@bd7pil/ocrc 0.9.0

package/LICENSE

@@ -0,0 +1,34 @@
+MIT License
+
+Copyright (c) 2026 agentjoey (opencode-remote-control)
+Copyright (c) 2026 bd7pil (ocrc fork)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+---
+
+Portions of this software (the Telegram UX layer transplanted by the P2b
+workstream: managers, menus, callbacks and i18n) are derived from
+@grinev/opencode-telegram-bot:
+
+  Copyright (c) 2026 Ruslan Grinev
+  https://github.com/grinev/opencode-telegram-bot
+
+That portion is likewise distributed under the MIT License set out above,
+with the copyright notice attributable to its author preserved here.

package/README.md

@@ -0,0 +1,330 @@
+# ocrc — remote control for opencode
+
+> **ocrc is a fork of [agentjoey/opencode-remote-control](https://github.com/agentjoey/opencode-remote-control) (OCRC, MIT).**
+> Upstream's architecture — the in-process plugin, CardBus, transport
+> interface, Telegram + Web PWA — is kept intact. This fork exists for four
+> reasons, all additive on top of upstream's design:
+>
+> 1. **Dual-host** — one default export loads on opencode **V1 (server hook) and
+>    V2 (setup hook)**; no plugin beta dependency, local structural V2 types.
+> 2. **More channels** — Feishu (official outbound WebSocket) and WeChat (official
+>    iLink bot API) as new transports under the same Transport interface; the
+>    relay core stays untouched.
+> 3. **Telegram UX at grinev depth** — the interaction model of
+>    [@grinev/opencode-telegram-bot](https://github.com/grinev/opencode-telegram-bot)
+>    (MIT): interaction mutex, grouped permission requests, background-session
+>    notifications, Chinese i18n — transplanted onto ocrc's relay pipeline.
+> 4. **LAN-first web** — binds `0.0.0.0:4099` by default (token gate mandatory,
+>    no cloud relay needed); dual light/dark "paper-ink" theme, auto-switched.
+>
+> Fork identity: npm `@bd7pil/ocrc`, config home `~/.ocrc/`, CLI `ocrc`.
+> Functional behaviour otherwise follows upstream's original design — this fork
+> changes identity, defaults and skins, not the interaction model.
+
+# OCRC — opencode-remote-control (upstream README follows)
+
+> **Drive your local opencode from your phone or browser.** An [opencode](https://opencode.ai)
+> **plugin** that runs a **Telegram bot + a Web PWA** in-process — fire off a prompt from
+> anywhere and watch the assistant code in real time, even when you're away from your desk.
+> Now also drives any [ACP](https://agentclientprotocol.com) agent (e.g. Kimi) in standalone host mode.
+
+[![Release](https://img.shields.io/github/v/release/agentjoey/opencode-remote-control?color=10b981)](https://github.com/BD7PIL/ocrc/releases)
+[![License: MIT](https://img.shields.io/github/license/agentjoey/opencode-remote-control?color=10b981)](LICENSE)
+[![CI](https://img.shields.io/github/actions/workflow/status/agentjoey/opencode-remote-control/ci.yml?branch=main&label=CI)](https://github.com/BD7PIL/ocrc/actions)
+[![opencode plugin](https://img.shields.io/badge/opencode-plugin-10b981)](https://opencode.ai)
+[![tests](https://img.shields.io/badge/tests-413%20backend%20%2B%2093%20web-10b981)](./CHANGELOG.md)
+
+<p align="center">
+  <img src="docs/assets/ocrc-web.png" width="840" alt="OCRC — the Web PWA driving a live opencode session (sessions, live chat, task & cost inspector)">
+</p>
+
+Install once; it auto-starts in-process with opencode. Same sessions stream live to
+**Telegram** and a desktop **PWA** at the same time — switch surfaces mid-task without
+losing context.
+
+## ⚡ Quick start (5 minutes)
+
+Requires **opencode 1.17+** and **Node 20+** (or Bun). Install from GitHub
+(build from source); the npm package `@bd7pil/ocrc` is the official channel
+(the `opencode-remote-control` name on npm is an unrelated package — don't
+`npx` that).
