@sayknow-cli/coding-agent 0.2.7 → 0.3.1

package/dist/types/extensibility/extensions/types.d.ts

@@ -20,6 +20,7 @@ import type { PythonResult } from "../../eval/py/executor";
 import type { BashResult } from "../../exec/bash-executor";
 import type { ExecOptions, ExecResult } from "../../exec/exec";
 import type { CustomEditor } from "../../modes/components/custom-editor";
+import type { WorkflowGateEmitter } from "../../modes/shared/agent-wire/unattended-session";
 import type { Theme } from "../../modes/theme/theme";
 import type { CustomMessage } from "../../session/messages";
 import type { ReadonlySessionManager, SessionManager } from "../../session/session-manager";
@@ -206,6 +207,11 @@ export interface ExtensionContext {
     getSystemPrompt(): string[];
     /** @deprecated Use hasPendingMessages() instead */
     hasQueuedMessages(): boolean;
+    /**
+     * Unattended workflow-gate bridge. Present only when the session runs in
+     * unattended/RPC mode; `undefined` in interactive/TUI mode (notify-only).
+     */
+    workflowGate?: WorkflowGateEmitter;
 }
 /**
  * Extended context for command handlers.
@@ -834,6 +840,8 @@ export interface ExtensionContextActions {
     getContextUsage: () => ContextUsage | undefined;
     compact: (instructionsOrOptions?: string | CompactOptions) => Promise<void>;
     getSystemPrompt: () => string[];
+    /** Unattended workflow-gate bridge (present only in unattended/RPC mode). */
+    getWorkflowGate?: () => WorkflowGateEmitter | undefined;
 }
 /** Actions for ExtensionCommandContext (ctx.* in command handlers). */
 export interface ExtensionCommandContextActions {

package/dist/types/extensibility/shared-events.d.ts

@@ -172,6 +172,7 @@ export interface AutoCompactionEndEvent {
     errorMessage?: string;
     /** True when compaction was skipped for a benign reason (no model, no candidates, nothing to compact). */
     skipped?: boolean;
+    continuationSkipReason?: "auto_continue_disabled_non_resumable_tail";
 }
 /** Fired when auto-retry starts */
 export interface AutoRetryStartEvent {

package/dist/types/i18n/messages/en.d.ts

@@ -30,6 +30,7 @@ export declare const en: {
     readonly "settings.tab.appearance": "Appearance";
     readonly "settings.tab.model": "Model";
     readonly "settings.tab.interaction": "Interaction";
+    readonly "settings.tab.notifications": "Notifications";
     readonly "settings.tab.context": "Context";
     readonly "settings.tab.memory": "Memory";
     readonly "settings.tab.editing": "Editing";

package/dist/types/lsp/types.d.ts

@@ -224,6 +224,8 @@ export interface ServerConfig {
     /** Per-server warmup timeout in milliseconds. Overrides the global WARMUP_TIMEOUT_MS for this server during startup. */
     warmupTimeoutMs?: number;
     capabilities?: ServerCapabilities;
+    /** Names of lower-precedence servers to drop when this server is available. */
+    supersedes?: string[];
     /** If true, this is a linter/formatter server (e.g., Biome) - used only for diagnostics/actions, not type intelligence */
     isLinter?: boolean;
     /** Resolved absolute path to the command binary (set during config loading) */

package/dist/types/modes/components/oauth-selector.d.ts

@@ -1,5 +1,6 @@
 import { Container } from "@sayknow-cli/tui";
 import type { AuthStorage } from "../../session/auth-storage";
+import type { ImportableCredential } from "../../setup/credential-import";
 /**
  * Component that renders an OAuth provider selector.
  */
@@ -8,6 +9,7 @@ export declare class OAuthSelectorComponent extends Container {
     constructor(mode: "login" | "logout", authStorage: AuthStorage, onSelect: (providerId: string) => void, onCancel: () => void, options?: {
         validateAuth?: (providerId: string) => Promise<boolean>;
         requestRender?: () => void;
+        externalCredentialCandidates?: ImportableCredential[];
     });
     stopValidation(): void;
     dispose(): void;

package/dist/types/modes/components/settings-defs.d.ts

@@ -37,6 +37,7 @@ export interface SubmenuSettingDef extends BaseSettingDef {
 }
 export interface TextInputSettingDef extends BaseSettingDef {
     type: "text";
+    secret?: boolean;
 }
 export type SettingDef = BooleanSettingDef | EnumSettingDef | SubmenuSettingDef | TextInputSettingDef;
 /** Get all setting definitions with UI */

