@gajae-code/coding-agent 0.3.0 → 0.3.2

package/CHANGELOG.md

@@ -2,6 +2,37 @@
 
 ## [Unreleased]
 
+## [0.3.2] - 2026-06-05
+
+### Added
+
+- Added model profiles with a `--mpreset <profile>` CLI flag and a `/model` selector "Profiles" section that activate a named profile's default model plus per-agent-role model overrides in one step, validating required-provider credentials before applying and surfacing a custom provider onboarding wizard for missing API-compatible providers.
+- Integrated `ai-slop-cleaner` as an internal Ultragoal sub-skill fragment that runs as the mandatory completion-gate cleanup sweep over a story's changed files, reporting blocking and advisory findings without editing code or mutating `.gjc/` state.
+
+### Fixed
+
+- Reconciled native Ultragoal commands with workflow mode-state and the HUD: `gjc ultragoal create-goals`, `complete-goals`, `checkpoint`, steering, review-blocker recording, and status now sync `.gjc/state/ultragoal-state.json` plus `skill-active-state.json` from the durable `.gjc/ultragoal` plan/ledger, clearing stale active HUD chips after all goals complete.
+- Forwarded the parent session id when task subagents validate configured role-agent model overrides, preventing session-scoped OAuth providers from being misread as unauthenticated and falling back to the parent chat model.
+- Removed unintended public memory-tool guidance and registration: Hindsight retain/recall/reflect helpers are now compatibility-only, local memory prompt injection no longer advertises `memory://` reads, and regression tests guard the public tool surface.
+- Fixed `read` hashline anchors drifting on truncated reads so the `line+hash` anchors consumed by `edit`/`apply_patch` stay correct when a file is read past the truncation boundary.
+
+## [0.3.1] - 2026-06-05
+### Added
+
+- Added opt-in crash diagnostics for subprocess failures, with a shared crash taxonomy/report writer, bash/Python/LSP/DAP crash notices, and a native Rust panic-report hook gated by `GJC_NATIVE_CRASH_DIAGNOSTICS` / `GJC_CRASH_DIAGNOSTICS`.
+- Started the GJC backend bridge foundation with a shared agent-wire protocol module, event envelopes, RPC command scope matrix, UI request broker, typed unsupported UI results, a guarded `--mode bridge` handshake surface, and RPC mode dispatch refactored onto the shared command dispatcher.
+- Documented the experimental `--mode bridge` protocol in `docs/bridge.md` and the `GJC_BRIDGE_*` environment variables in `docs/environment-variables.md` (TLS-mandatory startup, bearer auth, coarse command scopes with a `prompt` floor, single live `AgentSession` per process, bounded event-stream replay with `reset`, and the semantic-not-pixel UI capability matrix), and added bridge event-stream/idempotency regression tests plus a docs-conformance check that pins the docs against the protocol version, scope/command catalog, negotiated capabilities/frame types, and unsupported UI surfaces. The bridge protocol/SDK are experimental (`BRIDGE_PROTOCOL_VERSION` 1) and may change in additive, version-negotiated ways.
+
+### Fixed
+
+- Made opt-in crash diagnostics create/chmod report directories to `0700` and report files to `0600` so captured command, cwd, and stderr previews are private even under a permissive umask.
+- Scoped `agent://` and `artifact://` resolution to the caller's artifacts directory plus explicitly authorized parent/child tree directories, removed registry-wide live-session lookup/enumeration, and made missing agent-output metadata sidecars fail closed.
+- Fail-closed experimental bridge session endpoints by default for 0.3.1: events, commands, controller ownership, UI responses, host tool results, and host URI results are disabled unless an internal endpoint matrix explicitly enables them; only health/help and the authenticated handshake remain available, with the handshake advertising no enabled session surface by default.
+- Render terminal-pasted clipboard image temp paths as compact `[image N]` prompt placeholders while attaching the image payload, instead of inserting raw `/var/folders/.../clipboard-*.png` path text.
+- Preserved `gjc harness` `owner-vanished:*` blockers when a replacement owner becomes live so unrecovered prior-owner evidence remains visible until explicit recovery or terminal completion evidence; only safe startup liveness false-negatives such as `detached-owner-not-live` are auto-cleared.
+- Fixed the interactive agent unexpectedly stopping after automatic context maintenance instead of resuming the in-flight task. Post-compaction continuation now schedules exactly one source per completion (overflow retry → queued messages → synthetic auto-continue prompt), the threshold/handoff auto-continue prompt skips a redundant pre-send compaction check, overflow retry strips only the context-overflow failed turn (never normal/aborted/silent-abort tails), and non-resumable or superseded continuations log a structured reason instead of stranding the session.
+- Fixed the native Stop skill-state hook letting active GJC workflow skills stop prematurely. The Stop hook no longer treats a missing/unreadable mode-state file as terminal for handoff workflows, and handoff skills (`deep-interview`, `ralplan`) now keep blocking Stop even in the `handoff` phase until they are demoted (`active:false`) or cleared, so they always end by offering the next handoff step via the ask tool. Non-handoff skills (`team`, `ultragoal`) retain the fail-open safety valve when their mode-state file is corrupt or invalid.
+
 ## [0.3.0] - 2026-06-03
 
