@gajae-code/coding-agent 0.9.6 → 0.10.1

package/CHANGELOG.md

@@ -2,10 +2,68 @@
 
 ## [Unreleased]
 
+## [0.10.1] - 2026-07-13
+
+### Added
+
+- Added an owner-proof idle session reaper and `gjc_coordinator_stop_session` for ephemeral (delegate-created) coordinator sessions. Termination goes exclusively through the owner-proof `forceCloseGjcTmuxSession` path (pid, native session id, owner generation, server key, and start time all verified before SIGTERM) — never a raw `process.kill`. The reaper binds each close to the persisted runtime-state file, re-validates ephemeral and no-active-turn at kill time under the same per-session mutation lock as delegate reuse, and purges state only on verified termination (#2080).
+- RPC clients can now durably select the machine-global default model and effective thinking level for subsequent messages, while project policy and resumed session history retain precedence.
+- Context-usage tokens/% now use provider-reported usage as the single source of truth on every surface. `AgentSession.getContextUsage()` returns a source-tagged snapshot (`source: "provider_anchor" | "heuristic" | "unknown"`), and the status-line `context_pct` segment, inline model percentage, and `/context` totals consume that snapshot instead of recomputing an independent heuristic sum — so footer, status line, `/context`, ACP, and RPC can no longer disagree about the same session state. Heuristic estimation now applies only when no provider anchor exists (session start, aborted/error-only turns), and that fallback now includes the fixed system-prompt/tool/skill context it previously omitted. The pre-prompt compaction estimate honors the latest-compaction boundary (never anchors on stale pre-compaction usage totals), unknown post-compaction usage stays unknown (status line renders `?`; ACP omits the `usage_update` instead of reporting `used: 0`), and `/context` labels its total by provenance with a reconciliation line when the estimated category composition diverges from the provider-reported total.
+### Fixed
+
+- IRC deliveries now accept their exchange batch in the recipient's volatile current-session queue before recipient/main UI observations or sender success. Awaited deliveries generate the reply first, then accept the ordered incoming + auto-reply pair and commit the IRC roster claim before observation; provider failures and sender aborts before acceptance leave no ghost exchange, while observer failures after acceptance are isolated. This is not a durability guarantee: durable history injection remains a later flush and no fsync, recovery, persistent IDs, or deduplication was added.
+- Print mode now records terminal text-mode errors as exit status 1 (or 78 for context overflow) without bypassing output quiescence or session disposal. It retains JSON event delivery through disposal and suppresses `EPIPE` from its owned stdout; `ERR_STREAM_DESTROYED` is suppressed only after that `EPIPE` has latched, while other output failures remain errors.
+- Extension contexts now receive a defensive copy from `getSystemPrompt()` instead of the live mutable system-prompt array, so an in-place mutation by an in-process extension can no longer bypass context-revision tracking and serve stale display-only context-usage estimates.
+
+## [0.10.0] - 2026-07-12
+
+### Added
+
+- Added an opt-in `/pet on|off` composer companion with idle gaze, working claw motion, and occasional automatic flex animation on Sixel- and Kitty-graphics terminals.
+- Added Grok 4.5 to the bundled Grok Build catalog with its published 500K context window, multimodal input and token pricing, normalized its official `grok-4.5-latest` and `grok-build-latest` aliases, and limited reasoning effort to the documented `low`, `medium`, and `high` levels.
+
+- Added `notifications.sessionScope` (`all` default | `primary`). Under `primary`, the separate-process child sessions GJC spawns (team workers, harness RPC owners) no longer register their own Telegram forum topic / notification endpoint unless they explicitly opt in (`GJC_NOTIFICATIONS=1`, the `/session_create` path). The default `all` fully preserves current behavior, and user-opened CLI/tmux/headless sessions are never affected. The provenance marker is per-spawn and non-dynastic (consumed once at session startup, never inherited by grandchildren) (#1908).
+- Coordinator MCP `gjc_coordinator_start_session` and the `gjc_delegate_plan`/`gjc_delegate_execute`/`gjc_delegate_team` tools now accept an optional `mpreset` argument that authoritatively activates a GJC model profile for a fresh session, with the same semantics as `gjc --mpreset <profile>` (#2003). The name is resolved through the merged built-in/custom profile registry before launch (so custom profiles keep working), legacy profile aliases are canonicalized exactly like the CLI (e.g. `codex-standard` → `codex-medium`), and the canonical profile is injected into the child startup command so the profile's default and per-role models apply from the first turn; unknown names are rejected with the available-profile listing and never reach a spawned command, and an unreadable/invalid `models.yml` fails closed with a distinct `model_profile_registry_error` rather than silently degrading to built-ins only. An explicit empty/whitespace `mpreset` is rejected rather than treated as omission. The effective profile is recorded on the session and surfaced in coordinator status/readback, reusing a session with a conflicting `mpreset` fails with a stable `mpreset_conflict` reason, and calls that omit `mpreset` keep their current behavior. The existing advisory `model` prompt hint is unchanged, and no machine-wide durable default is introduced (#2066 remains out of scope).
+
+- `notifications.telegram.topics.nameTemplate` configures the Telegram forum-topic title, with `{repo}`, `{branch}`, and `{title}` placeholders, so operators can put the session title first (e.g. `"{title} · {repo}/{branch}"`) and keep concurrent sessions on the same checkout distinguishable in the topic sidebar. The template applies only when every placeholder it references resolves for the session; otherwise the daemon falls back to the built-in `{repo}/{branch} - {title}` composition (and its title/repo/branch fallbacks). Unset preserves the current naming exactly (#1909).
+- Added the IRC chat-room surface: IRC messages persist in the main chat scrollback by default (no 10s TTL) with stable observation ids and a rebuild-aware ledger, and the agent is IRC-aware. Enabling `irc.sidebar.enabled` moves the persistent record into the opt-in `alt+i` sidebar split while inline display stays ephemeral. Message persistence and agent awareness are default-on; the sidebar panel itself is opt-in (#2018).
+- Added a transport-agnostic, secret-safe shared notification service (status, health, test delivery, ownership-protected recovery) consumed by both the `gjc notify` CLI and the cross-mode `/notify` slash command (TUI + ACP), so onboarding and daemon recovery no longer duplicate daemon/config logic per surface. `/notify` now exposes `status|health|test|recovery|setup` and `gjc notify` gains `health`/`test`/`recovery` with `--probe`/`--message` (#2050).
+- Added beginner-safe `gjc daemon` operational shortcuts sharing one operator contract so the guided human surface and machine-readable `--json` never drift: a `restart` alias that resolves to reload-if-running-else-spawn, concise per-daemon output by default with `--verbose`/`-v` for runtime detail and the full roots list, and an actionable structured recovery path when token/chat ownership mismatches instead of a large payload ending in `blocked`. Exit codes stay 0 on success / 1 on failure (#2057).
+- Added fail-closed ACP session deletion: the delete path refuses rather than proceeding when the target session cannot be safely resolved, and retains the inode in the replacement case (#2074).
+
+### Changed
+
+- Migrated the repository type-check and release declaration pipeline to stable TypeScript 7.0.2, including the robogjc web workspace and a non-mutating publish-type gate.
