@gajae-code/coding-agent 0.12.6 → 0.12.8

package/dist/types/sdk/bus/session-control.d.ts

@@ -1,4 +1,4 @@
-import { type NotificationConfig } from "./config";
+import { type GenericNotificationSessionSource, type NotificationConfig } from "./config";
 /** Minimal session-manager surface shared by extension, TUI, and headless hosts. */
 export interface NotificationSessionContext {
     sessionManager: {
@@ -29,6 +29,8 @@ export interface NotificationSessionRuntime<Context extends NotificationSessionC
      * emit a frame. `blocked_identity` is fail-closed and starts nothing.
      */
     ensureTelegramDaemon?(binding: BoundNotificationSession<Context>): Promise<TelegramDaemonPreflightResult>;
+    /** Rotates a running/default endpoint into Telegram-isolated chat scope. */
+    isolateTelegram?(binding: BoundNotificationSession<Context>): Promise<NotificationEndpointStartResult>;
     /** Refresh mutable delivery policy from the same configuration snapshot used for reconciliation. */
     refreshPolicy?(binding: BoundNotificationSession<Context>, policy: NotificationRuntimePolicy): void;
     /** Enables delivery only after the controller has committed a stable policy. */
@@ -37,9 +39,9 @@ export interface NotificationSessionRuntime<Context extends NotificationSessionC
 export interface NotificationSessionStatus {
     eligible: boolean;
     locallyEnabled: boolean;
-    effectiveEnabled: boolean;
+    genericSessionEnabled: boolean;
+    genericEligibilitySource: GenericNotificationSessionSource;
     running: boolean;
-    environment: "off" | "explicit" | "token" | "default";
 }
 export interface NotificationSessionReconcileResult {
     outcome: NotificationEndpointStartResult | "stopped";
@@ -48,6 +50,7 @@ export interface NotificationSessionReconcileResult {
 export interface NotificationRuntimePolicy {
     redact: boolean;
     verbosity: NotificationConfig["verbosity"];
+    /** Generic live-frame delivery policy; never proof of provider effectiveness. */
     stream: boolean;
     mode: "provisional" | "committed";
 }
@@ -58,6 +61,8 @@ export interface NotificationSessionControllerOptions {
     getConfig(): NotificationConfig;
     /** Kept as a reference so test and embedding hosts can supply their own environment. */
     env?: NodeJS.ProcessEnv;
+    /** This process was launched by a marked GJC child spawn site. */
+    spawnedByGjc?: boolean;
 }
 export declare class NotificationSessionController {
     #private;

package/dist/types/sdk/bus/slack-live-provider.d.ts

@@ -1,4 +1,4 @@
-import type { SlackMessageSearchResult, SlackPostedMessage, SlackProviderClient, SlackSocketEnvelope } from "./slack-provider";
+import type { SlackConfigurationProbeResult, SlackDiagnosticProvider, SlackMessageSearchResult, SlackOneShotTestResult, SlackPostedMessage, SlackProviderClient, SlackSocketEnvelope } from "./slack-provider";
 export type SlackProviderErrorCode = "connection" | "protocol" | "web_api" | "rate_limited";
 /** A Slack transport failure whose fields are safe to surface without credentials. */
 export declare class SlackProviderError extends Error {
@@ -38,10 +38,17 @@ export interface SlackLiveProviderOptions {
  * Production Socket Mode and Web API client. It keeps all connection state in
  * memory and deliberately never maintains a Slack cursor.
  */
-export declare class SlackLiveProvider implements SlackProviderClient {
+export declare class SlackLiveProvider implements SlackProviderClient, SlackDiagnosticProvider {
     #private;
     get transportHealthy(): boolean;
     constructor(options: SlackLiveProviderOptions);
+    probeConfiguration(signal?: AbortSignal): Promise<SlackConfigurationProbeResult>;
+    sendOneShotTest(input: {
+        channel: string;
+        message: string;
+        idempotencyKey: string;
+        signal?: AbortSignal;
+    }): Promise<SlackOneShotTestResult>;
     start(onEnvelope: (envelope: SlackSocketEnvelope) => void | Promise<void>): Promise<void>;
     stop(): Promise<void>;
     ack(envelopeId: string): Promise<void>;

