@gajae-code/coding-agent 0.12.7 → 0.12.8

package/CHANGELOG.md

@@ -2,6 +2,21 @@
 
 ## [Unreleased]
 
+## [0.12.8] - 2026-08-02
+### Added
+
+- Added the paginated public SDK query `providers.list/active` (Q29), returning deterministic, deduplicated `{ provider, connectionKind }` descriptors for locally eligible providers without exposing credentials or performing remote health probes.
+
+### Added
+
+- Notification settings now expose first-class Telegram, Discord, and Slack configuration, desired-intent toggles, provider-local quarantine and repair guidance, explicit `keep | replace | remove` secret actions, provider-specific health/test diagnostics, and truthful saved-but-runtime-degraded outcomes. The global master preserves provider credentials and intent, `GJC_NOTIFICATIONS=0` suppresses only automatic generic-session admission, and blocked Telegram ownership uses an isolated chat-only endpoint so verified Discord or Slack siblings can continue without exposing the shared endpoint.
+
+### Fixed
+
+- Ordinary `ask` selectors now bound long question premises and page through every premise row without skipping rows hidden by overflow indicators (#3675).
+- First-event timeout retries now require a typed, content-free failure from the current clean attempt scope, preventing prior or stale extension activity from suppressing or admitting a later request (#3553).
+- The issue-1979 Korean prose wrap test now cleans up inherited multiplexer env vars (`TMUX`, `TMUX_PANE`, etc.) so it deterministically exercises the plain-terminal render path regardless of the CI runner's terminal session (#1979).
+- The model selector's assignment menu now shows the model each role currently resolves to (`Set as EXECUTOR (Executor) — now: anthropic/claude-haiku-4-5`), distinguishing an unset default, a role that inherits the default, and a configured-but-unresolvable selector. Previously the role rows were unlabeled, so the only way to learn a role's model was to scan the whole 800+ entry model list for role badges.
 ## [0.12.7] - 2026-07-31
 
 ## [0.12.6] - 2026-07-31
@@ -28,6 +43,10 @@
 
 - Canonical wrapped first-event timeouts now continue the same clean turn through bounded retries and configured fallback rotation, while preserving replay-safety, cancellation, provider-terminal policies, exact attempt diagnostics, and task/subagent retry-status truth (#3553).
 - Runtime skill discovery now preserves a candidate when its exact skill name appears as a query token, so additional task-specific terms no longer discard an explicitly named skill.
+### Fixed
+
+- Managed-session deletion now immediately continues a descriptor-authorized POSIX artifact detach through exact payload scrubbing before retiring the transcript. Durable direct and replay cleanup preserve substituted successors, while fork regressions use an explicit snapshot barrier instead of scheduler timing.
+- Managed-session migration keeps a definitely live holder exclusive beyond the 60-second lease without timer-dependent self-fencing, permits immediate successor acquisition only after explicit release or proven process death, and surfaces capacity/busy startup failures through fixed path/content-redacted guidance (#3508).
 
 ## [0.12.5] - 2026-07-30
 ### Fixed

package/dist/types/commands/notify.d.ts

@@ -55,6 +55,10 @@ export default class Notify extends Command {
         redact: import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
             description: string;
         };
+        provider: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+            options: string[];
+        };
         probe: import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
             description: string;
         };

package/dist/types/config/file-lock.d.ts

@@ -3,6 +3,9 @@ export interface FileLockOptions {
     retries?: number;
     retryDelayMs?: number;
 }
+export declare const FileLockTestHooks: {
+    afterParentMkdir?: (lockPath: string) => void | Promise<void>;
+};
 /**
  * Returns the OS-provided process start timestamp for PID-reuse detection.
  * `ps` is available on the supported Unix hosts (macOS and Linux), unlike

