acp-sdk 0.5.0 → 0.7.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 77ac970489b956c7216d4c94a8d5cc6e7bf3fe5bfd10110cb8558c119f58f69d
-  data.tar.gz: 29ec919463eb48d06811aa8b6c736163fd7872348ce99f3f8cdc10c5670bf8c4
+  metadata.gz: 978b245a94b3cd60d3858ee42c3deaf9b687c8a6a1701ce54c684a5e434b2bce
+  data.tar.gz: b83adfe811bc7873455f9f81993061e7b2ea66d0a75b78645807fc44e08cd58b
 SHA512:
-  metadata.gz: acf89beeb444ff33ac273aececd55d645792fe591f346cbdce0a099b6b6bff4eedb4025cceadd3a46ec62253c85b111c0149466960707b3feaa92623dab600a8
-  data.tar.gz: 92fba44ccd9334876fa8cb689728a7a19cc3d473bf1e7ee27fe215d72e48952e04bc9c0428609e31e883bdef6986e1ec7b4c9383d8a37271646593b33ff069bd
+  metadata.gz: 2907a71594882b7afd3ed8fe89b2e9520f139dc1c235a4e43bf836a2f127ae6264ce948d86885577daa6cd320078c6da831f4b8df89225201287276e17710c4e
+  data.tar.gz: 9191c0362932d37aaeb55666fb0b892505e448949f13e4173d0d9a0196ccebd16e56324f42db33f6c0d47fbec658bce6aac6e1bec4e4e9d4bdd4d6a1237ffc11

data/CHANGELOG.md

@@ -1,5 +1,26 @@
 # Changelog
 
+## [0.7.0](https://github.com/bottrall/acp-sdk/compare/v0.6.0...v0.7.0) (2026-10-05)
+
+
+### Features
+
+* terminal handlers on ACP::ClientConnection ([#77](https://github.com/bottrall/acp-sdk/issues/77)) ([8a42829](https://github.com/bottrall/acp-sdk/commit/8a428295d5cd7c92b56ec1b3ed1c900b485bbf01)), closes [#40](https://github.com/bottrall/acp-sdk/issues/40)
+
+
+### Bug Fixes
+
+* attach data to method-not-found and invalid-request replies ([#75](https://github.com/bottrall/acp-sdk/issues/75)) ([9bc201c](https://github.com/bottrall/acp-sdk/commit/9bc201c53d86f506bedb5b49183b865cf9b8f4fe)), closes [#29](https://github.com/bottrall/acp-sdk/issues/29)
+* don't send handler exception messages to the peer ([#74](https://github.com/bottrall/acp-sdk/issues/74)) ([af66b48](https://github.com/bottrall/acp-sdk/commit/af66b48cbab4a99244c28a9c6f6a12c9ea23efc7)), closes [#28](https://github.com/bottrall/acp-sdk/issues/28)
+
+## [0.6.0](https://github.com/bottrall/acp-sdk/compare/v0.5.0...v0.6.0) (2026-10-04)
+
+
+### Features
+
+* answer pending permission requests with cancelled after session_cancel ([#70](https://github.com/bottrall/acp-sdk/issues/70)) ([06a218b](https://github.com/bottrall/acp-sdk/commit/06a218b6262ff409e301d08a43330af5b60837e0))
+* extension methods on both connections ([#72](https://github.com/bottrall/acp-sdk/issues/72)) ([d1faa1a](https://github.com/bottrall/acp-sdk/commit/d1faa1a738019e73a4dbad5b59f480795f8dd4bf))
+
 ## [0.5.0](https://github.com/bottrall/acp-sdk/compare/v0.4.0...v0.5.0) (2026-10-04)
 
 

data/README.md

@@ -50,6 +50,7 @@ The agent's contract:
 
 - It defines `new_session`, `prompt` and `cancel`. `load_session`, `list_sessions`, `resume_session`, `close_session` and `delete_session` are required only when `capabilities` advertises `load_session` or `session_capabilities.list`, `.resume`, `.close` or `.delete`, and `authenticate` only when `auth_methods` is non-empty, and `logout` only when `capabilities` advertises `auth.logout`; `start` raises `ArgumentError` when one is advertised but missing, and a method that is not advertised is answered with `-32601`. `change_session_mode` and `change_session_config_option` are optional, since modes and config options are offered per session rather than in `initialize`; `session/set_mode` and `session/set_config_option` are answered with `-32601` when the agent does not define them. `session_created`, if defined, runs right after the `session/new` reply is sent.
 - Each request method returns its response type or an `ACP::RequestError`, which is sent as the error reply. Params that do not match the schema are answered with `-32602` before the agent sees them.
+- A handler that raises is answered with `-32603` and the message `Internal error`. Nothing from the exception reaches the peer — its class and message are logged to the transport's logger instead, since messages can interpolate paths, queries or credentials. Return an `ACP::RequestError` from the handler when the peer should see a real error message.
 - `cancel` runs on the transport's reader thread, so it must return quickly: set a flag and let the prompt notice it.
 - After a cancel, the agent must itself end the turn with `stopReason: cancelled`. `ACP::AgentConnection` does not enforce it.
 - `client.capabilities` is `nil` until the client sends `initialize`.
@@ -57,11 +58,13 @@ The agent's contract:
 - `client.create_terminal`, `client.terminal_output`, `client.wait_for_terminal_exit`, `client.kill_terminal` and `client.release_terminal` take the matching `ACP::Types` request (`CreateTerminalRequest`, `TerminalOutputRequest`, `WaitForTerminalExitRequest`, `KillTerminalRequest`, `ReleaseTerminalRequest`) and return its response type or an `ACP::RequestError`. Unless `client.capabilities` advertises `terminal`, they return `-32601` without sending anything to the client. The agent must release every terminal it creates.
 - `client.create_elicitation` takes an `ACP::Types::CreateElicitationRequest` and returns an `ACP::Types::CreateElicitationResponse` or an `ACP::RequestError`. Unless `client.capabilities` advertises the `elicitation.form` or `elicitation.url` mode the request asks for, it returns `-32601` without sending anything to the client. A response action the SDK does not know comes through as the raw hash the client sent. `client.complete_elicitation` takes an `ACP::Types::CompleteElicitationNotification` and sends nothing, returning `-32601`, unless the client advertises `elicitation.url`, since only URL-mode elicitations are completed.
 
