@gajae-code/coding-agent 0.15.5 → 0.16.0

package/CHANGELOG.md

@@ -2,6 +2,90 @@
 
 ## [Unreleased]
 
+## [0.16.0] - 2026-09-02
+
+- Added master mode (`gjc --master [--scope repo|pwd|global]`) with authenticated, broker-authoritative child orchestration: `gjc sdk spawn` creates task-seeded children, scoped `gjc sdk search` discovers broker-visible sessions with paginated results, and locator v2 session rows carry canonical cwd, worktree-root, and state-root identity.
+- SDK master-mode authority now selects the newest retained master epoch, binds worktree occupancy to canonical worktree roots with positive process-exit proof, keeps master capabilities out of ordinary Bash descendants, bounds authenticated nonce replay state, and preserves scoped search rows across pagination beyond the probe budget.
+- `move_session`, TUI `/move`, and SDK/ACP `session.cwd.move` no longer strand coordinator runtime-state persistence for the rest of the session. All three surfaces now cross one `SessionManager.moveTo` lifecycle: admitted old-cwd sidecar writes drain before commit, later queued writes are generation-fenced, and a durable rescope journal records the exact old/new cwd and session-file identities before publication so restart can finish an interrupted migration. Relocation holds both canonical state paths' process, namespace, and state-file locks in deterministic order across read/authenticate/write/remove; signed predecessors and destinations require the matching key id plus a valid Ed25519 signature, unsigned rows require complete exact cwd/workdir/session-file identity, and coordinator bootstrap or partial rows are never laundered into authoritative state. No-follow descriptor reads and native identity-bound orphan retirement reject symlink/path replacement, a valid self-healed destination is preserved while its authenticated old marker is removed, and rejected/tampered evidence stays intact with the journal retained for recovery. Rollback clears the prepared journal, committed metadata failures still run relocation, and postmortem finalizer rebinding is unconditional even when repair fails, so unexpected exit targets the live cwd/session file. (#4629)
+- `move_session` and `session.cwd.move` now report an unreadable target as `Directory identity or access unavailable` on macOS too. Darwin's `realpath(3)` fails with `EACCES` on a mode-0 directory where Linux resolves it and fails later at the access probe, so the same refusal was previously misreported as `Directory does not exist or is not a directory`.
+- The status rail no longer collapses to a bare `…+N` overflow marker on very small terminals. Context %, the goal indicator and the model name are now the last segments evicted (in that order), and once ordinary telemetry is gone they degrade through shortened and single-glyph forms before being dropped — context % is never dropped, keeps `18.3%/200K` while it fits, falls back to an integer `18%`, and retains its usage-level color. The overflow marker is suppressed at those widths so its cells go to the priority items instead. Rails with no context window and no active goal evict exactly as before.
+- Model names now render in their shortest recognizable id-derived form (`anthropic/claude-sonnet-4-5-20250929` → `sonnet-4.5`) in both the status rail and the footer telemetry line, replacing the raw id in the footer and the previous Anthropic-only `"Claude "` prefix strip in the rail. The rule is a pure heuristic — provider prefix, vendor family word and trailing date/build stamp removed — with no curated override table, and never yields an empty label. Model pickers and selectors keep full ids.
+- The `claude-fable` and `fable-opus-codex` built-in presets now use `anthropic/claude-fable-5-1` instead of `anthropic/claude-fable-5`, with effort suffixes preserved (`claude-fable` default/architect `xhigh`, critic `high`, planner `low`; `fable-opus-codex` default `high`). Fable 5.1 exposes the identical effort ladder, so no role mapping changed shape, and the non-fable roles (`anthropic/claude-sonnet-5` executor, `anthropic/claude-opus-5` planner/critic, the Codex executor/architect) are untouched. The extragoal reviewer template moves to `anthropic/claude-fable-5-1:xhigh` for the same reason. `claude-fable-5` remains in the catalog for pinned selectors and for gateways that do not serve 5.1.
+- Fresh interactive onboarding now asks for an interface language before showing guidance, supports English, Korean, Simplified Chinese, and Japanese, persists the choice through `ui.language`, and uses a documented English fallback for noninteractive, invalid, cancelled, or unwritable startup.
+- Coordinator projection consumers now retry a bounded number of fresh authoritative scans when concurrent session churn races a candidate. Cap exhaustion, owner disappearance, unsupported authority, and parse failures remain fail-closed, while settled concurrent SDK sessions no longer permanently starve the session reaper or coordinator mutations. (#5168)
+
+- Coordinator session-state locks now reclaim an empty, identity-qualified released transition tombstone on POSIX after a short release grace period. Live, foreign, malformed, non-empty, or identity-changed claims remain fail-closed, while persistent macOS/File Provider debris no longer burns the full transition timeout on every state write. (#5159)
+
+- A runtime-state marker recorded against a different workspace path now reports that mismatch instead of claiming the file is unreadable, and a terminal, not-live marker that travelled into the current workspace with its session directory is adopted rather than refused. Live, non-terminal, and out-of-workspace markers are still refused untouched.
+- An unavailable provider-qualified `modelRoles.default` selection now reports the requested model instead of silently starting on another provider's baseline. This keeps signed-registry omissions and failed catalog admission actionable rather than routing requests to an unrelated retired model. (#5144)
+
+- Headless SDK substrate close now reports success when exact teardown observes the recorded process gone even if cleanup unlinks the durable proof first; live or identity-ambiguous substrates still report `substrate_mismatch`. (#5130)
+
+- Windows session-state locks now drain late terminal reconciliation writes before disposal returns and safely reclaim valid dead transition claims during resume. (#5102)
+
+- Deferred MCP startup now releases queued idle yields as soon as readiness settles without bypassing prompt admission. Barrier extensions remain gated, rejected startup drops the wake without prompting, settled sessions retain the normal idle merge window, and readiness stays session-local. (#5085)
+- ACP deep-interview's real subprocess fixture now retires its owned lifecycle sessions before broker/root cleanup, preventing detached session hosts from recreating the fixture root after teardown. (#5086)
+- The ACP fixture tracks broker startup through its full producer deadline and tracks session creation before awaiting responses, keeps its independent broker fallback client available when runtime shutdown fails, and retires sessions first seen in either broker inventory phase directly through that fallback across cleanup retries. Verified broker-startup rejection no longer strands the root, while an unverified child-reap failure retains cleanup authority. Reconciliation recognizes the real ACP `terminal_uncertain` after-send wire envelope as transport uncertainty while preserving semantic close diagnostics, then accepts terminal races only after strict inventory proves unambiguous and certain retirement. A stalled broker-client transport close no longer blocks authoritative lease/root cleanup, and the child environment confines Windows profile and temporary paths to the fixture root. (#5086)
