@gajae-code/coding-agent 0.16.7 → 0.17.1

package/dist/types/session/fallback-chain-controller.d.ts

@@ -83,13 +83,11 @@ export declare function cappedExponentialWithFullJitter(baseDelayMs: number, max
 /**
  * Legacy auto-compaction retry delay.
  *
- * Deliberately the mirror image of `effectiveFallbackDelay`: this path recovers
+ * Unlike managed fallback, this path recovers
  * Retry-After by regex over provider error prose (`#parseRetryAfterMsFromError`),
  * so it follows the documented legacy rule — `retry.maxDelayMs` caps every
  * legacy session retry delay, including provider retry-after hints. Managed
- * fallback stays uncapped because it retries within its own per-entry budget;
- * compaction has no such budget, so the final candidate would otherwise sleep
- * for the full server-suggested duration.
+ * fallback ignores these hints when scheduling its attempt-based retries.
  *
  * `maxDelayMs <= 0` means "no cap", matching `cappedExponentialWithFullJitter`.
  * A missing, NaN, or infinite hint collapses to "no usable hint".
@@ -110,5 +108,4 @@ export interface CompactionCandidateFailure {
  * is the final error so callers that classify by type keep the same object.
  */
 export declare function describeCompactionCandidateFailures(failures: readonly CompactionCandidateFailure[], lastError: unknown): Error;
-/** Retry-After is intentionally uncapped. */
-export declare function effectiveFallbackDelay(baseDelayMs: number, maxDelayMs: number, attemptK: number, retryAfterMs: number | undefined, random?: () => number): number;
+export declare function effectiveFallbackDelay(baseDelayMs: number, maxDelayMs: number, attemptK: number, random?: () => number): number;

package/dist/types/session/internal/managed-session-scope.d.ts

@@ -144,6 +144,50 @@ export declare function ensureManagedScope(scope: ManagedScope, policy?: Managed
  */
 /** Re-secure owner-only modes under a managed directory (exported for legacy-local migration). */
 export declare function resecureOwnerOnlyManagedTree(directory: string): void;
+/**
+ * Bound the synchronous mode-only self-heal walk so `session/new` latency stays
+ * independent of the on-disk size of a scope's `v2-<cwd>` tree. A heavily used
+ * scope holds every past session's transcripts plus resident-cache blobs, and an
+ * unbounded `lstat` walk on every prepare made `session/new` take ~16s on a 12 GB
+ * `~/.gjc` (#5565). This is a defense-in-depth mode self-heal, not the primary
+ * owner-only-on-write guarantee, so the *synchronous* detection is budgeted:
+ * truncating it never blocks launch. Detection walks entries in `readdir` order
+ * (freshest writes land near the top on most filesystems), so the common drift
+ * source is caught in-budget. Anything past the budget is NOT assumed
+ * owner-only — a bounded, streaming background self-heal
+ * (`runDeferredOwnerOnlySelfHeal`) finishes the tail off the critical path.
+ *
+ * The owner-only *guarantee* for managed content is not this walk: it is enforced
+ * per-write by the secured storage helpers (see `openManagedStore`). This walk is
+ * best-effort repair of drift introduced by non-managed writers. Because the tail
+ * repair is asynchronous, a truncated scan does not itself prove the tail is
+ * owner-only; the contract it upholds is that the tail is eventually repaired and
+ * that a *provable* failure of that repair — an unrepairable path
+ * (`pendingDeferredOwnerOnlyRepairFailures`) or an aborted traversal
+ * (`deferredOwnerOnlySelfHealTraversalFailures`) — fails the next prepare closed
+ * rather than reporting success over an uninspected or still-drifted tail.
+ */
+export declare const OWNER_ONLY_SELF_HEAL_MAX_ENTRIES = 8192;
+export declare const OWNER_ONLY_SELF_HEAL_MAX_DURATION_MS = 500;
+/** Number of scopes with an in-flight deferred owner-only self-heal (test/shutdown observability). */
+export declare function pendingDeferredOwnerOnlySelfHealCount(): number;
+/** Number of scopes with a recorded deferred owner-only repair failure (test/shutdown observability). */
+export declare function pendingDeferredOwnerOnlyRepairFailureCount(): number;
+/** Number of scopes whose deferred walk aborted before traversing the tree (test/shutdown observability). */
+export declare function pendingDeferredOwnerOnlyTraversalFailureCount(): number;
+/** Await every in-flight deferred owner-only self-heal (deterministic teardown/shutdown). */
+export declare function drainDeferredOwnerOnlySelfHeals(): Promise<void>;
+/**
+ * Detect and repair owner-only mode drift under a prepared managed scope.
+ *
+ * Repair is targeted: only the specific descendants found group/other-readable
+ * within the budget are re-secured — never the whole scope — so one early
+ * readable blob cannot trigger an unbounded re-secure plus another full walk.
+ * When the budget truncates the scan, a bounded background self-heal finishes the
+ * remaining tail so a drifted file beyond the scan prefix is still repaired
+ * rather than silently accepted as owner-only.
+ */
+export declare function selfHealOwnerOnlyModeDrift(directory: string, policy: ManagedSessionSecurityPolicy): void;
 /**
  * True when a managed setup error reflects a fixable owner-only *mode* drift
  * (group/other permission bits) rather than an ownership or identity change.

