@gajae-code/coding-agent 0.17.2 → 0.17.4

package/dist/types/cli/public-command-help.d.ts

@@ -0,0 +1,65 @@
+import { type PublicCommandDescriptor, type PublicHelpSection } from "./public-command-registry";
+export declare const PUBLIC_HELP_MAX_BYTES = 8192;
+export interface PublicHelpOptions {
+    json?: boolean;
+    section?: string;
+    page?: string | number;
+    revision?: string;
+}
+export type PublicHelpErrorCode = "unknown_command" | "invalid_section" | "invalid_page" | "invalid_revision" | "revision_mismatch" | "static_metadata_too_large" | "invalid_registry";
+export declare class PublicHelpError extends Error {
+    readonly code: PublicHelpErrorCode;
+    readonly exitCode: 2 | 1;
+    constructor(code: PublicHelpErrorCode);
+}
+export interface PublicHelpEntry {
+    id: string;
+    kind: "overview" | "usage" | "child" | "argument" | "option" | "example" | "recovery";
+    complete: true;
+    value: unknown;
+}
+export interface PublicHelpFragment {
+    id: string;
+    kind: "fragment";
+    complete: false;
+    encoding: "base64";
+    offsetBytes: number;
+    totalBytes: number;
+    sha256: string;
+    data: string;
+}
+export interface PublicHelpNext {
+    section: PublicHelpSection;
+    page: number;
+    executable: "gjc";
+    argv: string[];
+}
+export interface PublicHelpDocument {
+    schema: "gjc.command-help";
+    version: 1;
+    ok: true;
+    command: readonly string[];
+    canonicalCommand: readonly string[];
+    revision: string;
+    section: PublicHelpSection;
+    page: number;
+    sections: readonly PublicHelpSection[];
+    entries: readonly (PublicHelpEntry | PublicHelpFragment)[];
+    sectionComplete: boolean;
+    documentComplete: boolean;
+    next: PublicHelpNext | null;
+}
+export interface PublicHelpRenderResult {
+    /** Complete serialization including its single trailing newline. No output is written. */
+    output: string;
+    bytes: number;
+    document: PublicHelpDocument;
+}
+/** The digest covers every descriptor and this renderer's paging/schema policy. */
+export declare function getPublicHelpRevision(registry?: readonly PublicCommandDescriptor[]): string;
+/**
+ * Pure command-local rendering. Each page holds one complete entry or one byte fragment;
+ * empty sections still have page 1. This keeps traversal stable and independently bounded.
+ * The optional registry supports isolated static fixtures without replacing global state.
+ */
+export declare function renderPublicCommandHelp(command: readonly string[], options?: PublicHelpOptions, registry?: readonly PublicCommandDescriptor[]): PublicHelpRenderResult;

