riffer-rig 0.12.0 → 0.13.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 04c27f5bf6e9339d06df9f64501e3b3dac5fa4724b0272a29641b0d9b707f788
-  data.tar.gz: a89ddd0ef08516f50c3ea42c2374ff7ff80ea78b55ba1ed8a561851df6280745
+  metadata.gz: 8fe0ea5d0af46d44401a20ba9880877d1f631d4131de70452256a5def7d206aa
+  data.tar.gz: '0108f44f3cd248417bee1320ef14921cf75d8018784b103ebf85d676f941cd79'
 SHA512:
-  metadata.gz: 11115efca8ca651cf9d1211c0c17e112e4369ce72f606c0c3886e1caae0c3a5b48b281f298a88481fdfff630eb57b19b2de2aa2dffbb9ef3e01a23fe0fa32a11
-  data.tar.gz: f0548a971011eb9b8439de4237bdeaf61803867a2a692f02cf37ea8f69e6ddb1f4492e5fb5e49fe81d95ac3b379909383ca15949822e5e50f2c39c4686cf77b7
+  metadata.gz: 761434ca55b8f51971328b39ad0dfa02d4a89e21c41f03b1dfb55778c09cac14f4d3328799e8a6e1b25027f9d30a953d3278f4a0264a0ae558e6f56ef577c779
+  data.tar.gz: f9e88b15b40d562553f4b0b871a1b992c0da8c6b883159561be132e3b74312b7fce5d31b18391db99366e7bc6a4d0070639efce9abe7b454e572d9d4e7acc659

data/CHANGELOG.md

@@ -1,5 +1,134 @@
 # Changelog
 
+## [0.13.0](https://github.com/bottrall/riffer-rig/compare/v0.12.0...v0.13.0) (2026-10-17)
+
+
+### ⚠ BREAKING CHANGES
+
+* Riffer::Rig::Loader takes its per-build choices as a Riffer::Rig::Loader::Options instead of keywords. Loader.runtime no longer accepts model:, extensions:, skills:, agents_md:, tools: or max_steps: (ArgumentError: unknown keywords); pass options: Riffer::Rig::Loader::Options.new(model: ..., skills: false). On a Loader instance the Options is the optional first positional argument: runtime(options), continue(options) and resume(id, options). Loader#tracked_files is removed with no replacement.
+
+### Features
+
+* **acp:** add adopt: hook and yield the connection from run ([#336](https://github.com/bottrall/riffer-rig/issues/336)) ([612a9c4](https://github.com/bottrall/riffer-rig/commit/612a9c4710f41ab19140d91112887e833c40ce4d)), closes [#302](https://github.com/bottrall/riffer-rig/issues/302)
+* **acp:** announce background job exits between prompts ([#437](https://github.com/bottrall/riffer-rig/issues/437)) ([cd40e5b](https://github.com/bottrall/riffer-rig/commit/cd40e5b1778a72595b4c2f4a376544052c5c1a3d)), closes [#334](https://github.com/bottrall/riffer-rig/issues/334)
+* **acp:** relay host questions to the client ([#337](https://github.com/bottrall/riffer-rig/issues/337)) ([e4fe093](https://github.com/bottrall/riffer-rig/commit/e4fe093505c74f89b7a8fc93680425b95c59e663))
+* carry the tool lifecycle on before/after_tool_call events ([#321](https://github.com/bottrall/riffer-rig/issues/321)) ([c3967e2](https://github.com/bottrall/riffer-rig/commit/c3967e224b2d7427f6fd54e028b47f9644e24375))
+* **commands:** add /cost runtime command ([#431](https://github.com/bottrall/riffer-rig/issues/431)) ([f7f36e8](https://github.com/bottrall/riffer-rig/commit/f7f36e8e91038952ca3a6762d792e0aea8ed67e6)), closes [#260](https://github.com/bottrall/riffer-rig/issues/260)
+* **commands:** add /trace runtime command ([#373](https://github.com/bottrall/riffer-rig/issues/373)) ([95fc4cc](https://github.com/bottrall/riffer-rig/commit/95fc4cca0ab07cc7d1d39d726875e21eaa184fbb)), closes [#250](https://github.com/bottrall/riffer-rig/issues/250)
+* **deps:** upgrade riffer to 0.51.0 ([#306](https://github.com/bottrall/riffer-rig/issues/306)) ([255c3d7](https://github.com/bottrall/riffer-rig/commit/255c3d7474baf3e669b5b093eb492984e3235cbd))
+* **deps:** upgrade riffer to 0.52.1 ([#418](https://github.com/bottrall/riffer-rig/issues/418)) ([7b9c085](https://github.com/bottrall/riffer-rig/commit/7b9c085de9c3ea5d7fc6a5b3c3d4c9b3b6e1825b))
+* **headless:** wait for background jobs at exit ([#438](https://github.com/bottrall/riffer-rig/issues/438)) ([91c7f9f](https://github.com/bottrall/riffer-rig/commit/91c7f9fc09fa6ea0a95c3e0221978979a1ff90f1)), closes [#331](https://github.com/bottrall/riffer-rig/issues/331)
+* **runtime:** deliver background job exits to the model ([#434](https://github.com/bottrall/riffer-rig/issues/434)) ([e3f87b3](https://github.com/bottrall/riffer-rig/commit/e3f87b3a8d8efbe9a1f380b161b80f00bb89da00))
+* **runtime:** keep background jobs running through a cancel ([#436](https://github.com/bottrall/riffer-rig/issues/436)) ([699ebbc](https://github.com/bottrall/riffer-rig/commit/699ebbc9055f11b95e7446a94ed33895387d8661)), closes [#333](https://github.com/bottrall/riffer-rig/issues/333)
+* **stores:** stamp session entries with recorded_at ([#316](https://github.com/bottrall/riffer-rig/issues/316)) ([44dd322](https://github.com/bottrall/riffer-rig/commit/44dd3221b6a6c34528fb17772f15b2449a4ebdfc))
+* **terminal:** add a /help command that lists the session's commands ([#547](https://github.com/bottrall/riffer-rig/issues/547)) ([81acfcf](https://github.com/bottrall/riffer-rig/commit/81acfcf7946033ecc0bebcf886db32b5b2a81e72)), closes [#545](https://github.com/bottrall/riffer-rig/issues/545)
+* **terminal:** add the message queue and its footer chip ([#410](https://github.com/bottrall/riffer-rig/issues/410)) ([9a4c41a](https://github.com/bottrall/riffer-rig/commit/9a4c41a630fdabf4edaf90434ed4cc1c441ecbbb)), closes [#243](https://github.com/bottrall/riffer-rig/issues/243)
+* **terminal:** make the ticker UI the default and document it ([#435](https://github.com/bottrall/riffer-rig/issues/435)) ([3400949](https://github.com/bottrall/riffer-rig/commit/34009492060bec9f36be554ffcebac770b247d4a)), closes [#265](https://github.com/bottrall/riffer-rig/issues/265)
