@gajae-code/coding-agent 0.4.5 → 0.5.0

package/CHANGELOG.md

@@ -2,6 +2,48 @@
 
 ## [Unreleased]
 
+## [0.5.0] - 2026-06-13
+
+### Fixed
+
+- Fixed forced `tool_choice` 400s ("tool_choice forces tool use is not compatible with this model") looping after `ast_edit` previews: named queue directives (resolve protocol, eager `todo_write` enforcement, subagent `yield` reminders) now enqueue only when the model supports exact named forcing; otherwise they degrade silently to the existing steer reminder without a forced `tool_choice`, and a runtime-discovered incapability drops the in-flight directive instead of requeueing it.
+- `models.yml` compat blocks now accept the `toolChoiceSupport` enum (`none`/`auto`/`required`/`named`) alongside the legacy `supportsToolChoice`/`supportsForcedToolChoice` booleans, mirrored in the generated JSON schema.
+### Added
+
+- Made `/model` open to a preset-first landing view: provider-grouped presets with live auth checkmarks, highlight-to-expand tiers, a full clamped role→model preview before applying, and a session/default apply scope choice; typing still jumps straight to model search, "Browse all models" opens the classic tabbed selector, and temporary-only quick-switch bypasses the landing entirely.
+- Rebuilt the builtin model profile catalog as 25 profiles: `codex-{eco,medium,pro}` on `gpt-5.5` effort spreads, a single `opencodego` preset, `claude-opus`, `{glm,kimi-coding-plan,mimo,grok,cursor,minimax}-{eco,medium,pro}` trios with thinking levels clamped to provider support, and `opus-codex`/`codex-opencodego` combos. Legacy profile names (including the `*-standard` family and retired Fable presets) were removed clean-break and now fail with the available-profile listing.
+- Added a post-`/login` smart preset recommendation: when login succeeds and no profile is active, prompts "Apply <preset> now?" (session-only on confirm); when a profile is active, prints a one-line hint instead. The active profile is tracked in-memory on the session with rollback-safe activation.
+- Bundled `kimi-code/kimi-k2.7-code` and `minimax-code/minimax-v3` model entries; MiniMax presets use the canonical `minimax-code` provider id throughout.
+- Added a harness receipt JSONL spool exporter for gajae receipt-runtime interop: configured `gjc harness --receipt-spool-dir <dir>` / `GJC_RECEIPT_SPOOL_DIR` now appends persisted native `ReceiptEnvelope` records as `{cursor,envelope}` lines to `spool.jsonl`, with restart-safe 12-digit cursors and installed-package smoke coverage (#545).
+- Added Gajae Trinity compatibility golden fixtures and tests that pin ReceiptEnvelope hash basis, validator compatibility, and replayable RPC exchange shape for downstream receipt-runtime interop.
+- Optimization Suite v3 Lane 1 (RSS): large resident text in persisted sessions is now backed by an ephemeral session-scoped disk cache (`EphemeralBlobStore`) instead of being pinned in JS heap for the whole session lifetime; canonical JSONL persistence, reload, and export semantics are byte-identical (resident refs never persist). Missing resident text cache blobs now surface a typed `ResidentBlobMissingError` instead of silently leaking `blob:sha256:` refs into provider payloads, UI, or exports. `getEntries()`/`buildSessionContext()` are served from revision-keyed WeakRef caches below the public ownership boundary (callers still receive caller-owned copies). Fixture retained heap −82%, RSS −55%, warm `getEntries()` p95 −80% on 10k-entry sessions; one-shot `exportFromFile()` now closes its session manager.
+- Added process-isolated deterministic TUI render-golden capture and fixtures for interactive editor overlays, rich-text resizing, multiplexer viewport repaint, sixel image line preservation, Termux height diffs, and transcript shrink/clear regressions.
+
+### Removed
+
+- Removed the hardcoded OpenAI Codex role-preset action from the model selector; builtin model profiles are now the only preset concept.
+- Removed retired Fable model profiles (`claude-fable`, `fable-codex`) after `claude-fable-5` was removed upstream.
+
+### Changed
+
