@gajae-code/coding-agent 0.13.2 → 0.14.0

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@gajae-code/coding-agent",
-	"version": "0.13.2",
+	"version": "0.14.0",
 	"description": "Gajae Code CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://gajae-code.com",
 	"author": "Yeachan-Heo and Gajae Code Contributors",
@@ -25,7 +25,8 @@
 	"main": "./src/index.ts",
 	"types": "./dist/types/index.d.ts",
 	"bin": {
-		"gjc": "bin/gjc.js"
+		"gjc": "bin/gjc.js",
+		"가재씨": "bin/gajaessi.js"
 	},
 	"scripts": {
 		"build": "bun scripts/build-binary.ts",
@@ -54,13 +55,12 @@
 		"@agentclientprotocol/sdk": "1.3.0",
 		"@babel/parser": "^7.29.3",
 		"@mozilla/readability": "^0.6.0",
-		"@gajae-code/stats": "0.13.2",
-		"@gajae-code/agent-core": "0.13.2",
-		"@gajae-code/ai": "0.13.2",
-		"@gajae-code/bridge-client": "0.13.2",
-		"@gajae-code/natives": "0.13.2",
-		"@gajae-code/tui": "0.13.2",
-		"@gajae-code/utils": "0.13.2",
+		"@gajae-code/stats": "0.14.0",
+		"@gajae-code/agent-core": "0.14.0",
+		"@gajae-code/ai": "0.14.0",
+		"@gajae-code/natives": "0.14.0",
+		"@gajae-code/tui": "0.14.0",
+		"@gajae-code/utils": "0.14.0",
 		"@puppeteer/browsers": "^2.13.0",
 		"@types/turndown": "5.0.6",
 		"@xterm/headless": "^6.0.0",
@@ -147,6 +147,16 @@
 			"types": "./dist/types/sdk/bus/*.d.ts",
 			"import": "./src/sdk/bus/*.ts"
 		},
+		"./sdk/host/control/runtime-gate.js": null,
+		"./sdk/host/control/runtime-gate": null,
+		"./sdk/host/control/runtime-gate/*": null,
+		"./sdk/lifecycle/broker-client.js": null,
+		"./sdk/lifecycle/broker-client": null,
+		"./sdk/lifecycle/broker-client/*": null,
+		"./sdk/broker": null,
+		"./sdk/broker/*": null,
+		"./sdk/client": null,
+		"./sdk/client/*": null,
 		"./session/internal/*": null,
 		"./config/model-auth": null,
 		"./config/model-auth.js": null,

package/scripts/build-binary.ts

@@ -1,6 +1,7 @@
 #!/usr/bin/env bun
 
 import * as path from "node:path";
+import { signMacOSBinary } from "../../../scripts/macos-code-signing";
 import { buildDevCompileArgs } from "./compile-args";
 
 const packageDir = path.join(import.meta.dir, "..");
@@ -40,7 +41,7 @@ async function main(): Promise<void> {
 			await stageWorkspaceNativeAddons();
 			// Bun 1.3.12 emits a truncated Mach-O signature on darwin builds.
 			if (shouldAdhocSignDarwinBinary()) {
-				await runCommand(["codesign", "--force", "--sign", "-", outputPath]);
+				await signMacOSBinary(outputPath, runCommand);
 			}
 		} finally {
 			await runCommand(["bun", "--cwd=../natives", "run", "embed:native", "--reset"]);

