@gajae-code/coding-agent 0.18.11 → 0.19.0

package/dist/types/config/settings-schema.d.ts

@@ -1,4 +1,5 @@
 import type { Effort } from "@gajae-code/ai/model-thinking";
+import { type CredentialPreferenceEntryValue } from "../session/startup-auth-config";
 import { type EditMode } from "../utils/edit-mode";
 import { type AutoroutingLocalIssue, type AutoroutingProvenance, type AutoroutingSetup, type AutoroutingTierMapInput } from "./autorouting-contract";
 import { type DurableModelProfileOwnership } from "./model-profile-ownership";
@@ -122,7 +123,11 @@ type RecordValueDef = {
     values: readonly string[];
 } | {
     type: "credential-selector";
+} | {
+    type: "credential-preference-list";
 };
+/** A provider's `auth.credentialPreferences` value: one account or a non-empty ordered list of entries. */
+export type CredentialPreferenceSettingValue = string | CredentialPreferenceEntryValue[];
 interface ConstrainedRecordValueDef {
     type: "autorouting-selector-value";
     pattern: string;
@@ -198,6 +203,13 @@ export declare const SETTINGS_SCHEMA: {
         readonly type: "string";
         readonly default: undefined;
     };
+    readonly "auth.credentialPreferences": {
+        readonly type: "record";
+        readonly default: Record<string, CredentialPreferenceSettingValue>;
+        readonly valueSchema: {
+            readonly type: "credential-preference-list";
+        };
+    };
     readonly "session.directoryMigration": {
         readonly type: "enum";
         readonly values: readonly ["copy-retain", "disabled"];
@@ -237,6 +249,12 @@ export declare const SETTINGS_SCHEMA: {
         readonly description: "Grace period before a master-spawned child orphaned by confirmed master loss is closed.";
         readonly validate: (value: number) => boolean;
     };
+    readonly "sdk.brokerAbandonedGraceMs": {
+        readonly type: "number";
+        readonly default: 120000;
+        readonly description: "Grace before a detached broker with no client connection, no live session host, and no open spawn authority exits on its own. A supervised `gjc sdk broker run` service never reaps itself.";
+        readonly validate: (value: number) => boolean;
+    };
     readonly "notifications.enabled": {
         readonly type: "boolean";
         readonly default: false;
@@ -1565,12 +1583,12 @@ export declare const SETTINGS_SCHEMA: {
     };
     readonly serviceTier: {
         readonly type: "enum";
-        readonly values: readonly ["none", "auto", "default", "flex", "scale", "priority", "openai-only", "claude-only"];
+        readonly values: readonly ["none", "auto", "default", "flex", "scale", "priority", "ultrafast", "openai-only", "claude-only"];
         readonly default: "none";
         readonly ui: {
             readonly tab: "model";
             readonly label: "Service Tier";
-            readonly description: 'Processing priority hint (none = omit). OpenAI accepts the tier values directly; Anthropic realizes `priority` as `speed: "fast"` on supported Opus models. Scoped values target one family.';
+            readonly description: 'Processing priority hint (none = omit). OpenAI accepts the tier values directly; ultrafast is a 6x premium tier. Anthropic realizes `priority` as `speed: "fast"` on supported Opus models. Scoped values target one family.';
             readonly options: readonly [{
                 readonly value: "none";
                 readonly label: "None";
@@ -1591,6 +1609,10 @@ export declare const SETTINGS_SCHEMA: {
                 readonly value: "scale";
                 readonly label: "Scale";
                 readonly description: "Scale Tier credits when available (OpenAI)";
+            }, {
+                readonly value: "ultrafast";
+                readonly label: "Ultrafast";
+                readonly description: "Ultrafast processing at a 6x premium (OpenAI)";
             }, {
                 readonly value: "priority";
                 readonly label: "Priority";
