@openacp/cli 2026.401.7 → 2026.402.2

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { A as AgentEvent, a as AgentCapabilities, P as PermissionRequest, b as AgentDefinition, M as McpServerConfig, S as SetConfigOptionValue, c as Attachment, I as InstalledAgent, R as RegistryAgent, d as AgentListItem, e as AvailabilityResult, f as InstallProgress, g as InstallResult, h as SessionStatus, C as ConfigOption, i as AgentSwitchEntry, j as SessionRecord, O as OutgoingMessage, k as IChannelAdapter, N as NotificationMessage, l as StopReason, U as UsageRecord, m as UsageRecordEvent, n as IncomingMessage, D as DisplayVerbosity, o as ChannelConfig, p as AdapterCapabilities, T as ToolCallMeta, V as ViewerLinks, q as OutputMode, r as PlanEntry, s as AgentCommand } from './channel-BOcUuhjt.js';
-export { t as AgentDistribution, u as AuthMethod, v as AuthenticateRequest, w as ChannelAdapter, x as ConfigSelectChoice, y as ConfigSelectGroup, z as ContentBlock, K as KIND_ICONS, B as ModelInfo, E as NewSessionResponse, F as PermissionOption, G as PromptResponse, H as RegistryBinaryTarget, J as RegistryDistribution, L as STATUS_ICONS, Q as SessionListItem, W as SessionListResponse, X as SessionMode, Y as SessionModeState, Z as SessionModelState, _ as TelegramPlatformData, $ as ToolUpdateMeta } from './channel-BOcUuhjt.js';
+import { A as AgentEvent, a as AgentCapabilities, P as PermissionRequest, b as AgentDefinition, M as McpServerConfig, S as SetConfigOptionValue, c as Attachment, I as InstalledAgent, R as RegistryAgent, d as AgentListItem, e as AvailabilityResult, f as InstallProgress, g as InstallResult, h as SessionStatus, C as ConfigOption, i as AgentSwitchEntry, j as AgentCommand, k as SessionRecord, O as OutgoingMessage, l as IChannelAdapter, N as NotificationMessage, m as StopReason, U as UsageRecord, n as UsageRecordEvent, o as IncomingMessage, D as DisplayVerbosity, p as ChannelConfig, q as AdapterCapabilities, T as ToolCallMeta, V as ViewerLinks, r as OutputMode, s as PlanEntry } from './channel-DzDoNxa7.js';
+export { t as AgentDistribution, u as AuthMethod, v as AuthenticateRequest, w as ChannelAdapter, x as ConfigSelectChoice, y as ConfigSelectGroup, z as ContentBlock, K as KIND_ICONS, B as ModelInfo, E as NewSessionResponse, F as PermissionOption, G as PromptResponse, H as RegistryBinaryTarget, J as RegistryDistribution, L as STATUS_ICONS, Q as SessionListItem, W as SessionListResponse, X as SessionMode, Y as SessionModeState, Z as SessionModelState, _ as TelegramPlatformData, $ as ToolUpdateMeta } from './channel-DzDoNxa7.js';
 import pino from 'pino';
 import * as zod from 'zod';
 import { z, ZodSchema } from 'zod';
@@ -46,8 +46,8 @@ declare const TunnelSchema: z.ZodDefault<z.ZodObject<{
         token?: string | undefined;
     }>>;
 }, "strip", z.ZodTypeAny, {
-    enabled: boolean;
     options: Record<string, unknown>;
+    enabled: boolean;
     port: number;
     provider: "cloudflare" | "ngrok" | "bore" | "tailscale";
     maxUserTunnels: number;
@@ -57,8 +57,8 @@ declare const TunnelSchema: z.ZodDefault<z.ZodObject<{
         token?: string | undefined;
     };
 }, {
-    enabled?: boolean | undefined;
     options?: Record<string, unknown> | undefined;
+    enabled?: boolean | undefined;
     port?: number | undefined;
     provider?: "cloudflare" | "ngrok" | "bore" | "tailscale" | undefined;
     maxUserTunnels?: number | undefined;
@@ -91,7 +91,7 @@ declare const UsageSchema: z.ZodDefault<z.ZodObject<{
 type UsageConfig = z.infer<typeof UsageSchema>;
 declare const ConfigSchema: z.ZodObject<{
     instanceName: z.ZodOptional<z.ZodString>;
-    channels: z.ZodObject<{}, "strip", z.ZodObject<{
+    channels: z.ZodDefault<z.ZodObject<{}, "strip", z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         adapter: z.ZodOptional<z.ZodString>;
