@gajae-code/coding-agent 0.18.11 → 0.19.0

package/dist/types/async/job-manager.d.ts

@@ -155,6 +155,8 @@ export interface SubagentRecord {
         seq: number;
         message?: string;
         resumeToolCallId?: string;
+        admissionEndpointId?: string;
+        ownedRegistrationEndpointId?: string;
         createdAt: number;
     };
     /** Last queued-resume seq for a CANCELLED queued resume (rec.queued is
@@ -187,7 +189,7 @@ export interface ResumeDescriptor {
  * In-memory resume runner bound to the session that originally launched a
  * subagent. Never serialized: process restart drops it so resume fails closed.
  */
-export type ResumeRunner = (subagentId: string, message?: string, descriptor?: ResumeDescriptor, resumeToolCallId?: string) => string | undefined;
+export type ResumeRunner = (subagentId: string, message?: string, descriptor?: ResumeDescriptor, resumeToolCallId?: string, admissionEndpointId?: string, ownedRegistrationEndpointId?: string) => string | undefined;
 export interface AsyncJobManagerOptions {
     onJobComplete: (jobId: string, text: string, job?: AsyncJob) => void | Promise<void>;
     maxRunningJobs?: number;
@@ -361,7 +363,7 @@ export declare class AsyncJobManager {
      *  resume can neither resolve its lineage nor register its owned tuple
      *  (review thread P1). Returns TRUE when the mapping was moved (or no move
      *  was needed); returns FALSE when the successor endpoint is owned by a
-     *  FOREIGN live manager — the transition must then abort or roll back
+    /**
      *  BEFORE retiring predecessor state, because leaving this manager under
      *  the predecessor while tools resolve the successor to the foreign
      *  manager sends jobs to the wrong session and owned aborts lose their
@@ -447,7 +449,9 @@ export declare class AsyncJobManager {
     cancelAndProveOwnerSubagents(lease: OwnerSubagentShutdownLease, options?: {
         timeoutMs?: number;
     }): Promise<OwnerSubagentShutdownProof>;
-    finishOwnerSubagentShutdown(lease: OwnerSubagentShutdownLease, outcome: "commit" | "release"): void;
+    finishOwnerSubagentShutdown(lease: OwnerSubagentShutdownLease, outcome: "commit" | "release", options?: {
+        drainResumeQueue?: boolean;
+    }): void;
     /** Request a graceful safe-boundary pause of a running subagent. */
     pauseSubagent(subagentId: string, filter?: AsyncJobFilter): {
         ok: boolean;

package/dist/types/async/result-formatting.d.ts

@@ -0,0 +1,2 @@
+import type { SessionManager } from "../session/session-manager";
+export declare function formatAsyncResultForFollowUp(sessionManager: SessionManager, result: string, allowArtifact?: boolean): Promise<string>;

package/dist/types/autoresearch/git.d.ts

@@ -21,7 +21,7 @@ export declare function getCurrentAutoresearchBranch(workDir: string): Promise<s
  * Mission state under `.gjc/**` is intentionally NOT listed here: it is
  * runtime-owned and only the sanctioned `gjc autoresearch` CLI writes it.
  */
-export declare function isAutoresearchAuthorizedResearchPath(_cwd: string, rawPath: string): boolean;
+export declare function isAutoresearchAuthorizedResearchPath(cwd: string, rawPath: string): boolean;
 /**
  * Ensure the working tree is on an `autoresearch/*` branch when possible.
  *

package/dist/types/capability/fs.d.ts

@@ -2,8 +2,8 @@ import * as fs from "node:fs";
 /** Authority used when reading from an explicit-home discovery context. */
 export type ReadScope = "project" | "user" | "native";
 export interface FileIdentity {
-    readonly dev: number;
-    readonly ino: number;
+    readonly dev: bigint;
+    readonly ino: bigint;
 }
 export interface ReadFileOptions {
     /** Canonicalize the file and enforce the supplied home/profile boundary. */