 ### Added
@@ -9,6 +40,7 @@
 - Added runtime-enforced Ultragoal executor QA/red-team evidence matrices for completion checkpoints, with plan-first contract coverage, user-surface evidence, adversarial cases, artifact references, scoped Executor red-team guidance, and focused rejection tests for shallow or contradictory QA evidence.
 ### Fixed
 
+- Made `gjc harness observe` preserve completed RPC owner evidence after the owner exits, including a `completedOwnerExited` diagnostic and durable terminal-result cursor.
 - Clarified that `gjc team` requires an existing tmux-backed leader session from `gjc --tmux`, with actionable help, docs, and failure text.
 - Kept deep-interview ask options visible for long prompts by adding an opt-in scrollable selector title panel with selector-local `PageUp`/`PageDown` prompt scrolling, while leaving normal ask dialogs and global keybinding configuration unchanged.
 

package/README.md

@@ -17,7 +17,7 @@ The agent supports three mutually-exclusive memory backends, selected via the `m
 
 - `off` (default) — no memory subsystem runs.
 - `local` — existing rollout-summarisation pipeline; writes `memory_summary.md` and consolidated artifacts under the agent dir.
-- `hindsight` — talks to a [Hindsight](https://hindsight.vectorize.io) server (Cloud or self-hosted Docker), retains transcripts every Nth user turn, recalls memories on the first turn of a session, and exposes `retain`, `recall`, and `reflect`.
+- `hindsight` — talks to a [Hindsight](https://hindsight.vectorize.io) server (Cloud or self-hosted Docker). Hindsight uses private backend lifecycle hooks to retain transcripts and recall context; compatibility-only internals remain for legacy backend calls, but GJC does not expose public coding-harness memory tools such as `retain`, `recall`, or `reflect`.
 
 ### Hindsight quickstart
 

package/dist/types/async/job-manager.d.ts

@@ -26,6 +26,8 @@ export interface AsyncJobMetadata {
         description?: string;
         assignment?: string;
     };
+    /** True when this bash job was started by the `monitor` tool (vs plain async bash). */
+    monitor?: boolean;
 }
 /**
  * Typed outcome a subagent task run may produce. A `paused` outcome is
@@ -139,6 +141,11 @@ export declare class AsyncJobManager {
     /** Reset the process-global instance. Test-only. */
     static resetForTests(): void;
     constructor(options: AsyncJobManagerOptions);
+    /**
+     * Subscribe to live-job-set change events. Returns an unsubscribe function.
+     * Listener errors are isolated so one bad subscriber cannot break others.
+     */
+    onChange(cb: () => void): () => void;
     register(type: "bash" | "task", label: string, run: (ctx: {
         jobId: string;
         signal: AbortSignal;

