@sayknow-cli/coding-agent 0.3.1 → 0.3.2

package/dist/types/session/agent-session.d.ts

@@ -69,6 +69,7 @@ import type { WorkflowGateEmitter } from "../modes/shared/agent-wire/unattended-
 import type { PlanModeState } from "../plan-mode/state";
 import { type AgentRegistry } from "../registry/agent-registry";
 import { type DiscoverableMCPSearchIndex, type DiscoverableMCPTool } from "../runtime-mcp/discoverable-tool-metadata";
+import { MCPManager } from "../runtime-mcp/manager";
 import { type SecretObfuscator } from "../secrets/obfuscator";
 import { type DiscoverableTool, type DiscoverableToolSearchIndex } from "../tool-discovery/tool-index";
 import type { AskAnswerSource, ToolSession } from "../tools";
@@ -77,7 +78,7 @@ import { type TodoItem, type TodoPhase } from "../tools/todo-write";
 import type { ClientBridge } from "./client-bridge";
 import { type ContributionPrepOptions, type ContributionPrepResult } from "./contribution-prep";
 import { type CustomMessage } from "./messages";
-import type { BranchSummaryEntry, NewSessionOptions, SessionContext, SessionManager } from "./session-manager";
+import type { BranchSummaryEntry, CompactionEntry, NewSessionOptions, SessionContext, SessionManager } from "./session-manager";
 import { ToolChoiceQueue } from "./tool-choice-queue";
 import { YieldQueue } from "./yield-queue";
 /** Session-specific events that extend the core AgentEvent */
@@ -233,6 +234,13 @@ export interface AgentSessionConfig {
      * **MUST NOT** dispose it on their own teardown.
      */
     ownedAsyncJobManager?: AsyncJobManager;
+    /**
+     * MCPManager whose lifecycle this session owns (top-level sessions that
+     * connected plugin-bundle MCP servers). Only the owned manager is
+     * disconnected on dispose; subagents and callers that merely observe the
+     * process-global manager **MUST NOT** dispose it on their own teardown.
+     */
+    ownedMcpManager?: MCPManager;
     /** Optional fork-context seed used to initialize a child session before its first prompt. */
     forkContextSeed?: ForkContextSeed;
     /** Optional provider state override. Fork-context children should omit this by default. */
@@ -676,6 +684,7 @@ export declare class AgentSession {
     get skillWarnings(): readonly SkillWarning[];
     getTodoPhases(): TodoPhase[];
     setTodoPhases(phases: TodoPhase[]): void;
+    applyCompactionPostAppendForTests(compactionEntryId: string, firstKeptEntryId: string, fromExtension?: boolean): Promise<CompactionEntry | undefined>;
     /**
      * Abort current operation and wait for agent to become idle.
      */
@@ -807,9 +816,10 @@ export declare class AgentSession {
     isFastForSubagentProvider(provider?: string): boolean;
     /**
      * True when the configured `serviceTier` resolves to `"priority"` for the
-     * *currently selected model's provider*. Returns false for scoped tiers
-     * that don't match (e.g. `"openai-only"` on an anthropic model) and when
-     * no model is selected.
+     * *currently selected model's provider* AND fast mode was not auto-disabled
+     * for that provider this session. This is the current-model EFFECTIVE
+     * predicate (what the next request actually does); use {@link isFastForProvider}
+     * for pure configured intent (e.g. subagent/`modelRoles` display rows).
      */
     isFastModeActive(): boolean;
     setServiceTier(serviceTier: ServiceTier | undefined): void;

