@agentproto/driver-agent-cli 0.3.0 → 1.0.0

package/dist/{schema-Ds8jc9fL.d.ts → schema-D_7v0nav.d.ts}

@@ -1,4 +1,4 @@
-import { AcpMcpServer, StreamEvent } from '@agentproto/acp';
+import { AcpMcpServer, StreamEvent, AcpPermissionResolution } from '@agentproto/acp';
 import { z } from 'zod';
 
 /**
@@ -49,6 +49,44 @@ interface AgentCliAuth {
         grace_s?: number;
     };
 }
+/**
+ * The `subscription` (OAuth / bearer) billing mode declaration — the ONE
+ * axis of the billing-auth resolver that isn't a shared provider fact, so it
+ * lives on the adapter manifest rather than in the model catalog. Its env var
+ * is consumer-specific (claude CLI wrapper → `CLAUDE_CODE_OAUTH_TOKEN`;
+ * claude-sdk → `ANTHROPIC_AUTH_TOKEN`). Presence of this field is what tells
+ * the runtime "this adapter supports `subscription` mode"; an adapter without
+ * it that's asked for `subscription` fails with `unsupported_auth_mode`.
+ *
+ * The api-key axis needs NO such declaration — its env var derives from the
+ * catalog's `PROVIDER_KEY_ENV` via `providerEnvVar(provider)`; only the
+ * runtime resolver reads it, never this manifest.
+ */
+interface AgentCliAuthSubscription {
+    /** Env var SET to the resolved subscription credential (the OAuth/bearer
+     *  token). */
+    setEnv: string;
+    /**
+     * Sibling billing-credential env vars the SAME consumer also honors and
+     * that must therefore be scrubbed in EVERY resolved mode except when the
+     * var IS the one being set — a leftover of one of these would silently
+     * override the credential this spawn stated (the org-credit-leak class).
+     * For anthropic: the generic bearer `ANTHROPIC_AUTH_TOKEN`, which the
+     * claude binary honors above `ANTHROPIC_API_KEY`. Distinct from
+     * {@link unsetEnvAdd} (which is native-mode-only gateway hygiene, not a
+     * credential).
+     */
+    conflictEnv?: string[];
+    /**
+     * Extra env vars scrubbed ONLY in `subscription` (native) mode — gateway
+     * hygiene, not credentials: cloud-provider redirect toggles
+     * (`CLAUDE_CODE_USE_BEDROCK`/`_VERTEX`/…) + `ANTHROPIC_BASE_URL`, any of
+     * which would reroute or 401 a natively-billed spawn. Left present in
+     * api-key mode (a deliberate api-key + Bedrock combination is valid there),
+     * which is why this is separate from {@link conflictEnv}.
+     */
+    unsetEnvAdd?: string[];
+}
 /**
  * Re-runnable health check that, when matching, skips the enclosing
  * setup step. Lets `agentproto setup <slug>` re-runs be idempotent
@@ -151,6 +189,18 @@ interface AgentCliSession {
 interface AgentCliModels {
     default?: string;
     allowed?: string[];
+    /**
+     * Model-id patterns this adapter must NEVER route to, even when a caller
+     * passes the id explicitly (the `model` option is free-form, so `allowed`
+     * is only a curated menu and can't *prevent* an off-menu id). Each pattern
+     * matches case-insensitively against the requested model id and supports a
+     * single trailing `*` wildcard (prefix match); otherwise exact. A match is
+     * refused at compose time (`RuntimeConfigError`, code `model_denied`).
+     * Use to reserve a premium provider for a dedicated adapter — e.g. hermes
+     * denies `["anthropic/*", "claude-*"]` so Anthropic models stay exclusive
+     * to the claude-code adapter.
+     */
+    deny?: string[];
     env?: Record<string, string>;
     /**
      * How the host selects a model at session start:
@@ -182,6 +232,16 @@ interface AgentCliCapabilities {
      */
     file_attach?: boolean;
 }
+/**
+ * Support status for a declared mode. Absent ⇒ treated as `"active"`.
