@gajae-code/coding-agent 0.12.11 → 0.12.13

package/dist/types/session/session-manager.d.ts

@@ -346,10 +346,20 @@ export interface ResumeTailTerminal {
 }
 export interface ResumeTailError {
     kind: "error";
-    reason: "missing" | "malformed" | "unstable" | "read-failed" | "legacy_migration_disabled";
+    reason: "missing" | "malformed" | "unstable" | "read-failed" | "legacy_migration_disabled" | "oversized";
+    size?: number;
 }
 export type SessionDirectoryMigrationPolicy = ManagedMigrationPolicy;
 export type SessionAppendPersistenceFailurePhase = "current_append" | "prior_failure";
+/**
+ * Safety bound for resuming a single transcript file. Matches the managed-storage
+ * per-file artifact limit (`MANAGED_ARTIFACT_MAX_FILE_BYTES`): transcripts at or above
+ * this size are not loaded into memory wholesale because the decode + per-line JSON
+ * parse + identity hash would OOM or stall the process (#3851). The bound is a
+ * load-time guard only; it does not raise the on-disk managed-storage limit.
+ */
+export declare const RESUME_TRANSCRIPT_MAX_BYTES: number;
+export declare const SESSION_OVERSIZED_RECOVERY_MESSAGE = "The selected session transcript is too large to resume safely. Use `gjc export <session-file>` to export its content into a new session, or remove/archive it after confirming its content is no longer needed.";
 export declare class SessionAppendPersistenceError extends Error {
     readonly phase: SessionAppendPersistenceFailurePhase;
     readonly entryId: string;
@@ -368,6 +378,11 @@ export declare class SessionArtifactCapacityError extends Error {
     readonly code = "artifact_capacity_exceeded";
     constructor(message: string);
 }
+export declare class SessionTranscriptOversizedError extends Error {
+    readonly code = "oversized";
+    readonly size: number;
+    constructor(size: number);
+}
 export type ResumeTailInspection = ResumeTailResumable | ResumeTailTerminal | ResumeTailError;
 export interface StrictSessionOpenSuccess {
     kind: "opened";
@@ -377,6 +392,7 @@ export interface StrictSessionOpenFailure {
     kind: "error";
     reason: ResumeTailError["reason"] | "identity-mismatch" | "migration-required" | "artifact_capacity_exceeded" | "migration_busy";
     message?: string;
+    size?: number;
 }
 /** Exact transcript bytes and authority captured from one descriptor-bound read. */
 export interface CapturedSessionTranscriptSnapshot {
@@ -615,6 +631,7 @@ interface SessionManagerStateSnapshot {
     needsFullRewriteOnNextPersist: boolean;
     fileEntries: FileEntry[];
     materializedFileEntries: FileEntry[];
+    adoptedArtifactManager: ArtifactManager | null;
 }
 /** Benchmark-derived cap for strong materialized session snapshots. */
 export declare const MATERIALIZED_CACHE_MAX_BYTES: number;
@@ -623,6 +640,7 @@ export declare const SessionManagerTestHooks: {
     materializedCacheMaxBytesOverride?: number;
     beforeResidentTransitionIndexBuild?: () => void;
     afterForkSnapshot?: () => void | Promise<void>;
+    beforeEphemeralArtifactManagerInstall?: (dir: string) => void | Promise<void>;
 };
 export declare class SessionManager {
     #private;
@@ -643,7 +661,9 @@ export declare class SessionManager {
     captureState(): SessionManagerStateSnapshot;
     restoreState(snapshot: SessionManagerStateSnapshot): void;
     /** Switch to a different session file (used for resume and branching). */
-    setSessionFile(sessionFile: string): Promise<void>;
+    setSessionFile(sessionFile: string, options?: {
+        deferEphemeralArtifactRetirement?: boolean;
+    }): Promise<void>;
     /** Start a new session. Closes any existing writer first. */
     newSession(options?: NewSessionOptions): Promise<string | undefined>;
     /**
@@ -751,13 +771,23 @@ export declare class SessionManager {
      * the parent session's artifact directory and ID counter.
