@gajae-code/coding-agent 0.7.2 → 0.7.3

package/CHANGELOG.md

@@ -2,6 +2,43 @@
 
 ## [Unreleased]
 
+## [0.7.3] - 2026-06-25
+
+### Added
+
+- Added the `gruvbox-dark` built-in theme: the canonical Gruvbox dark palette mapped across every GJC theme token, selectable via `/theme`.
+- Added a standalone MCP registration command: `gjc mcp add|list|remove` writes explicit user-provided MCP server definitions (stdio/http/sse) into GJC config without importing or inheriting other tools' live MCP configs, with env/header/auth values redacted in output (#1095).
+
+### Changed
+
+- Refined the interactive composer chrome so the input box, status rail, and welcome banner share one visual language: the composer now uses a rounded border (matching the rounded welcome banner) instead of a sharp rectangle, and the status rail uses the subtle elevated `userMessageBg` surface tone instead of the heavy `statusLineBg` block, so it reads as a quiet layered zone rather than a solid bar. Both resolve through existing semantic theme slots, so every bundled theme tracks automatically.
+- When a Composer harness model is active, the `bash` tool now hard-blocks repository file I/O — pipes, process/heredoc/command substitution, redirection, `tee`, file read/discovery (`cat`/`head`/`tail`/`grep`/`find`/`ls`), file mutation (`cp`/`mv`/`rm`/`touch`/`mkdir`/`chmod`/`ln`), `sed`/`awk`, git file-read subcommands, and script file I/O — unless the command is on a strict allowlist (`bun test`/`run check|test|build`, `cargo test|check|build`, `git status`/`rev-parse`, package version queries), forcing Composer models to use the dedicated find/search/read/edit tools for file discovery and mutation (#1027).
+### Documentation
+
+- Documented the docs-only Aside evaluation boundary as an opt-in search/context retrieval sidecar using explicit user-provided MCP configuration, with browser actions, login flows, payments, internal tools, secrets, and raw browser/session payload logging out of scope by default (#1097).
+- Added a UI design and visual QA contract governing future TUI/dashboard/terminal visual work (#1101).
+- Added a CodeGraph custom-tool integration guide (#1073).
+- Documented the Windows psmux namespace boundary for `gjc --tmux`, `gjc session`, and `gjc team`: cwd/`-c` is now called out as a start directory rather than server isolation, `-L <namespace>` is identified as the psmux namespace primitive, and tmux command overrides are documented as executable names rather than shell command lines (#1118).
+- Clarified the Telegram Threaded Mode fallback documentation (#1122).
+
+### Fixed
+
+- Expanded the initial GJC forge welcome box to the live terminal viewport width and pinned the status/composer area to the bottom when the startup layout is shorter than the screen (#1120).
+
+- Deep Interview Restate/option gates now recover through the ask selector path instead of waiting on plaintext `Options:` output.
+- Widened the forge splash on wide terminals so it no longer clips (#1110).
+- Parse quoted SSH remote host names in the slash-command host parser (#1104).
+- Tolerate an unreadable git HEAD in the status chrome instead of throwing (#1072).
+- Registered the `plugin` command in the CLI command registry so `gjc plugin …` (install/uninstall/list/marketplace/enable/disable/doctor) resolves instead of silently falling through to the default launch/chat command — the command was implemented and tested but was never registered (#1071).
+- Keybinding/Ctrl+Enter newline-handling sweep across the editor and input controller (#1111).
+- Fixed model-profile default badge precedence in the `/model` selector so the correct default-profile badge wins (#1117).
+- Prevented duplicate Telegram topics being created for transient sessions (#1125).
+
+### Security
+
+- User-supplied URL reads now share the public HTTP(S) network guard that was previously insane-fallback-only: the initial target, the redirect chain, and binary-conversion redirects are all revalidated against private-network blocking before any request is opened or followed, closing an SSRF path through the normal read-tool fetch pipeline (#1114).
+- Bridge workflow-gate responses now require the claimed controller token before the unattended control plane may resolve a gate, and the `workflow_gate_response` RPC command was raised from prompt scope to control scope, so prompt-only clients can no longer answer lifecycle workflow gates (#1116).
+
 ## [0.7.2] - 2026-06-24
 ### Added
 
