@gajae-code/coding-agent 0.9.0 → 0.9.2

package/CHANGELOG.md

@@ -2,6 +2,53 @@
 
 ## [Unreleased]
 
+## [0.9.2] - 2026-07-09
+### Added
+
+- Added `gjc --credential <selector>` for pinning a stored provider credential by `email:`, `id:`, `account:`, `project:`, or `provider/email:` during a session.
+- Added `--mpreset <profile>` support to Telegram `/session_create`, forwarding both `--mpreset <name>` and `--mpreset=<name>` as split argv to the spawned GJC child.
+- Added the built-in `skill_discovery` tool for runtime discovery of custom project/user skills without injecting the full skill catalog into the core prompt.
+- Pasting or drag-dropping a path to an existing image file now attaches the image and inserts an `[image N]` placeholder, including quoted paths, `file://` URIs, `~/` expansion, spaces, and macOS screenshot narrow no-break spaces.
+
+### Fixed
+
+- Finalized notification turn mirrors now default to the bounded full-turn cap so Telegram's existing chunked delivery can send long assistant answers instead of receiving an already-truncated 3500-character summary; `GJC_NOTIFICATIONS_TURN_MAX` remains available to lower the cap for summary-style mirrors, and live previews stay capped as one editable message.
+- `gjc --tmux` now wraps the inner GJC command with a durable `tmux-exit.json` marker next to `runtime-state.json`, so a tmux-resident session that exits before normal runtime-state finalization leaves a public-safe exit timestamp/code for silent-vanish diagnosis (#1746).
+- `gjc --tmux` terminal titles now track live tmux session renames while preserving the friendly project/branch title for untouched generated session ids.
+- Telegram session forum-topic renames now remain retryable after a transient `editForumTopic` failure, so topics do not get stuck at the provisional `GJC <session>` name while the daemon incorrectly records the final title locally.
+- `/effort` selector choices now show the current reasoning effort and mirror `/model` by asking whether to apply the selected effort for the current session or save it as the default, including support for persisting `off`. Default model presets also sync their encoded effort into the persisted effort default so later `/effort` defaults are not overwritten on restart.
+- Composer queue submissions (`Alt+Q` / `app.message.queue`) force one-at-a-time follow-up delivery, including replay after compaction, without disabling broader batch mode for other follow-up callers.
+- `--credential` now rejects a missing selector immediately instead of falling through into session launch with no output.
+- `gjc-session` prompt/monitor postmortem helpers now work on macOS's system Bash/Python, so missing tmux sessions write the public-safe `vanished.json` marker and prompt injection exits through the guarded refusal path.
+
+## [0.9.1] - 2026-07-08
+
+### Added
+
+- Added `/effort` to show or set the current model reasoning effort, including a selector UI when run without arguments and validation for invalid effort names.
+- Added `--mpreset <profile>` option to the Telegram `/session_create` command, allowing users to specify a model profile preset when creating a session remotely (e.g. `/session_create path /repo --mpreset codex-eco`). Both `--mpreset <name>` and `--mpreset=<name>` forms are supported.
+- Pasting or drag-dropping a path to any existing image file into the interactive editor now attaches the image and inserts an `[image N]` placeholder instead of leaving the raw path in the prompt. Quoted paths, `file://` URIs, `~/` expansion, spaces, and macOS screenshot narrow no-break spaces are handled when the whole paste is a single supported image file.
+- Added `GJC_NOTIFY=off` as a per-run completion-notification opt-out.
+- Telegram mirror messages now render as native Bot API 10.1 rich messages on by default with a global `/rich on|off` toggle, while failing closed to the previous HTML path.
+
+### Changed
+
+- Upgraded the Extragoal review template with a stronger reviewer lane and optional maximalist N-of-N review recipe.
+- Added `--mpreset <profile>` option to the Telegram `/session_create` command, allowing users to specify a model profile preset when creating a session remotely (e.g. `/session_create path /repo --mpreset codex-eco`). Both `--mpreset <name>` and `--mpreset=<name>` forms are supported. The preset is passed as a regular `--mpreset` CLI flag to the spawned `gjc` child, where the existing `applyStartupModelProfiles` flow activates it.
+- Added the built-in `skill_discovery` tool for runtime discovery of custom project `.gjc/skills` and user `~/.gjc/skills` without injecting the full skill catalog into the core prompt; selected discovered skills are loaded narrowly through the existing `skill` invocation path (#1815).
+- Pasting or drag-dropping a path to any existing image file into the interactive editor now attaches the image and inserts an `[image N]` placeholder instead of leaving the raw path in the prompt. Previously this only worked for clipboard temp files (`/tmp/clipboard-*` or `/var/folders/xx/yy/T/clipboard-*`); terminal drag-drop paths — including shell-escaped spaces and the U+202F narrow no-break space in macOS screenshot names — pasted as long raw path text. Quoted paths, `file://` URIs (decoded via Node's `fileURLToPath` semantics, including Windows drive-letter, `file://localhost`, and UNC forms), and `~/` expansion are handled; the whole paste must be a single path to an existing image file whose content carries a supported image signature (PNG/JPEG/GIF/WEBP), so prose containing paths and non-image files with image-looking extensions are inserted unchanged. When attachment still fails (unsupported content, oversized image, load error), the original pasted text is replayed into the editor instead of being consumed.
+
+### Fixed
+- Composer queue submissions (`Alt+Q` / `app.message.queue`) now force one-at-a-time follow-up delivery for those queued prompts, including replay after compaction, so they do not collapse into one batched model call even when the broader follow-up mode is set to `all`.
+
+- `gjc team` on Windows/psmux now targets the GJC-managed leader session by name instead of trusting the inherited `TMUX_PANE`.
+- Kitty inline images no longer duplicate/stack or paint over transcript text when the diff renderer repaints the image line.
+- Session creation now forwards `--mpreset` as split argv instead of one combined argument.
+- The RPC server restores the duplicate-listen boundary error instead of masking it.
+- Mac Option+Enter no longer collides with the queue-message binding.
+- Telegram completion notifications suppress dot-only messages, and Telegram-originated input is shown immediately and recorded in prompt history.
+- The computer red-team CI gate avoids false positives from non-computer-control changes.
+
 ## [0.9.0] - 2026-07-07
 ### Added
 
