@sayknow-cli/coding-agent 0.5.2 → 0.5.6

package/CHANGELOG.md

@@ -1,15 +1,54 @@
 # Changelog
 
-Sayknow-CLI is a rebranded fork of [gajae-code](https://github.com/Yeachan-Heo/gajae-code).
+## [Unreleased]
+
+## [0.5.6] - 2026-08-28
+
+## [0.5.4] - 2026-08-28
+
+Sayknow-CLI descends from an upstream MIT agent harness; see [`NOTICE.md`](../../NOTICE.md).
 This file tracks the **fork's own releases**; upstream's full feature history lives
 in that project. Each release notes the upstream version it is built on.
 
 
-## [Unreleased]
+## [0.5.3] - 2026-08-28
+
+### Added
+
+- Added zero-configuration oMLX and loopback-safe SGLang discovery through the shared OpenAI-compatible registry, including reviewed oMLX model profiles, thinking-effort preservation, schemas, and local-provider tests.
+- Added explicit-file `/import-session` support for Codex rollout JSONL, Claude Code JSONL, and claude.ai exports with bounded redacted context, quarantined unmappable records, durable provenance, workspace-scoped idempotent native publication, and ACP isolation for path-bearing import, export, and move commands.
+### Fixed
+
+- Imported-session targets activate only through an idle-only session transition; a response or turn that wins the activation race leaves the reused or newly published target intact for later resume instead of interrupting active work.
+
+- LSP, DAP, and stdio MCP protocol writes now serialize complete write/flush transactions, await sink backpressure, propagate peer-close failures, and terminalize stale transports on fatal writes or stdout EOF instead of leaving delayed unhandled EPIPE errors or timeout-bound pending requests.
+- Managed sessions now sample transcript size proactively only through a retained exact-file authority, treat unavailable sampling as unknown, and recover an authority-bound `content_too_large` append by atomically rewriting the exact live entry set; failed rewrites latch persistence and roll back volatile branch mutation before later appends.
+- Explicit empty tool selections such as `--no-tools` now remain authoritative across goal/workflow restoration, session branching, and plan-mode transitions instead of silently reactivating built-in tools.
+- `config set` and `config reset` now report success only after durable persistence; atomic YAML writes retain their original resolved target and fail closed on symlink or target-identity retargeting.
+- `skc --worktree` now installs Bun, npm, or pnpm dependencies from the worktree's own matching lockfile instead of linking a package checkout to the source tree's `node_modules`; nested package roots keep their cwd, legacy owned links are migrated, unrelated links are refused, and repeated launches reuse the local install location.
+- Release publication now emits Sayknow-owned SHA-256 manifests, and standalone installers plus `skc update` verify the selected platform binary before replacing an installation; missing or mismatched integrity metadata and concurrent installers fail closed.
+
+### Changed
+
+- The command palette now exposes availability-gated follow-up, queue editing, immediate-send, and transcript-turn actions; their default keybindings remain unchanged, while user remaps dispatch through the shared action registry.
+- Korean and emoji escapes in `ask` question text and option labels now recover as display-only content while ids and workflow metadata remain fail-closed.
+- The todo HUD can be expanded from its action/keybinding, startup can skip the logo sweep, and provider or MCP OAuth URLs copy only through an explicit remappable action.
+- **Upstream independence.** Retired the upstream sync/regeneration pipeline
+  (`rebrand/` layer plus the generation scripts); this tree is now the single
+  source of truth and upstream fixes are ported by cherry-pick only. See
+  `docs/FORK_MAINTENANCE.md`.
+- `bun run release` now enforces the fork policy end to end: runs from the
+  `sayknow-fork` branch, tags `sayknow-vX.Y.Z`, checks monotonicity against the
+  fork tag series only, refuses same-version plain `v` tags on origin, and the
+  release attaches both release-evidence JSONs for the daily public-sync live
+  check.
+- Scrubbed upstream brand references from public docs, the embedded docs
+  index, and test fixtures (also fixing two fixture assertions the original
+  rename had broken). MIT attribution remains in `LICENSE` and `NOTICE.md`.
 
 ## [0.5.2] — 2026-08-14
 
-Built on upstream **gajae-code v0.12.0**.
+Built on upstream **v0.12.0**.
 
 ### Fixed (unattended workflow gates were unanswerable through the control plane)
 
@@ -139,7 +178,7 @@ real cell metrics (16x34) replace the 9x18 default.
 
