@particle-academy/prism-acp 0.5.0 → 0.5.1

package/README.md

@@ -92,6 +92,12 @@ in the direction that spends money silently. Names are compared
 case-insensitively, because Windows environment names are case-insensitive and
 `anthropic_api_key` reaches a child exactly as the uppercase spelling does.
 
+The allow-list withholds every variable not named in it, credentials and
+non-credentials alike. If the child needs an orchestrator session or terminal
+id, a callback URL, or a feature flag, name it in `allowEnv` or it will not
+arrive. This failure is silent: the child can start and appear healthy while
+being unable to identify itself, rather than reporting a missing variable.
+
 Nothing here mutates `process.env`. A workspace may hold an API key on purpose —
 other consumers beside this one legitimately bill per token — so the child's
 environment is constructed and the ambient one is left alone.

package/dist/codex/driver.js

@@ -963,6 +963,8 @@ export class CodexDriver {
         this.#turnDeadlineExpiresAt = 0;
     }
     #hasOutstandingWork() {
+        // If this driver adds client-served fs/* or terminal/* calls, their in-flight
+        // ACP requests belong here too; a slow client tool is outstanding work.
         return this.#pendingApprovals.size > 0 || this.#activeItemIds.size > 0;
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@particle-academy/prism-acp",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "description": "Speak the Agent Client Protocol to a coding-agent CLI the user has already authenticated. No API key, no third-party adapter.",
   "license": "MIT",
   "repository": {