@gajae-code/coding-agent 0.3.2 → 0.4.1

package/dist/types/modes/shared/agent-wire/unattended-run-controller.d.ts

@@ -0,0 +1,161 @@
+/**
+ * Unattended run controller (#318).
+ *
+ * The single required owner of negotiated unattended state. Entering unattended
+ * mode is fail-closed: a controller can only be created via {@link
+ * UnattendedRunController.negotiate}, which rejects a missing/partial budget, an
+ * invalid declaration, or a provider that cannot account for tokens/cost.
+ *
+ * The controller owns budget accounting across metrics and phases. Scope/action
+ * authorization (#319) and the durable audit trail (#320) layer onto the same
+ * controller; this slice wires the budget floor and abort coordination.
+ *
+ * Attended mode never constructs a controller, so by construction the attended
+ * path is unaffected by everything here.
+ */
+import type { RpcActionDenied, RpcBudgetExceeded, RpcBudgetMetric, RpcScopeDenied, RpcUnattendedActionClass, RpcUnattendedBudget, RpcUnattendedRefusalCode } from "../../rpc/rpc-types";
+import type { BridgeCommandScope } from "./scopes";
+import { actionClassForScope } from "./unattended-action-policy";
+/** Coordinated abort surfaces invoked exactly once on a budget breach / abort. */
+export interface UnattendedAbortHooks {
+    abortModelStream?(): void | Promise<void>;
+    abortBash?(): void | Promise<void>;
+    cancelHostTools?(reason: string): void | Promise<void>;
+    cancelHostUris?(reason: string): void | Promise<void>;
+    stopWorkflow?(reason: string): void | Promise<void>;
+}
+export type UnattendedAuditEvent = {
+    event: "unattended_negotiated";
+    run_id: string;
+    actor: string;
+} | {
+    event: "budget_exceeded";
+    payload: RpcBudgetExceeded;
+} | {
+    event: "unattended_aborted";
+    run_id: string;
+    reason: string;
+} | {
+    event: "unattended_abort_settled";
+    run_id: string;
+    status: "aborted" | "abort_failed";
+    failures: number;
+} | {
+    event: "scope_denied";
+    payload: RpcScopeDenied;
+} | {
+    event: "action_denied";
+    payload: RpcActionDenied;
+};
+export interface NegotiateContext {
+    runId: string;
+    sessionId?: string;
+    audit?(event: UnattendedAuditEvent): void;
+    abortHooks?: UnattendedAbortHooks;
+    /**
+     * Whether the active provider can report token usage and cost. Unattended
+     * mode rejects providers without this accounting up front (fail-closed).
+     */
+    providerSupportsTokenCostMetrics?: boolean;
+    /** Injectable clock for deterministic tests. Defaults to Date.now. */
+    now?(): number;
+}
+export declare class UnattendedNegotiationError extends Error {
+    readonly code: RpcUnattendedRefusalCode;
+    constructor(code: RpcUnattendedRefusalCode, message: string);
+}
+export declare class UnattendedBudgetExceededError extends Error {
+    readonly payload: RpcBudgetExceeded;
+    constructor(payload: RpcBudgetExceeded);
+}
+/** Thrown when a provider/tool reports a non-finite usage value (fail-closed). */
+export declare class UnattendedAccountingError extends Error {
+    readonly metric: RpcBudgetMetric;
+    readonly phase: string;
+    constructor(metric: RpcBudgetMetric, phase: string, value: unknown);
+}
+/** Thrown when a command's coarse scope is outside the declared allowlist (#319). */
+export declare class ScopeDeniedError extends Error {
+    readonly payload: RpcScopeDenied;
+    constructor(payload: RpcScopeDenied);
+}
+/** Thrown when an action class is outside the declared allowlist (default-deny, #319). */
+export declare class ActionDeniedError extends Error {
+    readonly payload: RpcActionDenied;
+    constructor(payload: RpcActionDenied);
+}
+interface Usage {
+    tokens: number;
+    toolCalls: number;
+    costUsd: number;
+}
+export declare class UnattendedRunController {
+    readonly runId: string;
+    readonly sessionId?: string;
+    readonly actor: string;
+    readonly budget: RpcUnattendedBudget;
+    readonly scopes: ReadonlySet<string>;
+    readonly actionAllowlist: ReadonlySet<string>;
+    private readonly usage;
+    private readonly startedAt;
+    private readonly now;
+    private readonly audit?;
+    private readonly abortHooks;
+    private aborted;
+    private abortPromise?;
+    private constructor();
+    /** Fail-closed entry: validate the declaration + budget, or throw. */
+    static negotiate(declaration: unknown, ctx: NegotiateContext): UnattendedRunController;
+    get isAborted(): boolean;
+    usageSnapshot(): Readonly<Usage> & {
+        wallTimeMs: number;
+    };
+    remainingWallTimeMs(): number;
+    /**
+     * Authorize a command's coarse scope against the declared allowlist. Throws
+     * ScopeDeniedError (pre-side-effect) when the scope was not declared.
+     */
+    authorizeScope(scope: BridgeCommandScope, command?: string): void;
+    /**
+     * Authorize an action class against the declared allowlist. Default-deny: any
+     * class not explicitly declared is rejected with ActionDeniedError before the
+     * side effect runs.
+     */
+    authorizeAction(action: RpcUnattendedActionClass, command?: string): void;
+    /**
+     * Classify a bash command and authorize the resulting action class BEFORE the
+     * command is executed. Returns the classified action class on success.
+     */
+    authorizeBash(command: string): RpcUnattendedActionClass;
+    /** Convenience: map a coarse scope to its `command.<scope>` action class. */
+    static actionClassForScope: typeof actionClassForScope;
+    /** Pre-turn estimate: refuse to start a turn that would obviously breach. */
+    preTurnEstimate(estimate: {
+        tokens?: number;
+        costUsd?: number;
+    }): void;
+    /** Reserve one tool-call unit BEFORE any side effect; breach if it would exceed. */
+    preflightToolCall(phase?: string): void;
+    /** Post-turn reconciliation of actual token usage. Fails closed on non-finite. */
+    recordTokens(tokens: number, phase?: string): void;
+    recordCost(costUsd: number, phase?: string): void;
+    /** Combined post-turn reconciliation. */
+    reconcile(actual: {
+        tokens?: number;
+        costUsd?: number;
+    }, phase?: string): void;
+    /** Wall-time check; call before/inside long operations. */
+    checkWallTime(phase?: string): void;
+    private breach;
+    /**
+     * Idempotent abort: runs every abort hook at most once. Safe to call from the
+     * synchronous breach path (which does not await) and from callers that do; both
+     * share a single abort promise so hook completion can be awaited deterministically.
+     */
+    abort(reason: string): Promise<void>;
+    /** Returns the in-flight/settled abort completion once aborting has begun. */
+    get abortCompletion(): Promise<void> | undefined;
+    private fireAbort;
+    private runAbortHooks;
+}
+export {};