package/dist/types/session/primary-control-surface.d.ts

@@ -0,0 +1,4 @@
+export type PrimaryControlSurface = "cli" | "sdk";
+/** @internal Trusted CLI bootstrap hook; ordinary SDK callers remain SDK-owned. */
+export declare function setPrimaryControlSurface(options: object, surface: PrimaryControlSurface): void;
+export declare function primaryControlSurfaceFor(options: object): PrimaryControlSurface;

package/dist/types/session/session-manager.d.ts

@@ -1742,6 +1742,12 @@ export declare class SessionManager {
     static list(cwd: string, sessionDir?: string, storage?: SessionStorage): Promise<SessionInfo[]>;
     /**
      * List all sessions across all project directories.
+     *
+     * Scope re-derivation is an enrichment pass, not an admission gate: a seeded
+     * transcript stays listed even when its recorded workspace no longer resolves
+     * (deleted, renamed, unmounted, or recorded by another platform's checkout).
+     * Dropping those would hide readable sessions from `--resume` with no recovery
+     * path, which is exactly when a global lookup matters most.
      */
     static listAll(storage?: SessionStorage, managedAgentDir?: string): Promise<SessionInfo[]>;
     /**

package/dist/types/system-prompt.d.ts

@@ -103,6 +103,12 @@ export interface BuildSystemPromptOptions {
     alwaysApplyRules?: AlwaysApplyRule[];
     /** Whether secret obfuscation is active. When true, explains the redaction format in the prompt. */
     secretsEnabled?: boolean;
+    /**
+     * Whether the `task` tool advertises the `isolated` parameter in this session
+     * (`task.isolation.mode !== "none"`). Worktree routing guidance depends on it:
+     * without isolation the agent must use a plain `git worktree`, never refuse.
+     */
+    taskIsolationEnabled?: boolean;
     /** Pre-loaded workspace tree (skips discovery if provided). May be a Promise to allow early kick-off. */
     workspaceTree?: WorkspaceTree | Promise<WorkspaceTree>;
     /**

package/dist/types/tools/ask.d.ts

@@ -45,6 +45,31 @@ export interface AskToolDetails {
 export declare const OTHER_OPTION = "Other (type your own)";
 export declare const ASK_CLARIFICATION_OPTION = "Ask about these choices";
 export declare const RECOMMENDED_SUFFIX = " (Recommended)";
+/**
+ * Environment override bounding how long a headless ask waits for its answer, in
+ * milliseconds. Unset, empty, non-positive, non-integer, or larger than
+ * {@link MAX_ASK_ANSWER_DEADLINE_MS} disables the bound.
+ */
+export declare const GJC_ASK_ANSWER_DEADLINE_MS_ENV = "GJC_ASK_ANSWER_DEADLINE_MS";
+/**
+ * Largest deadline the runtime timer can represent. `setTimeout` silently clamps
+ * a longer delay to one millisecond, which would invert the contract and abort a
+ * headless ask almost immediately, so a value beyond this is not a usable bound
+ * and is treated as disabled exactly like any other invalid value.
+ */
+export declare const MAX_ASK_ANSWER_DEADLINE_MS = 2147483647;
+/**
+ * How long a headless ask may wait for an answer before it gives up.
+ *
+ * A headless ask has no local selector, so it is answered only by a remote
+ * answer source or by a workflow gate waiting for a remote responder. Neither
+ * channel reports that the question was taken up, so the only observable event
+ * is the answer itself: this is an answer deadline, not an acknowledgement.
+ * `GJC_ASK_ANSWER_DEADLINE_MS` arms it. It stays disabled by default: an
+ * attended remote responder may legitimately answer arbitrarily late, and
+ * silently cutting such a wait short would corrupt a real answer into an abort.
+ */
+export declare function resolveAskAnswerDeadlineMs(env?: Record<string, string | undefined>): number | null;
 export declare const MAX_EMPTY_CUSTOM_ATTEMPTS = 3;
 export declare function validRecommendedIndex(recommended: number | undefined, optionCount: number): number | undefined;
 /** The only remote navigation control; labels are presentation, never protocol. */

