@agenticprimitives/acp 0.0.0-alpha.2

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Agentic Trust Labs
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,28 @@
+# @agenticprimitives/acp
+
+Run an [Agent Client Protocol](https://agentclientprotocol.com) agent — Claude Code, goose, Codex, any ACP-speaking
+runtime — as a **member of a workspace**, with the workspace deciding what it may do, on chain, at every act.
+
+```ts
+import { AcpHost, collectText } from '@agenticprimitives/acp';
+
+const host = new AcpHost({ command: 'goose', args: ['acp'] });
+await host.start();                                     // ACP v1 handshake; another major is refused
+const { sessionId } = await host.newSession(process.cwd(), [
+  { name: 'workspace', command: 'ap', args: ['runtime', 'mcp', '--member', 'goose-1.svc'] },
+]);
+const text = collectText(host, sessionId);
+await host.prompt(sessionId, [{ type: 'text', text: 'mara.me: summarize the retreat plan' }]);
+console.log(text.text());
+await host.stop();
+```
+
+What the host does: speaks ACP to the agent it spawned; streams the agent's updates; answers the agent's
+`session/request_permission` by **policy** — a workspace tool (the `workspace` MCP server's) is always allowed because
+the workspace decides when the call arrives as `harness.ask`; a local tool (the agent's own shell or files) is refused
+unless your policy says otherwise. What it never does: offer the agent your files or terminal, or decide a workspace
+act itself.
+
+The rest of W1 — the workspace MCP server (`ap runtime mcp`), pairing (`ap runtime join`), the loop (`ap runtime run`)
+— lives in the devkit and the runtime app (spec 400 §5.2). `bin/acp-stub-agent.mjs` is a fixed-behaviour ACP agent
+for tests.

package/bin/acp-stub-agent.mjs

@@ -0,0 +1,68 @@
+#!/usr/bin/env node
+// A STUB ACP AGENT — speaks Agent Client Protocol v1 over stdio the way a real coding agent does, with none of the
+// intelligence: it exists so the host binding can be tested end to end in CI without goose, and so the live gate has
+// a runtime whose behaviour is fixed. On each prompt it (1) streams a plan and a thought, (2) asks permission for a
+// LOCAL tool (its own shell — the host must refuse by default), (3) asks permission for a WORKSPACE tool (the host
+// allows — the workspace decides), (4) answers with a message that echoes the prompt and says what it was allowed.
+//
+//   node bin/acp-stub-agent.mjs            (ACP_STUB_VERSION=2 answers protocolVersion 2 — the refusal twin)
+import { createInterface } from 'node:readline';
+
+const VERSION = Number(process.env.ACP_STUB_VERSION ?? 1);
+const write = (m) => process.stdout.write(`${JSON.stringify(m)}\n`);
+const notify = (method, params) => write({ jsonrpc: '2.0', method, params });
+let nextId = 1000;
+const pending = new Map();
+const request = (method, params) => new Promise((resolve) => { const id = nextId++; pending.set(id, resolve); write({ jsonrpc: '2.0', id, method, params }); });
+const sessions = new Map();
+
+const rl = createInterface({ input: process.stdin });
+rl.on('line', (line) => {
+  if (!line.trim()) return;
+  let msg; try { msg = JSON.parse(line); } catch { return; }
+  if (msg.id !== undefined && msg.method === undefined) { const r = pending.get(msg.id); if (r) { pending.delete(msg.id); r(msg.result ?? msg.error); } return; }
+  void handle(msg);
+});
+rl.on('close', () => process.exit(0));
+
+async function handle(msg) {
+  const { id, method, params } = msg;
+  if (method === 'initialize') {
+    return write({ jsonrpc: '2.0', id, result: { protocolVersion: VERSION, agentCapabilities: { loadSession: true, promptCapabilities: { embeddedContext: true } }, agentInfo: { name: 'acp-stub-agent', version: '0.1.0' } } });
+  }
+  if (method === 'session/new') {
+    const sessionId = `sess_${Math.random().toString(36).slice(2, 10)}`;
+    sessions.set(sessionId, { cwd: params.cwd, mcpServers: params.mcpServers ?? [], turns: 0 });
+    return write({ jsonrpc: '2.0', id, result: { sessionId } });
+  }
+  if (method === 'session/load') {
+    sessions.set(params.sessionId, { cwd: params.cwd, mcpServers: params.mcpServers ?? [], turns: 0, loaded: true });
+    return write({ jsonrpc: '2.0', id, result: {} });
+  }
+  if (method === 'session/cancel') return;   // a notification; the turn below checks the flag
+  if (method === 'session/prompt') {
+    const s = sessions.get(params.sessionId);
+    if (!s) return write({ jsonrpc: '2.0', id, error: { code: -32602, message: 'unknown session' } });
+    s.turns += 1;
+    const text = (params.prompt ?? []).filter((b) => b.type === 'text').map((b) => b.text).join('\n');
+    notify('session/update', { sessionId: params.sessionId, update: { sessionUpdate: 'plan', entries: [{ content: 'read the workspace', priority: 'high', status: 'pending' }, { content: 'answer', priority: 'high', status: 'pending' }] } });
+    notify('session/update', { sessionId: params.sessionId, update: { sessionUpdate: 'agent_thought_chunk', content: { type: 'text', text: 'I will try my shell first, then the workspace.' } } });
+    // (2) a LOCAL tool — the host should refuse this by default
+    notify('session/update', { sessionId: params.sessionId, update: { sessionUpdate: 'tool_call', toolCallId: 'call_local_1', title: 'Run `rm -rf build`', kind: 'execute', status: 'pending', rawInput: { command: 'rm -rf build' } } });
+    const local = await request('session/request_permission', { sessionId: params.sessionId, toolCall: { toolCallId: 'call_local_1', title: 'Run `rm -rf build`', kind: 'execute', status: 'pending', rawInput: { command: 'rm -rf build' } }, options: [{ optionId: 'allow', name: 'Allow', kind: 'allow_once' }, { optionId: 'reject', name: 'Reject', kind: 'reject_once' }] });
+    const localAllowed = local?.outcome?.outcome === 'selected' && local.outcome.optionId === 'allow';
+    notify('session/update', { sessionId: params.sessionId, update: { sessionUpdate: 'tool_call_update', toolCallId: 'call_local_1', status: localAllowed ? 'completed' : 'failed' } });
+    // (3) a WORKSPACE tool — the workspace's MCP server; the host allows, the workspace decides
+    const server = s.mcpServers[0]?.name ?? 'workspace';
+    const wsCall = { toolCallId: 'call_ws_1', title: `${server}.workspace_ask`, kind: 'fetch', status: 'pending', rawInput: { server, tool: 'workspace_ask', message: text.split('\n').pop() } };
+    notify('session/update', { sessionId: params.sessionId, update: { sessionUpdate: 'tool_call', ...wsCall } });
+    const ws = await request('session/request_permission', { sessionId: params.sessionId, toolCall: wsCall, options: [{ optionId: 'allow', name: 'Allow', kind: 'allow_once' }, { optionId: 'reject', name: 'Reject', kind: 'reject_once' }] });
+    const wsAllowed = ws?.outcome?.outcome === 'selected' && ws.outcome.optionId === 'allow';
+    notify('session/update', { sessionId: params.sessionId, update: { sessionUpdate: 'tool_call_update', toolCallId: 'call_ws_1', status: wsAllowed ? 'completed' : 'failed' } });
+    // (4) the answer
+    const answer = `stub: heard "${text.split('\n').pop()}" · local tool ${localAllowed ? 'ALLOWED' : 'refused'} · workspace tool ${wsAllowed ? 'allowed' : 'REFUSED'}${s.loaded ? ' · session loaded' : ''} · turn ${s.turns}`;
+    for (const piece of answer.match(/.{1,24}/g) ?? []) notify('session/update', { sessionId: params.sessionId, update: { sessionUpdate: 'agent_message_chunk', messageId: 'msg_1', content: { type: 'text', text: piece } } });
+    return write({ jsonrpc: '2.0', id, result: { stopReason: 'end_turn' } });
+  }
+  write({ jsonrpc: '2.0', id, error: { code: -32601, message: `unknown method ${method}` } });
+}