 ## [0.5.1] — 2026-07-29
 
-Built on upstream **gajae-code v0.12.0**.
+Built on upstream **v0.12.0**.
 
 ### Fixed (Sayknow Pet still left sixel residue under tmux)
 
@@ -164,7 +203,7 @@ exactly the people who already had a session open.
 
 ## [0.5.0] — 2026-07-28
 
-Built on upstream **gajae-code v0.12.0** (previous fork release tracked v0.11.6).
+Built on upstream **v0.12.0** (previous fork release tracked v0.11.6).
 
 ### Security (inherited from upstream v0.12.0)
 
@@ -221,11 +260,11 @@ and that summary is injected into every later session.
 
 ### Fixed (rebrand leakage)
 
-- **Stop creating `.gjc-*` paths.** `recovery_fs` and `path_identity` still wrote
-  `.gjc-recovery`, `.gjc-managed-remove-*`, and `.gjc-exact-unlink-*` on disk: the
-  rename never reached them, so recovery state landed under an upstream-branded
-  directory name. 24 residual tokens are gone and the sync pipeline now fails the
-  build instead of shipping them.
+- **Stop creating legacy-branded recovery paths.** `recovery_fs` and
+  `path_identity` still wrote legacy-branded recovery and removal marker
+  directories on disk: the rename never reached them, so recovery state landed
+  under an upstream-branded directory name. 24 residual tokens are gone and the
+  build now fails instead of shipping them.
 
 ### Fixed (fork pipeline)
 
@@ -389,7 +428,7 @@ platform subpackages publish from a single CI run.
 
 ### Changed
 
-- Synced onto upstream **gajae-code v0.11.6** (from v0.6.0), a 5-minor-version jump
+- Synced onto upstream **v0.11.6** (from v0.6.0), a 5-minor-version jump
   bringing v0.7–v0.11 evolution: managed chat daemon (#2782, #2785, #2786), Telegram
   lock auto-reconciliation (#2781), compiled startup import-cycle fix (#2779), legacy
   daemon tombstone reclamation (#2780), nextest CI hardening (#2777), and the new
@@ -440,7 +479,7 @@ platform subpackages publish from a single CI run.
 
 ### Changed
 
-- Synced onto upstream **gajae-code v0.7.1** (from v0.6.5), bringing 0.7.0's mobile
+- Synced onto upstream **v0.7.1** (from v0.6.5), bringing 0.7.0's mobile
   notifications SDK + managed Telegram daemon and 0.7.1's fixes (assistant
   notification lead-in, stale tmux session reuse, packaged native imports, and the
   glm-zcode Z.AI provider) while preserving the Sayknow-CLI brand.
@@ -480,7 +519,7 @@ platform subpackages publish from a single CI run.
 
 ### Changed
 
-- Synced onto upstream **gajae-code v0.6.5** (from v0.6.0), bringing its latest
+- Synced onto upstream **v0.6.5** (from v0.6.0), bringing its latest
   features and fixes while preserving the Sayknow-CLI brand. The new welcome
   logo-mode support renders the blue **SAYKNOW** wordmark in every mode.
 
@@ -544,7 +583,7 @@ platform subpackages publish from a single CI run.
 
 ### Changed
 
-- Synced onto upstream **gajae-code v0.6.0** (52 commits, +27k lines), bringing its
+- Synced onto upstream **v0.6.0** (52 commits, +27k lines), bringing its
   new features and fixes — including the opt-in `skc rlm` research mode, the goal
   `pause` operation, steer-by-default while busy, and the experimental
   desktop-control tool surface — while preserving the Sayknow-CLI brand and the
@@ -552,7 +591,7 @@ platform subpackages publish from a single CI run.
 
 ## [0.1.0] — 2026-06-17
 
-Initial Sayknow-CLI release, forked from gajae-code v0.5.4.
+Initial Sayknow-CLI release, forked from upstream v0.5.4.
 
 ### Added
 
@@ -570,7 +609,7 @@ Initial Sayknow-CLI release, forked from gajae-code v0.5.4.
 