package/dist/types/cli/args.d.ts

@@ -2,7 +2,7 @@
  * CLI argument parsing and help display
  */
 import { type Effort } from "@gajae-code/ai";
-export type Mode = "text" | "json" | "rpc" | "acp" | "rpc-ui";
+export type Mode = "text" | "json" | "rpc" | "acp" | "rpc-ui" | "bridge";
 export interface Args {
     cwd?: string;
     allowHome?: boolean;
@@ -11,6 +11,8 @@ export interface Args {
     smol?: string;
     slow?: string;
     plan?: string;
+    mpreset?: string;
+    default?: boolean;
     apiKey?: string;
     systemPrompt?: string;
     appendSystemPrompt?: string;

package/dist/types/commands/deep-interview.d.ts

@@ -39,6 +39,9 @@ export default class DeepInterview extends Command {
         deliberate: import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
             description: string;
         };
+        force: import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
+            description: string;
+        };
         json: import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
             description: string;
         };

package/dist/types/commands/launch.d.ts

@@ -25,6 +25,12 @@ export default class Index extends Command {
         plan: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
             description: string;
         };
+        mpreset: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+        };
+        default: import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
+            description: string;
+        };
         provider: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
             description: string;
         };

package/dist/types/config/keybindings.d.ts

@@ -26,6 +26,7 @@ interface AppKeybindings {
     "app.session.fork": true;
     "app.session.resume": true;
     "app.session.observe": true;
+    "app.jobs.open": true;
     "app.session.togglePath": true;
     "app.session.toggleSort": true;
     "app.session.rename": true;
@@ -258,6 +259,10 @@ export declare const KEYBINDINGS: {
         readonly defaultKeys: "ctrl+s";
         readonly description: "Observe subagent sessions";
     };
+    readonly "app.jobs.open": {
+        readonly defaultKeys: "alt+j";
+        readonly description: "Open monitor/cron jobs overlay";
+    };
     readonly "app.session.togglePath": {
         readonly defaultKeys: "ctrl+p";
         readonly description: "Toggle session path display";

package/dist/types/config/model-profile-activation.d.ts

@@ -0,0 +1,30 @@
+import type { ThinkingLevel } from "@gajae-code/agent-core";
+import type { Api, Model } from "@gajae-code/ai";
+import type { AgentSession } from "../session/agent-session";
+import { type ModelRegistry } from "./model-registry";
+import type { Settings } from "./settings";
+export interface PrepareModelProfileActivationOptions {
+    session: Pick<AgentSession, "model" | "thinkingLevel" | "sessionId">;
+    modelRegistry: Pick<ModelRegistry, "getModelProfile" | "getModelProfiles" | "getAvailableModelProfileNames" | "getApiKeyForProvider" | "getAll" | "resolveCanonicalModel" | "getCanonicalVariants" | "getCanonicalId">;
+    settings: Pick<Settings, "get">;
+    profileName: string;
+}
+export interface PreparedModelProfileActivation {
+    profileName: string;
+    session: Pick<AgentSession, "model" | "thinkingLevel" | "sessionId" | "setModelTemporary">;
+    settings: Pick<Settings, "get" | "override" | "set" | "flush">;
+    previousModel: Model<Api> | undefined;
+    previousThinkingLevel: ThinkingLevel | undefined;
+    previousAgentModelOverrides: Record<string, string>;
+    defaultModel: Model<Api> | undefined;
+    defaultThinkingLevel: ThinkingLevel | undefined;
+    agentModelOverrides: Record<string, string>;
+}
+export declare function formatModelProfileCredentialError(profileName: string, providers: readonly string[]): string;
+export declare function prepareModelProfileActivation(options: PrepareModelProfileActivationOptions): Promise<PreparedModelProfileActivation>;
+export declare function applyPreparedModelProfileActivation(prepared: PreparedModelProfileActivation, options?: {
+    persistDefault?: boolean;
+}): Promise<void>;
+export declare function activateModelProfile(options: PrepareModelProfileActivationOptions, applyOptions?: {
+    persistDefault?: boolean;
+}): Promise<void>;