@@ -1608,7 +1630,7 @@ export declare const SETTINGS_SCHEMA: {
     };
     readonly "task.serviceTier": {
         readonly type: "enum";
-        readonly values: readonly ["inherit", "none", "auto", "default", "flex", "scale", "priority", "openai-only", "claude-only"];
+        readonly values: readonly ["inherit", "none", "auto", "default", "flex", "scale", "priority", "ultrafast", "openai-only", "claude-only"];
         readonly default: "inherit";
         readonly ui: {
             readonly tab: "tasks";
@@ -1638,6 +1660,10 @@ export declare const SETTINGS_SCHEMA: {
                 readonly value: "scale";
                 readonly label: "Scale";
                 readonly description: "Scale Tier credits when available (OpenAI)";
+            }, {
+                readonly value: "ultrafast";
+                readonly label: "Ultrafast";
+                readonly description: "Ultrafast processing at a 6x premium (OpenAI)";
             }, {
                 readonly value: "priority";
                 readonly label: "Priority";
@@ -1882,7 +1908,7 @@ export declare const SETTINGS_SCHEMA: {
         readonly ui: {
             readonly tab: "interaction";
             readonly label: "Prompt Suggestions";
-            readonly description: "Predict your likely next prompt after each turn (smol-model call) and show it as ghost text; Tab accepts";
+            readonly description: "Predict your likely next prompt after each turn (one extra default-role model call) and show it as ghost text; Tab accepts";
         };
     };
     readonly "startup.quiet": {
@@ -3143,6 +3169,10 @@ export declare const SETTINGS_SCHEMA: {
         readonly type: "string";
         readonly default: undefined;
     };
+    readonly "shellMinimizer.settingsHash": {
+        readonly type: "string";
+        readonly default: undefined;
+    };
     readonly "shellMinimizer.only": {
         readonly type: "array";
         readonly default: string[];
@@ -3348,6 +3378,15 @@ export declare const SETTINGS_SCHEMA: {
             readonly description: "Enable the render_mermaid tool for Mermaid-to-ASCII rendering";
         };
     };
+    readonly "reportIssue.enabled": {
+        readonly type: "boolean";
+        readonly default: false;
+        readonly ui: {
+            readonly tab: "tools";
+            readonly label: "Tool issue reporting";
+            readonly description: "Enable the report_issue tool: the model records tool behavior that contradicts the tool's description into the local ~/.gjc/tool-issues.db. Nothing is sent anywhere.";
+        };
+    };
     readonly "debug.enabled": {
         readonly type: "boolean";
         readonly default: true;
@@ -3870,6 +3909,10 @@ export declare const SETTINGS_SCHEMA: {
         readonly type: "array";
         readonly default: string[];
     };
+    readonly "mcp.discoveryDeferAutoload": {
+        readonly type: "boolean";
+        readonly default: false;
+    };
     readonly "mcp.notifications": {
         readonly type: "boolean";
         readonly default: false;
@@ -4101,6 +4144,15 @@ export declare const SETTINGS_SCHEMA: {
             }];
         };
     };
+    readonly "task.compactSubagentPanel": {
+        readonly type: "boolean";
+        readonly default: false;
+        readonly ui: {
+            readonly tab: "tasks";
+            readonly label: "Compact Subagent Panel";
+            readonly description: "Collapse awaited subagents into one summary line (expand tool output to see each one) and refresh only when the summary changes";
+        };
+    };
     readonly "task.enableLsp": {
         readonly type: "boolean";
         readonly default: false;
@@ -4800,6 +4852,7 @@ export interface BashInterceptorRule {
 export interface ShellMinimizerSettings {
     enabled: boolean;
     settingsPath: string | undefined;
+    settingsHash: string | undefined;
     only: string[];
     except: string[];
     maxCaptureBytes: number;

