@gajae-code/coding-agent 0.12.5 → 0.12.6

package/dist/types/session/client-bridge.d.ts

@@ -55,12 +55,23 @@ export interface ClientBridgeTerminalOutput {
 }
 export interface ClientBridgeTerminalHandle {
     terminalId: string;
+    /** Exact provider lease/session identity that owns this terminal. */
+    providerLeaseId: string;
     waitForExit(): Promise<ClientBridgeTerminalExitStatus>;
     currentOutput(): Promise<ClientBridgeTerminalOutput>;
     kill(): Promise<void>;
     release(): Promise<void>;
+    /** Full authenticated provider identity, when supplied by the transport. */
+    providerLeaseIdentity?: ClientBridgeProviderLeaseIdentity;
+}
+export interface ClientBridgeProviderLeaseIdentity {
+    leaseId: string;
+    connectionId: string;
+    connectionGeneration: number;
+    fence: string;
 }
 export interface ClientBridgeCreateTerminalParams {
+    toolCallId: string;
     command: string;
     args?: string[];
     env?: Array<{
@@ -69,6 +80,7 @@ export interface ClientBridgeCreateTerminalParams {
     }>;
     cwd?: string;
     outputByteLimit?: number;
+    signal?: AbortSignal;
 }
 export interface ClientBridge {
     readonly capabilities: ClientBridgeCapabilities;
@@ -84,5 +96,7 @@ export interface ClientBridge {
         content: string;
     }): Promise<void>;
     createTerminal?(params: ClientBridgeCreateTerminalParams): Promise<ClientBridgeTerminalHandle>;
+    /** Fence the exact provider identity after cleanup ownership becomes uncertain. */
+    quarantineProviderLease?(providerLease: string | ClientBridgeProviderLeaseIdentity, reason: string): Promise<void>;
     requestPermission?(toolCall: ClientBridgePermissionToolCall, options: ClientBridgePermissionOption[], signal?: AbortSignal): Promise<ClientBridgePermissionOutcome>;
 }

package/dist/types/session/internal/managed-session-storage.d.ts

@@ -63,6 +63,8 @@ export declare class ManagedSessionDescendantStore {
     get rootAuthority(): ManagedDirectoryRoot;
     get subtreeRootAuthority(): ManagedDirectoryRoot;
     get securityPolicy(): ManagedSessionSecurityPolicy;
+    get hasRetainedAuthority(): boolean;
+    acquireMutationFence(name: string): Promise<ManagedStorageLock | undefined>;
     get profileAgentDir(): string;
     deriveSubtree(relativePath: string): ManagedSessionDescendantStore;
     retainAuthority(): RecoveryFsRoot | undefined;
@@ -77,6 +79,7 @@ export declare class ManagedSessionDescendantStore {
     publishNoReplace(relativePath: string, bytes: Uint8Array): Promise<void>;
     publishNoReplaceSync(relativePath: string, bytes: Uint8Array): void;
     replace(relativePath: string, bytes: Uint8Array): Promise<void>;
+    replaceExpected(relativePath: string, bytes: Uint8Array, expected: ManagedFileSnapshot): void;
     replaceSync(relativePath: string, bytes: Uint8Array): void;
     appendSync(relativePath: string, bytes: Uint8Array): void;
     /** Read an exact managed file without exposing its pathname as authority. */
@@ -104,9 +107,9 @@ export declare function captureManagedFilePrefixNoFollow(pathname: string, maxBy
 export declare function captureManagedFileNoFollow(pathname: string): ManagedFileSnapshot;
 /** Atomically publishes bytes without replacing an existing destination. */
 export declare function publishManagedFileNoReplace(destination: string, bytes: Uint8Array, assertOwned?: () => void, root?: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy): Promise<void>;
-export declare function publishManagedFileNoReplaceSync(destination: string, bytes: Uint8Array, root?: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy): void;
+export declare function publishManagedFileNoReplaceSync(destination: string, bytes: Uint8Array, root?: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy, assertOwned?: () => void): void;
 /** Replace one managed regular file while retaining the secured staging fd through publication. */
-export declare function replaceManagedFileSync(destination: string, bytes: Uint8Array, root: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy): void;
+export declare function replaceManagedFileSync(destination: string, bytes: Uint8Array, root: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy, assertFence?: () => void): void;
 export declare function replaceManagedFile(destination: string, bytes: Uint8Array, root: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy): Promise<void>;
 /** Copy the exact bytes captured from one no-follow source descriptor. */
 export declare function copyManagedFileNoReplace(source: string, destination: string, snapshot?: ManagedFileSnapshot, root?: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy): Promise<void>;