+- Telemetry install IDs are now staged in private temporary files and published atomically, so concurrent startup readers cannot observe a partial UUID payload; stale temporary files are never adopted and malformed persisted IDs still fail closed. Publication also falls back through native no-replace links and an exclusive claim protocol when rename-no-replace is unavailable, Windows reads and claim mutations use identity-bracketed opens, transient claimed payloads are retried, and every winner is tightened to mode 0600. (#5048)
+
+- An install with no configured model no longer starts on a model its provider has already withdrawn. The startup fallback now applies the configured provider-priority policy, skips bundled defaults disproved by fresh provider discovery, and only then preserves catalog order for remaining candidates. Explicit model and profile selections, enabled-model allowlists, credential selectors, disabled providers, and provider/id collision-safe candidate membership remain unchanged.
+
+### Fixed
+
+- File locks now use a descriptor-relative exclusive directory-publication fallback
+	when a filesystem returns `EINVAL` for `renameat2(RENAME_NOREPLACE)` (for example
+	WSL2 DrvFs), so `edit` and terminal persistence no longer surface `Failed to publish
+	file lock: invalid_request` on valid paths. The native fallback preserves no-follow
+	path containment, owner identity, no-replace contention, and fail-closed stale-owner
+	checks. (#5164)
+
+- The first Esc on a streaming turn with a queued steering message again consumes that steer and auto-continues instead of aborting the turn and dumping the queue back into the composer. The busy-indicator recovery branch counted the same drainable queue as cancellable work and, because a streaming turn always has that indicator mounted, it short-circuited before the steer-on-interrupt branch could run. Stale busy-indicator recovery, pending-submission cancellation, and the loud second-Esc abort are unchanged.
+
+- Print and JSON turns now fail closed when the provider/agent produces no readable assistant text: JSON emits a bounded `agent_failed` disposition and failures exit nonzero, while tool-only terminal output can no longer masquerade as success. (#5153)
+- Interactive `/login`, `/logout`, and account inventory commands now keep the TUI alive when the credential database reports `SQLITE_CORRUPT` or `SQLITE_NOTADB`. They show a bounded, payload-free recovery message and never auto-repair or delete the database. (#5070)
+- `session.last_assistant` now reads the public transcript projection, skips trailing tool-only, thinking-only, empty, and whitespace-only assistant rows, and returns the most recent readable assistant text or an empty string when none exists. (#5078)
+- Chat-daemon same-generation successor attachments now wait for predecessor provider retirement before admitting frames. Retired attachment frames remain fenced, successor frames resume after retirement, queue waiters settle during takeover and shutdown, and cross-generation replacement remains isolated. (#5120)
+
+- SDK lifecycle readiness now uses the same descriptor-bound endpoint identity tolerance as broker endpoint reads and selects owners by scoped state root, process incarnation, and lifecycle marker instead of bare session ID. This restores default source-host startup, shipped SDK lifecycle topology, shared-agent saved-source isolation, cold resume/fork cleanup, local SDK-only broker recovery, and generated operation-matrix closure after the master-mode merge. (#5114)
+
+- Coordinator event watchers now advertise the exact supported event-kind enum, while outbox entity validation and durable WAL/active-turn cleanup reuse their existing authority helpers instead of leaving those checks disconnected. (#5115)
+- Post-install update verification now preserves a bounded, secret-redacted stderr/stdout cause when the newly installed `gjc --version` exits unsuccessfully, so runtime guards such as Bun version incompatibilities remain actionable instead of collapsing to a generic verification failure. (#5108)
+- Concurrent coordinator mutations sharing one idempotency key now join the same in-process flight before taking the durable key lock, so a slow accepted prompt cannot make its retry time out as unavailable. Conflicting in-flight requests still fail closed, completed responses remain durably replayable, and different keys remain isolated. (#5110)
+- Custom providers declaring `transport: pi-native` in `models.yml` now actually dispatch through the auth-gateway native endpoint. The provider-level transport was silently dropped for models.yml-declared models, so requests went to `<baseUrl>/chat/completions` and the gateway answered 404; and the pi-native client now serializes only wire-safe tool fields, so runtime tool state carrying fs-stat BigInts no longer aborts request serialization with `JSON.stringify cannot serialize BigInt`.
+- ACP prompts now settle immediately on correlated explicit failure outcomes without waiting for a later `agent_end`; generic error-only `agent_failed` events remain additive diagnostics until an authoritative terminal, while late duplicates and unrelated correlations stay isolated. (#5107)
+
+- Managed-session file identities now use one canonical unsigned 64-bit representation across stat/native boundaries and replacement cleanup receipts. Native Windows file IDs surfaced as signed negative bigints no longer create double-hyphen receipt names that block persistence or reopen; already-written signed receipt names and interrupted pending receipts are recovered only through the existing identity-bound, fail-closed reconciliation paths. (#5095)
+
+- `gh` PR diffs decode git's C-style quoted paths as UTF-8 bytes instead of Latin-1 code points, so non-ASCII file names (`docs/\355\225\234\352\270\200.md`) no longer surface as mojibake in the file list, and quoted `rename from`/`rename to` lines are unquoted the same way instead of keeping their literal quotes and escapes.
+- Confirmed operator `turn.abort` requests now travel through a dedicated local Broker route instead of trusting caller-supplied `operator:true` and `confirm:true` on ordinary SDK frames. The Broker revalidates the exact live endpoint identity, injects a process-bound private capability, preserves post-send uncertainty, and the host uses one capability-free canonical identity for dispatch idempotency, durable admission, and delivery receipts, so forged, stale, dropped, and replayed requests fail closed consistently across restart boundaries.
+
+- Blob references and filesystem-backed blob reads now accept only exact lowercase SHA-256 names before resolving a disk path; canonical references and valid missing-blob behavior are unchanged.
+
+## [0.15.6] - 2026-08-30
+
+- Auth metadata remains session-only when a compatibility registry has auth storage but no owner accessor, preventing an unscoped OAuth account lookup from attributing a registry-scoped API-key request to the wrong account.
+