         displayVerbosity: z.ZodOptional<z.ZodEnum<["low", "medium", "high"]>>;
@@ -136,7 +136,7 @@ declare const ConfigSchema: z.ZodObject<{
         adapter: z.ZodOptional<z.ZodString>;
         displayVerbosity: z.ZodOptional<z.ZodEnum<["low", "medium", "high"]>>;
         outputMode: z.ZodOptional<z.ZodEnum<["low", "medium", "high"]>>;
-    }, z.ZodTypeAny, "passthrough">>, "strip">>;
+    }, z.ZodTypeAny, "passthrough">>, "strip">>>;
     agents: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
         command: z.ZodString;
         args: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
@@ -230,8 +230,8 @@ declare const ConfigSchema: z.ZodObject<{
             token?: string | undefined;
         }>>;
     }, "strip", z.ZodTypeAny, {
-        enabled: boolean;
         options: Record<string, unknown>;
+        enabled: boolean;
         port: number;
         provider: "cloudflare" | "ngrok" | "bore" | "tailscale";
         maxUserTunnels: number;
@@ -241,8 +241,8 @@ declare const ConfigSchema: z.ZodObject<{
             token?: string | undefined;
         };
     }, {
-        enabled?: boolean | undefined;
         options?: Record<string, unknown> | undefined;
+        enabled?: boolean | undefined;
         port?: number | undefined;
         provider?: "cloudflare" | "ngrok" | "bore" | "tailscale" | undefined;
         maxUserTunnels?: number | undefined;
@@ -383,8 +383,8 @@ declare const ConfigSchema: z.ZodObject<{
         workingDirectory?: string | undefined;
     }>;
     tunnel: {
-        enabled: boolean;
         options: Record<string, unknown>;
+        enabled: boolean;
         port: number;
         provider: "cloudflare" | "ngrok" | "bore" | "tailscale";
         maxUserTunnels: number;
@@ -394,13 +394,6 @@ declare const ConfigSchema: z.ZodObject<{
             token?: string | undefined;
         };
     };
-    usage: {
-        enabled: boolean;
-        warningThreshold: number;
-        currency: string;
-        retentionDays: number;
-        monthlyBudget?: number | undefined;
-    };
     channels: {} & {
         [k: string]: z.objectOutputType<{
             enabled: z.ZodDefault<z.ZodBoolean>;
@@ -430,6 +423,13 @@ declare const ConfigSchema: z.ZodObject<{
     sessionStore: {
         ttlDays: number;
     };
+    usage: {
+        enabled: boolean;
+        warningThreshold: number;
+        currency: string;
+        retentionDays: number;
+        monthlyBudget?: number | undefined;
+    };
     integrations: Record<string, {
         installed: boolean;
         installedAt?: string | undefined;
@@ -456,14 +456,6 @@ declare const ConfigSchema: z.ZodObject<{
     instanceName?: string | undefined;
     outputMode?: "low" | "medium" | "high" | undefined;
 }, {
-    channels: {} & {
-        [k: string]: z.objectInputType<{
-            enabled: z.ZodDefault<z.ZodBoolean>;
-            adapter: z.ZodOptional<z.ZodString>;
-            displayVerbosity: z.ZodOptional<z.ZodEnum<["low", "medium", "high"]>>;
-            outputMode: z.ZodOptional<z.ZodEnum<["low", "medium", "high"]>>;
-        }, z.ZodTypeAny, "passthrough">;
-    };
     defaultAgent: string;
     api?: {
         port?: number | undefined;
@@ -476,8 +468,8 @@ declare const ConfigSchema: z.ZodObject<{
         workingDirectory?: string | undefined;
     }> | undefined;
     tunnel?: {
-        enabled?: boolean | undefined;
         options?: Record<string, unknown> | undefined;
+        enabled?: boolean | undefined;
         port?: number | undefined;
         provider?: "cloudflare" | "ngrok" | "bore" | "tailscale" | undefined;
         maxUserTunnels?: number | undefined;
@@ -487,14 +479,23 @@ declare const ConfigSchema: z.ZodObject<{
             token?: string | undefined;
         } | undefined;
     } | undefined;
-    usage?: {
-        enabled?: boolean | undefined;
