@gajae-code/coding-agent 0.12.7 → 0.12.8

package/dist/types/sdk/bus/session-control.d.ts

@@ -1,4 +1,4 @@
-import { type NotificationConfig } from "./config";
+import { type GenericNotificationSessionSource, type NotificationConfig } from "./config";
 /** Minimal session-manager surface shared by extension, TUI, and headless hosts. */
 export interface NotificationSessionContext {
     sessionManager: {
@@ -29,6 +29,8 @@ export interface NotificationSessionRuntime<Context extends NotificationSessionC
      * emit a frame. `blocked_identity` is fail-closed and starts nothing.
      */
     ensureTelegramDaemon?(binding: BoundNotificationSession<Context>): Promise<TelegramDaemonPreflightResult>;
+    /** Rotates a running/default endpoint into Telegram-isolated chat scope. */
+    isolateTelegram?(binding: BoundNotificationSession<Context>): Promise<NotificationEndpointStartResult>;
     /** Refresh mutable delivery policy from the same configuration snapshot used for reconciliation. */
     refreshPolicy?(binding: BoundNotificationSession<Context>, policy: NotificationRuntimePolicy): void;
     /** Enables delivery only after the controller has committed a stable policy. */
@@ -37,9 +39,9 @@ export interface NotificationSessionRuntime<Context extends NotificationSessionC
 export interface NotificationSessionStatus {
     eligible: boolean;
     locallyEnabled: boolean;
-    effectiveEnabled: boolean;
+    genericSessionEnabled: boolean;
+    genericEligibilitySource: GenericNotificationSessionSource;
     running: boolean;
-    environment: "off" | "explicit" | "token" | "default";
 }
 export interface NotificationSessionReconcileResult {
     outcome: NotificationEndpointStartResult | "stopped";
@@ -48,6 +50,7 @@ export interface NotificationSessionReconcileResult {
 export interface NotificationRuntimePolicy {
     redact: boolean;
     verbosity: NotificationConfig["verbosity"];
+    /** Generic live-frame delivery policy; never proof of provider effectiveness. */
     stream: boolean;
     mode: "provisional" | "committed";
 }
@@ -58,6 +61,8 @@ export interface NotificationSessionControllerOptions {
     getConfig(): NotificationConfig;
     /** Kept as a reference so test and embedding hosts can supply their own environment. */
     env?: NodeJS.ProcessEnv;
+    /** This process was launched by a marked GJC child spawn site. */
+    spawnedByGjc?: boolean;
 }
 export declare class NotificationSessionController {
     #private;

package/dist/types/sdk/bus/slack-live-provider.d.ts

@@ -1,4 +1,4 @@
-import type { SlackMessageSearchResult, SlackPostedMessage, SlackProviderClient, SlackSocketEnvelope } from "./slack-provider";
+import type { SlackConfigurationProbeResult, SlackDiagnosticProvider, SlackMessageSearchResult, SlackOneShotTestResult, SlackPostedMessage, SlackProviderClient, SlackSocketEnvelope } from "./slack-provider";
 export type SlackProviderErrorCode = "connection" | "protocol" | "web_api" | "rate_limited";
 /** A Slack transport failure whose fields are safe to surface without credentials. */
 export declare class SlackProviderError extends Error {
@@ -38,10 +38,17 @@ export interface SlackLiveProviderOptions {
  * Production Socket Mode and Web API client. It keeps all connection state in
  * memory and deliberately never maintains a Slack cursor.
  */
-export declare class SlackLiveProvider implements SlackProviderClient {
+export declare class SlackLiveProvider implements SlackProviderClient, SlackDiagnosticProvider {
     #private;
     get transportHealthy(): boolean;
     constructor(options: SlackLiveProviderOptions);
+    probeConfiguration(signal?: AbortSignal): Promise<SlackConfigurationProbeResult>;
+    sendOneShotTest(input: {
+        channel: string;
+        message: string;
+        idempotencyKey: string;
+        signal?: AbortSignal;
+    }): Promise<SlackOneShotTestResult>;
     start(onEnvelope: (envelope: SlackSocketEnvelope) => void | Promise<void>): Promise<void>;
     stop(): Promise<void>;
     ack(envelopeId: string): Promise<void>;

