@automatalabs/acp-agents 0.21.2 → 0.22.0

package/dist/auth/auth-store.js

@@ -0,0 +1,186 @@
+import { isGatewayShapedMeta } from "./auth-types.js";
+/** Type-driven, agent-agnostic classification (§2.1). Keys ONLY on the method type + whether the
+ *  advertised `_meta` is gateway-shaped — never on an agent id. */
+export function classifyCredential(methodType, advertisedMeta) {
+    switch (methodType) {
+        case "env_var":
+            return { klass: "spawn-env", diskBacked: false };
+        case "terminal":
+            return { klass: "disk", diskBacked: true };
+        case "agent":
+            return isGatewayShapedMeta(advertisedMeta)
+                ? { klass: "in-process", diskBacked: false }
+                : { klass: "disk", diskBacked: true };
+    }
+}
+/** Best-effort in-place zeroization of an intent's secret payload before it is dropped (§2.14). The
+ *  intent's `readonly` typing is a compile-time contract, not a runtime freeze, so we overwrite. */
+function zeroizeIntent(intent) {
+    const meta = intent.authenticateMeta;
+    if (meta)
+        for (const key of Object.keys(meta))
+            delete meta[key];
+    const env = intent.envValues;
+    if (env)
+        for (const key of Object.keys(env))
+            env[key] = "";
+}
+/** One state machine per `poolKey`, owned by the `AuthStore`. The single source of auth truth. */
+export class BackendAuthMachine {
+    _state = "unauthenticated";
+    _generation = 0;
+    _intent;
+    _advertised = [];
+    get state() {
+        return this._state;
+    }
+    get generation() {
+        return this._generation;
+    }
+    /** The advertised methods most recently observed at `initialize` (redaction source for status). */
+    get advertised() {
+        return this._advertised;
+    }
+    get authenticated() {
+        return this._state === "authenticated";
+    }
+    /** Redacted view — ids/types/klass only, NEVER authenticateMeta/envValues. */
+    intentView() {
+        if (!this._intent)
+            return undefined;
+        const { authenticateMeta: _m, envValues: _e, ...rest } = this._intent;
+        return rest;
+    }
+    /** SECRET accessor — connection-internal only (used by applyAuthIntent, §2.5). */
+    applyMeta() {
+        return this._intent?.authenticateMeta;
+    }
+    /** SECRET accessor — pool/connection-internal only (used by spawnEnvFor, §2.8). */
+    spawnEnv() {
+        return this._intent?.envValues;
+    }
+    /** SECRET accessor — module-internal only (AuthStore.spawnEnvFor passes it to a profile). */
+    rawIntent() {
+        return this._intent;
+    }
+    /** Cold-resume re-arm predicate (§2.13): resumable iff creds are held/applied OR disk-backed. */
+    canResume() {
+        if (this._state === "authenticated" || this._state === "credentials_held")
+            return true;
+        return this._intent?.diskBacked === true;
+    }
+    isStale(stamp) {
+        return stamp.appliedGeneration < this._generation;
+    }
+    /** true iff the current intent is an in-process (gateway) cred that can be live-re-applied on an
+     *  idle connection via an authenticate RPC replay, rather than requiring a process recycle. */
+    currentKlassIsInProcess() {
+        return this._intent?.klass === "in-process";
+    }
+    send(ev) {
+        switch (ev.t) {
+            case "initialize_ok":
+                this._advertised = ev.advertised;
+                return;
+            case "host_authenticate":
+                // The only events that bump `generation` are host_authenticate and logout, so one completed
+                // auth atomically invalidates every existing connection's stamp (§2.3).
+                this._intent = ev.intent;
+                this._generation += 1;
+                this._state = "credentials_held";
+                return;
+            case "apply_ok":
+                if (this._state === "credentials_held")
+                    this._state = "authenticated";
+                return;
+            case "apply_failed":
+                if (this._state === "credentials_held" || this._state === "authenticated") {
+                    this._state = "auth_required";
+                }
+                return;
+            case "auth_required_tripped":
+                // unauthenticated / auth_required / authenticated -> auth_required (mid-run expiry included).
+                this._state = "auth_required";
+                return;
+            case "logout":
+                if (this._intent)
+                    zeroizeIntent(this._intent);
+                this._intent = undefined;
+                this._generation += 1;
+                this._state = "unauthenticated";
+                return;
+            case "process_death":
+                // The dying connection's stamp is dropped with it; machine state is unchanged (§2.3).
+                return;
+        }
+    }
+}
+/** The single per-runner auth store. Owns one `BackendAuthMachine` per `poolKey` and records the
+ *  (optional) per-backend `AuthProfile` so `spawnEnvFor` can consult it. */
+export class AuthStore {
+    machines = new Map();
+    profiles = new Map();
+    /** Get/create the machine for a `poolKey`, recording the backend's profile the first time. */
+    machineFor(poolKey, profile) {
+        let machine = this.machines.get(poolKey);
+        if (!machine) {
+            machine = new BackendAuthMachine();
+            this.machines.set(poolKey, machine);
+        }
+        if (profile && !this.profiles.has(poolKey))
+            this.profiles.set(poolKey, profile);
+        return machine;
+    }
+    /** The machine for a `poolKey`, or undefined if none has been created yet (read-only lookup). */
+    existing(poolKey) {
+        return this.machines.get(poolKey);
+    }
+    /** Every `poolKey` that has a machine (the touched backends). */
+    poolKeys() {
+        return [...this.machines.keys()];
+    }
+    /** The spawn-env overlay (§2.8): the machine's `env_var` collected values merged with the backend
+     *  profile's `spawnAuthEnv(intent)` contribution. Undefined when neither applies. Secret — passed
+     *  straight to `spawn`, never logged. */
+    spawnEnvFor(poolKey) {
+        const machine = this.machines.get(poolKey);
+        if (!machine)
+            return undefined;
+        const envValues = machine.spawnEnv();
+        const profile = this.profiles.get(poolKey);
+        const intent = machine.rawIntent();
+        const profileEnv = profile?.spawnAuthEnv && intent ? profile.spawnAuthEnv(intent) : undefined;
+        if (!envValues && !profileEnv)
+            return undefined;
+        return { ...(envValues ?? {}), ...(profileEnv ?? {}) };
+    }
+}
+/** Strip credential-shaped substrings from best-effort diagnostic text (stderr tails, §2.14). Never
+ *  the machine-readable channel — a defensive scrub so a spawned agent that echoes an injected env
+ *  var to stderr cannot leak it into an error suffix. */
+const SECRET_LINE_PATTERNS = [
+    /^(\s*(?:export\s+)?)([A-Za-z_][A-Za-z0-9_]*_API_KEY|ANTHROPIC_AUTH_TOKEN|CLAUDE_CODE_OAUTH_TOKEN|AWS_[A-Za-z0-9_]+|CODEX_API_KEY|CODEX_ACCESS_TOKEN|CODEX_AUTH|OPENCODE_AUTH_CONTENT|DEFAULT_AUTH_REQUEST)(\s*[:=]\s*)(\S.*)$/,
+];
+const SECRET_INLINE_PATTERNS = [
+    { re: /\b([A-Za-z_][A-Za-z0-9_]*_API_KEY|ANTHROPIC_AUTH_TOKEN|CLAUDE_CODE_OAUTH_TOKEN|CODEX_API_KEY|CODEX_ACCESS_TOKEN|OPENCODE_AUTH_CONTENT)(=)(\S+)/g, replace: "$1=[redacted]" },
+    // Bearer tokens / Authorization header values.
+    { re: /\b(Bearer|Authorization:?\s*Bearer)\s+[A-Za-z0-9._~+/=-]+/gi, replace: "$1 [redacted]" },
+];
+export function redactSecrets(text) {
+    if (!text)
+        return text;
+    return text
+        .split("\n")
+        .map((line) => {
+        for (const re of SECRET_LINE_PATTERNS) {
+            const m = line.match(re);
+            if (m)
+                return `${m[1]}${m[2]}${m[3]}[redacted]`;
+        }
+        let out = line;
+        for (const { re, replace } of SECRET_INLINE_PATTERNS)
+            out = out.replace(re, replace);
+        return out;
+    })
+        .join("\n");
+}