+- Rebalanced GPT-5.6 Codex and combo presets around published family tiers and reasoning-effort curves. The executor assignments are informed by descriptive repeated local exact-edit evidence from selected TypeScript tasks; default, planner, architect, and critic assignments remain product judgments rather than benchmark claims.
+- Cache-miss diagnostics now separate actionable, diagnostic-only, and provider-side-suspected causes instead of asserting a user-side fix for every miss (#2020). A large, costly miss with no cache reads or writes is reported as a neutral `Cache notice` marked "provider-side suspected / not user-actionable" (with what GJC cannot determine) rather than telling the user to keep a stable prefix; a miss with reads but no writes is reported as diagnostic-only without asserting a single cause; and the "cache write without enough matching reads" warning now only fires when reads actually fail to cover the writes. The existing miss cost summary and the #1929/#1936 pricing/provenance safeguards are unchanged.
+
+### Fixed
+
+- The coordinator MCP owner-server probe now recognizes tmux ≥3.7's missing-server diagnostic (`error connecting to <socket> (No such file or directory)`) as an absent server. tmux 3.7 changed the wording from the older `no server running on <socket>`, which the coordinator probe did not match — so a brand-new coordinator socket (which never has a server yet) was misclassified `unverifiable` instead of `absent`, and **every** `gjc_delegate_*` / session create failed closed with `coordinator_tmux_owner_server_unverifiable` on tmux ≥3.7. The coordinator and `gjc` harness probes now match the same no-server wordings the other owner-isolation probes already did.
+- Preserved explicit Telegram forum-topic renames as durable user-owned names, immediately re-asserting delayed edits while retaining restart and rename-race recovery (#1910).
+- Prevented typed provider safety stops from entering automatic retry loops and aligned ACP refusal reporting with the provider-native classification.
+- `gjc resume` now aliases value-less `--resume`, requests confirmation before opening and continues a resumable tail once only; terminal tails open idle, and headless bare resume exits with explicit `--resume <id>` guidance (#1973).
+- Telegram answers to interactive and unattended `ask` prompts now receive a semantic, origin-bound `Selected!` acknowledgement before workflow continuation, with typed multi-select controls, no acknowledgement for toggles/clarifications/skips, at-most-once delivery attempts, and truthful failure/unknown outcomes (#1974).
+- Isolated unsafe Linux/systemd tmux owners into independently proven user scopes before server creation, added generation-bound exact-SIGTERM shutdown verdicts and deduplicated incident/recovery provenance, and removed pane payloads from raw session lifecycle evidence (#1938).
+- Coordinator MCP stdio server now dispatches JSON-RPC requests with bounded concurrency and answers the standard `ping` utility, so a long-running tool call (e.g. `gjc_coordinator_await_turn`, which polls for minutes) no longer starves keepalive on the same channel — without the state/lifecycle races unbounded concurrency would introduce. Same-session mutations (notably `send_prompt`) serialize through a per-session lock so concurrent calls can no longer persist two "active" turns; `ping` is a reserved control frame that bypasses the data-concurrency cap; data-handler fanout is bounded (excess rejected as `server_busy`); `writeLine` failures are terminal instead of poisoning the write chain; and EOF drains in-flight handlers under a bounded timeout before returning.
+- Prevented best-effort coordinator runtime-state persistence from surfacing unhandled rejections when a session root disappears during teardown, preserved public-safe coordinator errors including bounded-concurrent handler failures, bound tmux GC pruning to the collected native session identity and owner generation so same-name replacements are never removed, and preserved subsecond ordering between canonical verdict artifacts and their evidence receipts (#1938).
+- The `browser` `close`/`close all` tool now enforces one end-to-end deadline (the existing `timeout` option, default 30s) across the whole teardown chain — `releaseAllTabs`, `waitForClosed`, `worker.terminate()`, and `releaseBrowser()`/`disposeBrowserHandle()` — so an externally CDP-connected target dying mid-close can no longer hang or terminate the calling agent session. Steps that exceed the shared budget are detached best-effort with their rejections swallowed (no unhandled rejections, no worker/browser/tab registry leaks, timers cleaned up); the tool always settles with a close count or a structured error, and normal live-target close semantics are unchanged (#2027).
+- Pre-prompt context estimates now anchor on the last successful assistant's total usage (input + cache + output) instead of prompt-only tokens, and skip error/aborted turns when picking the anchor, so a large-reasoning turn (e.g. GPT-5.6 Sol at high efforts) no longer vanishes from the estimate right before the next request. The compaction token-correction ratio likewise no longer counts the anchor assistant's own output in its heuristic denominator, since that output was the anchored request's response rather than part of its prompt.
+- The coordinator MCP tmux owner-server probe (`probeServer`: `tmux list-sessions` plus a portable `ps` incarnation read) now tolerates transient spawn failures. Under load a momentary `Bun.spawn` failure (e.g. `EAGAIN`, or a brief tmux/`ps` hiccup) threw straight out of the probe, and because `proveCoordinatorOwnerServer` only retries on non-safe *state* — not on a thrown exception — a single blip aborted the whole delegate immediately with `coordinator_tmux_owner_server_unverifiable` (a ~0.03s hard failure). The probe now surfaces a transient failure as an `unverifiable` state so the existing bounded retry loop can re-probe once it clears; owner isolation is unchanged (`unverifiable` still fails closed, creating no session).
+- Coordinator-created tmux sessions now require an immutable, launch-bound runtime readiness marker before any prompt keys are injected, preventing early input races and preserving recoverable readiness-timeout evidence (#2009).
+- Unsent-context token estimates are now script-aware (CJK characters charged near 1 token/char instead of chars/4), and the per-message delta estimate is no longer cached: the compaction-threshold decision always recomputes from current content, so an in-place mutation (e.g. a same-length ASCII→CJK edit) can never gate the threshold with a stale 4x-undercounted estimate.
+- Capability-gated controlled ask delivery per connection: clients default-deny until they negotiate `ask_controls_v1`, renegotiate after reconnect, and receive the additive non-actionable `action_unavailable` frame instead of stripped option buttons when non-capable (#2029).
+- `NotificationServer#pushFrame` now rejects `ActionNeeded` frames; emit asks and idle notifications through `registerAsk` / `noteIdle` so controlled asks remain capability-gated per connection (#2029).
+- A rolling/in-place upgrade that left a still-live pre-upgrade Telegram daemon owning the lock is now reloaded instead of silently attached. The old daemon speaks the pre-#1999 wire protocol without ask-ack/controls, so its `Selected!` acknowledgements were dropped; an operational `DAEMON_GENERATION` (tied to `NOTIFICATION_PROTOCOL_VERSION`) now flags a fresh live owner running an older generation as reload-required, and the new host registers its session root then hands off through the cooperative SIGTERM/control path (#2028).
+- A numeric gate reply is an option index: an out-of-range index is no longer accepted as free-text `Other`. `mapAnswerToGate` returns a discriminated result and the unattended handler closes the exact claim/receipt and reissues instead of durably accepting or emitting a `Selected!` ack; the JSON-string free-text path is preserved (#2030).
+
 ## [0.9.6] - 2026-07-10
 ### Changed
 
