@gajae-code/coding-agent 0.16.7 → 0.17.1

package/dist/types/cli-main.d.ts

@@ -0,0 +1,174 @@
+#!/usr/bin/env bun
+/**
+ * CLI entry point — registers all commands explicitly and delegates to the
+ * lightweight CLI runner from pi-utils.
+ */
+import "@gajae-code/utils/postmortem";
+import { Command, type CommandEntry } from "@gajae-code/utils/cli";
+export declare const commands: CommandEntry[];
+export declare function interactiveBootstrapText(argv: readonly string[], stdinIsTTY?: boolean, stdoutIsTTY?: boolean): string | undefined;
+type MemoryGuardNativeSmokeLoad = () => Record<string, unknown>;
+export declare function isMemoryGuardNativeSmokeFastPath(argv: readonly string[]): boolean;
+export declare function runMemoryGuardNativeSmokeFastPath(options?: {
+    loadNative?: MemoryGuardNativeSmokeLoad;
+    writeStdout?: (text: string) => void;
+}): void;
+export declare class RootHelpCommand extends Command {
+    static description: string;
+    static hidden: boolean;
+    static args: {
+        messages: import("@gajae-code/utils/cli").ArgDescriptor & {
+            description: string;
+            required: false;
+            multiple: true;
+        };
+    };
+    static flags: {
+        model: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+        };
+        smol: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+        };
+        slow: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+        };
+        plan: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+        };
+        mpreset: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+        };
+        default: import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
+            description: string;
+        };
+        provider: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+        };
+        "api-key": import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+        };
+        credential: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+        };
+        "prefer-credential": import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+        };
+        "system-prompt": import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+        };
+        "append-system-prompt": import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+        };
+        "mcp-config": import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+        };
+        "no-mcp": import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
+            description: string;
+        };
+        "clipboard-transport": import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+            options: string[];
+        };
+        "clipboard-ssh-host": import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+        };
+        "allow-home": import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
+            description: string;
+        };
+        mode: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+            options: string[];
+        };
+        print: import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
+            char: string;
+            description: string;
+        };
+        continue: import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
+            char: string;
+            description: string;
+        };
+        resume: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            char: string;
+            description: string;
+            optionalValue: true;
+        };
+        fork: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+        };
+        worktree: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            char: string;
+            description: string;
+            optionalValue: true;
+        };
+        "session-dir": import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+        };
+        "no-session": import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
+            description: string;
+        };
+        models: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+        };
+        "no-tools": import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
+            description: string;
+        };
+        "no-lsp": import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
+            description: string;
+        };
+        "no-pty": import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
+            description: string;
+        };
+        tmux: import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
+            description: string;
+        };
+        tools: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+        };
+        thinking: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+            options: readonly ["off", ...import("@gajae-code/ai").Effort[]];
+        };
+        "no-rules": import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
+            description: string;
+        };
+        export: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+        };
+        "list-models": import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+            optionalValue: true;
+        };
+        "no-title": import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
+            description: string;
+        };
+        master: import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
+            description: string;
+        };
+        scope: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+            options: string[];
+        };
+    };
+    static examples: string[];
+    static strict: boolean;
+    run(): Promise<void>;
+}
+/** Normalize the sole `gjc resume` alias into the value-less launch intent. */
+export declare function normalizeResumeAlias(argv: readonly string[]): string[];
+/**
+ * Map the common mistaken `models` subcommand spelling to non-agent listing.
+ *
+ * Agents frequently run `gjc models` from the bash tool expecting a catalog.
+ * Without this route, `models` was a positional launch prompt and nested agents
+ * re-invoked `gjc models`, spawning an unbounded process chain (#3857).
+ * Always rewrite to `launch --list-models` so the invocation exits after a
+ * bounded listing and never starts an interactive agent session.
+ */
+export declare function routeModelsAlias(argv: readonly string[]): string[] | undefined;
+/** Apply the same default-launch routing used by runCli after root fast paths. */
+export declare function routeRootArgv(argv: readonly string[]): string[];
+/** Run the CLI with the given argv (no `process.argv` prefix). */
+export declare function runCliAfterAdmission(argv: string[]): Promise<void>;
+export declare const runCli: typeof runCliAfterAdmission;
+export {};