package/dist/types/sdk/bus/slack-provider.d.ts

@@ -12,6 +12,28 @@ export interface SlackMessageSearchResult {
     ts: string;
     client_msg_id?: string;
 }
+export interface SlackConfigurationProbeResult {
+    ok: boolean;
+    detail: string;
+    teamId?: string;
+    userId?: string;
+}
+export interface SlackOneShotTestResult {
+    ok: boolean;
+    detail: string;
+    channel?: string;
+    timestamp?: string;
+    uncertain?: boolean;
+}
+export interface SlackDiagnosticProvider {
+    probeConfiguration(signal?: AbortSignal): Promise<SlackConfigurationProbeResult>;
+    sendOneShotTest(input: {
+        channel: string;
+        message: string;
+        idempotencyKey: string;
+        signal?: AbortSignal;
+    }): Promise<SlackOneShotTestResult>;
+}
 /** Minimal Socket Mode + Web API seam. Implementations may wrap the official Slack SDK. */
 export interface SlackProviderClient {
     start(onEnvelope: (envelope: SlackSocketEnvelope) => void | Promise<void>): Promise<void>;

package/dist/types/sdk/bus/telegram-daemon-contract.d.ts

@@ -47,11 +47,16 @@ export declare const NOTIFICATION_PROTOCOL_VERSION = 3;
  * user-created topic adoption (forum-topic folder picker). Generation 36 bound
  * managed-session replacement to exact native filesystem authority; generation
  * 37 retires that binding (revert of #3489, which stalled POSIX artifact
- * cleanup); generation 38 binds exact cleanup to parent and link-count authority;
- * generation 39 hardens exact Bash process-tree ownership, settlement, and
- * descendant cleanup authority.
+ * cleanup); generation 38 binds exact cleanup to parent and link-count authority.
+ * Generation 39 applies rustfmt and clippy-equivalent cleanup to the pi-shell
+ * process-tree authority (#3682); generation 40 hardens exact Bash process-tree
+ * ownership, settlement, and descendant cleanup authority. Generation 38 also
+ * adds durable provider-intent admission without changing owner, reclaim,
+ * signal, or spawn authority.
+ * Generation 41 applies first-class provider-settings admission to Telegram
+ * lifecycle controls.
  */
-export declare const DAEMON_GENERATION = 39;
+export declare const DAEMON_GENERATION = 41;
 /**
  * Serving-compatibility boundary for daemon lifecycle requests. Epoch 1 covers
  * all builds published before this field existed; epoch 2 covered generation 29;

package/dist/types/sdk/client/discovery.d.ts

@@ -21,9 +21,10 @@ export declare class SdkDiscoveryError extends Error {
     readonly code = "discovery_error";
     constructor(path: string, message: string);
 }
+export type SdkSessionEndpointScope = "default" | "chat";
 /** Lists endpoint files and returns individual malformed or unreadable records as warnings. */
 export declare function listSdkSessionEndpoints(repo: string): Promise<SdkSessionEndpointList>;
 /** Resolves one per-session SDK endpoint discovery file. */
-export declare function readSdkSessionEndpoint(repo: string, sessionId: string): Promise<SdkSessionEndpoint | null>;
+export declare function readSdkSessionEndpoint(repo: string, sessionId: string, scope?: SdkSessionEndpointScope): Promise<SdkSessionEndpoint | null>;
 /** Reads the agent-global broker discovery record. */
 export declare function readSdkBrokerDiscovery(agentDir: string): Promise<BrokerDiscovery | null>;

