@gajae-code/coding-agent 0.12.4 → 0.12.5

package/CHANGELOG.md

@@ -2,6 +2,8 @@
 
 ## [Unreleased]
 
+## [0.12.5] - 2026-07-30
+
 ## [0.12.4] - 2026-07-30
 
 ## [0.12.3] - 2026-07-30
@@ -30,6 +32,7 @@
 - `gjc --worktree` / `gjc -w` launch no longer crashes with a raw uncaught `EEXIST` when the worktree bucket directory (`<repo>.gajae-code-worktrees`) is a broken symbolic link to unmounted or offloaded cold storage. The launch distinguishes dangling links and non-directory entries from valid directory symlinks or Windows junctions, reclassifies mkdir races, avoids disclosing raw link targets or unsafe shell commands, and never deletes or replaces an obstructing entry.
 - POSIX parent identity reproof/fsync is now centralized before every promotable artifact-phase result, preventing a crash-window where a rename is lost after durable retirement is recorded (#3489).
 - Artifact retirement, planned paths, retained authority, and transcript retry in both managed reconciliation and deletion now bind to the newest published `pendingEvidence` attempt, preventing stranded detached transcripts at paths absent from the newest receipt after a crash (#3489).
+- Provider retry classification prefers the typed `stream_first_event_timeout` transport fact when present, falling back to error-message regex for message-only callers (#3496).
 - Detached task receipts for in-memory parent sessions no longer advertise dead `agent://` output URIs. TaskTool allocates a session-lifetime durable artifact root under the process temp directory, persists child outputs there, authorizes parent and same-session descendants for scoped resolution, and omits the URI entirely when durable allocation fails (#3471).
 - Managed-session replacement and cleanup now bind Windows destination mutation to exact native identity, keep lock acquisition/release retryable without reviving lost ownership, and report retained artifact payloads as `cleanup_pending` until only the verified root remains.
 - Resuming a session no longer crashes with an unhandled rejection when another session transition is already running. The session picker dispatches resume through a void-returning callback, and `handleResumeSession` had no re-entrancy guard, so a second selection (or a resume issued while compaction, handoff, or a fork was in flight) reached `switchSession` and the `{ code: "busy" }` transition error rejected a promise nobody awaited. Resume now ignores an overlapping request with a status message, reports a busy transition as status, and still propagates every other failure. The progress lease is released on all paths.
@@ -53,6 +56,7 @@
 ### Added
 
 - User-created Telegram forum topics can now start a GJC session by selecting the home folder, choosing a verified recent work folder, or entering an explicit folder path. The selected topic is adopted by the new session without creating or deleting a separate Telegram topic.
+- The interactive terminal’s responsive IRC/todo work-lane contract now covers exact narrow/wide geometry, requested versus effective IRC visibility, direct-root pin ordering, todo lane bounds, remapped IRC toggles, and live composer shortcut hints.
 
 ### Fixed
 

package/dist/types/async/job-manager.d.ts

@@ -134,6 +134,8 @@ export interface SubagentRecord {
     effectiveModel?: string;
     /** True when the requested model lacked credentials and the subagent fell back to the parent model. */
     modelFellBack?: boolean;
+    /** True when the effective subagent provider is in fast mode. */
+    fastMode?: boolean;
 }
 /** Lightweight, manager-owned resume payload. The async layer treats `data` as opaque. */
 export interface ResumeDescriptor {
@@ -251,11 +253,17 @@ export declare class AsyncJobManager {
     };
     /** Register or replace the canonical record for a subagent. */
     registerSubagentRecord(record: SubagentRecord): void;
-    /** Patch model metadata onto an existing subagent record (best-effort; no-op if unknown). */
+    /**
+     * Patch model/runtime metadata onto an existing subagent record (best-effort; no-op if
+     * unknown). Every field is optional and omitting one preserves its current value, so a
+     * narrow patch like `{ fastMode: true }` cannot erase model identity recorded earlier.
+     * A field therefore cannot be cleared back to `undefined` through this method.
+     */
     updateSubagentModel(subagentId: string, model: {
         requestedModel?: string;
         effectiveModel?: string;
         modelFellBack?: boolean;
+        fastMode?: boolean;
     }): void;
     getSubagentRecord(subagentId: string, filter?: AsyncJobFilter): SubagentRecord | undefined;
     getSubagentRecords(filter?: AsyncJobFilter): SubagentRecord[];

