@gajae-code/coding-agent 0.12.7 → 0.12.10

package/dist/types/sdk/bus/notification-service.d.ts

@@ -1,11 +1,29 @@
 import type { WriteFileOptions } from "node:fs";
 import type { Settings } from "../../config/settings";
+import { type NotificationProvider, type NotificationRuntime, type ProviderResolution } from "./config";
+import type { DiscordDiagnosticProvider } from "./discord-provider";
+import type { SlackDiagnosticProvider } from "./slack-provider";
 /**
  * Strip secrets from a human-facing diagnostic string. Redacts the configured
  * bot token (exact match) and any token-shaped substring so health/test details
  * can never leak a credential regardless of where the string originated.
  */
 export declare function sanitizeDiagnostic(text: string, token?: string): string;
+export interface NotificationDiagnosticEvent {
+    timestamp: string;
+    operation: string;
+    phase: string;
+    outcome: string;
+    reason: string;
+    pid?: number;
+    incarnation?: string;
+    ageMs?: number;
+    detail?: string;
+}
+/** Append a bounded, private, secret-safe daemon diagnostic event. */
+export declare function writeNotificationDiagnostic(settings: Pick<Settings, "getAgentDir">, event: Omit<NotificationDiagnosticEvent, "timestamp"> & {
+    timestamp?: string;
+}): Promise<void>;
 /** Identity evidence required to remove precisely the endpoint that was inspected. */
 export interface NotificationEndpointFileIdentity {
     dev: bigint;
@@ -51,19 +69,37 @@ export interface NotificationServiceDeps {
     fs?: NotificationServiceFs;
     now?: () => number;
     pidAlive?: (pid: number) => boolean;
+    pidIncarnation?: (pid: number) => string | undefined;
     fetchImpl?: typeof fetch;
     apiBase?: string;
+    createDiscordDiagnostic?: (config: {
+        applicationId: string;
+        botToken: string;
+    }) => DiscordDiagnosticProvider;
+    createSlackDiagnostic?: (config: {
+        appToken: string;
+        botToken: string;
+    }) => SlackDiagnosticProvider;
+    providerRuntimeStatus?: (provider: NotificationProvider) => Promise<NotificationRuntime> | NotificationRuntime;
 }
 export interface AdapterConfigView {
     botTokenMasked: string;
     channel: string | undefined;
     configured: boolean;
+    quarantined: boolean;
+    desiredEnabled: boolean;
+    desiredSource: ProviderResolution["desiredSource"];
+    effectiveEnabled: boolean;
+    issues: ProviderResolution["issues"];
+    runtime?: NotificationRuntime;
 }
 export interface NotificationStatusReport {
     enabled: boolean;
     redact: boolean;
     verbosity: "lean" | "verbose";
     globallyConfigured: boolean;
+    anyProviderComplete: boolean;
+    anyProviderEffective: boolean;
     telegram: AdapterConfigView & {
         tokenFingerprint: string | undefined;
     };
@@ -139,6 +175,8 @@ export interface EndpointHealth {
 export interface NotificationHealthReport {
     overall: HealthLevel;
     configured: boolean;
+    provider?: NotificationProvider;
+    resolution?: ProviderResolution;
     checks: HealthCheck[];
     daemon: DaemonHealth;
     endpoints: EndpointHealth;
@@ -152,8 +190,10 @@ export interface HealthOptions {
     settings: Settings;
     stateRoot?: string;
     deps?: NotificationServiceDeps;
-    /** When true and Telegram is configured, probe the Bot API (getMe) for reachability. */
+    provider?: NotificationProvider;
+    /** When true, use the selected provider's REST-only diagnostic path. */
     probe?: boolean;
+    signal?: AbortSignal;
 }
 /** Structural (offline-by-default) health of the notification subsystem. */
 export declare function checkNotificationHealth(opts: HealthOptions): Promise<NotificationHealthReport>;
@@ -161,16 +201,19 @@ export declare function checkNotificationHealth(opts: HealthOptions): Promise<No
 export declare function formatNotificationHealthReport(report: NotificationHealthReport): string;
 export interface NotificationTestResult {
     ok: boolean;
-    adapter: "telegram";
-    chatId: string | undefined;
+    adapter?: NotificationProvider;
+    destination?: string;
     detail: string;
+    uncertain?: boolean;
 }
 export interface TestOptions {
     settings: Settings;
     deps?: NotificationServiceDeps;
+    provider?: NotificationProvider;
     text?: string;
+    signal?: AbortSignal;
 }
-/** Send a one-off test notification through the configured Telegram adapter. */
+/** Send a one-off test through exactly one durable, effective provider. */
 export declare function sendNotificationTest(opts: TestOptions): Promise<NotificationTestResult>;
 /** Render a test result as a single human-readable line (no secrets). */
 export declare function formatNotificationTestResult(result: NotificationTestResult): string;
@@ -196,6 +239,9 @@ export interface NotificationRecoveryReport {
         action: DaemonRecoveryAction;
         detail: string;
         ownerId: string | undefined;
+        blockingReason?: string;
+        markerAgeMs?: number;
+        forceCommand?: string;
         pid: number | undefined;
     };
 }
@@ -203,6 +249,7 @@ export interface RecoveryOptions {
     settings: Settings;
     stateRoot?: string;
     deps?: NotificationServiceDeps;
+    forceDaemonLock?: boolean;
 }
 export interface DaemonTransitionLock {
     pid: number;
@@ -216,6 +263,9 @@ type TransitionMarkerFs = {
     writeFile?(file: string, data: string, opts?: WriteFileOptions): Promise<void>;
     readEndpointFile?(file: string): Promise<NotificationEndpointFile>;
     exactUnlink?(file: string, identity: NotificationEndpointFileIdentity): Promise<NotificationExactUnlinkResult>;
+    stat?(file: string): Promise<{
+        mtimeMs: number;
+    }>;
 };
 /** True only while the exact transition acquisition still occupies the marker path. */
 export declare function daemonTransitionLockIsHeld(input: {

