@kodizm/acp 0.9.0 → 0.9.1

package/dist/index.js

@@ -51,7 +51,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@kodizm/acp",
-    version: "0.9.0",
+    version: "0.9.1",
     description: "Custom ACP server bridging Claude Code and opencode CLIs through a single Kodizm-flavored protocol surface.",
     type: "module",
     bin: {
@@ -5052,6 +5052,151 @@ var init_zod = __esm(() => {
   init_external();
 });
 
+// src/wire/schemas.ts
+function metaCarriesNoCanonicalFields(data) {
+  if (data._meta === undefined) {
+    return true;
+  }
+  for (const banned of CANONICAL_FIELDS_BANNED_IN_META) {
+    if (banned in data._meta) {
+      return false;
+    }
+  }
+  return true;
+}
+function timeoutsAreExclusive(data) {
+  return !(data.permissionTimeoutMs !== undefined && data.permissionDeferTimeoutMs !== undefined);
+}
+var AbsolutePathSchema, PLUGIN_ROOT = "/opt/kodizm/plugins/", PluginPathSchema, McpServerSchema, SystemPromptSchema, MetaSchema, CANONICAL_FIELDS_BANNED_IN_META, SettingSourcesSchema, PermissionModeSchema, ToolPolicySchema, FeaturesSchema, META_SMUGGLE_MESSAGE = "canonical fields (systemPrompt, additionalDirectories, mcpServers, model, skills, cwd) must be top-level, not nested in _meta", InitializeRequestSchema, SessionOptionFields, TIMEOUT_EXCLUSION, NewSessionRequestSchema, PromptRequestSchema, CancelRequestSchema, LoadSessionRequestSchema, CompactSessionRequestSchema, ForkSessionRequestSchema;
+var init_schemas3 = __esm(() => {
+  init_zod();
+  AbsolutePathSchema = string2().regex(/^\//, 'path must be absolute (start with "/")');
+  PluginPathSchema = AbsolutePathSchema.refine((path) => path.length > PLUGIN_ROOT.length && path.startsWith(PLUGIN_ROOT) && !path.split("/").includes(".."), { message: `plugin path must live under ${PLUGIN_ROOT} with no ".." segment` });
+  McpServerSchema = object({
+    type: literal("http"),
+    name: string2().min(1),
+    url: string2().url(),
+    headers: array(object({
+      name: string2().min(1),
+      value: string2()
+    })).optional()
+  });
+  SystemPromptSchema = union([
+    string2(),
+    object({
+      append: string2(),
+      excludeDynamicSections: boolean2().optional()
+    })
+  ]);
+  MetaSchema = record(string2(), unknown());
+  CANONICAL_FIELDS_BANNED_IN_META = [
+    "systemPrompt",
+    "additionalDirectories",
+    "mcpServers",
+    "model",
+    "skills",
+    "cwd",
+    "sessionId",
+    "sourceSessionId",
+    "toolPolicy",
+    "autoCompact",
+    "permissionTimeoutMs",
+    "permissionDeferTimeoutMs",
+    "debug",
+    "debugCaptureRawSdk",
+    "debugCaptureRpc",
+    "heartbeatIntervalMs",
+    "inactivityThresholdMs",
+    "settingSources",
+    "features",
+    "plugins"
+  ];
+  SettingSourcesSchema = array(_enum(["user", "project", "local"]));
+  PermissionModeSchema = _enum(["default", "acceptEdits", "plan", "dontAsk", "bypassPermissions"]);
+  ToolPolicySchema = object({
+    allow: array(string2()).optional(),
+    deny: array(string2()).optional(),
+    ask: array(string2()).optional(),
+    defaultMode: PermissionModeSchema.optional()
+  });
+  FeaturesSchema = object({
+    todos: boolean2().optional(),
+    subagents: boolean2().optional(),
+    backgroundTasks: boolean2().optional(),
+    scheduling: boolean2().optional(),
+    planMode: boolean2().optional(),
+    worktree: boolean2().optional(),
+    notebook: boolean2().optional(),
+    clientTools: boolean2().optional(),
+    autoMemory: boolean2().optional(),
+    bundledSkills: boolean2().optional(),
+    simple: boolean2().optional(),
+    tools: array(string2().min(1)).optional()
+  });
+  InitializeRequestSchema = object({
+    protocolVersion: number2().int().positive(),
+    clientCapabilities: record(string2(), unknown()).optional(),
+    _meta: MetaSchema.optional()
+  });
+  SessionOptionFields = {
+    additionalDirectories: array(AbsolutePathSchema).optional(),