package/dist/host.d.ts

@@ -0,0 +1,76 @@
+import { EventEmitter } from 'node:events';
+import { type AgentCapabilities, type ContentBlock, type InitializeResponse, type McpServerStdio, type NewSessionResponse, type PromptResponse, type RequestPermissionRequest, type RequestPermissionResponse, type SessionNotification } from './protocol.js';
+/** How a permission request is answered. `workspace` is any tool the workspace MCP server exposes (always allowed:
+ *  the workspace decides); `local` is the agent's own file/shell/other tool — the operator's policy. */
+export type PermissionPolicy = (req: RequestPermissionRequest, classified: 'workspace' | 'local') => Promise<RequestPermissionResponse> | RequestPermissionResponse;
+export interface AcpHostOptions {
+    /** The agent's command and arguments, e.g. `['goose', 'acp']`, `['claude-code-acp']`, `['codex-acp']`. */
+    command: string;
+    args?: string[];
+    env?: Record<string, string>;
+    cwd?: string;
+    clientInfo?: {
+        name: string;
+        version?: string;
+    };
+    /** The name of the MCP server whose tools are the workspace's — tool calls titled with it are `workspace`. */
+    workspaceServerName?: string;
+    permission?: PermissionPolicy;
+    /** Per-request timeout for the agent's answers to the host's requests (initialize, session/new). A prompt turn has none. */
+    requestTimeoutMs?: number;
+    /** Where the agent's stderr goes (its own logging). Default: dropped. */
+    onStderr?: (line: string) => void;
+}
+export interface AcpHostEvents {
+    update: [SessionNotification];
+    permission: [RequestPermissionRequest, RequestPermissionResponse];
+    exit: [{
+        code: number | null;
+        signal: NodeJS.Signals | null;
+    }];
+    /** A line on stdout that was not JSON — an agent printing prose where the protocol is. Reported, never parsed. */
+    noise: [string];
+}
+/** The default policy: the workspace's tools are the workspace's to judge (allow); a local tool is REFUSED unless an
+ *  operator policy says otherwise — a host that quietly allowed an agent's shell would be the click-model bug. */
+export declare const refuseLocalTools: PermissionPolicy;
+export declare class AcpHost extends EventEmitter<AcpHostEvents> {
+    private readonly opts;
+    private proc;
+    private nextId;
+    private readonly pending;
+    private buffer;
+    private agentCapabilities;
+    private agentInfo;
+    private readonly workspaceServerName;
+    private readonly permission;
+    constructor(opts: AcpHostOptions);
+    /** Spawn the agent and negotiate the protocol. Refuses an agent on another major version. */
+    start(): Promise<InitializeResponse>;
+    get capabilities(): AgentCapabilities;
+    get agent(): InitializeResponse['agentInfo'];
+    /** Open a session. The workspace reaches the agent as the MCP server named here (spec 400 §5.2). */
+    newSession(cwd: string, mcpServers: McpServerStdio[]): Promise<NewSessionResponse>;
+    /** Resume a session the agent remembers — only when it said it can (`loadSession`); otherwise the caller opens a new one. */
+    loadSession(sessionId: string, cwd: string, mcpServers: McpServerStdio[]): Promise<boolean>;
+    /** One prompt turn. Resolves when the agent ends the turn; updates stream through the `update` event meanwhile. */
+    prompt(sessionId: string, prompt: ContentBlock[]): Promise<PromptResponse>;
+    cancel(sessionId: string): void;
+    stop(): Promise<void>;
+    private request;
+    private notify;
+    private send;
+    private onData;
+    private dispatch;
+    /** The agent's callbacks. Permission by policy; the host machine's files and shell are not offered (§5.1). */
+    private answer;
+    /** A workspace tool is one the workspace MCP server exposes: agents title MCP tool calls `<server>.<tool>` or name
+     *  the server in `rawInput`; either mark makes it `workspace`. Anything else is the agent's own. */
+    private classify;
+}
+/** A convenience for tests and CLIs: collect the text of a turn as it streams. */
+export declare function collectText(host: AcpHost, sessionId: string): {
+    text: () => string;
+    stop: () => void;
+};
+//# sourceMappingURL=host.d.ts.map

package/dist/host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.d.ts","sourceRoot":"","sources":["../src/host.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAEL,KAAK,iBAAiB,EAAE,KAAK,YAAY,EAAE,KAAK,kBAAkB,EAC7C,KAAK,cAAc,EAAE,KAAK,kBAAkB,EAAyB,KAAK,cAAc,EAC7G,KAAK,wBAAwB,EAAE,KAAK,yBAAyB,EAAE,KAAK,mBAAmB,EACxF,MAAM,eAAe,CAAC;AAEvB;wGACwG;AACxG,MAAM,MAAM,gBAAgB,GAAG,CAAC,GAAG,EAAE,wBAAwB,EAAE,UAAU,EAAE,WAAW,GAAG,OAAO,KAAK,OAAO,CAAC,yBAAyB,CAAC,GAAG,yBAAyB,CAAC;AAEpK,MAAM,WAAW,cAAc;IAC7B,0GAA0G;IAC1G,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAChD,8GAA8G;IAC9G,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,4HAA4H;IAC5H,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,yEAAyE;IACzE,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,CAAC,mBAAmB,CAAC,CAAC;IAC9B,UAAU,EAAE,CAAC,wBAAwB,EAAE,yBAAyB,CAAC,CAAC;IAClE,IAAI,EAAE,CAAC;QAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IAC/D,kHAAkH;IAClH,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC;CACjB;AAED;kHACkH;AAClH,eAAO,MAAM,gBAAgB,EAAE,gBAI9B,CAAC;AAIF,qBAAa,OAAQ,SAAQ,YAAY,CAAC,aAAa,CAAC;IAU1C,OAAO,CAAC,QAAQ,CAAC,IAAI;IATjC,OAAO,CAAC,IAAI,CAA+C;IAC3D,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiC;IACzD,OAAO,CAAC,MAAM,CAAM;IACpB,OAAO,CAAC,iBAAiB,CAAyB;IAClD,OAAO,CAAC,SAAS,CAAkC;IACnD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAS;IAC7C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;gBAEjB,IAAI,EAAE,cAAc;IAMjD,6FAA6F;IACvF,KAAK,IAAI,OAAO,CAAC,kBAAkB,CAAC;IA2B1C,IAAI,YAAY,IAAI,iBAAiB,CAAmC;IACxE,IAAI,KAAK,IAAI,kBAAkB,CAAC,WAAW,CAAC,CAA2B;IAEvE,oGAAoG;IAC9F,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAIxF,6HAA6H;IACvH,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAMjG,mHAAmH;IAC7G,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,cAAc,CAAC;IAIhF,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAEzB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAc3B,OAAO,CAAC,OAAO;IAWf,OAAO,CAAC,MAAM;IAEd,OAAO,CAAC,IAAI;IAKZ,OAAO,CAAC,MAAM;YAcA,QAAQ;IAyBtB,8GAA8G;YAChG,MAAM;IAapB;wGACoG;IACpG,OAAO,CAAC,QAAQ;CAQjB;AAED,kFAAkF;AAClF,wBAAgB,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,IAAI,CAAA;CAAE,CAStG"}