+ *   active  — the mode does what its description claims.
+ *   noop    — declared and accepted, but measured to have no effect
+ *             (argv/env compose fine, but the observable outcome is
+ *             identical to not passing it). Kept declared for honesty
+ *             and so a future fix can flip it back to `active`.
+ *   planned — declared as an intended surface but not wired yet.
+ */
+type AgentCliModeStatus = "active" | "noop" | "planned";
 /**
  * AIP-45 mode declaration — a mutually-exclusive operation profile
  * the CLI exposes. The host picks at most ONE mode per turn via
@@ -191,8 +251,51 @@ interface AgentCliCapabilities {
 interface AgentCliMode {
     id: string;
     description?: string;
+    /**
+     * Extra argv prepended BEFORE the manifest's default `bin_args` when
+     * this mode is active. Needed for CLIs whose global flags must
+     * precede a subcommand baked into `bin_args` (e.g. hermes'
+     * `--ignore-user-config` must come before `acp`, where
+     * `bin_args_append` would land it too late).
+     */
+    bin_args_prepend?: string[];
     bin_args_append?: string[];
     env?: Record<string, string>;
+    /**
+     * Env keys to DELETE from the spawn env when this mode is active.
+     * Applied at the runtime's env-merge point (after the ambient
+     * process.env + mode/option env are combined), so a mode can scrub a
+     * credential that must never reach a non-native endpoint — e.g. a
+     * gateway mode scrubbing `ANTHROPIC_API_KEY` so it can't leak to a
+     * third-party Anthropic-compatible host (it would both 401 and expose
+     * the real key). Unlike `env`, this can't be expressed as a static
+     * set (a key set to "" is still present); deletion is the only safe
+     * semantics. Mirrors the in-code scrub `claude-sdk` does in
+     * `buildQueryOptions`; surfaced here so CLI-adapter gateway modes
+     * get the same auth hygiene without per-adapter code.
+     */
+    env_unset?: string[];
+    /**
+     * Honest support status surfaced to clients (e.g. via `adapter_list`).
+     * Lets an adapter admit that a declared mode is a measured no-op or
+     * not-yet-wired instead of silently accepting it. Absent ⇒ `"active"`.
+     */
+    status?: AgentCliModeStatus;
+    /** Human-readable reason backing `status` (e.g. what was measured). */
+    status_note?: string;
+    /**
+     * How the host activates this mode at session start:
+     *   - "bin_args" (default) — apply via this mode's `bin_args_prepend` /
+     *     `bin_args_append` / `env`, composed into argv/env at spawn time.
+     *     Preserves every existing adapter's behavior unchanged.
+     *   - "config" — this CLI has no argv/env surface for mode selection;
+     *     instead the mode id is forwarded to the ACP arm's `connect({mode})`
+     *     and applied via `session/set_config_option` with `configId:"mode"`
+     *     after `newSession` (e.g. opencode). `bin_args_prepend` /
+     *     `bin_args_append` / `env` are ignored for a mode declaring this.
+     * Omit → "bin_args".
+     */
+    apply?: "bin_args" | "config";
 }
 type AgentCliOptionType = "boolean" | "integer" | "string" | "enum";
 /**
@@ -211,6 +314,14 @@ interface AgentCliOption {
     min?: number;
     /** Inclusive upper bound when type === "integer". */
     max?: number;
+    /**
+     * Argv template prepended BEFORE the manifest's default `bin_args`
+     * when the option has a non-default value. The literal token
+     * `{value}` is replaced with the option's value (stringified). Use
+     * for value-bearing global flags that must precede a subcommand
+     * (e.g. hermes' `--skills {value}`).
+     */
+    bin_args_prepend?: string[];
     /**
      * Argv template appended when the option has a non-default value.