package/dist/auth/auth-types.d.ts

@@ -0,0 +1,93 @@
+import type { AuthMethod } from "@agentclientprotocol/sdk";
+import type { SpawnConfig } from "../backend.js";
+/** Host-agnostic, fully type-dispatched view of one advertised `AuthMethod`. ZERO backend branching. */
+export type AuthMethodDescriptor = {
+    type: "agent";
+    id: string;
+    name: string;
+    description?: string;
+    /** true iff the advertised `authMethods[]._meta` block is present (a `_meta` object exists —
+     *  gateway OR api-key convention). Whether it is *gateway-shaped* is a SEPARATE test that
+     *  drives `klass` (§2.1), not `expectsMeta`. */
+    expectsMeta: boolean;
+    meta?: Record<string, unknown>;
+    /** true iff this is a bare `agent` method (no `_meta`) that runs its OWN login via the
+     *  authenticate RPC — which may open a browser or need a TTY (e.g. codex `chat-gpt`).
+     *  Derived as `!expectsMeta`. Headless hosts (MCP/SDK) use this to SKIP a method they cannot
+     *  complete instead of mapping it to a no-op (§4.3). */
+    interactive: boolean;
+} | {
+    type: "terminal";
+    id: string;
+    name: string;
+    description?: string;
+    /** How the host spawns the interactive login. Base fills from EITHER the conventional
+     *  `_meta["terminal-auth"] {command,args,label}` (preferred; not an SDK schema field), OR the
+     *  agent binary + `AuthMethodTerminal.args`/`env` (spec baseline). */
+    launch: {
+        command: string;
+        args: string[];
+        env?: Record<string, string>;
+        label?: string;
+    };
+    meta?: Record<string, unknown>;
+} | {
+    type: "env_var";
+    id: string;
+    name: string;
+    description?: string;
+    link?: string;
+    /** Per-var `meta` carries the SDK-first-class `AuthEnvVar._meta` through unchanged, so no
+     *  env_var surface is silently dropped (Principle 3, §3.6). */
+    vars: Array<{
+        name: string;
+        label?: string;
+        secret: boolean;
+        optional: boolean;
+        meta?: Record<string, unknown>;
+    }>;
+    meta?: Record<string, unknown>;
+};
+/** The host-collected outcome of one auth step. `env`/`meta` payloads are SECRET (Principle 9). */
+export type AuthResolution = {
+    outcome: "completed";
+    methodId?: string;
+} | {
+    outcome: "agent-login";
+    methodId: string;
+} | {
+    outcome: "env";
+    values: Record<string, string>;
+    methodId?: string;
+} | {
+    outcome: "meta";
+    methodId: string;
+    meta: Record<string, unknown>;
+} | {
+    outcome: "cancelled";
+};
+export interface AuthContext {
+    readonly backendId: string;
+    readonly label?: string;
+    /** All advertised methods, already dispatched by `buildAuthDescriptors`. */
+    readonly methods: readonly AuthMethodDescriptor[];
+    /** `required` = we hit -32000; `proactive` = pre-run enumeration. */
+    readonly cause: "required" | "proactive";
+    readonly signal?: AbortSignal;
+}
+/** The host-facing inline auth resolver hook. Mirrors PermissionResolver / ElicitationResolver. */
+export type AuthResolver = (ctx: AuthContext) => Promise<AuthResolution> | AuthResolution;
+/** The conventional in-process gateway key (`_meta.gateway`) claude+codex attach to a gateway
+ *  method. Its PRESENCE (a gateway-shaped `_meta`) is what makes us classify a method `in-process`
+ *  (§2.1). Recognized by literal name; NOT an SDK schema field. */
+export declare const GATEWAY_META_KEY = "gateway";
+/** A `_meta` object counts as gateway-shaped iff it carries the literal `gateway` key with a
+ *  non-null value. This is the single discriminant behind `in-process` classification (§2.1);
+ *  codex `api-key` carries a `_meta["api-key"]` block and is therefore NOT gateway-shaped. */
+export declare function isGatewayShapedMeta(meta: Record<string, unknown> | null | undefined): boolean;
+/** Pure, agent-agnostic per-method dispatcher (§1.3): maps each advertised `AuthMethod` to an
+ *  `AuthMethodDescriptor` with NO agent identity. `spawn` supplies the terminal-launch fallback
+ *  (the agent binary + `AuthMethodTerminal.args`). */
+export declare function buildAuthDescriptors(methods: readonly AuthMethod[], spawn: SpawnConfig): AuthMethodDescriptor[];
+export declare function buildAuthDescriptor(method: AuthMethod, spawn: SpawnConfig): AuthMethodDescriptor;
+//# sourceMappingURL=auth-types.d.ts.map