package/dist/types/cli/public-command-registry.d.ts

@@ -0,0 +1,69 @@
+import type { ArgDescriptor, FlagDescriptor } from "@gajae-code/utils/cli";
+import { type Operation, type OperationKind } from "../sdk/protocol/operation-registry";
+export declare const PUBLIC_HELP_SECTIONS: readonly ["overview", "usage", "children", "arguments", "options", "examples", "recovery"];
+export type PublicHelpSection = (typeof PUBLIC_HELP_SECTIONS)[number];
+export type PublicCommandFamily = "sdk" | "daemon";
+export type PublicDisruption = "none" | "interrupts-work" | "force-kill";
+export interface PublicRecovery {
+    description: string;
+    disruption: PublicDisruption;
+    requiresConfirmation: boolean;
+}
+export interface PublicFlagDescriptor extends FlagDescriptor {
+    description: string;
+    /** Boundary options are stripped before operation parsing. */
+    boundary?: "help" | "mode" | "retrieval";
+    conflicts?: readonly string[];
+    requires?: readonly string[];
+    risk?: string;
+    validation?: "positive-safe-integer" | "sha256" | "error-id" | "search-limit" | "pending-ceiling";
+    /** Serve's existing operation parser accepts separate operands only. */
+    valueSyntax?: "separate" | "separate-or-equals";
+}
+export interface PublicArgumentDescriptor extends ArgDescriptor {
+    description: string;
+}
+export interface PublicCommandDescriptor {
+    command: readonly string[];
+    canonicalCommand: readonly string[];
+    parent: readonly string[] | null;
+    description: string;
+    /** Effective local grammar, not a union of sibling options. Keys have no leading --. */
+    flags: Readonly<Record<string, PublicFlagDescriptor>>;
+    /** Insertion order is positional order; child tokens are not arguments. */
+    args: Readonly<Record<string, PublicArgumentDescriptor>>;
+    children: readonly string[];
+    usage: readonly {
+        syntax: string;
+        executable: false;
+    }[];
+    examples: readonly {
+        syntax: string;
+        executable: false;
+    }[];
+    recovery: readonly PublicRecovery[];
+    risk?: string;
+    defaultChild?: string;
+    exactlyOneOf?: readonly (readonly string[])[];
+    /** Semantic conditions remain runtime-owned (e.g. proof-bound retirement). */
+    constraints: readonly string[];
+    operationKind?: Exclude<OperationKind, "reverse">;
+}
+export interface PublicCommandResolution {
+    descriptor: PublicCommandDescriptor;
+    /** Number of path tokens consumed, including the family. No argv scanning is performed. */
+    consumed: number;
+    remaining: readonly string[];
+    exact: boolean;
+}
+export declare const PUBLIC_BOUNDARY_FLAGS: Readonly<Record<string, PublicFlagDescriptor>>;
+export declare const PUBLIC_RETRIEVAL_FLAGS: Readonly<Record<string, PublicFlagDescriptor>>;
+/** Static descriptors only: no settings, theme, broker, transport, filesystem or process initialization. */
+export declare const PUBLIC_COMMANDS: readonly PublicCommandDescriptor[];
+/** Exact full public path lookup; private workers and function-only verbs are absent. */
+export declare function getPublicCommand(command: readonly string[]): PublicCommandDescriptor | undefined;
+export declare function getPublicCommandChildren(descriptor: PublicCommandDescriptor): readonly PublicCommandDescriptor[];
+/** Resolve path tokens only. The entry scanner must first respect flag operands and --. */
+export declare function resolvePublicCommand(tokens: readonly string[]): PublicCommandResolution | undefined;
+/** Operation metadata is reused, not promoted to command paths or usage-level enum rejection. */
+export declare function getPublicRawOperations(kind: Exclude<OperationKind, "reverse">): readonly Operation[];

package/dist/types/cli/session-picker.d.ts

@@ -1,5 +1,5 @@
 import { type SessionSelectionResult } from "../modes/components/session-selector";
 import { type SessionInfo } from "../session/session-manager";
 export declare function deleteSessionPickerCandidate(sessionPath: string, explicitSessionDir?: string): Promise<void>;
-/** Show the read-only TUI session picker and return the user's consent intent. */
+/** Show the session picker and return the user's resume consent intent. */
 export declare function selectSession(sessions: SessionInfo[], explicitSessionDir?: string): Promise<SessionSelectionResult>;

package/dist/types/cli/setup-cli.d.ts

@@ -18,6 +18,7 @@ export interface SetupCommandArgs {
         baseUrl?: string;
         apiKeyEnv?: string;
         model?: string[];
+        discover?: boolean;
         modelsPath?: string;
         smoke?: boolean;
         install?: boolean;

package/dist/types/cli/skills-cli.d.ts

@@ -5,6 +5,11 @@ export interface SkillsCommandArgs {
     flags?: {
         json?: boolean;
         source?: "all" | "project" | "user";
+        /** Max discover results; clamped to [1, SKILL_DISCOVERY_MAX_LIMIT] by the library. */
+        limit?: number;
+        /** Zero-based start of the discover page; normalized by the library. */
+        offset?: number;
+        query?: string;
     };
 }
 export declare function runSkillsCommand(cmd: SkillsCommandArgs): Promise<void>;