package/dist/types/modes/controllers/selector-controller.d.ts

@@ -1,5 +1,5 @@
 import type { Component } from "@sayknow-cli/tui";
-import type { InteractiveModeContext } from "../../modes/types";
+import type { InteractiveModeContext, OAuthSelectorOptions } from "../../modes/types";
 import type { JobsObserver } from "../jobs-observer";
 import type { SessionObserverRegistry } from "../session-observer-registry";
 export declare class SelectorController {
@@ -44,7 +44,7 @@ export declare class SelectorController {
     showSessionSelector(): Promise<void>;
     handleResumeSession(sessionPath: string): Promise<void>;
     handleSessionDeleteCommand(): Promise<void>;
-    showOAuthSelector(mode: "login" | "logout", providerId?: string): Promise<void>;
+    showOAuthSelector(mode: "login" | "logout", providerId?: string, options?: OAuthSelectorOptions): Promise<void>;
     showDebugSelector(): void;
     showSessionObserver(registry: SessionObserverRegistry): void;
     /**

package/dist/types/modes/interactive-mode.d.ts

@@ -221,7 +221,7 @@ export declare class InteractiveMode implements InteractiveModeContext {
     showSessionSelector(): void;
     handleResumeSession(sessionPath: string): Promise<void>;
     handleSessionDeleteCommand(): Promise<void>;
-    showOAuthSelector(mode: "login" | "logout", providerId?: string): Promise<void>;
+    showOAuthSelector(mode: "login" | "logout", providerId?: string, options?: import("./types").OAuthSelectorOptions): Promise<void>;
     showHookConfirm(title: string, message: string): Promise<boolean>;
     handleCtrlC(): void;
     handleCtrlD(): void;

package/dist/types/modes/shared/agent-wire/unattended-session.d.ts

@@ -34,6 +34,14 @@ export interface WorkflowGateEmitter {
     isUnattended(): boolean;
     /** Open + emit a gate; resolves with the agent's answer (from workflow_gate_response). */
     emitGate(input: OpenGateInput): Promise<unknown>;
+    /**
+     * Optional bridge surface (present on {@link UnattendedSessionControlPlane}) that
+     * lets an in-process extension observe emitted gates and answer them — used by
+     * the notifications SDK to resolve a real ask gate from a remote reply.
+     */
+    onGateEmitted?(listener: (gate: RpcWorkflowGate) => void): () => void;
+    resolveGate?(response: RpcWorkflowGateResponse): Promise<RpcWorkflowGateResolution>;
+    listPendingGates?(): RpcWorkflowGate[];
 }
 export interface UnattendedSessionOptions {
     runId: string;
@@ -61,6 +69,8 @@ export declare class UnattendedSessionControlPlane implements RpcUnattendedContr
     private readonly opts;
     constructor(opts: UnattendedSessionOptions);
     isUnattended(): boolean;
+    /** Observe every emitted gate (e.g. so an extension can map an ask to its gate_id). */
+    onGateEmitted(listener: (gate: RpcWorkflowGate) => void): () => void;
     get controller(): UnattendedRunController | undefined;
     negotiate(declaration: RpcUnattendedDeclaration): RpcUnattendedAccepted;
     preflightCommand(command: RpcCommand): void;

