@band-ai/sdk 0.2.0 → 0.2.1

package/dist/adapters.cjs

@@ -30,6 +30,38 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 ));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
+// src/core/errors.ts
+var BandSdkError, UnsupportedFeatureError, ValidationError, RuntimeStateError;
+var init_errors = __esm({
+  "src/core/errors.ts"() {
+    "use strict";
+    BandSdkError = class extends Error {
+      constructor(message, cause) {
+        super(message, cause !== void 0 ? { cause } : void 0);
+        this.name = "BandSdkError";
+      }
+    };
+    UnsupportedFeatureError = class extends BandSdkError {
+      constructor(message) {
+        super(message);
+        this.name = "UnsupportedFeatureError";
+      }
+    };
+    ValidationError = class extends BandSdkError {
+      constructor(message, cause) {
+        super(message, cause);
+        this.name = "ValidationError";
+      }
+    };
+    RuntimeStateError = class extends BandSdkError {
+      constructor(message) {
+        super(message);
+        this.name = "RuntimeStateError";
+      }
+    };
+  }
+});
+
 // src/contracts/memory.ts
 function namedValues(values) {
   return Object.fromEntries(values.map((value) => [value, value]));
@@ -108,38 +140,6 @@ var init_memory = __esm({
   }
 });
 
-// src/core/errors.ts
-var BandSdkError, UnsupportedFeatureError, ValidationError, RuntimeStateError;
-var init_errors = __esm({
-  "src/core/errors.ts"() {
-    "use strict";
-    BandSdkError = class extends Error {
-      constructor(message, cause) {
-        super(message, cause !== void 0 ? { cause } : void 0);
-        this.name = "BandSdkError";
-      }
-    };
-    UnsupportedFeatureError = class extends BandSdkError {
-      constructor(message) {
-        super(message);
-        this.name = "UnsupportedFeatureError";
-      }
-    };
-    ValidationError = class extends BandSdkError {
-      constructor(message, cause) {
-        super(message, cause);
-        this.name = "ValidationError";
-      }
-    };
-    RuntimeStateError = class extends BandSdkError {
-      constructor(message) {
-        super(message);
-        this.name = "RuntimeStateError";
-      }
-    };
-  }
-});
-
 // src/contracts/chatEvents.ts
 var CHAT_EVENT_TYPES, CHAT_MESSAGE_TYPES;
 var init_chatEvents = __esm({
@@ -1066,6 +1066,18 @@ var ACPClientHistoryConverter = class {
   }
 };
 
+// src/core/logger.ts
+var noop = () => void 0;
+var NoopLogger = class {
+  debug = noop;
+  info = noop;
+  warn = noop;
+  error = noop;
+};
+
+// src/adapters/acp/ACPClientAdapter.ts
+init_errors();
+
 // src/runtime/prompts/base.ts
 var ENVIRONMENT_SECTION = `
 ## Environment
@@ -2016,6 +2028,7 @@ var acpModule = new LazyAsyncValue({
 });
 
 // src/adapters/acp/ACPClientAdapter.ts
+var DEFAULT_PERMISSION_TIMEOUT_MS = 5 * 6e4;
 var ACPClientAdapter = class extends SimpleAdapter {
   command;
   cwd;
@@ -2031,6 +2044,10 @@ var ACPClientAdapter = class extends SimpleAdapter {
   roomTools = /* @__PURE__ */ new Map();
   activeSessions = /* @__PURE__ */ new Set();
   bootstrappedSessions = /* @__PURE__ */ new Set();
+  pendingPermissions = /* @__PURE__ */ new Map();
+  resolvePermission;
+  permissionTimeoutMs;
+  logger;
   backend = null;
   backendPromise = null;
   client = null;
@@ -2057,6 +2074,12 @@ var ACPClientAdapter = class extends SimpleAdapter {
     this.additionalMcpTools = [...options.additionalMcpTools ?? []];
     this.clientCapabilities = options.clientCapabilities;
     this.connectionFactory = options.connectionFactory ?? createSubprocessConnection;
+    this.resolvePermission = options.resolvePermission;
+    this.logger = options.logger ?? new NoopLogger();
+    this.permissionTimeoutMs = options.permissionTimeoutMs ?? DEFAULT_PERMISSION_TIMEOUT_MS;
+    if (this.resolvePermission && (!Number.isFinite(this.permissionTimeoutMs) || this.permissionTimeoutMs <= 0)) {
+      throw new ValidationError(`permissionTimeoutMs must be a positive finite number, got ${options.permissionTimeoutMs}`);
+    }
   }
   async onStarted(agentName, agentDescription) {