package/dist/types/config/model-profiles.d.ts

@@ -0,0 +1,19 @@
+import type { GjcModelAssignmentTargetId } from "./model-registry";
+import type { ModelsConfig } from "./models-config-schema";
+export type ModelProfileRole = GjcModelAssignmentTargetId;
+export interface ModelProfileDefinition {
+    name: string;
+    requiredProviders: string[];
+    modelMapping: Partial<Record<ModelProfileRole, string>>;
+    source: "builtin" | "user";
+}
+export interface ResolvedProfileBinding {
+    defaultSelector?: string;
+    agentModelOverrides: Partial<Record<Exclude<ModelProfileRole, "default">, string>>;
+}
+export declare function deriveModelProfileMappedProviders(definition: Pick<ModelProfileDefinition, "modelMapping">): string[];
+export declare function aggregateModelProfileRequiredProviders(requiredProviders: readonly string[], definition: Pick<ModelProfileDefinition, "modelMapping">): string[];
+export declare const BUILTIN_MODEL_PROFILES: readonly ModelProfileDefinition[];
+export declare function mergeModelProfiles(userProfiles?: ModelsConfig["profiles"]): Map<string, ModelProfileDefinition>;
+export declare function resolveProfileBindings(definition: ModelProfileDefinition): ResolvedProfileBinding;
+export declare function formatAvailableProfileNames(profiles: ReadonlyMap<string, ModelProfileDefinition>): string;

package/dist/types/config/model-registry.d.ts

@@ -4,6 +4,7 @@ import { type ThemeColor } from "../modes/theme/theme";
 import type { AuthStorage } from "../session/auth-storage";
 import { type ConfigError, ConfigFile } from "./config-file";
 import { type CanonicalModelIndex, type CanonicalModelRecord, type CanonicalModelVariant, type ModelEquivalenceConfig } from "./model-equivalence";
+import { type ModelProfileDefinition } from "./model-profiles";
 import { type Settings } from "./settings";
 export type { CanonicalModelIndex, CanonicalModelRecord, CanonicalModelVariant, ModelEquivalenceConfig };
 export declare const kNoAuth = "N/A";
@@ -244,6 +245,10 @@ export declare const ModelsConfigFile: ConfigFile<{
         overrides?: Record<string, string> | undefined;
         exclude?: string[] | undefined;
     } | undefined;
+    profiles?: Record<string, {
+        required_providers: string[];
+        model_mapping: Partial<Record<"architect" | "critic" | "default" | "executor" | "planner", string>>;
+    }> | undefined;
 }>;
 /** Provider override config (baseUrl, headers, apiKey, compat, transport) without custom models */
 interface ProviderOverride {
@@ -306,6 +311,9 @@ export declare class ModelRegistry {
      * Get any error from loading models.json (undefined if no error).
      */
     getError(): ConfigError | undefined;
+    getModelProfiles(): Map<string, ModelProfileDefinition>;
+    getModelProfile(name: string): ModelProfileDefinition | undefined;
+    getAvailableModelProfileNames(): string[];
     applyConfiguredModelBindings(targetSettings: Settings): void;
     /**
      * Get all models (built-in + custom).

package/dist/types/config/model-resolver.d.ts

@@ -128,7 +128,7 @@ export declare function resolveModelOverride(modelPatterns: string[], modelRegis
  * primary resolution unchanged so the existing error path still surfaces
  * a meaningful failure downstream.
  */
-export declare function resolveModelOverrideWithAuthFallback(modelPatterns: string[], parentActiveModelPattern: string | undefined, modelRegistry: ModelLookupRegistry & Pick<ModelRegistry, "getApiKey">, settings?: Settings): Promise<{
+export declare function resolveModelOverrideWithAuthFallback(modelPatterns: string[], parentActiveModelPattern: string | undefined, modelRegistry: ModelLookupRegistry & Pick<ModelRegistry, "getApiKey">, settings?: Settings, sessionId?: string): Promise<{
     model?: Model<Api>;
     thinkingLevel?: ThinkingLevel;
     explicitThinkingLevel: boolean;