package/dist/types/sdk/bus/session-control.d.ts

@@ -1,4 +1,4 @@
-import { type NotificationConfig } from "./config";
+import { type GenericNotificationSessionSource, type NotificationConfig } from "./config";
 /** Minimal session-manager surface shared by extension, TUI, and headless hosts. */
 export interface NotificationSessionContext {
     sessionManager: {
@@ -29,6 +29,8 @@ export interface NotificationSessionRuntime<Context extends NotificationSessionC
      * emit a frame. `blocked_identity` is fail-closed and starts nothing.
      */
     ensureTelegramDaemon?(binding: BoundNotificationSession<Context>): Promise<TelegramDaemonPreflightResult>;
+    /** Rotates a running/default endpoint into Telegram-isolated chat scope. */
+    isolateTelegram?(binding: BoundNotificationSession<Context>): Promise<NotificationEndpointStartResult>;
     /** Refresh mutable delivery policy from the same configuration snapshot used for reconciliation. */
     refreshPolicy?(binding: BoundNotificationSession<Context>, policy: NotificationRuntimePolicy): void;
     /** Enables delivery only after the controller has committed a stable policy. */
@@ -37,9 +39,9 @@ export interface NotificationSessionRuntime<Context extends NotificationSessionC
 export interface NotificationSessionStatus {
     eligible: boolean;
     locallyEnabled: boolean;
-    effectiveEnabled: boolean;
+    genericSessionEnabled: boolean;
+    genericEligibilitySource: GenericNotificationSessionSource;
     running: boolean;
-    environment: "off" | "explicit" | "token" | "default";
 }
 export interface NotificationSessionReconcileResult {
     outcome: NotificationEndpointStartResult | "stopped";
@@ -48,6 +50,7 @@ export interface NotificationSessionReconcileResult {
 export interface NotificationRuntimePolicy {
     redact: boolean;
     verbosity: NotificationConfig["verbosity"];
+    /** Generic live-frame delivery policy; never proof of provider effectiveness. */
     stream: boolean;
     mode: "provisional" | "committed";
 }
@@ -58,6 +61,8 @@ export interface NotificationSessionControllerOptions {
     getConfig(): NotificationConfig;
     /** Kept as a reference so test and embedding hosts can supply their own environment. */
     env?: NodeJS.ProcessEnv;
+    /** This process was launched by a marked GJC child spawn site. */
+    spawnedByGjc?: boolean;
 }
 export declare class NotificationSessionController {
     #private;

