@gajae-code/coding-agent 0.18.7 → 0.18.9

package/src/sdk/host/surface-policy.ts

@@ -69,6 +69,7 @@ const QUERY_BINDINGS: Readonly<Record<string, string | undefined>> = {
 	"config.list/get": "getConfigItems",
 	"session.branch_candidates": "getBranchCandidates",
 	"extensions.list": "getExtensions",
+	"session.progress": "getProjectProgress",
 };
 
 export interface SdkSurfacePolicy {

package/src/sdk/index.ts

@@ -9,6 +9,14 @@ export {
 	type UnknownModelProfileDetails,
 	UnknownModelProfileError,
 } from "../config/model-profile-contract";
+export {
+	PROJECT_PROGRESS_SNAPSHOT_SCHEMA,
+	type ProgressSnapshotAttention,
+	type ProgressSnapshotStory,
+	type ProgressSnapshotTodo,
+	type ProgressSnapshotWorkflow,
+	type ProjectProgressSnapshot,
+} from "../progress/progress-contract";
 export type {
 	QueuedInputAdmission,
 	QueuedInputDelivery,

package/src/sdk/lifecycle-session.ts

@@ -117,7 +117,9 @@ export async function createLifecycleAgentSession(
 			// Explicit model pin (#4707): resolve through the staged selector
 			// resolver after extension providers register (modelPattern), so the
 			// pin matches CLI `--model` semantics instead of bypassing them.
-			...(modelId !== undefined ? { modelPattern: modelId } : {}),
+			// Defer startup profile activation so pin validation happens first,
+			// before the default profile could be activated in place of the pin.
+			...(modelId !== undefined ? { modelPattern: modelId, deferModelProfileActivation: true } : {}),
 			// Memory startup (rollout summarisation) issues one LLM request per
 			// claimed rollout, so its duration scales with the backlog. Keeping it
 			// inside the broker's readiness window is what kills the child at the

package/src/sdk/prompt-deadline-manager.ts

@@ -347,6 +347,21 @@ export class PromptDeadlineManager {
 		} catch {
 			// claim may fail if already claimed (e.g., cancellation won); ignore.
 		}
+		// The claim and the first lookup are separated by an await. A real
+		// agent_end can therefore commit terminal_ok while the deadline path is
+		// still preparing its synthetic failure. Re-read the durable state before
+		// invoking terminalization so a completed turn cannot be reported later as
+		// prompt_deadline_exceeded.
+		try {
+			const settled = this.#reconciliation.lookup("prompt", correlation) as { status: string };
+			if (settled.status === "terminal_ok" || settled.status === "failed") {
+				this.clear(correlation);
+				return;
+			}
+		} catch {
+			// Keep the existing uncertainty recovery path below when the durable
+			// read is unavailable.
+		}
 		// A real terminal may win between lookup and this claim. A diagnostic-only
 		// failure is not terminal evidence; preserve it privately until the host hook
 		// proves the exact run/tool settlement and captures its correlated agent_end.