-        monthlyBudget?: number | undefined;
-        warningThreshold?: number | undefined;
-        currency?: string | undefined;
-        retentionDays?: number | undefined;
-    } | undefined;
     instanceName?: string | undefined;
+    channels?: z.objectInputType<{}, z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        adapter: z.ZodOptional<z.ZodString>;
+        displayVerbosity: z.ZodOptional<z.ZodEnum<["low", "medium", "high"]>>;
+        outputMode: z.ZodOptional<z.ZodEnum<["low", "medium", "high"]>>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        adapter: z.ZodOptional<z.ZodString>;
+        displayVerbosity: z.ZodOptional<z.ZodEnum<["low", "medium", "high"]>>;
+        outputMode: z.ZodOptional<z.ZodEnum<["low", "medium", "high"]>>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        adapter: z.ZodOptional<z.ZodString>;
+        displayVerbosity: z.ZodOptional<z.ZodEnum<["low", "medium", "high"]>>;
+        outputMode: z.ZodOptional<z.ZodEnum<["low", "medium", "high"]>>;
+    }, z.ZodTypeAny, "passthrough">>, "strip"> | undefined;
     outputMode?: "low" | "medium" | "high" | undefined;
     workspace?: {
         baseDir?: string | undefined;
@@ -516,6 +517,13 @@ declare const ConfigSchema: z.ZodObject<{
     sessionStore?: {
         ttlDays?: number | undefined;
     } | undefined;
+    usage?: {
+        enabled?: boolean | undefined;
+        monthlyBudget?: number | undefined;
+        warningThreshold?: number | undefined;
+        currency?: string | undefined;
+        retentionDays?: number | undefined;
+    } | undefined;
     integrations?: Record<string, {
         installed: boolean;
         installedAt?: string | undefined;
@@ -549,6 +557,12 @@ declare class ConfigManager$1 extends EventEmitter {
     load(): Promise<void>;
     get(): Config;
     save(updates: Record<string, unknown>, changePath?: string): Promise<void>;
+    /**
+     * Set a single config value by dot-path (e.g. "security.maxConcurrentSessions").
+     * Builds the nested update object, validates, and saves.
+     * Throws if the path contains blocked keys or the value fails Zod validation.
+     */
+    setPath(dotPath: string, value: unknown): Promise<void>;
     resolveWorkspace(input?: string): string;
     exists(): Promise<boolean>;
     getConfigPath(): string;
@@ -899,8 +913,11 @@ declare class Session extends TypedEmitter<SessionEvents> {
     promptCount: number;
     firstAgent: string;
     agentSwitchHistory: AgentSwitchEntry[];
+    isAssistant: boolean;
     log: Logger$1;
     middlewareChain?: MiddlewareChain;
+    /** Latest commands emitted by the agent — buffered before bridge connects so they're not lost */
+    latestCommands: AgentCommand[] | null;
     readonly permissionGate: PermissionGate;
     private readonly queue;
     private speechService?;
@@ -912,6 +929,7 @@ declare class Session extends TypedEmitter<SessionEvents> {
         workingDirectory: string;
         agentInstance: AgentInstance;
         speechService?: SpeechService;
+        isAssistant?: boolean;
     });
     get status(): SessionStatus;
     /** Transition to active — from initializing, error, or cancelled */
@@ -940,6 +958,8 @@ declare class Session extends TypedEmitter<SessionEvents> {
     getConfigValue(id: string): string | undefined;
     /** Set session name explicitly and emit 'named' event */
     setName(name: string): void;
+    /** Send a config option change to the agent and update local state from the response. */
+    setConfigOption(configId: string, value: SetConfigOptionValue): Promise<void>;
     updateConfigOptions(options: ConfigOption[]): Promise<void>;
     /** Snapshot of current ACP state for persistence */
     toAcpStateSnapshot(): NonNullable<SessionRecord["acpState"]>;
@@ -972,6 +992,27 @@ declare class PromptQueue {
     get isProcessing(): boolean;
