@gajae-code/coding-agent 0.12.10 → 0.12.11

package/CHANGELOG.md

@@ -2,9 +2,16 @@
 
 ## [Unreleased]
 
-## [0.12.10] - 2026-08-03
+## [0.12.11] - 2026-08-03
+
+### Fixed
 
-## [0.12.9] - 2026-08-03
+- Side-effecting native macOS computer input now restores the global cursor after releasing held input on success, cancellation, supervisor rejection, and action failure. Batches containing input execute in one serialized native capture-to-restore transaction, while screenshot/wait-only operations remain cursor-neutral; capture/restore failures are reported distinctly without masking the primary action error, and global focus behavior remains unchanged (#3642, #3781).
+- Managed session rewrites and authority-absent Darwin appends now use native identity-verified atomic replacement instead of deterministically failing with `managed_replace_exact_unavailable` or risking a torn JSONL tail; uncertain readable outcomes are re-fsynced and carried through ctime-bound strict adoption before recovery reports them durable. This unblocks Darwin compaction and session append durability when retained native authority is absent (#3742, #3760).
+- `todo_write` recovery reminders now distinguish rejected payloads from runtime aborts, preserve the available cause, and require durable state reconciliation instead of incorrectly telling the agent to change a valid payload (#3743, #3760).
+- Authority-absent Darwin `appendSync` regression coverage now exercises the replace-based race window (destination mutation during successor staging) instead of the retired in-place `O_APPEND` open path, and documents that ctime-only destination transitions are tolerated by exact replacement.
+
+## [0.12.10] - 2026-08-03
 
 ### Added
 

package/dist/types/sdk/bus/chat-daemon-control.d.ts

@@ -30,7 +30,9 @@ export type ChatDaemonAction = "stop" | "reload";
  * semantics; discord generation 23 / slack generation 22 hardens exact Bash
  * process-tree ownership shared by chat daemon cleanup.
  * Discord generation 24 / slack generation 23 apply provider-completeness and
- * effective-enable admission to chat daemon lifecycle controls.
+ * effective-enable admission to chat daemon lifecycle controls. Discord
+ * generation 25 / slack generation 24 apply identity-bound exact replacement
+ * cleanup shared by managed-session and daemon filesystem authority.
  */
 export declare const CHAT_DAEMON_GENERATIONS: Readonly<Record<ChatDaemonKind, number>>;
 export declare function chatDaemonGeneration(kind: ChatDaemonKind): number;

package/dist/types/sdk/bus/telegram-daemon-contract.d.ts

@@ -54,9 +54,10 @@ export declare const NOTIFICATION_PROTOCOL_VERSION = 3;
  * adds durable provider-intent admission without changing owner, reclaim,
  * signal, or spawn authority.
  * Generation 42 applies first-class provider-settings admission to Telegram
- * lifecycle controls.
+ * lifecycle controls. Generation 43 applies identity-bound exact replacement
+ * cleanup shared by managed-session and daemon filesystem authority.
  */
-export declare const DAEMON_GENERATION = 42;
+export declare const DAEMON_GENERATION = 43;
 /**
  * Serving-compatibility boundary for daemon lifecycle requests. Epoch 1 covers
  * all builds published before this field existed; epoch 2 covered generation 29;