+- Every prompt no longer throws inside the session metadata resolver when the model registry does not implement `getAuthStorageOwner`. `80bbc96192` added the lookup as a required call in the resolver that runs on every prompt, but `buildSessionMetadata` takes `owner?: object` and 65 test files construct `AgentSession` with a deliberately minimal `modelRegistry` stub, so the resolver raised `TypeError: this.#modelRegistry.getAuthStorageOwner is not a function`. The throw stranded session admission, which then reported the misleading `Agent session admission is busy due to same-session reentrancy` on every following prompt, so a single missing method surfaced as ~45 failures and 5-second timeouts across six CI test shards in ten unrelated suites (IRC roster delivery, `respondAsBackground` visibility, deferred shell publication, coordinator activity labels, and others). The two optional-argument resolver call sites are now optional calls, matching the existing defensive convention in `account-inventory.ts`; the auth-credential call sites (`resolveOAuthPinTarget`, `invalidateCredentialMatching`, `markUsageLimitReached`) deliberately keep the strict call because they genuinely require a real registry owner and passing `undefined` there would change credential ownership scoping.
+- SDK prompt controls now reject empty and whitespace-only text before client correlation, turn allocation, transcript mutation, or provider activity across CLI, MCP, ACP, and direct session controls; multiline and Unicode prompts remain valid. (#5059)
+- Added disabled-by-default privacy-preserving update telemetry with a versioned allowlist, random local UUIDv4 install ID, bounded nonblocking HTTPS transport, explicit `telemetry.enabled` control, and the `GJC_DISABLE_TELEMETRY` emergency kill switch. Events never include prompts, argv, paths, environment, secrets, account/model/provider/repository identity, arbitrary errors, hostname, username, machine ID, or IP-derived identity. (#5046)
+- A running foreground command can now be folded into a background job with the fold chord (default `Alt+Shift+B`, plus `Cmd+B` on macOS; remappable via `app.tool.backgroundFold`). The turn ends as a clean stop-after-result rather than an abort, and the folded job's completion automatically wakes a fresh turn carrying a receipt — the command's output, a retrieval handle, and the original request — so the interrupted task is finished instead of abandoned. All three command surfaces fold — managed non-PTY bash, editor/ACP client-terminal commands, and PTY-mode commands — and a folded command is never killed or restarted by folding (a folded PTY continues output-only, so it stops accepting input). Folded jobs keep their original deadlines, folded work is visible in the status line and jobs overlay with its delivery state, completions arriving close together merge into one wake turn, and `task`/`subagent` waits are deliberately not foldable. The previous `Ctrl+B` default could never work: `Ctrl+B` is already `tui.editor.cursorLeft` (and is tmux's default prefix), so the keypress fell through to cursor movement whenever nothing was foldable.
+- Background job results are no longer silently lost in two pre-existing cases that also affected plain `async: true` bash. A job id with a queued or in-flight delivery is no longer recycled, which previously gave the pending delivery a mismatched generation and discarded it before it was ever delivered; and a delivery callback that fails after its job record was evicted is now retried, with a retry-cap failure recorded as visibly failed instead of vanishing with no dead letter.
+- Fixed `AsyncJobManager.dispose()` ordering: it marked itself disposed before running owner cleanups, and the delivery loop is inert once disposed, so a failure an owner cleanup settled could never be drained. Registration is now closed by its own flag, which keeps cleanups from registering fresh work without disabling delivery.
+- ACP prompt terminal publication no longer waits behind post-prompt worker integration or recovery work. SDK prompts pass the correlated `agent_end` boundary through immediately, while the existing bounded integration drain continues independently, preventing streamed turns from remaining pending until `sdk.promptDeadlineMs` when owned subagent work lingers. (#5030)
+
+### Fixed
+
+- Session resume no longer spends minutes in a CPU-hot 5ms loop when `runtime-state.json.lock` contains corrupt or unprovenanced debris. Session-state acquisition now uses a two-second monotonic wall-time budget with capped exponential backoff and typed exact-path diagnostics; stale malformed records are reclaimed only when their local host provenance and dead PID are proved, old empty legacy lock directories are removed only through exact tree identity, and live, foreign, or replacement owners remain fail-closed. (#5062)
+
+- `gjc sdk session tail` no longer rejects the host's `event_replay_result` control frame when its response position includes `generation` and `lastSeq` but no event `seq`; replay metadata is kept out of the event-ring tail while malformed event positions remain fail-closed. (#5055)
+
+- Coordinator no longer treats native exact-unlink placeholders (empty `.gjc-delete-*.json`) as live projection JSON. Directory scans skip dotfiles before open; truncated canonical projections remain parse candidates and fail closed, while the parse cap applies only after filtering debris. Session-state lock reclaim reuses one quarantine name per acquire cycle and removes a verified-empty leftover at that name before exchange — deletion is the native identity-bound `exactUnlinkDirect`, so a replacement planted at the reserved name is refused instead of deleted. `gjc gc --empty-delete-receipts --root/--manifest` validates every operand before any store can prune, reports or prunes only operator-supplied empty receipts matching the strict UUID namespace (inode identity + symlink-root reject; no hardcoded host paths), and surfaces native retained recovery paths and discovery failures as report errors. Receipt discovery is fail-closed under concurrent cleanup: a candidate that vanishes between `readdir` and `lstat` is recorded as a `skipped`/`raced` row instead of silently shrinking the report.
+
+- Fold control operations now report success only after the foreground fold transaction commits, while rejected fold requests follow the existing warning path; cleanup-triggered delivery failures remain eligible for bounded retry and visible dead-letter recording during manager disposal, and folded jobs expose read-only detail rows in the jobs overlay.
+- Generic file-lock release now retries transient Windows sharing denials and quarantines a verified self-owned lock when deletion remains unavailable, using an in-process acquisition generation rather than reclaiming every live lock with the same PID. Terminal `agent_end` publication remains independent of coordinator sidecar persistence, and a repeated interactive exit escalates through bounded postmortem cleanup. (#4943)
+
+- A one-shot `gjc sdk` command no longer idles for five seconds after its response is written. `SessionRouter` bounded four waits with `Bun.sleep` inside `Promise.race`; the race settles on the winner but does not cancel the loser, and a pending `Bun.sleep` keeps the event loop alive, so work that finished in milliseconds still owed the rest of the budget before the process could exit. `gjc sdk session list` wrote its result at 0.50s and exited at 5.51s. The startup attach budget, shutdown timeout, bounded notification work, and replay backoff now use the existing `cancellableSleep` helper with an `AbortController` cancelled once the race settles, and the reconcile interval is unref'd so a Router started without a matching `stop()` does not hold a host proce…
+
 ## [0.15.5] - 2026-08-29
 