package/dist/auth/auth-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-types.d.ts","sourceRoot":"","sources":["../../src/auth/auth-types.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjD,wGAAwG;AACxG,MAAM,MAAM,oBAAoB,GAC5B;IACE,IAAI,EAAE,OAAO,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;oDAEgD;IAChD,WAAW,EAAE,OAAO,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B;;;4DAGwD;IACxD,WAAW,EAAE,OAAO,CAAC;CACtB,GACD;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;0EAEsE;IACtE,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1F,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC,GACD;IACE,IAAI,EAAE,SAAS,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;mEAC+D;IAC/D,IAAI,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;IAClH,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC,CAAC;AAEN,mGAAmG;AACnG,MAAM,MAAM,cAAc,GAEtB;IAAE,OAAO,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAE3C;IAAE,OAAO,EAAE,aAAa,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAE5C;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAErE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GACpE;IAAE,OAAO,EAAE,WAAW,CAAA;CAAE,CAAC;AAE7B,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,4EAA4E;IAC5E,QAAQ,CAAC,OAAO,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAClD,qEAAqE;IACrE,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,WAAW,CAAC;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAED,mGAAmG;AACnG,MAAM,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC,cAAc,CAAC,GAAG,cAAc,CAAC;AAM1F;;mEAEmE;AACnE,eAAO,MAAM,gBAAgB,YAAY,CAAC;AAE1C;;8FAE8F;AAC9F,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAE7F;AAkCD;;sDAEsD;AACtD,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,SAAS,UAAU,EAAE,EAAE,KAAK,EAAE,WAAW,GAAG,oBAAoB,EAAE,CAE/G;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,GAAG,oBAAoB,CA4DhG"}

package/dist/auth/auth-types.js

@@ -0,0 +1,108 @@
+/** The conventional launch-hint key (`_meta["terminal-auth"] = {command,args,label}`) both claude
+ *  0.57.0 and opencode 1.17.14 attach to a terminal login method. Recognized by literal name; it is
+ *  NOT an SDK schema field. */
+const TERMINAL_AUTH_META_KEY = "terminal-auth";
+/** The conventional in-process gateway key (`_meta.gateway`) claude+codex attach to a gateway
+ *  method. Its PRESENCE (a gateway-shaped `_meta`) is what makes us classify a method `in-process`
+ *  (§2.1). Recognized by literal name; NOT an SDK schema field. */
+export const GATEWAY_META_KEY = "gateway";
+/** A `_meta` object counts as gateway-shaped iff it carries the literal `gateway` key with a
+ *  non-null value. This is the single discriminant behind `in-process` classification (§2.1);
+ *  codex `api-key` carries a `_meta["api-key"]` block and is therefore NOT gateway-shaped. */
+export function isGatewayShapedMeta(meta) {
+    return meta != null && meta[GATEWAY_META_KEY] != null;
+}
+function metaOf(method) {
+    const meta = method._meta;
+    return meta ?? undefined;
+}
+/** The SDK types a missing `type` discriminant as `agent` (AuthMethodAgent carries no `type`). */
+function typeOf(method) {
+    return (("type" in method ? method.type : undefined) ?? "agent");
+}
+function terminalAuthHint(meta) {
+    const hint = meta?.[TERMINAL_AUTH_META_KEY];
+    if (!hint || typeof hint !== "object")
+        return undefined;
+    const record = hint;
+    if (typeof record.command !== "string")
+        return undefined;
+    const args = Array.isArray(record.args) ? record.args.filter((a) => typeof a === "string") : [];
+    return { command: record.command, args, ...(typeof record.label === "string" ? { label: record.label } : {}) };
+}
+/** true iff a bare `agent` method (`type` absent OR "agent") is semantically a TERMINAL login —
+ *  i.e. it carries a `_meta["terminal-auth"]` launch hint. This is why OpenCode's bare-`agent`
+ *  `opencode-login` becomes a `terminal` descriptor for us, while codex's `gateway` (which carries
+ *  `_meta.gateway`, not `terminal-auth`) does not (§3.1 decision). */
+function isTerminalShaped(method) {
+    const type = typeOf(method);
+    if (type === "terminal")
+        return true;
+    if (type === "env_var")
+        return false;
+    return terminalAuthHint(metaOf(method)) !== undefined;
+}
+/** Pure, agent-agnostic per-method dispatcher (§1.3): maps each advertised `AuthMethod` to an
+ *  `AuthMethodDescriptor` with NO agent identity. `spawn` supplies the terminal-launch fallback
+ *  (the agent binary + `AuthMethodTerminal.args`). */
+export function buildAuthDescriptors(methods, spawn) {
+    return methods.map((method) => buildAuthDescriptor(method, spawn));
+}
+export function buildAuthDescriptor(method, spawn) {
+    const meta = metaOf(method);
+    const description = method.description ?? undefined;
+    const type = typeOf(method);
+    if (isTerminalShaped(method)) {
+        // Launch resolution, both branches agent-id-free:
+        //   1. Method carries `_meta["terminal-auth"] = {command,args,label}` → use verbatim.
+        //   2. Pure-spec fallback → agent binary + AuthMethodTerminal.args/env.
+        const hint = terminalAuthHint(meta);
+        const terminalMethod = type === "terminal" ? method : undefined;
+        const launch = hint
+            ? { command: hint.command, args: hint.args, ...(hint.label ? { label: hint.label } : {}) }
+            : {
+                command: spawn.command,
+                args: [...spawn.args, ...(terminalMethod?.args ?? [])],
+                ...(terminalMethod?.env ? { env: { ...terminalMethod.env } } : {}),
+            };
+        return {
+            type: "terminal",
+            id: method.id,
+            name: method.name,
+            ...(description ? { description } : {}),
+            launch,
+            ...(meta ? { meta } : {}),
+        };
+    }
+    if (type === "env_var") {
+        const envMethod = method;
+        const vars = (envMethod.vars ?? []).map((v) => ({
+            name: v.name,
+            ...(v.label != null ? { label: v.label } : {}),
+            // SDK defaults: `secret` defaults TRUE, `optional` defaults FALSE.
+            secret: v.secret ?? true,
+            optional: v.optional ?? false,
+            ...(v._meta ? { meta: v._meta } : {}),
+        }));
+        return {
+            type: "env_var",
+            id: method.id,
+            name: method.name,
+            ...(description ? { description } : {}),
+            ...(envMethod.link != null ? { link: envMethod.link } : {}),
+            vars,
+            ...(meta ? { meta } : {}),
+        };
+    }
+    // agent (AuthMethodAgent, or the default when `type` is absent):
+    const expectsMeta = meta != null;
+    return {
+        type: "agent",
+        id: method.id,
+        name: method.name,
+        ...(description ? { description } : {}),
+        expectsMeta,
+        interactive: !expectsMeta,
+        ...(meta ? { meta } : {}),
+    };
+}

