@gajae-code/coding-agent 0.12.6 → 0.12.8

package/CHANGELOG.md

@@ -2,6 +2,23 @@
 
 ## [Unreleased]
 
+## [0.12.8] - 2026-08-02
+### Added
+
+- Added the paginated public SDK query `providers.list/active` (Q29), returning deterministic, deduplicated `{ provider, connectionKind }` descriptors for locally eligible providers without exposing credentials or performing remote health probes.
+
+### Added
+
+- Notification settings now expose first-class Telegram, Discord, and Slack configuration, desired-intent toggles, provider-local quarantine and repair guidance, explicit `keep | replace | remove` secret actions, provider-specific health/test diagnostics, and truthful saved-but-runtime-degraded outcomes. The global master preserves provider credentials and intent, `GJC_NOTIFICATIONS=0` suppresses only automatic generic-session admission, and blocked Telegram ownership uses an isolated chat-only endpoint so verified Discord or Slack siblings can continue without exposing the shared endpoint.
+
+### Fixed
+
+- Ordinary `ask` selectors now bound long question premises and page through every premise row without skipping rows hidden by overflow indicators (#3675).
+- First-event timeout retries now require a typed, content-free failure from the current clean attempt scope, preventing prior or stale extension activity from suppressing or admitting a later request (#3553).
+- The issue-1979 Korean prose wrap test now cleans up inherited multiplexer env vars (`TMUX`, `TMUX_PANE`, etc.) so it deterministically exercises the plain-terminal render path regardless of the CI runner's terminal session (#1979).
+- The model selector's assignment menu now shows the model each role currently resolves to (`Set as EXECUTOR (Executor) — now: anthropic/claude-haiku-4-5`), distinguishing an unset default, a role that inherits the default, and a configured-but-unresolvable selector. Previously the role rows were unlabeled, so the only way to learn a role's model was to scan the whole 800+ entry model list for role badges.
+## [0.12.7] - 2026-07-31
+
 ## [0.12.6] - 2026-07-31
 ### Added
 
@@ -10,6 +27,7 @@
 ### Fixed
 
 - Settings now requests a repaint after asynchronous GJC bundle and plugin views rebuild, so loaded content and mutation results appear without an extra keypress (#3643).
+- `todo_write` now rejects unsupported operation keys and treats a bare `done` or `drop` as an error instead of completing or abandoning every task (#3640).
 - Deferred `agent_end` publication again settles public session readiness before slow extension handlers finish, while retaining exact cancellation leases through queued extension delivery and draining that delivery before session shutdown.
 - Ultragoal validation-batch hydration now fails closed unless deferred and final-close evidence exactly matches a complete authoritative cumulative Git/CI inventory and durable batch tuple. Explicit malformed, partial, unknown, reordered, or stale receipt data is rejected; Git path capture is byte-safe, NUL-delimited, and includes untracked files; incomplete capture conservatively requires computer-control QA; shared settings and tool registries cannot use partial diffs to bypass that suite; validate/checkpoint replacement hydration is identical; and current/replacement receipts are byte-bound to ledger payloads (#3541).
 - Fixture quality gates that complete intermediate Ultragoal stories now write file-backed adversarial artifact proof; skill-state hooks and computer red-team fixtures match the unconditional adversarial path check so #3543 CI stays fail-closed without weakening hydration exactness (#3543).
@@ -25,6 +43,10 @@
 
 - Canonical wrapped first-event timeouts now continue the same clean turn through bounded retries and configured fallback rotation, while preserving replay-safety, cancellation, provider-terminal policies, exact attempt diagnostics, and task/subagent retry-status truth (#3553).
 - Runtime skill discovery now preserves a candidate when its exact skill name appears as a query token, so additional task-specific terms no longer discard an explicitly named skill.
+### Fixed
+
+- Managed-session deletion now immediately continues a descriptor-authorized POSIX artifact detach through exact payload scrubbing before retiring the transcript. Durable direct and replay cleanup preserve substituted successors, while fork regressions use an explicit snapshot barrier instead of scheduler timing.
+- Managed-session migration keeps a definitely live holder exclusive beyond the 60-second lease without timer-dependent self-fencing, permits immediate successor acquisition only after explicit release or proven process death, and surfaces capacity/busy startup failures through fixed path/content-redacted guidance (#3508).
 
