@gajae-code/coding-agent 0.12.6 → 0.12.7

package/CHANGELOG.md

@@ -2,6 +2,8 @@
 
 ## [Unreleased]
 
+## [0.12.7] - 2026-07-31
+
 ## [0.12.6] - 2026-07-31
 ### Added
 
@@ -10,6 +12,7 @@
 ### Fixed
 
 - Settings now requests a repaint after asynchronous GJC bundle and plugin views rebuild, so loaded content and mutation results appear without an extra keypress (#3643).
+- `todo_write` now rejects unsupported operation keys and treats a bare `done` or `drop` as an error instead of completing or abandoning every task (#3640).
 - Deferred `agent_end` publication again settles public session readiness before slow extension handlers finish, while retaining exact cancellation leases through queued extension delivery and draining that delivery before session shutdown.
 - Ultragoal validation-batch hydration now fails closed unless deferred and final-close evidence exactly matches a complete authoritative cumulative Git/CI inventory and durable batch tuple. Explicit malformed, partial, unknown, reordered, or stale receipt data is rejected; Git path capture is byte-safe, NUL-delimited, and includes untracked files; incomplete capture conservatively requires computer-control QA; shared settings and tool registries cannot use partial diffs to bypass that suite; validate/checkpoint replacement hydration is identical; and current/replacement receipts are byte-bound to ledger payloads (#3541).
 - Fixture quality gates that complete intermediate Ultragoal stories now write file-backed adversarial artifact proof; skill-state hooks and computer red-team fixtures match the unconditional adversarial path check so #3543 CI stays fail-closed without weakening hydration exactness (#3543).
@@ -68,7 +71,6 @@
 - The interactive `Working…` indicator now remains visible and explicitly labels owner-scoped detached background work across foreground completion, provider errors, pending-submission aborts, and job completion, without resurrecting after TUI disposal (#3479).
 - Activity-indicator suspension now detaches and restores the exact owned loader instead of stopping foreign transition UI; optimistic pre-init prompts still show and clear their spinner, context clear retains its eager teardown contract, and resume cancellation preserves transient state until session mutation actually begins.
 - Activity-indicator stop and suspension helpers now fail safely for lightweight controller contexts with absent or partial status rails, while full interactive contexts retain exact loader detach/restore ownership.
-- Bash now uses bounded core-to-native and N-API callback backpressure plus a 64 KiB terminal tail after the core 8 MiB stream budget, emits at most one typed aggregate loss marker, carries source-loss evidence through merged and raw stream cancellation/error paths, bounds ACP terminal lifecycle/output RPC settlement, cleans settled native sessions, labels every combined omission honestly through inline backstops and failure paths, omits false source ranges, and rejects malformed artifact IDs/counts.
 