package/dist/backend.d.ts

@@ -1,4 +1,5 @@
 import type { TSchema } from "typebox";
+import type { AuthProfile } from "./auth/auth-profiles.js";
 /** The built-in backends. Custom registry backends extend the id space beyond these. */
 export type BuiltinBackendId = "claude" | "codex" | "opencode";
 /** A backend id: one of the built-ins, or the registered name of a custom ACP backend
@@ -52,6 +53,12 @@ export interface Backend {
         readonly namespace: string;
         readonly gatedKeys: readonly string[];
     };
+    /** Per-agent auth adapter (§3.1). UNDEFINED for custom backends → the type-driven base auth flow
+     *  runs verbatim (conformance-by-absence, §1.4). The three built-in backends wire their pure-data
+     *  profile (§3.2–§3.4); the lifecycle spine (§2) reads it when computing `spawnEnvFor` (§2.8), the
+     *  runner consults `profile.describe`/`buildMeta` (§1.3/§2.9), and the connection refines client
+     *  auth capabilities through `profile.clientAuthCapabilities` (§1.2). */
+    readonly authProfile?: AuthProfile;
     /** How to launch this backend's ACP server over stdio. */
     spawnConfig(): SpawnConfig;
     /** OPTIONAL backend-level `_meta` DEFAULTS for session/new (e.g. a custom registry entry's

package/dist/backend.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"backend.d.ts","sourceRoot":"","sources":["../src/backend.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAEvC,wFAAwF;AACxF,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,OAAO,GAAG,UAAU,CAAC;AAC/D;sFACsF;AACtF,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC;AAE/B,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;CACxB;AAED,8FAA8F;AAC9F,MAAM,WAAW,gBAAgB;IAC/B,oDAAoD;IACpD,eAAe,IAAI,MAAM,CAAC;IAC1B,uGAAuG;IACvG,mBAAmB,IAAI,OAAO,CAAC;CAChC;AAED;+EAC+E;AAC/E,MAAM,WAAW,iBAAiB;IAChC,yFAAyF;IACzF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,sFAAsF;IACtF,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC;IACvB;;;0EAGsE;IACtE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;oCAEgC;IAChC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IACvC;;;;kGAI8F;IAC9F,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IACvC;;qFAEiF;IACjF,QAAQ,CAAC,0BAA0B,CAAC,EAAE,OAAO,CAAC;IAC9C;;sFAEkF;IAClF,QAAQ,CAAC,kBAAkB,CAAC,EAAE;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC;IACpG,0DAA0D;IAC1D,WAAW,IAAI,WAAW,CAAC;IAC3B;;sEAEkE;IAClE,mBAAmB,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAC5D;;;mGAG+F;IAC/F,WAAW,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,EAAE,MAAM,CAAC,EAAE,iBAAiB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAC1G,kGAAkG;IAClG,UAAU,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAC7E,oGAAoG;IACpG,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC;CACrD;AAED,6FAA6F;AAC7F,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,EAAE,CAE7D"}
+{"version":3,"file":"backend.d.ts","sourceRoot":"","sources":["../src/backend.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAE3D,wFAAwF;AACxF,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,OAAO,GAAG,UAAU,CAAC;AAC/D;sFACsF;AACtF,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC;AAE/B,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;CACxB;AAED,8FAA8F;AAC9F,MAAM,WAAW,gBAAgB;IAC/B,oDAAoD;IACpD,eAAe,IAAI,MAAM,CAAC;IAC1B,uGAAuG;IACvG,mBAAmB,IAAI,OAAO,CAAC;CAChC;AAED;+EAC+E;AAC/E,MAAM,WAAW,iBAAiB;IAChC,yFAAyF;IACzF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,sFAAsF;IACtF,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC;IACvB;;;0EAGsE;IACtE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;oCAEgC;IAChC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IACvC;;;;kGAI8F;IAC9F,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IACvC;;qFAEiF;IACjF,QAAQ,CAAC,0BAA0B,CAAC,EAAE,OAAO,CAAC;IAC9C;;sFAEkF;IAClF,QAAQ,CAAC,kBAAkB,CAAC,EAAE;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC;IACpG;;;;6EAIyE;IACzE,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IACnC,0DAA0D;IAC1D,WAAW,IAAI,WAAW,CAAC;IAC3B;;sEAEkE;IAClE,mBAAmB,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAC5D;;;mGAG+F;IAC/F,WAAW,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,EAAE,MAAM,CAAC,EAAE,iBAAiB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAC1G,kGAAkG;IAClG,UAAU,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAC7E,oGAAoG;IACpG,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC;CACrD;AAED,6FAA6F;AAC7F,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,EAAE,CAE7D"}

package/dist/backends/claude.d.ts

@@ -2,6 +2,8 @@ import type { TSchema } from "typebox";
 import type { Backend, SpawnConfig, StructuredSource } from "../backend.js";
 export declare class ClaudeBackend implements Backend {
     readonly id: "claude";
+    /** Pure-data claude auth profile (§3.2): terminal follows the host TTY, gateway follows `onAuth`. */
+    readonly authProfile: import("../auth/auth-profiles.js").AuthProfile;
     spawnConfig(): SpawnConfig;
     sessionMeta(schema: TSchema | undefined): Record<string, unknown> | undefined;
     promptMeta(): Record<string, unknown> | undefined;