package/dist/types/capability/rule.d.ts

@@ -8,6 +8,8 @@ export interface RuleFrontmatter {
     alwaysApply?: boolean;
     /** New key for TTSR match conditions. */
     condition?: string | string[];
+    /** AST-grep pattern(s) for TTSR AST matching (evaluated on completed tool args). */
+    astCondition?: string | string[];
     /** New key for TTSR stream scope. */
     scope?: string | string[];
     /** Per-rule TTSR interrupt mode override. */
@@ -36,6 +38,8 @@ export interface Rule {
     description?: string;
     /** Regex condition(s) that can trigger TTSR interruption. */
     condition?: string[];
+    /** AST-grep pattern(s) for TTSR AST matching (evaluated on completed tool args). */
+    astCondition?: string[];
     /** Optional stream scope tokens (for example: text, thinking, tool:edit(*.ts)). */
     scope?: string[];
     /** Per-rule TTSR interrupt mode override (falls back to global ttsr.interruptMode). */
@@ -48,15 +52,16 @@ export interface Rule {
     _source: SourceMeta;
 }
 /**
- * Parse `condition` + `scope` from rule frontmatter.
+ * Parse `condition`, `astCondition`, and `scope` from rule frontmatter.
  *
  * - `condition` accepts string or string[]
+ * - `astCondition` accepts string or string[] (ast-grep patterns)
  * - `scope` accepts string or string[]
  * - legacy `ttsr_trigger` / `ttsrTrigger` are accepted as a `condition` fallback
  * - condition tokens that look like file globs become scope shorthands:
  *   `*.rs` => `tool:edit(*.rs)`, `tool:write(*.rs)` and a catch-all condition `.*`
  */
-export declare function parseRuleConditionAndScope(frontmatter: RuleFrontmatter): Pick<Rule, "condition" | "scope">;
+export declare function parseRuleConditionAndScope(frontmatter: RuleFrontmatter): Pick<Rule, "condition" | "astCondition" | "scope">;
 /**
  * Process-global snapshot of rules the active session loaded.
  * Read by internal URL protocol handlers (rule://).

package/dist/types/cli/accounts-cli.d.ts

@@ -1,9 +1,9 @@
-export declare const ACCOUNTS_ACTIONS: readonly ["list", "check", "pin", "logout"];
+export declare const ACCOUNTS_ACTIONS: readonly ["list", "check", "pin", "prefer", "logout"];
 export type AccountsAction = (typeof ACCOUNTS_ACTIONS)[number];
 export interface AccountsCommandArgs {
     action: AccountsAction;
     provider?: string;
-    selector?: string;
+    selectors?: readonly string[];
     flags: {
         json?: boolean;
         persistent?: boolean;

package/dist/types/cli/append-system-prompt.d.ts

@@ -0,0 +1,6 @@
+export interface AppendSystemPromptCandidate {
+    level: "user" | "project";
+    path: string;
+}
+/** First user file. A repository copy is untrusted project text and is never selected. */
+export declare function selectAppendSystemPromptFile(candidates: readonly AppendSystemPromptCandidate[]): string | undefined;

package/dist/types/cli/args.d.ts

@@ -6,8 +6,6 @@ export interface Args {
     allowHome?: boolean;
     provider?: string;
     model?: string;
-    smol?: string;
-    slow?: string;
     plan?: string;
     mpreset?: string;
     default?: boolean;
@@ -62,3 +60,10 @@ export interface Args {
 export declare function parseArgs(args: string[], authority?: ParseArgsAuthority): Args;
 /** Reject flags whose only owners are non-local startup consumers. */
 export declare function assertLocalLaunchArgs(parsed: Args): void;
+/**
+ * Resolve the ephemeral `plan` model-role override that plan mode switches to.
+ *
+ * Precedence is CLI `--plan` > `GJC_PLAN_MODEL` > legacy `PI_PLAN_MODEL`.
+ * `$pickenv` trims values and treats empty/whitespace as unset.
+ */
+export declare function resolvePlanModelOverride(parsed: Pick<Args, "plan">): string | undefined;