+- Optimization Suite v3 Lane 3 (serialization): session-switch message comparison now uses per-message cached source strings + xxHash64 as an accelerator (source-string compare remains the authority; collision fallback tested) — unchanged-session compares −95% median. The secret obfuscator precomputes a longest-first combined regex (single-pass replace, −70% median/−77% p95 on 100 secrets × 1MiB) with a conservative sequential fallback whenever secrets overlap each other or any replacement/placeholder contains a secret — output bytes are identical in all cases. Intra-line diff rendering gains byte-identical fast paths for identical lines and whitespace-token-aligned prefix/suffix spans (identical −67%, single-token −60%; long lines skip the scan). Mental-model LCS keeps legacy dense-DP tie-break semantics (a Hunt-Szymanski variant was rejected for changing rendered bytes). Provider-visible fork-context seeds use JSON-semantic cloning instead of structuredClone.
+- Tightened tool-block rendering to remove vertical padding and rely on Spacer-only separation, reducing transcript noise while preserving stable render-golden output.
+- Improved the Bun runtime version guard diagnostic: when the Bun running `gjc` is older than the required version, the error now names the exact detected Bun runtime path and prints a platform-specific upgrade and PATH fix (Windows gets the `irm bun.sh/install.ps1|iex` reinstall plus a `%USERPROFILE%\.bun\bin` PATH hint) instead of a bare `bun upgrade` (#525).
+- Aligned the `codex-standard` and `codex-pro` model profiles on the `openai-codex/gpt-5.5` baseline so they no longer default to stale mixed model generations (`gpt-5.4`, `gpt-5.2-codex`, `gpt-5.1-codex-max`, `gpt-5.3-codex-spark`); the profiles now differentiate purely by per-role reasoning effort (#532).
+- Reduced the default RPC `get_state` payload by omitting static `dumpTools` and `systemPrompt` fields unless requested via `include: ["tools", "systemPrompt"]` (#539).
+- Updated `/model` documentation and generated docs index for the rebuilt preset catalog and preset-first selector.
+
+### Fixed
+
+- Tightened the Windows/psmux tmux provider boundary: `gjc team` now honors `GJC_TMUX_COMMAND` (not just `GJC_TEAM_TMUX_COMMAND`) so the team leader resolves the same multiplexer as `gjc session`/`gjc --tmux`; and when a multiplexer lists a session that lacks GJC's `@gjc-profile` ownership tag, `gjc session status` now returns `gjc_tmux_session_untagged` with a `detail` hint and `gjc team` reports the same cause, instead of a bare `gjc_tmux_session_not_found` / `unmanaged_tmux_session`. Documented that alternative multiplexers such as psmux on Windows are not fully supported because they do not round-trip tmux user options (#531).
+- Hardened RPC stdio lifecycle behavior: `gjc --mode rpc` now reports malformed JSONL frames as parse-error responses without killing the session, flushes durable session state before exiting on EOF/shutdown, and has red-team coverage for attached persistence, reload, malformed-frame recovery, and concurrent child-session isolation.
+- Hardened the harness RPC submit/router contract so `submit` is no longer advertised or accepted during finalizing/non-idle lifecycle windows, non-idle RPC state reports `submitted:false` with a retryable gate, and degraded owner endpoints fall back to `owner-not-live` without false acceptance (#544).
+- Ran estimated context maintenance before sending a new prompt, including tool-output pruning and threshold compaction, so large tool results appended after the last assistant turn cannot push the next model request over the context window.
+- `gjc team` now self-heals a missing `@gjc-profile` ownership tag when the current leader pane was genuinely launched by `gjc --tmux` (detected via `GJC_TMUX_LAUNCHED=1`): the session is re-tagged with `set-option` and startup proceeds, instead of hard-failing with `unmanaged_tmux_session` after a mid-startup attach failure or registry race stripped the tag. Sessions without the GJC launch marker are still rejected unchanged, so foreign tmux sessions cannot be hijacked.
+- Subagent task receipts and live render output now warn when requested role-agent models are substituted by auth fallback or provider-reported assistant model mismatch, including session model-change annotations for server-side substitutions (#559).
+- Converted Cursor wire shell timeouts from millisecond values to bash-tool seconds so delegated Cursor-native shell calls honor the expected timeout units.
+- Fixed pi-shell bash fixups on multibyte UTF-8 commands by converting parser source indexes to byte offsets before stripping `head`/`tail` pipelines.
+
 ## [0.4.5] - 2026-06-12
 