+* **terminal:** replay prior turns on resume ([#432](https://github.com/bottrall/riffer-rig/issues/432)) ([7652083](https://github.com/bottrall/riffer-rig/commit/765208399a1c3a69791ba85bb9a97dc2914206ed)), closes [#262](https://github.com/bottrall/riffer-rig/issues/262)
+* **terminal:** run the REPL as a queue-draining loop ([#429](https://github.com/bottrall/riffer-rig/issues/429)) ([0213860](https://github.com/bottrall/riffer-rig/commit/021386049d753b48226cc6dbb8a63312d03dacdf))
+* **terminal:** show session totals in the banner and redraw on /model ([#317](https://github.com/bottrall/riffer-rig/issues/317)) ([69232fd](https://github.com/bottrall/riffer-rig/commit/69232fde93179869cce86b66bcc6aa0da9dfa731)), closes [#264](https://github.com/bottrall/riffer-rig/issues/264)
+* **terminal:** show turns through the ticker and delete the old renderer ([#433](https://github.com/bottrall/riffer-rig/issues/433)) ([4ec3388](https://github.com/bottrall/riffer-rig/commit/4ec3388df41a01d34b9fa9686df7f63ba0b42062))
+* **terminal:** start a turn when a background job exits at an idle prompt ([#439](https://github.com/bottrall/riffer-rig/issues/439)) ([0d5198a](https://github.com/bottrall/riffer-rig/commit/0d5198af9b1c65c06277b0201fc48355283bce7e)), closes [#332](https://github.com/bottrall/riffer-rig/issues/332)
+* **terminal:** wire slash autocomplete into the REPL ([#495](https://github.com/bottrall/riffer-rig/issues/495)) ([af936d9](https://github.com/bottrall/riffer-rig/commit/af936d96e786ad9e76e1283763b17dfac3c4daba))
+* **tools:** add bash_output and bash_kill for background jobs ([#409](https://github.com/bottrall/riffer-rig/issues/409)) ([88fc7a9](https://github.com/bottrall/riffer-rig/commit/88fc7a9ad321dc443f57dbb3455c599a7db5e5e0)), closes [#329](https://github.com/bottrall/riffer-rig/issues/329)
+* **tools:** job registry for background bash jobs ([#305](https://github.com/bottrall/riffer-rig/issues/305)) ([54f7df1](https://github.com/bottrall/riffer-rig/commit/54f7df15d140b499ec9c3e3b612c6d71df201563)), closes [#276](https://github.com/bottrall/riffer-rig/issues/276)
+* watch background jobs and route their exits through the Runtime ([#376](https://github.com/bottrall/riffer-rig/issues/376)) ([32a3be2](https://github.com/bottrall/riffer-rig/commit/32a3be20edb330f528318e07a6aaf10e5019e0e2)), closes [#328](https://github.com/bottrall/riffer-rig/issues/328)
+
+
+### Bug Fixes
+
+* acp banner, close TODO, settings key types ([#304](https://github.com/bottrall/riffer-rig/issues/304)) ([baa6597](https://github.com/bottrall/riffer-rig/commit/baa659764ea1293792a0ee1dd8f40e289ed807bc))
+* **acp:** announce the tool call of a relayed question ([#511](https://github.com/bottrall/riffer-rig/issues/511)) ([b20f0ee](https://github.com/bottrall/riffer-rig/commit/b20f0ee38ac722f7804dc15555cc00971ecde457)), closes [#472](https://github.com/bottrall/riffer-rig/issues/472)
+* **acp:** answer a failed prompt with the provider's message ([#526](https://github.com/bottrall/riffer-rig/issues/526)) ([976c670](https://github.com/bottrall/riffer-rig/commit/976c670b6d5db43d50b969cc951e56c068c0fc58)), closes [#519](https://github.com/bottrall/riffer-rig/issues/519)
+* **acp:** answer a prompt on a busy session with invalid request ([#508](https://github.com/bottrall/riffer-rig/issues/508)) ([3a50652](https://github.com/bottrall/riffer-rig/commit/3a50652a23a98b48675ae5e46df7ba1cc5b98c01)), closes [#473](https://github.com/bottrall/riffer-rig/issues/473)
+* **acp:** close the tool call of a relayed question ([#404](https://github.com/bottrall/riffer-rig/issues/404)) ([2dc638c](https://github.com/bottrall/riffer-rig/commit/2dc638cc5a7a275e5d0f968b9e83530aa97967e4)), closes [#395](https://github.com/bottrall/riffer-rig/issues/395)
+* **acp:** declare the client's MCP servers on session/load ([#374](https://github.com/bottrall/riffer-rig/issues/374)) ([06e07bd](https://github.com/bottrall/riffer-rig/commit/06e07bdea43cdf74be02fe6342b06e344aa75d0e)), closes [#343](https://github.com/bottrall/riffer-rig/issues/343)
+* **acp:** decline build-time questions while session/load builds ([#405](https://github.com/bottrall/riffer-rig/issues/405)) ([98cf668](https://github.com/bottrall/riffer-rig/commit/98cf668041eb6b239d9bc8fa3e47288f7469dcf7)), closes [#394](https://github.com/bottrall/riffer-rig/issues/394)
+* **acp:** re-send the command list after a reload changes it ([#535](https://github.com/bottrall/riffer-rig/issues/535)) ([a904bc7](https://github.com/bottrall/riffer-rig/commit/a904bc7cdba4a39506196980ac0333ec2df7a89f)), closes [#521](https://github.com/bottrall/riffer-rig/issues/521)
+* **acp:** run slash commands instead of sending them to the model ([#494](https://github.com/bottrall/riffer-rig/issues/494)) ([3924ce5](https://github.com/bottrall/riffer-rig/commit/3924ce52b39e0ae3ef4d409200ce00ca464d38e3)), closes [#444](https://github.com/bottrall/riffer-rig/issues/444)
+* **acp:** send available_commands_update on session/load ([#403](https://github.com/bottrall/riffer-rig/issues/403)) ([3659b0a](https://github.com/bottrall/riffer-rig/commit/3659b0a9b7129e7c1664f6158f6b51a46a9d95d4)), closes [#383](https://github.com/bottrall/riffer-rig/issues/383)
+* **acp:** send each notice as a paragraph of its own ([#527](https://github.com/bottrall/riffer-rig/issues/527)) ([e665309](https://github.com/bottrall/riffer-rig/commit/e665309ad401330c9abc511e2645054a274838e2)), closes [#520](https://github.com/bottrall/riffer-rig/issues/520)
+* **acp:** skip blank assistant messages when replaying a loaded session ([#509](https://github.com/bottrall/riffer-rig/issues/509)) ([85f0aa3](https://github.com/bottrall/riffer-rig/commit/85f0aa3582c893d2eb5ef58dbb9103cdd89f7568)), closes [#471](https://github.com/bottrall/riffer-rig/issues/471)