+    plugins: array(PluginPathSchema).optional(),
+    systemPrompt: SystemPromptSchema.optional(),
+    model: string2().optional(),
+    skills: array(string2()).optional(),
+    toolPolicy: ToolPolicySchema.optional(),
+    autoCompact: boolean2().optional(),
+    permissionTimeoutMs: number2().int().positive().optional(),
+    permissionDeferTimeoutMs: number2().int().positive().optional(),
+    debug: boolean2().optional(),
+    debugCaptureRawSdk: boolean2().optional(),
+    debugCaptureRpc: boolean2().optional(),
+    heartbeatIntervalMs: number2().int().positive().optional(),
+    inactivityThresholdMs: number2().int().positive().optional(),
+    settingSources: SettingSourcesSchema.optional(),
+    features: FeaturesSchema.optional(),
+    _meta: MetaSchema.optional()
+  };
+  TIMEOUT_EXCLUSION = {
+    message: "permissionTimeoutMs and permissionDeferTimeoutMs are mutually exclusive (pick hard-deny on timeout OR soft-defer on timeout)",
+    path: ["permissionDeferTimeoutMs"]
+  };
+  NewSessionRequestSchema = object({
+    cwd: AbsolutePathSchema,
+    mcpServers: array(McpServerSchema),
+    ...SessionOptionFields
+  }).refine(metaCarriesNoCanonicalFields, { message: META_SMUGGLE_MESSAGE, path: ["_meta"] }).refine(timeoutsAreExclusive, TIMEOUT_EXCLUSION);
+  PromptRequestSchema = object({
+    sessionId: string2().min(1),
+    prompt: array(unknown()),
+    model: string2().optional(),
+    _meta: MetaSchema.optional()
+  }).refine(metaCarriesNoCanonicalFields, { message: META_SMUGGLE_MESSAGE, path: ["_meta"] });
+  CancelRequestSchema = object({
+    sessionId: string2().min(1)
+  });
+  LoadSessionRequestSchema = object({
+    sessionId: string2().min(1),
+    cwd: AbsolutePathSchema,
+    mcpServers: array(McpServerSchema),
+    ...SessionOptionFields
+  }).refine(metaCarriesNoCanonicalFields, { message: META_SMUGGLE_MESSAGE, path: ["_meta"] }).refine(timeoutsAreExclusive, TIMEOUT_EXCLUSION);
+  CompactSessionRequestSchema = object({
+    sessionId: string2().min(1)
+  });
+  ForkSessionRequestSchema = object({
+    sourceSessionId: string2().min(1),
+    cwd: AbsolutePathSchema,
+    mcpServers: array(McpServerSchema),
+    systemPrompt: SystemPromptSchema.optional(),
+    model: string2().optional(),
+    additionalDirectories: array(AbsolutePathSchema).optional(),
+    settingSources: SettingSourcesSchema.optional(),
+    features: FeaturesSchema.optional(),
+    _meta: MetaSchema.optional()
+  }).refine(metaCarriesNoCanonicalFields, { message: META_SMUGGLE_MESSAGE, path: ["_meta"] });
+});
+
 // src/server/heartbeat.ts
 class HeartbeatTimer {
   options;
@@ -52791,6 +52936,12 @@ function launchArgv(options) {
   if (options.systemPromptFile !== undefined) {
     argv.push("--append-system-prompt-file", options.systemPromptFile);
   }
+  if (options.tools !== undefined) {
+    argv.push("--tools", options.tools.join(","));
+  }
+  if (options.disallowedTools !== undefined && options.disallowedTools.length > 0) {
+    argv.push("--disallowedTools", options.disallowedTools.join(","));
+  }
   if (options.model !== undefined) {
     argv.push("--model", options.model);
   }
@@ -53148,6 +53299,24 @@ var init_policy4 = __esm(() => {
 });
 
 // src/live/start-flags.ts
+function parsePaneFeatures(content, permissionMode) {
+  let json;
+  try {
+    json = JSON.parse(content);
+  } catch {
+    return null;
+  }
+  const parsed = FeaturesSchema.safeParse(json);
+  if (!parsed.success || parsed.data.simple === true) {
+    return null;
+  }
+  const names = parsed.data.tools;
+  if (names !== undefined && (names.length === 0 || !names.every((name) => TOOL_NAME2.test(name)))) {
+    return null;
+  }
+  const translated = translateFeaturesToClaude(parsed.data, permissionMode);
+  return { tools: translated.tools, disallowedTools: translated.disallowedTools, env: translated.env };