package/dist/types/modes/shared/agent-wire/unattended-session.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Session-level unattended control plane (#323 / G011 emission side).
+ *
+ * Bridges the gate EMISSION side (skill runtimes / ask tool emitting gates) to
+ * the gate ANSWER side (the external agent's `workflow_gate_response` over RPC):
+ *
+ *  - `emitGate(input)` opens a gate on the durable broker, emits the gate frame
+ *    to the transport, and returns a promise that resolves with the agent's
+ *    answer once it arrives.
+ *  - `resolveGate(response)` (called from RPC dispatch) validates + resolves the
+ *    gate on the broker; the broker's `advance` hook resolves the pending
+ *    `emitGate` promise with the answer.
+ *
+ * Also implements the dispatch-facing {@link RpcUnattendedControlPlane} so the
+ * RPC server can route `negotiate_unattended` + `workflow_gate_response` here.
+ */
+import type { RpcCommand, RpcUnattendedAccepted, RpcUnattendedDeclaration, RpcWorkflowGate, RpcWorkflowGateResolution, RpcWorkflowGateResponse } from "../../rpc/rpc-types";
+import type { RpcUnattendedControlPlane } from "./command-dispatch";
+import { type UnattendedAbortHooks, type UnattendedAuditEvent, UnattendedRunController } from "./unattended-run-controller";
+import { type GateStore, type OpenGateInput } from "./workflow-gate-broker";
+/** Minimal surface a skill runtime / ask tool uses to emit a gate and await its answer. */
+export interface WorkflowGateEmitter {
+    /** True only when unattended mode has been negotiated. */
+    isUnattended(): boolean;
+    /** Open + emit a gate; resolves with the agent's answer (from workflow_gate_response). */
+    emitGate(input: OpenGateInput): Promise<unknown>;
+}
+export interface UnattendedSessionOptions {
+    runId: string;
+    sessionId?: string;
+    /** Emit a workflow_gate frame to the transport so the agent receives it. */
+    emitFrame: (gate: RpcWorkflowGate) => void;
+    /** Durable gate store; defaults to in-memory. */
+    store?: GateStore;
+    /** Audit sink for controller + gate events. */
+    audit?: (event: UnattendedAuditEvent | {
+        event: string;
+        [k: string]: unknown;
+    }) => void;
+    abortHooks?: UnattendedAbortHooks;
+    /** Whether the active provider reports token/cost usage (fail-closed when false/omitted). */
+    providerSupportsTokenCostMetrics?: boolean;
+    /** Snapshot live cumulative usage after a dispatch or turn, for budget reconciliation. */
+    getUsageSnapshot?: () => {
+        tokens?: number;
+        costUsd?: number;
+    };
+}
+export declare class UnattendedSessionControlPlane implements RpcUnattendedControlPlane, WorkflowGateEmitter {
+    #private;
+    private readonly opts;
+    constructor(opts: UnattendedSessionOptions);
+    isUnattended(): boolean;
+    get controller(): UnattendedRunController | undefined;
+    negotiate(declaration: RpcUnattendedDeclaration): RpcUnattendedAccepted;
+    preflightCommand(command: RpcCommand): void;
+    reconcileUsage(phase?: string): void;
+    resolveGate(response: RpcWorkflowGateResponse): Promise<RpcWorkflowGateResolution>;
+    emitGate(input: OpenGateInput): Promise<unknown>;
+    recover(): Promise<void>;
+}

