@harness-nexus/cli 0.1.0-alpha.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 sinrimin
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,59 @@
+# @harness-nexus/cli
+
+The `hnx` client for [Harness Nexus](https://github.com/sinrimin/harness-nexus) —
+the data-plane half of a self-hosted control plane for coding agents. It runs
+on each of your machines and does the local work: pulling profiles from your
+server, installing them into agent tools, and keeping the machine connected.
+
+> **Early stage.** Alpha software under active development — commands and
+> behavior may change without notice.
+
+## Install
+
+Requires Node.js ≥ 20.
+
+```sh
+npm install -g @harness-nexus/cli
+# or use it without installing:
+npx @harness-nexus/cli --help
+```
+
+Both `hnx` and `harness-nexus` bin names are provided.
+
+## Quick start
+
+Point it at your Harness Nexus server (register a machine in the web UI's
+Machines page first — the enrollment token is shown exactly once):
+
+```sh
+hnx enroll --server https://your-server --token <machine-token>
+hnx daemon          # keep it connected (inventory, remote deploy, ACP chat)
+```
+
+Install a profile into a local agent tool (dry-run by default):
+
+```sh
+hnx install --profile <id> --server https://your-server --token <pat> \
+  --target deepseek --apply
+hnx uninstall --target deepseek --apply
+```
+
+Expose a profile's MCP servers to any MCP client as one local stdio server:
+
+```sh
+hnx mcp serve --profile <id> --server https://your-server
+```
+
+## Supported harnesses
+
+One-click install + ACP chat: **Claude Code, Codex, DeepSeek Harness (dsh)**.
+
+## Documentation
+
+See the [repository README](https://github.com/sinrimin/harness-nexus) and
+[`docs/`](https://github.com/sinrimin/harness-nexus/tree/main/docs) for
+architecture, the roadmap, and per-phase design notes.
+
+## License
+
+MIT

package/dist/config.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Daemon configuration (~/.hnx/config.json, 0600). Written by `hnx enroll`,
+ * read by `hnx daemon`. The machine token is a capability-scoped PAT
+ * (scopes ['machine-ctl']) — REST-rejected, realtime-only — so this file is
+ * the single local secret the client keeps (OS keychain later).
+ */
+export interface HnxDaemonConfig {
+    server: string;
+    /** Machine PAT (`hnpat_…`), issued once at enrollment. */
+    token: string;
+    machineId: string;
+    machineName?: string;
+}
+export declare function daemonConfigPath(): string;
+export declare function loadDaemonConfig(): HnxDaemonConfig | null;
+export declare function saveDaemonConfig(config: HnxDaemonConfig): void;
+/**
+ * Absolute path of the running `hnx` executable — baked into the stdio shim
+ * entries target adapters emit (GUI-launched Agent tools often lack PATH).
+ * `HNX_BIN` overrides (tests / wrapper scripts); dev-mode `tsx` runs resolve
+ * to the loader path, which is fine for local experimentation.
+ */
+export declare function hnxExecutablePath(): string;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAIA;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,0DAA0D;IAC1D,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED,wBAAgB,gBAAgB,IAAI,eAAe,GAAG,IAAI,CAQzD;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CAS9D;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C"}

package/dist/config.js

@@ -0,0 +1,38 @@
+import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join, resolve } from 'node:path';
+export function daemonConfigPath() {
+    return join(homedir(), '.hnx', 'config.json');
+}
+export function loadDaemonConfig() {
+    const path = daemonConfigPath();
+    if (!existsSync(path))
+        return null;
+    try {
+        return JSON.parse(readFileSync(path, 'utf8'));
+    }
+    catch {
+        return null;
+    }
+}
+export function saveDaemonConfig(config) {
+    mkdirSync(join(homedir(), '.hnx'), { recursive: true, mode: 0o700 });
+    const path = daemonConfigPath();
+    writeFileSync(path, `${JSON.stringify(config, null, 2)}\n`, { mode: 0o600 });
+    try {
+        chmodSync(path, 0o600);
+    }
+    catch {
+        // best-effort on filesystems that ignore modes
+    }
+}
+/**
+ * Absolute path of the running `hnx` executable — baked into the stdio shim
+ * entries target adapters emit (GUI-launched Agent tools often lack PATH).
+ * `HNX_BIN` overrides (tests / wrapper scripts); dev-mode `tsx` runs resolve
+ * to the loader path, which is fine for local experimentation.
+ */
+export function hnxExecutablePath() {
+    return process.env.HNX_BIN ?? (process.argv[1] ? resolve(process.argv[1]) : 'hnx');
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxF,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAgB1C,MAAM,UAAU,gBAAgB;IAC9B,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;IAChC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAoB,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAuB;IACtD,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;IAChC,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC;QACH,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,+CAA+C;IACjD,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AACrF,CAAC"}