package/dist/types/config/model-discovery-manager.d.ts

@@ -25,13 +25,17 @@ export interface DiscoveryMergeInput {
     models: readonly Model<Api>[];
     state: ProviderDiscoveryState;
     warning?: string;
+    authGeneration?: string;
+    fetched?: boolean;
 }
 export interface ProviderDiscoveryCallbacks<TProvider extends DiscoveryProvider> {
     cacheDbPath?: string;
     requiresAuth: (provider: TProvider) => boolean;
     peekApiKey: (provider: TProvider) => Promise<string | undefined>;
     isAuthenticated: (apiKey: string | undefined) => boolean;
-    fetchModels: (provider: TProvider) => Promise<Model<Api>[]>;
+    fetchModels: (provider: TProvider, apiKey: string | undefined) => Promise<Model<Api>[]>;
+    getEvidenceGeneration?: (provider: TProvider) => string;
+    canPublishCache?: (provider: TProvider) => boolean;
 }
 /** Owns configured discovery inputs, status, cache lifecycle, and refresh generations. */
 export declare class ModelDiscoveryManager<TProvider extends DiscoveryProvider> {
@@ -42,6 +46,7 @@ export declare class ModelDiscoveryManager<TProvider extends DiscoveryProvider>
     get providers(): readonly TProvider[];
     providerIds(): Set<string>;
     getState(provider: string): ProviderDiscoveryState | undefined;
+    invalidate(provider: string): void;
     loadCached(provider: TProvider, cacheDbPath?: string): readonly Model<Api>[];
     beginRefresh(provider: string): DiscoveryRefreshToken;
     isCurrent(token: DiscoveryRefreshToken): boolean;

package/dist/types/config/model-registry.d.ts

@@ -1,6 +1,7 @@
 import { type Api, type AssistantMessageEventStream, type AuthCredentialSelector, type CacheRetention, type Context, type Model, type ModelRefreshStrategy, type ModelRequestTransform, type SimpleStreamOptions, type ThinkingConfig } from "@gajae-code/ai";
 import type { OAuthCredentials, OAuthLoginCallbacks } from "@gajae-code/ai/utils/oauth/types";
 import { type ThemeColor } from "../modes/theme/theme";
+import { type ActiveProviderDescriptor } from "../sdk/providers";
 import type { AuthStorage } from "../session/auth-storage";
 import type { ActiveSearchModelContext, WebSearchMode } from "../web/search/types";
 import { type ConfigError, ConfigFile } from "./config-file";
@@ -360,6 +361,7 @@ export declare class ModelRegistry {
      * This is a fast check that doesn't refresh OAuth tokens.
      */
     getAvailable(): Model<Api>[];
+    getActiveProviders(): ActiveProviderDescriptor[];
     /**
      * Check whether auth is configured for a model's provider.
      *

package/dist/types/config/resolve-config-value.d.ts

@@ -7,8 +7,9 @@
  * Resolve a config value (API key, header value, etc.) to an actual value.
  * - If starts with "!", executes the rest as a shell command and uses stdout (cached)
  * - Otherwise checks environment variable first, then treats as literal (not cached)
+ * - `cacheScope` isolates command-cache entries when a caller rotates its config
  */
-export declare function resolveConfigValue(config: string): Promise<string | undefined>;
+export declare function resolveConfigValue(config: string, cacheScope?: string): Promise<string | undefined>;
 /**
  * Resolve all header values using the same resolution logic as API keys.
  */