 ## [0.12.5] - 2026-07-30
 ### Fixed
@@ -68,7 +90,6 @@
 - The interactive `Working…` indicator now remains visible and explicitly labels owner-scoped detached background work across foreground completion, provider errors, pending-submission aborts, and job completion, without resurrecting after TUI disposal (#3479).
 - Activity-indicator suspension now detaches and restores the exact owned loader instead of stopping foreign transition UI; optimistic pre-init prompts still show and clear their spinner, context clear retains its eager teardown contract, and resume cancellation preserves transient state until session mutation actually begins.
 - Activity-indicator stop and suspension helpers now fail safely for lightweight controller contexts with absent or partial status rails, while full interactive contexts retain exact loader detach/restore ownership.
-- Bash now uses bounded core-to-native and N-API callback backpressure plus a 64 KiB terminal tail after the core 8 MiB stream budget, emits at most one typed aggregate loss marker, carries source-loss evidence through merged and raw stream cancellation/error paths, bounds ACP terminal lifecycle/output RPC settlement, cleans settled native sessions, labels every combined omission honestly through inline backstops and failure paths, omits false source ranges, and rejects malformed artifact IDs/counts.
 
 ## [0.12.1] - 2026-07-29
 

package/dist/types/async/job-manager.d.ts

@@ -1,6 +1,7 @@
 import type { AgentProgress, AgentSource } from "../task/types";
 export interface AsyncJob {
     id: string;
+    readonly generation: string;
     type: "bash" | "task";
     status: "running" | "completed" | "failed" | "cancelled" | "paused";
     startTime: number;
@@ -41,6 +42,8 @@ export interface AsyncJobMetadata {
         agentSource: AgentSource;
         description?: string;
         assignment?: string;
+        duplicateIdentity?: string;
+        duplicateDisposition?: "warned" | "superseded";
     };
     /** True when this bash job was started by the `monitor` tool (vs plain async bash). */
     monitor?: boolean;
@@ -136,6 +139,11 @@ export interface SubagentRecord {
     modelFellBack?: boolean;
     /** True when the effective subagent provider is in fast mode. */
     fastMode?: boolean;
+    duplicateIdentity?: string;
+    duplicateDisposition?: "warned" | "superseded";
+    terminalGeneration?: string;
+    /** Generation of currentJobId, preventing stale ID reuse from mutating this record. */
+    currentJobGeneration?: string;
 }
 /** Lightweight, manager-owned resume payload. The async layer treats `data` as opaque. */
 export interface ResumeDescriptor {
@@ -200,6 +208,31 @@ export interface AsyncJobRegisterOptions {
 export interface AsyncJobFilter {
     ownerId?: string;
 }
+export type AsyncJobWaitCondition = "all_terminal" | "any_terminal";
+export type AsyncJobWaitOutcome = "completed" | "timed_out_wait" | "interrupted";
+export interface AsyncJobWaitTarget {
+    targetId: string;
+    jobId: string | null;
+    subagentId?: string;
+    generation: string;
+    ownerId?: string;
+    initialStatus: AsyncJob["status"] | "queued" | "not_found";
+}
+export interface AsyncJobWaitResult {
+    outcome: AsyncJobWaitOutcome;
+    condition: AsyncJobWaitCondition;
+    terminalJobIds: string[];
+    pendingJobIds: string[];
+}
+export interface AsyncJobWaitHandle {
+    readonly token: string;
+    readonly result: Promise<AsyncJobWaitResult>;
+    acknowledge(targetIds?: readonly string[]): {
+        acknowledged: boolean;
+        jobIds: string[];
+    };
+    close(): void;
+}
 /**
  * A slice of process-stream output for a background job, as recorded by
  * `appendOutput` / read by `readOutputSince`.
@@ -229,6 +262,8 @@ export declare class AsyncJobManager {
     static setInstance(value: AsyncJobManager | undefined): void;
     /** Reset the process-global instance. Test-only. */
     static resetForTests(): void;
+    resolveSubagentWaitTarget(id: string, filter?: AsyncJobFilter): AsyncJobWaitTarget | undefined;
+    subscribeTerminalWait(targets: readonly AsyncJobWaitTarget[], condition?: AsyncJobWaitCondition): AsyncJobWaitHandle;
     constructor(options: AsyncJobManagerOptions);
     /**
      * Subscribe to live-job-set change events. Returns an unsubscribe function.
@@ -385,5 +420,5 @@ export declare class AsyncJobManager {
     dispose(options?: {
         timeoutMs?: number;
     }): Promise<boolean>;
-    isDeliverySuppressed(jobId: string): boolean;
+    isDeliverySuppressed(jobId: string, generation?: string): boolean;
 }

package/dist/types/commands/notify.d.ts

@@ -55,6 +55,10 @@ export default class Notify extends Command {
         redact: import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
             description: string;
         };
+        provider: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+            options: string[];
+        };
         probe: import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
             description: string;
         };