@@ -12,6 +59,7 @@
 - Added `GJC_NOTIFICATIONS_TURN_MAX` to raise the finalized `turn_stream` text cap (default 3500 chars, unchanged) so full long turns reach split-capable clients — the Telegram daemon already fans a long finalized turn across multiple messages via `splitTelegramHtml` — instead of being truncated with an ellipsis at the notification layer. The value is clamped to a finite `[280, 40000]` range: a non-finite or non-positive value (unset, `NaN`, `Infinity`, `<= 0`) falls back to the default, so the cap can never be unbounded. Opt-in and off by default (mirror stays a glanceable per-turn summary); live in-progress frames are intentionally NOT raised so a streaming turn stays one editable preview message rather than fanning across sends.
 
 ### Fixed
+- Composer-pasted images now follow the visible `[image N]` placeholders at submit time, so deleting a pasted image placeholder with Backspace removes that attachment instead of still sending it to the model or Telegram session mirrors.
 
 - Stopped the Hindsight memory backend from injecting stale public-memory-tool guidance into the system prompt. `hindsight/backend.ts`'s `STATIC_INSTRUCTIONS` still instructed the model to "Use `recall`/`retain`/`reflect`", but those tools were removed from the public surface in #341 — they are unregistered in `BUILTIN_TOOLS`/`HIDDEN_TOOLS` and not discoverable — so every Hindsight-backed session advertised three uncallable tools in its injected `# Memory` block. #341 cleaned the local-memory prompts, public docs, and tool registry but never touched the Hindsight backend's own injected block, and its `public-memory-tool-surface.test.ts` guard list omitted `backend.ts`, so the drift went unnoticed. The block now describes the automatic recall/retain lifecycle instead of naming tools, and the regression test now guards `hindsight/backend.ts`.
 - Task subagent output-ID allocation now reserves numeric prefixes from `.jsonl` session artifacts and `.patch` sidecars as well as final `.md` outputs, preventing resumed or partial subagent runs from reusing an existing artifact stem (#1733).

