@chances-ai/wire 24.0.0

package/dist/rpc/acp/adapter.d.ts

@@ -0,0 +1,32 @@
+import type { Agent, AgentSideConnection, InitializeRequest, InitializeResponse, NewSessionRequest, NewSessionResponse, PromptRequest, PromptResponse, CancelNotification } from "@agentclientprotocol/sdk";
+import type { EngineHost } from "../driver.js";
+/** The slice of `AgentSideConnection` the adapter drives. */
+type AcpConnection = Pick<AgentSideConnection, "sessionUpdate" | "requestPermission" | "extNotification" | "signal">;
+export declare class AcpAgent implements Partial<Agent> {
+    private readonly host;
+    private readonly connection;
+    private session;
+    /** Serialises sessionUpdate sends so bus-event order is preserved on the
+     * wire (the bus handler is sync; sessionUpdate is async). */
+    private sendChain;
+    constructor(host: EngineHost, connection: AcpConnection);
+    initialize(params: InitializeRequest): Promise<InitializeResponse>;
+    authenticate(): Promise<Record<string, never>>;
+    newSession(_params: NewSessionRequest): Promise<NewSessionResponse>;
+    prompt(params: PromptRequest): Promise<PromptResponse>;
+    cancel(params: CancelNotification): Promise<void>;
+    /** Tear down the active session subscription (called on connection close). */
+    dispose(): void;
+    private makeResolver;
+}
+export interface RunAcpOptions {
+    host: EngineHost;
+    input: ReadableStream<Uint8Array>;
+    output: WritableStream<Uint8Array>;
+}
+/** Boot the ACP agent over the given Web streams and resolve when the
+ * connection closes. Returns 0 on clean close, 2 when the SDK peer is absent
+ * (the caller prints install guidance). */
+export declare function runAcp(opts: RunAcpOptions): Promise<number>;
+export {};
+//# sourceMappingURL=adapter.d.ts.map

package/dist/rpc/acp/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../../src/rpc/acp/adapter.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EACV,KAAK,EACL,mBAAmB,EAEnB,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,EACb,cAAc,EACd,kBAAkB,EAEnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAe,UAAU,EAAE,MAAM,cAAc,CAAC;AAI5D,6DAA6D;AAC7D,KAAK,aAAa,GAAG,IAAI,CAAC,mBAAmB,EAAE,eAAe,GAAG,mBAAmB,GAAG,iBAAiB,GAAG,QAAQ,CAAC,CAAC;AAgBrH,qBAAa,QAAS,YAAW,OAAO,CAAC,KAAK,CAAC;IAO3C,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAP7B,OAAO,CAAC,OAAO,CAA8B;IAC7C;iEAC6D;IAC7D,OAAO,CAAC,SAAS,CAAoC;gBAGlC,IAAI,EAAE,UAAU,EAChB,UAAU,EAAE,aAAa;IAGtC,UAAU,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAkBlE,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAI9C,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IA+BnE,MAAM,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;IAiCtD,MAAM,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvD,8EAA8E;IAC9E,OAAO,IAAI,IAAI;IAMf,OAAO,CAAC,YAAY;CA2BrB;AASD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,UAAU,CAAC;IACjB,KAAK,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;IAClC,MAAM,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;CACpC;AAED;;2CAE2C;AAC3C,wBAAsB,MAAM,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAmBjE"}

package/dist/rpc/acp/adapter.js

@@ -0,0 +1,185 @@
+// ACP (Zed Agent Client Protocol) adapter — the SECOND transport over the
+// same `EngineHost` seam (codex C1/C11). Implements the ACP `Agent` interface
+// via `@agentclientprotocol/sdk`'s `AgentSideConnection` over `ndJsonStream`.
+// One active session per process (Round-1 Q3): a second `newSession` before
+// the first closes is refused. Permission asks route to ACP
+// `connection.requestPermission` and collapse to the engine's
+// `PermissionResolver` (allow_once → no-cache, allow_always → cache).
+//
+// `import type` for all SDK types (erased at compile → safe when the optional
+// peer is absent); runtime classes/values come from the loaded module.