package/dist/types/config/file-lock.d.ts

@@ -3,6 +3,9 @@ export interface FileLockOptions {
     retries?: number;
     retryDelayMs?: number;
 }
+export declare const FileLockTestHooks: {
+    afterParentMkdir?: (lockPath: string) => void | Promise<void>;
+};
 /**
  * Returns the OS-provided process start timestamp for PID-reuse detection.
  * `ps` is available on the supported Unix hosts (macOS and Linux), unlike

package/dist/types/config/model-discovery-manager.d.ts

@@ -25,13 +25,17 @@ export interface DiscoveryMergeInput {
     models: readonly Model<Api>[];
     state: ProviderDiscoveryState;
     warning?: string;
+    authGeneration?: string;
+    fetched?: boolean;
 }
 export interface ProviderDiscoveryCallbacks<TProvider extends DiscoveryProvider> {
     cacheDbPath?: string;
     requiresAuth: (provider: TProvider) => boolean;
     peekApiKey: (provider: TProvider) => Promise<string | undefined>;
     isAuthenticated: (apiKey: string | undefined) => boolean;
-    fetchModels: (provider: TProvider) => Promise<Model<Api>[]>;
+    fetchModels: (provider: TProvider, apiKey: string | undefined) => Promise<Model<Api>[]>;
+    getEvidenceGeneration?: (provider: TProvider) => string;
+    canPublishCache?: (provider: TProvider) => boolean;
 }
 /** Owns configured discovery inputs, status, cache lifecycle, and refresh generations. */
 export declare class ModelDiscoveryManager<TProvider extends DiscoveryProvider> {
@@ -42,6 +46,7 @@ export declare class ModelDiscoveryManager<TProvider extends DiscoveryProvider>
     get providers(): readonly TProvider[];
     providerIds(): Set<string>;
     getState(provider: string): ProviderDiscoveryState | undefined;
+    invalidate(provider: string): void;
     loadCached(provider: TProvider, cacheDbPath?: string): readonly Model<Api>[];
     beginRefresh(provider: string): DiscoveryRefreshToken;
     isCurrent(token: DiscoveryRefreshToken): boolean;

package/dist/types/config/model-registry.d.ts

@@ -1,6 +1,7 @@
 import { type Api, type AssistantMessageEventStream, type AuthCredentialSelector, type CacheRetention, type Context, type Model, type ModelRefreshStrategy, type ModelRequestTransform, type SimpleStreamOptions, type ThinkingConfig } from "@gajae-code/ai";
 import type { OAuthCredentials, OAuthLoginCallbacks } from "@gajae-code/ai/utils/oauth/types";
 import { type ThemeColor } from "../modes/theme/theme";
+import { type ActiveProviderDescriptor } from "../sdk/providers";
 import type { AuthStorage } from "../session/auth-storage";
 import type { ActiveSearchModelContext, WebSearchMode } from "../web/search/types";
 import { type ConfigError, ConfigFile } from "./config-file";
@@ -360,6 +361,7 @@ export declare class ModelRegistry {
      * This is a fast check that doesn't refresh OAuth tokens.
      */
     getAvailable(): Model<Api>[];
+    getActiveProviders(): ActiveProviderDescriptor[];
     /**
      * Check whether auth is configured for a model's provider.
      *

package/dist/types/config/resolve-config-value.d.ts

@@ -7,8 +7,9 @@
  * Resolve a config value (API key, header value, etc.) to an actual value.
  * - If starts with "!", executes the rest as a shell command and uses stdout (cached)
  * - Otherwise checks environment variable first, then treats as literal (not cached)
+ * - `cacheScope` isolates command-cache entries when a caller rotates its config
  */
-export declare function resolveConfigValue(config: string): Promise<string | undefined>;
+export declare function resolveConfigValue(config: string, cacheScope?: string): Promise<string | undefined>;
 /**
  * Resolve all header values using the same resolution logic as API keys.
  */