package/dist/backends/claude.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude.d.ts","sourceRoot":"","sources":["../../src/backends/claude.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAM5E,qBAAa,aAAc,YAAW,OAAO;IAC3C,QAAQ,CAAC,EAAE,EAAG,QAAQ,CAAU;IAEhC,WAAW,IAAI,WAAW;IAgB1B,WAAW,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS;IAmB7E,UAAU,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS;IAKjD,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO;CAGpD"}
+{"version":3,"file":"claude.d.ts","sourceRoot":"","sources":["../../src/backends/claude.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAO5E,qBAAa,aAAc,YAAW,OAAO;IAC3C,QAAQ,CAAC,EAAE,EAAG,QAAQ,CAAU;IAChC,qGAAqG;IACrG,QAAQ,CAAC,WAAW,iDAAqB;IAEzC,WAAW,IAAI,WAAW;IAgB1B,WAAW,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS;IAmB7E,UAAU,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS;IAKjD,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO;CAGpD"}

package/dist/backends/claude.js

@@ -6,10 +6,13 @@
 // `_claude/sdkMessage` extension notification (the runner's ACP client captures it).
 import { createRequire } from "node:module";
 import { splitArgs } from "../backend.js";
+import { claudeAuthProfile } from "../auth/auth-profiles.js";
 import { toAnthropicJsonSchema } from "../schema-strict.js";
 const require = createRequire(import.meta.url);
 export class ClaudeBackend {
     id = "claude";
+    /** Pure-data claude auth profile (§3.2): terminal follows the host TTY, gateway follows `onAuth`. */
+    authProfile = claudeAuthProfile;
     spawnConfig() {
         const env = process.env;
         const override = env.AGENTPRISM_CLAUDE_ACP_CMD;

package/dist/backends/codex.d.ts

@@ -2,6 +2,9 @@ import type { TSchema } from "typebox";
 import type { Backend, SessionMetaInputs, SpawnConfig, StructuredSource } from "../backend.js";
 export declare class CodexBackend implements Backend {
     readonly id: "codex";
+    /** Pure-data codex auth profile (§3.3): no terminal, gateway follows `onAuth`, and the
+     *  `DEFAULT_AUTH_REQUEST` spawn-env lever for api-key/gateway intents. */
+    readonly authProfile: import("../auth/auth-profiles.js").AuthProfile;
     readonly customCapabilities: {
         readonly namespace: "@automatalabs/codex-acp";
         readonly gatedKeys: readonly string[];

package/dist/backends/codex.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codex.d.ts","sourceRoot":"","sources":["../../src/backends/codex.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAQ/F,qBAAa,YAAa,YAAW,OAAO;IAC1C,QAAQ,CAAC,EAAE,EAAG,OAAO,CAAU;IAC/B,QAAQ,CAAC,kBAAkB;;;MAGhB;IAEX,WAAW,IAAI,WAAW;IAe1B,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,SAAS,EAAE,MAAM,CAAC,EAAE,iBAAiB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS;IAY1G,UAAU,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS;IAK5E,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO;CAKpD"}
+{"version":3,"file":"codex.d.ts","sourceRoot":"","sources":["../../src/backends/codex.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAS/F,qBAAa,YAAa,YAAW,OAAO;IAC1C,QAAQ,CAAC,EAAE,EAAG,OAAO,CAAU;IAC/B;8EAC0E;IAC1E,QAAQ,CAAC,WAAW,iDAAoB;IACxC,QAAQ,CAAC,kBAAkB;;;MAGhB;IAEX,WAAW,IAAI,WAAW;IAe1B,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,SAAS,EAAE,MAAM,CAAC,EAAE,iBAAiB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS;IAY1G,UAAU,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS;IAK5E,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO;CAKpD"}

package/dist/backends/codex.js

@@ -9,12 +9,16 @@
 import { createRequire } from "node:module";
 import { CODEX_CUSTOM_CAPABILITY_NAMESPACE, CODEX_META_KEYS, META_KEYS } from "@automatalabs/shared-types";
 import { splitArgs } from "../backend.js";
+import { codexAuthProfile } from "../auth/auth-profiles.js";
 import { GATED_CUSTOM_META_KEYS } from "../capabilities.js";
 import { toStrictJsonSchema } from "../schema-strict.js";
 import { parseFinalJson } from "../structured-output.js";
 const require = createRequire(import.meta.url);
 export class CodexBackend {
     id = "codex";
+    /** Pure-data codex auth profile (§3.3): no terminal, gateway follows `onAuth`, and the
+     *  `DEFAULT_AUTH_REQUEST` spawn-env lever for api-key/gateway intents. */
+    authProfile = codexAuthProfile;
     customCapabilities = {
         namespace: CODEX_CUSTOM_CAPABILITY_NAMESPACE,
         gatedKeys: GATED_CUSTOM_META_KEYS,

package/dist/backends/opencode.d.ts

@@ -2,6 +2,8 @@ import type { TSchema } from "typebox";
 import type { Backend, SpawnConfig, StructuredSource } from "../backend.js";
 export declare class OpenCodeBackend implements Backend {
     readonly id: "opencode";
+    /** Pure-data opencode auth profile (§3.4): terminal follows the host TTY; no gateway/logout. */
+    readonly authProfile: import("../auth/auth-profiles.js").AuthProfile;
     readonly stripsRoutingPrefix = true;
     readonly embedSchemaInPrompt = true;
     readonly injectStructuredOutputTool = true;

package/dist/backends/opencode.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"opencode.d.ts","sourceRoot":"","sources":["../../src/backends/opencode.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAO5E,qBAAa,eAAgB,YAAW,OAAO;IAC7C,QAAQ,CAAC,EAAE,EAAG,UAAU,CAAU;IAClC,QAAQ,CAAC,mBAAmB,QAAQ;IACpC,QAAQ,CAAC,mBAAmB,QAAQ;IACpC,QAAQ,CAAC,0BAA0B,QAAQ;IAE3C,WAAW,IAAI,WAAW;IAW1B,WAAW,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS;IAKlD,UAAU,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS;IAO5E,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO;CAGpD"}
+{"version":3,"file":"opencode.d.ts","sourceRoot":"","sources":["../../src/backends/opencode.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAQ5E,qBAAa,eAAgB,YAAW,OAAO;IAC7C,QAAQ,CAAC,EAAE,EAAG,UAAU,CAAU;IAClC,gGAAgG;IAChG,QAAQ,CAAC,WAAW,iDAAuB;IAC3C,QAAQ,CAAC,mBAAmB,QAAQ;IACpC,QAAQ,CAAC,mBAAmB,QAAQ;IACpC,QAAQ,CAAC,0BAA0B,QAAQ;IAE3C,WAAW,IAAI,WAAW;IAW1B,WAAW,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS;IAKlD,UAAU,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS;IAO5E,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO;CAGpD"}