 ### Changed
 
-- Rebranded `gajae-code` → **Sayknow-CLI** (`skc`, `@sayknow-cli/*`) and reset the
+- Rebranded the upstream harness → **Sayknow-CLI** (`skc`, `@sayknow-cli/*`) and reset the
   version to 0.1.0.
 - The model selector now starts OAuth login directly when you pick an
   unauthenticated preset, instead of only printing a hint.

package/dist/types/cli/update-cli.d.ts

@@ -56,10 +56,14 @@ type PathPlatform = NodeJS.Platform;
 type PackageExists = (packageName: string, packageRoot: string) => boolean;
 export declare function resolveUpdateMethodForTest(ompPath: string, bunBinDir: string | undefined): "bun" | "npm" | "binary";
 export declare function resolveNpmManagedTargetForTest(ompPath: string, platform: PathPlatform, packageExists: PackageExists): PackageManagerTarget | undefined;
+export declare function getBinaryNameForTest(platform?: NodeJS.Platform, arch?: string): string;
+export declare function fetchExpectedBinaryDigest(version: string, assetName: string, fetchImpl?: (url: string) => Promise<Response>): Promise<string>;
+export declare function verifyReleaseBinaryIntegrity(filePath: string, version: string, assetName: string, fetchImpl?: (url: string) => Promise<Response>): Promise<void>;
 export declare function formatBinaryDownloadFailureMessageForTest(binaryName: string, url: string, status: string | number, platform?: NodeJS.Platform): string;
 export declare function buildReleaseBinaryUrlForTest(version: string, platform?: NodeJS.Platform, arch?: string): string;
 export declare function formatManualUpdateInstructionsForTest(platform?: NodeJS.Platform): string;
 export declare function formatVerificationFailureForTest(result: InstalledVersionVerification, expectedVersion: string): string;
+export declare function withBinaryUpdateLock<T>(targetPath: string, operation: () => Promise<T>): Promise<T>;
 /**
  * Atomically replace the installed binary and roll back if version verification fails.
  */
@@ -69,16 +73,19 @@ export declare function fsyncFileForTest(filePath: string): Promise<void>;
 /** Injectable steps of the binary update flow (seams for testing ordering). */
 export interface BinaryUpdateFlow {
     download(url: string, tempPath: string): Promise<void>;
+    verifyIntegrity(filePath: string): Promise<void>;
     fsync(filePath: string): Promise<void>;
     replace(options: BinaryReplacementOptions): Promise<InstalledVersionVerification>;
     verifyInstalledVersion(expectedVersion: string): Promise<InstalledVersionVerification>;
     /** Best-effort cleanup of the temp file when the flow aborts before replace. */
     removeTemp?(filePath: string): Promise<void>;
+    /** Stable suffix for focused tests; production uses a process-unique staging path. */
+    transactionId?: string;
     /** Called once fsync has succeeded, right before replacement begins. */
     beforeReplace?(): void;
 }
 /**
- * Orchestrate download → fsync → replace → verify with a strict ordering
+ * Orchestrate download → integrity verification → fsync → replace → version/smoke verification.
  * contract: the downloaded temp binary MUST be flushed to stable storage
  * before it is published (renamed into place) or exec'd for verification.
  *

package/dist/types/config/atomic-yaml-patch.d.ts

@@ -72,6 +72,24 @@ export declare class AtomicYamlReplaceError extends Error {
     readonly code = "ATOMIC_YAML_REPLACE_FAILED";
     constructor(configPath: string, attempts: number, cause: unknown);
 }
+/** Raised when the configured lexical route no longer resolves to its original target. */
+export declare class AtomicYamlRetargetError extends Error {
+    readonly code = "ATOMIC_YAML_RETARGETED";
+    constructor();
+}
+/** Test-only coordination hooks for deterministic target-authority races. */
+export declare const AtomicYamlTestHooks: {
+    afterTargetBound?: (canonicalPath: string) => Promise<void> | void;
+};
+type AtomicYamlTargetIdentity = {
+    device: bigint;
+    inode: bigint;
+};
+type AtomicYamlTarget = {
+    canonicalPath: string;
+    resolvedPath: string;
+    identity: AtomicYamlTargetIdentity | undefined;
+};
 /** Set a dotted YAML path, creating object intermediates as needed. */
 export declare function setByPath(value: Record<string, unknown>, segments: readonly string[], nextValue: unknown): void;
 /** Delete a dotted YAML path without disturbing sibling keys or parent objects. */
@@ -85,7 +103,7 @@ export declare function applyAtomicYamlPatchesWithCurrent(configPath: string, bu
  * only when this operation reaches the front of the in-process queue, which lets
  * Settings debounce/coalesce inside its already-reserved causal slot.
  */
-export declare function enqueueAtomicYamlOperation<T>(configPath: string, operation: (canonicalConfigPath: string) => Promise<T>): Promise<T>;
+export declare function enqueueAtomicYamlOperation<T>(configPath: string, operation: (canonicalConfigPath: string, target: AtomicYamlTarget) => Promise<T>): Promise<T>;
 /**
  * Reserve an atomic patch slot now, producing patches only after earlier slots
  * complete. Writers with state-aware merges use {@link reserveAtomicYamlUpdateSlot}.
@@ -101,3 +119,4 @@ export declare function reserveAtomicYamlUpdateSlot<T>(configPath: string, updat
  * cross-process file lock. Success means the temp file was fsynced and renamed.
  */
 export declare function applyAtomicYamlPatches(configPath: string, patches: readonly AtomicYamlPatch[], options?: AtomicYamlPatchOptions): Promise<CasReceipt>;
+export {};