+
+There are two ways to run it — pick one:
+
+### Mode A — Plugin (default; controls opencode)
+
+```bash
+# 1. Clone, build (backend + PWA), and install the plugin
+git clone https://github.com/BD7PIL/ocrc
+cd ocrc
+npm install && npm run build:all
+node dist/cli/install.js     # interactive — paste your Telegram bot token + user id
+
+# 2. Run opencode from any directory — the plugin auto-starts
+opencode
+```
+
+`install.js` writes a plugin bridge to `~/.config/opencode/plugins/` and your
+config to `.env`. The plugin then loads in-process whenever opencode runs.
+
+- **Telegram:** make a bot with [@BotFather](https://t.me/BotFather); get your numeric id from [@userinfobot](https://t.me/userinfobot) (the installer asks for both). Send "hello" → the assistant replies.
+- **Web PWA:** enabled by default. Run `ocrc pair` (or send `/pair` in Telegram) → open the URL/QR it prints. Auth is a device **token** (persisted at `~/.ocrc/token`) — no Cloudflare Access needed.
+- **From another device:** the web binds to `localhost`, so expose it over a tunnel or VPN — e.g. `tailscale serve 17081`. See [Remote access without a domain](#remote-access-without-a-domain).
+
+### Mode B — Standalone multi-backend host (opencode + ACP agents)
+
+Run OCRC as its own process serving **multiple agents at once** (opencode + any
+[ACP](https://agentclientprotocol.com) agent like Kimi) with an in-UI switcher —
+no opencode plugin needed. Requires the ACP agent to be installed and logged in
+(e.g. `kimi login`).
+
+```bash
+git clone https://github.com/BD7PIL/ocrc
+cd ocrc
+npm install && npm run build:all
+
+cp .env.acp.example .env.acp   # set WEB_TOKEN; OCRC_BACKENDS="opencode, kimi=kimi acp"
+scripts/run-acp-host.sh        # run in a real terminal (needs full PATH to spawn agents)
+```
+
+For an always-on service (auto-start + crash-restart), install the launchd unit
+from `deploy/com.ocrc.host.plist`. Full runbook: [`docs/OPS.md`](docs/OPS.md).
+
+> Note: `ocrc` isn't on your PATH by default — use `node dist/cli/index.js <cmd>`
+> (e.g. `node dist/cli/index.js pair`), or `npm link` to get the `ocrc` shim.
+
+## How we're different
+
+- **Runs as an opencode plugin, in-process.** One install, no extra process, no
+  daemon to babysit — it starts and stops with `opencode` itself.
+- **Telegram + Web from a single codebase.** The same sessions stream live to
+  Telegram and a desktop PWA simultaneously; switch surfaces mid-task without
+  losing context.
+- **SDK-native.** Built on `@opencode-ai/sdk` and the opencode plugin event
+  hook — it speaks opencode's own protocol rather than scraping a UI, so agent /
+  model overrides, approvals, diffs, and cost/token metadata all come through
+  first-class.
+- **Transport-agnostic core.** A channel-neutral `CardBus` carries structured
+  cards; each transport renders them independently. Adding a new channel
+  (Discord, Slack, …) doesn't touch the relay core.
+- **Local-first & single-user.** It runs on your machine against your local
+  opencode server, stores state in a local file, and answers to one allowlisted
+  user. No cloud, no shared backend.
+
+## Architecture
+
+```
+┌──────────────────────────────────────────────────────┐
+│  opencode (single process)                            │
+│                                                       │
+│  ┌──────────────────┐  ┌───────────────────────────┐ │
+│  │ AI engine :4096  │  │ plugin: remote-control     │ │
+│  │                  │  │  ├─ Telegraf (Telegram)    │ │
+│  │   event hook ────┼──┼─►├─ Hono + WS (Web PWA)    │ │
+│  │                  │  │  └─ relay + CardBus        │ │
+│  └──────────────────┘  └──────────┬────────────────┘ │
+│                                   ▼                   │
+│                          Telegram / Web (PWA)         │
+└──────────────────────────────────────────────────────┘
+```
+
+The plugin loads inside opencode and is driven by the plugin **event hook**: it
+submits prompts via the SDK, consumes streaming events, and renders structured
+cards to whichever transports are enabled. A TUI, if you run one, is just
+another client of the same opencode server.
+
+Full deep-dive: [`docs/ARCHITECTURE.md`](docs/ARCHITECTURE.md).
+
+## Quick Start (Telegram)
+
+1. **Create a bot** with [@BotFather](https://t.me/BotFather), get a token.
+2. **Find your user ID** — message [@userinfobot](https://t.me/userinfobot).