 ### Added
@@ -17,6 +59,7 @@
 - Reduced compiled CLI startup and native bundle pressure with default-small grammar loading, tokenizer tiering, and compiled fast-help paths.
 - Preserved dev/main release metadata and changelog consistency for the 0.4.5 lockstep release.
 
+- Added native `gjc ultragoal steer --kind` support for documented steering mutations beyond `add_subgoal`, including split, reorder, wording revision, ledger annotation, and blocked-goal supersession contracts with structured audit expectations.
 ### Fixed
 
 - Kept the unified `goal` tool registered and active by default whenever `goal.enabled` is true, including explicit tool subsets and `gjc ultragoal create-goals` arming flows.

package/dist/types/commands/harness.d.ts

@@ -34,6 +34,9 @@ export default class Harness extends Command {
             description: string;
             default: boolean;
         };
+        "receipt-spool-dir": import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+        };
     };
     static examples: string[];
     run(): Promise<void>;

package/dist/types/config/model-profile-activation.d.ts

@@ -3,15 +3,22 @@ import type { Api, Model } from "@gajae-code/ai";
 import type { AgentSession } from "../session/agent-session";
 import { type ModelRegistry } from "./model-registry";
 import type { Settings } from "./settings";
+type ModelProfileActivationSession = Pick<AgentSession, "model" | "thinkingLevel" | "sessionId"> & {
+    setModelTemporary?: AgentSession["setModelTemporary"];
+    setActiveModelProfile?: (name: string | undefined) => void;
+    getActiveModelProfile?: () => string | undefined;
+};
 export interface PrepareModelProfileActivationOptions {
-    session: Pick<AgentSession, "model" | "thinkingLevel" | "sessionId">;
+    session: ModelProfileActivationSession;
     modelRegistry: Pick<ModelRegistry, "getModelProfile" | "getModelProfiles" | "getAvailableModelProfileNames" | "getApiKeyForProvider" | "getAll" | "resolveCanonicalModel" | "getCanonicalVariants" | "getCanonicalId">;
     settings: Pick<Settings, "get">;
     profileName: string;
 }
 export interface PreparedModelProfileActivation {
     profileName: string;
-    session: Pick<AgentSession, "model" | "thinkingLevel" | "sessionId" | "setModelTemporary">;
+    session: ModelProfileActivationSession & {
+        setModelTemporary: AgentSession["setModelTemporary"];
+    };
     settings: Pick<Settings, "get" | "override" | "set" | "flush">;
     previousModel: Model<Api> | undefined;
     previousThinkingLevel: ThinkingLevel | undefined;
@@ -19,6 +26,7 @@ export interface PreparedModelProfileActivation {
     defaultModel: Model<Api> | undefined;
     defaultThinkingLevel: ThinkingLevel | undefined;
     agentModelOverrides: Record<string, string>;
+    previousActiveModelProfile: string | undefined;
 }
 export declare function formatModelProfileCredentialError(profileName: string, providers: readonly string[]): string;
 export declare function prepareModelProfileActivation(options: PrepareModelProfileActivationOptions): Promise<PreparedModelProfileActivation>;
@@ -28,3 +36,4 @@ export declare function applyPreparedModelProfileActivation(prepared: PreparedMo
 export declare function activateModelProfile(options: PrepareModelProfileActivationOptions, applyOptions?: {
     persistDefault?: boolean;
 }): Promise<void>;
+export {};

package/dist/types/config/model-profiles.d.ts

@@ -14,6 +14,13 @@ export interface ResolvedProfileBinding {
 export declare function deriveModelProfileMappedProviders(definition: Pick<ModelProfileDefinition, "modelMapping">): string[];
 export declare function aggregateModelProfileRequiredProviders(requiredProviders: readonly string[], definition: Pick<ModelProfileDefinition, "modelMapping">): string[];
 export declare const BUILTIN_MODEL_PROFILES: readonly ModelProfileDefinition[];
+export interface ModelProfilePresentation {
+    displayName: string;
+    providerGroup: string;
+}
+export declare function getModelProfilePresentation(name: string): ModelProfilePresentation;
+export declare function groupModelProfilesForPresetLanding(profiles: ReadonlyMap<string, ModelProfileDefinition>): Map<string, ModelProfileDefinition[]>;
+export declare function recommendModelProfileForProvider(providerId: string, profiles: ReadonlyMap<string, ModelProfileDefinition>): ModelProfileDefinition | undefined;
 export declare function mergeModelProfiles(userProfiles?: ModelsConfig["profiles"]): Map<string, ModelProfileDefinition>;
 export declare function resolveProfileBindings(definition: ModelProfileDefinition): ResolvedProfileBinding;
 export declare function formatAvailableProfileNames(profiles: ReadonlyMap<string, ModelProfileDefinition>): string;

package/dist/types/config/model-registry.d.ts

@@ -71,6 +71,7 @@ export declare const ModelsConfigFile: ConfigFile<{
             requiresAssistantContentForToolCalls?: boolean | undefined;
             supportsToolChoice?: boolean | undefined;
             supportsForcedToolChoice?: boolean | undefined;
+            toolChoiceSupport?: "auto" | "named" | "none" | "required" | undefined;
             disableReasoningOnForcedToolChoice?: boolean | undefined;
             disableReasoningOnToolChoice?: boolean | undefined;
             thinkingFormat?: "openai" | "openrouter" | "qwen" | "qwen-chat-template" | "zai" | undefined;
@@ -147,6 +148,7 @@ export declare const ModelsConfigFile: ConfigFile<{
                 requiresAssistantContentForToolCalls?: boolean | undefined;
                 supportsToolChoice?: boolean | undefined;
                 supportsForcedToolChoice?: boolean | undefined;
+                toolChoiceSupport?: "auto" | "named" | "none" | "required" | undefined;
                 disableReasoningOnForcedToolChoice?: boolean | undefined;
                 disableReasoningOnToolChoice?: boolean | undefined;
                 thinkingFormat?: "openai" | "openrouter" | "qwen" | "qwen-chat-template" | "zai" | undefined;
@@ -219,6 +221,7 @@ export declare const ModelsConfigFile: ConfigFile<{
                 requiresAssistantContentForToolCalls?: boolean | undefined;
                 supportsToolChoice?: boolean | undefined;
                 supportsForcedToolChoice?: boolean | undefined;
+                toolChoiceSupport?: "auto" | "named" | "none" | "required" | undefined;
                 disableReasoningOnForcedToolChoice?: boolean | undefined;
                 disableReasoningOnToolChoice?: boolean | undefined;
                 thinkingFormat?: "openai" | "openrouter" | "qwen" | "qwen-chat-template" | "zai" | undefined;

package/dist/types/config/model-resolver.d.ts

@@ -133,6 +133,8 @@ export declare function resolveModelOverrideWithAuthFallback(modelPatterns: stri
     thinkingLevel?: ThinkingLevel;
     explicitThinkingLevel: boolean;
     authFallbackUsed: boolean;
+    requestedModel?: Model<Api>;
+    fallbackReason?: "auth_unavailable";
 }>;
 /**
  * Resolve a list of role patterns to the first matching model.