package/dist/types/cli/args.d.ts

@@ -14,6 +14,7 @@ export interface Args {
     mpreset?: string;
     default?: boolean;
     apiKey?: string;
+    credential?: string;
     systemPrompt?: string;
     appendSystemPrompt?: string;
     thinking?: Effort;

package/dist/types/cli/notify-cli.d.ts

@@ -19,12 +19,17 @@ export interface NotifyCommandDeps {
     setupRedact?: boolean;
     setupInteractive?: boolean;
     threadedModePrompt?: (message: string) => Promise<string>;
+    tokenPrompt?: () => Promise<string>;
+    setExitCode?: (code: number) => void;
+    exitProcess?: (code: number) => void;
 }
 export declare function parseNotifyArgs(args: string[]): NotifyCommandArgs | undefined;
 export declare function runNotifyCommand(cmd: NotifyCommandArgs, deps?: NotifyCommandDeps): Promise<void>;
+export declare function runNotifyCliCommand(cmd: NotifyCommandArgs, deps?: NotifyCommandDeps): Promise<void>;
 type TokenPromptInput = NodeJS.ReadStream & {
     isRaw?: boolean;
     setRawMode?: (mode: boolean) => unknown;
+    pause?: () => unknown;
 };
 type TokenPromptOutput = Pick<NodeJS.WriteStream, "write">;
 export declare function promptForToken(input?: TokenPromptInput, output?: TokenPromptOutput): Promise<string>;

package/dist/types/cli.d.ts

@@ -40,6 +40,9 @@ export declare class RootHelpCommand extends Command {
         "api-key": import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
             description: string;
         };
+        credential: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+        };
         "system-prompt": import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
             description: string;
         };

package/dist/types/commands/launch.d.ts

@@ -37,6 +37,9 @@ export default class Index extends Command {
         "api-key": import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
             description: string;
         };
+        credential: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+        };
         "system-prompt": import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
             description: string;
         };

package/dist/types/config/model-profile-activation.d.ts

@@ -1,4 +1,4 @@
-import type { ThinkingLevel } from "@gajae-code/agent-core";
+import { ThinkingLevel } from "@gajae-code/agent-core";
 import type { Api, Model } from "@gajae-code/ai";
 import type { AgentSession } from "../session/agent-session";
 import { type GjcModelAssignmentTargetId, type ModelRegistry } from "./model-registry";
@@ -16,6 +16,10 @@ export interface PrepareModelProfileActivationOptions {
     settings: Pick<Settings, "get">;
     profileName: string;
 }
+export interface ApplyModelProfileActivationOptions {
+    persistDefault?: boolean;
+    thinkingLevelOverride?: ThinkingLevel;
+}
 export interface PreparedModelProfileActivation {
     profileName: string;
     session: ModelProfileActivationSession & {
@@ -55,9 +59,7 @@ export declare function materializeActiveModelProfileAssignment(options: Materia
 export declare function materializeActiveModelProfileAssignments(options: MaterializeModelProfileAssignmentsOptions): boolean;
 export declare function formatModelProfileCredentialError(profileLabel: string, providers: readonly string[]): string;
 export declare function prepareModelProfileActivation(options: PrepareModelProfileActivationOptions): Promise<PreparedModelProfileActivation>;
-export declare function applyPreparedModelProfileActivation(prepared: PreparedModelProfileActivation, options?: {
-    persistDefault?: boolean;
-}): Promise<void>;
+export declare function applyPreparedModelProfileActivation(prepared: PreparedModelProfileActivation, options?: ApplyModelProfileActivationOptions): Promise<void>;
 export interface MaterializeModelProfileForDeletionResult {
     modelRoles: Record<string, string>;
     agentModelOverrides: Record<string, string>;
@@ -75,7 +77,5 @@ export declare function restoreMaterializedModelProfileForDeletion(options: {
     session: Pick<ModelProfileActivationSession, "setActiveModelProfile">;
     snapshot: MaterializeModelProfileForDeletionResult;
 }): Promise<void>;
-export declare function activateModelProfile(options: PrepareModelProfileActivationOptions, applyOptions?: {
-    persistDefault?: boolean;
-}): Promise<void>;
+export declare function activateModelProfile(options: PrepareModelProfileActivationOptions, applyOptions?: ApplyModelProfileActivationOptions): Promise<void>;
 export {};