package/dist/types/config/keybindings.d.ts

@@ -16,6 +16,7 @@ interface AppKeybindings {
     "app.model.select": true;
     "app.model.selectTemporary": true;
     "app.tools.expand": true;
+    "app.todo.toggle": true;
     "app.tool.backgroundFold": true;
     "app.editor.external": true;
     "app.message.followUp": true;
@@ -24,6 +25,7 @@ interface AppKeybindings {
     "app.clipboard.pasteImage": true;
     "app.clipboard.copyLine": true;
     "app.clipboard.copyPrompt": true;
+    "app.oauth.copyUrl": true;
     "app.session.new": true;
     "app.session.tree": true;
     "app.session.fork": true;
@@ -109,6 +111,10 @@ export declare const KEYBINDINGS: {
         readonly defaultKeys: "ctrl+o";
         readonly description: "Expand tools";
     };
+    readonly "app.todo.toggle": {
+        readonly defaultKeys: "alt+shift+t";
+        readonly description: "Toggle todo list expansion";
+    };
     readonly "app.tool.backgroundFold": {
         readonly defaultKeys: "ctrl+b";
         readonly description: "Fold/background supported foreground tool";
@@ -141,6 +147,10 @@ export declare const KEYBINDINGS: {
         readonly defaultKeys: "alt+shift+c";
         readonly description: "Copy prompt";
     };
+    readonly "app.oauth.copyUrl": {
+        readonly defaultKeys: "alt+shift+u";
+        readonly description: "Copy OAuth authorization URL";
+    };
     readonly "app.session.new": {
         readonly defaultKeys: "ctrl+n";
         readonly description: "Start a new session";

package/dist/types/config/model-registry.d.ts

@@ -96,7 +96,7 @@ export declare const ModelsConfigFile: ConfigFile<{
         authHeader?: boolean | undefined;
         auth?: "none" | "apiKey" | "oauth" | undefined;
         discovery?: {
-            type: "ollama" | "lm-studio" | "llama.cpp" | "openai-models-list";
+            type: "ollama" | "lm-studio" | "omlx" | "sglang" | "llama.cpp" | "openai-models-list";
         } | undefined;
         requestTransform?: {
             profile?: "openai-proxy" | undefined;

package/dist/types/config/models-config-schema.d.ts

@@ -260,6 +260,8 @@ export declare const ProviderDiscoverySchema: z.ZodObject<{
     type: z.ZodEnum<{
         ollama: "ollama";
         "lm-studio": "lm-studio";
+        omlx: "omlx";
+        sglang: "sglang";
         "llama.cpp": "llama.cpp";
         "openai-models-list": "openai-models-list";
     }>;
@@ -368,6 +370,8 @@ export declare const ModelsConfigSchema: z.ZodObject<{
             type: z.ZodEnum<{
                 ollama: "ollama";
                 "lm-studio": "lm-studio";
+                omlx: "omlx";
+                sglang: "sglang";
                 "llama.cpp": "llama.cpp";
                 "openai-models-list": "openai-models-list";
             }>;

package/dist/types/config/settings-schema.d.ts

@@ -1663,6 +1663,15 @@ export declare const SETTINGS_SCHEMA: {
             }];
         };
     };
+    readonly "startup.skipLogoAnimation": {
+        readonly type: "boolean";
+        readonly default: false;
+        readonly ui: {
+            readonly tab: "interaction";
+            readonly label: "Skip Logo Animation";
+            readonly description: "Show the final welcome logo immediately";
+        };
+    };
     readonly "startup.checkUpdate": {
         readonly type: "boolean";
         readonly default: true;