package/dist/types/cli.d.ts

@@ -1,3 +1,6 @@
 #!/usr/bin/env bun
+import type { CommandEntry } from "@gajae-code/utils/cli";
+/** Public-family hooks kept available for private-worker tests without loading the full registry. */
+export declare const commands: CommandEntry[];
 /** Run the CLI with argv excluding process.argv prefix. */
 export declare function runCli(argv: string[]): Promise<void>;

package/dist/types/commands/daemon.d.ts

@@ -1,54 +1,8 @@
-/**
- * Manage GJC background daemons (status/list/stop/restart).
- */
-import { Command } from "@gajae-code/utils/cli";
+/** Manage public daemon operations while keeping worker grammar private. */
+import { type ArgDescriptor, Command, type FlagDescriptor } from "@gajae-code/utils/cli";
 export default class Daemon extends Command {
     static description: string;
-    static examples: string[];
-    static args: {
-        action: import("@gajae-code/utils/cli").ArgDescriptor & {
-            description: string;
-            required: false;
-            options: string[];
-        };
-        kind: import("@gajae-code/utils/cli").ArgDescriptor & {
-            description: string;
-            required: false;
-            multiple: true;
-        };
-    };
-    static flags: {
-        verbose: import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
-            char: string;
-            description: string;
-        };
-        all: import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
-            description: string;
-        };
-        json: import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
-            description: string;
-        };
-        force: import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
-            description: string;
-        };
-        "graceful-timeout-ms": import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
-            description: string;
-        };
-        "kill-timeout-ms": import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
-            description: string;
-        };
-        "spawn-if-stopped": import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
-            description: string;
-        };
-        smoke: import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
-            description: string;
-        };
-        "owner-id": import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
-            description: string;
-        };
-        "agent-dir": import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
-            description: string;
-        };
-    };
+    static args: Record<string, ArgDescriptor>;
+    static flags: Record<string, FlagDescriptor>;
     run(): Promise<void>;
 }