package/dist/backends/opencode.js

@@ -6,11 +6,14 @@ import { dirname, join } from "node:path";
 import { createRequire } from "node:module";
 import { META_KEYS } from "@automatalabs/shared-types";
 import { splitArgs } from "../backend.js";
+import { opencodeAuthProfile } from "../auth/auth-profiles.js";
 import { toJsonSchema } from "../schema-strict.js";
 import { parseFinalJson } from "../structured-output.js";
 const require = createRequire(import.meta.url);
 export class OpenCodeBackend {
     id = "opencode";
+    /** Pure-data opencode auth profile (§3.4): terminal follows the host TTY; no gateway/logout. */
+    authProfile = opencodeAuthProfile;
     stripsRoutingPrefix = true;
     embedSchemaInPrompt = true;
     injectStructuredOutputTool = true;

package/dist/capabilities.d.ts

@@ -1,4 +1,4 @@
-import { type AgentCapabilities, type AuthMethod, type ContentBlock, type Implementation, type InitializeResponse } from "@agentclientprotocol/sdk";
+import { type AgentCapabilities, type AuthMethod, type ClientCapabilities, type ContentBlock, type Implementation, type InitializeResponse } from "@agentclientprotocol/sdk";
 import { type McpServerConfig } from "@automatalabs/shared-types";
 import type { Backend } from "./backend.js";
 /** The bare `_meta` keys whose emission is gated by Codex's custom-capability advertisement.
@@ -48,6 +48,12 @@ export declare function negotiateCapabilities(response: InitializeResponse, cust
 export declare function describeLifecycleAdvertisement(agent: AgentCapabilities): string;
 /** Human-readable auth/provider advertisement summary for strict wrapper gate errors. */
 export declare function describeAuthProviderAdvertisement(agent: AgentCapabilities, authMethods?: readonly AuthMethod[]): string;
+/** Human-readable summary of the CLIENT-side auth advertisement this runner sends at initialize —
+ *  the symmetric counterpart to describeAuthProviderAdvertisement (the agent side). Used for
+ *  error/diagnostic text (§1.2); reads only the pinned boolean gates, never any secret. Renders
+ *  e.g. `auth.terminal=true; auth._meta.gateway=true; _meta["terminal-auth"]=true`, or `auth=none`
+ *  when nothing is advertised. */
+export declare function describeClientAuthAdvertisement(auth: ClientCapabilities["auth"], meta: ClientCapabilities["_meta"]): string;
 /** True only when the agent selected EXACTLY PROTOCOL_VERSION. This client implements that one wire
  *  version and adapts its behavior to no other, so any other selected version — older or newer —
  *  means close the connection per the ACP spec's SHOULD-close rule. Per the spec the agent echoes