package/dist/types/sdk/bus/slack-live-provider.d.ts

@@ -1,4 +1,4 @@
-import type { SlackMessageSearchResult, SlackPostedMessage, SlackProviderClient, SlackSocketEnvelope } from "./slack-provider";
+import type { SlackConfigurationProbeResult, SlackDiagnosticProvider, SlackMessageSearchResult, SlackOneShotTestResult, SlackPostedMessage, SlackProviderClient, SlackSocketEnvelope } from "./slack-provider";
 export type SlackProviderErrorCode = "connection" | "protocol" | "web_api" | "rate_limited";
 /** A Slack transport failure whose fields are safe to surface without credentials. */
 export declare class SlackProviderError extends Error {
@@ -38,10 +38,17 @@ export interface SlackLiveProviderOptions {
  * Production Socket Mode and Web API client. It keeps all connection state in
  * memory and deliberately never maintains a Slack cursor.
  */
-export declare class SlackLiveProvider implements SlackProviderClient {
+export declare class SlackLiveProvider implements SlackProviderClient, SlackDiagnosticProvider {
     #private;
     get transportHealthy(): boolean;
     constructor(options: SlackLiveProviderOptions);
+    probeConfiguration(signal?: AbortSignal): Promise<SlackConfigurationProbeResult>;
+    sendOneShotTest(input: {
+        channel: string;
+        message: string;
+        idempotencyKey: string;
+        signal?: AbortSignal;
+    }): Promise<SlackOneShotTestResult>;
     start(onEnvelope: (envelope: SlackSocketEnvelope) => void | Promise<void>): Promise<void>;
     stop(): Promise<void>;
     ack(envelopeId: string): Promise<void>;

package/dist/types/sdk/bus/slack-provider.d.ts

@@ -12,6 +12,28 @@ export interface SlackMessageSearchResult {
     ts: string;
     client_msg_id?: string;
 }
+export interface SlackConfigurationProbeResult {
+    ok: boolean;
+    detail: string;
+    teamId?: string;
+    userId?: string;
+}
+export interface SlackOneShotTestResult {
+    ok: boolean;
+    detail: string;
+    channel?: string;
+    timestamp?: string;
+    uncertain?: boolean;
+}
+export interface SlackDiagnosticProvider {
+    probeConfiguration(signal?: AbortSignal): Promise<SlackConfigurationProbeResult>;
+    sendOneShotTest(input: {
+        channel: string;
+        message: string;
+        idempotencyKey: string;
+        signal?: AbortSignal;
+    }): Promise<SlackOneShotTestResult>;
+}
 /** Minimal Socket Mode + Web API seam. Implementations may wrap the official Slack SDK. */
 export interface SlackProviderClient {
     start(onEnvelope: (envelope: SlackSocketEnvelope) => void | Promise<void>): Promise<void>;

package/dist/types/sdk/bus/telegram-daemon-contract.d.ts

@@ -48,8 +48,15 @@ export declare const NOTIFICATION_PROTOCOL_VERSION = 3;
  * managed-session replacement to exact native filesystem authority; generation
  * 37 retires that binding (revert of #3489, which stalled POSIX artifact
  * cleanup); generation 38 binds exact cleanup to parent and link-count authority.
+ * Generation 39 applies rustfmt and clippy-equivalent cleanup to the pi-shell
+ * process-tree authority (#3682); generation 40 hardens exact Bash process-tree
+ * ownership, settlement, and descendant cleanup authority. Generation 38 also
+ * adds durable provider-intent admission without changing owner, reclaim,
+ * signal, or spawn authority.
+ * Generation 42 applies first-class provider-settings admission to Telegram
+ * lifecycle controls.
  */
-export declare const DAEMON_GENERATION = 38;
+export declare const DAEMON_GENERATION = 42;
 /**
  * Serving-compatibility boundary for daemon lifecycle requests. Epoch 1 covers
  * all builds published before this field existed; epoch 2 covered generation 29;

