@sayknow-cli/coding-agent 0.5.1 → 0.5.6

package/CHANGELOG.md

@@ -1,13 +1,184 @@
 # Changelog
 
-Sayknow-CLI is a rebranded fork of [gajae-code](https://github.com/Yeachan-Heo/gajae-code).
+## [Unreleased]
+
+## [0.5.6] - 2026-08-28
+
+## [0.5.4] - 2026-08-28
+
+Sayknow-CLI descends from an upstream MIT agent harness; see [`NOTICE.md`](../../NOTICE.md).
 This file tracks the **fork's own releases**; upstream's full feature history lives
 in that project. Each release notes the upstream version it is built on.
 
 
+## [0.5.3] - 2026-08-28
+
+### Added
+
+- Added zero-configuration oMLX and loopback-safe SGLang discovery through the shared OpenAI-compatible registry, including reviewed oMLX model profiles, thinking-effort preservation, schemas, and local-provider tests.
+- Added explicit-file `/import-session` support for Codex rollout JSONL, Claude Code JSONL, and claude.ai exports with bounded redacted context, quarantined unmappable records, durable provenance, workspace-scoped idempotent native publication, and ACP isolation for path-bearing import, export, and move commands.
+### Fixed
+
+- Imported-session targets activate only through an idle-only session transition; a response or turn that wins the activation race leaves the reused or newly published target intact for later resume instead of interrupting active work.
+
+- LSP, DAP, and stdio MCP protocol writes now serialize complete write/flush transactions, await sink backpressure, propagate peer-close failures, and terminalize stale transports on fatal writes or stdout EOF instead of leaving delayed unhandled EPIPE errors or timeout-bound pending requests.
+- Managed sessions now sample transcript size proactively only through a retained exact-file authority, treat unavailable sampling as unknown, and recover an authority-bound `content_too_large` append by atomically rewriting the exact live entry set; failed rewrites latch persistence and roll back volatile branch mutation before later appends.
+- Explicit empty tool selections such as `--no-tools` now remain authoritative across goal/workflow restoration, session branching, and plan-mode transitions instead of silently reactivating built-in tools.
+- `config set` and `config reset` now report success only after durable persistence; atomic YAML writes retain their original resolved target and fail closed on symlink or target-identity retargeting.
+- `skc --worktree` now installs Bun, npm, or pnpm dependencies from the worktree's own matching lockfile instead of linking a package checkout to the source tree's `node_modules`; nested package roots keep their cwd, legacy owned links are migrated, unrelated links are refused, and repeated launches reuse the local install location.
+- Release publication now emits Sayknow-owned SHA-256 manifests, and standalone installers plus `skc update` verify the selected platform binary before replacing an installation; missing or mismatched integrity metadata and concurrent installers fail closed.
+
+### Changed
+
+- The command palette now exposes availability-gated follow-up, queue editing, immediate-send, and transcript-turn actions; their default keybindings remain unchanged, while user remaps dispatch through the shared action registry.
+- Korean and emoji escapes in `ask` question text and option labels now recover as display-only content while ids and workflow metadata remain fail-closed.
+- The todo HUD can be expanded from its action/keybinding, startup can skip the logo sweep, and provider or MCP OAuth URLs copy only through an explicit remappable action.
+- **Upstream independence.** Retired the upstream sync/regeneration pipeline
+  (`rebrand/` layer plus the generation scripts); this tree is now the single
+  source of truth and upstream fixes are ported by cherry-pick only. See
+  `docs/FORK_MAINTENANCE.md`.
+- `bun run release` now enforces the fork policy end to end: runs from the
+  `sayknow-fork` branch, tags `sayknow-vX.Y.Z`, checks monotonicity against the
+  fork tag series only, refuses same-version plain `v` tags on origin, and the
+  release attaches both release-evidence JSONs for the daily public-sync live
+  check.
+- Scrubbed upstream brand references from public docs, the embedded docs
+  index, and test fixtures (also fixing two fixture assertions the original
+  rename had broken). MIT attribution remains in `LICENSE` and `NOTICE.md`.
+
+## [0.5.2] — 2026-08-14
+
+Built on upstream **v0.12.0**.
+
+### Fixed (unattended workflow gates were unanswerable through the control plane)
+
+`UnattendedSessionControlPlane.emitGate` opened gates without a broker
+continuation, so every gate it emitted was quarantined as
+`opened_without_continuation` and could never be answered; its `advance` hook
+also settled the waiter early, violating the broker's post-advance liveness
+check, and accepted gates then failed terminalization for lack of a proof. The
+control plane now registers a live continuation, settles waiters in
+`completeAccepted` (mirroring the session-side emitter), and declares the
+designed `not_published` terminal proof. The ask tool regained the fork's gate
+semantics on top of that: a negotiated unattended emitter wins over an attended
+UI, clarification answers surface the user's question instead of aborting as a
+cancel, multi-select keeps its empty-"Next" semantics through the gate schema,
+and gate metadata carries the Next/Done navigation label again.
+
+### Fixed (ask wire schema: deep-interview intent branches and gate addressing)
+
+The deep-interview intent contract is enforced **on the wire** again: ask's
+`deepInterview` metadata is a union of three mutually exclusive strict branches
+(ordinary round / Round-0 `intent_contract` locked to `component:
+"review-topology"` / post-Round-0 `intent_review` with `round >= 1`), so a
+provider that only sees the JSON schema cannot combine a manifest lock with a
+reduction review or attach either to the wrong round. Questions also regained