package/dist/types/session/messages.d.ts

@@ -73,7 +73,10 @@ export declare const PRE_ADMISSION_ARTIFACT_SPILL_TAIL_BYTES = 4096;
  * next provider context is constructed. Byte boundaries never split UTF-8
  * code points, so head/tail recovery remains readable for emoji and CJK text.
  */
-export declare function createPreAdmissionArtifactSpillPreview(fullText: string, artifactId: string, digest: string): string;
+export declare function createPreAdmissionArtifactSpillPreview(fullText: string, artifactId: string, digest: string, options?: {
+    maxInlineBytes?: number;
+    fullOutput?: boolean;
+}): string;
 /**
  * Message type for bash executions via the ! command.
  */

package/dist/types/session/session-manager.d.ts

@@ -4,7 +4,7 @@ import type { ImageContent, Message, MessageAttribution, ServiceTier, TextConten
 import * as native from "@gajae-code/natives";
 import type { TtsrInjectionRecord } from "../export/ttsr";
 import type { ManagedLegacyLocalMigrationSource } from "../internal-urls/local-protocol";
-import { ArtifactManager } from "./artifacts";
+import { ArtifactManager, type ArtifactSaveReceipt } from "./artifacts";
 import { type BlobPutResult, BlobStore } from "./blob-store";
 import { type ManagedMigrationPolicy } from "./internal/managed-session-scope";
 import { type ManagedDirectoryRoot, ManagedSessionDescendantStore } from "./internal/managed-session-storage";
@@ -329,6 +329,7 @@ export interface ResumeSessionIdentity {
     sessionId: string;
     dev: bigint;
     ino: bigint;
+    nlink?: bigint;
     size: number;
     mtimeMs: number;
     mtimeNs: bigint;
@@ -484,7 +485,7 @@ export interface ReadonlySessionManager {
 /** Creates an immutable facade that never exposes SessionManager mutation authority. */
 export declare function createReadonlySessionManager(manager: SessionManager): ReadonlySessionManager;
 /** Internal artifact-writing capability. Read-only facades expose it only through a private weak-map lookup. */
-export type SessionArtifactCapability = Readonly<Pick<SessionManager, "allocateArtifactPath" | "saveArtifact" | "putBlob">>;
+export type SessionArtifactCapability = Readonly<Pick<SessionManager, "allocateArtifactPath" | "saveArtifact" | "getArtifactPath" | "putBlob">>;
 /**
  * Returns the artifact capability for a concrete persistence owner or one of its
  * immutable read-only facades. Structural lookalikes remain unauthorized.
@@ -756,10 +757,11 @@ export declare class SessionManager {
         path?: string;
     }>;
     /**
-     * Save artifact content under the current session and return artifact ID.
-     * Returns an artifact ID for all sessions (file-backed for persistent, in-memory fallback otherwise).
+     * Save artifact content under the current persisted session and return its artifact ID.
+     * In-memory sessions cannot produce protocol-resolvable artifact references.
      */
     saveArtifact(content: string, toolType: string): Promise<string | undefined>;
+    saveArtifactReceipt(content: string, toolType: string): Promise<ArtifactSaveReceipt | undefined>;
     /**
      * Resolve an artifact ID to an on-disk path for the current session.
      * Returns null when missing or when the session is not persisted.