package/dist/types/config/settings-schema.d.ts

@@ -69,7 +69,7 @@ export type AnyUiMetadata = UiBase & {
 };
 interface BooleanDef {
     type: "boolean";
-    default: boolean;
+    default?: boolean;
     ui?: UiBoolean;
 }
 interface StringDef {
@@ -143,6 +143,9 @@ export declare const SETTINGS_SCHEMA: {
         readonly type: "boolean";
         readonly default: false;
     };
+    readonly "notifications.telegram.enabled": {
+        readonly type: "boolean";
+    };
     readonly "notifications.telegram.botToken": {
         readonly type: "string";
         readonly default: undefined;
@@ -209,6 +212,9 @@ export declare const SETTINGS_SCHEMA: {
         readonly type: "string";
         readonly default: undefined;
     };
+    readonly "notifications.discord.enabled": {
+        readonly type: "boolean";
+    };
     readonly "notifications.discord.botToken": {
         readonly type: "string";
         readonly default: undefined;
@@ -225,6 +231,9 @@ export declare const SETTINGS_SCHEMA: {
         readonly type: "string";
         readonly default: undefined;
     };
+    readonly "notifications.slack.enabled": {
+        readonly type: "boolean";
+    };
     readonly "notifications.slack.botToken": {
         readonly type: "string";
         readonly default: undefined;
@@ -4186,7 +4195,10 @@ export type SettingPath = keyof Schema;
 /** Infer the value type for a setting path */
 export type SettingValue<P extends SettingPath> = Schema[P] extends {
     type: "boolean";
+    default: boolean;
 } ? boolean : Schema[P] extends {
+    type: "boolean";
+} ? boolean | undefined : Schema[P] extends {
     type: "string";
 } ? string | undefined : Schema[P] extends {
     type: "number";
@@ -4365,6 +4377,7 @@ export interface MemoryGuardSettings {
 export interface NotificationsSettings {
     enabled: boolean;
     telegram: {
+        enabled?: boolean;
         botToken: string | undefined;
         chatId: string | undefined;
         sound: "all" | "important" | "none";
@@ -4388,16 +4401,19 @@ export interface NotificationsSettings {
         };
     };
     discord: {
+        enabled?: boolean;
         botToken: string | undefined;
         applicationId: string | undefined;
         guildId: string | undefined;
         parentChannelId: string | undefined;
     };
     slack: {
+        enabled?: boolean;
         botToken: string | undefined;
         appToken: string | undefined;
         workspaceId: string | undefined;
         channelId: string | undefined;
+        authorizedUserId: string | undefined;
     };
     redact: boolean;
     verbosity: "lean" | "verbose";

package/dist/types/eval/backend.d.ts

@@ -10,8 +10,8 @@ export interface ExecutorBackendExecOptions {
     session: ToolSession;
     deadlineMs: number;
     reset: boolean;
-    artifactPath?: string;
-    artifactId?: string;
+    artifactPath: string | undefined;
+    artifactId: string | undefined;
     onChunk: (chunk: string) => void;
 }
 /** Result returned by a backend's execute(). */

package/dist/types/exec/bash-executor.d.ts

@@ -6,7 +6,7 @@ export interface BashArtifactSaveSummary {
     complete: boolean;
     omittedBytes?: number;
 }
-export type BashMinimizedSaveReturn = BashArtifactSaveResult | BashArtifactSaveSummary | undefined;
+export type BashMinimizedSaveReturn = BashArtifactSaveResult | BashArtifactSaveSummary | string | undefined;
 export type BashArtifactSaveResult = {
     status: "saved";
     artifactId: string;
@@ -23,7 +23,7 @@ export type BashArtifactSaveResult = {
     status: "failed";
     diagnostic: string;
 };
-export declare function normalizeMinimizedSaveResultForTests(value: unknown, _originalText?: string): BashArtifactSaveResult;
+export declare function normalizeMinimizedSaveResultForTests(value: BashMinimizedSaveReturn, originalText: string): BashArtifactSaveResult;
 export interface BashExecutorOptions {
     /**
      * Invoked when the native minimizer rewrote the command's output, giving
@@ -80,18 +80,16 @@ export interface BashResult {
     outputBytes: number;
     artifactId?: string;
     artifactTruncatedBytes?: number;
-    /** Bytes dropped before the Bash executor received the native output stream. */
-    sourceTruncatedBytes?: number;
-    /** Exact source capture completeness could not be proven. */
-    sourceCaptureIncomplete?: boolean;
     artifactFailureDiagnostic?: string;
 }
-/** Number of persistent and retiring shell sessions currently retained (owner gauge). */
+/** Number of persistent shell sessions currently retained (owner gauge). */
 export declare function getShellSessionCount(): number;
 /**
- * Dispose all persistent shell sessions without waiting forever on a native
- * abort that failed to settle. Quarantine entries are owner-scoped so a late
- * finalizer cannot erase a successor shell's quarantine.
+ * Dispose all persistent shell sessions: abort in-flight work and drop the
+ * strong references so the native shells can be finalized. Healthy persistent
+ * sessions are otherwise retained for the whole process lifetime (MEM-7). This
+ * is registered as a postmortem cleanup so shutdown/signals release native
+ * shell resources, and is also callable directly (e.g. on owner teardown).
  */
 export declare function disposeAllShellSessions(): Promise<void>;
 /** Translate `ShellMinimizerSettings` into native `MinimizerOptions`, or `undefined` when disabled. */

