@gajae-code/coding-agent 0.12.7 → 0.12.10

package/CHANGELOG.md

@@ -2,6 +2,49 @@
 
 ## [Unreleased]
 
+## [0.12.10] - 2026-08-03
+
+## [0.12.9] - 2026-08-03
+
+### Added
+
+- `/login anthropic --manual` pairs by pasting the authorization code Anthropic shows in the browser instead of waiting on a `localhost:54545` callback the browser cannot reach. Complete it with `/login <code>`. Use it when gjc runs over SSH, in a container, or on a headless host; the default `/login anthropic` still uses the loopback callback. The flag is resolved before the paste fallback, so it is never mistaken for an authorization code, and providers without a paste-a-code redirect reject it explicitly instead of silently falling back.
+
+### Fixed
+
+- Composer Bash policy rejections now identify the active provider surface and direct Cursor Composer models to their native repository tools, enabling the agent runtime's bounded automatic recovery instead of leaving a blocked shell attempt as a terminal turn.
+- The `AgentSession retry fallback > invalidates an auth-failed managed credential` test now uses a stored credential instead of a runtime-key override, matching the pin-guard behavior added in #3724 where `--api-key`/`--credential` pinned keys are never invalidated; the shared test fixture installed runtime keys as plumbing, which silently tripped the new guard and blocked the auth invalidation path.
+- The Extension Control Center inspector no longer crashes when a narrow two-column layout leaves its preview pane fewer than two columns wide.
+- Prompt-template positional arguments now preserve literal `$@` and `$ARGUMENTS` text instead of recursively expanding it during placeholder substitution.
+- Native Windows session and GC commands now report the searched `psmux` / `pmux` / `tmux` provider set when no compatible multiplexer is available instead of leaking a literal `tmux` spawn error (#3688).
+- Managed-session recovery now preserves committed mutation state and the actual Linux fallback primitive in native publish receipts, preventing unsafe retry classification after a post-link staging unlink failure (#3746).
+- The system prompt now requires non-ASCII tool-input text to be written as literal UTF-8 rather than hand-spelled `\uXXXX` escapes, including JSON serialized into a string field, while leaving escapes that are intended source syntax alone. Models that hand-spell hex codepoints for CJK mis-type them, and each mis-typed escape decodes to a valid-but-wrong syllable, so Korean text in tool parameters silently arrives corrupted (anthropics/claude-code#83033).
+- The `models.yml` validation error for a custom provider without a credential source now explains that `auth` selects only the auth scheme and lists the three corrective forms (`apiKeyEnv`, literal `apiKey`, or `auth: none`) instead of restating the rule that was already misread. `docs/models.md` documents the same contract in a table (#3738).
+- Credential rotation no longer mutates a pinned credential, and no longer reports a rotation that did not happen. `#markFailedCredential` now applies its pin guard first and for every trigger class, consulting both the `--api-key` runtime override and the `--credential` runtime selector — previously the guard existed only on the quota path and checked only the API-key override, so a `--credential` pin could be rotated away from and the `auth` path could invalidate a pinned credential outright. Both paths now also require the re-resolved credential to actually differ before reporting a rotation: `invalidateCredentialMatching` reports that a row was matched and blocked, which is not the same as the session having moved to a different credential, and with a single-row pool it was true while nothing rotated. A terminal `forbidden` failure is now excluded from retry admission and makes no credential-state change at all. Finally, a rotation is only converted into a same-model retry when the fallback controller could actually be rewound; `restorePreviousEntryForRetry()` refuses once an entry's restore budget is spent, and ignoring that refusal left `activeIndex` on the next entry while the session still requested the previous model.
+- Dead-owner notification recovery now preserves a machine-readable transition block, marker-age diagnostics, and safe force-recovery guidance without weakening ownership proofs (#3762).
+- Detached SDK session hosts no longer outlive the broker that spawned them. A host whose broker died without teardown (crash, `SIGKILL`, restart without `--close-session-hosts`) previously stayed resident forever, holding its session's memory — hundreds of MB per orphan. Each host now polls the broker discovery publication and, after a bounded grace period with no live broker, disposes itself through the same graceful teardown a `SIGTERM` takes. A replacement broker resets the window, so hosts still survive ordinary broker restarts, and a transient discovery read failure is treated as ambiguity rather than proof of orphanhood.
+- Syntax highlighting now recognizes special filenames such as `CMakeLists.txt`, `Dockerfile.*`, `Makefile`, and `.env.*` before generic filename extensions.
+
+## [0.12.8] - 2026-08-02
+### Added
+
+- Added the paginated public SDK query `providers.list/active` (Q29), returning deterministic, deduplicated `{ provider, connectionKind }` descriptors for locally eligible providers without exposing credentials or performing remote health probes.
+- Added the opt-in Alibaba Token Plan Pro profile with `deepseek-v4-flash-0731:max` for execution and `glm-5.2:xhigh` for independent criticism, preserving the existing Balanced profile unchanged.
+
+### Added
+
+- Notification settings now expose first-class Telegram, Discord, and Slack configuration, desired-intent toggles, provider-local quarantine and repair guidance, explicit `keep | replace | remove` secret actions, provider-specific health/test diagnostics, and truthful saved-but-runtime-degraded outcomes. The global master preserves provider credentials and intent, `GJC_NOTIFICATIONS=0` suppresses only automatic generic-session admission, and blocked Telegram ownership uses an isolated chat-only endpoint so verified Discord or Slack siblings can continue without exposing the shared endpoint.
+
+### Fixed
+
+- Windows automatic tmux resolution now selects `psmux` then `pmux` by canonical command order without rejecting distinct lower-priority aliases; it probes `tmux` only when neither named provider is available (#3725).
+- CI failure extraction now aggregates Bun failure and suite-error summaries across every test invocation in a job log instead of silently using only the first summary.
+- Ordinary `ask` selectors now bound long question premises and page through every premise row without skipping rows hidden by overflow indicators (#3675).
+- First-event timeout retries now require a typed, content-free failure from the current clean attempt scope, preventing prior or stale extension activity from suppressing or admitting a later request (#3553).
+- The issue-1979 Korean prose wrap test now cleans up inherited multiplexer env vars (`TMUX`, `TMUX_PANE`, etc.) so it deterministically exercises the plain-terminal render path regardless of the CI runner's terminal session (#1979).
+- The model selector's assignment menu now shows the model each role currently resolves to (`Set as EXECUTOR (Executor) — now: anthropic/claude-haiku-4-5`), distinguishing an unset default, a role that inherits the default, and a configured-but-unresolvable selector. Previously the role rows were unlabeled, so the only way to learn a role's model was to scan the whole 800+ entry model list for role badges.
+- Standalone `AGENTS.md` ancestor discovery now bounds directory traversal, per-file reads, and aggregate instruction bytes while surfacing content-free omission warnings (#3722).
+
 ## [0.12.7] - 2026-07-31
 