package/dist/types/config/models-config-schema.d.ts

@@ -31,6 +31,12 @@ export declare const OpenAICompatSchema: z.ZodObject<{
     requiresAssistantContentForToolCalls: z.ZodOptional<z.ZodBoolean>;
     supportsToolChoice: z.ZodOptional<z.ZodBoolean>;
     supportsForcedToolChoice: z.ZodOptional<z.ZodBoolean>;
+    toolChoiceSupport: z.ZodOptional<z.ZodEnum<{
+        auto: "auto";
+        named: "named";
+        none: "none";
+        required: "required";
+    }>>;
     disableReasoningOnForcedToolChoice: z.ZodOptional<z.ZodBoolean>;
     disableReasoningOnToolChoice: z.ZodOptional<z.ZodBoolean>;
     thinkingFormat: z.ZodOptional<z.ZodEnum<{
@@ -184,6 +190,12 @@ export declare const ModelOverrideSchema: z.ZodObject<{
         requiresAssistantContentForToolCalls: z.ZodOptional<z.ZodBoolean>;
         supportsToolChoice: z.ZodOptional<z.ZodBoolean>;
         supportsForcedToolChoice: z.ZodOptional<z.ZodBoolean>;
+        toolChoiceSupport: z.ZodOptional<z.ZodEnum<{
+            auto: "auto";
+            named: "named";
+            none: "none";
+            required: "required";
+        }>>;
         disableReasoningOnForcedToolChoice: z.ZodOptional<z.ZodBoolean>;
         disableReasoningOnToolChoice: z.ZodOptional<z.ZodBoolean>;
         thinkingFormat: z.ZodOptional<z.ZodEnum<{
@@ -291,6 +303,12 @@ export declare const ModelsConfigSchema: z.ZodObject<{
             requiresAssistantContentForToolCalls: z.ZodOptional<z.ZodBoolean>;
             supportsToolChoice: z.ZodOptional<z.ZodBoolean>;
             supportsForcedToolChoice: z.ZodOptional<z.ZodBoolean>;
+            toolChoiceSupport: z.ZodOptional<z.ZodEnum<{
+                auto: "auto";
+                named: "named";
+                none: "none";
+                required: "required";
+            }>>;
             disableReasoningOnForcedToolChoice: z.ZodOptional<z.ZodBoolean>;
             disableReasoningOnToolChoice: z.ZodOptional<z.ZodBoolean>;
             thinkingFormat: z.ZodOptional<z.ZodEnum<{
@@ -446,6 +464,12 @@ export declare const ModelsConfigSchema: z.ZodObject<{
                 requiresAssistantContentForToolCalls: z.ZodOptional<z.ZodBoolean>;
                 supportsToolChoice: z.ZodOptional<z.ZodBoolean>;
                 supportsForcedToolChoice: z.ZodOptional<z.ZodBoolean>;
+                toolChoiceSupport: z.ZodOptional<z.ZodEnum<{
+                    auto: "auto";
+                    named: "named";
+                    none: "none";
+                    required: "required";
+                }>>;
                 disableReasoningOnForcedToolChoice: z.ZodOptional<z.ZodBoolean>;
                 disableReasoningOnToolChoice: z.ZodOptional<z.ZodBoolean>;
                 thinkingFormat: z.ZodOptional<z.ZodEnum<{
@@ -580,6 +604,12 @@ export declare const ModelsConfigSchema: z.ZodObject<{
                 requiresAssistantContentForToolCalls: z.ZodOptional<z.ZodBoolean>;
                 supportsToolChoice: z.ZodOptional<z.ZodBoolean>;
                 supportsForcedToolChoice: z.ZodOptional<z.ZodBoolean>;
+                toolChoiceSupport: z.ZodOptional<z.ZodEnum<{
+                    auto: "auto";
+                    named: "named";
+                    none: "none";
+                    required: "required";
+                }>>;
                 disableReasoningOnForcedToolChoice: z.ZodOptional<z.ZodBoolean>;
                 disableReasoningOnToolChoice: z.ZodOptional<z.ZodBoolean>;
                 thinkingFormat: z.ZodOptional<z.ZodEnum<{

package/dist/types/config/settings-schema.d.ts

@@ -1,3 +1,4 @@
+import type { Effort } from "@gajae-code/ai/model-thinking";
 import { type SkillDiscoverySettings } from "./skill-settings-defaults";
 /** Unified settings schema - single source of truth for all settings.
  *
@@ -697,13 +698,13 @@ export declare const SETTINGS_SCHEMA: {
     };
     readonly defaultThinkingLevel: {
         readonly type: "enum";
-        readonly values: readonly import("@gajae-code/ai").Effort[];
-        readonly default: "high";
+        readonly values: readonly Effort[];
+        readonly default: Effort;
         readonly ui: {
             readonly tab: "model";
             readonly label: "Thinking Level";
             readonly description: "Reasoning depth for thinking-capable models";
-            readonly options: readonly import("../thinking").ThinkingLevelMetadata[];
+            readonly options: readonly import("../thinking-metadata").ThinkingLevelMetadata[];
         };
     };
     readonly hideThinkingBlock: {

