@gajae-code/coding-agent 0.17.2 → 0.17.4

package/dist/types/tools/bash.d.ts

@@ -8,25 +8,40 @@ import { type Theme } from "../modes/theme/theme";
 import { type SdkSpawnArgs } from "../sdk/cli/master-cli";
 import type { ToolSession } from ".";
 import { type OutputMeta } from "./output-meta";
+export { STEER_FOLD_GRACE_MS, steerFoldReasonLine } from "./steer-fold";
 export declare const BASH_DEFAULT_PREVIEW_LINES = 10;
-/**
- * A user steer folds a running foreground bash call only after it has been
- * running at least this long. Shorter commands finish normally and the steer is
- * consumed at the ordinary tool boundary, so a quick `git status` never turns
- * into a background job plus a wake-up turn.
- */
-export declare const STEER_FOLD_GRACE_MS = 2000;
-/** Model-facing line appended to a steer-folded background-start result. */
-export declare function steerFoldReasonLine(jobId: string): string;
 export type BashOriginalArtifactSaveResult = BashArtifactSaveResult;
 export declare function suffixPrefixOverlap(source: string, target: string): number;
 export declare function saveBashOriginalArtifactForTests(session: ToolSession, originalText: string, onResult?: (result: BashOriginalArtifactSaveResult) => void): Promise<string | undefined>;
+/**
+ * Model-declared activity metadata for the browser-backend routing contract
+ * (`browser.backend: aside`). When that contract routes a browser task through
+ * Bash, it requires the call to declare the activity structurally so consumers
+ * can project it without parsing the command text. The declaration is
+ * model-declared and schema-validated only: nothing here verifies that the
+ * command actually invokes Aside, and the executor never inspects `command`.
+ */
+export type BashActivityProvider = "aside";
+export type BashActivityMode = "repl" | "exec";
+export interface BashActivityDeclaration {
+    kind: "browser";
+    provider: BashActivityProvider;
+    mode: BashActivityMode;
+}
 declare const bashSchemaBase: z.ZodObject<{
     command: z.ZodString;
     env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
     timeout: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
     cwd: z.ZodOptional<z.ZodString>;
     pty: z.ZodOptional<z.ZodBoolean>;
+    activity: z.ZodPreprocess<z.ZodOptional<z.ZodObject<{
+        kind: z.ZodLiteral<"browser">;
+        provider: z.ZodLiteral<"aside">;
+        mode: z.ZodEnum<{
+            exec: "exec";
+            repl: "repl";
+        }>;
+    }, z.core.$strict>>>;
 }, z.core.$strip>;
 declare const bashSchemaWithAsync: z.ZodObject<{
     command: z.ZodString;
@@ -34,6 +49,14 @@ declare const bashSchemaWithAsync: z.ZodObject<{
     timeout: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
     cwd: z.ZodOptional<z.ZodString>;
     pty: z.ZodOptional<z.ZodBoolean>;
+    activity: z.ZodPreprocess<z.ZodOptional<z.ZodObject<{
+        kind: z.ZodLiteral<"browser">;
+        provider: z.ZodLiteral<"aside">;
+        mode: z.ZodEnum<{
+            exec: "exec";
+            repl: "repl";
+        }>;
+    }, z.core.$strict>>>;
     async: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 type BashToolSchema = typeof bashSchemaBase | typeof bashSchemaWithAsync;
@@ -44,6 +67,8 @@ export interface BashToolInput {
     cwd?: string;
     async?: boolean;
     pty?: boolean;
+    /** Accepted activity declaration, mirrored into {@link BashToolDetails.activity}. */
+    activity?: BashActivityDeclaration;
 }
 export interface BashToolDetails {
     meta?: OutputMeta;
@@ -52,6 +77,8 @@ export interface BashToolDetails {
     terminalId?: string;
     /** Why the foreground wait was folded, when this result is a background-start after a fold. */
     foldReason?: FoldReason;
+    /** The accepted model-declared activity declaration, when the call carried one. */
+    activity?: BashActivityDeclaration;
     async?: {
         state: "running" | "completed" | "failed";
         jobId: string;
@@ -104,7 +131,7 @@ export declare class BashTool implements AgentTool<BashToolSchema, BashToolDetai
         label: string;
         commandCwd: string;
     }>;
-    execute(toolCallId: string, { command: rawCommand, env: rawEnv, timeout: rawTimeout, cwd, async: asyncRequested, pty, }: BashToolInput, signal?: AbortSignal, onUpdate?: AgentToolUpdateCallback<BashToolDetails>, ctx?: AgentToolContext): Promise<AgentToolResult<BashToolDetails>>;
+    execute(toolCallId: string, { command: rawCommand, env: rawEnv, timeout: rawTimeout, cwd, async: asyncRequested, pty, activity, }: BashToolInput, signal?: AbortSignal, onUpdate?: AgentToolUpdateCallback<BashToolDetails>, ctx?: AgentToolContext): Promise<AgentToolResult<BashToolDetails>>;
 }
 export interface BashRenderArgs {
     command?: string;
@@ -173,4 +200,3 @@ export declare const bashToolRenderer: {
     mergeCallAndResult: boolean;
     inline: boolean;
 };
-export {};

