@gajae-code/coding-agent 0.18.12 → 0.19.0

package/dist/types/cli/root-flags.d.ts

@@ -6,12 +6,6 @@ export declare const ROOT_LAUNCH_FLAGS: {
     model: FlagDescriptor<"string"> & {
         description: string;
     };
-    smol: FlagDescriptor<"string"> & {
-        description: string;
-    };
-    slow: FlagDescriptor<"string"> & {
-        description: string;
-    };
     plan: FlagDescriptor<"string"> & {
         description: string;
     };
@@ -141,12 +135,6 @@ export declare const LAUNCH_PARSE_FLAGS: {
     model: FlagDescriptor<"string"> & {
         description: string;
     };
-    smol: FlagDescriptor<"string"> & {
-        description: string;
-    };
-    slow: FlagDescriptor<"string"> & {
-        description: string;
-    };
     plan: FlagDescriptor<"string"> & {
         description: string;
     };

package/dist/types/cli/update-cli.d.ts

@@ -101,6 +101,9 @@ export type UpdateTarget = {
 } | MigrationUpdateTarget;
 type PathPlatform = NodeJS.Platform;
 type PackageExists = (packageName: string, packageRoot: string) => boolean;
+export declare function resolveProjectLocalPackageInstallForTest(ompPath: string, platform: PathPlatform): {
+    packageRoot: string;
+} | undefined;
 export declare function resolveUpdateMethodForTest(ompPath: string, bunBinDir: string | undefined): "bun" | "npm" | "binary";
 export declare function resolveNpmManagedTargetForTest(ompPath: string, platform: PathPlatform, packageExists: PackageExists): PackageManagerTarget | undefined;
 export declare function defaultUserBinaryPath(platform?: NodeJS.Platform, env?: NodeJS.ProcessEnv): string;
@@ -184,14 +187,16 @@ export interface BinaryUpdateFlow {
     /** Called once fsync has succeeded, right before replacement begins. */
     beforeReplace?(): void;
 }
+export declare function isUpdateStagingNameForTest(targetPath: string, name: string): boolean;
+export declare function isUpdateBackupNameForTest(targetPath: string, name: string): boolean;
 /**
  * Orchestrate download → fsync → replace → verify with a strict ordering
  * contract: the downloaded temp binary MUST be flushed to stable storage
  * before it is published (renamed into place) or exec'd for verification.
  *
  * If fsync fails the temp bytes are not durable, so we abort before
- * replacement/verification and retain the staging artifact rather than risk
- * deleting a substituted pathname or installing a possibly-truncated binary.
+ * replacement/verification. Final cleanup removes the exact staging identity
+ * only when no activation record still owns it.
  */
 export declare function runBinaryUpdateFlow(targetPath: string, url: string, expectedVersion: string, flow: BinaryUpdateFlow): Promise<InstalledVersionVerification>;
 export declare function acquireBinaryUpdateLock(targetPath: string): Promise<() => Promise<void>>;

package/dist/types/cli-main.d.ts

@@ -27,12 +27,6 @@ export declare class RootHelpCommand extends Command {
         model: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
             description: string;
         };
-        smol: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
-            description: string;
-        };
-        slow: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
-            description: string;
-        };
         plan: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
             description: string;
         };

package/dist/types/commands/launch.d.ts

@@ -20,12 +20,6 @@ export default class Index extends Command {
         model: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
             description: string;
         };
-        smol: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
-            description: string;
-        };
-        slow: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
-            description: string;
-        };
         plan: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
             description: string;
         };

package/dist/types/commands/migrate.d.ts

@@ -1,5 +1,5 @@
 /**
- * Import MCP servers, skills, and instructions from other coding agents into GJC.
+ * Import MCP servers, skills, slash commands, and instructions from other coding agents into GJC.
  */
 import { Command } from "@gajae-code/utils/cli";
 export default class Migrate extends Command {

package/dist/types/commands/sdk.d.ts

@@ -1,4 +1,5 @@
 import { Command } from "@gajae-code/utils/cli";
+import { type ProjectEnvSnapshot } from "@gajae-code/utils/env-file";
 import type { Args as ParsedArgs } from "../cli/args";
 import { applyStartupModelProfiles } from "../main";
 import { initializeExtensions } from "../modes/runtime-init";
@@ -115,6 +116,13 @@ export declare function openLifecycleSessionManager(request: SessionLifecycleLau
  * logged and swallowed instead of surfacing as an unhandled rejection.
  */
 export declare function startMemoryBackendAfterReadiness(start: () => Promise<void>): void;
+/**
+ * Cwd-equality test seams accept only an operator value. A project dotenv line,
+ * including one Bun expands from `$PWD`, never arms the seam.
+ */
+export declare function sdkCwdEqualityTestSeamActive(name: string, cwd: string, env?: NodeJS.ProcessEnv, snapshots?: readonly ProjectEnvSnapshot[]): boolean;
+/** Copy `env` without project-dotenv values for the four cwd-equality seams. */
+export declare function omitUntrustedSdkCwdEqualitySeams(env: NodeJS.ProcessEnv, snapshots: readonly ProjectEnvSnapshot[]): NodeJS.ProcessEnv;
 /** Runs the same persisted AgentSession bootstrap used by the production CLI. */
 export declare function runSessionHost(timing?: {
     now?: () => number;