package/dist/host.js

@@ -0,0 +1,209 @@
+// THE ACP HOST — runs one ACP-speaking agent as a child process and speaks JSON-RPC 2.0 to it over its stdio.
+//
+// The host is deliberately small and deliberately dumb about authority: it negotiates the protocol, opens sessions,
+// sends prompts, streams the agent's updates to whoever listens, and answers the agent's callbacks by POLICY ports.
+// It offers the agent none of the host machine (`clientCapabilities.fs` / `.terminal` are false — the agent's files
+// and shell are the agent's own) and it decides no workspace question: a workspace tool call is always allowed here
+// because the WORKSPACE decides it, on chain, when the call arrives as `harness.ask` (spec 400 §5.1). What remains for
+// the policy port is the agent's LOCAL tools, which are outside the substrate's authority model by construction.
+//
+// Transport: newline-delimited JSON on stdout/stdin — what every ACP agent ships today. A future framed transport is a
+// second `Transport` implementation, not a change to this file's protocol handling.
+import { spawn } from 'node:child_process';
+import { EventEmitter } from 'node:events';
+import { ACP_ERRORS, ACP_METHODS, ACP_PROTOCOL_VERSION, isNotification, isRequest, isResponse, } from './protocol.js';
+/** The default policy: the workspace's tools are the workspace's to judge (allow); a local tool is REFUSED unless an
+ *  operator policy says otherwise — a host that quietly allowed an agent's shell would be the click-model bug. */
+export const refuseLocalTools = (req, classified) => {
+    const pick = (kinds) => req.options.find((o) => kinds.includes(o.kind));
+    const choice = classified === 'workspace' ? pick(['allow_once', 'allow_always']) : pick(['reject_once', 'reject_always']);
+    return choice ? { outcome: { outcome: 'selected', optionId: choice.optionId } } : { outcome: { outcome: 'cancelled' } };
+};
+export class AcpHost extends EventEmitter {
+    opts;
+    proc = null;
+    nextId = 1;
+    pending = new Map();
+    buffer = '';
+    agentCapabilities = {};
+    agentInfo;
+    workspaceServerName;
+    permission;
+    constructor(opts) {
+        super();
+        this.opts = opts;
+        this.workspaceServerName = opts.workspaceServerName ?? 'workspace';
+        this.permission = opts.permission ?? refuseLocalTools;
+    }
+    /** Spawn the agent and negotiate the protocol. Refuses an agent on another major version. */
+    async start() {
+        if (this.proc)
+            throw new Error('acp host already started');
+        const proc = spawn(this.opts.command, this.opts.args ?? [], { cwd: this.opts.cwd, env: { ...process.env, ...(this.opts.env ?? {}) }, stdio: ['pipe', 'pipe', 'pipe'] });
+        this.proc = proc;
+        proc.stdout.setEncoding('utf8');
+        proc.stdout.on('data', (chunk) => this.onData(chunk));
+        proc.stderr.setEncoding('utf8');
+        proc.stderr.on('data', (chunk) => { for (const line of chunk.split('\n'))
+            if (line.trim())
+                this.opts.onStderr?.(line); });
+        proc.on('exit', (code, signal) => {
+            for (const p of this.pending.values())
+                p.reject(new Error(`the agent exited (${code ?? signal}) before answering`));
+            this.pending.clear();
+            this.emit('exit', { code, signal });
+        });
+        const init = (await this.request(ACP_METHODS.initialize, {
+            protocolVersion: ACP_PROTOCOL_VERSION,
+            clientCapabilities: { fs: { readTextFile: false, writeTextFile: false }, terminal: false },
+            clientInfo: this.opts.clientInfo ?? { name: '@agenticprimitives/acp' },
+        }));
+        if (typeof init?.protocolVersion !== 'number' || Math.floor(init.protocolVersion) !== ACP_PROTOCOL_VERSION) {
+            await this.stop();
+            throw new Error(`the agent speaks ACP protocol version ${String(init?.protocolVersion)}; this host speaks ${ACP_PROTOCOL_VERSION}`);
+        }
+        this.agentCapabilities = init.agentCapabilities ?? {};
+        this.agentInfo = init.agentInfo;
+        return init;
+    }
+    get capabilities() { return this.agentCapabilities; }
+    get agent() { return this.agentInfo; }
+    /** Open a session. The workspace reaches the agent as the MCP server named here (spec 400 §5.2). */
+    async newSession(cwd, mcpServers) {
+        return (await this.request(ACP_METHODS.newSession, { cwd, mcpServers }));
+    }
+    /** Resume a session the agent remembers — only when it said it can (`loadSession`); otherwise the caller opens a new one. */
+    async loadSession(sessionId, cwd, mcpServers) {
+        if (!this.agentCapabilities.loadSession)
+            return false;
+        await this.request(ACP_METHODS.loadSession, { sessionId, cwd, mcpServers });
+        return true;
+    }
+    /** One prompt turn. Resolves when the agent ends the turn; updates stream through the `update` event meanwhile. */
+    async prompt(sessionId, prompt) {
+        return (await this.request(ACP_METHODS.prompt, { sessionId, prompt }, 0));
+    }
+    cancel(sessionId) { this.notify(ACP_METHODS.cancel, { sessionId }); }
+    async stop() {
+        const proc = this.proc;
+        if (!proc)
+            return;
+        this.proc = null;
+        proc.stdin.end();
+        await new Promise((resolve) => {
+            const t = setTimeout(() => { proc.kill('SIGKILL'); resolve(); }, 2000);
+            proc.once('exit', () => { clearTimeout(t); resolve(); });
+            proc.kill('SIGTERM');
+        });
+    }
+    // ─── wire ──────────────────────────────────────────────────────────────────────────────────────────────────
+    request(method, params, timeoutMs = this.opts.requestTimeoutMs ?? 30_000) {
+        const id = this.nextId++;
+        const msg = { jsonrpc: '2.0', id, method, params };
+        return new Promise((resolve, reject) => {
+            const p = { resolve, reject };
+            if (timeoutMs > 0)
+                p.timer = setTimeout(() => { this.pending.delete(id); reject(new Error(`${method}: the agent did not answer within ${timeoutMs} ms`)); }, timeoutMs);
+            this.pending.set(id, p);
+            this.send(msg);
+        });
+    }
+    notify(method, params) { this.send({ jsonrpc: '2.0', method, params }); }
+    send(msg) {
+        if (!this.proc)
+            throw new Error('acp host not started');
+        this.proc.stdin.write(`${JSON.stringify(msg)}\n`);
+    }
+    onData(chunk) {
+        this.buffer += chunk;
+        let nl;
+        while ((nl = this.buffer.indexOf('\n')) >= 0) {
+            const line = this.buffer.slice(0, nl).trim();
+            this.buffer = this.buffer.slice(nl + 1);
+            if (!line)
+                continue;
+            let msg;
+            try {
+                msg = JSON.parse(line);
+            }
+            catch {
+                this.emit('noise', line);
+                continue;
+            }
+            if (typeof msg !== 'object' || msg === null || msg.jsonrpc !== '2.0') {
+                this.emit('noise', line);
+                continue;
+            }
+            void this.dispatch(msg);
+        }
+    }
+    async dispatch(msg) {
+        if (isResponse(msg)) {
+            const p = this.pending.get(msg.id);
+            if (!p)
+                return;
+            this.pending.delete(msg.id);
+            if (p.timer)
+                clearTimeout(p.timer);
+            if (msg.error)
+                p.reject(new Error(`${msg.error.message} (${msg.error.code})`));
+            else
+                p.resolve(msg.result);
+            return;
+        }
+        if (isNotification(msg)) {
+            if (msg.method === ACP_METHODS.update)
+                this.emit('update', msg.params);
+            return;
+        }
+        const req = msg;
+        if (isRequest(req)) {
+            try {
+                const result = await this.answer(req);
+                this.send({ jsonrpc: '2.0', id: req.id, result });
+            }
+            catch (e) {
+                const err = e;
+                this.send({ jsonrpc: '2.0', id: req.id, error: { code: err.code ?? ACP_ERRORS.internal, message: err.message } });
+            }
+        }
+    }
+    /** The agent's callbacks. Permission by policy; the host machine's files and shell are not offered (§5.1). */
+    async answer(req) {
+        if (req.method === ACP_METHODS.requestPermission) {
+            const r = req.params;
+            const classified = this.classify(r);
+            const out = await this.permission(r, classified);
+            this.emit('permission', r, out);
+            return out;
+        }
+        const e = new Error(`${req.method}: not offered by this host — the agent's files and shell are its own (spec 400 §5.1)`);
+        e.code = ACP_ERRORS.methodNotFound;
+        throw e;
+    }
+    /** A workspace tool is one the workspace MCP server exposes: agents title MCP tool calls `<server>.<tool>` or name
+     *  the server in `rawInput`; either mark makes it `workspace`. Anything else is the agent's own. */
+    classify(r) {
+        const t = r.toolCall;
+        const title = String(t.title ?? '');
+        const raw = JSON.stringify(t.rawInput ?? '');
+        const name = this.workspaceServerName;
+        if (title.startsWith(`${name}.`) || title.startsWith(`${name}_`) || title.includes(`(${name})`) || raw.includes(`"${name}"`))
+            return 'workspace';
+        return 'local';
+    }
+}
+/** A convenience for tests and CLIs: collect the text of a turn as it streams. */
+export function collectText(host, sessionId) {
+    let out = '';
+    const on = (n) => {
+        if (n.sessionId !== sessionId)
+            return;
+        const u = n.update;
+        if (u.sessionUpdate === 'agent_message_chunk' && u.content?.type === 'text')
+            out += u.content.text;
+    };
+    host.on('update', on);
+    return { text: () => out, stop: () => { host.off('update', on); } };
+}
+//# sourceMappingURL=host.js.map