package/dist/types/tools/job.d.ts

@@ -15,7 +15,7 @@ type JobParams = z.infer<typeof jobSchema>;
 interface JobSnapshot {
     id: string;
     type: "bash" | "task";
-    status: "running" | "completed" | "failed" | "cancelled";
+    status: "running" | "paused" | "completed" | "failed" | "cancelled";
     label: string;
     durationMs: number;
     /** Present when the job was folded out of a foreground wait. */

package/dist/types/tools/steer-fold.d.ts

@@ -0,0 +1,31 @@
+import type { FoldReason } from "../async/job-manager";
+import type { ToolSession } from ".";
+/** A short foreground wait stays in the foreground even when a steer is admitted. */
+export declare const STEER_FOLD_GRACE_MS = 2000;
+/** Model-facing line appended to a steer-folded background-start result. */
+export declare function steerFoldReasonLine(jobId: string): string;
+/** Model-facing cause clause for a fold, keyed by the recorded {@link FoldReason}. */
+export declare function foldReasonClause(reason: FoldReason): string;
+/** Model-facing line used when the `job` tool's own wait is folded; states the real trigger. */
+export declare function foldAwaitReasonLine(folded: ReadonlyMap<string, FoldReason>): string;
+type SteerFoldSession = Pick<ToolSession, "settings" | "waitForUserSteering" | "requestForegroundBashBackground">;
+/** The session hooks a steer fold needs, resolved once so callers never re-read and non-null-assert them. */
+interface SteerFoldHooks {
+    waitForSteer: NonNullable<ToolSession["waitForUserSteering"]>;
+    requestFold: NonNullable<ToolSession["requestForegroundBashBackground"]>;
+}
+/**
+ * Fold on the first user steer that ARRIVES after the wait has run for
+ * {@link STEER_FOLD_GRACE_MS} since `startedAt`. A steer already queued when
+ * the wait starts, or one that arrives inside the grace window, never folds:
+ * the wait finishes normally and that steer is consumed at the ordinary tool
+ * boundary. The watcher keeps observing so a later qualifying steer still
+ * folds, and re-checks the gate at that moment so a `busyPromptMode` change
+ * during the wait is honored. `requestFold` receives the session's resolved
+ * fold request so the caller targets its own adapter without re-reading the
+ * optional session hook.
+ * Returns a stop function; call it when the wait settles. No-op when steer
+ * folding is gated off at start.
+ */
+export declare function watchSteerForFold(session: SteerFoldSession, startedAt: number, requestFold: (fold: SteerFoldHooks["requestFold"]) => Promise<unknown>, jobId?: string): () => void;
+export {};