package/dist/types/cli/customize-doctor-precedence.d.ts

@@ -0,0 +1,16 @@
+export interface DiscoveryPrecedenceCandidate {
+    key: string | undefined;
+    provider: string;
+    scope: "user" | "project" | "native";
+    eligible: boolean;
+    enabled: boolean;
+}
+export interface DiscoveryPrecedenceResult {
+    shadowed: boolean;
+    shadowedBy?: {
+        provider: string;
+        scope: DiscoveryPrecedenceCandidate["scope"];
+    };
+}
+/** Resolve ordered discovery candidates without allowing ineligible or disabled entries to own keys. */
+export declare function resolveDiscoveryPrecedence(candidates: readonly DiscoveryPrecedenceCandidate[]): DiscoveryPrecedenceResult[];

package/dist/types/cli/customize-doctor.d.ts

@@ -20,9 +20,10 @@ export type CustomizeSurfaceKind = "mcp" | "skill" | "hook" | "tool" | "extensio
  *
  * - `canonical`: project/global `.gjc` entries and GJC bundled defaults — the
  *   primary load path and the persisted authority for sessions.
- * - `convention`: items from registered non-native conventions that are part of
- *   the discovery load path (claude-plugins, claude/codex hooks, agents,
- *   cursor, gemini, opencode, windsurf, cline, github, mcp-json, ssh).
+ * - `convention`: items exposed by registered non-native discovery providers
+ *   (claude-plugins, claude/codex hooks, agents, cursor, gemini, opencode,
+ *   windsurf, cline, github, mcp-json, ssh). The item status identifies whether
+ *   a discovered item is active, stored-only, or otherwise excluded at runtime.
  * - `import-candidate`: Claude Code / Codex project (+ global) files on
  *   surfaces GJC deliberately never loads. Reported for provenance only; never
  *   active runtime authority. Candidates for a future import flow (#4291).

package/dist/types/cli/doctor/install-repairs.d.ts

@@ -10,6 +10,7 @@
  * `reconcileActivationRecord`.
  */
 import { type DirectoryIdentity, type FileIdentity } from "../install-activation";
+import { InstallationAccessDeniedError } from "../update-cli";
 export type InstallSourceKind = "standalone" | "source" | "npm-wrapper" | "unknown";
 /**
  * The trust anchor for "this target is the exact binary the current process
@@ -62,8 +63,10 @@ export interface InstallRepairResult {
     readonly reason?: string;
     readonly recordPath?: string;
     readonly sideEffectStarted: boolean;
-    /** Present only for a pre-mutation Windows sharing violation (nothing was renamed). */
+    /** Native Windows status returned by exact replacement. */
     readonly windowsErrorCode?: string;
+    readonly stagingCleanupWarning?: string;
+    readonly retainedPaths?: InstallationAccessDeniedError["retainedPaths"];
     readonly before?: {
         readonly identity?: FileIdentity;
         readonly digest?: string;

package/dist/types/cli/install-activation.d.ts

@@ -134,8 +134,12 @@ export interface ReconcileResult {
     readonly record?: ActivationRecordV1;
     readonly recordIdentity?: FileIdentity;
     readonly reason?: string;
-    /** Present only for a pre-mutation Windows sharing violation on the destination open. */
+    /** Present only for a pre-mutation Windows exact-replacement failure. */
     readonly windowsErrorCode?: string;
+    readonly detachedPath?: string;
+    readonly retainedSuccessorPath?: string;
+    readonly retainedPlaceholderPath?: string;
+    readonly retainedUnknownPath?: string;
 }
 /**
  * Reconcile the activation record for `targetPath` against durable state.
@@ -148,9 +152,11 @@ export interface ReconcileResult {
  * records are re-verified and advanced to `verified` once the target
  * digest/identity matches the candidate. `verified` records are read-only
  * re-confirmations. Anything else (target/parent drift, missing staged
- * candidate, an already-occupied backup name, a pre-mutation Windows
- * sharing violation) is reported as `conflict` with the exact reason and
- * never silently promoted.
+ * candidate, an already-occupied backup name) is reported as `conflict` with
+ * the exact reason and never silently promoted. A pre-mutation Windows
+ * sharing violation becomes `pending_activation`; an access-denied result is
+ * also recorded as pending for safe reuse but remains a `conflict` so the
+ * caller reports the publication failure.
  */
 export declare function reconcileActivationRecord(targetPath: string, options?: {
     readonly allowPromotion?: boolean;