package/dist/types/dap/client.d.ts

@@ -35,5 +35,6 @@ export declare class DapClient {
     sendRequest<TBody = unknown>(command: string, args?: unknown, signal?: AbortSignal, timeoutMs?: number): Promise<TBody>;
     sendResponse(request: DapRequestMessage, success: boolean, body?: unknown, message?: string): Promise<void>;
     dispose(): Promise<void>;
+    startMessageReader(): Promise<void>;
 }
 export {};

package/dist/types/lsp/client.d.ts

@@ -5,6 +5,11 @@ import type { LspClient, ServerConfig } from "./types";
  */
 export declare function setIdleTimeout(ms: number | null | undefined): void;
 export declare function isIdleCheckerActiveForTests(): boolean;
+/**
+ * Start background message reader for a client.
+ * Routes responses to pending requests and handles notifications.
+ */
+export declare function startMessageReader(client: LspClient): Promise<void>;
 /** Timeout for warmup initialize requests (5 seconds) */
 export declare const WARMUP_TIMEOUT_MS = 5000;
 /**

package/dist/types/modes/components/welcome.d.ts

@@ -18,6 +18,7 @@ export interface WelcomeComponentOptions {
     collapseChangelog?: boolean;
     buildLabel?: string;
     keyDisplayContext?: KeyDisplayContext;
+    skipLogoAnimation?: boolean;
 }
 /**
  * Sayknow-CLI launch surface: a blue-gradient SAYKNOW wordmark, compact

package/dist/types/modes/controllers/selector-controller.d.ts

@@ -110,7 +110,9 @@ export declare class SelectorController {
     showUserMessageSelector(): void;
     showTreeSelector(): void;
     showSessionSelector(): Promise<void>;
-    handleResumeSession(sessionPath: string): Promise<void>;
+    handleResumeSession(sessionPath: string, options?: {
+        requireIdle?: boolean;
+    }, onSwitched?: () => void): Promise<boolean>;
     handleSessionDeleteCommand(): Promise<void>;
     showOAuthSelector(mode: "login" | "logout", providerId?: string, options?: OAuthSelectorOptions): Promise<void>;
     showDebugSelector(): void;

package/dist/types/modes/interactive-mode.d.ts

@@ -57,6 +57,12 @@ export interface InteractiveModeOptions {
     initialMessages?: string[];
 }
 export declare function selectShutdownDraft(editorText: string, hasActiveBtw: boolean): string;
+export declare class OAuthAuthorizationUrlState {
+    #private;
+    set(url: string): number;
+    clear(lease: number): void;
+    get current(): string | undefined;
+}
 export declare class InteractiveMode implements InteractiveModeContext {
     #private;
     session: AgentSession;
@@ -243,6 +249,10 @@ export declare class InteractiveMode implements InteractiveModeContext {
     handleContributionPrepCommand(customInstructions?: string): Promise<void>;
     executeCompaction(customInstructionsOrOptions?: string | CompactOptions, isAuto?: boolean): Promise<CompactionOutcome>;
     openInBrowser(urlOrPath: string): void;
+    setOAuthAuthorizationUrl(url: string): number;
+    clearOAuthAuthorizationUrl(lease: number): void;
+    hasOAuthAuthorizationUrl(): boolean;
+    copyOAuthAuthorizationUrl(): Promise<void>;
     showCommandPalette(commands: SlashCommand[], actions: CommandPaletteAction[], executeSlashCommand: (name: string) => Promise<void>): void;
     showSettingsSelector(): void;
     showThemeSelector(): void;
@@ -259,7 +269,9 @@ export declare class InteractiveMode implements InteractiveModeContext {
     showUserMessageSelector(): void;
     showTreeSelector(): void;
     showSessionSelector(): void;
-    handleResumeSession(sessionPath: string): Promise<void>;
+    handleResumeSession(sessionPath: string, options?: {
+        requireIdle?: boolean;
+    }): Promise<boolean>;
     handleSessionDeleteCommand(): Promise<void>;
     showOAuthSelector(mode: "login" | "logout", providerId?: string, options?: import("./types").OAuthSelectorOptions): Promise<void>;
     showHookConfirm(title: string, message: string): Promise<boolean>;