@@ -19,6 +56,7 @@
 - Preserve GJC-managed tmux sessions on attach/disconnect instead of tearing them down, and stop implicitly attaching on launch (#1063).
 - Corrected the auto-compaction output reserve so post-compaction responses keep adequate headroom (#1021).
 - Improved active-input shortcut hints and the busy-input queueing hint for clearer in-session guidance (#1022, #1024).
+- Fixed the Ultragoal ask guard blocking the `ask` tool when no GJC session can be resolved. `ultragoalReadPaths` falls back to the legacy/global `.gjc/ultragoal` directory when neither `GJC_SESSION_ID` nor an auto-detectable active session is present, but the follow-up `readUltragoalPlan`/`readUltragoalLedger` reads ignored that resolution and re-ran session detection, throwing `no active GJC session found` and surfacing `durable_state_unreadable` — which blocked `ask` for every agent even with no active Ultragoal run. `ultragoalReadPaths` now returns the resolved session id (or `null`); the ask guard treats a null session as inactive and falls open, and threads the resolved id into the plan/ledger reads so they no longer re-resolve. An inconsistent state (state dir present but `goals.json` missing/empty) still fails closed so the pause guard keeps blocking give-ups.
 
 ## [0.7.1] - 2026-06-23
 ### Fixed

package/dist/types/cli/mcp-cli.d.ts

@@ -0,0 +1,25 @@
+import type { MCPServerConfig } from "../runtime-mcp/types";
+export type MCPAction = "add" | "list" | "remove";
+export interface MCPCommandArgs {
+    action: MCPAction;
+    name?: string;
+    commandArgs?: string[];
+    flags: {
+        project?: boolean;
+        force?: boolean;
+        json?: boolean;
+        type?: "stdio" | "http" | "sse";
+        command?: string;
+        url?: string;
+        arg?: string[];
+        env?: string[];
+        header?: string[];
+        cwd?: string;
+        timeout?: number;
+    };
+    cwd?: string;
+}
+export declare class MCPArgsError extends Error {
+}
+export declare function redactMCPServerConfig(config: MCPServerConfig): MCPServerConfig;
+export declare function runMCPCommand(args: MCPCommandArgs): Promise<void>;

package/dist/types/cli.d.ts

@@ -1,3 +1,9 @@
 #!/usr/bin/env bun
+/**
+ * CLI entry point — registers all commands explicitly and delegates to the
+ * lightweight CLI runner from pi-utils.
+ */
+import { type CommandEntry } from "@gajae-code/utils/cli";
+export declare const commands: CommandEntry[];
 /** Run the CLI with the given argv (no `process.argv` prefix). */
 export declare function runCli(argv: string[]): Promise<void>;

package/dist/types/commands/mcp.d.ts

@@ -0,0 +1,70 @@
+/**
+ * Direct MCP server registration for standalone GJC.
+ */
+import { Command } from "@gajae-code/utils/cli";
+import { type MCPAction } from "../cli/mcp-cli";
+export default class MCP extends Command {
+    static description: string;
+    static delegateHelp: boolean;
+    static examples: string[];
+    static args: {
+        action: import("@gajae-code/utils/cli").ArgDescriptor & {
+            description: string;
+            required: false;
+            options: MCPAction[];
+        };
+        name: import("@gajae-code/utils/cli").ArgDescriptor & {
+            description: string;
+            required: false;
+        };
+        commandArgs: import("@gajae-code/utils/cli").ArgDescriptor & {
+            description: string;
+            required: false;
+            multiple: true;
+        };
+    };
+    static flags: {
+        project: import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
+            description: string;
+        };
+        force: import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
+            description: string;
+            default: boolean;
+        };
+        json: import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
+            char: string;
+            description: string;
+            default: boolean;
+        };
+        type: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+            options: string[];
+        };
+        command: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+        };
+        url: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+        };
+        arg: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+            multiple: true;
+        };
+        env: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+            multiple: true;
+        };
+        header: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+            multiple: true;
+        };
+        cwd: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+        };
+        timeout: import("@gajae-code/utils/cli").FlagDescriptor<"integer"> & {
+            description: string;
+        };
+    };
+    run(): Promise<void>;
+    private printHelp;
+}