package/dist/types/config/model-registry.d.ts

@@ -1,4 +1,4 @@
-import { type Api, type AssistantMessageEventStream, type CacheRetention, type Context, type Model, type ModelRefreshStrategy, type ModelRequestTransform, type SimpleStreamOptions, type ThinkingConfig } from "@gajae-code/ai";
+import { type Api, type AssistantMessageEventStream, type AuthCredentialSelector, type CacheRetention, type Context, type Model, type ModelRefreshStrategy, type ModelRequestTransform, type SimpleStreamOptions, type ThinkingConfig } from "@gajae-code/ai";
 import type { OAuthCredentials, OAuthLoginCallbacks } from "@gajae-code/ai/utils/oauth/types";
 import { type ThemeColor } from "../modes/theme/theme";
 import type { AuthStorage } from "../session/auth-storage";
@@ -386,11 +386,15 @@ export declare class ModelRegistry {
     /**
      * Get API key for a model.
      */
-    getApiKey(model: Model<Api>, sessionId?: string): Promise<string | undefined>;
+    getApiKey(model: Model<Api>, sessionId?: string, options?: {
+        credentialSelector?: AuthCredentialSelector;
+    }): Promise<string | undefined>;
     /**
      * Get API key for a provider (e.g., "openai").
      */
-    getApiKeyForProvider(provider: string, sessionId?: string, baseUrl?: string): Promise<string | undefined>;
+    getApiKeyForProvider(provider: string, sessionId?: string, baseUrl?: string, options?: {
+        credentialSelector?: AuthCredentialSelector;
+    }): Promise<string | undefined>;
     /**
      * Check if a model is using OAuth credentials (subscription).
      */

package/dist/types/config/model-resolver.d.ts

@@ -2,7 +2,7 @@
  * Model resolution, scoping, and initial selection
  */
 import { ThinkingLevel } from "@gajae-code/agent-core";
-import { type Api, type Effort, type KnownProvider, type Model } from "@gajae-code/ai";
+import { type Api, type KnownProvider, type Model } from "@gajae-code/ai";
 import { type ModelRegistry, type ModelRole } from "./model-registry";
 import type { Settings } from "./settings";
 /** Default model IDs for each known provider */
@@ -204,7 +204,7 @@ export declare function findInitialModel(options: {
     isContinuing: boolean;
     defaultProvider?: string;
     defaultModelId?: string;
-    defaultThinkingSelector?: Effort;
+    defaultThinkingSelector?: ThinkingLevel;
     modelRegistry: InitialModelRegistry;
 }): Promise<InitialModelResult>;
 /**

package/dist/types/config/settings-schema.d.ts

@@ -130,6 +130,14 @@ export declare const SETTINGS_SCHEMA: {
         readonly type: "string";
         readonly default: undefined;
     };
+    readonly "notifications.telegram.rich.enabled": {
+        readonly type: "boolean";
+        readonly default: true;
+    };
+    readonly "notifications.telegram.richDraft.enabled": {
+        readonly type: "boolean";
+        readonly default: false;
+    };
     readonly "notifications.discord.botToken": {
         readonly type: "string";
         readonly default: undefined;
@@ -899,7 +907,7 @@ export declare const SETTINGS_SCHEMA: {
     };
     readonly defaultThinkingLevel: {
         readonly type: "enum";
-        readonly values: readonly Effort[];
+        readonly values: readonly ["off", ...Effort[]];
         readonly default: Effort;
         readonly ui: {
             readonly tab: "model";
@@ -3852,6 +3860,12 @@ export interface NotificationsSettings {
     telegram: {
         botToken: string | undefined;
         chatId: string | undefined;
+        rich: {
+            enabled: boolean;
+        };
+        richDraft: {
+            enabled: boolean;
+        };
     };
     discord: {
         botToken: string | undefined;

package/dist/types/config/settings.d.ts

@@ -82,6 +82,13 @@ export declare class Settings {
      * Call before exit to ensure all changes are persisted.
      */
     flush(): Promise<void>;
+    /**
+     * Like {@link flush}, but rejects if the durable save fails instead of
+     * swallowing the error. Use where the caller must confirm persistence before
+     * reporting success (e.g. the Telegram `/rich` toggle). In-memory instances
+     * ({@link isolated}) short-circuit in {@link #saveNow} and never throw.
+     */
+    flushOrThrow(): Promise<void>;
     cloneForCwd(cwd: string): Promise<Settings>;
     getStorage(): AgentStorage | null;
     getCwd(): string;