package/dist/types/modes/theme/theme.d.ts

@@ -6,7 +6,7 @@ export type SymbolPreset = "unicode" | "nerd" | "ascii";
 /**
  * All available symbol keys organized by category.
  */
-export type SymbolKey = "status.success" | "status.error" | "status.warning" | "status.info" | "status.pending" | "status.disabled" | "status.enabled" | "status.running" | "status.shadowed" | "status.aborted" | "nav.cursor" | "nav.selected" | "nav.expand" | "nav.collapse" | "nav.back" | "tree.branch" | "tree.last" | "tree.vertical" | "tree.horizontal" | "tree.hook" | "boxRound.topLeft" | "boxRound.topRight" | "boxRound.bottomLeft" | "boxRound.bottomRight" | "boxRound.horizontal" | "boxRound.vertical" | "boxSharp.topLeft" | "boxSharp.topRight" | "boxSharp.bottomLeft" | "boxSharp.bottomRight" | "boxSharp.horizontal" | "boxSharp.vertical" | "boxSharp.cross" | "boxSharp.teeDown" | "boxSharp.teeUp" | "boxSharp.teeRight" | "boxSharp.teeLeft" | "sep.powerline" | "sep.powerlineThin" | "sep.powerlineLeft" | "sep.powerlineRight" | "sep.powerlineThinLeft" | "sep.powerlineThinRight" | "sep.block" | "sep.space" | "sep.asciiLeft" | "sep.asciiRight" | "sep.dot" | "sep.slash" | "sep.pipe" | "icon.model" | "icon.plan" | "icon.goal" | "icon.pause" | "icon.folder" | "icon.scratchFolder" | "icon.file" | "icon.git" | "icon.branch" | "icon.pr" | "icon.tokens" | "icon.context" | "icon.cost" | "icon.time" | "icon.pi" | "icon.agents" | "icon.cache" | "icon.input" | "icon.output" | "icon.host" | "icon.session" | "icon.package" | "icon.warning" | "icon.rewind" | "icon.auto" | "icon.fast" | "icon.extensionSkill" | "icon.extensionTool" | "icon.extensionSlashCommand" | "icon.extensionMcp" | "icon.extensionRule" | "icon.extensionHook" | "icon.extensionPrompt" | "icon.extensionContextFile" | "icon.extensionInstruction" | "icon.mic" | "thinking.minimal" | "thinking.low" | "thinking.medium" | "thinking.high" | "thinking.xhigh" | "thinking.max" | "checkbox.checked" | "checkbox.unchecked" | "format.bullet" | "format.dash" | "format.bracketLeft" | "format.bracketRight" | "md.quoteBorder" | "md.hrChar" | "md.bullet" | "lang.default" | "lang.typescript" | "lang.javascript" | "lang.python" | "lang.rust" | "lang.go" | "lang.java" | "lang.c" | "lang.cpp" | "lang.csharp" | "lang.ruby" | "lang.php" | "lang.swift" | "lang.kotlin" | "lang.shell" | "lang.html" | "lang.css" | "lang.json" | "lang.yaml" | "lang.markdown" | "lang.sql" | "lang.docker" | "lang.lua" | "lang.text" | "lang.env" | "lang.toml" | "lang.xml" | "lang.ini" | "lang.conf" | "lang.log" | "lang.csv" | "lang.tsv" | "lang.image" | "lang.pdf" | "lang.archive" | "lang.binary" | "tab.appearance" | "tab.model" | "tab.interaction" | "tab.context" | "tab.editing" | "tab.tools" | "tab.memory" | "tab.tasks" | "tab.providers";
+export type SymbolKey = "status.success" | "status.error" | "status.warning" | "status.info" | "status.pending" | "status.disabled" | "status.enabled" | "status.running" | "status.shadowed" | "status.aborted" | "nav.cursor" | "nav.selected" | "nav.expand" | "nav.collapse" | "nav.back" | "tree.branch" | "tree.last" | "tree.vertical" | "tree.horizontal" | "tree.hook" | "boxRound.topLeft" | "boxRound.topRight" | "boxRound.bottomLeft" | "boxRound.bottomRight" | "boxRound.horizontal" | "boxRound.vertical" | "boxSharp.topLeft" | "boxSharp.topRight" | "boxSharp.bottomLeft" | "boxSharp.bottomRight" | "boxSharp.horizontal" | "boxSharp.vertical" | "boxSharp.cross" | "boxSharp.teeDown" | "boxSharp.teeUp" | "boxSharp.teeRight" | "boxSharp.teeLeft" | "sep.powerline" | "sep.powerlineThin" | "sep.powerlineLeft" | "sep.powerlineRight" | "sep.powerlineThinLeft" | "sep.powerlineThinRight" | "sep.block" | "sep.space" | "sep.asciiLeft" | "sep.asciiRight" | "sep.dot" | "sep.slash" | "sep.pipe" | "icon.model" | "icon.plan" | "icon.goal" | "icon.pause" | "icon.folder" | "icon.scratchFolder" | "icon.file" | "icon.git" | "icon.branch" | "icon.pr" | "icon.tokens" | "icon.context" | "icon.cost" | "icon.time" | "icon.pi" | "icon.agents" | "icon.cache" | "icon.input" | "icon.output" | "icon.host" | "icon.session" | "icon.package" | "icon.warning" | "icon.rewind" | "icon.auto" | "icon.fast" | "icon.extensionSkill" | "icon.extensionTool" | "icon.extensionSlashCommand" | "icon.extensionMcp" | "icon.extensionRule" | "icon.extensionHook" | "icon.extensionPrompt" | "icon.extensionContextFile" | "icon.extensionInstruction" | "icon.mic" | "thinking.minimal" | "thinking.low" | "thinking.medium" | "thinking.high" | "thinking.xhigh" | "thinking.max" | "checkbox.checked" | "checkbox.unchecked" | "format.bullet" | "format.dash" | "format.bracketLeft" | "format.bracketRight" | "md.quoteBorder" | "md.hrChar" | "md.bullet" | "lang.default" | "lang.typescript" | "lang.javascript" | "lang.python" | "lang.rust" | "lang.go" | "lang.java" | "lang.c" | "lang.cpp" | "lang.csharp" | "lang.ruby" | "lang.php" | "lang.swift" | "lang.kotlin" | "lang.shell" | "lang.html" | "lang.css" | "lang.json" | "lang.yaml" | "lang.markdown" | "lang.sql" | "lang.docker" | "lang.lua" | "lang.text" | "lang.env" | "lang.toml" | "lang.xml" | "lang.ini" | "lang.conf" | "lang.log" | "lang.csv" | "lang.tsv" | "lang.image" | "lang.pdf" | "lang.archive" | "lang.binary" | "tab.appearance" | "tab.model" | "tab.interaction" | "tab.notifications" | "tab.context" | "tab.editing" | "tab.tools" | "tab.memory" | "tab.tasks" | "tab.providers";
 export type SpinnerType = "status" | "activity";
 export declare const THEME_COLOR_KEYS: readonly ["accent", "border", "borderAccent", "borderMuted", "success", "error", "warning", "muted", "dim", "text", "thinkingText", "selectedBg", "userMessageBg", "userMessageText", "customMessageBg", "customMessageText", "customMessageLabel", "toolPendingBg", "toolSuccessBg", "toolErrorBg", "toolTitle", "toolOutput", "mdHeading", "mdLink", "mdLinkUrl", "mdCode", "mdCodeBlock", "mdCodeBlockBorder", "mdQuote", "mdQuoteBorder", "mdHr", "mdListBullet", "toolDiffAdded", "toolDiffRemoved", "toolDiffContext", "syntaxComment", "syntaxKeyword", "syntaxFunction", "syntaxVariable", "syntaxString", "syntaxNumber", "syntaxType", "syntaxOperator", "syntaxPunctuation", "thinkingOff", "thinkingMinimal", "thinkingLow", "thinkingMedium", "thinkingHigh", "thinkingXhigh", "bashMode", "pythonMode", "statusLineBg", "statusLineSep", "statusLineModel", "statusLinePath", "statusLineGitClean", "statusLineGitDirty", "statusLineContext", "statusLineSpend", "statusLineStaged", "statusLineDirty", "statusLineUntracked", "statusLineOutput", "statusLineCost", "statusLineSubagents"];
 export type ThemeColor = "accent" | "border" | "borderAccent" | "borderMuted" | "success" | "error" | "warning" | "muted" | "dim" | "text" | "thinkingText" | "userMessageText" | "customMessageText" | "customMessageLabel" | "toolTitle" | "toolOutput" | "mdHeading" | "mdLink" | "mdLinkUrl" | "mdCode" | "mdCodeBlock" | "mdCodeBlockBorder" | "mdQuote" | "mdQuoteBorder" | "mdHr" | "mdListBullet" | "toolDiffAdded" | "toolDiffRemoved" | "toolDiffContext" | "syntaxComment" | "syntaxKeyword" | "syntaxFunction" | "syntaxVariable" | "syntaxString" | "syntaxNumber" | "syntaxType" | "syntaxOperator" | "syntaxPunctuation" | "thinkingOff" | "thinkingMinimal" | "thinkingLow" | "thinkingMedium" | "thinkingHigh" | "thinkingXhigh" | "bashMode" | "pythonMode" | "statusLineSep" | "statusLineModel" | "statusLinePath" | "statusLineGitClean" | "statusLineGitDirty" | "statusLineContext" | "statusLineSpend" | "statusLineStaged" | "statusLineDirty" | "statusLineUntracked" | "statusLineOutput" | "statusLineCost" | "statusLineSubagents";