package/dist/types/modes/shared/agent-wire/workflow-gate-broker.d.ts

@@ -0,0 +1,114 @@
+import type { RpcWorkflowGate, RpcWorkflowGateContext, RpcWorkflowGateKind, RpcWorkflowGateOption, RpcWorkflowGateResolution, RpcWorkflowGateResponse, RpcWorkflowStage } from "../../rpc/rpc-types";
+export interface PersistedGate {
+    gate: RpcWorkflowGate;
+    status: "pending" | "accepted";
+    idempotencyKey?: string;
+    responseHash?: string;
+    /** Raw accepted answer, retained so a crashed advance can be replayed. */
+    answer?: unknown;
+    resolution?: RpcWorkflowGateResolution;
+    advanced: boolean;
+}
+export interface GateStore {
+    nextSeq(stage: RpcWorkflowStage): number;
+    put(record: PersistedGate): void;
+    get(gateId: string): PersistedGate | undefined;
+    /** All persisted gate records (used for crash recovery). */
+    list(): PersistedGate[];
+}
+export declare class MemoryGateStore implements GateStore {
+    private counters;
+    private gates;
+    nextSeq(stage: RpcWorkflowStage): number;
+    put(record: PersistedGate): void;
+    get(gateId: string): PersistedGate | undefined;
+    list(): PersistedGate[];
+}
+/** Crash-durable JSON-file backed store. Writes the full state on every mutation. */
+export declare class FileGateStore implements GateStore {
+    private readonly filePath;
+    private state;
+    constructor(filePath: string);
+    private load;
+    private flush;
+    nextSeq(stage: RpcWorkflowStage): number;
+    put(record: PersistedGate): void;
+    get(gateId: string): PersistedGate | undefined;
+    list(): PersistedGate[];
+}
+export type GateAuditEvent = {
+    event: "gate_emitted";
+    gate_id: string;
+    stage: RpcWorkflowStage;
+    kind: RpcWorkflowGateKind;
+} | {
+    event: "gate_response_accepted";
+    gate_id: string;
+    answer_hash: string;
+} | {
+    event: "gate_response_rejected";
+    gate_id: string;
+    answer_hash: string;
+} | {
+    event: "gate_response_idempotent_replay";
+    gate_id: string;
+} | {
+    event: "gate_response_idempotency_conflict";
+    gate_id: string;
+} | {
+    event: "gate_response_already_resolved";
+    gate_id: string;
+} | {
+    event: "gate_response_unknown_gate";
+    gate_id: string;
+} | {
+    event: "gate_advance_recovered";
+    gate_id: string;
+};
+export interface BrokerHooks {
+    /** Called once when a pending gate has been persisted and should be emitted. */
+    emit?(gate: RpcWorkflowGate): void;
+    /**
+     * Invoked to advance the workflow after an accepted resolution is durably
+     * committed. MUST be idempotent keyed by `gate.gate_id`: `recover()` replays
+     * it for any gate left `accepted` but not `advanced` by a crash.
+     */
+    advance?(gate: RpcWorkflowGate, answer: unknown): void | Promise<void>;
+    /** Append-only audit sink. */
+    audit?(event: GateAuditEvent): void;
+}
+export interface OpenGateInput {
+    stage: RpcWorkflowStage;
+    kind: RpcWorkflowGateKind;
+    schema: RpcWorkflowGate["schema"];
+    options?: RpcWorkflowGateOption[];
+    context?: RpcWorkflowGateContext;
+}
+export declare class WorkflowGateBrokerError extends Error {
+    readonly code: "unknown_gate" | "already_resolved" | "idempotency_conflict" | "invalid_workflow_stage";
+    constructor(code: "unknown_gate" | "already_resolved" | "idempotency_conflict" | "invalid_workflow_stage", message: string);
+}
+export declare class WorkflowGateBroker {
+    private readonly runId;
+    private readonly store;
+    private readonly hooks;
+    constructor(runId: string, store: GateStore, hooks?: BrokerHooks);
+    private runShort;
+    /** Open and emit a gate. The pending record is persisted BEFORE emission. */
+    openGate(input: OpenGateInput): RpcWorkflowGate;
+    /**
+     * Resolve a gate with an answer. Validates against the advertised schema.
+     * On success the resolution is persisted BEFORE `advance` is invoked exactly
+     * once. Invalid answers leave the gate pending (per #315 acceptance).
+     */
+    resolve(response: RpcWorkflowGateResponse): Promise<RpcWorkflowGateResolution>;
+    /**
+     * Recover any gate left `accepted` but not `advanced` by a crash between the
+     * durable accept and the advanced commit. Replays `advance` (which must be
+     * idempotent) exactly once per gate and marks it advanced. Returns the ids
+     * that were recovered.
+     */
+    recover(): Promise<string[]>;
+    /** Canonical serialization helper (exposed for callers/tests). */
+    static canonical(value: unknown): string;
+}