package/src/sdk/protocol/operation-inventory.generated.json

@@ -1673,6 +1673,24 @@
 			"packages/coding-agent/test/sdk-operation-inventory.test.ts"
 		]
 	},
+	{
+		"sourceId": "registry:Q32",
+		"sourceFile": "packages/coding-agent/src/sdk/protocol/operation-registry.ts",
+		"sourceKind": "registry",
+		"decision": "include",
+		"sdkId": "session.progress",
+		"adapterMappings": {
+			"telegram": "prohibited",
+			"discord": "prohibited",
+			"slack": "prohibited",
+			"mcp": "generic_safe",
+			"acp": "generic_safe",
+			"daemonCli": "generic_safe"
+		},
+		"testIds": [
+			"packages/coding-agent/test/sdk-operation-inventory.test.ts"
+		]
+	},
 	{
 		"sourceId": "registry:R01",
 		"sourceFile": "packages/coding-agent/src/sdk/protocol/operation-registry.ts",
@@ -2053,6 +2071,24 @@
 			"packages/coding-agent/test/sdk-operation-inventory.test.ts"
 		]
 	},
+	{
+		"sourceId": "slash_command:progress",
+		"sourceFile": "packages/coding-agent/src/slash-commands/builtin-registry.ts",
+		"sourceKind": "slash_command",
+		"decision": "include",
+		"sdkId": "session.progress",
+		"adapterMappings": {
+			"telegram": "prohibited",
+			"discord": "prohibited",
+			"slack": "prohibited",
+			"mcp": "generic_safe",
+			"acp": "generic_safe",
+			"daemonCli": "generic_safe"
+		},
+		"testIds": [
+			"packages/coding-agent/test/sdk-operation-inventory.test.ts"
+		]
+	},
 	{
 		"sourceId": "slash_command:usage",
 		"sourceFile": "packages/coding-agent/src/slash-commands/builtin-registry.ts",
@@ -2844,6 +2880,17 @@
 			"packages/coding-agent/test/sdk-operation-inventory.test.ts"
 		]
 	},
+	{
+		"sourceId": "agent_session:getSubagentLifecycleStatuses",
+		"sourceFile": "packages/coding-agent/src/session/agent-session.ts",
+		"sourceKind": "agent_session",
+		"decision": "exclude",
+		"rationale": "internal read-only subagent status projection consumed through session.progress (Q32), not a separate SDK seam",
+		"exclusionMetadata": {
+			"adapterMappings": "not_applicable",
+			"testIds": "not_applicable"
+		}
+	},
 	{
 		"sourceId": "agent_session:emitNotice",
 		"sourceFile": "packages/coding-agent/src/session/agent-session.ts",
@@ -3844,6 +3891,28 @@
 			"packages/coding-agent/test/sdk-operation-inventory.test.ts"
 		]
 	},
+	{
+		"sourceId": "agent_session:resolvePromptSkillInvocation",
+		"sourceFile": "packages/coding-agent/src/session/agent-session.ts",
+		"sourceKind": "agent_session",
+		"decision": "exclude",
+		"rationale": "internal prompt-dispatch classifier shared with interactive title seeding, not a user-facing control seam",
+		"exclusionMetadata": {
+			"adapterMappings": "not_applicable",
+			"testIds": "not_applicable"
+		}
+	},
+	{
+		"sourceId": "agent_session:isLocallyHandledSlashCommand",
+		"sourceFile": "packages/coding-agent/src/session/agent-session.ts",
+		"sourceKind": "agent_session",
+		"decision": "exclude",
+		"rationale": "internal slash-command classifier that keeps command text out of title seeding, not a user-facing control seam",
+		"exclusionMetadata": {
+			"adapterMappings": "not_applicable",
+			"testIds": "not_applicable"
+		}
+	},
 	{
 		"sourceId": "agent_session:promptCustomMessage",
 		"sourceFile": "packages/coding-agent/src/session/agent-session.ts",
@@ -4277,6 +4346,28 @@
 			"testIds": "not_applicable"
 		}
 	},
+	{
+		"sourceId": "agent_session:getTerminalRunOwnerForEvent",
