@borgee/agents-host 0.2.74 → 0.2.94

package/dist/vendor/claude-agent-acp/dist/utils.d.ts

@@ -0,0 +1,16 @@
+import { Readable, Writable } from "node:stream";
+import { WritableStream, ReadableStream } from "node:stream/web";
+import { Logger } from "./acp-agent.js";
+export declare class Pushable<T> implements AsyncIterable<T> {
+    private queue;
+    private resolvers;
+    private done;
+    push(item: T): void;
+    end(): void;
+    [Symbol.asyncIterator](): AsyncIterator<T>;
+}
+export declare function nodeToWebWritable(nodeStream: Writable): WritableStream<Uint8Array>;
+export declare function nodeToWebReadable(nodeStream: Readable): ReadableStream<Uint8Array>;
+export declare function unreachable(value: never, logger?: Logger): void;
+export declare function sleep(time: number): Promise<void>;
+//# sourceMappingURL=utils.d.ts.map

package/dist/vendor/claude-agent-acp/dist/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAGxC,qBAAa,QAAQ,CAAC,CAAC,CAAE,YAAW,aAAa,CAAC,CAAC,CAAC;IAClD,OAAO,CAAC,KAAK,CAAW;IACxB,OAAO,CAAC,SAAS,CAA8C;IAC/D,OAAO,CAAC,IAAI,CAAS;IAErB,IAAI,CAAC,IAAI,EAAE,CAAC;IASZ,GAAG;IAQH,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC;CAgB3C;AAGD,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,QAAQ,GAAG,cAAc,CAAC,UAAU,CAAC,CAclF;AAED,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,QAAQ,GAAG,cAAc,CAAC,UAAU,CAAC,CAUlF;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,GAAE,MAAgB,QAQjE;AAED,wBAAgB,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEjD"}

package/dist/vendor/claude-agent-acp/dist/utils.js

@@ -0,0 +1,81 @@
+// A pushable async iterable: allows you to push items and consume them with for-await.
+import { WritableStream, ReadableStream } from "node:stream/web";
+// Useful for bridging push-based and async-iterator-based code.
+export class Pushable {
+    queue = [];
+    resolvers = [];
+    done = false;
+    push(item) {
+        if (this.resolvers.length > 0) {
+            const resolve = this.resolvers.shift();
+            resolve({ value: item, done: false });
+        }
+        else {
+            this.queue.push(item);
+        }
+    }
+    end() {
+        this.done = true;
+        while (this.resolvers.length > 0) {
+            const resolve = this.resolvers.shift();
+            resolve({ value: undefined, done: true });
+        }
+    }
+    [Symbol.asyncIterator]() {
+        return {
+            next: () => {
+                if (this.queue.length > 0) {
+                    const value = this.queue.shift();
+                    return Promise.resolve({ value, done: false });
+                }
+                if (this.done) {
+                    return Promise.resolve({ value: undefined, done: true });
+                }
+                return new Promise((resolve) => {
+                    this.resolvers.push(resolve);
+                });
+            },
+        };
+    }
+}
+// Helper to convert Node.js streams to Web Streams
+export function nodeToWebWritable(nodeStream) {
+    return new WritableStream({
+        write(chunk) {
+            return new Promise((resolve, reject) => {
+                nodeStream.write(Buffer.from(chunk), (err) => {
+                    if (err) {
+                        reject(err);
+                    }
+                    else {
+                        resolve();
+                    }
+                });
+            });
+        },
+    });
+}
+export function nodeToWebReadable(nodeStream) {
+    return new ReadableStream({
+        start(controller) {
+            nodeStream.on("data", (chunk) => {
+                controller.enqueue(new Uint8Array(chunk));
+            });
+            nodeStream.on("end", () => controller.close());
+            nodeStream.on("error", (err) => controller.error(err));
+        },
+    });
+}
+export function unreachable(value, logger = console) {
+    let valueAsString;
+    try {
+        valueAsString = JSON.stringify(value);
+    }
+    catch {
+        valueAsString = value;
+    }
+    logger.error(`Unexpected case: ${valueAsString}`);
+}
+export function sleep(time) {
+    return new Promise((resolve) => setTimeout(resolve, time));
+}