package/dist/types/sdk/bus/chat-daemon-control.d.ts

@@ -19,8 +19,10 @@ export type ChatDaemonAction = "stop" | "reload";
  * chat daemons after notification configuration parsing changes. Generation 15
  * applies the current notification configuration directly when starting chat
  * daemon transports. Generation 16 applies Telegram sound-policy configuration
- * through shared notification parsing. Generation 17 binds managed-session
- * replacement to exact native filesystem authority.
+ * through shared notification parsing. Generation 17 bound managed-session
+ * replacement to exact native filesystem authority; generation 18 retires that
+ * binding (revert of #3489, which stalled POSIX artifact cleanup) while keeping
+ * the lifecycle contract moving strictly forward.
  */
 export declare const CHAT_DAEMON_GENERATIONS: Readonly<Record<ChatDaemonKind, number>>;
 export declare function chatDaemonGeneration(kind: ChatDaemonKind): number;

package/dist/types/sdk/bus/telegram-daemon-contract.d.ts

@@ -44,10 +44,12 @@ export declare const NOTIFICATION_PROTOCOL_VERSION = 3;
  * 33 adds action-bound multi-select state rendering and replay-safe option
  * snapshots. Generation 34 converts non-photo image formats (including WebP)
  * into Telegram-compatible photo uploads when possible. Generation 35 adds
- * user-created topic adoption (forum-topic folder picker). Generation 36 binds
- * managed-session replacement to exact native filesystem authority.
+ * user-created topic adoption (forum-topic folder picker). Generation 36 bound
+ * managed-session replacement to exact native filesystem authority; generation
+ * 37 retires that binding (revert of #3489, which stalled POSIX artifact
+ * cleanup) while keeping the lifecycle contract moving strictly forward.
  */
-export declare const DAEMON_GENERATION = 36;
+export declare const DAEMON_GENERATION = 37;
 /**
  * Serving-compatibility boundary for daemon lifecycle requests. Epoch 1 covers
  * all builds published before this field existed; epoch 2 covered generation 29;

package/dist/types/session/internal/managed-session-storage.d.ts

@@ -7,7 +7,6 @@ export declare const MANAGED_ARTIFACT_MAX_TOTAL_BYTES: number;
 export declare const MANAGED_ARTIFACT_COPY_BATCH_SIZE = 256;
 export declare class ManagedPublishError extends Error {
     readonly classification: "destination_conflict" | "atomic_unavailable" | "invalid_request" | "durability_not_provable" | "identity_mismatch" | "io_error" | "durability_failed";
-    readonly code: ManagedPublishError["classification"];
     readonly diagnostic: string;
     constructor(classification: ManagedPublishError["classification"], outcome: NativePublishOutcome);
 }
@@ -21,12 +20,6 @@ export interface ManagedStorageLock {
     assertOwned(): void;
     release(): Promise<void>;
 }
-export interface ManagedStorageLockSync {
-    path: string;
-    attemptId: string;
-    assertOwned(): void;
-    release(): void;
-}
 export interface ManagedFileSnapshot {
     bytes: Buffer;
     identity: {
@@ -38,13 +31,6 @@ export interface ManagedFileSnapshot {
         sha256: string;
     };
 }
-export declare const MANAGED_SESSION_SECURITY_CODES: readonly ["acl_denied", "acl_io_error", "acl_present", "acl_malformed", "acl_unknown", "acl_unavailable", "acl_apply_failed", "acl_verify_failed", "not_found", "not_directory", "network_unsupported", "reparse_point", "identity_unavailable", "identity_mismatch", "owner_mismatch", "mode_mismatch", "io_error"];
-export type ManagedSessionSecurityCode = (typeof MANAGED_SESSION_SECURITY_CODES)[number];
-export declare class ManagedSessionSecurityError extends Error {
-    readonly code: ManagedSessionSecurityCode;
-    constructor(code: ManagedSessionSecurityCode);
-}
-export declare function managedSessionSecurityCode(error: unknown): ManagedSessionSecurityCode | undefined;
 export declare function validateNativeSecurityResult(value: unknown, operation: "apply" | "verify", kind: "directory" | "file"): NativeOwnerOnlySecurityResult;
 /** Captured configured-root authority for managed paths only. */
 export interface ManagedDirectoryRoot {
@@ -119,18 +105,13 @@ export declare function captureManagedFileNoFollow(pathname: string): ManagedFil
 /** Atomically publishes bytes without replacing an existing destination. */
 export declare function publishManagedFileNoReplace(destination: string, bytes: Uint8Array, assertOwned?: () => void, root?: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy): Promise<void>;
 export declare function publishManagedFileNoReplaceSync(destination: string, bytes: Uint8Array, root?: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy): void;
-/**
- * Atomically replace a managed file only when the destination is still the
- * exact captured object. Unlike `replaceManagedFileSync`, this never performs
- * an unconditional pathname rename.
- */
-export declare function replaceManagedFileExactSync(destination: string, bytes: Uint8Array, expected: Pick<ManagedFileSnapshot, "identity">, root: ManagedDirectoryRoot): void;
+/** Replace one managed regular file while retaining the secured staging fd through publication. */
+export declare function replaceManagedFileSync(destination: string, bytes: Uint8Array, root: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy): void;
+export declare function replaceManagedFile(destination: string, bytes: Uint8Array, root: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy): Promise<void>;
 /** Copy the exact bytes captured from one no-follow source descriptor. */
 export declare function copyManagedFileNoReplace(source: string, destination: string, snapshot?: ManagedFileSnapshot, root?: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy): Promise<void>;
 /** Acquire a lease lock with bounded wait, heartbeats, conservative stale reclaim, and fencing. */
 export declare function acquireManagedLock(locksDirectory: string, name: string, root?: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy): Promise<ManagedStorageLock>;
-/** Acquire a synchronous lease lock for a short cross-process critical section. */
-export declare function acquireManagedLockSync(locksDirectory: string, name: string, root?: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy): ManagedStorageLockSync;
 export interface ManagedArtifactTreeLimits {
     maxFiles?: number;
     maxTotalBytes?: number;