package/dist/types/config/settings.d.ts

@@ -16,6 +16,7 @@ import { AgentStorage } from "../session/agent-storage";
 import { type EditMode, type EditVariantMatch } from "../utils/edit-mode";
 import { type CasReceipt } from "./atomic-yaml-patch";
 import { type AutoroutingEffective } from "./autorouting-contract";
+import type { ConfigHotReloadFileSnapshot } from "./config-hot-reload";
 import { type ModelSelectorValue } from "./model-selector-value";
 import { type BashInterceptorRule, type GroupPrefix, type GroupTypeMap, type SettingPath, type SettingsSchemaReport, type SettingValue } from "./settings-schema";
 export type * from "./settings-schema";
@@ -24,6 +25,23 @@ export * from "./settings-schema";
 export interface RawSettings {
     [key: string]: unknown;
 }
+/** Validated candidate view. `get` includes local patches and effective overlays. */
+export interface SettingsGlobalConfigCandidate {
+    readonly configPath: string;
+    readonly diagnostics: SettingsSchemaReport;
+    get<P extends SettingPath>(settingPath: P): SettingValue<P>;
+    /** Candidate global values include pending local patches, but exclude other layers. */
+    getGlobal<P extends SettingPath>(settingPath: P): SettingValue<P> | undefined;
+}
+export interface SettingsConfigReloadPublication {
+    finalize(): void;
+    rollback(): void;
+}
+export declare class SettingsGlobalConfigReloadError extends Error {
+    readonly configPath: string | null;
+    readonly diagnostics?: SettingsSchemaReport | undefined;
+    constructor(message: string, configPath: string | null, diagnostics?: SettingsSchemaReport | undefined);
+}
 /**
  * Test-only seams for the config-root workflow migration. Production code
  * never sets these; tests use them to interleave external filesystem changes
@@ -143,6 +161,18 @@ export declare class Settings implements NotificationSettingsReader {
     /** Effective merged autorouting state shared by settings diagnostics and routing policy. */
     getEffectiveAutorouting(): AutoroutingEffective;
     onChanged(listener: (path: SettingPath) => void): () => void;
+    /** The resolved global config.yml path, or null for in-memory settings. */
+    getGlobalConfigPath(): string | null;
+    /**
+     * Validate the watcher's exact snapshot without writing or rereading it.
+     * Rebase pending local patches after prior durable operations settle.
+     */
+    stageGlobalConfigReload(snapshot: ConfigHotReloadFileSnapshot): Promise<SettingsGlobalConfigCandidate>;
+    /**
+     * Publish a staged global config and its dependent synchronous model commit as
+     * one in-memory transaction. A thrown commit restores settings without hooks.
+     */
+    publishGlobalConfigReload(candidate: SettingsGlobalConfigCandidate, commitSync?: () => void): SettingsConfigReloadPublication;
     /** Whether durable settings mutations are permitted for the loaded configuration. */
     canWriteDurableConfig(): boolean;
     /** Whether this instance can publish a mutation to a durable config file. */
@@ -191,7 +221,9 @@ export declare class Settings implements NotificationSettingsReader {
     getAgentDir(): string;
     getPlansDirectory(): string;
     /**
-     * Get shell configuration based on settings.
+     * Shell configuration for bash and the Python executor.
+     * `shellPath` comes from the user/global config only, so a project
+     * `.gjc/settings.json` cannot select the binary those executors run.
      */
     getShellConfig(): import("@gajae-code/utils/shell-config").ShellConfig;
     /**

package/dist/types/coordinator-mcp/server.d.ts

@@ -125,6 +125,10 @@ interface CoordinatorEventInput {
     payloadRef?: string | null;
     metadata?: Record<string, unknown>;
 }
+/** Test-only access for generated normalization and truncation properties. */
+export declare function webhookEventDiagnosticTokenForTest(eventId: string, maxLength: number): string;
+/** Test-only access for diagnostic record boundary coverage. */
+export declare function appendEventWebhookDiagnosticForTest(namespaceDir: string, eventId: string, error: unknown): Promise<void>;
 /** Test-only helper that waits for startup replay and queued deliveries in a namespace. */
 export declare function awaitEventWebhookDeliveriesForTest(namespaceDir: string): Promise<void>;
 /** Test-only helper that waits for queued Codex wake publishes in a namespace. */

package/dist/types/customization/import.d.ts

@@ -14,6 +14,8 @@ export interface BuildImportPreviewOptions {
  * plan. Pure reads only — nothing is written until `applyImport`.
  */
 export declare function buildImportPreview(options: BuildImportPreviewOptions): Promise<ImportPlan>;
+/** Lexical shape of an import destination. Symlink checks are separate. */
+export declare function importDestinationShapeAllowed(root: string, target: string): boolean;
 /**
  * Apply a confirmed plan. The transaction contract:
  *

package/dist/types/customization/types.d.ts

@@ -24,7 +24,7 @@ export declare const IMPORT_SOURCE_SCOPES: readonly ImportSourceScope[];
 export declare function productLabel(product: ImportProduct): string;
 export declare function sourceScopeLabel(scope: ImportSourceScope): string;
 export declare function sourceConfigDir(product: ImportProduct, sourceScope: ImportSourceScope, projectCwd: string, homeDir: string): string;
-export type InventoryStatus = "enabled" | "disabled" | "invalid" | "shadowed" | "quarantined" | "imported" | "restart-required";
+export type InventoryStatus = "enabled" | "stored-only" | "disabled" | "invalid" | "shadowed" | "quarantined" | "imported" | "restart-required";
 export interface InventoryRow {
     /** Stable row identity: `<surface>:<scope>:<path>` */
     id: string;