+the `workflowGate` stage/kind override for addressing non-deep-interview gates,
+and such overridden questions are excluded from the interview recorder.
+
+### Fixed (`SKC_PY` / `PI_PY` / `PI_JS` eval backend selection was ignored)
+
+`resolveEvalBackends` existed but the eval tool never called it: backend
+allowance was read from settings only, so `SKC_PY=js` still spawned the Python
+kernel. The tool now resolves allowance through the documented precedence
+(`SKC_PY`, then legacy `PI_PY`/`PI_JS`, then `eval.py`/`eval.js` settings).
+
+### Fixed (stale model discovery result could overwrite a fresher one)
+
+Overlapping `refreshProvider` calls for the same provider raced without any
+ordering guard: whichever fetch *completed* last published its discovery state
+and model list, so a slow stale response could erase the models a fresher
+refresh had just delivered. Discovery now carries a monotonic per-provider
+sequence and only the newest-started refresh may publish state or contribute
+models.
+
+### Fixed (post-merge repair: type-check and test contracts realigned)
+
+The upstream merges left the workspace `check` red for several releases: test
+files frozen at fork v0.4.7 kept exercising APIs their source had since dropped
+(session-sticky canonical model resolution, `getSelectorSuppressionStatus`,
+`refreshPresetProfiles`, the pre-broker in-process `AcpAgent`, the fork-era
+bridge-client `WorkflowGate` surface). Stale suites superseded by current
+coverage were removed, the survivors were realigned to the shipped APIs, the
+form-elicitation bridge kept its only coverage via a ported focused suite, the
+`node-pty` dev dependency the merge dropped from `@sayknow-cli/tui` is restored,
+and the extracted model helper modules (`config/model-auth`,
+`config/model-bindings-applier`, `config/model-discovery-manager`) are now
+explicitly unexported, matching the documented package surface.
+
+### Fixed (todo_write truncation and retry loops)
+
+Structurally complete JSON tool calls now execute even when a Responses provider
+hits its output-token limit before emitting the final item event. Invalid todo
+payloads retry at most once, while transport failures and repeated errors fail
+open so the requested work continues without visible todo tracking.
+
+### Fixed (v0.5.0 upstream merge reverted the fork's tmux graphics support)
+
+The v0.12.0 upstream merge overwrote `packages/tui/src/tui.ts` and silently
+dropped three fork-only behaviors, which is why the pet was unavailable in every
+tmux session and `packages/tui/test/sixel-probe.test.ts` shipped with three
+failing tests:
+
+- the capability probe refused to run under any multiplexer, so
+  `isSixelMultiplexerEnabled()` became dead code
+- the sixel probe was no longer wrapped in tmux's DCS passthrough envelope, so
+  tmux answered for a client it knows nothing about
+- the `CSI 16 t` cell-size query lost its passthrough wrapper (the v0.4.6 fix),
+  so tmux reported a cell size the outer terminal never uses
+
+All three are restored, with the probe deadline back at 600 ms under tmux to
+cover the passthrough round trip.
+
+### Fixed (transcript images stacked over the text under tmux)
+
+Enabling the sixel probe under tmux also switched INLINE graphics on, and the
+inline path wrapped every raster in the DCS passthrough envelope. Passthrough
+writes pixels straight into the OUTER terminal's image plane at its *physical*
+cursor: tmux neither positions that cursor for the pane nor records the pixels,
+so tool-result screenshots landed in the wrong row and survived every repaint —
+each render stacked another copy over the transcript.
+
+Inline placements now follow the same ownership rule the pet already used:
+
+- tmux advertising the `sixel` terminal-feature (which the SKC tmux profile sets
+  automatically) parses the raster into its own screen model, so the raster is
+  written raw and scroll / erase / resize move the image with its text.
+- Without that feature the inline render returns the `[image/png …]` placeholder
+  instead. An image welded to the outer terminal's physical cursor for the rest
+  of the session is worse than no image.
+- Absolutely positioned overlays (the pet) are unaffected: they carry their own
+  coordinates through the envelope and remain the only passthrough user.
+
+### Added (Sayknow Pet under tmux on kitty-protocol terminals)
+
+Ghostty, Kitty and WezTerm implement kitty graphics and no sixel at all, so the
+sixel probe alone left them with no pet inside tmux. SKC now also forwards a
+kitty capability query (`a=q`) through the passthrough envelope. tmux cannot
+answer it on the terminal's behalf — it does not implement the protocol — so an
+`OK` coming back is genuine end-to-end evidence, unlike tmux's compile-time DA1
+sixel claim.
+
+- A successful query enables a dedicated **overlay** channel
+  (`setTmuxOverlayImageProtocol`) rather than inline image rendering: absolutely
+  positioned art can carry its own cursor addressing through the envelope, while
+  inline placements would land at tmux's stale physical cursor.
+- Overlay payloads now carry the pane origin (`#{pane_top}`, `#{pane_left}`, and
+  top status lines), so a split window or a top status bar no longer draws the
+  pet in the wrong place. This also fixes the pre-existing sixel-fallback path.
+- `allow-passthrough` is requested pane-locally at startup, so a tmux pane the
+  user created by hand works without manual configuration.
+- Kill switch: `SKC_KITTY_MULTIPLEXER=0`.
+- The tmux-specific unavailable warning no longer tells users to leave the
+  multiplexer or to force sixel; it names the actual requirement.
+
+Verified end to end on Ghostty 1.3.1 + tmux 3.6b: pane passthrough is enabled
+automatically, the probe reports `ImageProtocol.Kitty`, and the outer terminal's
+real cell metrics (16x34) replace the 9x18 default.
+
 ## [0.5.1] — 2026-07-29
 