package/scripts/build-sdk-package-smoke.ts

@@ -8,7 +8,6 @@ const packageDir = path.resolve(import.meta.dir, "..");
 const packageName = "@gajae-code/coding-agent";
 const agentPackageDir = path.resolve(packageDir, "../agent");
 const aiPackageDir = path.resolve(packageDir, "../ai");
-const bridgeClientPackageDir = path.resolve(packageDir, "../bridge-client");
 const tuiPackageDir = path.resolve(packageDir, "../tui");
 const nativesPackageDir = path.resolve(packageDir, "../natives");
 const linuxX64PackageDir = path.resolve(packageDir, "../natives-linux-x64");
@@ -47,10 +46,6 @@ async function runSmoke(): Promise<Surface> {
 		}
 		const agentTarball = run(["bun", "pm", "pack", "--destination", tempDir, "--quiet"], agentPackageDir);
 		const aiTarball = run(["bun", "pm", "pack", "--destination", tempDir, "--quiet"], aiPackageDir);
-		const bridgeClientTarball = run(
-			["bun", "pm", "pack", "--destination", tempDir, "--quiet"],
-			bridgeClientPackageDir,
-		);
 		const tuiTarball = run(["bun", "pm", "pack", "--destination", tempDir, "--quiet"], tuiPackageDir);
 		const nativesTarball = run(["bun", "pm", "pack", "--destination", tempDir, "--quiet"], nativesPackageDir);
 		const linuxX64Tarball = run(["bun", "pm", "pack", "--destination", tempDir, "--quiet"], stagedLinuxX64Dir);
@@ -58,9 +53,6 @@ async function runSmoke(): Promise<Surface> {
 		const codingAgentTarball = run(["bun", "pm", "pack", "--destination", tempDir, "--quiet"], packageDir);
 		const agentTarballPath = path.isAbsolute(agentTarball) ? agentTarball : path.join(agentPackageDir, agentTarball);
 		const aiTarballPath = path.isAbsolute(aiTarball) ? aiTarball : path.join(aiPackageDir, aiTarball);
-		const bridgeClientTarballPath = path.isAbsolute(bridgeClientTarball)
-			? bridgeClientTarball
-			: path.join(bridgeClientPackageDir, bridgeClientTarball);
 		const tuiTarballPath = path.isAbsolute(tuiTarball) ? tuiTarball : path.join(tuiPackageDir, tuiTarball);
 		const nativesTarballPath = path.isAbsolute(nativesTarball)
 			? nativesTarball
@@ -81,7 +73,6 @@ async function runSmoke(): Promise<Surface> {
 					dependencies: {
 						"@gajae-code/agent-core": `file:${agentTarballPath}`,
 						"@gajae-code/ai": `file:${aiTarballPath}`,
-						"@gajae-code/bridge-client": `file:${bridgeClientTarballPath}`,
 						[packageName]: `file:${codingAgentTarballPath}`,
 						"@gajae-code/tui": `file:${tuiTarballPath}`,
 						"@gajae-code/natives": `file:${nativesTarballPath}`,
@@ -91,7 +82,6 @@ async function runSmoke(): Promise<Surface> {
 					overrides: {
 						"@gajae-code/agent-core": `file:${agentTarballPath}`,
 						"@gajae-code/ai": `file:${aiTarballPath}`,
-						"@gajae-code/bridge-client": `file:${bridgeClientTarballPath}`,
 						"@gajae-code/tui": `file:${tuiTarballPath}`,
 						"@gajae-code/natives": `file:${nativesTarballPath}`,
 						"@gajae-code/natives-linux-x64": `file:${linuxX64TarballPath}`,
@@ -160,15 +150,14 @@ async function runSmoke(): Promise<Surface> {
 		const probePath = path.join(tempDir, "probe.ts");
 		await fs.writeFile(
 			probePath,
-			`import * as fs from "node:fs/promises";\nimport * as path from "node:path";\nimport * as root from ${JSON.stringify(packageName)};\nimport * as sdk from ${JSON.stringify(`${packageName}/sdk`)};\nimport * as bus from ${JSON.stringify(`${packageName}/sdk/bus`)};\nconst required = [[root, "createAgentSession", "root"], [root, "SESSION_DIRECTORY_API_VERSION", "root"], [root, "resolveManagedSessionScope", "root"], [root, "listManagedSessionCandidates", "root"], [sdk, "createAgentSession", "sdk"], [bus, "createNotificationsExtension", "sdk/bus"], [sdk, "SdkClient", "sdk"], [sdk, "SESSION_DIRECTORY_API_VERSION", "sdk"], [sdk, "resolveManagedSessionScope", "sdk"], [sdk, "listManagedSessionCandidates", "sdk"]] as const;\nfor (const [module, name, subpath] of required) if (!(name in module)) throw new Error(subpath + " missing " + name);\nconst sandbox = path.join(process.cwd(), "managed-listing-smoke");\nconst cwd = path.join(sandbox, "workspace", "a-b", "c");\nconst agentDir = path.join(sandbox, "agent");\nconst sessionsRoot = path.join(agentDir, "sessions");\nawait fs.mkdir(cwd, { recursive: true });\nconst resolved = await sdk.resolveManagedSessionScope({ cwd, agentDir, sessionsRoot });\nif (resolved.kind !