     await super.onStarted(agentName, agentDescription);
@@ -2122,6 +2145,7 @@ ${message.content}`;
       this.activeSessions.delete(sessionId);
       this.bootstrappedSessions.delete(sessionId);
       this.client?.setPermissionHandler(sessionId, void 0);
+      this.cancelPendingPermissions(sessionId);
     }
   }
   async onRuntimeStop() {
@@ -2134,6 +2158,7 @@ ${message.content}`;
     this.bootstrappedSessions.clear();
     this.roomToSession.clear();
     this.roomTools.clear();
+    this.cancelAllPendingPermissions();
     this.client = null;
     this.connection = null;
     if (this.backend) {
@@ -2356,28 +2381,94 @@ ${message.content}`;
     ].join("\n");
   }
   async handlePermissionRequest(tools, roomId, params) {
-    const selected = choosePermissionOption(params.options);
     const toolName = params.toolCall.title ?? "unknown";
-    await tools.sendEvent(`Permission requested: ${toolName}`, "tool_call", {
-      permission_request: true,
-      tool_name: toolName,
-      tool_call_id: params.toolCall.toolCallId,
-      acp_session_id: params.sessionId,
-      auto_allowed: selected !== null
-    });
-    if (!selected) {
-      return {
-        outcome: {
-          outcome: "cancelled"
-        }
-      };
+    const autoSelection = this.resolvePermission ? void 0 : choosePermissionOption(params.options);
+    const controller = this.resolvePermission ? new AbortController() : void 0;
+    if (controller) {
+      this.trackPending(params.sessionId, controller);
+    }
+    const [, chosenId] = await Promise.all([
+      // This is the room's only "a permission request is pending" signal,
+      // and the only one other room participants ever see — started
+      // immediately rather than serialized in front of a manual wait that
+      // can take up to `permissionTimeoutMs`.
+      tools.sendEvent(`Permission requested: ${toolName}`, "tool_call", {
+        permission_request: true,
+        tool_name: toolName,
+        tool_call_id: params.toolCall.toolCallId,
+        acp_session_id: params.sessionId,
+        auto_allowed: autoSelection !== void 0 && autoSelection !== null
+      }),
+      controller ? this.resolveManually(params.sessionId, params, controller) : Promise.resolve(autoSelection?.optionId)
+    ]);
+    return this.toResponse(chosenId, params.options);
+  }
+  // `undefined`, or an id absent from this request's own `options` (a buggy
+  // or stale caller), both map to `cancelled` — never silently treated as a
+  // deny. A real match, reject-kind options included, maps to `selected`.
+  toResponse(chosenId, options) {
+    const matched = chosenId !== void 0 && options.some((option) => option.optionId === chosenId);
+    return matched ? { outcome: { outcome: "selected", optionId: chosenId } } : { outcome: { outcome: "cancelled" } };
+  }
+  // Races the caller-supplied resolver against a timeout and against
+  // `controller`'s own abort signal — aborted externally by
+  // `cancelPendingPermissions`/`cancelAllPendingPermissions` (fired from
+  // `onCleanup`/`stop()` below) when a room or the whole adapter tears down
+  // while this is still pending. `controller` is the same object tracked in
+  // `pendingPermissions` by the caller, so there is exactly one cancellation
+  // channel here, not a second hand-rolled one alongside it.
+  async resolveManually(sessionId, params, controller) {
+    let timer;
+    const cancelled = new Promise((resolve) => {
+      controller.signal.addEventListener("abort", () => resolve(void 0));
+    });
+    try {
+      const timeout = new Promise((resolve) => {
+        timer = setTimeout(() => resolve(void 0), this.permissionTimeoutMs);
+      });
+      return await Promise.race([
+        // `resolvePermission` is caller-supplied; nothing guarantees it's
+        // `async` or otherwise well-behaved. `Promise.resolve().then(...)`
+        // normalizes a synchronous throw the same way it normalizes a
+        // rejected promise, so both land in the `.catch` below rather than
+        // escaping this race uncaught.