+* **cli:** answer --version and -v with the riffer-rig version ([#399](https://github.com/bottrall/riffer-rig/issues/399)) ([08ad995](https://github.com/bottrall/riffer-rig/commit/08ad995ba8570a2aced722fa1305c025939d5ee4)), closes [#380](https://github.com/bottrall/riffer-rig/issues/380)
+* **cli:** open the picker for a bare -r followed by another flag ([#370](https://github.com/bottrall/riffer-rig/issues/370)) ([e01bd20](https://github.com/bottrall/riffer-rig/commit/e01bd20d8c599d208c0e2541e34d7575df9d7e83)), closes [#342](https://github.com/bottrall/riffer-rig/issues/342)
+* **cli:** recognise clustered short flags such as -pc as headless ([#406](https://github.com/bottrall/riffer-rig/issues/406)) ([2e28f63](https://github.com/bottrall/riffer-rig/commit/2e28f630601ac774652467ca0d1efbbaa5208428)), closes [#384](https://github.com/bottrall/riffer-rig/issues/384)
+* **cli:** reject --max-steps values below 1 ([#499](https://github.com/bottrall/riffer-rig/issues/499)) ([e0e33ad](https://github.com/bottrall/riffer-rig/commit/e0e33ad13e3d04d4f555f0e455997f7d6a5938da)), closes [#467](https://github.com/bottrall/riffer-rig/issues/467)
+* **commands:** confirm the save in /model --save ([#500](https://github.com/bottrall/riffer-rig/issues/500)) ([7c0035b](https://github.com/bottrall/riffer-rig/commit/7c0035b1b6780955f8f8508d6cda3459ab4721eb)), closes [#464](https://github.com/bottrall/riffer-rig/issues/464)
+* **credentials:** never overwrite a malformed auth, settings or trust file ([#415](https://github.com/bottrall/riffer-rig/issues/415)) ([c8d66aa](https://github.com/bottrall/riffer-rig/commit/c8d66aa6babdf791ce9e3a47bdbdd168454dffd0)), closes [#381](https://github.com/bottrall/riffer-rig/issues/381)
+* **credentials:** preserve unrecognised auth.json entries on store and remove ([#365](https://github.com/bottrall/riffer-rig/issues/365)) ([a7d26e7](https://github.com/bottrall/riffer-rig/commit/a7d26e799d64099a711a771b30e42bdf4a8c86c8)), closes [#344](https://github.com/bottrall/riffer-rig/issues/344)
+* **credentials:** tighten an existing auth.json to 0600 on rewrite ([#400](https://github.com/bottrall/riffer-rig/issues/400)) ([59765c8](https://github.com/bottrall/riffer-rig/commit/59765c822cbae0b168c7ba63e440b2dfdc6f4529)), closes [#382](https://github.com/bottrall/riffer-rig/issues/382)
+* **deps:** pin acp-sdk to one minor ([#397](https://github.com/bottrall/riffer-rig/issues/397)) ([7bcad06](https://github.com/bottrall/riffer-rig/commit/7bcad0649686e052afe5e5fc371212800d493237))
+* **deps:** upgrade acp-sdk to 0.11.0 ([#338](https://github.com/bottrall/riffer-rig/issues/338)) ([8e61f4a](https://github.com/bottrall/riffer-rig/commit/8e61f4a887ded320cf668300629f210bb02c91f9))
+* **deps:** upgrade acp-sdk to 0.13.0 ([#424](https://github.com/bottrall/riffer-rig/issues/424)) ([ba080c1](https://github.com/bottrall/riffer-rig/commit/ba080c1621cff5d3ea77e73863558e6778ff6445))
+* **headless:** print the --verbose tool trace in --json mode ([#501](https://github.com/bottrall/riffer-rig/issues/501)) ([4fba2a0](https://github.com/bottrall/riffer-rig/commit/4fba2a060bd07e1745d46f41bf6b655a553f8d5a)), closes [#468](https://github.com/bottrall/riffer-rig/issues/468)
+* **headless:** refuse a whitespace-only prompt ([#498](https://github.com/bottrall/riffer-rig/issues/498)) ([633d099](https://github.com/bottrall/riffer-rig/commit/633d099cdaf473a963e20d4b11140749580afe64)), closes [#465](https://github.com/bottrall/riffer-rig/issues/465)
+* **headless:** replace invalid UTF-8 in piped stdin ([#482](https://github.com/bottrall/riffer-rig/issues/482)) ([1e726f4](https://github.com/bottrall/riffer-rig/commit/1e726f4650ea3a968e466aee7480ee57caf86580)), closes [#451](https://github.com/bottrall/riffer-rig/issues/451)
+* **headless:** report a missing session before the missing prompt ([#507](https://github.com/bottrall/riffer-rig/issues/507)) ([60ad490](https://github.com/bottrall/riffer-rig/commit/60ad49009836e7706a0429927d8f0ad2630ec7ac))
+* **headless:** separate follow-up answers with a blank line in text mode ([#505](https://github.com/bottrall/riffer-rig/issues/505)) ([4c74399](https://github.com/bottrall/riffer-rig/commit/4c7439915932155c50378769b5d40f01eba29dc9)), closes [#469](https://github.com/bottrall/riffer-rig/issues/469)
+* **headless:** serialise non-pair Enumerables in Ndjson as arrays ([#357](https://github.com/bottrall/riffer-rig/issues/357)) ([0b5e16a](https://github.com/bottrall/riffer-rig/commit/0b5e16a6339b42d87504bfd85e21f501aeaad9e6)), closes [#348](https://github.com/bottrall/riffer-rig/issues/348)
+* **headless:** stop waiting on a silent stdin when -p has a prompt argument ([#541](https://github.com/bottrall/riffer-rig/issues/541)) ([32d0ca9](https://github.com/bottrall/riffer-rig/commit/32d0ca9cbccf089461030de33f8f4475f1b2fb47)), closes [#529](https://github.com/bottrall/riffer-rig/issues/529)
+* **headless:** stream stdout to pipes and files as it is written ([#484](https://github.com/bottrall/riffer-rig/issues/484)) ([3fbc295](https://github.com/bottrall/riffer-rig/commit/3fbc295ebef30269546ec87c3af0fb4a8a6d6fe1)), closes [#452](https://github.com/bottrall/riffer-rig/issues/452)
+* **loader:** ask again about a trust question left unanswered ([#522](https://github.com/bottrall/riffer-rig/issues/522)) ([c5e8dae](https://github.com/bottrall/riffer-rig/commit/c5e8dae6891cd1388dc71ef8c3d38e5e55021c7f)), closes [#517](https://github.com/bottrall/riffer-rig/issues/517)