 ## [0.12.1] - 2026-07-29
 

package/dist/types/async/job-manager.d.ts

@@ -1,6 +1,7 @@
 import type { AgentProgress, AgentSource } from "../task/types";
 export interface AsyncJob {
     id: string;
+    readonly generation: string;
     type: "bash" | "task";
     status: "running" | "completed" | "failed" | "cancelled" | "paused";
     startTime: number;
@@ -41,6 +42,8 @@ export interface AsyncJobMetadata {
         agentSource: AgentSource;
         description?: string;
         assignment?: string;
+        duplicateIdentity?: string;
+        duplicateDisposition?: "warned" | "superseded";
     };
     /** True when this bash job was started by the `monitor` tool (vs plain async bash). */
     monitor?: boolean;
@@ -136,6 +139,11 @@ export interface SubagentRecord {
     modelFellBack?: boolean;
     /** True when the effective subagent provider is in fast mode. */
     fastMode?: boolean;
+    duplicateIdentity?: string;
+    duplicateDisposition?: "warned" | "superseded";
+    terminalGeneration?: string;
+    /** Generation of currentJobId, preventing stale ID reuse from mutating this record. */
+    currentJobGeneration?: string;
 }
 /** Lightweight, manager-owned resume payload. The async layer treats `data` as opaque. */
 export interface ResumeDescriptor {
@@ -200,6 +208,31 @@ export interface AsyncJobRegisterOptions {
 export interface AsyncJobFilter {
     ownerId?: string;
 }
+export type AsyncJobWaitCondition = "all_terminal" | "any_terminal";
+export type AsyncJobWaitOutcome = "completed" | "timed_out_wait" | "interrupted";
+export interface AsyncJobWaitTarget {
+    targetId: string;
+    jobId: string | null;
+    subagentId?: string;
+    generation: string;
+    ownerId?: string;
+    initialStatus: AsyncJob["status"] | "queued" | "not_found";
+}
+export interface AsyncJobWaitResult {
+    outcome: AsyncJobWaitOutcome;
+    condition: AsyncJobWaitCondition;
+    terminalJobIds: string[];
+    pendingJobIds: string[];
+}
+export interface AsyncJobWaitHandle {
+    readonly token: string;
+    readonly result: Promise<AsyncJobWaitResult>;
+    acknowledge(targetIds?: readonly string[]): {
+        acknowledged: boolean;
+        jobIds: string[];
+    };
+    close(): void;
+}
 /**
  * A slice of process-stream output for a background job, as recorded by
  * `appendOutput` / read by `readOutputSince`.
@@ -229,6 +262,8 @@ export declare class AsyncJobManager {
     static setInstance(value: AsyncJobManager | undefined): void;
     /** Reset the process-global instance. Test-only. */
     static resetForTests(): void;
+    resolveSubagentWaitTarget(id: string, filter?: AsyncJobFilter): AsyncJobWaitTarget | undefined;
+    subscribeTerminalWait(targets: readonly AsyncJobWaitTarget[], condition?: AsyncJobWaitCondition): AsyncJobWaitHandle;
     constructor(options: AsyncJobManagerOptions);
     /**
      * Subscribe to live-job-set change events. Returns an unsubscribe function.
@@ -385,5 +420,5 @@ export declare class AsyncJobManager {
     dispose(options?: {
         timeoutMs?: number;
     }): Promise<boolean>;
-    isDeliverySuppressed(jobId: string): boolean;
+    isDeliverySuppressed(jobId: string, generation?: string): boolean;
 }

package/dist/types/eval/backend.d.ts

@@ -10,8 +10,8 @@ export interface ExecutorBackendExecOptions {
     session: ToolSession;
     deadlineMs: number;
     reset: boolean;
-    artifactPath?: string;
-    artifactId?: string;
+    artifactPath: string | undefined;
+    artifactId: string | undefined;
     onChunk: (chunk: string) => void;
 }
 /** Result returned by a backend's execute(). */

package/dist/types/exec/bash-executor.d.ts

@@ -6,7 +6,7 @@ export interface BashArtifactSaveSummary {
     complete: boolean;
     omittedBytes?: number;
 }
-export type BashMinimizedSaveReturn = BashArtifactSaveResult | BashArtifactSaveSummary | undefined;
+export type BashMinimizedSaveReturn = BashArtifactSaveResult | BashArtifactSaveSummary | string | undefined;
 export type BashArtifactSaveResult = {
     status: "saved";
     artifactId: string;
@@ -23,7 +23,7 @@ export type BashArtifactSaveResult = {
     status: "failed";
     diagnostic: string;
 };
-export declare function normalizeMinimizedSaveResultForTests(value: unknown, _originalText?: string): BashArtifactSaveResult;
+export declare function normalizeMinimizedSaveResultForTests(value: BashMinimizedSaveReturn, originalText: string): BashArtifactSaveResult;
 export interface BashExecutorOptions {
     /**
      * Invoked when the native minimizer rewrote the command's output, giving
@@ -80,18 +80,16 @@ export interface BashResult {
     outputBytes: number;
     artifactId?: string;
     artifactTruncatedBytes?: number;
-    /** Bytes dropped before the Bash executor received the native output stream. */
-    sourceTruncatedBytes?: number;
-    /** Exact source capture completeness could not be proven. */
-    sourceCaptureIncomplete?: boolean;
     artifactFailureDiagnostic?: string;
 }
-/** Number of persistent and retiring shell sessions currently retained (owner gauge). */
+/** Number of persistent shell sessions currently retained (owner gauge). */
 export declare function getShellSessionCount(): number;
 /**
- * Dispose all persistent shell sessions without waiting forever on a native
- * abort that failed to settle. Quarantine entries are owner-scoped so a late
- * finalizer cannot erase a successor shell's quarantine.
+ * Dispose all persistent shell sessions: abort in-flight work and drop the
+ * strong references so the native shells can be finalized. Healthy persistent
+ * sessions are otherwise retained for the whole process lifetime (MEM-7). This
+ * is registered as a postmortem cleanup so shutdown/signals release native
+ * shell resources, and is also callable directly (e.g. on owner teardown).
  */
 export declare function disposeAllShellSessions(): Promise<void>;
 /** Translate `ShellMinimizerSettings` into native `MinimizerOptions`, or `undefined` when disabled. */