package/dist/types/session/session-storage.d.ts

@@ -3,6 +3,7 @@ import { type ManagedDirectoryRoot } from "./internal/managed-session-storage";
 export interface SessionStorageStat {
     dev: bigint;
     ino: bigint;
+    nlink?: bigint;
     size: number;
     mtimeMs: number;
     mtimeNs: bigint;
@@ -148,6 +149,7 @@ export interface SessionStorage {
 export interface SessionStorageFileIdentity {
     dev: bigint;
     ino: bigint;
+    nlink?: bigint;
     size: number;
     mtimeNs: bigint;
     sha256: string;
@@ -181,12 +183,17 @@ export interface VerifiedSessionDeleteTarget {
     cwd: string;
     /** Expected transcript file `(dev, ino)` captured at authorization. */
     transcriptIdentity: SessionStorageFileIdentity;
+    transcriptParentIdentity?: {
+        dev: bigint;
+        ino: bigint;
+    };
     /**
      * For retry after an `artifacts` `cleanup_pending`: the recorded artifact
      * directory identity to re-accept. A replacement/different artifact directory
      * fails closed. Omit on first attempt or to accept recorded absence.
      */
     expectedArtifactsIdentity?: SessionStorageFileIdentity;
+    artifactsAbsentAtAuthorization?: true;
     /** Stable native recursive-tree evidence captured before artifact detachment. */
     expectedArtifactsTree?: NativeDirectoryTreeSnapshot;
     /** Identity-bound quarantine path retained when recursive artifact cleanup failed. */
@@ -256,6 +263,7 @@ type NativeDirectoryTreeEntry = {
     kind: string;
     dev: string;
     ino: string;
+    nlink: string;
     size: string;
     mtimeNs: string;
     ctimeNs: string;

package/dist/types/session/streaming-output.d.ts

@@ -37,17 +37,40 @@ export interface OutputSummary {
     elidedBytes?: number;
     /** Lines elided from the middle when head-retain mode is active. */
     elidedLines?: number;
+    /** Exact source ranges retained by head/tail middle-elision windows. */
+    headRange?: {
+        start: number;
+        end: number;
+    };
+    tailRange?: {
+        start: number;
+        end: number;
+    };
+    /** The retained tail ends with only a byte fragment of its source line. */
+    lastLinePartial?: boolean;
+    /** The retained head ends with only a byte fragment of its source line. */
+    firstLinePartial?: boolean;
     /** Bytes dropped by the per-line column cap (sum across all lines). */
     columnDroppedBytes?: number;
     /** Number of distinct lines that hit the per-line column cap. */
     columnTruncatedLines?: number;
+    /** Configured per-line byte/column cap that caused visible omission. */
+    columnMax?: number;
     /** Artifact ID for internal URL access (artifact://<id>) when output was persisted. */
     artifactId?: string;
+    /** Artifact existence was proven by successful publication or file finalization. */
+    artifactVerified?: boolean;
     /** Bytes omitted from artifact storage after the artifact hard cap was reached. */
     artifactTruncatedBytes?: number;
+    /** Bytes dropped before the Bash executor received the native output stream. */
+    sourceTruncatedBytes?: number;
+    /** Exact source capture completeness could not be proven. */
+    sourceCaptureIncomplete?: boolean;
     /** Bounded diagnostic when artifact writer or terminal publisher creation, write, finalization, or publication failed. */
     artifactFailureDiagnostic?: string;
 }
+/** Verify that this exact OutputSink summary came from a successful current-execution publication. */
+export declare function hasCurrentExecutionArtifactProof(summary: OutputSummary, artifactId: string, payload?: string): boolean;
 export interface OutputSinkOptions {
     /**
      * Deprecated managed artifact pathname. Bare paths are deliberately ignored:
@@ -112,7 +135,16 @@ export interface TruncationResult {
     elidedBytes?: number;
     /** Lines elided from the middle (truncateMiddle only). */
     elidedLines?: number;
+    headRange?: {
+        start: number;
+        end: number;
+    };
+    tailRange?: {
+        start: number;
+        end: number;
+    };
     lastLinePartial?: boolean;
+    firstLinePartial?: boolean;
     firstLineExceedsLimit?: boolean;
     lastLineExceedsLimit?: boolean;
 }