      * The literal token `{value}` is replaced with the option's value
@@ -227,6 +338,63 @@ interface AgentCliOption {
      * may contain `{value}` for templating.
      */
     env?: Record<string, string>;
+    /**
+     * Env keys to DELETE from the spawn env when the option has a
+     * non-default value. Symmetric with `AgentCliMode.env_unset` and
+     * applied at the same runtime env-merge point. Lets a single option
+     * carry both the value it sets AND the credential it must displace —
+     * e.g. a `base_url` option pointing at a third-party Anthropic-
+     * compatible gateway should scrub the ambient `ANTHROPIC_API_KEY`
+     * so it can't leak, without forcing the operator to also pick a
+     * preset mode. The deletion runs before operator-supplied `opts.env`
+     * is merged, so a caller can still re-inject a specific key if they
+     * truly intend to.
+     */
+    env_unset?: string[];
+}
+/**
+ * AIP-45 gateway-preset declaration — a backend an Anthropic/OpenAI-
+ * compatible client can front, declared by the adapter that knows how to
+ * drive it. The manifest authoring shape; the runtime normalizes it to a
+ * `ProviderPreset` (via the catalog's merge seam) so adapter-declared
+ * presets appear in `agentproto presets list` / `list_provider_presets`
+ * alongside the built-in registry. Data-only — no adapter projection
+ * (`env`/`env_unset`/`bin_args`) here; that stays in the adapter's modes
+ * and options, same as the built-in presets are projected today.
+ */
+interface AgentCliPresetDeclaration {
+    /**
+     * Stable preset id. SHOULD equal the mode id if the adapter projects
+     * this preset as a mode (e.g. `moonshot`, `openrouter`). Catalog
+     * dedupes built-in vs adapter-declared by id; an adapter-declared id
+     * that collides with a built-in is ignored in favor of the built-in
+     * (the registry is the source of truth for canonical providers).
+     */
+    id: string;
+    /** Human label for the catalog UI ("Moonshot (Kimi)"). */
+    label: string;
+    /** Short description; surfaced in the catalog. */
+    description?: string;
+    /** API schema flavor — selects which adapter family can consume it. */
+    schemaFlavor: "anthropic" | "openai";
+    /** Base URL the client hits. */
+    baseUrl: string;
+    /**
+     * Conventional env var holding this provider's API key
+     * (e.g. MOONSHOT_API_KEY). Catalog status is derived from its presence
+     * in the daemon's environment ("ready" vs "available").
+     */
+    keyEnv: string;
+    /**
+     * Env vars to scrub when this preset is active. Optional at the
+     * manifest level — an adapter that scrubs in code (like claude-sdk)
+     * may omit it. The catalog does not surface `scrubEnv` to clients.
+     */
+    scrubEnv?: string[];
+    /** Conventional default model id for this provider, if any. */
+    defaultModel?: string;
+    /** Optional homepage/docs URL for the catalog UI. */
+    homepage?: string;
 }
 /**
  * Built-in continuation strategy ids. Future custom strategies require
@@ -337,11 +505,50 @@ interface AgentCliDefinition {
     version: string;
     bin: string;
     bin_args?: string[];
+    /**
+     * Static environment variables always merged into the spawn env,
+     * before any mode/option env patch (so those can still override).
+     * The always-on counterpart to `modes[].env` / `options[].env`, which
+     * only apply when the corresponding mode/option is selected. Primary
+     * user is a generic ACP agent (`acpHandleFromSpec`) whose whole config
+     * surface is bin + args + env; a native adapter can use it too for env
+     * that should apply on every spawn regardless of mode.