+        Promise.resolve().then(() => this.resolvePermission(params, controller.signal)).catch((error) => {
+          try {
+            this.logger.warn("resolvePermission threw; treating as no answer", { error: String(error) });
+          } catch {
+          }
+          return void 0;
+        }),
+        timeout,
+        cancelled
+      ]);
+    } finally {
+      clearTimeout(timer);
+      this.untrackPending(sessionId, controller);
+      controller.abort();
+    }
+  }
+  trackPending(sessionId, controller) {
+    const pending = this.pendingPermissions.get(sessionId) ?? /* @__PURE__ */ new Set();
+    pending.add(controller);
+    this.pendingPermissions.set(sessionId, pending);
+  }
+  untrackPending(sessionId, controller) {
+    const pending = this.pendingPermissions.get(sessionId);
+    pending?.delete(controller);
+    if (pending?.size === 0) {
+      this.pendingPermissions.delete(sessionId);
+    }
+  }
+  cancelPendingPermissions(sessionId) {
+    for (const controller of this.pendingPermissions.get(sessionId) ?? []) {
+      controller.abort();
+    }
+  }
+  cancelAllPendingPermissions() {
+    for (const sessionId of this.pendingPermissions.keys()) {
+      this.cancelPendingPermissions(sessionId);
     }
-    return {
-      outcome: {
-        outcome: "selected",
-        optionId: selected.optionId
-      }
-    };
   }
   async flushChunks(input) {
     const client = this.client;
@@ -3345,15 +3436,6 @@ function extractPromptText(prompt) {
 // src/adapters/tool-calling/ToolCallingAdapter.ts
 init_protocols();
 
-// src/core/logger.ts
-var noop = () => void 0;
-var NoopLogger = class {
-  debug = noop;
-  info = noop;
-  warn = noop;
-  error = noop;
-};
-
 // src/runtime/formatters.ts
 function isMetadataMap(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);

package/dist/adapters.d.cts

@@ -1,16 +1,16 @@
 export { A as A2AAdapter, a as A2AAdapterOptions, K as A2AClientFactory, M as A2AClientLike, b as A2AGatewayAdapter, c as AnthropicAdapter, d as AnthropicAdapterOptions, N as AnthropicClientFactory, Q as AnthropicToolCallingModel, R as AnthropicToolCallingModelOptions, C as CODEX_REASONING_EFFORTS, e as CODEX_REASONING_SUMMARIES, f as CODEX_WEB_SEARCH_MODES, g as ClaudePermissionMode, h as ClaudeSDKAdapter, i as ClaudeSDKAdapterOptions, S as ClaudeSDKQuery, U as ClaudeSDKQueryParams, j as CodexAdapter, k as CodexAdapterConfig, W as CodexAppServerStdioClient, l as CodexApprovalPolicy, X as CodexClientLike, Y as CodexJsonRpcError, m as CodexReasoningEffort, n as CodexReasoningSummary, o as CodexSandboxMode, p as CodexWebSearchMode, Z as DynamicToolCallParams, _ as DynamicToolCallResponse, $ as DynamicToolSpec, G as GeminiAdapter, q as GeminiAdapterOptions, a0 as GeminiClientFactory, a1 as GeminiToolCallingModel, a2 as GeminiToolCallingModelOptions, r as GenericAdapter, s as GenericAdapterHandler, t as GoogleADKAdapter, u as GoogleADKAdapterOptions, a3 as HttpOpencodeClient, a4 as HttpOpencodeClientOptions, a5 as HttpStatusError, L as LangGraphAdapter, v as LangGraphAdapterOptions, w as LangGraphGraph, x as LettaAdapter, y as LettaAdapterOptions, a6 as LettaAgentCreateParams, a7 as LettaClientFactory, a8 as LettaClientLike, a9 as LettaHistoryConverter, aa as LettaMessage, ab as LettaMessageCreateParams, ac as LettaMessages, ad as LettaRequestOptions, ae as LettaResponse, af as LettaResponseMessage, O as OpenAIAdapter, z as OpenAIAdapterOptions, ag as OpenAIClientFactory, ah as OpenAIToolCallingModel, ai as OpenAIToolCallingModelOptions, B as OpencodeAdapter, D as OpencodeAdapterConfig, E as