@n1creator/openacp-cli 2026.712.9 → 2026.712.10

package/dist/index.d.ts

@@ -305,6 +305,17 @@ type CommandResponse = {
     question: string;
     onYes: string;
     onNo: string;
+} | {
+    /** Request one follow-up text value from the same authenticated conversation. */
+    type: 'input';
+    prompt: string;
+    /** Command invoked with the captured value in CommandArgs.interaction.capturedInput. */
+    command: string;
+    /** Sensitive values must be removed by the adapter before command dispatch. */
+    sensitive?: boolean;
+    /** Shown when an adapter cannot provide the requested input guarantees. */
+    fallback: string;
+    expiresInMs?: number;
 } | {
     type: 'error';
     message: string;
@@ -354,6 +365,18 @@ interface CommandArgs {
     channelId: string;
     /** User ID who invoked the command */
     userId: string;
+    /** Stable adapter conversation/topic identifier used to bind short-lived interactions. */
+    conversationId?: string;
+    /** Input guarantees offered by the invoking adapter. */
+    interaction?: {
+        textInput: boolean;
+        secureInput: 'private' | 'delete-after-capture' | 'none';
+        /** One-shot adapter-captured input. Never serialize this into a command string. */
+        capturedInput?: {
+            value: string;
+            sensitive: boolean;
+        };
+    };
     /** Reply helper — sends message to the topic where command was invoked */
     reply(content: string | CommandResponse | OutgoingMessage): Promise<void>;
     /** Direct access to OpenACPCore instance. Available when 'kernel:access' permission is granted. */
@@ -1493,11 +1516,15 @@ type ProxyRoute = 'direct' | 'inherit' | `profile:${string}`;
 interface ProxyProfileInput {
     id: string;
     name?: string;
-    protocol: ProxyProtocol;
-    host: string;
-    port: number;
+    /** Write-only shorthand; mutually exclusive with endpoint/credential fields. */
+    proxyUrl?: string;
+    protocol?: ProxyProtocol;
+    host?: string;
+    port?: number;
     username?: string;
     password?: string;
+    /** Explicitly remove an existing credential record. */
+    clearCredentials?: boolean;
     noProxy?: string[];
     failClosed?: boolean;
 }
@@ -1582,12 +1609,22 @@ declare class ProxyService {
     getProfile(id: string): ProxyProfile | undefined;
     saveProfile(input: ProxyProfileInput): ProxyProfile;
     private buildProfile;
+    /** Parse a write-only proxy URL into canonical components without retaining it. */
+    parseProxyUrlInput(proxyUrl: string): Pick<ProxyProfileInput, 'protocol' | 'host' | 'port' | 'username' | 'password' | 'clearCredentials'>;
+    private normalizeProfileInput;
     saveProfileSafely(input: ProxyProfileInput, expectedRevision?: number): Promise<ProxyProfile>;
+    createProfileSafely(input: ProxyProfileInput, expectedRevision?: number): Promise<ProxyProfile>;
+    updateProfileSafely(input: ProxyProfileInput, expectedRevision?: number): Promise<ProxyProfile>;
+    private mutateProfileSafely;
     /** Import a conventional proxy env file without ever returning or logging its credential URL. */
     importEnvFile(id: string, envFile: string, name?: string): ProxyProfile;
     private parseEnvFile;
     importEnvFileSafely(id: string, envFile: string, name?: string, expectedRevision?: number): Promise<ProxyProfile>;
     deleteProfile(id: string, expectedRevision?: number): Promise<void>;
+    /** Delete a profile, optionally reassigning every direct reference in one tested CAS transaction. */
+    deleteProfileSafely(id: string, reassign?: ProxyRoute, expectedRevision?: number): Promise<{
+        reassignedScopes: string[];
+    }>;
     resolve(scope: string, routeOverride?: ProxyRoute): ProxyRouteResolution;
     private resolveFromConfig;
     setRoute(scope: string, route: ProxyRoute, expectedRevision?: number): Promise<ProxyRouteChangeResult>;
@@ -1608,6 +1645,12 @@ declare class ProxyService {
         status?: number;
         error?: string;
     }>;
+    /** Test an unsaved profile candidate entirely in memory. Credentials never reach persistence. */
+    testProfileCandidate(input: ProxyProfileInput, targetUrl?: string): Promise<{
+        ok: boolean;
+        status?: number;
+        error?: string;
+    }>;
     status(): ProxyStatus;
     private validateRoute;
     private testCandidateRoutes;
@@ -1973,6 +2016,9 @@ declare class Session extends TypedEmitter<SessionEvents> {
     private _abortedTurnIds;
     /** Last completed turnId — used by abortPrompt() to retroactively mark a just-finished turn as interrupted */
     private _lastCompletedTurnId;
+    /** Idempotent teardown checkpoints allow cleanup retry after a partial failure. */
+    private _destroyedAgent;
+    private _closedLogger;
     private _autoApprovedCommands;
     get autoApprovedCommands(): string[];
     constructor(opts: {
@@ -2002,7 +2048,7 @@ declare class Session extends TypedEmitter<SessionEvents> {
     fail(reason: string): void;
     /** Transition to finished — from active only. Emits session_end for backward compat. */
     finish(reason?: string): void;
-    /** Transition to cancelled — from active or error (terminal session cancel) */
+    /** Transition to cancelled — from initializing, active, or error. */
     markCancelled(): void;
     private transition;
     /** Number of prompts waiting in queue */
@@ -2408,6 +2454,16 @@ interface SessionSummary {
     capabilities: AgentCapabilities | null;
     isLive: boolean;
 }
+interface CancelSessionResult {
+    sessionId: string;
+    cancelled: boolean;
+    previousStatus: SessionStatus;
+    status: 'cancelled' | 'finished';
+    alreadyTerminal: boolean;
+    /** Terminal state is durable, but process/logger cleanup needs another cancel retry. */
+    cleanupPending: boolean;
+    warning?: string;
+}
 /**
  * Registry for live Session instances. Provides lookup by session ID, channel+thread,
  * or agent session ID. Coordinates session lifecycle: creation, cancellation, persistence,
@@ -2422,6 +2478,7 @@ declare class SessionManager {
     private eventBus?;
     middlewareChain?: MiddlewareChain;
     private _shutdownComplete;
+    private cancellationOps;
     /**
      * Inject the EventBus after construction. Deferred because EventBus is created
      * after SessionManager during bootstrap, so it cannot be passed to the constructor.