package/dist/vendor/claude-agent-acp/package.json

@@ -0,0 +1,85 @@
+{
+  "name": "@agentclientprotocol/claude-agent-acp",
+  "publishConfig": {
+    "access": "public"
+  },
+  "version": "0.64.0",
+  "description": "An ACP-compatible coding agent powered by the Claude Agent SDK (TypeScript)",
+  "main": "dist/lib.js",
+  "types": "dist/lib.d.ts",
+  "bin": {
+    "claude-agent-acp": "dist/index.js"
+  },
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist/lib.d.ts",
+      "import": "./dist/lib.js"
+    },
+    "./*": "./*"
+  },
+  "files": [
+    "dist/",
+    "!dist/tests/",
+    "README.md",
+    "LICENSE",
+    "package.json"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "start": "node dist/index.js",
+    "dev": "npm run build && npm run start",
+    "lint": "eslint src --ext .ts",
+    "lint:fix": "eslint src --ext .ts --fix",
+    "format": "prettier --write .",
+    "format:check": "prettier --check .",
+    "check": "npm run lint && npm run format:check",
+    "test": "vitest",
+    "test:integration": "RUN_INTEGRATION_TESTS=true vitest run",
+    "test:run": "vitest run",
+    "test:coverage": "vitest run --coverage",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [
+    "claude",
+    "acp",
+    "agent",
+    "anthropic",
+    "typescript",
+    "sdk",
+    "code"
+  ],
+  "homepage": "https://github.com/agentclientprotocol/claude-agent-acp#readme",
+  "bugs": {
+    "url": "https://github.com/agentclientprotocol/claude-agent-acp/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/agentclientprotocol/claude-agent-acp.git"
+  },
+  "author": "Zed Industries",
+  "license": "Apache-2.0",
+  "engines": {
+    "node": ">=22"
+  },
+  "dependencies": {
+    "@agentclientprotocol/sdk": "1.3.0",
+    "@anthropic-ai/claude-agent-sdk": "0.3.220",
+    "zod": "^3.25.0 || ^4.0.0"
+  },
+  "devDependencies": {
+    "@anthropic-ai/sdk": "0.115.0",
+    "@eslint/js": "10.0.1",
+    "@tsconfig/node22": "22.0.5",
+    "@types/node": "26.1.2",
+    "@typescript-eslint/eslint-plugin": "8.65.0",
+    "@typescript-eslint/parser": "8.65.0",
+    "eslint": "10.8.0",
+    "eslint-config-prettier": "10.1.8",
+    "globals": "17.8.0",
+    "prettier": "3.9.6",
+    "ts-node": "10.9.2",
+    "typescript": "6.0.3",
+    "vitest": "4.1.10"
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@borgee/agents-host",
-  "version": "0.2.74",
+  "version": "0.2.94",
   "private": false,
   "publishConfig": {
     "access": "public"
@@ -22,35 +22,40 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@agentclientprotocol/claude-agent-acp": "0.64.0",
     "@agentclientprotocol/codex-acp": "1.1.7",
     "@agentclientprotocol/sdk": "1.3.0",
+    "@anthropic-ai/claude-agent-sdk": "0.3.220",
+    "@github/copilot-sdk": "1.0.11",
     "cross-spawn": "^7.0.6",
-    "yaml": "^2.8.1"
+    "yaml": "^2.8.1",
+    "zod": "4.4.3"
   },
   "devDependencies": {
+    "@agentclientprotocol/claude-agent-acp": "0.64.0",
     "@types/cross-spawn": "^6.0.6",
     "@types/node": "^24.3.0",
     "esbuild": "^0.28.1",
     "tsx": "^4.20.5",
     "typescript": "^5.9.3",
     "vitest": "^4.1.5",
-    "@borgee/plugin-sdk": "0.12.5"
+    "@borgee/plugin-sdk": "0.14.1"
   },
   "scripts": {
-    "predev": "pnpm --filter @borgee/plugin-sdk build",
+    "predev": "pnpm --filter @borgee/plugin-sdk build && pnpm run vendor:claude",
     "dev": "tsx src/index.ts",
-    "precli": "pnpm --filter @borgee/plugin-sdk build",
+    "precli": "pnpm --filter @borgee/plugin-sdk build && pnpm run vendor:claude",
     "cli": "tsx src/cli.ts",
     "prestart": "pnpm --filter @borgee/plugin-sdk build",
     "start": "node dist/index.js",
     "prebuild": "pnpm --filter @borgee/plugin-sdk build",
-    "build": "tsc && node scripts/bundle-plugin-sdk.mjs",
+    "build": "tsc && node scripts/bundle-plugin-sdk.mjs && node scripts/vendor-claude-acp.mjs",
+    "test:package": "node --test --test-timeout=10000 scripts/packed-package-descriptor.test.mjs && pnpm run build && node scripts/test-packed-claude-lifecycle.mjs",
     "typecheck": "tsc --noEmit",
-    "pretest": "pnpm --filter @borgee/plugin-sdk build",
+    "pretest": "pnpm --filter @borgee/plugin-sdk build && pnpm run vendor:claude",
     "test": "vitest run --testTimeout=10000",
-    "pretest:e2e": "pnpm --filter @borgee/plugin-sdk build",
+    "pretest:e2e": "pnpm --filter @borgee/plugin-sdk build && pnpm run vendor:claude",
     "test:e2e": "vitest run --config vitest.e2e.config.ts --testTimeout=120000",
-    "pretypecheck": "pnpm --filter @borgee/plugin-sdk build"
+    "pretypecheck": "pnpm --filter @borgee/plugin-sdk build",
+    "vendor:claude": "node scripts/vendor-claude-acp.mjs"
   }
 }