package/dist/types/commit/map-reduce/index.d.ts

@@ -12,9 +12,9 @@ export interface MapReduceInput {
     model: Model<Api>;
     apiKey: string;
     thinkingLevel?: ThinkingLevel;
-    smolModel: Model<Api>;
-    smolApiKey: string;
-    smolThinkingLevel?: ThinkingLevel;
+    secondaryModel: Model<Api>;
+    secondaryApiKey: string;
+    secondaryThinkingLevel?: ThinkingLevel;
     diff: string;
     stat: string;
     scopeCandidates: string;
@@ -23,6 +23,6 @@ export interface MapReduceInput {
 }
 export declare function shouldUseMapReduce(diff: string, settings?: MapReduceSettings): boolean;
 /**
- * Run map-reduce analysis for large diffs using smol + primary models.
+ * Run map-reduce analysis for large diffs using the secondary (map) and primary (reduce) models.
  */
 export declare function runMapReduceAnalysis(input: MapReduceInput): Promise<ConventionalAnalysis>;

package/dist/types/config/autorouting-tier-map.d.ts

@@ -29,10 +29,14 @@ export type AutoroutingCuratedTierMap = {
 };
 export declare const TIER_MAP_VERSION = 1;
 export declare const CURATED_TIER_LABELS: {
-    readonly "anthropic/claude-haiku-4-5": readonly [{
+    readonly "anthropic/claude-haiku-5-5": readonly [{
         readonly tier: "fast";
         readonly rank: 1;
     }];
+    readonly "anthropic/claude-haiku-4-5": readonly [{
+        readonly tier: "fast";
+        readonly rank: 2;
+    }];
     readonly "anthropic/claude-sonnet-5-5": readonly [{
         readonly tier: "balanced";
         readonly rank: 1;
@@ -132,6 +136,24 @@ export declare const CURATED_TIER_LABELS: {
 };
 /** Generated from packages/ai/src/models.json at feature land: 3936 in-scope baseline skips. */
 export declare const TIER_MAP_SKIP_LIST: {
+    readonly "amazon-bedrock/anthropic.claude-haiku-5-5": {
+        readonly rationale: "Haiku 5.5 Bedrock catalog addition; not yet curated";
+    };
+    readonly "amazon-bedrock/au.anthropic.claude-haiku-5-5": {
+        readonly rationale: "Haiku 5.5 Bedrock catalog addition; not yet curated";
+    };
+    readonly "amazon-bedrock/eu.anthropic.claude-haiku-5-5": {
+        readonly rationale: "Haiku 5.5 Bedrock catalog addition; not yet curated";
+    };
+    readonly "amazon-bedrock/global.anthropic.claude-haiku-5-5": {
+        readonly rationale: "Haiku 5.5 Bedrock catalog addition; not yet curated";
+    };
+    readonly "amazon-bedrock/jp.anthropic.claude-haiku-5-5": {
+        readonly rationale: "Haiku 5.5 Bedrock catalog addition; not yet curated";
+    };
+    readonly "amazon-bedrock/us.anthropic.claude-haiku-5-5": {
+        readonly rationale: "Haiku 5.5 Bedrock catalog addition; not yet curated";
+    };
     readonly "amazon-bedrock/au.anthropic.claude-sonnet-5-5": {
         readonly rationale: "Sonnet 5.5 catalog addition (#6111); not yet curated";
     };

package/dist/types/config/config-hot-reload.d.ts

@@ -34,6 +34,11 @@ export declare class ConfigHotReloadWatcher {
     start(paths: ConfigHotReloadPaths): Promise<void>;
     /** Rebinds after session or configuration-root changes, fencing old work. */
     rebind(paths: ConfigHotReloadPaths): Promise<void>;
+    /**
+     * Test-only: request the same scan an fs event would schedule. Tests that
+     * exercise the watcher cannot rely on platform fs-event delivery timing.
+     */
+    __testRequestScan(): void;
     /** Closes all watches and cancels or fences pending and in-flight callbacks. */
     dispose(): void;
 }