@@ -2454,8 +2511,12 @@ declare class SessionManager {
     }): Promise<void>;
     /** Retrieve the persisted SessionRecord for a given session ID. Returns undefined if no store or record not found. */
     getSessionRecord(sessionId: string): SessionRecord | undefined;
-    /** Cancel a session: abort in-flight prompt, transition to cancelled, destroy agent, and persist. */
-    cancelSession(sessionId: string): Promise<void>;
+    /**
+     * Cancel a session exactly once. Concurrent callers share one operation;
+     * terminal sessions return an idempotent result instead of throwing.
+     */
+    cancelSession(sessionId: string): Promise<CancelSessionResult>;
+    private performCancelSession;
     /** List live (in-memory) sessions, optionally filtered by channel. Excludes assistant sessions. */
     listSessions(channelId?: string): Session[];
     /**
@@ -5161,6 +5222,7 @@ declare class TelegramAdapter extends MessagingAdapter {
     private sessionTrackers;
     private callbackCache;
     private callbackCounter;
+    private pendingCommandInputs;
     /** Pending skill commands queued when session.threadId was not yet set */
     private _pendingSkillCommands;
     /** Control message IDs per session (for updating status text/buttons) */
@@ -5185,6 +5247,23 @@ declare class TelegramAdapter extends MessagingAdapter {
     /** Set during normal shutdown so bot.stop() does not trigger a self-restart. */
     private _stopping;
     private unregisterProxyTester?;
+    /** Serializes command-list reconciliations triggered by startup and plugin hot reloads. */
+    private _commandSyncChain;
+    private _pendingCommandSnapshot?;
+    private _commandSyncWorkerRunning;
+    private _commandSyncGeneration;
+    private _commandSyncAbort?;
+    private _commandSnapshotVersion;
+    private _commandsReadyHandler?;
+    private _latestCommandSnapshot?;
+    private _commandApiReady;
+    private _initialCommandSyncScheduled;
+    private readonly commandOwnershipStore;
+    private readonly commandOwnerIdentity;
+    private readonly commandOwnerBotId;
+    private readonly commandOwnerTakeoverRequested;
+    private _commandOwnerClaimed;
+    private _commandOwnerHeartbeat?;
     private telegramFetch;
     /** Returns the configured Telegram supergroup chat ID. */
     getChatId(): number;
@@ -5202,6 +5281,15 @@ declare class TelegramAdapter extends MessagingAdapter {
         notificationTopicId?: number;
         assistantTopicId?: number;
     }) => Promise<void>);
+    /**
+     * Capture command snapshots once startup begins. The normal boot path emits
+     * SYSTEM_COMMANDS_READY before core.start(), so initial reconciliation reads the
+     * authoritative registry state instead of relying on replay of that event. Once
+     * the API is ready, later snapshots drive hot reloads.
+     */
+    private subscribeToCommandSnapshots;
+    /** Schedule one authoritative initial reconciliation after grammY is available. */
+    private scheduleInitialCommandSync;
     /**
      * Set up the grammY bot, register all callback and message handlers, then perform
      * two-phase startup: Phase 1 starts polling immediately; Phase 2 checks group
@@ -5220,6 +5308,7 @@ declare class TelegramAdapter extends MessagingAdapter {
      * from the registry, deduplicating by command name. Non-critical.
      */
     private syncCommandsWithRetry;
+    private startCommandOwnerHeartbeat;
     private initTopicDependentFeatures;
     /**
      * Handle the /retry command — re-runs prerequisite checks immediately.