package/dist/types/session/blob-store.d.ts

@@ -3,6 +3,14 @@ export interface BlobPutResult {
     path: string;
     get ref(): string;
 }
+export interface CheckedBlobPutResult extends BlobPutResult {
+    bytes: number;
+}
+export declare class BlobCorruptError extends Error {
+    readonly hash: string;
+    readonly path: string;
+    constructor(hash: string, path: string);
+}
 /**
  * Content-addressed blob store for externalizing large binary data (images) from session JSONL files.
  *
@@ -24,10 +32,22 @@ export declare class BlobStore {
      * Returns once the bytes are in the kernel page cache.
      */
     putSync(data: Buffer): BlobPutResult;
+    /**
+     * Durably install binary data as an immutable content-addressed blob.
+     *
+     * Callers that persist references to this blob must mutate canonical session entries only
+     * after this method returns successfully. A corrupt pre-existing target is reported with
+     * {@link BlobCorruptError}; it is never silently overwritten or trusted.
+     */
+    putImmutableSync(data: Buffer): CheckedBlobPutResult;
     /** Read blob by hash, returns Buffer or null if not found. */
     get(hash: string): Promise<Buffer | null>;
     /** Synchronously read blob by hash, returns Buffer or null if not found. */
     getSync(hash: string): Buffer | null;
+    /** Read blob by hash and verify its content hash; returns null if not found. */
+    getChecked(hash: string): Promise<Buffer | null>;
+    /** Synchronously read blob by hash and verify its content hash; returns null if not found. */
+    getCheckedSync(hash: string): Buffer | null;
     /** Check if a blob exists. */
     has(hash: string): Promise<boolean>;
 }
@@ -35,7 +55,9 @@ export declare class EphemeralBlobStore extends BlobStore {
     #private;
     constructor(dir: string);
     putSync(data: Buffer): BlobPutResult;
+    putImmutableSync(data: Buffer): CheckedBlobPutResult;
     getSync(hash: string): Buffer | null;
+    getCheckedSync(hash: string): Buffer | null;
     clear(): void;
     dispose(): void;
 }
@@ -44,8 +66,11 @@ export declare class MemoryBlobStore extends BlobStore {
     constructor();
     put(data: Buffer): Promise<BlobPutResult>;
     putSync(data: Buffer): BlobPutResult;
+    putImmutableSync(data: Buffer): CheckedBlobPutResult;
     get(hash: string): Promise<Buffer | null>;
     getSync(hash: string): Buffer | null;
+    getChecked(hash: string): Promise<Buffer | null>;
+    getCheckedSync(hash: string): Buffer | null;
     has(hash: string): Promise<boolean>;
 }
 export declare class ResidentBlobMissingError extends Error {