 ## [0.12.6] - 2026-07-31
@@ -11,6 +54,7 @@
 
 ### Fixed
 
+- Managed session publication now works on filesystems that implement no `renameat2` rename flags at all. NFS rejects both `RENAME_NOREPLACE` and `RENAME_EXCHANGE` with `EINVAL`, so publishing a migration receipt failed the whole resume with `Could not open managed session: invalid_request`. The no-replace publish now falls back to `linkat(2)`, which fails with `EEXIST` on an occupied destination and therefore carries the identical no-overwrite guarantee; the fallback is authorized only by a pre-mutation missing-primitive outcome, so a publish that may have committed is never retried under a second primitive. The staged descriptor is retained across publication and the staging link is removed only after it is released, because unlinking a still-open name on NFS silly-renames it and would leave a second link on the published inode.
 - Settings now requests a repaint after asynchronous GJC bundle and plugin views rebuild, so loaded content and mutation results appear without an extra keypress (#3643).
 - `todo_write` now rejects unsupported operation keys and treats a bare `done` or `drop` as an error instead of completing or abandoning every task (#3640).
 - Deferred `agent_end` publication again settles public session readiness before slow extension handlers finish, while retaining exact cancellation leases through queued extension delivery and draining that delivery before session shutdown.
@@ -28,6 +72,10 @@
 
 - Canonical wrapped first-event timeouts now continue the same clean turn through bounded retries and configured fallback rotation, while preserving replay-safety, cancellation, provider-terminal policies, exact attempt diagnostics, and task/subagent retry-status truth (#3553).
 - Runtime skill discovery now preserves a candidate when its exact skill name appears as a query token, so additional task-specific terms no longer discard an explicitly named skill.
+### Fixed
+
+- Managed-session deletion now immediately continues a descriptor-authorized POSIX artifact detach through exact payload scrubbing before retiring the transcript. Durable direct and replay cleanup preserve substituted successors, while fork regressions use an explicit snapshot barrier instead of scheduler timing.
+- Managed-session migration keeps a definitely live holder exclusive beyond the 60-second lease without timer-dependent self-fencing, permits immediate successor acquisition only after explicit release or proven process death, and surfaces capacity/busy startup failures through fixed path/content-redacted guidance (#3508).
 