package/dist/types/modes/shared/agent-wire/workflow-gate-schema.d.ts

@@ -0,0 +1,39 @@
+import type { RpcJsonSchema, RpcWorkflowGateValidationError } from "../../rpc/rpc-types";
+export declare const GATE_SCHEMA_LIMITS: {
+    readonly maxSchemaBytes: number;
+    readonly maxDepth: 16;
+    readonly maxProperties: 256;
+    readonly maxEnumValues: 512;
+    readonly maxAnswerBytes: number;
+};
+/** Thrown at gate construction when a schema is unsupported or too large. */
+export declare class WorkflowGateSchemaError extends Error {
+    readonly code = "invalid_workflow_gate_schema";
+    constructor(message: string);
+}
+/** Canonical (stable-key-ordered) JSON serialization used for hashing. */
+export declare function canonicalJson(value: unknown): string;
+export declare function schemaHash(schema: RpcJsonSchema): string;
+declare function answerHashOf(answer: unknown): string;
+/** Validate the schema *shape*. Throws WorkflowGateSchemaError on any problem. */
+export declare function assertSupportedGateSchema(schema: RpcJsonSchema): void;
+type SchemaError = {
+    path: string;
+    keyword: string;
+    message: string;
+    expected?: unknown;
+};
+/** A compiled, cached validator for one schema. */
+export interface CompiledGateSchema {
+    readonly schema: RpcJsonSchema;
+    readonly hash: string;
+    validate(answer: unknown): SchemaError[];
+}
+/** Compile (and cache) a validator for a schema. Asserts shape on first compile. */
+export declare function compileGateSchema(schema: RpcJsonSchema): CompiledGateSchema;
+/**
+ * Validate an answer against a compiled gate schema. Returns `null` on success
+ * or a typed {@link RpcWorkflowGateValidationError} on mismatch.
+ */
+export declare function validateGateAnswer(compiled: CompiledGateSchema, gateId: string, answer: unknown): RpcWorkflowGateValidationError | null;
+export { answerHashOf };