 }
 
+interface AssistantCommand {
+    command: string;
+    description: string;
+}
+interface AssistantSection {
+    id: string;
+    title: string;
+    priority: number;
+    buildContext: () => string | null;
+    commands?: AssistantCommand[];
+}
+declare class AssistantRegistry {
+    private sections;
+    private _instanceRoot;
+    /** Set the instance root path used in assistant guidelines */
+    setInstanceRoot(root: string): void;
+    register(section: AssistantSection): void;
+    unregister(id: string): void;
+    buildSystemPrompt(channelId?: string): string;
+}
+
 type PluginPermission = 'events:read' | 'events:emit' | 'services:register' | 'services:use' | 'middleware:register' | 'commands:register' | 'storage:read' | 'storage:write' | 'kernel:access';
 interface OpenACPPlugin {
     /** Unique identifier, e.g., '@openacp/security' */
@@ -1102,7 +1143,26 @@ type CommandResponse = {
     message: string;
 } | {
     type: 'silent';
+} | {
+    type: 'delegated';
 };
+interface MenuItem {
+    id: string;
+    label: string;
+    priority: number;
+    group?: string;
+    action: {
+        type: 'command';
+        command: string;
+    } | {
+        type: 'delegate';
+        prompt: string;
+    } | {
+        type: 'callback';
+        callbackData: string;
+    };
+    visible?: () => boolean;
+}
 interface MenuOption {
     label: string;
     command: string;
@@ -1186,6 +1246,14 @@ interface PluginContext {
     getService<T>(name: string): T | undefined;
     /** Register slash command. Requires 'commands:register'. */
     registerCommand(def: CommandDef): void;
+    /** Register a menu item. Requires 'commands:register'. */
+    registerMenuItem(item: MenuItem): void;
+    /** Unregister a menu item by id. Requires 'commands:register'. */
+    unregisterMenuItem(id: string): void;
+    /** Register an assistant section. Requires 'commands:register'. */
+    registerAssistantSection(section: AssistantSection): void;
+    /** Unregister an assistant section by id. Requires 'commands:register'. */
+    unregisterAssistantSection(id: string): void;
     /** Plugin-scoped storage. Requires 'storage:read' and/or 'storage:write'. */
     storage: PluginStorage;
     /** Plugin-scoped logger. Always available (no permission needed). */
@@ -1397,7 +1465,7 @@ interface ViewerStoreInterface {
 }
 interface TunnelServiceInterface {
     getPublicUrl(): string;
-    start(): Promise<string>;
+    start(apiPort: number): Promise<string>;
     stop(): Promise<void>;
     getStore(): ViewerStoreInterface;
     fileUrl(entryId: string): string;
@@ -1423,6 +1491,8 @@ declare class MessageTransformer {
 
 interface SessionStore {
     save(record: SessionRecord): Promise<void>;
+    /** Immediately flush pending writes to disk (no debounce). */
+    flush(): void;
     get(sessionId: string): SessionRecord | undefined;
     findByPlatform(channelId: string, predicate: (platform: Record<string, unknown>) => boolean): SessionRecord | undefined;
     findByAgentSessionId(agentSessionId: string): SessionRecord | undefined;
@@ -1498,6 +1568,11 @@ interface EventBusEvents {
         attachments?: unknown[];
     }) => void;
     "usage:recorded": (data: UsageRecordEvent) => void;
+    "session:threadReady": (data: {
+        sessionId: string;
+        channelId: string;
+        threadId: string;
+    }) => void;
     "session:configChanged": (data: {
         sessionId: string;
     }) => void;
@@ -1527,7 +1602,9 @@ declare class SessionManager {
     getRecordByAgentSessionId(agentSessionId: string): SessionRecord | undefined;
     getRecordByThread(channelId: string, threadId: string): SessionRecord | undefined;
     registerSession(session: Session): void;
-    patchRecord(sessionId: string, patch: Partial<SessionRecord>): Promise<void>;