package/skills/borgee-agent/references/task-properties.md

@@ -21,8 +21,8 @@ The key set is closed; writing an unregistered key is rejected with `unknown_pro
 | --- | --- |
 | `link.pr` | The pull request that implements this task. Set it as soon as the PR exists, not at the end. |
 | `link.issue` | The issue or ticket the task originates from. |
-| `execution.local_directory` | The explicit local directory a human selected as this task thread's execution target. New tasks default it from the immediately previous task thread in the same channel: if that previous task carried a value, the new task inherits it; if the previous task left it unset, the new task also starts unset. Hosted agents can read it, but the generic agent task-property rail must not write it. Humans set it through the existing user rail. The extra single-human-user guard applies when a task thread is about to switch into somebody's own local workspace/project directory, not as a blanket rule on every property write. A separate agents-host local policy switch governs whether a hosted agent may enter an independent workspace for a task thread that originated from another agent's task. |
-| `workspace.mode` | The host-managed scratch-workspace isolation hint for task threads. `inherit` keeps the scratch workspace on the shared host-managed path, while `isolated` reserves the task's own host-managed scratch workspace shape. Deleting the key returns to the default `inherit` behavior. |
+| `execution.local_directory` | The explicit local directory a human selected as this task thread's execution target. New tasks default it from the immediately previous task thread in the same channel: if that previous task carried a value, the new task inherits it; if the previous task left it unset, the new task also starts unset. Hosted agents can read it, but the generic agent task-property rail must not write it. Humans set it through the existing user rail. The extra single-human-user guard applies when a task thread is about to switch into somebody's own local project directory, not as a blanket rule on every property write. A separate agents-host local policy switch governs whether a hosted agent may enter an independent working folder for a task thread that originated from another agent's task. |
+| `workspace.mode` | The host-managed scratch working-folder isolation hint for task threads. `inherit` keeps the scratch working folder on the shared host-managed path, while `isolated` reserves the task's own host-managed scratch working folder shape. Deleting the key returns to the default `inherit` behavior. |
 | `agent.session_id` | Do not write this. It is registered, so a write is accepted and lands — overwriting the host's record of which provider session worked this task. The host writes it itself after each turn. |
 