      */
     adoptArtifactManager(manager: ArtifactManager): void;
+    /** Release only the matching externally adopted manager. */
+    releaseArtifactManager(manager: ArtifactManager): void;
+    /** Temporarily release adopted authority while an outer transition validates its successor. */
+    stageAdoptedArtifactManagerForTransition(): void;
+    /** Prove manager authority by exact object identity, never by pathname shape. */
+    isArtifactManagerAuthorized(manager: ArtifactManager): boolean;
     /**
      * Returns the ArtifactManager this session writes through. Lazily creates
      * one bound to the current session file unless an external manager was
-     * adopted via `adoptArtifactManager`. Returns null only for non-persistent
-     * sessions with no adopted manager.
+     * adopted via `adoptArtifactManager`. Falls back to the lazily created
+     * ephemeral filesystem store once a non-persistent session has saved an
+     * artifact, so `artifact://` stays resolvable. Returns null only when no
+     * store has been established yet.
      */
     getArtifactManager(): ArtifactManager | null;
+    /** Linearizably establish this session's persistent or ephemeral artifact manager. */
+    ensureArtifactManager(): Promise<ArtifactManager | null>;
     /**
      * Allocate a new artifact path and ID for the current session.
      * Returns an empty object when the session is not persisted.
@@ -768,14 +798,18 @@ export declare class SessionManager {
     }>;
     /**
      * Save artifact content under the current session and return artifact ID.
-     * Returns an artifact ID for all sessions (file-backed for persistent, in-memory fallback otherwise).
+     * Persistent sessions write into the session artifact directory; non-persistent
+     * sessions write into a lazily created temporary directory so the content is
+     * read back from the filesystem instead of being retained in memory.
      */
     saveArtifact(content: string, toolType: string): Promise<string | undefined>;
     /**
      * Resolve an artifact ID to an on-disk path for the current session.
-     * Returns null when missing or when the session is not persisted.
+     * Returns null when the artifact is missing.
      */
     getArtifactPath(id: string): Promise<string | null>;
+    /** Retire predecessor ephemeral artifacts after an outer logical transition commits. */
+    retireEphemeralArtifactsAfterTransition(): void;
     /**
      * Persist (or clear) the current editor draft so the next resume of this
      * session can restore it. Empty text deletes any stale draft. No-op when the

package/dist/types/tools/index.d.ts

@@ -84,6 +84,13 @@ export interface AskAnswerRequest {
     controls: readonly AskRemoteControl[];
     /** Optional zero-based recommendation into the authoritative raw options. */
     recommendedIndex?: number;
+    /** True while the question accepts several options before the navigation control commits. */
+    multi?: boolean;
+    /**
+     * Options currently selected in the multi-select loop, as authoritative option
+     * labels. Remote transports render the selection state so a toggle is visible.
+     */
+    selectedOptions?: readonly string[];
 }
 export type AskRemoteInteraction = {
     kind: "value";
@@ -219,6 +226,14 @@ export interface ToolSession {
     getAuthorizedArtifactsDirs?: () => readonly string[];
     /** Get the ArtifactManager backing this session (shared across parent + subagents). */
     getArtifactManager?: () => ArtifactManager | null;
+    /** Prove that an ArtifactManager belongs to this concrete session or its explicitly adopted parent tree. */
+    isArtifactManagerAuthorized?: (manager: ArtifactManager) => boolean;
+    /** Adopt a task-created fallback manager into the concrete session owner. */
+    adoptArtifactManager?: (manager: ArtifactManager) => void;
+    /** Linearizably establish the concrete session owner's canonical artifact manager. */
+    ensureArtifactManager?: () => Promise<ArtifactManager | null>;
+    /** Release a task-created fallback manager when its logical session ends. */
+    releaseArtifactManager?: (manager: ArtifactManager) => void;
     /** Register teardown work owned by the current logical session. */
     registerSessionCleanup?: (cleanup: () => Promise<void> | void) => () => void;