+* **mcp:** preserve stdio fields in Declaration#with_headers ([#310](https://github.com/bottrall/riffer-rig/issues/310)) ([90b6f8e](https://github.com/bottrall/riffer-rig/commit/90b6f8e2b87b68b726eec599e5d6c905801681ff)), closes [#307](https://github.com/bottrall/riffer-rig/issues/307)
+* route missing-session wording through the sessions collaborator ([#298](https://github.com/bottrall/riffer-rig/issues/298)) ([a22e2bd](https://github.com/bottrall/riffer-rig/commit/a22e2bd483c44a6ec345f50f0a15a8a84c4c9b66)), closes [#283](https://github.com/bottrall/riffer-rig/issues/283)
+* **runtime:** keep a resumed session's first user message ([#478](https://github.com/bottrall/riffer-rig/issues/478)) ([3a1e7e5](https://github.com/bottrall/riffer-rig/commit/3a1e7e5523ffc5cc060bc57eeeb70a46cc3467cd)), closes [#441](https://github.com/bottrall/riffer-rig/issues/441)
+* **runtime:** show the provider's response body message on HTTP errors ([#491](https://github.com/bottrall/riffer-rig/issues/491)) ([4e93ec4](https://github.com/bottrall/riffer-rig/commit/4e93ec486820f8a49b8d6a00a7838ff9e0f90561))
+* **runtime:** warn about tool allowlist names no extension registered ([#485](https://github.com/bottrall/riffer-rig/issues/485)) ([da61612](https://github.com/bottrall/riffer-rig/commit/da6161282e965dac648c6b4b213c9441d8385b79)), closes [#453](https://github.com/bottrall/riffer-rig/issues/453)
+* **sdk:** return a message when the gem install fails ([#369](https://github.com/bottrall/riffer-rig/issues/369)) ([1cf5557](https://github.com/bottrall/riffer-rig/commit/1cf55574568868fa162200d84b74eb34f73cd9c2)), closes [#351](https://github.com/bottrall/riffer-rig/issues/351)
+* **sessions:** let --model win over a resumed session's /model switch ([#537](https://github.com/bottrall/riffer-rig/issues/537)) ([8233c13](https://github.com/bottrall/riffer-rig/commit/8233c13f75cbb883577c0bc00a40e80b6d9507b4)), closes [#528](https://github.com/bottrall/riffer-rig/issues/528)
+* **sessions:** resume a session in the directory it was saved in ([#544](https://github.com/bottrall/riffer-rig/issues/544)) ([6cd8df2](https://github.com/bottrall/riffer-rig/commit/6cd8df2c80947920d5ea479a4bd5cd1b0b19a892)), closes [#530](https://github.com/bottrall/riffer-rig/issues/530)
+* **settings:** report a non-string model as a settings error ([#510](https://github.com/bottrall/riffer-rig/issues/510)) ([5fde7c2](https://github.com/bottrall/riffer-rig/commit/5fde7c2a0687a99fa3a83c96c0bfc016329f82e7)), closes [#470](https://github.com/bottrall/riffer-rig/issues/470)
+* single credentials install flow, fixing the /auth partial-apply ([#295](https://github.com/bottrall/riffer-rig/issues/295)) ([d6626d8](https://github.com/bottrall/riffer-rig/commit/d6626d8b8f46c78f2c9a7b3a50f4d730c4d63a71))
+* **stores:** keep recording skill activations after a reload ([#371](https://github.com/bottrall/riffer-rig/issues/371)) ([d81abb2](https://github.com/bottrall/riffer-rig/commit/d81abb2a33efba05bf0264ea5708808b95a4e352)), closes [#327](https://github.com/bottrall/riffer-rig/issues/327)
+* **stores:** skip non-object JSON lines in Stores::JSONL ([#361](https://github.com/bottrall/riffer-rig/issues/361)) ([14f9d3a](https://github.com/bottrall/riffer-rig/commit/14f9d3afe2dd46aceb33c5d2ffaa59e773e944ec)), closes [#346](https://github.com/bottrall/riffer-rig/issues/346)
+* **terminal:** announce the exits a follow-up turn actually delivers ([#542](https://github.com/bottrall/riffer-rig/issues/542)) ([f04e762](https://github.com/bottrall/riffer-rig/commit/f04e762922eef0c015ffef25e84b474897973367)), closes [#532](https://github.com/bottrall/riffer-rig/issues/532)
+* **terminal:** cancel a credential question on Ctrl-C ([#490](https://github.com/bottrall/riffer-rig/issues/490)) ([37579b6](https://github.com/bottrall/riffer-rig/commit/37579b61f448d0015ff7947f81e10e5fbb7c03ab))
+* **terminal:** close the session /new or /resume swapped in at exit ([#480](https://github.com/bottrall/riffer-rig/issues/480)) ([dd3de41](https://github.com/bottrall/riffer-rig/commit/dd3de41d87cda9a5b5e39b4693eb927a5a0da9bc)), closes [#442](https://github.com/bottrall/riffer-rig/issues/442)
+* **terminal:** confirm /model in one line instead of the banner ([#401](https://github.com/bottrall/riffer-rig/issues/401)) ([083a2c0](https://github.com/bottrall/riffer-rig/commit/083a2c076a9c6d2b2dc028a26f68200b5ea8cf95)), closes [#378](https://github.com/bottrall/riffer-rig/issues/378)
+* **terminal:** fit the banner to narrow terminals ([#513](https://github.com/bottrall/riffer-rig/issues/513)) ([9a19efa](https://github.com/bottrall/riffer-rig/commit/9a19efaf437c633f89600c9d7b3be18d83eacedb)), closes [#474](https://github.com/bottrall/riffer-rig/issues/474)
+* **terminal:** handle Ctrl-C at idle when SIGINT is inherited as ignored ([#512](https://github.com/bottrall/riffer-rig/issues/512)) ([73d51e7](https://github.com/bottrall/riffer-rig/commit/73d51e7396bf3b9b37a6230fe056501eb85d3852)), closes [#476](https://github.com/bottrall/riffer-rig/issues/476)
+* **terminal:** indent and wrap command output like the turn report ([#497](https://github.com/bottrall/riffer-rig/issues/497)) ([2aadbd0](https://github.com/bottrall/riffer-rig/commit/2aadbd049a96de45e1b11e323e8c89c069eb9a30)), closes [#458](https://github.com/bottrall/riffer-rig/issues/458)
+* **terminal:** interrupt a streaming reply on Ctrl-C ([#416](https://github.com/bottrall/riffer-rig/issues/416)) ([0f123dc](https://github.com/bottrall/riffer-rig/commit/0f123dc01fa2f30ceab3cdd45c08e77a73845efe))