 ## [0.12.5] - 2026-07-30
 ### Fixed

package/dist/types/cli/notify-cli.d.ts

@@ -21,6 +21,7 @@ export interface NotifyCommandArgs {
     slackChannelId?: string;
     slackAuthorizedUserId?: string;
     redact?: boolean;
+    forceDaemonLock?: boolean;
     probe?: boolean;
     message?: string;
 }

package/dist/types/commands/notify.d.ts

@@ -55,6 +55,10 @@ export default class Notify extends Command {
         redact: import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
             description: string;
         };
+        provider: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+            options: string[];
+        };
         probe: import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
             description: string;
         };

package/dist/types/commands/sdk.d.ts

@@ -3,6 +3,29 @@ import type { Args as ParsedArgs } from "../cli/args";
 import { type SessionLifecycleLaunchRequest } from "../sdk/broker/lifecycle";
 import { SessionManager } from "../session/session-manager";
 export declare function lifecycleArgs(request: SessionLifecycleLaunchRequest, cwd: string, agentDir: string): Promise<ParsedArgs>;
+/**
+ * How long a session host tolerates the complete absence of a live broker
+ * publication before treating itself as orphaned. Hosts intentionally survive
+ * broker restarts (a replacement broker republishes discovery within seconds),
+ * so this must comfortably exceed a restart window while still bounding the
+ * lifetime of hosts whose broker is gone for good — otherwise every crashed or
+ * torn-down broker leaks a detached multi-hundred-megabyte host forever.
+ */
+export declare const SESSION_HOST_BROKER_ABSENCE_GRACE_MS: number;
+/**
+ * Resolves only once no live broker publication has been observable in
+ * `agentDir` for the full grace window. A reappearing broker (including a
+ * replacement with a different pid) resets the window; an unreadable
+ * publication is not proof of orphanhood but accrues against the same bound.
+ */
+export declare function watchSessionHostBrokerLiveness(deps: {
+    agentDir: string;
+    now?: () => number;
+    sleep?: (ms: number) => Promise<void>;
+    readDiscovery?: (agentDir: string) => Promise<unknown>;
+    graceMs?: number;
+    pollMs?: number;
+}): Promise<void>;
 /** Opens lifecycle-authorized history without letting replacement content reach readiness. */
 export declare function openLifecycleSessionManager(request: SessionLifecycleLaunchRequest, cwd: string, agentDir: string): Promise<{
     parsed: ParsedArgs;

package/dist/types/config/file-lock.d.ts

@@ -3,6 +3,9 @@ export interface FileLockOptions {
     retries?: number;
     retryDelayMs?: number;
 }
+export declare const FileLockTestHooks: {
+    afterParentMkdir?: (lockPath: string) => void | Promise<void>;
+};
 /**
  * Returns the OS-provided process start timestamp for PID-reuse detection.
  * `ps` is available on the supported Unix hosts (macOS and Linux), unlike