+import { CancellationTokenSource, createId } from "@chances-ai/runtime";
+import { chancesEventMeta, mapEventToAcp } from "./event-map.js";
+import { loadAcpSdk } from "./load-sdk.js";
+const PERMISSION_OPTIONS = [
+    { optionId: "allow_once", kind: "allow_once", name: "Allow once" },
+    { optionId: "allow_always", kind: "allow_always", name: "Allow always" },
+    { optionId: "reject_once", kind: "reject_once", name: "Reject" },
+    { optionId: "reject_always", kind: "reject_always", name: "Reject always" },
+];
+export class AcpAgent {
+    host;
+    connection;
+    session = null;
+    /** Serialises sessionUpdate sends so bus-event order is preserved on the
+     * wire (the bus handler is sync; sessionUpdate is async). */
+    sendChain = Promise.resolve();
+    constructor(host, connection) {
+        this.host = host;
+        this.connection = connection;
+    }
+    async initialize(params) {
+        return {
+            // Echo the client's protocol version (the SDK validates compatibility).
+            protocolVersion: params.protocolVersion,
+            // Q3: advertise ONLY what we actually support. No loadSession / fork /
+            // list / resume until real multi-session ownership exists.
+            agentCapabilities: { loadSession: false },
+            // (M3) Same fidelity advertisement as the relay's `AcpEngineDriver` so a
+            // chances-aware ACP client reads `_meta.chances`; a plain client (Zed)
+            // ignores it. `reconnect: false` — stdio is point-to-point, no replay ring.
+            _meta: {
+                chances: {
+                    capabilities: { reconnect: false, toolChunks: true, fidelity: ["usage", "chunk", "compaction", "subagent", "reset"] },
+                },
+            },
+        };
+    }
+    async authenticate() {
+        return {};
+    }
+    async newSession(_params) {
+        if (this.session) {
+            throw new Error("a session is already active (one session per process in v1)");
+        }
+        // The resolver reads `this.session` lazily — it's only invoked during a
+        // later `prompt`, by which point `this.session` is set (no build cycle).
+        const built = this.host.build(this.makeResolver());
+        const unsub = built.bus.onAny((e) => {
+            const sid = this.session?.id;
+            if (!sid)
+                return;
+            // chances-only fidelity → a `_chances/unstable/event` extension notification
+            // (the SAME shared helper the relay driver uses, so the two ACP transports
+            // don't drift). A plain ACP client ignores the unknown method.
+            const chances = chancesEventMeta(e);
+            if (chances) {
+                this.sendChain = this.sendChain.then(() => this.connection.extNotification("_chances/unstable/event", { sessionId: sid, _meta: { chances } }).catch(() => { }));
+                return;
+            }
+            // Zed (stdio) wants the live-PTY stream too → toolChunks on.
+            for (const update of mapEventToAcp(e, { toolChunks: true })) {
+                this.sendChain = this.sendChain.then(() => this.connection.sessionUpdate({ sessionId: sid, update }).catch(() => { }));
+            }
+        });
+        this.session = { id: built.sessionId, built, cts: null, unsub };
+        return { sessionId: built.sessionId };
+    }
+    async prompt(params) {
+        const sess = this.session;
+        if (!sess || sess.id !== params.sessionId) {
+            throw new Error(`unknown session: ${params.sessionId}`);
+        }
+        // (Round-2 S2) One turn at a time per session: a second concurrent
+        // `session/prompt` would run the same engine twice and `cancel()` would
+        // only target the most recently assigned token. Reject the overlap.
+        if (sess.cts) {
+            throw new Error("a prompt is already running for this session");
+        }
+        const text = textFromContent(params.prompt);
+        const cts = new CancellationTokenSource();
+        sess.cts = cts;
+        let result = { text: "", inputTokens: 0, outputTokens: 0, costUsd: 0 };
+        try {
+            result = await sess.built.runTurn(text, cts.token);
+        }
+        catch (err) {
+            if (cts.token.isCancelled)
+                return { stopReason: "cancelled" };
+            throw err; // surfaces as a JSON-RPC error response to the client
+        }
+        finally {
+            sess.cts = null;
+        }
+        // Fold token usage into the response (parity with the relay driver — codex
+        // M3 SHOULD); cost rides `_meta.chances`. A plain ACP client reads the
+        // standard `usage` fields and ignores `_meta`.