+* **terminal:** keep a blank row between output and the input row ([#534](https://github.com/bottrall/riffer-rig/issues/534)) ([01070f4](https://github.com/bottrall/riffer-rig/commit/01070f40e7b6b6ba0d3a8671d3d6c37bd55ba68f)), closes [#515](https://github.com/bottrall/riffer-rig/issues/515)
+* **terminal:** keep a pasted prompt's line breaks in its echo ([#536](https://github.com/bottrall/riffer-rig/issues/536)) ([73b73ec](https://github.com/bottrall/riffer-rig/commit/73b73ecfb4cd59b8eacb8bc43b38048d17349685)), closes [#525](https://github.com/bottrall/riffer-rig/issues/525)
+* **terminal:** keep a whitespace-only line as a paragraph break ([#366](https://github.com/bottrall/riffer-rig/issues/366)) ([3a402c8](https://github.com/bottrall/riffer-rig/commit/3a402c85b64b61f508a7990b36b032d9276ab6e4)), closes [#341](https://github.com/bottrall/riffer-rig/issues/341)
+* **terminal:** keep the columns of a /trace line that wraps ([#538](https://github.com/bottrall/riffer-rig/issues/538)) ([d24cfc5](https://github.com/bottrall/riffer-rig/commit/d24cfc501cecfd7e3129d12b72487bc467af640a)), closes [#524](https://github.com/bottrall/riffer-rig/issues/524)
+* **terminal:** keep the key reader alive on non-UTF-8 input ([#496](https://github.com/bottrall/riffer-rig/issues/496)) ([f7382c6](https://github.com/bottrall/riffer-rig/commit/f7382c6d4b55fad766285c2c1e6a910ae9f5f291)), closes [#443](https://github.com/bottrall/riffer-rig/issues/443)
+* **terminal:** make the key pipeline restartable and end-of-input aware ([#408](https://github.com/bottrall/riffer-rig/issues/408)) ([c2b4787](https://github.com/bottrall/riffer-rig/commit/c2b4787c35e0e86a1b196b4538d52d8eafe045bd)), closes [#396](https://github.com/bottrall/riffer-rig/issues/396)
+* **terminal:** print the missing-session notice below the banner ([#514](https://github.com/bottrall/riffer-rig/issues/514)) ([2b3a296](https://github.com/bottrall/riffer-rig/commit/2b3a29687a099bfa3eee0d9a4bd767dee6621ea3)), closes [#475](https://github.com/bottrall/riffer-rig/issues/475)
+* **terminal:** render a paragraph's single newlines as line breaks ([#479](https://github.com/bottrall/riffer-rig/issues/479)) ([fa9d08f](https://github.com/bottrall/riffer-rig/commit/fa9d08f9122952a5c7af1c6876ccdfdb21c7550f)), closes [#450](https://github.com/bottrall/riffer-rig/issues/450)
+* **terminal:** render non-object tool-call arguments verbatim ([#359](https://github.com/bottrall/riffer-rig/issues/359)) ([956ae23](https://github.com/bottrall/riffer-rig/commit/956ae2385b42012b1832fc58a7765de570dc4846)), closes [#347](https://github.com/bottrall/riffer-rig/issues/347)
+* **terminal:** replay a job-exit turn on its own when resuming ([#493](https://github.com/bottrall/riffer-rig/issues/493)) ([24c84c2](https://github.com/bottrall/riffer-rig/commit/24c84c29b884b4bcb5818a61fa903a6c8251f5a4))
+* **terminal:** report a bare / instead of sending it to the model ([#504](https://github.com/bottrall/riffer-rig/issues/504)) ([c66d2ae](https://github.com/bottrall/riffer-rig/commit/c66d2ae47a9477d1819b7aeb0f0ccf86fa2952fd)), closes [#460](https://github.com/bottrall/riffer-rig/issues/460)
+* **terminal:** say sessions are off under --no-save instead of none saved ([#506](https://github.com/bottrall/riffer-rig/issues/506)) ([777aba0](https://github.com/bottrall/riffer-rig/commit/777aba0c4b368d6d95f26447b4871f01c2a82201)), closes [#463](https://github.com/bottrall/riffer-rig/issues/463)
+* **terminal:** say when a picker filter matches no session ([#502](https://github.com/bottrall/riffer-rig/issues/502)) ([07b39bd](https://github.com/bottrall/riffer-rig/commit/07b39bdac94ec32731475ac22d844318178ddd3d)), closes [#462](https://github.com/bottrall/riffer-rig/issues/462)
+* **terminal:** say when the /resume picker closes without a pick ([#503](https://github.com/bottrall/riffer-rig/issues/503)) ([327d34b](https://github.com/bottrall/riffer-rig/commit/327d34bc681e18a39bba4dc3e8565242e5a45ad8)), closes [#461](https://github.com/bottrall/riffer-rig/issues/461)
+* **terminal:** show a static hint on the status line while a question waits ([#486](https://github.com/bottrall/riffer-rig/issues/486)) ([ee53ed5](https://github.com/bottrall/riffer-rig/commit/ee53ed5c61eaacf14acf57af7a66578f24ff797a)), closes [#457](https://github.com/bottrall/riffer-rig/issues/457)
+* **terminal:** show every reply of a turn a job exit continued ([#543](https://github.com/bottrall/riffer-rig/issues/543)) ([763558d](https://github.com/bottrall/riffer-rig/commit/763558d845b9387cdd53e74f862991c602034b59)), closes [#531](https://github.com/bottrall/riffer-rig/issues/531)
+* **terminal:** show the cursor while suspended with Ctrl-Z ([#414](https://github.com/bottrall/riffer-rig/issues/414)) ([fa6e7b4](https://github.com/bottrall/riffer-rig/commit/fa6e7b43e42405cb289e15741d7162880ea0583e))
+* **terminal:** size a table by its header and keep pipes in code spans ([#489](https://github.com/bottrall/riffer-rig/issues/489)) ([324ba0e](https://github.com/bottrall/riffer-rig/commit/324ba0eead841027cafff9d60441de90500f4e25)), closes [#455](https://github.com/bottrall/riffer-rig/issues/455)
+* **terminal:** stop Wrapper hanging when the width is at or below the indent ([#367](https://github.com/bottrall/riffer-rig/issues/367)) ([cbbca89](https://github.com/bottrall/riffer-rig/commit/cbbca899769a0782ad146e705f06a6055168daa4)), closes [#340](https://github.com/bottrall/riffer-rig/issues/340)
+* **terminal:** treat 0 in the /resume picker as filter text ([#362](https://github.com/bottrall/riffer-rig/issues/362)) ([ae7516b](https://github.com/bottrall/riffer-rig/commit/ae7516bba9ea207337ef856d4132eaf8ee6095a4)), closes [#350](https://github.com/bottrall/riffer-rig/issues/350)