package/dist/types/utils/git.d.ts

@@ -162,8 +162,12 @@ export declare const status: ((cwd: string, options?: StatusOptions) => Promise<
     parse: typeof parseStatusPorcelain;
 };
 export declare const stage: {
-    /** Stage files. Empty array stages all (`git add -A`). */
-    files(cwd: string, files?: readonly string[], signal?: AbortSignal): Promise<void>;
+    /**
+     * Stage files. Empty array stages all (`git add -A`). Accepts a bare signal or
+     * `{ env, signal }`; `env` exists so a caller can stage into an isolated
+     * `GIT_INDEX_FILE` instead of the repository's real index.
+     */
+    files(cwd: string, files?: readonly string[], options?: AbortSignal | Pick<CommandOptions, "env" | "signal">): Promise<void>;
     /** Selectively stage hunks from the provided diff or the current working tree diff. */
     hunks(cwd: string, selections: HunkSelection[], options?: StageHunksOptions): Promise<void>;
     /** Unstage files. Empty array unstages all (`git reset`). */
@@ -181,6 +185,17 @@ export declare function fetch(cwd: string, remote: string, source: string, targe
 export declare function readTree(cwd: string, treeish: string, options?: Pick<CommandOptions, "env" | "signal">): Promise<void>;
 /** Write the current index as a tree and return its object id. */
 export declare function writeTree(cwd: string, options?: Pick<CommandOptions, "env" | "signal">): Promise<string>;
+export interface CommitTreeOptions {
+    readonly env?: Record<string, string | undefined>;
+    readonly parents?: readonly string[];
+    readonly signal?: AbortSignal;
+}
+/**
+ * Create a commit object from an existing tree and return its SHA. Plumbing:
+ * unlike `commit` this touches neither the index nor any ref, and runs no
+ * `pre-commit`/`commit-msg` hook.
+ */
+export declare function commitTree(cwd: string, tree: string, message: string, options?: CommitTreeOptions): Promise<string>;
 /** Run `git show` on a revision. */
 export declare const show: ((cwd: string, revision: string, options?: {
     format?: string;
@@ -241,6 +256,17 @@ export declare const ref: {
     exists(cwd: string, refName: string, signal?: AbortSignal): Promise<boolean>;
     /** Resolve a ref to its commit SHA. */
     resolve(cwd: string, refName: string, signal?: AbortSignal): Promise<string | null>;
+    /**
+     * Move a ref to `newValue`, but only while it still holds `expectedOldValue`
+     * (the empty string asserts the ref does not exist yet). Git verifies the old
+     * value and writes the new one under its own ref lock, so this is an atomic
+     * compare-and-swap: a concurrent writer that moved the ref first makes this
+     * throw instead of silently clobbering their commit.
+     */
+    update(cwd: string, refName: string, newValue: string, expectedOldValue: string, options?: {
+        reason?: string;
+        signal?: AbortSignal;
+    }): Promise<void>;
     /** Tags pointing at a ref. */
     tags(cwd: string, refName?: string, signal?: AbortSignal): Promise<string[]>;
 };

package/dist/types/utils/mupdf-embedded.d.ts

@@ -0,0 +1,2 @@
+export declare const embeddedMuPdfWasm: string | undefined;
+export declare const embeddedMuPdfModule: string | undefined;

package/dist/types/utils/mupdf.d.ts

@@ -0,0 +1,4 @@
+export declare let mupdfAssetMapping: string;
+export declare function prepareMuPdf(): Promise<void>;
+export declare function withMuPdfDiagnostic(error: unknown): Error;
+export declare function sanitizeMuPdfDiagnostic(message: string): string;

package/dist/types/utils/session-title-generation.d.ts

@@ -0,0 +1,6 @@
+/** Start a new regeneration and invalidate every older completion. */
+export declare function beginSessionTitleGeneration(owner: object): number;
+/** Invalidate pending regeneration after a newer session mutation is accepted. */
+export declare function invalidateSessionTitleGeneration(owner: object): void;
+/** Return whether a regeneration still owns the latest generation lease. */
+export declare function isSessionTitleGenerationCurrent(owner: object, generation: number): boolean;

package/dist/types/utils/title-generator.d.ts

@@ -1,10 +1,19 @@
+import type { AgentMessage } from "@gajae-code/agent-core";
 import { type Api, type Model } from "@gajae-code/ai/core";
 import type { ModelRegistry } from "../config/model-registry";
 import type { Settings } from "../config/settings";
 /**
- * Generate a title for a session based on the first user message.
+ * Build a bounded conversation digest for title regeneration. Regeneration
+ * reads several messages so a throwaway first prompt can be corrected, while
+ * the automatic first-message path intentionally uses only its initial input.
+ */
+export declare function buildConversationTitleInput(messages: readonly AgentMessage[]): string | undefined;
+/**
+ * Generate a title for a session based on the provided user-message input.
+ * Automatic titles pass the first user message; regeneration passes a bounded
+ * conversation digest.
  *
- * @param firstMessage The first user message
+ * @param firstMessage The first user message or bounded conversation digest
  * @param registry Model registry
  * @param settings Settings used to resolve the smol role
  * @param sessionId Optional session id for sticky API key selection