package/dist/types/session/session-manager.d.ts

@@ -986,7 +986,7 @@ export declare class SessionManager {
      * @param sessionDir Optional session directory for /new or /branch. If omitted, derives from file's parent.
      */
     static open(filePath: string, destinationInput?: SessionDestinationInput, storage?: SessionStorage, migrationPolicy?: SessionDirectoryMigrationPolicy): Promise<SessionManager>;
-    static openNestedManaged(filePath: string, destination: SessionDestination, store: ManagedSessionDescendantStore, storage?: SessionStorage): Promise<SessionManager>;
+    static openNestedManaged(filePath: string, destination: SessionDestination, store: ManagedSessionDescendantStore, storage?: SessionStorage, cwdOverride?: string): Promise<SessionManager>;
     /**
      * List default-managed sessions for the resume picker without recovery or other
      * maintenance writes. This is the only picker inventory that includes legacy

package/dist/types/task/executor.d.ts

@@ -107,7 +107,7 @@ export interface ExecutorOptions {
 export declare class ManagedTaskPersistence {
     #private;
     constructor(artifacts: ArtifactManager, taskId: string);
-    openSession(): Promise<SessionManager>;
+    openSession(cwd: string): Promise<SessionManager>;
     publishOutput(rawOutput: string, metadata: Uint8Array): Promise<void>;
 }
 export declare function createManagedTaskPersistence(artifacts: ArtifactManager, taskId: string): ManagedTaskPersistence;

package/dist/types/task/index.d.ts

@@ -5,8 +5,9 @@ import { type SubagentRunOutcome } from "../async";
 import type { Theme } from "../modes/theme/theme";
 import { type SingleResult, type TaskToolDetails, type TaskToolSchemaInstance } from "./types";
 import "../tools/review";
+import { type TaskResultReceipt } from "./receipt";
 import { renderResult, renderCall as renderTaskCall } from "./render";
-export declare function subagentRunOutcomeFromSingleResult(finalText: string, singleResult: Pick<SingleResult, "aborted" | "exitCode" | "paused" | "setupFailure"> | undefined): string | SubagentRunOutcome;
+export declare function subagentRunOutcomeFromSingleResult(finalText: string, singleResult: (Pick<SingleResult, "aborted" | "exitCode" | "paused" | "setupFailure"> & Partial<Pick<TaskResultReceipt, "status">>) | undefined): string | SubagentRunOutcome;
 export { loadBundledAgents as BUNDLED_AGENTS } from "./agents";
 export { discoverCommands, expandCommand, getCommand } from "./commands";
 export { discoverAgents, getAgent } from "./discovery";