package/dist/types/dap/config.d.ts

@@ -1,6 +1,10 @@
 import type { DapAdapterConfig, DapResolvedAdapter } from "./types";
 export declare function getAdapterConfigs(): Record<string, DapAdapterConfig>;
-export declare function resolveAdapter(adapterName: string, cwd: string): DapResolvedAdapter | null;
-export declare function getAvailableAdapters(cwd: string): DapResolvedAdapter[];
-export declare function selectLaunchAdapter(program: string, cwd: string, adapterName?: string): DapResolvedAdapter | null;
-export declare function selectAttachAdapter(cwd: string, adapterName?: string, port?: number): DapResolvedAdapter | null;
+/**
+ * `trustCwds` are extra trust roots, such as the session workspace when the command
+ * cwd is a different directory. A command controlled by any of them is refused.
+ */
+export declare function resolveAdapter(adapterName: string, cwd: string, trustCwds?: readonly string[]): DapResolvedAdapter | null;
+export declare function getAvailableAdapters(cwd: string, trustCwds?: readonly string[]): DapResolvedAdapter[];
+export declare function selectLaunchAdapter(program: string, cwd: string, adapterName?: string, trustCwds?: readonly string[]): DapResolvedAdapter | null;
+export declare function selectAttachAdapter(cwd: string, adapterName?: string, port?: number, trustCwds?: readonly string[]): DapResolvedAdapter | null;

package/dist/types/dap/session.d.ts

@@ -1,16 +1,25 @@
 import type { DapAttachSessionOptions, DapBreakpointRecord, DapCapabilities, DapContinueOutcome, DapDataBreakpointInfoResponse, DapDataBreakpointRecord, DapDisassembledInstruction, DapEvaluateArguments, DapEvaluateResponse, DapFunctionBreakpointRecord, DapInstructionBreakpointRecord, DapLaunchSessionOptions, DapModule, DapSessionSummary, DapSource, DapStackFrame, DapThread } from "./types";
+/** Test seam: pauses after cwd containment and before the debuggee spawn. */
+export declare const runInTerminalTestHooks: {
+    beforeSpawn?: () => Promise<void>;
+};
 export interface DapOutputSnapshot {
     snapshot: DapSessionSummary;
     output: string;
 }
+export declare function cwdEscapesWorkspace(root: string, candidate: string): boolean;
 export declare class DapSessionManager {
     #private;
     constructor();
     getActiveSession(): DapSessionSummary | null;
     listSessions(): DapSessionSummary[];
     getCapabilities(): DapCapabilities | null;
-    launch(options: DapLaunchSessionOptions, signal?: AbortSignal, timeoutMs?: number): Promise<DapSessionSummary>;
-    attach(options: DapAttachSessionOptions, signal?: AbortSignal, timeoutMs?: number): Promise<DapSessionSummary>;
+    launch(options: DapLaunchSessionOptions & {
+        workspace?: string;
+    }, signal?: AbortSignal, timeoutMs?: number): Promise<DapSessionSummary>;
+    attach(options: DapAttachSessionOptions & {
+        workspace?: string;
+    }, signal?: AbortSignal, timeoutMs?: number): Promise<DapSessionSummary>;
     setBreakpoint(file: string, line: number, condition?: string, signal?: AbortSignal, timeoutMs?: number): Promise<{
         snapshot: DapSessionSummary;
         breakpoints: DapBreakpointRecord[];

package/dist/types/debug/system-info.d.ts

@@ -22,5 +22,10 @@ export interface SystemInfo {
 export declare function collectSystemInfo(): Promise<SystemInfo>;
 /** Format system info for display */
 export declare function formatSystemInfo(info: SystemInfo): string;
-/** Sanitize environment variables by redacting sensitive values */
+/**
+ * Sanitize environment variables for a debug report.
+ * Sensitive names stay fully replaced. Other values keep their text, with the
+ * same credential shapes removed that crash records already scrub before they
+ * are written to disk.
+ */
 export declare function sanitizeEnv(env: Record<string, string | undefined>): Record<string, string>;