package/dist/types/gjc-runtime/team-runtime.d.ts

@@ -275,7 +275,6 @@ export declare function resolveGjcTeamStateRoot(cwd?: string, env?: NodeJS.Proce
 export declare function persistGjcTeamModeStateSummary(snapshot: GjcTeamSnapshot, cwd?: string): Promise<void>;
 export declare function recoverGjcTeamStaleClaims(teamName: string, cwd?: string, env?: NodeJS.ProcessEnv): Promise<GjcTeamLivenessRecoveryResult>;
 type GjcTeamTaskMetadataInput = Partial<Pick<GjcTeamTask, "owner" | "lane" | "required_role" | "allowed_roles" | "depends_on" | "blocked_by">>;
-export declare function resolveGjcTmuxCommand(env?: NodeJS.ProcessEnv): string;
 export declare function resolveGjcWorkerCommand(cwd?: string, env?: NodeJS.ProcessEnv): string;
 export type GjcWorkerCheckpointClassification = {
     kind: "clean";

package/dist/types/gjc-runtime/tmux-common.d.ts

@@ -21,6 +21,9 @@ export interface TmuxCommandResult {
 export type TmuxCommandRunner = (args: string[]) => TmuxCommandResult;
 export declare function envDisabled(value: string | undefined): boolean;
 export declare function resolveGjcTmuxCommand(env?: NodeJS.ProcessEnv): string;
+export declare const GJC_TMUX_UNTAGGED_REASON = "gjc_tmux_session_untagged";
+export declare function buildGjcTmuxUntaggedSessionHint(tmuxCommand: string): string;
+export declare function buildGjcTmuxUntaggedSessionError(sessionName: string, tmuxCommand: string): string;
 export declare function sanitizeTmuxToken(value: string): string;
 export declare function buildGjcTmuxSessionSlug(value: string): string;
 export declare function buildGjcTmuxSessionName(env?: NodeJS.ProcessEnv, context?: {

package/dist/types/harness-control-plane/owner.d.ts

@@ -11,7 +11,7 @@
  * Stateless `gjc harness` CLI calls reach the owner via {@link resolveOwner} + the endpoint.
  */
 import { type FinalizeChecks, type ValidationCommandSpec } from "./finalize";
-import type { HarnessRpc } from "./rpc-adapter";
+import { type HarnessRpc } from "./rpc-adapter";
 import { type SessionLease } from "./session-lease";
 export interface OwnerOptions {
     root: string;

package/dist/types/harness-control-plane/receipt-spool.d.ts

@@ -0,0 +1,19 @@
+import type { ReceiptEnvelope } from "./receipts";
+export declare const RECEIPT_SPOOL_DIR_ENV = "GJC_RECEIPT_SPOOL_DIR";
+export declare const RECEIPT_SPOOL_FILENAME = "spool.jsonl";
+export declare const RECEIPT_SPOOL_CURSOR_WIDTH = 12;
+export interface ReceiptSpoolRecord {
+    cursor: string;
+    envelope: ReceiptEnvelope<unknown>;
+}
+export interface ReceiptSpoolAppendResult {
+    cursor: string;
+    path: string;
+}
+export declare function withReceiptSpoolDir<T>(spoolDir: string, fn: () => Promise<T>): Promise<T>;
+export declare function resolveReceiptSpoolDir(env?: NodeJS.ProcessEnv): string | undefined;
+export declare function receiptSpoolPath(spoolDir: string): string;
+export declare function formatReceiptSpoolCursor(cursor: bigint): string;
+export declare function readHighestReceiptSpoolCursor(spoolDir: string): Promise<bigint>;
+export declare function appendReceiptToSpool(spoolDir: string, envelope: ReceiptEnvelope<unknown>): Promise<ReceiptSpoolAppendResult>;
+export declare function appendReceiptToConfiguredSpool(envelope: ReceiptEnvelope<unknown>, env?: NodeJS.ProcessEnv): Promise<ReceiptSpoolAppendResult | undefined>;