OpencodeApprovalMode, F as OpencodeApprovalReply, aj as OpencodeClientLike, H as OpencodeQuestionMode, P as ParlantAdapter, I as ParlantAdapterOptions, ak as ParlantClientFactory, al as ParlantClientLike, am as ToolCall, an as ToolCallingAdapter, ao as ToolCallingAdapterOptions, T as ToolCallingModel, ap as ToolCallingModelRequest, aq as ToolCallingResponse, ar as ToolResult, as as TurnStartParams, V as VercelAISDKAdapter, J as VercelAISDKAdapterOptions, at as VercelAISDKToolCallingModel, au as VercelAISDKToolCallingModelOptions, av as runSingleToolRound } from './ClaudeSDKAdapter-BY4zEbCl.cjs';
 import * as _agentclientprotocol_sdk from '@agentclientprotocol/sdk';
-import { Client, ClientSideConnection, McpServer, ClientCapabilities, SessionMode, AgentSideConnection, SessionModeState, Agent, InitializeResponse, Implementation, Stream, InitializeRequest, LoadSessionRequest, LoadSessionResponse, ListSessionsRequest, ListSessionsResponse, ForkSessionRequest, ForkSessionResponse, ResumeSessionRequest, ResumeSessionResponse, SetSessionModeRequest, SetSessionModeResponse, SetSessionModelRequest, SetSessionModelResponse, SetSessionConfigOptionRequest, SetSessionConfigOptionResponse, AuthenticateRequest, AuthenticateResponse, PromptRequest, PromptResponse } from '@agentclientprotocol/sdk';
+import { Client, ClientSideConnection, McpServer, ClientCapabilities, RequestPermissionRequest, SessionMode, AgentSideConnection, SessionModeState, Agent, InitializeResponse, Implementation, Stream, InitializeRequest, LoadSessionRequest, LoadSessionResponse, ListSessionsRequest, ListSessionsResponse, ForkSessionRequest, ForkSessionResponse, ResumeSessionRequest, ResumeSessionResponse, SetSessionModeRequest, SetSessionModeResponse, SetSessionModelRequest, SetSessionModelResponse, SetSessionConfigOptionRequest, SetSessionConfigOptionResponse, AuthenticateRequest, AuthenticateResponse, PromptRequest, PromptResponse } from '@agentclientprotocol/sdk';
 import { A as ACPClientSessionState, a as ACPServerSessionState } from './acp-server-Dlj7D563.cjs';
 export { G as GatewayHistoryConverter } from './acp-server-Dlj7D563.cjs';
 import { S as SimpleAdapter } from './simpleAdapter-BpT4XbZC.cjs';
+import { L as Logger } from './logger-CABQOnlR.cjs';
 import { A as AdapterToolsProtocol, c as MessagingTools } from './protocols-Bz1rxcUg.cjs';
 import { P as PlatformMessage } from './types-D958TC71.cjs';
 import { M as McpToolRegistration } from './sdk-BTciSLRQ.cjs';
 import { R as RestApi } from './types-BgYFd_Yw.cjs';
 import { b as GatewayServerLike, c as GatewayServerOptions } from './opencode-2YdscIc1.cjs';
 export { A as A2AAuth, a as A2AGatewayAdapterOptions, d as A2AHistoryConverter, e as A2ASessionState, f as GatewayA2AMessage, g as GatewayA2AStatusUpdateEvent, h as GatewayCancelRequest, i as GatewayPeer, j as GatewayRequest, k as GatewayServerFactory, G as GatewaySessionState, l as GatewayTaskState, P as ParlantHistoryConverter, m as ParlantMessage, n as ParlantMessages, o as PendingA2ATask, p as buildA2AAuthHeaders } from './opencode-2YdscIc1.cjs';
-import './logger-CABQOnlR.cjs';
 import './customTools-BzF0IISO.cjs';
 import 'zod';
 import './dtos-B8KU_q4d.cjs';
@@ -52,6 +52,9 @@ interface ACPClientAdapterOptions {
     additionalMcpTools?: McpToolRegistration[];
     clientCapabilities?: ClientCapabilities;
     connectionFactory?: ACPClientConnectionFactory;
+    resolvePermission?: (request: RequestPermissionRequest, signal: AbortSignal) => Promise<string | undefined>;
+    permissionTimeoutMs?: number;
+    logger?: Logger;
 }