package/dist/types/config/settings-schema.d.ts

@@ -69,7 +69,7 @@ export type AnyUiMetadata = UiBase & {
 };
 interface BooleanDef {
     type: "boolean";
-    default: boolean;
+    default?: boolean;
     ui?: UiBoolean;
 }
 interface StringDef {
@@ -143,6 +143,9 @@ export declare const SETTINGS_SCHEMA: {
         readonly type: "boolean";
         readonly default: false;
     };
+    readonly "notifications.telegram.enabled": {
+        readonly type: "boolean";
+    };
     readonly "notifications.telegram.botToken": {
         readonly type: "string";
         readonly default: undefined;
@@ -209,6 +212,9 @@ export declare const SETTINGS_SCHEMA: {
         readonly type: "string";
         readonly default: undefined;
     };
+    readonly "notifications.discord.enabled": {
+        readonly type: "boolean";
+    };
     readonly "notifications.discord.botToken": {
         readonly type: "string";
         readonly default: undefined;
@@ -225,6 +231,9 @@ export declare const SETTINGS_SCHEMA: {
         readonly type: "string";
         readonly default: undefined;
     };
+    readonly "notifications.slack.enabled": {
+        readonly type: "boolean";
+    };
     readonly "notifications.slack.botToken": {
         readonly type: "string";
         readonly default: undefined;
@@ -4186,7 +4195,10 @@ export type SettingPath = keyof Schema;
 /** Infer the value type for a setting path */
 export type SettingValue<P extends SettingPath> = Schema[P] extends {
     type: "boolean";
+    default: boolean;
 } ? boolean : Schema[P] extends {
+    type: "boolean";
+} ? boolean | undefined : Schema[P] extends {
     type: "string";
 } ? string | undefined : Schema[P] extends {
     type: "number";
@@ -4365,6 +4377,7 @@ export interface MemoryGuardSettings {
 export interface NotificationsSettings {
     enabled: boolean;
     telegram: {
+        enabled?: boolean;
         botToken: string | undefined;
         chatId: string | undefined;
         sound: "all" | "important" | "none";
@@ -4388,16 +4401,19 @@ export interface NotificationsSettings {
         };
     };
     discord: {
+        enabled?: boolean;
         botToken: string | undefined;
         applicationId: string | undefined;
         guildId: string | undefined;
         parentChannelId: string | undefined;
     };
     slack: {
+        enabled?: boolean;
         botToken: string | undefined;
         appToken: string | undefined;
         workspaceId: string | undefined;
         channelId: string | undefined;
+        authorizedUserId: string | undefined;
     };
     redact: boolean;
     verbosity: "lean" | "verbose";

package/dist/types/main.d.ts

@@ -110,6 +110,7 @@ export interface RlmPreset {
 type RunPrintMode = (session: AgentSession, options: PrintModeOptions) => Promise<void>;
 export interface RunRootCommandDependencies {
     createAgentSession?: typeof createAgentSession;
+    createSessionManager?: typeof createSessionManager;
     discoverAuthStorage?: typeof discoverAuthStorage;
     runAcpMode?: (options?: {
         agentDir?: string;

package/dist/types/modes/components/hook-selector.d.ts

@@ -22,6 +22,21 @@ export interface HookSelectorOptions {
      */
     wrapFocused?: boolean;
     scrollTitleRows?: number;
+    /**
+     * Maximum visible rows for the inline editor in bounded scroll-title selectors.
+     * The editor keeps the full draft and scrolls within this height.
+     */
+    inlineEditorMaxHeight?: number;
+    /**
+     * Maximum visible autocomplete rows for the inline editor in a bounded selector.
+     * The Editor retains its normal minimum and scroll indicator behavior.
+     */
+    inlineAutocompleteMaxVisible?: number;
+    /**
+     * Compact bounded-selector chrome while the inline editor is active.
+     * Used only when the terminal cannot fit the normal editor and dropdown rows.
+     */
+    compactInlineInput?: boolean;
     /**
      * Inline free-text entry for the option with this label (e.g. the ask
      * tool's "Other (type your own)"). Selecting it keeps the title and option
@@ -54,6 +69,11 @@ export declare class HookSelectorComponent extends Container {
     #private;
     constructor(title: string, options: string[], onSelect: (option: string) => void, onCancel: () => void, opts?: HookSelectorOptions);
     hasActiveInlineInput(): boolean;
+    /**
+     * Update the bounded selector's title/list row budgets after a terminal resize.
+     * The existing title scroll offset, option focus, and inline editor remain intact.
+     */
+    setLayoutBudget(maxVisible: number, scrollTitleRows: number, inlineEditorMaxHeight?: number | undefined, inlineAutocompleteMaxVisible?: number | undefined, compactInlineInput?: boolean): void;
     handleInput(keyData: string): void;
     dispose(): void;
 }