+* **terminal:** word-wrap questions with a hanging indent ([#540](https://github.com/bottrall/riffer-rig/issues/540)) ([16fb443](https://github.com/bottrall/riffer-rig/commit/16fb443eb38e6428c313fb763dc7480f30cc56b3)), closes [#523](https://github.com/bottrall/riffer-rig/issues/523)
+* **terminal:** word-wrap the echoed prompt with a hanging indent ([#483](https://github.com/bottrall/riffer-rig/issues/483)) ([3f357a1](https://github.com/bottrall/riffer-rig/commit/3f357a12c7af55a676dfc00af3ef4e9d593b9b15)), closes [#459](https://github.com/bottrall/riffer-rig/issues/459)
+* **terminal:** wrap a table column at spaces before breaking a token ([#518](https://github.com/bottrall/riffer-rig/issues/518)) ([6208f11](https://github.com/bottrall/riffer-rig/commit/6208f1195a0bef97307984b35f923487bd865b9b)), closes [#516](https://github.com/bottrall/riffer-rig/issues/516)
+* **terminal:** wrap markdown tables to the terminal width ([#492](https://github.com/bottrall/riffer-rig/issues/492)) ([3b998eb](https://github.com/bottrall/riffer-rig/commit/3b998eba84bf7b2311984c7d0b64c54ee2be3ded))
+* **terminal:** wrap prose by display columns and keep its indentation ([#412](https://github.com/bottrall/riffer-rig/issues/412)) ([40f83ce](https://github.com/bottrall/riffer-rig/commit/40f83ce3b4cd7a00a05a8db0d2fc024b6927b024)), closes [#385](https://github.com/bottrall/riffer-rig/issues/385)
+* **tools:** cap background job output and remove it on close ([#417](https://github.com/bottrall/riffer-rig/issues/417)) ([02a3c5e](https://github.com/bottrall/riffer-rig/commit/02a3c5ec00b8a0435ff70c7560e0ab652ec69cd7)), closes [#391](https://github.com/bottrall/riffer-rig/issues/391)
+* **tools:** end a background job's process group after its leader exits ([#413](https://github.com/bottrall/riffer-rig/issues/413)) ([26de424](https://github.com/bottrall/riffer-rig/commit/26de424d91c7c73623386e9bbd348358536cfc71)), closes [#390](https://github.com/bottrall/riffer-rig/issues/390)
+* **tools:** give background bash jobs an empty stdin ([#488](https://github.com/bottrall/riffer-rig/issues/488)) ([23a1a1c](https://github.com/bottrall/riffer-rig/commit/23a1a1c266f7a938c40c0b07c5a0838be6d24d79)), closes [#445](https://github.com/bottrall/riffer-rig/issues/445)
+* **tools:** keep bash output valid UTF-8 and report sub-second timeouts ([#360](https://github.com/bottrall/riffer-rig/issues/360)) ([9d74845](https://github.com/bottrall/riffer-rig/commit/9d748453ecab23ac32995d0d26495cfe707ad6d9)), closes [#345](https://github.com/bottrall/riffer-rig/issues/345)
+* **tools:** let bash_kill stop a stopped background job ([#487](https://github.com/bottrall/riffer-rig/issues/487)) ([2b5d13e](https://github.com/bottrall/riffer-rig/commit/2b5d13e3096b6a11ab59c5b0002e979f6abf0d21)), closes [#447](https://github.com/bottrall/riffer-rig/issues/447)
+* **tools:** read bash output while the command runs ([#407](https://github.com/bottrall/riffer-rig/issues/407)) ([3a94502](https://github.com/bottrall/riffer-rig/commit/3a94502e5328c7b9edbf1ab5a64ac4386b075610)), closes [#379](https://github.com/bottrall/riffer-rig/issues/379)
+* **tools:** replace invalid UTF-8 bytes in read output ([#481](https://github.com/bottrall/riffer-rig/issues/481)) ([8bc5c8b](https://github.com/bottrall/riffer-rig/commit/8bc5c8b1686ca4511ca595d535860c783eb170db)), closes [#446](https://github.com/bottrall/riffer-rig/issues/446)
+* **tools:** report a background job ended by a signal as killed ([#539](https://github.com/bottrall/riffer-rig/issues/539)) ([db792ec](https://github.com/bottrall/riffer-rig/commit/db792ecde236947ba4681c8132e981def7e04fd0)), closes [#533](https://github.com/bottrall/riffer-rig/issues/533)
+* **tools:** treat a missing background job output file as empty ([#402](https://github.com/bottrall/riffer-rig/issues/402)) ([8464463](https://github.com/bottrall/riffer-rig/commit/846446329657c644e6784c7e8d772ff6d3814047)), closes [#392](https://github.com/bottrall/riffer-rig/issues/392)
+
+
+### Documentation
+
+* describe the Loader::Options and Credentials.install APIs ([#411](https://github.com/bottrall/riffer-rig/issues/411)) ([a3bb5a4](https://github.com/bottrall/riffer-rig/commit/a3bb5a43d0418042919743c3765a99c034f73321)), closes [#387](https://github.com/bottrall/riffer-rig/issues/387)
+
 ## [0.12.0](https://github.com/bottrall/riffer-rig/compare/v0.11.0...v0.12.0) (2026-10-07)
 
 

data/README.md

@@ -48,8 +48,9 @@ The model is the first of these that is set: `--model`, `RIFFER_MODEL`, `model`
 | `--max-steps N`         | stops a turn after `N` model calls                                          |
 | `--no-save`             | does not save this session to the [store](docs/SESSIONS.md)                 |
 | `-c`, `--continue`      | continues the most recent session in this directory ([Sessions](docs/SESSIONS.md#resuming)) |
-| `-r ID`, `--resume ID`  | resumes the session with id `ID`; bare `-r` opens the [picker](docs/SESSIONS.md#the-picker) ([Sessions](docs/SESSIONS.md#resuming)) |
+| `-r [ID]`, `--resume [ID]` | resumes the session with id `ID`; bare `-r` opens the [picker](docs/SESSIONS.md#the-picker) ([Sessions](docs/SESSIONS.md#resuming)) |
 | `-h`, `--help`          | prints the usage                                                            |
+| `-v`, `--version`       | prints the version                                                          |
 
 An editor registers the agent as `riffer acp`, the same Runtimes over the [Agent Client Protocol](https://agentclientprotocol.com) on stdio ([ACP](docs/ACP.md)).