package/dist/types/config/file-lock.d.ts

@@ -1,4 +1,4 @@
-import type { NativeDirectoryTreeResult, NativeExactUnlinkResult } from "@gajae-code/natives";
+import type { NativeDirectoryTreeResult, NativeDirectoryTreeSnapshot, NativeExactUnlinkResult } from "@gajae-code/natives";
 import { renameDirectoryNoReplacePathAsync, renameNoReplacePathAsync } from "@gajae-code/natives";
 export interface FileLockOptions {
     staleMs?: number;
@@ -15,6 +15,7 @@ export interface FileLockOptions {
     previousOwnerHostIds?: readonly string[];
 }
 export type FileLockAcquireReason = "acquire_timeout" | "orphan_transition";
+export type FileLockPublicationFailureCode = "access_denied" | "sharing_violation";
 /**
  * Why the acquire path could not retire a lock directory whose owner it had already
  * proven dead. Attached to `FileLockAcquireError` so a host whose lock-removal path
@@ -40,17 +41,48 @@ export declare class FileLockAcquireError extends Error {
     readonly reason: FileLockAcquireReason;
     readonly orphanPath?: string | undefined;
     readonly removalFailure?: FileLockStaleRemovalFailure | undefined;
+    readonly publicationFailureCode?: FileLockPublicationFailureCode | undefined;
+    /** True only when exhaustion proved a same-host owner process is live. */
+    readonly holderIsLive: boolean;
     readonly code: FileLockAcquireReason;
-    constructor(filePath: string, lockPath: string, attempts: number, holder: string, reason?: FileLockAcquireReason, orphanPath?: string | undefined, removalFailure?: FileLockStaleRemovalFailure | undefined);
+    constructor(filePath: string, lockPath: string, attempts: number, holder: string, reason?: FileLockAcquireReason, orphanPath?: string | undefined, removalFailure?: FileLockStaleRemovalFailure | undefined, publicationFailureCode?: FileLockPublicationFailureCode | undefined, 
+    /** True only when exhaustion proved a same-host owner process is live. */
+    holderIsLive?: boolean);
+}
+export declare class FileLockStagingCleanupError extends Error {
+    readonly lockPath: string;
+    readonly stagingPath: string;
+    readonly code: string | undefined;
+    constructor(lockPath: string, stagingPath: string, cause: unknown);
 }
 export declare function isFileLockAcquireTimeout(error: unknown): error is FileLockAcquireError;
+type FileLockStagingFileIdentity = {
+    dev: string;
+    ino: string;
+};
+type FileLockStagingRootIdentity = {
+    rootDev: string;
+    rootIno: string;
+    treeSnapshot?: NativeDirectoryTreeSnapshot;
+    infoFileIdentity?: FileLockStagingFileIdentity;
+};
 export declare const FILE_LOCK_ORPHAN_TRANSITION_ADOPTION_AGE_MS: number;
 /** Release retries cover transient handle denial and a competing exact-removal quarantine cleanup. */
 export declare const FILE_LOCK_RELEASE_RETRY_ATTEMPTS = 20;
 export declare const FILE_LOCK_RELEASE_RETRY_DELAY_MS = 25;
 export declare const FileLockTestHooks: {
     afterParentMkdir?: (lockPath: string) => void | Promise<void>;
+    afterStagingInfoWrite?: (stagingPath: string) => void | Promise<void>;
+    stagingInfoIdentity?: (infoPath: string, capture: () => Promise<FileLockStagingFileIdentity>) => Promise<FileLockStagingFileIdentity>;
+    stagingInfoCleanup?: (infoPath: string, callerFd: number, quarantineName: string) => NativeExactUnlinkResult | Promise<NativeExactUnlinkResult>;
+    beforeDetachedLockCleanup?: (detachedPath: string) => boolean | Promise<boolean>;
+    afterRemovalOwnerPublish?: (transitionPath: string) => void | Promise<void>;
+    afterRemovalTransitionMissing?: (transitionPath: string) => void | Promise<void>;
+    afterForeignTransitionMissing?: (transitionPath: string) => void | Promise<void>;
+    beforeRemovalRecordUnlink?: (recordPath: string) => boolean | Promise<boolean>;
     beforeRemovalOwnerPublish?: (transitionPath: string) => void | Promise<void>;
+    cleanupPendingStaging?: (stagingPath: string) => Promise<void>;
+    stagingRootIdentity?: (stagingPath: string) => FileLockStagingRootIdentity | Promise<FileLockStagingRootIdentity>;
     nativePublicationBindings?: () => {
         renameNoReplacePathAsync: typeof renameNoReplacePathAsync;
         renameDirectoryNoReplacePathAsync: typeof renameDirectoryNoReplacePathAsync;
@@ -59,6 +91,7 @@ export declare const FileLockTestHooks: {
         processIncarnation: string | null;
         startTime: string | null;
     };
+    processIncarnation?: (pid: number) => string | null;
     nativeQuarantineBindings?: () => NativeFileLockBindings;
     nativeExactRemovalProbe?: () => boolean | Promise<boolean>;
 };
@@ -177,6 +210,15 @@ type NativeFileLockBindings = {
     }, detachOnly?: boolean): NativeExactUnlinkResult;
 };
 export declare function acquireFileLock(filePath: string, options?: FileLockOptions): Promise<() => Promise<void>>;
+/**
+ * Describes the retained removal transition blocking `filePath`, if one exists.
+ *
+ * `acquireFileLock` reports this on exhaustion, but a caller whose own budget
+ * aborts the acquisition first would otherwise never learn that a stale
+ * transition — not ordinary contention — is what blocked it. Such a caller can
+ * ask directly after an abort so the block is surfaced instead of swallowed.
+ */
+export declare function describeRetainedLockTransition(filePath: string, options?: FileLockOptions): Promise<FileLockAcquireError | undefined>;
 /**
  * Serializes all contenders, including callers in the same process. Because this
  * API exposes no ownership token, recursive acquisition is indistinguishable