package/dist/types/sdk/client/discovery.d.ts

@@ -21,9 +21,10 @@ export declare class SdkDiscoveryError extends Error {
     readonly code = "discovery_error";
     constructor(path: string, message: string);
 }
+export type SdkSessionEndpointScope = "default" | "chat";
 /** Lists endpoint files and returns individual malformed or unreadable records as warnings. */
 export declare function listSdkSessionEndpoints(repo: string): Promise<SdkSessionEndpointList>;
 /** Resolves one per-session SDK endpoint discovery file. */
-export declare function readSdkSessionEndpoint(repo: string, sessionId: string): Promise<SdkSessionEndpoint | null>;
+export declare function readSdkSessionEndpoint(repo: string, sessionId: string, scope?: SdkSessionEndpointScope): Promise<SdkSessionEndpoint | null>;
 /** Reads the agent-global broker discovery record. */
 export declare function readSdkBrokerDiscovery(agentDir: string): Promise<BrokerDiscovery | null>;

package/dist/types/sdk/host/query/handlers.d.ts

@@ -1,3 +1,4 @@
+import type { ActiveProviderDescriptor } from "../../providers.js";
 import { type CursorRegistry } from "./cursor.js";
 import type { RevisionStore } from "./revision-store.js";
 export declare const TARGET_PAGE_BYTES: number;
@@ -11,6 +12,7 @@ export interface SessionSurface {
     getUsage(): unknown | Promise<unknown>;
     getModels(): unknown | Promise<unknown>;
     getSkillState(): unknown | Promise<unknown>;
+    getActiveProviders?(): ActiveProviderDescriptor[] | Promise<ActiveProviderDescriptor[]>;
     /** Q12 rows preserve workflow gate fields and include stable durable gate metadata. */
     getGates(): unknown | Promise<unknown>;
     getConfigItems(): unknown | Promise<unknown>;

package/dist/types/sdk/index.d.ts

@@ -5,5 +5,6 @@ export * as host from "./host";
 export * as mcp from "./mcp";
 export type { Q10CurrentThinkingLevel, Q10Model, Q10SettableThinkingLevel, Q10ThinkingCapabilities, Q10ThinkingEffort, Q10ThinkingMode, } from "./models";
 export * from "./prompt-status";
+export type { ActiveProviderConnectionKind, ActiveProviderDescriptor } from "./providers";
 export * from "./session";
 export * from "./session-directory";

package/dist/types/sdk/providers.d.ts

@@ -0,0 +1,22 @@
+export type ActiveProviderConnectionKind = "credential" | "credentialless";
+export interface ActiveProviderDescriptor {
+    provider: string;
+    connectionKind: ActiveProviderConnectionKind;
+}
+/**
+ * Project active-provider inputs to the exact public DTO shape.
+ *
+ * Connection credentials take precedence when the same provider is reported
+ * more than once. Provider IDs are sorted by their UTF-8 bytes without
+ * normalization.
+ */
+export declare function projectActiveProviderDescriptors(descriptors: readonly {
+    provider: string;
+    connectionKind: unknown;
+}[]): ActiveProviderDescriptor[];
+export declare const ACTIVE_PROVIDER_RESOLUTION_ERROR_CODE: "internal";
+export declare const ACTIVE_PROVIDER_RESOLUTION_ERROR_MESSAGE = "Unable to resolve active providers.";
+export declare class ActiveProviderResolutionError extends Error {
+    readonly code: "internal";
+    constructor();
+}

package/dist/types/sdk/session-directory.d.ts

@@ -20,7 +20,7 @@ export type ResolveManagedSessionScopeResult = {
     scope: ManagedSessionScope;
 } | {
     kind: "error";
-    code: "cwd_missing" | "cwd_not_directory" | "identity_unavailable" | "network_unsupported" | "sessions_root_unavailable" | "binding_conflict" | "binding_invalid" | "atomic_unavailable" | "durability_not_provable" | "durability_failed" | "invalid_request";
+    code: "cwd_missing" | "cwd_not_directory" | "identity_unavailable" | "network_unsupported" | "sessions_root_unavailable" | "binding_conflict" | "binding_invalid" | "migration_busy" | "atomic_unavailable" | "durability_not_provable" | "durability_failed" | "invalid_request";
     message: string;
 };
 export interface LogicalSessionCandidate {