+}
 function parseStartExtras(args) {
   for (const key of Object.keys(args)) {
     if (!START_FLAGS.has(key)) {
@@ -53190,8 +53359,10 @@ function parseSeconds(value, min) {
   const seconds = Number(value);
   return seconds >= min && seconds <= MAX_SECONDS ? seconds : null;
 }
-var START_FLAGS, START_FILE_FLAGS, MAX_SECONDS = 2147483, DIGITS;
+var START_FLAGS, START_FILE_FLAGS, TOOL_NAME2, MAX_SECONDS = 2147483, DIGITS;
 var init_start_flags = __esm(() => {
+  init_features();
+  init_schemas3();
   START_FLAGS = new Set([
     "pane",
     "cwd",
@@ -53202,12 +53373,20 @@ var init_start_flags = __esm(() => {
     "mcp-config",
     "tool-policy",
     "system-prompt-file",
+    "features",
     "permission-mode",
     "one-shot",
     "deadline-seconds",
     "retain-failed-seconds"
   ]);
-  START_FILE_FLAGS = ["env-file", "tool-policy", "system-prompt-file", "mcp-config"];
+  START_FILE_FLAGS = [
+    "env-file",
+    "tool-policy",
+    "system-prompt-file",
+    "mcp-config",
+    "features"
+  ];
+  TOOL_NAME2 = /^[A-Za-z][A-Za-z0-9_]{0,63}$/;
   DIGITS = /^[0-9]+$/;
 });
 
@@ -53414,7 +53593,7 @@ function isRecord5(value) {
 var INTERRUPT_MARKER = "[Request interrupted by user]", INTERRUPT_TOOL_MARKER = "[Request interrupted by user for tool use]", NEWLINE = 10, USAGE_LIMIT_TEXT, LIMIT_RESETS, NOT_A_USAGE_LIMIT, STATUS_REASONS, API_ERROR_DETAIL_MAX = 200;
 var init_transcript = __esm(() => {
   init_events2();
-  USAGE_LIMIT_TEXT = /\b(usage|session|weekly) limit\b|\bhit your\b[^.\n]*\blimit\b/i;
+  USAGE_LIMIT_TEXT = /\b(usage|session|weekly) limit\b|\bhit your\b[^.\n]*\blimit\b|\bout of extra usage\b/i;
   LIMIT_RESETS = /\bresets?\b/i;
   NOT_A_USAGE_LIMIT = /\bnot your (usage )?limit\b/i;
   STATUS_REASONS = {
@@ -54375,6 +54554,7 @@ class LiveDaemon {
     const policyFile = args["tool-policy"];
     const systemPromptFile = args["system-prompt-file"];
     const mcpConfig = args["mcp-config"];
+    const featuresFile = args.features;
     if (id === undefined || !PANE_ID2.test(id) || cwd === undefined || !isAbsolute4(cwd)) {
       return refuse("usage_error");
     }
@@ -54385,7 +54565,7 @@ class LiveDaemon {
       return refuse("usage_error");
     }
     const extras = parseStartExtras(args);
-    if (extras === null || [policyFile, systemPromptFile, mcpConfig].some((path) => !optionalAbsolute(path))) {
+    if (extras === null || [policyFile, systemPromptFile, mcpConfig, featuresFile].some((path) => !optionalAbsolute(path))) {
       return refuse("usage_error");
     }
     if (this.panes.has(id) || this.starting.has(id)) {
@@ -54406,6 +54586,7 @@ class LiveDaemon {
         policyFile,
         systemPromptFile,
         mcpConfig,
+        featuresFile,
         extras
       });
     } finally {
@@ -54413,7 +54594,19 @@ class LiveDaemon {
     }
   }
   async open(request) {
-    const { id, cwd, model, resume, envFile, settingsBase, policyFile, systemPromptFile, mcpConfig, extras } = request;
+    const {
+      id,
+      cwd,
+      model,
+      resume,
+      envFile,
+      settingsBase,
+      policyFile,
+      systemPromptFile,
+      mcpConfig,
+      featuresFile,
+      extras
+    } = request;
     const content = await readSecretFile(envFile);
     const env = content === null ? null : parseStartEnv(content);
     if (env === null) {
@@ -54428,6 +54621,10 @@ class LiveDaemon {
     if (policy === null) {
       return refuse("usage_error");
     }
+    const features = featuresFile === undefined ? undefined : await readPaneFeatures(featuresFile, extras.permissionMode);
+    if (features === null) {
+      return refuse("usage_error");
+    }
     const mcpSpellings = mcpConfig === undefined ? [] : [...new Set([mcpConfig, await realpath4(mcpConfig)])];
     const settingsPath = join7(settingsBase, `${id}.settings.json`);
     await mkdir4(settingsBase, { recursive: true, mode: 448 });