package/dist/types/config/model-profile-activation.d.ts

@@ -13,8 +13,9 @@ type UserCanonicalVariantSelection = {
 type ModelProfileActivationSession = Pick<AgentSession, "model" | "thinkingLevel" | "sessionId" | "getConfiguredModelChain" | "setConfiguredModelChain"> & {
     credentialSessionId?: string;
     setModelTemporary?: AgentSession["setModelTemporary"];
-    setActiveModelProfile?: (name: string | undefined) => void;
+    setActiveModelProfile?: (name: string | undefined, activatedByThisProcess?: boolean) => void;
     getActiveModelProfile?: () => string | undefined;
+    getActivatedModelProfile?: () => string | undefined;
     /** Record which runtime override keys this activation installed (session-scoped). */
     noteProfileInstalledOverrides?: (modelRoles: readonly string[], agentModelOverrides: readonly string[], preProfileModel: Model<Api> | undefined, baseline?: {
         modelRoles: Readonly<Record<string, ModelSelectorValue>>;
@@ -25,7 +26,7 @@ type ModelProfileActivationSession = Pick<AgentSession, "model" | "thinkingLevel
     }, manual?: {
         modelRoles: readonly string[];
         agentModelOverrides: readonly string[];
-    }) => void;
+    }, configuredDefaultChain?: readonly string[]) => void;
     /** Drop the recorded profile-installed override keys (e.g. after materialization). */
     clearProfileInstalledOverrides?: () => void;
     /** Current profile-installed override keys, for deriving the activation base. */
@@ -52,7 +53,7 @@ type ModelProfileActivationSession = Pick<AgentSession, "model" | "thinkingLevel
     prepareModelSelectionForProfileActivation?: AgentSession["prepareModelSelectionForProfileActivation"];
     commitPreparedProfileModelSelection?: AgentSession["commitPreparedProfileModelSelection"];
     finishPreparedProfileModelSelection?: AgentSession["finishPreparedProfileModelSelection"];
-    modelRegistry?: Pick<ModelRegistry, "getSessionCanonicalVariant" | "restoreSessionCanonicalVariant" | "clearCanonicalVariant" | "getAvailable" | "lookupAliasExists" | "resolveModelByLookupAlias" | "authStorage" | "isCredentiallessProvider"> & Partial<Pick<ModelRegistry, "seedCanonicalVariant">>;
+    modelRegistry?: Pick<ModelRegistry, "getSessionCanonicalVariant" | "restoreSessionCanonicalVariant" | "clearCanonicalVariant" | "getModelProfile" | "getAvailable" | "lookupAliasExists" | "resolveModelByLookupAlias" | "authStorage" | "isCredentiallessProvider"> & Partial<Pick<ModelRegistry, "seedCanonicalVariant">>;
     getConfiguredModelChainState?: (role: string) => ConfiguredModelChainState | undefined;
 };
 type ConfiguredModelChainState = {
@@ -69,6 +70,7 @@ type PublishedModelProfileActivationState = {
     defaultChainState: ConfiguredModelChainState | undefined;
     defaultFallbackRuntimeState: DefaultFallbackRuntimeState | undefined;
     activeModelProfile: string | undefined;
+    activatedModelProfile: string | undefined;
     profileInstalledOverrideState: AgentSessionProfileInstalledOverrideState | undefined;
     sessionDefaultModel: string | undefined;
     persistedModelRoles: Readonly<Record<string, ModelSelectorValue>> | undefined;
@@ -147,6 +149,7 @@ export interface PreparedModelProfileActivation {
     manualModelRoleOverrides: ReadonlySet<string>;
     manualAgentModelOverrides: ReadonlySet<string>;
     previousActiveModelProfile: string | undefined;
+    previousActivatedModelProfile: string | undefined;
     /**
      * The session resume default ("provider/id") captured BEFORE activation —
      * the model resume would restore prior to this profile. Snapshotted
@@ -169,16 +172,26 @@ export interface PreparedModelProfileActivation {
     modelRegistry: PrepareModelProfileActivationOptions["modelRegistry"];
 }
 export interface MaterializeModelProfileAssignmentOptions {