+		"sourceFile": "packages/coding-agent/src/session/agent-session.ts",
+		"sourceKind": "agent_session",
+		"decision": "exclude",
+		"rationale": "internal Agent-claimed event ownership proof, read only through the terminalAbortSeams bus capability; not a public SDK operation",
+		"exclusionMetadata": {
+			"adapterMappings": "not_applicable",
+			"testIds": "not_applicable"
+		}
+	},
+	{
+		"sourceId": "agent_session:getRunOwnerDomain",
+		"sourceFile": "packages/coding-agent/src/session/agent-session.ts",
+		"sourceKind": "agent_session",
+		"decision": "exclude",
+		"rationale": "internal run-resource ledger domain lookup for exact consuming-run ownership; not a public SDK operation",
+		"exclusionMetadata": {
+			"adapterMappings": "not_applicable",
+			"testIds": "not_applicable"
+		}
+	},
 	{
 		"sourceId": "agent_session:pendingToolExecutions",
 		"sourceFile": "packages/coding-agent/src/session/agent-session.ts",
@@ -4422,6 +4513,61 @@
 			"testIds": "not_applicable"
 		}
 	},
+	{
+		"sourceId": "agent_session:setUnavailableModelProfile",
+		"sourceFile": "packages/coding-agent/src/session/agent-session.ts",
+		"sourceKind": "agent_session",
+		"decision": "exclude",
+		"rationale": "internal session-scoped unavailable profile tracking; mutated by the session lifecycle on model-load failure, not a public SDK control seam",
+		"exclusionMetadata": {
+			"adapterMappings": "not_applicable",
+			"testIds": "not_applicable"
+		}
+	},
+	{
+		"sourceId": "agent_session:getUnavailableModelProfile",
+		"sourceFile": "packages/coding-agent/src/session/agent-session.ts",
+		"sourceKind": "agent_session",
+		"decision": "exclude",
+		"rationale": "internal session-scoped unavailable profile query for UI status rendering; not a public SDK operation",
+		"exclusionMetadata": {
+			"adapterMappings": "not_applicable",
+			"testIds": "not_applicable"
+		}
+	},
+	{
+		"sourceId": "agent_session:getUserModelSelectionRevision",
+		"sourceFile": "packages/coding-agent/src/session/agent-session.ts",
+		"sourceKind": "agent_session",
+		"decision": "exclude",
+		"rationale": "internal session-scoped model selection revision tracking behind the reviewed model.set seam, not an independent public SDK operation",
+		"exclusionMetadata": {
+			"adapterMappings": "not_applicable",
+			"testIds": "not_applicable"
+		}
+	},
+	{
+		"sourceId": "agent_session:getUserCanonicalVariantSelection",
+		"sourceFile": "packages/coding-agent/src/session/agent-session.ts",
+		"sourceKind": "agent_session",
+		"decision": "exclude",
+		"rationale": "internal session-scoped model variant selection state behind the reviewed model.set seam, not an independent public SDK operation",
+		"exclusionMetadata": {
+			"adapterMappings": "not_applicable",
+			"testIds": "not_applicable"
+		}
+	},
+	{
+		"sourceId": "agent_session:markUserModelSelection",
+		"sourceFile": "packages/coding-agent/src/session/agent-session.ts",
+		"sourceKind": "agent_session",
+		"decision": "exclude",
+		"rationale": "internal session-scoped model selection revision marker behind the reviewed model.set seam, not an independent public SDK operation",
+		"exclusionMetadata": {
+			"adapterMappings": "not_applicable",
+			"testIds": "not_applicable"
+		}
+	},
 	{
 		"sourceId": "agent_session:syncEagerDelegation",
 		"sourceFile": "packages/coding-agent/src/session/agent-session.ts",