package/dist/types/session/internal/managed-session-storage.d.ts

@@ -1,4 +1,4 @@
-import { type NativeDirectoryTreeSnapshot, type NativeOwnerOnlySecurityResult, type RecoveryFsRoot } from "@gajae-code/natives";
+import { type NativeDirectoryTreeSnapshot, type NativeExactUnlinkResult, type NativeOwnerOnlySecurityResult, type RecoveryFsRoot } from "@gajae-code/natives";
 import { type NativePublishOutcome } from "./native-publish-outcome";
 export declare const MANAGED_ARTIFACT_MAX_DEPTH = 32;
 export declare const MANAGED_ARTIFACT_MAX_FILES = 50000;
@@ -10,6 +10,16 @@ export declare class ManagedPublishError extends Error {
     readonly diagnostic: string;
     constructor(classification: ManagedPublishError["classification"], outcome: NativePublishOutcome);
 }
+export declare class ManagedReplaceError extends Error {
+    readonly code: string;
+    readonly cleanupReceiptPath: string;
+    readonly detachedPath: string | undefined;
+    readonly retainedSuccessorPath: string | undefined;
+    readonly retainedPlaceholderPath: string | undefined;
+    readonly retainedUnknownPath: string | undefined;
+    readonly replacementCause: unknown;
+    constructor(result: NativeExactUnlinkResult, cleanupReceiptPath: string, replacementCause?: unknown);
+}
 /** Cleanup is safe only when the native move reports that it did not commit. */
 export declare function mayCleanManagedTreeStaging(error: unknown): boolean;
 /**
@@ -122,7 +132,7 @@ export declare function captureManagedFilePrefixNoFollow(pathname: string, maxBy
 export declare function captureManagedFileNoFollow(pathname: string): ManagedFileSnapshot;
 /** Atomically publishes bytes without replacing an existing destination. */
 export declare function publishManagedFileNoReplace(destination: string, bytes: Uint8Array, assertOwned?: () => void, root?: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy): Promise<void>;
-export declare function publishManagedFileNoReplaceSync(destination: string, bytes: Uint8Array, root?: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy): void;
+export declare function publishManagedFileNoReplaceSync(destination: string, bytes: Uint8Array, root?: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy): ManagedFileSnapshot["identity"];
 /** Replace one managed regular file while retaining the secured staging fd through publication. */
 export declare function replaceManagedFileSync(destination: string, bytes: Uint8Array, root: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy, assertFence?: () => void, expectedDestination?: ManagedFileSnapshot["identity"]): void;
 export declare function replaceManagedFile(destination: string, bytes: Uint8Array, root: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy): Promise<void>;

package/dist/types/session/session-manager.d.ts

@@ -333,6 +333,7 @@ export interface ResumeSessionIdentity {
     size: number;
     mtimeMs: number;
     mtimeNs: bigint;
+    ctimeNs?: bigint;
     sha256: string;
 }
 export interface ResumeTailResumable {
@@ -348,6 +349,13 @@ export interface ResumeTailError {
     reason: "missing" | "malformed" | "unstable" | "read-failed" | "legacy_migration_disabled";
 }
 export type SessionDirectoryMigrationPolicy = ManagedMigrationPolicy;
+export type SessionAppendPersistenceFailurePhase = "current_append" | "prior_failure";
+export declare class SessionAppendPersistenceError extends Error {
+    readonly phase: SessionAppendPersistenceFailurePhase;
+    readonly entryId: string;
+    readonly persistenceError: Error;
+    constructor(phase: SessionAppendPersistenceFailurePhase, entryId: string, persistenceError: Error);
+}
 export declare class SessionManagedStorageError extends Error {
     readonly code = "managed_storage_unsupported";
     constructor();
@@ -838,6 +846,15 @@ export declare class SessionManager {
     applyEntryMessageUpdates(entries: readonly SessionMessageEntry[]): void;
     /** Write mutated custom-message entries back into the canonical entry store by id. */
     applyCustomMessageEntryUpdates(entries: readonly CustomMessageEntry[]): void;
+    /**
+     * Rehydrate the canonical transcript after a synchronous persistence failure.
+     *
+     * The failed append may have committed before reporting an uncertain outcome,
+     * so callers must not clear the sticky error or retry against the resident
+     * branch. Reloading the exact session file is the only supported recovery
+     * boundary for both managed and explicit persistent destinations.
+     */
+    recoverPersistenceFailure(): Promise<void>;
     /**
      * Rewrite the session file after in-place entry updates.
      * Use sparingly (e.g., pruning old tool outputs).

