        readonly validate: (value: number) => boolean;
+    };
+    readonly "memoryGuard.gcThresholdPercent": {
+        readonly type: "number";
+        readonly default: 70;
+        readonly validate: (value: number) => boolean;
+    };
+    readonly "memoryGuard.restartThresholdPercent": {
+        readonly type: "number";
+        readonly default: 85;
+        readonly validate: (value: number) => boolean;
+    };
+    readonly "memoryGuard.restartThresholdWindowMs": {
+        readonly type: "number";
+        readonly default: 90000;
+        readonly validate: (value: number) => boolean;
+    };
+    readonly "memoryGuard.cooldownMs": {
+        readonly type: "number";
+        readonly default: 600000;
+        readonly validate: (value: number) => boolean;
+    };
+    readonly "memoryGuard.parentReserveMb": {
+        readonly type: "number";
+        readonly default: 1024;
+        readonly validate: (value: number) => boolean;
+    };
+    readonly "memoryGuard.policyLimitMb": {
+        readonly type: "number";
+        readonly default: 0;
+        readonly validate: (value: number) => boolean;
+    };
     readonly "computer.enabled": {
         readonly type: "boolean";
         readonly default: false;
@@ -4227,6 +4271,16 @@ export interface ShellMinimizerSettings {
     except: string[];
     maxCaptureBytes: number;
 }
+export interface MemoryGuardSettings {
+    enabled: boolean;
+    checkIntervalMs: number;
+    gcThresholdPercent: number;
+    restartThresholdPercent: number;
+    restartThresholdWindowMs: number;
+    cooldownMs: number;
+    parentReserveMb: number;
+    policyLimitMb: number;
+}
 export interface NotificationsSettings {
     enabled: boolean;
     telegram: {
@@ -4284,6 +4338,7 @@ export interface GroupTypeMap {
     statusLine: StatusLineSettings;
     thinkingBudgets: ThinkingBudgetsSettings;
     stt: SttSettings;
+    memoryGuard: MemoryGuardSettings;
     modelRoles: Record<string, ModelSelectorValue>;
     modelTags: ModelTagsSettings;
     cycleOrder: string[];

package/dist/types/config/settings.d.ts

@@ -89,6 +89,7 @@ export declare class Settings implements NotificationSettingsReader {
     has(path: SettingPath): boolean;
     /** Diagnostics from schema reconciliation during the most recent load. */
     getSchemaReport(): SettingsSchemaReport;
+    onChanged(listener: (path: SettingPath) => void): () => void;
     /**
      * Set a setting value (sync).
      * Updates global settings and reserves its background persistence slot before

package/dist/types/extensibility/extensions/types.d.ts

@@ -186,6 +186,25 @@ export interface ExtensionTranscriptEntry {
     textSummary: string;
     ts: string;
     body?: string;
+    /**
+     * Durable, image-free message blocks used by rich transcript consumers such
+     * as ACP replay. Binary image payloads intentionally remain unavailable.
+     */
+    content?: Array<{
+        type: "text";
+        text: string;
+    } | {
+        type: "thinking";
+        thinking: string;
+    } | {
+        type: "toolCall";
+        id: string;
+        name: string;
+        arguments: unknown;
+    }>;
+    toolCallId?: string;
+    toolName?: string;
+    isError?: boolean;
 }
 export interface ContextUsage {
     /** Context tokens, or null if unknown (e.g. right after compaction, before next LLM response). */
@@ -255,6 +274,7 @@ export interface ExtensionContext {
         model: Model;
         thinkingLevel: ThinkingLevel | undefined;
     } | undefined>;
+    setModelProfile?(name: string): Promise<boolean>;
     cycleThinkingLevel(): ThinkingLevel | undefined;
     setQueueMode(kind: "steering" | "follow_up" | "interrupt", mode: unknown): boolean;
     getSkillState(): unknown;
@@ -999,6 +1019,7 @@ export interface ExtensionContextActions {
         model: Model;
         thinkingLevel: ThinkingLevel | undefined;
     } | undefined>;
+    setModelProfile?: (name: string) => Promise<boolean>;
     cycleThinkingLevel?: () => ThinkingLevel | undefined;
     setQueueMode?: (kind: "steering" | "follow_up" | "interrupt", mode: unknown) => boolean;
     getSkillState?: () => unknown;