 declare class ACPClientAdapter extends SimpleAdapter<ACPClientSessionState, AdapterToolsProtocol> {
     private readonly command;
@@ -68,6 +71,10 @@ declare class ACPClientAdapter extends SimpleAdapter<ACPClientSessionState, Adap
     private readonly roomTools;
     private readonly activeSessions;
     private readonly bootstrappedSessions;
+    private readonly pendingPermissions;
+    private readonly resolvePermission?;
+    private readonly permissionTimeoutMs;
+    private readonly logger;
     private backend;
     private backendPromise;
     private client;
@@ -96,6 +103,12 @@ declare class ACPClientAdapter extends SimpleAdapter<ACPClientSessionState, Adap
     private createBackend;
     private buildSystemContext;
     private handlePermissionRequest;
+    private toResponse;
+    private resolveManually;
+    private trackPending;
+    private untrackPending;
+    private cancelPendingPermissions;
+    private cancelAllPendingPermissions;
     private flushChunks;
 }
 

package/dist/adapters.d.ts

@@ -1,16 +1,16 @@
 export { A as A2AAdapter, a as A2AAdapterOptions, K as A2AClientFactory, M as A2AClientLike, b as A2AGatewayAdapter, c as AnthropicAdapter, d as AnthropicAdapterOptions, N as AnthropicClientFactory, Q as AnthropicToolCallingModel, R as AnthropicToolCallingModelOptions, C as CODEX_REASONING_EFFORTS, e as CODEX_REASONING_SUMMARIES, f as CODEX_WEB_SEARCH_MODES, g as ClaudePermissionMode, h as ClaudeSDKAdapter, i as ClaudeSDKAdapterOptions, S as ClaudeSDKQuery, U as ClaudeSDKQueryParams, j as CodexAdapter, k as CodexAdapterConfig, W as CodexAppServerStdioClient, l as CodexApprovalPolicy, X as CodexClientLike, Y as CodexJsonRpcError, m as CodexReasoningEffort, n as CodexReasoningSummary, o as CodexSandboxMode, p as CodexWebSearchMode, Z as DynamicToolCallParams, _ as DynamicToolCallResponse, $ as DynamicToolSpec, G as GeminiAdapter, q as GeminiAdapterOptions, a0 as GeminiClientFactory, a1 as GeminiToolCallingModel, a2 as GeminiToolCallingModelOptions, r as GenericAdapter, s as GenericAdapterHandler, t as GoogleADKAdapter, u as GoogleADKAdapterOptions, a3 as HttpOpencodeClient, a4 as HttpOpencodeClientOptions, a5 as HttpStatusError, L as LangGraphAdapter, v as LangGraphAdapterOptions, w as LangGraphGraph, x as LettaAdapter, y as LettaAdapterOptions, a6 as LettaAgentCreateParams, a7 as LettaClientFactory, a8 as LettaClientLike, a9 as LettaHistoryConverter, aa as LettaMessage, ab as LettaMessageCreateParams, ac as LettaMessages, ad as LettaRequestOptions, ae as LettaResponse, af as LettaResponseMessage, O as OpenAIAdapter, z as OpenAIAdapterOptions, ag as OpenAIClientFactory, ah as OpenAIToolCallingModel, ai as OpenAIToolCallingModelOptions, B as OpencodeAdapter, D as OpencodeAdapterConfig, E as OpencodeApprovalMode, F as OpencodeApprovalReply, aj as OpencodeClientLike, H as OpencodeQuestionMode, P as ParlantAdapter, I as ParlantAdapterOptions, ak as ParlantClientFactory, al as ParlantClientLike, am as ToolCall, an as ToolCallingAdapter, ao as ToolCallingAdapterOptions, T as ToolCallingModel, ap as ToolCallingModelRequest, aq as ToolCallingResponse, ar as ToolResult, as as TurnStartParams, V as VercelAISDKAdapter, J as VercelAISDKAdapterOptions, at as VercelAISDKToolCallingModel, au as VercelAISDKToolCallingModelOptions, av as runSingleToolRound } from './ClaudeSDKAdapter-Cna5P1dR.js';
 import * as _agentclientprotocol_sdk from '@agentclientprotocol/sdk';