package/dist/types/discovery/helpers.d.ts

@@ -93,8 +93,12 @@ export declare function getUserSkillScanDirs(home: string, userAgentDir?: string
  */
 export declare function getProjectPath(ctx: LoadContext, source: SourceId, subpath: string): string | null;
 /** Build the filesystem authority for a provider read. */
-export declare function getReadOptions(ctx: Pick<LoadContext, "home" | "isolatedHome" | "userAgentDir" | "homeIdentity" | "userAgentIdentity" | "bypassCache">, scope: ReadScope): ReadFileOptions | undefined;
-export declare function getReadOptionsForContainment(ctx: Pick<LoadContext, "home" | "isolatedHome" | "userAgentDir" | "homeIdentity" | "userAgentIdentity" | "bypassCache">, scope: ReadScope, containmentRoot?: string): Promise<ReadFileOptions | undefined>;
+type DiscoveryReadContext = Pick<LoadContext, "home" | "isolatedHome" | "userAgentDir" | "homeIdentity" | "userAgentIdentity" | "bypassCache"> & {
+    repoRoot?: string | null;
+    cwd?: string;
+};
+export declare function getReadOptions(ctx: DiscoveryReadContext, scope: ReadScope): ReadFileOptions | undefined;
+export declare function getReadOptionsForContainment(ctx: DiscoveryReadContext, scope: ReadScope, containmentRoot?: string): Promise<ReadFileOptions | undefined>;
 /**
  * Create source metadata for an item.
  */
@@ -336,3 +340,4 @@ export declare function preloadPluginRoots(home: string, cwd?: string): Promise<
  * Returns empty array if preloadPluginRoots() hasn't been called.
  */
 export declare function getPreloadedPluginRoots(): readonly ClaudePluginRoot[];
+export {};

package/dist/types/discovery/mcp-compat.d.ts

@@ -20,7 +20,9 @@ export declare function normalizeClaudeMcpJson(content: string, sourcePath: stri
  * Normalize a Codex `config.toml` file body into the internal MCP contract.
  * Only the `[mcp_servers.*]` sections are read; everything else is ignored.
  */
-export declare function normalizeCodexMcpToml(content: string, sourcePath: string, level?: "project" | "user"): MCPCompatNormalizeResult;
+export declare function normalizeCodexMcpToml(content: string, sourcePath: string, level?: "project" | "user", options?: {
+    omitEnvReferences?: boolean;
+}): MCPCompatNormalizeResult;
 /**
  * Validate a normalized server against the internal MCP contract. Returns an
  * error message, or undefined when the definition is importable. Callers use

package/dist/types/edit/index.d.ts

@@ -41,6 +41,11 @@ export declare class EditTool implements AgentTool<TInput> {
     get mode(): EditMode;
     get description(): string;
     get parameters(): TInput;
+    matcherDigest(args: unknown): string | undefined;
+    matcherEntries(args: unknown): readonly {
+        path: string;
+        digest: string;
+    }[] | undefined;
     /**
      * When in `apply_patch` mode, expose the OpenAI code backend Lark grammar so providers
      * that support OpenAI-style custom tools can emit a grammar-constrained

package/dist/types/edit/modes/patch.d.ts

@@ -6,6 +6,7 @@
  */
 import type { AgentToolResult } from "@gajae-code/agent-core";
 import * as z from "zod/v4";
+import type { Settings } from "../../config/settings";
 import { type WritethroughCallback, type WritethroughDeferredHandle } from "../../lsp";
 import type { ToolSession } from "../../tools";
 import type { EditToolDetails, LspBatchRequest } from "../renderer";
@@ -50,6 +51,17 @@ export interface ApplyPatchOptions {
      * object identity is not a durable-lock capability probe.
      */
     crossProcessLock?: boolean;
+    /** Explicit artifacts `local` root for this call. The caller session owns it. */
+    localRoot?: string;
+    signal?: AbortSignal;
+    /**
+     * Recheck a rename destination while this call holds the path mutation lock.
+     * The request preflight runs before that lock.
+     */
+    destinationGuard?: {
+        settings: Pick<Settings, "get">;
+        displayPath: string;
+    };
 }
 /** Default filesystem implementation using Bun APIs */
 export declare const defaultFileSystem: FileSystem;
@@ -61,6 +73,8 @@ export declare const defaultFileSystem: FileSystem;
  * edits cannot silently overwrite each other (#2900).
  */
 export declare function applyPatch(input: PatchInput, options: ApplyPatchOptions): Promise<ApplyPatchResult>;
+/** Read-only mkdir check for one patch hunk. Does not create directories. */
+export declare function preflightPatchMkdir(input: PatchInput, options: ApplyPatchOptions): Promise<void>;
 /**
  * Preview what changes a patch would make without applying it.
  */