package/dist/host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.js","sourceRoot":"","sources":["../src/host.ts"],"names":[],"mappings":"AAAA,8GAA8G;AAC9G,EAAE;AACF,oHAAoH;AACpH,oHAAoH;AACpH,oHAAoH;AACpH,oHAAoH;AACpH,uHAAuH;AACvH,iHAAiH;AACjH,EAAE;AACF,uHAAuH;AACvH,oFAAoF;AACpF,OAAO,EAAE,KAAK,EAAuC,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EACL,UAAU,EAAE,WAAW,EAAE,oBAAoB,EAAE,cAAc,EAAE,SAAS,EAAE,UAAU,GAIrF,MAAM,eAAe,CAAC;AA8BvB;kHACkH;AAClH,MAAM,CAAC,MAAM,gBAAgB,GAAqB,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE;IACpE,MAAM,IAAI,GAAG,CAAC,KAAiC,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACpG,MAAM,MAAM,GAAG,UAAU,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC,CAAC;IAC1H,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,CAAC;AAC1H,CAAC,CAAC;AAIF,MAAM,OAAO,OAAQ,SAAQ,YAA2B;IAUzB;IATrB,IAAI,GAA0C,IAAI,CAAC;IACnD,MAAM,GAAG,CAAC,CAAC;IACF,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAC;IACjD,MAAM,GAAG,EAAE,CAAC;IACZ,iBAAiB,GAAsB,EAAE,CAAC;IAC1C,SAAS,CAAkC;IAClC,mBAAmB,CAAS;IAC5B,UAAU,CAAmB;IAE9C,YAA6B,IAAoB;QAC/C,KAAK,EAAE,CAAC;QADmB,SAAI,GAAJ,IAAI,CAAgB;QAE/C,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,IAAI,WAAW,CAAC;QACnE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,gBAAgB,CAAC;IACxD,CAAC;IAED,6FAA6F;IAC7F,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACxK,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,IAAI,IAAI,CAAC,IAAI,EAAE;gBAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClI,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAC/B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;gBAAE,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,IAAI,IAAI,MAAM,oBAAoB,CAAC,CAAC,CAAC;YACpH,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACrB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,EAAE;YACvD,eAAe,EAAE,oBAAoB;YACrC,kBAAkB,EAAE,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;YAC1F,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,IAAI,EAAE,wBAAwB,EAAE;SACvE,CAAC,CAAuB,CAAC;QAC1B,IAAI,OAAO,IAAI,EAAE,eAAe,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,oBAAoB,EAAE,CAAC;YAC3G,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,yCAAyC,MAAM,CAAC,IAAI,EAAE,eAAe,CAAC,sBAAsB,oBAAoB,EAAE,CAAC,CAAC;QACtI,CAAC;QACD,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,IAAI,EAAE,CAAC;QACtD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,YAAY,KAAwB,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACxE,IAAI,KAAK,KAAsC,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IAEvE,oGAAoG;IACpG,KAAK,CAAC,UAAU,CAAC,GAAW,EAAE,UAA4B;QACxD,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAuB,CAAC;IACjG,CAAC;IAED,6HAA6H;IAC7H,KAAK,CAAC,WAAW,CAAC,SAAiB,EAAE,GAAW,EAAE,UAA4B;QAC5E,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QACtD,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;QAC5E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mHAAmH;IACnH,KAAK,CAAC,MAAM,CAAC,SAAiB,EAAE,MAAsB;QACpD,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAmB,CAAC;IAC9F,CAAC;IAED,MAAM,CAAC,SAAiB,IAAU,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;IAEnF,KAAK,CAAC,IAAI;QACR,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACjB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAClC,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YACvE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACzD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,8GAA8G;IAEtG,OAAO,CAAC,MAAc,EAAE,MAAe,EAAE,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,IAAI,MAAM;QAC/F,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,GAAG,GAAmB,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QACnE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,CAAC,GAAY,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;YACvC,IAAI,SAAS,GAAG,CAAC;gBAAE,CAAC,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,MAAM,qCAAqC,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YACxK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,MAAc,EAAE,MAAe,IAAU,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IAEhG,IAAI,CAAC,GAAmB;QAC9B,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC;IAEO,MAAM,CAAC,KAAa;QAC1B,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC;QACrB,IAAI,EAAU,CAAC;QACf,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YACxC,IAAI,CAAC,IAAI;gBAAE,SAAS;YACpB,IAAI,GAAmB,CAAC;YACxB,IAAI,CAAC;gBAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAmB,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YAC/F,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAK,GAA4B,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;gBAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YACvI,KAAK,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,GAAmB;QACxC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACnC,IAAI,CAAC,CAAC;gBAAE,OAAO;YACf,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC5B,IAAI,CAAC,CAAC,KAAK;gBAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACnC,IAAI,GAAG,CAAC,KAAK;gBAAE,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;;gBAAM,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC3G,OAAO;QACT,CAAC;QACD,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM;gBAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,MAA6B,CAAC,CAAC;YAC9F,OAAO;QACT,CAAC;QACD,MAAM,GAAG,GAAG,GAAqB,CAAC;QAClC,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACtC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YACpD,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,GAAG,GAAG,CAA8B,CAAC;gBAC3C,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,UAAU,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACpH,CAAC;QACH,CAAC;IACH,CAAC;IAED,8GAA8G;IACtG,KAAK,CAAC,MAAM,CAAC,GAAmB;QACtC,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,CAAC,iBAAiB,EAAE,CAAC;YACjD,MAAM,CAAC,GAAG,GAAG,CAAC,MAAkC,CAAC;YACjD,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YACpC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;YACjD,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;YAChC,OAAO,GAAG,CAAC;QACb,CAAC;QACD,MAAM,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,MAAM,sFAAsF,CAA8B,CAAC;QACtJ,CAAC,CAAC,IAAI,GAAG,UAAU,CAAC,cAAc,CAAC;QACnC,MAAM,CAAC,CAAC;IACV,CAAC;IAED;wGACoG;IAC5F,QAAQ,CAAC,CAA2B;QAC1C,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;QACrB,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,mBAAmB,CAAC;QACtC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,CAAC;YAAE,OAAO,WAAW,CAAC;QACjJ,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AAED,kFAAkF;AAClF,MAAM,UAAU,WAAW,CAAC,IAAa,EAAE,SAAiB;IAC1D,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,MAAM,EAAE,GAAG,CAAC,CAAsB,EAAE,EAAE;QACpC,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS;YAAE,OAAO;QACtC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAoD,CAAC;QACjE,IAAI,CAAC,CAAC,aAAa,KAAK,qBAAqB,IAAI,CAAC,CAAC,OAAO,EAAE,IAAI,KAAK,MAAM;YAAE,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACrG,CAAC,CAAC;IACF,IAAI,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACtB,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACtE,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,8 @@
+export declare const PACKAGE_NAME: "@agenticprimitives/acp";
+export declare const PACKAGE_STATUS: "w1-host";
+export declare const SPEC_REF: "specs/400-closing-the-workspace-gap-buzz-and-team-agent-platforms.md";
+export { ACP_PROTOCOL_VERSION, ACP_METHODS, ACP_ERRORS, isRequest, isNotification, isResponse, } from './protocol.js';
+export type { JsonRpcId, JsonRpcRequest, JsonRpcNotification, JsonRpcError, JsonRpcResponse, JsonRpcMessage, Implementation, ClientCapabilities, AgentCapabilities, InitializeRequest, InitializeResponse, McpServerStdio, NewSessionRequest, NewSessionResponse, LoadSessionRequest, ContentBlock, PromptRequest, StopReason, PromptResponse, CancelNotification, ToolKind, ToolCallStatus, ToolCallContent, ToolCall, PlanEntry, SessionUpdate, SessionNotification, PermissionOptionKind, PermissionOption, RequestPermissionRequest, RequestPermissionOutcome, RequestPermissionResponse, } from './protocol.js';
+export { AcpHost, refuseLocalTools, collectText } from './host.js';
+export type { AcpHostOptions, AcpHostEvents, PermissionPolicy } from './host.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,YAAY,EAAG,wBAAiC,CAAC;AAC9D,eAAO,MAAM,cAAc,EAAG,SAAkB,CAAC;AACjD,eAAO,MAAM,QAAQ,EAAG,sEAA+E,CAAC;AAExG,OAAO,EACL,oBAAoB,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,UAAU,GACrF,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,SAAS,EAAE,cAAc,EAAE,mBAAmB,EAAE,YAAY,EAAE,eAAe,EAAE,cAAc,EAC7F,cAAc,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,kBAAkB,EAC5F,cAAc,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAClH,cAAc,EAAE,kBAAkB,EAAE,QAAQ,EAAE,cAAc,EAAE,eAAe,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,EACjH,mBAAmB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,wBAAwB,EAC/G,yBAAyB,GAC1B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACnE,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC"}