package/dist/types/config/model-discovery-manager.d.ts

@@ -25,13 +25,17 @@ export interface DiscoveryMergeInput {
     models: readonly Model<Api>[];
     state: ProviderDiscoveryState;
     warning?: string;
+    authGeneration?: string;
+    fetched?: boolean;
 }
 export interface ProviderDiscoveryCallbacks<TProvider extends DiscoveryProvider> {
     cacheDbPath?: string;
     requiresAuth: (provider: TProvider) => boolean;
     peekApiKey: (provider: TProvider) => Promise<string | undefined>;
     isAuthenticated: (apiKey: string | undefined) => boolean;
-    fetchModels: (provider: TProvider) => Promise<Model<Api>[]>;
+    fetchModels: (provider: TProvider, apiKey: string | undefined) => Promise<Model<Api>[]>;
+    getEvidenceGeneration?: (provider: TProvider) => string;
+    canPublishCache?: (provider: TProvider) => boolean;
 }
 /** Owns configured discovery inputs, status, cache lifecycle, and refresh generations. */
 export declare class ModelDiscoveryManager<TProvider extends DiscoveryProvider> {
@@ -42,6 +46,7 @@ export declare class ModelDiscoveryManager<TProvider extends DiscoveryProvider>
     get providers(): readonly TProvider[];
     providerIds(): Set<string>;
     getState(provider: string): ProviderDiscoveryState | undefined;
+    invalidate(provider: string): void;
     loadCached(provider: TProvider, cacheDbPath?: string): readonly Model<Api>[];
     beginRefresh(provider: string): DiscoveryRefreshToken;
     isCurrent(token: DiscoveryRefreshToken): boolean;

package/dist/types/config/model-registry.d.ts

@@ -1,6 +1,7 @@
 import { type Api, type AssistantMessageEventStream, type AuthCredentialSelector, type CacheRetention, type Context, type Model, type ModelRefreshStrategy, type ModelRequestTransform, type SimpleStreamOptions, type ThinkingConfig } from "@gajae-code/ai";
 import type { OAuthCredentials, OAuthLoginCallbacks } from "@gajae-code/ai/utils/oauth/types";
 import { type ThemeColor } from "../modes/theme/theme";
+import { type ActiveProviderDescriptor } from "../sdk/providers";
 import type { AuthStorage } from "../session/auth-storage";
 import type { ActiveSearchModelContext, WebSearchMode } from "../web/search/types";
 import { type ConfigError, ConfigFile } from "./config-file";
@@ -360,6 +361,7 @@ export declare class ModelRegistry {
      * This is a fast check that doesn't refresh OAuth tokens.
      */
     getAvailable(): Model<Api>[];
+    getActiveProviders(): ActiveProviderDescriptor[];
     /**
      * Check whether auth is configured for a model's provider.
      *

package/dist/types/config/resolve-config-value.d.ts

@@ -7,8 +7,9 @@
  * Resolve a config value (API key, header value, etc.) to an actual value.
  * - If starts with "!", executes the rest as a shell command and uses stdout (cached)
  * - Otherwise checks environment variable first, then treats as literal (not cached)
+ * - `cacheScope` isolates command-cache entries when a caller rotates its config
  */
-export declare function resolveConfigValue(config: string): Promise<string | undefined>;
+export declare function resolveConfigValue(config: string, cacheScope?: string): Promise<string | undefined>;
 /**
  * Resolve all header values using the same resolution logic as API keys.
  */

package/dist/types/config/settings-schema.d.ts

@@ -69,7 +69,7 @@ export type AnyUiMetadata = UiBase & {
 };
 interface BooleanDef {
     type: "boolean";
-    default: boolean;
+    default?: boolean;
     ui?: UiBoolean;
 }
 interface StringDef {
@@ -143,6 +143,9 @@ export declare const SETTINGS_SCHEMA: {
         readonly type: "boolean";
         readonly default: false;
     };
+    readonly "notifications.telegram.enabled": {
+        readonly type: "boolean";
+    };
     readonly "notifications.telegram.botToken": {
         readonly type: "string";
         readonly default: undefined;
@@ -209,6 +212,9 @@ export declare const SETTINGS_SCHEMA: {
         readonly type: "string";
         readonly default: undefined;
     };
+    readonly "notifications.discord.enabled": {
+        readonly type: "boolean";
+    };
     readonly "notifications.discord.botToken": {
         readonly type: "string";
         readonly default: undefined;
@@ -225,6 +231,9 @@ export declare const SETTINGS_SCHEMA: {
         readonly type: "string";
         readonly default: undefined;
     };
+    readonly "notifications.slack.enabled": {
+        readonly type: "boolean";
+    };
     readonly "notifications.slack.botToken": {
         readonly type: "string";
         readonly default: undefined;
@@ -4186,7 +4195,10 @@ export type SettingPath = keyof Schema;
 /** Infer the value type for a setting path */
 export type SettingValue<P extends SettingPath> = Schema[P] extends {
     type: "boolean";
+    default: boolean;
 } ? boolean : Schema[P] extends {
+    type: "boolean";
+} ? boolean | undefined : Schema[P] extends {
     type: "string";
 } ? string | undefined : Schema[P] extends {
     type: "number";
@@ -4365,6 +4377,7 @@ export interface MemoryGuardSettings {
 export interface NotificationsSettings {
     enabled: boolean;
     telegram: {
+        enabled?: boolean;
         botToken: string | undefined;
         chatId: string | undefined;
         sound: "all" | "important" | "none";
@@ -4388,16 +4401,19 @@ export interface NotificationsSettings {
         };
     };
     discord: {
+        enabled?: boolean;
         botToken: string | undefined;
         applicationId: string | undefined;
         guildId: string | undefined;
         parentChannelId: string | undefined;
     };
     slack: {
+        enabled?: boolean;
         botToken: string | undefined;
         appToken: string | undefined;
         workspaceId: string | undefined;
         channelId: string | undefined;
+        authorizedUserId: string | undefined;
     };
     redact: boolean;
     verbosity: "lean" | "verbose";