package/dist/daemon/acp/adapters.d.ts

@@ -0,0 +1,7 @@
+import type { AgentTarget } from '@harness-nexus/shared';
+export interface AcpCommand {
+    command: string;
+    args: string[];
+}
+export declare function resolveAcpCommand(target: AgentTarget, env: NodeJS.ProcessEnv): AcpCommand | null;
+//# sourceMappingURL=adapters.d.ts.map

package/dist/daemon/acp/adapters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapters.d.ts","sourceRoot":"","sources":["../../../src/daemon/acp/adapters.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AA2BzD,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,UAAU,GAAG,IAAI,CAQhG"}

package/dist/daemon/acp/adapters.js

@@ -0,0 +1,34 @@
+/**
+ * Per-target ACP adapter wiring (Phase 8 C5) — the adapter matrix from
+ * docs/research/phase-8-c5-acp-web-demo.md, executable. Every adapter speaks
+ * ACP v1 (JSON-RPC 2.0, newline-delimited) over stdio, so the daemon needs
+ * only the command line per target.
+ *
+ * `HN_ACP_COMMAND_<TARGET>` (`-`→`_`, upper) replaces the whole command line
+ * (split on whitespace) — the hook for pinned/local installs and for pointing
+ * tests at a fixture agent.
+ */
+const DEFAULT_ACP_COMMANDS = {
+    // Official Zed adapter, now powered by the Claude Agent SDK (bundles the CLI;
+    // needs local Claude auth).
+    'claude-code': ['npx', '-y', '@zed-industries/claude-agent-acp'],
+    // Official Zed adapter wrapping the OpenAI Codex CLI (needs `codex` on PATH).
+    codex: ['npx', '-y', '@zed-industries/codex-acp'],
+    // DeepSeek Harness ships a native ACP v1 profile (needs `dsh` on PATH and a
+    // configured provider route — T1 research § ACP).
+    deepseek: ['dsh', '--profile', 'acp'],
+    // Hermes ships a native ACP adapter as an install extra.
+    hermes: ['python3', '-m', 'acp_adapter'],
+    zcode: null, // no adapter exists (also no install adapter — 3.x)
+    generic: null,
+};
+export function resolveAcpCommand(target, env) {
+    const override = env[`HN_ACP_COMMAND_${target.toUpperCase().replace(/-/g, '_')}`];
+    if (override !== undefined && override.trim() !== '') {
+        const parts = override.trim().split(/\s+/);
+        return { command: parts[0], args: parts.slice(1) };
+    }
+    const def = DEFAULT_ACP_COMMANDS[target];
+    return def === null ? null : { command: def[0], args: def.slice(1) };
+}
+//# sourceMappingURL=adapters.js.map

package/dist/daemon/acp/adapters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapters.js","sourceRoot":"","sources":["../../../src/daemon/acp/adapters.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AACH,MAAM,oBAAoB,GAAkD;IAC1E,8EAA8E;IAC9E,4BAA4B;IAC5B,aAAa,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,kCAAkC,CAAC;IAChE,8EAA8E;IAC9E,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,2BAA2B,CAAC;IACjD,4EAA4E;IAC5E,kDAAkD;IAClD,QAAQ,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC;IACrC,yDAAyD;IACzD,MAAM,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC;IACxC,KAAK,EAAE,IAAI,EAAE,oDAAoD;IACjE,OAAO,EAAE,IAAI;CACd,CAAC;AAOF,MAAM,UAAU,iBAAiB,CAAC,MAAmB,EAAE,GAAsB;IAC3E,MAAM,QAAQ,GAAG,GAAG,CAAC,kBAAkB,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAClF,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3C,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACtD,CAAC;IACD,MAAM,GAAG,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACzC,OAAO,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AACxE,CAAC"}