 - Moved the `codex-eco`/`codex-medium`/`codex-pro` presets and the `opus-codex`/`codex-opencodego`/`fable-opus-codex` combo presets from `gpt-5.5` onto the GPT-5.6 tier family: Sol drives `default` and `architect` on every codex preset (eco `sol:medium`, medium `sol:high`, pro `sol:xhigh`/`sol:max`), with Luna/Terra covering the lighter executor/planner/critic roles by tier.
+### Fixed
+
+- Corrected launch-update guidance: only recognized Bun global installs, recognized Windows npm installs, and supported bundled-installer binaries may use `gjc update`; source checkouts and dev links must use their checkout workflow, while unrecognized package-manager or PATH installs must use their original update method. Successful updates require authoritative post-update version and smoke verification.
 
 ### Fixed
 

package/dist/types/cli/classify-install-target.d.ts

@@ -1,13 +1,3 @@
-/**
- * Classify an install spec as a marketplace plugin reference or a plain npm package.
- *
- * Rules (applied in order):
- *  1. Starts with `@` (scoped npm) -> always npm.
- *  2. Contains `@` after the first character -> split on the LAST `@`.
- *     If the right-hand side is a known marketplace name, it's a marketplace ref.
- *     Otherwise it's an npm spec (e.g. `pkg@1.2.3`).
- *  3. No `@` -> npm.
- */
 export declare function classifyInstallTarget(spec: string, knownMarketplaces: Set<string>): {
     type: "marketplace";
     name: string;

package/dist/types/cli/daemon-cli.d.ts

@@ -16,6 +16,8 @@ export interface DaemonCommandArgs {
     gracefulTimeoutMs?: number;
     killTimeoutMs?: number;
     spawnIfStopped?: boolean;
+    /** Show runtime detail and the full roots list in human output. */
+    verbose?: boolean;
 }
 export interface DaemonCommandDeps {
     settings?: Settings;

package/dist/types/cli/initial-message.d.ts

@@ -14,4 +14,4 @@ export interface InitialMessageResult {
  * Combine stdin content, @file text, and the first CLI message into a single
  * initial prompt for non-interactive mode.
  */
-export declare function buildInitialMessage({ parsed, fileText, fileImages, stdinContent }: InitialMessageInput): InitialMessageResult;
+export declare function buildInitialMessage({ parsed, fileText, fileImages, stdinContent, }: InitialMessageInput): InitialMessageResult;