package/dist/types/cli/public-command-errors.d.ts

@@ -81,6 +81,8 @@ export declare const PUBLIC_COMMAND_DIAGNOSTICS: {
     readonly router_cleanup_failed: "SDK session Router cleanup failed.";
     readonly broker_cleanup_failed: "SDK broker client cleanup failed.";
     readonly lifecycle_idempotency_conflict: "The broker reported an idempotency conflict. Reconcile existing lifecycle state before deciding whether another request is safe.";
+    readonly lifecycle_legacy_history_ambiguous: "The broker refused admission because legacy lifecycle history cannot prove this target is unrelated. This request was not dispatched; this refusal does not settle earlier effects. Preserve the ledger and original operation, request key, and target. For a prior session.create, use read-only session.lookup with its original key and create target; not_found is not proof of no effect. An empty transcript, stopped host, or fresh key does not resolve this fence. Do not edit the ledger, force deletion, or retry with another key; missing identity or terminal effect evidence requires operator investigation.";
+    readonly lifecycle_input_refused: "The broker refused the request as invalid input. Correct the request payload and reconcile existing lifecycle state before deciding whether another request is safe.";
     readonly usage_transport_exclusive: "Specify exactly one of --stdio or --socket <path>.";
     readonly usage_duplicate_option: "Each option on this command may occur at most once.";
     readonly usage_unknown_argument: "An unrecognized argument was supplied; re-read the command help for its accepted grammar.";

package/dist/types/cli/root-flags.d.ts

@@ -6,12 +6,6 @@ export declare const ROOT_LAUNCH_FLAGS: {
     model: FlagDescriptor<"string"> & {
         description: string;
     };
-    smol: FlagDescriptor<"string"> & {
-        description: string;
-    };
-    slow: FlagDescriptor<"string"> & {
-        description: string;
-    };
     plan: FlagDescriptor<"string"> & {
         description: string;
     };
@@ -141,12 +135,6 @@ export declare const LAUNCH_PARSE_FLAGS: {
     model: FlagDescriptor<"string"> & {
         description: string;
     };
-    smol: FlagDescriptor<"string"> & {
-        description: string;
-    };
-    slow: FlagDescriptor<"string"> & {
-        description: string;
-    };
     plan: FlagDescriptor<"string"> & {
         description: string;
     };