+     */
+    env?: Record<string, string>;
     install: AgentCliInstallMethod[];
     version_check: AgentCliVersionCheck;
     /** AIP-29 § Setup — post-install configuration pipeline. Optional. */
     setup?: AgentCliSetupStep[];
     auth?: AgentCliAuth;
+    /**
+     * FIXED billing provider for a single-provider adapter (`claude-code` /
+     * `claude-sdk` → `"anthropic"`, `codex` → `"openai"`, `hermes` →
+     * `"openrouter"`). A `CatalogProvider` id (typed as `string` here to keep
+     * this generic AIP-45 doctype decoupled from `@agentproto/model-catalog` —
+     * the runtime resolver validates it against the catalog and derives the
+     * api-key env via `providerEnvVar`). Omitted for by-model routers, whose
+     * provider the resolver derives from the requested model
+     * (`getModelProvider`). Consumed by the runtime billing-auth resolver, NOT
+     * by this driver (which stays mechanical).
+     */
+    provider?: string;
+    /**
+     * Declares that this adapter supports `subscription` billing mode and how
+     * (which env var to set + what to scrub). Presence = supported; absence
+     * means a `subscription` request is rejected with `unsupported_auth_mode`.
+     * Only the Claude adapters set it. See {@link AgentCliAuthSubscription}.
+     */
+    authSubscription?: AgentCliAuthSubscription;
+    /**
+     * When the runtime billing-auth resolver ENGAGES credential injection:
+     *   - `"when-configured"` (default) — only when an operator explicitly set
+     *     `auth` (per-spawn or in `defaults.adapters.<slug>.auth`). Non-breaking:
+     *     an adapter with no auth config runs ambient, unchanged.
+     *   - `"always"` — every spawn, even with nothing configured (then it
+     *     fails fast with `missing_auth_credential`). Only `claude-code` sets
+     *     this, preserving its #312 fail-fast contract.
+     */
+    authEnforce?: "always" | "when-configured";
     sandbox: string | Record<string, unknown>;
     runner?: string | Record<string, unknown>;
     protocol: AgentCliProtocol;
@@ -360,6 +567,15 @@ interface AgentCliDefinition {
     modes?: AgentCliMode[];
     /** AIP-45 options (independent typed knobs). */
     options?: AgentCliOption[];
+    /**
+     * AIP-45 gateway presets this adapter can drive. Adapter-declared
+     * presets are merged into the provider-preset catalog
+     * (`agentproto presets list` / `list_provider_presets`) alongside the
+     * built-in registry, deduped by id (built-in wins on collision). Lets
+     * an external adapter surface a gateway the built-in registry doesn't
+     * know about without patching `@agentproto/provider-presets`.
+     */
+    presets?: AgentCliPresetDeclaration[];
     /** AIP-45 continuation policy (how prior turns reach the CLI). */
     continuation?: AgentCliContinuation;
     requires?: AgentCliRequires;
@@ -416,6 +632,16 @@ interface AgentCliConnectOptions {
      * `session/set_config_option` with `configId:"effort"` on ACP arms.
      */
     effort?: string;
+    /**
+     * Mode to activate at session start, for ACP arms whose CLI models
+     * mode selection as a session config option rather than an argv/env
+     * surface (`AgentCliMode.apply === "config"`, e.g. opencode). Applied
+     * via `session/set_config_option` with `configId:"mode"` immediately
+     * after `newSession`, best-effort like `model`/`effort`. Adapters that
+     * apply mode via `bin_args`/`env` instead (claude-code) leave this
+     * unset and are unaffected.
+     */
+    mode?: string;
     /**
      * Called on ANY adapter-process activity observed by the protocol
      * arm — incoming ACP `session/update` notifications (even ones that
@@ -428,6 +654,14 @@ interface AgentCliConnectOptions {
      * one-shots) MAY ignore this field.
      */
     onActivity?: () => void;
+    /**
+     * When true, the ACP arm surfaces each `session/request_permission` as an
+     * `agent-prompt` StreamEvent and HOLDS the RPC until the host calls
+     * `respondPermission` — forwarded to the arm's
+     * `createAcpProtocolArm({ permissionHold })`. Arms with no permission
+     * surface (non-ACP) ignore it. Default false (auto-answer, unchanged).