package/dist/types/web/scrapers/types.d.ts

@@ -34,7 +34,10 @@ export interface LoadPageOptions {
 }
 export interface LoadPageResult {
     content: string;
+    /** The bounded response bytes retained for binary classification/conversion. */
+    buffer?: Uint8Array;
     contentType: string;
+    contentDisposition?: string;
     finalUrl: string;
     ok: boolean;
     status?: number;

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@gajae-code/coding-agent",
-	"version": "0.17.2",
+	"version": "0.17.4",
 	"description": "Gajae Code CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://gajae-code.com",
 	"author": "Yeachan-Heo and Gajae Code Contributors",
@@ -29,8 +29,8 @@
 		"가재씨": "bin/gajaessi.js"
 	},
 	"scripts": {
-		"build": "bun scripts/build-binary.ts",
-		"check": "biome check . && bun run check:types",
+		"build": "bun run verify:markit-vendor && bun scripts/build-binary.ts",
+		"check": "bun run verify:markit-vendor && biome check . && bun run check:types",
 		"check:runtime": "bun run generate-hotkeys-docs --check && bun run verify:sdk-canonicalization",
 		"check:types": "tsc -p tsconfig.json --noEmit",
 		"check:autorouting-map": "bun scripts/check-autorouting-tier-map.ts",
@@ -49,32 +49,40 @@
 		"generate-template": "bun scripts/generate-template.ts",
 		"install:defaults": "bun src/cli.ts setup defaults",
 		"verify:insane-vendor": "bun scripts/verify-insane-vendor.ts",
+		"verify:markit-vendor": "bun scripts/vendor-markit.ts --check",
 		"verify:sdk-canonicalization": "bun scripts/verify-gjc-sdk-canonicalization.ts",
 		"check:sdk-closure": "bun ../../scripts/telegram-daemon-generation-guard.ts --validate-current-tree && bun test ../../scripts/telegram-daemon-generation-guard.test.ts && bun scripts/generate-sdk-operation-inventory.ts --check && bun scripts/generate-sdk-adapter-parity-manifest.ts --check && GJC_MANIFEST_RECEIPT_CONCURRENCY=8 bun scripts/run-test-manifest.ts test/manifests/sdk-adapter-parity-v1.json && bun scripts/generate-telegram-baseline-manifest.ts --check && bun scripts/run-test-manifest.ts test/manifests/telegram-baseline-v1.json && bun test test/sdk-downgrade-rollback.test.ts test/sdk-downgrade-unknown-version.test.ts && bun scripts/verify-gjc-sdk-canonicalization.ts --self-test && bun scripts/verify-gjc-sdk-canonicalization.ts && bun scripts/verify-gjc-sdk-rename.ts"
 	},
 	"dependencies": {
 		"@agentclientprotocol/sdk": "1.3.0",
 		"@babel/parser": "^7.29.3",
-		"@gajae-code/agent-core": "0.17.2",
-		"@gajae-code/ai": "0.17.2",
-		"@gajae-code/natives": "0.17.2",
-		"@gajae-code/stats": "0.17.2",
-		"@gajae-code/tui": "0.17.2",
-		"@gajae-code/utils": "0.17.2",
 		"@mozilla/readability": "^0.6.0",
+		"@gajae-code/stats": "0.17.4",
+		"@gajae-code/agent-core": "0.17.4",
+		"@gajae-code/ai": "0.17.4",
+		"@gajae-code/natives": "0.17.4",
+		"@gajae-code/tui": "0.17.4",
+		"@gajae-code/utils": "0.17.4",
 		"@puppeteer/browsers": "^2.13.0",
 		"@types/turndown": "5.0.6",
 		"@xterm/headless": "^6.0.0",
 		"chalk": "^5.6.2",
+		"commander": "14.0.3",
 		"diff": "^9.0.0",
+		"exifr": "7.1.3",
+		"fast-xml-parser": "5.10.1",
 		"fflate": "0.8.2",
 		"handlebars": "^4.7.9",
 		"jsonc-parser": "3.3.1",
+		"jszip": "3.10.1",
 		"linkedom": "^0.18.12",
 		"lru-cache": "11.3.6",
+		"mammoth": "1.12.0",
 		"marked": "18.0.6",
-		"markit-ai": "0.5.3",
+		"mupdf": "1.28.0",
+		"music-metadata": "11.14.0",
 		"puppeteer-core": "^24.42.0",
+		"rss-parser": "3.13.0",
 		"turndown": "7.2.4",
 		"turndown-plugin-gfm": "1.0.2",
 		"zod": "4.4.3"