package/dist/types/modes/theme/theme.d.ts

@@ -6,7 +6,7 @@ export type SymbolPreset = "unicode" | "nerd" | "ascii";
 /**
  * All available symbol keys organized by category.
  */
-export type SymbolKey = "status.success" | "status.error" | "status.warning" | "status.info" | "status.pending" | "status.disabled" | "status.enabled" | "status.running" | "status.shadowed" | "status.aborted" | "nav.cursor" | "nav.selected" | "nav.expand" | "nav.collapse" | "nav.back" | "tree.branch" | "tree.last" | "tree.vertical" | "tree.horizontal" | "tree.hook" | "boxRound.topLeft" | "boxRound.topRight" | "boxRound.bottomLeft" | "boxRound.bottomRight" | "boxRound.horizontal" | "boxRound.vertical" | "boxSharp.topLeft" | "boxSharp.topRight" | "boxSharp.bottomLeft" | "boxSharp.bottomRight" | "boxSharp.horizontal" | "boxSharp.vertical" | "boxSharp.cross" | "boxSharp.teeDown" | "boxSharp.teeUp" | "boxSharp.teeRight" | "boxSharp.teeLeft" | "sep.powerline" | "sep.powerlineThin" | "sep.powerlineLeft" | "sep.powerlineRight" | "sep.powerlineThinLeft" | "sep.powerlineThinRight" | "sep.block" | "sep.space" | "sep.asciiLeft" | "sep.asciiRight" | "sep.dot" | "sep.slash" | "sep.pipe" | "icon.model" | "icon.plan" | "icon.goal" | "icon.pause" | "icon.folder" | "icon.scratchFolder" | "icon.file" | "icon.git" | "icon.branch" | "icon.pr" | "icon.tokens" | "icon.context" | "icon.cost" | "icon.time" | "icon.pi" | "icon.agents" | "icon.cache" | "icon.input" | "icon.output" | "icon.host" | "icon.session" | "icon.package" | "icon.warning" | "icon.rewind" | "icon.auto" | "icon.fast" | "icon.extensionSkill" | "icon.extensionTool" | "icon.extensionSlashCommand" | "icon.extensionMcp" | "icon.extensionRule" | "icon.extensionHook" | "icon.extensionPrompt" | "icon.extensionContextFile" | "icon.extensionInstruction" | "icon.mic" | "thinking.minimal" | "thinking.low" | "thinking.medium" | "thinking.high" | "thinking.xhigh" | "checkbox.checked" | "checkbox.unchecked" | "format.bullet" | "format.dash" | "format.bracketLeft" | "format.bracketRight" | "md.quoteBorder" | "md.hrChar" | "md.bullet" | "lang.default" | "lang.typescript" | "lang.javascript" | "lang.python" | "lang.rust" | "lang.go" | "lang.java" | "lang.c" | "lang.cpp" | "lang.csharp" | "lang.ruby" | "lang.php" | "lang.swift" | "lang.kotlin" | "lang.shell" | "lang.html" | "lang.css" | "lang.json" | "lang.yaml" | "lang.markdown" | "lang.sql" | "lang.docker" | "lang.lua" | "lang.text" | "lang.env" | "lang.toml" | "lang.xml" | "lang.ini" | "lang.conf" | "lang.log" | "lang.csv" | "lang.tsv" | "lang.image" | "lang.pdf" | "lang.archive" | "lang.binary" | "tab.appearance" | "tab.model" | "tab.interaction" | "tab.context" | "tab.editing" | "tab.tools" | "tab.memory" | "tab.tasks" | "tab.providers";
+export type SymbolKey = "status.success" | "status.error" | "status.warning" | "status.info" | "status.pending" | "status.disabled" | "status.enabled" | "status.running" | "status.shadowed" | "status.aborted" | "nav.cursor" | "nav.selected" | "nav.expand" | "nav.collapse" | "nav.back" | "tree.branch" | "tree.last" | "tree.vertical" | "tree.horizontal" | "tree.hook" | "boxRound.topLeft" | "boxRound.topRight" | "boxRound.bottomLeft" | "boxRound.bottomRight" | "boxRound.horizontal" | "boxRound.vertical" | "boxSharp.topLeft" | "boxSharp.topRight" | "boxSharp.bottomLeft" | "boxSharp.bottomRight" | "boxSharp.horizontal" | "boxSharp.vertical" | "boxSharp.cross" | "boxSharp.teeDown" | "boxSharp.teeUp" | "boxSharp.teeRight" | "boxSharp.teeLeft" | "sep.powerline" | "sep.powerlineThin" | "sep.powerlineLeft" | "sep.powerlineRight" | "sep.powerlineThinLeft" | "sep.powerlineThinRight" | "sep.block" | "sep.space" | "sep.asciiLeft" | "sep.asciiRight" | "sep.dot" | "sep.slash" | "sep.pipe" | "icon.model" | "icon.plan" | "icon.goal" | "icon.pause" | "icon.folder" | "icon.scratchFolder" | "icon.file" | "icon.git" | "icon.branch" | "icon.pr" | "icon.tokens" | "icon.context" | "icon.cost" | "icon.time" | "icon.pi" | "icon.agents" | "icon.cache" | "icon.input" | "icon.output" | "icon.host" | "icon.session" | "icon.package" | "icon.warning" | "icon.rewind" | "icon.auto" | "icon.fast" | "icon.extensionSkill" | "icon.extensionTool" | "icon.extensionSlashCommand" | "icon.extensionMcp" | "icon.extensionRule" | "icon.extensionHook" | "icon.extensionPrompt" | "icon.extensionContextFile" | "icon.extensionInstruction" | "icon.mic" | "thinking.minimal" | "thinking.low" | "thinking.medium" | "thinking.high" | "thinking.xhigh" | "thinking.max" | "checkbox.checked" | "checkbox.unchecked" | "format.bullet" | "format.dash" | "format.bracketLeft" | "format.bracketRight" | "md.quoteBorder" | "md.hrChar" | "md.bullet" | "lang.default" | "lang.typescript" | "lang.javascript" | "lang.python" | "lang.rust" | "lang.go" | "lang.java" | "lang.c" | "lang.cpp" | "lang.csharp" | "lang.ruby" | "lang.php" | "lang.swift" | "lang.kotlin" | "lang.shell" | "lang.html" | "lang.css" | "lang.json" | "lang.yaml" | "lang.markdown" | "lang.sql" | "lang.docker" | "lang.lua" | "lang.text" | "lang.env" | "lang.toml" | "lang.xml" | "lang.ini" | "lang.conf" | "lang.log" | "lang.csv" | "lang.tsv" | "lang.image" | "lang.pdf" | "lang.archive" | "lang.binary" | "tab.appearance" | "tab.model" | "tab.interaction" | "tab.context" | "tab.editing" | "tab.tools" | "tab.memory" | "tab.tasks" | "tab.providers";
 export type SpinnerType = "status" | "activity";
 export type ThemeColor = "accent" | "border" | "borderAccent" | "borderMuted" | "success" | "error" | "warning" | "muted" | "dim" | "text" | "thinkingText" | "userMessageText" | "customMessageText" | "customMessageLabel" | "toolTitle" | "toolOutput" | "mdHeading" | "mdLink" | "mdLinkUrl" | "mdCode" | "mdCodeBlock" | "mdCodeBlockBorder" | "mdQuote" | "mdQuoteBorder" | "mdHr" | "mdListBullet" | "toolDiffAdded" | "toolDiffRemoved" | "toolDiffContext" | "syntaxComment" | "syntaxKeyword" | "syntaxFunction" | "syntaxVariable" | "syntaxString" | "syntaxNumber" | "syntaxType" | "syntaxOperator" | "syntaxPunctuation" | "thinkingOff" | "thinkingMinimal" | "thinkingLow" | "thinkingMedium" | "thinkingHigh" | "thinkingXhigh" | "bashMode" | "pythonMode" | "statusLineSep" | "statusLineModel" | "statusLinePath" | "statusLineGitClean" | "statusLineGitDirty" | "statusLineContext" | "statusLineSpend" | "statusLineStaged" | "statusLineDirty" | "statusLineUntracked" | "statusLineOutput" | "statusLineCost" | "statusLineSubagents";
 /** Check if a string is a valid ThemeColor value */
@@ -149,6 +149,7 @@ export declare class Theme {
         medium: string;
         high: string;
         xhigh: string;
+        max: string;
     };
     get checkbox(): {
         checked: string;