package/dist/types/sdk/bus/slack-provider.d.ts

@@ -12,6 +12,28 @@ export interface SlackMessageSearchResult {
     ts: string;
     client_msg_id?: string;
 }
+export interface SlackConfigurationProbeResult {
+    ok: boolean;
+    detail: string;
+    teamId?: string;
+    userId?: string;
+}
+export interface SlackOneShotTestResult {
+    ok: boolean;
+    detail: string;
+    channel?: string;
+    timestamp?: string;
+    uncertain?: boolean;
+}
+export interface SlackDiagnosticProvider {
+    probeConfiguration(signal?: AbortSignal): Promise<SlackConfigurationProbeResult>;
+    sendOneShotTest(input: {
+        channel: string;
+        message: string;
+        idempotencyKey: string;
+        signal?: AbortSignal;
+    }): Promise<SlackOneShotTestResult>;
+}
 /** Minimal Socket Mode + Web API seam. Implementations may wrap the official Slack SDK. */
 export interface SlackProviderClient {
     start(onEnvelope: (envelope: SlackSocketEnvelope) => void | Promise<void>): Promise<void>;

package/dist/types/sdk/bus/telegram-daemon-contract.d.ts

@@ -48,8 +48,15 @@ export declare const NOTIFICATION_PROTOCOL_VERSION = 3;
  * managed-session replacement to exact native filesystem authority; generation
  * 37 retires that binding (revert of #3489, which stalled POSIX artifact
  * cleanup); generation 38 binds exact cleanup to parent and link-count authority.
+ * Generation 39 applies rustfmt and clippy-equivalent cleanup to the pi-shell
+ * process-tree authority (#3682); generation 40 hardens exact Bash process-tree
+ * ownership, settlement, and descendant cleanup authority. Generation 38 also
+ * adds durable provider-intent admission without changing owner, reclaim,
+ * signal, or spawn authority.
+ * Generation 41 applies first-class provider-settings admission to Telegram
+ * lifecycle controls.
  */
-export declare const DAEMON_GENERATION = 38;
+export declare const DAEMON_GENERATION = 41;
 /**
  * Serving-compatibility boundary for daemon lifecycle requests. Epoch 1 covers
  * all builds published before this field existed; epoch 2 covered generation 29;

package/dist/types/sdk/client/discovery.d.ts

@@ -21,9 +21,10 @@ export declare class SdkDiscoveryError extends Error {
     readonly code = "discovery_error";
     constructor(path: string, message: string);
 }
+export type SdkSessionEndpointScope = "default" | "chat";
 /** Lists endpoint files and returns individual malformed or unreadable records as warnings. */
 export declare function listSdkSessionEndpoints(repo: string): Promise<SdkSessionEndpointList>;
 /** Resolves one per-session SDK endpoint discovery file. */
-export declare function readSdkSessionEndpoint(repo: string, sessionId: string): Promise<SdkSessionEndpoint | null>;
+export declare function readSdkSessionEndpoint(repo: string, sessionId: string, scope?: SdkSessionEndpointScope): Promise<SdkSessionEndpoint | null>;
 /** Reads the agent-global broker discovery record. */
 export declare function readSdkBrokerDiscovery(agentDir: string): Promise<BrokerDiscovery | null>;

package/dist/types/sdk/host/query/handlers.d.ts

@@ -1,3 +1,4 @@
+import type { ActiveProviderDescriptor } from "../../providers.js";
 import { type CursorRegistry } from "./cursor.js";
 import type { RevisionStore } from "./revision-store.js";
 export declare const TARGET_PAGE_BYTES: number;
@@ -11,6 +12,7 @@ export interface SessionSurface {
     getUsage(): unknown | Promise<unknown>;
     getModels(): unknown | Promise<unknown>;
     getSkillState(): unknown | Promise<unknown>;
+    getActiveProviders?(): ActiveProviderDescriptor[] | Promise<ActiveProviderDescriptor[]>;
     /** Q12 rows preserve workflow gate fields and include stable durable gate metadata. */
     getGates(): unknown | Promise<unknown>;
     getConfigItems(): unknown | Promise<unknown>;