package/dist/daemon/acp/agent-connection.d.ts

@@ -0,0 +1,45 @@
+export type PermissionOutcome = {
+    outcome: 'selected';
+    optionId: string;
+} | {
+    outcome: 'cancelled';
+};
+export interface AcpAgentInfo {
+    name?: string | undefined;
+    version?: string | undefined;
+}
+export declare class AcpAgentConnection {
+    private proc;
+    private nextId;
+    private pending;
+    private stderrTail;
+    private onNotification;
+    private onPermission;
+    private exited;
+    private constructor();
+    /** Spawn + `initialize` handshake + `initialized` notification. */
+    static start(command: string, args: string[], opts: {
+        cwd: string;
+        env?: NodeJS.ProcessEnv | undefined;
+        initializeTimeoutMs?: number;
+    }): Promise<{
+        conn: AcpAgentConnection;
+        agentInfo: AcpAgentInfo;
+    }>;
+    /** JSON-RPC request with a timeout; rejects on error/exit. */
+    request(method: string, params: unknown, timeoutMs: number): Promise<unknown>;
+    notify(method: string, params: unknown): void;
+    /** Answer the agent's `session/request_permission` (optionId verbatim). */
+    respondPermission(jsonrpcId: number, outcome: PermissionOutcome): void;
+    setNotificationHandler(handler: (method: string, params: Record<string, unknown>) => void): void;
+    setPermissionHandler(handler: (jsonrpcId: number, params: Record<string, unknown>) => void): void;
+    /** Fires when the subprocess exits on its own (crash/quit) — not on kill(). */
+    onExit(handler: () => void): void;
+    /** SIGTERM, then SIGKILL after `graceMs`. Idempotent. */
+    kill(graceMs?: number): void;
+    private handleLine;
+    private send;
+    private failAll;
+    private stderrTailSuffix;
+}
+//# sourceMappingURL=agent-connection.d.ts.map

package/dist/daemon/acp/agent-connection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-connection.d.ts","sourceRoot":"","sources":["../../../src/daemon/acp/agent-connection.ts"],"names":[],"mappings":"AAkBA,MAAM,MAAM,iBAAiB,GAC3B;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,WAAW,CAAA;CAAE,CAAC;AAEvE,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9B;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,IAAI,CAAe;IAC3B,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,OAAO,CAAqC;IACpD,OAAO,CAAC,UAAU,CAAgB;IAClC,OAAO,CAAC,cAAc,CAA4E;IAClG,OAAO,CAAC,YAAY,CACb;IACP,OAAO,CAAC,MAAM,CAAS;IAEvB,OAAO;IAwBP,mEAAmE;WACtD,KAAK,CAChB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,SAAS,CAAC;QAAC,mBAAmB,CAAC,EAAE,MAAM,CAAA;KAAE,GACvF,OAAO,CAAC;QAAE,IAAI,EAAE,kBAAkB,CAAC;QAAC,SAAS,EAAE,YAAY,CAAA;KAAE,CAAC;IAyBjE,8DAA8D;IAC9D,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAmB7E,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,IAAI;IAI7C,2EAA2E;IAC3E,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,IAAI;IAItE,sBAAsB,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,GAAG,IAAI;IAIhG,oBAAoB,CAClB,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,GACpE,IAAI;IAIP,+EAA+E;IAC/E,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,GAAG,IAAI;IAIjC,yDAAyD;IACzD,IAAI,CAAC,OAAO,SAAO,GAAG,IAAI;IAU1B,OAAO,CAAC,UAAU;IAuClB,OAAO,CAAC,IAAI;IAKZ,OAAO,CAAC,OAAO;IAQf,OAAO,CAAC,gBAAgB;CAGzB"}