== "resolved") throw new Error("packed resolver failed: " + resolved.message);\nawait fs.mkdir(resolved.scope.directoryPath, { recursive: true, mode: 0o700 });\nawait fs.chmod(sessionsRoot, 0o700);\nawait fs.chmod(resolved.scope.directoryPath, 0o700);\nawait fs.writeFile(path.join(resolved.scope.directoryPath, ".gjc-managed-session-scope.v2.json"), JSON.stringify({ schemaVersion: 1, layoutVersion: 2, identityVersion: 1, platform: process.platform === "win32" ? "win32" : "posix", canonicalPath: resolved.scope.canonicalCwd, identityDigest: resolved.scope.directoryName.slice(3) }) + "\\n", { mode: 0o600 });\nconst transcriptPath = path.join(resolved.scope.directoryPath, "packed-session.jsonl");\nawait fs.writeFile(transcriptPath, JSON.stringify({ type: "session", id: "packed-session", cwd }) + "\\n", { mode: 0o600 });\nconst snapshot = async () => Promise.all((await fs.readdir(sandbox, { recursive: true })).sort().map(async name => { const pathname = path.join(sandbox, name); const stat = await fs.lstat(pathname); return [name, stat.mode, stat.size, stat.mtimeMs, stat.isFile() ? await fs.readFile(pathname, "utf8") : null]; }));\nconst before = JSON.stringify(await snapshot());\nconst listing = await sdk.listManagedSessionCandidates({ scope: resolved.scope });\nif (listing.kind !== "complete" || listing.owned.length !== 1 || listing.owned[0]?.sessionId !== "packed-session") throw new Error("packed readonly listing failed: " + JSON.stringify(listing));\nconst after = JSON.stringify(await snapshot());\nif (after !== before) throw new Error("packed readonly listing mutated the filesystem");\nconst privateSubpath = ${JSON.stringify(`${packageName}/session/internal/managed-session-scope`)};\ntry { await import(privateSubpath); throw new Error("private managed-session scope subpath resolved"); } catch (error) {\n\tif (error instanceof Error && error.message === "private managed-session scope subpath resolved") throw error;\n\tconst message = String(error);\n\tconst exportsRejected = /Package subpath .* is not defined by "exports"/.test(message);\n\tconst bunRejected = message.startsWith("ResolveMessage: Cannot find module '" + privateSubpath + "' from '") && message.endsWith("/probe.ts'");\n\tif (!exportsRejected && !bunRejected) throw new Error("private managed-session scope failed for an unexpected reason: " + message);\n}\nprocess.stdout.write(JSON.stringify({ root: Object.keys(root).sort(), sdk: Object.keys(sdk).sort() }));\n`,
+			`import * as fs from "node:fs/promises";\nimport * as path from "node:path";\nimport * as root from ${JSON.stringify(packageName)};\nimport * as sdk from ${JSON.stringify(`${packageName}/sdk`)};\nimport * as bus from ${JSON.stringify(`${packageName}/sdk/bus`)};\nconst required = [[root, "createAgentSession", "root"], [root, "SESSION_DIRECTORY_API_VERSION", "root"], [root, "resolveManagedSessionScope", "root"], [root, "listManagedSessionCandidates", "root"], [sdk, "createAgentSession", "sdk"], [bus, "createNotificationsExtension", "sdk/bus"], [sdk, "SESSION_DIRECTORY_API_VERSION", "sdk"], [sdk, "resolveManagedSessionScope", "sdk"], [sdk, "listManagedSessionCandidates", "sdk"]] as const;\nfor (const [module, name, subpath] of required) if (!(name in module)) throw new Error(subpath + " missing " + name);\nconst sandbox = path.join(process.cwd(), "managed-listing-smoke");\nconst cwd = path.join(sandbox, "workspace", "a-b", "c");\nconst agentDir = path.join(sandbox, "agent");\nconst sessionsRoot = path.join(agentDir, "sessions");\nawait fs.mkdir(cwd, { recursive: true });\nconst resolved = await sdk.resolveManagedSessionScope({ cwd, agentDir, sessionsRoot });\nif (resolved.kind !