package/dist/types/config/models-config-schema.d.ts

@@ -53,6 +53,41 @@ export declare const OpenAICompatSchema: z.ZodObject<{
         none: "none";
     }>>;
 }, z.core.$strip>;
+export declare const ProfileRoleSchema: z.ZodEnum<{
+    architect: "architect";
+    critic: "critic";
+    default: "default";
+    executor: "executor";
+    planner: "planner";
+}>;
+export declare const ProfileModelSelectorSchema: z.ZodString;
+export declare const ProfileModelMappingSchema: z.ZodRecord<z.ZodEnum<{
+    architect: "architect";
+    critic: "critic";
+    default: "default";
+    executor: "executor";
+    planner: "planner";
+}> & z.core.$partial, z.ZodString>;
+export declare const ProfileDefinitionSchema: z.ZodObject<{
+    required_providers: z.ZodArray<z.ZodString>;
+    model_mapping: z.ZodRecord<z.ZodEnum<{
+        architect: "architect";
+        critic: "critic";
+        default: "default";
+        executor: "executor";
+        planner: "planner";
+    }> & z.core.$partial, z.ZodString>;
+}, z.core.$strict>;
+export declare const ProfilesSchema: z.ZodRecord<z.ZodString, z.ZodObject<{
+    required_providers: z.ZodArray<z.ZodString>;
+    model_mapping: z.ZodRecord<z.ZodEnum<{
+        architect: "architect";
+        critic: "critic";
+        default: "default";
+        executor: "executor";
+        planner: "planner";
+    }> & z.core.$partial, z.ZodString>;
+}, z.core.$strict>>;
 export declare const ModelOverrideSchema: z.ZodObject<{
     name: z.ZodOptional<z.ZodString>;
     reasoning: z.ZodOptional<z.ZodBoolean>;
@@ -547,5 +582,17 @@ export declare const ModelsConfigSchema: z.ZodObject<{
         overrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
         exclude: z.ZodOptional<z.ZodArray<z.ZodString>>;
     }, z.core.$strip>>;
+    profiles: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        required_providers: z.ZodArray<z.ZodString>;
+        model_mapping: z.ZodRecord<z.ZodEnum<{
+            architect: "architect";
+            critic: "critic";
+            default: "default";
+            executor: "executor";
+            planner: "planner";
+        }> & z.core.$partial, z.ZodString>;
+    }, z.core.$strict>>>;
 }, z.core.$strict>;
 export type ModelsConfig = z.infer<typeof ModelsConfigSchema>;
+export type ModelProfileConfig = z.infer<typeof ProfileDefinitionSchema>;
+export type ModelProfilesConfig = z.infer<typeof ProfilesSchema>;

package/dist/types/config/settings-schema.d.ts

@@ -24,7 +24,7 @@ export declare const TAB_METADATA: Record<SettingTab, {
     icon: `tab.${string}`;
 }>;
 /** Status line segment identifiers */
-export type StatusLineSegmentId = "gajae" | "pi" | "model" | "mode" | "path" | "git" | "pr" | "subagents" | "token_in" | "token_out" | "token_total" | "token_rate" | "cost" | "context_pct" | "context_total" | "time_spent" | "time" | "session" | "hostname" | "cache_read" | "cache_write" | "session_name" | "usage";
+export type StatusLineSegmentId = "gajae" | "pi" | "model" | "mode" | "path" | "git" | "pr" | "subagents" | "jobs" | "token_in" | "token_out" | "token_total" | "token_rate" | "cost" | "context_pct" | "context_total" | "time_spent" | "time" | "session" | "hostname" | "cache_read" | "cache_write" | "session_name" | "usage";
 /** Submenu choice metadata. */
 export type SubmenuOption<V extends string = string> = {
     value: V;
@@ -189,6 +189,16 @@ export declare const SETTINGS_SCHEMA: {
         readonly type: "record";
         readonly default: Record<string, string>;
     };
+    readonly "modelProfile.default": {
+        readonly type: "string";
+        readonly default: undefined;
+        readonly ui: {
+            readonly tab: "model";
+            readonly label: "Default Model Profile";
+            readonly description: "Model profile applied automatically at startup";
+            readonly options: "runtime";
+        };
+    };
     readonly modelTags: {
         readonly type: "record";
         readonly default: ModelTagsSettings;
@@ -2697,11 +2707,11 @@ export declare const SETTINGS_SCHEMA: {
     };
     readonly "task.maxConcurrency": {
         readonly type: "number";
-        readonly default: 32;
+        readonly default: 8;
         readonly ui: {
             readonly tab: "tasks";
             readonly label: "Max Concurrent Tasks";
-            readonly description: "Concurrent limit for subagents";
+            readonly description: "Safer concurrent limit for subagents; higher fan-out still requires an explicit plan above 4 tasks.";
             readonly options: readonly [{
                 readonly value: "0";
                 readonly label: "Unlimited";
@@ -2762,7 +2772,7 @@ export declare const SETTINGS_SCHEMA: {
         readonly ui: {
             readonly tab: "tasks";
             readonly label: "Fork Context Max Tokens";
-            readonly description: "Approximate token cap for fork-context seeds. 0 uses 25% of the target model context window.";
+            readonly description: "Approximate token cap for explicit full fork-context seeds. 0 uses 15% of the target model context window, with a 15k fallback when the window is unknown.";
         };
     };
     readonly "task.maxRecursionDepth": {