package/dist/types/session/session-manager.d.ts

@@ -26,9 +26,51 @@ export interface SessionEntryBase {
     parentId: string | null;
     timestamp: string;
 }
+export interface ColdSpillRef {
+    kind: "cold_spill";
+    ref: string;
+    encoding: "utf8" | "json";
+    originalChars: number;
+    sha256: string;
+    bytes: number;
+}
+export interface EvictedContentMarker {
+    evictedAt: number;
+    reason: "compacted_history";
+    compactionEntryId: string;
+    firstKeptEntryId: string;
+    payloads: Record<string, ColdSpillRef>;
+}
+export interface EvictCompactedContentResult {
+    evictedEntries: number;
+    hotCharsRemoved: number;
+    coldBlobBytes: number;
+    payloadRefs: number;
+    alreadyEvictedEntries: number;
+    coldSpillWriteCount: number;
+    coldSpillReadCount: number;
+    residentTextReadCount: number;
+    residentImageReadCount: number;
+}
+export interface SessionManagerObservabilityStats {
+    coldSpillWriteCount: number;
+    coldSpillReadCount: number;
+    residentTextReadCount: number;
+    residentImageReadCount: number;
+    publicMaterializerCallCount: number;
+    getEntryMaterializerCallCount: number;
+    getBranchMaterializerCallCount: number;
+    getEntriesMaterializerCallCount: number;
+    materializedEntriesCachePopulateCount: number;
+    pathOnlyContextBuildCount: number;
+}
 export interface SessionMessageEntry extends SessionEntryBase {
     type: "message";
     message: AgentMessage;
+    /** Cold-spill marker: when present, heavy message content was moved to durable
+     *  content-addressed blobs after compaction. The marker is entry-level session
+     *  metadata (not a message field) so strict message types stay intact. */
+    evictedContent?: EvictedContentMarker;
 }
 export interface ThinkingLevelChangeEntry extends SessionEntryBase {
     type: "thinking_level_change";
@@ -148,6 +190,8 @@ export interface CustomMessageEntry<T = unknown> extends SessionEntryBase {
     display: boolean;
     /** Who initiated this message for billing/attribution semantics. */
     attribution?: MessageAttribution;
+    /** Cold-spill marker for custom-message content evicted after compaction. */
+    evictedContent?: EvictedContentMarker;
 }
 /** Session entry - has id/parentId for tree structure (returned by "read" methods in SessionManager) */
 export type SessionEntry = SessionMessageEntry | ThinkingLevelChangeEntry | ModelChangeEntry | ServiceTierChangeEntry | CompactionEntry | BranchSummaryEntry | CustomEntry | CustomMessageEntry | LabelEntry | TtsrInjectionEntry | MCPToolSelectionEntry | SessionInitEntry | ModeChangeEntry;
@@ -480,6 +524,19 @@ export declare class SessionManager {
      * Returns undefined if no model change has been recorded.
      */
     getLastModelChangeRole(): string | undefined;
+    evictCompactedContent(firstKeptEntryId: string, compactionEntryId: string): EvictCompactedContentResult;
+    getObservabilityStatsForTests(): SessionManagerObservabilityStats;
+    hotRetainedMessageCharsForTests(): number;
+    getCanonicalEntryForTests(id: string): SessionEntry | undefined;
+    getEntryForFidelity(id: string): SessionEntry | undefined;
+    getBranchForFidelity(fromId?: string): SessionEntry[];
+    /**
+     * Walk the active branch without materializing resident blobs or rehydrating
+     * cold-spill payloads. Intended for metadata-only scans such as todo-phase
+     * sync; callers must not mutate returned entries.
+     */
+    getActivePathEntriesCanonical(fromId?: string): SessionEntry[];
+    getEntriesForExport(): SessionEntry[];
     getEntry(id: string): SessionEntry | undefined;
     /**
      * Get all direct children of an entry.

package/dist/types/skc-runtime/launch-tmux.d.ts

@@ -4,6 +4,7 @@ export { buildSkcTmuxProfileCommands, SKC_DEFAULT_TMUX_SESSION, SKC_TMUX_COMMAND
 export declare const SKC_TMUX_LAUNCHED_ENV = "SKC_TMUX_LAUNCHED";
 export declare const SKC_LAUNCH_POLICY_ENV = "SKC_LAUNCH_POLICY";
 export declare const SKC_TMUX_WINDOW_LABEL_MAX_WIDTH = 48;
+export declare const SKC_PSMUX_PROFILE_FORCE_ENV = "SKC_PSMUX_PROFILE_FORCE";
 interface TtyState {
     stdin: boolean;
     stdout: boolean;