package/dist/types/edit/modes/replace.d.ts

@@ -121,3 +121,6 @@ export interface ExecuteReplaceSingleOptions {
     beginDeferredDiagnosticsForPath: (path: string) => WritethroughDeferredHandle;
 }
 export declare function executeReplaceSingle(options: ExecuteReplaceSingleOptions): Promise<AgentToolResult<EditToolDetails, typeof replaceEditEntrySchema>>;
+export declare function executeReplaceEntries(options: Omit<ExecuteReplaceSingleOptions, "params"> & {
+    edits: ReplaceEditEntry[];
+}): Promise<AgentToolResult<EditToolDetails, typeof replaceEditSchema>>;

package/dist/types/eval/py/runtime.d.ts

@@ -9,6 +9,15 @@ export interface PythonRuntimeLifecycleOptions {
     signal?: AbortSignal;
     deadlineMs?: number;
 }
+/**
+ * A workspace `.venv` or `venv` directory is repository content. Use it only when
+ * it is a real virtualenv (`pyvenv.cfg`) whose interpreter file resolves outside
+ * the project. An in-tree script or binary is not an interpreter.
+ *
+ * True when `candidate` is `root` or a descendant after `path.resolve`.
+ * A name such as `..payload` stays inside. Only `..` and a parent segment escape.
+ */
+export declare function workspacePathContained(root: string, candidate: string): boolean;
 export interface PythonRuntime {
     /** Path to python executable */
     pythonPath: string;

package/dist/types/exec/bash-executor.d.ts

@@ -111,6 +111,18 @@ export declare function getShellSessionCount(): number;
  * shell resources, and is also callable directly (e.g. on owner teardown).
  */
 export declare function disposeAllShellSessions(): Promise<void>;
+type ShellMinimizerSource = {
+    getGroup(prefix: "shellMinimizer"): ShellMinimizerSettings;
+    getGlobal?(path: "shellMinimizer.settingsPath" | "shellMinimizer.settingsHash"): unknown;
+    getOverride?(path: "shellMinimizer.settingsPath"): unknown;
+};
+/**
+ * A repo `.gjc/settings.json` must not point the minimizer at a TOML file.
+ * The native gate loads that file only when `settingsHash` matches, and the
+ * pin is the user/global value. A user path or a runtime override is still
+ * passed through. A project path is passed only together with that pin.
+ */
+export declare function resolveTrustedShellMinimizer(settings: ShellMinimizerSource): ShellMinimizerSettings;
 /** Translate `ShellMinimizerSettings` into native `MinimizerOptions`, or `undefined` when disabled. */
 export declare function buildMinimizerOptions(group: ShellMinimizerSettings): MinimizerOptions | undefined;
 export declare function executeBash(command: string, options?: BashExecutorOptions): Promise<BashResult>;

package/dist/types/export/ttsr.d.ts

@@ -11,6 +11,13 @@ export interface TtsrMatchContext {
     /** Stable key to isolate buffering (for example a tool call ID). */
     streamKey?: string;
 }
+/** An astCondition pattern parse issue observed while checking a target language. */
+export interface TtsrAstConditionDiagnostic {
+    ruleName: string;
+    lang: string;
+    patterns: string[];
+    parseErrors: string[];
+}
 /** Tracks when a rule was last injected (for repeat gating). */
 export interface TtsrInjectionRecord {
     name: string;
@@ -36,6 +43,12 @@ export declare class TtsrManager {
     markInjectedByNames(ruleNames: string[]): void;
     /** Get names of all injected rules (for persistence). */
     getInjectedRuleNames(): string[];
+    /**
+     * Undo a provisional claim whose reminder was never delivered: restore the
+     * record the rule had before the claim, or forget it when it had none, so the
+     * rule is eligible again exactly as before.
+     */
+    releaseInjected(ruleName: string, previous: TtsrInjectionRecord | undefined): void;
     /** Get full injected rule records (for persistence). */
     getInjectedRecords(): TtsrInjectionRecord[];
     /** Restore injected state from legacy rule names or persisted records. */
@@ -52,4 +65,10 @@ export declare class TtsrManager {
     restoreMessageCount(messageCount: number): void;
     /** Get settings. */
     getSettings(): Required<TtsrSettings>;
+    /** Check if any registered rule carries an `astCondition`. */
+    hasAstRules(): boolean;
+    /** Get observed astCondition pattern parse issues for rule diagnostics. */
+    getAstConditionDiagnostics(): TtsrAstConditionDiagnostic[];
+    /** Match the source introduced by finalized tool arguments, before execution. */
+    checkAstSnapshot(snapshot: string, context: TtsrMatchContext, signal?: AbortSignal): Promise<Rule[]>;
 }