package/dist/types/session/session-storage.d.ts

@@ -7,6 +7,7 @@ export interface SessionStorageStat {
     size: number;
     mtimeMs: number;
     mtimeNs: bigint;
+    ctimeNs: bigint;
     mtime: Date;
     isFile: boolean;
 }

package/dist/types/tools/computer.d.ts

@@ -239,7 +239,7 @@ export interface ComputerScreenshotDetails {
     originX?: number;
     originY?: number;
     displayEpoch?: number;
-    captureId?: string;
+    captureId?: number;
     pngBytes?: number;
     path?: string;
 }
@@ -258,11 +258,44 @@ export interface ComputerToolDetails {
     keys?: string[];
     ms?: number;
     screenshot?: ComputerScreenshotDetails;
+    primaryError?: {
+        code: string;
+        message: string;
+    };
     supervisor?: string;
     steps?: ComputerToolDetails[];
     meta?: OutputMeta;
 }
+type NativeBatchAction = {
+    action: "screenshot" | "click" | "double_click" | "move" | "drag" | "scroll" | "type" | "keypress" | "wait";
+    x?: number;
+    y?: number;
+    toX?: number;
+    toY?: number;
+    scrollX?: number;
+    scrollY?: number;
+    button?: string;
+    text?: string;
+    keys?: string[];
+    ms?: number;
+    timeoutMs?: number;
+    timeoutGroup?: number;
+};
+type NativeBatchStepResult = {
+    index: number;
+    action: string;
+    screenshot?: NativeScreenshot;
+};
+type NativeBatchResult = {
+    results: NativeBatchStepResult[];
+    failureCode?: string;
+    failureIndex?: number;
+    failureMessage?: string;
+    primaryFailureCode?: string;
+    primaryFailureMessage?: string;
+};
 type NativeController = {
+    executeBatch?: (expectedEpoch: number | undefined, actions: NativeBatchAction[], timeoutMs?: number, signal?: AbortSignal) => Promise<NativeBatchResult> | NativeBatchResult;
     screenshot?: () => Promise<NativeScreenshot> | NativeScreenshot;
     click?: (expectedEpoch: number | undefined, x: number, y: number, button?: string) => void;
     doubleClick?: (expectedEpoch: number | undefined, x: number, y: number, button?: string) => void;
@@ -282,7 +315,7 @@ type NativeScreenshot = {
     originX?: number;
     originY?: number;
     displayEpoch?: number;
-    captureId?: string;
+    captureId?: number;
 };
 export type ComputerControllerFactory = () => NativeController;
 export declare const COMPUTER_DISABLED_CODE = "COMPUTER_DISABLED";

package/dist/types/tools/todo-write.d.ts

@@ -25,6 +25,7 @@ export interface TodoPhase {
 export interface TodoWriteToolDetails {
     phases: TodoPhase[];
     storage: "session" | "memory";
+    failureKind?: "payload_rejected" | "persistence";
 }
 declare function validateRawTodoArguments(arguments_: Record<string, unknown>): RawArgumentValidationResult;
 declare const todoWriteSchema: z.ZodObject<{
@@ -117,6 +118,7 @@ export declare const todoWriteToolRenderer: {
             text?: string;
         }>;
         details?: TodoWriteToolDetails;
+        isError?: boolean;
     }, options: RenderResultOptions, uiTheme: Theme, _args?: TodoWriteRenderArgs): Component;
     mergeCallAndResult: boolean;
 };

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@gajae-code/coding-agent",
-	"version": "0.12.10",
+	"version": "0.12.11",
 	"description": "Gajae Code CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://gajae-code.com",
 	"author": "Yeachan-Heo and Gajae Code Contributors",
@@ -53,13 +53,13 @@
 		"@agentclientprotocol/sdk": "1.3.0",
 		"@babel/parser": "^7.29.3",
 		"@mozilla/readability": "^0.6.0",
-		"@gajae-code/stats": "0.12.10",
-		"@gajae-code/agent-core": "0.12.10",
-		"@gajae-code/ai": "0.12.10",
-		"@gajae-code/bridge-client": "0.12.10",
-		"@gajae-code/natives": "0.12.10",
-		"@gajae-code/tui": "0.12.10",
-		"@gajae-code/utils": "0.12.10",
+		"@gajae-code/stats": "0.12.11",
+		"@gajae-code/agent-core": "0.12.11",
+		"@gajae-code/ai": "0.12.11",
+		"@gajae-code/bridge-client": "0.12.11",
+		"@gajae-code/natives": "0.12.11",
+		"@gajae-code/tui": "0.12.11",
+		"@gajae-code/utils": "0.12.11",
 		"@puppeteer/browsers": "^2.13.0",
 		"@types/turndown": "5.0.6",
 		"@xterm/headless": "^6.0.0",