package/dist/types/gjc-runtime/ultragoal-runtime.d.ts

@@ -3,7 +3,6 @@ import { type RepositoryBinding } from "./repository-binding";
 import { type CriticVerdict } from "./ultragoal-receipt-freshness";
 export { CRITIC_GATE_HARD_STOP_EVENT, CRITIC_GATE_OVERRIDE_EVENT, CRITIC_VERDICT_EVENT, type CriticVerdict, computeUltragoalPlanGeneration, countTerminalCriticVerdicts, receiptRelevantGoals, TERMINAL_CRITIC_CEILING, terminalCriticCeilingReached, terminalCriticGateOverridden, } from "./ultragoal-receipt-freshness";
 export { captureUltragoalRecoverySnapshot, parseStrictTerminalTranscript, persistUltragoalRecoveryDecision, planUltragoalOwnerLossRecovery, type UltragoalOwnerLossReceipt, type UltragoalRecoveryBinding, type UltragoalRecoveryDecision, type UltragoalRecoverySnapshot, validateOwnerLossBinding, validateRawUltragoalEvidence, validateRecoveryAdmission, validateRecoveryPath, } from "./ultragoal-owner-loss-recovery";
-import { createReviewSourceDispatch, type ReviewDeliveryDisposition, type ReviewSourceCohort, type ReviewSourceLane } from "./ultragoal-review-source";
 export type UltragoalGjcGoalMode = "aggregate" | "per-story";
 export type UltragoalGoalStatus = "pending" | "active" | "complete" | "failed" | "blocked" | "review_blocked" | "superseded";
 export interface UltragoalValidationBatchMetadata extends JsonObject {
@@ -43,7 +42,6 @@ export interface UltragoalPlan {
     goals: UltragoalGoal[];
     /** Authoritative repository identity for multi-repo fail-closed spawn (#2901). */
     repositoryBinding?: RepositoryBinding;
-    reviewCohorts?: ReviewSourceCohort[];
     createdAt: string;
     updatedAt: string;
     [key: string]: unknown;
@@ -377,40 +375,6 @@ export declare function addUltragoalSubgoal(input: {
     evidence: string;
     rationale: string;
 }): Promise<UltragoalPlan>;
-export declare function validateUltragoalReviewDispatch(input: {
-    cwd: string;
-    dispatchId: string;
-    cohortId: string;
-    taskId: string;
-    lane: ReviewSourceLane;
-    snapshotId: string;
-    generation: number;
-    repositoryBindingDigest: string;
-    stateRevision: number;
-    rerunCommand: string;
-    taskSourceTaskId: string;
-    createdAt: string;
-}): Promise<void>;
-export declare function freezeUltragoalReviewCohort(input: {
-    cwd: string;
-    workflow?: "ultragoal" | "ralplan";
-}): Promise<ReviewSourceCohort>;
-export declare function dispatchUltragoalReviewLane(input: {
-    cwd: string;
-    cohortId: string;
-    taskId: string;
-    lane: ReviewSourceLane;
-    rerunCommand: string;
-}): Promise<ReturnType<typeof createReviewSourceDispatch>>;
-export declare function classifyUltragoalReviewDelivery(input: {
-    cwd: string;
-    cohortId: string;
-    dispatchId: string;
-    observedDisposition: ReviewDeliveryDisposition;
-}): Promise<{
-    disposition: ReviewDeliveryDisposition;
-    deliveryId: string;
-}>;
 export declare function recordUltragoalReviewBlockers(input: {
     cwd: string;
     goalId: string;