+    patchRecord(sessionId: string, patch: Partial<SessionRecord>, options?: {
+        immediate?: boolean;
+    }): Promise<void>;
     getSessionRecord(sessionId: string): SessionRecord | undefined;
     cancelSession(sessionId: string): Promise<void>;
     listSessions(channelId?: string): Session[];
@@ -1567,24 +1644,26 @@ declare class SessionBridge {
     private adapter;
     private deps;
     private connected;
-    private agentEventHandler?;
-    private sessionEventHandler?;
-    private statusChangeHandler?;
-    private namedHandler?;
-    private promptCountHandler?;
+    private cleanupFns;
     constructor(session: Session, adapter: IChannelAdapter, deps: BridgeDeps);
     private get tracer();
+    /** Register a listener and track it for cleanup */
+    private listen;
     /** Send message to adapter, optionally running through message:outgoing middleware */
     private sendMessage;
     connect(): void;
     disconnect(): void;
-    private wireAgentToSession;
-    private wireSessionToAdapter;
+    /** Dispatch an agent event through middleware and to the adapter */
+    private dispatchAgentEvent;
     private handleAgentEvent;
     /** Persist current ACP state (configOptions, agentCapabilities) to session store as cache */
     private persistAcpState;
-    private wirePermissions;
-    private wireLifecycle;
+    /** Resolve a permission request through the full pipeline: middleware -> auto-approve -> ask user */
+    private resolvePermission;
+    /** Check if a permission request should be auto-approved (openacp commands or bypass mode) */
+    private checkAutoApprove;
+    /** Emit permission:afterResolve middleware hook (fire-and-forget) */
+    private emitAfterResolve;
 }
 
 interface TunnelEntry {
@@ -1629,12 +1708,11 @@ declare class ViewerStore {
 declare class TunnelService {
     private registry;
     private store;
-    private server;
     private config;
-    private systemPort;
+    private apiPort;
     private startError;
     constructor(config: TunnelConfig, registryPath?: string, binDir?: string);
-    start(): Promise<string>;
+    start(apiPort: number): Promise<string>;
     stop(): Promise<void>;
     addTunnel(port: number, opts?: {
         label?: string;
@@ -1700,10 +1778,127 @@ interface ContextResult {
     };
 }
 
+interface SessionHistory {
+    version: 1;
+    sessionId: string;
+    turns: Turn[];
+}
+interface Turn {
+    index: number;
+    role: "user" | "assistant";
+    timestamp: string;
+    content?: string;
+    attachments?: HistoryAttachment[];
+    steps?: Step[];
+    usage?: HistoryUsage;
+    stopReason?: string;
+}
+interface HistoryAttachment {
+    type: "image" | "audio" | "file";
+    fileName: string;
+    mimeType: string;
+    size: number;
+}
+interface HistoryUsage {
+    tokensUsed?: number;
+    contextSize?: number;
+    cost?: {
+        amount: number;
+        currency: string;
+    };
+}
+type Step = ThinkingStep | TextStep | ToolCallStep | PlanStep | ImageStep | AudioStep | ResourceStep | ResourceLinkStep | ModeChangeStep | ConfigChangeStep;
+interface ThinkingStep {
+    type: "thinking";
+    content: string;
+}
+interface TextStep {
+    type: "text";
+    content: string;
+}
+interface ToolCallStep {
+    type: "tool_call";
+    id: string;
+    name: string;
+    kind?: string;
+    status: string;
+    input?: unknown;
+    output?: unknown;
+    diff?: {
+        path: string;
+        oldText?: string;
+        newText: string;
+    } | null;
+    locations?: {
+        path: string;
+        line?: number;
+    }[];
+    permission?: {
+        requested: boolean;
+        outcome: string;
+    } | null;
+}
+interface PlanStep {
+    type: "plan";
+    entries: {
+        content: string;
+        priority: string;
+        status: string;
+    }[];
+}
+interface ImageStep {
+    type: "image";