package/src/sdk/protocol/operation-registry.ts

@@ -174,6 +174,10 @@ const queries = [
 	["providers.list/active", "List active providers."],
 	["session.checkpoint", "Resolve a durable transcript checkpoint into a connection-owned replay cursor."],
 	["turn.steer_status", "Read the durable acknowledgement status of a correlated steer by clientRef."],
+	[
+		"session.progress",
+		"Read the read-only project progress snapshot (gjc.project_progress.v1) derived from durable session state.",
+	],
 ] as const;
 
 // Q28 was folded into Q26; preserve the independent Q29/Q30 query identities.
@@ -208,6 +212,7 @@ const queryIds = [
 	"Q29",
 	"Q30",
 	"Q31",
+	"Q32",
 ] as const;
 
 function queryId(index: number): string {
@@ -311,7 +316,7 @@ function queryContinuityClass(id: string): QueryContinuityClass {
 }
 
 function queryDisposition(id: string): Record<Adapter, AdapterDisposition> {
-	if (["Q23", "Q24", "Q25", "Q26", "Q27", "Q29", "Q30", "Q31"].includes(id))
+	if (["Q23", "Q24", "Q25", "Q26", "Q27", "Q29", "Q30", "Q31", "Q32"].includes(id))
 		return dispositions({ telegram: "prohibited", discord: "prohibited", slack: "prohibited" });
 	return dispositions();
 }
@@ -398,7 +403,9 @@ export const OPERATIONS: readonly Operation[] = [
 					? ["invalid_request", "resource_gone", "internal"]
 					: id === "Q27"
 						? ["invalid_request", "resource_gone", "model_profile_registry_error"]
-						: ["invalid_request", "resource_gone"],
+						: id === "Q32"
+							? ["invalid_request", "resource_gone", "unavailable"]
+							: ["invalid_request", "resource_gone"],
 			continuityClass: queryContinuityClass(id),
 			...(queryAliases[id] === undefined ? {} : { aliases: queryAliases[id] }),
 			adapterDispositions: queryDisposition(id),