package/scripts/build-binary.ts

@@ -3,6 +3,7 @@
 import * as path from "node:path";
 import { signMacOSBinary } from "../../../scripts/macos-code-signing";
 import { buildDevCompileArgs } from "./compile-args";
+import { generateMuPdfAsset, resetMuPdfAsset } from "./embed-mupdf";
 
 const packageDir = path.join(import.meta.dir, "..");
 const outputPath = path.join(packageDir, "dist", "gjc");
@@ -31,10 +32,11 @@ async function stageWorkspaceNativeAddons(): Promise<void> {
 }
 
 async function main(): Promise<void> {
-	await runCommand(["bun", "--cwd=../stats", "scripts/generate-client-bundle.ts", "--generate"]);
 	try {
-		await runCommand(["bun", "--cwd=../natives", "run", "embed:native"]);
+		await runCommand(["bun", "--cwd=../stats", "scripts/generate-client-bundle.ts", "--generate"]);
 		try {
+			await generateMuPdfAsset();
+			await runCommand(["bun", "--cwd=../natives", "run", "embed:native"]);
 			const buildEnv = shouldAdhocSignDarwinBinary() ? { ...Bun.env, BUN_NO_CODESIGN_MACHO_BINARY: "1" } : Bun.env;
 			await runCommand(buildDevCompileArgs(), buildEnv);
 
@@ -47,7 +49,11 @@ async function main(): Promise<void> {
 			await runCommand(["bun", "--cwd=../natives", "run", "embed:native", "--reset"]);
 		}
 	} finally {
-		await runCommand(["bun", "--cwd=../stats", "scripts/generate-client-bundle.ts", "--reset"]);
+		try {
+			await resetMuPdfAsset();
+		} finally {
+			await runCommand(["bun", "--cwd=../stats", "scripts/generate-client-bundle.ts", "--reset"]);
+		}
 	}
 }
 

package/scripts/compile-args.ts

@@ -18,15 +18,6 @@ const compiledDefineFlags = ['process.env.PI_COMPILED="true"'];
 const releaseDefineFlags = [...compiledDefineFlags, 'process.env.GJC_BUILD_CHANNEL="release"'];
 const devDefineFlags = [...compiledDefineFlags, 'process.env.GJC_BUILD_CHANNEL="dev"'];
 
-// NOTE: mupdf must NOT be marked --external here. Compiled binaries cannot
-// resolve bare "mupdf" imports (and its Emscripten loader cannot find the
-// wasm asset inside the bunfs), which broke markit PDF conversion in every
-// standalone release (#5433). mupdf is bundled instead: its wasm is embedded
-// via `with { type: "file" }` and routed to the loader through the hook in
-// packages/coding-agent/src/utils/mupdf-wasm.ts, and the bundled
-// `require("mupdf")` inside markit-ai is replaced by the patch in
-// patches/markit-ai@0.5.3.patch.
-
 export const releaseEntrypoints = [
 	"./packages/coding-agent/src/cli.ts",
 	"./packages/stats/src/sync-worker.ts",