package/dist/types/runtime-mcp/transports/stdio.d.ts

@@ -5,10 +5,6 @@
  * Messages are newline-delimited JSON.
  */
 import type { MCPRequestOptions, MCPStdioServerConfig, MCPTransport } from "../../runtime-mcp/types";
-/**
- * Stdio transport for MCP servers.
- * Spawns a subprocess and communicates via stdin/stdout.
- */
 export declare class StdioTransport implements MCPTransport {
     #private;
     private config;

package/dist/types/sdk.d.ts

@@ -49,6 +49,13 @@ export interface CreateAgentSessionOptions {
     providerSessionId?: string;
     /** Custom tools to register (in addition to built-in tools). Accepts both CustomTool and ToolDefinition. */
     customTools?: (CustomTool | ToolDefinition)[];
+    /** Explicit parent/phase used to load active GJC sub-skill tools for this session. */
+    gjcSubskillToolContext?: {
+        parent: string;
+        phase: string;
+        sessionId?: string;
+        cwd?: string;
+    };
     /** Inline extensions (merged with discovery). */
     extensions?: ExtensionFactory[];
     /** Additional extension paths to load (merged with discovery). */

package/dist/types/session/agent-session.d.ts

@@ -57,11 +57,13 @@ import { type FileSlashCommand } from "../extensibility/slash-commands";
 import { GoalRuntime } from "../goals/runtime";
 import type { Goal, GoalModeState } from "../goals/state";
 import type { HindsightSessionState } from "../hindsight/state";
+import type { WorkflowGateEmitter } from "../modes/shared/agent-wire/unattended-session";
 import type { PlanModeState } from "../plan-mode/state";
 import { type AgentRegistry } from "../registry/agent-registry";
 import { type DiscoverableMCPSearchIndex, type DiscoverableMCPTool } from "../runtime-mcp/discoverable-tool-metadata";
 import { type SecretObfuscator } from "../secrets/obfuscator";
 import { type DiscoverableTool, type DiscoverableToolSearchIndex } from "../tool-discovery/tool-index";
+import type { ToolSession } from "../tools";
 import type { CheckpointState } from "../tools/checkpoint";
 import { type TodoItem, type TodoPhase } from "../tools/todo-write";
 import type { ClientBridge } from "./client-bridge";
@@ -166,6 +168,8 @@ export interface AgentSessionConfig {
     taskDepth?: number;
     /** Tool registry for LSP and settings */
     toolRegistry?: Map<string, AgentTool>;
+    /** Tool-session factory context used to lazily attach workflow-gate-only tools. */
+    workflowGateToolSession?: ToolSession;
     /** Current session pre-LLM message transform pipeline */
     transformContext?: (messages: AgentMessage[], signal?: AbortSignal) => AgentMessage[] | Promise<AgentMessage[]>;
     /** Provider payload hook used by the active session request path */
@@ -459,6 +463,10 @@ export declare class AgentSession {
      * Replace RPC host-owned tools and refresh the active tool set before the next model call.
      */
     refreshRpcHostTools(rpcTools: AgentTool[]): Promise<void>;
+    /**
+     * Refresh plugin sub-skill tools after workflow/sub-skill activation or phase changes.
+     */
+    refreshGjcSubskillTools(): Promise<void>;
     /** Whether auto-compaction is currently running */
     get isCompacting(): boolean;
     /**
@@ -496,6 +504,8 @@ export declare class AgentSession {
     setPlanModeState(state: PlanModeState | undefined): void;
     getGoalModeState(): GoalModeState | undefined;
     setGoalModeState(state: GoalModeState | undefined): void;
+    getWorkflowGateEmitter(): WorkflowGateEmitter | undefined;
+    setWorkflowGateEmitter(emitter: WorkflowGateEmitter | undefined): void;
     get goalRuntime(): GoalRuntime;
     markPlanReferenceSent(): void;
     setPlanReferencePath(path: string): void;