     /** Allocate a new artifact path and ID for session-scoped truncated output. */

package/dist/types/utils/npm-registry.d.ts

@@ -0,0 +1,71 @@
+export declare const DEFAULT_NPM_REGISTRY = "https://registry.npmjs.org";
+export type NpmConfigOrigin = "env" | "user" | "global";
+/** Which package manager will run the install this check is gating. */
+export type Installer = "bun" | "npm";
+/** Injection points so tests never read the real environment. */
+export interface NpmRegistryEnvironment {
+    /** Manager that will perform the install; decides Bun-vs-npm config priority. */
+    installer?: Installer;
+    /** Resolves an executable on PATH; used to locate npm's effective prefix. */
+    whichExecutable?: (name: string) => string | undefined;
+    /** Defaults to `$credentialEnv`, which excludes the caller's `cwd/.env`. */
+    lookupEnv?: (name: string) => string | undefined;
+    homeDir?: string;
+    platform?: NodeJS.Platform;
+    readFile?: (filePath: string) => Promise<string | undefined>;
+}
+export interface ResolvedNpmRegistry {
+    registry: string;
+    headers: Record<string, string>;
+    origin: NpmConfigOrigin | "default";
+    /** Where the value came from, e.g. `$npm_config_registry` or `~/.npmrc`. */
+    source: string;
+    /** Config files that exist but could not be read. */
+    warnings: string[];
+}
+export interface LatestPackageVersion {
+    version: string;
+    registry: string;
+    /** Config problems that did not stop the lookup but changed its outcome. */
+    warnings: string[];
+}
+export interface FetchResponseLike {
+    ok: boolean;
+    status: number;
+    statusText: string;
+    json: () => Promise<unknown>;
+}
+export type FetchLike = (input: string, init?: {
+    headers?: Record<string, string>;
+    signal?: AbortSignal;
+}) => Promise<FetchResponseLike>;
+export interface NpmRegistryLookupOptions extends NpmRegistryEnvironment {
+    fetchImpl?: FetchLike;
+    timeoutMs?: number;
+}
+/** Thrown when a registry is configured but unusable, so it is never silently ignored. */
+export declare class NpmRegistryConfigError extends Error {
+}
+/**
+ * Parse an `.npmrc` into raw key/value pairs. Later duplicates win, as in npm.
+ *
+ * @internal Exported for tests; production code goes through `resolveNpmRegistry`.
+ */
+export declare function parseNpmrc(contents: string, lookupEnv?: (name: string) => string | undefined): Map<string, string>;
+/**
+ * Build the credential lookup keys npm calls "nerf darts": `//host/path/`,
+ * walking up one path segment at a time until the bare host.
+ *
+ * @internal Exported for tests; production code goes through `resolveNpmRegistry`.
+ */
+export declare function credentialPrefixes(registry: string): string[];
+/** Resolve the registry npm/bun would use for `packageName`, with credentials attached. */
+export declare function resolveNpmRegistry(packageName: string, environment?: NpmRegistryEnvironment): Promise<ResolvedNpmRegistry>;
+/**
+ * Registries can live under a path prefix, so join by string rather than `new URL`.
+ *
+ * @internal Exported for tests; production code goes through `fetchLatestPackageVersion`.
+ */
+export declare function buildRegistryPackageUrl(registry: string, packageName: string, spec?: string): string;
+/** Fetch the latest published version of `packageName` from the configured registry. */
+export declare function fetchLatestPackageVersion(packageName: string, options?: NpmRegistryLookupOptions): Promise<LatestPackageVersion>;

package/examples/extensions/README.md

@@ -14,6 +14,39 @@ mkdir -p .gjc/extensions
 cp packages/coding-agent/examples/extensions/pirate.ts .gjc/extensions/
 ```
 
+### Enable the Ouroboros `ooo` bridge
+
+Install the version-pinned Ouroboros `v0.50.7` MCP profile, then configure its GJC runtime:
+
+```bash
+uv tool install 'ouroboros-ai[mcp]==0.50.7'
+ouroboros setup --runtime gjc
+```
+
+`pipx install 'ouroboros-ai[mcp]==0.50.7'` is the equivalent pipx installation. Do not pipe a mutable branch installer into a shell. Pin source audits to commit `cb658aa819bfabafecbbe91bc36327f10691171b`. The [v0.50.7 release](https://github.com/Q00/ouroboros/releases/tag/v0.50.7) publishes `ouroboros_ai-0.50.7-py3-none-any.whl` with SHA-256 `df42f4ef10e032f2edc3249534bf91e8612dee789dfc3517895a9eb2df7f82c4`; verify downloaded release assets before installing them.