package/dist/types/task/receipt.d.ts

@@ -34,6 +34,7 @@ export interface TaskResultReceipt {
     cost?: number;
     usageCostBreakdownComplete?: true;
     branchName?: string;
+    persistence?: SingleResult["persistence"];
     retryFailure?: {
         attempt: number;
         errorSummary: string;

package/dist/types/task/types.d.ts

@@ -495,6 +495,18 @@ export interface SetupFailureSummary {
 }
 /** Create a bounded diagnostic that preserves a setup failure's cause without exposing credentials or local paths. */
 export declare function createSetupFailureSummary(error: unknown): SetupFailureSummary;
+export interface TaskRecoveryArtifactRef {
+    uri: string;
+    sizeBytes: number;
+    sha256: string;
+    /** Recovery artifacts remain readable for the parent session lifetime. */
+    durability: "session";
+}
+export interface TaskPersistenceResult {
+    outcome: "applied" | "no_changes" | "recovery_available";
+    ownerWorktreeApplied: boolean;
+    recoveryRef?: TaskRecoveryArtifactRef;
+}
 /** Result from a single agent execution */
 export interface SingleResult {
     index: number;
@@ -540,6 +552,10 @@ export interface SingleResult {
     nestedPatches?: NestedRepoPatch[];
     /** Whether isolated execution produced a non-empty root or nested patch. */
     producedChanges?: boolean;
+    /** Receipt-safe owner-worktree persistence result for isolated execution. */
+    persistence?: TaskPersistenceResult;
+    /** Identity-bound patch artifact captured before isolation cleanup. */
+    recoveryRef?: TaskRecoveryArtifactRef;
     /** Data extracted by registered subprocess tool handlers (keyed by tool name) */
     extractedToolData?: Record<string, unknown[]>;
     /** Full wrapper-owned review evidence, kept separate from caller completion data. */

package/dist/types/task/worktree.d.ts

@@ -22,6 +22,8 @@ export interface WorktreeBaseline {
 export declare function getRepoRoot(cwd: string): Promise<string>;
 export declare function getGitNoIndexNullPath(): string;
 export declare function captureBaseline(repoRoot: string): Promise<WorktreeBaseline>;
+/** Confirm that applying patches to the captured owner baseline exactly matches the current owner worktree. */
+export declare function verifyRootPatchesApplied(repoRoot: string, baseline: WorktreeBaseline, patches: readonly string[]): Promise<boolean>;
 export interface NestedRepoPatch {
     relativePath: string;
     patch: string;
@@ -29,14 +31,19 @@ export interface NestedRepoPatch {
 export interface DeltaPatchResult {
     rootPatch: string;
     nestedPatches: NestedRepoPatch[];
+    captureErrors?: string[];
 }
+export interface RecoveryPatchBundle {
+    version: 1;
+    rootPatch: string;
+    nestedPatches: NestedRepoPatch[];
+    captureErrors?: string[];
+}
+export declare function serializeRecoveryPatchBundle(delta: DeltaPatchResult): string;
+export declare function verifyNestedPatchesApplied(repoRoot: string, baseline: WorktreeBaseline, patches: readonly NestedRepoPatch[]): Promise<boolean>;
 export declare function captureDeltaPatch(isolationDir: string, baseline: WorktreeBaseline): Promise<DeltaPatchResult>;
-/**
- * Apply nested repo patches directly to their working directories after parent merge.
- * @param commitMessage Optional async function to generate a commit message from the combined diff.
- *                      If omitted or returns null, falls back to a generic message.
- */
-export declare function applyNestedPatches(repoRoot: string, patches: NestedRepoPatch[], commitMessage?: (diff: string) => Promise<string | null>): Promise<void>;
+/** Preflight every nested delta, then roll back earlier repositories if a later apply fails. */
+export declare function applyNestedPatches(repoRoot: string, patches: NestedRepoPatch[]): Promise<void>;
 /**
  * User-facing isolation mode names exposed by the `task.isolation.mode`
  * setting. Mapped to a backend-kind hint via {@link parseIsolationMode};