package/dist/types/sdk/index.d.ts

@@ -5,5 +5,6 @@ export * as host from "./host";
 export * as mcp from "./mcp";
 export type { Q10CurrentThinkingLevel, Q10Model, Q10SettableThinkingLevel, Q10ThinkingCapabilities, Q10ThinkingEffort, Q10ThinkingMode, } from "./models";
 export * from "./prompt-status";
+export type { ActiveProviderConnectionKind, ActiveProviderDescriptor } from "./providers";
 export * from "./session";
 export * from "./session-directory";

package/dist/types/sdk/providers.d.ts

@@ -0,0 +1,22 @@
+export type ActiveProviderConnectionKind = "credential" | "credentialless";
+export interface ActiveProviderDescriptor {
+    provider: string;
+    connectionKind: ActiveProviderConnectionKind;
+}
+/**
+ * Project active-provider inputs to the exact public DTO shape.
+ *
+ * Connection credentials take precedence when the same provider is reported
+ * more than once. Provider IDs are sorted by their UTF-8 bytes without
+ * normalization.
+ */
+export declare function projectActiveProviderDescriptors(descriptors: readonly {
+    provider: string;
+    connectionKind: unknown;
+}[]): ActiveProviderDescriptor[];
+export declare const ACTIVE_PROVIDER_RESOLUTION_ERROR_CODE: "internal";
+export declare const ACTIVE_PROVIDER_RESOLUTION_ERROR_MESSAGE = "Unable to resolve active providers.";
+export declare class ActiveProviderResolutionError extends Error {
+    readonly code: "internal";
+    constructor();
+}

package/dist/types/sdk/session-directory.d.ts

@@ -20,7 +20,7 @@ export type ResolveManagedSessionScopeResult = {
     scope: ManagedSessionScope;
 } | {
     kind: "error";
-    code: "cwd_missing" | "cwd_not_directory" | "identity_unavailable" | "network_unsupported" | "sessions_root_unavailable" | "binding_conflict" | "binding_invalid" | "atomic_unavailable" | "durability_not_provable" | "durability_failed" | "invalid_request";
+    code: "cwd_missing" | "cwd_not_directory" | "identity_unavailable" | "network_unsupported" | "sessions_root_unavailable" | "binding_conflict" | "binding_invalid" | "migration_busy" | "atomic_unavailable" | "durability_not_provable" | "durability_failed" | "invalid_request";
     message: string;
 };
 export interface LogicalSessionCandidate {