package/dist/types/commands/sdk.d.ts

@@ -41,10 +41,10 @@ export declare function watchSessionHostBrokerLiveness(deps: {
  * no client attached before treating itself as abandoned.
  *
  * This cannot fire during healthy work. "Attached" is the host's own live
- * socket-subscription count, so a client that is merely idle — an editor
- * sitting on an open ACP session, a long agent turn with nobody typing — still
- * holds a socket and resets the window on every poll. Only a client that is
- * actually gone opens it, and 30 minutes is far longer than any client
+ * demand count: observer-only sockets (such as an idle chat daemon) do not
+ * reset the window, while an in-flight turn is reported separately. Only a
+ * client that is actually demanding the host opens it, and 30 minutes is far
+ * longer than any client
  * reconnect budget (ACP's is seconds), so a crashed-and-restarted client
  * reattaches long before the window closes.
  */
@@ -66,8 +66,8 @@ export declare const SESSION_HOST_FIRST_ATTACH_GRACE_MS: number;
  * from every client for a full idle grace, or nobody has come for it at all
  * for a full first-attach grace.
  *
- * `readAttachedClients` reports the host's own live client/socket subscription
- * count; `undefined` means the SDK endpoint publishes no such evidence — before
+ * `readAttachedClients` reports the host's own live demanding-client count;
+ * `undefined` means the SDK endpoint publishes no such evidence — before
  * startup, after teardown, or when every reader itself fails. That ambiguity is
  * never instant detachment: it cannot reap on the poll that first sees it, it
  * can only open a window. Which window depends on what was already observed. A
@@ -78,25 +78,24 @@ export declare const SESSION_HOST_FIRST_ATTACH_GRACE_MS: number;
  * an observed count of zero. Every reachable state therefore carries a finite
  * bound.
  *
- * `readWorkInFlight` reports whether the host is running agent work right now.
- * Work is positive proof a client did come for this host: a prompt can only
- * arrive over an endpoint a client dialed. Live work therefore restarts both
- * windows, which is what keeps a mid-prompt host alive whether its count reads
- * zero or stops being readable at all. That still bounds a host whose SDK
- * runtime never came up: with no transport it can never receive a prompt, so it
- * never reports work and its window keeps running from process start. And any
- * real turn ends, after which the window resumes; live work defers a bound, it
- * never removes it.
+ * `readWorkLease` reports whether the host's authoritative session-work lease
+ * is held. A lease is positive proof a client did come for this host: a prompt
+ * can only arrive over an endpoint a client dialed. Live work therefore
+ * restarts both windows, which is what keeps a mid-prompt host alive whether
+ * its count reads zero or stops being readable at all. That still bounds a
+ * host whose SDK runtime never came up: with no transport it can never receive
+ * a prompt, so it never acquires work and its window keeps running from process
+ * start. Releasing the lease resumes the applicable bound.
  */
 export declare function watchSessionHostClientAttachment(deps: {
     readAttachedClients: () => number | undefined;
-    readWorkInFlight?: () => boolean;
+    readWorkLease?: () => boolean;
     now?: () => number;
     sleep?: (ms: number) => Promise<void>;
     idleGraceMs?: number;
     firstAttachGraceMs?: number;
     pollMs?: number;
-}): Promise<void>;
+}): Promise<"detached_idle">;
 /** Opens lifecycle-authorized history without letting replacement content reach readiness. */
 export declare function openLifecycleSessionManager(request: SessionLifecycleLaunchRequest, cwd: string, agentDir: string): Promise<{
     parsed: ParsedArgs;
@@ -126,6 +125,10 @@ export type SdkInternalArgv = {
     agentDir: string;
 } | {
     action: "session-host-internal";
+} | {
+    action: "stderr-drain-internal";
+    logPath: string;
+    maxBytes: number;
 };
 /** Parses the exact private argv contracts used by SDK child-process spawns. */
 export declare function parseSdkInternalArgv(argv: readonly string[]): SdkInternalArgv;
@@ -133,25 +136,5 @@ export default class Sdk extends Command {
     static description: string;
     static hidden: boolean;
     static delegateHelp: boolean;
-    static args: {
-        action: import("@gajae-code/utils/cli").ArgDescriptor & {
-            required: false;
-            options: string[];
-        };
-    };
-    static flags: {
-        stdio: import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
-            description: string;
-        };
-        socket: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
-            description: string;
-        };
-        session: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
-            description: string;
-        };
-        "pending-ceiling": import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
-            description: string;
-        };
-    };
     run(): Promise<void>;
 }

package/dist/types/commands/setup.d.ts

@@ -102,6 +102,9 @@ export default class Setup extends Command {
             description: string;
             multiple: true;
         };
+        discover: import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
+            description: string;
+        };
         "models-path": import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
             description: string;
         };

package/dist/types/commands/skills.d.ts

@@ -25,6 +25,15 @@ export default class Skills extends Command {
             options: string[];
             default: string;
         };
+        limit: import("@gajae-code/utils/cli").FlagDescriptor<"integer"> & {
+            description: string;
+        };
+        offset: import("@gajae-code/utils/cli").FlagDescriptor<"integer"> & {
+            description: string;
+        };
+        query: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+        };
     };
     static examples: string[];
     run(): Promise<void>;

package/dist/types/config/autorouting-tier-map.d.ts

@@ -784,6 +784,12 @@ export declare const TIER_MAP_SKIP_LIST: {
     readonly "openai-codex/gpt-6-astra": {
         readonly rationale: "GPT-6 Astra catalog addition (2026-09-03 release); not yet curated";
     };
+    readonly "openai-codex/gpt-6-luna": {
+        readonly rationale: "GPT-6 Luna catalog addition (2026-09-22 release); not yet curated";
+    };
+    readonly "openai-codex/gpt-6-sol": {
+        readonly rationale: "GPT-6 Sol catalog addition (2026-09-22 release); not yet curated";
+    };
     readonly "openai-codex/gpt-daybreak-blue-latest": {
         readonly rationale: "post-rebase catalog addition from dev; not yet curated";
     };
@@ -1155,6 +1161,18 @@ export declare const TIER_MAP_SKIP_LIST: {
         readonly baseline: true;
         readonly rationale: "pre-feature baseline; not yet curated";
     };
+    readonly "alibaba-token-plan/deepseek-v4-pro-0813": {
+        readonly baseline: true;
+        readonly rationale: "post-feature catalog addition; not yet curated";
+    };
+    readonly "alibaba-token-plan/deepseek-v4.1-flash": {
+        readonly baseline: true;
+        readonly rationale: "post-feature catalog addition; not yet curated";
+    };
+    readonly "alibaba-token-plan/glm-5.3": {
+        readonly baseline: true;
+        readonly rationale: "post-feature catalog addition; not yet curated";
+    };
     readonly "amazon-bedrock/anthropic.claude-3-5-haiku-20241022-v1:0": {
         readonly baseline: true;
         readonly rationale: "pre-feature baseline; not yet curated";