 - Bash now blocks tmux input commands that resolve to the agent's own pane before spawning the shell, including direct pane targets, session aliases, explicit socket forms, shell wrappers, and inspected script indirection. Read-only inspection and cross-session orchestration remain available, while blocked input cannot reach the transcript as a user turn. (#5039)
@@ -653,7 +737,7 @@
 ### Added
 
 - The SDK `models.list/current` (Q10) catalog now lists model profiles as synthetic `gajae-code/<profile>` entries (e.g. `gajae-code/codex-eco`), and selecting one through `model.set` (or the ACP Model picker) activates the profile for the live session only; global persistence remains the explicit `gjc --mpreset <name> --default` or TUI default-selection path. ACP/SDK clients such as Paseo can therefore offer presets like ordinary models; only availability-filtered profiles are advertised, the reserved `gajae-code` namespace fails closed on collision, and `config.patch` serializes with profile activation through the session admission boundary.
-- Added first-class `cline-pass` and `commandcode-goat` provider presets with documented API endpoints, environment-variable credentials, non-hardcoded live model discovery from models.dev and the Command Code Provider API, and prefix-based Claude routing.
+- Added first-class `cline-pass` and `commandcode-goat` provider presets with documented API endpoints, environment-variable credentials, non-hardcoded live model discovery from models.dev and the Command Code Provider API; Command Code models stay on its documented OpenAI-compatible transport regardless of model name.
 - Registered the `jetbrains-junie` provider in the famous-provider ordering and the `JUNIE_API_KEY` credential help so JetBrains AI (Junie) Claude models surface in `/model`, `--list-models` and `gjc --help` alongside the other first-class providers (#3626).
 - Added lease-backed MCP connection pooling with typed recovery, shared HTTP/SSE sessions, per-lease callback demultiplexing, and authorization binding scopes that keep credential secrets out of pool keys.
 - Added plugin registry v2 as the single execution authority for plugin tools, subskills, and prompt appendices, with digest verification at final use.