package/dist/types/config/keybindings.d.ts

@@ -230,8 +230,8 @@ export declare const KEYBINDINGS: {
         readonly description: "Open external editor";
     };
     readonly "app.message.followUp": {
-        readonly defaultKeys: "ctrl+enter";
-        readonly description: "Send follow-up message";
+        readonly defaultKeys: [];
+        readonly description: "Send follow-up message (no default; Ctrl+Enter inserts a newline)";
     };
     readonly "app.message.queue": {
         readonly defaultKeys: "alt+enter";

package/dist/types/deep-interview/plaintext-gate-guard.d.ts

@@ -0,0 +1,11 @@
+export type DeepInterviewPlaintextAskLeakOption = "Yes, crystallize" | "Adjust wording" | "Missing scope";
+export type DeepInterviewPlaintextAskLeakResult = {
+    kind: "deep_interview_plaintext_ask_leak";
+    matchedOptions: DeepInterviewPlaintextAskLeakOption[];
+    signals: {
+        optionsHeading: true;
+        restateIntent: true;
+        deepInterviewContext: boolean;
+    };
+};
+export declare function detectDeepInterviewPlaintextAskLeak(text: string): DeepInterviewPlaintextAskLeakResult | null;

package/dist/types/modes/components/custom-editor.d.ts

@@ -1,6 +1,6 @@
 import { Editor, type KeyId } from "@gajae-code/tui";
 import { type AppKeybinding } from "../../config/keybindings";
-type ConfigurableEditorAction = Extract<AppKeybinding, "app.interrupt" | "app.clear" | "app.exit" | "app.suspend" | "app.thinking.cycle" | "app.model.cycleForward" | "app.model.cycleBackward" | "app.model.select" | "app.model.selectTemporary" | "app.tools.expand" | "app.thinking.toggle" | "app.editor.external" | "app.history.search" | "app.message.dequeue" | "app.message.queue" | "app.clipboard.pasteImage" | "app.clipboard.copyPrompt">;
+type ConfigurableEditorAction = Extract<AppKeybinding, "app.interrupt" | "app.clear" | "app.exit" | "app.suspend" | "app.thinking.cycle" | "app.model.cycleForward" | "app.model.cycleBackward" | "app.model.select" | "app.model.selectTemporary" | "app.tools.expand" | "app.thinking.toggle" | "app.editor.external" | "app.history.search" | "app.message.dequeue" | "app.message.followUp" | "app.message.queue" | "app.clipboard.pasteImage" | "app.clipboard.copyPrompt">;
 type PastePendingClearReason = "timeout" | "queue-limit";
 /**
  * Custom editor that handles configurable app-level shortcuts for coding-agent.

package/dist/types/modes/components/model-selector.d.ts

@@ -35,6 +35,8 @@ export declare class ModelSelectorComponent extends Container {
         sessionId?: string;
         isFastForProvider?: (provider?: string) => boolean;
         isFastForSubagentProvider?: (provider?: string) => boolean;
+        currentThinkingLevel?: ThinkingLevel;
+        activeModelProfile?: string;
     });
     handleInput(keyData: string): void;
     getSearchInput(): Input;

package/dist/types/modes/components/status-line/git-utils.d.ts

@@ -1,3 +1,4 @@
+import type { GitHeadState } from "../../../utils/git";
 /**
  * Extract "owner/repo" from a GitHub remote URL.
  * Handles HTTPS, SSH (scp-style), and git:// protocols.
@@ -20,3 +21,8 @@ export declare function canReuseCachedPr(cachedPr: {
     number: number;
     url: string;
 } | null | undefined, cachedContext: PrCacheContext | undefined, currentContext: PrCacheContext | null): boolean;
+export interface CurrentBranchState {
+    readonly branch: string | null;
+    readonly repoId: string | null;
+}
+export declare function resolveCurrentBranch(cwd: string, resolveHead?: (cwd: string) => GitHeadState | null): CurrentBranchState;