-Built on upstream **gajae-code v0.12.0**.
+Built on upstream **v0.12.0**.
 
 ### Fixed (Sayknow Pet still left sixel residue under tmux)
 
@@ -32,7 +203,7 @@ exactly the people who already had a session open.
 
 ## [0.5.0] — 2026-07-28
 
-Built on upstream **gajae-code v0.12.0** (previous fork release tracked v0.11.6).
+Built on upstream **v0.12.0** (previous fork release tracked v0.11.6).
 
 ### Security (inherited from upstream v0.12.0)
 
@@ -89,11 +260,11 @@ and that summary is injected into every later session.
 
 ### Fixed (rebrand leakage)
 
-- **Stop creating `.gjc-*` paths.** `recovery_fs` and `path_identity` still wrote
-  `.gjc-recovery`, `.gjc-managed-remove-*`, and `.gjc-exact-unlink-*` on disk: the
-  rename never reached them, so recovery state landed under an upstream-branded
-  directory name. 24 residual tokens are gone and the sync pipeline now fails the
-  build instead of shipping them.
+- **Stop creating legacy-branded recovery paths.** `recovery_fs` and
+  `path_identity` still wrote legacy-branded recovery and removal marker
+  directories on disk: the rename never reached them, so recovery state landed
+  under an upstream-branded directory name. 24 residual tokens are gone and the
+  build now fails instead of shipping them.
 
 ### Fixed (fork pipeline)
 
@@ -257,7 +428,7 @@ platform subpackages publish from a single CI run.
 
 ### Changed
 
-- Synced onto upstream **gajae-code v0.11.6** (from v0.6.0), a 5-minor-version jump
+- Synced onto upstream **v0.11.6** (from v0.6.0), a 5-minor-version jump
   bringing v0.7–v0.11 evolution: managed chat daemon (#2782, #2785, #2786), Telegram
   lock auto-reconciliation (#2781), compiled startup import-cycle fix (#2779), legacy
   daemon tombstone reclamation (#2780), nextest CI hardening (#2777), and the new
@@ -308,7 +479,7 @@ platform subpackages publish from a single CI run.
 
 ### Changed
 
-- Synced onto upstream **gajae-code v0.7.1** (from v0.6.5), bringing 0.7.0's mobile
+- Synced onto upstream **v0.7.1** (from v0.6.5), bringing 0.7.0's mobile
   notifications SDK + managed Telegram daemon and 0.7.1's fixes (assistant
   notification lead-in, stale tmux session reuse, packaged native imports, and the
   glm-zcode Z.AI provider) while preserving the Sayknow-CLI brand.
@@ -348,7 +519,7 @@ platform subpackages publish from a single CI run.
 