+     */
+    permissionHold?: boolean;
     /**
      * Turn-idle watchdog, forwarded verbatim to the ACP arm's
      * `createAcpClient({ turnIdleTimeoutMs })` (see
@@ -450,6 +684,13 @@ interface AgentCliClient {
     send(turnId: string, message: unknown): Promise<void>;
     events(): AsyncIterable<StreamEvent>;
     cancel(turnId: string): Promise<void>;
+    /**
+     * Resolve a permission request parked by permission-hold mode — `requestId`
+     * is the `toolCallId` carried on the `agent-prompt` StreamEvent that
+     * surfaced it. Returns true when a matching parked request was found and
+     * resolved. Only the ACP arm implements this; other arms omit it.
+     */
+    respondPermission?(requestId: string, resolution: AcpPermissionResolution): boolean;
     close(): Promise<void>;
     /**
      * The session id the protocol arm holds. Populated after `connect()`
@@ -530,6 +771,58 @@ interface AgentCliStartOptions {
      * wants this protection.
      */
     turnIdleTimeoutMs?: number;
+    /**
+     * When true, the spawned session runs in permission-hold mode: the ACP arm
+     * surfaces each permission request as an `agent-prompt` StreamEvent and
+     * HOLDS the RPC until the host calls `respondPermission`. Forwarded to
+     * `protocolArm.connect({ permissionHold })`. Default false (unchanged
+     * auto-answer behaviour for every existing caller).
+     */
+    permissionHold?: boolean;
+    /**
+     * FULLY-RESOLVED billing-auth spec, computed by the runtime resolver
+     * (`@agentproto/runtime`'s `spawn-defaults`/`session-spawn`) and applied
+     * MECHANICALLY here — this driver does no provider lookup, mode selection,
+     * or catalog import of its own. EXPLICIT credential selection, not
+     * scrub-by-absence: the resolver already decided the mode (ordered
+     * preference — subscription over api-key when a subscription credential is
+     * present), the env var to SET (`setEnv`), the conflicting vars to SCRUB
+     * (`unsetEnv`), and resolved the `credential` from a NAMED config/store
+     * ref (never the ambient shell env).
+     *
+     * `createAgentCliRuntime(...).start()` ENGAGES this spec when
+     * `enforce === "always"` OR `explicit === true`; on engage it deletes every
+     * `unsetEnv` key (unless this spawn's own mode/option patch explicitly set
+     * it) then SETS `setEnv = credential`. When engaged with no `credential`, it
+     * FAILS FAST with `RuntimeConfigError` (`missing_auth_credential`) — never a
+     * fallback to another or ambient credential. When absent (the resolver
+     * produced no spec — e.g. a by-model adapter whose provider didn't resolve),
+     * this driver injects nothing and runs ambient.
+     */
+    auth?: ResolvedAuthSpec;
+}
+/**
+ * The resolved billing-auth spec the runtime hands the driver — see
+ * {@link AgentCliStartOptions.auth}. Every field is pre-decided; the driver
+ * only applies it.
+ */
+interface ResolvedAuthSpec {
+    /** The resolved billing mode (already ordered/validated by the runtime). */
+    mode: "subscription" | "api-key";
+    /** The resolved secret value for `mode`, or absent when nothing resolved
+     *  (⇒ fail-fast on engage). Never read ambiently. */
+    credential?: string;
+    /** Env var SET to `credential` on engage. */
+    setEnv: string;
+    /** Conflicting billing-credential (and, in native mode, gateway-hygiene)
+     *  env vars DELETED on engage — unless this spawn's own mode/option patch
+     *  explicitly set the key. */
+    unsetEnv: string[];
+    /** True when an operator explicitly configured `auth` (per-spawn or in
+     *  `defaults.adapters.<slug>.auth`) — half the engage condition. */
+    explicit: boolean;
+    /** The adapter's enforcement policy — the other half of engage. */
+    enforce: "always" | "when-configured";
 }
 /**
  * Operator-side runtime configuration. Mirrors the `runtime.config`
@@ -571,6 +864,13 @@ interface AgentCliRuntimeSession {
     readonly pid?: number;
     send(message: unknown): AsyncIterable<StreamEvent>;
     cancel(): Promise<void>;
+    /**
+     * Resolve a permission request parked by permission-hold mode (see
+     * `AgentCliStartOptions.permissionHold`). Delegates to the protocol arm's
+     * `respondPermission`; returns true when a matching parked request was
+     * resolved. Absent for arms that don't model held permissions.