+
+Ouroboros setup installs its own managed bridge. Replace that file with this standalone GJC bridge, which preserves the interview session across serialized follow-up answers, disposes it on GJC session switches, and drops queued predecessor-session starts. Download the example from immutable GJC commit `4311fefd49e9c6781c4d1111b8dd3f758e7d8974` and verify it before installation:
+
+```bash
+curl -fL https://raw.githubusercontent.com/Yeachan-Heo/gajae-code/4311fefd49e9c6781c4d1111b8dd3f758e7d8974/packages/coding-agent/examples/extensions/ooo-bridge.ts -o /tmp/gjc-ooo-bridge.ts
+shasum -a 256 /tmp/gjc-ooo-bridge.ts
+mkdir -p "${HOME}/${GJC_CONFIG_DIR:-.gjc}/agent/extensions/ouroboros-ooo-bridge" && cp /tmp/gjc-ooo-bridge.ts "${HOME}/${GJC_CONFIG_DIR:-.gjc}/agent/extensions/ouroboros-ooo-bridge/index.ts"
+```
+
+The `shasum` output must match `2b0e1e25ac145331f112da629076875542db6f6e63c3c17adcd6770a4dcaf7bd` before the copy. The file has no runtime package imports and uses the host API injected by GJC, so compiled binaries do not require a peer `node_modules` directory beside the installation.
+
+For a project-only installation, copy the same verified file to `.gjc/extensions/ouroboros-ooo-bridge/index.ts`. Start a new GJC session after installation, then enter:
+
+```text
+ooo interview "I want to build a task management CLI"
+```
+
+The first question is rendered in GJC. While that interview remains active, ordinary interactive input is sent as the answer with the same Ouroboros session ID; completion clears the correlation and returns subsequent ordinary prompts to GJC. Other `ooo ...` commands continue through `ouroboros dispatch --runtime gjc`, including exit-code `78` pass-through.
+
+Set `OUROBOROS_CLI=/absolute/path/to/ouroboros` when the executable is outside `PATH`. Missing executable, MCP startup, and dispatch failures produce an error notification for the claimed input without preventing GJC startup or ordinary prompts.
+
+This external path is separate from GJC's native `/skill:deep-interview`: the native skill runs GJC's bundled interview workflow, while `ooo interview` delegates to the installed Ouroboros MCP interview tool.
+
 ## Examples
 
 ### Custom Tools & API
@@ -39,10 +72,11 @@ cp packages/coding-agent/examples/extensions/pirate.ts .gjc/extensions/
 
 ### External Dependencies
 
-| Extension         | Description                                                               |
-| ----------------- | ------------------------------------------------------------------------- |
-| `chalk-logger.ts` | Uses chalk from parent node_modules (demonstrates jiti module resolution) |
-| `with-deps/`      | Extension with its own package.json and dependencies                      |
+| Extension         | Description                                                                  |
+| ----------------- | ---------------------------------------------------------------------------- |
+| `chalk-logger.ts` | Uses chalk from parent node_modules (demonstrates jiti module resolution)    |
+| `ooo-bridge.ts`   | Opt-in `ooo ...` input bridge to the installed Ouroboros CLI and MCP runtime |
+| `with-deps/`      | Extension with its own package.json and dependencies                         |
 
 ## Writing Extensions
 

package/examples/extensions/ooo-bridge.ts

@@ -0,0 +1,15 @@
+interface OooBridgeExtensionAPI {
+	pi: unknown;
+	on(event: "input" | "session_switch", handler: (event: unknown, context: unknown) => unknown): void;
+}
+
+interface OooBridgeHost {