package/dist/types/extensibility/runtime-skill-discovery.d.ts

@@ -0,0 +1,20 @@
+import type { SkillsSettings } from "../config/settings-schema";
+import type { Skill } from "./skills";
+export type RuntimeSkillDiscoverySource = "project" | "user";
+export interface RuntimeSkillDiscoveryCandidate {
+    name: string;
+    description: string;
+    source: RuntimeSkillDiscoverySource;
+    path: string;
+    useWhen?: string[];
+}
+export interface DiscoverRuntimeSkillsOptions {
+    cwd: string;
+    home?: string;
+    query?: string;
+    limit?: number;
+    source?: RuntimeSkillDiscoverySource | "all";
+    policy?: SkillsSettings;
+}
+export declare function discoverRuntimeSkills(options: DiscoverRuntimeSkillsOptions): Promise<RuntimeSkillDiscoveryCandidate[]>;
+export declare function findRuntimeSkillByName(cwd: string, name: string, policy?: SkillsSettings, home?: string): Promise<Skill | undefined>;

package/dist/types/gjc-runtime/team-runtime.d.ts

@@ -221,6 +221,7 @@ export interface GjcTeamStartOptions {
     cwd?: string;
     env?: NodeJS.ProcessEnv;
     dryRun?: boolean;
+    platform?: NodeJS.Platform;
     mailboxDeliveryTransport?: GjcTeamMailboxDeliveryTransport;
 }
 export interface GjcTeamApiClaimResult {
@@ -305,6 +306,14 @@ export declare function pruneTeamWorkerGcRecord(record: GcRecord, probe: GcPidPr
 export declare function persistGjcTeamModeStateSummary(snapshot: GjcTeamSnapshot, cwd?: string): Promise<void>;
 export declare function recoverGjcTeamStaleClaims(teamName: string, cwd?: string, env?: NodeJS.ProcessEnv): Promise<GjcTeamLivenessRecoveryResult>;
 type GjcTeamTaskMetadataInput = Partial<Pick<GjcTeamTask, "owner" | "lane" | "required_role" | "allowed_roles" | "depends_on" | "blocked_by">>;
+export declare function resolveWorkerWorktreePath(input: {
+    repoRoot: string;
+    stateDir: string;
+    teamName: string;
+    workerId: string;
+    platform: NodeJS.Platform;
+    isPsmux: boolean;
+}): string;
 type CommandPathResolver = (command: string) => string | null;
 export declare function resolveGjcWorkerCommand(cwd?: string, env?: NodeJS.ProcessEnv, platform?: NodeJS.Platform, argv?: string[], execPath?: string, which?: CommandPathResolver): string;
 /** @internal Exported for unit tests. */

package/dist/types/gjc-runtime/tmux-common.d.ts

@@ -2,6 +2,7 @@ import type { ResolvedTmuxBinary } from "./psmux-detect";
 export declare const GJC_DEFAULT_TMUX_SESSION = "gajae_code";
 export declare const GJC_TMUX_SESSION_PREFIX = "gajae_code_";
 export declare const GJC_TMUX_COMMAND_ENV = "GJC_TMUX_COMMAND";
+export declare const GJC_TMUX_ACTIVE_SESSION_ENV = "GJC_TMUX_ACTIVE_SESSION";
 export declare const GJC_TMUX_PROFILE_ENV = "GJC_TMUX_PROFILE";
 export declare const GJC_TMUX_MOUSE_ENV = "GJC_MOUSE";
 export declare const GJC_TMUX_PROFILE_OPTION = "@gjc-profile";

package/dist/types/modes/components/settings-selector.d.ts

@@ -1,4 +1,4 @@
-import type { ThinkingLevel } from "@gajae-code/agent-core";
+import { type ThinkingLevel as ThinkingLevelValue } from "@gajae-code/agent-core";
 import type { Effort } from "@gajae-code/ai";
 import { Container, SettingsList } from "@gajae-code/tui";
 import { type SettingPath } from "../../config/settings";
@@ -13,7 +13,7 @@ export interface SettingsRuntimeContext {
     /** Available thinking levels (from session) */
     availableThinkingLevels: Effort[];
     /** Current thinking level (from session) */
-    thinkingLevel: ThinkingLevel | undefined;
+    thinkingLevel: ThinkingLevelValue | undefined;
     /** Available themes */
     availableThemes: string[];
     /** Available model profile names (from the model registry) */