package/dist/daemon/acp/agent-connection.js

@@ -0,0 +1,158 @@
+import { spawn } from 'node:child_process';
+import { createInterface } from 'node:readline';
+export class AcpAgentConnection {
+    proc;
+    nextId = 1;
+    pending = new Map();
+    stderrTail = [];
+    onNotification = null;
+    onPermission = null;
+    exited = false;
+    constructor(proc) {
+        this.proc = proc;
+        const rl = createInterface({ input: proc.stdout });
+        rl.on('line', (line) => this.handleLine(line));
+        proc.stderr?.on('data', (chunk) => {
+            // Keep a small tail for spawn/initialize failure messages.
+            for (const l of chunk.toString('utf8').split('\n')) {
+                if (l.trim() !== '') {
+                    this.stderrTail.push(l.trimEnd());
+                    if (this.stderrTail.length > 10)
+                        this.stderrTail.shift();
+                }
+            }
+        });
+        proc.on('exit', () => {
+            this.exited = true;
+            const err = new Error(`agent process exited unexpectedly${this.stderrTailSuffix()}`);
+            for (const [, p] of this.pending) {
+                clearTimeout(p.timer);
+                p.reject(err);
+            }
+            this.pending.clear();
+        });
+    }
+    /** Spawn + `initialize` handshake + `initialized` notification. */
+    static async start(command, args, opts) {
+        const initializeTimeoutMs = opts.initializeTimeoutMs ?? 20000;
+        let proc;
+        try {
+            proc = spawn(command, args, {
+                cwd: opts.cwd,
+                env: { ...process.env, ...(opts.env ?? {}) },
+                stdio: ['pipe', 'pipe', 'pipe'],
+            });
+        }
+        catch (e) {
+            throw new Error(`failed to spawn ACP adapter '${command}': ${errText(e)}`);
+        }
+        const conn = new AcpAgentConnection(proc);
+        proc.on('error', (e) => {
+            conn.failAll(new Error(`ACP adapter '${command}' failed: ${errText(e)}`));
+        });
+        const result = (await conn.request('initialize', { protocolVersion: 1, clientCapabilities: {} }, initializeTimeoutMs));
+        conn.notify('initialized', {});
+        return { conn, agentInfo: result?.agentInfo ?? {} };
+    }
+    /** JSON-RPC request with a timeout; rejects on error/exit. */
+    request(method, params, timeoutMs) {
+        if (this.exited || this.proc.stdin === null) {
+            return Promise.reject(new Error('agent process is not running'));
+        }
+        const id = this.nextId++;
+        return new Promise((resolve, reject) => {
+            const timer = setTimeout(() => {
+                this.pending.delete(id);
+                reject(new Error(`ACP request '${method}' timed out after ${timeoutMs}ms`));
+            }, timeoutMs);
+            this.pending.set(id, {
+                resolve,
+                reject,
+                timer: timer,
+            });
+            this.send({ jsonrpc: '2.0', id, method, params });
+        });
+    }
+    notify(method, params) {
+        this.send({ jsonrpc: '2.0', method, params });
+    }
+    /** Answer the agent's `session/request_permission` (optionId verbatim). */
+    respondPermission(jsonrpcId, outcome) {
+        this.send({ jsonrpc: '2.0', id: jsonrpcId, result: { outcome } });
+    }
+    setNotificationHandler(handler) {
+        this.onNotification = handler;
+    }
+    setPermissionHandler(handler) {
+        this.onPermission = handler;
+    }
+    /** Fires when the subprocess exits on its own (crash/quit) — not on kill(). */
+    onExit(handler) {
+        this.proc.on('exit', handler);
+    }
+    /** SIGTERM, then SIGKILL after `graceMs`. Idempotent. */
+    kill(graceMs = 3000) {
+        if (this.exited || this.proc.stdin === null)
+            return;
+        this.proc.removeAllListeners('exit');
+        const killTimer = setTimeout(() => this.proc.kill('SIGKILL'), graceMs);
+        this.proc.on('exit', () => clearTimeout(killTimer));
+        this.proc.kill('SIGTERM');
+        this.failAll(new Error('agent process killed'));
+        this.exited = true;
+    }
+    handleLine(line) {
+        const trimmed = line.trim();
+        if (trimmed === '')
+            return;
+        let msg;
+        try {
+            msg = JSON.parse(trimmed);
+        }
+        catch {
+            return; // agents log noise on stdout sometimes; skip non-JSON lines
+        }
+        if (msg.method === 'session/request_permission' && msg.id !== undefined) {
+            this.onPermission?.(Number(msg.id), msg.params ?? {});
+            return;
+        }
+        if (msg.method !== undefined) {
+            if (msg.id === undefined || msg.id === null) {
+                this.onNotification?.(msg.method, msg.params ?? {});
+            }
+            return; // agent-side extension requests are not implemented (v1) — dropped
+        }
+        if (msg.id !== undefined && msg.id !== null) {
+            const pending = this.pending.get(Number(msg.id));
+            if (!pending)
+                return;
+            this.pending.delete(Number(msg.id));
+            clearTimeout(pending.timer);
+            if (msg.error !== undefined) {
+                pending.reject(new Error(msg.error.message ?? 'ACP request failed'));
+            }
+            else {
+                pending.resolve(msg.result);
+            }
+        }
+    }
+    send(message) {
+        if (this.proc.stdin === null || this.exited)
+            return;
+        this.proc.stdin.write(`${JSON.stringify(message)}\n`);
+    }
+    failAll(err) {
+        for (const [, p] of this.pending) {
+            clearTimeout(p.timer);
+            p.reject(err);
+        }
+        this.pending.clear();
+    }
+    stderrTailSuffix() {
+        return this.stderrTail.length > 0 ? `: ${this.stderrTail.join(' | ')}` : '';
+    }
+}
+function errText(e) {
+    return e instanceof Error ? e.message : String(e);
+}
+//# sourceMappingURL=agent-connection.js.map