package/dist/types/extensibility/extensions/types.d.ts

@@ -28,7 +28,7 @@ import type { CustomEditor } from "../../modes/components/custom-editor";
 import type { WorkflowGateEmitter } from "../../modes/shared/agent-wire/workflow-gate-broker";
 import type { Theme } from "../../modes/theme/theme";
 import type { ProjectProgressSnapshot } from "../../progress/progress-contract";
-import type { AgentSessionEventListener } from "../../session/agent-session";
+import type { AgentSessionEventListener, QueuedRunStartFailure } from "../../session/agent-session";
 import type { ClientBridge, ClientBridgePermissionOption, ClientBridgePermissionOutcome, ClientBridgePermissionToolCall } from "../../session/client-bridge";
 import type { CustomMessage } from "../../session/messages";
 import type { ReadonlySessionManager, SessionManager } from "../../session/session-manager";
@@ -864,6 +864,8 @@ export interface ExtensionAPI {
             startsOwnRun?: boolean;
             removed?: boolean;
         }) => void;
+        /** Internal positive refusal before an exact queued invocation can start. */
+        onQueuedRunStartFailed?: (failure: QueuedRunStartFailure) => void;
         onDispatchDisposition?: (promotion: {
             startsOwnRun: boolean;
         }) => void;
@@ -1052,6 +1054,8 @@ export type SendUserMessageHandler = (content: string | (TextContent | ImageCont
         startsOwnRun?: boolean;
         removed?: boolean;
     }) => void;
+    /** Internal positive refusal, not an inference from a dispatch error or missing event. */
+    onQueuedRunStartFailed?: (failure: QueuedRunStartFailure) => void;
     /**
      * Fired synchronously when a plain prompt's dispatch resolves at queue
      * time instead of run end (diverted into an in-flight run's steering).

package/dist/types/extensibility/slash-commands.d.ts

@@ -18,6 +18,7 @@ export declare const BUILTIN_SLASH_COMMANDS: ReadonlyArray<BuiltinSlashCommand &
     getArgumentCompletions?: (prefix: string) => AutocompleteItem[] | null;
     getInlineHint?: (argumentText: string) => string | null;
 }>;
+export declare function getBuiltinSlashCommandsForSession(hasExactMcpControls: boolean): typeof BUILTIN_SLASH_COMMANDS;
 /**
  * Represents a custom slash command loaded from a file
  */

package/dist/types/gjc-runtime/managed-owner-admission.d.ts

@@ -5,6 +5,9 @@ export declare const MANAGED_OWNER_PREDECESSOR_GENERATION_ENV = "GJC_MANAGED_OWN
 export declare const MANAGED_OWNER_PREDECESSOR_RUN_ID_ENV = "GJC_MANAGED_OWNER_PREDECESSOR_RUN_ID";
 export declare const MANAGED_OWNER_PREDECESSOR_INCARNATION_ENV = "GJC_MANAGED_OWNER_PREDECESSOR_INCARNATION";
 export declare const MANAGED_OWNER_TRANSCRIPT_PATH_ENV = "GJC_MANAGED_OWNER_TRANSCRIPT_PATH";
+export declare function trustedManagedOwnerTranscriptPath(env?: NodeJS.ProcessEnv, cwd?: string): string;
+/** Session file forwarded to a replacement child. Same provenance rule. */
+export declare function trustedManagedOwnerLaunchSessionFile(env: NodeJS.ProcessEnv, cwd: string): string;
 export interface ManagedOwnerRecoveryContext {
     root: string;
     binding: ManagedOwnerBinding;