package/dist/types/tools/image-gen.d.ts

@@ -125,8 +125,6 @@ interface InlineImageData {
     data: string;
     mimeType: string;
 }
-/** Provider → default image model mapping for fallbacks */
-export declare const IMAGE_PROVIDER_DEFAULTS: Record<string, string>;
 /**
  * Resolve the image-generation model from the `modelRoles.image` settings entry.
  * Returns the resolved Model (with provider identity) or undefined when no
@@ -136,8 +134,6 @@ export declare function resolveImageRoleModel(settings: ModelRoleSettings, model
     sessionId?: string;
     credentialSessionId?: string;
 }): Model | undefined;
-/** Resolve the effective image model for a configured provider */
-export declare function resolveImageModel(provider: string, modelOverride: string | null): string;
 /** Test seam: the Google image key fallback as resolved from trusted env. */
 export declare function googleImageApiKeyFromEnvForTest(): string | undefined;
 export declare function isOpenAIHostedImageModel(model: Model | undefined): boolean;

package/dist/types/tools/skill-discovery.d.ts

@@ -16,10 +16,12 @@ export interface SkillDiscoveryToolDetails {
     candidates: RuntimeSkillDiscoveryCandidate[];
     count: number;
     /**
-     * Present only when zero candidates were returned AND discovery config gates
-     * (`skills.enabled` / `skills.trustProjectSkills` / `skills.trustUserSkills`)
-     * prevented some or all of the requested scope from being searched. Without
-     * this, a disabled config is indistinguishable from "no skills exist".
+     * Present only when zero candidates were returned. Either discovery config
+     * gates (`skills.enabled` / `skills.trustProjectSkills` /
+     * `skills.trustUserSkills`) prevented some or all of the requested scope from
+     * being searched, a non-empty query filtered out every scanned skill, or
+     * diagnostics were produced for observed skills that were skipped or filtered.
+     * Without this, these cases are indistinguishable from "no skills exist".
      */
     notice?: string;
     /**
@@ -34,7 +36,7 @@ export declare class SkillDiscoveryTool implements AgentTool<typeof skillDiscove
     #private;
     readonly name = "skill_discovery";
     readonly label = "SkillDiscovery";
-    readonly summary = "Discover project and user runtime skills by thin metadata";
+    readonly summary = "Discover bundled GJC workflow, project, and user runtime skills by thin metadata";
     readonly loadMode = "essential";
     readonly description: string;
     readonly parameters: z.ZodObject<{

package/dist/types/tools/ultragoal-ask-guard.d.ts

@@ -1,10 +1,13 @@
 import type { AgentTool } from "@gajae-code/agent-core";
 import { type UltragoalAskBlockDiagnostic } from "../gjc-runtime/ultragoal-guard";
 export interface UltragoalAskGuardContext {
-    activeSkillState?: {
-        skill?: string;
-        session_id?: string;
-    } | null;
+    /**
+     * GJC session id of the session asking the question. This is the guard's only
+     * identity input: durable Ultragoal state and the nudge budget are bound to it
+     * exclusively. Active-skill metadata is deliberately NOT part of this context —
+     * a snapshot restored from another session carries that session's id, and
+     * treating it as the caller's identity leaked a foreign run into the guard.
+     */
     sessionId?: string | null;
 }
 export declare function formatUltragoalAskBlockMessage(diagnostic: UltragoalAskBlockDiagnostic): string;