package/dist/types/sdk/host/host.d.ts

@@ -1,26 +1,17 @@
 import { type EventFrame, SessionEventStream } from "./events";
-import { type ProviderLease, ReverseLeaseRuntime } from "./reverse-leases";
+import { ReverseLeaseRuntime } from "./reverse-leases";
 import type { BrokerIndexWriter, HostEndpointAdapters, SdkFrame } from "./types";
 export type SdkRequestObserver = (kind: "control" | "query", connectionId: string, frame: SdkFrame) => void;
-export interface ProviderLeaseIdentity {
-    leaseId: string;
-    connectionId: string;
-    connectionGeneration: number;
-    fence: string;
-}
-export type ProviderLeaseFence = (identity: ProviderLeaseIdentity, reason?: string) => boolean;
 export interface SessionSdkHostOptions extends HostEndpointAdapters {
     control?: (connectionId: string, frame: SdkFrame) => unknown | Promise<unknown>;
     query?: (connectionId: string, frame: SdkFrame) => unknown | Promise<unknown>;
     /** Best-effort diagnostic observation of accepted control/query frames. */
     onRequest?: SdkRequestObserver;
-    onFrameOverflow?: (connectionId: string) => void;
     /** Runs before a control response is sent; identity transitions use sendTerminal. */
     beforeControlResponse?: (connectionId: string, request: SdkFrame, response: SdkFrame, sendTerminal: () => Promise<void>) => void | Promise<void>;
     /** Runs only after a successful control response has been sent to the client. */
     afterControlResponse?: (connectionId: string, request: SdkFrame, response: SdkFrame) => void | Promise<void>;
-    onProviderLeaseRegistered?: (lease: ProviderLease, connectionGeneration: number) => void;
-    installProviderDefinitions?: (capability: string, definitions: unknown, leaseId: string, connectionId: string, connectionGeneration: number) => void;
+    installProviderDefinitions?: (capability: string, definitions: unknown) => void;
     onProviderDefinitionsRemoved?: (capability: string) => void;
     onReverseCancel?: (requestId: string, reason: "provider_disconnected" | "lease_released") => void;
     /** Best-effort capabilities mirrored from the native transport for out-of-band consumers. */
@@ -38,20 +29,8 @@ export declare class SessionSdkHost {
     get generation(): number;
     /** Current installed definitions for a live provider capability. */
     getProviderDefinitions(capability: string): unknown | undefined;
-    /** Mark a transport connection live and return its stable generation. */
-    handleConnect(connectionId: string): number;
-    /** Current generation for a transport connection, if it has been observed. */
-    connectionGeneration(connectionId: string): number;
-    isConnectionOpen(connectionId: string, generation?: number): boolean;
     /** Release reverse leases after the transport reports a WebSocket disconnect. */
     handleDisconnect(connectionId: string): void;
-    /**
-     * Fences one exact provider lease after uncertain terminal cleanup. The fence
-     * is idempotent for the same identity and never affects a newer generation.
-     */
-    quarantineProviderLease(identity: ProviderLeaseIdentity, _reason?: string): boolean;
-    /** Dispatch a frame through bounded per-connection asynchronous admission. */
-    dispatchFrame(connectionId: string, frame: SdkFrame): Promise<void>;
     /** Adds an event to the resumable event ring. Transport delivery is owned by bus wiring. */
     emitEvent(frame: SdkFrame): EventFrame;
     start(): Promise<"started" | "already">;

package/dist/types/sdk/host/query/handlers.d.ts

@@ -1,3 +1,4 @@
+import type { ActiveProviderDescriptor } from "../../providers.js";
 import { type CursorRegistry } from "./cursor.js";
 import type { RevisionStore } from "./revision-store.js";
 export declare const TARGET_PAGE_BYTES: number;
@@ -11,6 +12,7 @@ export interface SessionSurface {
     getUsage(): unknown | Promise<unknown>;
     getModels(): unknown | Promise<unknown>;
     getSkillState(): unknown | Promise<unknown>;
+    getActiveProviders?(): ActiveProviderDescriptor[] | Promise<ActiveProviderDescriptor[]>;
     /** Q12 rows preserve workflow gate fields and include stable durable gate metadata. */
     getGates(): unknown | Promise<unknown>;
     getConfigItems(): unknown | Promise<unknown>;