package/dist/types/session/internal/managed-session-scope.d.ts

@@ -34,7 +34,7 @@ export declare function managedDirectoryIdentityForScope(scope: ManagedScope): {
 };
 export declare function managedRootForScope(scope: ManagedScope): ManagedDirectoryRoot;
 export type ManagedMigrationPolicy = "copy-retain" | "disabled";
-export type ManagedScopeErrorCode = "cwd_missing" | "cwd_not_directory" | "identity_unavailable" | "network_unsupported" | "sessions_root_unavailable" | "binding_conflict" | "binding_invalid" | "atomic_unavailable" | "invalid_request" | "durability_failed" | "durability_not_provable";
+export type ManagedScopeErrorCode = "cwd_missing" | "cwd_not_directory" | "identity_unavailable" | "network_unsupported" | "sessions_root_unavailable" | "binding_conflict" | "binding_invalid" | "migration_busy" | "atomic_unavailable" | "invalid_request" | "durability_failed" | "durability_not_provable";
 export type ManagedScopeResolution = {
     kind: "resolved";
     scope: ManagedScope;
@@ -95,6 +95,19 @@ export type ManagedDeleteCandidateResult = {
     code: ManagedOpenFailure;
     message: string;
 };
+export interface ManagedVerifiedDeleteTestEvent {
+    readonly flow: "direct" | "reconcile";
+    readonly stage: "initial" | "artifact-finalization" | "transcript-after-artifacts-removed";
+}
+export interface ManagedLockReleaseTestEvent {
+    readonly path: string;
+    readonly attemptId: string;
+}
+/** Test-only ordering seams for verified deletion and managed-lock release. */
+export declare const ManagedSessionScopeTestHooks: {
+    beforeVerifiedDelete?: (event: ManagedVerifiedDeleteTestEvent) => void | Promise<void>;
+    beforeManagedLockRelease?: (event: ManagedLockReleaseTestEvent) => void | Promise<void>;
+};
 declare function scopeDigest(platform: "posix" | "win32", canonicalPath: string): string;
 export declare const computeManagedScopeDigest: typeof scopeDigest;
 /**
@@ -121,6 +134,7 @@ export declare function ensureManagedScope(scope: ManagedScope, policy?: Managed
 /** Synchronously create and validate the v2 binding before a default session writer exists. */
 export declare function prepareManagedSessionScopeForWriteSync(scope: ManagedScope, policy?: ManagedSessionSecurityPolicy, authority?: ManagedCandidateWriteAuthority): ManagedScopeResolution;
 export declare function listManagedCandidates(scope: ManagedScope): ManagedCandidateListing;
+export declare function artifactTreeReplayCompatible(observed: NativeDirectoryTreeSnapshot, expected: NativeDirectoryTreeSnapshot): boolean;
 type DetachedArtifactRoot = {
     originalPath: string;
     detachedPath: string;
@@ -129,6 +143,8 @@ type DetachedArtifactRoot = {
         ino: bigint;
         size: bigint;
         mtimeNs: bigint;
+        parentDev: bigint;
+        parentIno: bigint;
     };
     tree: NativeDirectoryTreeSnapshot;
 };

package/dist/types/session/internal/managed-session-storage.d.ts

@@ -25,6 +25,7 @@ export interface ManagedFileSnapshot {
     identity: {
         dev: bigint;
         ino: bigint;
+        nlink: bigint;
         size: number;
         mtimeNs: bigint;
         ctimeNs: bigint;
@@ -32,6 +33,14 @@ export interface ManagedFileSnapshot {
     };
 }
 export declare function validateNativeSecurityResult(value: unknown, operation: "apply" | "verify", kind: "directory" | "file"): NativeOwnerOnlySecurityResult;
+export interface ManagedLockRetirementTestEvent {
+    readonly path: string;
+    readonly attemptId: string;
+}
+/** Test-only seam immediately before exact retirement of one observed lock identity. */
+export declare const ManagedLockTestHooks: {
+    beforeObservedRetirement?: (event: ManagedLockRetirementTestEvent) => void;
+};
 /** Captured configured-root authority for managed paths only. */
 export interface ManagedDirectoryRoot {
     readonly canonicalPath: string;
@@ -77,6 +86,7 @@ export declare class ManagedSessionDescendantStore {
     publishNoReplace(relativePath: string, bytes: Uint8Array): Promise<void>;
     publishNoReplaceSync(relativePath: string, bytes: Uint8Array): void;
     replace(relativePath: string, bytes: Uint8Array): Promise<void>;
+    replaceExpected(relativePath: string, bytes: Uint8Array, expected: ManagedFileSnapshot): void;
     replaceSync(relativePath: string, bytes: Uint8Array): void;
     appendSync(relativePath: string, bytes: Uint8Array): void;
     /** Read an exact managed file without exposing its pathname as authority. */
@@ -106,7 +116,7 @@ export declare function captureManagedFileNoFollow(pathname: string): ManagedFil
 export declare function publishManagedFileNoReplace(destination: string, bytes: Uint8Array, assertOwned?: () => void, root?: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy): Promise<void>;
 export declare function publishManagedFileNoReplaceSync(destination: string, bytes: Uint8Array, root?: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy): void;
 /** Replace one managed regular file while retaining the secured staging fd through publication. */
-export declare function replaceManagedFileSync(destination: string, bytes: Uint8Array, root: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy): void;
+export declare function replaceManagedFileSync(destination: string, bytes: Uint8Array, root: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy, assertFence?: () => void, expectedDestination?: ManagedFileSnapshot["identity"]): void;
 export declare function replaceManagedFile(destination: string, bytes: Uint8Array, root: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy): Promise<void>;
 /** Copy the exact bytes captured from one no-follow source descriptor. */
 export declare function copyManagedFileNoReplace(source: string, destination: string, snapshot?: ManagedFileSnapshot, root?: ManagedDirectoryRoot, policy?: ManagedSessionSecurityPolicy): Promise<void>;