package/dist/types/modes/types.d.ts

@@ -261,6 +261,10 @@ export interface InteractiveModeContext {
     handleSTTToggle(): Promise<void>;
     executeCompaction(customInstructionsOrOptions?: string | CompactOptions, isAuto?: boolean): Promise<CompactionOutcome>;
     openInBrowser(urlOrPath: string): void;
+    setOAuthAuthorizationUrl(url: string): number;
+    hasOAuthAuthorizationUrl(): boolean;
+    clearOAuthAuthorizationUrl(lease: number): void;
+    copyOAuthAuthorizationUrl(): Promise<void>;
     /** Resolved source of truth for slash autocomplete and command palette entries. */
     getSlashCommands?(): readonly SlashCommand[];
     refreshSlashCommandState(cwd?: string): Promise<void>;
@@ -281,7 +285,9 @@ export interface InteractiveModeContext {
     showTreeSelector(): void;
     showSessionSelector(): void;
     showSessionsDashboard(): void;
-    handleResumeSession(sessionPath: string): Promise<void>;
+    handleResumeSession(sessionPath: string, options?: {
+        requireIdle?: boolean;
+    }): Promise<boolean>;
     handleSessionDeleteCommand(): Promise<void>;
     showOAuthSelector(mode: "login" | "logout", providerId?: string, options?: OAuthSelectorOptions): Promise<void>;
     showHookConfirm(title: string, message: string): Promise<boolean>;

package/dist/types/runtime-mcp/transports/stdio.d.ts

@@ -5,6 +5,8 @@
  * Messages are newline-delimited JSON.
  */
 import type { MCPRequestOptions, MCPStdioServerConfig, MCPTransport } from "../../runtime-mcp/types";
+/** Write one JSONL frame while honoring Bun FileSink backpressure and flush failures. */
+export declare function writeStdioFrame(stdin: Bun.FileSink, message: string): Promise<void>;
 export declare class StdioTransport implements MCPTransport {
     #private;
     private config;

package/dist/types/session/agent-session.d.ts

@@ -244,6 +244,8 @@ export interface AgentSessionConfig {
     /** Rebuild the SSH tool from current capability discovery results. */
     reloadSshTool?: () => Promise<AgentTool | null>;
     requestedToolNames?: ReadonlySet<string>;
+    /** True only when the caller explicitly selected no tools. */
+    explicitlyDisabledTools?: boolean;
     /** Optional per-session allowlist for tools exposed through search_tool_bm25. */
     discoverableToolAllowedNames?: readonly string[];
     /** Optional accessor for live MCP server instructions, injected as untrusted user-role request data. */
@@ -758,6 +760,8 @@ export declare class AgentSession {
     refreshSshTool(options?: {
         activateIfAvailable?: boolean;
     }): Promise<void>;
+    /** Whether the caller explicitly selected no tools for this session. */
+    hasExplicitlyDisabledTools(): boolean;
     /**
      * Set active tools by name.
      * Only tools in the registry can be enabled. Unknown tool names are ignored.
@@ -1209,6 +1213,8 @@ export declare class AgentSession {
     prepareContributionPrep(options?: ContributionPrepOptions): Promise<ContributionPrepResult>;
     /** Test seam: override the emergency-compaction resource sampler so tests never read real RSS. */
     setResourceSampler(sampler: () => EmergencyCompactionSample): void;
+    /** Test seam: drive the pre-prompt emergency/threshold check directly. */
+    runPrePromptContextCheckForTests(pendingMessages?: readonly AgentMessage[]): Promise<void>;
     setRetainedMemorySampler(sampler: (() => RetainedMemorySample) | undefined): void;
     /**
      * Toggle auto-compaction setting.
@@ -1347,10 +1353,12 @@ export declare class AgentSession {
      * Switch to a different session file.
      * Aborts current operation, loads messages, restores model/thinking.
      * Listeners are preserved and will continue receiving events.
+     * `requireIdle` rejects an active turn and fences new admissions for the transition.
      * @returns true if switch completed, false if cancelled by hook
      */
     switchSession(sessionPath: string, options?: {
         transition?: SessionSwitchEvent["transition"];
+        requireIdle?: boolean;
     }): Promise<boolean>;
     /**
      * Create a branch from a specific entry.