+	createOuroborosOooBridge(): ((event: unknown, context: unknown) => unknown) & { reset(): Promise<void> };
+}
+
+export default function (pi: OooBridgeExtensionAPI) {
+	const host = pi.pi as OooBridgeHost;
+	const bridge = host.createOuroborosOooBridge();
+	pi.on("input", bridge);
+	pi.on("session_switch", () => bridge.reset());
+}

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@gajae-code/coding-agent",
-	"version": "0.12.11",
+	"version": "0.12.13",
 	"description": "Gajae Code CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://gajae-code.com",
 	"author": "Yeachan-Heo and Gajae Code Contributors",
@@ -53,13 +53,13 @@
 		"@agentclientprotocol/sdk": "1.3.0",
 		"@babel/parser": "^7.29.3",
 		"@mozilla/readability": "^0.6.0",
-		"@gajae-code/stats": "0.12.11",
-		"@gajae-code/agent-core": "0.12.11",
-		"@gajae-code/ai": "0.12.11",
-		"@gajae-code/bridge-client": "0.12.11",
-		"@gajae-code/natives": "0.12.11",
-		"@gajae-code/tui": "0.12.11",
-		"@gajae-code/utils": "0.12.11",
+		"@gajae-code/stats": "0.12.13",
+		"@gajae-code/agent-core": "0.12.13",
+		"@gajae-code/ai": "0.12.13",
+		"@gajae-code/bridge-client": "0.12.13",
+		"@gajae-code/natives": "0.12.13",
+		"@gajae-code/tui": "0.12.13",
+		"@gajae-code/utils": "0.12.13",
 		"@puppeteer/browsers": "^2.13.0",
 		"@types/turndown": "5.0.6",
 		"@xterm/headless": "^6.0.0",

package/scripts/generate-sdk-operation-inventory.ts

@@ -37,6 +37,8 @@ const LOCKED_EXCLUSIONS: Readonly<Record<string, string>> = {
 	"agent_session:constructor": "internal accessor/plumbing, not a user-facing control seam",
 	"agent_session:registerToolSessionCleanup":
 		"internal tool lifecycle cleanup registration, not a user-facing SDK control seam",
+	"agent_session:registerToolSessionTransitionCleanup":
+		"internal tool transition cleanup registration for shared artifact-manager ownership, not a user-facing SDK control seam",
 	"agent_session:nextToolChoice": "internal accessor/plumbing, not a user-facing control seam",
 	"agent_session:setForcedToolChoice": "internal accessor/plumbing, not a user-facing control seam",
 	"agent_session:getActiveSkillState": "internal accessor/plumbing, not a user-facing control seam",
@@ -66,6 +68,8 @@ const LOCKED_EXCLUSIONS: Readonly<Record<string, string>> = {
 	"agent_session:closeWriterStrict": "internal ACP lifecycle teardown plumbing, not a user-facing control seam",
 	"agent_session:disposeChildSubprocesses": "internal accessor/plumbing, not a user-facing control seam",
 	"agent_session:waitForIdle": "internal accessor/plumbing, not a user-facing control seam",
+	"agent_session:extendStartupTurnBarrier":
+		"internal CLI startup-readiness fence composition, not a user-facing SDK control seam",
 	"agent_session:awaitPendingContextTransformations":
 		"internal context-transformation lifecycle barrier, not a user-facing SDK control seam",
 	"agent_session:drainAsyncJobDeliveriesForAcp": "internal accessor/plumbing, not a user-facing control seam",

package/src/async/job-manager.ts

@@ -463,6 +463,7 @@ export class AsyncJobManager {
 	readonly #terminalWaits = new Map<string, TerminalWaitState>();
 	#waitSeq = 0;
 	readonly #publishedTerminalGenerations = new Set<string>();
+	readonly #settledJobIds = new Set<string>();
 	#jobGenerationSeq = 0;
 	readonly #liveHandles = new Map<string, SubagentLiveHandle>();
 	readonly #subagentProgress = new Map<string, AgentProgress>();
@@ -820,6 +821,7 @@ export class AsyncJobManager {
 
 		this.#expireMonitorTombstones();
 		const id = this.#resolveJobId(options?.id);