package/dist/types/session/internal/native-publish-outcome.d.ts

@@ -20,6 +20,7 @@ export type NativePublishIdentity = {
     readonly dev: string;
     readonly ino: string;
     readonly size: string;
+    readonly nlink?: string;
     readonly mtimeNs: string;
     readonly ctimeNs: string;
     readonly sha256?: string;

package/dist/types/session/internal/session-open-errors.d.ts

@@ -0,0 +1,5 @@
+export declare const SESSION_MIGRATION_BUSY_MESSAGE = "Another session migration is still active. Wait for it to finish, then retry.";
+export declare class SessionMigrationBusyError extends Error {
+    readonly code = "migration_busy";
+    constructor();
+}

package/dist/types/session/session-manager.d.ts

@@ -357,6 +357,7 @@ export declare class SessionMigrationPolicyError extends Error {
     constructor();
 }
 export declare class SessionArtifactCapacityError extends Error {
+    readonly code = "artifact_capacity_exceeded";
     constructor(message: string);
 }
 export type ResumeTailInspection = ResumeTailResumable | ResumeTailTerminal | ResumeTailError;
@@ -366,7 +367,7 @@ export interface StrictSessionOpenSuccess {
 }
 export interface StrictSessionOpenFailure {
     kind: "error";
-    reason: ResumeTailError["reason"] | "identity-mismatch" | "migration-required" | "artifact_capacity_exceeded";
+    reason: ResumeTailError["reason"] | "identity-mismatch" | "migration-required" | "artifact_capacity_exceeded" | "migration_busy";
     message?: string;
 }
 /** Exact transcript bytes and authority captured from one descriptor-bound read. */
@@ -613,6 +614,7 @@ export declare const MATERIALIZED_CACHE_MAX_BYTES: number;
 export declare const SessionManagerTestHooks: {
     materializedCacheMaxBytesOverride?: number;
     beforeResidentTransitionIndexBuild?: () => void;
+    afterForkSnapshot?: () => void | Promise<void>;
 };
 export declare class SessionManager {
     #private;

package/dist/types/session/session-storage.d.ts

@@ -239,6 +239,7 @@ export type VerifiedSessionDeleteResult = {
     artifactsIdentity: SessionStorageFileIdentity | undefined;
     /** Identity-bound quarantine path retained when recursive cleanup failed. */
     detachedArtifactsPath: string;
+    artifactsPayloadDurable?: true;
     /** Native snapshot required for an identity-bound recursive retry. */
     artifactsTree: NativeDirectoryTreeSnapshot;
     /** Transcript identity (unchanged) for retry binding. */
@@ -254,6 +255,7 @@ export type VerifiedSessionDeleteResult = {
     transcriptIdentity: SessionStorageFileIdentity;
     /** Optional identity-bound transcript quarantine path for restart cleanup. */
     detachedTranscriptPath?: string;
+    transcriptPayloadDurable?: true;
     retainedSuccessorPath?: string;
     retainedPlaceholderPath?: string;
     retainedUnknownPath?: string;