package/dist/types/session/internal/managed-session-scope.d.ts

@@ -34,7 +34,7 @@ export declare function managedDirectoryIdentityForScope(scope: ManagedScope): {
 };
 export declare function managedRootForScope(scope: ManagedScope): ManagedDirectoryRoot;
 export type ManagedMigrationPolicy = "copy-retain" | "disabled";
-export type ManagedScopeErrorCode = "cwd_missing" | "cwd_not_directory" | "identity_unavailable" | "network_unsupported" | "sessions_root_unavailable" | "binding_conflict" | "binding_invalid" | "atomic_unavailable" | "invalid_request" | "durability_failed" | "durability_not_provable";
+export type ManagedScopeErrorCode = "cwd_missing" | "cwd_not_directory" | "identity_unavailable" | "network_unsupported" | "sessions_root_unavailable" | "binding_conflict" | "binding_invalid" | "migration_busy" | "atomic_unavailable" | "invalid_request" | "durability_failed" | "durability_not_provable";
 export type ManagedScopeResolution = {
     kind: "resolved";
     scope: ManagedScope;
@@ -95,6 +95,19 @@ export type ManagedDeleteCandidateResult = {
     code: ManagedOpenFailure;
     message: string;
 };
+export interface ManagedVerifiedDeleteTestEvent {
+    readonly flow: "direct" | "reconcile";
+    readonly stage: "initial" | "artifact-finalization" | "transcript-after-artifacts-removed";
+}
+export interface ManagedLockReleaseTestEvent {
+    readonly path: string;
+    readonly attemptId: string;
+}
+/** Test-only ordering seams for verified deletion and managed-lock release. */
+export declare const ManagedSessionScopeTestHooks: {
+    beforeVerifiedDelete?: (event: ManagedVerifiedDeleteTestEvent) => void | Promise<void>;
+    beforeManagedLockRelease?: (event: ManagedLockReleaseTestEvent) => void | Promise<void>;
+};
 declare function scopeDigest(platform: "posix" | "win32", canonicalPath: string): string;
 export declare const computeManagedScopeDigest: typeof scopeDigest;
 /**
@@ -121,6 +134,7 @@ export declare function ensureManagedScope(scope: ManagedScope, policy?: Managed
 /** Synchronously create and validate the v2 binding before a default session writer exists. */
 export declare function prepareManagedSessionScopeForWriteSync(scope: ManagedScope, policy?: ManagedSessionSecurityPolicy, authority?: ManagedCandidateWriteAuthority): ManagedScopeResolution;
 export declare function listManagedCandidates(scope: ManagedScope): ManagedCandidateListing;
+export declare function artifactTreeReplayCompatible(observed: NativeDirectoryTreeSnapshot, expected: NativeDirectoryTreeSnapshot): boolean;
 type DetachedArtifactRoot = {
     originalPath: string;
     detachedPath: string;
@@ -129,6 +143,8 @@ type DetachedArtifactRoot = {
         ino: bigint;
         size: bigint;
         mtimeNs: bigint;
+        parentDev: bigint;
+        parentIno: bigint;
     };
     tree: NativeDirectoryTreeSnapshot;
 };