package/dist/types/cli.d.ts

@@ -1,173 +1,3 @@
 #!/usr/bin/env bun
-/**
- * CLI entry point — registers all commands explicitly and delegates to the
- * lightweight CLI runner from pi-utils.
- */
-import "@gajae-code/utils/postmortem";
-import { Command, type CommandEntry } from "@gajae-code/utils/cli";
-export declare const commands: CommandEntry[];
-export declare function interactiveBootstrapText(argv: readonly string[], stdinIsTTY?: boolean, stdoutIsTTY?: boolean): string | undefined;
-type MemoryGuardNativeSmokeLoad = () => Record<string, unknown>;
-export declare function isMemoryGuardNativeSmokeFastPath(argv: readonly string[]): boolean;
-export declare function runMemoryGuardNativeSmokeFastPath(options?: {
-    loadNative?: MemoryGuardNativeSmokeLoad;
-    writeStdout?: (text: string) => void;
-}): void;
-export declare class RootHelpCommand extends Command {
-    static description: string;
-    static hidden: boolean;
-    static args: {
-        messages: import("@gajae-code/utils/cli").ArgDescriptor & {
-            description: string;
-            required: false;
-            multiple: true;
-        };
-    };
-    static flags: {
-        model: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
-            description: string;
-        };
-        smol: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
-            description: string;
-        };
-        slow: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
-            description: string;
-        };
-        plan: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
-            description: string;
-        };
-        mpreset: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
-            description: string;
-        };
-        default: import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
-            description: string;
-        };
-        provider: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
-            description: string;
-        };
-        "api-key": import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
-            description: string;
-        };
-        credential: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
-            description: string;
-        };
-        "prefer-credential": import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
-            description: string;
-        };
-        "system-prompt": import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
-            description: string;
-        };
-        "append-system-prompt": import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
-            description: string;
-        };
-        "mcp-config": import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
-            description: string;
-        };
-        "no-mcp": import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
-            description: string;
-        };
-        "clipboard-transport": import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
-            description: string;
-            options: string[];
-        };
-        "clipboard-ssh-host": import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
-            description: string;
-        };
-        "allow-home": import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
-            description: string;
-        };
-        mode: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
-            description: string;
-            options: string[];
-        };
-        print: import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
-            char: string;
-            description: string;
-        };
-        continue: import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
-            char: string;
-            description: string;
-        };
-        resume: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
-            char: string;
-            description: string;
-            optionalValue: true;
-        };
-        fork: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
-            description: string;
-        };
-        worktree: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
-            char: string;
-            description: string;
-            optionalValue: true;
-        };
-        "session-dir": import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
-            description: string;
-        };
-        "no-session": import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
-            description: string;
-        };
-        models: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
-            description: string;
-        };
-        "no-tools": import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
-            description: string;
-        };
-        "no-lsp": import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
-            description: string;
-        };
-        "no-pty": import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
-            description: string;
-        };
-        tmux: import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
-            description: string;
-        };
-        tools: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
-            description: string;
-        };
-        thinking: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
-            description: string;
-            options: readonly ["off", ...import("@gajae-code/ai").Effort[]];
-        };
-        "no-rules": import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
-            description: string;
-        };
-        export: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
-            description: string;
-        };
-        "list-models": import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
-            description: string;
-            optionalValue: true;
-        };
-        "no-title": import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
-            description: string;
-        };
-        master: import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
-            description: string;
-        };
-        scope: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
-            description: string;
-            options: string[];
-        };
-    };
-    static examples: string[];
-    static strict: boolean;
-    run(): Promise<void>;
-}
-/** Normalize the sole `gjc resume` alias into the value-less launch intent. */
-export declare function normalizeResumeAlias(argv: readonly string[]): string[];
-/**
- * Map the common mistaken `models` subcommand spelling to non-agent listing.
- *
- * Agents frequently run `gjc models` from the bash tool expecting a catalog.
- * Without this route, `models` was a positional launch prompt and nested agents
- * re-invoked `gjc models`, spawning an unbounded process chain (#3857).
- * Always rewrite to `launch --list-models` so the invocation exits after a
- * bounded listing and never starts an interactive agent session.
- */
-export declare function routeModelsAlias(argv: readonly string[]): string[] | undefined;
-/** Apply the same default-launch routing used by runCli after root fast paths. */
-export declare function routeRootArgv(argv: readonly string[]): string[];
-/** Run the CLI with the given argv (no `process.argv` prefix). */
+/** Run the CLI with argv excluding process.argv prefix. */
 export declare function runCli(argv: string[]): Promise<void>;
-export {};