== "resolved") throw new Error("packed resolver failed: " + resolved.message);\nawait fs.mkdir(resolved.scope.directoryPath, { recursive: true, mode: 0o700 });\nawait fs.chmod(sessionsRoot, 0o700);\nawait fs.chmod(resolved.scope.directoryPath, 0o700);\nawait fs.writeFile(path.join(resolved.scope.directoryPath, ".gjc-managed-session-scope.v2.json"), JSON.stringify({ schemaVersion: 1, layoutVersion: 2, identityVersion: 1, platform: process.platform === "win32" ? "win32" : "posix", canonicalPath: resolved.scope.canonicalCwd, identityDigest: resolved.scope.directoryName.slice(3) }) + "\\n", { mode: 0o600 });\nconst transcriptPath = path.join(resolved.scope.directoryPath, "packed-session.jsonl");\nawait fs.writeFile(transcriptPath, JSON.stringify({ type: "session", id: "packed-session", cwd }) + "\\n", { mode: 0o600 });\nconst snapshot = async () => Promise.all((await fs.readdir(sandbox, { recursive: true })).sort().map(async name => { const pathname = path.join(sandbox, name); const stat = await fs.lstat(pathname); return [name, stat.mode, stat.size, stat.mtimeMs, stat.isFile() ? await fs.readFile(pathname, "utf8") : null]; }));\nconst before = JSON.stringify(await snapshot());\nconst listing = await sdk.listManagedSessionCandidates({ scope: resolved.scope });\nif (listing.kind !== "complete" || listing.owned.length !== 1 || listing.owned[0]?.sessionId !== "packed-session") throw new Error("packed readonly listing failed: " + JSON.stringify(listing));\nconst after = JSON.stringify(await snapshot());\nif (after !== before) throw new Error("packed readonly listing mutated the filesystem");\nconst privateSubpath = ${JSON.stringify(`${packageName}/session/internal/managed-session-scope`)};\ntry { await import(privateSubpath); throw new Error("private managed-session scope subpath resolved"); } catch (error) {\n\tif (error instanceof Error && error.message === "private managed-session scope subpath resolved") throw error;\n\tconst message = String(error);\n\tconst exportsRejected = /Package subpath .* is not defined by "exports"/.test(message);\n\tconst bunRejected = message.startsWith("ResolveMessage: Cannot find module '" + privateSubpath + "' from '") && message.endsWith("/probe.ts'");\n\tif (!exportsRejected && !bunRejected) throw new Error("private managed-session scope failed for an unexpected reason: " + message);\n}\nprocess.stdout.write(JSON.stringify({ root: Object.keys(root).sort(), sdk: Object.keys(sdk).sort() }));\n`,
 		);
 		await fs.appendFile(
 			probePath,
-			`\nconst rootBefore = JSON.stringify(await snapshot());\nconst rootListing = await root.listManagedSessionCandidates({ scope: resolved.scope });\nif (rootListing.kind !== "complete" || rootListing.owned.length !== listing.owned.length || rootListing.owned[0]?.sessionId !== listing.owned[0]?.sessionId || rootListing.owned[0]?.path !== listing.owned[0]?.path) throw new Error("packed root readonly listing diverged from SDK listing");\nconst rootAfter = JSON.stringify(await snapshot());\nif (rootAfter !== rootBefore) throw new Error("packed root readonly listing mutated the filesystem");\nconst bridgeClient = await import("@gajae-code/bridge-client");\nif (sdk.SdkClient !== bridgeClient.SdkClient) throw new Error("SdkClient class identity differs between sdk and bridge-client");\n`,
+			`\nconst rootBefore = JSON.stringify(await snapshot());\nconst rootListing = await root.listManagedSessionCandidates({ scope: resolved.scope });\nif (rootListing.kind !== "complete" || rootListing.owned.length !== listing.owned.length || rootListing.owned[0]?.sessionId !== listing.owned[0]?.sessionId || rootListing.owned[0]?.path !== listing.owned[0]?.path) throw new Error("packed root readonly listing diverged from SDK listing");\nconst rootAfter = JSON.stringify(await snapshot());\nif (rootAfter !== rootBefore) throw new Error("packed root readonly listing mutated the filesystem");\n`,
 		);
 		const surface = JSON.parse(run(["bun", "run", probePath], tempDir)) as Surface;
 		assertExport(Object.fromEntries(surface.root.map(name => [name, true])), "createAgentSession", "root");
-		assertExport(Object.fromEntries(surface.sdk.map(name => [name, true])), "SdkClient", "sdk");
 		return { root: [...surface.root].sort(), sdk: [...surface.sdk].sort() };
 	} finally {
 		await fs.rm(tempDir, { recursive: true, force: true });