package/dist/types/discovery/agents-md.d.ts

@@ -1 +1,11 @@
-export {};
+import { type ContextFile } from "../capability/context-file";
+import type { LoadContext, LoadResult } from "../capability/types";
+export type AgentsMdReader = (filePath: string, maxBytes: number) => Promise<{
+    content: string | null;
+    byteLength: number;
+    tooLarge: boolean;
+}>;
+/**
+ * Load standalone AGENTS.md files.
+ */
+export declare function loadAgentsMd(ctx: LoadContext, readCandidate?: AgentsMdReader): Promise<LoadResult<ContextFile>>;

package/dist/types/main.d.ts

@@ -110,6 +110,7 @@ export interface RlmPreset {
 type RunPrintMode = (session: AgentSession, options: PrintModeOptions) => Promise<void>;
 export interface RunRootCommandDependencies {
     createAgentSession?: typeof createAgentSession;
+    createSessionManager?: typeof createSessionManager;
     discoverAuthStorage?: typeof discoverAuthStorage;
     runAcpMode?: (options?: {
         agentDir?: string;

package/dist/types/modes/components/hook-selector.d.ts

@@ -22,6 +22,21 @@ export interface HookSelectorOptions {
      */
     wrapFocused?: boolean;
     scrollTitleRows?: number;
+    /**
+     * Maximum visible rows for the inline editor in bounded scroll-title selectors.
+     * The editor keeps the full draft and scrolls within this height.
+     */
+    inlineEditorMaxHeight?: number;
+    /**
+     * Maximum visible autocomplete rows for the inline editor in a bounded selector.
+     * The Editor retains its normal minimum and scroll indicator behavior.
+     */
+    inlineAutocompleteMaxVisible?: number;
+    /**
+     * Compact bounded-selector chrome while the inline editor is active.
+     * Used only when the terminal cannot fit the normal editor and dropdown rows.
+     */
+    compactInlineInput?: boolean;
     /**
      * Inline free-text entry for the option with this label (e.g. the ask
      * tool's "Other (type your own)"). Selecting it keeps the title and option
@@ -54,6 +69,11 @@ export declare class HookSelectorComponent extends Container {
     #private;
     constructor(title: string, options: string[], onSelect: (option: string) => void, onCancel: () => void, opts?: HookSelectorOptions);
     hasActiveInlineInput(): boolean;
+    /**
+     * Update the bounded selector's title/list row budgets after a terminal resize.
+     * The existing title scroll offset, option focus, and inline editor remain intact.
+     */
+    setLayoutBudget(maxVisible: number, scrollTitleRows: number, inlineEditorMaxHeight?: number | undefined, inlineAutocompleteMaxVisible?: number | undefined, compactInlineInput?: boolean): void;
     handleInput(keyData: string): void;
     dispose(): void;
 }