+3. **Build and install the plugin** (opencode 1.17+):
+   ```bash
+   npm install && npm run build
+   node dist/cli/install.js
+   ```
+   The installer writes a plugin bridge to `~/.config/opencode/plugins/`
+   (opencode 1.17 loads local plugins from there — directory paths in
+   `opencode.json` no longer work), ensures that dir's `package.json` has
+   `"type": "module"`, and saves `TELEGRAM_BOT_TOKEN` / `ALLOWED_USER_IDS` /
+   `WEB_ENABLED` / `WEB_PORT` to the repo's `.env`.
+4. **Run opencode** from any directory — the plugin loads globally:
+   ```bash
+   opencode
+   ```
+   The plugin auto-starts. For an always-on remote-control hub, run it from a
+   small/empty directory (e.g. `~/ocrc-hub`) so opencode's file watcher stays
+   fast. You can run several opencode instances — they elect one **PRIMARY**
+   (atomic lock at `~/.ocrc/primary.lock`) to own the web (`:4099`) and
+   Telegram singletons; the rest stand down PASSIVE. The web/bot can switch
+   between the workspaces of the running instances.
+5. **Send "hello"** in Telegram → the assistant responds.
+
+## Web UI (PWA)
+
+The Web UI runs alongside Telegram and shows the same sessions in real time
+(full streaming), installable as a desktop/mobile PWA.
+
+1. Set `WEB_ENABLED=true` (and `WEB_PORT` — default `17081`, since opencode's
+   own server occupies `7081`).
+2. Build the web app: `cd web && npm run build`.
+3. The plugin serves the PWA at `http://127.0.0.1:17081`.
+
+### Auth — pair a device (default, no Cloudflare Access needed)
+
+Auth defaults to an app **token** (`WEB_AUTH=token`). Onboard a device with
+`ocrc pair` (or Telegram `/pair`): it prints a URL + QR with the token in the
+fragment (`https://<host>/#token=…`). Open it once — the app stores the token
+and attaches it to every request thereafter. The token is persisted at
+`~/.ocrc/token`, so it survives restarts and re-installs.
+
+> Behind a tunnel, keep `WEB_CF_ACCESS_DEV_BYPASS=false`: `cloudflared` connects
+> from loopback, so a loopback bypass would trust all tunnel traffic.
+
+Prefer Cloudflare Access instead? Set `WEB_AUTH=cf-access` with
+`WEB_CF_ACCESS_TEAM` / `WEB_CF_ACCESS_AUD` — see [`docs/OPS.md`](docs/OPS.md).
+
+### Remote access without a domain
+
+A PWA install needs a **secure context** (HTTPS, or `http://localhost`). To
+reach the hub from another machine without owning a domain:
+
+| Method | Command | Notes |
+|---|---|---|
+| **Tailscale** (recommended) | `tailscale serve 17081` | Stable `https://<host>.ts.net`, device-level auth, survives restarts |
+| **cloudflared quick tunnel** | `cloudflared tunnel --url http://localhost:17081` | Free `https://*.trycloudflare.com`; URL changes each run |
+| **SSH port-forward** | `ssh -L 17081:localhost:17081 <host>` | Then open `http://127.0.0.1:17081` (localhost = secure context) |
+
+Set `WEB_PUBLIC_URL` to the resulting HTTPS URL so `/pair` emits the right
+links. (If you already run a `cloudflared` tunnel to `:4099`, `/pair`
+auto-detects its hostname from `~/.cloudflared`.) Plain `http://<LAN-IP>` is
+**not** a secure context — Chrome won't install it as an app.
+
+### Install as an app
+
+In Chrome: the omnibox install icon, or **⋮ → Cast, save, and share → Install
+page as app…**. The installed PWA reuses the browser's stored token, so it stays
+signed in.
+
+## Commands
+
+| Command | Description |
+|---|---|
+| `/start` | Handshake + health check |
+| `/status` | Server health, session count, pinned session |
+| `/sessions` | List all sessions with pin buttons |
+| `/session <id>` | Pin a specific session |
+| `/workspaces` | List known workspaces (directories) |
+| `/new` | Start a new session in the active workspace |
+| `/rename <title>` | Rename the pinned session |
+| `/files` | Files touched in the last session |
+| `/diff` | Pending git diff for the session |
+| `/todo` | Session todo list |
+| `/context` | Tokens + cost + model for the session |
+| `/agent` | Set next agent (sticky until cleared) |
+| `/model` | Set next model (sticky until cleared) |
+| `/current` | Show pinned session |
+| `/abort` | Stop the current generation |
+| `/pair` | Pair a device (URL + QR with token) for the Web PWA |
+| `/version` | Plugin version + uptime |
+| `/help` | Show this list |
+
+Send any text to relay it into opencode.