 ## One key per call
@@ -31,4 +31,4 @@ Each call writes exactly one key, and that is what makes it safe to write a prop
 
 ## Value
 
-A value is a plain string of at most 8 KiB; a longer one is rejected with `property_value_too_long`. It is a reference — a URL, an identifier — never a document. `execution.local_directory` must be a non-empty absolute path string. Before a human lets a task thread switch into their own local workspace/project directory, first verify that the task's parent channel has exactly one human user; otherwise keep the thread discussion-only. If a hosted agent is trying to enter an independent workspace for a task thread that originated from another agent's task, this agents-host's local handoff policy must also allow it. Some registered keys are closed enums: `workspace.mode` accepts only `inherit` or `isolated`.
+A value is a plain string of at most 8 KiB; a longer one is rejected with `property_value_too_long`. It is a reference — a URL, an identifier — never a document. `execution.local_directory` must be a non-empty absolute path string. Before a human lets a task thread switch into their own local project directory, first verify that the task's parent channel has exactly one human user; otherwise keep the thread discussion-only. If a hosted agent is trying to enter an independent working folder for a task thread that originated from another agent's task, this agents-host's local handoff policy must also allow it. Some registered keys are closed enums: `workspace.mode` accepts only `inherit` or `isolated`.

package/skills/borgee-agent/scripts/borgee-agent.mjs

@@ -338,7 +338,7 @@ function validateCommand(parsed) {
 }
 
 // The credential path is used exactly as handed over: no walk-up, no glob, no environment lookup.
-// Task workspaces live inside the git repository and are not gitignored, so any search would
+// Task working folders live inside the git repository and are not gitignored, so any search would
 // traverse attacker-influenceable directories where a planted file could redirect the gateway base
 // URL or point at another channel's credentials.
 async function readGatewayCredential(gatewayCredentialPath) {

package/skills/borgee-agent/scripts/borgee-agent.py

@@ -300,7 +300,7 @@ def validate_command(parsed: dict[str, object]) -> None:
 
 
 # The credential path is used exactly as handed over: no walk-up, no glob, no environment lookup.
-# Task workspaces live inside the git repository and are not gitignored, so any search would
+# Task working folders live inside the git repository and are not gitignored, so any search would
 # traverse attacker-influenceable directories where a planted file could redirect the gateway base
 # URL or point at another channel's credentials.
 def read_gateway_credential(gateway_credential_path: str) -> dict[str, str]:

package/dist/context/resolved-workspace.d.ts

@@ -1,3 +0,0 @@
-import type { PreparedPromptContext, ProviderKind } from '../types.js';
-export declare function buildResolvedWorkspaceGuidanceLines(context: PreparedPromptContext | undefined, provider?: ProviderKind): string[];
-export declare function isDiscussionOnlyResolvedWorkspace(context: PreparedPromptContext | undefined): boolean;