package/dist/types/gjc-runtime/linux-proc.d.ts

@@ -1,29 +1,37 @@
 /**
- * Shared helpers for reading Linux `/proc/<pid>/stat` process start time.
+ * Shared helpers for reading Linux `/proc/<pid>/stat` process identity fields.
  *
  * The `comm` field (field 2, wrapped in parentheses) may itself contain spaces
  * and parentheses, so the only robust anchor is the *last* `)` in the stat
  * string. Field 22 (the process start time in clock ticks since boot) is the
- * 20th whitespace-separated token after that closing paren (index 19).
- *
- * Every caller previously parsed this format independently, with subtly
- * different failure handling. This module fails closed: any malformed input
- * (missing `)`, non-numeric field 22, unreadable `/proc` file, non-Linux
- * platform) yields `null` rather than an inconsistent sentinel.
- */
-/**
- * Parse field 22 (process start time, in clock ticks since boot) from one
- * `/proc/<pid>/stat` record. Returns the raw numeric token, or `null` when the
- * record shape is malformed or field 22 is absent/non-numeric.
+ * 20th whitespace-separated token after that closing paren (index 19). Field 7
+ * (`tty_nr`) is the 5th token after the closing paren (index 4).
  */
+export interface LinuxProcStatIdentity {
+    startTime: string;
+    ttyDevice: string;
+}
+export type LinuxProcPidProbeResult = ({
+    kind: "live";
+} & LinuxProcStatIdentity) | {
+    kind: "absent";
+} | {
+    kind: "unverifiable";
+    reason: "unsupported_platform" | "invalid_pid" | "permission_denied" | "read_error" | "malformed_stat";
+};
+/** Parse field 22 (start time) from a `/proc/<pid>/stat` record. */
 export declare function parseLinuxProcStartTime(stat: string | null | undefined): string | null;
+/** Parse field 7 (`tty_nr`) from a `/proc/<pid>/stat` record. */
+export declare function parseLinuxProcTtyDevice(stat: string | null | undefined): string | null;
+export declare function probeLinuxProcPidSync(pid: number): LinuxProcPidProbeResult;
+export declare function probeLinuxProcPid(pid: number): Promise<LinuxProcPidProbeResult>;
 /**
  * Read `/proc/<pid>/stat` synchronously and return the parsed start time.
- * Returns `null` on non-Linux platforms, unreadable files, or malformed input.
+ * Returns `null` when the probe is absent or unverifiable.
  */
 export declare function readLinuxProcStartTimeSync(pid: number): string | null;
 /**
  * Read `/proc/<pid>/stat` asynchronously and return the parsed start time.
- * Returns `null` on non-Linux platforms, unreadable files, or malformed input.
+ * Returns `null` when the probe is absent or unverifiable.
  */
 export declare function readLinuxProcStartTime(pid: number): Promise<string | null>;