 
@@ -63,23 +64,21 @@ git diff | riffer -p "review this diff"   # piped stdin appended as context
 echo "explain this diff" | riffer -p      # piped stdin alone is the prompt
 ```
 
-Everything loads exactly as the REPL does, the shared flags work the same — `-c` and `-r` included: `riffer -p -c "now run the tests"` continues the most recent session in this directory, and a missing session exits 2 ([Headless](docs/HEADLESS.md)). The session is saved like any other unless `--no-save`. Only the assistant's text is printed, streamed to stdout; errors and warnings go to stderr, and `--verbose` adds a one-line trace of each tool call there. With `--json`, stdout is instead one JSON object per line for every Runtime event — the NDJSON stream ([Headless](docs/HEADLESS.md#the-ndjson-stream---json)). Headless never prompts: a missing model, credential, or SDK prints the reason on stderr and exits 2.
+Everything loads exactly as the REPL does, the shared flags work the same — `-c` and `-r` included: `riffer -p -c "now run the tests"` continues the most recent session in this directory, and a missing session exits 2 ([Headless](docs/HEADLESS.md)). The session is saved like any other unless `--no-save`. Only the assistant's text is printed, streamed to stdout; errors and warnings go to stderr, and `--verbose` adds a one-line trace of each tool call there. With `--json`, stdout is instead one JSON object per line for every Runtime event — the NDJSON stream ([Headless](docs/HEADLESS.md#the-ndjson-stream---json)). A run whose model leaves background jobs running waits for them, giving the model a further turn as each one exits, and kills any left after `--job-idle-timeout` seconds (600 by default) without an exit ([Headless](docs/HEADLESS.md#background-jobs)). Headless never prompts: a missing model, credential, or SDK prints the reason on stderr and exits 2.
 
-The exit code says how the turn ended: `0` finished, `1` runtime error, `2` usage or configuration, `3` the turn ended without completing (`--max-steps`, a full context window, a provider content filter), `130` SIGINT (the turn is cancelled first).
+The exit code says how the turn ended: `0` finished, `1` runtime error, `2` usage or configuration, `3` the turn ended without completing (`--max-steps`, a full context window, a provider content filter) or its background jobs passed the idle timeout, `130` SIGINT (the turn is cancelled first).
 
 ### In the session
 
-Type a prompt and press Enter; the reply streams in, with each tool call and the first line of its result, and every turn ends with a token line (`↑in · ↓out · session N tok`, plus the session cost when the model is [priced](docs/CONFIGURATION.md#models)).
+Type a prompt and press Enter. While the turn runs, the status line under the input shows its time, steps, tool calls, tokens and cost, and Ctrl-T peeks at what the model is writing; the reply is printed when the turn ends, followed by a stat line (`N steps · mm:ss · ↑in · ↓out · session N tok`, plus the turn's cost and the session's when the model is [priced](docs/CONFIGURATION.md#models)). The input line stays open throughout: a message sent during a turn is queued and runs when the turn ends. [Terminal](docs/TERMINAL.md) has every key.
 
-- Ctrl-C during a turn cancels it and returns to the prompt. Ctrl-C at the prompt asks for a second one, which exits.
-- `/exit` or `/quit` ends the session, as does Ctrl-D.
-- `/resume [--all]` opens the [session picker](docs/SESSIONS.md#the-picker): type to filter, switch with Enter on a single match or a row number, and delete with Ctrl-D and a confirm. `/new` starts a fresh session in place; the one you left stays on disk. Both replace the session the terminal drives and re-render the banner.
-- `/model provider/name` switches the model ([below](#switching-the-model)), and `/skill:<name> [text]` runs a skill ([Skills](docs/SKILLS.md)).
-- Any other `/name args` runs the Runtime command of that name, such as one an extension registers ([Extensions](docs/EXTENSIONS.md)); an unknown name is reported and nothing is sent to the model.
+- Ctrl-C during a turn cancels it. Ctrl-C with no turn running asks for a second one, which exits.
+- `/exit` or `/quit` ends the session, as does Ctrl-D on an empty line.
+- `/help` lists the session's slash commands. `/resume [--all]`, `/new`, `/cost`, `/trace`, `/skill:<name>` and the others are described in [Terminal](docs/TERMINAL.md#commands); `/model` is covered [below](#switching-the-model).
 
 ### Switching the model
 
-`/model provider/name` switches the model for the current session only, keeping the conversation so far — `/model openai/gpt-5`, say. The provider prefix is required: a bare name such as `/model sonnet` is rejected with the list of providers. `/model` alone shows the model in use. Switching runs the same setup for the new provider as startup does: its SDK gem is offered for install (or refused with the exact Gemfile line), and missing credentials are resolved — you are prompted for them when the host can ask, and the values apply to the running session immediately. The switch is refused with one error when the host cannot supply what is missing, and the model is left unchanged. `/model --save` writes the model in effect to the home `settings.json`, so new sessions start with it; `/model provider/name --save` switches and saves in one step, and a refused switch saves nothing ([Configuration](docs/CONFIGURATION.md#model)).
+`/model provider/name` switches the model for the current session only, keeping the conversation so far, and confirms it in one line: `/model openai/gpt-5` prints `Model switched to openai/gpt-5`. The provider prefix is required: a bare name such as `/model sonnet` is rejected with the list of providers. `/model` alone shows the model in use. Switching runs the same setup for the new provider as startup does: its SDK gem is offered for install (or refused with the exact Gemfile line), and missing credentials are resolved — you are prompted for them when the host can ask, and the values apply to the running session immediately. The switch is refused with one error when the host cannot supply what is missing, and the model is left unchanged. `/model --save` writes the model in effect to the home `settings.json`, so new sessions start with it; `/model provider/name --save` switches and saves in one step, printing `Model switched to openai/gpt-5 and saved to ~/.riffer/settings.json` (a bare `/model --save` prints `Saved openai/gpt-5 to ~/.riffer/settings.json`), and a refused switch saves nothing ([Configuration](docs/CONFIGURATION.md#model)).
 
 ## Authentication
 
@@ -176,6 +175,7 @@ Start here:
 
 Using the terminal:
 
+- [Terminal](https://riffer.bottrall.dev/guides/terminal/) — The input line and its keys, queueing, the status line, peek, resume replay
 - [Configuration](https://riffer.bottrall.dev/guides/configuration/) — Settings scopes and every core key
 - [Instructions](https://riffer.bottrall.dev/guides/instructions/) — How the system message is built; AGENTS.md
 - [Tools](https://riffer.bottrall.dev/guides/tools/) — The bundled toolkit and provider-native tools
@@ -219,9 +219,9 @@ Every project chore is a script in `bin/`. The Rakefile behind them is an implem
 
 PR titles are [conventional commits](https://www.conventionalcommits.org/) and are linted in CI: `feat:` bumps the minor version, `fix:` bumps the patch, and `feat!:` marks a breaking change (also a minor bump while we are on 0.x). `chore:`, `docs:`, `ci:`, `refactor:` and `test:` never release. Squash-merging makes the title the commit on `main`.