 ### Changed
 
-- Synced onto upstream **gajae-code v0.6.5** (from v0.6.0), bringing its latest
+- Synced onto upstream **v0.6.5** (from v0.6.0), bringing its latest
   features and fixes while preserving the Sayknow-CLI brand. The new welcome
   logo-mode support renders the blue **SAYKNOW** wordmark in every mode.
 
@@ -412,7 +583,7 @@ platform subpackages publish from a single CI run.
 
 ### Changed
 
-- Synced onto upstream **gajae-code v0.6.0** (52 commits, +27k lines), bringing its
+- Synced onto upstream **v0.6.0** (52 commits, +27k lines), bringing its
   new features and fixes — including the opt-in `skc rlm` research mode, the goal
   `pause` operation, steer-by-default while busy, and the experimental
   desktop-control tool surface — while preserving the Sayknow-CLI brand and the
@@ -420,7 +591,7 @@ platform subpackages publish from a single CI run.
 
 ## [0.1.0] — 2026-06-17
 
-Initial Sayknow-CLI release, forked from gajae-code v0.5.4.
+Initial Sayknow-CLI release, forked from upstream v0.5.4.
 
 ### Added
 
@@ -438,7 +609,7 @@ Initial Sayknow-CLI release, forked from gajae-code v0.5.4.
 
 ### Changed
 
-- Rebranded `gajae-code` → **Sayknow-CLI** (`skc`, `@sayknow-cli/*`) and reset the
+- Rebranded the upstream harness → **Sayknow-CLI** (`skc`, `@sayknow-cli/*`) and reset the
   version to 0.1.0.
 - The model selector now starts OAuth login directly when you pick an
   unauthenticated preset, instead of only printing a hint.

package/dist/types/cli/update-cli.d.ts

@@ -56,10 +56,14 @@ type PathPlatform = NodeJS.Platform;
 type PackageExists = (packageName: string, packageRoot: string) => boolean;
 export declare function resolveUpdateMethodForTest(ompPath: string, bunBinDir: string | undefined): "bun" | "npm" | "binary";
 export declare function resolveNpmManagedTargetForTest(ompPath: string, platform: PathPlatform, packageExists: PackageExists): PackageManagerTarget | undefined;
+export declare function getBinaryNameForTest(platform?: NodeJS.Platform, arch?: string): string;
+export declare function fetchExpectedBinaryDigest(version: string, assetName: string, fetchImpl?: (url: string) => Promise<Response>): Promise<string>;
+export declare function verifyReleaseBinaryIntegrity(filePath: string, version: string, assetName: string, fetchImpl?: (url: string) => Promise<Response>): Promise<void>;
 export declare function formatBinaryDownloadFailureMessageForTest(binaryName: string, url: string, status: string | number, platform?: NodeJS.Platform): string;
 export declare function buildReleaseBinaryUrlForTest(version: string, platform?: NodeJS.Platform, arch?: string): string;
 export declare function formatManualUpdateInstructionsForTest(platform?: NodeJS.Platform): string;
 export declare function formatVerificationFailureForTest(result: InstalledVersionVerification, expectedVersion: string): string;
+export declare function withBinaryUpdateLock<T>(targetPath: string, operation: () => Promise<T>): Promise<T>;
 /**
  * Atomically replace the installed binary and roll back if version verification fails.
  */
@@ -69,16 +73,19 @@ export declare function fsyncFileForTest(filePath: string): Promise<void>;
 /** Injectable steps of the binary update flow (seams for testing ordering). */
 export interface BinaryUpdateFlow {
     download(url: string, tempPath: string): Promise<void>;
+    verifyIntegrity(filePath: string): Promise<void>;
     fsync(filePath: string): Promise<void>;
     replace(options: BinaryReplacementOptions): Promise<InstalledVersionVerification>;
     verifyInstalledVersion(expectedVersion: string): Promise<InstalledVersionVerification>;
     /** Best-effort cleanup of the temp file when the flow aborts before replace. */
     removeTemp?(filePath: string): Promise<void>;
+    /** Stable suffix for focused tests; production uses a process-unique staging path. */
+    transactionId?: string;
     /** Called once fsync has succeeded, right before replacement begins. */
     beforeReplace?(): void;
 }
 /**
- * Orchestrate download → fsync → replace → verify with a strict ordering
+ * Orchestrate download → integrity verification → fsync → replace → version/smoke verification.
  * contract: the downloaded temp binary MUST be flushed to stable storage
  * before it is published (renamed into place) or exec'd for verification.
  *