package/dist/types/modes/theme/defaults/index.d.ts

@@ -325,6 +325,105 @@ export declare const defaultThemes: {
             "preset": string;
         };
     };
+    "gruvbox-dark": {
+        $schema: string;
+        name: string;
+        vars: {
+            "bgHard": string;
+            "surface": string;
+            "surfaceBright": string;
+            "borderNeutral": string;
+            "borderSubtle": string;
+            "fg": string;
+            "muted": string;
+            "dim": string;
+            "gray": string;
+            "red": string;
+            "green": string;
+            "yellow": string;
+            "blue": string;
+            "purple": string;
+            "aqua": string;
+            "orange": string;
+            "diffRemovalRed": string;
+        };
+        colors: {
+            "accent": string;
+            "border": string;
+            "borderAccent": string;
+            "borderMuted": string;
+            "success": string;
+            "error": string;
+            "warning": string;
+            "muted": string;
+            "dim": string;
+            "text": string;
+            "thinkingText": string;
+            "selectedBg": string;
+            "userMessageBg": string;
+            "userMessageText": string;
+            "customMessageBg": string;
+            "customMessageText": string;
+            "customMessageLabel": string;
+            "toolPendingBg": string;
+            "toolSuccessBg": string;
+            "toolErrorBg": string;
+            "toolTitle": string;
+            "toolOutput": string;
+            "mdHeading": string;
+            "mdLink": string;
+            "mdLinkUrl": string;
+            "mdCode": string;
+            "mdCodeBlock": string;
+            "mdCodeBlockBorder": string;
+            "mdQuote": string;
+            "mdQuoteBorder": string;
+            "mdHr": string;
+            "mdListBullet": string;
+            "toolDiffAdded": string;
+            "toolDiffRemoved": string;
+            "toolDiffContext": string;
+            "syntaxComment": string;
+            "syntaxKeyword": string;
+            "syntaxFunction": string;
+            "syntaxVariable": string;
+            "syntaxString": string;
+            "syntaxNumber": string;
+            "syntaxType": string;
+            "syntaxOperator": string;
+            "syntaxPunctuation": string;
+            "thinkingOff": string;
+            "thinkingMinimal": string;
+            "thinkingLow": string;
+            "thinkingMedium": string;
+            "thinkingHigh": string;
+            "thinkingXhigh": string;
+            "bashMode": string;
+            "pythonMode": string;
+            "statusLineBg": string;
+            "statusLineSep": string;
+            "statusLineModel": string;
+            "statusLinePath": string;
+            "statusLineGitClean": string;
+            "statusLineGitDirty": string;
+            "statusLineContext": string;
+            "statusLineSpend": string;
+            "statusLineStaged": string;
+            "statusLineDirty": string;
+            "statusLineUntracked": string;
+            "statusLineOutput": string;
+            "statusLineCost": string;
+            "statusLineSubagents": string;
+        };
+        export: {
+            "pageBg": string;
+            "cardBg": string;
+            "infoBg": string;
+        };
+        symbols: {
+            "preset": string;
+        };
+    };
     opencode: {
         $schema: string;
         name: string;

