@gajae-code/coding-agent 0.2.4 → 0.2.5

package/CHANGELOG.md

@@ -2,6 +2,22 @@
 
 ## [Unreleased]
 
+## [0.2.5] - 2026-06-02
+
+### Added
+
+- Added Claude Code parity `monitor` plus `CronCreate`, `CronList`, and `CronDelete` tools with frozen upstream schema fixtures, inline scheduling, background output monitoring, and ACP permission coverage.
+
+### Changed
+
+- Pruned bundled built-in themes to `red-claw` and `blue-crab`, with `blue-crab` now the default light-appearance theme.
+- Clarified ralplan role-agent handoff guidance so Planner/Architect/Critic return compact artifact receipts after `gjc ralplan --write --json` instead of duplicating full persisted verdict markdown into the parent context.
+- Made `web_search` permissionless by default with a keyless DuckDuckGo fallback, active-model-gated native provider selection, and explicit-only legacy provider selection so custom providers no longer auto-hit stray OpenAI/Codex OAuth credentials.
+
+### Fixed
+
+- Fixed the skill HUD rail showing already-handed-off planning workflows so it renders only the currently-active stage. Handoffs now supersede every same-session-scope row of the caller and callee skills (not just the exact `skill::session_id` key), the visible-state read collapses duplicate same-skill rows to the most-recent one (so a handoff demotion drops a stale `active:true` row and on-disk state self-heals), and the HUD renderer collapses the `deep-interview → ralplan → ultragoal` pipeline to its most-recent stage. Activating a later stage (e.g. `gjc ultragoal` after ralplan) now supersedes the earlier one even when the activation path does not run the `handoff` verb, while `team` still coexists with ultragoal.
+
 ## [0.2.4] - 2026-06-02
 
 ### Added
@@ -40,6 +56,7 @@
 ### Fixed
 
 - Enforced the deep-interview phase boundary so active interviews block mutation tools until a handoff/spec is produced.
+- Allowed read-only `architect`, `planner`, and `critic` role agents to persist ralplan/state workflow receipts through a restricted `bash` allowlist while blocking general shell and product-file mutations.
 - Made settings theme browsing confirm-only so arrowing through themes no longer changes the rendered theme before the displayed/persisted theme name changes.
 - Made startup CHANGELOG display deterministic by embedding `packages/coding-agent/CHANGELOG.md` into the binary so post-update launches show the shipped history regardless of cwd or `GJC_PACKAGE_DIR`/`PI_PACKAGE_DIR` overrides.
 - Registered `gjc update` as a public root subcommand so it invokes the bundled updater instead of routing into the interactive launcher.

package/README.md

@@ -34,4 +34,4 @@ Switching backends mid-session is honoured on the next system-prompt rebuild and
 
 ## Red-claw TUI theme
 
-The interactive TUI defaults to the bundled `red-claw` crustacean theme for dark terminals, with matching welcome/icon assets. Explicit user theme settings still win; set `theme.dark: red-claw` in `~/.gjc/agent/config.yml` to pin it.
+The interactive TUI defaults to the bundled `red-claw` crustacean theme for dark terminals and the bundled `blue-crab` theme for light-appearance terminals, with matching welcome/icon assets. Explicit user theme settings still win; set `theme.dark: red-claw` and `theme.light: blue-crab` in `~/.gjc/agent/config.yml` to pin them.