package/src/sdk/router/session-router.ts

@@ -1,7 +1,7 @@
 import * as crypto from "node:crypto";
 import * as fs from "node:fs/promises";
 import * as path from "node:path";
-import { logger, resolveEquivalentPath } from "@gajae-code/utils";
+import { logger, pathIdentityKey } from "@gajae-code/utils";
 import { endpointIncarnation, matchesIndexedEndpointFile } from "../broker/endpoint-authority";
 import {
 	canonicalSessionCwd,
@@ -203,6 +203,7 @@ export interface SessionRouterClient {
 		frame: Record<string, unknown>,
 		options?: {
 			timeoutMs?: number;
+			deadline?: number;
 			connectedOnly?: boolean;
 			/** Synchronous pre-send observer; a throw aborts the dispatch before the wire. */
 			beforeDispatch?: (context: SdkDispatchContext) => void;
@@ -853,7 +854,7 @@ export class SessionRouter {
 		const capability = current?.capability;
 		if (!attached || !current || !capability)
 			throw new SessionRouterError("pre_send", "Broker session endpoint could not be attached.");
-		const listing = this.#index.listSessions();
+		const listing = this.#index.listSessions(undefined, new Set([sessionId]));
 		const indexedCurrent = listing.warnings.some(warning => warningAffectsSession(warning, sessionId))
 			? undefined
 			: listing.sessions.find(item => item.sessionId === sessionId);
@@ -954,18 +955,47 @@ export class SessionRouter {
 		expectedAttachment?: SessionAttachment,
 		options?: {
 			timeoutMs?: number;
+			deadline?: number;
 			beforeDispatch?: (context: SdkDispatchContext) => void;
 			onDispatch?: SdkDispatchHandler;
 			dispatchFence?: (dispatch: () => Promise<Record<string, unknown>>) => Promise<Record<string, unknown>>;
 		},
 	): Promise<Record<string, unknown>> {
+		const { deadline, beforeDispatch, onDispatch, dispatchFence, ...requestOptions } = options ?? {};
+		const remainingDeadlineMs = (): number =>
+			deadline === undefined ? Number.POSITIVE_INFINITY : Math.max(0, deadline - Date.now());
+		const reconcileWithinDeadline = async (): Promise<void> => {
+			if (deadline === undefined) {
+				await this.#serialReconcile(this.#runEpoch, true, true);
+				return;
+			}
+			const remaining = remainingDeadlineMs();
+			if (remaining <= 0)
+				throw new SessionRouterError("pre_send", "SDK session request deadline elapsed during router preparation.");
+			const reconciliation = this.#serialReconcile(this.#runEpoch, true, true);
+			const expired = Promise.withResolvers<never>();
+			const timer = setTimeout(
+				() =>
+					expired.reject(
+						new SessionRouterError("pre_send", "SDK session request deadline elapsed during router preparation."),
+					),
+				remaining,
+			);
+			try {
+				await Promise.race([reconciliation, expired.promise]);
+			} finally {
+				clearTimeout(timer);
+			}
+		};
 		const matchesExpectedAuthority = (attachment: SessionAttachment): boolean =>
 			expectedAttachment === undefined ||
 			attachment === expectedAttachment ||
 			(expectedAttachment.authorityId !== undefined && attachment.authorityId === expectedAttachment.authorityId);
 		const publishing = this.#sessions.get(sessionId);
 		if (!publishing || !matchesExpectedAuthority(publishing.capability) || !publishing.initializingPublication)
-			await this.#serialReconcile(this.#runEpoch, true, true);
+			await reconcileWithinDeadline();
+		if (remainingDeadlineMs() <= 0)
+			throw new SessionRouterError("pre_send", "SDK session request deadline elapsed during router preparation.");
 		const attached = this.#sessions.get(sessionId);
 		if (!attached || !this.#attachmentPublished(attached))
 			throw new SessionRouterError("pre_send", "SDK session attachment is unavailable: session not published.");
@@ -994,20 +1024,44 @@ export class SessionRouter {
 		// token: the wire frame alone carries credentials, and the observer
 		// context is a deep-frozen, token-redacted copy (#4640 review).
 		const wireFrame = this.#prepareFrame(attached, frame);
-		const { beforeDispatch, onDispatch, dispatchFence, ...requestOptions } = options ?? {};
+		if (remainingDeadlineMs() <= 0) throw new SessionRouterError("pre_send", "SDK session request deadline elapsed.");
 		try {
-			await attached.client.connect?.();
+			const connecting = attached.client.connect?.();
+			if (connecting) {
+				if (deadline === undefined) await connecting;
+				else {
+					const expired = Promise.withResolvers<never>();
+					const timer = setTimeout(
+						() =>
+							expired.reject(
+								new SessionRouterError(
+									"pre_send",
+									"SDK session request deadline elapsed during transport preparation.",
+								),
+							),
+						remainingDeadlineMs(),
+					);
+					try {
+						await Promise.race([connecting, expired.promise]);
+					} finally {
+						clearTimeout(timer);
+					}
+				}
+			}
 		} catch (error) {
 			if (error instanceof SdkClientError) throw new SdkPreparedDispatchError(error);
 			throw error;
 		}
 		if (!this.#attachmentPublished(attached))
 			throw new SessionRouterError("pre_send", "SDK session attachment changed during transport preparation.");