package/dist/types/gjc-runtime/ralplan-current-final.d.ts

@@ -0,0 +1,54 @@
+export interface RalplanIndexRow {
+    stage: string;
+    stageN: number;
+    path: string;
+    sha256: string;
+}
+export interface RalplanCurrentFinalDescriptor {
+    /** Run id the final belongs to. */
+    runId: string;
+    /** Absolute path of the final artifact. */
+    finalPath: string;
+    /** sha256 recorded for the final and re-verified against its bytes. */
+    finalSha256: string;
+    /** sha256 of the iteration-opening planner (or revision) artifact. */
+    plannerSha256: string;
+    /** Reviewer verdict hashes that joined this iteration. */
+    reviewerSha256: Record<string, string>;
+    /** Session that owns the run; a foreign session can never be granted. */
+    sessionId: string;
+}
+export type RalplanCurrentFinalRefusalCode = "missing_state" | "run_not_final" | "auto_handoff_enabled" | "missing_index" | "malformed_index" | "no_iteration_opener" | "final_not_last" | "missing_reviewers" | "artifact_missing" | "artifact_outside_run" | "hash_mismatch";
+export interface RalplanCurrentFinalRefusal {
+    code: RalplanCurrentFinalRefusalCode;
+    /** Human-readable reason suitable for a guard error message. */
+    reason: string;
+}
+export type RalplanCurrentFinalResolution = {
+    ok: true;
+    descriptor: RalplanCurrentFinalDescriptor;
+} | {
+    ok: false;
+    refusal: RalplanCurrentFinalRefusal;
+};
+export interface RalplanCurrentFinalInput {
+    cwd: string;
+    /** Caller session id; the run must belong to it. */
+    sessionId: string;
+    /** Optional agent dir for settings resolution. */
+    agentDir?: string;
+}
+/**
+ * Whether the pending `ask` payload selects the ralplan execution-approval gate.
+ *
+ * This is a selector, not authority: it only decides which validation runs. The
+ * descriptor it leads to is the proof.
+ */
+export declare function selectsRalplanApprovalGate(pendingQuestions: unknown): boolean;
+/**
+ * Resolve and verify the current ralplan final for `sessionId`.
+ *
+ * Fails closed: every check returns a refusal instead of degrading to a weaker
+ * proof, because the caller uses a success to lift the Ultragoal ask guard.
+ */
+export declare function resolveRalplanCurrentFinal(input: RalplanCurrentFinalInput): Promise<RalplanCurrentFinalResolution>;

package/dist/types/gjc-runtime/ralplan-runtime.d.ts

@@ -160,6 +160,11 @@ interface RalplanTargetRoot {
 }
 export declare function resolveRalplanTargetRoot(args: readonly string[], invocationCwd: string): Promise<RalplanTargetRoot>;
 export declare function assertExplicitTargetGjcNotSymlinked(root: string): Promise<void>;
+/**
+ * Credential scrub for a ralplan stage body. The result is what
+ * `gjc ralplan --write` hashes and stores.
+ */
+export declare function scrubRalplanPersistedBody(stage: string, content: string): string;
 export declare function runNativeRalplanCommand(args: string[], cwd?: string, options?: {
     agentDir?: string;
 }): Promise<RalplanCommandResult>;

package/dist/types/gjc-runtime/session-state-lock.d.ts

@@ -72,6 +72,8 @@ export declare const SessionStateLockTestHooks: {
     afterCurrentOwnerValidation?: (file: string) => void | Promise<void>;
     /** @internal Fault seam immediately before a held owner record rewrite mutates bytes. */
     beforeOwnerRecordRewrite?: (file: string) => void | Promise<void>;
+    /** @internal Fault seam immediately before the pre-rewrite fstat on the owner record handle. */
+    beforeOwnerRecordPrewriteStat?: (file: string) => void | Promise<void>;
     /** @internal Fault seam immediately before final transition-generation validation. */
     beforeTransitionReleaseLstat?: (transitionDir: string) => void | Promise<void>;
     /** @internal Fault seam immediately before setup generation capture. */

package/dist/types/gjc-runtime/state-runtime.d.ts

@@ -47,8 +47,6 @@ export declare const DEEP_INTERVIEW_EXECUTION_APPROVAL_RECORD_FILE = "deep-inter
 export declare const DEEP_INTERVIEW_EXECUTION_APPROVAL_MAX_AGE_MS: number;
 export interface ExecutionApprovalTranscriptBoundary {
     byte_length: number;
-    device: string;
-    inode: string;
     leaf_id: string | null;
     approval_tool_call_id: string;
 }