package/dist/types/debug/crash-diagnostics.d.ts

@@ -0,0 +1,45 @@
+export type CrashProcessKind = "bash" | "python" | "lsp" | "dap" | "mcp" | "browser" | "worker" | "native" | "unknown";
+export type CrashClass = "clean_exit" | "non_zero_exit" | "signal_exit" | "timeout" | "cancelled" | "spawn_error" | "protocol_exit" | "native_panic" | "unknown";
+export interface CrashClassificationInput {
+    kind: CrashProcessKind;
+    command?: string[];
+    exitCode?: number | null;
+    signal?: string | null;
+    cancelled?: boolean;
+    timedOut?: boolean;
+    spawnError?: unknown;
+    stderr?: string;
+    protocol?: string;
+}
+export interface CrashClassification {
+    kind: CrashProcessKind;
+    class: CrashClass;
+    crashed: boolean;
+    exitCode: number | null;
+    signal: string | null;
+    command?: string[];
+    protocol?: string;
+    reason: string;
+}
+export interface CrashReport extends CrashClassification {
+    schemaVersion: 1;
+    createdAt: string;
+    pid: number;
+    cwd: string;
+    stderrPreview?: string;
+    spawnError?: string;
+}
+export interface CrashReportWriteResult {
+    report: CrashReport;
+    path: string | null;
+    enabled: boolean;
+}
+export declare function crashDiagnosticsEnabled(env?: NodeJS.ProcessEnv): boolean;
+export declare function getCrashDiagnosticsDirectory(env?: NodeJS.ProcessEnv): string;
+export declare function classifyProcessCrash(input: CrashClassificationInput): CrashClassification;
+export declare function writeCrashReport(input: CrashClassificationInput, options?: {
+    cwd?: string;
+    env?: NodeJS.ProcessEnv;
+    now?: Date;
+}): Promise<CrashReportWriteResult>;
+export declare function formatCrashDiagnosticNotice(result: CrashReportWriteResult): string | null;

package/dist/types/debug/runtime-gauges.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Current runtime owner counts, keyed by `<owner>.<resource>`. Extend as more
+ * owners (Python kernels, LSP clients, browser tabs, async jobs, streaming
+ * queues) expose count getters.
+ */
+export declare function getRuntimeResourceCounts(): Record<string, number>;

package/dist/types/deep-interview/render-middleware.d.ts

@@ -2,4 +2,5 @@ import { type Component } from "@gajae-code/tui";
 import { type Theme } from "../modes/theme/theme";
 export declare function renderDeepInterviewAssistantText(text: string, uiTheme: Theme): Component | null;
 export declare function renderDeepInterviewAskQuestion(question: string, uiTheme: Theme): Component | null;
+export declare function isDeepInterviewAskQuestion(question: string): boolean;
 export declare function formatDeepInterviewSelectorPrompt(question: string): string | null;

package/dist/types/eval/py/executor.d.ts

@@ -52,6 +52,8 @@ export interface PythonExecutorOptions {
 }
 export interface PythonKernelExecutor {
     execute: (code: string, options?: KernelExecuteOptions) => Promise<KernelExecuteResult>;
+    getExitCode?: () => number | null;
+    peekStderr?: () => string;
 }
 export interface PythonResult {
     /** Combined stdout + stderr output (sanitized, possibly truncated) */