package/dist/types/cli/malloc-env-guard.d.ts

@@ -0,0 +1,65 @@
+/**
+ * macOS malloc-stack-logging launch boundary.
+ *
+ * On macOS, an inherited `MallocStackLogging` / `MallocStackLoggingNoCompact`
+ * environment variable (from an Xcode scheme's malloc diagnostics, Instruments,
+ * `launchctl setenv`, or a debug-attached shell) makes libmalloc print
+ *
+ *   MallocStackLogging: can't turn off malloc stack logging because it was not enabled.
+ *
+ * to the stderr of every TTY-attached process. Bun snapshots the spawn-default
+ * environment at process startup — before any JS runs — so neither
+ * `delete process.env.X` nor a real libc `unsetenv()` cleans the environment
+ * that children inherit by default (verified on Bun 1.3.14). Inside the TUI,
+ * every PTY-spawned child then repeats the warning straight into the rendered
+ * frame and corrupts the display.
+ *
+ * The only way to hand children a clean startup snapshot is to start the primary
+ * process with a clean environment. This module re-execs the exact invocation
+ * once (darwin-only) with a `filterProcessEnv`-scrubbed environment and a
+ * `GJC_MALLOC_ENV_REEXEC` loop guard, before any fast path or subprocess spawn.
+ * The re-exec'd process — and therefore every downstream lane: `Bun.spawn`
+ * defaults, `node:child_process`, the native PTY, the tmux owner, plugin
+ * installs, and subagents — starts from a clean snapshot.
+ *
+ * The initial contaminated process's own libmalloc line is emitted by libc
+ * before any JS runs and cannot be suppressed from inside the process; it
+ * appears at most once per launch. A one-time actionable notice is written to
+ * interactive stderr (outside the rendered frame) pointing at the permanent
+ * `launchctl unsetenv` fix.
+ */
+/** Env vars that make macOS libmalloc write to a TTY when inherited. */
+export declare const MACOS_MALLOC_ENV_VARS: readonly ["MallocStackLogging", "MallocStackLoggingNoCompact"];
+/** Loop guard set on the scrubbed re-exec so it never re-execs itself again. */
+export declare const MALLOC_ENV_REEXEC_GUARD = "GJC_MALLOC_ENV_REEXEC";
+/** True when at least one macOS malloc-stack-logging var is present in `env`. */
+export declare function hasMacOSMallocEnv(env: Record<string, string | undefined>): boolean;
+/**
+ * True iff we must re-exec to escape a contaminated macOS startup snapshot:
+ * darwin, not already inside the scrubbed re-exec, and at least one malloc var
+ * present. Off darwin or on the re-exec'd child this is always false, so the
+ * common launch path pays only two cheap lookups.
+ */
+export declare function shouldReexecForMacOSMallocEnv(env: Record<string, string | undefined>, platform: NodeJS.Platform): boolean;
+/**
+ * Reconstruct the argv that re-runs the exact same program image.
+ *
+ * - Compiled single-file executable: argv[1] is the embedded virtual entry
+ *   (`/$bunfs/…` on POSIX, `B:\~BUN\…` on Windows), which must be dropped — the
+ *   executable re-embeds its own entry. Re-run `[exe, ...userArgs]`.
+ * - Source / dev-link run: argv[1] is the on-disk script that must be passed
+ *   back to the interpreter. Re-run `[interpreter, script, ...userArgs]`.
+ */
+export declare function buildMallocReexecArgv(argv: readonly string[], execPath: string): string[];
+/** One-time, human-actionable notice pointing at the permanent environment fix. */
+export declare function formatMallocEnvNotice(): string;
+/**
+ * Re-exec the current process once with a scrubbed environment and propagate the
+ * child's exit code. Callers MUST gate this behind `shouldReexecForMacOSMallocEnv`.
+ *
+ * Returns the child exit code, or `null` if the re-exec could not be spawned (in
+ * which case the caller falls back to running in the current, contaminated
+ * process — degraded but functional; the native PTY boundary and
+ * `filterProcessEnv` still keep managed children clean).
+ */
+export declare function reexecWithScrubbedMallocEnv(): Promise<number | null>;

package/dist/types/cli/malloc-env-guard.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/types/cli/notify-cli.d.ts

@@ -1,5 +1,5 @@
 import type { Settings } from "../config/settings";
-export type NotifyAction = "setup" | "status" | "daemon-internal";
+export type NotifyAction = "setup" | "status" | "health" | "test" | "recovery" | "daemon-internal";
 export interface NotifyCommandArgs {
     action: NotifyAction;
     smoke?: boolean;
@@ -7,6 +7,8 @@ export interface NotifyCommandArgs {
     token?: string;
     chatId?: string;
     redact?: boolean;
+    probe?: boolean;
+    message?: string;
 }
 export interface NotifyCommandDeps {
     fetchImpl?: typeof fetch;

package/dist/types/cli/session-picker.d.ts

@@ -1,3 +1,4 @@
-import type { SessionInfo } from "../session/session-manager";
-/** Show TUI session selector and return selected session path or null if cancelled */
-export declare function selectSession(sessions: SessionInfo[]): Promise<string | null>;
+import { type SessionSelectionResult } from "../modes/components/session-selector";
+import { type SessionInfo } from "../session/session-manager";
+/** Show the read-only TUI session picker and return the user's consent intent. */
+export declare function selectSession(sessions: SessionInfo[]): Promise<SessionSelectionResult>;