package/dist/types/config/file-lock.d.ts

@@ -89,7 +89,14 @@ export interface FileLockOwnerToken {
 }
 /** Outcome of a guarded lock-dir removal attempt (`removeFileLockDirForGc`). */
 export type FileLockGcRemoval = "removed" | "owner_changed" | "missing" | "cleanup_failed";
-/** Identity evidence carried by the generic stale verdict into a later removal. */
+/**
+ * Identity evidence carried by the generic stale verdict into a later removal.
+ *
+ * `ctimeNs` is a mutable metadata-change time on every supported filesystem, so
+ * it is retained for diagnostics/legacy consumers but is not part of the lock
+ * identity predicate. `infoBirthtimeNs` is the creation time that stays bound
+ * to the file object.
+ */
 export interface GenericFileLockDirIdentity {
     rootDev: string;
     rootIno: string;
@@ -99,6 +106,7 @@ export interface GenericFileLockDirIdentity {
     infoSize: string;
     infoMtimeNs: string;
     infoCtimeNs: string;
+    infoBirthtimeNs: string;
     infoSha256: string;
 }
 export type GenericFileLockDirStaleVerdict = {

package/dist/types/config/model-profile-activation.d.ts

@@ -31,7 +31,7 @@ type ModelProfileActivationSession = Pick<AgentSession, "model" | "thinkingLevel
     getDefaultFallbackRuntimeState?: () => DefaultFallbackRuntimeState;
     restoreDefaultFallbackRuntimeState?: (state: DefaultFallbackRuntimeState) => void;
     restoreModelSelectionForRollback?: AgentSession["restoreModelSelectionForRollback"];
-    modelRegistry?: Pick<ModelRegistry, "getSessionCanonicalVariant" | "restoreSessionCanonicalVariant" | "clearCanonicalVariant" | "getAvailable" | "lookupAliasExists" | "resolveModelByLookupAlias" | "authStorage" | "isCredentiallessProvider">;
+    modelRegistry?: Pick<ModelRegistry, "getSessionCanonicalVariant" | "restoreSessionCanonicalVariant" | "clearCanonicalVariant" | "getAvailable" | "lookupAliasExists" | "resolveModelByLookupAlias" | "authStorage" | "isCredentiallessProvider"> & Partial<Pick<ModelRegistry, "getAvailableForProfileActivation">>;
     getConfiguredModelChainState?: (role: string) => ConfiguredModelChainState | undefined;
 };
 type ConfiguredModelChainState = {
@@ -182,6 +182,48 @@ export declare function getProxyRoutableProviders(profile: ModelProfileDefinitio
  * retain their legacy tolerance for stale qualified role tails.
  */
 export declare function requiresQualifiedModelProfileRoleResolution(profile: Pick<ModelProfileDefinition, "source">): boolean;
+/** Resolve a removed saved-session default through the durable profile without mutating persistent state. */
+export declare function resolveMissingSessionModelRecovery(options: {
+    modelRegistry: PrepareModelProfileActivationOptions["modelRegistry"];
+    settings: Pick<Settings, "get" | "getModelRole">;
+    defaultEntries: readonly string[];
+    skips: Array<{
+        selector: string;
+        reason: string;
+    }>;
+    savedDefault: string | undefined;
+    credentialSessionId: string;
+    aliasIntent?: "preset-equivalent";
+}): Promise<{
+    profileName: string;
+    entries: string[];
+    model?: Model<Api>;
+    thinkingLevel?: ThinkingLevel;
+    explicitThinkingLevel: boolean;
+    activeIndex: number;
+    skips: Array<{
+        selector: string;
+        reason: string;
+    }>;
+} | undefined>;
+/** Resolve a durable profile's effective default chain without mutating session or settings state. */
+export declare function resolveModelProfileDefaultChain(options: {
+    modelRegistry: PrepareModelProfileActivationOptions["modelRegistry"];
+    settings: Pick<Settings, "get">;
+    profileName: string;
+    credentialSessionId: string;
+}): Promise<{
+    profileName: string;
+    entries: string[];
+    model?: Model<Api>;
+    thinkingLevel?: ThinkingLevel;
+    explicitThinkingLevel: boolean;
+    activeIndex: number;
+    skips: Array<{
+        selector: string;
+        reason: string;
+    }>;
+}>;
 export declare function rewriteSelectorForProxy(selector: string, proxyProvider: string, proxyMode: ModelProfileProxyMode, allModels: Model<Api>[], directlyAuthenticated: ReadonlySet<string>, routableProviders: ReadonlySet<string>): string;
 export declare function prepareModelProfileActivation(options: PrepareModelProfileActivationOptions): Promise<PreparedModelProfileActivation>;
 export declare function applyPreparedModelProfileActivation(prepared: PreparedModelProfileActivation, options?: ApplyModelProfileActivationOptions): Promise<void>;
@@ -218,3 +260,5 @@ export declare function restoreMaterializedModelProfileForDeletion(options: {
     snapshot: MaterializeModelProfileForDeletionResult;
 }): Promise<void>;
 export declare function activateModelProfile(options: PrepareModelProfileActivationOptions, applyOptions?: ApplyModelProfileActivationOptions): Promise<void>;
+/** Install only a profile's runtime role layer, preserving session model and configured-chain intent. */
+export declare function applyModelProfileRuntimeBindings(options: PrepareModelProfileActivationOptions): Promise<void>;