package/dist/types/modes/components/notifications-settings-editor.d.ts

@@ -1,5 +1,6 @@
 import { type Component, type Focusable, type SecretValue } from "@gajae-code/tui";
 import type { CasReceipt } from "../../config/atomic-yaml-patch";
+import type { NotificationProvider, ProviderSecretDisposition } from "../../sdk/bus/config";
 import type { BlockedTelegramRestoreResult, ProposedTelegramIdentity, TelegramDaemonReconnectOutcome } from "../../sdk/bus/notification-orchestration";
 import type { NotificationHealthReport, NotificationRecoveryReport, NotificationStatusReport, NotificationTestResult } from "../../sdk/bus/notification-service";
 import type { NotificationSessionReconcileResult, NotificationSessionStatus } from "../../sdk/bus/session-control";
@@ -45,6 +46,40 @@ export interface PreparedTelegramConfiguration {
     richDraftEnabled: boolean;
     streamingEnabled: boolean;
 }
+export interface ProviderSecretActionInput {
+    action: ProviderSecretDisposition;
+    value?: SecretValue;
+}
+export interface NotificationsProviderSetupInput {
+    provider: "discord" | "slack";
+    botToken: ProviderSecretActionInput;
+    appToken?: ProviderSecretActionInput;
+    applicationId?: string;
+    guildId?: string;
+    parentChannelId?: string;
+    workspaceId?: string;
+    channelId?: string;
+    authorizedUserId?: string;
+}
+export interface PreparedNotificationProviderConfiguration {
+    provider: "discord" | "slack";
+    botTokenDisposition: ProviderSecretDisposition;
+    botTokenMask: string;
+    appTokenDisposition?: ProviderSecretDisposition;
+    appTokenMask?: string;
+    applicationId?: string;
+    guildId?: string;
+    parentChannelId?: string;
+    workspaceId?: string;
+    channelId?: string;
+    authorizedUserId?: string;
+    applicationIdDisplay?: string;
+    guildIdDisplay?: string;
+    parentChannelIdDisplay?: string;
+    workspaceIdDisplay?: string;
+    channelIdDisplay?: string;
+    authorizedUserIdDisplay?: string;
+}
 export interface NotificationsPreflightResult {
     status: "ready" | "aborted" | "cancelled" | "error";
     identity: ProposedTelegramIdentity;
@@ -57,6 +92,10 @@ export type NotificationsConfigureCommitResult = {
     status: "saved";
     receipt: CasReceipt;
     message: string;
+} | {
+    status: "activation_failed" | "observer_failed";
+    receipt: CasReceipt;
+    message: string;
 } | {
     status: "blocked_identity";
     receipt: CasReceipt;
@@ -67,11 +106,16 @@ export type NotificationsConfigureCommitResult = {
 export interface NotificationsMutationResult {
     message: string;
     receipt?: CasReceipt;
+    outcome?: "success" | "degraded" | "failed";
 }
 export type NotificationsSaveInactiveResult = {
     status: "saved_inactive";
     receipt: CasReceipt;
     message: string;
+} | {
+    status: "observer_failed";
+    receipt: CasReceipt;
+    message: string;
 } | {
     status: "unavailable";
     guidance: string;
@@ -85,12 +129,13 @@ export type NotificationsSaveInactiveResult = {
 export interface NotificationsEditorOperations {
     /** Combines a buildNotificationStatusReport-shaped status snapshot with the current session-control query. */
     loadState(): Promise<NotificationsEditorState>;
-    /** Performs offline health refreshes and a non-cancellable reachability probe when requested. */
+    /** Performs offline or selected REST-only health refresh. */
     refreshHealth(input: {
         probe: boolean;
+        provider?: NotificationProvider;
         signal?: AbortSignal;
     }): Promise<NotificationHealthReport>;
-    sendTest(): Promise<NotificationTestResult>;
+    sendTest(provider?: NotificationProvider): Promise<NotificationTestResult>;
     recover(): Promise<NotificationRecoveryReport>;
     reconnect(): Promise<TelegramDaemonReconnectOutcome>;
     /** Validates/discovers a Telegram destination and returns a secret-safe prepared draft. */
@@ -101,6 +146,11 @@ export interface NotificationsEditorOperations {
     saveInactive(draft: PreparedTelegramConfiguration): Promise<NotificationsSaveInactiveResult>;
     /** Clears adapter-local ephemeral credential material for a prepared setup draft. Idempotent. */
     discardConfigureDraft(draft: PreparedTelegramConfiguration): void;
+    prepareProviderConfiguration(input: NotificationsProviderSetupInput): Promise<PreparedNotificationProviderConfiguration>;
+    commitProviderConfiguration(draft: PreparedNotificationProviderConfiguration): Promise<NotificationsMutationResult>;
+    discardProviderConfiguration(draft: PreparedNotificationProviderConfiguration): void;
+    setProviderDesired(provider: NotificationProvider, enabled: boolean): Promise<NotificationsMutationResult>;
+    removeProvider(provider: NotificationProvider): Promise<NotificationsMutationResult>;
     /** Enables globally without requesting or exposing a credential. */
     enableGlobally(): Promise<NotificationsMutationResult>;
     disableGlobally(): Promise<NotificationsMutationResult>;
@@ -117,7 +167,7 @@ export interface NotificationsEditorOperations {
 export interface NotificationsSettingsEditorCallbacks {
     onCancel?: () => void;
 }
-type EditorMode = "home" | "provider-selection" | "chat-entry" | "token-entry" | "pairing" | "review" | "preferences" | "confirmation";
+export type EditorMode = "home" | "provider-selection" | "provider-actions" | "provider-form" | "provider-review" | "chat-entry" | "token-entry" | "pairing" | "review" | "preferences" | "confirmation";
 /**
  * Direct tab content for notification setup and operations. It is deliberately
  * independent of Settings and notification services; WI7b injects the adapter.
@@ -137,4 +187,3 @@ export declare class NotificationsSettingsEditorComponent implements Component,
     render(width: number): string[];
     handleInput(data: string): void;
 }
-export {};