package/dist/types/modes/types.d.ts

@@ -12,6 +12,7 @@ import type { MCPManager } from "../runtime-mcp";
 import type { AgentSession, AgentSessionEvent } from "../session/agent-session";
 import type { HistoryStorage } from "../session/history-storage";
 import type { SessionContext, SessionManager } from "../session/session-manager";
+import type { CredentialAutoImportOptions } from "../setup/credential-auto-import";
 import type { LspStartupServerInfo } from "../tools";
 import type { AssistantMessageComponent } from "./components/assistant-message";
 import type { BashExecutionComponent } from "./components/bash-execution";
@@ -226,7 +227,7 @@ export interface InteractiveModeContext {
     showSessionSelector(): void;
     handleResumeSession(sessionPath: string): Promise<void>;
     handleSessionDeleteCommand(): Promise<void>;
-    showOAuthSelector(mode: "login" | "logout", providerId?: string): Promise<void>;
+    showOAuthSelector(mode: "login" | "logout", providerId?: string, options?: OAuthSelectorOptions): Promise<void>;
     showHookConfirm(title: string, message: string): Promise<boolean>;
     showDebugSelector(): void;
     showSessionObserver(): void;
@@ -276,3 +277,8 @@ export interface InteractiveModeContext {
     showExtensionError(extensionPath: string, error: string): void;
     showToolError(toolName: string, error: string): void;
 }
+export interface OAuthSelectorOptions {
+    allowExternalCredentialDiscovery?: boolean;
+    trigger?: "bare-login";
+    externalCredentialDiscover?: CredentialAutoImportOptions["discover"];
+}

package/dist/types/notifications/attachment-registry.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Process-wide registry mapping a session id to a sink that delivers a local
+ * file to the session's connected Telegram chat as a document. Registered by
+ * the notifications extension; consumed by the telegram_send tool.
+ */
+/** Delivers a local file to the session's Telegram chat. */
+export type TelegramFileSink = (file: {
+    path: string;
+    caption?: string;
+}) => Promise<{
+    ok: boolean;
+    error?: string;
+}>;
+/** Register `sink` for `sessionId`. Returns a disposer that clears it. */
+export declare function registerTelegramFileSink(sessionId: string, sink: TelegramFileSink): () => void;
+/** The Telegram file sink for `sessionId`, if one is registered. */
+export declare function getTelegramFileSink(sessionId: string): TelegramFileSink | undefined;

package/dist/types/notifications/chat-adapters.d.ts

@@ -0,0 +1,9 @@
+import type { NotificationPresentationAdapter } from "./engine";
+type AdapterKind = "discord" | "slack";
+interface ChatAdapterOptions {
+    kind: AdapterKind;
+    channelId?: string;
+}
+export declare function createDiscordAdapter(opts?: Omit<ChatAdapterOptions, "kind">): NotificationPresentationAdapter;
+export declare function createSlackAdapter(opts?: Omit<ChatAdapterOptions, "kind">): NotificationPresentationAdapter;
+export {};

package/dist/types/notifications/config-commands.d.ts

@@ -0,0 +1,26 @@
+/**
+ * In-thread configuration slash commands for the threaded session surface.
+ *
+ * Replies are thread-native now (the old `/answer <sessionId> …` command is
+ * removed), but the user can still adjust per-surface behaviour from inside a
+ * session thread with small slash commands:
+ *
+ * - `/verbose`            switch the mirror to verbose (full tool output + reasoning)
+ * - `/lean`               switch back to lean (assistant text + tool names)
+ * - `/verbosity lean|verbose`
+ * - `/redact on|off`      toggle redaction of streamed content
+ *
+ * This parser is pure so the command grammar is unit-testable; the daemon maps
+ * the returned change onto a `config_command` frame / settings update.
+ */
+/** A parsed in-thread configuration change. */
+export interface ConfigCommandChange {
+    verbosity?: "lean" | "verbose";
+    redact?: boolean;
+}
+/**
+ * Parse an in-thread config command. Returns the requested change, or
+ * `undefined` when the text is not a recognised config command (so the daemon
+ * can fall through to treating it as a free-text injection).
+ */
+export declare function parseInThreadConfigCommand(text: string): ConfigCommandChange | undefined;