package/scripts/capture-sticky-viewport-showcase.ts

@@ -209,7 +209,6 @@ export const PROVENANCE_DIFF_SCOPE = [
 
 	"packages/agent/src",
 	"packages/ai/src",
-	"packages/bridge-client/src",
 	"packages/coding-agent/scripts/capture-sticky-viewport-showcase.ts",
 	"packages/coding-agent/scripts/verify-sticky-viewport-showcase.ts",
 	"packages/coding-agent/src",

package/scripts/compile-args.ts

@@ -25,6 +25,7 @@ export const releaseEntrypoints = [
 	"./packages/stats/src/sync-worker.ts",
 	"./packages/coding-agent/src/tools/browser/tab-worker-entry.ts",
 	"./packages/coding-agent/src/eval/js/worker-entry.ts",
+	"./packages/coding-agent/src/config/atomic-yaml-patch-worker.ts",
 	"./packages/natives/native/index.js",
 	"./packages/coding-agent/src/sdk/bus/telegram-daemon-cli.ts",
 	"./packages/coding-agent/src/sdk/bus/chat-daemon-cli.ts",
@@ -42,6 +43,7 @@ export const devEntrypoints = [
 	"../stats/src/sync-worker.ts",
 	"./src/tools/browser/tab-worker-entry.ts",
 	"./src/eval/js/worker-entry.ts",
+	"./src/config/atomic-yaml-patch-worker.ts",
 	// W5b: natives has no static importer anymore (global native gate), so the
 	// dev bundle must list it as an extra entrypoint like the release build or
 	// runtime import("@gajae-code/natives") fails inside the compiled bunfs.

package/scripts/generate-sdk-adapter-parity-manifest.ts

@@ -6,36 +6,38 @@ import { type Manifest, type ManifestAdapterRow, validateManifest } from "./mani
 
 const repoRoot = path.resolve(import.meta.dir, "..", "..", "..");
 const manifestPath = path.join(repoRoot, "packages/coding-agent/test/manifests/sdk-adapter-parity-v1.json");
+const chatDispositionFile = "packages/coding-agent/test/sdk-adapter-dispositions.test.ts";
+const mcpDispositionFile = "packages/coding-agent/test/sdk-adapter-dispositions-mcp.test.ts";
+const acpDispositionFile = "packages/coding-agent/test/sdk-adapter-dispositions-acp.test.ts";
+const daemonCliDispositionFile = "packages/coding-agent/test/sdk-adapter-dispositions-daemon-cli.test.ts";
 const adapterTests: Record<Adapter, string[]> = {
-	telegram: ["packages/coding-agent/test/sdk-adapter-dispositions.test.ts"],
-	discord: ["packages/coding-agent/test/sdk-adapter-dispositions.test.ts"],
-	slack: ["packages/coding-agent/test/sdk-adapter-dispositions.test.ts"],
+	telegram: [chatDispositionFile],
+	discord: [chatDispositionFile],
+	slack: [chatDispositionFile],
 	mcp: [
 		"packages/coding-agent/test/sdk-mcp-adapter.test.ts",
 		"packages/coding-agent/test/sdk-mcp-entrypoint-e2e.test.ts",
-		"packages/coding-agent/test/sdk-adapter-dispositions.test.ts",
+		mcpDispositionFile,
 	],
 	acp: [
 		"packages/coding-agent/test/sdk-acp-adapter.test.ts",
 		"packages/coding-agent/test/sdk-acp-two-client-race.test.ts",
 		"packages/coding-agent/test/sdk-acp-provider-reconnect.test.ts",
-		"packages/coding-agent/test/sdk-adapter-dispositions.test.ts",
+		acpDispositionFile,
 	],
 	daemonCli: [
 		"packages/coding-agent/test/sdk-daemon-cli-e2e.test.ts",
 		"packages/coding-agent/test/sdk-client.test.ts",
-		"packages/coding-agent/test/sdk-adapter-dispositions.test.ts",
+		daemonCliDispositionFile,
 	],
 };
-const dispositionTestFile = "packages/coding-agent/test/sdk-adapter-dispositions.test.ts";