package/dist/types/modes/controllers/extension-ui-controller.d.ts

@@ -1,4 +1,4 @@
-import type { Component, TUI } from "@gajae-code/tui";
+import { type Component, type TUI } from "@gajae-code/tui";
 import { KeybindingsManager } from "../../config/keybindings";
 import type { ExtensionUIContext, ExtensionUIDialogOptions, ExtensionWidgetContent, ExtensionWidgetOptions, TerminalInputHandler } from "../../extensibility/extensions";
 import { type Theme } from "../../modes/theme/theme";

package/dist/types/modes/controllers/selector-controller.d.ts

@@ -2,8 +2,8 @@ import type { Component, SlashCommand } from "@gajae-code/tui";
 import type { ModelProfileConfig } from "../../config/models-config-schema";
 import { type Settings } from "../../config/settings";
 import { type InteractiveModeContext, type OAuthSelectorOptions } from "../../modes/types";
-import { getNotificationConfig, maskToken } from "../../sdk/bus/config";
-import { proposedTelegramIdentity, reconcileCommittedTelegramConfiguration, removeTelegramConfiguration, saveTelegramInactive } from "../../sdk/bus/notification-orchestration";
+import { getCurrentTelegramActivationMarker, getNotificationConfig, maskToken } from "../../sdk/bus/config";
+import { type NotificationProviderRuntimeAuthority, proposedTelegramIdentity, reconcileCommittedTelegramConfiguration, removeTelegramConfiguration, saveTelegramInactive } from "../../sdk/bus/notification-orchestration";
 import { buildNotificationStatusReport, checkNotificationHealth, recoverNotifications, sanitizeDiagnostic, sendNotificationTest } from "../../sdk/bus/notification-service";
 import { ensureTelegramDaemonRunningDetailed, readNotificationRootRegistration, resolveTelegramSetupPreflight, unregisterNotificationRoot } from "../../sdk/bus/telegram-daemon";
 import { runTelegramSetup } from "../../sdk/bus/telegram-setup";
@@ -37,6 +37,7 @@ type TelegramDaemonStopResult = {
 };
 export interface NotificationsEditorOperationDependencies {
     getNotificationConfig: typeof getNotificationConfig;
+    getCurrentTelegramActivationMarker: typeof getCurrentTelegramActivationMarker;
     maskToken: typeof maskToken;
     buildNotificationStatusReport: typeof buildNotificationStatusReport;
     checkNotificationHealth: typeof checkNotificationHealth;
@@ -66,6 +67,7 @@ export interface NotificationsEditorOperationDependencies {
         message: string;
     }>;
     stopTelegramDaemon(settings: Settings): Promise<TelegramDaemonStopResult>;
+    providerRuntime?: NotificationProviderRuntimeAuthority;
 }
 /**
  * Concrete service adapter for the direct Notifications settings tab. Secrets remain in this closure's

