@gajae-code/coding-agent 0.18.11 → 0.18.12

package/dist/types/config/settings.d.ts

@@ -16,6 +16,7 @@ import { AgentStorage } from "../session/agent-storage";
 import { type EditMode, type EditVariantMatch } from "../utils/edit-mode";
 import { type CasReceipt } from "./atomic-yaml-patch";
 import { type AutoroutingEffective } from "./autorouting-contract";
+import type { ConfigHotReloadFileSnapshot } from "./config-hot-reload";
 import { type ModelSelectorValue } from "./model-selector-value";
 import { type BashInterceptorRule, type GroupPrefix, type GroupTypeMap, type SettingPath, type SettingsSchemaReport, type SettingValue } from "./settings-schema";
 export type * from "./settings-schema";
@@ -24,6 +25,23 @@ export * from "./settings-schema";
 export interface RawSettings {
     [key: string]: unknown;
 }
+/** Validated candidate view. `get` includes local patches and effective overlays. */
+export interface SettingsGlobalConfigCandidate {
+    readonly configPath: string;
+    readonly diagnostics: SettingsSchemaReport;
+    get<P extends SettingPath>(settingPath: P): SettingValue<P>;
+    /** Candidate global values include pending local patches, but exclude other layers. */
+    getGlobal<P extends SettingPath>(settingPath: P): SettingValue<P> | undefined;
+}
+export interface SettingsConfigReloadPublication {
+    finalize(): void;
+    rollback(): void;
+}
+export declare class SettingsGlobalConfigReloadError extends Error {
+    readonly configPath: string | null;
+    readonly diagnostics?: SettingsSchemaReport | undefined;
+    constructor(message: string, configPath: string | null, diagnostics?: SettingsSchemaReport | undefined);
+}
 /**
  * Test-only seams for the config-root workflow migration. Production code
  * never sets these; tests use them to interleave external filesystem changes
@@ -143,6 +161,18 @@ export declare class Settings implements NotificationSettingsReader {
     /** Effective merged autorouting state shared by settings diagnostics and routing policy. */
     getEffectiveAutorouting(): AutoroutingEffective;
     onChanged(listener: (path: SettingPath) => void): () => void;
+    /** The resolved global config.yml path, or null for in-memory settings. */
+    getGlobalConfigPath(): string | null;
+    /**
+     * Validate the watcher's exact snapshot without writing or rereading it.
+     * Rebase pending local patches after prior durable operations settle.
+     */
+    stageGlobalConfigReload(snapshot: ConfigHotReloadFileSnapshot): Promise<SettingsGlobalConfigCandidate>;
+    /**
+     * Publish a staged global config and its dependent synchronous model commit as
+     * one in-memory transaction. A thrown commit restores settings without hooks.
+     */
+    publishGlobalConfigReload(candidate: SettingsGlobalConfigCandidate, commitSync?: () => void): SettingsConfigReloadPublication;
     /** Whether durable settings mutations are permitted for the loaded configuration. */
     canWriteDurableConfig(): boolean;
     /** Whether this instance can publish a mutation to a durable config file. */
@@ -191,7 +221,9 @@ export declare class Settings implements NotificationSettingsReader {
     getAgentDir(): string;
     getPlansDirectory(): string;
     /**
-     * Get shell configuration based on settings.
+     * Shell configuration for bash and the Python executor.
+     * `shellPath` comes from the user/global config only, so a project
+     * `.gjc/settings.json` cannot select the binary those executors run.
      */
     getShellConfig(): import("@gajae-code/utils/shell-config").ShellConfig;
     /**