package/dist/types/modes/components/thinking-selector.d.ts

@@ -1,10 +1,15 @@
-import type { Effort } from "@gajae-code/ai";
+import { type ThinkingLevel as ThinkingLevelValue } from "@gajae-code/agent-core";
 import { Container, SelectList } from "@gajae-code/tui";
+export interface ThinkingSelectorSelection {
+    level: ThinkingLevelValue;
+    persistDefault: boolean;
+}
 /**
  * Component that renders a thinking level selector with borders
  */
 export declare class ThinkingSelectorComponent extends Container {
     #private;
-    constructor(currentLevel: Effort, availableLevels: Effort[], onSelect: (level: Effort) => void, onCancel: () => void);
+    constructor(currentLevel: ThinkingLevelValue | undefined, availableLevels: ThinkingLevelValue[], onSelect: (selection: ThinkingSelectorSelection) => void, onCancel: () => void);
+    handleInput(data: string): void;
     getSelectList(): SelectList;
 }

package/dist/types/modes/controllers/selector-controller.d.ts

@@ -26,6 +26,7 @@ export declare class SelectorController {
     showProviderOnboarding(): void;
     showCustomModelPresetWizard(snapshot: ModelProfileConfig): void;
     showCustomProviderWizard(): void;
+    showEffortSelector(): void;
     showSettingsSelector(): void;
     showThemeSelector(): void;
     showHistorySearch(): void;

package/dist/types/modes/interactive-mode.d.ts

@@ -96,6 +96,7 @@ export declare class InteractiveMode implements InteractiveModeContext {
     onInputCallback?: (input: SubmittedUserInput) => void;
     optimisticUserMessageSignature: string | undefined;
     locallySubmittedUserSignatures: Set<string>;
+    optimisticInjectedSignatures: Map<string, number>;
     lastSigintTime: number;
     lastEscapeTime: number;
     lastComposerClearEscapeTime: number;
@@ -218,6 +219,7 @@ export declare class InteractiveMode implements InteractiveModeContext {
     showModelSelector(options?: {
         temporaryOnly?: boolean;
     }): void;
+    showEffortSelector(): void;
     showProviderOnboarding(): void;
     showPluginSelector(mode?: "install" | "uninstall"): void;
     showUserMessageSelector(): void;

package/dist/types/modes/rpc/rpc-mode.d.ts

@@ -64,9 +64,7 @@ export declare function isFastLaneRpcCommand(type: RpcCommand["type"]): boolean;
 export declare function createRpcCommandScheduler(run: (command: RpcCommand) => Promise<void>, track: (task: Promise<void>) => void): {
     dispatch: (command: RpcCommand) => void;
 };
-export declare class RpcListenRefusedError extends Error {
-    constructor(socketPath: string);
-}
+export { RpcListenRefusedError } from "./rpc-socket-security";
 /**
  * Probe whether a unix-domain socket path has a live server accepting
  * connections. Returns `true` when a connection succeeds (a previous owner is

package/dist/types/modes/rpc/rpc-socket-security.d.ts

@@ -1,6 +1,9 @@
 export declare class RpcSocketSecurityError extends Error {
     constructor(message: string);
 }
+export declare class RpcListenRefusedError extends Error {
+    constructor(socketPath: string);
+}
 export declare function prepareRpcSocketPath(socketPath: string): Promise<void>;
 export declare function assertSafeClientSocket(socketPath: string): Promise<void>;
 export declare function verifyRpcSocketAfterListen(socketPath: string): Promise<void>;

package/dist/types/modes/types.d.ts

@@ -28,6 +28,7 @@ import type { Theme } from "./theme/theme";
 export type CompactionQueuedMessage = {
     text: string;
     mode: "steer" | "followUp";
+    followUpQueuePolicy?: "sequential";
 };
 export type SubmittedUserInput = {
     text: string;
@@ -100,6 +101,7 @@ export interface InteractiveModeContext {
     onInputCallback?: (input: SubmittedUserInput) => void;
     optimisticUserMessageSignature: string | undefined;
     locallySubmittedUserSignatures: Set<string>;
+    optimisticInjectedSignatures: Map<string, number>;
     lastSigintTime: number;
     lastEscapeTime: number;
     lastComposerClearEscapeTime: number;
@@ -223,6 +225,7 @@ export interface InteractiveModeContext {
     showModelSelector(options?: {
         temporaryOnly?: boolean;
     }): void;
+    showEffortSelector(): void;
     showProviderOnboarding(): void;
     showPluginSelector(mode?: "install" | "uninstall"): void;
     showUserMessageSelector(): void;