 
-[release-please](https://github.com/googleapis/release-please) keeps a release PR open that bumps `lib/riffer/rig/version.rb` and writes `CHANGELOG.md`. Merging that PR tags `vX.Y.Z`, creates the GitHub Release and publishes the gem to RubyGems.org through Trusted Publishing; nothing is pushed by hand.
+A PR whose code nothing in the live path reaches yet is titled `refactor:`, including fixes to such code; the PR that wires it in carries the `feat:` or `fix:`, titled for what the user gets. The changelog and GitHub Release are generated from titles, so a `feat:` on unreachable code advertises a feature nobody can use.
 
-riffer is pinned to one minor (`~> 0.49.0`) because its 0.x minors may break. When Dependabot opens the riffer bump, retitle it `feat(deps):` or `fix(deps):` before merging so it releases and appears in the changelog.
+[release-please](https://github.com/googleapis/release-please) keeps a release PR open that bumps `lib/riffer/rig/version.rb` and writes `CHANGELOG.md`. Merging that PR tags `vX.Y.Z`, creates the GitHub Release and publishes the gem to RubyGems.org through Trusted Publishing; nothing is pushed by hand.
 
 ## Contributing
 

data/lib/riffer/rig/acp/host.rb

@@ -1,25 +1,36 @@
 # frozen_string_literal: true
 
 require 'acp/sdk'
+require 'securerandom'
 
 class Riffer::Rig::ACP::Host
-  CAPABILITIES = Set[:notify].freeze #: Set[Symbol]
+  include Riffer::Rig::Hosts::NonInteractive
 
-  # @rbs @client: ::ACP::AgentConnection::_Client
+  CAPABILITIES = Set[:notify, :ask, :confirm].freeze #: Set[Symbol]
+  BUILDING_CAPABILITIES = Set[:notify].freeze #: Set[Symbol]
+
+  # @rbs @client: ::ACP::AgentConnection::Client
   # @rbs @session_id: String?
-  # @rbs @buffered: Array[String]
+  # @rbs @buffered: Array[::ACP::Types::SessionUpdate::t]
+  # @rbs @lock: Thread::Mutex
+
+  # @dynamic client=
+  attr_writer :client #: ::ACP::AgentConnection::Client
 
-  # @rbs client: ::ACP::AgentConnection::_Client
+  # @rbs client: ::ACP::AgentConnection::Client
   # @rbs return: void
   def initialize(client:)
     @client = client
     @session_id = nil
     @buffered = []
+    @lock = Mutex.new
   end
 
+  # A request to the client names its session, so nothing can be relayed
+  # until the agent sets the id.
   # @rbs return: Set[Symbol]
   def capabilities
-    CAPABILITIES
+    @session_id ? CAPABILITIES : BUILDING_CAPABILITIES
   end
 
   # @rbs question: String?
@@ -27,23 +38,41 @@ class Riffer::Rig::ACP::Host
   # @rbs secret: bool
   # @rbs return: String?
   def ask(question = nil, options: nil, secret: false)
-    nil
+    id = @session_id
+    # ACP forbids asking for a secret in a form elicitation, and rig serves no
+    # URL for the URL mode to open.
+    return super unless id && !secret
+    return elicit(id, question.to_s) unless options
+
+    selected = permit(id, question.to_s, Riffer::Rig::ACP::Mapper.choices(options))
+    selected if options.include?(selected)
   end
 
   # @rbs question: String?
   # @rbs return: bool
-  def confirm(_question = nil)
-    false
+  def confirm(question = nil)
+    id = @session_id
+    return super unless id
+
+    permit(id, question.to_s, Riffer::Rig::ACP::Mapper::CONFIRM_OPTIONS) == Riffer::Rig::ACP::Mapper::CONFIRMED
   end
 
   # @rbs message: String?
   # @rbs level: Symbol
   # @rbs return: void
   def notify(message = nil, level: :info)
-    id = @session_id
-    return @buffered << message.to_s unless id
+    update(Riffer::Rig::ACP::Mapper.notice(message.to_s))
+  end
 
-    send_update(id, message.to_s)
+  # @rbs update: ::ACP::Types::SessionUpdate::t
+  # @rbs return: void
+  def update(update)
+    # A job's exit reaches here on the job's own thread, racing session_id= for
+    # the buffer.
+    @lock.synchronize do
+      id = @session_id
+      id ? @client.update(id, update) : @buffered << update
+    end
   end
 
   # @rbs label: String?
@@ -61,23 +90,37 @@ class Riffer::Rig::ACP::Host
   # @rbs id: String
   # @rbs return: void
   def session_id=(id)
-    @session_id = id
-    buffered = @buffered
-    @buffered = []
-    buffered.each { |message| send_update(id, message) }
+    @lock.synchronize do
+      @session_id = id
+      @buffered.each { |update| @client.update(id, update) }
+      @buffered = []
+    end
   end
 
   private
 
   # @rbs id: String
-  # @rbs message: String
-  # @rbs return: void
-  def send_update(id, message)
-    @client.update(
-      id,
-      ::ACP::Types::SessionUpdate::AgentMessageChunk.new(
-        content: ::ACP::Types::ContentBlock::Text.new(text: message)
-      )
-    )
+  # @rbs question: String
+  # @rbs options: Array[::ACP::Types::PermissionOption]
+  # @rbs return: String?
+  def permit(id, question, options)
+    # An adopting connection can replace @client while the question is out, and
+    # only the client that was asked knows the tool call to close.
+    client = @client
+    # A permission request must name a tool call, and a host question has none.
+    call_id = SecureRandom.uuid
+    client.update(id, Riffer::Rig::ACP::Mapper.permission_call(call_id, question))
+    request = Riffer::Rig::ACP::Mapper.permission_request(id, call_id, question, options)
+    selected = Riffer::Rig::ACP::Mapper.selected_option(client.request_permission(request))
+    client.update(id, Riffer::Rig::ACP::Mapper.permission_done(call_id, selected))
+    selected
+  end
+
+  # @rbs id: String
+  # @rbs question: String
+  # @rbs return: String?
+  def elicit(id, question)
+    request = Riffer::Rig::ACP::Mapper.elicitation_request(id, question)
+    Riffer::Rig::ACP::Mapper.elicited_answer(@client.create_elicitation(request))
   end
 end