package/dist/types/gjc-runtime/ralplan-runtime.d.ts

@@ -1,3 +1,4 @@
+import { type RalplanIndexRow } from "./ledger-event-renderer";
 /**
  * Native implementation of `gjc ralplan`.
  *
@@ -22,5 +23,64 @@ export interface RalplanCommandResult {
     stdout?: string;
     stderr?: string;
 }
+/** Default consensus iterations (planner + revision openers) per run. Matches SKILL.md re-review cap. */
+export declare const RALPLAN_DEFAULT_MAX_ITERATIONS = 5;
+/** Inclusive upper bound for `gjc.ralplan.maxIterations` settings overrides. */
+export declare const RALPLAN_MAX_ITERATIONS_LIMIT = 20;
+/** Operator-visible stuck signal for headless/CI orchestration (#3165). */
+export declare const PLANNING_STUCK_MARKER = "PLANNING-STUCK";
+export type RalplanIterationCapDecision = {
+    allowed: true;
+    currentIterations: number;
+    projectedIterations: number;
+    maxIterations: number;
+} | {
+    allowed: false;
+    currentIterations: number;
+    projectedIterations: number;
+    maxIterations: number;
+    reason: string;
+};
+/**
+ * Pure consensus-iteration budget gate (#3165).
+ *
+ * A `planner` or `revision` write opens a new iteration (same definition as
+ * `summarizeRalplanIndex`). Other stages never open iterations and are always
+ * allowed by this gate — including `final` after the cap is already reached.
+ *
+ * `iterationFloor` raises the observed opener count when on-disk evidence or a
+ * recovered ledger is higher than the parsed index (fail-closed vs wipe/truncate).
+ */
+export declare function evaluateRalplanIterationCap(input: {
+    rows: readonly RalplanIndexRow[];
+    stage: string;
+    maxIterations?: number;
+    /** Minimum opener count (e.g. on-disk stage-*-{planner,revision}.md). */
+    iterationFloor?: number;
+}): RalplanIterationCapDecision;
+/**
+ * Count on-disk planner/revision stage artifacts for a run. Used as a floor when
+ * `index.jsonl` is missing, empty, truncated, or otherwise under-counts openers.
+ */
+export declare function countRalplanOnDiskOpeners(cwd: string, sessionId: string, runId: string): Promise<number>;
+/**
+ * Load index rows for cap enforcement. Unlike HUD reads, returns structural
+ * signals so callers can fail closed when the ledger is empty/malformed while
+ * opener artifacts already exist on disk.
+ */
+export declare function loadRalplanIndexForCap(cwd: string, sessionId: string, runId: string): Promise<{
+    rows: RalplanIndexRow[];
+    indexPresent: boolean;
+    parseableLines: number;
+    rawLineCount: number;
+}>;
+/**
+ * Resolve ralplan consensus iteration cap. Project `./.gjc/settings.json` overrides
+ * user settings, else default 5.
+ */
+export declare function resolveRalplanMaxIterations(cwd: string): Promise<{
+    maxIterations: number;
+    source: string;
+}>;
 export declare function isRalplanArtifactWriteInvocation(args: readonly string[]): boolean;
 export declare function runNativeRalplanCommand(args: string[], cwd?: string): Promise<RalplanCommandResult>;

package/dist/types/gjc-runtime/state-runtime.d.ts

@@ -11,6 +11,7 @@ export interface StateCommandResult {
     stdout?: string;
     stderr?: string;
 }
+type StateWarningSink = (warning: string) => void;
 /**
  * Reconcile a workflow skill's mode-state + active-state/HUD from a caller-derived
  * payload. Unlike `gjc state write`, this is a derived repair: callers reconcile from
@@ -34,5 +35,6 @@ export declare function reconcileWorkflowSkillState(options: {
 }): Promise<{
     stateFile: string;
 }>;
-export declare function readWorkflowStateJson(cwd: string, skill: CanonicalGjcWorkflowSkill, sessionId?: string): Promise<Record<string, unknown>>;
+export declare function readWorkflowStateJson(cwd: string, skill: CanonicalGjcWorkflowSkill, sessionId?: string, onWarning?: StateWarningSink): Promise<Record<string, unknown>>;
 export declare function runNativeStateCommand(args: string[], cwd?: string): Promise<StateCommandResult>;
+export {};

package/dist/types/gjc-runtime/state-writer.d.ts

@@ -183,6 +183,7 @@ export type StrictMutationReadResult = {
 };
 export declare function readExistingStateForMutation(filePath: string): Promise<StrictMutationReadResult>;
 export declare function workflowEnvelopeContentSha256(value: unknown): string;
+export declare function isNativeDeepInterviewV1(value: Record<string, unknown>): boolean;
 export declare function verifyWorkflowEnvelopeReceiptValue(value: unknown, filePath: string): WorkflowReceiptVerification;
 export declare function stampWorkflowEnvelopeChecksum<T>(value: T, filePath: string, computedAt?: string): T;
 export declare function detectWorkflowEnvelopeIntegrityMismatch(filePath: string): Promise<WorkflowEnvelopeIntegrityMismatch | undefined>;