package/dist/types/cli/update-cli.d.ts

@@ -10,7 +10,7 @@ import { type UpdateChannel } from "../config/update-channel";
 import { type NotificationProvider } from "../sdk/bus/config";
 import type { TelemetryDetails, TelemetryEventName } from "../telemetry";
 import { type GithubReleaseLookupOptions } from "./github-release";
-import { type DirectoryIdentity, type FileIdentity } from "./install-activation";
+import { type DirectoryIdentity, type FileIdentity, type ReconcileResult } from "./install-activation";
 import { offerMacosCommunityApp } from "./macos-community-app";
 export interface UpdateCommandOptions {
     force: boolean;
@@ -63,6 +63,19 @@ export interface BinaryReplacementOptions {
     verifyStagedVersion?: (stagingPath: string, expectedVersion: string) => Promise<void>;
     verifyInstalledVersion: (expectedVersion: string) => Promise<InstalledVersionVerification>;
 }
+export declare class InstallationAccessDeniedError extends Error {
+    readonly targetPath: string;
+    readonly windowsErrorCode?: string | undefined;
+    readonly stagingCleanupWarning?: string | undefined;
+    readonly retainedPaths?: Pick<ReconcileResult, "detachedPath" | "retainedSuccessorPath" | "retainedPlaceholderPath" | "retainedUnknownPath"> | undefined;
+    readonly code = "access_denied";
+    constructor(targetPath: string, windowsErrorCode?: string | undefined, stagingCleanupWarning?: string | undefined, retainedPaths?: Pick<ReconcileResult, "detachedPath" | "retainedSuccessorPath" | "retainedPlaceholderPath" | "retainedUnknownPath"> | undefined);
+}
+export declare class ActivationRetryCandidateRepointError extends Error {
+    readonly candidatePath: string;
+    readonly reasonCode: string;
+    constructor(candidatePath: string, cause: unknown);
+}
 /**
  * Parse update subcommand arguments.
  * Returns undefined if not an update command.
@@ -88,6 +101,9 @@ export type UpdateTarget = {
 } | MigrationUpdateTarget;
 type PathPlatform = NodeJS.Platform;
 type PackageExists = (packageName: string, packageRoot: string) => boolean;
+export declare function resolveProjectLocalPackageInstallForTest(ompPath: string, platform: PathPlatform): {
+    packageRoot: string;
+} | undefined;
 export declare function resolveUpdateMethodForTest(ompPath: string, bunBinDir: string | undefined): "bun" | "npm" | "binary";
 export declare function resolveNpmManagedTargetForTest(ompPath: string, platform: PathPlatform, packageExists: PackageExists): PackageManagerTarget | undefined;
 export declare function defaultUserBinaryPath(platform?: NodeJS.Platform, env?: NodeJS.ProcessEnv): string;
@@ -171,14 +187,16 @@ export interface BinaryUpdateFlow {
     /** Called once fsync has succeeded, right before replacement begins. */
     beforeReplace?(): void;
 }
+export declare function isUpdateStagingNameForTest(targetPath: string, name: string): boolean;
+export declare function isUpdateBackupNameForTest(targetPath: string, name: string): boolean;
 /**
  * Orchestrate download → fsync → replace → verify with a strict ordering
  * contract: the downloaded temp binary MUST be flushed to stable storage
  * before it is published (renamed into place) or exec'd for verification.
  *
  * If fsync fails the temp bytes are not durable, so we abort before
- * replacement/verification and retain the staging artifact rather than risk
- * deleting a substituted pathname or installing a possibly-truncated binary.
+ * replacement/verification. Final cleanup removes the exact staging identity
+ * only when no activation record still owns it.
  */
 export declare function runBinaryUpdateFlow(targetPath: string, url: string, expectedVersion: string, flow: BinaryUpdateFlow): Promise<InstalledVersionVerification>;
 export declare function acquireBinaryUpdateLock(targetPath: string): Promise<() => Promise<void>>;

package/dist/types/cli-main.d.ts

@@ -27,12 +27,6 @@ export declare class RootHelpCommand extends Command {
         model: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
             description: string;
         };
-        smol: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
-            description: string;
-        };
-        slow: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
-            description: string;
-        };
         plan: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
             description: string;
         };

package/dist/types/cli-ordinary.d.ts

@@ -3,8 +3,8 @@
  * This module owns the effectful bootstrap (startup timing, stderr drainer,
  * bash-shell worker protocol) plus the unchanged ordinary routing order:
  * bash-shell workers -> darwin malloc re-exec -> internal smoke -> tmux owner
- * isolation -> managed-owner supervisor/admission/recovery -> private sdk
- * stderr drainer -> public family dispatch -> community app -> doctor worker /
+ * isolation -> managed-owner supervisor/admission/recovery -> broker hop ->
+ * private sdk stderr drainer -> public family dispatch -> community app -> doctor worker /
  * probe / cli -> full registry. `cli.ts` imports it lazily, only after argv has
  * been proven not to be a `sdk diagnostics` observation. */
 import { commands } from "./cli-commands";