+Extensions are `_`-prefixed methods outside the spec. `AgentConnection` takes `extension_requests` and `extension_notifications` hashes keyed by the raw wire name, and `client.ext_request` and `client.ext_notify` send them to the client; a handler name without the `_` prefix raises `ArgumentError`, and an extension request with no handler is answered with `-32601`.
+
 [`examples/echo_agent.rb`](https://github.com/bottrall/acp-sdk/blob/main/examples/echo_agent.rb) is a complete agent that streams updates, asks permission, handles cancellation, reads and writes files and runs commands through the client (`/read <path>`, `/write <path> <text>` and `/run <command> [args]`, each advertised as a slash command only when the client supports it), and supports `session/load`, `session/list`, `session/resume`, `session/close` and `session/delete`.
 
 ## Driving an agent
 
-`ACP::ClientConnection` is the other side of the same transport. Each method takes the request's generated `ACP::Types` object and returns its response type or the agent's `ACP::RequestError`. `connect` sends `initialize`, since Ruby reserves that name for the constructor, and `authenticate` and `logout` send their namesake methods. `session_set_mode` sends `session/set_mode`, and `session_set_config_option` sends `session/set_config_option` and returns the session's complete option list, which replaces any state held from an earlier reply.
+`ACP::ClientConnection` is the other side of the same transport. Each method takes the request's generated `ACP::Types` object and returns its response type or the agent's `ACP::RequestError`. `connect` sends `initialize`, since Ruby reserves that name for the constructor, and `authenticate` and `logout` send their namesake methods. `session_set_mode` sends `session/set_mode`, and `session_set_config_option` sends `session/set_config_option` and returns the session's complete option list, which replaces any state held from an earlier reply. A handler that raises is answered with `-32603` and the message `Internal error`, and the exception is only logged to the transport's logger.
 
 `ACP::AgentProcess.spawn` starts a command with args, env and cwd, wires its stdio to a new `ACP::ClientConnection` and starts it. The block receives the connection and the process handle (`pid`, plus `stderr` when captured), and the child is terminated — after its stdin is closed, with TERM and then KILL if it will not exit — when the block exits, so a raised block cannot leak the process. Without a block, `spawn` returns the process and calling `terminate` is yours. `stderr` is `:inherit` by default, so the child writes to your stderr; pass `:capture` to collect it on the process instead.
 
@@ -103,6 +106,9 @@ connection = ACP::ClientConnection.new(
 - `session_prompt` and `session_load` yield the session's updates on the calling thread as they arrive and return once the agent replies. Updates outside those calls, such as the available commands after `session/new`, go to `updates`, which runs on the reader thread and must return quickly. `session_resume` does not take a block: the agent must not replay history on resume, so unlike `session_load` there is nothing to stream. `session_close` and `session_delete` end the session, discarding it on the agent, and return once the agent replies.
 - `permission` answers `session/request_permission` with an `ACP::Types::RequestPermissionResponse` or an `ACP::RequestError`. It runs on its own thread, so it may block while the user decides, and `session_cancel` can be sent meanwhile.
 - `read_text_file` and `write_text_file` answer the agent's `fs/read_text_file` and `fs/write_text_file` with an `ACP::Types::ReadTextFileResponse`, an `ACP::Types::WriteTextFileResponse` or an `ACP::RequestError`. They are routed by the `fs` capabilities `connect` sends: a method the client does not advertise is answered with `-32601` without reaching the handler, and `connect` raises `ArgumentError` — before sending `initialize` — when the request advertises a capability that has no handler.
+- `create_terminal`, `terminal_output`, `wait_for_terminal_exit`, `kill_terminal` and `release_terminal` answer the agent's `terminal/create`, `terminal/output`, `terminal/wait_for_exit`, `terminal/kill` and `terminal/release` with the matching `ACP::Types` response or an `ACP::RequestError`. They are routed by the `terminal` capability `connect` sends, the same way as `fs`: a method the client does not advertise is answered with `-32601` without reaching the handler, and `connect` raises `ArgumentError` — before sending `initialize` — when the request advertises `terminal` with any of the five missing. The transport serves each request on its own thread, so `wait_for_terminal_exit` may block without holding up the others.
+
+Extensions work the same way in both directions: `extension_requests` and `extension_notifications` are hashes keyed by the raw `_`-prefixed wire name, `ext_request` sends one to the agent and returns its result as-is, and `ext_notify` sends an extension notification. A handler name without the `_` prefix raises `ArgumentError`, and an extension request nothing answers gets `-32601`.
 
 ## Contributing
 

data/lib/acp/agent_connection/client.rb

@@ -105,6 +105,26 @@ class ACP::AgentConnection::Client
     @peer.notify('elicitation/complete', notification.to_h)
   end
 
+  # Sends an extension request, keyed by its raw `_`-prefixed wire name, and
+  # returns the client's reply as-is: extension methods have no schema to
+  # parse the result into.
+  #
+  # @rbs method: String
+  # @rbs params: untyped
+  # @rbs return: (Hash[String, untyped] | ACP::RequestError)
+  def ext_request(method, params = nil)
+    ACP::Extensions.validate_name(method)
+    @peer.request(method, params)
+  end
+
+  # @rbs method: String
+  # @rbs params: untyped
+  # @rbs return: void
+  def ext_notify(method, params = nil)
+    ACP::Extensions.validate_name(method)
+    @peer.notify(method, params)
+  end
+
   private
 
   # @rbs rpc_method: String

data/lib/acp/agent_connection.rb

@@ -6,6 +6,8 @@ class ACP::AgentConnection
   # @rbs @agent_info: ACP::Types::Implementation?
   # @rbs @auth_methods: Array[ACP::Types::AuthMethod::t]
   # @rbs @factory: ^(ACP::AgentConnection::Client) -> ACP::AgentConnection::_Agent
+  # @rbs @extension_requests: Hash[String, ^(untyped) -> untyped]
+  # @rbs @extension_notifications: Hash[String, ^(untyped) -> void]
   # @rbs @logger: ACP::Transport::_Logger
 
   PROTOCOL_VERSION = 1 #: Integer
@@ -30,6 +32,8 @@ class ACP::AgentConnection
   # @rbs capabilities: ACP::Types::AgentCapabilities
   # @rbs agent_info: ACP::Types::Implementation?
   # @rbs auth_methods: Array[ACP::Types::AuthMethod::t]
+  # @rbs extension_requests: Hash[String, ^(untyped) -> untyped]
+  # @rbs extension_notifications: Hash[String, ^(untyped) -> void]
   # @rbs logger: ACP::Transport::_Logger
   # @rbs &factory: (ACP::AgentConnection::Client) -> ACP::AgentConnection::_Agent
   # @rbs return: void
@@ -38,6 +42,8 @@ class ACP::AgentConnection
     capabilities:,
     agent_info: nil,
     auth_methods: [],
+    extension_requests: {},
+    extension_notifications: {},
     logger: ACP::Transport::StderrLogger.new,
     &factory
   )
@@ -46,6 +52,10 @@ class ACP::AgentConnection
     @capabilities = capabilities
     @agent_info = agent_info
     @auth_methods = auth_methods
+    @extension_requests = extension_requests
+    @extension_notifications = extension_notifications
+    extension_requests.each_key { |name| ACP::Extensions.validate_name(name) }
+    extension_notifications.each_key { |name| ACP::Extensions.validate_name(name) }
     @factory = factory
   end
 