package/dist/types/session/internal/managed-session-storage.d.ts

@@ -12,6 +12,14 @@ export declare class ManagedPublishError extends Error {
 }
 /** Cleanup is safe only when the native move reports that it did not commit. */
 export declare function mayCleanManagedTreeStaging(error: unknown): boolean;
+/**
+ * A filesystem that implements no `renameat2` rename flag at all rejects the no-replace publish
+ * before mutating anything: NFS answers `EINVAL` (`invalid_request`) and kernels older than 3.15
+ * answer `ENOSYS` (`atomic_unavailable`). Only those two pre-mutation outcomes authorize the
+ * `linkat` stand-in; every other failure describes a publish that was actually attempted, and
+ * retrying it under a different primitive could publish twice.
+ */
+export declare function renameFlagsUnsupported(outcome: NativePublishOutcome): boolean;
 export type ManagedSessionSecurityPolicy = "default" | "windows-existing-verify-first";
 export type ManagedStorageFailure = "migration_busy" | "binding_conflict" | "binding_invalid" | "destination_conflict" | "source_changed" | "unsafe_artifacts" | "artifact_capacity_exceeded" | "durability_failed" | "atomic_unavailable" | "durability_not_provable" | "migration_retired" | "managed_storage_unsupported";
 export interface ManagedStorageLock {
@@ -25,6 +33,7 @@ export interface ManagedFileSnapshot {
     identity: {
         dev: bigint;
         ino: bigint;
+        nlink: bigint;
         size: number;
         mtimeNs: bigint;
         ctimeNs: bigint;
@@ -32,6 +41,14 @@ export interface ManagedFileSnapshot {
     };
 }
 export declare function validateNativeSecurityResult(value: unknown, operation: "apply" | "verify", kind: "directory" | "file"): NativeOwnerOnlySecurityResult;
+export interface ManagedLockRetirementTestEvent {
+    readonly path: string;
+    readonly attemptId: string;
+}
+/** Test-only seam immediately before exact retirement of one observed lock identity. */
+export declare const ManagedLockTestHooks: {
+    beforeObservedRetirement?: (event: ManagedLockRetirementTestEvent) => void;
+};
 /** Captured configured-root authority for managed paths only. */
 export interface ManagedDirectoryRoot {
     readonly canonicalPath: string;
@@ -77,6 +94,7 @@ export declare class ManagedSessionDescendantStore {
     publishNoReplace(relativePath: string, bytes: Uint8Array): Promise<void>;
     publishNoReplaceSync(relativePath: string, bytes: Uint8Array): void;
     replace(relativePath: string, bytes: Uint8Array): Promise<void>;
+    replaceExpected(relativePath: string, bytes: Uint8Array, expected: ManagedFileSnapshot): void;
     replaceSync(relativePath: string, bytes: Uint8Array): void;
     appendSync(relativePath: string, bytes: Uint8Array): void;
     /** Read an exact managed file without exposing its pathname as authority. */
@@ -106,7 +124,7 @@ export declare function captureManagedFileNoFollow(pathname: string): ManagedFil
 export declare function publishManagedFileNoReplace(destination: string, bytes: Uint8Array, assertOwned?: () => void, root?: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy): Promise<void>;
 export declare function publishManagedFileNoReplaceSync(destination: string, bytes: Uint8Array, root?: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy): void;
 /** Replace one managed regular file while retaining the secured staging fd through publication. */
-export declare function replaceManagedFileSync(destination: string, bytes: Uint8Array, root: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy): void;
+export declare function replaceManagedFileSync(destination: string, bytes: Uint8Array, root: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy, assertFence?: () => void, expectedDestination?: ManagedFileSnapshot["identity"]): void;
 export declare function replaceManagedFile(destination: string, bytes: Uint8Array, root: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy): Promise<void>;
 /** Copy the exact bytes captured from one no-follow source descriptor. */
 export declare function copyManagedFileNoReplace(source: string, destination: string, snapshot?: ManagedFileSnapshot, root?: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy): Promise<void>;