package/dist/types/utils/changelog.d.ts

@@ -15,15 +15,6 @@ export declare function parseChangelogContent(content: string): ChangelogEntry[]
  * Returns [] on ENOENT; logs and returns [] on other read/parse errors.
  */
 export declare function parseChangelog(changelogPath: string): Promise<ChangelogEntry[]>;
-/**
- * Return changelog entries from the CHANGELOG.md that shipped with this binary.
- *
- * The text is embedded at build time via `with { type: "text" }`, so the
- * displayed changelog is deterministic across compiled binaries, source-tree
- * dev runs, and `GJC_PACKAGE_DIR` / `PI_PACKAGE_DIR` overrides (which scope to
- * optional package assets like docs/examples and do not influence the
- * binary-identity changelog).
- */
 export declare function getDisplayChangelogEntries(): ChangelogEntry[];
 export declare function getInstalledVersionChangelogEntry(entries: readonly ChangelogEntry[], installedVersion: string): ChangelogEntry | undefined;
 /**

package/dist/types/utils/mupdf-wasm.d.ts

@@ -0,0 +1 @@
+export declare function ensureMupdfWasmResolution(): void;

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@gajae-code/coding-agent",
-	"version": "0.16.7",
+	"version": "0.17.1",
 	"description": "Gajae Code CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://gajae-code.com",
 	"author": "Yeachan-Heo and Gajae Code Contributors",
@@ -55,13 +55,13 @@
 	"dependencies": {
 		"@agentclientprotocol/sdk": "1.3.0",
 		"@babel/parser": "^7.29.3",
+		"@gajae-code/agent-core": "0.17.1",
+		"@gajae-code/ai": "0.17.1",
+		"@gajae-code/natives": "0.17.1",
+		"@gajae-code/stats": "0.17.1",
+		"@gajae-code/tui": "0.17.1",
+		"@gajae-code/utils": "0.17.1",
 		"@mozilla/readability": "^0.6.0",
-		"@gajae-code/stats": "0.16.7",
-		"@gajae-code/agent-core": "0.16.7",
-		"@gajae-code/ai": "0.16.7",
-		"@gajae-code/natives": "0.16.7",
-		"@gajae-code/tui": "0.16.7",
-		"@gajae-code/utils": "0.16.7",
 		"@puppeteer/browsers": "^2.13.0",
 		"@types/turndown": "5.0.6",
 		"@xterm/headless": "^6.0.0",
@@ -69,10 +69,11 @@
 		"diff": "^9.0.0",
 		"fflate": "0.8.2",
 		"handlebars": "^4.7.9",
+		"jsonc-parser": "3.3.1",
 		"linkedom": "^0.18.12",
 		"lru-cache": "11.3.6",
-		"markit-ai": "0.5.3",
 		"marked": "18.0.6",
+		"markit-ai": "0.5.3",
 		"puppeteer-core": "^24.42.0",
 		"turndown": "7.2.4",
 		"turndown-plugin-gfm": "1.0.2",

package/scripts/compile-args.ts

@@ -18,7 +18,14 @@ const compiledDefineFlags = ['process.env.PI_COMPILED="true"'];
 const releaseDefineFlags = [...compiledDefineFlags, 'process.env.GJC_BUILD_CHANNEL="release"'];
 const devDefineFlags = [...compiledDefineFlags, 'process.env.GJC_BUILD_CHANNEL="dev"'];
 
-export const compiledExternalPackages = ["mupdf"];
+// NOTE: mupdf must NOT be marked --external here. Compiled binaries cannot
+// resolve bare "mupdf" imports (and its Emscripten loader cannot find the
+// wasm asset inside the bunfs), which broke markit PDF conversion in every
+// standalone release (#5433). mupdf is bundled instead: its wasm is embedded
+// via `with { type: "file" }` and routed to the loader through the hook in
+// packages/coding-agent/src/utils/mupdf-wasm.ts, and the bundled
+// `require("mupdf")` inside markit-ai is replaced by the patch in
+// patches/markit-ai@0.5.3.patch.
 
 export const releaseEntrypoints = [
 	"./packages/coding-agent/src/cli.ts",
@@ -61,8 +68,6 @@ export function buildReleaseCompileArgs(target: string, outfile: string): string
 		outfile,
 		target,
 		defines: releaseDefineFlags,
-
-		externals: compiledExternalPackages,
 	});
 }
 
@@ -72,7 +77,6 @@ export function buildDevCompileArgs(outfile = "dist/gjc"): string[] {
 		entrypoints: devEntrypoints,
 		outfile,
 		defines: devDefineFlags,
-		externals: compiledExternalPackages,
 	});
 }