package/dist/types/tools/subagent.d.ts

@@ -57,6 +57,8 @@ export interface SubagentSnapshot {
     requestedModel?: string;
     /** True when the requested model lacked credentials and fell back to the parent model. */
     modelFellBack?: boolean;
+    /** True when the effective subagent provider is in fast mode. */
+    fastMode?: boolean;
 }
 export type SubagentAwaitOutcome = "completed" | "timed_out" | "interrupted";
 export interface SubagentToolDetails {

package/dist/types/utils/git.d.ts

@@ -72,6 +72,7 @@ export interface PushOptions {
 export interface PatchOptions {
     readonly cached?: boolean;
     readonly check?: boolean;
+    readonly reverse?: boolean;
     readonly env?: Record<string, string | undefined>;
     readonly signal?: AbortSignal;
 }

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@gajae-code/coding-agent",
-	"version": "0.12.4",
+	"version": "0.12.5",
 	"description": "Gajae Code CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://gajae-code.com",
 	"author": "Yeachan-Heo and Gajae Code Contributors",
@@ -53,13 +53,13 @@
 		"@agentclientprotocol/sdk": "1.3.0",
 		"@babel/parser": "^7.29.3",
 		"@mozilla/readability": "^0.6.0",
-		"@gajae-code/stats": "0.12.4",
-		"@gajae-code/agent-core": "0.12.4",
-		"@gajae-code/ai": "0.12.4",
-		"@gajae-code/bridge-client": "0.12.4",
-		"@gajae-code/natives": "0.12.4",
-		"@gajae-code/tui": "0.12.4",
-		"@gajae-code/utils": "0.12.4",
+		"@gajae-code/stats": "0.12.5",
+		"@gajae-code/agent-core": "0.12.5",
+		"@gajae-code/ai": "0.12.5",
+		"@gajae-code/bridge-client": "0.12.5",
+		"@gajae-code/natives": "0.12.5",
+		"@gajae-code/tui": "0.12.5",
+		"@gajae-code/utils": "0.12.5",
 		"@puppeteer/browsers": "^2.13.0",
 		"@types/turndown": "5.0.6",
 		"@xterm/headless": "^6.0.0",

package/src/async/job-manager.ts

@@ -164,6 +164,8 @@ export interface SubagentRecord {
 	effectiveModel?: string;
 	/** True when the requested model lacked credentials and the subagent fell back to the parent model. */
 	modelFellBack?: boolean;
+	/** True when the effective subagent provider is in fast mode. */
+	fastMode?: boolean;
 }
 
 /** Lightweight, manager-owned resume payload. The async layer treats `data` as opaque. */
@@ -702,16 +704,22 @@ export class AsyncJobManager {
 		this.#notifyChange();
 	}
 
-	/** Patch model metadata onto an existing subagent record (best-effort; no-op if unknown). */
+	/**
+	 * Patch model/runtime metadata onto an existing subagent record (best-effort; no-op if
+	 * unknown). Every field is optional and omitting one preserves its current value, so a
+	 * narrow patch like `{ fastMode: true }` cannot erase model identity recorded earlier.
+	 * A field therefore cannot be cleared back to `undefined` through this method.
+	 */
 	updateSubagentModel(
 		subagentId: string,
-		model: { requestedModel?: string; effectiveModel?: string; modelFellBack?: boolean },
+		model: { requestedModel?: string; effectiveModel?: string; modelFellBack?: boolean; fastMode?: boolean },
 	): void {
 		const record = this.#subagentRecords.get(subagentId);
 		if (!record) return;
-		record.requestedModel = model.requestedModel;
-		record.effectiveModel = model.effectiveModel;
-		record.modelFellBack = model.modelFellBack;
+		record.requestedModel = model.requestedModel ?? record.requestedModel;
+		record.effectiveModel = model.effectiveModel ?? record.effectiveModel;
+		record.modelFellBack = model.modelFellBack ?? record.modelFellBack;
+		record.fastMode = model.fastMode ?? record.fastMode;
 	}
 
 	#recordFromResumeDescriptor(subagentId: string, filter?: AsyncJobFilter): SubagentRecord | undefined {