package/dist/types/notifications/operator-runtime.d.ts

@@ -0,0 +1,52 @@
+export interface NotificationOperatorTimerDeps {
+    now?: () => number;
+    setTimeoutImpl?: typeof setTimeout;
+    clearTimeoutImpl?: typeof clearTimeout;
+    setIntervalImpl?: typeof setInterval;
+    clearIntervalImpl?: typeof clearInterval;
+}
+export interface NotificationOperatorRuntimeState {
+    running: boolean;
+    stopRequested: boolean;
+    activeAbort: boolean;
+}
+export interface OperatorBackoffOptions {
+    initialMs: number;
+    maxMs: number;
+    factor?: number;
+}
+export declare class OperatorBackoffPolicy {
+    #private;
+    constructor(opts: OperatorBackoffOptions);
+    next(): number;
+    reset(): void;
+    get currentMs(): number;
+}
+export interface OperatorRoute<TContext> {
+    name: string;
+    matches(event: Record<string, unknown>): boolean;
+    handle(context: TContext, event: Record<string, unknown>): Promise<void> | void;
+}
+export declare class OperatorEventRouter<TContext> {
+    readonly routes: OperatorRoute<TContext>[];
+    add(input: OperatorRoute<TContext>): this;
+    dispatch(context: TContext, event: Record<string, unknown>): Promise<boolean>;
+}
+export declare class NotificationOperatorRuntime {
+    #private;
+    constructor(deps?: NotificationOperatorTimerDeps);
+    get state(): NotificationOperatorRuntimeState;
+    start(): void;
+    stop(): void;
+    requestStop(): void;
+    get running(): boolean;
+    get stopRequested(): boolean;
+    createAbortController(): AbortController;
+    clearAbortController(controller: AbortController): void;
+    startInterval(name: string, intervalMs: number, tick: () => void): void;
+    stopInterval(name: string): void;
+    stopAllIntervals(): void;
+    runExclusive(name: string, fn: () => Promise<void>): Promise<void>;
+    sleep(ms: number, signal?: AbortSignal): Promise<void>;
+    now(): number;
+}