+        return {
+            stopReason: "end_turn",
+            usage: { inputTokens: result.inputTokens, outputTokens: result.outputTokens, totalTokens: result.inputTokens + result.outputTokens },
+            _meta: { chances: { costUsd: result.costUsd } },
+        };
+    }
+    async cancel(params) {
+        if (this.session?.id === params.sessionId)
+            this.session.cts?.cancel();
+    }
+    /** Tear down the active session subscription (called on connection close). */
+    dispose() {
+        this.session?.cts?.cancel();
+        this.session?.unsub();
+        this.session = null;
+    }
+    makeResolver() {
+        return async (req) => {
+            // (5.10b) Narrow the union before reading authorization-only fields
+            // (`summary`/`args`). No remote question UI yet — a question declines.
+            if (req.kind === "question")
+                return { kind: "question", answers: {}, declined: true };
+            const sid = this.session?.id;
+            if (!sid)
+                return { allow: false };
+            const res = await this.connection.requestPermission({
+                sessionId: sid,
+                toolCall: {
+                    toolCallId: req.callId ?? createId("tool"),
+                    title: req.summary,
+                    rawInput: (req.args ?? {}),
+                },
+                options: PERMISSION_OPTIONS,
+            });
+            if (res.outcome.outcome !== "selected")
+                return { allow: false }; // cancelled
+            switch (res.outcome.optionId) {
+                case "allow_once":
+                    return { allow: true, remember: false };
+                case "allow_always":
+                    return { allow: true, remember: true };
+                default:
+                    return { allow: false }; // reject_once / reject_always
+            }
+        };
+    }
+}
+function textFromContent(blocks) {
+    return blocks
+        .map((b) => (b.type === "text" ? b.text : ""))
+        .filter((s) => s.length > 0)
+        .join("\n");
+}
+/** Boot the ACP agent over the given Web streams and resolve when the
+ * connection closes. Returns 0 on clean close, 2 when the SDK peer is absent
+ * (the caller prints install guidance). */
+export async function runAcp(opts) {
+    const sdk = await loadAcpSdk();
+    if (!sdk)
+        return 2;
+    const stream = sdk.ndJsonStream(opts.output, opts.input);
+    // Holder dodges TS narrowing the callback-assigned local to `never`. The
+    // SDK invokes `toAgent` synchronously inside the ctor, so it's set below.
+    const holder = {};
+    const connection = new sdk.AgentSideConnection((conn) => {
+        holder.agent = new AcpAgent(opts.host, conn);
+        return holder.agent;
+    }, stream);
+    // Resolve when the peer closes the connection.
+    await new Promise((resolve) => {
+        if (connection.signal.aborted)
+            return resolve();
+        connection.signal.addEventListener("abort", () => resolve(), { once: true });
+    });
+    holder.agent?.dispose();
+    await opts.host.dispose();
+    return 0;
+}
+//# sourceMappingURL=adapter.js.map

package/dist/rpc/acp/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../../src/rpc/acp/adapter.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,8EAA8E;AAC9E,8EAA8E;AAC9E,4EAA4E;AAC5E,4DAA4D;AAC5D,8DAA8D;AAC9D,sEAAsE;AACtE,EAAE;AACF,8EAA8E;AAC9E,uEAAuE;AAEvE,OAAO,EAAE,uBAAuB,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAiBxE,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAK3C,MAAM,kBAAkB,GAAuB;IAC7C,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE;IAClE,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,EAAE;IACxE,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE;IAChE,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,eAAe,EAAE;CAC5E,CAAC;AASF,MAAM,OAAO,QAAQ;IAOA;IACA;IAPX,OAAO,GAAyB,IAAI,CAAC;IAC7C;iEAC6D;IACrD,SAAS,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAErD,YACmB,IAAgB,EAChB,UAAyB;QADzB,SAAI,GAAJ,IAAI,CAAY;QAChB,eAAU,GAAV,UAAU,CAAe;IACzC,CAAC;IAEJ,KAAK,CAAC,UAAU,CAAC,MAAyB;QACxC,OAAO;YACL,wEAAwE;YACxE,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,uEAAuE;YACvE,2DAA2D;YAC3D,iBAAiB,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE;YACzC,yEAAyE;YACzE,uEAAuE;YACvE,4EAA4E;YAC5E,KAAK,EAAE;gBACL,OAAO,EAAE;oBACP,YAAY,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE;iBACtH;aACF;SACoB,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAA0B;QACzC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACjF,CAAC;QACD,wEAAwE;QACxE,yEAAyE;QACzE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;YAClC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;YAC7B,IAAI,CAAC,GAAG;gBAAE,OAAO;YACjB,6EAA6E;YAC7E,2EAA2E;YAC3E,+DAA+D;YAC/D,MAAM,OAAO,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;YACpC,