package/dist/index.js

@@ -0,0 +1,16 @@
+// @agenticprimitives/acp — the Agent Client Protocol host binding (spec 400 W1).
+//
+// An existing general-purpose runtime that speaks ACP (Claude Code, goose, Codex) is ADMITTED as a workspace MEMBER —
+// walks in without a rewrite; what it may do is the member's grant, whatever the runtime is for: chartered as a `.svc` Smart
+// Agent by the person who brings it (spec 372 S3a), invited like any member, holding a session wire pinned to
+// `harness.ask` (S3c). This package speaks ACP DOWN to the agent it spawns; the agent reaches the workspace UP through
+// the MCP server the host hands it, whose every tool is one wire-signed A2A request as the runtime itself. ACP sits
+// behind A2A — it is a transport binding (ADR-0057), never a second authority model: a read answers against the
+// runtime's standing; a write parks for the steward's mandate; `session/request_permission` is answered by policy,
+// never by a click that grants anything.
+export const PACKAGE_NAME = '@agenticprimitives/acp';
+export const PACKAGE_STATUS = 'w1-host';
+export const SPEC_REF = 'specs/400-closing-the-workspace-gap-buzz-and-team-agent-platforms.md';
+export { ACP_PROTOCOL_VERSION, ACP_METHODS, ACP_ERRORS, isRequest, isNotification, isResponse, } from './protocol.js';
+export { AcpHost, refuseLocalTools, collectText } from './host.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,EAAE;AACF,sHAAsH;AACtH,6HAA6H;AAC7H,8GAA8G;AAC9G,uHAAuH;AACvH,oHAAoH;AACpH,gHAAgH;AAChH,mHAAmH;AACnH,yCAAyC;AACzC,MAAM,CAAC,MAAM,YAAY,GAAG,wBAAiC,CAAC;AAC9D,MAAM,CAAC,MAAM,cAAc,GAAG,SAAkB,CAAC;AACjD,MAAM,CAAC,MAAM,QAAQ,GAAG,sEAA+E,CAAC;AAExG,OAAO,EACL,oBAAoB,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,UAAU,GACrF,MAAM,eAAe,CAAC;AASvB,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC"}

package/dist/protocol.d.ts

@@ -0,0 +1,253 @@
+/** The protocol version this binding speaks. An agent answering another MAJOR is refused, never coerced. */
+export declare const ACP_PROTOCOL_VERSION: 1;
+export type JsonRpcId = number | string;
+export interface JsonRpcRequest {
+    jsonrpc: '2.0';
+    id: JsonRpcId;
+    method: string;
+    params?: unknown;
+}
+export interface JsonRpcNotification {
+    jsonrpc: '2.0';
+    method: string;
+    params?: unknown;
+}
+export interface JsonRpcError {
+    code: number;
+    message: string;
+    data?: unknown;
+}
+export interface JsonRpcResponse {
+    jsonrpc: '2.0';
+    id: JsonRpcId;
+    result?: unknown;
+    error?: JsonRpcError;
+}
+export type JsonRpcMessage = JsonRpcRequest | JsonRpcNotification | JsonRpcResponse;
+export declare const isRequest: (m: JsonRpcMessage) => m is JsonRpcRequest;
+export declare const isNotification: (m: JsonRpcMessage) => m is JsonRpcNotification;
+export declare const isResponse: (m: JsonRpcMessage) => m is JsonRpcResponse;
+export interface Implementation {
+    name: string;
+    version?: string;
+    title?: string;
+}
+/** What the CLIENT (the host) offers the agent. This binding offers NOTHING of its own machine: the runtime's files
+ *  and shell are the runtime's; the workspace is reached through the MCP server the host hands it (§5.2). */
+export interface ClientCapabilities {
+    fs?: {
+        readTextFile?: boolean;
+        writeTextFile?: boolean;
+    };
+    terminal?: boolean;
+}
+export interface AgentCapabilities {
+    loadSession?: boolean;
+    promptCapabilities?: {
+        image?: boolean;
+        audio?: boolean;
+        embeddedContext?: boolean;
+    };
+    mcpCapabilities?: {
+        http?: boolean;
+        sse?: boolean;
+    };
+}
+export interface InitializeRequest {
+    protocolVersion: number;
+    clientCapabilities?: ClientCapabilities;
+    clientInfo?: Implementation;
+    _meta?: Record<string, unknown>;
+}
+export interface InitializeResponse {
+    protocolVersion: number;
+    agentCapabilities?: AgentCapabilities;
+    agentInfo?: Implementation;
+    authMethods?: Array<{
+        id: string;
+        name: string;
+        description?: string;
+    }>;
+    _meta?: Record<string, unknown>;
+}
+/** An MCP server the AGENT spawns for the session (stdio) — how the workspace reaches the agent as tools. */
+export interface McpServerStdio {
+    name: string;
+    command: string;
+    args: string[];
+    env?: Array<{
+        name: string;
+        value: string;
+    }>;
+}
+export interface NewSessionRequest {
+    cwd: string;
+    mcpServers: McpServerStdio[];