package/dist/types/commands/doctor.d.ts

@@ -0,0 +1,7 @@
+import { Command } from "@gajae-code/utils/cli";
+export default class Doctor extends Command {
+    static description: string;
+    static strict: boolean;
+    static examples: string[];
+    run(): Promise<void>;
+}

package/dist/types/commands/sdk.d.ts

@@ -5,18 +5,27 @@ import { type SessionLifecycleLaunchRequest } from "../sdk/broker/lifecycle";
 import { SessionManager } from "../session/session-manager";
 export declare function lifecycleArgs(request: SessionLifecycleLaunchRequest, cwd: string, agentDir: string): Promise<ParsedArgs>;
 /**
- * How long a session host tolerates the complete absence of a live broker
- * publication before treating itself as orphaned. Hosts intentionally survive
- * broker restarts (a replacement broker republishes discovery within seconds),
- * so this must comfortably exceed a restart window while still bounding the
- * lifetime of hosts whose broker is gone for good — otherwise every crashed or
+ * How long a session host tolerates losing the broker it was launched under
+ * before treating itself as orphaned.
+ *
+ * A host is reachable only through its own broker: routing lives in the broker
+ * process and a replacement broker never adopts hosts from an earlier
+ * incarnation, so a host that outlives its broker is stranded no matter how
+ * healthy the agent directory looks afterwards. The grace still has to outlast
+ * a restart-shaped gap, because a broker that is merely slow to republish must
+ * never cost a live host — but it must stay finite, or every crashed or
  * torn-down broker leaks a detached multi-hundred-megabyte host forever.
  */
 export declare const SESSION_HOST_BROKER_ABSENCE_GRACE_MS: number;
 /**
- * Resolves only once no live broker publication has been observable in
- * `agentDir` for the full grace window. A reappearing broker (including a
- * replacement with a different pid) resets the window; an unreadable
+ * Resolves only once the broker this host was launched under has been
+ * unobservable for the full grace window.
+ *
+ * The first identifiable publication pins that broker. A later publication from
+ * a different incarnation is a replacement, and a replacement cannot route to
+ * this host — observing one is evidence of being stranded, not of being alive —
+ * so it accrues against the bound instead of resetting it. Only the pinned
+ * broker reappearing resets the window. An unreadable or unidentifiable
  * publication is not proof of orphanhood but accrues against the same bound.
  */
 export declare function watchSessionHostBrokerLiveness(deps: {