package/dist/types/sdk/host/reverse-leases.d.ts

@@ -3,10 +3,7 @@ export declare const REVERSE_HEARTBEAT_MS = 5000;
 export declare const REVERSE_LEASE_TTL_MS = 15000;
 export declare const REVERSE_RECLAIM_GRACE_MS = 15000;
 export declare const MAX_REVERSE_OUTSTANDING = 64;
-export declare const MAX_REVERSE_CLEANUP_OUTSTANDING = 2;
 export declare const MAX_REVERSE_PAYLOAD_BYTES: number;
-export declare const MAX_REVERSE_TERMINAL_OUTPUT_BYTES: number;
-export declare const MAX_REVERSE_TERMINAL_OUTPUT_PAYLOAD_BYTES: number;
 export declare class ReverseLeaseError extends Error {
     readonly code: "lease_unavailable" | "lease_expired" | "provider_lease_conflict" | "provider_required" | "not_lease_owner" | "payload_too_large" | "too_many_outstanding" | "unknown_request" | "idempotency_conflict";
     constructor(code: "lease_unavailable" | "lease_expired" | "provider_lease_conflict" | "provider_required" | "not_lease_owner" | "payload_too_large" | "too_many_outstanding" | "unknown_request" | "idempotency_conflict", message?: "idempotency_conflict" | "lease_expired" | "lease_unavailable" | "not_lease_owner" | "payload_too_large" | "provider_lease_conflict" | "provider_required" | "too_many_outstanding" | "unknown_request");
@@ -24,7 +21,7 @@ export interface ReverseLeaseOptions {
     now?: () => number;
     leaseTtlMs?: number;
     sendFrame: (connectionId: string, frame: SdkFrame) => void | Promise<void>;
-    installDefinitions?: (capability: string, definitions: unknown, leaseId: string, connectionId: string, connectionGeneration: number) => void;
+    installDefinitions?: (capability: string, definitions: unknown) => void;
     onCancel?: (requestId: string, reason: "provider_disconnected" | "lease_released") => void;
     onDefinitionsRemoved?: (capability: string) => void;
 }
@@ -32,15 +29,15 @@ export interface ReverseLeaseOptions {
 export declare class ReverseLeaseRuntime {
     #private;
     constructor(options: ReverseLeaseOptions);
-    registerProvider(connectionId: string, capability: string, definitions: unknown, expectedLeaseId?: string, idempotencyKey?: string, connectionGeneration?: number): ProviderLease;
+    registerProvider(connectionId: string, capability: string, definitions: unknown, expectedLeaseId?: string, idempotencyKey?: string): ProviderLease;
     heartbeat(connectionId: string, leaseId: string): ProviderLease;
     release(connectionId: string, leaseId: string, handoffTo?: string): ProviderLease;
     disconnect(connectionId: string): void;
-    request(capability: string, method: string, payload: unknown, signal?: AbortSignal, expectedLeaseId?: string, cleanup?: boolean, expectedConnectionId?: string): Promise<unknown>;
+    request(capability: string, method: string, payload: unknown, signal?: AbortSignal): Promise<unknown>;
     respond(connectionId: string, id: string, leaseId: string, result: unknown, error?: {
         code: string;
         message: string;
-    }, wireEnvelope?: unknown): void;
+    }): void;
     getLease(capability: string): ProviderLease | undefined;
     /** Installed definitions are observable only while their provider lease is live. */
     getInstalledDefinitions(capability: string): unknown | undefined;

package/dist/types/sdk/index.d.ts

@@ -5,5 +5,6 @@ export * as host from "./host";
 export * as mcp from "./mcp";
 export type { Q10CurrentThinkingLevel, Q10Model, Q10SettableThinkingLevel, Q10ThinkingCapabilities, Q10ThinkingEffort, Q10ThinkingMode, } from "./models";
 export * from "./prompt-status";
+export type { ActiveProviderConnectionKind, ActiveProviderDescriptor } from "./providers";
 export * from "./session";
 export * from "./session-directory";

package/dist/types/sdk/providers.d.ts

@@ -0,0 +1,22 @@
+export type ActiveProviderConnectionKind = "credential" | "credentialless";
+export interface ActiveProviderDescriptor {
+    provider: string;
+    connectionKind: ActiveProviderConnectionKind;
+}
+/**
+ * Project active-provider inputs to the exact public DTO shape.
+ *
+ * Connection credentials take precedence when the same provider is reported
+ * more than once. Provider IDs are sorted by their UTF-8 bytes without
+ * normalization.
+ */
+export declare function projectActiveProviderDescriptors(descriptors: readonly {
+    provider: string;
+    connectionKind: unknown;
+}[]): ActiveProviderDescriptor[];
+export declare const ACTIVE_PROVIDER_RESOLUTION_ERROR_CODE: "internal";
+export declare const ACTIVE_PROVIDER_RESOLUTION_ERROR_MESSAGE = "Unable to resolve active providers.";
+export declare class ActiveProviderResolutionError extends Error {
+    readonly code: "internal";
+    constructor();
+}

package/dist/types/sdk/session-directory.d.ts

@@ -20,7 +20,7 @@ export type ResolveManagedSessionScopeResult = {
     scope: ManagedSessionScope;
 } | {
     kind: "error";
-    code: "cwd_missing" | "cwd_not_directory" | "identity_unavailable" | "network_unsupported" | "sessions_root_unavailable" | "binding_conflict" | "binding_invalid" | "atomic_unavailable" | "durability_not_provable" | "durability_failed" | "invalid_request";
+    code: "cwd_missing" | "cwd_not_directory" | "identity_unavailable" | "network_unsupported" | "sessions_root_unavailable" | "binding_conflict" | "binding_invalid" | "migration_busy" | "atomic_unavailable" | "durability_not_provable" | "durability_failed" | "invalid_request";
     message: string;
 };
 export interface LogicalSessionCandidate {