package/dist/types/notifications/telegram-daemon.d.ts

@@ -1,6 +1,7 @@
 import * as fs from "node:fs";
 import type { Settings } from "../config/settings";
 import type { DaemonRuntimeInfo } from "../daemon/control-types";
+import { NotificationOperatorRuntime, OperatorBackoffPolicy } from "./operator-runtime";
 import { type AliasTable, type CallbackRoute, type PendingAsk } from "./telegram-reference";
 export type EnsureDaemonResult = "owner_spawned" | "attached" | "disabled";
 export interface DaemonState {
@@ -146,6 +147,40 @@ export interface BotApi {
         signal?: AbortSignal;
     }): Promise<unknown>;
 }
+export interface TelegramTransportOptions {
+    botToken: string;
+    apiBase?: string;
+    fetchImpl?: typeof fetch;
+    setTimeoutImpl?: typeof setTimeout;
+}
+/** Telegram Bot API transport: HTTP JSON/multipart details stay out of daemon orchestration. */
+export declare class TelegramBotTransport implements BotApi {
+    #private;
+    constructor(opts: TelegramTransportOptions);
+    call(method: string, body: unknown, opts?: {
+        signal?: AbortSignal;
+    }): Promise<unknown>;
+}
+export interface TelegramUpdatePollerOptions {
+    botApi: BotApi;
+    runtime: NotificationOperatorRuntime;
+    backoff: OperatorBackoffPolicy;
+    processUpdate: (update: unknown) => Promise<void>;
+}
+/** Owns getUpdates offset, conflict backoff, and per-update error isolation. */
+export declare class TelegramUpdatePoller {
+    #private;
+    constructor(opts: TelegramUpdatePollerOptions);
+    pollOnce(signal?: AbortSignal): Promise<number>;
+}
+/** Mutable dispatch state shared by session frames and inbound Telegram updates. */
+export declare class TelegramEventDispatchState {
+    readonly busy: Set<string>;
+    readonly inboundReactions: Map<number, {
+        messageId: number;
+    }>;
+    readonly seenUpdateIds: Set<number>;
+}
 /**
  * Cooperative control seam for the daemon run loop. Implemented by the
  * daemon-internal CLI / controller against the owner-scoped control-request
@@ -199,33 +234,31 @@ export declare class TelegramNotificationDaemon {
     readonly aliasTable: AliasTable;
     readonly messageRoutes: Map<string | number, CallbackRoute | Omit<CallbackRoute, "answer">>;
     readonly sessions: Map<string, SessionSocket>;
+    private readonly runtime;
+    private readonly sessionRouter;
+    private readonly pollConflictBackoff;
+    private readonly loopBackoff;
     private running;
-    private offset;
     private readonly fsImpl;
     private readonly botApi;
     private readonly topics;
     private readonly pool;
-    private readonly seenUpdateIds;
+    private readonly poller;
+    private readonly dispatchState;
+    /** Identity-bearing sessions by repo/branch surface, used to avoid transient duplicate topics. */
+    private readonly topicOwnerByIdentity;
+    /** Non-identity frames held until identity creates the correct thread. */
+    private readonly pendingThreadedFrames;
     /** True once the daemon has nudged the user to enable Threaded Mode. */
     private threadedFallbackNoticeSent;
     /** Sessions whose identity header was already sent flat (Threaded Mode off). */
     private readonly flatIdentitySent;
     /** Cached result of whether the paired chat is a private chat (flat-fallback gate). */
     private pairedChatPrivate;
-    private flushTimer;
-    private scanTimer;
-    private scanning;
-    private typingTimer;
     /** Sessions whose agent loop is currently busy (drives the typing indicator). */
-    private readonly busy;
+    private get busy();
     /** Inbound update id → originating Telegram message, for delivery reactions. */
-    private readonly inboundReactions;
-    /** AbortController for the in-flight long poll; aborted by requestStop() to wake the loop. */
-    private activePoll;
-    /** Set when a cooperative stop has been requested (signal or control request). */
-    private stopRequested;
-    /** Current bounded backoff after a Telegram getUpdates 409 conflict (0 when healthy). */
-    private pollConflictBackoffMs;
+    private get inboundReactions();
     /**
      * Cooperatively stop the daemon: set the stop flag and abort the in-flight
      * long poll so the run loop wakes immediately instead of waiting out the
@@ -233,6 +266,7 @@ export declare class TelegramNotificationDaemon {
      */
     requestStop(_reason?: "reload" | "stop" | "signal"): void;
     constructor(opts: TelegramDaemonOptions);
+    private createSessionRouter;
     loadAliases(): Promise<void>;
     persistAliases(): Promise<void>;
     scanRoots(): Promise<void>;
@@ -254,6 +288,12 @@ export declare class TelegramNotificationDaemon {
     private dropSession;
     private static readonly THREADED_FRAMES;
     private topicNameFor;
+    private topicIdentityKey;
+    private topicIdentityBase;
+    private topicOwnerForIdentity;
+    private submitThreadedFrame;
+    private rememberPendingThreadedFrame;
+    private flushPendingThreadedFrames;
     private ensureTopic;
     private persistTopics;
     loadTopics(): Promise<void>;
@@ -285,8 +325,6 @@ export declare class TelegramNotificationDaemon {
     private sendStaleGuidance;
     handleTelegramUpdate(update: unknown): Promise<void>;
     pollOnce(signal?: AbortSignal): Promise<number>;
-    /** Abortable sleep honoring the injected timer; resolves early on abort. */
-    private sleep;
     /** Sync the bot's Telegram command menu to what the daemon actually handles. */
     registerBotCommands(): Promise<void>;
     run(): Promise<void>;

package/dist/types/notifications/topic-registry.d.ts

@@ -45,6 +45,8 @@ export declare class TopicRegistry {
     load(state: TopicRegistryState): void;
     /** Resolve the owning session for a topic id (for fail-closed inbound routing). */
     sessionForTopic(topicId: string): string | undefined;
+    /** All session ids with a persisted topic record. */
+    sessionIds(): string[];
     /** The existing topic record for a session, if any. */
     get(sessionId: string): TopicRecord | undefined;
     /**

package/dist/types/tools/composer-bash-policy.d.ts

@@ -0,0 +1,14 @@
+export declare const COMPOSER_BASH_POLICY_ERROR = "Composer bash policy blocked repository file I/O. Use find, search, read, and edit tools for file discovery, file inspection, and file mutation.";
+type ComposerBashPolicyResult = {
+    allowed: true;
+} | {
+    allowed: false;
+    reason: string;
+    message: string;
+};
+export declare function isComposerBashPolicyModel(modelId: string | undefined): boolean;
+export declare function checkComposerBashPolicy(input: {
+    modelId?: string;
+    commands: readonly string[];
+}): ComposerBashPolicyResult;
+export {};