@@ -61,7 +71,10 @@ class ACP::AgentConnection
     raise ArgumentError, "initialize advertises methods the agent lacks: #{missing.join(', ')}" unless missing.empty?
 
     unrouted = unadvertised.map(&:rpc_method) + PER_SESSION.reject { |_, name| agent.respond_to?(name) }.keys
-    @transport.start(requests: requests(agent, client).except(*unrouted), notifications: notifications(agent))
+    @transport.start(
+      requests: requests(agent, client).except(*unrouted).merge(@extension_requests),
+      notifications: notifications(agent).merge(@extension_notifications)
+    )
   end
 
   private

data/lib/acp/client_connection.rb

@@ -5,32 +5,79 @@ class ACP::ClientConnection
   # @rbs @permission: ACP::ClientConnection::_PermissionHandler
   # @rbs @read_text_file: (^(ACP::Types::ReadTextFileRequest) -> (ACP::Types::ReadTextFileResponse | ACP::RequestError))?
   # @rbs @write_text_file: (^(ACP::Types::WriteTextFileRequest) -> (ACP::Types::WriteTextFileResponse | ACP::RequestError))?
+  # @rbs @create_terminal: (^(ACP::Types::CreateTerminalRequest) -> (ACP::Types::CreateTerminalResponse | ACP::RequestError))?
+  # @rbs @terminal_output: (^(ACP::Types::TerminalOutputRequest) -> (ACP::Types::TerminalOutputResponse | ACP::RequestError))?
+  # @rbs @wait_for_terminal_exit: (^(ACP::Types::WaitForTerminalExitRequest) ->
+  #   (ACP::Types::WaitForTerminalExitResponse | ACP::RequestError))?
+  # @rbs @kill_terminal: (^(ACP::Types::KillTerminalRequest) -> (ACP::Types::KillTerminalResponse | ACP::RequestError))?
+  # @rbs @release_terminal: (^(ACP::Types::ReleaseTerminalRequest) -> (ACP::Types::ReleaseTerminalResponse | ACP::RequestError))?
   # @rbs @updates: ACP::ClientConnection::_UpdateHandler
   # @rbs @fs_capabilities: ACP::Types::FileSystemCapabilities?
+  # @rbs @terminal: bool?
+  # @rbs @extension_requests: Hash[String, ^(untyped) -> untyped]
+  # @rbs @extension_notifications: Hash[String, ^(untyped) -> void]
   # @rbs @lock: Thread::Mutex
   # @rbs @streams: Hash[String, Thread::Queue]
+  # @rbs @pending_permissions: Hash[String, Array[Thread::Queue]]
   # @rbs @logger: ACP::Transport::_Logger
 
   PROTOCOL_VERSION = ACP::AgentConnection::PROTOCOL_VERSION #: Integer
 
   IGNORE = ->(_notification) {} #: ^(ACP::Types::SessionNotification) -> void
 
+  CANCELLED = ACP::Types::RequestPermissionResponse.new(
+    outcome: ACP::Types::RequestPermissionOutcome::Cancelled.new
+  ) #: ACP::Types::RequestPermissionResponse
+
   # @rbs transport: ACP::AgentConnection::_Transport
   # @rbs permission: ACP::ClientConnection::_PermissionHandler
   # @rbs read_text_file: (^(ACP::Types::ReadTextFileRequest) -> (ACP::Types::ReadTextFileResponse | ACP::RequestError))?
   # @rbs write_text_file: (^(ACP::Types::WriteTextFileRequest) -> (ACP::Types::WriteTextFileResponse | ACP::RequestError))?
+  # @rbs create_terminal: (^(ACP::Types::CreateTerminalRequest) -> (ACP::Types::CreateTerminalResponse | ACP::RequestError))?
+  # @rbs terminal_output: (^(ACP::Types::TerminalOutputRequest) -> (ACP::Types::TerminalOutputResponse | ACP::RequestError))?
+  # @rbs wait_for_terminal_exit: (^(ACP::Types::WaitForTerminalExitRequest) ->
+  #   (ACP::Types::WaitForTerminalExitResponse | ACP::RequestError))?
+  # @rbs kill_terminal: (^(ACP::Types::KillTerminalRequest) -> (ACP::Types::KillTerminalResponse | ACP::RequestError))?
+  # @rbs release_terminal: (^(ACP::Types::ReleaseTerminalRequest) -> (ACP::Types::ReleaseTerminalResponse | ACP::RequestError))?
   # @rbs updates: ACP::ClientConnection::_UpdateHandler
+  # @rbs extension_requests: Hash[String, ^(untyped) -> untyped]
+  # @rbs extension_notifications: Hash[String, ^(untyped) -> void]
   # @rbs logger: ACP::Transport::_Logger
   # @rbs return: void
-  def initialize(transport:, permission:, read_text_file: nil, write_text_file: nil, updates: IGNORE, logger: ACP::Transport::StderrLogger.new)
+  def initialize(
+    transport:,
+    permission:,
+    read_text_file: nil,
+    write_text_file: nil,
+    create_terminal: nil,
+    terminal_output: nil,
+    wait_for_terminal_exit: nil,
+    kill_terminal: nil,
+    release_terminal: nil,
+    updates: IGNORE,
+    extension_requests: {},
+    extension_notifications: {},
+    logger: ACP::Transport::StderrLogger.new
+  )
     @transport = transport
     @permission = permission
     @read_text_file = read_text_file
     @write_text_file = write_text_file
+    @create_terminal = create_terminal
+    @terminal_output = terminal_output
+    @wait_for_terminal_exit = wait_for_terminal_exit
+    @kill_terminal = kill_terminal
+    @release_terminal = release_terminal
     @updates = updates
     @fs_capabilities = nil
+    @terminal = nil
+    @extension_requests = extension_requests
+    @extension_notifications = extension_notifications
+    extension_requests.each_key { |name| ACP::Extensions.validate_name(name) }
+    extension_notifications.each_key { |name| ACP::Extensions.validate_name(name) }
     @lock = Mutex.new
     @streams = {}
+    @pending_permissions = {}
     @logger = logger
   end
 