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@gajae-code/coding-agent",
-	"version": "0.12.7",
+	"version": "0.12.8",
 	"description": "Gajae Code CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://gajae-code.com",
 	"author": "Yeachan-Heo and Gajae Code Contributors",
@@ -53,13 +53,13 @@
 		"@agentclientprotocol/sdk": "1.3.0",
 		"@babel/parser": "^7.29.3",
 		"@mozilla/readability": "^0.6.0",
-		"@gajae-code/stats": "0.12.7",
-		"@gajae-code/agent-core": "0.12.7",
-		"@gajae-code/ai": "0.12.7",
-		"@gajae-code/bridge-client": "0.12.7",
-		"@gajae-code/natives": "0.12.7",
-		"@gajae-code/tui": "0.12.7",
-		"@gajae-code/utils": "0.12.7",
+		"@gajae-code/stats": "0.12.8",
+		"@gajae-code/agent-core": "0.12.8",
+		"@gajae-code/ai": "0.12.8",
+		"@gajae-code/bridge-client": "0.12.8",
+		"@gajae-code/natives": "0.12.8",
+		"@gajae-code/tui": "0.12.8",
+		"@gajae-code/utils": "0.12.8",
 		"@puppeteer/browsers": "^2.13.0",
 		"@types/turndown": "5.0.6",
 		"@xterm/headless": "^6.0.0",
@@ -132,6 +132,8 @@
 		},
 		"./sdk/models": null,
 		"./sdk/models.js": null,
+		"./sdk/providers": null,
+		"./sdk/providers.js": null,
 		"./sdk/lifecycle-session": null,
 		"./sdk/lifecycle-session.js": null,
 		"./sdk/startup-capability": null,