package/scripts/embed-mupdf.ts

@@ -0,0 +1,52 @@
+#!/usr/bin/env bun
+
+import * as fs from "node:fs/promises";
+import * as path from "node:path";
+import * as url from "node:url";
+
+const outputPath = url.fileURLToPath(new URL("../src/utils/mupdf-embedded.ts", import.meta.url));
+const sourceMapping = `// AUTOGENERATED FILE -- DO NOT EDIT DIRECTLY
+// See scripts/embed-mupdf.ts. Source installs resolve the package lazily.
+export const embeddedMuPdfWasm: string | undefined = undefined;
+export const embeddedMuPdfModule: string | undefined = undefined;
+`;
+
+export async function resetMuPdfAsset(): Promise<void> {
+	await Bun.write(outputPath, sourceMapping);
+}
+
+export async function generateMuPdfAsset(options: { wasmPath?: string } = {}): Promise<void> {
+	const temporaryPath = `${outputPath}.tmp`;
+	try {
+		const markitModule = url.fileURLToPath(new URL("../vendor/markit-ai/dist/index.js", import.meta.url));
+		const modulePath = Bun.resolveSync("mupdf", path.dirname(markitModule));
+		const resolvedWasmPath = options.wasmPath ?? path.join(path.dirname(modulePath), "mupdf-wasm.wasm");
+		await fs.access(resolvedWasmPath);
+		await Bun.write(
+			temporaryPath,
+			`// AUTOGENERATED FILE -- DO NOT EDIT DIRECTLY
+// See scripts/embed-mupdf.ts. Reset after compiling.
+import wasmAsset from ${JSON.stringify(resolvedWasmPath)} with { type: "file" };
+
+export const embeddedMuPdfWasm: string | undefined = wasmAsset;
+export const embeddedMuPdfModule: string | undefined = ${JSON.stringify(modulePath)};
+`,
+		);
+		await fs.rename(temporaryPath, outputPath);
+	} catch (cause) {
+		await resetMuPdfAsset();
+		throw new Error(
+			"Unable to embed MuPDF WASM; check the source-built artifact or installed coding-agent dependency.",
+			{
+				cause,
+			},
+		);
+	} finally {
+		await fs.rm(temporaryPath, { force: true });
+	}
+}
+
+if (import.meta.main) {
+	if (process.argv.includes("--reset")) await resetMuPdfAsset();
+	else await generateMuPdfAsset();
+}