package/dist/types/commands/session.d.ts

@@ -24,6 +24,13 @@ export default class Session extends Command {
         "state-file": import("@sayknow-cli/utils/cli").FlagDescriptor<"string"> & {
             description: string;
         };
+        "dry-run": import("@sayknow-cli/utils/cli").FlagDescriptor<"boolean"> & {
+            description: string;
+            default: boolean;
+        };
+        reference: import("@sayknow-cli/utils/cli").FlagDescriptor<"string"> & {
+            description: string;
+        };
     };
     static examples: string[];
     run(): Promise<void>;

package/dist/types/config/atomic-yaml-patch.d.ts

@@ -72,6 +72,24 @@ export declare class AtomicYamlReplaceError extends Error {
     readonly code = "ATOMIC_YAML_REPLACE_FAILED";
     constructor(configPath: string, attempts: number, cause: unknown);
 }
+/** Raised when the configured lexical route no longer resolves to its original target. */
+export declare class AtomicYamlRetargetError extends Error {
+    readonly code = "ATOMIC_YAML_RETARGETED";
+    constructor();
+}
+/** Test-only coordination hooks for deterministic target-authority races. */
+export declare const AtomicYamlTestHooks: {
+    afterTargetBound?: (canonicalPath: string) => Promise<void> | void;
+};
+type AtomicYamlTargetIdentity = {
+    device: bigint;
+    inode: bigint;
+};
+type AtomicYamlTarget = {
+    canonicalPath: string;
+    resolvedPath: string;
+    identity: AtomicYamlTargetIdentity | undefined;
+};
 /** Set a dotted YAML path, creating object intermediates as needed. */
 export declare function setByPath(value: Record<string, unknown>, segments: readonly string[], nextValue: unknown): void;
 /** Delete a dotted YAML path without disturbing sibling keys or parent objects. */
@@ -85,7 +103,7 @@ export declare function applyAtomicYamlPatchesWithCurrent(configPath: string, bu
  * only when this operation reaches the front of the in-process queue, which lets
  * Settings debounce/coalesce inside its already-reserved causal slot.
  */
-export declare function enqueueAtomicYamlOperation<T>(configPath: string, operation: (canonicalConfigPath: string) => Promise<T>): Promise<T>;
+export declare function enqueueAtomicYamlOperation<T>(configPath: string, operation: (canonicalConfigPath: string, target: AtomicYamlTarget) => Promise<T>): Promise<T>;
 /**
  * Reserve an atomic patch slot now, producing patches only after earlier slots
  * complete. Writers with state-aware merges use {@link reserveAtomicYamlUpdateSlot}.
@@ -101,3 +119,4 @@ export declare function reserveAtomicYamlUpdateSlot<T>(configPath: string, updat
  * cross-process file lock. Success means the temp file was fsynced and renamed.
  */
 export declare function applyAtomicYamlPatches(configPath: string, patches: readonly AtomicYamlPatch[], options?: AtomicYamlPatchOptions): Promise<CasReceipt>;
+export {};

package/dist/types/config/keybindings.d.ts

@@ -16,6 +16,7 @@ interface AppKeybindings {
     "app.model.select": true;
     "app.model.selectTemporary": true;
     "app.tools.expand": true;
+    "app.todo.toggle": true;
     "app.tool.backgroundFold": true;
     "app.editor.external": true;
     "app.message.followUp": true;
@@ -24,6 +25,7 @@ interface AppKeybindings {
     "app.clipboard.pasteImage": true;
     "app.clipboard.copyLine": true;
     "app.clipboard.copyPrompt": true;
+    "app.oauth.copyUrl": true;
     "app.session.new": true;
     "app.session.tree": true;
     "app.session.fork": true;
@@ -109,6 +111,10 @@ export declare const KEYBINDINGS: {
         readonly defaultKeys: "ctrl+o";
         readonly description: "Expand tools";
     };
+    readonly "app.todo.toggle": {
+        readonly defaultKeys: "alt+shift+t";
+        readonly description: "Toggle todo list expansion";
+    };
     readonly "app.tool.backgroundFold": {
         readonly defaultKeys: "ctrl+b";
         readonly description: "Fold/background supported foreground tool";
@@ -141,6 +147,10 @@ export declare const KEYBINDINGS: {
         readonly defaultKeys: "alt+shift+c";
         readonly description: "Copy prompt";
     };
+    readonly "app.oauth.copyUrl": {
+        readonly defaultKeys: "alt+shift+u";
+        readonly description: "Copy OAuth authorization URL";
+    };
     readonly "app.session.new": {
         readonly defaultKeys: "ctrl+n";
         readonly description: "Start a new session";