+
+## Push notifications
+
+The plugin watches opencode sessions and proactively pushes summaries:
+
+| Trigger | When | Content |
+|---|---|---|
+| Session finished | >60s run completes | Duration + assistant text summary (first 300 chars) |
+| Test failure | Bash output contains FAIL/FAILED | Last 200 chars of output |
+
+Rate limits: max 10 notifications/hour, 5-min cooldown per session. A session
+the foreground UI just delivered is skipped (no double-ping).
+
+## Multi-transport
+
+Telegram and Web run simultaneously and share the same opencode session state,
+relaying output to every connected channel in real time.
+
+| Transport | Status | Notes |
+|---|---|---|
+| Telegram | ✅ Stable | Final-result delivery, pagination, approvals |
+| Web (PWA) | ✅ Stable | SvelteKit, full streaming, token auth (default) / Cloudflare Access |
+
+To add another channel, see
+[`docs/transports/CONTRIBUTING-NEW-TRANSPORT.md`](docs/transports/CONTRIBUTING-NEW-TRANSPORT.md).
+
+## Security model
+
+- **Single-user per install.** Only the Telegram IDs in `ALLOWED_USER_IDS` can
+  interact with the bot.
+- **Local-first.** Runs on your machine, talks to your local opencode server,
+  stores state in a local JSON file (`data/state.json`).
+- **No secrets in repo.** `.env` is gitignored; `.env.example` documents every
+  variable.
+- **Web auth is pluggable.** Default is an app **token** (auto-generated,
+  persisted `0600` at `~/.ocrc/token`), verified on HTTP and WS with a
+  constant-time compare; `WEB_AUTH=cf-access` switches to Cloudflare Access. The
+  dev bypass only trusts a real loopback peer (never the bind address) and is
+  **off by default**.
+
+## Environment variables
+
+| Variable | Default | Description |
+|---|---|---|
+| `TELEGRAM_BOT_TOKEN` | — (required) | Telegram bot token from @BotFather |
+| `ALLOWED_USER_IDS` | — (required) | Comma-separated allowed Telegram user IDs |
+| `OPENCODE_BASE_URL` | — | opencode server URL. Unused in plugin mode (the SDK client is injected); legacy/sidecar only |
+| `CHAT_TIMEOUT_MS` | `600000` | Per-message timeout (ms) |
+| `TUI_VISIBLE` | `true` | Navigate the TUI to the target session; `false` = pure direct API |
+| `STATE_PATH` | `./data/state.json` | Persistent state file |
+| `LOG_LEVEL` | `info` | `debug` \| `info` \| `warn` \| `error` |
+| `TG_CHUNK_SOFT_LIMIT` | `3500` | Telegram message pagination soft limit |
+| **Web** |||
+| `WEB_ENABLED` | `false` | Enable the Web transport |
+| `WEB_HOST` | `127.0.0.1` | Web bind address (keep loopback; front with a tunnel) |
+| `WEB_PORT` | `17081` | Web port (opencode 1.17's own server occupies `7081`) |
+| `WEB_AUTH` | `token` | Auth strategy: `token` (app token) or `cf-access` |
+| `WEB_TOKEN` | auto | App token; auto-generated and persisted `0600` at `~/.ocrc/token` if unset |
+| `WEB_PUBLIC_URL` | — | Public URL for pairing/QR; falls back to LAN, then loopback |
+| `WEB_STATIC_ROOT` | `<repo>/web/dist` | Built PWA path (resolved from the plugin dir, cwd-independent) |
+| `WEB_SESSION_CACHE_SIZE` | `100` | Per-session card ring-buffer size |
+| `WEB_CF_ACCESS_TEAM` | — | Cloudflare Access team name (when `WEB_AUTH=cf-access`) |
+| `WEB_CF_ACCESS_AUD` | — | Cloudflare Access app AUD tag (when `WEB_AUTH=cf-access`) |
+| `WEB_CF_ACCESS_DEV_BYPASS` | `false` | Bypass auth **only for a loopback socket peer** |
+
+## opencode 1.17+ notes
+
+opencode 1.17 changed plugin loading; this project accounts for all of it:
+
+- **Local plugins load from `~/.config/opencode/plugins/`**, not from directory
+  paths in `opencode.json`. The installer writes a bridge file there that
+  re-invokes the built `dist/` (the source of truth — rebuild + restart to
+  update). 1.17 also only calls functions *defined* in the loaded module, so the
+  bridge wraps the plugin in a local function rather than re-exporting it.