package/dist/types/harness-control-plane/state-machine.d.ts

@@ -9,11 +9,16 @@ import type { HarnessLifecycle, NextAllowedAction, PrimitiveResponse, SessionSta
 export declare function isTerminal(lifecycle: HarnessLifecycle): boolean;
 export declare function canTransition(from: HarnessLifecycle, to: HarnessLifecycle): boolean;
 export declare function assertTransition(from: HarnessLifecycle, to: HarnessLifecycle): void;
+export interface NextAllowedActionsOptions {
+    /** Additional live-owner/RPC readiness gate for submit, e.g. rpc-not-idle. */
+    submitUnavailableReason?: string | null;
+}
+export declare function submitUnavailableReason(lifecycle: HarnessLifecycle, ownerLive: boolean, gateReason?: string | null): string | null;
 /**
  * Derive the permitted next actions for a session given its lifecycle and whether
  * a live owner currently holds the lease.
  */
-export declare function nextAllowedActions(lifecycle: HarnessLifecycle, ownerLive: boolean): NextAllowedAction[];
+export declare function nextAllowedActions(lifecycle: HarnessLifecycle, ownerLive: boolean, options?: NextAllowedActionsOptions): NextAllowedAction[];
 export declare function buildStateView(state: SessionState, ownerLive: boolean): SessionStateView;
 /** Build the universal contract response carried by every primitive. */
 export declare function buildResponse<E extends Record<string, unknown>>(state: SessionState, ownerLive: boolean, evidence: E, ok?: boolean): PrimitiveResponse<E>;

package/dist/types/harness-control-plane/types.d.ts

@@ -138,6 +138,10 @@ export interface Observation {
     rpcLive?: boolean;
     /** ISO timestamp of the most recent RPC frame the owner observed, if any. */
     rpcLastFrameAt?: string | null;
+    /** True only when owner/rpc/lifecycle gates indicate a prompt can be submitted now. */
+    readyForSubmit?: boolean;
+    /** Present when readyForSubmit is false; mirrors submit's nextAllowedActions reason. */
+    submitUnavailableReason?: string | null;
 }
 /** Input to the deterministic recovery classifier. */
 export interface ClassifyInput {

package/dist/types/hindsight/mental-models.d.ts

@@ -108,12 +108,12 @@ export declare function summarizeMentalModel(model: MentalModelSummary): string;
  * snapshot only; the diff is computed locally for display purposes.
  *
  * This is intentionally minimal — for "what changed" at a glance, not for a
- * full structural diff. Each side is capped at `MAX_LCS_LINES` lines BEFORE
- * the O(n*m) LCS table is built so a long curated model can never hang the
- * TUI; output is then capped at `maxLines` so the rendered diff stays
- * readable. The cap is signalled inline.
+ * full structural diff. Each side is capped at `MAX_LCS_LINES` lines before
+ * the Hunt-Szymanski LCS pass so a long curated model can never hang the TUI;
+ * output is then capped at `maxLines` so the rendered diff stays readable. The
+ * cap is signalled inline.
  */
-/** Hard cap on input line count per side before LCS. Keeps the O(n*m) table tractable. */
+/** Hard cap on input line count per side before LCS. Keeps worst-case repeated-line matching bounded. */
 export declare const MAX_LCS_LINES = 1000;
 export declare function diffMentalModelContent(previous: string | null, current: string, maxLines?: number): string;
 /** Awaited only by the first-turn race in `beforeAgentStartPrompt`. */

package/dist/types/modes/components/model-selector.d.ts

@@ -5,24 +5,12 @@ import type { GjcModelAssignmentTargetId, ModelRegistry } from "../../config/mod
 import { type ScopedModelSelection } from "../../config/model-resolver";
 import type { Settings } from "../../config/settings";
 type ScopedModelItem = ScopedModelSelection;
-export interface ModelAssignmentPreset {
-    id: "openai-codex";
-    label: string;
-    description: string;
-    assignments: Partial<Record<GjcModelAssignmentTargetId, ThinkingLevel>>;
-}
 export type ModelSelectorSelection = {
     kind: "assignment";
     model: Model;
     role: GjcModelAssignmentTargetId | null;
     thinkingLevel?: ThinkingLevel;
     selector?: string;
-} | {
-    kind: "preset";
-    model: Model;
-    selector: string;
-    preset: ModelAssignmentPreset;
-    assignments: Record<GjcModelAssignmentTargetId, ThinkingLevel>;
 } | {
     kind: "profile";
     profileName: string;
@@ -41,6 +29,7 @@ export declare class ModelSelectorComponent extends Container {
     constructor(tui: TUI, _currentModel: Model | undefined, settings: Settings, modelRegistry: ModelRegistry, scopedModels: ReadonlyArray<ScopedModelItem>, onSelect: RoleSelectCallback, onCancel: () => void, options?: {
         temporaryOnly?: boolean;
         initialSearchInput?: string;
+        sessionId?: string;
     });
     handleInput(keyData: string): void;
     getSearchInput(): Input;

package/dist/types/modes/rpc/rpc-client.d.ts

@@ -8,7 +8,7 @@ import type { CompactionResult } from "@gajae-code/agent-core/compaction";
 import type { ImageContent, Model } from "@gajae-code/ai";
 import type { BashResult } from "../../exec/bash-executor";
 import type { SessionStats } from "../../session/agent-session";
-import type { RpcExtensionUIRequest, RpcHandoffResult, RpcHostToolDefinition, RpcSessionState, RpcUnattendedAccepted, RpcUnattendedDeclaration, RpcWorkflowGate, RpcWorkflowGateResolution } from "./rpc-types";
+import type { RpcExtensionUIRequest, RpcGetStateInclude, RpcHandoffResult, RpcHostToolDefinition, RpcSessionState, RpcUnattendedAccepted, RpcUnattendedDeclaration, RpcWorkflowGate, RpcWorkflowGateResolution } from "./rpc-types";
 export interface RpcClientOptions {
     /** Path to the CLI entry point (default: searches for dist/cli.js) */
     cliPath?: string;
@@ -115,7 +115,7 @@ export declare class RpcClient {
     /**
      * Get current session state.
      */
-    getState(): Promise<RpcSessionState>;
+    getState(include?: RpcGetStateInclude[]): Promise<RpcSessionState>;
     /**
      * Set model by provider and ID.
      */