package/dist/types/skc-runtime/psmux-detect.d.ts

@@ -0,0 +1,78 @@
+/**
+ * Windows psmux detection and tmux-binary resolution.
+ *
+ * Recent psmux releases (see docs/compatibility.md in the psmux repo) close
+ * the round-trip gap for set-option / show-options user options and the
+ * set-window-option profile values skc emits, which is what unblocks the
+ * native Windows skc --tmux path. This module detects that capability so skc
+ * can pick psmux when tmux is missing on Windows, and so callers can decide
+ * whether to treat a given tmux binary as psmux (affecting e.g. the untagged
+ * diagnostic wording and namespace handling).
+ *
+ * The probe is intentionally lightweight: it runs a single tmux -V (or
+ * --version) once per process and caches the verdict. Cache invalidation
+ * knobs:
+ *   - force: true re-probes on every call (used by tests).
+ *   - SKC_PSMUX_FORCE_DETECT=1 re-probes each call.
+ *   - SKC_PSMUX_DETECTION=off skips probing entirely.
+ */
+export declare const SKC_PSMUX_COMMAND_ENV = "SKC_PSMUX_COMMAND";
+export declare const SKC_PSMUX_DETECTION_ENV = "SKC_PSMUX_DETECTION";
+export declare const SKC_PSMUX_FORCE_DETECT_ENV = "SKC_PSMUX_FORCE_DETECT";
+/** Names that psmux installs as the canonical executable / alias. */
+export declare const PSMUX_BINARY_NAMES: readonly ["psmux", "pmux", "tmux"];
+export type PsmuxSpawnRunner = (command: string, args: string[]) => {
+    exitCode: number | null;
+    stdout?: string;
+    stderr?: string;
+};
+/**
+ * Resolves a tmux-class binary name (e.g. "psmux", "tmux") to an absolute
+ * filesystem path or returns null when the binary cannot be located. The
+ * default implementation uses `Bun.which`; production callers leave it
+ * alone and unit tests inject a stub via `__setBinaryResolverForTests`
+ * so the version-banner probe can be exercised hermetically.
+ */
+export type BinaryResolver = (candidate: string) => string | null;
+/** @internal Test-only seam; production code never calls this. */
+export declare function __setBinaryResolverForTests(resolver: BinaryResolver | null): void;
+export declare function envDisabled(value: string | undefined): boolean;
+/**
+ * Decide whether command resolves to a psmux binary by probing its version
+ * output. The result is cached per process unless force is set or
+ * SKC_PSMUX_FORCE_DETECT=1.
+ */
+export declare function detectPsmux(command: string, options?: {
+    force?: boolean;
+    env?: NodeJS.ProcessEnv;
+    runner?: PsmuxSpawnRunner;
+}): boolean;
+export interface ResolveSkcTmuxBinaryOptions {
+    platform?: NodeJS.Platform;
+    env?: NodeJS.ProcessEnv;
+    runner?: PsmuxSpawnRunner;
+}
+export interface ResolvedTmuxBinary {
+    command: string;
+    isPsmux: boolean;
+    viaExplicitOverride: boolean;
+}
+/**
+ * Resolve the tmux command SKC should invoke. Honors the existing
+ * SKC_TMUX_COMMAND / SKC_TEAM_TMUX_COMMAND overrides; on Windows when no
+ * override is set, psmux (installed as psmux, pmux, or tmux) is picked
+ * automatically so the default skc --tmux flow lands on a real multiplexer.
+ */
+export declare function resolveSkcTmuxBinary(options?: ResolveSkcTmuxBinaryOptions): ResolvedTmuxBinary;
+/** Test-only helper: drop the in-process detection cache. */
+export declare function clearPsmuxDetectionCache(): void;
+export interface PsmuxProbe {
+    command: string;
+    versionOutput: string;
+    isPsmux: boolean;
+}
+export declare function probePsmux(command: string, options?: {
+    env?: NodeJS.ProcessEnv;
+    runner?: PsmuxSpawnRunner;
+    force?: boolean;
+}): PsmuxProbe;

package/dist/types/skc-runtime/team-runtime.d.ts

@@ -281,6 +281,8 @@ export declare function persistSkcTeamModeStateSummary(snapshot: SkcTeamSnapshot
 export declare function recoverSkcTeamStaleClaims(teamName: string, cwd?: string, env?: NodeJS.ProcessEnv): Promise<SkcTeamLivenessRecoveryResult>;
 type SkcTeamTaskMetadataInput = Partial<Pick<SkcTeamTask, "owner" | "lane" | "required_role" | "allowed_roles" | "depends_on" | "blocked_by">>;
 export declare function resolveSkcWorkerCommand(cwd?: string, env?: NodeJS.ProcessEnv): string;
+/** @internal Exported for unit tests. */
+export declare function buildWorkerCommand(config: SkcTeamConfig, worker: SkcTeamWorker, platform?: NodeJS.Platform): string;
 export type SkcWorkerCheckpointClassification = {
     kind: "clean";
     files: string[];