+		this.#settledJobIds.delete(id);
 		const abortController = new AbortController();
 		const startTime = Date.now();
 
@@ -919,7 +921,9 @@ export class AsyncJobManager {
 				this.#scheduleEviction(id);
 				this.#drainResumeQueue();
 			}
-		})();
+		})().finally(() => {
+			this.#settledJobIds.add(id);
+		});
 
 		this.#jobs.set(id, job);
 		this.#notifyChange();
@@ -1218,6 +1222,8 @@ export class AsyncJobManager {
 			) {
 				continue;
 			}
+			if (job.status === "cancelled" && this.#settledJobIds.has(job.id) && !this.#subagentRecords.has(subagentId))
+				continue;
 			if (!targets.has(subagentId)) {
 				targets.set(subagentId, { subagentId, jobId: job.id, source: "metadata_job" });
 			}
@@ -1298,7 +1304,7 @@ export class AsyncJobManager {
 				lease.targets.map(target => target.subagentId),
 			);
 		}
-		if (state.phase === "proved" && state.proof) return state.proof;
+		if (state.phase === "proved" && state.proof?.confirmed) return state.proof;
 		state.phase = "proving";
 		const settled = new Set<string>();
 		const promises: Promise<void>[] = [];
@@ -2064,6 +2070,7 @@ export class AsyncJobManager {
 		this.#purgeTerminalSubagentStateForJob(jobId);
 		const job = this.#jobs.get(jobId);
 		this.#jobs.delete(jobId);
+		this.#settledJobIds.delete(jobId);
 		this.#lifecycles.delete(jobId);
 		this.#lifecyclePhases.delete(jobId);
 		this.#deadLetteredDeliveries.delete(jobId);

package/src/cli/fast-help.ts

@@ -106,5 +106,6 @@ Available Tools (default-enabled unless noted):
 
 Useful Commands:
   ${APP_NAME} --list-models        - List configured provider models
+  ${APP_NAME} models               - Alias for --list-models (never starts an agent)
   ${APP_NAME} --help               - Show this help`;
 }

package/src/cli/marketplace-hint.ts

@@ -0,0 +1,39 @@
+/**
+ * Install-failure hints for marketplace-shaped plugin names.
+ *
+ * A bare spec (no `@marketplace`) is always classified as npm, so a user who
+ * copies a plugin name out of `plugin discover` gets an npm resolution failure
+ * with no hint that the same name is offered by a registered marketplace.
+ *
+ * Kept dependency-free — the marketplace barrel loads native addons — so this
+ * takes the narrow catalog surface it actually reads instead of the manager.
+ */
+
+/** The catalog lookups this module needs; `MarketplaceManager` satisfies it. */
+export interface MarketplaceCatalogLookup {
+	listMarketplaces(): Promise<ReadonlyArray<{ name: string }>>;
+	getPluginInfo(name: string, marketplace: string): Promise<unknown | null>;
+}
+
+/**
+ * A bare name carries no `@scope`, version specifier, or path separator, so it
+ * is the only install spec shape that is safe to echo back in an error.
+ */
+export function isBareInstallName(spec: string): boolean {
+	return spec.length > 0 && !spec.includes("@") && !spec.includes("/") && !spec.includes("\\");
+}
+
+/**
+ * Names of registered marketplaces whose catalog offers a plugin under exactly
+ * `name`. Only marketplace names are returned: they are user-chosen registry
+ * labels, never the plugin source, so they carry no credentials or home paths.
+ */
+export async function findMarketplacesOffering(catalogs: MarketplaceCatalogLookup, name: string): Promise<string[]> {
+	const marketplaces = await catalogs.listMarketplaces();
+	const offering: string[] = [];
+	for (const marketplace of marketplaces) {
+		const info = await catalogs.getPluginInfo(name, marketplace.name).catch(() => null);
+		if (info) offering.push(marketplace.name);
+	}
+	return offering;
+}