-import { Client, ClientSideConnection, McpServer, ClientCapabilities, SessionMode, AgentSideConnection, SessionModeState, Agent, InitializeResponse, Implementation, Stream, InitializeRequest, LoadSessionRequest, LoadSessionResponse, ListSessionsRequest, ListSessionsResponse, ForkSessionRequest, ForkSessionResponse, ResumeSessionRequest, ResumeSessionResponse, SetSessionModeRequest, SetSessionModeResponse, SetSessionModelRequest, SetSessionModelResponse, SetSessionConfigOptionRequest, SetSessionConfigOptionResponse, AuthenticateRequest, AuthenticateResponse, PromptRequest, PromptResponse } from '@agentclientprotocol/sdk';
+import { Client, ClientSideConnection, McpServer, ClientCapabilities, RequestPermissionRequest, SessionMode, AgentSideConnection, SessionModeState, Agent, InitializeResponse, Implementation, Stream, InitializeRequest, LoadSessionRequest, LoadSessionResponse, ListSessionsRequest, ListSessionsResponse, ForkSessionRequest, ForkSessionResponse, ResumeSessionRequest, ResumeSessionResponse, SetSessionModeRequest, SetSessionModeResponse, SetSessionModelRequest, SetSessionModelResponse, SetSessionConfigOptionRequest, SetSessionConfigOptionResponse, AuthenticateRequest, AuthenticateResponse, PromptRequest, PromptResponse } from '@agentclientprotocol/sdk';
 import { A as ACPClientSessionState, a as ACPServerSessionState } from './acp-server-CiUqN3G3.js';
 export { G as GatewayHistoryConverter } from './acp-server-CiUqN3G3.js';
 import { S as SimpleAdapter } from './simpleAdapter--wznuoOw.js';
+import { L as Logger } from './logger-CABQOnlR.js';
 import { A as AdapterToolsProtocol, c as MessagingTools } from './protocols-Bwwcql0h.js';
 import { P as PlatformMessage } from './types-BTN_ZETM.js';
 import { M as McpToolRegistration } from './sdk-qKJtMma_.js';
 import { R as RestApi } from './types-BivGO7I9.js';
 import { b as GatewayServerLike, c as GatewayServerOptions } from './opencode-Bld62x5t.js';
 export { A as A2AAuth, a as A2AGatewayAdapterOptions, d as A2AHistoryConverter, e as A2ASessionState, f as GatewayA2AMessage, g as GatewayA2AStatusUpdateEvent, h as GatewayCancelRequest, i as GatewayPeer, j as GatewayRequest, k as GatewayServerFactory, G as GatewaySessionState, l as GatewayTaskState, P as ParlantHistoryConverter, m as ParlantMessage, n as ParlantMessages, o as PendingA2ATask, p as buildA2AAuthHeaders } from './opencode-Bld62x5t.js';
-import './logger-CABQOnlR.js';
 import './customTools-BzF0IISO.js';
 import 'zod';
 import './dtos-B8KU_q4d.js';
@@ -52,6 +52,9 @@ interface ACPClientAdapterOptions {
     additionalMcpTools?: McpToolRegistration[];
     clientCapabilities?: ClientCapabilities;
     connectionFactory?: ACPClientConnectionFactory;
+    resolvePermission?: (request: RequestPermissionRequest, signal: AbortSignal) => Promise<string | undefined>;
+    permissionTimeoutMs?: number;
+    logger?: Logger;
 }
 declare class ACPClientAdapter extends SimpleAdapter<ACPClientSessionState, AdapterToolsProtocol> {
     private readonly command;
@@ -68,6 +71,10 @@ declare class ACPClientAdapter extends SimpleAdapter<ACPClientSessionState, Adap
     private readonly roomTools;
     private readonly activeSessions;
     private readonly bootstrappedSessions;
+    private readonly pendingPermissions;
+    private readonly resolvePermission?;
+    private readonly permissionTimeoutMs;
+    private readonly logger;
     private backend;
     private backendPromise;
     private client;
@@ -96,6 +103,12 @@ declare class ACPClientAdapter extends SimpleAdapter<ACPClientSessionState, Adap
     private createBackend;
     private buildSystemContext;
     private handlePermissionRequest;
+    private toResponse;
+    private resolveManually;
+    private trackPending;
+    private untrackPending;
+    private cancelPendingPermissions;