package/dist/types/session/blob-store.d.ts

@@ -26,9 +26,20 @@ export declare class BlobStore {
     putSync(data: Buffer): BlobPutResult;
     /** Read blob by hash, returns Buffer or null if not found. */
     get(hash: string): Promise<Buffer | null>;
+    /** Synchronously read blob by hash, returns Buffer or null if not found. */
+    getSync(hash: string): Buffer | null;
     /** Check if a blob exists. */
     has(hash: string): Promise<boolean>;
 }
+export declare class MemoryBlobStore extends BlobStore {
+    #private;
+    constructor();
+    put(data: Buffer): Promise<BlobPutResult>;
+    putSync(data: Buffer): BlobPutResult;
+    get(hash: string): Promise<Buffer | null>;
+    getSync(hash: string): Buffer | null;
+    has(hash: string): Promise<boolean>;
+}
 /** Check if a data string is a blob reference. */
 export declare function isBlobRef(data: string): boolean;
 /** Extract the SHA-256 hash from a blob reference string. */
@@ -61,3 +72,9 @@ export declare function resolveImageDataUrl(blobStore: BlobStore, data: string):
  * If the blob is missing, logs a warning and returns a placeholder.
  */
 export declare function resolveImageData(blobStore: BlobStore, data: string): Promise<string>;
+/** Synchronously resolve an externalized provider image data URL back to its original string. */
+export declare function resolveImageDataUrlSync(blobStore: BlobStore, data: string): string;
+/** Synchronously resolve a blob reference back to base64 data. */
+export declare function resolveImageDataSync(blobStore: BlobStore, data: string): string;
+/** Synchronously resolve a blob reference back to utf8 text. */
+export declare function resolveTextBlobSync(blobStore: BlobStore, data: string): string;

package/dist/types/session/messages.d.ts

@@ -8,6 +8,7 @@ import type { AgentMessage } from "@gajae-code/agent-core";
 import { type BranchSummaryMessage, type CompactionSummaryMessage } from "@gajae-code/agent-core/compaction/messages";
 import type { AssistantMessage, ImageContent, Message, MessageAttribution, TextContent } from "@gajae-code/ai";
 export { type BranchSummaryMessage, type CompactionSummaryMessage, createBranchSummaryMessage, createCompactionSummaryMessage, } from "@gajae-code/agent-core/compaction/messages";
+import type { LoadedSubskillActivation } from "../extensibility/gjc-plugins";
 import type { OutputMeta } from "../tools/output-meta";
 export declare const SKILL_PROMPT_MESSAGE_TYPE = "skill-prompt";
 export interface SkillPromptDetails {
@@ -15,6 +16,8 @@ export interface SkillPromptDetails {
     path: string;
     args?: string;
     lineCount: number;
+    subskillActivation?: LoadedSubskillActivation;
+    subskillActivationSet?: LoadedSubskillActivation[];
     /** Internal: tag used by AgentSession to remove the pending-display chip
      *  from `#steeringMessages` / `#followUpMessages` when the agent consumes
      *  this message. Not surfaced to renderers; the `__` prefix signals