package/dist/types/internal-urls/registry-helpers.d.ts

@@ -1,8 +1,3 @@
-/**
- * Shared helpers for internal-url protocol handlers that resolve session-scoped
- * artifact IDs.
- */
-import { type RecoveryFsRoot } from "@gajae-code/natives";
 import type { ResolveContext } from "./types";
 /**
  * Snapshot of artifacts dirs explicitly authorized for the calling session.
@@ -14,16 +9,3 @@ import type { ResolveContext } from "./types";
  * not an authorization source.
  */
 export declare function authorizedArtifactsDirsFromContext(context?: ResolveContext): string[];
-export interface AuthorizedArtifactsRoot {
-    readonly directory: string;
-    readonly dev: bigint;
-    readonly ino: bigint;
-    readonly authority: RecoveryFsRoot;
-}
-export interface AuthorizedArtifactSnapshot {
-    bytes: Buffer;
-    size: number;
-}
-export declare function openAuthorizedArtifactsRoot(directory: string): AuthorizedArtifactsRoot;
-export declare function closeAuthorizedArtifactsRoot(root: AuthorizedArtifactsRoot): void;
-export declare function readAuthorizedArtifactFile(root: AuthorizedArtifactsRoot, filename: string, maxBytes: number): AuthorizedArtifactSnapshot | null;

package/dist/types/sdk/bus/chat-daemon-control.d.ts

@@ -21,9 +21,7 @@ export type ChatDaemonAction = "stop" | "reload";
  * daemon transports. Generation 16 applies Telegram sound-policy configuration
  * through shared notification parsing. Generation 17 bound managed-session
  * replacement to exact native filesystem authority; generation 18 retired that
- * binding, generation 19 bound exact cleanup to parent/link-count authority,
- * generation 20 refreshed retained cleanup semantics, and generation 21 hardens
- * exact Bash process-tree ownership shared by chat daemon cleanup.
+ * binding, and generation 19 binds exact cleanup to parent/link-count authority.
  */
 export declare const CHAT_DAEMON_GENERATIONS: Readonly<Record<ChatDaemonKind, number>>;
 export declare function chatDaemonGeneration(kind: ChatDaemonKind): number;

package/dist/types/sdk/bus/telegram-daemon-contract.d.ts

@@ -47,11 +47,9 @@ export declare const NOTIFICATION_PROTOCOL_VERSION = 3;
  * user-created topic adoption (forum-topic folder picker). Generation 36 bound
  * managed-session replacement to exact native filesystem authority; generation
  * 37 retires that binding (revert of #3489, which stalled POSIX artifact
- * cleanup); generation 38 binds exact cleanup to parent and link-count authority;
- * generation 39 hardens exact Bash process-tree ownership, settlement, and
- * descendant cleanup authority.
+ * cleanup); generation 38 binds exact cleanup to parent and link-count authority.
  */
-export declare const DAEMON_GENERATION = 39;
+export declare const DAEMON_GENERATION = 38;
 /**
  * Serving-compatibility boundary for daemon lifecycle requests. Epoch 1 covers
  * all builds published before this field existed; epoch 2 covered generation 29;