@@ -40,9 +87,14 @@ class ACP::ClientConnection
       requests: {
         'session/request_permission' => method(:request_permission),
         'fs/read_text_file' => method(:read_text_file),
-        'fs/write_text_file' => method(:write_text_file)
-      },
-      notifications: { 'session/update' => method(:dispatch) }
+        'fs/write_text_file' => method(:write_text_file),
+        'terminal/create' => method(:create_terminal),
+        'terminal/output' => method(:terminal_output),
+        'terminal/wait_for_exit' => method(:wait_for_terminal_exit),
+        'terminal/kill' => method(:kill_terminal),
+        'terminal/release' => method(:release_terminal)
+      }.merge(@extension_requests),
+      notifications: { 'session/update' => method(:dispatch) }.merge(@extension_notifications)
     )
   end
 
@@ -58,7 +110,14 @@ class ACP::ClientConnection
       raise ArgumentError, "initialize advertises fs methods no handler serves: #{unserved.join(', ')}"
     end
 
+    terminal = request.client_capabilities&.terminal
+    unserved = unserved_terminal_methods(terminal)
+    unless unserved.empty?
+      raise ArgumentError, "initialize advertises terminal methods no handler serves: #{unserved.join(', ')}"
+    end
+
     @fs_capabilities = capabilities
+    @terminal = terminal
     parse(ACP::Types::InitializeResponse, @transport.request('initialize', request.to_h)).then do |response|
       next response if response.is_a?(ACP::RequestError)
 
@@ -118,10 +177,17 @@ class ACP::ClientConnection
     parse(ACP::Types::DeleteSessionResponse, @transport.request('session/delete', request.to_h))
   end
 
+  # The spec requires a pending session/request_permission to be answered with
+  # the cancelled outcome once the turn is cancelled, so every queue registered
+  # for the session gets one before this returns. The notification goes first
+  # so the wire order is cancel, then the cancelled replies.
+  #
   # @rbs notification: ACP::Types::CancelNotification
   # @rbs return: void
   def session_cancel(notification)
     @transport.notify('session/cancel', notification.to_h)
+    pending = @lock.synchronize { @pending_permissions.delete(notification.session_id) }
+    pending&.each { |replies| replies << [:value, CANCELLED] }
   end
 
   # @rbs request: ACP::Types::SetSessionModeRequest
@@ -151,6 +217,26 @@ class ACP::ClientConnection
     parse(ACP::Types::LogoutResponse, @transport.request('logout', request.to_h))
   end
 
+  # Sends an extension request, keyed by its raw `_`-prefixed wire name, and
+  # returns the agent's reply as-is: extension methods have no schema to
+  # parse the result into.
+  #
+  # @rbs method: String
+  # @rbs params: untyped
+  # @rbs return: (Hash[String, untyped] | ACP::RequestError)
+  def ext_request(method, params = nil)
+    ACP::Extensions.validate_name(method)
+    @transport.request(method, params)
+  end
+
+  # @rbs method: String
+  # @rbs params: untyped
+  # @rbs return: void
+  def ext_notify(method, params = nil)
+    ACP::Extensions.validate_name(method)
+    @transport.notify(method, params)
+  end
+
   private
 
   # @rbs type: ACP::AgentConnection::_Parser
@@ -216,6 +302,10 @@ class ACP::ClientConnection
     @updates.call(notification) unless queue
   end
 
+  # The handler runs on its own thread so a cancelled request is answered
+  # without waiting for it, and whatever it returns after that is pushed to a
+  # queue nobody reads.
+  #
   # @rbs params: untyped
   # @rbs return: (ACP::Types::RequestPermissionResponse | ACP::RequestError)
   def request_permission(params)
@@ -223,7 +313,45 @@ class ACP::ClientConnection
   rescue KeyError, TypeError, NoMethodError
     ACP::RequestError.invalid_params
   else
-    @permission.call(request)
+    replies = Thread::Queue.new
+    register_permission(request.session_id, replies)
+    Thread.new do
+      # A raised StandardError is not a returned ACP::RequestError, so the two
+      # need distinct shapes on the queue.
+      replies << begin
+        [:value, @permission.call(request)]
+      rescue StandardError => e
+        [:raised, e]
+      end
+    ensure
+      unregister_permission(request.session_id, replies)
+    end
+    settled = replies.pop
+    # Re-raised so the transport's invoke turns it into an error reply, as it
+    # would if the handler ran on the serve thread itself.
+    raise settled[1] if settled[0] == :raise
+
+    settled[1]
+  end
+
+  # @rbs session_id: String
+  # @rbs replies: Thread::Queue
+  # @rbs return: void
+  def register_permission(session_id, replies)
+    @lock.synchronize { (@pending_permissions[session_id] ||= []) << replies }
+  end
+
+  # @rbs session_id: String
+  # @rbs replies: Thread::Queue
+  # @rbs return: void
+  def unregister_permission(session_id, replies)
+    @lock.synchronize do
+      pending = @pending_permissions[session_id]
+      if pending
+        pending.delete(replies)
+        @pending_permissions.delete(session_id) if pending.empty?
+      end
+    end
   end
 
   # The routes are registered at start, before connect records the advertised
@@ -257,6 +385,82 @@ class ACP::ClientConnection
     handler.call(request)
   end
 