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,CACxC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,yBAAyB,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CACnH,CAAC;gBACF,OAAO;YACT,CAAC;YACD,6DAA6D;YAC7D,KAAK,MAAM,MAAM,IAAI,aAAa,CAAC,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC5D,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,CACxC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAC1E,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QAChE,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAqB;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC;QAC1B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,oBAAoB,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,mEAAmE;QACnE,wEAAwE;QACxE,oEAAoE;QACpE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,IAAI,uBAAuB,EAAE,CAAC;QAC1C,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,MAAM,GAAgB,EAAE,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QACpF,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW;gBAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;YAC9D,MAAM,GAAG,CAAC,CAAC,sDAAsD;QACnE,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC;QAClB,CAAC;QACD,2EAA2E;QAC3E,uEAAuE;QACvE,+CAA+C;QAC/C,OAAO;YACL,UAAU,EAAE,UAAU;YACtB,KAAK,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,YAAY,EAAE;YACpI,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE;SAC9B,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAA0B;QACrC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,MAAM,CAAC,SAAS;YAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC;IACxE,CAAC;IAED,8EAA8E;IAC9E,OAAO;QACL,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;IACtB,CAAC;IAEO,YAAY;QAClB,OAAO,KAAK,EAAE,GAAG,EAA+B,EAAE;YAChD,oEAAoE;YACpE,uEAAuE;YACvE,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU;gBAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YACtF,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;YAC7B,IAAI,CAAC,GAAG;gBAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;YAClC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC;gBAClD,SAAS,EAAE,GAAG;gBACd,QAAQ,EAAE;oBACR,UAAU,EAAE,GAAG,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC;oBAC1C,KAAK,EAAE,GAAG,CAAC,OAAO;oBAClB,QAAQ,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA4B;iBACtD;gBACD,OAAO,EAAE,kBAAkB;aAC5B,CAAC,CAAC;YACH,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,UAAU;gBAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,YAAY;YAC7E,QAAQ,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBAC7B,KAAK,YAAY;oBACf,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;gBAC1C,KAAK,cAAc;oBACjB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;gBACzC;oBACE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,8BAA8B;YAC3D,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;CACF;AAED,SAAS,eAAe,CAAC,MAAsB;IAC7C,OAAO,MAAM;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SAC7C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;SAC3B,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAQD;;2CAE2C;AAC3C,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAmB;IAC9C,MAAM,GAAG,GAAG,MAAM,UAAU,EAAE,CAAC;IAC/B,IAAI,CAAC,GAAG;QAAE,OAAO,CAAC,CAAC;IACnB,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACzD,yEAAyE;IACzE,0EAA0E;IAC1E,MAAM,MAAM,GAAyB,EAAE,CAAC;IACxC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,mBAAmB,CAAC,CAAC,IAAI,EAAE,EAAE;QACtD,MAAM,CAAC,KAAK,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7C,OAAO,MAAM,CAAC,KAAyB,CAAC;IAC1C,CAAC,EAAE,MAAM,CAAC,CAAC;IACX,+CAA+C;IAC/C,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,OAAO,EAAE,CAAC;QAChD,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;IACxB,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;IAC1B,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/rpc/acp/engine-driver.d.ts

@@ -0,0 +1,128 @@
+/**
+ * (v20 M3 / docs/6.4a §3) `AcpEngineDriver` — the ACP twin of `RpcServer`. It
+ * projects the SAME `EngineHost` seam onto an ACP (Agent Client Protocol) wire:
+ * JSON-RPC 2.0 + session semantics. Structurally identical to `RpcServer`
+ * (`run(lines: AsyncIterable<string>)` over an injected `ByteSink`), so the M2
+ * `SessionHost`/`ReplayHub` fan-out + seq/replay carry over with a one-line
+ * swap — but it speaks ACP, not the bespoke `chances-rpc` frames.
+ *
+ * **Self-rolled framing, NOT the ACP SDK's connection runtime** (user decision
+ * D1, docs/6.4a §1): the SDK's `AgentSideConnection` is point-to-point (it owns
+ * the JSON-RPC id correlation for ONE socket), which collides with M2's fan-out
+ * (one session, many sockets, any may answer a permission). So we roll the
+ * JSON-RPC framing ourselves on top of the fan-out, using the SDK only for its
+ * **types** (`import type` → erased; the driver compiles with or without the
+ * optional peer, exactly like the stdio adapter; `smoke-compile-rpc` gates both).