package/dist/types/async/job-manager.d.ts

@@ -21,6 +21,12 @@ export interface AsyncJob {
     setupFailureSummary?: string;
     /** Safe, bounded summary of a terminal local (non-provider) failure kind. */
     localErrorSummary?: LocalErrorSummary;
+    /** Compact delivery-failure marker retained while the job row remains live. */
+    deliveryFailure?: {
+        attempt: number;
+        lastError?: string;
+        recordedAt: number;
+    };
     metadata?: AsyncJobMetadata;
     /**
      * Registry id of the agent that registered the job (e.g. "0-Main",
@@ -38,6 +44,8 @@ export interface AsyncJob {
  */
 export declare function jobElapsedMs(job: Pick<AsyncJob, "startTime" | "endTime">, now?: number): number;
 export interface AsyncJobMetadata {
+    /** Set once a foreground wait has been folded, so surfacing can show folded work. */
+    backgrounded?: boolean;
     subagent?: {
         id: string;
         agent: string;
@@ -170,11 +178,50 @@ export interface AsyncJobManagerOptions {
     onJobComplete: (jobId: string, text: string, job?: AsyncJob) => void | Promise<void>;
     maxRunningJobs?: number;
     retentionMs?: number;
+    maxDeadLetterOverflowOwners?: number;
+}
+export interface AsyncJobAdmission {
+    readonly manager: AsyncJobManager;
 }
 export interface AsyncJobDisposeDiagnostics {
     stuckJobIds: string[];
     deliveriesDrained: boolean;
 }
+/** Per-job public delivery classification. Exactly one value per terminal job. */
+export type JobDeliveryState = "pending" | "delivered" | "failed-visible";
+/** One job as projected by {@link AsyncJobManager.getJobsSnapshot}. */
+export interface AsyncJobSnapshotEntry {
+    id: string;
+    kind: string;
+    label: string;
+    status: AsyncJob["status"];
+    generation: string;
+    backgrounded: boolean;
+    deliveryState: JobDeliveryState;
+}
+/** Scalar delivery-failure evidence that may outlive its AsyncJob record. */
+export interface DeadLetteredJobSnapshotEntry {
+    jobId: string;
+    generation: string;
+    ownerId?: string;
+    /** Whether the failed delivery originated from a backgrounded job. */
+    backgrounded?: boolean;
+    attempt: number;
+    lastError?: string;
+    recordedAt: number;
+}
+/**
+ * One atomic projection of job + delivery state.
+ *
+ * Computed in a single synchronous pass with no interleaved awaits so it cannot
+ * tear, and consumed verbatim: a UI that re-derives delivery classification from
+ * separate getters can disagree with this and produce a job that is in no public
+ * state at all.
+ */
+export interface AsyncJobsSnapshot {
+    jobs: AsyncJobSnapshotEntry[];
+    deadLettered: DeadLetteredJobSnapshotEntry[];
+}
 export interface AsyncJobDeliveryState {
     queued: number;
     delivering: boolean;
@@ -209,6 +256,8 @@ export interface AsyncJobRegisterOptions {
     metadata?: AsyncJobMetadata;
     onProgress?: (text: string, details?: Record<string, unknown>) => void | Promise<void>;
     lifecycle?: AsyncJobLifecycleCleanup;
+    /** Reserved capacity consumed atomically by this registration. */
+    admissionToken?: AsyncJobAdmission;
 }
 /**
  * Filter applied to job query/cancel APIs. With `ownerId`, results are
@@ -411,6 +460,10 @@ export declare class AsyncJobManager {
      */
     getJobPromise(id: string, generation: string): Promise<void> | undefined;
     getRunningJobs(filter?: AsyncJobFilter): AsyncJob[];
+    /** Whether a new running job can be admitted without starting side effects. */
+    hasCapacity(filter?: AsyncJobFilter): boolean;
+    reserveCapacity(): AsyncJobAdmission;
+    releaseCapacity(token: AsyncJobAdmission): void;
     getRecentJobs(limit?: number, filter?: AsyncJobFilter): AsyncJob[];
     getAllJobs(filter?: AsyncJobFilter): AsyncJob[];
     /**
@@ -450,6 +503,18 @@ export declare class AsyncJobManager {
     /** Run producer cleanups, then perform the legacy destructive subagent purge. */
     runOwnerCleanups(filter?: AsyncJobFilter): void;
     getDeliveryState(filter?: AsyncJobFilter): AsyncJobDeliveryState;
+    /**
+     * One synchronous pass over jobs plus delivery state.
+     *
+     * Every returned job carries exactly one {@link JobDeliveryState}, and
+     * dead-lettered evidence is included even when its record is already gone, so
+     * no terminal job can end up invisible to the UI.
+     */
+    getJobsSnapshot(filter?: AsyncJobFilter): AsyncJobsSnapshot;
+    retainParkedDelivery(job: AsyncJob, text: string): void;
+    retainDeliveryClaim(job: AsyncJob): void;
+    releaseDeliveryClaim(generation: string): void;
+    clearParkedDelivery(generation: string): void;
     hasPendingDeliveries(filter?: AsyncJobFilter): boolean;
     watchJobGenerations(jobIds: string[]): AsyncJobWatchHandle;
     watchJobs(jobIds: string[]): number;
@@ -460,6 +525,19 @@ export declare class AsyncJobManager {
      * matching agent registered; with no filter, cancels every running job
      * (used by `dispose()` to nuke the manager's state).
      */
+    /**
+     * Synchronously fail a running job AND enqueue its delivery, exactly once.
+     *
+     * An externally owned wait -- an ACP client terminal, say -- can fail while its
+     * owner is being torn down. `cancel()` is the wrong tool there: it marks the job
+     * cancelled, and the cancelled path deliberately enqueues NO delivery, so the
+     * failure would never become visible to anyone. This is the single transition
+     * that both fails the job and delivers that failure in one synchronous block, so
+     * it cannot lose the race against disposal.
+     */
+    failNow(jobId: string, generation: string, errorText: string, options?: {
+        abort?: boolean;
+    }): boolean;
     cancelAll(filter?: AsyncJobFilter): void;
     waitForOwnerInFlightDeliveries(ownerId: string, options?: {
         timeoutMs?: number;
@@ -468,6 +546,11 @@ export declare class AsyncJobManager {
         timeoutMs?: number;
     }): Promise<boolean>;
     getLastDisposeDiagnostics(): AsyncJobDisposeDiagnostics;
+    /**
+     * Mark a running job as backgrounded (folded out of its foreground call).
+     * Read by getJobsSnapshot so folded work stays visible; safe to call twice.
+     */
+    markBackgrounded(jobId: string, generation: string): boolean;
     waitForAll(): Promise<void>;
     drainDeliveries(options?: {
         timeoutMs?: number;