package/dist/types/dap/config.d.ts

@@ -1,6 +1,10 @@
 import type { DapAdapterConfig, DapResolvedAdapter } from "./types";
 export declare function getAdapterConfigs(): Record<string, DapAdapterConfig>;
-export declare function resolveAdapter(adapterName: string, cwd: string): DapResolvedAdapter | null;
-export declare function getAvailableAdapters(cwd: string): DapResolvedAdapter[];
-export declare function selectLaunchAdapter(program: string, cwd: string, adapterName?: string): DapResolvedAdapter | null;
-export declare function selectAttachAdapter(cwd: string, adapterName?: string, port?: number): DapResolvedAdapter | null;
+/**
+ * `trustCwds` are extra trust roots, such as the session workspace when the command
+ * cwd is a different directory. A command controlled by any of them is refused.
+ */
+export declare function resolveAdapter(adapterName: string, cwd: string, trustCwds?: readonly string[]): DapResolvedAdapter | null;
+export declare function getAvailableAdapters(cwd: string, trustCwds?: readonly string[]): DapResolvedAdapter[];
+export declare function selectLaunchAdapter(program: string, cwd: string, adapterName?: string, trustCwds?: readonly string[]): DapResolvedAdapter | null;
+export declare function selectAttachAdapter(cwd: string, adapterName?: string, port?: number, trustCwds?: readonly string[]): DapResolvedAdapter | null;

package/dist/types/debug/system-info.d.ts

@@ -22,5 +22,10 @@ export interface SystemInfo {
 export declare function collectSystemInfo(): Promise<SystemInfo>;
 /** Format system info for display */
 export declare function formatSystemInfo(info: SystemInfo): string;
-/** Sanitize environment variables by redacting sensitive values */
+/**
+ * Sanitize environment variables for a debug report.
+ * Sensitive names stay fully replaced. Other values keep their text, with the
+ * same credential shapes removed that crash records already scrub before they
+ * are written to disk.
+ */
 export declare function sanitizeEnv(env: Record<string, string | undefined>): Record<string, string>;

package/dist/types/discovery/mcp-compat.d.ts

@@ -20,7 +20,9 @@ export declare function normalizeClaudeMcpJson(content: string, sourcePath: stri
  * Normalize a Codex `config.toml` file body into the internal MCP contract.
  * Only the `[mcp_servers.*]` sections are read; everything else is ignored.
  */
-export declare function normalizeCodexMcpToml(content: string, sourcePath: string, level?: "project" | "user"): MCPCompatNormalizeResult;
+export declare function normalizeCodexMcpToml(content: string, sourcePath: string, level?: "project" | "user", options?: {
+    omitEnvReferences?: boolean;
+}): MCPCompatNormalizeResult;
 /**
  * Validate a normalized server against the internal MCP contract. Returns an
  * error message, or undefined when the definition is importable. Callers use

package/dist/types/edit/modes/patch.d.ts

@@ -50,6 +50,9 @@ export interface ApplyPatchOptions {
      * object identity is not a durable-lock capability probe.
      */
     crossProcessLock?: boolean;
+    /** Explicit artifacts `local` root for this call. The caller session owns it. */
+    localRoot?: string;
+    signal?: AbortSignal;
 }
 /** Default filesystem implementation using Bun APIs */
 export declare const defaultFileSystem: FileSystem;
@@ -61,6 +64,8 @@ export declare const defaultFileSystem: FileSystem;
  * edits cannot silently overwrite each other (#2900).
  */
 export declare function applyPatch(input: PatchInput, options: ApplyPatchOptions): Promise<ApplyPatchResult>;
+/** Read-only mkdir check for one patch hunk. Does not create directories. */
+export declare function preflightPatchMkdir(input: PatchInput, options: ApplyPatchOptions): Promise<void>;
 /**
  * Preview what changes a patch would make without applying it.
  */

package/dist/types/edit/modes/replace.d.ts

@@ -121,3 +121,6 @@ export interface ExecuteReplaceSingleOptions {
     beginDeferredDiagnosticsForPath: (path: string) => WritethroughDeferredHandle;
 }
 export declare function executeReplaceSingle(options: ExecuteReplaceSingleOptions): Promise<AgentToolResult<EditToolDetails, typeof replaceEditEntrySchema>>;
+export declare function executeReplaceEntries(options: Omit<ExecuteReplaceSingleOptions, "params"> & {
+    edits: ReplaceEditEntry[];
+}): Promise<AgentToolResult<EditToolDetails, typeof replaceEditSchema>>;