package/dist/types/config/model-registry.d.ts

@@ -20,6 +20,12 @@ export type { BillingPath, BillingPathKind } from "./billing-path";
 export type { EffectiveProviderAuth, ProviderSelectionPolicy } from "./provider-selection-policy";
 export type { CanonicalModelIndex, CanonicalModelRecord, CanonicalModelVariant, ModelEquivalenceConfig };
 export { isAuthenticated, kNoAuth };
+/**
+ * Scrub resolved credential material from a discovery failure before it is
+ * published to discovery state, cache provenance, or the logger. Mutates
+ * Error messages and stacks in place to preserve class/identity; wraps non-Errors.
+ */
+export declare function scrubDiscoveryError(error: unknown, secrets: ReadonlyArray<string | undefined>): unknown;
 /**
  * A loopback discovery endpoint that is proven to have no listener is the normal state of
  * a machine without a local model server. Structured transport evidence is required when
@@ -321,6 +327,7 @@ interface ProviderOverride {
     cacheRetention?: CacheRetention;
     isOAuth?: boolean;
 }
+export declare function registrySelectorResolvesToModel(selector: string, models: readonly Model<Api>[]): boolean;
 /**
  * Merge a freshly discovered model with the matching bundled/configured entry
  * (or a runtime provider override when no bundled entry exists).
@@ -523,8 +530,10 @@ export declare class ModelRegistry {
      */
     seedCanonicalVariant(sessionId: string, model: Model<Api>): boolean;
     /**
-     * Get only models that have auth configured.
-     * This is a fast check that doesn't refresh OAuth tokens.
+     * Get selectable models with auth configured.
+     * This is a fast check that doesn't refresh OAuth tokens. A current,
+     * authoritative live catalog also limits each provider to its enrolled ids;
+     * bundled entries remain the fallback until that evidence exists.
      */
     getAvailable(): Model<Api>[];
     /**