package/dist/types/config/autorouting-tier-map.d.ts

@@ -811,6 +811,9 @@ export declare const TIER_MAP_SKIP_LIST: {
     readonly "opencode-go/muse-spark-1.2-contributor": {
         readonly rationale: "post-rebase catalog addition from dev; not yet curated";
     };
+    readonly "opencode-go/muse-spark-1.3-contributor": {
+        readonly rationale: "catalog addition from PR #5485; not yet curated";
+    };
     readonly "opencode-go/qwen3.8-flash": {
         readonly rationale: "post-rebase catalog addition from dev; not yet curated";
     };
@@ -12157,6 +12160,14 @@ export declare const TIER_MAP_SKIP_LIST: {
         readonly baseline: true;
         readonly rationale: "multimodal catalog addition; not yet curated";
     };
+    readonly "openai-codex/gpt-image-2.5-flare": {
+        readonly baseline: true;
+        readonly rationale: "multimodal catalog addition; not yet curated";
+    };
+    readonly "openai-codex/gpt-image-2.5-sunburst": {
+        readonly baseline: true;
+        readonly rationale: "multimodal catalog addition; not yet curated";
+    };
     readonly "openai/codex-mini-latest": {
         readonly baseline: true;
         readonly rationale: "pre-feature baseline; not yet curated";
@@ -12317,6 +12328,14 @@ export declare const TIER_MAP_SKIP_LIST: {
         readonly baseline: true;
         readonly rationale: "multimodal catalog addition; not yet curated";
     };
+    readonly "openai/gpt-image-2.5-flare": {
+        readonly baseline: true;
+        readonly rationale: "multimodal catalog addition; not yet curated";
+    };
+    readonly "openai/gpt-image-2.5-sunburst": {
+        readonly baseline: true;
+        readonly rationale: "multimodal catalog addition; not yet curated";
+    };
     readonly "openai/gpt-realtime-2.1": {
         readonly baseline: true;
         readonly rationale: "pre-feature baseline; not yet curated";

package/dist/types/config/file-lock.d.ts

@@ -11,14 +11,34 @@ export interface FileLockOptions {
     /** Previous local host identities accepted only when deciding stale-owner reclamation. */
     previousOwnerHostIds?: readonly string[];
 }
+export type FileLockAcquireReason = "acquire_timeout" | "orphan_transition";
+/**
+ * Why the acquire path could not retire a lock directory whose owner it had already
+ * proven dead. Attached to `FileLockAcquireError` so a host whose lock-removal path
+ * refuses the directory is not misreported as a live or unreaped owner. The acquire
+ * loop still contends after a refusal (a concurrent reclaimer may finish the same dead
+ * generation); this records the cause that exhaustion must report.
+ */
+export interface FileLockStaleRemovalFailure {
+    /** Guarded-removal outcome the acquire path can record, or `"error"` when the removal attempt threw. */
+    outcome: "cleanup_failed" | "error";
+    /** Native/errno code carried by the refusal, when one was present. */
+    code?: string;
+    /** Human-readable cause surfaced to the operator at exhaustion. */
+    message: string;
+}
 export declare class FileLockAcquireError extends Error {
     readonly filePath: string;
     readonly lockPath: string;
     readonly attempts: number;
     readonly holder: string;
-    readonly code = "acquire_timeout";
-    constructor(filePath: string, lockPath: string, attempts: number, holder: string);
+    readonly reason: FileLockAcquireReason;
+    readonly orphanPath?: string | undefined;
+    readonly removalFailure?: FileLockStaleRemovalFailure | undefined;
+    readonly code: FileLockAcquireReason;
+    constructor(filePath: string, lockPath: string, attempts: number, holder: string, reason?: FileLockAcquireReason, orphanPath?: string | undefined, removalFailure?: FileLockStaleRemovalFailure | undefined);
 }
+export declare function isFileLockAcquireTimeout(error: unknown): error is FileLockAcquireError;
 /** Release retries cover transient handle denial and a competing exact-removal quarantine cleanup. */
 export declare const FILE_LOCK_RELEASE_RETRY_ATTEMPTS = 20;
 export declare const FILE_LOCK_RELEASE_RETRY_DELAY_MS = 25;
@@ -29,6 +49,7 @@ export declare const FileLockTestHooks: {
         renameDirectoryNoReplacePathAsync: typeof renameDirectoryNoReplacePathAsync;
     };
     nativeQuarantineBindings?: () => NativeFileLockBindings;
+    nativeExactRemovalProbe?: () => boolean | Promise<boolean>;
 };
 /**
  * Returns the OS-provided process start timestamp for PID-reuse detection.
@@ -131,7 +152,10 @@ export declare function genericFileLockDirIsStale(lockDir: string, staleMs: numb
 export declare function genericFileLockDirStaleVerdict(lockDir: string, staleMs: number, ownerHostId?: string): Promise<GenericFileLockDirStaleVerdict>;
 type NativeFileLockBindings = {
     snapshotDirectoryTree(lockPath: string): NativeDirectoryTreeResult;
-    exactRemoveDirectoryTree(lockPath: string, snapshot: NonNullable<NativeDirectoryTreeResult["snapshot"]>): NativeExactUnlinkResult;
+    exactRemoveDirectoryTree(lockPath: string, snapshot: NonNullable<NativeDirectoryTreeResult["snapshot"]>, parentIdentity?: {
+        dev: bigint;
+        ino: bigint;
+    }, detachOnly?: boolean): NativeExactUnlinkResult;
 };
 export declare function acquireFileLock(filePath: string, options?: FileLockOptions): Promise<() => Promise<void>>;
 /**