+  # The terminal routes are registered at start, before connect records the
+  # advertised capability, so each one answers -32601 until then.
+  #
+  # @rbs params: untyped
+  # @rbs return: (ACP::Types::CreateTerminalResponse | ACP::RequestError)
+  def create_terminal(params)
+    return ACP::RequestError.unadvertised('terminal') unless @terminal
+
+    request = ACP::Types::CreateTerminalRequest.from_h(params)
+  rescue KeyError, TypeError, NoMethodError
+    ACP::RequestError.invalid_params
+  else
+    # Safe: connect refuses an advertised capability no handler serves.
+    handler = @create_terminal #: ^(ACP::Types::CreateTerminalRequest) -> (ACP::Types::CreateTerminalResponse | ACP::RequestError)
+    handler.call(request)
+  end
+
+  # @rbs params: untyped
+  # @rbs return: (ACP::Types::TerminalOutputResponse | ACP::RequestError)
+  def terminal_output(params)
+    return ACP::RequestError.unadvertised('terminal') unless @terminal
+
+    request = ACP::Types::TerminalOutputRequest.from_h(params)
+  rescue KeyError, TypeError, NoMethodError
+    ACP::RequestError.invalid_params
+  else
+    # Safe: connect refuses an advertised capability no handler serves.
+    handler = @terminal_output #: ^(ACP::Types::TerminalOutputRequest) -> (ACP::Types::TerminalOutputResponse | ACP::RequestError)
+    handler.call(request)
+  end
+
+  # The handler may block for as long as the command runs, so the transport
+  # must serve each request on its own thread for this not to hold up others.
+  #
+  # @rbs params: untyped
+  # @rbs return: (ACP::Types::WaitForTerminalExitResponse | ACP::RequestError)
+  def wait_for_terminal_exit(params)
+    return ACP::RequestError.unadvertised('terminal') unless @terminal
+
+    request = ACP::Types::WaitForTerminalExitRequest.from_h(params)
+  rescue KeyError, TypeError, NoMethodError
+    ACP::RequestError.invalid_params
+  else
+    # Safe: connect refuses an advertised capability no handler serves.
+    handler = @wait_for_terminal_exit #: ^(ACP::Types::WaitForTerminalExitRequest) -> (ACP::Types::WaitForTerminalExitResponse | ACP::RequestError)
+    handler.call(request)
+  end
+
+  # @rbs params: untyped
+  # @rbs return: (ACP::Types::KillTerminalResponse | ACP::RequestError)
+  def kill_terminal(params)
+    return ACP::RequestError.unadvertised('terminal') unless @terminal
+
+    request = ACP::Types::KillTerminalRequest.from_h(params)
+  rescue KeyError, TypeError, NoMethodError
+    ACP::RequestError.invalid_params
+  else
+    # Safe: connect refuses an advertised capability no handler serves.
+    handler = @kill_terminal #: ^(ACP::Types::KillTerminalRequest) -> (ACP::Types::KillTerminalResponse | ACP::RequestError)
+    handler.call(request)
+  end
+
+  # @rbs params: untyped
+  # @rbs return: (ACP::Types::ReleaseTerminalResponse | ACP::RequestError)
+  def release_terminal(params)
+    return ACP::RequestError.unadvertised('terminal') unless @terminal
+
+    request = ACP::Types::ReleaseTerminalRequest.from_h(params)
+  rescue KeyError, TypeError, NoMethodError
+    ACP::RequestError.invalid_params
+  else
+    # Safe: connect refuses an advertised capability no handler serves.
+    handler = @release_terminal #: ^(ACP::Types::ReleaseTerminalRequest) -> (ACP::Types::ReleaseTerminalResponse | ACP::RequestError)
+    handler.call(request)
+  end
+
   # The fs capabilities initialize advertises that no injected handler serves.
   #
   # @rbs capabilities: ACP::Types::FileSystemCapabilities?
@@ -267,4 +471,19 @@ class ACP::ClientConnection
       'fs.writeTextFile' => capabilities&.write_text_file && !@write_text_file
     }.select { |_, unserved| unserved }.keys
   end
+
+  # The terminal capabilities initialize advertises that no injected handler
+  # serves.
+  #
+  # @rbs capabilities: bool?
+  # @rbs return: Array[String]
+  def unserved_terminal_methods(capabilities)
+    {
+      'terminal.create' => capabilities && !@create_terminal,
+      'terminal.output' => capabilities && !@terminal_output,
+      'terminal.wait_for_exit' => capabilities && !@wait_for_terminal_exit,
+      'terminal.kill' => capabilities && !@kill_terminal,
+      'terminal.release' => capabilities && !@release_terminal
+    }.select { |_, unserved| unserved }.keys
+  end
 end

data/lib/acp/extensions.rb

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+# Shared by the connections' handler maps and send paths, so a plain method
+# name cannot slip into the extension routes.
+module ACP::Extensions
+  extend self
+
+  # @rbs name: String
+  # @rbs return: void
+  def validate_name(name)
+    return if name.start_with?('_')
+
+    raise ArgumentError, "extension method names must start with '_' (got #{name.inspect})"
+  end
+end

data/lib/acp/request_error.rb

@@ -48,9 +48,10 @@ class ACP::RequestError
     new(code: INVALID_REQUEST, message: 'Invalid request')
   end
 
+  # @rbs method: String?
   # @rbs return: ACP::RequestError
-  def self.method_not_found
-    new(code: METHOD_NOT_FOUND, message: 'Method not found')
+  def self.method_not_found(method = nil)
+    new(code: METHOD_NOT_FOUND, message: 'Method not found', data: method && { method: method })
   end
 
   # @rbs return: ACP::RequestError

data/lib/acp/transport/stdio.rb

@@ -92,7 +92,7 @@ class ACP::Transport::Stdio
     method = message['method']
     error = message['error']
     if method.is_a?(String) && message.key?('id')
-      serve(requests[method], message['id'], message['params'])
+      serve(requests[method], message['id'], message['params'], method)
     elsif method.is_a?(String)
       # Run on the reader thread so notifications (session/update) keep their
       # order; a JSON-RPC notification has no reply to carry a handler error.
@@ -104,10 +104,21 @@ class ACP::Transport::Stdio
       code, text, data = error.values_at('code', 'message', 'data')
       settle(message['id'], ACP::RequestError.new(code:, message: text, data:))
     else
-      reply(nil, ACP::RequestError.invalid_request)
+      reply(detectable_id(message), ACP::RequestError.invalid_request)
     end
   end
 
+  # JSON-RPC 2.0 says an error reply echoes the request id whenever it can be
+  # detected; ids outside the spec's String/Number/Null types are not, so
+  # those replies keep id null.
+  #
+  # @rbs message: Hash[String, untyped]
+  # @rbs return: untyped
+  def detectable_id(message)
+    id = message['id']
+    id.is_a?(String) || id.is_a?(Numeric) ? id : nil
+  end
+
   # @rbs line: String
   # @rbs return: Hash[String, untyped] | ACP::RequestError
   def parse(line)
@@ -122,10 +133,11 @@ class ACP::Transport::Stdio
   # @rbs handler: _Handler?
   # @rbs id: untyped
   # @rbs params: untyped
+  # @rbs method: String
   # @rbs return: void
-  def serve(handler, id, params)
+  def serve(handler, id, params, method)
     Thread.new do
-      outcome = handler ? invoke(handler, params) : ACP::RequestError.method_not_found
+      outcome = handler ? invoke(handler, params) : ACP::RequestError.method_not_found(method)
       case outcome
       when ACP::Transport::Reply
         reply(id, outcome.result)
@@ -149,7 +161,9 @@ class ACP::Transport::Stdio
   end
 
   # Handlers are application code at the protocol boundary: an exception
-  # becomes an error response instead of killing the thread serving it.
+  # becomes an error response instead of killing the thread serving it. The
+  # exception is only logged, not sent: its message can carry paths, SQL or
+  # anything else the handler interpolated, which must not reach the peer.
   #
   # @rbs handler: _Handler
   # @rbs params: untyped
@@ -157,7 +171,8 @@ class ACP::Transport::Stdio
   def invoke(handler, params)
     handler.call(params)
   rescue StandardError => e
-    ACP::RequestError.new(code: ACP::RequestError::INTERNAL_ERROR, message: e.message)
+    @logger.error("request handler raised #{e.class}: #{e.message}")
+    ACP::RequestError.internal_error
   end
 