+const dispositionChatFile = chatDispositionFile;
 const commandFiles = [
 	...new Set([...Object.values(adapterTests).flat(), "packages/coding-agent/test/sdk-host-wiring.test.ts"]),
 ].sort();
 const commands: Manifest["commands"] = commandFiles.flatMap(file =>
-	file === dispositionTestFile
-		? ["^AD-M-", "^AD-A-", "^AD-L-", "^AD-(T|D|S)-"].map(pattern => ({
-				argv: ["bun", "test", file, "--test-name-pattern", pattern],
-			}))
+	file === dispositionChatFile
+		? [{ argv: ["bun", "test", file, "--test-name-pattern", "^AD-(T|D|S)-"] }]
 		: [{ argv: ["bun", "test", file] }],
 );
 const required = [...commandFiles];
@@ -63,19 +65,26 @@ function adapterTestPrefix(adapter: Adapter): string {
 						? "M"
 						: "A";
 }
+function dispositionFileFor(adapter: Adapter): string {
+	if (adapter === "mcp") return mcpDispositionFile;
+	if (adapter === "acp") return acpDispositionFile;
+	if (adapter === "daemonCli") return daemonCliDispositionFile;
+	return chatDispositionFile;
+}
 function row(adapter: Adapter, operation: (typeof OPERATIONS)[number], secret = false): ManifestAdapterRow {
 	const suffix = secret ? "-secret" : "";
+	const testFile = dispositionFileFor(adapter);
 	return {
 		adapterTestId: `AD-${adapterTestPrefix(adapter)}-${operation.id}${suffix}`,
 		sdkId: operation.sdkId,
 		adapter,
 		disposition: operation.adapterDispositions[adapter],
-		testFile: dispositionTestFile,
+		testFile,
 		testNamePattern: `AD-${adapterTestPrefix(adapter)}-${operation.id}${suffix}`,
 		argv: [
 			"bun",
 			"test",
-			dispositionTestFile,
+			testFile,
 			"--test-name-pattern",
 			`^AD-${adapterTestPrefix(adapter)}-${operation.id}${suffix}:`,
 		],
@@ -127,11 +136,17 @@ async function checkCoverage(manifest: Manifest): Promise<void> {
 			throw new Error(`${row.adapterTestId} must execute its exact test-name pattern.`);
 		const testPath = path.join(repoRoot, row.testFile);
 		const testFile = Bun.file(testPath);
-		if (!(await testFile.exists())) throw new Error(`${row.adapterTestId} test file does not exist: ${row.testFile}`);
+		if (!(await testFile.exists()))
+			throw new Error(`${row.adapterTestId} test file does not exist: ${row.testFile}.`);
 		const testText = await testFile.text();
 		// The disposition suite deliberately generates names from registry IDs. This source check
-		// confirms its name template and the concrete row ID are both present in the registry.
-		if (!testText.includes("AD-$" + "{adapterPrefix[adapter]}-$" + "{operation.id}"))
+		// confirms its name template and the concrete row ID are both present in the test source.
+		// Chat adapters use chatPrefix; machine adapters use adapterPrefix (issue #4475 split).
+		const isChat = row.adapter === "telegram" || row.adapter === "discord" || row.adapter === "slack";
+		const nameTemplate = isChat
+			? "AD-$" + "{chatPrefix[adapter]}-$" + "{operation.id}"
+			: "AD-$" + "{adapterPrefix[adapter]}-$" + "{operation.id}";
+		if (!testText.includes(nameTemplate))
 			throw new Error(`${row.adapterTestId} test name template was not found in ${row.testFile}.`);
 		if (!OPERATIONS.some(operation => row.sdkId === operation.sdkId))
 			throw new Error(`${row.adapterTestId} references an unknown SDK ID.`);