package/dist/types/cli/update-cli.d.ts

@@ -1,3 +1,7 @@
+interface ReleaseInfo {
+    tag: string;
+    version: string;
+}
 /** Result from running the installed binary and parsing its reported version. */
 export interface InstalledVersionVerification {
     ok: boolean;
@@ -17,7 +21,6 @@ export interface PackageManagerUpdateOptions {
     expectedVersion: string;
     runInstall: PackageManagerUpdateRunner;
     verifyInstalledRuntime: (expectedVersion: string) => Promise<InstalledVersionVerification>;
-    printVerificationResult?: (expectedVersion: string) => Promise<void>;
     printRecoveredVerification?: (expectedVersion: string) => void;
 }
 /** Paths and verifier used while replacing a downloaded binary update. */
@@ -36,10 +39,19 @@ export declare function parseUpdateArgs(args: string[]): {
     force: boolean;
     check: boolean;
 } | undefined;
-type PackageManagerTarget = {
+export type PackageManagerTarget = {
     manager: "npm";
     packageName: string;
 };
+export type UpdateTarget = {
+    method: "bun";
+} | {
+    method: "npm";
+    packageName: string;
+} | {
+    method: "binary";
+    path: string;
+};
 type PathPlatform = NodeJS.Platform;
 type PackageExists = (packageName: string, packageRoot: string) => boolean;
 export declare function resolveUpdateMethodForTest(ompPath: string, bunBinDir: string | undefined): "bun" | "npm" | "binary";
@@ -78,10 +90,17 @@ export declare function runBinaryUpdateFlow(targetPath: string, url: string, exp
 /**
  * Run the update command.
  */
+export interface UpdateCommandDependencies {
+    getLatestRelease?: () => Promise<ReleaseInfo>;
+    resolveUpdateTarget?: () => Promise<UpdateTarget>;
+    performUpdate?: (target: UpdateTarget, expectedVersion: string) => Promise<void>;
+    refreshInstalledDefaultSkills?: () => Promise<void>;
+    exit?: (code: number) => never;
+}
 export declare function runUpdateCommand(opts: {
     force: boolean;
     check: boolean;
-}): Promise<void>;
+}, deps?: UpdateCommandDependencies): Promise<void>;
 /**
  * Print update command help.
  */

package/dist/types/cli.d.ts

@@ -3,6 +3,7 @@
  * CLI entry point — registers all commands explicitly and delegates to the
  * lightweight CLI runner from pi-utils.
  */
+import "@gajae-code/utils/postmortem";
 import { Command, type CommandEntry } from "@gajae-code/utils/cli";
 export declare const commands: CommandEntry[];
 export declare class RootHelpCommand extends Command {
@@ -131,5 +132,9 @@ export declare class RootHelpCommand extends Command {
     static strict: boolean;
     run(): Promise<void>;
 }
+/** Normalize the sole `gjc resume` alias into the value-less launch intent. */
+export declare function normalizeResumeAlias(argv: readonly string[]): string[];
+/** Apply the same default-launch routing used by runCli after root fast paths. */
+export declare function routeRootArgv(argv: readonly string[]): string[];
 /** Run the CLI with the given argv (no `process.argv` prefix). */
 export declare function runCli(argv: string[]): Promise<void>;

package/dist/types/commands/daemon.d.ts

@@ -2,14 +2,14 @@
  * Manage GJC background daemons (status/list/stop/reload).
  */
 import { Command } from "@gajae-code/utils/cli";
-import { type DaemonCliAction } from "../cli/daemon-cli";
 export default class Daemon extends Command {
     static description: string;
+    static examples: string[];
     static args: {
         action: import("@gajae-code/utils/cli").ArgDescriptor & {
             description: string;
             required: false;
-            options: DaemonCliAction[];
+            options: string[];
         };
         kind: import("@gajae-code/utils/cli").ArgDescriptor & {
             description: string;
@@ -18,6 +18,10 @@ export default class Daemon extends Command {
         };
     };
     static flags: {
+        verbose: import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
+            char: string;
+            description: string;
+        };
         all: import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
             description: string;
         };

package/dist/types/commands/launch.d.ts

@@ -2,6 +2,7 @@
  * Root command for the coding agent CLI.
  */
 import { Command } from "@gajae-code/utils/cli";
+export declare function persistCoordinatorLaunchFailure(error: unknown, cwd: string, env?: NodeJS.ProcessEnv): Promise<void>;
 export default class Index extends Command {
     static description: string;
     static hidden: boolean;

package/dist/types/commands/notify.d.ts

@@ -30,6 +30,12 @@ export default class Notify extends Command {
         redact: import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
             description: string;
         };
+        probe: import("@gajae-code/utils/cli").FlagDescriptor<"boolean"> & {
+            description: string;
+        };
+        message: import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+        };
         "owner-id": import("@gajae-code/utils/cli").FlagDescriptor<"string"> & {
             description: string;
         };

package/dist/types/commit/analysis/conventional.d.ts

@@ -19,4 +19,4 @@ export interface ConventionalAnalysisInput {
 /**
  * Generate conventional analysis data from a diff and metadata.
  */
-export declare function generateConventionalAnalysis({ model, apiKey, thinkingLevel, contextFiles, userContext, typesDescription, recentCommits, scopeCandidates, stat, diff }: ConventionalAnalysisInput): Promise<ConventionalAnalysis>;
+export declare function generateConventionalAnalysis({ model, apiKey, thinkingLevel, contextFiles, userContext, typesDescription, recentCommits, scopeCandidates, stat, diff, }: ConventionalAnalysisInput): Promise<ConventionalAnalysis>;