package/dist/types/config/model-registry.d.ts

@@ -96,7 +96,7 @@ export declare const ModelsConfigFile: ConfigFile<{
         authHeader?: boolean | undefined;
         auth?: "none" | "apiKey" | "oauth" | undefined;
         discovery?: {
-            type: "ollama" | "lm-studio" | "llama.cpp" | "openai-models-list";
+            type: "ollama" | "lm-studio" | "omlx" | "sglang" | "llama.cpp" | "openai-models-list";
         } | undefined;
         requestTransform?: {
             profile?: "openai-proxy" | undefined;

package/dist/types/config/models-config-schema.d.ts

@@ -260,6 +260,8 @@ export declare const ProviderDiscoverySchema: z.ZodObject<{
     type: z.ZodEnum<{
         ollama: "ollama";
         "lm-studio": "lm-studio";
+        omlx: "omlx";
+        sglang: "sglang";
         "llama.cpp": "llama.cpp";
         "openai-models-list": "openai-models-list";
     }>;
@@ -368,6 +370,8 @@ export declare const ModelsConfigSchema: z.ZodObject<{
             type: z.ZodEnum<{
                 ollama: "ollama";
                 "lm-studio": "lm-studio";
+                omlx: "omlx";
+                sglang: "sglang";
                 "llama.cpp": "llama.cpp";
                 "openai-models-list": "openai-models-list";
             }>;

package/dist/types/config/settings-schema.d.ts

@@ -1663,6 +1663,15 @@ export declare const SETTINGS_SCHEMA: {
             }];
         };
     };
+    readonly "startup.skipLogoAnimation": {
+        readonly type: "boolean";
+        readonly default: false;
+        readonly ui: {
+            readonly tab: "interaction";
+            readonly label: "Skip Logo Animation";
+            readonly description: "Show the final welcome logo immediately";
+        };
+    };
     readonly "startup.checkUpdate": {
         readonly type: "boolean";
         readonly default: true;

package/dist/types/config/telegram-autostart.d.ts

@@ -6,9 +6,17 @@
  * process, tracks its PID so repeated skc invocations don't double-spawn,
  * and redirects output to a log file under the config root.
  */
+import { type Settings } from "./settings";
+/**
+ * The startup command runs against an explicit Settings instance (tests and
+ * embedders inject one), so read through it instead of the global proxy —
+ * which may not be initialized at all on those paths.
+ */
+type TelegramSettingsSource = Pick<Settings, "get">;
 /**
  * If `telegram.enabled` is true and the gateway is not already running, spawn
  * it in the background. Never throws — failures are logged as warnings so the
  * main skc session is unaffected.
  */
-export declare function maybeAutostartTelegramRemote(): Promise<void>;
+export declare function maybeAutostartTelegramRemote(settings?: TelegramSettingsSource): Promise<void>;
+export {};

package/dist/types/dap/client.d.ts

@@ -35,5 +35,6 @@ export declare class DapClient {
     sendRequest<TBody = unknown>(command: string, args?: unknown, signal?: AbortSignal, timeoutMs?: number): Promise<TBody>;
     sendResponse(request: DapRequestMessage, success: boolean, body?: unknown, message?: string): Promise<void>;
     dispose(): Promise<void>;
+    startMessageReader(): Promise<void>;
 }
 export {};

package/dist/types/lsp/client.d.ts

@@ -5,6 +5,11 @@ import type { LspClient, ServerConfig } from "./types";
  */
 export declare function setIdleTimeout(ms: number | null | undefined): void;
 export declare function isIdleCheckerActiveForTests(): boolean;
+/**
+ * Start background message reader for a client.
+ * Routes responses to pending requests and handles notifications.
+ */
+export declare function startMessageReader(client: LspClient): Promise<void>;
 /** Timeout for warmup initialize requests (5 seconds) */
 export declare const WARMUP_TIMEOUT_MS = 5000;
 /**