package/dist/types/session/internal/managed-session-scope.d.ts

@@ -120,7 +120,9 @@ export declare function fsyncCanonicalBinding(bindingPath: string, expected: str
 export declare function ensureManagedScope(scope: ManagedScope, policy?: ManagedSessionSecurityPolicy): Promise<ManagedScopeResolution>;
 /** Synchronously create and validate the v2 binding before a default session writer exists. */
 export declare function prepareManagedSessionScopeForWriteSync(scope: ManagedScope, policy?: ManagedSessionSecurityPolicy, authority?: ManagedCandidateWriteAuthority): ManagedScopeResolution;
-export declare function listManagedCandidates(scope: ManagedScope): ManagedCandidateListing;
+export declare function listManagedCandidates(scope: ManagedScope, options?: {
+    maxCandidates?: number;
+}): ManagedCandidateListing;
 type DetachedArtifactRoot = {
     originalPath: string;
     detachedPath: string;

package/dist/types/session/internal/managed-session-storage.d.ts

@@ -74,6 +74,8 @@ export declare class ManagedSessionDescendantStore {
     appendSync(relativePath: string, bytes: Uint8Array): void;
     /** Read an exact managed file without exposing its pathname as authority. */
     readExpected(relativePath: string): ManagedFileSnapshot | null;
+    /** Read only the exact managed file size through the retained root authority. */
+    sizeSync(relativePath: string): number | null;
     /** Remove an exact captured file without reopening its pathname as authority. */
     removeExpected(relativePath: string, expected: ManagedFileSnapshot): void;
     /** Read and remove one managed descendant through retained authority. */

package/dist/types/session/session-manager.d.ts

@@ -705,6 +705,12 @@ export declare class SessionManager {
     listForResumePickerReadOnly(): Promise<SessionInfo[]>;
     getSessionId(): string;
     getSessionFile(): string | undefined;
+    /**
+     * Managed on-disk transcript size in bytes. Returns undefined when the
+     * destination is explicit, the file does not exist yet, or its identity
+     * cannot be verified.
+     */
+    getTranscriptFileBytes(): number | undefined;
     acquireMemoryGuardParticipantIngressLease(): MemoryGuardParticipantIngressLease;
     createMemoryGuardCheckpoint(input: MemoryGuardCreateCheckpointInput): Promise<MemoryGuardSessionManagerCheckpointV1>;
     /**
@@ -1048,6 +1054,9 @@ export declare class SessionManager {
         sessionDir?: string;
         storage?: SessionStorage;
         destination?: SessionDestination;
+        maxCandidates?: number;
+        maxTotalBytes?: number;
+        filterOtherWorkspaces?: boolean;
     }): StrictInventoryResult;
     /**
      * Propagate the storage-layer verified hard delete bound to exact identity evidence.

package/dist/types/session/session-storage.d.ts

@@ -110,6 +110,8 @@ export interface SessionStorage {
     readBytesSync?(path: string): Uint8Array;
     /** Exact bytes and descriptor-bound identity captured from one opened regular file. */
     readSnapshotSync?(path: string): SessionStorageSnapshot;
+    /** Exact descriptor-bound bytes, refusing growth or allocation beyond maxBytes. */
+    readSnapshotBoundedSync?(path: string, maxBytes: number): SessionStorageSnapshot;
     statSync(path: string): SessionStorageStat;
     listFilesSync(dir: string, pattern: string): string[];
     /** List matching files with mtimes without issuing one JavaScript stat call per path. */
@@ -122,6 +124,11 @@ export interface SessionStorage {
      * authorization inventory; the forgiving {@link listFilesSync} stays display-only.
      */
     listFilesStrictSync?(dir: string, pattern: string): string[];
+    /** Strict bounded scan; `truncated` means completeness was not granted. */
+    listFilesStrictBoundedSync?(dir: string, pattern: string, maxFiles: number): {
+        files: string[];
+        truncated: boolean;
+    };
     exists(path: string): Promise<boolean>;
     readText(path: string): Promise<string>;
     readTextPrefix(path: string, maxBytes: number): Promise<string>;
@@ -270,6 +277,7 @@ export declare class FileSessionStorage implements SessionStorage {
     readTextSync(fpath: string): string;
     readBytesSync(fpath: string): Uint8Array;
     readSnapshotSync(fpath: string): SessionStorageSnapshot;
+    readSnapshotBoundedSync(fpath: string, maxBytes: number): SessionStorageSnapshot;
     statSync(path: string): SessionStorageStat;
     listFilesSync(dir: string, pattern: string): string[];
     listFilesByMtime(dir: string, pattern: string): Promise<Array<{
@@ -277,6 +285,10 @@ export declare class FileSessionStorage implements SessionStorage {
         mtimeMs: number;
     }>>;
     listFilesStrictSync(dir: string, pattern: string): string[];
+    listFilesStrictBoundedSync(dir: string, pattern: string, maxFiles: number): {
+        files: string[];
+        truncated: boolean;
+    };
     exists(path: string): Promise<boolean>;
     readText(path: string): Promise<string>;
     readTextPrefix(path: string, maxBytes: number): Promise<string>;
@@ -306,6 +318,7 @@ export declare class MemorySessionStorage implements SessionStorage {
     readTextSync(path: string): string;
     readBytesSync(path: string): Uint8Array;
     readSnapshotSync(path: string): SessionStorageSnapshot;
+    readSnapshotBoundedSync(path: string, maxBytes: number): SessionStorageSnapshot;
     statSync(path: string): SessionStorageStat;
     listFilesSync(dir: string, pattern: string): string[];
     listFilesByMtime(dir: string, pattern: string): Promise<Array<{
@@ -313,6 +326,10 @@ export declare class MemorySessionStorage implements SessionStorage {
         mtimeMs: number;
     }>>;
     listFilesStrictSync(dir: string, pattern: string): string[];
+    listFilesStrictBoundedSync(dir: string, pattern: string, maxFiles: number): {
+        files: string[];
+        truncated: boolean;
+    };
     exists(path: string): Promise<boolean>;
     readText(path: string): Promise<string>;
     readTextPrefix(path: string, maxBytes: number): Promise<string>;