package/dist/types/notifications/config.d.ts

@@ -0,0 +1,69 @@
+import type { Settings } from "../config/settings";
+export interface NotificationConfig {
+    enabled: boolean;
+    botToken?: string;
+    chatId?: string;
+    discord: {
+        botToken?: string;
+        channelId?: string;
+    };
+    slack: {
+        botToken?: string;
+        channelId?: string;
+    };
+    redact: boolean;
+    verbosity: "lean" | "verbose";
+    idleTimeoutMs: number;
+}
+/** Read typed config from Settings. */
+export declare function getNotificationConfig(settings: Settings): NotificationConfig;
+/** Is global config sufficient for auto-on (enabled + at least one configured adapter)? */
+export declare function isGloballyConfigured(cfg: NotificationConfig): boolean;
+/** Resolve whether the notifications extension should be registered at SDK startup. */
+export declare function shouldRegisterNotificationsExtension(input: {
+    env: NodeJS.ProcessEnv;
+    cfg?: NotificationConfig;
+}): boolean;
+/**
+ * Resolve whether THIS session should run notifications.
+ * Precedence (highest first):
+ *  1) env.SKC_NOTIFICATIONS === "0"  -> false (hard opt-out)
+ *  2) sessionDisabled === true       -> false (local /notify off)
+ *  3) env.SKC_NOTIFICATIONS === "1" || env.SKC_NOTIFICATIONS_TOKEN present -> true (legacy explicit)
+ *  4) isGloballyConfigured(cfg)      -> true (global auto-on)
+ *  5) otherwise false
+ */
+export declare function isSessionNotificationsEnabled(input: {
+    cfg: NotificationConfig;
+    env: NodeJS.ProcessEnv;
+    sessionDisabled: boolean;
+}): boolean;
+/** Mask a bot token for display: first 4 chars + "…" + "(len N)"; "(unset)" when undefined/empty. Never reveal full token. */
+export declare function maskToken(token: string | undefined): string;
+/** Stable non-reversible fingerprint of a token: sha256 hex, first 12 chars. */
+export declare function tokenFingerprint(token: string): string;
+/** Short session tag for display, e.g. last 6 chars of sessionId. */
+export declare function sessionTag(sessionId: string): string;
+export interface RedactableAction {
+    id: string;
+    kind: string;
+    sessionId: string;
+    question?: string;
+    options?: string[];
+    summary?: string;
+}
+/**
+ * When redact is true, strip sensitive content for remote delivery:
+ *  - ask: NOT redacted. An ask is an interactive prompt the human must read and
+ *    answer on the remote surface; redacting its question/options would make it
+ *    unanswerable, defeating remote answering. Asks are returned unchanged.
+ *  - idle: summary removed, (no question/options).
+ * When redact is false, return the action unchanged.
+ *
+ * Redaction still applies to streamed content frames (turn_stream, context_update,
+ * image_attachment) which are suppressed at their emit sites, not here.
+ */
+export declare function buildRedactedAction(action: RedactableAction, opts: {
+    redact: boolean;
+    sessionTag: string;
+}): RedactableAction;

package/dist/types/notifications/engine.d.ts

@@ -0,0 +1,59 @@
+import { type RedactableAction } from "./config";
+export type NotificationEvent = ({
+    type: "action_needed";
+} & RedactableAction) | {
+    type: "action_resolved";
+    id: string;
+    sessionId: string;
+    resolvedBy?: string;
+} | {
+    type: "frame";
+    sessionId: string;
+    frame: Record<string, unknown>;
+};
+export interface NotificationReplyRoute {
+    sessionId: string;
+    actionId: string;
+    answer: number | string | {
+        selected?: Array<number | string>;
+        custom?: string;
+    };
+}
+export interface NotificationAdapterPayload {
+    adapter: string;
+    channelKey?: string;
+    body: unknown;
+    route?: Omit<NotificationReplyRoute, "answer">;
+}
+export interface NotificationPresentationAdapter {
+    readonly kind: "telegram" | "discord" | "slack";
+    render(event: NotificationEvent): NotificationAdapterPayload[];
+    mapInbound(input: unknown): NotificationReplyRoute | undefined;
+}
+export interface EngineSessionSink {
+    sendReply(route: NotificationReplyRoute): void;
+}
+export interface NotificationEngineOptions {
+    redact: boolean;
+    sessionTag: (sessionId: string) => string;
+}
+/**
+ * Shared presentation engine for managed notification clients.
+ *
+ * It owns fanout, redaction boundaries, pending-action routing, and reply
+ * delivery into session sinks. Transport adapters stay pure: render an internal
+ * event into a public-safe payload and map an inbound transport interaction
+ * back into a session/action answer.
+ */
+export declare class NotificationPresentationEngine {
+    private readonly opts;
+    readonly adapters: readonly NotificationPresentationAdapter[];
+    private readonly sessions;
+    private readonly pending;
+    constructor(adapters: readonly NotificationPresentationAdapter[], opts: NotificationEngineOptions);
+    connectSession(sessionId: string, sink: EngineSessionSink): void;
+    dropSession(sessionId: string): void;
+    fanout(event: NotificationEvent): NotificationAdapterPayload[];
+    routeInbound(adapterKind: NotificationPresentationAdapter["kind"], input: unknown): boolean;
+    private redactEvent;
+}