package/dist/types/exec/bash-executor.d.ts

@@ -111,6 +111,18 @@ export declare function getShellSessionCount(): number;
  * shell resources, and is also callable directly (e.g. on owner teardown).
  */
 export declare function disposeAllShellSessions(): Promise<void>;
+type ShellMinimizerSource = {
+    getGroup(prefix: "shellMinimizer"): ShellMinimizerSettings;
+    getGlobal?(path: "shellMinimizer.settingsPath" | "shellMinimizer.settingsHash"): unknown;
+    getOverride?(path: "shellMinimizer.settingsPath"): unknown;
+};
+/**
+ * A repo `.gjc/settings.json` must not point the minimizer at a TOML file.
+ * The native gate loads that file only when `settingsHash` matches, and the
+ * pin is the user/global value. A user path or a runtime override is still
+ * passed through. A project path is passed only together with that pin.
+ */
+export declare function resolveTrustedShellMinimizer(settings: ShellMinimizerSource): ShellMinimizerSettings;
 /** Translate `ShellMinimizerSettings` into native `MinimizerOptions`, or `undefined` when disabled. */
 export declare function buildMinimizerOptions(group: ShellMinimizerSettings): MinimizerOptions | undefined;
 export declare function executeBash(command: string, options?: BashExecutorOptions): Promise<BashResult>;

package/dist/types/gjc-runtime/managed-owner-admission.d.ts

@@ -5,6 +5,9 @@ export declare const MANAGED_OWNER_PREDECESSOR_GENERATION_ENV = "GJC_MANAGED_OWN
 export declare const MANAGED_OWNER_PREDECESSOR_RUN_ID_ENV = "GJC_MANAGED_OWNER_PREDECESSOR_RUN_ID";
 export declare const MANAGED_OWNER_PREDECESSOR_INCARNATION_ENV = "GJC_MANAGED_OWNER_PREDECESSOR_INCARNATION";
 export declare const MANAGED_OWNER_TRANSCRIPT_PATH_ENV = "GJC_MANAGED_OWNER_TRANSCRIPT_PATH";
+export declare function trustedManagedOwnerTranscriptPath(env?: NodeJS.ProcessEnv, cwd?: string): string;
+/** Session file forwarded to a replacement child. Same provenance rule. */
+export declare function trustedManagedOwnerLaunchSessionFile(env: NodeJS.ProcessEnv, cwd: string): string;
 export interface ManagedOwnerRecoveryContext {
     root: string;
     binding: ManagedOwnerBinding;

package/dist/types/gjc-runtime/session-state-lock.d.ts

@@ -72,6 +72,8 @@ export declare const SessionStateLockTestHooks: {
     afterCurrentOwnerValidation?: (file: string) => void | Promise<void>;
     /** @internal Fault seam immediately before a held owner record rewrite mutates bytes. */
     beforeOwnerRecordRewrite?: (file: string) => void | Promise<void>;
+    /** @internal Fault seam immediately before the pre-rewrite fstat on the owner record handle. */
+    beforeOwnerRecordPrewriteStat?: (file: string) => void | Promise<void>;
     /** @internal Fault seam immediately before final transition-generation validation. */
     beforeTransitionReleaseLstat?: (transitionDir: string) => void | Promise<void>;
     /** @internal Fault seam immediately before setup generation capture. */

package/dist/types/gjc-runtime/state-runtime.d.ts

@@ -47,8 +47,6 @@ export declare const DEEP_INTERVIEW_EXECUTION_APPROVAL_RECORD_FILE = "deep-inter
 export declare const DEEP_INTERVIEW_EXECUTION_APPROVAL_MAX_AGE_MS: number;
 export interface ExecutionApprovalTranscriptBoundary {
     byte_length: number;
-    device: string;
-    inode: string;
     leaf_id: string | null;
     approval_tool_call_id: string;
 }

package/dist/types/migrate/adapters/codex.d.ts

@@ -1,5 +1,6 @@
 /**
- * Codex adapter: reads `~/.codex/config.toml` ([mcp_servers]) and `~/.codex/prompts`.
+ * Codex adapter: reads `~/.codex/config.toml` ([mcp_servers]), `~/.codex/prompts`,
+ * and user-level `~/.codex/AGENTS.md` instructions. Project AGENTS.md is native GJC input.
  */
 import { type Adapter } from "./index";
 export declare const codexAdapter: Adapter;