package/dist/types/session/internal/native-publish-outcome.d.ts

@@ -2,8 +2,8 @@ export type NativePublishMutationState = "not_committed" | "committed" | "unknow
 export type NativePublishDurabilityState = "not_attempted" | "proven" | "not_provable";
 export type NativePublishReason = "none" | "destination_exists" | "atomic_unavailable" | "cross_device" | "permission_denied" | "io_failure" | "interrupted" | "invalid_request" | "identity_violation" | "durability_not_provable" | "unknown";
 export type NativePublishOperation = "direct_rename" | "retained_file" | "retained_tree";
-export type NativePublishPrimitive = "renameat2_noreplace" | "renameatx_np_excl" | "windows_rename_noreplace" | "unsupported" | "unknown";
-export type NativePublishPhase = "preflight" | "file_sync" | "rename" | "source_parent_sync" | "destination_parent_sync" | "terminal_identity" | "complete" | "unknown";
+export type NativePublishPrimitive = "renameat2_noreplace" | "linkat_noreplace" | "mkdirat_renameat_noreplace" | "renameatx_np_excl" | "windows_rename_noreplace" | "unsupported" | "unknown";
+export type NativePublishPhase = "preflight" | "file_sync" | "rename" | "source_unlink" | "source_parent_sync" | "destination_parent_sync" | "terminal_identity" | "complete" | "unknown";
 type SyncFailure = {
     phase: Exclude<NativePublishPhase, "preflight" | "file_sync" | "rename" | "complete" | "unknown">;
     parentRole: "source" | "destination" | "shared" | "staged_file";
@@ -20,6 +20,7 @@ export type NativePublishIdentity = {
     readonly dev: string;
     readonly ino: string;
     readonly size: string;
+    readonly nlink?: string;
     readonly mtimeNs: string;
     readonly ctimeNs: string;
     readonly sha256?: string;

package/dist/types/session/internal/session-open-errors.d.ts

@@ -0,0 +1,5 @@
+export declare const SESSION_MIGRATION_BUSY_MESSAGE = "Another session migration is still active. Wait for it to finish, then retry.";
+export declare class SessionMigrationBusyError extends Error {
+    readonly code = "migration_busy";
+    constructor();
+}

package/dist/types/session/session-manager.d.ts

@@ -357,6 +357,7 @@ export declare class SessionMigrationPolicyError extends Error {
     constructor();
 }
 export declare class SessionArtifactCapacityError extends Error {
+    readonly code = "artifact_capacity_exceeded";
     constructor(message: string);
 }
 export type ResumeTailInspection = ResumeTailResumable | ResumeTailTerminal | ResumeTailError;
@@ -366,7 +367,7 @@ export interface StrictSessionOpenSuccess {
 }
 export interface StrictSessionOpenFailure {
     kind: "error";
-    reason: ResumeTailError["reason"] | "identity-mismatch" | "migration-required" | "artifact_capacity_exceeded";
+    reason: ResumeTailError["reason"] | "identity-mismatch" | "migration-required" | "artifact_capacity_exceeded" | "migration_busy";
     message?: string;
 }
 /** Exact transcript bytes and authority captured from one descriptor-bound read. */
@@ -613,6 +614,7 @@ export declare const MATERIALIZED_CACHE_MAX_BYTES: number;
 export declare const SessionManagerTestHooks: {
     materializedCacheMaxBytesOverride?: number;
     beforeResidentTransitionIndexBuild?: () => void;
+    afterForkSnapshot?: () => void | Promise<void>;
 };
 export declare class SessionManager {
     #private;

package/dist/types/session/session-storage.d.ts

@@ -239,6 +239,7 @@ export type VerifiedSessionDeleteResult = {
     artifactsIdentity: SessionStorageFileIdentity | undefined;
     /** Identity-bound quarantine path retained when recursive cleanup failed. */
     detachedArtifactsPath: string;
+    artifactsPayloadDurable?: true;
     /** Native snapshot required for an identity-bound recursive retry. */
     artifactsTree: NativeDirectoryTreeSnapshot;
     /** Transcript identity (unchanged) for retry binding. */
@@ -254,6 +255,7 @@ export type VerifiedSessionDeleteResult = {
     transcriptIdentity: SessionStorageFileIdentity;
     /** Optional identity-bound transcript quarantine path for restart cleanup. */
     detachedTranscriptPath?: string;
+    transcriptPayloadDurable?: true;
     retainedSuccessorPath?: string;
     retainedPlaceholderPath?: string;
     retainedUnknownPath?: string;