package/dist/capabilities.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"capabilities.d.ts","sourceRoot":"","sources":["../src/capabilities.ts"],"names":[],"mappings":"AAkBA,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAGL,KAAK,eAAe,EACrB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAQ5C;;;iGAGiG;AACjG,eAAO,MAAM,sBAAsB,EAAE,SAAS,MAAM,EAInD,CAAC;AAEF,qFAAqF;AACrF,MAAM,WAAW,sBAAsB;IACrC;0FACsF;IACtF,eAAe,EAAE,MAAM,CAAC;IACxB;4DACwD;IACxD,KAAK,EAAE,iBAAiB,CAAC;IACzB,+DAA+D;IAC/D,SAAS,EAAE,cAAc,GAAG,SAAS,CAAC;IACtC,kGAAkG;IAClG,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,2DAA2D;IAC3D,cAAc,EAAE,kBAAkB,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC;IACxD,sFAAsF;IACtF,aAAa,EAAE,OAAO,CAAC;IACvB;mGAC+F;IAC/F,mBAAmB,EAAE,OAAO,CAAC;IAC7B,0CAA0C;IAC1C,oBAAoB,EAAE,OAAO,CAAC;IAC9B,4CAA4C;IAC5C,qBAAqB,EAAE,OAAO,CAAC;IAC/B,4CAA4C;IAC5C,qBAAqB,EAAE,OAAO,CAAC;IAC/B,wEAAwE;IACxE,cAAc,EAAE,OAAO,CAAC;IACxB,uEAAuE;IACvE,iBAAiB,EAAE,OAAO,CAAC;IAC3B;oGACgG;IAChG,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IACvD;+EAC2E;IAC3E,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CAC1C;AAED,mFAAmF;AACnF,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,kBAAkB,EAC5B,kBAAkB,CAAC,EAAE,OAAO,CAAC,oBAAoB,CAAC,GACjD,sBAAsB,CAsBxB;AAMD,qFAAqF;AACrF,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,iBAAiB,GAAG,MAAM,CAiB/E;AAED,yFAAyF;AACzF,wBAAgB,iCAAiC,CAC/C,KAAK,EAAE,iBAAiB,EACxB,WAAW,GAAE,SAAS,UAAU,EAAO,GACtC,MAAM,CAOR;AAaD;;;;+DAI+D;AAC/D,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAEnE;AAED;;;gEAGgE;AAChE,wBAAgB,cAAc,CAC5B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EACzC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAC5C,SAAS,GAAE,SAAS,MAAM,EAA2B,GACpD,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAWrC;AAED;;;;;2EAK2E;AAC3E,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,YAAY,EAAE,EACtB,KAAK,EAAE,iBAAiB,EACxB,SAAS,EAAE,MAAM,GAChB,YAAY,EAAE,CAchB;AAkCD;;;;kEAIkE;AAClE,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,eAAe,EAAE,GAAG,SAAS,EACtC,KAAK,EAAE,iBAAiB,EACxB,OAAO,GAAE;IAAE,iBAAiB,CAAC,EAAE,OAAO,CAAA;CAAO,GAC5C;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,KAAK,GAAG,KAAK,CAAC;IAAC,MAAM,CAAC,EAAE,QAAQ,CAAA;CAAE,GAAG,SAAS,CAkBpF"}
+{"version":3,"file":"capabilities.d.ts","sourceRoot":"","sources":["../src/capabilities.ts"],"names":[],"mappings":"AAkBA,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,UAAU,EACf,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAGL,KAAK,eAAe,EACrB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAQ5C;;;iGAGiG;AACjG,eAAO,MAAM,sBAAsB,EAAE,SAAS,MAAM,EAInD,CAAC;AAEF,qFAAqF;AACrF,MAAM,WAAW,sBAAsB;IACrC;0FACsF;IACtF,eAAe,EAAE,MAAM,CAAC;IACxB;4DACwD;IACxD,KAAK,EAAE,iBAAiB,CAAC;IACzB,+DAA+D;IAC/D,SAAS,EAAE,cAAc,GAAG,SAAS,CAAC;IACtC,kGAAkG;IAClG,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,2DAA2D;IAC3D,cAAc,EAAE,kBAAkB,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC;IACxD,sFAAsF;IACtF,aAAa,EAAE,OAAO,CAAC;IACvB;mGAC+F;IAC/F,mBAAmB,EAAE,OAAO,CAAC;IAC7B,0CAA0C;IAC1C,oBAAoB,EAAE,OAAO,CAAC;IAC9B,4CAA4C;IAC5C,qBAAqB,EAAE,OAAO,CAAC;IAC/B,4CAA4C;IAC5C,qBAAqB,EAAE,OAAO,CAAC;IAC/B,wEAAwE;IACxE,cAAc,EAAE,OAAO,CAAC;IACxB,uEAAuE;IACvE,iBAAiB,EAAE,OAAO,CAAC;IAC3B;oGACgG;IAChG,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IACvD;+EAC2E;IAC3E,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CAC1C;AAED,mFAAmF;AACnF,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,kBAAkB,EAC5B,kBAAkB,CAAC,EAAE,OAAO,CAAC,oBAAoB,CAAC,GACjD,sBAAsB,CAsBxB;AAMD,qFAAqF;AACrF,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,iBAAiB,GAAG,MAAM,CAiB/E;AAED,yFAAyF;AACzF,wBAAgB,iCAAiC,CAC/C,KAAK,EAAE,iBAAiB,EACxB,WAAW,GAAE,SAAS,UAAU,EAAO,GACtC,MAAM,CAOR;AAED;;;;kCAIkC;AAClC,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,kBAAkB,CAAC,MAAM,CAAC,EAChC,IAAI,EAAE,kBAAkB,CAAC,OAAO,CAAC,GAChC,MAAM,CAQR;AAaD;;;;+DAI+D;AAC/D,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAEnE;AAED;;;gEAGgE;AAChE,wBAAgB,cAAc,CAC5B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EACzC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAC5C,SAAS,GAAE,SAAS,MAAM,EAA2B,GACpD,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAWrC;AAED;;;;;2EAK2E;AAC3E,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,YAAY,EAAE,EACtB,KAAK,EAAE,iBAAiB,EACxB,SAAS,EAAE,MAAM,GAChB,YAAY,EAAE,CAchB;AAkCD;;;;kEAIkE;AAClE,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,eAAe,EAAE,GAAG,SAAS,EACtC,KAAK,EAAE,iBAAiB,EACxB,OAAO,GAAE;IAAE,iBAAiB,CAAC,EAAE,OAAO,CAAA;CAAO,GAC5C;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,KAAK,GAAG,KAAK,CAAC;IAAC,MAAM,CAAC,EAAE,QAAQ,CAAA;CAAE,GAAG,SAAS,CAkBpF"}

package/dist/capabilities.js

@@ -86,6 +86,23 @@ export function describeAuthProviderAdvertisement(agent, authMethods = []) {
         `providers=${advertised(agent.providers) ? "true" : "false"}`,
     ].join("; ");
 }
+/** Human-readable summary of the CLIENT-side auth advertisement this runner sends at initialize —
+ *  the symmetric counterpart to describeAuthProviderAdvertisement (the agent side). Used for
+ *  error/diagnostic text (§1.2); reads only the pinned boolean gates, never any secret. Renders
+ *  e.g. `auth.terminal=true; auth._meta.gateway=true; _meta["terminal-auth"]=true`, or `auth=none`
+ *  when nothing is advertised. */
+export function describeClientAuthAdvertisement(auth, meta) {
+    const parts = [];
+    if (auth?.terminal === true)
+        parts.push("auth.terminal=true");
+    const gateway = auth?._meta?.gateway;
+    if (gateway === true)
+        parts.push("auth._meta.gateway=true");
+    const terminalAuth = meta?.["terminal-auth"];
+    if (terminalAuth === true)
+        parts.push('_meta["terminal-auth"]=true');
+    return parts.length > 0 ? parts.join("; ") : "auth=none";
+}
 function readCustomNamespace(meta, namespace) {
     if (!meta || typeof meta !== "object")
         return undefined;

package/dist/client-handlers.d.ts

@@ -31,6 +31,15 @@ export interface ClientCapabilityOptions {
      *  responder. Initialize capabilities are fixed for the connection lifetime, so a later
      *  session-scoped responder alone cannot truthfully light this up. */
     elicitation?: boolean;
+    /** Which auth method TYPES this client can actually complete. Advertising a gate the host
+     *  cannot service would invite the agent to offer a method the host can't finish. FIXED for
+     *  the connection lifetime (same discipline as `elicitation`); derived once at runner
+     *  construction, never per-session. Unset (or all-false) => the `auth` key is omitted entirely,
+     *  which the ACP spec treats as "unsupported" — the default-OFF, zero-behavior-change baseline. */
+    auth?: {
+        terminal?: boolean;
+        gateway?: boolean;
+    };
 }
 /** The client capability advertisement: fs/terminal derived solely from registered consumer
  *  handlers, plus the capabilities this client supports natively regardless of handlers —