package/dist/types/task/receipt.d.ts

@@ -70,6 +70,8 @@ export interface TaskResultReceipt {
     forkContextAdvisory?: SingleResult["forkContextAdvisory"];
     /** Resolved repository identity for this delegated lane (#2901). */
     repositoryBinding?: SingleResult["repositoryBinding"];
+    /** Runtime-derived review source disposition and rerun guidance (#3469). */
+    reviewSource?: SingleResult["reviewSource"];
     roi?: TaskRoi;
 }
 /**

package/dist/types/task/types.d.ts

@@ -1,6 +1,7 @@
 import type { ThinkingLevel } from "@gajae-code/agent-core";
 import type { Usage } from "@gajae-code/ai";
 import * as z from "zod/v4";
+import type { ReviewDeliveryDisposition, ReviewSourceLane } from "../gjc-runtime/ultragoal-review-source";
 import type { TaskResultReceipt } from "./receipt";
 import type { SpawnRoiReconciliation } from "./roi-reconciliation";
 import { type TaskSimpleMode } from "./simple-mode";
@@ -65,6 +66,24 @@ export declare const taskItemSchema: z.ZodObject<{
         head: z.ZodOptional<z.ZodString>;
         branch: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>>;
+    reviewSource: z.ZodOptional<z.ZodObject<{
+        schema: z.ZodLiteral<"gjc.review_source_dispatch.v1">;
+        cohortId: z.ZodString;
+        generation: z.ZodNumber;
+        lane: z.ZodEnum<{
+            architect: "architect";
+            cleaner: "cleaner";
+            critic: "critic";
+            qa: "qa";
+        }>;
+        snapshotId: z.ZodString;
+        repositoryBindingDigest: z.ZodString;
+        stateRevision: z.ZodNumber;
+        dispatchId: z.ZodString;
+        rerunCommand: z.ZodString;
+        taskId: z.ZodString;
+        createdAt: z.ZodString;
+    }, z.core.$strict>>;
 }, z.core.$strip>;
 export type TaskItem = z.infer<typeof taskItemSchema>;
 export declare const taskSchema: z.ZodObject<{
@@ -93,6 +112,24 @@ export declare const taskSchema: z.ZodObject<{
             head: z.ZodOptional<z.ZodString>;
             branch: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>>;
+        reviewSource: z.ZodOptional<z.ZodObject<{
+            schema: z.ZodLiteral<"gjc.review_source_dispatch.v1">;
+            cohortId: z.ZodString;
+            generation: z.ZodNumber;
+            lane: z.ZodEnum<{
+                architect: "architect";
+                cleaner: "cleaner";
+                critic: "critic";
+                qa: "qa";
+            }>;
+            snapshotId: z.ZodString;
+            repositoryBindingDigest: z.ZodString;
+            stateRevision: z.ZodNumber;
+            dispatchId: z.ZodString;
+            rerunCommand: z.ZodString;
+            taskId: z.ZodString;
+            createdAt: z.ZodString;
+        }, z.core.$strict>>;
     }, z.core.$strip>>;
     spawnPlan: z.ZodOptional<z.ZodObject<{
         whyParallel: z.ZodString;
@@ -128,6 +165,24 @@ export declare const taskSchemaNoIsolation: z.ZodObject<{
             head: z.ZodOptional<z.ZodString>;
             branch: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>>;
+        reviewSource: z.ZodOptional<z.ZodObject<{
+            schema: z.ZodLiteral<"gjc.review_source_dispatch.v1">;
+            cohortId: z.ZodString;
+            generation: z.ZodNumber;
+            lane: z.ZodEnum<{
+                architect: "architect";
+                cleaner: "cleaner";
+                critic: "critic";
+                qa: "qa";
+            }>;
+            snapshotId: z.ZodString;
+            repositoryBindingDigest: z.ZodString;
+            stateRevision: z.ZodNumber;