+- **Plugins run in a worker thread.** An unhandled rejection would otherwise
+  crash the worker (`Worker has been terminated`), taking down the web server.
+  The plugin installs absorbing guards so it survives.
+- **Web runs on `17081`** because opencode's own server occupies `7081`. Point
+  your tunnel ingress at `17081`.
+- **PRIMARY election.** Web (`:4099`) and the Telegram bot are global
+  singletons. Multiple opencode instances elect one PRIMARY (atomic lock at
+  `~/.ocrc/primary.lock`) to own them; the others stand down PASSIVE.
+  Run the hub from a small/empty directory so the file watcher stays fast.
+
+## Testing
+
+```bash
+npm test                            # backend unit tests
+npx tsc --noEmit                    # backend type-check
+cd web && npm run check             # web type-check (svelte-check)
+cd web && npm test                  # web unit tests
+cd web && npm run build             # build PWA
+```
+
+## License
+
+MIT — see [LICENSE](LICENSE).

package/dist/cli/host-backends.js

@@ -0,0 +1,216 @@
+/**
+ * Builds the backend set for the standalone host from an OCRC_BACKENDS spec and
+ * wires each backend's event source to the relay. This is what lets one host
+ * serve multiple agents (opencode + kimi + …) with in-UI switching (Phase 3).
+ *
+ * Event sources differ by backend:
+ *  - ACP backends own their stream (backend.onEvent → relay; busy/idle → push).
+ *  - opencode has no onEvent: the host spawns its OWN opencode server
+ *    (createOpencodeServer — validated reachable from a standalone process) and
+ *    consumes the global event SSE, normalizing → relay and forwarding permission
+ *    events to the approval bridge. opencode events feed push natively.
+ */
+import { createOpencodeServer, createOpencodeClient } from '@opencode-ai/sdk';
+import { createAcpBackend } from '../core/agent/acp-backend.js';
+import { makeAcpConnect, parseAcpCommand } from '../core/agent/acp-connect.js';
+import { createOpencodeBackend } from '../core/agent/opencode-backend.js';
+import { normalizeOpencodeEvent } from '../core/agent/opencode-normalizer.js';
+import { startGlobalEvents } from '../opencode/global-events.js';
+import { createLogger } from '../utils/logger.js';
+import { readFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+const log = createLogger('host-backends');
+/**
+ * Discover the working directories kimi has sessions in, by reading its global
+ * session index ($KIMI_CODE_HOME/session_index.jsonl — one {sessionId, workDir,
+ * sessionDir} per line). ACP `session/list` is per-cwd, so this lets OCRC surface
+ * sessions you created in the kimi TUI in directories OCRC never used. Best-effort
+ * + kimi-specific (file absent / other agents → []).
+ */
+function kimiWorkDirs() {
+    try {
+        const home = process.env.KIMI_CODE_HOME || join(homedir(), '.kimi-code');
+        const dirs = new Set();
+        for (const line of readFileSync(join(home, 'session_index.jsonl'), 'utf8').split('\n')) {
+            const t = line.trim();
+            if (!t)
+                continue;
+            try {
+                const d = JSON.parse(t);
+                if (typeof d.workDir === 'string')
+                    dirs.add(d.workDir);
+            }
+            catch { /* skip bad line */ }
+        }
+        return [...dirs];
+    }
+    catch {
+        return [];
+    }
+}
+/** kimi's own configured MCP servers (~/.kimi-code/mcp.json) — surfaced in the MCP panel. */
+function kimiMcp() {
+    try {
+        const home = process.env.KIMI_CODE_HOME || join(homedir(), '.kimi-code');
+        const raw = JSON.parse(readFileSync(join(home, 'mcp.json'), 'utf8'));
+        return Object.entries(raw.mcpServers ?? {}).map(([name, cfg]) => ({
+            name,
+            type: cfg?.url ? (cfg.type ?? 'http') : 'stdio',
+            status: cfg?.disabled ? 'disabled' : 'configured',
+        }));
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Parse OCRC_BACKENDS. Entries: `opencode` or `<id>=<acp command>`. When empty,
+ * falls back to a single ACP backend from OCRC_ACP_CMD (legacy single-backend host).