package/dist/types/commands/accounts.d.ts

@@ -7,7 +7,7 @@ export default class Accounts extends Command {
         action: import("@gajae-code/utils/cli").ArgDescriptor & {
             description: string;
             required: false;
-            options: ("check" | "list" | "logout" | "pin")[];
+            options: ("check" | "list" | "logout" | "pin" | "prefer")[];
         };
         provider: import("@gajae-code/utils/cli").ArgDescriptor & {
             description: string;
@@ -16,6 +16,7 @@ export default class Accounts extends Command {
         selector: import("@gajae-code/utils/cli").ArgDescriptor & {
             description: string;
             required: false;
+            multiple: true;
         };
     };
     static flags: {

package/dist/types/commands/launch.d.ts

@@ -20,12 +20,6 @@ export default class Index extends Command {
         model: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
             description: string;
         };
-        smol: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
-            description: string;
-        };
-        slow: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
-            description: string;
-        };
         plan: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
             description: string;
         };

package/dist/types/commands/migrate.d.ts

@@ -1,5 +1,5 @@
 /**
- * Import MCP servers and skills from other coding agents into GJC.
+ * Import MCP servers, skills, slash commands, and instructions from other coding agents into GJC.
  */
 import { Command } from "@gajae-code/utils/cli";
 export default class Migrate extends Command {

package/dist/types/commands/sdk.d.ts

@@ -1,4 +1,5 @@
 import { Command } from "@gajae-code/utils/cli";
+import { type ProjectEnvSnapshot } from "@gajae-code/utils/env-file";
 import type { Args as ParsedArgs } from "../cli/args";
 import { applyStartupModelProfiles } from "../main";
 import { initializeExtensions } from "../modes/runtime-init";
@@ -115,6 +116,13 @@ export declare function openLifecycleSessionManager(request: SessionLifecycleLau
  * logged and swallowed instead of surfacing as an unhandled rejection.
  */
 export declare function startMemoryBackendAfterReadiness(start: () => Promise<void>): void;
+/**
+ * Cwd-equality test seams accept only an operator value. A project dotenv line,
+ * including one Bun expands from `$PWD`, never arms the seam.
+ */
+export declare function sdkCwdEqualityTestSeamActive(name: string, cwd: string, env?: NodeJS.ProcessEnv, snapshots?: readonly ProjectEnvSnapshot[]): boolean;
+/** Copy `env` without project-dotenv values for the four cwd-equality seams. */
+export declare function omitUntrustedSdkCwdEqualitySeams(env: NodeJS.ProcessEnv, snapshots: readonly ProjectEnvSnapshot[]): NodeJS.ProcessEnv;
 /** Runs the same persisted AgentSession bootstrap used by the production CLI. */
 export declare function runSessionHost(timing?: {
     now?: () => number;
@@ -150,3 +158,8 @@ export default class Sdk extends Command {
     static delegateHelp: boolean;
     run(): Promise<void>;
 }
+/** Captures and removes one-shot restart credentials before the broker forks descendants. */
+export declare function consumeBrokerRestartEnvironment(environment: NodeJS.ProcessEnv): {
+    requestIdEnv: string | undefined;
+    restartDeadlineAt: number | undefined;
+};

package/dist/types/commit/changelog/index.d.ts

@@ -28,3 +28,4 @@ export declare function runChangelogFlow({ cwd, model, apiKey, thinkingLevel, st
  * Apply changelog entries provided by the commit agent.
  */
 export declare function applyChangelogProposals({ cwd, proposals, dryRun, onProgress, }: ChangelogProposalInput): Promise<string[]>;
+export declare function redactChangelogEntry(text: string): string;

package/dist/types/commit/map-reduce/index.d.ts

@@ -12,9 +12,9 @@ export interface MapReduceInput {
     model: Model<Api>;
     apiKey: string;
     thinkingLevel?: ThinkingLevel;
-    smolModel: Model<Api>;
-    smolApiKey: string;
-    smolThinkingLevel?: ThinkingLevel;
+    secondaryModel: Model<Api>;
+    secondaryApiKey: string;
+    secondaryThinkingLevel?: ThinkingLevel;
     diff: string;
     stat: string;
     scopeCandidates: string;
@@ -23,6 +23,6 @@ export interface MapReduceInput {
 }
 export declare function shouldUseMapReduce(diff: string, settings?: MapReduceSettings): boolean;
 /**
- * Run map-reduce analysis for large diffs using smol + primary models.
+ * Run map-reduce analysis for large diffs using the secondary (map) and primary (reduce) models.
  */
 export declare function runMapReduceAnalysis(input: MapReduceInput): Promise<ConventionalAnalysis>;