package/dist/types/cli/args.d.ts

@@ -50,6 +50,8 @@ export interface Args {
     noRules?: boolean;
     listModels?: string | true;
     noTitle?: boolean;
+    master?: true;
+    masterScope?: "repo" | "pwd" | "global";
     messages: string[];
     fileArgs: string[];
     /** Flags unknown to every launch parser; their consumer supplies the diagnostic. */

package/dist/types/cli/auth-gateway-cli.d.ts

@@ -1,9 +1,11 @@
+import { type AuthCredentialSnapshot, type CredentialHealthResult } from "@gajae-code/ai/core";
 export type AuthGatewayAction = "serve" | "token" | "status" | "check";
 export interface AuthGatewayCommandArgs {
     action: AuthGatewayAction;
     flags: {
         json?: boolean;
         bind?: string;
+        provider?: string;
         regenerate?: boolean;
         /**
          * Disable bearer-token auth on inbound requests. Useful when the gateway
@@ -14,5 +16,20 @@ export interface AuthGatewayCommandArgs {
     };
 }
 declare const ACTIONS: readonly AuthGatewayAction[];
+export declare function resolveAuthGatewayReadiness(input: {
+    noAuth: boolean;
+    tokenPresent: boolean;
+    credentialCount: number;
+    modelCount: number;
+}): {
+    ready: boolean;
+    reason: "token_missing" | "provider_credential_missing" | "provider_catalog_empty" | null;
+};
+export declare function normalizeProviderScope(provider: string | undefined): string | undefined;
+export declare function filterCredentialCheckResults(results: readonly CredentialHealthResult[], provider: string | undefined): CredentialHealthResult[];
+export declare function redactBrokerUrl(rawUrl: string): string;
+export declare function hasEnabledProviderCredential(snapshot: Pick<AuthCredentialSnapshot, "credentials">, provider: string): boolean;
+export declare function matchesProviderCredential(entry: AuthCredentialSnapshot["credentials"][number], apiKey: string): boolean;
+export declare function assertEnabledProviderCredential(snapshot: Pick<AuthCredentialSnapshot, "credentials">, provider: string): void;
 export declare function runAuthGatewayCommand(cmd: AuthGatewayCommandArgs): Promise<void>;
 export { ACTIONS as AUTH_GATEWAY_ACTIONS };

package/dist/types/cli/model-presets-cli.d.ts

@@ -0,0 +1,9 @@
+export declare const MODEL_PRESETS_ACTIONS: readonly ["status", "refresh", "rollback", "pin", "unpin", "disable", "enable"];
+export type ModelPresetsAction = (typeof MODEL_PRESETS_ACTIONS)[number];
+export interface ModelPresetsCommandArgs {
+    action: ModelPresetsAction;
+    revision?: string;
+    json?: boolean;
+    agentDir?: string;
+}
+export declare function runModelPresetsCommand(args: ModelPresetsCommandArgs): Promise<void>;

package/dist/types/cli/root-flags.d.ts

@@ -119,6 +119,13 @@ export declare const ROOT_LAUNCH_FLAGS: {
     "no-title": FlagDescriptor<"boolean"> & {
         description: string;
     };
+    master: FlagDescriptor<"boolean"> & {
+        description: string;
+    };
+    scope: FlagDescriptor<"string"> & {
+        description: string;
+        options: string[];
+    };
 };
 export type ConsumerLaunchFlagName = "hook" | "extension" | "no-extensions" | "no-skills" | "skills";
 export type LaunchFlagConsumer = "acp" | "local";
@@ -247,6 +254,13 @@ export declare const LAUNCH_PARSE_FLAGS: {
     "no-title": FlagDescriptor<"boolean"> & {
         description: string;
     };
+    master: FlagDescriptor<"boolean"> & {
+        description: string;
+    };
+    scope: FlagDescriptor<"string"> & {
+        description: string;
+        options: string[];
+    };
     extension: FlagDescriptor<"boolean" | "integer" | "string">;
     hook: FlagDescriptor<"boolean" | "integer" | "string">;
     "no-extensions": FlagDescriptor<"boolean" | "integer" | "string">;