+ */
+export function parseBackendsSpec(spec, fallbackAcpCmd) {
+    const entries = spec.split(',').map((s) => s.trim()).filter(Boolean);
+    if (entries.length === 0) {
+        const cmd = parseAcpCommand(fallbackAcpCmd);
+        return [{ id: `acp:${cmd.command}`, kind: 'acp', command: fallbackAcpCmd }];
+    }
+    return entries.map((e) => {
+        if (e === 'opencode')
+            return { id: 'opencode', kind: 'opencode' };
+        const eq = e.indexOf('=');
+        if (eq === -1) {
+            const cmd = parseAcpCommand(e);
+            return { id: `acp:${cmd.command}`, kind: 'acp', command: e };
+        }
+        const rawId = e.slice(0, eq).trim();
+        const command = e.slice(eq + 1).trim();
+        return { id: rawId.includes(':') ? rawId : `acp:${rawId}`, kind: 'acp', command };
+    });
+}
+const PERMISSION_TYPES = new Set(['permission.asked', 'permission.updated', 'permission.replied']);
+/** How many consecutive ports to probe when spawning an opencode server. */
+const PORT_PROBE_ATTEMPTS = 10;
+/**
+ * Spawn an opencode server, probing forward from `startPort` when a port is
+ * taken (previously a busy 4096 silently dropped the whole opencode backend).
+ * Returns the server and the port it bound; rethrows the last error when every
+ * probe fails.
+ */
+async function spawnOpencodeServer(startPort) {
+    let lastErr;
+    for (let port = startPort; port < startPort + PORT_PROBE_ATTEMPTS; port++) {
+        try {
+            const server = await createOpencodeServer({ hostname: '127.0.0.1', port, timeout: 15000 });
+            if (port !== startPort)
+                log.warn(`port ${startPort} unavailable — opencode backend bound to ${port} instead`);
+            return { server, port };
+        }
+        catch (err) {
+            lastErr = err;
+            log.warn(`opencode server failed on port ${port}: ${err.message}`);
+        }
+    }
+    throw lastErr;
+}
+export async function buildHostBackends(specs, deps) {
+    const backends = [];
+    const opencodeServers = [];
+    /** ACP connect factories — dispose() kills their spawned agent children. */
+    const acpConnects = [];
+    let nextPort = deps.opencodePort ?? 4096;
+    for (const spec of specs) {
+        if (spec.kind === 'opencode') {
+            try {
+                const { server, port } = await spawnOpencodeServer(nextPort);
+                nextPort = port + 1;
+                const client = createOpencodeClient({ baseUrl: server.url });
+                const backend = createOpencodeBackend({ client, baseUrl: server.url });
+                backends.push({ id: spec.id, backend });
+                opencodeServers.push({ id: spec.id, client, close: async () => { try {
+                        await server.close();
+                    }
+                    catch { /* noop */ } } });
+                log.info(`opencode backend ready @ ${server.url}`);
+            }
+            catch (err) {
+                log.error(`failed to start opencode backend (skipping): ${err.message}`);
+            }
+        }
+        else {
+            const connect = makeAcpConnect(parseAcpCommand(spec.command ?? 'kimi acp'));
+            acpConnects.push(connect);
+            const backend = createAcpBackend({
+                id: spec.id,
+                cwd: deps.cwd,
+                connect,
+                onPermission: deps.onAcpPermission,
+                store: deps.store,
+                discoverDirs: kimiWorkDirs,
+                discoverMcp: kimiMcp,
+            });
+            backends.push({ id: spec.id, backend });
+            log.info(`acp backend ready: ${spec.id} (${spec.command})`);
+        }
+    }
+    if (backends.length === 0)
+        throw new Error('host: no backends could be started');
+    return {
+        backends,
+        wire(relay, push, onOpencodePermission) {
+            const disposers = [];
+            // push.handleEvent is async — fire-and-forget, but never let a rejection
+            // escape to the global guard.
+            const safePush = (ev) => {
+                void Promise.resolve(push.handleEvent(ev)).catch((err) => log.warn('push.handleEvent failed', err));
+            };
+            // ACP backends: own their stream.