package/dist/client-handlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client-handlers.d.ts","sourceRoot":"","sources":["../src/client-handlers.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EACV,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACpB,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,0BAA0B,EAC1B,2BAA2B,EAC3B,oBAAoB,EACpB,qBAAqB,EACtB,MAAM,0BAA0B,CAAC;AAElC,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,UAAU;IACzB,YAAY,CAAC,CACX,MAAM,EAAE,mBAAmB,EAC3B,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,oBAAoB,CAAC,GAAG,oBAAoB,CAAC;IACxD,aAAa,CAAC,CACZ,MAAM,EAAE,oBAAoB,EAC5B,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,GAAG,qBAAqB,GAAG,IAAI,CAAC;CACzE;AAED,MAAM,WAAW,gBAAgB;IAC/B,cAAc,CACZ,MAAM,EAAE,qBAAqB,EAC7B,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,sBAAsB,CAAC,GAAG,sBAAsB,CAAC;IAC5D,cAAc,CACZ,MAAM,EAAE,qBAAqB,EAC7B,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,sBAAsB,CAAC,GAAG,sBAAsB,CAAC;IAC5D,mBAAmB,CACjB,MAAM,EAAE,0BAA0B,EAClC,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,2BAA2B,CAAC,GAAG,2BAA2B,CAAC;IACtE,YAAY,CACV,MAAM,EAAE,mBAAmB,EAC3B,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,GAAG,oBAAoB,GAAG,IAAI,CAAC;IACtE,eAAe,CACb,MAAM,EAAE,sBAAsB,EAC9B,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,GAAG,uBAAuB,GAAG,IAAI,CAAC;CAC7E;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,CACL,MAAM,EAAE,iBAAiB,EACzB,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,kBAAkB,CAAC,GAAG,kBAAkB,CAAC;IACpD,OAAO,CACL,MAAM,EAAE,iBAAiB,EACzB,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,kBAAkB,CAAC,GAAG,kBAAkB,CAAC;IACpD,UAAU,CACR,MAAM,EAAE,oBAAoB,EAC5B,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,GAAG,qBAAqB,GAAG,IAAI,CAAC;CACzE;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,CAAC,EAAE,UAAU,CAAC;IAChB,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,GAAG,CAAC,EAAE,WAAW,CAAC;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC;;0EAEsE;IACtE,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAYD;;;;;iGAKiG;AACjG,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,cAAc,GAAG,SAAS,EACpC,OAAO,GAAE,uBAA4B,GACpC,kBAAkB,CAapB;AAED,yFAAyF;AACzF,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,cAAc,GAAG,SAAS,GAAG,IAAI,CAajF;AAMD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,WAAW,GAAG,SAAS,GAAG,GAAG,IAAI,WAAW,CAEnF"}
+{"version":3,"file":"client-handlers.d.ts","sourceRoot":"","sources":["../src/client-handlers.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EACV,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACpB,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,0BAA0B,EAC1B,2BAA2B,EAC3B,oBAAoB,EACpB,qBAAqB,EACtB,MAAM,0BAA0B,CAAC;AAElC,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,UAAU;IACzB,YAAY,CAAC,CACX,MAAM,EAAE,mBAAmB,EAC3B,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,oBAAoB,CAAC,GAAG,oBAAoB,CAAC;IACxD,aAAa,CAAC,CACZ,MAAM,EAAE,oBAAoB,EAC5B,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,GAAG,qBAAqB,GAAG,IAAI,CAAC;CACzE;AAED,MAAM,WAAW,gBAAgB;IAC/B,cAAc,CACZ,MAAM,EAAE,qBAAqB,EAC7B,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,sBAAsB,CAAC,GAAG,sBAAsB,CAAC;IAC5D,cAAc,CACZ,MAAM,EAAE,qBAAqB,EAC7B,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,sBAAsB,CAAC,GAAG,sBAAsB,CAAC;IAC5D,mBAAmB,CACjB,MAAM,EAAE,0BAA0B,EAClC,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,2BAA2B,CAAC,GAAG,2BAA2B,CAAC;IACtE,YAAY,CACV,MAAM,EAAE,mBAAmB,EAC3B,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,GAAG,oBAAoB,GAAG,IAAI,CAAC;IACtE,eAAe,CACb,MAAM,EAAE,sBAAsB,EAC9B,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,GAAG,uBAAuB,GAAG,IAAI,CAAC;CAC7E;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,CACL,MAAM,EAAE,iBAAiB,EACzB,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,kBAAkB,CAAC,GAAG,kBAAkB,CAAC;IACpD,OAAO,CACL,MAAM,EAAE,iBAAiB,EACzB,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,kBAAkB,CAAC,GAAG,kBAAkB,CAAC;IACpD,UAAU,CACR,MAAM,EAAE,oBAAoB,EAC5B,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,GAAG,qBAAqB,GAAG,IAAI,CAAC;CACzE;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,CAAC,EAAE,UAAU,CAAC;IAChB,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,GAAG,CAAC,EAAE,WAAW,CAAC;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC;;0EAEsE;IACtE,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;uGAImG;IACnG,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CAClD;AAYD;;;;;iGAKiG;AACjG,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,cAAc,GAAG,SAAS,EACpC,OAAO,GAAE,uBAA4B,GACpC,kBAAkB,CA4BpB;AAED,yFAAyF;AACzF,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,cAAc,GAAG,SAAS,GAAG,IAAI,CAajF;AAMD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,WAAW,GAAG,SAAS,GAAG,GAAG,IAAI,WAAW,CAEnF"}

package/dist/client-handlers.js

@@ -16,6 +16,23 @@ export function clientCapabilitiesFor(handlers, options = {}) {
     const capabilities = { session: { configOptions: { boolean: {} } } };
     if (options.elicitation)
         capabilities.elicitation = { form: {}, url: {} };
+    // Auth advertisement is host-declared, not handler-derived (like `elicitation`), so it is applied
+    // before the no-handlers early return. `auth` is OMITTED entirely unless a gate is requested —
+    // any capability absent from `initialize` MUST be treated as unsupported by the agent (§1.2).
+    if (options.auth?.terminal || options.auth?.gateway) {
+        const auth = {};
+        if (options.auth.terminal)
+            auth.terminal = true; // typed SDK field (schema/types.gen.d.ts AuthCapabilities.terminal)
+        if (options.auth.gateway)
+            auth._meta = { gateway: true }; // claude+codex gateway gate
+        capabilities.auth = auth;
+        if (options.auth.terminal) {
+            // claude 0.57.0 (acp-agent.js:339) and opencode 1.17.14 (service.ts:100-101) ALSO read the
+            // top-level `_meta["terminal-auth"]` channel, which additionally carries the spawnable
+            // {command,args,label} launch hint. Light both so all three agents reveal terminal methods.
+            capabilities._meta = { ...(capabilities._meta ?? {}), "terminal-auth": true };
+        }
+    }
     if (!handlers)
         return capabilities;
     const fs = handlers.fs;