package/dist/types/migrate/adapters/index.d.ts

@@ -1,13 +1,22 @@
-import type { AdapterResult, MigrateSource, SkillCandidate, SourceDiagnostic } from "../types";
+import type { AdapterResult, InstructionCandidate, MigrateSource, SkillCandidate, SourceDiagnostic } from "../types";
 export interface AdapterOptions {
     /** Home directory root; overridable for tests. */
     homeDir: string;
+    /** Source scope for instructions; other source files remain home-scoped. */
+    scope: "project" | "user";
+    /** Project root used when importing project instructions. */
+    cwd: string;
 }
 export interface Adapter {
     source: MigrateSource;
     collect(options: AdapterOptions): Promise<AdapterResult>;
 }
 export declare function getAdapter(source: MigrateSource): Adapter;
+/** Collect one source instruction file without interpreting or rewriting its content. */
+export declare function collectInstructionFile(filePath: string, source: MigrateSource): Promise<{
+    candidates: InstructionCandidate[];
+    diagnostics: SourceDiagnostic[];
+}>;
 /** Read a text file, classifying absence/IO errors into source diagnostics. */
 export declare function readSourceText(filePath: string, source: MigrateSource, type: SourceDiagnostic["type"]): Promise<{
     text: string;

package/dist/types/migrate/executor.d.ts

@@ -1,2 +1,4 @@
 import type { MigrateAction } from "./types";
-export declare function executeActions(actions: MigrateAction[]): Promise<MigrateAction[]>;
+export declare function executeActions(actions: MigrateAction[], options?: {
+    project?: boolean;
+}): Promise<MigrateAction[]>;

package/dist/types/migrate/types.d.ts

@@ -1,8 +1,8 @@
 /**
  * Shared types for `gjc migrate`.
  *
- * Imports MCP servers and skills from other coding agents (Claude Code, Codex,
- * OpenCode) into native GJC config. See the consensus plan under
+ * Imports MCP servers, skills, and instruction files from other coding agents
+ * (Claude Code, Codex, OpenCode) into native GJC config. See the consensus plan under
  * `.gjc/plans/ralplan/` for the full taxonomy and force/collision semantics.
  */
 import type { MCPServerConfig } from "../runtime-mcp/types";
@@ -12,7 +12,7 @@ export declare const MIGRATE_SOURCES: readonly MigrateSource[];
 /** Canonical, deterministic ordering used when expanding `--from all` / repeated `--from`. */
 export declare const CANONICAL_SOURCE_ORDER: readonly MigrateSource[];
 /** What kind of thing an action/coverage row is about. */
-export type MigrateItemType = "mcp" | "skill" | "source";
+export type MigrateItemType = "mcp" | "skill" | "instruction" | "source";
 /**
  * Per-item outcome taxonomy.
  *
@@ -42,6 +42,12 @@ export interface SkillCandidate {
     content: string;
     warnings: string[];
 }
+/** An instructions file imported as the active GJC AGENTS.md for its scope. */
+export interface InstructionCandidate {
+    source: MigrateSource;
+    name: string;
+    content: string;
+}
 /**
  * Source-level diagnostic for a single source/type pair (e.g. "codex mcp config
  * was malformed"). Distinct from per-item actions so absent/unreadable sources
@@ -57,6 +63,7 @@ export interface SourceDiagnostic {
 export interface AdapterResult {
     mcpCandidates: McpCandidate[];
     skillCandidates: SkillCandidate[];
+    instructionCandidates: InstructionCandidate[];
     diagnostics: SourceDiagnostic[];
 }
 /** A single planned action consumed identically by dry-run and live execution. */
@@ -80,6 +87,9 @@ export interface MigrateAction {
     skill?: {
         content: string;
     };
+    instruction?: {
+        content: string;
+    };
 }
 export interface MigrateWarning {
     source: MigrateSource;
@@ -91,6 +101,7 @@ export type StatusCounts = Record<MigrationStatus, number>;
 export interface MigrateDestinations {
     mcpConfigPath: string;
     skillsDir: string;
+    instructionsPath: string;
 }
 /** The full machine-readable report emitted with `--json`. */
 export interface MigrateReport {
@@ -105,6 +116,7 @@ export interface MigrateReport {
         byType: {
             mcp: StatusCounts;
             skill: StatusCounts;
+            instruction: StatusCounts;
             source: StatusCounts;
         };
         bySource: Record<MigrateSource, StatusCounts>;