+    mimeType: string;
+    filePath: string;
+    size?: number;
+}
+interface AudioStep {
+    type: "audio";
+    mimeType: string;
+    filePath: string;
+    size?: number;
+}
+interface ResourceStep {
+    type: "resource";
+    uri: string;
+    name: string;
+    text?: string;
+}
+interface ResourceLinkStep {
+    type: "resource_link";
+    uri: string;
+    name: string;
+    title?: string;
+    description?: string;
+}
+interface ModeChangeStep {
+    type: "mode_change";
+    modeId: string;
+}
+interface ConfigChangeStep {
+    type: "config_change";
+    configId: string;
+    value: string;
+}
+
+declare class HistoryStore {
+    private readonly dir;
+    constructor(dir: string);
+    write(history: SessionHistory): Promise<void>;
+    read(sessionId: string): Promise<SessionHistory | null>;
+    exists(sessionId: string): Promise<boolean>;
+    list(): Promise<string[]>;
+    delete(sessionId: string): Promise<void>;
+    private filePath;
+}
+
 declare class ContextManager {
     private providers;
     private cache;
+    private historyStore?;
     constructor(cachePath?: string);
+    setHistoryStore(store: HistoryStore): void;
+    getHistory(sessionId: string): Promise<SessionHistory | null>;
     register(provider: ContextProvider): void;
     getProvider(repoPath: string): Promise<ContextProvider | null>;
     listSessions(query: ContextQuery): Promise<SessionListResult | null>;
@@ -1889,6 +2084,49 @@ declare class LifecycleManager {
     shutdown(): Promise<void>;
 }
 
+declare class MenuRegistry {
+    private items;
+    register(item: MenuItem): void;
+    unregister(id: string): void;
+    getItem(id: string): MenuItem | undefined;
+    /** Get all visible items sorted by priority */
+    getItems(): MenuItem[];
+}
+
+interface AssistantManagerCore {
+    createSession(params: {
+        channelId: string;
+        agentName: string;
+        workingDirectory: string;
+        initialName?: string;
+        isAssistant?: boolean;
+    }): Promise<Session>;
+    connectSessionBridge(session: Session): void;
+    configManager: {
+        get(): {
+            defaultAgent: string;
+        };
+        resolveWorkspace(): string;
+    };
+}
+declare class AssistantManager {
+    private core;
+    private registry;
+    private sessions;
+    private respawning;
+    private pendingSystemPrompts;
+    constructor(core: AssistantManagerCore, registry: AssistantRegistry);
+    spawn(channelId: string, threadId: string): Promise<Session>;
+    get(channelId: string): Session | null;
+    /**
+     * Consume and return any pending system prompt for a channel.
+     * Should be prepended to the first real user message.
+     */
+    consumePendingSystemPrompt(channelId: string): string | undefined;
+    isAssistant(sessionId: string): boolean;
+    respawn(channelId: string, threadId: string): Promise<Session>;
+}
+
 interface InstanceContext {
     id: string;
     root: string;
@@ -1931,6 +2169,9 @@ declare class OpenACPCore {
     readonly lifecycleManager: LifecycleManager;
     private agentSwitchHandler;
     readonly instanceContext?: InstanceContext;
+    readonly menuRegistry: MenuRegistry;
+    readonly assistantRegistry: AssistantRegistry;
+    assistantManager: AssistantManager;
     private getService;
     get securityGuard(): SecurityGuard;
     get notificationManager(): NotificationManager;
@@ -1989,7 +2230,10 @@ declare class OpenACPCore {
         resumed: boolean;
     }>;
     getOrResumeSession(channelId: string, threadId: string): Promise<Session | null>;
-    /** Create a SessionBridge for the given session and adapter */
+    /** Connect a session bridge for the given session (used by AssistantManager) */
+    connectSessionBridge(session: Session): void;
+    /** Create a SessionBridge for the given session and adapter.