package/dist/types/modes/acp/acp-agent.d.ts

@@ -1,10 +1,15 @@
-import { type Agent, type AgentSideConnection, type AuthenticateRequest, type AuthenticateResponse, type ClientCapabilities, type CloseSessionRequest, type CloseSessionResponse, type DeleteSessionRequest, type DeleteSessionResponse, type ForkSessionRequest, type ForkSessionResponse, type InitializeRequest, type InitializeResponse, type ListSessionsRequest, type ListSessionsResponse, type LoadSessionRequest, type LoadSessionResponse, type NewSessionRequest, type NewSessionResponse, type PromptRequest, type PromptResponse, type ResumeSessionRequest, type ResumeSessionResponse, type SetSessionConfigOptionRequest, type SetSessionConfigOptionResponse, type SetSessionModeRequest, type SetSessionModeResponse } from "@agentclientprotocol/sdk";
+import { type Agent, type AgentSideConnection, type AuthenticateRequest, type AuthenticateResponse, type AvailableCommand, type ClientCapabilities, type CloseSessionRequest, type CloseSessionResponse, type DeleteSessionRequest, type DeleteSessionResponse, type ForkSessionRequest, type ForkSessionResponse, type InitializeRequest, type InitializeResponse, type ListSessionsRequest, type ListSessionsResponse, type LoadSessionRequest, type LoadSessionResponse, type NewSessionRequest, type NewSessionResponse, type PromptRequest, type PromptResponse, type ResumeSessionRequest, type ResumeSessionResponse, type SetSessionConfigOptionRequest, type SetSessionConfigOptionResponse, type SetSessionModeRequest, type SetSessionModeResponse } from "@agentclientprotocol/sdk";
 import { type AcpProviderRegistration, AcpSdkAdapter } from "../../sdk/acp";
 import type { AcpStartupOptions } from "./startup-options";
 export declare const ACP_BOOTSTRAP_RACE_GUARD_MS = 50;
 type JsonObject = Record<string, unknown>;
 /** Applies ACP's offset cursor after narrowing the broker listing to the requested cwd. */
-export declare function paginateAcpSessions(listed: unknown[], cwd: string | undefined, offset: number): ListSessionsResponse;
+export declare function paginateAcpSessions(listed: unknown[], cwd: string | undefined, offset: number, sessionMetadata?: ReadonlyMap<string, {
+    title?: string;
+    updatedAt?: string;
+}>): ListSessionsResponse;
+/** Build the ACP command palette from the shared builtins and live SDK skill state. */
+export declare function acpAvailableCommandsFromSkills(query: unknown): AvailableCommand[];
 export type TranscriptReplayBlock = {
     type: "text";
     text: string;
@@ -27,8 +32,8 @@ export interface TranscriptReplayContent {
     };
 }
 export declare function transcriptReplayContent(entry: unknown): TranscriptReplayContent;
-/** Maps live canonical SDK config and model queries into the ACP 1.2.1 session state surface. */
-export declare function acpSessionStateFromConfig(query: unknown, modelsQuery?: unknown): {
+/** Maps live canonical SDK config and the selected model catalog into the ACP 1.2.1 session state surface. */
+export declare function acpSessionStateFromConfig(query: unknown, modelCatalogQuery?: unknown, modelPreset?: string): {
     configOptions: ({
         id: string;
         name: string;
@@ -40,7 +45,7 @@ export declare function acpSessionStateFromConfig(query: unknown, modelsQuery?:
         }[];
     } | {
         id: "model";
-        name: "Model";
+        name: string;
         type: "select";
         currentValue: string;
         options: {
@@ -67,7 +72,7 @@ export declare function acpSessionStateFromConfig(query: unknown, modelsQuery?:
         })[];
     } | {
         id: "thinking";
-        name: "Thinking";
+        name: string;
         type: "select";
         currentValue: string;
         options: {
@@ -94,7 +99,7 @@ export declare function acpSessionStateFromConfig(query: unknown, modelsQuery?:
         })[];
     } | {
         id: "steeringMode";
-        name: "Steering queue";
+        name: string;
         type: "select";
         currentValue: string;
         options: {
@@ -121,7 +126,7 @@ export declare function acpSessionStateFromConfig(query: unknown, modelsQuery?:
         })[];
     } | {
         id: "followUpMode";
-        name: "Follow-up queue";
+        name: string;
         type: "select";
         currentValue: string;
         options: {
@@ -148,7 +153,7 @@ export declare function acpSessionStateFromConfig(query: unknown, modelsQuery?:
         })[];
     } | {
         id: "interruptMode";
-        name: "Interrupt mode";
+        name: string;
         type: "select";
         currentValue: string;
         options: {