package/dist/types/session/artifacts.d.ts

@@ -16,11 +16,6 @@ export interface ManagedOutputGeneration {
 export interface ArtifactSaveOptions {
     maxBytes?: number;
 }
-export interface ArtifactSaveReceipt {
-    id: string;
-    complete: boolean;
-    omittedBytes?: number;
-}
 /**
  * Manages artifact storage for a session.
  *
@@ -73,9 +68,11 @@ export declare class ArtifactManager {
         id: string;
         path?: string;
     }>;
-    /** Save content and return the artifact ID plus exact storage completeness evidence. */
-    saveWithReceipt(content: string, toolType: string, options?: ArtifactSaveOptions): Promise<ArtifactSaveReceipt>;
-    /** Save content as an artifact and return the artifact ID. */
+    /**
+     * Save content as an artifact and return the artifact ID.
+     * Content is written to a private temporary inode, synced, and linked into
+     * the artifact directory only after the complete terminal payload exists.
+     */
     save(content: string, toolType: string, options?: ArtifactSaveOptions): Promise<string>;
     /**
      * Check if an artifact exists.

package/dist/types/session/client-bridge.d.ts

@@ -55,23 +55,12 @@ export interface ClientBridgeTerminalOutput {
 }
 export interface ClientBridgeTerminalHandle {
     terminalId: string;
-    /** Exact provider lease/session identity that owns this terminal. */
-    providerLeaseId: string;
     waitForExit(): Promise<ClientBridgeTerminalExitStatus>;
     currentOutput(): Promise<ClientBridgeTerminalOutput>;
     kill(): Promise<void>;
     release(): Promise<void>;
-    /** Full authenticated provider identity, when supplied by the transport. */
-    providerLeaseIdentity?: ClientBridgeProviderLeaseIdentity;
-}
-export interface ClientBridgeProviderLeaseIdentity {
-    leaseId: string;
-    connectionId: string;
-    connectionGeneration: number;
-    fence: string;
 }
 export interface ClientBridgeCreateTerminalParams {
-    toolCallId: string;
     command: string;
     args?: string[];
     env?: Array<{
@@ -80,7 +69,6 @@ export interface ClientBridgeCreateTerminalParams {
     }>;
     cwd?: string;
     outputByteLimit?: number;
-    signal?: AbortSignal;
 }
 export interface ClientBridge {
     readonly capabilities: ClientBridgeCapabilities;
@@ -96,7 +84,5 @@ export interface ClientBridge {
         content: string;
     }): Promise<void>;
     createTerminal?(params: ClientBridgeCreateTerminalParams): Promise<ClientBridgeTerminalHandle>;
-    /** Fence the exact provider identity after cleanup ownership becomes uncertain. */
-    quarantineProviderLease?(providerLease: string | ClientBridgeProviderLeaseIdentity, reason: string): Promise<void>;
     requestPermission?(toolCall: ClientBridgePermissionToolCall, options: ClientBridgePermissionOption[], signal?: AbortSignal): Promise<ClientBridgePermissionOutcome>;
 }

package/dist/types/session/internal/managed-session-scope.d.ts

@@ -34,7 +34,7 @@ export declare function managedDirectoryIdentityForScope(scope: ManagedScope): {
 };
 export declare function managedRootForScope(scope: ManagedScope): ManagedDirectoryRoot;
 export type ManagedMigrationPolicy = "copy-retain" | "disabled";
-export type ManagedScopeErrorCode = "cwd_missing" | "cwd_not_directory" | "identity_unavailable" | "network_unsupported" | "sessions_root_unavailable" | "binding_conflict" | "binding_invalid" | "atomic_unavailable" | "invalid_request" | "durability_failed" | "durability_not_provable";
+export type ManagedScopeErrorCode = "cwd_missing" | "cwd_not_directory" | "identity_unavailable" | "network_unsupported" | "sessions_root_unavailable" | "binding_conflict" | "binding_invalid" | "migration_busy" | "atomic_unavailable" | "invalid_request" | "durability_failed" | "durability_not_provable";
 export type ManagedScopeResolution = {
     kind: "resolved";
     scope: ManagedScope;
@@ -95,6 +95,19 @@ export type ManagedDeleteCandidateResult = {
     code: ManagedOpenFailure;
     message: string;
 };
+export interface ManagedVerifiedDeleteTestEvent {
+    readonly flow: "direct" | "reconcile";
+    readonly stage: "initial" | "artifact-finalization" | "transcript-after-artifacts-removed";
+}
+export interface ManagedLockReleaseTestEvent {
+    readonly path: string;
+    readonly attemptId: string;
+}
+/** Test-only ordering seams for verified deletion and managed-lock release. */
+export declare const ManagedSessionScopeTestHooks: {
+    beforeVerifiedDelete?: (event: ManagedVerifiedDeleteTestEvent) => void | Promise<void>;
+    beforeManagedLockRelease?: (event: ManagedLockReleaseTestEvent) => void | Promise<void>;
+};
 declare function scopeDigest(platform: "posix" | "win32", canonicalPath: string): string;
 export declare const computeManagedScopeDigest: typeof scopeDigest;
 /**
@@ -121,6 +134,7 @@ export declare function ensureManagedScope(scope: ManagedScope, policy?: Managed
 /** Synchronously create and validate the v2 binding before a default session writer exists. */
 export declare function prepareManagedSessionScopeForWriteSync(scope: ManagedScope, policy?: ManagedSessionSecurityPolicy, authority?: ManagedCandidateWriteAuthority): ManagedScopeResolution;
 export declare function listManagedCandidates(scope: ManagedScope): ManagedCandidateListing;
+export declare function artifactTreeReplayCompatible(observed: NativeDirectoryTreeSnapshot, expected: NativeDirectoryTreeSnapshot): boolean;
 type DetachedArtifactRoot = {
     originalPath: string;
     detachedPath: string;
@@ -129,6 +143,8 @@ type DetachedArtifactRoot = {
         ino: bigint;
         size: bigint;
         mtimeNs: bigint;
+        parentDev: bigint;
+        parentIno: bigint;
     };
     tree: NativeDirectoryTreeSnapshot;
 };