+            dispatchId: z.ZodString;
+            rerunCommand: z.ZodString;
+            taskId: z.ZodString;
+            createdAt: z.ZodString;
+        }, z.core.$strict>>;
     }, z.core.$strip>>;
     spawnPlan: z.ZodOptional<z.ZodObject<{
         whyParallel: z.ZodString;
@@ -163,6 +218,24 @@ declare const ALL_TASK_SCHEMAS: readonly [z.ZodObject<{
             head: z.ZodOptional<z.ZodString>;
             branch: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>>;
+        reviewSource: z.ZodOptional<z.ZodObject<{
+            schema: z.ZodLiteral<"gjc.review_source_dispatch.v1">;
+            cohortId: z.ZodString;
+            generation: z.ZodNumber;
+            lane: z.ZodEnum<{
+                architect: "architect";
+                cleaner: "cleaner";
+                critic: "critic";
+                qa: "qa";
+            }>;
+            snapshotId: z.ZodString;
+            repositoryBindingDigest: z.ZodString;
+            stateRevision: z.ZodNumber;
+            dispatchId: z.ZodString;
+            rerunCommand: z.ZodString;
+            taskId: z.ZodString;
+            createdAt: z.ZodString;
+        }, z.core.$strict>>;
     }, z.core.$strip>>;
     spawnPlan: z.ZodOptional<z.ZodObject<{
         whyParallel: z.ZodString;
@@ -197,6 +270,24 @@ declare const ALL_TASK_SCHEMAS: readonly [z.ZodObject<{
             head: z.ZodOptional<z.ZodString>;
             branch: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>>;
+        reviewSource: z.ZodOptional<z.ZodObject<{
+            schema: z.ZodLiteral<"gjc.review_source_dispatch.v1">;
+            cohortId: z.ZodString;
+            generation: z.ZodNumber;
+            lane: z.ZodEnum<{
+                architect: "architect";
+                cleaner: "cleaner";
+                critic: "critic";
+                qa: "qa";
+            }>;
+            snapshotId: z.ZodString;
+            repositoryBindingDigest: z.ZodString;
+            stateRevision: z.ZodNumber;
+            dispatchId: z.ZodString;
+            rerunCommand: z.ZodString;
+            taskId: z.ZodString;
+            createdAt: z.ZodString;
+        }, z.core.$strict>>;
     }, z.core.$strip>>;
     spawnPlan: z.ZodOptional<z.ZodObject<{
         whyParallel: z.ZodString;
@@ -231,6 +322,24 @@ declare const ALL_TASK_SCHEMAS: readonly [z.ZodObject<{
             head: z.ZodOptional<z.ZodString>;
             branch: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>>;
+        reviewSource: z.ZodOptional<z.ZodObject<{
+            schema: z.ZodLiteral<"gjc.review_source_dispatch.v1">;
+            cohortId: z.ZodString;
+            generation: z.ZodNumber;
+            lane: z.ZodEnum<{
+                architect: "architect";
+                cleaner: "cleaner";
+                critic: "critic";
+                qa: "qa";
+            }>;
+            snapshotId: z.ZodString;
+            repositoryBindingDigest: z.ZodString;
+            stateRevision: z.ZodNumber;
+            dispatchId: z.ZodString;
+            rerunCommand: z.ZodString;
+            taskId: z.ZodString;
+            createdAt: z.ZodString;
+        }, z.core.$strict>>;
     }, z.core.$strip>>;
     spawnPlan: z.ZodOptional<z.ZodObject<{
         whyParallel: z.ZodString;
@@ -265,6 +374,24 @@ declare const ALL_TASK_SCHEMAS: readonly [z.ZodObject<{
             head: z.ZodOptional<z.ZodString>;
             branch: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>>;
+        reviewSource: z.ZodOptional<z.ZodObject<{