-    session: Pick<ModelProfileActivationSession, "model" | "thinkingLevel" | "sessionId" | "credentialSessionId" | "getConfiguredModelChain" | "getConfiguredModelChainState" | "setConfiguredModelChain" | "setActiveModelProfile" | "getActiveModelProfile" | "getDefaultFallbackRuntimeState" | "restoreDefaultFallbackRuntimeState" | "modelRegistry" | "clearProfileInstalledOverrides">;
+    session: Pick<ModelProfileActivationSession, "model" | "thinkingLevel" | "sessionId" | "credentialSessionId" | "getConfiguredModelChain" | "getConfiguredModelChainState" | "setConfiguredModelChain" | "setActiveModelProfile" | "getActiveModelProfile" | "getActivatedModelProfile" | "getProfileInstalledOverrideState" | "getDefaultFallbackRuntimeState" | "restoreDefaultFallbackRuntimeState" | "modelRegistry" | "clearProfileInstalledOverrides">;
     settings: Pick<Settings, "clearOverride" | "get" | "getGlobal" | "getOverride" | "override" | "set" | "unset">;
     role: GjcModelAssignmentTargetId;
     selector: string;
 }
 export interface MaterializeModelProfileAssignmentsOptions {
-    session: Pick<ModelProfileActivationSession, "model" | "thinkingLevel" | "sessionId" | "credentialSessionId" | "getConfiguredModelChain" | "getConfiguredModelChainState" | "setConfiguredModelChain" | "setActiveModelProfile" | "getActiveModelProfile" | "getDefaultFallbackRuntimeState" | "restoreDefaultFallbackRuntimeState" | "modelRegistry" | "clearProfileInstalledOverrides">;
+    session: Pick<ModelProfileActivationSession, "model" | "thinkingLevel" | "sessionId" | "credentialSessionId" | "getConfiguredModelChain" | "getConfiguredModelChainState" | "setConfiguredModelChain" | "setActiveModelProfile" | "getActiveModelProfile" | "getActivatedModelProfile" | "getProfileInstalledOverrideState" | "getDefaultFallbackRuntimeState" | "restoreDefaultFallbackRuntimeState" | "modelRegistry" | "clearProfileInstalledOverrides">;
     settings: Pick<Settings, "clearOverride" | "get" | "getGlobal" | "getOverride" | "override" | "set" | "unset">;
     assignments: ReadonlyMap<GjcModelAssignmentTargetId, string> | Partial<Record<GjcModelAssignmentTargetId, string>>;
 }
+/**
+ * Resolve the profile a materialization may consume.
+ *
+ * Only a profile this process actually activated owns role-only materialization.
+ * A persisted profile whose activation failed or was only restored from history
+ * stays in place. An explicit default selection may supersede that durable profile.
+ */
+export declare function resolveMaterializationProfileIdentity(activatedProfile: string | undefined, durableProfile: string | undefined, includesDefault: boolean): string | undefined;
+/** Resolve startup-override materialization in activated-chain, profile, then global-default order. */
+export declare function resolveMaterializedDefaultSelector(activatedDefaultChain: readonly string[] | undefined, profileDefault: ModelSelectorValue | undefined, globalDefault: ModelSelectorValue | undefined): ModelSelectorValue | undefined;
 export declare function materializeActiveModelProfileAssignment(options: MaterializeModelProfileAssignmentOptions): boolean;
 export declare function materializeActiveModelProfileAssignments(options: MaterializeModelProfileAssignmentsOptions): boolean;
 export declare class ModelProfileCredentialError extends Error {
@@ -322,6 +335,7 @@ export interface MaterializeModelProfileForDeletionResult {
     previousDefaultProfile: string | undefined;
     previousPersistedDefaultProfile: string | undefined;
     previousActiveModelProfile: string | undefined;
+    previousActivatedModelProfile: string | undefined;
     previousDefaultChainState: ConfiguredModelChainState | undefined;
     previousDefaultFallbackRuntimeState: DefaultFallbackRuntimeState | undefined;
     previousProfileInstalledOverrideState: AgentSessionProfileInstalledOverrideState | undefined;