package/dist/daemon/acp/agent-connection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-connection.js","sourceRoot":"","sources":["../../../src/daemon/acp/agent-connection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAyBhD,MAAM,OAAO,kBAAkB;IACrB,IAAI,CAAe;IACnB,MAAM,GAAG,CAAC,CAAC;IACX,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC5C,UAAU,GAAa,EAAE,CAAC;IAC1B,cAAc,GAAuE,IAAI,CAAC;IAC1F,YAAY,GAClB,IAAI,CAAC;IACC,MAAM,GAAG,KAAK,CAAC;IAEvB,YAAoB,IAAkB;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,MAAO,EAAE,CAAC,CAAC;QACpD,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,2DAA2D;YAC3D,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;oBACpB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;oBAClC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,EAAE;wBAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;gBAC3D,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACnB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,oCAAoC,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;YACrF,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACtB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChB,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,mEAAmE;IACnE,MAAM,CAAC,KAAK,CAAC,KAAK,CAChB,OAAe,EACf,IAAc,EACd,IAAwF;QAExF,MAAM,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,IAAI,KAAK,CAAC;QAC9D,IAAI,IAAkB,CAAC;QACvB,IAAI,CAAC;YACH,IAAI,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;gBAC1B,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE;gBAC5C,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;aAChC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,gCAAgC,OAAO,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YACrB,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,gBAAgB,OAAO,aAAa,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAChC,YAAY,EACZ,EAAE,eAAe,EAAE,CAAC,EAAE,kBAAkB,EAAE,EAAE,EAAE,EAC9C,mBAAmB,CACpB,CAAiC,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QAC/B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,EAAE,EAAE,CAAC;IACtD,CAAC;IAED,8DAA8D;IAC9D,OAAO,CAAC,MAAc,EAAE,MAAe,EAAE,SAAiB;QACxD,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YAC5C,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACzB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACxB,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,MAAM,qBAAqB,SAAS,IAAI,CAAC,CAAC,CAAC;YAC9E,CAAC,EAAE,SAAS,CAAC,CAAC;YACd,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE;gBACnB,OAAO;gBACP,MAAM;gBACN,KAAK,EAAE,KAAkC;aAC1C,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,MAAc,EAAE,MAAe;QACpC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,2EAA2E;IAC3E,iBAAiB,CAAC,SAAiB,EAAE,OAA0B;QAC7D,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,sBAAsB,CAAC,OAAkE;QACvF,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC;IAChC,CAAC;IAED,oBAAoB,CAClB,OAAqE;QAErE,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC;IAC9B,CAAC;IAED,+EAA+E;IAC/E,MAAM,CAAC,OAAmB;QACxB,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,CAAC;IAED,yDAAyD;IACzD,IAAI,CAAC,OAAO,GAAG,IAAI;QACjB,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI;YAAE,OAAO;QACpD,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;QACvE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1B,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACrB,CAAC;IAEO,UAAU,CAAC,IAAY;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,KAAK,EAAE;YAAE,OAAO;QAC3B,IAAI,GAMH,CAAC;QACF,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAe,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,4DAA4D;QACtE,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,4BAA4B,IAAI,GAAG,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;YACxE,IAAI,CAAC,YAAY,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,GAAG,CAAC,EAAE,KAAK,SAAS,IAAI,GAAG,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;gBAC5C,IAAI,CAAC,cAAc,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YACtD,CAAC;YACD,OAAO,CAAC,mEAAmE;QAC7E,CAAC;QACD,IAAI,GAAG,CAAC,EAAE,KAAK,SAAS,IAAI,GAAG,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;YAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YACjD,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YACpC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5B,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC5B,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,oBAAoB,CAAC,CAAC,CAAC;YACvE,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;IAEO,IAAI,CAAC,OAAgB;QAC3B,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACpD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,CAAC;IAEO,OAAO,CAAC,GAAU;QACxB,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAEO,gBAAgB;QACtB,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9E,CAAC;CACF;AAED,SAAS,OAAO,CAAC,CAAU;IACzB,OAAO,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC"}