package/dist/types/modes/types.d.ts

@@ -374,5 +374,11 @@ export interface OAuthSelectorOptions {
     allowExternalCredentialDiscovery?: boolean;
     trigger?: "bare-login";
     externalCredentialDiscover?: CredentialAutoImportOptions["discover"];
+    /**
+     * Pair by pasting the code the provider displays instead of waiting on the
+     * loopback callback. Set by `/login <provider> --manual` for browsers that
+     * cannot reach this machine.
+     */
+    manualCode?: boolean;
 }
 export {};

package/dist/types/sdk/broker/broker.d.ts

@@ -1,7 +1,7 @@
 import type { NativeDirectoryTreeSnapshot } from "@gajae-code/natives";
 import type { ModelProfileErrorDetails } from "../../config/model-profile-contract";
 import { type DirectoryMigrationPolicy } from "../session-directory";
-import { type BrokerDiscovery, type RedactedBrokerDiscovery } from "./discovery";
+import { type BrokerDiscovery, type BrokerPublicationObservation, type RedactedBrokerDiscovery } from "./discovery";
 import { type LifecycleDurableEffectsReceipt, LifecycleLedger, type LifecycleStartupFailureReceipt } from "./lifecycle-ledger";
 import { SessionIndex } from "./session-index";
 export interface BrokerSettings {
@@ -137,4 +137,8 @@ export declare class Broker {
 }
 /** Test-only hook for simulating a process crash after terminal persistence verification. */
 export declare function setTerminalPersistenceHookForTest(broker: Broker, hook: (() => void) | undefined): void;
+/** Test-only hook for shortening the bounded ambiguity deadline. */
+export declare function setAmbiguityGraceForTest(broker: Broker, graceMs: number | undefined): void;
+/** Test-only hook for forcing the observation the publication watchdog sees. */
+export declare function setPublicationObservationForTest(broker: Broker, observation: BrokerPublicationObservation | undefined): void;
 export {};

package/dist/types/sdk/broker/lifecycle-ledger.d.ts

@@ -119,4 +119,5 @@ export declare class LifecycleLedger {
     findCleanupPendingBySessionId(sessionId: string, excludingIdentity: string): LifecycleLedgerEntry | undefined;
     hasUncertainCleanupForSession(sessionId: string, excludingIdentity: string): boolean;
     get(identity: string): LifecycleLedgerEntry | undefined;
+    findPendingCleanupByTarget(sessionId: string, cwd: string, transcriptPath: string): LifecycleLedgerEntry | undefined;
 }

package/dist/types/sdk/bus/chat-daemon-control.d.ts

@@ -21,7 +21,16 @@ export type ChatDaemonAction = "stop" | "reload";
  * daemon transports. Generation 16 applies Telegram sound-policy configuration
  * through shared notification parsing. Generation 17 bound managed-session
  * replacement to exact native filesystem authority; generation 18 retired that
- * binding, and generation 19 binds exact cleanup to parent/link-count authority.
+ * binding, and generation 19 binds exact cleanup to parent/link-count authority
+ * while also adding durable provider-intent admission without changing lifecycle
+ * behavior. Generation 20 discovers isolated chat-only session endpoints when
+ * Telegram identity ownership is blocked. Discord generation 21 applies rustfmt
+ * and clippy-equivalent cleanup to the pi-shell process-tree authority (#3682).
+ * Discord generation 22 / slack generation 21 refreshes retained cleanup
+ * semantics; discord generation 23 / slack generation 22 hardens exact Bash
+ * process-tree ownership shared by chat daemon cleanup.
+ * Discord generation 24 / slack generation 23 apply provider-completeness and
+ * effective-enable admission to chat daemon lifecycle controls.
  */
 export declare const CHAT_DAEMON_GENERATIONS: Readonly<Record<ChatDaemonKind, number>>;
 export declare function chatDaemonGeneration(kind: ChatDaemonKind): number;
@@ -102,6 +111,7 @@ export declare class ChatDaemonController implements BuiltInDaemonController {
     readonly kind: ChatDaemonKind;
     constructor(settings: Settings, kind: ChatDaemonKind, deps?: ChatDaemonControlDeps);
     private identity;
+    private effectivelyEnabled;
     private alive;
     status(): Promise<DaemonStatus>;
     stop(opts?: DaemonOperationOptions): Promise<DaemonOperationResult>;