package/dist/types/modes/utils/injected-user-submission.d.ts

@@ -0,0 +1,52 @@
+import type { ImageContent, TextContent } from "@gajae-code/ai";
+import type { InteractiveModeContext } from "../types";
+/**
+ * Normalize the content passed to an extension `sendUserMessage` call into a
+ * plain text string plus its image attachments. Mirrors the normalization in
+ * `AgentSession.sendUserMessage` (text parts joined with "\n") so the resulting
+ * text matches the eventual user `message_start` payload.
+ */
+export declare function normalizeInjectedUserContent(content: string | (TextContent | ImageContent)[]): {
+    text: string;
+    images: ImageContent[];
+    imageCount: number;
+};
+/**
+ * Record a remotely/programmatically injected user message (e.g. Telegram
+ * inbound routed through the extension API) into the interactive TUI, so it is
+ * captured in prompt history and shown immediately instead of only appearing
+ * once the eventual `message_start` event lands.
+ *
+ * Local TUI submissions never reach this path (they go through
+ * `session.prompt(...)` / `startPendingSubmission`), so this cannot double-add
+ * local prompt history.
+ *
+ * - Always adds the injected text to editor prompt history.
+ * - Idle injections optimistically render the user message and record a pending
+ *   injected optimistic signature (a counting Map, so multiple idle injections
+ *   before the first `message_start` do not clobber each other); the later user
+ *   `message_start` consumes one count and skips both the duplicate chat add and
+ *   the defensive editor clear (so a locally typed draft is preserved).
+ * - Busy/queued injections refresh the pending-message display, which the
+ *   caller has already populated by invoking `session.sendUserMessage(...)`
+ *   before this helper.
+ *
+ * This helper never clears the editor text.
+ */
+export declare function applyInjectedUserSubmission(ctx: InteractiveModeContext, input: {
+    content: string | (TextContent | ImageContent)[];
+    queued: boolean;
+}): void;
+/**
+ * Record one pending optimistic render for an injected user message.
+ *
+ * Injected sends are fire-and-forget and multiple idle injections can be
+ * rendered before the first `message_start` arrives, so a counting Map (not a
+ * single slot) tracks how many optimistic renders are outstanding per signature.
+ */
+export declare function incrementInjectedOptimisticSignature(ctx: InteractiveModeContext, signature: string): void;
+/**
+ * Consume one pending injected optimistic render for `signature`. Decrements the
+ * count (deleting the key at zero) and returns whether one was outstanding.
+ */
+export declare function consumeInjectedOptimisticSignature(ctx: InteractiveModeContext, signature: string): boolean;

package/dist/types/notifications/config-commands.d.ts

@@ -18,9 +18,47 @@ export interface ConfigCommandChange {
     verbosity?: "lean" | "verbose";
     redact?: boolean;
 }
+export type TelegramControlCommandName = "reasoning" | "usage" | "context" | "compact";
+export type TelegramControlCommand = {
+    name: "reasoning";
+    action: "cycle" | "status" | "set";
+    level?: string;
+} | {
+    name: "usage";
+} | {
+    name: "context";
+} | {
+    name: "compact";
+    instructions?: string;
+};
+export type TelegramControlCommandParseResult = {
+    kind: "none";
+} | {
+    kind: "ignored";
+    commandName: TelegramControlCommandName;
+} | {
+    kind: "command";
+    command: TelegramControlCommand;
+} | {
+    kind: "invalid";
+    commandName: TelegramControlCommandName;
+    usage: string;
+};
+export declare function telegramControlCommandUsage(commandName: TelegramControlCommandName): string;
+/** Parse deterministic Telegram session-control commands. Recognised roots fail closed. */
+export declare function parseTelegramControlCommand(text: string, botUsername?: string): TelegramControlCommandParseResult;
 /**
  * Parse an in-thread config command. Returns the requested change, or
  * `undefined` when the text is not a recognised config command (so the daemon
  * can fall through to treating it as a free-text injection).
  */
 export declare function parseInThreadConfigCommand(text: string): ConfigCommandChange | undefined;
+/**
+ * Parse a `/rich on|off` toggle. Returns `true`/`false` for a recognised
+ * on/off argument, or `undefined` otherwise (not a `/rich` command, or `/rich`
+ * with a missing/invalid argument). This is intentionally SEPARATE from
+ * `parseInThreadConfigCommand`: `/verbose`/`/redact` are producer/session config
+ * forwarded over the WS, whereas rich is Telegram-daemon delivery policy handled
+ * daemon-locally, so it never becomes a `config_command` frame or a user turn.
+ */
+export declare function parseRichToggleCommand(text: string): boolean | undefined;