package/dist/types/async/job-manager.d.ts

@@ -54,6 +54,27 @@ export interface AsyncJobRegisterOptions {
 export interface AsyncJobFilter {
     ownerId?: string;
 }
+/**
+ * A slice of process-stream output for a background job, as recorded by
+ * `appendOutput` / read by `readOutputSince`.
+ *
+ * The cursor model is monotonic UTF-8 byte offsets. `nextOffset` is the offset
+ * to pass to the next read to receive only fresh bytes; `startOffset` is the
+ * first byte the manager still retains for this job. When the requested offset
+ * is older than `startOffset`, the manager returns the retained tail and sets
+ * `truncated: true`.
+ */
+export interface AsyncJobOutputSlice {
+    jobId: string;
+    status: AsyncJob["status"];
+    text: string;
+    startOffset: number;
+    nextOffset: number;
+    truncated: boolean;
+}
+/** Default retention cap for per-job captured output. ~512 KiB matches the
+ *  bash tail-buffer order of magnitude without dominating session memory. */
+export declare const DEFAULT_JOB_OUTPUT_RETENTION_BYTES: number;
 export declare class AsyncJobManager {
     #private;
     /** Process-global instance shared by internal URL protocol handlers and tools. */
@@ -78,6 +99,46 @@ export declare class AsyncJobManager {
     getRunningJobs(filter?: AsyncJobFilter): AsyncJob[];
     getRecentJobs(limit?: number, filter?: AsyncJobFilter): AsyncJob[];
     getAllJobs(filter?: AsyncJobFilter): AsyncJob[];
+    /**
+     * Append a sanitized process-stream chunk for a background job. Called from
+     * the unthrottled bash-executor capture hook (`onRawChunk`) so monitor sees
+     * every chunk even when preview/progress callbacks are throttled.
+     *
+     * Offsets are in UTF-8 bytes. Storing chunk metadata avoids unsafe byte
+     * slicing across multibyte characters at read time. The retention window is
+     * a per-job rolling cap (`DEFAULT_JOB_OUTPUT_RETENTION_BYTES`); when it
+     * overflows, oldest whole chunks are evicted and `startOffset` advances —
+     * subsequent reads from a stale offset get `truncated: true`.
+     */
+    appendOutput(jobId: string, chunk: string): void;
+    /**
+     * Read fresh process-stream output for a job since `offset` (in UTF-8
+     * bytes). Returns `undefined` when the job does not exist or when an
+     * `ownerId` filter is set and the job belongs to a different owner — this
+     * mirrors the manager-level "not found" pattern used by `cancel`.
+     *
+     * - `offset < startOffset` returns the retained tail with `truncated: true`.
+     * - `offset > nextOffset` clamps to `nextOffset` and returns an empty text
+     *   slice with `truncated: false`.
+     * - Assembled text slices the leading retained chunk at a UTF-8 codepoint
+     *   boundary when needed, so multibyte characters cannot be split.
+     */
+    readOutputSince(jobId: string, offset: number, filter?: AsyncJobFilter): AsyncJobOutputSlice | undefined;
+    /**
+     * Register an owner-scoped cleanup callback. Returns an unregister function.
+     *
+     * Used by Cron* tools to clear session-scoped timers when the owning agent
+     * is torn down. Invoked by `runOwnerCleanups({ ownerId })` before
+     * `cancelAll({ ownerId })` so timers cannot register new jobs during
+     * teardown.
+     */
+    registerOwnerCleanup(ownerId: string, cleanup: () => void): () => void;
+    /**
+     * Run and clear every registered cleanup for the given filter. Idempotent
+     * and error-isolated: a throwing cleanup does not prevent siblings from
+     * running and never escalates to the caller.
+     */
+    runOwnerCleanups(filter?: AsyncJobFilter): void;
     getDeliveryState(filter?: AsyncJobFilter): AsyncJobDeliveryState;
     hasPendingDeliveries(filter?: AsyncJobFilter): boolean;
     watchJobs(jobIds: string[]): number;