package/dist/types/config/model-preset-registry.d.ts

@@ -125,6 +125,7 @@ export declare const ModelPresetRegistryPresetsSchema: z.ZodObject<{
             "azure-openai-responses": "azure-openai-responses";
             "bedrock-converse-stream": "bedrock-converse-stream";
             "cursor-agent": "cursor-agent";
+            "devin-acp": "devin-acp";
             "google-gemini-cli": "google-gemini-cli";
             "google-generative-ai": "google-generative-ai";
             "google-vertex": "google-vertex";

package/dist/types/config/model-registry.d.ts

@@ -64,7 +64,7 @@ export declare const ModelsConfigFile: ConfigFile<{
         baseUrl?: string | undefined;
         apiKey?: string | undefined;
         apiKeyEnv?: string | undefined;
-        api?: "anthropic-messages" | "azure-openai-responses" | "bedrock-converse-stream" | "cursor-agent" | "google-gemini-cli" | "google-generative-ai" | "google-vertex" | "ollama-chat" | "openai-codex-responses" | "openai-completions" | "openai-responses" | undefined;
+        api?: "anthropic-messages" | "azure-openai-responses" | "bedrock-converse-stream" | "cursor-agent" | "devin-acp" | "google-gemini-cli" | "google-generative-ai" | "google-vertex" | "ollama-chat" | "openai-codex-responses" | "openai-completions" | "openai-responses" | undefined;
         headers?: Record<string, string> | undefined;
         compat?: {
             supportsStore?: boolean | undefined;
@@ -129,7 +129,7 @@ export declare const ModelsConfigFile: ConfigFile<{
         models?: {
             id: string;
             name?: string | undefined;
-            api?: "anthropic-messages" | "azure-openai-responses" | "bedrock-converse-stream" | "cursor-agent" | "google-gemini-cli" | "google-generative-ai" | "google-vertex" | "ollama-chat" | "openai-codex-responses" | "openai-completions" | "openai-responses" | undefined;
+            api?: "anthropic-messages" | "azure-openai-responses" | "bedrock-converse-stream" | "cursor-agent" | "devin-acp" | "google-gemini-cli" | "google-generative-ai" | "google-vertex" | "ollama-chat" | "openai-codex-responses" | "openai-completions" | "openai-responses" | undefined;
             baseUrl?: string | undefined;
             reasoning?: boolean | undefined;
             thinking?: {
@@ -372,9 +372,9 @@ export declare class ModelRegistry {
     /**
      * Reload models from disk and refresh runtime provider discovery state.
      */
-    refresh(strategy?: ModelRefreshStrategy): Promise<void>;
-    refreshInBackground(strategy?: ModelRefreshStrategy): void;
-    refreshProvider(providerId: string, strategy?: ModelRefreshStrategy): Promise<void>;
+    refresh(strategy?: ModelRefreshStrategy, credentialSessionId?: string): Promise<void>;
+    refreshInBackground(strategy?: ModelRefreshStrategy, credentialSessionId?: string): void;
+    refreshProvider(providerId: string, strategy?: ModelRefreshStrategy, credentialSessionId?: string): Promise<void>;
     admitCachedProviderForStoredLiteralCredential(providerId: string, selector: AuthCredentialSelector): boolean;
     /** @internal Validate an existing startup model without mutating a caller-supplied registry. */
     validateModelForStoredLiteralCredential(providerId: string, modelId: string, selector: AuthCredentialSelector): boolean;
@@ -541,6 +541,13 @@ export declare class ModelRegistry {
     hasConfiguredProviderAuth(provider: string): boolean;
     isCredentiallessProvider(provider: string): boolean;
     getDiscoverableProviders(): string[];
+    /**
+     * Providers whose catalogs can be filled by bounded official refresh:
+     * configured discovery, built-in special OAuth dynamics, and standard
+     * descriptor-backed providers. Unknown ids stay excluded. Disabled
+     * providers are omitted. UI tabs still use getDiscoverableProviders.
+     */
+    getRefreshableProviders(): string[];
     getProviderDiscoveryState(provider: string): ProviderDiscoveryState | undefined;
     /**
      * Find a model by provider and ID.