package/dist/types/modes/rpc/rpc-types.d.ts

@@ -11,6 +11,7 @@ import type { BashResult } from "../../exec/bash-executor";
 import type { ContextUsage } from "../../extensibility/extensions/types";
 import type { SessionStats } from "../../session/agent-session";
 import type { TodoPhase } from "../../tools/todo-write";
+export type RpcGetStateInclude = "tools" | "dumpTools" | "systemPrompt";
 export type RpcCommand = {
     id?: string;
     type: "prompt";
@@ -42,6 +43,7 @@ export type RpcCommand = {
 } | {
     id?: string;
     type: "get_state";
+    include?: RpcGetStateInclude[];
 } | {
     id?: string;
     type: "set_todos";
@@ -168,8 +170,9 @@ export interface RpcSessionState {
     messageCount: number;
     queuedMessageCount: number;
     todoPhases: TodoPhase[];
-    /** For session dump / export (plain-text parity with /dump). */
+    /** Optional static system prompt blocks. Omitted by default; request with get_state include ["systemPrompt"]. */
     systemPrompt?: string[];
+    /** Optional static tool schemas. Omitted by default; request with get_state include ["tools"]. */
     dumpTools?: Array<{
         name: string;
         description: string;

package/dist/types/sdk.d.ts

@@ -40,6 +40,11 @@ export interface CreateAgentSessionOptions {
     modelPattern?: string;
     /** Thinking selector. Default: from settings, else unset */
     thinkingLevel?: ThinkingLevel;
+    /** Runtime substitution metadata for the initial model_change session event. */
+    modelSubstitution?: {
+        requestedModel: Model;
+        reason: string;
+    };
     /** Models available for cycling (Ctrl+P in interactive mode) */
     scopedModels?: ScopedModelSelection[];
     /** System prompt blocks. Array replaces default, function receives default blocks and returns final blocks. */

package/dist/types/session/agent-session.d.ts

@@ -678,6 +678,8 @@ export declare class AgentSession {
         selector?: string;
         thinkingLevel?: ThinkingLevel;
     }): Promise<void>;
+    setActiveModelProfile(name: string | undefined): void;
+    getActiveModelProfile(): string | undefined;
     /**
      * Set model temporarily (for this session only).
      * Validates API key, saves to session log but NOT to settings.

package/dist/types/session/blob-store.d.ts

@@ -31,6 +31,14 @@ export declare class BlobStore {
     /** Check if a blob exists. */
     has(hash: string): Promise<boolean>;
 }
+export declare class EphemeralBlobStore extends BlobStore {
+    #private;
+    constructor(dir: string);
+    putSync(data: Buffer): BlobPutResult;
+    getSync(hash: string): Buffer | null;
+    clear(): void;
+    dispose(): void;
+}
 export declare class MemoryBlobStore extends BlobStore {
     #private;
     constructor();
@@ -40,6 +48,13 @@ export declare class MemoryBlobStore extends BlobStore {
     getSync(hash: string): Buffer | null;
     has(hash: string): Promise<boolean>;
 }
+export declare class ResidentBlobMissingError extends Error {
+    readonly hash: string;
+    readonly kind: "text" | "imageUrl" | "imageData";
+    readonly sessionId?: string | undefined;
+    readonly sessionFile?: string | undefined;
+    constructor(hash: string, kind: "text" | "imageUrl" | "imageData", sessionId?: string | undefined, sessionFile?: string | undefined);
+}
 /** Check if a data string is a blob reference. */
 export declare function isBlobRef(data: string): boolean;
 /** Extract the SHA-256 hash from a blob reference string. */
@@ -77,4 +92,8 @@ export declare function resolveImageDataUrlSync(blobStore: BlobStore, data: stri
 /** Synchronously resolve a blob reference back to base64 data. */
 export declare function resolveImageDataSync(blobStore: BlobStore, data: string): string;
 /** Synchronously resolve a blob reference back to utf8 text. */
-export declare function resolveTextBlobSync(blobStore: BlobStore, data: string): string;
+export declare function resolveTextBlobSync(blobStore: BlobStore, data: string, context?: {
+    kind?: "text";
+    sessionId?: string;
+    sessionFile?: string;
+}): string;