package/dist/types/gjc-runtime/ultragoal-runtime.d.ts

@@ -3,7 +3,6 @@ import { type RepositoryBinding } from "./repository-binding";
 import { type CriticVerdict } from "./ultragoal-receipt-freshness";
 export { CRITIC_GATE_HARD_STOP_EVENT, CRITIC_GATE_OVERRIDE_EVENT, CRITIC_VERDICT_EVENT, type CriticVerdict, computeUltragoalPlanGeneration, countTerminalCriticVerdicts, receiptRelevantGoals, TERMINAL_CRITIC_CEILING, terminalCriticCeilingReached, terminalCriticGateOverridden, } from "./ultragoal-receipt-freshness";
 export { captureUltragoalRecoverySnapshot, parseStrictTerminalTranscript, persistUltragoalRecoveryDecision, planUltragoalOwnerLossRecovery, type UltragoalOwnerLossReceipt, type UltragoalRecoveryBinding, type UltragoalRecoveryDecision, type UltragoalRecoverySnapshot, validateOwnerLossBinding, validateRawUltragoalEvidence, validateRecoveryAdmission, validateRecoveryPath, } from "./ultragoal-owner-loss-recovery";
-import { createReviewSourceDispatch, type ReviewDeliveryDisposition, type ReviewSourceCohort, type ReviewSourceLane } from "./ultragoal-review-source";
 export type UltragoalGjcGoalMode = "aggregate" | "per-story";
 export type UltragoalGoalStatus = "pending" | "active" | "complete" | "failed" | "blocked" | "review_blocked" | "superseded";
 export interface UltragoalValidationBatchMetadata extends JsonObject {
@@ -43,7 +42,6 @@ export interface UltragoalPlan {
     goals: UltragoalGoal[];
     /** Authoritative repository identity for multi-repo fail-closed spawn (#2901). */
     repositoryBinding?: RepositoryBinding;
-    reviewCohorts?: ReviewSourceCohort[];
     createdAt: string;
     updatedAt: string;
     [key: string]: unknown;
@@ -377,40 +375,6 @@ export declare function addUltragoalSubgoal(input: {
     evidence: string;
     rationale: string;
 }): Promise<UltragoalPlan>;
-export declare function validateUltragoalReviewDispatch(input: {
-    cwd: string;
-    dispatchId: string;
-    cohortId: string;
-    taskId: string;
-    lane: ReviewSourceLane;
-    snapshotId: string;
-    generation: number;
-    repositoryBindingDigest: string;
-    stateRevision: number;
-    rerunCommand: string;
-    taskSourceTaskId: string;
-    createdAt: string;
-}): Promise<void>;
-export declare function freezeUltragoalReviewCohort(input: {
-    cwd: string;
-    workflow?: "ultragoal" | "ralplan";
-}): Promise<ReviewSourceCohort>;
-export declare function dispatchUltragoalReviewLane(input: {
-    cwd: string;
-    cohortId: string;
-    taskId: string;
-    lane: ReviewSourceLane;
-    rerunCommand: string;
-}): Promise<ReturnType<typeof createReviewSourceDispatch>>;
-export declare function classifyUltragoalReviewDelivery(input: {
-    cwd: string;
-    cohortId: string;
-    dispatchId: string;
-    observedDisposition: ReviewDeliveryDisposition;
-}): Promise<{
-    disposition: ReviewDeliveryDisposition;
-    deliveryId: string;
-}>;
 export declare function recordUltragoalReviewBlockers(input: {
     cwd: string;
     goalId: string;

package/dist/types/internal-urls/registry-helpers.d.ts

@@ -1,8 +1,3 @@
-/**
- * Shared helpers for internal-url protocol handlers that resolve session-scoped
- * artifact IDs.
- */
-import { type RecoveryFsRoot } from "@gajae-code/natives";
 import type { ResolveContext } from "./types";
 /**
  * Snapshot of artifacts dirs explicitly authorized for the calling session.
@@ -14,16 +9,3 @@ import type { ResolveContext } from "./types";
  * not an authorization source.
  */
 export declare function authorizedArtifactsDirsFromContext(context?: ResolveContext): string[];
-export interface AuthorizedArtifactsRoot {
-    readonly directory: string;
-    readonly dev: bigint;
-    readonly ino: bigint;
-    readonly authority: RecoveryFsRoot;
-}
-export interface AuthorizedArtifactSnapshot {
-    bytes: Buffer;
-    size: number;
-}
-export declare function openAuthorizedArtifactsRoot(directory: string): AuthorizedArtifactsRoot;
-export declare function closeAuthorizedArtifactsRoot(root: AuthorizedArtifactsRoot): void;
-export declare function readAuthorizedArtifactFile(root: AuthorizedArtifactsRoot, filename: string, maxBytes: number): AuthorizedArtifactSnapshot | null;