package/dist/types/modes/components/notifications-settings-editor.d.ts

@@ -1,5 +1,6 @@
 import { type Component, type Focusable, type SecretValue } from "@gajae-code/tui";
 import type { CasReceipt } from "../../config/atomic-yaml-patch";
+import type { NotificationProvider, ProviderSecretDisposition } from "../../sdk/bus/config";
 import type { BlockedTelegramRestoreResult, ProposedTelegramIdentity, TelegramDaemonReconnectOutcome } from "../../sdk/bus/notification-orchestration";
 import type { NotificationHealthReport, NotificationRecoveryReport, NotificationStatusReport, NotificationTestResult } from "../../sdk/bus/notification-service";
 import type { NotificationSessionReconcileResult, NotificationSessionStatus } from "../../sdk/bus/session-control";
@@ -45,6 +46,40 @@ export interface PreparedTelegramConfiguration {
     richDraftEnabled: boolean;
     streamingEnabled: boolean;
 }
+export interface ProviderSecretActionInput {
+    action: ProviderSecretDisposition;
+    value?: SecretValue;
+}
+export interface NotificationsProviderSetupInput {
+    provider: "discord" | "slack";
+    botToken: ProviderSecretActionInput;
+    appToken?: ProviderSecretActionInput;
+    applicationId?: string;
+    guildId?: string;
+    parentChannelId?: string;
+    workspaceId?: string;
+    channelId?: string;
+    authorizedUserId?: string;
+}
+export interface PreparedNotificationProviderConfiguration {
+    provider: "discord" | "slack";
+    botTokenDisposition: ProviderSecretDisposition;
+    botTokenMask: string;
+    appTokenDisposition?: ProviderSecretDisposition;
+    appTokenMask?: string;
+    applicationId?: string;
+    guildId?: string;
+    parentChannelId?: string;
+    workspaceId?: string;
+    channelId?: string;
+    authorizedUserId?: string;
+    applicationIdDisplay?: string;
+    guildIdDisplay?: string;
+    parentChannelIdDisplay?: string;
+    workspaceIdDisplay?: string;
+    channelIdDisplay?: string;
+    authorizedUserIdDisplay?: string;
+}
 export interface NotificationsPreflightResult {
     status: "ready" | "aborted" | "cancelled" | "error";
     identity: ProposedTelegramIdentity;
@@ -57,6 +92,10 @@ export type NotificationsConfigureCommitResult = {
     status: "saved";
     receipt: CasReceipt;
     message: string;
+} | {
+    status: "activation_failed" | "observer_failed";
+    receipt: CasReceipt;
+    message: string;
 } | {
     status: "blocked_identity";
     receipt: CasReceipt;
@@ -67,11 +106,16 @@ export type NotificationsConfigureCommitResult = {
 export interface NotificationsMutationResult {
     message: string;
     receipt?: CasReceipt;
+    outcome?: "success" | "degraded" | "failed";
 }
 export type NotificationsSaveInactiveResult = {
     status: "saved_inactive";
     receipt: CasReceipt;
     message: string;
+} | {
+    status: "observer_failed";
+    receipt: CasReceipt;
+    message: string;
 } | {
     status: "unavailable";
     guidance: string;
@@ -85,12 +129,13 @@ export type NotificationsSaveInactiveResult = {
 export interface NotificationsEditorOperations {
     /** Combines a buildNotificationStatusReport-shaped status snapshot with the current session-control query. */
     loadState(): Promise<NotificationsEditorState>;
-    /** Performs offline health refreshes and a non-cancellable reachability probe when requested. */
+    /** Performs offline or selected REST-only health refresh. */
     refreshHealth(input: {
         probe: boolean;
+        provider?: NotificationProvider;
         signal?: AbortSignal;
     }): Promise<NotificationHealthReport>;
-    sendTest(): Promise<NotificationTestResult>;
+    sendTest(provider?: NotificationProvider): Promise<NotificationTestResult>;
     recover(): Promise<NotificationRecoveryReport>;
     reconnect(): Promise<TelegramDaemonReconnectOutcome>;
     /** Validates/discovers a Telegram destination and returns a secret-safe prepared draft. */
@@ -101,6 +146,11 @@ export interface NotificationsEditorOperations {
     saveInactive(draft: PreparedTelegramConfiguration): Promise<NotificationsSaveInactiveResult>;
     /** Clears adapter-local ephemeral credential material for a prepared setup draft. Idempotent. */
     discardConfigureDraft(draft: PreparedTelegramConfiguration): void;
+    prepareProviderConfiguration(input: NotificationsProviderSetupInput): Promise<PreparedNotificationProviderConfiguration>;
+    commitProviderConfiguration(draft: PreparedNotificationProviderConfiguration): Promise<NotificationsMutationResult>;
+    discardProviderConfiguration(draft: PreparedNotificationProviderConfiguration): void;
+    setProviderDesired(provider: NotificationProvider, enabled: boolean): Promise<NotificationsMutationResult>;
+    removeProvider(provider: NotificationProvider): Promise<NotificationsMutationResult>;
     /** Enables globally without requesting or exposing a credential. */
     enableGlobally(): Promise<NotificationsMutationResult>;
     disableGlobally(): Promise<NotificationsMutationResult>;
@@ -117,7 +167,7 @@ export interface NotificationsEditorOperations {
 export interface NotificationsSettingsEditorCallbacks {
     onCancel?: () => void;
 }
-type EditorMode = "home" | "provider-selection" | "chat-entry" | "token-entry" | "pairing" | "review" | "preferences" | "confirmation";
+export type EditorMode = "home" | "provider-selection" | "provider-actions" | "provider-form" | "provider-review" | "chat-entry" | "token-entry" | "pairing" | "review" | "preferences" | "confirmation";
 /**
  * Direct tab content for notification setup and operations. It is deliberately
  * independent of Settings and notification services; WI7b injects the adapter.
@@ -137,4 +187,3 @@ export declare class NotificationsSettingsEditorComponent implements Component,
     render(width: number): string[];
     handleInput(data: string): void;
 }
-export {};