package/dist/types/session/internal/managed-session-storage.d.ts

@@ -25,6 +25,7 @@ export interface ManagedFileSnapshot {
     identity: {
         dev: bigint;
         ino: bigint;
+        nlink: bigint;
         size: number;
         mtimeNs: bigint;
         ctimeNs: bigint;
@@ -32,6 +33,14 @@ export interface ManagedFileSnapshot {
     };
 }
 export declare function validateNativeSecurityResult(value: unknown, operation: "apply" | "verify", kind: "directory" | "file"): NativeOwnerOnlySecurityResult;
+export interface ManagedLockRetirementTestEvent {
+    readonly path: string;
+    readonly attemptId: string;
+}
+/** Test-only seam immediately before exact retirement of one observed lock identity. */
+export declare const ManagedLockTestHooks: {
+    beforeObservedRetirement?: (event: ManagedLockRetirementTestEvent) => void;
+};
 /** Captured configured-root authority for managed paths only. */
 export interface ManagedDirectoryRoot {
     readonly canonicalPath: string;
@@ -63,8 +72,6 @@ export declare class ManagedSessionDescendantStore {
     get rootAuthority(): ManagedDirectoryRoot;
     get subtreeRootAuthority(): ManagedDirectoryRoot;
     get securityPolicy(): ManagedSessionSecurityPolicy;
-    get hasRetainedAuthority(): boolean;
-    acquireMutationFence(name: string): Promise<ManagedStorageLock | undefined>;
     get profileAgentDir(): string;
     deriveSubtree(relativePath: string): ManagedSessionDescendantStore;
     retainAuthority(): RecoveryFsRoot | undefined;
@@ -107,9 +114,9 @@ export declare function captureManagedFilePrefixNoFollow(pathname: string, maxBy
 export declare function captureManagedFileNoFollow(pathname: string): ManagedFileSnapshot;
 /** Atomically publishes bytes without replacing an existing destination. */
 export declare function publishManagedFileNoReplace(destination: string, bytes: Uint8Array, assertOwned?: () => void, root?: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy): Promise<void>;
-export declare function publishManagedFileNoReplaceSync(destination: string, bytes: Uint8Array, root?: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy, assertOwned?: () => void): void;
+export declare function publishManagedFileNoReplaceSync(destination: string, bytes: Uint8Array, root?: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy): void;
 /** Replace one managed regular file while retaining the secured staging fd through publication. */
-export declare function replaceManagedFileSync(destination: string, bytes: Uint8Array, root: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy, assertFence?: () => void): void;
+export declare function replaceManagedFileSync(destination: string, bytes: Uint8Array, root: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy, assertFence?: () => void, expectedDestination?: ManagedFileSnapshot["identity"]): void;
 export declare function replaceManagedFile(destination: string, bytes: Uint8Array, root: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy): Promise<void>;
 /** Copy the exact bytes captured from one no-follow source descriptor. */
 export declare function copyManagedFileNoReplace(source: string, destination: string, snapshot?: ManagedFileSnapshot, root?: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy): Promise<void>;