   # The success arm is whatever the handler returned, which the transport only

data/lib/acp/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module ACP
-  VERSION = '0.5.0'
+  VERSION = '0.7.0'
 end

data/sig/generated/acp/agent_connection/client.rbs

@@ -63,6 +63,20 @@ class ACP::AgentConnection::Client
   # @rbs return: void
   def complete_elicitation: (ACP::Types::CompleteElicitationNotification notification) -> void
 
+  # Sends an extension request, keyed by its raw `_`-prefixed wire name, and
+  # returns the client's reply as-is: extension methods have no schema to
+  # parse the result into.
+  #
+  # @rbs method: String
+  # @rbs params: untyped
+  # @rbs return: (Hash[String, untyped] | ACP::RequestError)
+  def ext_request: (String method, ?untyped params) -> (Hash[String, untyped] | ACP::RequestError)
+
+  # @rbs method: String
+  # @rbs params: untyped
+  # @rbs return: void
+  def ext_notify: (String method, ?untyped params) -> void
+
   private
 
   # @rbs rpc_method: String

data/sig/generated/acp/agent_connection.rbs

@@ -3,6 +3,10 @@
 class ACP::AgentConnection
   @logger: ACP::Transport::_Logger
 
+  @extension_notifications: Hash[String, ^(untyped) -> void]
+
+  @extension_requests: Hash[String, ^(untyped) -> untyped]
+
   @factory: ^(ACP::AgentConnection::Client) -> ACP::AgentConnection::_Agent
 
   @auth_methods: Array[ACP::Types::AuthMethod::t]
@@ -26,10 +30,12 @@ class ACP::AgentConnection
   # @rbs capabilities: ACP::Types::AgentCapabilities
   # @rbs agent_info: ACP::Types::Implementation?
   # @rbs auth_methods: Array[ACP::Types::AuthMethod::t]
+  # @rbs extension_requests: Hash[String, ^(untyped) -> untyped]
+  # @rbs extension_notifications: Hash[String, ^(untyped) -> void]
   # @rbs logger: ACP::Transport::_Logger
   # @rbs &factory: (ACP::AgentConnection::Client) -> ACP::AgentConnection::_Agent
   # @rbs return: void
-  def initialize: (transport: ACP::AgentConnection::_Transport, capabilities: ACP::Types::AgentCapabilities, ?agent_info: ACP::Types::Implementation?, ?auth_methods: Array[ACP::Types::AuthMethod::t], ?logger: ACP::Transport::_Logger) { (ACP::AgentConnection::Client) -> ACP::AgentConnection::_Agent } -> void
+  def initialize: (transport: ACP::AgentConnection::_Transport, capabilities: ACP::Types::AgentCapabilities, ?agent_info: ACP::Types::Implementation?, ?auth_methods: Array[ACP::Types::AuthMethod::t], ?extension_requests: Hash[String, ^(untyped) -> untyped], ?extension_notifications: Hash[String, ^(untyped) -> void], ?logger: ACP::Transport::_Logger) { (ACP::AgentConnection::Client) -> ACP::AgentConnection::_Agent } -> void
 
   # @rbs return: Thread
   def start: () -> Thread

data/sig/generated/acp/client_connection.rbs

@@ -1,36 +1,64 @@
 # Generated from lib/acp/client_connection.rb with RBS::Inline
 
 class ACP::ClientConnection
-  @logger: ACP::Transport::_Logger
+  @transport: ACP::AgentConnection::_Transport
 
-  @streams: Hash[String, Thread::Queue]
+  @permission: ACP::ClientConnection::_PermissionHandler
 
-  @lock: Thread::Mutex
+  @read_text_file: (^(ACP::Types::ReadTextFileRequest) -> (ACP::Types::ReadTextFileResponse | ACP::RequestError))?
 
-  @fs_capabilities: ACP::Types::FileSystemCapabilities?
+  @write_text_file: (^(ACP::Types::WriteTextFileRequest) -> (ACP::Types::WriteTextFileResponse | ACP::RequestError))?
+
+  @create_terminal: (^(ACP::Types::CreateTerminalRequest) -> (ACP::Types::CreateTerminalResponse | ACP::RequestError))?
+
+  @terminal_output: (^(ACP::Types::TerminalOutputRequest) -> (ACP::Types::TerminalOutputResponse | ACP::RequestError))?
+
+  @wait_for_terminal_exit: (^(ACP::Types::WaitForTerminalExitRequest) -> (ACP::Types::WaitForTerminalExitResponse | ACP::RequestError))?
+
+  @kill_terminal: (^(ACP::Types::KillTerminalRequest) -> (ACP::Types::KillTerminalResponse | ACP::RequestError))?
+
+  @release_terminal: (^(ACP::Types::ReleaseTerminalRequest) -> (ACP::Types::ReleaseTerminalResponse | ACP::RequestError))?
 
   @updates: ACP::ClientConnection::_UpdateHandler
 
-  @write_text_file: (^(ACP::Types::WriteTextFileRequest) -> (ACP::Types::WriteTextFileResponse | ACP::RequestError))?
+  @fs_capabilities: ACP::Types::FileSystemCapabilities?
 
-  @read_text_file: (^(ACP::Types::ReadTextFileRequest) -> (ACP::Types::ReadTextFileResponse | ACP::RequestError))?
+  @terminal: bool?
 
-  @permission: ACP::ClientConnection::_PermissionHandler
+  @extension_requests: Hash[String, ^(untyped) -> untyped]
 
-  @transport: ACP::AgentConnection::_Transport
+  @extension_notifications: Hash[String, ^(untyped) -> void]
+
+  @lock: Thread::Mutex
+
+  @streams: Hash[String, Thread::Queue]
+
+  @pending_permissions: Hash[String, Array[Thread::Queue]]
+
+  @logger: ACP::Transport::_Logger
 