package/dist/types/modes/controllers/extension-ui-controller.d.ts

@@ -1,4 +1,4 @@
-import type { Component, TUI } from "@gajae-code/tui";
+import { type Component, type TUI } from "@gajae-code/tui";
 import { KeybindingsManager } from "../../config/keybindings";
 import type { ExtensionUIContext, ExtensionUIDialogOptions, ExtensionWidgetContent, ExtensionWidgetOptions, TerminalInputHandler } from "../../extensibility/extensions";
 import { type Theme } from "../../modes/theme/theme";

package/dist/types/modes/controllers/selector-controller.d.ts

@@ -2,8 +2,8 @@ import type { Component, SlashCommand } from "@gajae-code/tui";
 import type { ModelProfileConfig } from "../../config/models-config-schema";
 import { type Settings } from "../../config/settings";
 import { type InteractiveModeContext, type OAuthSelectorOptions } from "../../modes/types";
-import { getNotificationConfig, maskToken } from "../../sdk/bus/config";
-import { proposedTelegramIdentity, reconcileCommittedTelegramConfiguration, removeTelegramConfiguration, saveTelegramInactive } from "../../sdk/bus/notification-orchestration";
+import { getCurrentTelegramActivationMarker, getNotificationConfig, maskToken } from "../../sdk/bus/config";
+import { type NotificationProviderRuntimeAuthority, proposedTelegramIdentity, reconcileCommittedTelegramConfiguration, removeTelegramConfiguration, saveTelegramInactive } from "../../sdk/bus/notification-orchestration";
 import { buildNotificationStatusReport, checkNotificationHealth, recoverNotifications, sanitizeDiagnostic, sendNotificationTest } from "../../sdk/bus/notification-service";
 import { ensureTelegramDaemonRunningDetailed, readNotificationRootRegistration, resolveTelegramSetupPreflight, unregisterNotificationRoot } from "../../sdk/bus/telegram-daemon";
 import { runTelegramSetup } from "../../sdk/bus/telegram-setup";
@@ -37,6 +37,7 @@ type TelegramDaemonStopResult = {
 };
 export interface NotificationsEditorOperationDependencies {
     getNotificationConfig: typeof getNotificationConfig;
+    getCurrentTelegramActivationMarker: typeof getCurrentTelegramActivationMarker;
     maskToken: typeof maskToken;
     buildNotificationStatusReport: typeof buildNotificationStatusReport;
     checkNotificationHealth: typeof checkNotificationHealth;
@@ -66,6 +67,7 @@ export interface NotificationsEditorOperationDependencies {
         message: string;
     }>;
     stopTelegramDaemon(settings: Settings): Promise<TelegramDaemonStopResult>;
+    providerRuntime?: NotificationProviderRuntimeAuthority;
 }
 /**
  * Concrete service adapter for the direct Notifications settings tab. Secrets remain in this closure's