package/dist/types/config/model-resolver.d.ts

@@ -41,7 +41,7 @@ export declare function resolveStartupModelRefreshSelectors(options: {
     resume?: string | boolean;
     hasStartupProfile: boolean;
 }, settings: ModelRoleSettings): ModelSelectorValue | undefined;
-export declare function refreshMissingQualifiedModelProviders(selectors: ModelSelectorValue | undefined, modelRegistry: Pick<ModelRegistry, "getAvailable" | "getDiscoverableProviders" | "refreshProvider">): Promise<boolean>;
+export declare function refreshMissingQualifiedModelProviders(selectors: ModelSelectorValue | undefined, modelRegistry: Pick<ModelRegistry, "getAvailable" | "getRefreshableProviders" | "refreshProvider">): Promise<boolean>;
 /**
  * Format a model as "provider/modelId" string.
  */
@@ -173,9 +173,12 @@ export declare function resolveModelChainWithAuth(modelPatterns: readonly string
         reason: string;
     }>;
 }>;
+export declare function isExplicitProviderModelSelector(pattern: string): boolean;
+export declare function isExplicitProviderModelOverride(modelPatterns: readonly string[]): boolean;
 /**
  * Resolve a list of override patterns to the first matching model, with an
- * auth-aware fallback to the parent session's active model.
+ * auth-aware fallback to the parent session's active model for unqualified
+ * aliases and role patterns.
  *
  * If the resolved subagent model has no working credentials (provider has no
  * usable auth), and the parent's active model resolves with working auth,
@@ -184,6 +187,14 @@ export declare function resolveModelChainWithAuth(modelPatterns: readonly string
  * `modelRoles.task` pointing at an unqualified id whose only available
  * provider variant has no configured credentials — see #985).
  *
+ * Explicit `provider/model` selectors (including user-specified chains of
+ * them) fail closed instead: a missing catalog entry or authentication
+ * failure must not substitute the parent session's model or another
+ * provider. Intentional chain tails still apply in order. Mixed chains that
+ * include any unqualified/role entry keep parent fallback for the whole
+ * chain, including explicit heads. Glob selectors (`*`, `?`, `[`) are not
+ * exact pins.
+ *
  * Keyless-by-design providers (llama.cpp, ollama, lm-studio) advertise the
  * `kNoAuth` sentinel from `getApiKey` to signal that they do not require
  * credentials. Those are treated as authenticated here so an explicitly
@@ -192,7 +203,9 @@ export declare function resolveModelChainWithAuth(modelPatterns: readonly string
  *
  * If neither the subagent nor the parent has working auth, returns the
  * primary resolution unchanged so the existing error path still surfaces
- * a meaningful failure downstream.
+ * a meaningful failure downstream. Explicit-only chains return no model
+ * so callers can surface an actionable error. Canonical parent seeding is
+ * independent of that fail-closed substitution guard.
  */
 export declare function resolveModelOverrideWithAuthFallback(modelPatterns: string[], parentActiveModelPattern: string | undefined, modelRegistry: ModelLookupRegistry & Pick<ModelRegistry, "getApiKey">, settings?: Settings, authSessionId?: string, options?: ModelChainResolutionOptions, canonicalSessionId?: string): Promise<{
     model?: Model<Api>;