package/dist/types/sdk/host/host.d.ts

@@ -1,26 +1,17 @@
 import { type EventFrame, SessionEventStream } from "./events";
-import { type ProviderLease, ReverseLeaseRuntime } from "./reverse-leases";
+import { ReverseLeaseRuntime } from "./reverse-leases";
 import type { BrokerIndexWriter, HostEndpointAdapters, SdkFrame } from "./types";
 export type SdkRequestObserver = (kind: "control" | "query", connectionId: string, frame: SdkFrame) => void;
-export interface ProviderLeaseIdentity {
-    leaseId: string;
-    connectionId: string;
-    connectionGeneration: number;
-    fence: string;
-}
-export type ProviderLeaseFence = (identity: ProviderLeaseIdentity, reason?: string) => boolean;
 export interface SessionSdkHostOptions extends HostEndpointAdapters {
     control?: (connectionId: string, frame: SdkFrame) => unknown | Promise<unknown>;
     query?: (connectionId: string, frame: SdkFrame) => unknown | Promise<unknown>;
     /** Best-effort diagnostic observation of accepted control/query frames. */
     onRequest?: SdkRequestObserver;
-    onFrameOverflow?: (connectionId: string) => void;
     /** Runs before a control response is sent; identity transitions use sendTerminal. */
     beforeControlResponse?: (connectionId: string, request: SdkFrame, response: SdkFrame, sendTerminal: () => Promise<void>) => void | Promise<void>;
     /** Runs only after a successful control response has been sent to the client. */
     afterControlResponse?: (connectionId: string, request: SdkFrame, response: SdkFrame) => void | Promise<void>;
-    onProviderLeaseRegistered?: (lease: ProviderLease, connectionGeneration: number) => void;
-    installProviderDefinitions?: (capability: string, definitions: unknown, leaseId: string, connectionId: string, connectionGeneration: number) => void;
+    installProviderDefinitions?: (capability: string, definitions: unknown) => void;
     onProviderDefinitionsRemoved?: (capability: string) => void;
     onReverseCancel?: (requestId: string, reason: "provider_disconnected" | "lease_released") => void;
     /** Best-effort capabilities mirrored from the native transport for out-of-band consumers. */
@@ -38,20 +29,8 @@ export declare class SessionSdkHost {
     get generation(): number;
     /** Current installed definitions for a live provider capability. */
     getProviderDefinitions(capability: string): unknown | undefined;
-    /** Mark a transport connection live and return its stable generation. */
-    handleConnect(connectionId: string): number;
-    /** Current generation for a transport connection, if it has been observed. */
-    connectionGeneration(connectionId: string): number;
-    isConnectionOpen(connectionId: string, generation?: number): boolean;
     /** Release reverse leases after the transport reports a WebSocket disconnect. */
     handleDisconnect(connectionId: string): void;
-    /**
-     * Fences one exact provider lease after uncertain terminal cleanup. The fence
-     * is idempotent for the same identity and never affects a newer generation.
-     */
-    quarantineProviderLease(identity: ProviderLeaseIdentity, _reason?: string): boolean;
-    /** Dispatch a frame through bounded per-connection asynchronous admission. */
-    dispatchFrame(connectionId: string, frame: SdkFrame): Promise<void>;
     /** Adds an event to the resumable event ring. Transport delivery is owned by bus wiring. */
     emitEvent(frame: SdkFrame): EventFrame;
     start(): Promise<"started" | "already">;

package/dist/types/sdk/host/reverse-leases.d.ts

@@ -3,10 +3,7 @@ export declare const REVERSE_HEARTBEAT_MS = 5000;
 export declare const REVERSE_LEASE_TTL_MS = 15000;
 export declare const REVERSE_RECLAIM_GRACE_MS = 15000;
 export declare const MAX_REVERSE_OUTSTANDING = 64;
-export declare const MAX_REVERSE_CLEANUP_OUTSTANDING = 2;
 export declare const MAX_REVERSE_PAYLOAD_BYTES: number;
-export declare const MAX_REVERSE_TERMINAL_OUTPUT_BYTES: number;
-export declare const MAX_REVERSE_TERMINAL_OUTPUT_PAYLOAD_BYTES: number;
 export declare class ReverseLeaseError extends Error {
     readonly code: "lease_unavailable" | "lease_expired" | "provider_lease_conflict" | "provider_required" | "not_lease_owner" | "payload_too_large" | "too_many_outstanding" | "unknown_request" | "idempotency_conflict";
     constructor(code: "lease_unavailable" | "lease_expired" | "provider_lease_conflict" | "provider_required" | "not_lease_owner" | "payload_too_large" | "too_many_outstanding" | "unknown_request" | "idempotency_conflict", message?: "idempotency_conflict" | "lease_expired" | "lease_unavailable" | "not_lease_owner" | "payload_too_large" | "provider_lease_conflict" | "provider_required" | "too_many_outstanding" | "unknown_request");
@@ -24,7 +21,7 @@ export interface ReverseLeaseOptions {
     now?: () => number;
     leaseTtlMs?: number;
     sendFrame: (connectionId: string, frame: SdkFrame) => void | Promise<void>;
-    installDefinitions?: (capability: string, definitions: unknown, leaseId: string, connectionId: string, connectionGeneration: number) => void;
+    installDefinitions?: (capability: string, definitions: unknown) => void;
     onCancel?: (requestId: string, reason: "provider_disconnected" | "lease_released") => void;
     onDefinitionsRemoved?: (capability: string) => void;
 }
@@ -32,15 +29,15 @@ export interface ReverseLeaseOptions {
 export declare class ReverseLeaseRuntime {
     #private;
     constructor(options: ReverseLeaseOptions);
-    registerProvider(connectionId: string, capability: string, definitions: unknown, expectedLeaseId?: string, idempotencyKey?: string, connectionGeneration?: number): ProviderLease;
+    registerProvider(connectionId: string, capability: string, definitions: unknown, expectedLeaseId?: string, idempotencyKey?: string): ProviderLease;
     heartbeat(connectionId: string, leaseId: string): ProviderLease;
     release(connectionId: string, leaseId: string, handoffTo?: string): ProviderLease;
     disconnect(connectionId: string): void;
-    request(capability: string, method: string, payload: unknown, signal?: AbortSignal, expectedLeaseId?: string, cleanup?: boolean, expectedConnectionId?: string): Promise<unknown>;
+    request(capability: string, method: string, payload: unknown, signal?: AbortSignal): Promise<unknown>;
     respond(connectionId: string, id: string, leaseId: string, result: unknown, error?: {
         code: string;
         message: string;
-    }, wireEnvelope?: unknown): void;
+    }): void;
     getLease(capability: string): ProviderLease | undefined;
     /** Installed definitions are observable only while their provider lease is live. */
     getInstalledDefinitions(capability: string): unknown | undefined;