package/dist/types/notifications/config.d.ts

@@ -14,6 +14,12 @@ export interface NotificationConfig {
     redact: boolean;
     verbosity: "lean" | "verbose";
     idleTimeoutMs: number;
+    rich: {
+        enabled: boolean;
+    };
+    richDraft: {
+        enabled: boolean;
+    };
 }
 /** Read typed config from Settings. */
 export declare function getNotificationConfig(settings: Settings): NotificationConfig;
@@ -25,6 +31,16 @@ export declare function isTelegramConfigured(cfg: NotificationConfig): cfg is No
 };
 /** Is global config sufficient for auto-on (enabled + at least one configured adapter)? */
 export declare function isGloballyConfigured(cfg: NotificationConfig): boolean;
+/**
+ * Per-run opt-out for completion notifications, honored before settings lookups.
+ *
+ * `GJC_NOTIFY=off` (also `0` / `false`, case-insensitive) suppresses the
+ * completion notification surface for this process only. `config.yml` is
+ * untouched and child processes inherit the env var, which lets non-interactive
+ * fleet runs (`gjc -p --no-session`) stay silent even when a user-level/global
+ * completion notification configuration is enabled.
+ */
+export declare function completionNotifyDisabledByEnv(env: NodeJS.ProcessEnv): boolean;
 /** Resolve whether the notifications extension should be registered at SDK startup. */
 export declare function shouldRegisterNotificationsExtension(input: {
     env: NodeJS.ProcessEnv;

package/dist/types/notifications/index.d.ts

@@ -18,7 +18,7 @@
  * generated), or `GJC_NOTIFICATIONS_TOKEN`.
  */
 import { Settings } from "../config/settings";
-import type { ExtensionAPI } from "../extensibility/extensions";
+import type { ExtensionAPI, ExtensionContext } from "../extensibility/extensions";
 /** Where a `session_create` should run. Discriminated by `kind`. */
 export type SessionCreateTarget = {
     kind: "existing_path";
@@ -61,6 +61,8 @@ export interface SessionCreateFrame {
     target: SessionCreateTarget;
     /** Reference to the daemon-written, once-consumed startup-prompt file. */
     startupPromptRef?: string;
+    /** Model profile preset to activate for the spawned session (--mpreset). */
+    modelPreset?: string;
 }
 /** Close (hard-kill, history preserved) a session. */
 export interface SessionCloseFrame {
@@ -174,6 +176,17 @@ export interface SessionReadyFrame {
  */
 export declare function readGitRepoName(cwd: string): string | undefined;
 export declare function notificationsEnabled(): boolean;
+interface NotificationControlCommandPayload {
+    name?: unknown;
+    action?: unknown;
+    level?: unknown;
+    instructions?: unknown;
+}
+export declare function executeNotificationControlCommand(command: NotificationControlCommandPayload | undefined, ctx: ExtensionContext, api: ExtensionAPI): Promise<{
+    status: "ok" | "error" | "unavailable";
+    message: string;
+}>;
 export declare function createNotificationsExtension(api: ExtensionAPI, options?: {
     settings?: Settings;
 }): void;
+export {};

package/dist/types/notifications/lifecycle-commands.d.ts

@@ -4,6 +4,7 @@ export type LifecycleCommandVerb = "session_create" | "session_close" | "session
 export type ParsedLifecycleCommand = {
     kind: "create";
     target: SessionCreateTarget;
+    modelPreset?: string;
 } | {
     kind: "close";
     target: SessionCloseTarget;

package/dist/types/notifications/lifecycle-control-runtime.d.ts

@@ -35,7 +35,8 @@ export declare function createRateLimiter(maxPerWindow: number, windowMs: number
  *  The launched session id is carried via `GJC_SESSION_ID` in the child env (see
  *  {@link daemonSpawnCreate}); the root `gjc` launcher has no `--session-id`
  *  flag, so it must never appear in argv. Only flags the launch parser actually
- *  supports are emitted (`--worktree <branch>` for worktree targets). */
+ *  supports are emitted (`--worktree <branch>` for worktree targets,
+ *  `--mpreset <profile>` for model presets). */
 export declare function buildCreateArgv(frame: SessionCreateFrame, _ids: {
     intendedSessionId: string;
     startupPromptRef?: string;