package/dist/types/session/internal/native-publish-outcome.d.ts

@@ -20,6 +20,7 @@ export type NativePublishIdentity = {
     readonly dev: string;
     readonly ino: string;
     readonly size: string;
+    readonly nlink?: string;
     readonly mtimeNs: string;
     readonly ctimeNs: string;
     readonly sha256?: string;

package/dist/types/session/internal/session-open-errors.d.ts

@@ -0,0 +1,5 @@
+export declare const SESSION_MIGRATION_BUSY_MESSAGE = "Another session migration is still active. Wait for it to finish, then retry.";
+export declare class SessionMigrationBusyError extends Error {
+    readonly code = "migration_busy";
+    constructor();
+}

package/dist/types/session/messages.d.ts

@@ -73,10 +73,7 @@ export declare const PRE_ADMISSION_ARTIFACT_SPILL_TAIL_BYTES = 4096;
  * next provider context is constructed. Byte boundaries never split UTF-8
  * code points, so head/tail recovery remains readable for emoji and CJK text.
  */
-export declare function createPreAdmissionArtifactSpillPreview(fullText: string, artifactId: string, digest: string, options?: {
-    maxInlineBytes?: number;
-    fullOutput?: boolean;
-}): string;
+export declare function createPreAdmissionArtifactSpillPreview(fullText: string, artifactId: string, digest: string): string;
 /**
  * Message type for bash executions via the ! command.
  */

package/dist/types/session/session-manager.d.ts

@@ -4,7 +4,7 @@ import type { ImageContent, Message, MessageAttribution, ServiceTier, TextConten
 import * as native from "@gajae-code/natives";
 import type { TtsrInjectionRecord } from "../export/ttsr";
 import type { ManagedLegacyLocalMigrationSource } from "../internal-urls/local-protocol";
-import { ArtifactManager, type ArtifactSaveReceipt } from "./artifacts";
+import { ArtifactManager } from "./artifacts";
 import { type BlobPutResult, BlobStore } from "./blob-store";
 import { type ManagedMigrationPolicy } from "./internal/managed-session-scope";
 import { type ManagedDirectoryRoot, ManagedSessionDescendantStore } from "./internal/managed-session-storage";
@@ -357,6 +357,7 @@ export declare class SessionMigrationPolicyError extends Error {
     constructor();
 }
 export declare class SessionArtifactCapacityError extends Error {
+    readonly code = "artifact_capacity_exceeded";
     constructor(message: string);
 }
 export type ResumeTailInspection = ResumeTailResumable | ResumeTailTerminal | ResumeTailError;
@@ -366,7 +367,7 @@ export interface StrictSessionOpenSuccess {
 }
 export interface StrictSessionOpenFailure {
     kind: "error";
-    reason: ResumeTailError["reason"] | "identity-mismatch" | "migration-required" | "artifact_capacity_exceeded";
+    reason: ResumeTailError["reason"] | "identity-mismatch" | "migration-required" | "artifact_capacity_exceeded" | "migration_busy";
     message?: string;
 }
 /** Exact transcript bytes and authority captured from one descriptor-bound read. */
@@ -485,7 +486,7 @@ export interface ReadonlySessionManager {
 /** Creates an immutable facade that never exposes SessionManager mutation authority. */
 export declare function createReadonlySessionManager(manager: SessionManager): ReadonlySessionManager;
 /** Internal artifact-writing capability. Read-only facades expose it only through a private weak-map lookup. */
-export type SessionArtifactCapability = Readonly<Pick<SessionManager, "allocateArtifactPath" | "saveArtifact" | "getArtifactPath" | "putBlob">>;
+export type SessionArtifactCapability = Readonly<Pick<SessionManager, "allocateArtifactPath" | "saveArtifact" | "putBlob">>;
 /**
  * Returns the artifact capability for a concrete persistence owner or one of its
  * immutable read-only facades. Structural lookalikes remain unauthorized.
@@ -613,6 +614,7 @@ export declare const MATERIALIZED_CACHE_MAX_BYTES: number;
 export declare const SessionManagerTestHooks: {
     materializedCacheMaxBytesOverride?: number;
     beforeResidentTransitionIndexBuild?: () => void;
+    afterForkSnapshot?: () => void | Promise<void>;
 };
 export declare class SessionManager {
     #private;
@@ -757,11 +759,10 @@ export declare class SessionManager {
         path?: string;
     }>;
     /**
-     * Save artifact content under the current persisted session and return its artifact ID.
-     * In-memory sessions cannot produce protocol-resolvable artifact references.
+     * Save artifact content under the current session and return artifact ID.
+     * Returns an artifact ID for all sessions (file-backed for persistent, in-memory fallback otherwise).
      */
     saveArtifact(content: string, toolType: string): Promise<string | undefined>;
-    saveArtifactReceipt(content: string, toolType: string): Promise<ArtifactSaveReceipt | undefined>;
     /**
      * Resolve an artifact ID to an on-disk path for the current session.
      * Returns null when missing or when the session is not persisted.