package/dist/types/notifications/helpers.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Pure helpers for the notifications extension.
+ *
+ * Kept side-effect-free so the mapping logic (ask extraction, idle summary,
+ * dedupe keys) is unit-testable without a live session or the native server.
+ */
+import { type RedactableAction } from "./config";
+/** A pending ask derived from an `ask` tool call. */
+export interface PendingAsk {
+    /** Action id: `${toolCallId}:${questionId}`. */
+    id: string;
+    /** Question text. */
+    question: string;
+    /** Option labels (may be empty for free-text questions). */
+    options: string[];
+}
+/** Truncate text to `max` chars, appending an ellipsis when cut. */
+export declare function truncate(text: string, max?: number): string;
+/** Stable per-turn idle dedupe key so exactly one idle action fires per turn. */
+export declare function idleDedupeKey(sessionId: string, turnIndex: number): string;
+/**
+ * Extract pending asks from an `ask` tool call input.
+ *
+ * Defensive: tolerates partial/unknown shapes and always returns an array.
+ */
+export declare function asksFromAskInput(toolCallId: string, input: unknown): PendingAsk[];
+/** Prepare an action JSON payload for remote notification delivery. */
+export declare function notificationActionPayload<T extends RedactableAction>(action: T, opts: {
+    redact: boolean;
+    sessionTag: string;
+}): RedactableAction;
+/** Extract a plain-text summary from an agent message's content, if any. */
+export declare function summaryFromMessage(message: unknown, max?: number): string | undefined;
+/**
+ * Extract an idle summary from an `agent_end` event's settled message list: the
+ * last message that yields text (i.e. the final assistant message; tool-result
+ * messages have no text and are skipped).
+ *
+ * `agent_end` fires exactly once when the agent loop settles to await the user,
+ * so emitting idle from this — instead of per-`turn_end` — produces exactly one
+ * idle notification per genuine idle, eliminating the multi-turn flood.
+ */
+export declare function summaryFromMessages(messages: unknown, max?: number): string | undefined;
+/** An agent-produced image extracted from a message's content. */
+export interface ExtractedImage {
+    source: string;
+    mime: string;
+    data: string;
+}
+/**
+ * Extract agent-produced images (`{ type: "image", data, mimeType }` blocks)
+ * from a message's content — e.g. computer-use/browser screenshots or tool
+ * image outputs — for `image_attachment` delivery.
+ */
+export declare function imageAttachmentsFromMessage(message: unknown, source?: string): ExtractedImage[];

package/dist/types/notifications/html-format.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Telegram HTML formatting helpers for the notifications SDK.
+ *
+ * All notifications-SDK Telegram output is sent with `parse_mode: "HTML"`. This
+ * module is the single source of truth for: escaping dynamic text, converting a
+ * bounded markdown subset into Telegram HTML, safely truncating a finished
+ * message to Telegram's 4096-char limit without breaking tags/entities, and
+ * laying out inline-keyboard buttons as a numbered grid.
+ *
+ * Discipline: escape first, tag second. Telegram only parses a small tag set
+ * (b, i, u, s, code, pre, a, blockquote, tg-spoiler); a stray `<` or unbalanced
+ * tag can make Telegram reject the whole message, so dynamic text is always
+ * escaped before any tag is emitted.
+ */
+export declare const TELEGRAM_PARSE_MODE: "HTML";
+export declare const TELEGRAM_MESSAGE_LIMIT = 4096;
+/** Escape text for Telegram HTML body content (`& < >`). */
+export declare function escapeHtml(value: string): string;
+/** Bold the given raw text (escaped internally). */
+export declare function bold(raw: string): string;
+/** Italicize the given raw text (escaped internally). */
+export declare function italic(raw: string): string;
+/** Render the given raw text as inline code (escaped internally). */
+export declare function code(raw: string): string;
+/** Render the given raw text as a preformatted block (escaped internally). */
+export declare function pre(raw: string): string;
+/**
+ * Convert a bounded markdown subset into Telegram HTML. Supported: fenced code,
+ * inline code, `**bold**`, `*italic*`, `[text](url)` (safe schemes only),
+ * `#` headers, `>` blockquotes, and GFM tables (rendered as a monospace block).
+ * Unsupported or malformed markdown is left as escaped literal text — never
+ * emitted as unbalanced tags.
+ */
+export declare function markdownToTelegramHtml(markdown: string): string;
+/**
+ * Truncate a finished Telegram HTML message to at most `max` chars without
+ * splitting a tag or entity, closing any still-open allowed tags and appending
+ * `marker`. The final string is guaranteed to be <= `max`.
+ */
+export declare function truncateTelegramHtml(message: string, max?: number, marker?: string): string;
+/** Finalize an optional message: undefined passthrough, else safe-truncate. */
+export declare function finalizeTelegramHtml(message?: string): string | undefined;
+/**
+ * One-based, plain-text button label (Telegram does not parse HTML in labels).
+ *
+ * Strips any leading `N.`/`N)` index already embedded in the label (e.g.
+ * deep-interview options pre-numbered by the ask tool) and applies the canonical
+ * one-based button index instead. This avoids duplicated numbering like
+ * `1. 1. …` and keeps the displayed number aligned with the button's real index.
+ */
+export declare function buttonLabel(label: string, index: number): string;
+export interface InlineButton {
+    text: string;
+    callback_data: string;
+}
+/**
+ * Lay out option labels as a numbered button grid. Long buttons take a
+ * full-width row; runs of short buttons are packed into rows of up to 3. The
+ * callback value comes from `callbackForIndex(i)` using the original zero-based
+ * option index — layout never changes callback semantics.
+ */
+export declare function buildButtonGrid(labels: string[], callbackForIndex: (index: number) => string): InlineButton[][];