+    private cancelAllPendingPermissions;
     private flushChunks;
 }
 

package/dist/adapters.js

@@ -63,9 +63,12 @@ import {
 } from "./chunk-RV76SKFT.js";
 import "./chunk-ZZJRRBPQ.js";
 import "./chunk-3BKAC4OZ.js";
-import "./chunk-OD2G5LFQ.js";
 import {
-  UnsupportedFeatureError
+  NoopLogger
+} from "./chunk-OD2G5LFQ.js";
+import {
+  UnsupportedFeatureError,
+  ValidationError
 } from "./chunk-JY75VSQK.js";
 
 // src/adapters/acp/ACPClientAdapter.ts
@@ -344,6 +347,7 @@ var acpModule = new LazyAsyncValue({
 });
 
 // src/adapters/acp/ACPClientAdapter.ts
+var DEFAULT_PERMISSION_TIMEOUT_MS = 5 * 6e4;
 var ACPClientAdapter = class extends SimpleAdapter {
   command;
   cwd;
@@ -359,6 +363,10 @@ var ACPClientAdapter = class extends SimpleAdapter {
   roomTools = /* @__PURE__ */ new Map();
   activeSessions = /* @__PURE__ */ new Set();
   bootstrappedSessions = /* @__PURE__ */ new Set();
+  pendingPermissions = /* @__PURE__ */ new Map();
+  resolvePermission;
+  permissionTimeoutMs;
+  logger;
   backend = null;
   backendPromise = null;
   client = null;
@@ -385,6 +393,12 @@ var ACPClientAdapter = class extends SimpleAdapter {
     this.additionalMcpTools = [...options.additionalMcpTools ?? []];
     this.clientCapabilities = options.clientCapabilities;
     this.connectionFactory = options.connectionFactory ?? createSubprocessConnection;
+    this.resolvePermission = options.resolvePermission;
+    this.logger = options.logger ?? new NoopLogger();
+    this.permissionTimeoutMs = options.permissionTimeoutMs ?? DEFAULT_PERMISSION_TIMEOUT_MS;
+    if (this.resolvePermission && (!Number.isFinite(this.permissionTimeoutMs) || this.permissionTimeoutMs <= 0)) {
+      throw new ValidationError(`permissionTimeoutMs must be a positive finite number, got ${options.permissionTimeoutMs}`);
+    }
   }
   async onStarted(agentName, agentDescription) {
     await super.onStarted(agentName, agentDescription);
@@ -450,6 +464,7 @@ ${message.content}`;
       this.activeSessions.delete(sessionId);
       this.bootstrappedSessions.delete(sessionId);
       this.client?.setPermissionHandler(sessionId, void 0);
+      this.cancelPendingPermissions(sessionId);
     }
   }
   async onRuntimeStop() {
@@ -462,6 +477,7 @@ ${message.content}`;
     this.bootstrappedSessions.clear();
     this.roomToSession.clear();
     this.roomTools.clear();
+    this.cancelAllPendingPermissions();
     this.client = null;
     this.connection = null;
     if (this.backend) {
@@ -684,28 +700,94 @@ ${message.content}`;
     ].join("\n");
   }
   async handlePermissionRequest(tools, roomId, params) {
-    const selected = choosePermissionOption(params.options);
     const toolName = params.toolCall.title ?? "unknown";
-    await tools.sendEvent(`Permission requested: ${toolName}`, "tool_call", {
-      permission_request: true,
-      tool_name: toolName,
-      tool_call_id: params.toolCall.toolCallId,
-      acp_session_id: params.sessionId,
-      auto_allowed: selected !== null
+    const autoSelection = this.resolvePermission ? void 0 : choosePermissionOption(params.options);
+    const controller = this.resolvePermission ? new AbortController() : void 0;
+    if (controller) {
+      this.trackPending(params.sessionId, controller);
+    }
+    const [, chosenId] = await Promise.all([
+      // This is the room's only "a permission request is pending" signal,
+      // and the only one other room participants ever see — started
+      // immediately rather than serialized in front of a manual wait that
+      // can take up to `permissionTimeoutMs`.