package/dist/types/config/settings-schema.d.ts

@@ -157,6 +157,12 @@ export interface ModelTagsSettings {
     [key: string]: ModelTagDef;
 }
 export declare const DEFAULT_BASH_INTERCEPTOR_RULES: BashInterceptorRule[];
+export declare const DEFAULT_SDK_PROMPT_DEADLINE_MS = 3600000;
+export declare const DEFAULT_SDK_PROMPT_MAX_RUNTIME_MS = 21600000;
+/** Resolve a `sdk.promptDeadlineMs` lookup, falling back on any non-finite value. */
+export declare function resolveSdkPromptDeadlineMs(value: unknown): number;
+/** Resolve a `sdk.promptMaxRuntimeMs` lookup, falling back on any non-finite value. */
+export declare function resolveSdkPromptMaxRuntimeMs(value: unknown): number;
 export declare const SETTINGS_SCHEMA: {
     readonly lastChangelogVersion: {
         readonly type: "string";
@@ -219,6 +225,11 @@ export declare const SETTINGS_SCHEMA: {
         readonly description: "Hard maximum runtime for an SDK prompt from acceptance, bounding progress-aware renewals.";
         readonly validate: (value: number) => boolean;
     };
+    readonly "sdk.flushWorktreeOnDeadline": {
+        readonly type: "boolean";
+        readonly default: true;
+        readonly description: "Autosave uncommitted changes in the session's linked worktree by default as a WIP commit when a prompt deadline retires a prompt; primary checkouts require an explicit true opt-in.";
+    };
     readonly "sdk.masterOrphanGraceMs": {
         readonly type: "number";
         readonly default: 120000;

package/dist/types/coordinator-mcp/question-state.d.ts

@@ -454,7 +454,12 @@ export declare function readSchedulerRoster(paths: CoordinatorStatePaths, option
 export declare function advanceSchedulerCursor(paths: CoordinatorStatePaths, cursor: string, options?: {
     signal?: AbortSignal;
 }): Promise<void>;
-export declare function readSessionTransaction(paths: CoordinatorStatePaths, sessionId: string): Promise<CoordinatorSessionTransactionV1 | null>;
+export declare function readSessionTransaction(paths: CoordinatorStatePaths, sessionId: string, options?: {
+    signal?: AbortSignal;
+}): Promise<CoordinatorSessionTransactionV1 | null>;
+export declare function repairLegacyReportIds(paths: CoordinatorStatePaths, sessionId: string, options?: {
+    signal?: AbortSignal;
+}): Promise<CoordinatorSessionTransactionV1 | null>;
 export declare function withSessionTransaction<T>(paths: CoordinatorStatePaths, sessionId: string, operation: (transaction: CoordinatorSessionTransactionV1) => Promise<T>, options?: {
     signal?: AbortSignal;
 }): Promise<T>;

package/dist/types/daemon/operator-contract.d.ts

@@ -24,11 +24,15 @@ export declare const DAEMON_ACTION_ALIASES: Readonly<Record<string, DaemonAction
 export declare const DAEMON_ACTION_TOKENS: readonly string[];
 /** Resolve a leading verb (canonical or alias) to its canonical action. */
 export declare function resolveDaemonAction(token: string | undefined): DaemonAction | undefined;
-/** Exit codes for `gjc daemon`. Backward compatible: success 0, any failure 1. */
+/** Public input failures exit 2; operational failures retain exit 1. */
 export declare const DAEMON_EXIT: {
     readonly ok: 0;
     readonly failure: 1;
+    readonly usage: 2;
 };
+/** A refused result may follow a successful stop or spawn; snapshots and prose
+ * do not prove that no effect occurred. Only completed results prove applied. */
+export declare function daemonOperationOutcome(result: DaemonOperationResult): "applied" | "unknown";
 /** Human-facing headline when a spawn/reload is refused by a live foreign identity. */
 export declare const OWNERSHIP_MISMATCH_MESSAGE = "refused: a live Telegram daemon with a different bot token or chat already owns this workspace";
 /** Structured, actionable recovery for a token/chat ownership mismatch. */

package/dist/types/eval/js/worker-protocol.d.ts

@@ -10,6 +10,8 @@ export interface RunErrorPayload {
     stack?: string;
     isAbort?: boolean;
     isToolError?: boolean;
+    /** Set only when the originating error carried the trusted designed marker. */
+    isDesigned?: boolean;
 }
 export type ToolReply = {
     ok: true;