package/dist/types/config/models-config-schema.d.ts

@@ -381,6 +381,7 @@ export declare const ModelsConfigSchema: z.ZodObject<{
             "azure-openai-responses": "azure-openai-responses";
             "bedrock-converse-stream": "bedrock-converse-stream";
             "cursor-agent": "cursor-agent";
+            "devin-acp": "devin-acp";
             "google-gemini-cli": "google-gemini-cli";
             "google-generative-ai": "google-generative-ai";
             "google-vertex": "google-vertex";
@@ -505,6 +506,7 @@ export declare const ModelsConfigSchema: z.ZodObject<{
                 "azure-openai-responses": "azure-openai-responses";
                 "bedrock-converse-stream": "bedrock-converse-stream";
                 "cursor-agent": "cursor-agent";
+                "devin-acp": "devin-acp";
                 "google-gemini-cli": "google-gemini-cli";
                 "google-generative-ai": "google-generative-ai";
                 "google-vertex": "google-vertex";

package/dist/types/config/settings-schema.d.ts

@@ -209,7 +209,7 @@ export declare const SETTINGS_SCHEMA: {
     };
     readonly "sdk.promptDeadlineMs": {
         readonly type: "number";
-        readonly default: 1800000;
+        readonly default: 3600000;
         readonly description: "SDK-owned prompt deadline; ACP has no separate timeout.";
         readonly validate: (value: number) => boolean;
     };

package/dist/types/coordinator-mcp/question-gate-codec.d.ts

@@ -1,5 +1,5 @@
 import type { JsonSchema, WorkflowGate } from "../modes/shared/agent-wire/workflow-gate-types";
-export type PublicReason = "unsupported_gate" | "query_unavailable" | "pagination_malformed" | "row_unrepresentable" | "missing_runtime_turn" | "invalid_runtime_turn" | "invalid_gate_row" | "wrong_session" | "ownership_unavailable" | "ownership_conflict" | "gate_provenance_changed" | "turn_terminal" | "endpoint_changed" | "terminal_race" | "terminal_uncertain" | "session_closing" | "session_unavailable" | "reported_failure" | "validation_rejected" | "dispatch_admission_lost";
+export type PublicReason = "unsupported_gate" | "query_unavailable" | "pagination_malformed" | "row_unrepresentable" | "missing_runtime_turn" | "pending_registration" | "invalid_runtime_turn" | "invalid_gate_row" | "wrong_session" | "ownership_unavailable" | "ownership_conflict" | "gate_provenance_changed" | "turn_terminal" | "endpoint_changed" | "terminal_race" | "terminal_uncertain" | "session_closing" | "session_unavailable" | "reported_failure" | "validation_rejected" | "dispatch_admission_lost";
 export type CoordinatorQuestionStatusV1 = "pending" | "answered" | "stale" | "uncertain";
 export interface CoordinatorQuestionOptionPublicV1 {
     id: string;