@@ -54451,11 +54648,13 @@ class LiveDaemon {
         cwd,
         home: this.options.home,
         settingsPath,
-        env: env.authEnv,
+        env: { ...env.authEnv, ...features?.env },
         model,
         resumeSessionId: resume,
         mcpConfig,
         systemPromptFile,
+        tools: features?.tools,
+        disallowedTools: features?.disallowedTools,
         permissionMode: extras.permissionMode,
         claudeBin: this.options.claudeBin,
         socket: pane.socket,
@@ -54826,6 +55025,10 @@ async function readToolPolicy(path) {
   const content = await readSecretFile(path);
   return content === null ? null : parseToolPolicy(content);
 }
+async function readPaneFeatures(path, permissionMode) {
+  const content = await readSecretFile(path);
+  return content === null ? null : parsePaneFeatures(content, permissionMode);
+}
 async function readFileOrNull(path) {
   return readFile4(path, "utf8").catch((error) => {
     if (error.code === "ENOENT" || error.code === "EISDIR") {
@@ -55272,7 +55475,7 @@ Commands:
                                              Verbs: start, prompt, command, cancel, stop, rotate-token, status.
                                              start also takes --permission-mode default|dontAsk, --one-shot 0|1,
                                              --deadline-seconds N, --retain-failed-seconds N and
-                                             --mcp-config/--tool-policy/--system-prompt-file PATH.
+                                             --mcp-config/--tool-policy/--system-prompt-file/--features PATH.
   hook <Event> --pane <id> --socket <path>   Hook helper the pane settings run; reads the payload on stdin.
   daemon                                     Run the daemon in the foreground; ctl start spawns it detached.
 
@@ -55320,151 +55523,8 @@ function ensureCapability(caps, required, method) {
   throw new MethodNotSupportedError(method, supported);
 }
 
-// src/wire/schemas.ts
-init_zod();
-var AbsolutePathSchema = string2().regex(/^\//, 'path must be absolute (start with "/")');
-var PLUGIN_ROOT = "/opt/kodizm/plugins/";
-var PluginPathSchema = AbsolutePathSchema.refine((path) => path.length > PLUGIN_ROOT.length && path.startsWith(PLUGIN_ROOT) && !path.split("/").includes(".."), { message: `plugin path must live under ${PLUGIN_ROOT} with no ".." segment` });
-var McpServerSchema = object({
-  type: literal("http"),
-  name: string2().min(1),
-  url: string2().url(),
-  headers: array(object({
-    name: string2().min(1),
-    value: string2()
-  })).optional()
-});
-var SystemPromptSchema = union([
-  string2(),
-  object({
-    append: string2(),
-    excludeDynamicSections: boolean2().optional()
-  })
-]);
-var MetaSchema = record(string2(), unknown());
-var CANONICAL_FIELDS_BANNED_IN_META = [
-  "systemPrompt",
-  "additionalDirectories",
-  "mcpServers",
-  "model",
-  "skills",
-  "cwd",
-  "sessionId",
-  "sourceSessionId",
-  "toolPolicy",
-  "autoCompact",
-  "permissionTimeoutMs",
-  "permissionDeferTimeoutMs",
-  "debug",
-  "debugCaptureRawSdk",
-  "debugCaptureRpc",
-  "heartbeatIntervalMs",
-  "inactivityThresholdMs",
-  "settingSources",
-  "features",
-  "plugins"
-];
-var SettingSourcesSchema = array(_enum(["user", "project", "local"]));
-var PermissionModeSchema = _enum(["default", "acceptEdits", "plan", "dontAsk", "bypassPermissions"]);
-var ToolPolicySchema = object({
-  allow: array(string2()).optional(),
-  deny: array(string2()).optional(),
-  ask: array(string2()).optional(),
-  defaultMode: PermissionModeSchema.optional()
-});
-var FeaturesSchema = object({
-  todos: boolean2().optional(),
-  subagents: boolean2().optional(),
-  backgroundTasks: boolean2().optional(),
-  scheduling: boolean2().optional(),
-  planMode: boolean2().optional(),
-  worktree: boolean2().optional(),
-  notebook: boolean2().optional(),