package/dist/types/main.d.ts

@@ -110,6 +110,7 @@ export interface RlmPreset {
 type RunPrintMode = (session: AgentSession, options: PrintModeOptions) => Promise<void>;
 export interface RunRootCommandDependencies {
     createAgentSession?: typeof createAgentSession;
+    createSessionManager?: typeof createSessionManager;
     discoverAuthStorage?: typeof discoverAuthStorage;
     runAcpMode?: (options?: {
         agentDir?: string;

package/dist/types/modes/components/hook-selector.d.ts

@@ -22,6 +22,21 @@ export interface HookSelectorOptions {
      */
     wrapFocused?: boolean;
     scrollTitleRows?: number;
+    /**
+     * Maximum visible rows for the inline editor in bounded scroll-title selectors.
+     * The editor keeps the full draft and scrolls within this height.
+     */
+    inlineEditorMaxHeight?: number;
+    /**
+     * Maximum visible autocomplete rows for the inline editor in a bounded selector.
+     * The Editor retains its normal minimum and scroll indicator behavior.
+     */
+    inlineAutocompleteMaxVisible?: number;
+    /**
+     * Compact bounded-selector chrome while the inline editor is active.
+     * Used only when the terminal cannot fit the normal editor and dropdown rows.
+     */
+    compactInlineInput?: boolean;
     /**
      * Inline free-text entry for the option with this label (e.g. the ask
      * tool's "Other (type your own)"). Selecting it keeps the title and option
@@ -54,6 +69,11 @@ export declare class HookSelectorComponent extends Container {
     #private;
     constructor(title: string, options: string[], onSelect: (option: string) => void, onCancel: () => void, opts?: HookSelectorOptions);
     hasActiveInlineInput(): boolean;
+    /**
+     * Update the bounded selector's title/list row budgets after a terminal resize.
+     * The existing title scroll offset, option focus, and inline editor remain intact.
+     */
+    setLayoutBudget(maxVisible: number, scrollTitleRows: number, inlineEditorMaxHeight?: number | undefined, inlineAutocompleteMaxVisible?: number | undefined, compactInlineInput?: boolean): void;
     handleInput(keyData: string): void;
     dispose(): void;
 }