package/dist/types/web/insane/url-guard.d.ts

@@ -13,10 +13,13 @@ export type AddressResolver = (hostname: string) => Promise<string[]>;
 /** True for any address that is not a routable public unicast address. */
 export declare function isPrivateOrSpecialAddress(address: string): boolean;
 /**
- * Validate that `rawUrl` is a public http/https target safe to hand to the
- * insane-search engine. Resolves DNS names and rejects any that map to a
- * private/special address. Never throws; returns a discriminated result.
+ * Validate that `rawUrl` is a public http/https target. Resolves DNS names and
+ * rejects any that map to a private/special address. Never throws; returns a
+ * discriminated result.
  */
+export declare function validatePublicHttpUrl(rawUrl: string, options?: {
+    resolver?: AddressResolver;
+}): Promise<PublicUrlResult>;
 export declare function validatePublicHttpUrlForInsane(rawUrl: string, options?: {
     resolver?: AddressResolver;
 }): Promise<PublicUrlResult>;

package/dist/types/web/scrapers/types.d.ts

@@ -1,4 +1,5 @@
 import type { AgentStorage } from "../../session/agent-storage";
+import type { AddressResolver } from "../insane/url-guard";
 export { formatNumber } from "@gajae-code/utils";
 export interface RenderResult {
     url: string;
@@ -27,6 +28,9 @@ export interface LoadPageOptions {
     body?: string;
     maxBytes?: number;
     signal?: AbortSignal;
+    publicUrlGuard?: boolean;
+    resolver?: AddressResolver;
+    maxRedirects?: number;
 }
 export interface LoadPageResult {
     content: string;
@@ -34,6 +38,7 @@ export interface LoadPageResult {
     finalUrl: string;
     ok: boolean;
     status?: number;
+    error?: string;
 }
 /**
  * Fetch a page with timeout and size limit

package/dist/types/web/scrapers/utils.d.ts

@@ -1,5 +1,6 @@
 import { isRecord } from "@gajae-code/utils";
 export { isRecord };
+import type { AddressResolver } from "../insane/url-guard";
 export declare function asRecord(value: unknown): Record<string, unknown> | null;
 export declare function asString(value: unknown): string | null;
 export declare function asNumber(value: unknown): number | null;
@@ -12,10 +13,15 @@ export type BinaryFetchResult = BinaryFetchSuccess | {
     ok: false;
     error?: string;
 };
+export interface FetchBinaryOptions {
+    publicUrlGuard?: boolean;
+    resolver?: AddressResolver;
+    maxRedirects?: number;
+}
 /**
  * Fetch binary content from a URL
  */
-export declare function fetchBinary(url: string, timeout?: number, signal?: AbortSignal): Promise<BinaryFetchResult>;
+export declare function fetchBinary(url: string, timeout?: number, signal?: AbortSignal, options?: FetchBinaryOptions): Promise<BinaryFetchResult>;
 /**
  * Convert binary content to markdown using markit.
  */

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@gajae-code/coding-agent",
-	"version": "0.7.2",
+	"version": "0.7.3",
 	"description": "Gajae Code CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://gaebal-gajae.dev",
 	"author": "Yeachan-Heo",
@@ -52,12 +52,12 @@
 		"@agentclientprotocol/sdk": "0.21.0",
 		"@babel/parser": "^7.29.3",
 		"@mozilla/readability": "^0.6.0",
-		"@gajae-code/stats": "0.7.2",
-		"@gajae-code/agent-core": "0.7.2",
-		"@gajae-code/ai": "0.7.2",
-		"@gajae-code/natives": "0.7.2",
-		"@gajae-code/tui": "0.7.2",
-		"@gajae-code/utils": "0.7.2",
+		"@gajae-code/stats": "0.7.3",
+		"@gajae-code/agent-core": "0.7.3",
+		"@gajae-code/ai": "0.7.3",
+		"@gajae-code/natives": "0.7.3",
+		"@gajae-code/tui": "0.7.3",
+		"@gajae-code/utils": "0.7.3",
 		"@puppeteer/browsers": "^2.13.0",
 		"@types/turndown": "5.0.6",
 		"@xterm/headless": "^6.0.0",