package/dist/types/session/artifacts.d.ts

@@ -16,11 +16,6 @@ export interface ManagedOutputGeneration {
 export interface ArtifactSaveOptions {
     maxBytes?: number;
 }
-export interface ArtifactSaveReceipt {
-    id: string;
-    complete: boolean;
-    omittedBytes?: number;
-}
 /**
  * Manages artifact storage for a session.
  *
@@ -73,9 +68,11 @@ export declare class ArtifactManager {
         id: string;
         path?: string;
     }>;
-    /** Save content and return the artifact ID plus exact storage completeness evidence. */
-    saveWithReceipt(content: string, toolType: string, options?: ArtifactSaveOptions): Promise<ArtifactSaveReceipt>;
-    /** Save content as an artifact and return the artifact ID. */
+    /**
+     * Save content as an artifact and return the artifact ID.
+     * Content is written to a private temporary inode, synced, and linked into
+     * the artifact directory only after the complete terminal payload exists.
+     */
     save(content: string, toolType: string, options?: ArtifactSaveOptions): Promise<string>;
     /**
      * Check if an artifact exists.

package/dist/types/session/client-bridge.d.ts

@@ -55,23 +55,12 @@ export interface ClientBridgeTerminalOutput {
 }
 export interface ClientBridgeTerminalHandle {
     terminalId: string;
-    /** Exact provider lease/session identity that owns this terminal. */
-    providerLeaseId: string;
     waitForExit(): Promise<ClientBridgeTerminalExitStatus>;
     currentOutput(): Promise<ClientBridgeTerminalOutput>;
     kill(): Promise<void>;
     release(): Promise<void>;
-    /** Full authenticated provider identity, when supplied by the transport. */
-    providerLeaseIdentity?: ClientBridgeProviderLeaseIdentity;
-}
-export interface ClientBridgeProviderLeaseIdentity {
-    leaseId: string;
-    connectionId: string;
-    connectionGeneration: number;
-    fence: string;
 }
 export interface ClientBridgeCreateTerminalParams {
-    toolCallId: string;
     command: string;
     args?: string[];
     env?: Array<{
@@ -80,7 +69,6 @@ export interface ClientBridgeCreateTerminalParams {
     }>;
     cwd?: string;
     outputByteLimit?: number;
-    signal?: AbortSignal;
 }
 export interface ClientBridge {
     readonly capabilities: ClientBridgeCapabilities;
@@ -96,7 +84,5 @@ export interface ClientBridge {
         content: string;
     }): Promise<void>;
     createTerminal?(params: ClientBridgeCreateTerminalParams): Promise<ClientBridgeTerminalHandle>;
-    /** Fence the exact provider identity after cleanup ownership becomes uncertain. */
-    quarantineProviderLease?(providerLease: string | ClientBridgeProviderLeaseIdentity, reason: string): Promise<void>;
     requestPermission?(toolCall: ClientBridgePermissionToolCall, options: ClientBridgePermissionOption[], signal?: AbortSignal): Promise<ClientBridgePermissionOutcome>;
 }