package/dist/types/modes/components/notifications-settings-editor.d.ts

@@ -1,5 +1,6 @@
 import { type Component, type Focusable, type SecretValue } from "@gajae-code/tui";
 import type { CasReceipt } from "../../config/atomic-yaml-patch";
+import type { NotificationProvider, ProviderSecretDisposition } from "../../sdk/bus/config";
 import type { BlockedTelegramRestoreResult, ProposedTelegramIdentity, TelegramDaemonReconnectOutcome } from "../../sdk/bus/notification-orchestration";
 import type { NotificationHealthReport, NotificationRecoveryReport, NotificationStatusReport, NotificationTestResult } from "../../sdk/bus/notification-service";
 import type { NotificationSessionReconcileResult, NotificationSessionStatus } from "../../sdk/bus/session-control";
@@ -45,6 +46,40 @@ export interface PreparedTelegramConfiguration {
     richDraftEnabled: boolean;
     streamingEnabled: boolean;
 }
+export interface ProviderSecretActionInput {
+    action: ProviderSecretDisposition;
+    value?: SecretValue;
+}
+export interface NotificationsProviderSetupInput {
+    provider: "discord" | "slack";
+    botToken: ProviderSecretActionInput;
+    appToken?: ProviderSecretActionInput;
+    applicationId?: string;
+    guildId?: string;
+    parentChannelId?: string;
+    workspaceId?: string;
+    channelId?: string;
+    authorizedUserId?: string;
+}
+export interface PreparedNotificationProviderConfiguration {
+    provider: "discord" | "slack";
+    botTokenDisposition: ProviderSecretDisposition;
+    botTokenMask: string;
+    appTokenDisposition?: ProviderSecretDisposition;
+    appTokenMask?: string;
+    applicationId?: string;
+    guildId?: string;
+    parentChannelId?: string;
+    workspaceId?: string;
+    channelId?: string;
+    authorizedUserId?: string;
+    applicationIdDisplay?: string;
+    guildIdDisplay?: string;
+    parentChannelIdDisplay?: string;
+    workspaceIdDisplay?: string;
+    channelIdDisplay?: string;
+    authorizedUserIdDisplay?: string;
+}
 export interface NotificationsPreflightResult {
     status: "ready" | "aborted" | "cancelled" | "error";
     identity: ProposedTelegramIdentity;
@@ -57,6 +92,10 @@ export type NotificationsConfigureCommitResult = {
     status: "saved";
     receipt: CasReceipt;
     message: string;
+} | {
+    status: "activation_failed" | "observer_failed";
+    receipt: CasReceipt;
+    message: string;
 } | {
     status: "blocked_identity";
     receipt: CasReceipt;
@@ -67,11 +106,16 @@ export type NotificationsConfigureCommitResult = {
 export interface NotificationsMutationResult {
     message: string;
     receipt?: CasReceipt;
+    outcome?: "success" | "degraded" | "failed";
 }
 export type NotificationsSaveInactiveResult = {
     status: "saved_inactive";
     receipt: CasReceipt;
     message: string;
+} | {
+    status: "observer_failed";
+    receipt: CasReceipt;
+    message: string;
 } | {
     status: "unavailable";
     guidance: string;
@@ -85,12 +129,13 @@ export type NotificationsSaveInactiveResult = {
 export interface NotificationsEditorOperations {
     /** Combines a buildNotificationStatusReport-shaped status snapshot with the current session-control query. */
     loadState(): Promise<NotificationsEditorState>;
-    /** Performs offline health refreshes and a non-cancellable reachability probe when requested. */
+    /** Performs offline or selected REST-only health refresh. */
     refreshHealth(input: {
         probe: boolean;
+        provider?: NotificationProvider;
         signal?: AbortSignal;
     }): Promise<NotificationHealthReport>;
-    sendTest(): Promise<NotificationTestResult>;
+    sendTest(provider?: NotificationProvider): Promise<NotificationTestResult>;
     recover(): Promise<NotificationRecoveryReport>;
     reconnect(): Promise<TelegramDaemonReconnectOutcome>;
     /** Validates/discovers a Telegram destination and returns a secret-safe prepared draft. */
@@ -101,6 +146,11 @@ export interface NotificationsEditorOperations {
     saveInactive(draft: PreparedTelegramConfiguration): Promise<NotificationsSaveInactiveResult>;
     /** Clears adapter-local ephemeral credential material for a prepared setup draft. Idempotent. */
     discardConfigureDraft(draft: PreparedTelegramConfiguration): void;
+    prepareProviderConfiguration(input: NotificationsProviderSetupInput): Promise<PreparedNotificationProviderConfiguration>;
+    commitProviderConfiguration(draft: PreparedNotificationProviderConfiguration): Promise<NotificationsMutationResult>;
+    discardProviderConfiguration(draft: PreparedNotificationProviderConfiguration): void;
+    setProviderDesired(provider: NotificationProvider, enabled: boolean): Promise<NotificationsMutationResult>;
+    removeProvider(provider: NotificationProvider): Promise<NotificationsMutationResult>;
     /** Enables globally without requesting or exposing a credential. */
     enableGlobally(): Promise<NotificationsMutationResult>;
     disableGlobally(): Promise<NotificationsMutationResult>;
@@ -117,7 +167,7 @@ export interface NotificationsEditorOperations {
 export interface NotificationsSettingsEditorCallbacks {
     onCancel?: () => void;
 }
-type EditorMode = "home" | "provider-selection" | "chat-entry" | "token-entry" | "pairing" | "review" | "preferences" | "confirmation";
+export type EditorMode = "home" | "provider-selection" | "provider-actions" | "provider-form" | "provider-review" | "chat-entry" | "token-entry" | "pairing" | "review" | "preferences" | "confirmation";
 /**
  * Direct tab content for notification setup and operations. It is deliberately
  * independent of Settings and notification services; WI7b injects the adapter.
@@ -137,4 +187,3 @@ export declare class NotificationsSettingsEditorComponent implements Component,
     render(width: number): string[];
     handleInput(data: string): void;
 }
-export {};