package/dist/types/session/session-storage.d.ts

@@ -30,7 +30,9 @@ export interface SessionStorage {
     readTextPrefix(path: string, maxBytes: number): Promise<string>;
     writeText(path: string, content: string): Promise<void>;
     rename(path: string, nextPath: string): Promise<void>;
+    renameSync(path: string, nextPath: string): void;
     unlink(path: string): Promise<void>;
+    unlinkSync(path: string): void;
     deleteSessionWithArtifacts(sessionPath: string): Promise<void>;
     openWriter(path: string, options?: {
         flags?: "a" | "w";
@@ -49,7 +51,9 @@ export declare class FileSessionStorage implements SessionStorage {
     readTextPrefix(path: string, maxBytes: number): Promise<string>;
     writeText(path: string, content: string): Promise<void>;
     rename(path: string, nextPath: string): Promise<void>;
+    renameSync(path: string, nextPath: string): void;
     unlink(path: string): Promise<void>;
+    unlinkSync(path: string): void;
     openWriter(path: string, options?: {
         flags?: "a" | "w";
         onError?: (err: Error) => void;
@@ -73,7 +77,9 @@ export declare class MemorySessionStorage implements SessionStorage {
     readTextPrefix(path: string, maxBytes: number): Promise<string>;
     writeText(path: string, content: string): Promise<void>;
     rename(path: string, nextPath: string): Promise<void>;
+    renameSync(path: string, nextPath: string): void;
     unlink(path: string): Promise<void>;
+    unlinkSync(path: string): void;
     deleteSessionWithArtifacts(_sessionPath: string): Promise<void>;
     openWriter(path: string, options?: {
         flags?: "a" | "w";

package/dist/types/skill-state/active-state.d.ts

@@ -18,6 +18,16 @@ export interface WorkflowHudSummary {
     updated_at?: string;
 }
 export type { WorkflowStateReceipt } from "./workflow-state-contract";
+export interface ActiveSubskillEntry {
+    plugin: string;
+    subskillName: string;
+    parent: string;
+    bindsTo: string;
+    phase: string;
+    activationArg: string;
+    filePath: string;
+    toolPaths: string[];
+}
 export interface SkillActiveEntry {
     skill: string;
     phase?: string;
@@ -33,6 +43,7 @@ export interface SkillActiveEntry {
     handoff_from?: string;
     handoff_to?: string;
     handoff_at?: string;
+    active_subskills?: ActiveSubskillEntry[];
 }
 export interface SkillActiveState {
     version?: number;
@@ -49,6 +60,7 @@ export interface SkillActiveState {
     initialized_mode?: CanonicalGjcWorkflowSkill;
     initialized_state_path?: string;
     active_skills?: SkillActiveEntry[];
+    active_subskills?: ActiveSubskillEntry[];
     [key: string]: unknown;
 }
 export interface SkillActiveStatePaths {
@@ -70,6 +82,7 @@ export interface SyncSkillActiveStateOptions {
     handoff_from?: string;
     handoff_to?: string;
     handoff_at?: string;
+    active_subskills?: ActiveSubskillEntry[];
 }
 export declare function normalizeWorkflowHudSummary(raw: unknown): WorkflowHudSummary | undefined;
 export declare function isCanonicalGjcWorkflowSkill(skill: string): skill is CanonicalGjcWorkflowSkill;

package/dist/types/thinking.d.ts

@@ -1,5 +1,6 @@
-import { type ResolvedThinkingLevel, ThinkingLevel } from "@gajae-code/agent-core";
-import { type Effort, type Model } from "@gajae-code/ai";
+import { type ResolvedThinkingLevel, ThinkingLevel } from "@gajae-code/agent-core/thinking";
+import { type Effort } from "@gajae-code/ai/model-thinking";
+import type { Model } from "@gajae-code/ai/types";
 /**
  * Metadata used to render thinking selector values in the coding-agent UI.
  */

package/dist/types/tools/index.d.ts

@@ -5,6 +5,7 @@ import type { Settings } from "../config/settings";
 import type { Skill } from "../extensibility/skills";
 import type { GoalModeState, GoalRuntime } from "../goals";
 import type { HindsightSessionState } from "../hindsight/state";
+import type { WorkflowGateEmitter } from "../modes/shared/agent-wire/unattended-session";
 import type { PlanModeState } from "../plan-mode/state";
 import type { AgentRegistry } from "../registry/agent-registry";
 import type { ForkContextSeed, ForkContextSeedOptions } from "../session/agent-session";
@@ -150,6 +151,8 @@ export interface ToolSession {
     getPlanModeState?: () => PlanModeState | undefined;
     /** Goal mode state (if active or paused) */
     getGoalModeState?: () => GoalModeState | undefined;
+    /** Unattended workflow-gate emitter (present only when unattended mode is negotiated). */
+    getWorkflowGateEmitter?: () => WorkflowGateEmitter | undefined;
     /** Goal runtime for the active agent session. */
     getGoalRuntime?: () => GoalRuntime | undefined;
     /** Bridge to the connected client (e.g. ACP editor host). Tools should route fs/terminal/permission requests through this when available. */