package/dist/types/commit/analysis/summary.d.ts

@@ -15,5 +15,5 @@ export interface SummaryInput {
 /**
  * Generate a commit summary line for the conventional commit header.
  */
-export declare function generateSummary({ model, apiKey, thinkingLevel, commitType, scope, details, stat, maxChars, userContext }: SummaryInput): Promise<CommitSummary>;
+export declare function generateSummary({ model, apiKey, thinkingLevel, commitType, scope, details, stat, maxChars, userContext, }: SummaryInput): Promise<CommitSummary>;
 export declare function stripTypePrefix(summary: string, commitType: string, scope: string | null): string;

package/dist/types/commit/changelog/generate.d.ts

@@ -27,4 +27,4 @@ export interface ChangelogPromptInput {
     stat: string;
     diff: string;
 }
-export declare function generateChangelogEntries({ model, apiKey, thinkingLevel, changelogPath, isPackageChangelog, existingEntries, stat, diff }: ChangelogPromptInput): Promise<ChangelogGenerationResult>;
+export declare function generateChangelogEntries({ model, apiKey, thinkingLevel, changelogPath, isPackageChangelog, existingEntries, stat, diff, }: ChangelogPromptInput): Promise<ChangelogGenerationResult>;

package/dist/types/commit/changelog/index.d.ts

@@ -23,8 +23,8 @@ export interface ChangelogProposalInput {
 /**
  * Update CHANGELOG.md entries for staged changes.
  */
-export declare function runChangelogFlow({ cwd, model, apiKey, thinkingLevel, stagedFiles, dryRun, maxDiffChars, onProgress }: ChangelogFlowInput): Promise<string[]>;
+export declare function runChangelogFlow({ cwd, model, apiKey, thinkingLevel, stagedFiles, dryRun, maxDiffChars, onProgress, }: ChangelogFlowInput): Promise<string[]>;
 /**
  * Apply changelog entries provided by the commit agent.
  */
-export declare function applyChangelogProposals({ cwd, proposals, dryRun, onProgress }: ChangelogProposalInput): Promise<string[]>;
+export declare function applyChangelogProposals({ cwd, proposals, dryRun, onProgress, }: ChangelogProposalInput): Promise<string[]>;

package/dist/types/commit/map-reduce/map-phase.d.ts

@@ -14,4 +14,4 @@ export interface MapPhaseInput {
         retryBackoffMs?: number;
     };
 }
-export declare function runMapPhase({ model, apiKey, thinkingLevel, files, config }: MapPhaseInput): Promise<FileObservation[]>;
+export declare function runMapPhase({ model, apiKey, thinkingLevel, files, config, }: MapPhaseInput): Promise<FileObservation[]>;

package/dist/types/commit/map-reduce/reduce-phase.d.ts

@@ -10,4 +10,4 @@ export interface ReducePhaseInput {
     scopeCandidates: string;
     typesDescription?: string;
 }
-export declare function runReducePhase({ model, apiKey, thinkingLevel, observations, stat, scopeCandidates, typesDescription }: ReducePhaseInput): Promise<ConventionalAnalysis>;
+export declare function runReducePhase({ model, apiKey, thinkingLevel, observations, stat, scopeCandidates, typesDescription, }: ReducePhaseInput): Promise<ConventionalAnalysis>;

package/dist/types/config/keybindings.d.ts

@@ -40,6 +40,7 @@ interface AppKeybindings {
     "app.plan.toggle": true;
     "app.history.search": true;
     "app.stt.toggle": true;
+    "app.irc.sidebar.toggle": true;
 }
 export type AppKeybinding = keyof AppKeybindings;
 declare module "@gajae-code/tui" {
@@ -323,6 +324,10 @@ export declare const KEYBINDINGS: {
         readonly defaultKeys: "alt+h";
         readonly description: "Toggle speech-to-text";
     };
+    readonly "app.irc.sidebar.toggle": {
+        readonly defaultKeys: "alt+i";
+        readonly description: "Toggle IRC sidebar";
+    };
 };
 declare function migrateKeybindingsConfigFile(agentDir: string): void;
 /**

package/dist/types/config/model-profile-activation.d.ts

@@ -58,6 +58,7 @@ export interface MaterializeModelProfileAssignmentsOptions {
 export declare function materializeActiveModelProfileAssignment(options: MaterializeModelProfileAssignmentOptions): boolean;
 export declare function materializeActiveModelProfileAssignments(options: MaterializeModelProfileAssignmentsOptions): boolean;
 export declare function formatModelProfileCredentialError(profileLabel: string, providers: readonly string[]): string;
+export declare function resolveModelProfileName(profileName: string, profiles: ReadonlyMap<string, unknown>): string;
 export declare function prepareModelProfileActivation(options: PrepareModelProfileActivationOptions): Promise<PreparedModelProfileActivation>;
 export declare function applyPreparedModelProfileActivation(prepared: PreparedModelProfileActivation, options?: ApplyModelProfileActivationOptions): Promise<void>;
 export interface MaterializeModelProfileForDeletionResult {