+     */
+    respondPermission?(requestId: string, resolution: AcpPermissionResolution): boolean;
     close(): Promise<void>;
 }
 
@@ -596,6 +896,7 @@ declare const agentCliFrontmatterSchema: z.ZodObject<{
     version: z.ZodString;
     bin: z.ZodString;
     bin_args: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
     install: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
         method: z.ZodLiteral<"brew">;
         package: z.ZodString;
@@ -759,6 +1060,16 @@ declare const agentCliFrontmatterSchema: z.ZodObject<{
             grace_s: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strict>>;
     }, z.core.$strict>>;
+    provider: z.ZodOptional<z.ZodString>;
+    authSubscription: z.ZodOptional<z.ZodObject<{
+        setEnv: z.ZodString;
+        conflictEnv: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        unsetEnvAdd: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>>;
+    authEnforce: z.ZodOptional<z.ZodEnum<{
+        always: "always";
+        "when-configured": "when-configured";
+    }>>;
     sandbox: z.ZodUnion<readonly [z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>]>;
     runner: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>]>>;
     protocol: z.ZodEnum<{
@@ -809,6 +1120,7 @@ declare const agentCliFrontmatterSchema: z.ZodObject<{
     models: z.ZodOptional<z.ZodObject<{
         default: z.ZodOptional<z.ZodString>;
         allowed: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        deny: z.ZodOptional<z.ZodArray<z.ZodString>>;
         env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
         apply: z.ZodOptional<z.ZodEnum<{
             config: "config";
@@ -828,8 +1140,20 @@ declare const agentCliFrontmatterSchema: z.ZodObject<{
     modes: z.ZodOptional<z.ZodArray<z.ZodObject<{
         id: z.ZodString;
         description: z.ZodOptional<z.ZodString>;
+        bin_args_prepend: z.ZodOptional<z.ZodArray<z.ZodString>>;
         bin_args_append: z.ZodOptional<z.ZodArray<z.ZodString>>;
         env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        env_unset: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        status: z.ZodOptional<z.ZodEnum<{
+            active: "active";
+            noop: "noop";
+            planned: "planned";
+        }>>;
+        status_note: z.ZodOptional<z.ZodString>;
+        apply: z.ZodOptional<z.ZodEnum<{
+            config: "config";
+            bin_args: "bin_args";
+        }>>;
     }, z.core.$strict>>>;
     options: z.ZodOptional<z.ZodArray<z.ZodObject<{
         id: z.ZodString;
@@ -844,9 +1168,25 @@ declare const agentCliFrontmatterSchema: z.ZodObject<{
         default: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodNumber, z.ZodString]>>;
         min: z.ZodOptional<z.ZodNumber>;
         max: z.ZodOptional<z.ZodNumber>;
+        bin_args_prepend: z.ZodOptional<z.ZodArray<z.ZodString>>;
         bin_args_template: z.ZodOptional<z.ZodArray<z.ZodString>>;
         bin_args_append_when_true: z.ZodOptional<z.ZodArray<z.ZodString>>;
         env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        env_unset: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>>>;
+    presets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        label: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        schemaFlavor: z.ZodEnum<{
+            anthropic: "anthropic";
+            openai: "openai";
+        }>;
+        baseUrl: z.ZodString;
+        keyEnv: z.ZodString;