package/dist/types/skc-runtime/tmux-common.d.ts

@@ -1,3 +1,4 @@
+import type { ResolvedTmuxBinary } from "./psmux-detect";
 export declare const SKC_DEFAULT_TMUX_SESSION = "sayknow_cli";
 export declare const SKC_TMUX_SESSION_PREFIX = "sayknow_cli_";
 export declare const SKC_TMUX_COMMAND_ENV = "SKC_TMUX_COMMAND";
@@ -11,6 +12,7 @@ export declare const SKC_TMUX_PROJECT_OPTION = "@skc-project";
 export declare const SKC_TMUX_SESSION_ID_OPTION = "@skc-session-id";
 export declare const SKC_TMUX_SESSION_STATE_FILE_OPTION = "@skc-session-state-file";
 export declare const SKC_TMUX_VERSION_OPTION = "@skc-version";
+export declare const SKC_PSMUX_PROFILE_FORCE_ENV = "SKC_PSMUX_PROFILE_FORCE";
 export interface SkcTmuxProfileCommand {
     description: string;
     args: string[];
@@ -23,7 +25,26 @@ export interface TmuxCommandResult {
 }
 export type TmuxCommandRunner = (args: string[]) => TmuxCommandResult;
 export declare function envDisabled(value: string | undefined): boolean;
-export declare function resolveSkcTmuxCommand(env?: NodeJS.ProcessEnv): string;
+/**
+ * Resolve the tmux (or tmux-compatible multiplexer) command SKC should invoke.
+ *
+ * This is the shared entry point used by every SKC code path that needs to talk
+ * to a multiplexer: `skc --tmux` planning, `skc session ...`, `skc team ...`,
+ * the lifecycle controller, and the harness resident owner. Routing all of
+ * them through the same resolver means a single `SKC_TMUX_COMMAND` override or
+ * a single Windows psmux / pmux detection wins for the whole process — the
+ * failure mode where `skc --tmux` creates a psmux-backed session and then
+ * `skc session status` fails because it queries literal `tmux` is closed off.
+ *
+ * Explicit `SKC_TMUX_COMMAND` / `SKC_TEAM_TMUX_COMMAND` overrides are honored on
+ * every platform. On native Windows without an override the resolver walks
+ * `psmux`, then `pmux`, then `tmux` and uses the first binary present on PATH.
+ * On POSIX the resolver returns `tmux` (the historical default) and only
+ * falls through to the platform-aware walker if the caller opts in.
+ */
+export declare function resolveSkcTmuxCommand(env?: NodeJS.ProcessEnv, platform?: NodeJS.Platform): string;
+export type { PsmuxProbe, ResolvedTmuxBinary, ResolveSkcTmuxBinaryOptions } from "./psmux-detect";
+export { clearPsmuxDetectionCache, detectPsmux, probePsmux, resolveSkcTmuxBinary } from "./psmux-detect";
 /**
  * Build the exact-session target for tmux *option* commands
  * (`show-options` / `set-option`) and `display-message -t`.
@@ -34,7 +55,11 @@ export declare function resolveSkcTmuxCommand(env?: NodeJS.ProcessEnv): string;
  * keeps the exact-session match while giving tmux the window-qualified target
  * those commands require. See sayknow-cli#580.
  */
-export declare function buildSkcTmuxExactOptionTarget(sessionName: string): string;
+export declare function buildSkcTmuxExactOptionTarget(sessionName: string, opts?: {
+    env?: NodeJS.ProcessEnv;
+    platform?: NodeJS.Platform;
+    binary?: ResolvedTmuxBinary;
+}): string;
 export declare const SKC_TMUX_UNTAGGED_REASON = "skc_tmux_session_untagged";
 export declare function buildSkcTmuxUntaggedSessionHint(tmuxCommand: string): string;
 export declare function buildSkcTmuxUntaggedSessionError(sessionName: string, tmuxCommand: string): string;
@@ -60,5 +85,8 @@ export declare function buildSkcTmuxProfileCommands(target: string, env?: NodeJS
     sessionId?: string | null;
     sessionStateFile?: string | null;
     version?: string | null;
+}, opts?: {
+    platform?: NodeJS.Platform;
+    tmuxCommand?: string;
 }): SkcTmuxProfileCommand[];
 export declare function normalizeTmuxCreatedAt(raw: string): string;