+     *  Disconnects any existing bridge for the same session first. */
     createBridge(session: Session, adapter: IChannelAdapter): SessionBridge;
 }
 
@@ -2178,10 +2422,28 @@ interface CreateTokenOpts {
     expire: string;
     scopes?: string[];
 }
+interface StoredCode {
+    code: string;
+    role: string;
+    scopes?: string[];
+    name: string;
+    expire: string;
+    createdAt: string;
+    expiresAt: string;
+    used: boolean;
+}
+interface CreateCodeOpts {
+    role: string;
+    name: string;
+    expire: string;
+    scopes?: string[];
+    codeTtlMs?: number;
+}
 
 declare class TokenStore {
     private filePath;
     private tokens;
+    private codes;
     private savePromise;
     private savePending;
     constructor(filePath: string);
@@ -2194,9 +2456,14 @@ declare class TokenStore {
     list(): StoredToken[];
     private lastUsedSaveTimer;
     updateLastUsed(id: string): void;
-    /** Wait for any in-flight save to complete */
+    /** Wait for any in-flight and pending saves to complete */
     flush(): Promise<void>;
     destroy(): void;
+    createCode(opts: CreateCodeOpts): StoredCode;
+    getCode(code: string): StoredCode | undefined;
+    exchangeCode(code: string): StoredCode | undefined;
+    listCodes(): StoredCode[];
+    revokeCode(code: string): void;
     cleanup(): void;
 }
 
@@ -2713,8 +2980,6 @@ declare class TelegramAdapter extends MessagingAdapter {
     private telegramConfig;
     private saveTopicIds?;
     private permissionHandler;
-    private assistantSession;
-    private assistantInitializing;
     private notificationTopicId;
     private assistantTopicId;
     private sendQueue;
@@ -2800,4 +3065,4 @@ declare class TelegramAdapter extends MessagingAdapter {
     archiveSessionTopic(sessionId: string): Promise<void>;
 }
 
-export { ActivityTracker, AdapterCapabilities, AgentCapabilities, AgentCatalog, AgentCommand, AgentDefinition, AgentEvent, AgentInstance, AgentListItem, AgentManager, AgentStore, AgentSwitchEntry, type ApiConfig, type ApiServerInstance, type ApiServerOptions, type ApiServerService, Attachment, AvailabilityResult, BaseRenderer, type BridgeDeps, CONFIG_REGISTRY, ChannelConfig, type CleanupResult, type CommandArgs, type CommandDef, CommandRegistry, type CommandResponse, type Config, type ConfigFieldDef, ConfigManager$1 as ConfigManager, ConfigOption, ContextManager, type ContextOptions, type ContextProvider, type ContextQuery, type ContextResult, type ContextService, type SessionInfo as ContextSessionInfo, type DeleteTopicResult, DisplaySpecBuilder, DisplayVerbosity, DoctorEngine, type DoctorReport, DraftManager, EntireProvider, EventBus, type EventBusEvents, FileService, type FileServiceInterface, GroqSTT, IChannelAdapter, type IRenderer, IncomingMessage, type InstallContext, InstallProgress, InstallResult, InstalledAgent, type ListItem, type Logger$1 as Logger, type LoggingConfig, McpServerConfig, type MenuOption, MessageTransformer, MessagingAdapter, type MessagingAdapterConfig, type MigrateContext, NotificationManager, NotificationMessage, type NotificationService, OpenACPCore, type OpenACPPlugin, OutgoingMessage, OutputMode, OutputModeResolver, PRODUCT_GUIDE, type PendingFix, PermissionGate, PermissionRequest, PlanEntry, type PluginContext, type PluginPermission, type PluginStorage, PromptQueue, RegistryAgent, type RenderedMessage, SSEManager, type STTOptions, type STTProvider$1 as STTProvider, type STTResult, SecurityGuard, type SecurityService, SendQueue, Session, SessionBridge, type SessionCreateParams, type SessionEvents, SessionFactory, type SessionListResult, SessionManager, SessionRecord, SessionStatus, SetConfigOptionValue, type SettingsAPI, type SideEffectDeps, type SpeechProviderConfig, SpeechService, type SpeechServiceConfig, type SpeechServiceInterface, StaticServer, StderrCapture, StopReason, StreamAdapter, type TTSOptions, type TTSProvider$1 as TTSProvider, type TTSResult, TelegramAdapter, type TerminalIO, ThoughtBuffer, type ThoughtDisplaySpec, ToolCallMeta, ToolCallTracker, type