package/dist/types/modes/components/queue-pane.d.ts

@@ -1,12 +1,20 @@
 import { Container } from "@gajae-code/tui";
 import type { QueuedMessageEditEntry } from "../../session/agent-session";
+type QueueSelectorAction = "tui.select.confirm" | "tui.select.cancel";
+type QueueSelectorNavigationAction = "tui.select.up" | "tui.select.down" | "tui.select.pageUp" | "tui.select.pageDown";
 export declare class QueuePaneComponent extends Container {
     #private;
     constructor(entries: QueuedMessageEditEntry[], options: {
         selectedIndex?: number;
+        formatKeyHint?: (key: string) => string;
+        formatSelectAction?: (action: QueueSelectorAction) => string;
+        matchesSelectAction?: (keyData: string, action: QueueSelectorAction) => boolean;
+        resolveSelectNavigation?: (keyData: string) => QueueSelectorNavigationAction | undefined;
+        onSelect: (entry: QueuedMessageEditEntry) => void;
         onDelete: (entry: QueuedMessageEditEntry, index: number) => void;
         onMove: (entry: QueuedMessageEditEntry, index: number, direction: "up" | "down") => void;
         onClose: () => void;
     });
     handleInput(keyData: string): void;
 }
+export {};

package/dist/types/modes/components/queued-message-selector.d.ts

@@ -1,11 +1,17 @@
 import { Container, SelectList } from "@gajae-code/tui";
 import type { QueuedMessageEditEntry } from "../../session/agent-session";
 type QueuedMessageMoveDirection = "up" | "down";
+type QueueSelectorAction = "tui.select.confirm" | "tui.select.cancel";
+type QueueSelectorNavigationAction = "tui.select.up" | "tui.select.down" | "tui.select.pageUp" | "tui.select.pageDown";
 export type { QueuedMessageMoveDirection };
 export declare class QueuedMessageSelectorComponent extends Container {
     #private;
     constructor(entries: QueuedMessageEditEntry[], onSelect: (entry: QueuedMessageEditEntry) => void, onDelete: (entry: QueuedMessageEditEntry, selectedIndex: number) => void, onMove: (entry: QueuedMessageEditEntry, selectedIndex: number, direction: QueuedMessageMoveDirection) => void, onCancel: () => void, options?: {
         selectedIndex?: number;
+        formatKeyHint?: (key: string) => string;
+        formatSelectAction?: (action: QueueSelectorAction) => string;
+        matchesSelectAction?: (keyData: string, action: QueueSelectorAction) => boolean;
+        resolveSelectNavigation?: (keyData: string) => QueueSelectorNavigationAction | undefined;
     });
     handleInput(keyData: string): void;
     getSelectList(): SelectList;

package/dist/types/modes/components/welcome.d.ts

@@ -14,6 +14,7 @@ export interface WelcomeComponentOptions {
     getViewportRows?: () => number | undefined;
     getReservedBottomRows?: (termWidth: number) => number;
     changelogMarkdown?: string;
+    rightGutterWidth?: number;
     collapseChangelog?: boolean;
     buildLabel?: string;
     keyDisplayContext?: KeyDisplayContext;