package/dist/types/skc-runtime/tmux-sessions.d.ts

@@ -41,4 +41,22 @@ export declare function createSkcTmuxSession(env?: NodeJS.ProcessEnv): SkcTmuxSe
 /** @internal */
 export declare function readTmuxSessionTagsForGc(sessionName: string, env?: NodeJS.ProcessEnv): SkcTmuxSessionTagsForGc;
 export declare function removeSkcTmuxSession(sessionName: string, env?: NodeJS.ProcessEnv): SkcTmuxSessionStatus;
+/**
+ * Force-close a SKC-managed tmux session, even if a live pane is attached.
+ *
+ * This is the lifecycle-control counterpart to {@link removeSkcTmuxSession}: it
+ * intentionally does NOT refuse live/attached panes (hard-kill is the contract),
+ * but it keeps every safety check so it can only ever kill a genuinely
+ * SKC-managed session:
+ * - re-reads the exact tmux profile immediately before kill (never a non-SKC
+ *   session, even one that collides by name);
+ * - when `expectedSessionId` is given, requires the `@skc-session-id` tag match;
+ * - when `expectedStateFile` is given, requires the `@skc-session-state-file`
+ *   tag match.
+ *
+ * Returns the prior status (for audit). Throws a tagged error otherwise:
+ * `skc_tmux_session_not_found`, `skc_tmux_session_not_managed`,
+ * `skc_tmux_session_id_mismatch`, or `skc_tmux_session_state_file_mismatch`.
+ */
+export declare function forceCloseSkcTmuxSession(sessionName: string, env?: NodeJS.ProcessEnv, expectedSessionId?: string, expectedStateFile?: string): SkcTmuxSessionStatus;
 export declare function attachSkcTmuxSession(sessionName: string, env?: NodeJS.ProcessEnv): never;

package/dist/types/slash-commands/helpers/fast-status-report.d.ts

@@ -37,6 +37,12 @@ export interface FastStatusSessionLike {
     readonly model?: Model;
     /** Fast predicate against the main session tier (current model + `modelRoles`). */
     isFastForProvider(provider?: string): boolean;
+    /**
+     * Current-model EFFECTIVE fast state (intent minus any provider auto-disable).
+     * Used for the current-model row so it matches what the next request does.
+     * Optional so lightweight fakes can omit it; falls back to `isFastForProvider`.
+     */
+    isFastModeActive?(): boolean;
     /** Fast predicate against the effective subagent tier (`task.agentModelOverrides` roles). */
     isFastForSubagentProvider(provider?: string): boolean;
     resolveRoleModelWithThinking(role: string): {

package/dist/types/system-prompt.d.ts

@@ -47,6 +47,8 @@ export interface BuildSystemPromptOptions {
     toolNames?: string[];
     /** Text to append to system prompt. */
     appendSystemPrompt?: string;
+    /** Rendered SKC plugin system-appendix blocks (lower-authority, appended last). */
+    pluginAppendices?: string;
     /** Repeat full tool descriptions in system prompt. Default: false */
     repeatToolDescriptions?: boolean;
     /** Skills settings for discovery. */

package/dist/types/task/executor.d.ts

@@ -4,6 +4,7 @@
  * Runs each subagent on the main thread and forwards AgentEvents for progress tracking.
  */
 import type { AgentTelemetryConfig, ThinkingLevel } from "@sayknow-cli/agent-core";
+import type { ServiceTier } from "@sayknow-cli/ai";
 import { ModelRegistry } from "../config/model-registry";
 import type { PromptTemplate } from "../config/prompt-templates";
 import { Settings } from "../config/settings";
@@ -58,6 +59,13 @@ export interface ExecutorOptions {
     authStorage?: AuthStorage;
     modelRegistry?: ModelRegistry;
     settings?: Settings;
+    /**
+     * Live service-tier intent of the parent session (`AgentSession.serviceTier`),
+     * used as the inherited tier when `task.serviceTier === "inherit"`. Passing the
+     * live value (not the stale settings snapshot) lets a runtime `/fast on` reach
+     * subagents, and a main-model fast-mode auto-disable does not clobber it.
+     */
+    inheritedServiceTier?: ServiceTier;
     /** Override local:// protocol options so subagent shares parent's local:// root */
     localProtocolOptions?: LocalProtocolOptions;
     /**
@@ -105,7 +113,7 @@ interface FinalizeSubprocessOutputResult {
 export declare const SUBAGENT_WARNING_NULL_YIELD = "SYSTEM WARNING: Subagent called yield with null data.";
 export declare const SUBAGENT_WARNING_MISSING_YIELD = "SYSTEM WARNING: Subagent exited without calling yield tool after 3 reminders.";
 export declare function finalizeSubprocessOutput(args: FinalizeSubprocessOutputArgs): FinalizeSubprocessOutputResult;
-export declare function createSubagentSettings(baseSettings: Settings): Settings;
+export declare function createSubagentSettings(baseSettings: Settings, inheritedServiceTier?: ServiceTier): Settings;
 /**
  * Run a single agent in-process.
  */