package/dist/types/modes/controllers/extension-ui-controller.d.ts

@@ -1,4 +1,4 @@
-import type { Component, TUI } from "@gajae-code/tui";
+import { type Component, type TUI } from "@gajae-code/tui";
 import { KeybindingsManager } from "../../config/keybindings";
 import type { ExtensionUIContext, ExtensionUIDialogOptions, ExtensionWidgetContent, ExtensionWidgetOptions, TerminalInputHandler } from "../../extensibility/extensions";
 import { type Theme } from "../../modes/theme/theme";

package/dist/types/modes/controllers/selector-controller.d.ts

@@ -2,8 +2,8 @@ import type { Component, SlashCommand } from "@gajae-code/tui";
 import type { ModelProfileConfig } from "../../config/models-config-schema";
 import { type Settings } from "../../config/settings";
 import { type InteractiveModeContext, type OAuthSelectorOptions } from "../../modes/types";
-import { getNotificationConfig, maskToken } from "../../sdk/bus/config";
-import { proposedTelegramIdentity, reconcileCommittedTelegramConfiguration, removeTelegramConfiguration, saveTelegramInactive } from "../../sdk/bus/notification-orchestration";
+import { getCurrentTelegramActivationMarker, getNotificationConfig, maskToken } from "../../sdk/bus/config";
+import { type NotificationProviderRuntimeAuthority, proposedTelegramIdentity, reconcileCommittedTelegramConfiguration, removeTelegramConfiguration, saveTelegramInactive } from "../../sdk/bus/notification-orchestration";
 import { buildNotificationStatusReport, checkNotificationHealth, recoverNotifications, sanitizeDiagnostic, sendNotificationTest } from "../../sdk/bus/notification-service";
 import { ensureTelegramDaemonRunningDetailed, readNotificationRootRegistration, resolveTelegramSetupPreflight, unregisterNotificationRoot } from "../../sdk/bus/telegram-daemon";
 import { runTelegramSetup } from "../../sdk/bus/telegram-setup";
@@ -37,6 +37,7 @@ type TelegramDaemonStopResult = {
 };
 export interface NotificationsEditorOperationDependencies {
     getNotificationConfig: typeof getNotificationConfig;
+    getCurrentTelegramActivationMarker: typeof getCurrentTelegramActivationMarker;
     maskToken: typeof maskToken;
     buildNotificationStatusReport: typeof buildNotificationStatusReport;
     checkNotificationHealth: typeof checkNotificationHealth;
@@ -66,6 +67,7 @@ export interface NotificationsEditorOperationDependencies {
         message: string;
     }>;
     stopTelegramDaemon(settings: Settings): Promise<TelegramDaemonStopResult>;
+    providerRuntime?: NotificationProviderRuntimeAuthority;
 }
 /**
  * Concrete service adapter for the direct Notifications settings tab. Secrets remain in this closure's

package/dist/types/sdk/broker/broker.d.ts

@@ -1,7 +1,7 @@
 import type { NativeDirectoryTreeSnapshot } from "@gajae-code/natives";
 import type { ModelProfileErrorDetails } from "../../config/model-profile-contract";
 import { type DirectoryMigrationPolicy } from "../session-directory";
-import { type BrokerDiscovery, type RedactedBrokerDiscovery } from "./discovery";
+import { type BrokerDiscovery, type BrokerPublicationObservation, type RedactedBrokerDiscovery } from "./discovery";
 import { type LifecycleDurableEffectsReceipt, LifecycleLedger, type LifecycleStartupFailureReceipt } from "./lifecycle-ledger";
 import { SessionIndex } from "./session-index";
 export interface BrokerSettings {
@@ -137,4 +137,8 @@ export declare class Broker {
 }
 /** Test-only hook for simulating a process crash after terminal persistence verification. */
 export declare function setTerminalPersistenceHookForTest(broker: Broker, hook: (() => void) | undefined): void;
+/** Test-only hook for shortening the bounded ambiguity deadline. */
+export declare function setAmbiguityGraceForTest(broker: Broker, graceMs: number | undefined): void;
+/** Test-only hook for forcing the observation the publication watchdog sees. */
+export declare function setPublicationObservationForTest(broker: Broker, observation: BrokerPublicationObservation | undefined): void;
 export {};

package/dist/types/sdk/broker/lifecycle-ledger.d.ts

@@ -119,4 +119,5 @@ export declare class LifecycleLedger {
     findCleanupPendingBySessionId(sessionId: string, excludingIdentity: string): LifecycleLedgerEntry | undefined;
     hasUncertainCleanupForSession(sessionId: string, excludingIdentity: string): boolean;
     get(identity: string): LifecycleLedgerEntry | undefined;
+    findPendingCleanupByTarget(sessionId: string, cwd: string, transcriptPath: string): LifecycleLedgerEntry | undefined;
 }