   PROTOCOL_VERSION: Integer
 
   IGNORE: ^(ACP::Types::SessionNotification) -> void
 
+  CANCELLED: ACP::Types::RequestPermissionResponse
+
   # @rbs transport: ACP::AgentConnection::_Transport
   # @rbs permission: ACP::ClientConnection::_PermissionHandler
   # @rbs read_text_file: (^(ACP::Types::ReadTextFileRequest) -> (ACP::Types::ReadTextFileResponse | ACP::RequestError))?
   # @rbs write_text_file: (^(ACP::Types::WriteTextFileRequest) -> (ACP::Types::WriteTextFileResponse | ACP::RequestError))?
+  # @rbs create_terminal: (^(ACP::Types::CreateTerminalRequest) -> (ACP::Types::CreateTerminalResponse | ACP::RequestError))?
+  # @rbs terminal_output: (^(ACP::Types::TerminalOutputRequest) -> (ACP::Types::TerminalOutputResponse | ACP::RequestError))?
+  # @rbs wait_for_terminal_exit: (^(ACP::Types::WaitForTerminalExitRequest) ->
+  #   (ACP::Types::WaitForTerminalExitResponse | ACP::RequestError))?
+  # @rbs kill_terminal: (^(ACP::Types::KillTerminalRequest) -> (ACP::Types::KillTerminalResponse | ACP::RequestError))?
+  # @rbs release_terminal: (^(ACP::Types::ReleaseTerminalRequest) -> (ACP::Types::ReleaseTerminalResponse | ACP::RequestError))?
   # @rbs updates: ACP::ClientConnection::_UpdateHandler
+  # @rbs extension_requests: Hash[String, ^(untyped) -> untyped]
+  # @rbs extension_notifications: Hash[String, ^(untyped) -> void]
   # @rbs logger: ACP::Transport::_Logger
   # @rbs return: void
-  def initialize: (transport: ACP::AgentConnection::_Transport, permission: ACP::ClientConnection::_PermissionHandler, ?read_text_file: (^(ACP::Types::ReadTextFileRequest) -> (ACP::Types::ReadTextFileResponse | ACP::RequestError))?, ?write_text_file: (^(ACP::Types::WriteTextFileRequest) -> (ACP::Types::WriteTextFileResponse | ACP::RequestError))?, ?updates: ACP::ClientConnection::_UpdateHandler, ?logger: ACP::Transport::_Logger) -> void
+  def initialize: (transport: ACP::AgentConnection::_Transport, permission: ACP::ClientConnection::_PermissionHandler, ?read_text_file: (^(ACP::Types::ReadTextFileRequest) -> (ACP::Types::ReadTextFileResponse | ACP::RequestError))?, ?write_text_file: (^(ACP::Types::WriteTextFileRequest) -> (ACP::Types::WriteTextFileResponse | ACP::RequestError))?, ?create_terminal: (^(ACP::Types::CreateTerminalRequest) -> (ACP::Types::CreateTerminalResponse | ACP::RequestError))?, ?terminal_output: (^(ACP::Types::TerminalOutputRequest) -> (ACP::Types::TerminalOutputResponse | ACP::RequestError))?, ?wait_for_terminal_exit: (^(ACP::Types::WaitForTerminalExitRequest) -> (ACP::Types::WaitForTerminalExitResponse | ACP::RequestError))?, ?kill_terminal: (^(ACP::Types::KillTerminalRequest) -> (ACP::Types::KillTerminalResponse | ACP::RequestError))?, ?release_terminal: (^(ACP::Types::ReleaseTerminalRequest) -> (ACP::Types::ReleaseTerminalResponse | ACP::RequestError))?, ?updates: ACP::ClientConnection::_UpdateHandler, ?extension_requests: Hash[String, ^(untyped) -> untyped], ?extension_notifications: Hash[String, ^(untyped) -> void], ?logger: ACP::Transport::_Logger) -> void
 
   # @rbs return: Thread
   def start: () -> Thread
@@ -75,6 +103,11 @@ class ACP::ClientConnection
   # @rbs return: ACP::Types::DeleteSessionResponse | ACP::RequestError
   def session_delete: (ACP::Types::DeleteSessionRequest request) -> (ACP::Types::DeleteSessionResponse | ACP::RequestError)
 
+  # The spec requires a pending session/request_permission to be answered with
+  # the cancelled outcome once the turn is cancelled, so every queue registered
+  # for the session gets one before this returns. The notification goes first
+  # so the wire order is cancel, then the cancelled replies.
+  #
   # @rbs notification: ACP::Types::CancelNotification
   # @rbs return: void
   def session_cancel: (ACP::Types::CancelNotification notification) -> void
@@ -98,6 +131,20 @@ class ACP::ClientConnection
   # @rbs return: ACP::Types::LogoutResponse | ACP::RequestError
   def logout: (ACP::Types::LogoutRequest request) -> (ACP::Types::LogoutResponse | ACP::RequestError)
 
+  # Sends an extension request, keyed by its raw `_`-prefixed wire name, and
+  # returns the agent's reply as-is: extension methods have no schema to
+  # parse the result into.
+  #
+  # @rbs method: String
+  # @rbs params: untyped
+  # @rbs return: (Hash[String, untyped] | ACP::RequestError)
+  def ext_request: (String method, ?untyped params) -> (Hash[String, untyped] | ACP::RequestError)
+
+  # @rbs method: String
+  # @rbs params: untyped
+  # @rbs return: void
+  def ext_notify: (String method, ?untyped params) -> void
+
   private
 
   # @rbs type: ACP::AgentConnection::_Parser
@@ -124,10 +171,24 @@ class ACP::ClientConnection
   # @rbs return: void
   def dispatch: (untyped params) -> void
 
+  # The handler runs on its own thread so a cancelled request is answered
+  # without waiting for it, and whatever it returns after that is pushed to a
+  # queue nobody reads.
+  #
   # @rbs params: untyped
   # @rbs return: (ACP::Types::RequestPermissionResponse | ACP::RequestError)
   def request_permission: (untyped params) -> (ACP::Types::RequestPermissionResponse | ACP::RequestError)
 
+  # @rbs session_id: String
+  # @rbs replies: Thread::Queue
+  # @rbs return: void
+  def register_permission: (String session_id, Thread::Queue replies) -> void
+
+  # @rbs session_id: String
+  # @rbs replies: Thread::Queue
+  # @rbs return: void
+  def unregister_permission: (String session_id, Thread::Queue replies) -> void
+
   # The routes are registered at start, before connect records the advertised
   # capabilities, so each one answers -32601 until then.
   #
@@ -139,9 +200,42 @@ class ACP::ClientConnection
   # @rbs return: (ACP::Types::WriteTextFileResponse | ACP::RequestError)
   def write_text_file: (untyped params) -> (ACP::Types::WriteTextFileResponse | ACP::RequestError)
 