+ *
+ * Correlation is by **id pass-through**, no mapping table:
+ *  - `session/prompt` request id → remembered as the active turn; the terminal
+ *    `session/prompt` RESPONSE echoes it with `{ stopReason, usage }` (the
+ *    chances `result` frame folded into the ACP response; the immediate `prompt`
+ *    ack chances-rpc sends has no ACP equivalent and is simply not emitted).
+ *  - `session/request_permission` is an agent→client REQUEST whose id we mint
+ *    (`perm_*`); ANY attached socket may answer it (fan-out — the relay routes
+ *    the response back here), and we dedup by id. **Fail-closed**: a cancelled/
+ *    unknown outcome, or an errored response, denies (matches goose + v16).
+ *  - chances-only fidelity (compaction/subagent/error) rides a
+ *    `_chances/unstable/event` notification carrying `_meta.chances` — a plain
+ *    ACP client ignores the unknown method; ours reads it.
+ *
+ * Socket-free + timer-free at the seam: tests drive `run()` with a fake
+ * `EngineHost` + scripted ACP lines and assert the emitted ACP message sequence.
+ */
+import { type ByteSink } from "../writer.js";
+import type { EngineHost } from "../driver.js";
+/** ACP protocol version we speak (SDK `PROTOCOL_VERSION` = 1). */
+export declare const ACP_PROTOCOL_VERSION: 1;
+export interface AcpEngineDriverOptions {
+    host: EngineHost;
+    /** Outbound sink (the M2 `ReplayHub`, or a recorder in tests). */
+    sink: ByteSink;
+    agent: {
+        name: string;
+        version: string;
+    };
+    /** Auto-approve every tool permission (trusted automation). Default false. */
+    autoApprove?: boolean;
+    /** stderr-style sink for routed `log` events + the writer's high-water warning. */
+    logSink?: (line: string) => void;
+    /** (v23 M5) Advertise `_meta.chances.capabilities.workspaceQueries` in
+     *  `initialize` so a GUI client shows the file/code/git panes. The driver does
+     *  NOT handle the query methods — the relay (`AcpSessionHost`) intercepts them
+     *  and replies off-ring — so this is set true only by a relay whose host
+     *  supports the queries. stdio transports leave it false (Zed has its own
+     *  editor; `rpc` is programmatic). */
+    workspaceQueries?: boolean;
+}
+export declare class AcpEngineDriver {
+    private readonly host;
+    private readonly writer;
+    private readonly agent;
+    private readonly autoApprove;
+    private readonly logSink;
+    private toolChunks;
+    private built;
+    private unsub;
+    private sessionId;
+    private activeTurn;
+    /** Tracked so shutdown can await the terminal prompt response before closing. */
+    private activePrompt;
+    /** Open asks (permission OR question): minted id → the resolver's `resolve` +
+     *  the serialized request (kept so a fresh attach can re-send a still-open ask
+     *  the ring evicted) + its `kind` (so a response/deny resolves the right shape). */
+    private readonly pending;
+    private readonly resolvedIds;
+    private readonly resolvedSet;
+    private readonly workspaceQueries;
+    private shuttingDown;
+    constructor(opts: AcpEngineDriverOptions);
+    run(lines: AsyncIterable<string>): Promise<number>;
+    /** Idempotent shutdown — same order as `RpcServer` (cancel turn → deny pending
+     *  → await the in-flight prompt's terminal response → dispose → flush → close). */
+    shutdown(): Promise<void>;
+    /** Whether a turn is in flight, so a reconnecting client can lock its composer. */
+    get busy(): boolean;
+    /** Ids of still-open `session/request_permission` asks at attach time. */
+    pendingPermissionIds(): string[];
+    /** Serialized lines of every still-open permission request, re-sent right
+     *  after the welcome so a parked turn stays answerable even if the ring
+     *  evicted the ask. The client de-dups by permission id. */
+    openPermissionFrames(): string[];
+    private onEvent;
+    private handleLine;
+    private handleMethod;
+    /** Runs one turn. The caller (`handleMethod`'s prompt case) has already
+     *  validated the session + rejected an overlapping turn, so this always starts. */
+    private handlePrompt;
+    /** True if `params.sessionId` addresses our singleton session. An ABSENT id is
+     *  tolerated (first-party clients always send ours); a PRESENT but mismatched id
+     *  is rejected so a plain ACP client can't drive/cancel a bogus session (codex
+     *  M3 SHOULD). */
+    private isOurSession;
+    /** The standard ACP `SessionModelState` (modelId = `provider/model`). */
+    private modelState;
+    private handleSetModel;
+    /** (v22) Set the session approval mode. UNLIKE set_model this is allowed
+     *  mid-turn — the mode applies to the NEXT permission check, which is the whole
+     *  point of cycling it while a turn streams (claude-code parity; mirrors the
+     *  TUI Stage-1 fix). A switch to `yolo` carries its own consent (the GUI
+     *  confirms client-side before sending), so we latch it. */
+    private handleSetApproval;
+    private makeResolver;
+    /** A client answered a `session/request_permission` request (JSON-RPC
+     *  response). Fail-closed: an error response, a non-`selected` outcome, or an
+     *  unknown `optionId` all deny. Dedups duplicate/foreign answers. */
+    private resolvePermission;
+    /** (v22) A client answered a `_chances/unstable/request_question` request.