package/dist/types/sdk/broker/broker.d.ts

@@ -1,7 +1,7 @@
 import type { NativeDirectoryTreeSnapshot } from "@gajae-code/natives";
 import type { ModelProfileErrorDetails } from "../../config/model-profile-contract";
 import { type DirectoryMigrationPolicy } from "../session-directory";
-import { type BrokerDiscovery, type RedactedBrokerDiscovery } from "./discovery";
+import { type BrokerDiscovery, type BrokerPublicationObservation, type RedactedBrokerDiscovery } from "./discovery";
 import { type LifecycleDurableEffectsReceipt, LifecycleLedger, type LifecycleStartupFailureReceipt } from "./lifecycle-ledger";
 import { SessionIndex } from "./session-index";
 export interface BrokerSettings {
@@ -137,4 +137,8 @@ export declare class Broker {
 }
 /** Test-only hook for simulating a process crash after terminal persistence verification. */
 export declare function setTerminalPersistenceHookForTest(broker: Broker, hook: (() => void) | undefined): void;
+/** Test-only hook for shortening the bounded ambiguity deadline. */
+export declare function setAmbiguityGraceForTest(broker: Broker, graceMs: number | undefined): void;
+/** Test-only hook for forcing the observation the publication watchdog sees. */
+export declare function setPublicationObservationForTest(broker: Broker, observation: BrokerPublicationObservation | undefined): void;
 export {};

package/dist/types/sdk/broker/lifecycle-ledger.d.ts

@@ -119,4 +119,5 @@ export declare class LifecycleLedger {
     findCleanupPendingBySessionId(sessionId: string, excludingIdentity: string): LifecycleLedgerEntry | undefined;
     hasUncertainCleanupForSession(sessionId: string, excludingIdentity: string): boolean;
     get(identity: string): LifecycleLedgerEntry | undefined;
+    findPendingCleanupByTarget(sessionId: string, cwd: string, transcriptPath: string): LifecycleLedgerEntry | undefined;
 }

package/dist/types/sdk/bus/chat-daemon-control.d.ts

@@ -21,7 +21,16 @@ export type ChatDaemonAction = "stop" | "reload";
  * daemon transports. Generation 16 applies Telegram sound-policy configuration
  * through shared notification parsing. Generation 17 bound managed-session
  * replacement to exact native filesystem authority; generation 18 retired that
- * binding, and generation 19 binds exact cleanup to parent/link-count authority.
+ * binding, and generation 19 binds exact cleanup to parent/link-count authority
+ * while also adding durable provider-intent admission without changing lifecycle
+ * behavior. Generation 20 discovers isolated chat-only session endpoints when
+ * Telegram identity ownership is blocked. Discord generation 21 applies rustfmt
+ * and clippy-equivalent cleanup to the pi-shell process-tree authority (#3682).
+ * Discord generation 22 / slack generation 21 refreshes retained cleanup
+ * semantics; discord generation 23 / slack generation 22 hardens exact Bash
+ * process-tree ownership shared by chat daemon cleanup.
+ * Discord generation 24 / slack generation 23 apply provider-completeness and
+ * effective-enable admission to chat daemon lifecycle controls.
  */
 export declare const CHAT_DAEMON_GENERATIONS: Readonly<Record<ChatDaemonKind, number>>;
 export declare function chatDaemonGeneration(kind: ChatDaemonKind): number;
@@ -102,6 +111,7 @@ export declare class ChatDaemonController implements BuiltInDaemonController {
     readonly kind: ChatDaemonKind;
     constructor(settings: Settings, kind: ChatDaemonKind, deps?: ChatDaemonControlDeps);
     private identity;
+    private effectivelyEnabled;
     private alive;
     status(): Promise<DaemonStatus>;
     stop(opts?: DaemonOperationOptions): Promise<DaemonOperationResult>;