+  # The terminal routes are registered at start, before connect records the
+  # advertised capability, so each one answers -32601 until then.
+  #
+  # @rbs params: untyped
+  # @rbs return: (ACP::Types::CreateTerminalResponse | ACP::RequestError)
+  def create_terminal: (untyped params) -> (ACP::Types::CreateTerminalResponse | ACP::RequestError)
+
+  # @rbs params: untyped
+  # @rbs return: (ACP::Types::TerminalOutputResponse | ACP::RequestError)
+  def terminal_output: (untyped params) -> (ACP::Types::TerminalOutputResponse | ACP::RequestError)
+
+  # The handler may block for as long as the command runs, so the transport
+  # must serve each request on its own thread for this not to hold up others.
+  #
+  # @rbs params: untyped
+  # @rbs return: (ACP::Types::WaitForTerminalExitResponse | ACP::RequestError)
+  def wait_for_terminal_exit: (untyped params) -> (ACP::Types::WaitForTerminalExitResponse | ACP::RequestError)
+
+  # @rbs params: untyped
+  # @rbs return: (ACP::Types::KillTerminalResponse | ACP::RequestError)
+  def kill_terminal: (untyped params) -> (ACP::Types::KillTerminalResponse | ACP::RequestError)
+
+  # @rbs params: untyped
+  # @rbs return: (ACP::Types::ReleaseTerminalResponse | ACP::RequestError)
+  def release_terminal: (untyped params) -> (ACP::Types::ReleaseTerminalResponse | ACP::RequestError)
+
   # The fs capabilities initialize advertises that no injected handler serves.
   #
   # @rbs capabilities: ACP::Types::FileSystemCapabilities?
   # @rbs return: Array[String]
   def unserved_fs_methods: (ACP::Types::FileSystemCapabilities? capabilities) -> Array[String]
+
+  # The terminal capabilities initialize advertises that no injected handler
+  # serves.
+  #
+  # @rbs capabilities: bool?
+  # @rbs return: Array[String]
+  def unserved_terminal_methods: (bool? capabilities) -> Array[String]
 end

data/sig/generated/acp/extensions.rbs

@@ -0,0 +1,9 @@
+# Generated from lib/acp/extensions.rb with RBS::Inline
+
+# Shared by the connections' handler maps and send paths, so a plain method
+# name cannot slip into the extension routes.
+module ACP::Extensions
+  # @rbs name: String
+  # @rbs return: void
+  def validate_name: (String name) -> void
+end

data/sig/generated/acp/request_error.rbs

@@ -44,8 +44,9 @@ class ACP::RequestError
   # @rbs return: ACP::RequestError
   def self.invalid_request: () -> ACP::RequestError
 
+  # @rbs method: String?
   # @rbs return: ACP::RequestError
-  def self.method_not_found: () -> ACP::RequestError
+  def self.method_not_found: (?String? method) -> ACP::RequestError
 
   # @rbs return: ACP::RequestError
   def self.invalid_params: () -> ACP::RequestError

data/sig/generated/acp/transport/stdio.rbs

@@ -62,6 +62,14 @@ class ACP::Transport::Stdio
   # @rbs return: void
   def route: (Hash[String, untyped] message, Hash[String, _Handler] requests, Hash[String, _NotificationHandler] notifications) -> void
 
+  # JSON-RPC 2.0 says an error reply echoes the request id whenever it can be
+  # detected; ids outside the spec's String/Number/Null types are not, so
+  # those replies keep id null.
+  #
+  # @rbs message: Hash[String, untyped]
+  # @rbs return: untyped
+  def detectable_id: (Hash[String, untyped] message) -> untyped
+
   # @rbs line: String
   # @rbs return: Hash[String, untyped] | ACP::RequestError
   def parse: (String line) -> (Hash[String, untyped] | ACP::RequestError)
@@ -69,8 +77,9 @@ class ACP::Transport::Stdio
   # @rbs handler: _Handler?
   # @rbs id: untyped
   # @rbs params: untyped
+  # @rbs method: String
   # @rbs return: void
-  def serve: (_Handler? handler, untyped id, untyped params) -> void
+  def serve: (_Handler? handler, untyped id, untyped params, String method) -> void
 
   # For code with no reply to carry an error: a notification handler, or a
   # Reply's after once the reply is on the wire. An exception must not kill
@@ -82,7 +91,9 @@ class ACP::Transport::Stdio
   def quietly: (String label) { () -> void } -> void
 
   # Handlers are application code at the protocol boundary: an exception
-  # becomes an error response instead of killing the thread serving it.
+  # becomes an error response instead of killing the thread serving it. The
+  # exception is only logged, not sent: its message can carry paths, SQL or
+  # anything else the handler interpolated, which must not reach the peer.
   #
   # @rbs handler: _Handler
   # @rbs params: untyped

data/sig/manual/acp/agent_connection.rbs

@@ -81,6 +81,8 @@ class ACP::AgentConnection
     def release_terminal: (ACP::Types::ReleaseTerminalRequest) -> (ACP::Types::ReleaseTerminalResponse | ACP::RequestError)
     def create_elicitation: (ACP::Types::CreateElicitationRequest request) -> (ACP::Types::CreateElicitationResponse | ACP::RequestError)
     def complete_elicitation: (ACP::Types::CompleteElicitationNotification notification) -> void
+    def ext_request: (String method, ?untyped params) -> (Hash[String, untyped] | ACP::RequestError)
+    def ext_notify: (String method, ?untyped params) -> void
     def capabilities: () -> ACP::Types::ClientCapabilities?
   end
 

data/sig/manual/acp/extensions.rbs

@@ -0,0 +1,6 @@
+# rbs-inline does not emit `extend self`, so without this reopen the module's
+# methods aren't visible as singleton methods.
+
+module ACP::Extensions
+  extend ::ACP::Extensions
+end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: acp-sdk
 version: !ruby/object:Gem::Version
-  version: 0.5.0
+  version: 0.7.0
 platform: ruby
 authors:
 - Jake Bottrall
@@ -44,6 +44,7 @@ files:
 - lib/acp/agent_connection/optional_method/resume_session.rb
 - lib/acp/agent_process.rb
 - lib/acp/client_connection.rb
+- lib/acp/extensions.rb
 - lib/acp/request_error.rb
 - lib/acp/sdk.rb
 - lib/acp/transport.rb
@@ -259,6 +260,7 @@ files:
 - sig/generated/acp/agent_connection/optional_method/resume_session.rbs
 - sig/generated/acp/agent_process.rbs
 - sig/generated/acp/client_connection.rbs
+- sig/generated/acp/extensions.rbs
 - sig/generated/acp/request_error.rbs
 - sig/generated/acp/sdk.rbs
 - sig/generated/acp/transport.rbs
@@ -472,6 +474,7 @@ files:
 - sig/manual/acp/agent_connection/optional_method/resume_session.rbs
 - sig/manual/acp/agent_process.rbs
 - sig/manual/acp/client_connection.rbs
+- sig/manual/acp/extensions.rbs
 - sig/manual/acp/transport.rbs
 - sig/manual/acp/transport/stdio.rbs
 homepage: https://github.com/bottrall/acp-sdk