package/dist/types/extensibility/extensions/types.d.ts

@@ -31,6 +31,7 @@ import type { AgentSessionEventListener } from "../../session/agent-session";
 import type { ClientBridge, ClientBridgePermissionOption, ClientBridgePermissionOutcome, ClientBridgePermissionToolCall } from "../../session/client-bridge";
 import type { CustomMessage } from "../../session/messages";
 import type { ReadonlySessionManager, SessionManager } from "../../session/session-manager";
+import type { SessionWorkLease } from "../../session/session-work-lease";
 import type { BashToolDetails, BashToolInput, FindToolDetails, FindToolInput, ReadToolDetails, ReadToolInput, SearchToolDetails, SearchToolInput, WriteToolInput } from "../../tools";
 import type { EventBus } from "../../utils/event-bus";
 import type { AgentEndEvent, AutoCompactionEndEvent, AutoCompactionStartEvent, AutoRetryEndEvent, AutoRetryStartEvent, ContextEvent, GoalUpdatedEvent, SessionBeforeBranchEvent, SessionBeforeBranchResult, SessionBeforeCompactEvent, SessionBeforeCompactResult, SessionBeforeSwitchEvent, SessionBeforeSwitchResult, SessionBeforeTreeEvent, SessionBeforeTreeResult, SessionBranchEvent, SessionCompactEvent, SessionCompactingEvent, SessionCompactingResult, SessionEvent, SessionShutdownEvent, SessionStartEvent, SessionSwitchEvent, SessionTreeEvent, AgentStartEvent as SharedAgentStartEvent, TodoReminderEvent, ToolCallEventResult, ToolResultEventResult, TtsrTriggeredEvent, TurnEndEvent, TurnStartEvent } from "../shared-events";
@@ -279,6 +280,8 @@ export interface ExtensionContext {
     isIdle(): boolean;
     /** Stable resource ownership identifier for the active prompt run. */
     getActivePromptHandle(): string | undefined;
+    /** The session's authoritative host-liveness lease. */
+    getSessionWorkLease?(): SessionWorkLease | undefined;
     /** Abort the current agent operation */
     abort(): void | Promise<void>;
     /** Abort and prove whether resources for a specific prompt settled. */
@@ -1044,6 +1047,13 @@ export type SendUserMessageHandler = (content: string | (TextContent | ImageCont
         startsOwnRun?: boolean;
         removed?: boolean;
     }) => void;
+    /**
+     * Fired synchronously when a plain prompt's dispatch resolves at queue
+     * time instead of run end (diverted into an in-flight run's steering).
+     */
+    onDispatchDisposition?: (promotion: {
+        startsOwnRun: boolean;
+    }) => void;
     preflightSignal?: AbortSignal;
 }) => void | Promise<void>;
 export type AppendEntryHandler = <T = unknown>(customType: string, data?: T) => void;
@@ -1111,6 +1121,8 @@ export interface ExtensionContextActions {
     isIdle: () => boolean;
     /** Stable resource ownership identifier for the active prompt run. */
     getActivePromptHandle?: () => string | undefined;
+    /** The session's authoritative host-liveness lease. */
+    getSessionWorkLease?: () => SessionWorkLease | undefined;
     abort: () => void | Promise<void>;
     abortPromptAndWait?: (handle: string, options: {
         graceMs: number;

package/dist/types/extensibility/gjc-plugins/registry.d.ts

@@ -1,4 +1,8 @@
 import { type GjcPluginRegistry, type GjcPluginRegistryEntry, type GjcPluginScope } from "./types";
+export declare const RegistryLockTestHooks: {
+    beforeEviction?: (lockPath: string, raw: string) => void | Promise<void>;
+    beforePublish?: (stagingPath: string, lockPath: string) => void | Promise<void>;
+};
 export declare function registryRootForScope(scope: GjcPluginScope, cwd: string): string;
 export declare function registryPathForScope(scope: GjcPluginScope, cwd: string): string;
 /**