package/dist/types/session/session-storage.d.ts

@@ -239,6 +239,7 @@ export type VerifiedSessionDeleteResult = {
     artifactsIdentity: SessionStorageFileIdentity | undefined;
     /** Identity-bound quarantine path retained when recursive cleanup failed. */
     detachedArtifactsPath: string;
+    artifactsPayloadDurable?: true;
     /** Native snapshot required for an identity-bound recursive retry. */
     artifactsTree: NativeDirectoryTreeSnapshot;
     /** Transcript identity (unchanged) for retry binding. */
@@ -254,6 +255,7 @@ export type VerifiedSessionDeleteResult = {
     transcriptIdentity: SessionStorageFileIdentity;
     /** Optional identity-bound transcript quarantine path for restart cleanup. */
     detachedTranscriptPath?: string;
+    transcriptPayloadDurable?: true;
     retainedSuccessorPath?: string;
     retainedPlaceholderPath?: string;
     retainedUnknownPath?: string;

package/dist/types/session/streaming-output.d.ts

@@ -37,40 +37,17 @@ export interface OutputSummary {
     elidedBytes?: number;
     /** Lines elided from the middle when head-retain mode is active. */
     elidedLines?: number;
-    /** Exact source ranges retained by head/tail middle-elision windows. */
-    headRange?: {
-        start: number;
-        end: number;
-    };
-    tailRange?: {
-        start: number;
-        end: number;
-    };
-    /** The retained tail ends with only a byte fragment of its source line. */
-    lastLinePartial?: boolean;
-    /** The retained head ends with only a byte fragment of its source line. */
-    firstLinePartial?: boolean;
     /** Bytes dropped by the per-line column cap (sum across all lines). */
     columnDroppedBytes?: number;
     /** Number of distinct lines that hit the per-line column cap. */
     columnTruncatedLines?: number;
-    /** Configured per-line byte/column cap that caused visible omission. */
-    columnMax?: number;
     /** Artifact ID for internal URL access (artifact://<id>) when output was persisted. */
     artifactId?: string;
-    /** Artifact existence was proven by successful publication or file finalization. */
-    artifactVerified?: boolean;
     /** Bytes omitted from artifact storage after the artifact hard cap was reached. */
     artifactTruncatedBytes?: number;
-    /** Bytes dropped before the Bash executor received the native output stream. */
-    sourceTruncatedBytes?: number;
-    /** Exact source capture completeness could not be proven. */
-    sourceCaptureIncomplete?: boolean;
     /** Bounded diagnostic when artifact writer or terminal publisher creation, write, finalization, or publication failed. */
     artifactFailureDiagnostic?: string;
 }
-/** Verify that this exact OutputSink summary came from a successful current-execution publication. */
-export declare function hasCurrentExecutionArtifactProof(summary: OutputSummary, artifactId: string, payload?: string): boolean;
 export interface OutputSinkOptions {
     /**
      * Deprecated managed artifact pathname. Bare paths are deliberately ignored:
@@ -135,16 +112,7 @@ export interface TruncationResult {
     elidedBytes?: number;
     /** Lines elided from the middle (truncateMiddle only). */
     elidedLines?: number;
-    headRange?: {
-        start: number;
-        end: number;
-    };
-    tailRange?: {
-        start: number;
-        end: number;
-    };
     lastLinePartial?: boolean;
-    firstLinePartial?: boolean;
     firstLineExceedsLimit?: boolean;
     lastLineExceedsLimit?: boolean;
 }

package/dist/types/task/receipt.d.ts

@@ -43,6 +43,7 @@ export interface TaskResultReceipt {
         summary: string;
     };
     errorSummary?: string;
+    duplicateDisposition?: SingleResult["duplicateDisposition"];
     abortSummary?: string;
     preview: string;
     previewTruncated: boolean;
@@ -70,8 +71,6 @@ export interface TaskResultReceipt {
     forkContextAdvisory?: SingleResult["forkContextAdvisory"];
     /** Resolved repository identity for this delegated lane (#2901). */
     repositoryBinding?: SingleResult["repositoryBinding"];
-    /** Runtime-derived review source disposition and rerun guidance (#3469). */
-    reviewSource?: SingleResult["reviewSource"];
     roi?: TaskRoi;
 }
 /**