package/scripts/generate-sdk-operation-inventory.ts

@@ -19,8 +19,12 @@ const LOCKED_EXCLUSIONS: Readonly<Record<string, string>> = {
 		"internal terminal-abort bus seam, threaded via terminalAbortSeams; not a user-facing SDK control seam",
 	"agent_session:abortPromptAndWaitWithTerminal":
 		"internal terminal-abort fencing seam, threaded via terminalAbortSeams; not a user-facing SDK control seam",
+	"agent_session:pendingToolExecutions":
+		"internal read-only run-resource-ledger view, threaded via terminalAbortSeams so the prompt deadline can find a tool-call boundary; not a user-facing SDK control seam",
 	"slash_command:routing":
 		"visual/local-only autorouting settings toggle and smart-routing panel entry, not a user-facing SDK control seam",
+	"slash_command:mcp":
+		"interactive exact-config MCP status and session control command; terminal-only handleTui surface is not dispatched through ACP or the public SDK",
 	"slash_command:settings": "visual/local-only command, not a user-facing SDK control seam",
 	"slash_command:theme": "visual/local-only command, not a user-facing SDK control seam",
 	"slash_command:language":
@@ -162,6 +166,10 @@ const LOCKED_EXCLUSIONS: Readonly<Record<string, string>> = {
 	"agent_session:refreshSshTool": "internal accessor/plumbing, not a user-facing control seam",
 	"agent_session:refreshBaseSystemPrompt": "internal accessor/plumbing, not a user-facing control seam",
 	"agent_session:refreshMCPTools": "internal accessor/plumbing, not a user-facing control seam",
+	"agent_session:getExactMcpStatusSnapshot":
+		"internal exact-config MCP status accessor used only by the terminal-only /mcp command; its capability is granted only to root interactive --mcp-config sessions, not a public SDK query",
+	"agent_session:controlExactMcpServer":
+		"internal session-local exact-config MCP suspend/resume/reconnect mutation used only by the terminal-only /mcp command; runtime suppression is not persistent user authority or a public SDK control",
 	"agent_session:refreshGjcSubskillTools": "internal accessor/plumbing, not a user-facing control seam",
 	"agent_session:buildDisplaySessionContext": "internal accessor/plumbing, not a user-facing control seam",
 	"agent_session:buildPreparedDisplaySessionContext": "internal accessor/plumbing, not a user-facing control seam",
@@ -279,6 +287,12 @@ const LOCKED_EXCLUSIONS: Readonly<Record<string, string>> = {
 		"internal profile and fallback-chain state, not a user-facing SDK control seam",
 	"agent_session:setDefaultFallbackRuntimeModel":
 		"internal fallback runtime bookkeeping, not a user-facing SDK control seam",
+	"agent_session:installRecoveredDefaultFallbackChain":
+		"internal recovered fallback-chain installation during session startup, not a user-facing SDK control seam",
+	"agent_session:markStartupRecoveryBindingsRequired":
+		"internal startup recovery binding marker, not a user-facing SDK control seam",
+	"agent_session:hasRecoveredDefaultFallbackChain":
+		"internal recovered fallback-chain state query, not a user-facing SDK control seam",
 	"agent_session:setCredentialPin":
 		"interactive session-scoped OAuth account selector mutation behind the locked /credential and OAuth selector surfaces; the public SDK has no credential-selection operation and must not gain credential authority implicitly",
 	"agent_session:setCredentialAuto":
@@ -287,6 +301,8 @@ const LOCKED_EXCLUSIONS: Readonly<Record<string, string>> = {
 		"internal fallback resolution bookkeeping, not a user-facing SDK control seam",
 	"agent_session:syncEagerDelegation":
 		"internal profile-derived eager delegation synchronization, not a user-facing SDK control seam",
+	"agent_session:submitUserMessage":
+		"public in-process embedder lifecycle API; direct handle surface, not an SDK transport operation",
 };
 /** Maps reviewed source seams to registry SDK operation IDs. */
 const SEAM_TO_SDK: Readonly<Record<string, string>> = {
@@ -366,6 +382,10 @@ const SEAM_TO_SDK: Readonly<Record<string, string>> = {
 	"slash_command:login": "auth.login",
 	"slash_command:clear": "context.clear",
 	"slash_command:new": "session.new",
+	// `/fork` opens the user-prompt selector, which commits via
+	// `session.branch(entryId)` (selector-controller.ts). Despite the command and
+	// keybinding name, it is NOT the exact-state `session.fork` operation.
+	"slash_command:fork": "session.branch",
 	"slash_command:compact": "compaction.run",
 	"slash_command:handoff": "session.handoff",
 	"slash_command:resume": "session.resume",
@@ -811,10 +831,17 @@ export function scanAgentSessionMethods(sourceText: string): string[] {
 			throw new Error("SDK operation inventory scanner: AgentSession class body is unbalanced.");
 
 		const methods: string[] = [];
+		const seenMethods = new Set<string>();
 		for (let memberStart = bodyStart + 1; memberStart < bodyEnd; ) {
 			const declaration = scanMethodDeclaration(tokens, memberStart, bodyEnd);
 			if (declaration) {
-				if (declaration.name) methods.push(`agent_session:${declaration.name}`);
+				if (declaration.name) {
+					const sourceId = `agent_session:${declaration.name}`;
+					if (!seenMethods.has(sourceId)) {
+						seenMethods.add(sourceId);
+						methods.push(sourceId);
+					}
+				}
 				memberStart = Math.max(memberStart + 1, declaration.end);
 				continue;
 			}
@@ -940,6 +967,7 @@ function validateRegistry(records: InventoryRecord[]): string[] {
 	const errors: string[] = [];
 	const ids = new Set<string>();
 	const sdkIds = new Set<string>();
+	const sourceIds = new Set<string>();
 	for (const operation of OPERATIONS) {
 		if (ids.has(operation.id)) errors.push(`Duplicate operation ID: ${operation.id}`);
 		ids.add(operation.id);
@@ -951,6 +979,8 @@ function validateRegistry(records: InventoryRecord[]): string[] {
 		if (operation.testIds.length === 0) errors.push(`${operation.id} is missing test IDs.`);
 	}
 	for (const record of records) {
+		if (sourceIds.has(record.sourceId)) errors.push(`Duplicate source seam: ${record.sourceId}`);
+		sourceIds.add(record.sourceId);
 		if (record.decision === "exclude") {
 			if (!record.rationale) errors.push(`${record.sourceId} exclusion lacks a locked rationale.`);
 			if (