package/dist/types/config/autorouting-tier-map.d.ts

@@ -29,10 +29,14 @@ export type AutoroutingCuratedTierMap = {
 };
 export declare const TIER_MAP_VERSION = 1;
 export declare const CURATED_TIER_LABELS: {
-    readonly "anthropic/claude-haiku-4-5": readonly [{
+    readonly "anthropic/claude-haiku-5-5": readonly [{
         readonly tier: "fast";
         readonly rank: 1;
     }];
+    readonly "anthropic/claude-haiku-4-5": readonly [{
+        readonly tier: "fast";
+        readonly rank: 2;
+    }];
     readonly "anthropic/claude-sonnet-5-5": readonly [{
         readonly tier: "balanced";
         readonly rank: 1;
@@ -132,15 +136,63 @@ export declare const CURATED_TIER_LABELS: {
 };
 /** Generated from packages/ai/src/models.json at feature land: 3936 in-scope baseline skips. */
 export declare const TIER_MAP_SKIP_LIST: {
+    readonly "amazon-bedrock/anthropic.claude-haiku-5-5": {
+        readonly rationale: "Haiku 5.5 Bedrock catalog addition; not yet curated";
+    };
+    readonly "amazon-bedrock/au.anthropic.claude-haiku-5-5": {
+        readonly rationale: "Haiku 5.5 Bedrock catalog addition; not yet curated";
+    };
+    readonly "amazon-bedrock/eu.anthropic.claude-haiku-5-5": {
+        readonly rationale: "Haiku 5.5 Bedrock catalog addition; not yet curated";
+    };
+    readonly "amazon-bedrock/global.anthropic.claude-haiku-5-5": {
+        readonly rationale: "Haiku 5.5 Bedrock catalog addition; not yet curated";
+    };
+    readonly "amazon-bedrock/jp.anthropic.claude-haiku-5-5": {
+        readonly rationale: "Haiku 5.5 Bedrock catalog addition; not yet curated";
+    };
+    readonly "amazon-bedrock/us.anthropic.claude-haiku-5-5": {
+        readonly rationale: "Haiku 5.5 Bedrock catalog addition; not yet curated";
+    };
     readonly "amazon-bedrock/au.anthropic.claude-sonnet-5-5": {
         readonly rationale: "Sonnet 5.5 catalog addition (#6111); not yet curated";
     };
+    readonly "amazon-bedrock/in.anthropic.claude-haiku-4-5-20251001-v1:0": {
+        readonly rationale: "India-region Bedrock Anthropic catalog addition (#6731); not yet curated";
+    };
+    readonly "amazon-bedrock/in.anthropic.claude-opus-5": {
+        readonly rationale: "India-region Bedrock Anthropic catalog addition (#6731); not yet curated";
+    };
+    readonly "amazon-bedrock/in.anthropic.claude-sonnet-5": {
+        readonly rationale: "India-region Bedrock Anthropic catalog addition (#6731); not yet curated";
+    };
     readonly "amazon-bedrock/jp.anthropic.claude-sonnet-5-5": {
         readonly rationale: "Sonnet 5.5 catalog addition (#6111); not yet curated";
     };
     readonly "amazon-bedrock/us.anthropic.claude-sonnet-5-5": {
         readonly rationale: "Sonnet 5.5 catalog addition (#6111); not yet curated";
     };
+    readonly "github-copilot/gemini-4-argon": {
+        readonly rationale: "Gemini 4 Argon provider catalog addition (#6731); not yet curated";
+    };
+    readonly "google/gemini-4-argon": {
+        readonly rationale: "Gemini 4 Argon catalog addition (#6731); tier ordering not yet reviewed";
+    };
+    readonly "kilo/google/gemini-4-argon": {
+        readonly rationale: "Gemini 4 Argon provider catalog addition (#6731); not yet curated";
+    };
+    readonly "opencode-zen/gemini-4-argon": {
+        readonly rationale: "Gemini 4 Argon provider catalog addition (#6731); not yet curated";
+    };
+    readonly "openrouter/google/gemini-4-argon": {
+        readonly rationale: "Gemini 4 Argon provider catalog addition (#6731); not yet curated";
+    };
+    readonly "openrouter/google/gemini-4-argon:batch": {
+        readonly rationale: "Gemini 4 Argon batch provider catalog addition (#6731); not yet curated";
+    };
+    readonly "vercel-ai-gateway/google/gemini-4-argon": {
+        readonly rationale: "Gemini 4 Argon provider catalog addition (#6731); not yet curated";
+    };
     readonly "kiro/claude-opus-5-5": {
         readonly rationale: "post-rebase catalog addition from dev; not yet curated";
     };