package/dist/types/tools/composer-bash-policy.d.ts

@@ -0,0 +1,14 @@
+export declare const COMPOSER_BASH_POLICY_ERROR = "Composer bash policy blocked repository file I/O. Use find, search, read, and edit tools for file discovery, file inspection, and file mutation.";
+type ComposerBashPolicyResult = {
+    allowed: true;
+} | {
+    allowed: false;
+    reason: string;
+    message: string;
+};
+export declare function isComposerBashPolicyModel(modelId: string | undefined): boolean;
+export declare function checkComposerBashPolicy(input: {
+    modelId?: string;
+    commands: readonly string[];
+}): ComposerBashPolicyResult;
+export {};

package/dist/types/tools/index.d.ts

@@ -1,5 +1,5 @@
 import type { AgentTelemetryConfig, AgentTool } from "@sayknow-cli/agent-core";
-import type { Model, ToolChoice } from "@sayknow-cli/ai";
+import type { Model, ServiceTier, ToolChoice } from "@sayknow-cli/ai";
 import type { PromptTemplate } from "../config/prompt-templates";
 import type { Settings } from "../config/settings";
 import type { Skill } from "../extensibility/skills";
@@ -173,6 +173,8 @@ export interface ToolSession {
     agentOutputManager?: AgentOutputManager;
     /** Settings instance for passing to subagents */
     settings: Settings;
+    /** Live service-tier intent of the parent session, inherited by `inherit` subagents. */
+    serviceTier?: ServiceTier;
     /** Plan mode state (if active) */
     getPlanModeState?: () => PlanModeState | undefined;
     /** Goal mode state (if active or paused) */

package/dist/types/utils/changelog.d.ts

@@ -25,6 +25,7 @@ export declare function parseChangelog(changelogPath: string): Promise<Changelog
  * binary-identity changelog).
  */
 export declare function getDisplayChangelogEntries(): ChangelogEntry[];
+export declare function getInstalledVersionChangelogEntry(entries: readonly ChangelogEntry[], installedVersion: string): ChangelogEntry | undefined;
 /**
  * Compare versions. Returns: -1 if v1 < v2, 0 if v1 === v2, 1 if v1 > v2
  */

package/dist/types/web/insane/url-guard.d.ts

@@ -13,10 +13,13 @@ export type AddressResolver = (hostname: string) => Promise<string[]>;
 /** True for any address that is not a routable public unicast address. */
 export declare function isPrivateOrSpecialAddress(address: string): boolean;
 /**
- * Validate that `rawUrl` is a public http/https target safe to hand to the
- * insane-search engine. Resolves DNS names and rejects any that map to a
- * private/special address. Never throws; returns a discriminated result.
+ * Validate that `rawUrl` is a public http/https target. Resolves DNS names and
+ * rejects any that map to a private/special address. Never throws; returns a
+ * discriminated result.
  */
+export declare function validatePublicHttpUrl(rawUrl: string, options?: {
+    resolver?: AddressResolver;
+}): Promise<PublicUrlResult>;
 export declare function validatePublicHttpUrlForInsane(rawUrl: string, options?: {
     resolver?: AddressResolver;
 }): Promise<PublicUrlResult>;