package/dist/types/config/model-registry.d.ts

@@ -380,6 +380,8 @@ export interface CanonicalModelSelection {
     record: CanonicalModelRecord;
     model: Model<Api> | undefined;
 }
+/** Internal pure parser shared by discovery; exported for regression coverage. */
+export declare function extractGoogleOAuthProjectId(value: string | undefined, accessToken: string): string | undefined;
 export interface ModelsConfigReloadCandidate {
     readonly valid: boolean;
     readonly changed: boolean;
@@ -460,9 +462,10 @@ export declare class ModelRegistry {
     getConfiguredModelBindings(): ConfiguredModelBindings | undefined;
     /**
      * Get all models (embedded + accepted registry + custom).
+     * Supplying a credential session selects only that session's Google OAuth discovery catalog.
      * If models.yml had errors, returns embedded plus accepted registry models.
      */
-    getAll(): Model<Api>[];
+    getAll(credentialSessionId?: string): Model<Api>[];
     /** Provider ids declared in models.yml, including override-only providers. */
     getConfiguredProviderIds(): readonly string[];
     /** Configured API-key sources in models.yml precedence order, excluding absent environment values. */
@@ -600,8 +603,9 @@ export declare class ModelRegistry {
      * is authoritative for visibility: live discovery only enriches entries and
      * adds unknown ids, and never removes a bundled model. A provider that cannot
      * serve a model reports its own error when the model is used.
+     * Without a credential session, project-scoped Google OAuth discoveries are omitted.
      */
-    getAvailable(): Model<Api>[];
+    getAvailable(credentialSessionId?: string): Model<Api>[];
     getActiveProviders(): ActiveProviderDescriptor[];
     /**
      * Check whether auth is configured for a model's provider.
@@ -630,7 +634,7 @@ export declare class ModelRegistry {
     /**
      * Find a model by provider and ID.
      */
-    find(provider: string, modelId: string): Model<Api> | undefined;
+    find(provider: string, modelId: string, credentialSessionId?: string): Model<Api> | undefined;
     /**
      * Get the base URL associated with a provider, if any model defines one.
      */
@@ -647,6 +651,15 @@ export declare class ModelRegistry {
         preferredCredentialSelector?: AuthCredentialSelector;
         signal?: AbortSignal;
     }): Promise<string | undefined>;
+    /** Get a model API key together with the stored row that resolved it, when any. */
+    getApiKeyWithCredentialRowId(model: Model<Api>, sessionId?: string, options?: {
+        credentialSelector?: AuthCredentialSelector;
+        preferredCredentialSelector?: AuthCredentialSelector;
+        signal?: AbortSignal;
+    }): Promise<{
+        apiKey: string | undefined;
+        credentialRowId: number | undefined;
+    }>;
     /**
      * Get API key for a provider (e.g., "openai").
      */

package/dist/types/config/model-resolver.d.ts

@@ -144,7 +144,7 @@ export declare function resolveModelFromSettings(options: {
 /**
  * Resolve a list of override patterns to the first matching model.
  */
-export declare function resolveModelOverride(modelPatterns: string[], modelRegistry: ModelLookupRegistry, settings?: Settings, sessionId?: string, aliasIntent?: "preset-equivalent" | "reject"): {
+export declare function resolveModelOverride(modelPatterns: string[], modelRegistry: ModelLookupRegistry, settings?: Settings, sessionId?: string, aliasIntent?: "preset-equivalent" | "reject", credentialSessionId?: string): {
     model?: Model<Api>;
     thinkingLevel?: ThinkingLevel;
     explicitThinkingLevel: boolean;
@@ -247,7 +247,7 @@ export declare function resolveRoleSelection(roles: readonly string[], settings:
  * For each non-glob pattern, alias IDs are preferred over dated versions; otherwise
  * the latest dated version is selected.
  */
-export declare function resolveModelScope(patterns: string[], modelRegistry: Pick<ModelRegistry, "getAvailable" | "getCanonicalVariants">, preferences?: ModelMatchPreferences): Promise<ScopedModel[]>;
+export declare function resolveModelScope(patterns: string[], modelRegistry: Pick<ModelRegistry, "getAvailable" | "getCanonicalVariants">, preferences?: ModelMatchPreferences, credentialSessionId?: string): Promise<ScopedModel[]>;
 /**
  * Resolve the set of models a session is allowed to use, given the active
  * settings. Starts from `modelRegistry.getAvailable()` (so disabled providers
@@ -260,7 +260,7 @@ export declare function resolveModelScope(patterns: string[], modelRegistry: Pic
  * model matches any pattern — callers MUST treat this as "no usable model"
  * rather than falling back to the global default (see issue #1022).
  */
-export declare function resolveAllowedModels(modelRegistry: Pick<ModelRegistry, "getAvailable" | "getCanonicalVariants">, settings: Settings | undefined, preferences?: ModelMatchPreferences): Promise<Model<Api>[]>;
+export declare function resolveAllowedModels(modelRegistry: Pick<ModelRegistry, "getAvailable" | "getCanonicalVariants">, settings: Settings | undefined, preferences?: ModelMatchPreferences, credentialSessionId?: string): Promise<Model<Api>[]>;
 export interface ResolveCliModelResult {
     model: Model<Api> | undefined;
     selector?: string;
@@ -297,11 +297,12 @@ export declare function findInitialModel(options: {
     defaultModelId?: string;
     defaultThinkingSelector?: ThinkingLevel;
     modelRegistry: InitialModelRegistry;
+    credentialSessionId?: string;
 }): Promise<InitialModelResult>;
 /**
  * Restore model from session, with fallback to available models
  */
-export declare function restoreModelFromSession(savedProvider: string, savedModelId: string, currentModel: Model<Api> | undefined, shouldPrintMessages: boolean, modelRegistry: RestorableModelRegistry): Promise<{
+export declare function restoreModelFromSession(savedProvider: string, savedModelId: string, currentModel: Model<Api> | undefined, shouldPrintMessages: boolean, modelRegistry: RestorableModelRegistry, credentialSessionId?: string): Promise<{
     model: Model<Api> | undefined;
     fallbackMessage: string | undefined;
 }>;