package/dist/types/config/settings-schema.d.ts

@@ -138,6 +138,10 @@ export declare const SETTINGS_SCHEMA: {
         readonly type: "boolean";
         readonly default: false;
     };
+    readonly "notifications.telegram.topics.nameTemplate": {
+        readonly type: "string";
+        readonly default: undefined;
+    };
     readonly "notifications.discord.botToken": {
         readonly type: "string";
         readonly default: undefined;
@@ -163,6 +167,11 @@ export declare const SETTINGS_SCHEMA: {
         readonly default: "lean";
         readonly validate: (value: string) => value is "lean" | "verbose";
     };
+    readonly "notifications.sessionScope": {
+        readonly type: "string";
+        readonly default: "all";
+        readonly validate: (value: string) => value is "all" | "primary";
+    };
     readonly "notifications.daemon.idleTimeoutMs": {
         readonly type: "number";
         readonly default: 60000;
@@ -448,6 +457,25 @@ export declare const SETTINGS_SCHEMA: {
             readonly description: "Use the session name color for the editor border and status line gap";
         };
     };
+    readonly "pet.mode": {
+        readonly type: "enum";
+        readonly values: readonly ["off", "red", "blue"];
+        readonly default: "off";
+        readonly ui: {
+            readonly tab: "appearance";
+            readonly label: "Gajae Pet";
+            readonly description: "16x16 real-pixel gajae living beside the composer (sixel/kitty terminals)";
+            readonly options: readonly [{
+                readonly value: "off";
+                readonly label: "Off";
+                readonly description: "No pet";
+            }, ...{
+                value: "blue" | "red";
+                label: string;
+                description: string;
+            }[]];
+        };
+    };
     readonly "statusLine.maxRows": {
         readonly type: "number";
         readonly default: 1;
@@ -636,7 +664,7 @@ export declare const SETTINGS_SCHEMA: {
         readonly ui: {
             readonly tab: "tools";
             readonly label: "Artifact head size (KB)";
-            readonly description: "Amount of head content kept inline alongside the tail when output spills to artifact (middle elision). 0 disables \u2014 keep tail only.";
+            readonly description: "Amount of head content kept inline alongside the tail when output spills to artifact (middle elision). 0 disables — keep tail only.";
             readonly options: readonly [{
                 readonly value: "0";
                 readonly label: "0 KB";
@@ -1434,7 +1462,7 @@ export declare const SETTINGS_SCHEMA: {
         readonly ui: {
             readonly tab: "interaction";
             readonly label: "Check for Updates";
-            readonly description: "If false, skip update check";
+            readonly description: "At interactive startup, notify of newer versions; never install. Use `gjc update` only for recognized Bun global, Windows npm, or bundled-installer binaries; source, linked, and unrecognized installs use their original method.";
         };
     };
     readonly "starReminder.enabled": {
@@ -1969,11 +1997,11 @@ export declare const SETTINGS_SCHEMA: {
             readonly options: readonly [{
                 readonly value: "global";
                 readonly label: "Global";
-                readonly description: "One shared bank \u2014 every project sees the same memories";
+                readonly description: "One shared bank — every project sees the same memories";
             }, {
                 readonly value: "per-project";
                 readonly label: "Per project";
-                readonly description: "Isolated bank per cwd basename \u2014 projects cannot see each other's memories";
+                readonly description: "Isolated bank per cwd basename — projects cannot see each other's memories";
             }, {
                 readonly value: "per-project-tagged";
                 readonly label: "Per project (tagged)";
@@ -2073,7 +2101,7 @@ export declare const SETTINGS_SCHEMA: {
         readonly ui: {
             readonly tab: "memory";
             readonly label: "Hindsight Mental Models";
-            readonly description: "Read curated reflect summaries (mental models) into developer instructions at boot. Loads existing models on the bank \u2014 does not write. Pair with hindsight.mentalModelAutoSeed to also auto-create the built-in seed set.";
+            readonly description: "Read curated reflect summaries (mental models) into developer instructions at boot. Loads existing models on the bank — does not write. Pair with hindsight.mentalModelAutoSeed to also auto-create the built-in seed set.";
             readonly condition: "hindsightActive";
         };
     };
@@ -2111,7 +2139,7 @@ export declare const SETTINGS_SCHEMA: {
         readonly ui: {
             readonly tab: "context";
             readonly label: "TTSR Context Mode";
-            readonly description: "What to do with partial output when TTSR triggers. 'discard' (recommended) drops the aborted partial turn so it never accumulates in context. 'keep' retains every aborted partial turn, which grows the token footprint each time a rule fires \u2014 prefer 'discard' unless you specifically need the partial output.";
+            readonly description: "What to do with partial output when TTSR triggers. 'discard' (recommended) drops the aborted partial turn so it never accumulates in context. 'keep' retains every aborted partial turn, which grows the token footprint each time a rule fires — prefer 'discard' unless you specifically need the partial output.";
         };
     };
     readonly "ttsr.interruptMode": {
@@ -2594,6 +2622,15 @@ export declare const SETTINGS_SCHEMA: {
             readonly description: "Enable agent-to-agent IRC messaging via the irc tool";
         };
     };
+    readonly "irc.sidebar.enabled": {
+        readonly type: "boolean";
+        readonly default: true;
+        readonly ui: {
+            readonly tab: "tools";
+            readonly label: "IRC Sidebar";
+            readonly description: "Enable the IRC message sidebar (opens with the toggle key; starts closed)";
+        };
+    };
     readonly "renderMermaid.enabled": {
         readonly type: "boolean";
         readonly default: false;
@@ -3414,7 +3451,7 @@ export declare const SETTINGS_SCHEMA: {
             }, {
                 readonly value: "duckduckgo";
                 readonly label: "DuckDuckGo";
-                readonly description: "Keyless default \u2014 no API key or OAuth required";
+                readonly description: "Keyless default — no API key or OAuth required";
             }, {
                 readonly value: "insane";
                 readonly label: "Insane";
@@ -3866,6 +3903,9 @@ export interface NotificationsSettings {
         richDraft: {
             enabled: boolean;
         };
+        topics: {
+            nameTemplate: string | undefined;
+        };
     };
     discord: {
         botToken: string | undefined;