package/dist/types/cli/update-cli.d.ts

@@ -1,6 +1,7 @@
 import { Settings } from "../config/settings";
 import { type UpdateChannel } from "../config/update-channel";
 import { type NotificationProvider } from "../sdk/bus/config";
+import type { TelemetryDetails, TelemetryEventName } from "../telemetry";
 import { type GithubReleaseLookupOptions } from "./github-release";
 export interface UpdateCommandOptions {
     force: boolean;
@@ -20,6 +21,7 @@ export interface InstalledVersionVerification {
     ok: boolean;
     actual?: string;
     path?: string;
+    versionOutput?: string;
     smokeTestFailed?: boolean;
     smokeTestOutput?: string;
     cleanupWarning?: string;
@@ -86,6 +88,18 @@ export declare function resolveGjcPathForTest(options: {
     whichPath: string | undefined;
 }): string | undefined;
 export declare function parseReportedVersionForTest(output: string): string | undefined;
+export declare function sanitizeVerificationOutputForTest(stderr: string | undefined, stdout: string | undefined): string | undefined;
+interface InstalledVersionCommandResult {
+    exitCode: number | null;
+    stdout: string;
+    stderr: string;
+}
+type InstalledVersionCommandRunner = (runtimePath: string) => Promise<InstalledVersionCommandResult>;
+export declare function verifyInstalledVersionForTest(options: {
+    expectedVersion: string;
+    runtimePath: string | undefined;
+    runVersion: InstalledVersionCommandRunner;
+}): Promise<InstalledVersionVerification>;
 interface MigrationTargetVerificationOptions {
     runtimePath: string;
     verifyChecksum: () => Promise<void>;
@@ -150,6 +164,7 @@ export interface UpdateCommandDependencies {
     restartDaemon?: (settings: Settings) => Promise<void>;
     recoverNotifications?: (settings: Settings) => Promise<void>;
     runPostUpdateRecovery?: (runtimePath: string) => Promise<void>;
+    recordTelemetryEvent?: (event: TelemetryEventName, details: TelemetryDetails) => unknown;
     exit?: (code: number) => never;
 }
 export type PostUpdateRecoverySpawn = (argv: string[]) => Promise<number>;

package/dist/types/cli.d.ts

@@ -142,6 +142,13 @@ export declare class RootHelpCommand extends Command {
         "no-title": import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
             description: string;
         };
+        master: import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
+            description: string;
+        };
+        scope: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+            options: string[];
+        };
     };
     static examples: string[];
     static strict: boolean;

package/dist/types/commands/auth-gateway.d.ts

@@ -20,6 +20,9 @@ export default class AuthGateway extends Command {
             description: string;
             char: string;
         };
+        provider: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+        };
         regenerate: import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
             description: string;
         };

package/dist/types/commands/gc.d.ts

@@ -2,6 +2,7 @@ import { Command } from "@gajae-code/utils/cli";
 export default class Gc extends Command {
     static description: string;
     static strict: boolean;
+    static delegateHelp: boolean;
     static flags: {
         json: import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
             char: string;
@@ -28,6 +29,18 @@ export default class Gc extends Command {
             description: string;
             default: boolean;
         };
+        "empty-delete-receipts": import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
+            description: string;
+            default: boolean;
+        };
+        root: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+            multiple: true;
+        };
+        manifest: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+            multiple: true;
+        };
     };
     static examples: string[];
     run(): Promise<void>;

package/dist/types/commands/launch.d.ts

@@ -2,7 +2,10 @@
  * Root command for the coding agent CLI.
  */
 import { Command } from "@gajae-code/utils/cli";
+import { type LaunchWorktreeReservation } from "../gjc-runtime/launch-worktree-reservation";
 export declare function persistCoordinatorLaunchFailure(error: unknown, cwd: string, env?: NodeJS.ProcessEnv): Promise<void>;
+/** Test seam for the path-keyed atomic reservation. */
+export declare function reserveLaunchWorktreeForTest(agentDir: string, worktreePath: string): Promise<LaunchWorktreeReservation>;
 export default class Index extends Command {
     static description: string;
     static hidden: boolean;
@@ -132,6 +135,13 @@ export default class Index extends Command {
         "no-title": import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
             description: string;
         };
+        master: import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
+            description: string;
+        };
+        scope: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+            options: string[];
+        };
     };
     static examples: string[];
     static strict: boolean;

package/dist/types/commands/model-presets.d.ts

@@ -0,0 +1,21 @@
+import { Command } from "@gajae-code/utils/cli";
+export default class ModelPresets extends Command {
+    static description: string;
+    static args: {
+        action: import("@gajae-code/utils/cli").ArgDescriptor & {
+            description: string;
+            required: false;
+            options: readonly ["status", "refresh", "rollback", "pin", "unpin", "disable", "enable"];
+        };
+        revision: import("@gajae-code/utils/cli").ArgDescriptor & {
+            description: string;
+            required: false;
+        };
+    };
+    static flags: {
+        json: import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
+            description: string;
+        };
+    };
+    run(): Promise<void>;
+}