+            schema: z.ZodLiteral<"gjc.review_source_dispatch.v1">;
+            cohortId: z.ZodString;
+            generation: z.ZodNumber;
+            lane: z.ZodEnum<{
+                architect: "architect";
+                cleaner: "cleaner";
+                critic: "critic";
+                qa: "qa";
+            }>;
+            snapshotId: z.ZodString;
+            repositoryBindingDigest: z.ZodString;
+            stateRevision: z.ZodNumber;
+            dispatchId: z.ZodString;
+            rerunCommand: z.ZodString;
+            taskId: z.ZodString;
+            createdAt: z.ZodString;
+        }, z.core.$strict>>;
     }, z.core.$strip>>;
     spawnPlan: z.ZodOptional<z.ZodObject<{
         whyParallel: z.ZodString;
@@ -299,6 +426,24 @@ declare const ALL_TASK_SCHEMAS: readonly [z.ZodObject<{
             head: z.ZodOptional<z.ZodString>;
             branch: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>>;
+        reviewSource: z.ZodOptional<z.ZodObject<{
+            schema: z.ZodLiteral<"gjc.review_source_dispatch.v1">;
+            cohortId: z.ZodString;
+            generation: z.ZodNumber;
+            lane: z.ZodEnum<{
+                architect: "architect";
+                cleaner: "cleaner";
+                critic: "critic";
+                qa: "qa";
+            }>;
+            snapshotId: z.ZodString;
+            repositoryBindingDigest: z.ZodString;
+            stateRevision: z.ZodNumber;
+            dispatchId: z.ZodString;
+            rerunCommand: z.ZodString;
+            taskId: z.ZodString;
+            createdAt: z.ZodString;
+        }, z.core.$strict>>;
     }, z.core.$strip>>;
     spawnPlan: z.ZodOptional<z.ZodObject<{
         whyParallel: z.ZodString;
@@ -333,6 +478,24 @@ declare const ALL_TASK_SCHEMAS: readonly [z.ZodObject<{
             head: z.ZodOptional<z.ZodString>;
             branch: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>>;
+        reviewSource: z.ZodOptional<z.ZodObject<{
+            schema: z.ZodLiteral<"gjc.review_source_dispatch.v1">;
+            cohortId: z.ZodString;
+            generation: z.ZodNumber;
+            lane: z.ZodEnum<{
+                architect: "architect";
+                cleaner: "cleaner";
+                critic: "critic";
+                qa: "qa";
+            }>;
+            snapshotId: z.ZodString;
+            repositoryBindingDigest: z.ZodString;
+            stateRevision: z.ZodNumber;
+            dispatchId: z.ZodString;
+            rerunCommand: z.ZodString;
+            taskId: z.ZodString;
+            createdAt: z.ZodString;
+        }, z.core.$strict>>;
     }, z.core.$strip>>;
     spawnPlan: z.ZodOptional<z.ZodObject<{
         whyParallel: z.ZodString;
@@ -603,6 +766,21 @@ export interface SingleResult {
         head?: string;
         branch?: string;
     };
+    /** Leader-issued immutable source identity for source-aware review lanes (#3469). */
+    reviewSource?: {
+        schema: "gjc.review_source_dispatch.v1";
+        cohortId: string;
+        generation: number;
+        lane: ReviewSourceLane;
+        snapshotId: string;
+        repositoryBindingDigest: string;
+        stateRevision: number;
+        dispatchId: string;
+        rerunCommand: string;
+        disposition: ReviewDeliveryDisposition;
+        currentSnapshotId?: string;
+        deliveryId?: string;
+    };
 }
 /** True only for complete, factual five-bucket cost accounting. */
 export declare function hasCompleteUsageCostBreakdown(usage: unknown): boolean;

