@agentproto/acp 0.3.0 → 0.5.0

package/dist/{types-DC2phPNG.d.ts → types-DQCJO97x.d.ts}

@@ -9,6 +9,19 @@
  * `AcpHandle` is the readonly view of the same shape; tighten it by
  * hand for fields that get defaults applied in build().
  */
+/**
+ * How a host resolves a `session/request_permission` request that was parked
+ * by permission-hold mode. `{ optionId }` selects one of the offered options
+ * (the allow- or reject-flavored one, chosen by the host); `{ cancelled: true }`
+ * maps to ACP's `cancelled` outcome (used when the request offers no matching
+ * option or the session is being torn down). Consumed by
+ * `AcpClient.respondPermission` and the daemon's permission inbox.
+ */
+type AcpPermissionResolution = {
+    optionId: string;
+} | {
+    cancelled: true;
+};
 type AcpRole = "client" | "server" | "bridge";
 type AcpTransport = "stdio" | "websocket";
 type AcpTier = "basic" | "governance-aware" | "sandboxed";
@@ -42,6 +55,16 @@ interface AcpMcpServer {
     name: string;
     transport: "stdio" | "http" | "sse";
     ref?: string;
+    /** Static HTTP headers sent with every request to an `http` or `sse`
+     *  MCP server. Useful for fixed auth tokens or content-negotiation
+     *  headers that are safe to embed in config. */
+    headers?: Record<string, string>;
+    /** Brokered credential path resolved at spawn time into additional
+     *  `headers` (typically an `Authorization` header). The path is passed
+     *  to the daemon's credential broker, so the actual secret never lives
+     *  in env or config. Mutually usable with `headers`; brokered headers
+     *  win on collision. */
+    credentialRef?: string;
 }
 /** AIP-44 extensions on the agentskills.io baseline. Lives under `metadata.aip44`. */
 interface Aip44Extensions {
@@ -109,6 +132,22 @@ type StreamEvent = {
     toolCallId: string;
     toolName: string;
     arguments: unknown;
+    /**
+     * True when this event ENRICHES a call already announced under the same
+     * `toolCallId` rather than announcing a new one.
+     *
+     * ACP lets an agent announce a call before it knows the details and fill
+     * them in afterwards. The claude-code bridge does exactly that: its
+     * `tool_call` carries `title: "Read File"` with `rawInput: {}`, and the
+     * FOLLOWING `tool_call_update` carries `rawInput: {file_path: …}` plus a
+     * real title. Consumers must merge an update onto the existing call
+     * (keyed by `toolCallId`) rather than rendering a second card, and must
+     * not count it as a fresh call for logging or blocked-on purposes.
+     *
+     * `toolName` is `""` when the update carried no title — merge only
+     * non-empty names so an untitled enrichment can't erase a good one.
+     */
+    isUpdate?: boolean;
 } | {
     kind: "tool-result";
     sessionId: string;
@@ -122,8 +161,19 @@ type StreamEvent = {
 } | {
     kind: "agent-prompt";
     sessionId: string;
+    /**
+     * Correlation id for this prompt. In permission-hold mode this is the
+     * stable request id the host passes back to `respondPermission` to
+     * resolve the parked `session/request_permission` RPC — derived from the
+     * ACP `toolCall.toolCallId` plus a per-client counter so it stays unique
+     * even when an agent re-requests permission for the same tool call.
+     */
     toolCallId: string;
     options: unknown;
+    /** Human-readable "Allow X?" line, when derivable from the request. */
+    text?: string;
+    /** Tool title/kind the agent is asking permission for, when present. */
+    toolName?: string;
 } | {
     kind: "turn-end";
     sessionId: string;
@@ -160,6 +210,12 @@ type StreamEvent = {
         amount: number;
         currency: string;
     };
+    /** Cumulative input/output token counts, when the agent reports them
+     *  (some ACP agents send per-token usage alongside the context-window
+     *  `size`/`used`). Lets the daemon price a session that has tokens but
+     *  no adapter-reported `cost`. */
+    tokensIn?: number;
+    tokensOut?: number;
 };
 
-export type { AcpDefinition as A, StreamEvent as S, AcpAuditConfig as a, AcpCapabilities as b, AcpHandle as c, AcpMcpServer as d, AcpRole as e, AcpTier as f, AcpTransport as g, Aip44Extensions as h };
+export type { AcpDefinition as A, StreamEvent as S, AcpAuditConfig as a, AcpCapabilities as b, AcpHandle as c, AcpMcpServer as d, AcpPermissionResolution as e, AcpRole as f, AcpTier as g, AcpTransport as h, Aip44Extensions as i };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentproto/acp",
-  "version": "0.3.0",
+  "version": "0.5.0",
   "description": "@agentproto/acp — AIP-44 ACP.md reference implementation. An agentproto profile of the Agent Client Protocol (agentclientprotocol.com). Wraps @agentclientprotocol/sdk with createAcpClient (drives subprocess agents) and createAcpServer (exposes AIP-9 operators to ACP-speaking IDEs).",
   "keywords": [
     "agentproto",
@@ -20,7 +20,7 @@
   "bugs": {
     "url": "https://github.com/agentproto/ts/issues"
   },
-  "license": "MIT",
+  "license": "Apache-2.0",
   "type": "module",
   "main": "dist/index.mjs",
   "module": "dist/index.mjs",
@@ -65,13 +65,14 @@
     "@agentclientprotocol/sdk": "^0.21.0",
     "gray-matter": "^4.0.3",
     "zod": "^4.4.3",
-    "@agentproto/define-doctype": "0.1.0"
+    "@agentproto/define-doctype": "0.1.1"
   },
   "devDependencies": {
     "@types/node": "^25.6.2",
     "tsup": "^8.5.1",
     "typescript": "^5.9.3",
     "vitest": "^3.2.4",
+    "@agentproto/secrets": "0.2.0",
     "@agentproto/tooling": "0.1.0-alpha.0"
   },
   "scripts": {