-  clientTools: boolean2().optional(),
-  autoMemory: boolean2().optional(),
-  bundledSkills: boolean2().optional(),
-  simple: boolean2().optional(),
-  tools: array(string2().min(1)).optional()
-});
-function metaCarriesNoCanonicalFields(data) {
-  if (data._meta === undefined) {
-    return true;
-  }
-  for (const banned of CANONICAL_FIELDS_BANNED_IN_META) {
-    if (banned in data._meta) {
-      return false;
-    }
-  }
-  return true;
-}
-var META_SMUGGLE_MESSAGE = "canonical fields (systemPrompt, additionalDirectories, mcpServers, model, skills, cwd) must be top-level, not nested in _meta";
-var InitializeRequestSchema = object({
-  protocolVersion: number2().int().positive(),
-  clientCapabilities: record(string2(), unknown()).optional(),
-  _meta: MetaSchema.optional()
-});
-var SessionOptionFields = {
-  additionalDirectories: array(AbsolutePathSchema).optional(),
-  plugins: array(PluginPathSchema).optional(),
-  systemPrompt: SystemPromptSchema.optional(),
-  model: string2().optional(),
-  skills: array(string2()).optional(),
-  toolPolicy: ToolPolicySchema.optional(),
-  autoCompact: boolean2().optional(),
-  permissionTimeoutMs: number2().int().positive().optional(),
-  permissionDeferTimeoutMs: number2().int().positive().optional(),
-  debug: boolean2().optional(),
-  debugCaptureRawSdk: boolean2().optional(),
-  debugCaptureRpc: boolean2().optional(),
-  heartbeatIntervalMs: number2().int().positive().optional(),
-  inactivityThresholdMs: number2().int().positive().optional(),
-  settingSources: SettingSourcesSchema.optional(),
-  features: FeaturesSchema.optional(),
-  _meta: MetaSchema.optional()
-};
-var TIMEOUT_EXCLUSION = {
-  message: "permissionTimeoutMs and permissionDeferTimeoutMs are mutually exclusive (pick hard-deny on timeout OR soft-defer on timeout)",
-  path: ["permissionDeferTimeoutMs"]
-};
-function timeoutsAreExclusive(data) {
-  return !(data.permissionTimeoutMs !== undefined && data.permissionDeferTimeoutMs !== undefined);
-}
-var NewSessionRequestSchema = object({
-  cwd: AbsolutePathSchema,
-  mcpServers: array(McpServerSchema),
-  ...SessionOptionFields
-}).refine(metaCarriesNoCanonicalFields, { message: META_SMUGGLE_MESSAGE, path: ["_meta"] }).refine(timeoutsAreExclusive, TIMEOUT_EXCLUSION);
-var PromptRequestSchema = object({
-  sessionId: string2().min(1),
-  prompt: array(unknown()),
-  model: string2().optional(),
-  _meta: MetaSchema.optional()
-}).refine(metaCarriesNoCanonicalFields, { message: META_SMUGGLE_MESSAGE, path: ["_meta"] });
-var CancelRequestSchema = object({
-  sessionId: string2().min(1)
-});
-var LoadSessionRequestSchema = object({
-  sessionId: string2().min(1),
-  cwd: AbsolutePathSchema,
-  mcpServers: array(McpServerSchema),
-  ...SessionOptionFields
-}).refine(metaCarriesNoCanonicalFields, { message: META_SMUGGLE_MESSAGE, path: ["_meta"] }).refine(timeoutsAreExclusive, TIMEOUT_EXCLUSION);
-var CompactSessionRequestSchema = object({
-  sessionId: string2().min(1)
-});
-var ForkSessionRequestSchema = object({
-  sourceSessionId: string2().min(1),
-  cwd: AbsolutePathSchema,
-  mcpServers: array(McpServerSchema),
-  systemPrompt: SystemPromptSchema.optional(),
-  model: string2().optional(),
-  additionalDirectories: array(AbsolutePathSchema).optional(),
-  settingSources: SettingSourcesSchema.optional(),
-  features: FeaturesSchema.optional(),
-  _meta: MetaSchema.optional()
-}).refine(metaCarriesNoCanonicalFields, { message: META_SMUGGLE_MESSAGE, path: ["_meta"] });
-
 // src/server/acp-server.ts
+init_schemas3();
 init_errors();
 var JsonRpcErrorCode2 = {
   ParseError: -32700,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kodizm/acp",
-  "version": "0.9.0",
+  "version": "0.9.1",
   "description": "Custom ACP server bridging Claude Code and opencode CLIs through a single Kodizm-flavored protocol surface.",
   "type": "module",
   "bin": {