+            for (const { backend } of backends) {
+                if (!backend.onEvent)
+                    continue;
+                const off = backend.onEvent((e) => {
+                    relay.handleEvent(e).catch((err) => log.error('relay.handleEvent failed', err));
+                    if (e.kind === 'idle')
+                        safePush({ type: 'session.idle', properties: { sessionID: e.sessionId } });
+                    else if (e.kind === 'part' || e.kind === 'delta')
+                        safePush({ type: 'session.status', properties: { sessionID: e.sessionId, status: { type: 'busy' } } });
+                });
+                disposers.push(off);
+            }
+            // opencode backends: pull the global event SSE.
+            for (const { client } of opencodeServers) {
+                const handle = startGlobalEvents({
+                    client,
+                    onEvent: (ev) => {
+                        safePush(ev); // opencode events are already the shape push expects
+                        if (PERMISSION_TYPES.has(ev.type ?? '')) {
+                            onOpencodePermission(ev);
+                            return;
+                        }
+                        const ae = normalizeOpencodeEvent(ev);
+                        if (ae)
+                            relay.handleEvent(ae).catch((err) => log.error('relay.handleEvent failed', err));
+                    },
+                });
+                disposers.push(() => handle.stop());
+            }
+            return async () => {
+                for (const d of disposers) {
+                    try {
+                        d();
+                    }
+                    catch { /* noop */ }
+                }
+                // Kill spawned ACP agent children so they don't outlive the host.
+                for (const c of acpConnects) {
+                    try {
+                        c.dispose();
+                    }
+                    catch { /* noop */ }
+                }
+                for (const s of opencodeServers)
+                    await s.close();
+            };
+        },
+    };
+}
+//# sourceMappingURL=host-backends.js.map

package/dist/cli/host-backends.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-backends.js","sourceRoot":"","sources":["../../src/cli/host-backends.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAG7E,OAAO,EAAE,gBAAgB,EAA6B,MAAM,8BAA8B,CAAA;AAG1F,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAA;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAA;AACzE,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAA;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAA;AAEhE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,MAAM,GAAG,GAAG,YAAY,CAAC,eAAe,CAAC,CAAA;AAEzC;;;;;;GAMG;AACH,SAAS,YAAY;IACnB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,CAAA;QACxE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;QAC9B,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,qBAAqB,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACvF,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,IAAI,CAAC,CAAC;gBAAE,SAAQ;YACvC,IAAI,CAAC;gBAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAAC,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;oBAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,CAAC;QACvH,CAAC;QACD,OAAO,CAAC,GAAG,IAAI,CAAC,CAAA;IAClB,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAA;IAAC,CAAC;AACvB,CAAC;AAED,6FAA6F;AAC7F,SAAS,OAAO;IACd,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,CAAA;QACxE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CAElE,CAAA;QACD,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YAChE,IAAI;YACJ,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO;YAC/C,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY;SAClD,CAAC,CAAC,CAAA;IACL,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAA;IAAC,CAAC;AACvB,CAAC;AASD;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,cAAsB;IACpE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IACpE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,eAAe,CAAC,cAAc,CAAC,CAAA;QAC3C,OAAO,CAAC,EAAE,EAAE,EAAE,OAAO,GAAG,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAA;IAC7E,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAe,EAAE;QACpC,IAAI,CAAC,KAAK,UAAU;YAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,CAAA;QACjE,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QACzB,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;YACd,MAAM,GAAG,GAAG,eAAe,CAAC,CAAC,CAAC,CAAA;YAC9B,OAAO,EAAE,EAAE,EAAE,OAAO,GAAG,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