package/dist/types/session/internal/managed-session-storage.d.ts

@@ -63,8 +63,6 @@ export declare class ManagedSessionDescendantStore {
     get rootAuthority(): ManagedDirectoryRoot;
     get subtreeRootAuthority(): ManagedDirectoryRoot;
     get securityPolicy(): ManagedSessionSecurityPolicy;
-    get hasRetainedAuthority(): boolean;
-    acquireMutationFence(name: string): Promise<ManagedStorageLock | undefined>;
     get profileAgentDir(): string;
     deriveSubtree(relativePath: string): ManagedSessionDescendantStore;
     retainAuthority(): RecoveryFsRoot | undefined;
@@ -79,7 +77,6 @@ export declare class ManagedSessionDescendantStore {
     publishNoReplace(relativePath: string, bytes: Uint8Array): Promise<void>;
     publishNoReplaceSync(relativePath: string, bytes: Uint8Array): void;
     replace(relativePath: string, bytes: Uint8Array): Promise<void>;
-    replaceExpected(relativePath: string, bytes: Uint8Array, expected: ManagedFileSnapshot): void;
     replaceSync(relativePath: string, bytes: Uint8Array): void;
     appendSync(relativePath: string, bytes: Uint8Array): void;
     /** Read an exact managed file without exposing its pathname as authority. */
@@ -107,9 +104,9 @@ export declare function captureManagedFilePrefixNoFollow(pathname: string, maxBy
 export declare function captureManagedFileNoFollow(pathname: string): ManagedFileSnapshot;
 /** Atomically publishes bytes without replacing an existing destination. */
 export declare function publishManagedFileNoReplace(destination: string, bytes: Uint8Array, assertOwned?: () => void, root?: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy): Promise<void>;
-export declare function publishManagedFileNoReplaceSync(destination: string, bytes: Uint8Array, root?: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy, assertOwned?: () => void): void;
+export declare function publishManagedFileNoReplaceSync(destination: string, bytes: Uint8Array, root?: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy): void;
 /** Replace one managed regular file while retaining the secured staging fd through publication. */
-export declare function replaceManagedFileSync(destination: string, bytes: Uint8Array, root: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy, assertFence?: () => void): void;
+export declare function replaceManagedFileSync(destination: string, bytes: Uint8Array, root: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy): void;
 export declare function replaceManagedFile(destination: string, bytes: Uint8Array, root: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy): Promise<void>;
 /** Copy the exact bytes captured from one no-follow source descriptor. */
 export declare function copyManagedFileNoReplace(source: string, destination: string, snapshot?: ManagedFileSnapshot, root?: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy): Promise<void>;

package/dist/types/session/messages.d.ts

@@ -73,10 +73,7 @@ export declare const PRE_ADMISSION_ARTIFACT_SPILL_TAIL_BYTES = 4096;
  * next provider context is constructed. Byte boundaries never split UTF-8
  * code points, so head/tail recovery remains readable for emoji and CJK text.
  */
-export declare function createPreAdmissionArtifactSpillPreview(fullText: string, artifactId: string, digest: string, options?: {
-    maxInlineBytes?: number;
-    fullOutput?: boolean;
-}): string;
+export declare function createPreAdmissionArtifactSpillPreview(fullText: string, artifactId: string, digest: string): string;
 /**
  * Message type for bash executions via the ! command.
  */

package/dist/types/session/session-manager.d.ts

@@ -4,7 +4,7 @@ import type { ImageContent, Message, MessageAttribution, ServiceTier, TextConten
 import * as native from "@gajae-code/natives";
 import type { TtsrInjectionRecord } from "../export/ttsr";
 import type { ManagedLegacyLocalMigrationSource } from "../internal-urls/local-protocol";
-import { ArtifactManager, type ArtifactSaveReceipt } from "./artifacts";
+import { ArtifactManager } from "./artifacts";
 import { type BlobPutResult, BlobStore } from "./blob-store";
 import { type ManagedMigrationPolicy } from "./internal/managed-session-scope";
 import { type ManagedDirectoryRoot, ManagedSessionDescendantStore } from "./internal/managed-session-storage";
@@ -485,7 +485,7 @@ export interface ReadonlySessionManager {
 /** Creates an immutable facade that never exposes SessionManager mutation authority. */
 export declare function createReadonlySessionManager(manager: SessionManager): ReadonlySessionManager;
 /** Internal artifact-writing capability. Read-only facades expose it only through a private weak-map lookup. */
-export type SessionArtifactCapability = Readonly<Pick<SessionManager, "allocateArtifactPath" | "saveArtifact" | "getArtifactPath" | "putBlob">>;
+export type SessionArtifactCapability = Readonly<Pick<SessionManager, "allocateArtifactPath" | "saveArtifact" | "putBlob">>;
 /**
  * Returns the artifact capability for a concrete persistence owner or one of its
  * immutable read-only facades. Structural lookalikes remain unauthorized.
@@ -757,11 +757,10 @@ export declare class SessionManager {
         path?: string;
     }>;
     /**
-     * Save artifact content under the current persisted session and return its artifact ID.
-     * In-memory sessions cannot produce protocol-resolvable artifact references.
+     * Save artifact content under the current session and return artifact ID.
+     * Returns an artifact ID for all sessions (file-backed for persistent, in-memory fallback otherwise).
      */
     saveArtifact(content: string, toolType: string): Promise<string | undefined>;
-    saveArtifactReceipt(content: string, toolType: string): Promise<ArtifactSaveReceipt | undefined>;
     /**
      * Resolve an artifact ID to an on-disk path for the current session.
      * Returns null when missing or when the session is not persisted.