package/dist/types/system-prompt.d.ts

@@ -16,6 +16,14 @@ export interface LoadContextFilesOptions {
     /** Working directory to start walking up from. Default: getProjectDir() */
     cwd?: string;
 }
+export interface ProjectContextFilesResult {
+    contextFiles: Array<{
+        path: string;
+        content: string;
+        depth?: number;
+    }>;
+    warnings: string[];
+}
 /**
  * Load all context files using the capability API.
  * Returns {path, content, depth} entries for all discovered context files.
@@ -24,6 +32,8 @@ export interface LoadContextFilesOptions {
  * prominent. User-home files from foreign providers (`~/.claude/CLAUDE.md`,
  * `~/.codex/AGENTS.md`, …) stay excluded — only gjc's own user config applies.
  */
+export declare function loadProjectContextFilesResult(options?: LoadContextFilesOptions): Promise<ProjectContextFilesResult>;
+/** Load project context files without exposing discovery diagnostics. */
 export declare function loadProjectContextFiles(options?: LoadContextFilesOptions): Promise<Array<{
     path: string;
     content: string;
@@ -93,10 +103,11 @@ export interface BuildSystemPromptOptions {
      */
     subagent?: boolean;
 }
-/** Result of building provider-facing system prompt messages. */
 export interface BuildSystemPromptResult {
     /** Ordered system prompt blocks. Providers should preserve entries as distinct messages/blocks. */
     systemPrompt: string[];
+    /** Context-file discovery warnings visible to SDK and session callers. */
+    warnings: string[];
 }
 export interface BuildVolatileProjectContextOptions {
     cwd?: string;

package/dist/types/tools/composer-bash-policy.d.ts

@@ -1,14 +1,22 @@
-export declare const COMPOSER_BASH_POLICY_ERROR = "Composer bash policy blocked repository file I/O. Use find, search, read, and edit tools for file discovery, file inspection, and file mutation.";
+import { type ComposerBashPolicyToolSurface } from "@gajae-code/ai/providers/composer-discipline";
+export declare const COMPOSER_BASH_POLICY_ERROR: string;
+export declare const CURSOR_COMPOSER_BASH_POLICY_ERROR: string;
 type ComposerBashPolicyResult = {
     allowed: true;
 } | {
     allowed: false;
     reason: string;
     message: string;
+    surface: ComposerBashPolicyToolSurface;
 };
 export declare function isComposerBashPolicyModel(modelId: string | undefined): boolean;
+export declare function resolveComposerBashPolicyToolSurface(input: {
+    modelId?: string;
+    provider?: string;
+}): ComposerBashPolicyToolSurface;
 export declare function checkComposerBashPolicy(input: {
     modelId?: string;
+    provider?: string;
     commands: readonly string[];
 }): ComposerBashPolicyResult;
 export {};

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@gajae-code/coding-agent",
-	"version": "0.12.7",
+	"version": "0.12.10",
 	"description": "Gajae Code CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://gajae-code.com",
 	"author": "Yeachan-Heo and Gajae Code Contributors",
@@ -53,13 +53,13 @@
 		"@agentclientprotocol/sdk": "1.3.0",
 		"@babel/parser": "^7.29.3",
 		"@mozilla/readability": "^0.6.0",
-		"@gajae-code/stats": "0.12.7",
-		"@gajae-code/agent-core": "0.12.7",
-		"@gajae-code/ai": "0.12.7",
-		"@gajae-code/bridge-client": "0.12.7",
-		"@gajae-code/natives": "0.12.7",
-		"@gajae-code/tui": "0.12.7",
-		"@gajae-code/utils": "0.12.7",
+		"@gajae-code/stats": "0.12.10",
+		"@gajae-code/agent-core": "0.12.10",
+		"@gajae-code/ai": "0.12.10",
+		"@gajae-code/bridge-client": "0.12.10",
+		"@gajae-code/natives": "0.12.10",
+		"@gajae-code/tui": "0.12.10",
+		"@gajae-code/utils": "0.12.10",
 		"@puppeteer/browsers": "^2.13.0",
 		"@types/turndown": "5.0.6",
 		"@xterm/headless": "^6.0.0",
@@ -132,6 +132,8 @@
 		},
 		"./sdk/models": null,
 		"./sdk/models.js": null,
+		"./sdk/providers": null,
+		"./sdk/providers.js": null,
 		"./sdk/lifecycle-session": null,
 		"./sdk/lifecycle-session.js": null,
 		"./sdk/startup-capability": null,