package/scripts/build-sdk-package-smoke.ts

@@ -9,6 +9,7 @@ const packageName = "@gajae-code/coding-agent";
 const aiPackageDir = path.resolve(packageDir, "../ai");
 const bridgeClientPackageDir = path.resolve(packageDir, "../bridge-client");
 const tuiPackageDir = path.resolve(packageDir, "../tui");
+const agentPackageDir = path.resolve(packageDir, "../agent");
 const nativesPackageDir = path.resolve(packageDir, "../natives");
 const linuxX64PackageDir = path.resolve(packageDir, "../natives-linux-x64");
 const manifestsDir = path.join(packageDir, "test/manifests");
@@ -41,6 +42,7 @@ async function runSmoke(): Promise<Surface> {
 				await fs.copyFile(path.join(nativesPackageDir, "native", entry), path.join(stagedNativeDir, entry));
 			}
 		}
+		const agentTarball = run(["bun", "pm", "pack", "--destination", tempDir, "--quiet"], agentPackageDir);
 		const aiTarball = run(["bun", "pm", "pack", "--destination", tempDir, "--quiet"], aiPackageDir);
 		const bridgeClientTarball = run(
 			["bun", "pm", "pack", "--destination", tempDir, "--quiet"],
@@ -49,6 +51,7 @@ async function runSmoke(): Promise<Surface> {
 		const tuiTarball = run(["bun", "pm", "pack", "--destination", tempDir, "--quiet"], tuiPackageDir);
 		const nativesTarball = run(["bun", "pm", "pack", "--destination", tempDir, "--quiet"], nativesPackageDir);
 		const linuxX64Tarball = run(["bun", "pm", "pack", "--destination", tempDir, "--quiet"], stagedLinuxX64Dir);
+		const agentTarballPath = path.isAbsolute(agentTarball) ? agentTarball : path.join(agentPackageDir, agentTarball);
 		const codingAgentTarball = run(["bun", "pm", "pack", "--destination", tempDir, "--quiet"], packageDir);
 		const aiTarballPath = path.isAbsolute(aiTarball) ? aiTarball : path.join(aiPackageDir, aiTarball);
 		const bridgeClientTarballPath = path.isAbsolute(bridgeClientTarball)
@@ -71,6 +74,7 @@ async function runSmoke(): Promise<Surface> {
 					name: "sdk-smoke",
 					private: true,
 					dependencies: {
+						"@gajae-code/agent-core": `file:${agentTarballPath}`,
 						"@gajae-code/ai": `file:${aiTarballPath}`,
 						"@gajae-code/bridge-client": `file:${bridgeClientTarballPath}`,
 						[packageName]: `file:${codingAgentTarballPath}`,
@@ -79,6 +83,7 @@ async function runSmoke(): Promise<Surface> {
 						"@gajae-code/natives-linux-x64": `file:${linuxX64TarballPath}`,
 					},
 					overrides: {
+						"@gajae-code/agent-core": `file:${agentTarballPath}`,
 						"@gajae-code/ai": `file:${aiTarballPath}`,
 						"@gajae-code/bridge-client": `file:${bridgeClientTarballPath}`,
 						"@gajae-code/tui": `file:${tuiTarballPath}`,
@@ -96,6 +101,52 @@ async function runSmoke(): Promise<Surface> {
 		const installedPackage = JSON.parse(
 			await fs.readFile(path.join(tempDir, "node_modules", packageName, "package.json"), "utf8"),
 		) as { exports?: Record<string, unknown> };
+		const installedAgentPackagePath = path.join(tempDir, "node_modules", "@gajae-code", "agent-core");
+		const installedAgentPackageJsonPath = path.join(installedAgentPackagePath, "package.json");
+		const installedAgentPackage = JSON.parse(await fs.readFile(installedAgentPackageJsonPath, "utf8")) as {
+			name?: string;
+			version?: string;
+		};
+		const expectedAgentPackage = JSON.parse(
+			await fs.readFile(path.join(agentPackageDir, "package.json"), "utf8"),
+		) as {
+			name?: string;
+			version?: string;
+		};
+		const installedAgentRealpath = await fs.realpath(installedAgentPackagePath);
+		const tempRealpath = await fs.realpath(tempDir);
+		const sourceAgentRealpath = await fs.realpath(agentPackageDir);
+		if (
+			!installedAgentRealpath.startsWith(`${tempRealpath}${path.sep}`) ||
+			installedAgentRealpath.startsWith(`${sourceAgentRealpath}${path.sep}`)
+		) {
+			throw new Error("packed smoke resolved agent-core outside the temporary packed installation");
+		}
+		const packedAgentInspectDir = path.join(tempDir, "packed-agent-inspect");
+		await fs.mkdir(packedAgentInspectDir);
+		const extract = Bun.spawnSync(["tar", "xzf", agentTarballPath, "-C", packedAgentInspectDir], {
+			stdout: "pipe",
+			stderr: "pipe",
+		});
+		if (extract.exitCode !== 0)
+			throw new Error(`could not inspect packed agent-core tarball: ${extract.stderr.toString()}`);
+		const packedAgentPackageJson = await fs.readFile(
+			path.join(packedAgentInspectDir, "package", "package.json"),
+			"utf8",
+		);
+		const installedAgentPackageJson = await fs.readFile(installedAgentPackageJsonPath, "utf8");
+		if (installedAgentPackageJson !== packedAgentPackageJson) {
+			throw new Error("packed smoke installed agent-core content different from the packed tarball");
+		}
+		if (
+			installedAgentPackage.name !== expectedAgentPackage.name ||
+			installedAgentPackage.version !== expectedAgentPackage.version
+		) {
+			throw new Error("packed smoke installed a mismatched agent-core package");
+		}
+		if (installedAgentPackage.name !== "@gajae-code/agent-core") {
+			throw new Error("packed smoke agent-core package identity is invalid");
+		}
 		if (installedPackage.exports?.["./session/internal/*"] !== null) {
 			throw new Error("packed package must explicitly block ./session/internal/*");
 		}

package/scripts/capture-notifications-settings-showcase.ts

@@ -11,7 +11,7 @@ import {
 } from "../test/fixtures/tui/notifications-settings-showcase";
 
 const CANONICAL_COMMAND =
-	"bun packages/coding-agent/scripts/capture-notifications-settings-showcase.ts --output .gjc/qa/issue-2050-notifications";
+	"bun packages/coding-agent/scripts/capture-notifications-settings-showcase.ts --output .gjc/qa/issue-3570-notifications";
 const DETERMINISTIC_CAPTURE_TIMESTAMP = "1970-01-01T00:00:00.000Z";
 const CAPTURE_TOOL_VERSION = "notifications-settings-showcase-live-settings-selector-v3";