package/dist/types/config/config-hot-reload-trust.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Hot reload requires a privacy check that only Linux can perform: its
+ * directory modes include the POSIX ACL mask, so denying group/other access
+ * also denies named ACL grants. Node does not expose enough ACL state on other
+ * platforms to establish equivalent privacy, so they do not watch at all.
+ */
+export declare function isConfigHotReloadSupported(): boolean;
+/** Returns whether both configuration paths live in private, safely owned directories. */
+export declare function isConfigHotReloadTrusted(paths: {
+    readonly configPath: string;
+    readonly modelsPath: string;
+}): Promise<boolean>;

package/dist/types/config/config-hot-reload.d.ts

@@ -0,0 +1,44 @@
+export interface ConfigHotReloadPaths {
+    readonly configPath: string;
+    readonly modelsPath: string;
+}
+export interface ConfigHotReloadFileSnapshot {
+    readonly path: string;
+    readonly text: string | null;
+    readonly identity: string;
+}
+export interface ConfigHotReloadCandidate {
+    readonly revision: number;
+    readonly config: ConfigHotReloadFileSnapshot;
+    readonly models: ConfigHotReloadFileSnapshot;
+}
+export type ConfigHotReloadErrorOperation = "watch" | "read" | "validate" | "apply";
+/** A path-free diagnostic for watcher, snapshot, and callback failures. */
+export declare class ConfigHotReloadError extends Error {
+    readonly operation: ConfigHotReloadErrorOperation;
+    readonly code: string | undefined;
+    constructor(operation: ConfigHotReloadErrorOperation, code?: string);
+}
+export interface ConfigHotReloadWatcherOptions {
+    /** Validate the snapshots without mutating live state before a candidate may supersede queued work. */
+    readonly onValidate: (candidate: ConfigHotReloadCandidate) => void | Promise<void>;
+    /** Apply these text snapshots, not a second read of their paths, and honor abort before commit. */
+    readonly onCandidate: (candidate: ConfigHotReloadCandidate, signal: AbortSignal) => void | Promise<void>;
+    readonly onError: (error: ConfigHotReloadError) => void;
+}
+/** Watches resolved config and models files and delivers immutable source snapshots. */
+export declare class ConfigHotReloadWatcher {
+    #private;
+    constructor(options: ConfigHotReloadWatcherOptions);
+    /** Establishes the initial fingerprint baseline without emitting a candidate. */
+    start(paths: ConfigHotReloadPaths): Promise<void>;
+    /** Rebinds after session or configuration-root changes, fencing old work. */
+    rebind(paths: ConfigHotReloadPaths): Promise<void>;
+    /**
+     * Test-only: request the same scan an fs event would schedule. Tests that
+     * exercise the watcher cannot rely on platform fs-event delivery timing.
+     */
+    __testRequestScan(): void;
+    /** Closes all watches and cancels or fences pending and in-flight callbacks. */
+    dispose(): void;
+}