+    _meta?: Record<string, unknown>;
+}
+export interface NewSessionResponse {
+    sessionId: string;
+    modes?: unknown;
+    configOptions?: unknown;
+    _meta?: Record<string, unknown>;
+}
+export interface LoadSessionRequest {
+    sessionId: string;
+    cwd: string;
+    mcpServers: McpServerStdio[];
+}
+export type ContentBlock = {
+    type: 'text';
+    text: string;
+    annotations?: unknown;
+    _meta?: Record<string, unknown>;
+} | {
+    type: 'resource_link';
+    uri: string;
+    name: string;
+    title?: string;
+    description?: string;
+    mimeType?: string;
+} | {
+    type: 'resource';
+    resource: {
+        uri: string;
+        text?: string;
+        mimeType?: string;
+    };
+} | {
+    type: 'image';
+    data: string;
+    mimeType: string;
+} | {
+    type: 'audio';
+    data: string;
+    mimeType: string;
+};
+export interface PromptRequest {
+    sessionId: string;
+    prompt: ContentBlock[];
+    _meta?: Record<string, unknown>;
+}
+export type StopReason = 'end_turn' | 'max_tokens' | 'max_turn_requests' | 'refusal' | 'cancelled';
+export interface PromptResponse {
+    stopReason: StopReason;
+    _meta?: Record<string, unknown>;
+}
+export interface CancelNotification {
+    sessionId: string;
+}
+export type ToolKind = 'read' | 'edit' | 'delete' | 'move' | 'search' | 'execute' | 'think' | 'fetch' | 'switch_mode' | 'other';
+export type ToolCallStatus = 'pending' | 'in_progress' | 'completed' | 'failed';
+export type ToolCallContent = {
+    type: 'content';
+    content: ContentBlock;
+} | {
+    type: 'diff';
+    path: string;
+    oldText?: string | null;
+    newText: string;
+} | {
+    type: 'terminal';
+    terminalId: string;
+};
+export interface ToolCall {
+    toolCallId: string;
+    title: string;
+    kind?: ToolKind;
+    status?: ToolCallStatus;
+    content?: ToolCallContent[];
+    locations?: Array<{
+        path: string;
+        line?: number | null;
+    }>;
+    rawInput?: unknown;
+    rawOutput?: unknown;
+}
+export interface PlanEntry {
+    content: string;
+    priority: 'high' | 'medium' | 'low';
+    status: 'pending' | 'in_progress' | 'completed';
+}
+export type SessionUpdate = {
+    sessionUpdate: 'user_message_chunk';
+    content: ContentBlock;
+} | {
+    sessionUpdate: 'agent_message_chunk';
+    content: ContentBlock;
+    messageId?: string;
+} | {
+    sessionUpdate: 'agent_thought_chunk';
+    content: ContentBlock;
+} | ({
+    sessionUpdate: 'tool_call';
+} & ToolCall) | ({
+    sessionUpdate: 'tool_call_update';
+} & Partial<ToolCall> & {
+    toolCallId: string;
+}) | {
+    sessionUpdate: 'plan';
+    entries: PlanEntry[];
+} | {
+    sessionUpdate: 'available_commands_update';
+    availableCommands: unknown[];
+} | {
+    sessionUpdate: 'current_mode_update';
+    currentModeId: string;
+} | {
+    sessionUpdate: 'usage_update';
+    used?: number;
+    size?: number;
+    cost?: {
+        amount: number;
+        currency: string;
+    };
+} | {
+    sessionUpdate: string;
+    [k: string]: unknown;
+};
+export interface SessionNotification {
+    sessionId: string;
+    update: SessionUpdate;
+}
+export type PermissionOptionKind = 'allow_once' | 'allow_always' | 'reject_once' | 'reject_always';
+export interface PermissionOption {
+    optionId: string;
+    name: string;
+    kind: PermissionOptionKind;
+}
+export interface RequestPermissionRequest {
+    sessionId: string;
+    toolCall: Partial<ToolCall> & {
+        toolCallId: string;
+    };
+    options: PermissionOption[];
+}
+export type RequestPermissionOutcome = {
+    outcome: 'selected';
+    optionId: string;
+} | {
+    outcome: 'cancelled';
+};
+export interface RequestPermissionResponse {
+    outcome: RequestPermissionOutcome;
+}
+/** The methods, spelled once. */
+export declare const ACP_METHODS: {
+    readonly initialize: "initialize";
+    readonly newSession: "session/new";
+    readonly loadSession: "session/load";
+    readonly prompt: "session/prompt";
+    readonly cancel: "session/cancel";
+    readonly update: "session/update";
+    readonly requestPermission: "session/request_permission";
+    readonly fsRead: "fs/read_text_file";
+    readonly fsWrite: "fs/write_text_file";
+};
+/** JSON-RPC error codes this host answers with when it refuses an agent's callback. */
+export declare const ACP_ERRORS: {
+    readonly methodNotFound: -32601;
+    readonly invalidParams: -32602;
+    readonly internal: -32603;
+};
+//# sourceMappingURL=protocol.d.ts.map