package/dist/types/notifications/index.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Notifications extension.
+ *
+ * Hosts a per-session loopback WebSocket notification server (the Rust core via
+ * N-API) and bridges SKC session events + the `ask` tool to it so a remote client
+ * (e.g. a Telegram bot) can both see action-needed signals and ANSWER them —
+ * without requiring RPC/unattended mode:
+ *
+ * - `ask` (interactive): registers an {@link AskAnswerSource}; the ask tool races
+ *   the local UI against a remote reply. First valid answer wins; a local answer
+ *   aborts the remote wait (and broadcasts `action_resolved` resolvedBy=local).
+ * - `ask` (unattended/RPC): observes emitted workflow gates and resolves the real
+ *   gate on a remote reply via `ctx.workflowGate`.
+ * - `turn_end` -> `action_needed` (kind `idle`, deduped per turn).
+ * - `session_shutdown` -> stop the server + deregister the answer source.
+ *
+ * Enable with Settings notifications config, `SKC_NOTIFICATIONS=1` (a token is
+ * generated), or `SKC_NOTIFICATIONS_TOKEN`.
+ */
+import type { ExtensionFactory } from "../extensibility/extensions";
+/**
+ * Best-effort real repository name (no git spawn): resolves the main worktree
+ * root directory so linked worktrees report the repo (e.g. `sayknow-cli`)
+ * instead of the worktree directory (e.g. `feat-foo-01047f11`).
+ */
+export declare function readGitRepoName(cwd: string): string | undefined;
+export declare function notificationsEnabled(): boolean;
+export declare const createNotificationsExtension: ExtensionFactory;

package/dist/types/notifications/managed-daemon.d.ts

@@ -0,0 +1,48 @@
+import type { Settings } from "../config/settings";
+import { RateLimitPool } from "./rate-limit-pool";
+import { type ThreadedSend } from "./threaded-render";
+export interface ManagedNotificationDaemonFs {
+    readdir(path: string): Promise<string[]>;
+}
+export interface ManagedSessionSocket {
+    sessionId: string;
+    token: string;
+    ws: WebSocket;
+    pending: Map<string, {
+        sessionId: string;
+        actionId: string;
+    }>;
+    capable: boolean;
+    lastPongAt: number;
+    awaitingNonce: string | undefined;
+    pingTimer: ReturnType<typeof setInterval> | undefined;
+}
+export interface ManagedNotificationDaemonOptions {
+    settings: Settings;
+    fs: ManagedNotificationDaemonFs;
+    WebSocketImpl?: typeof WebSocket;
+    now?: () => number;
+    setIntervalImpl?: typeof setInterval;
+    clearIntervalImpl?: typeof clearInterval;
+    rateLimitPool?: RateLimitPool<{
+        send: ThreadedSend;
+        topicId?: string;
+    }>;
+}
+export declare abstract class ManagedNotificationDaemon {
+    protected readonly opts: ManagedNotificationDaemonOptions;
+    readonly sessions: Map<string, ManagedSessionSocket>;
+    readonly pool: RateLimitPool<{
+        send: ThreadedSend;
+        topicId?: string;
+    }>;
+    protected constructor(opts: ManagedNotificationDaemonOptions);
+    scanRoots(): Promise<void>;
+    connectSession(sessionId: string, url: string, token: string): ManagedSessionSocket;
+    protected handleSessionMessage(session: ManagedSessionSocket, msg: Record<string, unknown>): Promise<boolean>;
+    protected renderFrame(frame: Record<string, unknown>): ThreadedSend | undefined;
+    protected dropSession(session: ManagedSessionSocket): void;
+    protected abstract readRoots(): Promise<string[]>;
+    private sendHello;
+    private startLiveness;
+}