-		const dispatch = () =>
-			attached.client.request(wireFrame, {
+		const dispatch = () => {
+			const dispatchRemaining = remainingDeadlineMs();
+			if (dispatchRemaining <= 0)
+				throw new SessionRouterError("pre_send", "SDK session request deadline elapsed before dispatch.");
+			return attached.client.request(wireFrame, {
 				...requestOptions,
 				connectedOnly: true,
-				timeoutMs: requestOptions.timeoutMs ?? SESSION_REQUEST_TIMEOUT_MS,
+				timeoutMs: Math.min(requestOptions.timeoutMs ?? SESSION_REQUEST_TIMEOUT_MS, dispatchRemaining),
 				...(beforeDispatch
 					? {
 							beforeDispatch: (context: SdkDispatchContext) =>
@@ -1021,7 +1075,16 @@ export class SessionRouter {
 						}
 					: {}),
 			});
+		};
 		const response = await (dispatchFence ? dispatchFence(dispatch) : dispatch());
+		// A late acknowledgement cannot activate a provider after the caller's budget.
+		// Keep the sent identity for reconciliation: expiry does not undo registration.
+		if (remainingDeadlineMs() <= 0)
+			throw new SdkClientError("uncertain_after_send", "SDK session request deadline elapsed after dispatch.", {
+				id: wireFrame.id,
+				operation: wireFrame.operation ?? wireFrame.type,
+				idempotencyKey: wireFrame.idempotencyKey,
+			});
 		const settled = this.#sessions.get(sessionId);
 		if (
 			!settled ||
@@ -1040,7 +1103,7 @@ export class SessionRouter {
 		let indexed: IndexedSession | undefined;
 		try {
 			await this.#index.refresh();
-			const listing = this.#index.listSessions();
+			const listing = this.#index.listSessions(undefined, new Set([sessionId]));
 			if (listing.warnings.some(warning => warningAffectsSession(warning, sessionId))) return undefined;
 			indexed = listing.sessions.find(candidate => candidate.sessionId === sessionId);
 		} catch {
@@ -1114,7 +1177,7 @@ export class SessionRouter {
 		try {
 			await this.#index.open();
 			await this.#index.refresh();
-			const listing = this.#index.listSessions();
+			const listing = this.#index.listSessions(undefined, new Set([sessionId]));
 			if (listing.warnings.some(warning => warningAffectsSession(warning, sessionId)))
 				throw new SessionActivationError(
 					"session_not_live",
@@ -1305,7 +1368,7 @@ export class SessionRouter {
 			for (const attached of this.#sessions.values()) this.#reviveTransport(attached);
 			return;
 		}
-		const indexed = this.#index.listSessions();
+		const indexed = this.#index.listSessions(undefined, this.#sessionIds);
 		const live = indexed.sessions.filter(
 			session =>
 				!indexed.warnings.some(warning => warningAffectsSession(warning, session.sessionId)) &&
@@ -1469,13 +1532,14 @@ export class SessionRouter {
 		const cwd = indexed.locator.cwd;
 		const defaultStateRoot = path.join(cwd, ".gjc", "state");
 		// Locator cwd is already canonical. `stateRoot` remains the host-provided
-		// authority path, so this comparison resolves equivalent paths only for the
-		// state-root identity boundary; cwd never retains lexical symlink spellings.
-		const indexedStateRoot = resolveEquivalentPath(indexed.locator.stateRoot);
+		// authority path, so compare filesystem identity here: case-insensitive
+		// Windows aliases match without rewriting I/O paths, while case-sensitive
+		// directories remain distinct.
+		const indexedStateRoot = pathIdentityKey(indexed.locator.stateRoot);
 		const scope =
-			indexedStateRoot === resolveEquivalentPath(defaultStateRoot)
+			indexedStateRoot === pathIdentityKey(defaultStateRoot)
 				? "default"
-				: indexedStateRoot === resolveEquivalentPath(path.join(defaultStateRoot, "chat"))
+				: indexedStateRoot === pathIdentityKey(path.join(defaultStateRoot, "chat"))
 					? "chat"
 					: undefined;
 		if (!scope || indexed.endpointMtimeMs === undefined || !Number.isFinite(indexed.endpointMtimeMs)) return null;
@@ -1513,7 +1577,7 @@ export class SessionRouter {
 		)
 			return null;
 		await this.#index.refresh();
-		const listing = this.#index.listSessions();
+		const listing = this.#index.listSessions(undefined, new Set([indexed.sessionId]));
 		if (listing.warnings.some(warning => warningAffectsSession(warning, indexed.sessionId))) return null;
 		const current = listing.sessions.find(session => session.sessionId === indexed.sessionId);
 		if (!current || !sameIndexedAuthority(indexed, current)) return null;
@@ -2204,7 +2268,7 @@ export class SessionRouter {
 				try {
 					await this.#index.refresh();
 					const current = this.#index
-						.listSessions()
+						.listSessions(undefined, new Set([attached.sessionId]))
 						.sessions.find(session => session.sessionId === attached.sessionId);
 					if (
 						current?.live &&

package/src/sdk/session-list.ts

@@ -17,6 +17,7 @@ export const SESSION_LIST_SAVED_SESSION_OMISSION_DETAIL_CODES = [
 	"binding_conflict",
 	"binding_invalid",
 	"migration_busy",
+	"managed_gc_journal_capacity_exceeded",
 	"atomic_unavailable",
 	"invalid_request",
 	"durability_failed",