package/dist/types/web/scrapers/types.d.ts

@@ -1,4 +1,5 @@
 import type { AgentStorage } from "../../session/agent-storage";
+import type { AddressResolver } from "../insane/url-guard";
 export { formatNumber } from "@sayknow-cli/utils";
 export interface RenderResult {
     url: string;
@@ -27,6 +28,9 @@ export interface LoadPageOptions {
     body?: string;
     maxBytes?: number;
     signal?: AbortSignal;
+    publicUrlGuard?: boolean;
+    resolver?: AddressResolver;
+    maxRedirects?: number;
 }
 export interface LoadPageResult {
     content: string;
@@ -34,6 +38,7 @@ export interface LoadPageResult {
     finalUrl: string;
     ok: boolean;
     status?: number;
+    error?: string;
 }
 /**
  * Fetch a page with timeout and size limit

package/dist/types/web/scrapers/utils.d.ts

@@ -1,5 +1,6 @@
 import { isRecord } from "@sayknow-cli/utils";
 export { isRecord };
+import type { AddressResolver } from "../insane/url-guard";
 export declare function asRecord(value: unknown): Record<string, unknown> | null;
 export declare function asString(value: unknown): string | null;
 export declare function asNumber(value: unknown): number | null;
@@ -12,10 +13,15 @@ export type BinaryFetchResult = BinaryFetchSuccess | {
     ok: false;
     error?: string;
 };
+export interface FetchBinaryOptions {
+    publicUrlGuard?: boolean;
+    resolver?: AddressResolver;
+    maxRedirects?: number;
+}
 /**
  * Fetch binary content from a URL
  */
-export declare function fetchBinary(url: string, timeout?: number, signal?: AbortSignal): Promise<BinaryFetchResult>;
+export declare function fetchBinary(url: string, timeout?: number, signal?: AbortSignal, options?: FetchBinaryOptions): Promise<BinaryFetchResult>;
 /**
  * Convert binary content to markdown using markit.
  */

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@sayknow-cli/coding-agent",
-	"version": "0.3.1",
+	"version": "0.3.2",
 	"description": "Sayknow-CLI CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://github.com/jaybeyond/Sayknow_CLI",
 	"author": "jaybeyond",
@@ -28,7 +28,7 @@
 	"main": "./src/index.ts",
 	"types": "./dist/types/index.d.ts",
 	"bin": {
-		"skc": "src/cli.ts"
+		"skc": "bin/skc.js"
 	},
 	"scripts": {
 		"build": "bun scripts/build-binary.ts",
@@ -52,12 +52,12 @@
 		"@agentclientprotocol/sdk": "0.21.0",
 		"@babel/parser": "^7.29.3",
 		"@mozilla/readability": "^0.6.0",
-		"@sayknow-cli/stats": "0.3.1",
-		"@sayknow-cli/agent-core": "0.3.1",
-		"@sayknow-cli/ai": "0.3.1",
-		"@sayknow-cli/natives": "0.3.1",
-		"@sayknow-cli/tui": "0.3.1",
-		"@sayknow-cli/utils": "0.3.1",
+		"@sayknow-cli/stats": "0.3.2",
+		"@sayknow-cli/agent-core": "0.3.2",
+		"@sayknow-cli/ai": "0.3.2",
+		"@sayknow-cli/natives": "0.3.2",
+		"@sayknow-cli/tui": "0.3.2",
+		"@sayknow-cli/utils": "0.3.2",
 		"@puppeteer/browsers": "^2.13.0",
 		"@types/turndown": "5.0.6",
 		"@xterm/headless": "^6.0.0",
@@ -74,13 +74,15 @@
 		"zod": "4.4.3"
 	},
 	"devDependencies": {
-		"@types/bun": "^1.3.14"
+		"@types/bun": "^1.3.14",
+		"@types/ws": "^8.5.13"
 	},
 	"engines": {
 		"bun": ">=1.3.14"
 	},
 	"files": [
 		"src",
+		"bin",
 		"scripts",
 		"examples",
 		"README.md",