package/dist/types/eval/py/kernel.d.ts

@@ -55,6 +55,8 @@ export declare class PythonKernel {
     private constructor();
     static start(options: KernelStartOptions): Promise<PythonKernel>;
     isAlive(): boolean;
+    getExitCode(): number | null;
+    peekStderr(): string;
     execute(code: string, options?: KernelExecuteOptions): Promise<KernelExecuteResult>;
     interrupt(): Promise<void>;
     shutdown(options?: KernelShutdownOptions): Promise<KernelShutdownResult>;

package/dist/types/exec/bash-executor.d.ts

@@ -43,6 +43,16 @@ export interface BashResult {
     outputBytes: number;
     artifactId?: string;
 }
+/** Number of persistent shell sessions currently retained (owner gauge). */
+export declare function getShellSessionCount(): number;
+/**
+ * Dispose all persistent shell sessions: abort in-flight work and drop the
+ * strong references so the native shells can be finalized. Healthy persistent
+ * sessions are otherwise retained for the whole process lifetime (MEM-7). This
+ * is registered as a postmortem cleanup so shutdown/signals release native
+ * shell resources, and is also callable directly (e.g. on owner teardown).
+ */
+export declare function disposeAllShellSessions(): Promise<void>;
 /** Translate `ShellMinimizerSettings` into native `MinimizerOptions`, or `undefined` when disabled. */
 export declare function buildMinimizerOptions(group: ShellMinimizerSettings): MinimizerOptions | undefined;
 export declare function executeBash(command: string, options?: BashExecutorOptions): Promise<BashResult>;

package/dist/types/gjc-runtime/cli-write-receipt.d.ts

@@ -0,0 +1,24 @@
+/**
+ * CLI write/mutation receipt shaping (Workstream B, v4).
+ *
+ * `CliWriteReceipt` is the compact **stdout presentation** returned by a GJC
+ * mutation command. It carries only routing/audit fields a caller needs; it
+ * NEVER echoes the persisted body (full `state` envelope, ultragoal `plan`,
+ * team task body, ralplan `task`, etc.) — echoing those back is a redundant
+ * token leak because the caller already has the content it just wrote.
+ *
+ * This is intentionally a *separate* concept from the persisted
+ * `WorkflowStateReceipt` (the on-disk envelope `receipt` integrity field).
+ * Do NOT use `CliWriteReceipt` as a persistence schema or validate persisted
+ * envelopes against it.
+ */
+export interface CliWriteReceipt {
+    ok: boolean;
+    [field: string]: unknown;
+}
+/**
+ * Serialize a write/mutation receipt to compact stdout JSON.
+ * `undefined` fields are dropped so optional routing fields stay absent
+ * rather than serialized as `null`.
+ */
+export declare function renderCliWriteReceipt(receipt: Record<string, unknown>): string;

package/dist/types/gjc-runtime/deep-interview-runtime.d.ts

@@ -20,6 +20,7 @@ export interface ResolvedDeepInterviewSpecWriteArgs {
     json: boolean;
     deliberate: boolean;
     handoff?: "ralplan";
+    force: boolean;
 }
 export interface PersistedDeepInterviewSpec {
     slug: string;

package/dist/types/gjc-runtime/state-migrations.d.ts

@@ -1,3 +1,4 @@
+import type { CanonicalGjcWorkflowSkill } from "../skill-state/active-state";
 export interface NormalizeLegacyStateResult {
     state: Record<string, unknown>;
     changed: boolean;
@@ -12,6 +13,14 @@ export interface MigrateAndPersistLegacyStateResult {
     migrated: boolean;
     path: string;
 }
+export interface MigrateWorkflowStateResult {
+    state: Record<string, unknown>;
+    fromVersion: number;
+    toVersion: number;
+    changed: boolean;
+}
+export type WorkflowStateMigration = (state: Record<string, unknown>, skill: CanonicalGjcWorkflowSkill) => Record<string, unknown>;
+export declare function migrateWorkflowState(raw: Record<string, unknown>, skill: string): MigrateWorkflowStateResult;
 /**
  * Pure legacy state normalizer for background/internal readers.
  *