package/dist/types/config/settings-schema.d.ts

@@ -212,7 +212,7 @@ export declare const SETTINGS_SCHEMA: {
     };
     readonly "theme.light": {
         readonly type: "string";
-        readonly default: "light";
+        readonly default: "blue-crab";
         readonly ui: {
             readonly tab: "appearance";
             readonly label: "Light Theme";
@@ -2917,7 +2917,7 @@ export declare const SETTINGS_SCHEMA: {
     };
     readonly "providers.webSearch": {
         readonly type: "enum";
-        readonly values: readonly ["auto", "exa", "brave", "jina", "kimi", "zai", "perplexity", "anthropic", "gemini", "codex", "tavily", "kagi", "synthetic", "parallel", "searxng"];
+        readonly values: readonly ["auto", "duckduckgo", "exa", "brave", "jina", "kimi", "zai", "perplexity", "anthropic", "gemini", "codex", "tavily", "kagi", "synthetic", "parallel", "searxng"];
         readonly default: "auto";
         readonly ui: {
             readonly tab: "providers";
@@ -2926,7 +2926,11 @@ export declare const SETTINGS_SCHEMA: {
             readonly options: readonly [{
                 readonly value: "auto";
                 readonly label: "Auto";
-                readonly description: "Preferred web-search provider";
+                readonly description: "Active model's native search if its creds exist, else keyless DuckDuckGo";
+            }, {
+                readonly value: "duckduckgo";
+                readonly label: "DuckDuckGo";
+                readonly description: "Keyless default \u2014 no API key or OAuth required";
             }, {
                 readonly value: "exa";
                 readonly label: "Exa";

package/dist/types/config/settings.d.ts

@@ -5,7 +5,7 @@
  *   import { settings } from "./settings";
  *
  *   const enabled = settings.get("compaction.enabled");  // sync read
- *   settings.set("theme.dark", "titanium");               // sync write, saves in background
+ *   settings.set("theme.dark", "red-claw");              // sync write, saves in background
  *
  * For tests:
  *   const isolated = Settings.isolated({ "compaction.enabled": false });

package/dist/types/discovery/helpers.d.ts

@@ -106,6 +106,7 @@ export interface ParsedAgentFields {
     blocking?: boolean;
     hide?: boolean;
     forkContext?: ForkContextPolicy;
+    bashAllowedPrefixes?: string[];
 }
 /**
  * Parse agent fields from frontmatter.

package/dist/types/exec/bash-executor.d.ts

@@ -2,8 +2,15 @@ import { type MinimizerOptions } from "@gajae-code/natives";
 import { type ShellMinimizerSettings } from "../config/settings";
 export interface BashExecutorOptions {
     cwd?: string;
-    timeout?: number;
+    timeout?: number | null;
     onChunk?: (chunk: string) => void;
+    /**
+     * Unthrottled per-chunk callback that fires for every sanitized stdout/stderr
+     * chunk *before* preview throttling. Background-job substrate uses this to
+     * record the complete process stream for the Monitor tool while keeping
+     * `onChunk` cheap for UI/progress rendering.
+     */
+    onRawChunk?: (chunk: string) => void;
     signal?: AbortSignal;
     /** Session key suffix to isolate shell sessions per agent */
     sessionKey?: string;

package/dist/types/gjc-runtime/restricted-role-agent-bash.d.ts

@@ -0,0 +1,2 @@
+export declare const GJC_RESTRICTED_ROLE_AGENT_BASH_ENV = "GJC_RESTRICTED_ROLE_AGENT_BASH";
+export declare function isRestrictedRoleAgentBash(): boolean;

package/dist/types/modes/acp/acp-client-bridge.d.ts

@@ -1,6 +1,6 @@
 /**
  * ACP-side `ClientBridge` implementation. Wraps `AgentSideConnection` so the
- * `read`/`write`/`bash`/`edit` tools (and the permission gate in
+ * `read`/`write`/`bash`/`monitor`/`edit` tools (and the permission gate in
  * `AgentSession`) can route through the client when it advertises the
  * relevant capabilities at `initialize` time.
  */

package/dist/types/modes/components/skill-hud/render.d.ts

@@ -1,2 +1,2 @@
-import type { SkillActiveEntry } from "../../../skill-state/active-state";
+import { type SkillActiveEntry } from "../../../skill-state/active-state";
 export declare function renderSkillHudBar(entries: readonly SkillActiveEntry[], width: number): string | null;

package/dist/types/modes/interactive-mode.d.ts

@@ -61,6 +61,7 @@ export declare class InteractiveMode implements InteractiveModeContext {
     isInitialized: boolean;
     isBackgrounded: boolean;
     isBashMode: boolean;
+    isBashNoContext: boolean;
     toolOutputExpanded: boolean;
     todoExpanded: boolean;
     planModeEnabled: boolean;