+      tools.sendEvent(`Permission requested: ${toolName}`, "tool_call", {
+        permission_request: true,
+        tool_name: toolName,
+        tool_call_id: params.toolCall.toolCallId,
+        acp_session_id: params.sessionId,
+        auto_allowed: autoSelection !== void 0 && autoSelection !== null
+      }),
+      controller ? this.resolveManually(params.sessionId, params, controller) : Promise.resolve(autoSelection?.optionId)
+    ]);
+    return this.toResponse(chosenId, params.options);
+  }
+  // `undefined`, or an id absent from this request's own `options` (a buggy
+  // or stale caller), both map to `cancelled` — never silently treated as a
+  // deny. A real match, reject-kind options included, maps to `selected`.
+  toResponse(chosenId, options) {
+    const matched = chosenId !== void 0 && options.some((option) => option.optionId === chosenId);
+    return matched ? { outcome: { outcome: "selected", optionId: chosenId } } : { outcome: { outcome: "cancelled" } };
+  }
+  // Races the caller-supplied resolver against a timeout and against
+  // `controller`'s own abort signal — aborted externally by
+  // `cancelPendingPermissions`/`cancelAllPendingPermissions` (fired from
+  // `onCleanup`/`stop()` below) when a room or the whole adapter tears down
+  // while this is still pending. `controller` is the same object tracked in
+  // `pendingPermissions` by the caller, so there is exactly one cancellation
+  // channel here, not a second hand-rolled one alongside it.
+  async resolveManually(sessionId, params, controller) {
+    let timer;
+    const cancelled = new Promise((resolve) => {
+      controller.signal.addEventListener("abort", () => resolve(void 0));
     });
-    if (!selected) {
-      return {
-        outcome: {
-          outcome: "cancelled"
-        }
-      };
+    try {
+      const timeout = new Promise((resolve) => {
+        timer = setTimeout(() => resolve(void 0), this.permissionTimeoutMs);
+      });
+      return await Promise.race([
+        // `resolvePermission` is caller-supplied; nothing guarantees it's
+        // `async` or otherwise well-behaved. `Promise.resolve().then(...)`
+        // normalizes a synchronous throw the same way it normalizes a
+        // rejected promise, so both land in the `.catch` below rather than
+        // escaping this race uncaught.
+        Promise.resolve().then(() => this.resolvePermission(params, controller.signal)).catch((error) => {
+          try {
+            this.logger.warn("resolvePermission threw; treating as no answer", { error: String(error) });
+          } catch {
+          }
+          return void 0;
+        }),
+        timeout,
+        cancelled
+      ]);
+    } finally {
+      clearTimeout(timer);
+      this.untrackPending(sessionId, controller);
+      controller.abort();
+    }
+  }
+  trackPending(sessionId, controller) {
+    const pending = this.pendingPermissions.get(sessionId) ?? /* @__PURE__ */ new Set();
+    pending.add(controller);
+    this.pendingPermissions.set(sessionId, pending);
+  }
+  untrackPending(sessionId, controller) {
+    const pending = this.pendingPermissions.get(sessionId);
+    pending?.delete(controller);
+    if (pending?.size === 0) {
+      this.pendingPermissions.delete(sessionId);
+    }
+  }
+  cancelPendingPermissions(sessionId) {
+    for (const controller of this.pendingPermissions.get(sessionId) ?? []) {
+      controller.abort();
+    }
+  }
+  cancelAllPendingPermissions() {
+    for (const sessionId of this.pendingPermissions.keys()) {
+      this.cancelPendingPermissions(sessionId);
     }
-    return {
-      outcome: {
-        outcome: "selected",
-        optionId: selected.optionId
-      }
-    };
   }
   async flushChunks(input) {
     const client = this.client;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@band-ai/sdk",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "Band TypeScript SDK core runtime",
   "license": "MIT",
   "repository": {