+        scrubEnv: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        defaultModel: z.ZodOptional<z.ZodString>;
+        homepage: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>>>;
     continuation: z.ZodOptional<z.ZodObject<{
         default: z.ZodEnum<{
@@ -908,4 +1248,4 @@ declare const runtimeConfigSchema: z.ZodObject<{
 }, z.core.$strict>;
 type RuntimeConfigInput = z.infer<typeof runtimeConfigSchema>;
 
-export { type AgentCliHandle as A, type RuntimeConfigInput as B, type ContinuationStrategyId as C, agentCliFrontmatterSchema as D, runtimeConfigSchema as E, type RuntimeConfig as R, type TurnContext as T, type AgentCliRuntime as a, type AgentCliDefinition as b, type AgentCliClient as c, type AgentCliPrintConfig as d, type AgentCliRuntimeSession as e, type AgentCliStartOptions as f, type ContinuationKeyScope as g, type AgentCliAuth as h, type AgentCliCapabilities as i, type AgentCliConnectOptions as j, type AgentCliContinuation as k, type AgentCliFrontmatter as l, type AgentCliInstallMethod as m, type AgentCliMcpBlock as n, type AgentCliMode as o, type AgentCliModels as p, type AgentCliOption as q, type AgentCliOptionType as r, type AgentCliPinnedSessionTuning as s, type AgentCliProtocol as t, type AgentCliSession as u, type AgentCliSessionMode as v, type AgentCliSetupPersist as w, type AgentCliSetupSkipIf as x, type AgentCliSetupStep as y, type AgentCliVersionCheck as z };
+export { type AgentCliHandle as A, type AgentCliVersionCheck as B, type ContinuationStrategyId as C, type RuntimeConfigInput as D, agentCliFrontmatterSchema as E, runtimeConfigSchema as F, type RuntimeConfig as R, type TurnContext as T, type AgentCliRuntime as a, type AgentCliDefinition as b, type AgentCliClient as c, type AgentCliPrintConfig as d, type AgentCliRuntimeSession as e, type AgentCliStartOptions as f, type ContinuationKeyScope as g, type AgentCliAuth as h, type AgentCliCapabilities as i, type AgentCliConnectOptions as j, type AgentCliContinuation as k, type AgentCliFrontmatter as l, type AgentCliInstallMethod as m, type AgentCliMcpBlock as n, type AgentCliMode as o, type AgentCliModels as p, type AgentCliOption as q, type AgentCliOptionType as r, type AgentCliPinnedSessionTuning as s, type AgentCliPresetDeclaration as t, type AgentCliProtocol as u, type AgentCliSession as v, type AgentCliSessionMode as w, type AgentCliSetupPersist as x, type AgentCliSetupSkipIf as y, type AgentCliSetupStep as z };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentproto/driver-agent-cli",
-  "version": "0.3.0",
+  "version": "1.0.0",
   "description": "@agentproto/driver-agent-cli — AIP-45 AGENT-CLI.md reference implementation. Multi-protocol runner that loads an AGENT-CLI.md manifest, spawns the binary, and dispatches turns through an ACP / MCP / proprietary arm. ACP arm delegates to @agentproto/acp; emits the canonical StreamEvent taxonomy regardless of underlying protocol.",
   "keywords": [
     "agentproto",
@@ -24,7 +24,7 @@
   "bugs": {
     "url": "https://github.com/agentproto/ts/issues"
   },
-  "license": "MIT",
+  "license": "Apache-2.0",
   "type": "module",
   "main": "dist/index.mjs",
   "module": "dist/index.mjs",
@@ -53,8 +53,8 @@
   "dependencies": {
     "gray-matter": "^4.0.3",
     "zod": "^4.4.3",
-    "@agentproto/acp": "0.3.0",
-    "@agentproto/define-doctype": "0.1.0"
+    "@agentproto/define-doctype": "0.1.1",
+    "@agentproto/acp": "0.5.0"
   },
   "devDependencies": {
     "@types/node": "^25.6.2",