package/dist/types/modes/components/settings-selector.d.ts

@@ -69,6 +69,10 @@ export interface SettingsCallbacks {
     onPetCommit?: (mode: string) => boolean;
     /** Called for status line preview while configuring */
     onStatusLinePreview?: (settings: StatusLinePreviewSettings) => void;
+    /** Called when a status-line submenu begins an uncommitted preview. */
+    onStatusLinePreviewStart?: () => void;
+    /** Called when a status-line preview is committed, cancelled, or disposed. */
+    onStatusLinePreviewEnd?: () => void;
     /** Get current rendered status line for inline preview */
     getStatusLinePreview?: (width?: number) => string;
     /** Render a status-line preview for supplied draft settings without mutating the live status line. */
@@ -97,6 +101,8 @@ export declare class SettingsSelectorComponent extends Container {
     private readonly notificationsOperations?;
     constructor(context: SettingsRuntimeContext, callbacks: SettingsCallbacks, notificationsOperations?: NotificationsEditorOperations | undefined);
     getFocusComponent(): Component;
+    /** Refresh saved rows and model-profile choices without replacing active editors. */
+    refreshFromConfiguration(availableModelProfiles: readonly string[]): void;
     dispose(): void;
     handleInput(data: string): void;
 }

package/dist/types/modes/controllers/selector-controller.d.ts

@@ -84,6 +84,8 @@ export declare class SelectorController {
         component: Component;
         focus: Component;
     }): void;
+    /** Refresh accepted disk configuration without discarding an open preview. */
+    refreshConfiguration(): void;
     showCommandPalette(commands: SlashCommand[], actions: CommandPaletteAction[], executeSlashCommand: (name: string) => Promise<void>): void;
     showProviderOnboarding(): void;
     showFrictionlessOnboarding(): Promise<void>;

package/dist/types/modes/theme/theme.d.ts

@@ -27,6 +27,7 @@ export declare class Theme {
     strikethrough(text: string): string;
     inverse(text: string): string;
     getFgAnsi(color: ThemeColor): string;
+    getSvgPalette(): Readonly<Record<string, string>>;
     getBgAnsi(color: ThemeBg): string;
     getColorMode(): ColorMode;
     getThinkingBorderColor(level: ThinkingLevel | Effort): (str: string) => string;

package/dist/types/runtime-mcp/content-limits.d.ts

@@ -1,4 +1,8 @@
 export declare const MCP_MAX_CONTENT_BYTES: number;
+export declare const MCP_MAX_IMAGES = 16;
+export declare const MCP_MAX_IMAGE_SOURCE_DIMENSION = 8192;
+export declare const MCP_MAX_IMAGE_SOURCE_PIXELS = 16000000;
+export declare const MCP_MAX_IMAGE_OUTPUT_BYTES: number;
 export declare const MCP_MAX_ERROR_BYTES: number;
 export declare const MCP_MAX_SSE_REQUEST_MESSAGES = 1024;
 export declare const MCP_MAX_SSE_BATCH_MESSAGES = 1024;

package/dist/types/runtime-mcp/manager.d.ts

@@ -71,6 +71,8 @@ export interface MCPToolCatalogSnapshot {
     publication: MCPToolCatalogPublication;
     generation: number;
 }
+/** Drop project stdio servers unless the user/global opt-in is set. */
+export declare function omitUnapprovedProjectStdio(configs: Record<string, MCPServerConfig>, sources: Record<string, SourceMeta>, allowProjectStdio: boolean, toolsOnly?: boolean): void;
 /** Options for discovering and connecting to MCP servers */
 export interface MCPDiscoverOptions {
     /** Whether to load project-level config (default: true) */
@@ -97,6 +99,11 @@ export interface MCPDiscoverOptions {
 export interface MCPManagerOptions {
     /** Restrict this instance to tools from an explicit MCP config. */
     toolsOnly?: boolean;
+    /**
+     * Spawn stdio servers loaded from a project MCP file. Default false.
+     * User-scope servers and an explicit `--mcp-config` file are unaffected.
+     */
+    allowUntrustedProjectStdio?: boolean;
     /**
      * Ceiling for the startup wait, in milliseconds. ACP lifecycle launches and
      * plugin MCP startup use bounded caller-owned budgets; other consumers keep