package/dist/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AASA,4GAA4G;AAC5G,eAAO,MAAM,oBAAoB,EAAG,CAAU,CAAC;AAI/C,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,MAAM,CAAC;AACxC,MAAM,WAAW,cAAc;IAAG,OAAO,EAAE,KAAK,CAAC;IAAC,EAAE,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE;AACnG,MAAM,WAAW,mBAAmB;IAAG,OAAO,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE;AACzF,MAAM,WAAW,YAAY;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE;AAC/E,MAAM,WAAW,eAAe;IAAG,OAAO,EAAE,KAAK,CAAC;IAAC,EAAE,EAAE,SAAS,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,YAAY,CAAA;CAAE;AAC1G,MAAM,MAAM,cAAc,GAAG,cAAc,GAAG,mBAAmB,GAAG,eAAe,CAAC;AAEpF,eAAO,MAAM,SAAS,MAAO,cAAc,KAAG,CAAC,IAAI,cAAsF,CAAC;AAC1I,eAAO,MAAM,cAAc,MAAO,cAAc,KAAG,CAAC,IAAI,mBAA8E,CAAC;AACvI,eAAO,MAAM,UAAU,MAAO,cAAc,KAAG,CAAC,IAAI,eAAgD,CAAC;AAIrG,MAAM,WAAW,cAAc;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE;AAElF;6GAC6G;AAC7G,MAAM,WAAW,kBAAkB;IACjC,EAAE,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,OAAO,CAAC;QAAC,aAAa,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACzD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AACD,MAAM,WAAW,iBAAiB;IAChC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,kBAAkB,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACrF,eAAe,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAC;QAAC,GAAG,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CACrD;AACD,MAAM,WAAW,iBAAiB;IAAG,eAAe,EAAE,MAAM,CAAC;IAAC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IAAC,UAAU,CAAC,EAAE,cAAc,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE;AACrK,MAAM,WAAW,kBAAkB;IAAG,eAAe,EAAE,MAAM,CAAC;IAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAAC,SAAS,CAAC,EAAE,cAAc,CAAC;IAAC,WAAW,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE;AAI5O,6GAA6G;AAC7G,MAAM,WAAW,cAAc;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,GAAG,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE;AAC/H,MAAM,WAAW,iBAAiB;IAAG,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,cAAc,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE;AACjH,MAAM,WAAW,kBAAkB;IAAG,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE;AACpI,MAAM,WAAW,kBAAkB;IAAG,SAAS,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,cAAc,EAAE,CAAA;CAAE;AAEpG,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GACtF;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7G;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACjF;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtD,MAAM,WAAW,aAAa;IAAG,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,YAAY,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE;AAC7G,MAAM,MAAM,UAAU,GAAG,UAAU,GAAG,YAAY,GAAG,mBAAmB,GAAG,SAAS,GAAG,WAAW,CAAC;AACnG,MAAM,WAAW,cAAc;IAAG,UAAU,EAAE,UAAU,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE;AAC3F,MAAM,WAAW,kBAAkB;IAAG,SAAS,EAAE,MAAM,CAAA;CAAE;AAIzD,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,GAAG,aAAa,GAAG,OAAO,CAAC;AAChI,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,aAAa,GAAG,WAAW,GAAG,QAAQ,CAAC;AAChF,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,YAAY,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACxE;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC;AAC7C,MAAM,WAAW,QAAQ;IACvB,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,QAAQ,CAAC;IAAC,MAAM,CAAC,EAAE,cAAc,CAAC;IAC5E,OAAO,CAAC,EAAE,eAAe,EAAE,CAAC;IAAC,SAAS,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IACvF,QAAQ,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAC;CACzC;AACD,MAAM,WAAW,SAAS;IAAG,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IAAC,MAAM,EAAE,SAAS,GAAG,aAAa,GAAG,WAAW,CAAA;CAAE;AAEpI,MAAM,MAAM,aAAa,GACrB;IAAE,aAAa,EAAE,oBAAoB,CAAC;IAAC,OAAO,EAAE,YAAY,CAAA;CAAE,GAC9D;IAAE,aAAa,EAAE,qBAAqB,CAAC;IAAC,OAAO,EAAE,YAAY,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GACnF;IAAE,aAAa,EAAE,qBAAqB,CAAC;IAAC,OAAO,EAAE,YAAY,CAAA;CAAE,GAC/D,CAAC;IAAE,aAAa,EAAE,WAAW,CAAA;CAAE,GAAG,QAAQ,CAAC,GAC3C,CAAC;IAAE,aAAa,EAAE,kBAAkB,CAAA;CAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,GACpF;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS,EAAE,CAAA;CAAE,GAC/C;IAAE,aAAa,EAAE,2BAA2B,CAAC;IAAC,iBAAiB,EAAE,OAAO,EAAE,CAAA;CAAE,GAC5E;IAAE,aAAa,EAAE,qBAAqB,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GAC/D;IAAE,aAAa,EAAE,cAAc,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAC5G;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,CAAC;AACpD,MAAM,WAAW,mBAAmB;IAAG,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,aAAa,CAAA;CAAE;AAIjF,MAAM,MAAM,oBAAoB,GAAG,YAAY,GAAG,cAAc,GAAG,aAAa,GAAG,eAAe,CAAC;AACnG,MAAM,WAAW,gBAAgB;IAAG,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,oBAAoB,CAAA;CAAE;AAChG,MAAM,WAAW,wBAAwB;IAAG,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,OAAO,EAAE,gBAAgB,EAAE,CAAA;CAAE;AAClJ,MAAM,MAAM,wBAAwB,GAAG;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,WAAW,CAAA;CAAE,CAAC;AAC5G,MAAM,WAAW,yBAAyB;IAAG,OAAO,EAAE,wBAAwB,CAAA;CAAE;AAEhF,iCAAiC;AACjC,eAAO,MAAM,WAAW;;;;;;;;;;CAUd,CAAC;AAEX,uFAAuF;AACvF,eAAO,MAAM,UAAU;;;;CAIb,CAAC"}