package/dist/types/session/session-manager.d.ts

@@ -40,6 +40,12 @@ export interface ModelChangeEntry extends SessionEntryBase {
     model: string;
     /** Role: "default" or an agent role. Undefined treated as "default" */
     role?: string;
+    /** Requested model before a runtime substitution/fallback, in "provider/modelId" format. */
+    previousModel?: string;
+    /** Machine-readable reason for runtime model substitution/fallback. */
+    reason?: string;
+    /** Effective thinking level when the change was recorded. */
+    thinkingLevel?: string | null;
 }
 export interface ServiceTierChangeEntry extends SessionEntryBase {
     type: "service_tier_change";
@@ -262,6 +268,7 @@ interface SessionManagerStateSnapshot {
     flushed: boolean;
     needsFullRewriteOnNextPersist: boolean;
     fileEntries: FileEntry[];
+    materializedFileEntries: FileEntry[];
 }
 export declare class SessionManager {
     #private;
@@ -270,6 +277,18 @@ export declare class SessionManager {
     private readonly persist;
     private readonly storage;
     private constructor();
+    /**
+     * Snapshot of the five cache-invalidation revision domains (plan: Lane 1
+     * revision contract). Tests assert the invalidation mapping through this;
+     * future export/label-view caches key off their respective domains.
+     */
+    revisionSnapshot(): {
+        entry: number;
+        leaf: number;
+        headerExport: number;
+        label: number;
+        replayMetadata: number;
+    };
     /** Puts a binary blob into the blob store and returns the blob reference */
     putBlob(data: Buffer): Promise<BlobPutResult>;
     captureState(): SessionManagerStateSnapshot;
@@ -388,7 +407,11 @@ export declare class SessionManager {
      * @param model Model in "provider/modelId" format
      * @param role Optional role (default: "default")
      */
-    appendModelChange(model: string, role?: string): string;
+    appendModelChange(model: string, role?: string, metadata?: {
+        previousModel?: string;
+        reason?: string;
+        thinkingLevel?: string | null;
+    }): string;
     /** Append session init metadata (for subagent debugging/replay). Returns entry id. */
     appendSessionInit(init: {
         systemPrompt: string;
@@ -480,11 +503,6 @@ export declare class SessionManager {
      * Get session header.
      */
     getHeader(): SessionHeader | null;
-    /**
-     * Get all session entries (excludes header). Returns a shallow copy.
-     * The session is append-only: use appendXXX() to add entries, branch() to
-     * change the leaf pointer. Entries cannot be modified or deleted.
-     */
     getEntries(): SessionEntry[];
     /**
      * Get the session as a tree structure. Returns a shallow defensive copy of all entries.

package/dist/types/session/streaming-output.d.ts

@@ -159,8 +159,9 @@ export declare class OutputSink {
     #private;
     constructor(options?: OutputSinkOptions);
     /**
-     * Push a chunk of output. The buffer management and onChunk callback run
-     * synchronously. File sink writes are deferred and serialized internally.
+     * Push a chunk of output. Raw bytes are mirrored to artifacts, while the
+     * visible retention windows are selected from the sanitized/column-capped
+     * stream so production-default display matches the historical processed view.
      */
     push(chunk: string): void;
     createInput(): WritableStream<Uint8Array | string>;

package/dist/types/session/tool-choice-queue.d.ts

@@ -63,6 +63,12 @@ export declare class ToolChoiceQueue {
      * lost value at the head of the queue; anything else drops it.
      */
     reject(reason: RejectInfo["reason"]): void;
+    /**
+     * Drop an in-flight yield after runtime tool_choice degradation. This bypasses
+     * onRejected so forced directives cannot requeue themselves after the model
+     * proved incapable of honoring the forced choice.
+     */
+    degradeInFlight(reason?: string): string | undefined;
     /** True if there is an in-flight yield that hasn't been resolved or rejected. */
     get hasInFlight(): boolean;
     /** Peek the in-flight directive's onInvoked handler, if any. */

package/dist/types/task/receipt.d.ts

@@ -28,6 +28,7 @@ export interface TaskResultReceipt {
     contextTokens?: number;
     contextWindow?: number;
     modelOverride?: string | string[];
+    modelSubstitutionWarning?: SingleResult["modelSubstitutionWarning"];
     usage?: SingleResult["usage"];
     cost?: number;
     branchName?: string;

package/dist/types/task/types.d.ts

@@ -280,6 +280,11 @@ export interface AgentDefinition {
     source: AgentSource;
     filePath?: string;
 }
+export interface ModelSubstitutionWarning {
+    requested: string;
+    effective: string;
+    reason: "auth_unavailable" | "assistant_model_mismatch";
+}
 /** Progress tracking for a single agent */
 export interface AgentProgress {
     index: number;
@@ -316,6 +321,7 @@ export interface AgentProgress {
     cost: number;
     durationMs: number;
     modelOverride?: string | string[];
+    modelSubstitutionWarning?: ModelSubstitutionWarning;
     /** Data extracted by registered subprocess tool handlers (keyed by tool name) */
     extractedToolData?: Record<string, unknown[]>;
     /**
@@ -374,6 +380,7 @@ export interface SingleResult {
     /** Model's context window in tokens, when known. */
     contextWindow?: number;
     modelOverride?: string | string[];
+    modelSubstitutionWarning?: ModelSubstitutionWarning;
     error?: string;
     aborted?: boolean;
     abortReason?: string;