+     *  Fail-closed: an error response, a malformed body, or an explicit `declined`
+     *  all resolve to a declined QuestionDecision (the ask tool turns that into a
+     *  deterministic "declined" result). Dedups duplicate/foreign answers. */
+    private resolveQuestion;
+    private denyAllPending;
+    private markResolved;
+    private initializeResult;
+    private enqueueNotification;
+    private respond;
+    private error;
+}
+//# sourceMappingURL=engine-driver.d.ts.map

package/dist/rpc/acp/engine-driver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine-driver.d.ts","sourceRoot":"","sources":["../../../src/rpc/acp/engine-driver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAMH,OAAO,EAAuB,KAAK,QAAQ,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,KAAK,EAAe,UAAU,EAAE,MAAM,cAAc,CAAC;AAG5D,kEAAkE;AAClE,eAAO,MAAM,oBAAoB,EAAG,CAAU,CAAC;AAwD/C,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,UAAU,CAAC;IACjB,kEAAkE;IAClE,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACzC,8EAA8E;IAC9E,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,mFAAmF;IACnF,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACjC;;;;;0CAKsC;IACtC,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAa;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmC;IAC1D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAoC;IAC1D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAU;IACtC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyB;IACjD,OAAO,CAAC,UAAU,CAAQ;IAE1B,OAAO,CAAC,KAAK,CAA4B;IACzC,OAAO,CAAC,KAAK,CAA6B;IAC1C,OAAO,CAAC,SAAS,CAAM;IACvB,OAAO,CAAC,UAAU,CAAsE;IACxF,iFAAiF;IACjF,OAAO,CAAC,YAAY,CAA8B;IAClD;;wFAEoF;IACpF,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6H;IACrJ,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAgB;IAC5C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAqB;IACjD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAU;IAC3C,OAAO,CAAC,YAAY,CAAS;gBAEjB,IAAI,EAAE,sBAAsB;IASlC,GAAG,CAAC,KAAK,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IAuBxD;uFACmF;IAC7E,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAqB/B,mFAAmF;IACnF,IAAI,IAAI,IAAI,OAAO,CAElB;IACD,0EAA0E;IAC1E,oBAAoB,IAAI,MAAM,EAAE;IAGhC;;gEAE4D;IAC5D,oBAAoB,IAAI,MAAM,EAAE;IAMhC,OAAO,CAAC,OAAO;IAkBf,OAAO,CAAC,UAAU;IAuBlB,OAAO,CAAC,YAAY;IA6EpB;uFACmF;YACrE,YAAY;IA2B1B;;;sBAGkB;IAClB,OAAO,CAAC,YAAY;IAKpB,yEAAyE;IACzE,OAAO,CAAC,UAAU;IAQlB,OAAO,CAAC,cAAc;IAUtB;;;;gEAI4D;IAC5D,OAAO,CAAC,iBAAiB;IAmBzB,OAAO,CAAC,YAAY;IAkDpB;;yEAEqE;IACrE,OAAO,CAAC,iBAAiB;IA6BzB;;;8EAG0E;IAC1E,OAAO,CAAC,eAAe;IAyBvB,OAAO,CAAC,cAAc;IAStB,OAAO,CAAC,YAAY;IAWpB,OAAO,CAAC,gBAAgB;IA0BxB,OAAO,CAAC,mBAAmB;IAG3B,OAAO,CAAC,OAAO;IAIf,OAAO,CAAC,KAAK;CAGd"}