package/dist/protocol.js

@@ -0,0 +1,32 @@
+// THE AGENT CLIENT PROTOCOL, v1 — the wire an ACP-speaking agent (Claude Code, goose, Codex — general-purpose runtimes; the protocol grew up around coding agents, nothing in it is about code) speaks to the
+// host that runs it: JSON-RPC 2.0 over the agent's stdio. Keys are camelCase; discriminator VALUES are snake_case
+// (`sessionUpdate: 'agent_message_chunk'`). Only what the host binding uses is typed here, named as the protocol
+// names it, so a reader can hold this file beside agentclientprotocol.com/protocol/schema and see the same words.
+//
+// What ACP IS in this substrate (spec 400 §5.1): client-to-agent — how a host drives an existing runtime it spawned. What
+// it is NOT: agent-to-agent (that is A2A, the workspace's admitted surface) and never a place authority is decided
+// (`session/request_permission` is a click; the workspace decides on chain).
+/** The protocol version this binding speaks. An agent answering another MAJOR is refused, never coerced. */
+export const ACP_PROTOCOL_VERSION = 1;
+export const isRequest = (m) => 'method' in m && 'id' in m && m.id !== undefined;
+export const isNotification = (m) => 'method' in m && m.id === undefined;
+export const isResponse = (m) => !('method' in m) && 'id' in m;
+/** The methods, spelled once. */
+export const ACP_METHODS = {
+    initialize: 'initialize',
+    newSession: 'session/new',
+    loadSession: 'session/load',
+    prompt: 'session/prompt',
+    cancel: 'session/cancel',
+    update: 'session/update',
+    requestPermission: 'session/request_permission',
+    fsRead: 'fs/read_text_file',
+    fsWrite: 'fs/write_text_file',
+};
+/** JSON-RPC error codes this host answers with when it refuses an agent's callback. */
+export const ACP_ERRORS = {
+    methodNotFound: -32601,
+    invalidParams: -32602,
+    internal: -32603,
+};
+//# sourceMappingURL=protocol.js.map

package/dist/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA,8MAA8M;AAC9M,kHAAkH;AAClH,iHAAiH;AACjH,kHAAkH;AAClH,EAAE;AACF,0HAA0H;AAC1H,mHAAmH;AACnH,6EAA6E;AAE7E,4GAA4G;AAC5G,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAU,CAAC;AAW/C,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAiB,EAAuB,EAAE,CAAC,QAAQ,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAK,CAAoB,CAAC,EAAE,KAAK,SAAS,CAAC;AAC1I,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAiB,EAA4B,EAAE,CAAC,QAAQ,IAAI,CAAC,IAAK,CAAoB,CAAC,EAAE,KAAK,SAAS,CAAC;AACvI,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAiB,EAAwB,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;AA4ErG,iCAAiC;AACjC,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,UAAU,EAAE,YAAY;IACxB,UAAU,EAAE,aAAa;IACzB,WAAW,EAAE,cAAc;IAC3B,MAAM,EAAE,gBAAgB;IACxB,MAAM,EAAE,gBAAgB;IACxB,MAAM,EAAE,gBAAgB;IACxB,iBAAiB,EAAE,4BAA4B;IAC/C,MAAM,EAAE,mBAAmB;IAC3B,OAAO,EAAE,oBAAoB;CACrB,CAAC;AAEX,uFAAuF;AACvF,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,cAAc,EAAE,CAAC,KAAK;IACtB,aAAa,EAAE,CAAC,KAAK;IACrB,QAAQ,EAAE,CAAC,KAAK;CACR,CAAC"}

package/package.json

@@ -0,0 +1,36 @@
+{
+  "name": "@agenticprimitives/acp",
+  "version": "0.0.0-alpha.2",
+  "description": "Agent Client Protocol (ACP) host binding: ADMIT an existing general-purpose runtime that speaks ACP (Claude Code, goose, Codex) as a workspace MEMBER, without a rewrite — whose every act in the workspace goes through the standard A2A surface as itself, under a revocable session wire (spec 400 W1 / spec 372 S3). ACP sits behind A2A; it is never a second authority model.",
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "LICENSE",
+    "dist",
+    "spec.md",
+    "README.md",
+    "bin"
+  ],
+  "dependencies": {
+    "@agenticprimitives/types": "1.0.0-alpha.25"
+  },
+  "devDependencies": {
+    "vitest": "^4.1.8"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "license": "MIT",
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run",
+    "test:unit": "vitest run test/unit --passWithNoTests",
+    "clean": "rm -rf dist"
+  }
+}

package/spec.md

@@ -0,0 +1,12 @@
+# @agenticprimitives/acp — package spec
+
+Spec of record: [specs/400-closing-the-workspace-gap-buzz-and-team-agent-platforms.md](../../specs/400-closing-the-workspace-gap-buzz-and-team-agent-platforms.md) §5
+(W1: the ACP runtime member), on [specs/372-standard-a2a-surface-conformance-and-outsiders.md](../../specs/372-standard-a2a-surface-conformance-and-outsiders.md) S3
+(the authority half: a `.svc` member, its session wire, speaking as itself).
+
+Owns the ACP v1 protocol types and the host that runs an ACP agent as a child process: handshake (another major
+version refused), sessions (`session/new`, `session/load` when the agent can), prompt turns with the streamed
+`session/update`s, `session/request_permission` answered by a policy port (workspace tools allowed — the workspace
+decides on chain; local tools refused by default), no host-machine capabilities offered. Does not own the workspace
+MCP server, pairing, the inbound-work poll, the CLI, or any authority artifact. An optional transport binding
+(ADR-0057): depends inward only.