package/dist/types/tools/bash.d.ts

@@ -91,7 +91,7 @@ export declare class BashTool implements AgentTool<BashToolSchema, BashToolDetai
         label: string;
         commandCwd: string;
     }>;
-    execute(_toolCallId: string, { command: rawCommand, env: rawEnv, timeout: rawTimeout, cwd, async: asyncRequested, pty, }: BashToolInput, signal?: AbortSignal, onUpdate?: AgentToolUpdateCallback<BashToolDetails>, ctx?: AgentToolContext): Promise<AgentToolResult<BashToolDetails>>;
+    execute(toolCallId: string, { command: rawCommand, env: rawEnv, timeout: rawTimeout, cwd, async: asyncRequested, pty, }: BashToolInput, signal?: AbortSignal, onUpdate?: AgentToolUpdateCallback<BashToolDetails>, ctx?: AgentToolContext): Promise<AgentToolResult<BashToolDetails>>;
 }
 export interface BashRenderArgs {
     command?: string;

package/dist/types/tools/fetch.d.ts

@@ -49,6 +49,9 @@ export interface ReadUrlToolDetails {
 }
 interface ReadUrlCacheEntry {
     artifactId?: string;
+    artifactVerified?: boolean;
+    artifactFailureDiagnostic?: string;
+    artifactStorageIncomplete?: boolean;
     details: ReadUrlToolDetails;
     image?: FetchImagePayload;
     /** Complete URL output, including its preamble and body. */

package/dist/types/tools/output-meta.d.ts

@@ -4,10 +4,11 @@
  * Tools populate details.meta using the fluent OutputMetaBuilder.
  * The tool wrapper automatically formats and appends notices at message boundary.
  */
-import type { AgentTool } from "@gajae-code/agent-core";
+import type { AgentTool, AgentToolContext, AgentToolResult } from "@gajae-code/agent-core";
 import { type Settings } from "../config/settings";
 import type { Theme } from "../modes/theme/theme";
 import { type OutputSummary, type ReadWindow, type TruncationResult } from "../session/streaming-output";
+export { isValidArtifactId } from "../utils/artifact-id";
 /**
  * Truncation metadata for the output notice.
  */
@@ -48,8 +49,16 @@ export interface TruncationMeta {
     elidedLines?: number;
     /** Artifact ID when output was persisted; completeness is tracked separately below. */
     artifactId?: string;
+    /** Artifact existence was proven by a successful save or publisher receipt. */
+    artifactVerified?: boolean;
     /** Bytes omitted from an artifact after its hard storage cap was reached. */
     artifactTruncatedBytes?: number;
+    /** Bytes dropped before Bash received the native output stream. */
+    sourceTruncatedBytes?: number;
+    /** Exact source capture completeness could not be proven. */
+    sourceCaptureIncomplete?: boolean;
+    /** Bytes omitted from the visible output by per-line column capping. */
+    columnDroppedBytes?: number;
     /** Bounded diagnostic when artifact writer creation, write, or finalization failed. */
     artifactFailureDiagnostic?: string;
     /** Next offset for pagination (head truncation only) */
@@ -103,12 +112,17 @@ export interface OutputMeta {
     source?: SourceMeta;
     diagnostics?: DiagnosticMeta;
     limits?: LimitsMeta;
+    /** Diagnostics were omitted to preserve the configured inline byte cap. */
+    diagnosticsOmitted?: boolean;
 }
 export interface TruncationOptions {
     direction: "head" | "tail" | "middle";
     startLine?: number;
     totalFileLines?: number;
     artifactId?: string;
+    artifactVerified?: boolean;
+    artifactFailureDiagnostic?: string;
+    sourceCaptureIncomplete?: boolean;
     maxBytes?: number;
     noticeOwner?: "body";
 }
@@ -124,6 +138,8 @@ export interface TruncationTextOptions {
     totalBytes?: number;
     maxBytes?: number;
     artifactId?: string;
+    artifactVerified?: boolean;
+    sourceCaptureIncomplete?: boolean;
     noticeOwner?: "body";
 }
 /**
@@ -145,6 +161,7 @@ export declare class OutputMetaBuilder {
     /** Add metadata from the actual head/tail windows retained by middle truncation. */
     truncationWindows(windows: ReadWindow, options?: {
         artifactId?: string;
+        artifactVerified?: boolean;
         noticeOwner?: "body";
         maxBytes?: number;
         rangeBase?: "file" | "window";
@@ -182,10 +199,24 @@ export declare class OutputMetaBuilder {
 /** Create a new OutputMetaBuilder. */
 export declare function outputMeta(): OutputMetaBuilder;
 export declare function formatFullOutputReference(artifactId: string): string;
-/**
- * Format an artifact reference without claiming completeness when storage was hard-capped.
- */
-export declare function formatArtifactReference(artifactId: string, artifactTruncatedBytes?: number): string;
+export interface ArtifactFailurePreview {
+    text: string;
+    omittedBytes: number;
+}
+/** Build a bounded, UTF-8-safe preview when artifact storage cannot retain the full payload. */
+export declare function createArtifactFailurePreview(fullText: string, maxInlineBytes: number | undefined, diagnostic: string): ArtifactFailurePreview;
+/** Format an artifact reference without claiming completeness when capture or storage omitted bytes. */
+export declare function formatArtifactReference(artifactId: string, artifactTruncatedBytes?: number, sourceTruncatedBytes?: number, sourceCaptureIncomplete?: boolean): string;
+export interface ArtifactEvidence {
+    artifactId?: string;
+    artifactVerified?: boolean;
+    artifactTruncatedBytes?: number;
+    sourceTruncatedBytes?: number;
+    sourceCaptureIncomplete?: boolean;
+    artifactFailureDiagnostic?: string;
+    columnDroppedBytes?: number;
+}
+export declare function formatArtifactEvidenceNotice(evidence: ArtifactEvidence): string | undefined;
 export declare function formatTruncationMetaNotice(truncation: TruncationMeta): string;
 /**
  * Format styled artifact reference with warning color and brackets.
@@ -238,6 +269,7 @@ export declare function resolveBashOutputSinkHeadBytes(s: Settings): number;
  * line-buffer post-processing, so one setting controls both surfaces.
  */
 export declare function resolveOutputMaxColumns(s: Settings | undefined): number;
+export declare function finalizeToolResultForDelivery(result: AgentToolResult, toolName: string, context: AgentToolContext | undefined): Promise<AgentToolResult>;
 /**
  * Wrap a tool to:
  * 1. Automatically append output notices based on details.meta