package/dist/daemon/chat.d.ts

@@ -0,0 +1,22 @@
+import type { Socket } from 'socket.io-client';
+import { type AcpToolCallView, type ChatStreamEvent } from '@harness-nexus/shared';
+export interface ChatHandlersOptions {
+    /** Env source for `HN_ACP_COMMAND_<TARGET>` overrides (defaults to process.env). */
+    env?: NodeJS.ProcessEnv;
+    /** Extra env for the adapter subprocess. */
+    spawnEnv?: NodeJS.ProcessEnv;
+}
+export declare function attachChatHandlers(socket: Socket, opts?: ChatHandlersOptions): void;
+type UnknownRecord = Record<string, unknown>;
+/** Map one ACP `session/update` params object; null = drop (user echo). */
+export declare function mapAcpUpdate(params: UnknownRecord): ChatStreamEvent | null;
+/** Extract display text from an ACP ContentBlock chunk. */
+export declare function textOf(contentBlock: unknown): string;
+/**
+ * Defensive view of an ACP ToolCallUpdate: shared-schema-validated, falling
+ * back to the bare id when an adapter sends something malformed (the server
+ * re-validates everything crossing the wire).
+ */
+export declare function toolCallView(toolCallUpdate: unknown): AcpToolCallView;
+export {};
+//# sourceMappingURL=chat.d.ts.map

package/dist/daemon/chat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat.d.ts","sourceRoot":"","sources":["../../src/daemon/chat.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EASL,KAAK,eAAe,EACpB,KAAK,eAAe,EAErB,MAAM,uBAAuB,CAAC;AA0B/B,MAAM,WAAW,mBAAmB;IAClC,oFAAoF;IACpF,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,4CAA4C;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CAC9B;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE,mBAAwB,GAAG,IAAI,CA2JvF;AA6ED,KAAK,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE7C,2EAA2E;AAC3E,wBAAgB,YAAY,CAAC,MAAM,EAAE,aAAa,GAAG,eAAe,GAAG,IAAI,CAyB1E;AAED,2DAA2D;AAC3D,wBAAgB,MAAM,CAAC,YAAY,EAAE,OAAO,GAAG,MAAM,CAgBpD;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,cAAc,EAAE,OAAO,GAAG,eAAe,CAKrE"}