package/dist/types/runtime-mcp/plugin-mcp-name-filter.d.ts

@@ -0,0 +1,22 @@
+export declare const GJC_PLUGIN_MCP_PROVIDER = "gjc-plugins";
+/**
+ * A repository plugin MCP server must not occupy a normalized tool name that a
+ * non-plugin server already published. The whole plugin server is omitted so a
+ * sibling tool from that server is not left registered. Non-plugin collisions
+ * and the input order stay unchanged.
+ */
+export declare function omitPluginMcpNameShadows<T extends {
+    name: string;
+}>(tools: readonly T[]): T[];
+/** Normalized names of plugin tools that remain after shadow omission. */
+export declare function survivingPluginMcpToolNames<T extends {
+    name: string;
+}>(tools: readonly T[]): string[];
+/**
+ * The required-name list is the plugin tools that survived the name filter,
+ * plus requested names this batch did not omit. An omitted plugin tool, including
+ * a sibling that does not itself collide, is not required.
+ */
+export declare function retainPluginMcpMandatoryNames(tools: readonly {
+    name: string;
+}[], requested: readonly string[]): string[];

package/dist/types/runtime-mcp/tool-bridge.d.ts

@@ -72,6 +72,8 @@ export declare class MCPTool implements CustomTool<TSchema, MCPToolDetails> {
     readonly mcpToolName: string;
     /** Server name */
     readonly mcpServerName: string;
+    /** True when this tool came from a repository GJC plugin bundle. */
+    readonly gjcPluginBundle: boolean;
     private connection;
     invalidateForSessionControl(): void;
     /** Create MCPTool instances for all tools from an MCP server lease/connection. */
@@ -98,6 +100,8 @@ export declare class DeferredMCPTool implements CustomTool<TSchema, MCPToolDetai
     readonly mcpToolName: string;
     /** Server name */
     readonly mcpServerName: string;
+    /** True when this tool came from a repository GJC plugin bundle. */
+    readonly gjcPluginBundle: boolean;
     invalidateForSessionControl(): void;
     /** Create DeferredMCPTool instances for all tools from an MCP server */
     static fromTools(serverName: string, tools: MCPToolDefinition[], getConnection: () => Promise<MCPServerConnection>, source?: SourceMeta, reconnect?: MCPReconnect, options?: MCPToolOptions): DeferredMCPTool[];

package/dist/types/sdk/broker/broker-exit.d.ts

@@ -29,7 +29,7 @@ export interface BrokerExitRecord {
 export interface BrokerStartupExitRecord {
     version: 1;
     mode: "startup";
-    reason: "startup-deadline" | "startup-signal" | "startup-lock-blocked";
+    reason: "startup-deadline" | "startup-signal" | "startup-lock-blocked" | "startup-lock-unavailable";
     fenceReason: null;
     fencedForMs: 0;
     uptimeMs: number;
@@ -38,7 +38,7 @@ export interface BrokerStartupExitRecord {
     exitCode: 1 | 130 | 143;
     timeoutMs: number | null;
     writtenAt: number;
-    /** For lock-blocked reason: path to the retained removal transition. */
+    /** For lock refusal reasons: path to the transition or lock that blocked startup. */
     blockingLockPath?: string;
 }
 export type BrokerStartupExitWriteStatus = {