package/dist/types/session/streaming-output.d.ts

@@ -37,40 +37,17 @@ export interface OutputSummary {
     elidedBytes?: number;
     /** Lines elided from the middle when head-retain mode is active. */
     elidedLines?: number;
-    /** Exact source ranges retained by head/tail middle-elision windows. */
-    headRange?: {
-        start: number;
-        end: number;
-    };
-    tailRange?: {
-        start: number;
-        end: number;
-    };
-    /** The retained tail ends with only a byte fragment of its source line. */
-    lastLinePartial?: boolean;
-    /** The retained head ends with only a byte fragment of its source line. */
-    firstLinePartial?: boolean;
     /** Bytes dropped by the per-line column cap (sum across all lines). */
     columnDroppedBytes?: number;
     /** Number of distinct lines that hit the per-line column cap. */
     columnTruncatedLines?: number;
-    /** Configured per-line byte/column cap that caused visible omission. */
-    columnMax?: number;
     /** Artifact ID for internal URL access (artifact://<id>) when output was persisted. */
     artifactId?: string;
-    /** Artifact existence was proven by successful publication or file finalization. */
-    artifactVerified?: boolean;
     /** Bytes omitted from artifact storage after the artifact hard cap was reached. */
     artifactTruncatedBytes?: number;
-    /** Bytes dropped before the Bash executor received the native output stream. */
-    sourceTruncatedBytes?: number;
-    /** Exact source capture completeness could not be proven. */
-    sourceCaptureIncomplete?: boolean;
     /** Bounded diagnostic when artifact writer or terminal publisher creation, write, finalization, or publication failed. */
     artifactFailureDiagnostic?: string;
 }
-/** Verify that this exact OutputSink summary came from a successful current-execution publication. */
-export declare function hasCurrentExecutionArtifactProof(summary: OutputSummary, artifactId: string, payload?: string): boolean;
 export interface OutputSinkOptions {
     /**
      * Deprecated managed artifact pathname. Bare paths are deliberately ignored:
@@ -135,16 +112,7 @@ export interface TruncationResult {
     elidedBytes?: number;
     /** Lines elided from the middle (truncateMiddle only). */
     elidedLines?: number;
-    headRange?: {
-        start: number;
-        end: number;
-    };
-    tailRange?: {
-        start: number;
-        end: number;
-    };
     lastLinePartial?: boolean;
-    firstLinePartial?: boolean;
     firstLineExceedsLimit?: boolean;
     lastLineExceedsLimit?: boolean;
 }

package/dist/types/task/receipt.d.ts

@@ -43,6 +43,7 @@ export interface TaskResultReceipt {
         summary: string;
     };
     errorSummary?: string;
+    duplicateDisposition?: SingleResult["duplicateDisposition"];
     abortSummary?: string;
     preview: string;
     previewTruncated: boolean;
@@ -70,8 +71,6 @@ export interface TaskResultReceipt {
     forkContextAdvisory?: SingleResult["forkContextAdvisory"];
     /** Resolved repository identity for this delegated lane (#2901). */
     repositoryBinding?: SingleResult["repositoryBinding"];
-    /** Runtime-derived review source disposition and rerun guidance (#3469). */
-    reviewSource?: SingleResult["reviewSource"];
     roi?: TaskRoi;
 }
 /**