ToolCardSnapshot, ToolCardState, type ToolCardStateConfig, type ToolDisplaySpec, type ToolEntry, ToolStateMap, type TopicInfo, TopicManager, type TunnelServiceInterface, TypedEmitter, type UsageConfig, UsageRecord, UsageRecordEvent, type UsageService, ViewerLinks, cleanupOldSessionLogs, createApiServer, createApiServerService, createChildLogger, createSessionLogger, expandHome, extractContentText, formatTokens, formatToolSummary, formatToolTitle, getConfigValue, getFieldDef, getPidPath, getSafeFields, getStatus, initLogger, installAutoStart, isAutoStartInstalled, isAutoStartSupported, isHotReloadable, log, nodeToWebReadable, nodeToWebWritable, progressBar, resolveOptions, resolveToolIcon, runConfigEditor, setLogLevel, shutdownLogger, splitMessage, startDaemon, stopDaemon, stripCodeFences, truncateContent, uninstallAutoStart };
+export { ActivityTracker, AdapterCapabilities, AgentCapabilities, AgentCatalog, AgentCommand, AgentDefinition, AgentEvent, AgentInstance, AgentListItem, AgentManager, AgentStore, AgentSwitchEntry, type ApiConfig, type ApiServerInstance, type ApiServerOptions, type ApiServerService, type AssistantCommand, AssistantManager, AssistantRegistry, type AssistantSection, Attachment, AvailabilityResult, BaseRenderer, type BridgeDeps, CONFIG_REGISTRY, ChannelConfig, type CleanupResult, type CommandArgs, type CommandDef, CommandRegistry, type CommandResponse, type Config, type ConfigFieldDef, ConfigManager$1 as ConfigManager, ConfigOption, ContextManager, type ContextOptions, type ContextProvider, type ContextQuery, type ContextResult, type ContextService, type SessionInfo as ContextSessionInfo, type DeleteTopicResult, DisplaySpecBuilder, DisplayVerbosity, DoctorEngine, type DoctorReport, DraftManager, EntireProvider, EventBus, type EventBusEvents, FileService, type FileServiceInterface, GroqSTT, IChannelAdapter, type IRenderer, IncomingMessage, type InstallContext, InstallProgress, InstallResult, InstalledAgent, type ListItem, type Logger$1 as Logger, type LoggingConfig, McpServerConfig, type MenuItem, type MenuOption, MenuRegistry, MessageTransformer, MessagingAdapter, type MessagingAdapterConfig, type MigrateContext, NotificationManager, NotificationMessage, type NotificationService, OpenACPCore, type OpenACPPlugin, OutgoingMessage, OutputMode, OutputModeResolver, PRODUCT_GUIDE, type PendingFix, PermissionGate, PermissionRequest, PlanEntry, type PluginContext, type PluginPermission, type PluginStorage, PromptQueue, RegistryAgent, type RenderedMessage, SSEManager, type STTOptions, type STTProvider$1 as STTProvider, type STTResult, SecurityGuard, type SecurityService, SendQueue, Session, SessionBridge, type SessionCreateParams, type SessionEvents, SessionFactory, type SessionListResult, SessionManager, SessionRecord, SessionStatus, SetConfigOptionValue, type SettingsAPI, type SideEffectDeps, type SpeechProviderConfig, SpeechService, type SpeechServiceConfig, type SpeechServiceInterface, StaticServer, StderrCapture, StopReason, StreamAdapter, type TTSOptions, type TTSProvider$1 as TTSProvider, type TTSResult, TelegramAdapter, type TerminalIO, ThoughtBuffer, type ThoughtDisplaySpec, ToolCallMeta, ToolCallTracker, type ToolCardSnapshot, ToolCardState, type ToolCardStateConfig, type ToolDisplaySpec, type ToolEntry, ToolStateMap, type TopicInfo, TopicManager, type TunnelServiceInterface, TypedEmitter, type UsageConfig, UsageRecord, UsageRecordEvent, type UsageService, ViewerLinks, cleanupOldSessionLogs, createApiServer, createApiServerService, createChildLogger, createSessionLogger, expandHome, extractContentText, formatTokens, formatToolSummary, formatToolTitle, getConfigValue, getFieldDef, getPidPath, getSafeFields, getStatus, initLogger, installAutoStart, isAutoStartInstalled, isAutoStartSupported, isHotReloadable, log, nodeToWebReadable, nodeToWebWritable, progressBar, resolveOptions, resolveToolIcon, runConfigEditor, setLogLevel, shutdownLogger, splitMessage, startDaemon, stopDaemon, stripCodeFences, truncateContent, uninstallAutoStart };