,CAAA;QAC9D,CAAC;QACD,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QACnC,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QACtC,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAA;IACnF,CAAC,CAAC,CAAA;AACJ,CAAC;AAyBD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,kBAAkB,EAAE,oBAAoB,EAAE,oBAAoB,CAAC,CAAC,CAAA;AAElG,4EAA4E;AAC5E,MAAM,mBAAmB,GAAG,EAAE,CAAA;AAE9B;;;;;GAKG;AACH,KAAK,UAAU,mBAAmB,CAAC,SAAiB;IAClD,IAAI,OAAgB,CAAA;IACpB,KAAK,IAAI,IAAI,GAAG,SAAS,EAAE,IAAI,GAAG,SAAS,GAAG,mBAAmB,EAAE,IAAI,EAAE,EAAE,CAAC;QAC1E,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAA;YAC1F,IAAI,IAAI,KAAK,SAAS;gBAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,SAAS,4CAA4C,IAAI,UAAU,CAAC,CAAA;YAC7G,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,GAAG,GAAG,CAAA;YACb,GAAG,CAAC,IAAI,CAAC,kCAAkC,IAAI,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAA;QAC/E,CAAC;IACH,CAAC;IACD,MAAM,OAAO,CAAA;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAoB,EAAE,IAA2B;IACvF,MAAM,QAAQ,GAAwB,EAAE,CAAA;IACxC,MAAM,eAAe,GAAmE,EAAE,CAAA;IAC1F,4EAA4E;IAC5E,MAAM,WAAW,GAA+B,EAAE,CAAA;IAClD,IAAI,QAAQ,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAA;IAExC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,mBAAmB,CAAC,QAAQ,CAAC,CAAA;gBAC5D,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAA;gBACnB,MAAM,MAAM,GAAG,oBAAoB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAA;gBAC5D,MAAM,OAAO,GAAG,qBAAqB,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAA;gBACtE,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;gBACvC,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,GAAG,IAAI,CAAC;wBAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;gBACvH,GAAG,CAAC,IAAI,CAAC,4BAA4B,MAAM,CAAC,GAAG,EAAE,CAAC,CAAA;YACpD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,KAAK,CAAC,gDAAiD,GAAa,CAAC,OAAO,EAAE,CAAC,CAAA;YACrF,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,cAAc,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,IAAI,UAAU,CAAC,CAAC,CAAA;YAC3E,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YACzB,MAAM,OAAO,GAAG,gBAAgB,CAAC;gBAC/B,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,OAAO;gBACP,YAAY,EAAE,IAAI,CAAC,eAAe;gBAClC,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,YAAY,EAAE,YAAY;gBAC1B,WAAW,EAAE,OAAO;aACrB,CAAC,CAAA;YACF,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;YACvC,GAAG,CAAC,IAAI,CAAC,sBAAsB,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,OAAO,GAAG,CAAC,CAAA;QAC7D,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;IAEhF,OAAO;QACL,QAAQ;QACR,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,oBAAoB;YACpC,MAAM,SAAS,GAAsB,EAAE,CAAA;YAEvC,yEAAyE;YACzE,8BAA8B;YAC9B,MAAM,QAAQ,GAAG,CAAC,EAAW,EAAE,EAAE;gBAC/B,KAAK,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CACvD,GAAG,CAAC,IAAI,CAAC,yBAAyB,EAAE,GAAY,CAAC,CAClD,CAAA;YACH,CAAC,CAAA;YAED,kCAAkC;YAClC,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,QAAQ,EAAE,CAAC;gBACnC,IAAI,CAAC,OAAO,CAAC,OAAO;oBAAE,SAAQ;gBAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;oBAChC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,0BAA0B,EAAE,GAAY,CAAC,CAAC,CAAA;oBACxF,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;wBAAE,QAAQ,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;yBAC5F,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;wBAAE,QAAQ,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAA;gBAC1J,CAAC,CAAC,CAAA;gBACF,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACrB,CAAC;YAED,gDAAgD;YAChD,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC;gBACzC,MAAM,MAAM,GAAG,iBAAiB,CAAC;oBAC/B,MAAM;oBACN,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE;wBACd,QAAQ,CAAC,EAAE,CAAC,CAAA,CAAC,qDAAqD;wBAClE,IAAI,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;4BAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC;4BAAC,OAAM;wBAAC,CAAC;wBAC7E,MAAM,EAAE,GAAG,sBAAsB,CAAC,EAAE,CAAC,CAAA;wBACrC,IAAI,EAAE;4BAAE,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,0BAA0B,EAAE,GAAY,CAAC,CAAC,CAAA;oBACnG,CAAC;iBACF,CAAC,CAAA;gBACF,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;YACrC,CAAC;YAED,OAAO,KAAK,IAAI,EAAE;gBAChB,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;oBAAC,IAAI,CAAC;wBAAC,CAAC,EAAE,CAAA;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;gBAAC,CAAC;gBAC/D,kEAAkE;gBAClE,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;oBAAC,IAAI,CAAC;wBAAC,CAAC,CAAC,OAAO,EAAE,CAAA;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;gBAAC,CAAC;gBACzE,KAAK,MAAM,CAAC,IAAI,eAAe;oBAAE,MAAM,CAAC,CAAC,KAAK,EAAE,CAAA;YAClD,CAAC,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC"}