package/dist/types/session-import/claude.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Claude adapter (issue #3709).
+ *
+ * Parses two first-party observable Claude transcript/export shapes:
+ *
+ * 1. `claude-code-jsonl` — Claude Code session transcripts
+ *    (`~/.claude/projects/<project-slug>/<session-uuid>.jsonl`), one JSON object
+ *    per line with `type: "user" | "assistant" | "summary" | "system" | …`.
+ * 2. `claude-export-json` — the claude.ai data export (`conversations.json`):
+ *    a JSON array of conversations (or a single conversation object) whose
+ *    `chat_messages` carry `sender: "human" | "assistant"` and `content` blocks.
+ *
+ * The same quarantine contract as the Codex adapter applies: unmappable
+ * records/messages are counted and digested, never silently dropped.
+ */
+import { type ImportedConversation, type ImportQuarantineRecord, type SessionImportCounts } from "./types";
+export interface ClaudeParseResult {
+    conversation: ImportedConversation;
+    quarantine: ImportQuarantineRecord[];
+    counts: SessionImportCounts;
+    redactionKinds: string[];
+}
+/** Parse a Claude Code session JSONL transcript. */
+export declare function parseClaudeCodeTranscript(text: string): ClaudeParseResult;
+/** Parse a claude.ai data-export conversation (array or single object). */
+export declare function parseClaudeExport(text: string): ClaudeParseResult;

package/dist/types/session-import/codex.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Codex adapter (issue #3709).
+ *
+ * Parses the Codex CLI rollout transcript: one JSON object per line
+ * (`rollout-*.jsonl`, e.g. `~/.codex/sessions/2026/08/01/rollout-….jsonl`).
+ * This is Codex's own observable transcript format; the file the user passes is
+ * treated as an explicit export and is only read.
+ *
+ * Strictness contract: records that fail to parse or lack required fields are
+ * quarantined with deterministic digests — never silently dropped. Unknown
+ * record/event types are mapped when their payload shape is recognized and
+ * quarantined otherwise.
+ */
+import { type ImportedConversation, type ImportQuarantineRecord, type SessionImportCounts } from "./types";
+export interface CodexParseResult {
+    conversation: ImportedConversation;
+    quarantine: ImportQuarantineRecord[];
+    counts: SessionImportCounts;
+    redactionKinds: string[];
+}
+/** Parse a Codex rollout JSONL transcript into the provider-neutral IR. */
+export declare function parseCodexRollout(text: string): CodexParseResult;

package/dist/types/session-import/command.d.ts

@@ -0,0 +1,20 @@
+import type { SessionImportCompleted, SessionImportProviderId } from "./types";
+export declare const IMPORT_SESSION_USAGE = "Usage: /import-session <transcript-file> [--provider codex|claude]";
+export type ParsedImportSessionArgs = {
+    kind: "ok";
+    sourcePath: string;
+    provider?: SessionImportProviderId;
+} | {
+    kind: "error";
+    message: string;
+};
+export declare function parseImportSessionArgs(args: string): ParsedImportSessionArgs;
+export type SessionImportCommandOutcome = {
+    kind: "imported";
+    result: SessionImportCompleted;
+} | {
+    kind: "error";
+    message: string;
+};
+/** Imports a new session only. The caller owns the current-session switch/resume seam. */
+export declare function runSessionImportCommand(args: string, cwd: string): Promise<SessionImportCommandOutcome>;