package/dist/types/config/settings-schema.d.ts

@@ -249,6 +249,12 @@ export declare const SETTINGS_SCHEMA: {
         readonly description: "Grace period before a master-spawned child orphaned by confirmed master loss is closed.";
         readonly validate: (value: number) => boolean;
     };
+    readonly "sdk.brokerAbandonedGraceMs": {
+        readonly type: "number";
+        readonly default: 120000;
+        readonly description: "Grace before a detached broker with no client connection, no live session host, and no open spawn authority exits on its own. A supervised `gjc sdk broker run` service never reaps itself.";
+        readonly validate: (value: number) => boolean;
+    };
     readonly "notifications.enabled": {
         readonly type: "boolean";
         readonly default: false;
@@ -1902,7 +1908,7 @@ export declare const SETTINGS_SCHEMA: {
         readonly ui: {
             readonly tab: "interaction";
             readonly label: "Prompt Suggestions";
-            readonly description: "Predict your likely next prompt after each turn (smol-model call) and show it as ghost text; Tab accepts";
+            readonly description: "Predict your likely next prompt after each turn (one extra default-role model call) and show it as ghost text; Tab accepts";
         };
     };
     readonly "startup.quiet": {
@@ -3903,6 +3909,10 @@ export declare const SETTINGS_SCHEMA: {
         readonly type: "array";
         readonly default: string[];
     };
+    readonly "mcp.discoveryDeferAutoload": {
+        readonly type: "boolean";
+        readonly default: false;
+    };
     readonly "mcp.notifications": {
         readonly type: "boolean";
         readonly default: false;

package/dist/types/coordinator-mcp/server.d.ts

@@ -125,6 +125,10 @@ interface CoordinatorEventInput {
     payloadRef?: string | null;
     metadata?: Record<string, unknown>;
 }
+/** Test-only access for generated normalization and truncation properties. */
+export declare function webhookEventDiagnosticTokenForTest(eventId: string, maxLength: number): string;
+/** Test-only access for diagnostic record boundary coverage. */
+export declare function appendEventWebhookDiagnosticForTest(namespaceDir: string, eventId: string, error: unknown): Promise<void>;
 /** Test-only helper that waits for startup replay and queued deliveries in a namespace. */
 export declare function awaitEventWebhookDeliveriesForTest(namespaceDir: string): Promise<void>;
 /** Test-only helper that waits for queued Codex wake publishes in a namespace. */

package/dist/types/customization/import.d.ts

@@ -14,6 +14,8 @@ export interface BuildImportPreviewOptions {
  * plan. Pure reads only — nothing is written until `applyImport`.
  */
 export declare function buildImportPreview(options: BuildImportPreviewOptions): Promise<ImportPlan>;
+/** Lexical shape of an import destination. Symlink checks are separate. */
+export declare function importDestinationShapeAllowed(root: string, target: string): boolean;
 /**
  * Apply a confirmed plan. The transaction contract:
  *

package/dist/types/customization/types.d.ts

@@ -24,7 +24,7 @@ export declare const IMPORT_SOURCE_SCOPES: readonly ImportSourceScope[];
 export declare function productLabel(product: ImportProduct): string;
 export declare function sourceScopeLabel(scope: ImportSourceScope): string;
 export declare function sourceConfigDir(product: ImportProduct, sourceScope: ImportSourceScope, projectCwd: string, homeDir: string): string;
-export type InventoryStatus = "enabled" | "disabled" | "invalid" | "shadowed" | "quarantined" | "imported" | "restart-required";
+export type InventoryStatus = "enabled" | "stored-only" | "disabled" | "invalid" | "shadowed" | "quarantined" | "imported" | "restart-required";
 export interface InventoryRow {
     /** Stable row identity: `<surface>:<scope>:<path>` */
     id: string;

package/dist/types/dap/session.d.ts

@@ -1,16 +1,25 @@
 import type { DapAttachSessionOptions, DapBreakpointRecord, DapCapabilities, DapContinueOutcome, DapDataBreakpointInfoResponse, DapDataBreakpointRecord, DapDisassembledInstruction, DapEvaluateArguments, DapEvaluateResponse, DapFunctionBreakpointRecord, DapInstructionBreakpointRecord, DapLaunchSessionOptions, DapModule, DapSessionSummary, DapSource, DapStackFrame, DapThread } from "./types";
+/** Test seam: pauses after cwd containment and before the debuggee spawn. */
+export declare const runInTerminalTestHooks: {
+    beforeSpawn?: () => Promise<void>;
+};
 export interface DapOutputSnapshot {
     snapshot: DapSessionSummary;
     output: string;
 }
+export declare function cwdEscapesWorkspace(root: string, candidate: string): boolean;
 export declare class DapSessionManager {
     #private;
     constructor();
     getActiveSession(): DapSessionSummary | null;
     listSessions(): DapSessionSummary[];
     getCapabilities(): DapCapabilities | null;
-    launch(options: DapLaunchSessionOptions, signal?: AbortSignal, timeoutMs?: number): Promise<DapSessionSummary>;
-    attach(options: DapAttachSessionOptions, signal?: AbortSignal, timeoutMs?: number): Promise<DapSessionSummary>;
+    launch(options: DapLaunchSessionOptions & {
+        workspace?: string;
+    }, signal?: AbortSignal, timeoutMs?: number): Promise<DapSessionSummary>;
+    attach(options: DapAttachSessionOptions & {
+        workspace?: string;
+    }, signal?: AbortSignal, timeoutMs?: number): Promise<DapSessionSummary>;
     setBreakpoint(file: string, line: number, condition?: string, signal?: AbortSignal, timeoutMs?: number): Promise<{
         snapshot: DapSessionSummary;
         breakpoints: DapBreakpointRecord[];