package/dist/types/modes/components/pet-capability.d.ts

@@ -9,15 +9,16 @@ export declare function isPetAvailable(): boolean;
 export declare function createPetSelectItems(options: ReadonlyArray<SelectItem>, currentValue: string, available: boolean): SelectItem[];
 /**
  * Grace period before declaring the terminal pet-incapable at startup. The
- * asynchronous Sixel capability probe starts inside `TUI.start()` and answers
- * within its own 250 ms deadline; this margin covers probe scheduling so a
- * supported terminal is never told it is incompatible while the probe is
- * still in flight.
+ * asynchronous capability probes start inside `TUI.start()` and answer within
+ * their own deadline (250 ms directly, 600 ms through tmux passthrough); this
+ * margin covers probe scheduling so a supported terminal is never told it is
+ * incompatible while a probe is still in flight.
  */
-export declare const PET_CAPABILITY_SETTLE_MS = 1000;
+export declare const PET_CAPABILITY_SETTLE_MS = 1500;
 /**
- * Whether the asynchronous startup Sixel capability probe may still enable
- * graphics for this session, meaning current unavailability is not final.
+ * Whether an asynchronous startup capability probe (Sixel, or Kitty through
+ * tmux passthrough) may still enable graphics for this session, meaning current
+ * unavailability is not final.
  */
 export declare function isPetCapabilityProbePending(env?: NodeJS.ProcessEnv, platform?: NodeJS.Platform): boolean;
 /**

package/dist/types/modes/components/pet-selector.d.ts

@@ -1,7 +1,7 @@
 import { Container, type SelectList } from "@sayknow-cli/tui";
 import type { PetMode } from "./sayknow-pet-widget";
 /**
- * Theme-style picker for the sayknow pet skin (Off / RedSayknow / BlueSayknow). Preview
+ * Theme-style picker for the sayknow pet skin (Off / RedOctopus / BlueOctopus). Preview
  * fires as the selection moves; select commits, cancel restores.
  */
 export declare class PetSelectorComponent extends Container {

package/dist/types/modes/components/sayknow-pet-widget.d.ts

@@ -50,7 +50,7 @@ export declare class SayknowPetWidget {
     setMode(mode: PetMode): void;
     /** Live preview during a selector: change the sprite without re-mounting the
      *  composer editor (that would tear down the open overlay). After a short idle
-     *  eye-roll it fires the signature burst once (RedSayknow flex, BlueSayknow para-para
+     *  eye-roll it fires the signature burst once (RedOctopus flex, BlueOctopus para-para
      *  then sob) so the selector demos the animation instead of waiting the random gap. */
     previewMode(mode: PetMode): void;
     commitPreviewMode(mode: PetMode): void;

package/dist/types/modes/components/welcome.d.ts

@@ -18,6 +18,7 @@ export interface WelcomeComponentOptions {
     collapseChangelog?: boolean;
     buildLabel?: string;
     keyDisplayContext?: KeyDisplayContext;
+    skipLogoAnimation?: boolean;
 }
 /**
  * Sayknow-CLI launch surface: a blue-gradient SAYKNOW wordmark, compact

package/dist/types/modes/controllers/selector-controller.d.ts

@@ -110,7 +110,9 @@ export declare class SelectorController {
     showUserMessageSelector(): void;
     showTreeSelector(): void;
     showSessionSelector(): Promise<void>;
-    handleResumeSession(sessionPath: string): Promise<void>;
+    handleResumeSession(sessionPath: string, options?: {
+        requireIdle?: boolean;
+    }, onSwitched?: () => void): Promise<boolean>;
     handleSessionDeleteCommand(): Promise<void>;
     showOAuthSelector(mode: "login" | "logout", providerId?: string, options?: OAuthSelectorOptions): Promise<void>;
     showDebugSelector(): void;

package/dist/types/modes/interactive-mode.d.ts

@@ -57,6 +57,12 @@ export interface InteractiveModeOptions {
     initialMessages?: string[];
 }
 export declare function selectShutdownDraft(editorText: string, hasActiveBtw: boolean): string;
+export declare class OAuthAuthorizationUrlState {
+    #private;
+    set(url: string): number;
+    clear(lease: number): void;
+    get current(): string | undefined;
+}
 export declare class InteractiveMode implements InteractiveModeContext {
     #private;
     session: AgentSession;
@@ -243,6 +249,10 @@ export declare class InteractiveMode implements InteractiveModeContext {
     handleContributionPrepCommand(customInstructions?: string): Promise<void>;
     executeCompaction(customInstructionsOrOptions?: string | CompactOptions, isAuto?: boolean): Promise<CompactionOutcome>;
     openInBrowser(urlOrPath: string): void;
+    setOAuthAuthorizationUrl(url: string): number;
+    clearOAuthAuthorizationUrl(lease: number): void;
+    hasOAuthAuthorizationUrl(): boolean;
+    copyOAuthAuthorizationUrl(): Promise<void>;
     showCommandPalette(commands: SlashCommand[], actions: CommandPaletteAction[], executeSlashCommand: (name: string) => Promise<void>): void;
     showSettingsSelector(): void;
     showThemeSelector(): void;
@@ -259,7 +269,9 @@ export declare class InteractiveMode implements InteractiveModeContext {
     showUserMessageSelector(): void;
     showTreeSelector(): void;
     showSessionSelector(): void;
-    handleResumeSession(sessionPath: string): Promise<void>;
+    handleResumeSession(sessionPath: string, options?: {
+        requireIdle?: boolean;
+    }): Promise<boolean>;
     handleSessionDeleteCommand(): Promise<void>;
     showOAuthSelector(mode: "login" | "logout", providerId?: string, options?: import("./types").OAuthSelectorOptions): Promise<void>;
     showHookConfirm(title: string, message: string): Promise<boolean>;