package/dist/types/sdk/broker/broker.d.ts

@@ -1,4 +1,4 @@
-import type { NativeDirectoryTreeSnapshot } from "@gajae-code/natives";
+import { type NativeDirectoryTreeSnapshot } from "@gajae-code/natives";
 import type { ModelProfileErrorDetails } from "../../config/model-profile-contract";
 import type { TaskArtifactOwnerDeletionEvidence, TaskArtifactOwnerRetirementContinuation } from "../../session/task-artifact-owner-codec";
 import { type SdkHostModelResolver } from "../host/model-pin";
@@ -283,6 +283,7 @@ export declare function reapStaleBrokerLockArtifacts(input: {
     now?: number;
     graceMs?: number;
     pidAlive?: (pid: number) => boolean;
+    processIncarnation?: (pid: number) => string | undefined;
 }): Promise<BrokerLockArtifactReapResult>;
 export interface StartupAdmissionTiming {
     now(): number;
@@ -412,6 +413,11 @@ export declare function setTerminalPersistenceHookForTest(broker: Broker, hook:
 export declare function setAmbiguityGraceForTest(broker: Broker, graceMs: number | undefined): void;
 /** Test-only hook for shortening the startup lock-artifact reap bound. */
 export declare function setLockArtifactGraceForTest(broker: Broker, graceMs: number | undefined): void;
+/** Test-only barriers for exercising the cross-process broker-lock reclaim fence. */
+export declare function setBrokerLockReclaimHooksForTest(broker: Broker, hooks: {
+    beforeQuarantine?: () => Promise<void>;
+    onContended?: () => void;
+} | undefined): void;
 /** Test-only hook for shortening the bounded liveness deadline. */
 export declare function setLivenessGraceForTest(broker: Broker, graceMs: number | undefined): void;
 /** Test-only hook for shortening the bounded wait before a deferred managed close is queued. */

package/dist/types/sdk/broker/daemon-entry.d.ts

@@ -1,4 +1,6 @@
+import type * as childProcess from "node:child_process";
 import { type BrokerDiscovery } from "./discovery";
+import { type BrokerLaunchHandoff, type BrokerLaunchResult } from "./ensure";
 export interface AuthorizedBrokerSuccessorOptions {
     agentDir: string;
     requestId: string;
@@ -11,10 +13,14 @@ export type AuthorizedBrokerSuccessorResult = {
     discovery: BrokerDiscovery;
 } | {
     kind: "spawned";
+    child: childProcess.ChildProcess;
+    realBrokerPid: number | undefined;
+    realBrokerIncarnation: string | undefined;
+    handoff: BrokerLaunchHandoff | undefined;
     discovery: BrokerDiscovery;
 } | {
     kind: "refused";
-    reason: "deadline_elapsed" | "intent_not_committed" | "spawn_failed" | "spawn_exited_before_publication" | "publication_timeout";
+    reason: "deadline_elapsed" | "intent_not_committed" | "spawn_failed" | "spawn_exited_before_publication" | "publication_timeout" | "startup_lock_unavailable";
     detail?: string;
 };
 /**
@@ -30,6 +36,10 @@ export type AuthorizedBrokerSuccessorResult = {
  * has been released.
  */
 export declare function launchAuthorizedBrokerSuccessor(options: AuthorizedBrokerSuccessorOptions): Promise<AuthorizedBrokerSuccessorResult>;
+/** Test hook: retries exact cleanup before mapping a launch error to refusal. */
+export declare function refuseFailedBrokerLaunchForTest(launched: BrokerLaunchResult): Promise<Extract<AuthorizedBrokerSuccessorResult, {
+    kind: "refused";
+}>>;
 /**
  * Positive OS-confirmed absence of the exact prior owner, distinguished from
  * every merely-inconclusive outcome (permission denial, PID reuse ambiguity,

package/dist/types/sdk/broker/doctor-restart.d.ts

@@ -44,7 +44,7 @@ export type DoctorBrokerRestartOutcome = {
     kind: "successor_refused";
     requestId: string;
     oldOwner: BrokerRestartOwnerIdentity;
-    reason: "deadline_elapsed" | "intent_not_committed" | "spawn_failed" | "spawn_exited_before_publication" | "publication_timeout";
+    reason: "deadline_elapsed" | "intent_not_committed" | "spawn_failed" | "spawn_exited_before_publication" | "publication_timeout" | "startup_lock_unavailable";
     detail?: string;
 };
 export declare function prepareDoctorBrokerRestart(client: SdkClient, discovery: BrokerDiscovery, options: DoctorBrokerRestartOptions & {