package/dist/types/discovery/helpers.d.ts

@@ -93,8 +93,12 @@ export declare function getUserSkillScanDirs(home: string, userAgentDir?: string
  */
 export declare function getProjectPath(ctx: LoadContext, source: SourceId, subpath: string): string | null;
 /** Build the filesystem authority for a provider read. */
-export declare function getReadOptions(ctx: Pick<LoadContext, "home" | "isolatedHome" | "userAgentDir" | "homeIdentity" | "userAgentIdentity" | "bypassCache">, scope: ReadScope): ReadFileOptions | undefined;
-export declare function getReadOptionsForContainment(ctx: Pick<LoadContext, "home" | "isolatedHome" | "userAgentDir" | "homeIdentity" | "userAgentIdentity" | "bypassCache">, scope: ReadScope, containmentRoot?: string): Promise<ReadFileOptions | undefined>;
+type DiscoveryReadContext = Pick<LoadContext, "home" | "isolatedHome" | "userAgentDir" | "homeIdentity" | "userAgentIdentity" | "bypassCache"> & {
+    repoRoot?: string | null;
+    cwd?: string;
+};
+export declare function getReadOptions(ctx: DiscoveryReadContext, scope: ReadScope): ReadFileOptions | undefined;
+export declare function getReadOptionsForContainment(ctx: DiscoveryReadContext, scope: ReadScope, containmentRoot?: string): Promise<ReadFileOptions | undefined>;
 /**
  * Create source metadata for an item.
  */
@@ -336,3 +340,4 @@ export declare function preloadPluginRoots(home: string, cwd?: string): Promise<
  * Returns empty array if preloadPluginRoots() hasn't been called.
  */
 export declare function getPreloadedPluginRoots(): readonly ClaudePluginRoot[];
+export {};

package/dist/types/edit/index.d.ts

@@ -41,6 +41,11 @@ export declare class EditTool implements AgentTool<TInput> {
     get mode(): EditMode;
     get description(): string;
     get parameters(): TInput;
+    matcherDigest(args: unknown): string | undefined;
+    matcherEntries(args: unknown): readonly {
+        path: string;
+        digest: string;
+    }[] | undefined;
     /**
      * When in `apply_patch` mode, expose the OpenAI code backend Lark grammar so providers
      * that support OpenAI-style custom tools can emit a grammar-constrained

package/dist/types/edit/modes/patch.d.ts

@@ -6,6 +6,7 @@
  */
 import type { AgentToolResult } from "@gajae-code/agent-core";
 import * as z from "zod/v4";
+import type { Settings } from "../../config/settings";
 import { type WritethroughCallback, type WritethroughDeferredHandle } from "../../lsp";
 import type { ToolSession } from "../../tools";
 import type { EditToolDetails, LspBatchRequest } from "../renderer";
@@ -53,6 +54,14 @@ export interface ApplyPatchOptions {
     /** Explicit artifacts `local` root for this call. The caller session owns it. */
     localRoot?: string;
     signal?: AbortSignal;
+    /**
+     * Recheck a rename destination while this call holds the path mutation lock.
+     * The request preflight runs before that lock.
+     */
+    destinationGuard?: {
+        settings: Pick<Settings, "get">;
+        displayPath: string;
+    };
 }
 /** Default filesystem implementation using Bun APIs */
 export declare const defaultFileSystem: FileSystem;

package/dist/types/eval/py/runtime.d.ts

@@ -9,6 +9,15 @@ export interface PythonRuntimeLifecycleOptions {
     signal?: AbortSignal;
     deadlineMs?: number;
 }
+/**
+ * A workspace `.venv` or `venv` directory is repository content. Use it only when
+ * it is a real virtualenv (`pyvenv.cfg`) whose interpreter file resolves outside
+ * the project. An in-tree script or binary is not an interpreter.
+ *
+ * True when `candidate` is `root` or a descendant after `path.resolve`.
+ * A name such as `..payload` stays inside. Only `..` and a parent segment escape.
+ */
+export declare function workspacePathContained(root: string, candidate: string): boolean;
 export interface PythonRuntime {
     /** Path to python executable */
     pythonPath: string;