package/dist/context/resolved-workspace.js

@@ -1,106 +0,0 @@
-function buildWorkspaceRootLine(context) {
-    const resolvedWorkspace = context.resolvedWorkspace;
-    if (!resolvedWorkspace) {
-        return undefined;
-    }
-    if (resolvedWorkspace.authority === 'task-execution-target') {
-        return `Explicit execution local directory for this task thread: ${resolvedWorkspace.rootPath}.`;
-    }
-    if (resolvedWorkspace.authority === 'task-thread-scratch') {
-        return `Discussion-only scratch workspace for this task thread: ${resolvedWorkspace.rootPath}.`;
-    }
-    if (context.taskAssignmentContext?.active === true) {
-        return `Writable workspace root inherited from this task thread's channel: ${resolvedWorkspace.rootPath}.`;
-    }
-    return `Writable workspace root for this channel: ${resolvedWorkspace.rootPath}.`;
-}
-function buildWorkspaceModeLine(context) {
-    if (context.taskAssignmentContext?.active !== true || !context.resolvedWorkspace) {
-        return undefined;
-    }
-    if (context.resolvedWorkspace.authority === 'task-execution-target') {
-        return 'This task thread has a valid explicit execution.local_directory target, so execution is bound to that exact existing local directory.';
-    }
-    if (context.resolvedWorkspace.authority === 'task-thread-scratch') {
-        return context.resolvedWorkspace.reason === 'cross-agent-independent-workspace-disabled'
-            ? 'This task thread has an explicit execution.local_directory target, but this agents-host currently disables cross-agent independent-workspace handoff, so it is discussion-only.'
-            : 'This task thread has no valid explicit execution.local_directory target, so it is discussion-only.';
-    }
-    return 'This task thread inherits the channel workspace rather than using a task-isolated workspace.';
-}
-function buildWorkspaceLocalityLine(context) {
-    if (!context.resolvedWorkspace) {
-        return undefined;
-    }
-    if (context.resolvedWorkspace.authority === 'task-execution-target') {
-        return 'This is a human-selected existing local directory. The host validates it before use and never creates it.';
-    }
-    if (context.resolvedWorkspace.authority === 'task-thread-scratch') {
-        return 'This scratch workspace is host-managed only for discussion turns. It is not a bound project workspace and does not imply that any target repository is checked out there.';
-    }
-    if (context.taskAssignmentContext?.active === true) {
-        return 'This writable workspace is local to agents-host for this task thread because the task inherits its channel workspace. It does not imply that the target repository has already been checked out there.';
-    }
-    return 'This writable workspace is local to agents-host for this channel. It does not imply that the target repository has already been checked out there.';
-}
-function buildCopilotCwdLine(context) {
-    if (!context.resolvedWorkspace) {
-        return undefined;
-    }
-    if (context.resolvedWorkspace.authority === 'task-execution-target') {
-        return 'GitHub Copilot runs this turn with that exact local directory as its real cwd.';
-    }
-    if (context.resolvedWorkspace.authority === 'task-thread-scratch') {
-        return 'GitHub Copilot runs this turn with that host-managed scratch workspace as its real cwd.';
-    }
-    if (context.taskAssignmentContext?.active === true) {
-        return 'GitHub Copilot runs this turn with that inherited channel workspace as its real cwd.';
-    }
-    return 'GitHub Copilot runs this turn with that workspace as its real cwd.';
-}
-function buildDiscussionOnlyPermissionLine(context) {
-    if (context.resolvedWorkspace?.authority !== 'task-thread-scratch') {
-        return undefined;
-    }
-    return context.resolvedWorkspace.reason === 'cross-agent-independent-workspace-disabled'
-        ? 'Filesystem and shell tool permissions stay denied in this discussion-only task thread while this agents-host keeps cross-agent independent-workspace handoff disabled.'
-        : 'Filesystem and shell tool permissions stay denied in this discussion-only task thread until a human sets a valid execution.local_directory target.';
-}
-function buildProjectEntryPrecheckLine(context) {
-    if (context.taskAssignmentContext?.active !== true) {
-        return undefined;
-    }
-    if (context.resolvedWorkspace?.authority === 'task-execution-target') {
-        return 'Precheck before switching this task thread into your own local workspace or project directory: the task\'s parent channel must have exactly one human user. Cross-agent independent-workspace handoff is also governed by this agents-host\'s local policy switch.';
-    }
-    return 'Before a human switches this task thread into their own local workspace or project directory, verify that the task\'s parent channel has exactly one human user; otherwise keep the thread discussion-only. Cross-agent independent-workspace handoff is also governed by this agents-host\'s local policy switch.';
-}
-export function buildResolvedWorkspaceGuidanceLines(context, provider) {
-    if (!context?.resolvedWorkspace) {
-        return [];
-    }
-    const lines = [buildWorkspaceRootLine(context), buildWorkspaceModeLine(context)]
-        .filter((line) => line != null);
-    if (provider === 'copilot') {
-        const copilotCwdLine = buildCopilotCwdLine(context);
-        if (copilotCwdLine) {
-            lines.push(copilotCwdLine);
-        }
-    }
-    const localityLine = buildWorkspaceLocalityLine(context);
-    if (localityLine) {
-        lines.push(localityLine);
-    }
-    const permissionLine = buildDiscussionOnlyPermissionLine(context);
-    if (permissionLine) {
-        lines.push(permissionLine);
-    }
-    const precheckLine = buildProjectEntryPrecheckLine(context);
-    if (precheckLine) {
-        lines.push(precheckLine);
-    }
-    return lines;
-}
-export function isDiscussionOnlyResolvedWorkspace(context) {
-    return context?.resolvedWorkspace?.authority === 'task-thread-scratch';
-}