package/dist/types/tools/tool-result.d.ts

@@ -14,6 +14,7 @@ export declare class ToolResultBuilder<TDetails extends DetailsWithMeta> {
     truncation(result: TruncationResult, options: TruncationOptions): this;
     truncationWindows(windows: ReadWindow, options?: {
         artifactId?: string;
+        artifactVerified?: boolean;
         noticeOwner?: "body";
         maxBytes?: number;
         rangeBase?: "file" | "window";

package/dist/types/utils/artifact-id.d.ts

@@ -0,0 +1,2 @@
+/** Artifact protocol IDs are decimal numbers allocated by the session artifact store. */
+export declare function isValidArtifactId(value: unknown): value is string;

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@gajae-code/coding-agent",
-	"version": "0.12.5",
+	"version": "0.12.6",
 	"description": "Gajae Code CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://gajae-code.com",
 	"author": "Yeachan-Heo and Gajae Code Contributors",
@@ -53,13 +53,13 @@
 		"@agentclientprotocol/sdk": "1.3.0",
 		"@babel/parser": "^7.29.3",
 		"@mozilla/readability": "^0.6.0",
-		"@gajae-code/stats": "0.12.5",
-		"@gajae-code/agent-core": "0.12.5",
-		"@gajae-code/ai": "0.12.5",
-		"@gajae-code/bridge-client": "0.12.5",
-		"@gajae-code/natives": "0.12.5",
-		"@gajae-code/tui": "0.12.5",
-		"@gajae-code/utils": "0.12.5",
+		"@gajae-code/stats": "0.12.6",
+		"@gajae-code/agent-core": "0.12.6",
+		"@gajae-code/ai": "0.12.6",
+		"@gajae-code/bridge-client": "0.12.6",
+		"@gajae-code/natives": "0.12.6",
+		"@gajae-code/tui": "0.12.6",
+		"@gajae-code/utils": "0.12.6",
 		"@puppeteer/browsers": "^2.13.0",
 		"@types/turndown": "5.0.6",
 		"@xterm/headless": "^6.0.0",