package/dist/types/modes/shared/agent-wire/unattended-session.d.ts

@@ -67,6 +67,12 @@ export declare function modelSupportsTokenCostMetrics(model: Model | undefined):
 export interface WorkflowGateEmitter {
     /** True only when unattended mode has been negotiated. */
     isUnattended(): boolean;
+    /**
+     * True when gates emitted through this emitter can be answered remotely
+     * (workflow_gate_response over RPC/bridge). The ask tool refuses headless
+     * execution unless this reports true.
+     */
+    supportsRemoteGateAnswers(): boolean;
     /** Open + emit a gate; resolves with the agent's answer (from workflow_gate_response). */
     emitGate(input: OpenGateInput): Promise<unknown>;
     /**
@@ -107,6 +113,7 @@ export declare class UnattendedSessionControlPlane implements RpcUnattendedContr
     private readonly opts;
     constructor(opts: UnattendedSessionOptions);
     isUnattended(): boolean;
+    supportsRemoteGateAnswers(): boolean;
     /** Observe every emitted gate (e.g. so an extension can map an ask to its gate_id). */
     onGateEmitted(listener: (gate: RpcWorkflowGate) => void): () => void;
     get controller(): UnattendedRunController | undefined;

package/dist/types/modes/shared/agent-wire/workflow-gate-broker.d.ts

@@ -60,6 +60,8 @@ export interface AskSelectedAckRecoveryParticipant {
 /** SDK-native surface for emitting a workflow gate and awaiting its answer. */
 export interface WorkflowGateEmitter {
     supportsRemoteGateAnswers(): boolean;
+    /** True when an unattended run has been negotiated for this emitter (control-plane emitters). */
+    isUnattended?(): boolean;
     emitGate(input: OpenGateInput): Promise<unknown>;
     onGateEmitted?(listener: (gate: WorkflowGate) => void): () => void;
     resolveGate?(response: WorkflowGateResponse): Promise<WorkflowGateResolution>;

package/dist/types/modes/types.d.ts

@@ -261,6 +261,10 @@ export interface InteractiveModeContext {
     handleSTTToggle(): Promise<void>;
     executeCompaction(customInstructionsOrOptions?: string | CompactOptions, isAuto?: boolean): Promise<CompactionOutcome>;
     openInBrowser(urlOrPath: string): void;
+    setOAuthAuthorizationUrl(url: string): number;
+    hasOAuthAuthorizationUrl(): boolean;
+    clearOAuthAuthorizationUrl(lease: number): void;
+    copyOAuthAuthorizationUrl(): Promise<void>;
     /** Resolved source of truth for slash autocomplete and command palette entries. */
     getSlashCommands?(): readonly SlashCommand[];
     refreshSlashCommandState(cwd?: string): Promise<void>;
@@ -281,7 +285,9 @@ export interface InteractiveModeContext {
     showTreeSelector(): void;
     showSessionSelector(): void;
     showSessionsDashboard(): void;
-    handleResumeSession(sessionPath: string): Promise<void>;
+    handleResumeSession(sessionPath: string, options?: {
+        requireIdle?: boolean;
+    }): Promise<boolean>;
     handleSessionDeleteCommand(): Promise<void>;
     showOAuthSelector(mode: "login" | "logout", providerId?: string, options?: OAuthSelectorOptions): Promise<void>;
     showHookConfirm(title: string, message: string): Promise<boolean>;

package/dist/types/runtime-mcp/transports/stdio.d.ts

@@ -5,6 +5,8 @@
  * Messages are newline-delimited JSON.
  */
 import type { MCPRequestOptions, MCPStdioServerConfig, MCPTransport } from "../../runtime-mcp/types";
+/** Write one JSONL frame while honoring Bun FileSink backpressure and flush failures. */
+export declare function writeStdioFrame(stdin: Bun.FileSink, message: string): Promise<void>;
 export declare class StdioTransport implements MCPTransport {
     #private;
     private config;