package/scripts/generate-sdk-operation-inventory.ts

@@ -11,6 +11,12 @@ const inventoryPath = process.env.GJC_SDK_OPERATION_INVENTORY
 
 /** Reviewed seams deliberately excluded from the public SDK operation surface. */
 const LOCKED_EXCLUSIONS: Readonly<Record<string, string>> = {
+	"agent_session:getTerminalTurnEpoch":
+		"internal terminal-abort bus seam (epoch only), threaded via terminalAbortSeams; not a user-facing SDK control seam",
+	"agent_session:cancelPendingPreflightForTerminalAbort":
+		"internal terminal-abort bus seam, threaded via terminalAbortSeams; not a user-facing SDK control seam",
+	"agent_session:abortPromptAndWaitWithTerminal":
+		"internal terminal-abort fencing seam, threaded via terminalAbortSeams; not a user-facing SDK control seam",
 	"slash_command:settings": "visual/local-only command, not a user-facing SDK control seam",
 	"slash_command:theme": "visual/local-only command, not a user-facing SDK control seam",
 	"slash_command:copy": "visual/local-only command, not a user-facing SDK control seam",
@@ -23,6 +29,8 @@ const LOCKED_EXCLUSIONS: Readonly<Record<string, string>> = {
 	"slash_command:provider": "visual/local-only command, not a user-facing SDK control seam",
 	"slash_command:logout": "visual/local-only command, not a user-facing SDK control seam",
 	"slash_command:ssh": "visual/local-only command, not a user-facing SDK control seam",
+	"slash_command:import-session":
+		"local transcript-file import into a new session; no SDK operation counterpart, not a user-facing SDK control seam",
 	"slash_command:drop": "visual/local-only command, not a user-facing SDK control seam",
 	"slash_command:contribute-pr": "visual/local-only command, not a user-facing SDK control seam",
 	"slash_command:btw": "visual/local-only command, not a user-facing SDK control seam",
@@ -31,10 +39,22 @@ const LOCKED_EXCLUSIONS: Readonly<Record<string, string>> = {
 	"slash_command:exit": "visual/local-only command, not a user-facing SDK control seam",
 	"slash_command:notify":
 		"interactive diagnostics command; session on/off delegate to the notifications extension, not an SDK ingress seam",
+	"slash_command:extensions":
+		"interactive local customization dashboard mutates trusted local skill, hook, and MCP configuration (including filesystem import/removal); ACP and local headless cannot dispatch it, while SDK extension list/enable operations do not expose this dashboard authority",
+	"slash_command:credential":
+		"interactive session credential selector; not a credential-free public SDK operation or independent control seam",
 	"slash_command:pet": "visual/local-only command, not a user-facing SDK control seam",
 	"slash_command:transcript": "visual/local-only transcript viewer, not a user-facing SDK control seam",
 	"slash_command:sessions": "visual/local-only sessions dashboard, not a user-facing SDK control seam",
 	"agent_session:constructor": "internal accessor/plumbing, not a user-facing control seam",
+	"agent_session:getSessionAgentDir":
+		"internal session-scoped agent-directory accessor, not a user-facing SDK control seam",
+	"agent_session:captureTerminalAbortSteeringSnapshot":
+		"internal terminal-abort steering snapshot, not a user-facing SDK control seam",
+	"agent_session:rebindTerminalAbortSteeringSnapshot":
+		"internal terminal-abort steering snapshot rebind, not a user-facing SDK control seam",
+	"agent_session:discardTerminalAbortSteeringSnapshot":
+		"internal terminal-abort steering snapshot cleanup, not a user-facing SDK control seam",
 	"agent_session:getConfiguredModelChainState":
 		"internal model-profile transaction snapshot, not a user-facing SDK control seam",
 	"agent_session:getDefaultFallbackRuntimeState":
@@ -82,6 +102,8 @@ const LOCKED_EXCLUSIONS: Readonly<Record<string, string>> = {
 		"internal CLI startup-readiness fence composition, not a user-facing SDK control seam",
 	"agent_session:awaitPendingContextTransformations":
 		"internal context-transformation lifecycle barrier, not a user-facing SDK control seam",
+	"agent_session:awaitSessionSettlement":
+		"internal agent-event settlement barrier, not a user-facing SDK control seam",
 	"agent_session:drainAsyncJobDeliveriesForAcp": "internal accessor/plumbing, not a user-facing control seam",
 	"agent_session:getAsyncDeliveryStateForAcp":
 		"internal ACP lifecycle quiescence plumbing, not a user-facing control seam",
@@ -217,8 +239,14 @@ const LOCKED_EXCLUSIONS: Readonly<Record<string, string>> = {
 		"internal profile and fallback-chain state, not a user-facing SDK control seam",
 	"agent_session:setDefaultFallbackRuntimeModel":
 		"internal fallback runtime bookkeeping, not a user-facing SDK control seam",
+	"agent_session:setCredentialPin":
+		"interactive session-scoped OAuth account selector mutation behind the locked /credential and OAuth selector surfaces; the public SDK has no credential-selection operation and must not gain credential authority implicitly",
+	"agent_session:setCredentialAuto":
+		"interactive session-scoped OAuth AUTO-ranking mutation behind the locked /credential and OAuth selector surfaces; the public SDK has no credential-selection operation and must not gain credential authority implicitly",
 	"agent_session:seedDefaultFallbackResolution":
 		"internal fallback resolution bookkeeping, not a user-facing SDK control seam",
+	"agent_session:syncEagerDelegation":
+		"internal profile-derived eager delegation synchronization, not a user-facing SDK control seam",
 };
 /** Maps reviewed source seams to registry SDK operation IDs. */
 const SEAM_TO_SDK: Readonly<Record<string, string>> = {

package/scripts/generate-telegram-baseline-manifest.ts

@@ -18,6 +18,7 @@ const explicitTests = [
 	"telegram-send-tool.test.ts",
 	"telegram-onboarding-docs.test.ts",
 	"lifecycle-notification-docs.test.ts",
+	"sdk-lifecycle-telegram-integration.test.ts",
 ];
 const requiredTests = [
 	"packages/coding-agent/test/daemon-control.test.ts",

package/scripts/generate-tool-catalog.ts

@@ -1,5 +1,6 @@
 import * as path from "node:path";
 import { toolWireSchema } from "@gajae-code/ai/utils/schema";
+import { TaskTool } from "../src/task";
 import { TOOL_CATALOG } from "../src/tools/tool-catalog.generated";
 