package/dist/types/config/autorouting-tier-map.d.ts

@@ -784,12 +784,33 @@ export declare const TIER_MAP_SKIP_LIST: {
     readonly "openai-codex/gpt-daybreak-blue-latest": {
         readonly rationale: "post-rebase catalog addition from dev; not yet curated";
     };
+    readonly "opencode-go/deepseek-v4-flash-vision-exp": {
+        readonly rationale: "post-rebase catalog addition from dev; not yet curated";
+    };
+    readonly "opencode-go/glm-5.3-flash": {
+        readonly rationale: "post-rebase catalog addition from dev; not yet curated";
+    };
     readonly "opencode-go/gpt-5.6-luna": {
         readonly rationale: "post-rebase catalog addition from dev; not yet curated";
     };
+    readonly "opencode-go/grok-4.6": {
+        readonly rationale: "post-rebase catalog addition from dev; not yet curated";
+    };
     readonly "opencode-go/hy3": {
         readonly rationale: "post-rebase catalog addition from dev; not yet curated";
     };
+    readonly "opencode-go/hy4-preview": {
+        readonly rationale: "post-rebase catalog addition from dev; not yet curated";
+    };
+    readonly "opencode-go/longcat-2.0": {
+        readonly rationale: "post-rebase catalog addition from dev; not yet curated";
+    };
+    readonly "opencode-go/muse-spark-1.2-contributor": {
+        readonly rationale: "post-rebase catalog addition from dev; not yet curated";
+    };
+    readonly "opencode-go/qwen3.8-flash": {
+        readonly rationale: "post-rebase catalog addition from dev; not yet curated";
+    };
     readonly "opencode-go/qwen3.8-max": {
         readonly rationale: "post-rebase catalog addition from dev; not yet curated";
     };
@@ -1686,6 +1707,9 @@ export declare const TIER_MAP_SKIP_LIST: {
         readonly baseline: true;
         readonly rationale: "pre-feature baseline; not yet curated";
     };
+    readonly "anthropic/claude-fable-5-1": {
+        readonly rationale: "post-feature catalog addition; not yet curated";
+    };
     readonly "anthropic/claude-haiku-4-5-20251001": {
         readonly baseline: true;
         readonly rationale: "pre-feature baseline; not yet curated";
@@ -16821,6 +16845,102 @@ export declare const TIER_MAP_SKIP_LIST: {
         readonly baseline: true;
         readonly rationale: "pre-feature baseline; not yet curated";
     };
+    readonly "kiro/auto": {
+        readonly rationale: "Kiro API-key catalog addition; not yet curated";
+    };
+    readonly "kiro/claude-haiku-4-5": {
+        readonly rationale: "Kiro API-key catalog addition; not yet curated";
+    };
+    readonly "kiro/claude-haiku-4.5": {
+        readonly rationale: "Kiro API-key catalog addition; not yet curated";
+    };
+    readonly "kiro/claude-opus-4-5": {
+        readonly rationale: "Kiro API-key catalog addition; not yet curated";
+    };
+    readonly "kiro/claude-opus-4-6": {
+        readonly rationale: "Kiro API-key catalog addition; not yet curated";
+    };
+    readonly "kiro/claude-opus-4-7": {
+        readonly rationale: "Kiro API-key catalog addition; not yet curated";
+    };
+    readonly "kiro/claude-opus-4-8": {
+        readonly rationale: "Kiro API-key catalog addition; not yet curated";
+    };
+    readonly "kiro/claude-opus-4.5": {
+        readonly rationale: "Kiro API-key catalog addition; not yet curated";
+    };
+    readonly "kiro/claude-opus-4.6": {
+        readonly rationale: "Kiro API-key catalog addition; not yet curated";
+    };
+    readonly "kiro/claude-opus-4.7": {
+        readonly rationale: "Kiro API-key catalog addition; not yet curated";
+    };
+    readonly "kiro/claude-opus-4.8": {
+        readonly rationale: "Kiro API-key catalog addition; not yet curated";
+    };
+    readonly "kiro/claude-opus-5": {
+        readonly rationale: "Kiro API-key catalog addition; not yet curated";
+    };
+    readonly "kiro/claude-sonnet-4": {
+        readonly rationale: "Kiro API-key catalog addition; not yet curated";
+    };
+    readonly "kiro/claude-sonnet-4-5": {
+        readonly rationale: "Kiro API-key catalog addition; not yet curated";
+    };
+    readonly "kiro/claude-sonnet-4-6": {
+        readonly rationale: "Kiro API-key catalog addition; not yet curated";
+    };
+    readonly "kiro/claude-sonnet-4.5": {
+        readonly rationale: "Kiro API-key catalog addition; not yet curated";
+    };
+    readonly "kiro/claude-sonnet-4.6": {
+        readonly rationale: "Kiro API-key catalog addition; not yet curated";
+    };
+    readonly "kiro/claude-sonnet-5": {
+        readonly rationale: "Kiro API-key catalog addition; not yet curated";
+    };
+    readonly "kiro/deepseek-3-2": {
+        readonly rationale: "Kiro API-key catalog addition; not yet curated";
+    };
+    readonly "kiro/deepseek-3.2": {
+        readonly rationale: "Kiro API-key catalog addition; not yet curated";
+    };
+    readonly "kiro/glm-5": {
+        readonly rationale: "Kiro API-key catalog addition; not yet curated";
+    };
+    readonly "kiro/gpt-5-6-luna": {
+        readonly rationale: "Kiro API-key catalog addition; not yet curated";
+    };
+    readonly "kiro/gpt-5-6-sol": {
+        readonly rationale: "Kiro API-key catalog addition; not yet curated";
+    };
+    readonly "kiro/gpt-5-6-terra": {
+        readonly rationale: "Kiro API-key catalog addition; not yet curated";
+    };
+    readonly "kiro/gpt-5.6-luna": {
+        readonly rationale: "Kiro API-key catalog addition; not yet curated";
+    };
+    readonly "kiro/gpt-5.6-sol": {
+        readonly rationale: "Kiro API-key catalog addition; not yet curated";
+    };
+    readonly "kiro/gpt-5.6-terra": {
+        readonly rationale: "Kiro API-key catalog addition; not yet curated";
+    };
+    readonly "kiro/minimax-m2-1": {
+        readonly rationale: "Kiro API-key catalog addition; not yet curated";
+    };
+    readonly "kiro/minimax-m2-5": {
+        readonly rationale: "Kiro API-key catalog addition; not yet curated";
+    };
+    readonly "kiro/minimax-m2.1": {
+        readonly rationale: "Kiro API-key catalog addition; not yet curated";
+    };
+    readonly "kiro/minimax-m2.5": {
+        readonly rationale: "Kiro API-key catalog addition; not yet curated";
+    };
+    readonly "kiro/qwen3-coder-next": {
+        readonly rationale: "Kiro API-key catalog addition; not yet curated";
+    };
 };
 export declare const CURATED_TIER_MAP: AutoroutingCuratedTierMap;
 /** Canonical JSON uses sorted object keys and preserves array order. */