package/dist/types/config/settings.d.ts

@@ -115,6 +115,8 @@ export declare class Settings {
      * Set a model role (helper for modelRoles record).
      */
     setModelRole(role: ModelRole | string, modelId: string): void;
+    setGlobalModelRole(role: ModelRole | string, modelId: string | undefined): void;
+    setGlobalModelRoleAndFlush(role: ModelRole | string, modelId: string | undefined): Promise<void>;
     /**
      * Set an agent model override while keeping any live runtime override aligned.
      *

package/dist/types/coordinator/contract.d.ts

@@ -1,4 +1,4 @@
 export declare const COORDINATOR_MCP_PROTOCOL_VERSION = "2024-11-05";
 export declare const COORDINATOR_MCP_SERVER_NAME = "gjc-coordinator-mcp";
-export declare const COORDINATOR_MCP_TOOL_NAMES: readonly ["gjc_coordinator_list_sessions", "gjc_coordinator_read_status", "gjc_coordinator_read_tail", "gjc_coordinator_list_questions", "gjc_coordinator_list_artifacts", "gjc_coordinator_read_artifact", "gjc_coordinator_read_coordination_status", "gjc_coordinator_watch_events", "gjc_coordinator_register_session", "gjc_coordinator_start_session", "gjc_coordinator_send_prompt", "gjc_coordinator_submit_question_answer", "gjc_coordinator_read_turn", "gjc_coordinator_await_turn", "gjc_coordinator_report_status", "gjc_delegate_plan", "gjc_delegate_execute", "gjc_delegate_team"];
+export declare const COORDINATOR_MCP_TOOL_NAMES: readonly ["gjc_coordinator_list_sessions", "gjc_coordinator_read_status", "gjc_coordinator_read_tail", "gjc_coordinator_list_questions", "gjc_coordinator_list_artifacts", "gjc_coordinator_read_artifact", "gjc_coordinator_read_coordination_status", "gjc_coordinator_watch_events", "gjc_coordinator_register_session", "gjc_coordinator_start_session", "gjc_coordinator_stop_session", "gjc_coordinator_send_prompt", "gjc_coordinator_submit_question_answer", "gjc_coordinator_read_turn", "gjc_coordinator_await_turn", "gjc_coordinator_report_status", "gjc_delegate_plan", "gjc_delegate_execute", "gjc_delegate_team"];
 export type CoordinatorToolName = (typeof COORDINATOR_MCP_TOOL_NAMES)[number];

package/dist/types/coordinator-mcp/model-preset.d.ts

@@ -0,0 +1,45 @@
+import { type ModelProfileDefinition } from "../config/model-profiles";
+/**
+ * Loads the merged built-in + custom model-profile registry the way the `gjc`
+ * CLI resolves `--mpreset`, so coordinator MCP launches select the same
+ * authoritative profile the spawned child will activate. Custom profiles live
+ * in the shared models config, which the child inherits, so both sides agree.
+ */
+export type CoordinatorModelProfileLoader = () => Map<string, ModelProfileDefinition> | Promise<Map<string, ModelProfileDefinition>>;
+/**
+ * Thrown by the default loader when `models.yml` exists but is invalid or
+ * unreadable. This lets the resolver fail closed with a distinct, stable reason
+ * instead of silently collapsing a broken registry to the built-ins-only set
+ * (which would misreport a caller's valid custom profile as unknown).
+ */
+export declare class CoordinatorModelProfileRegistryError extends Error {
+    constructor(cause?: unknown);
+}
+export declare const loadCoordinatorModelProfiles: CoordinatorModelProfileLoader;
+export type CoordinatorMpresetResolution = {
+    ok: true;
+    mpreset: string | null;
+} | {
+    ok: false;
+    reason: "unknown_model_profile";
+    mpreset: string;
+    available_profiles: string[];
+} | {
+    ok: false;
+    reason: "model_profile_registry_error";
+    mpreset: string;
+    available_profiles: string[];
+};
+/**
+ * Resolve a coordinator `mpreset` argument against the merged profile registry.
+ *
+ * Only an absent (`undefined`/`null`) value is a no-op (`mpreset: null`); an
+ * explicit empty/whitespace string is a caller error and is rejected rather
+ * than silently launching at the default tier. Legacy aliases are canonicalized
+ * exactly like the CLI (e.g. `codex-standard` -> `codex-medium`) so coordinator
+ * selection stays in parity with `gjc --mpreset <profile>`; the resolved value
+ * is the canonical profile name. Unknown names are rejected with the
+ * available-profile listing and never reach a spawned child command, and a
+ * broken registry fails closed with `model_profile_registry_error`.
+ */
+export declare function resolveCoordinatorMpreset(raw: unknown, loadProfiles: CoordinatorModelProfileLoader): Promise<CoordinatorMpresetResolution>;

package/dist/types/coordinator-mcp/policy.d.ts

@@ -10,6 +10,9 @@ export interface CoordinatorMcpConfig {
     namespace: CoordinatorNamespace;
     stateRoot: string;
     sessionCommand: string | null;
+    sessionIdleTtlMs: number;
+    sessionSweepIntervalMs: number;
+    forceStopEnabled: boolean;
 }
 export interface CoordinatorMutationRequest {
     allow_mutation?: boolean;