 export interface GeneratedToolCatalogEntry {
@@ -26,6 +27,7 @@ export interface GeneratedToolCatalogEntry {
 export interface ToolCatalogGenerationOptions {
 	platform?: NodeJS.Platform;
 	arch?: NodeJS.Architecture;
+	cwd?: string;
 }
 
 type AuditedFallback = {
@@ -99,10 +101,10 @@ function makeSettings() {
 	};
 }
 
-function makeSession(): any {
+function makeSession(cwd: string = path.resolve(import.meta.dir, "../..")): any {
 	const settings = makeSettings();
 	return {
-		cwd: path.resolve(import.meta.dir, "../.."),
+		cwd,
 		hasUI: false,
 		workflowGateEligible: true,
 		settings,
@@ -326,7 +328,7 @@ export async function generateToolCatalogData(
 			...HIDDEN_TOOL_DESCRIPTORS,
 			...PLATFORM_EXCLUDED_TOOL_DESCRIPTORS,
 		} as Record<string, any>;
-		const session = makeSession();
+		const session = makeSession(options.cwd);
 		const output: Record<string, GeneratedToolCatalogEntry> = {};
 		for (const [name, descriptor] of Object.entries(all)) {
 			let fallback: AuditedFallback | undefined;
@@ -334,7 +336,7 @@ export async function generateToolCatalogData(
 			const platformExcluded = excludedOnPlatform(descriptor.metadata.platformExclusions, platform, arch);
 			if (!platformExcluded) {
 				try {
-					tool = await descriptor.load(session);
+					tool = name === "task" ? await TaskTool.createForToolCatalog(session) : await descriptor.load(session);
 				} catch (cause) {
 					throw new ToolCatalogGenerationError(
 						`Failed to load descriptor "${name}": ${formatCause(cause)}`,

package/scripts/verify-gjc-sdk-canonicalization.ts

@@ -838,43 +838,8 @@ function rpcModeInvocationViolations(file: string, contents: string): string[] {
 }
 
 function bridgeClientPackageMetadataViolation(file: string, contents: string): string | undefined {
-	if (
-		!file.endsWith("package.json") ||
-		(file !== bridgeClientPackageManifestPath && !contents.includes(bridgeClientPackageName))
-	)
-		return undefined;
-	try {
-		const manifest = JSON.parse(contents) as {
-			catalog?: Record<string, unknown>;
-			dependencies?: Record<string, unknown>;
-			name?: unknown;
-			optionalDependencies?: Record<string, unknown>;
-			peerDependencies?: Record<string, unknown>;
-			workspaces?: { catalog?: Record<string, unknown> };
-		};
-		if (file === bridgeClientPackageManifestPath) {
-			if (manifest.name !== bridgeClientPackageName)
-				return `${file}: is not the canonical bridge-client package manifest`;
-			if (
-				Object.keys(manifest.dependencies ?? {}).length > 0 ||
-				Object.keys(manifest.peerDependencies ?? {}).length > 0 ||
-				Object.keys(manifest.optionalDependencies ?? {}).length > 0
-			)
-				return `${file}: canonical bridge-client package must remain runtime-dependency-free`;
-			return undefined;
-		}
-		if (
-			file === "package.json" &&
-			(typeof manifest.catalog?.[bridgeClientPackageName] === "string" ||
-				typeof manifest.workspaces?.catalog?.[bridgeClientPackageName] === "string")
-		)
-			return undefined;
-		if (file === packageManifestPath && typeof manifest.dependencies?.[bridgeClientPackageName] === "string")
-			return undefined;
-	} catch {
-		return `${file}: declares unsupported bridge-client package metadata`;
-	}
-
+	if (!file.endsWith("package.json")) return undefined;
+	if (file !== bridgeClientPackageManifestPath && !contents.includes(bridgeClientPackageName)) return undefined;
 	return `${file}: declares unsupported bridge-client package metadata`;
 }
 
@@ -2617,7 +2582,8 @@ async function selfTest(): Promise<void> {
 			"packages/coding-agent/src/sdk/client/client.ts":
 				'export { SdkClient } from "@gajae-code/bridge-client";\nexport type { SdkClientOptions } from "@gajae-code/bridge-client";\n',
 		},
-		0,
+		1,
+		"declares unsupported bridge-client package metadata",
 	);
 	await runSelfTestFixture(
 		{
@@ -2625,7 +2591,7 @@ async function selfTest(): Promise<void> {
 				'{"name":"@gajae-code/bridge-client","dependencies":{"unsafe":"1.0.0"}}\n',
 		},
 		1,
-		"canonical bridge-client package must remain runtime-dependency-free",
+		"declares unsupported bridge-client package metadata",
 	);
 	await runSelfTestFixture(
 		{