@platless/axom-cli 0.5.9 → 0.6.36

package/dist/workstation/acp/registry/catalog.js

@@ -44,10 +44,10 @@
  *
  * 这里写下的来源**整个替换** registry 的 `version` 与 `distribution`，id 与展示名仍是 registry 的，
  * 于是已有的配置条目、roster、安装、启动、更新都不用知道发生过替换（见 {@link withCatalogOverrides}）。
- * 本文件的 distribution 用于长期策略；Qoder 等临时的钉版本放在
+ * 本文件的 distribution 用于长期策略；临时的版本覆盖才放在
  * axom-patch/cli/runtime.json，按 registry 版本挑选（`when_registry_version` / `until_registry_version`，
  * 见 `patchAssets.ts`），registry 一到就自己让位。两者与上面的 `install` 是同一条安全边界：只能是
- * 随 CLI 发布、钉死版本、由真机验证过的可信配置。
+ * 随 CLI 发布、钉死版本、由补丁哈希和回归验证过的可信配置。
  *
  * ## `supplement` 与 `supersedes`：registry 缺的条目、registry 不肯撤的条目
  *
@@ -86,13 +86,13 @@ export const AXOM_AGENT_CATALOG = [
         defaultName: 'claude-agent',
         defaultLabel: 'Claude Agent',
         detect: { commands: ['claude'] },
-        // 钉版本的唯一理由是补丁：claude-account-limits 的配方只核验过 0.90.0（runtime.json 的
+        // 钉版本的唯一理由是补丁：claude-account-limits 的配方只核验过 0.97.0（runtime.json 的
         // package_patches）。不钉的话 registry 一发新版，Install/Update 就装上一个配方不覆盖的包，
         // 账号配额扩展静默消失——2026-10-14 的 antigravity（registry 已到 1.4.0、native extension
         // 只认 1.3.0）就是这个缺口的实例。钉住后 scan 的 Update 比对（installedVersion vs 本清单的
         // version）只在落后于钉住版本时才成立，上游新版要等 nightly 核验移植配方后再 bump。
-        // 周期核验步骤见 axom-patch/cli/nightly-task.md。
-        distribution: { version: '0.90.0', npx: { package: '@agentclientprotocol/claude-agent-acp@0.90.0' } },
+        // 周期核验步骤见 axom-patch/DAILY_UPGRADE_CHECK.md。
+        distribution: { version: '0.97.0', npx: { package: '@agentclientprotocol/claude-agent-acp@0.97.0' } },
         launchEnv: {
             // Axom 拉起的 Claude Code——会话进程、配额读的 /usage、auth status 探针、terminalLogin 代跑的
             // `--cli auth login`——一律使用独立的 OAuth 凭据槽，与用户终端 `claude login` 写进默认槽
@@ -116,16 +116,18 @@ export const AXOM_AGENT_CATALOG = [
         defaultName: 'codex',
         defaultLabel: 'Codex',
         detect: { commands: ['codex'] },
-        // 与 claude-acp 同一条规则：codex-account-limits 只核验过 2.2.2，钉住直到配方随新版本移植。
-        distribution: { version: '2.2.2', npx: { package: '@agentclientprotocol/codex-acp@2.2.2' } },
+        // 与 claude-acp 同一条规则：codex-account-limits 只核验过 2.3.0（2026-10-27 nightly；2.3.0 的
+        // authStatus 锚点在两处 capabilities 里重复，已加长到 initialize 独有后缀消歧），钉住直到配方随新版本移植。
+        distribution: { version: '2.3.0', npx: { package: '@agentclientprotocol/codex-acp@2.3.0' } },
     },
     {
         registryAgent: 'qoder',
         defaultName: 'qoder',
         defaultLabel: 'Qoder',
         detect: { commands: ['qodercli'] },
-        // The temporary registry catch-up pin lives in axom-patch/cli/runtime.json so a newer
-        // upstream release can take over without another Axom release.
+        // Native ACP is the sole Qoder entry. The exact --acp argv is pinned here; the package
+        // patch layer verifies the 1.1.75 package and its qoder-native-acp recipe hashes.
+        distribution: { version: '1.1.75', npx: { package: '@qoder-ai/qodercli@1.1.75', args: ['--acp'] } },
     },
     // `gemini` was here and is deliberately gone. `@google/gemini-cli --acp` now refuses `session/new`
     // outright ("This client is no longer supported for Gemini Code Assist for individuals … migrate
@@ -144,7 +146,7 @@ export const AXOM_AGENT_CATALOG = [
         // 其余字段照 registry#458 的条目写。
         supplement: {
             name: 'Kimi Code',
-            version: '2.1.1',
+            version: '2.3.3',
             description: "Moonshot AI's next-gen coding agent",
             repository: 'https://github.com/MoonshotAI/kimi-code',
             website: 'https://moonshotai.github.io/kimi-code/',
@@ -152,13 +154,13 @@ export const AXOM_AGENT_CATALOG = [
             license: 'MIT',
             icon: 'https://cdn.agentclientprotocol.com/registry/v1/latest/kimi.svg',
             distribution: {
-                binary: kimiCodeBinary('2.1.1', {
-                    'darwin-aarch64': ['darwin-arm64', '8c3bad99571b16abd113ab5d511a98a36b852c0d5493991842a67b8c2bc4ecd0'],
-                    'darwin-x86_64': ['darwin-x64', 'f6dc0289112c24119d070f9203d44bcd53580e380819db25b58be65643b75bd4'],
-                    'linux-aarch64': ['linux-arm64', '5c68d74b139b47fb3457f3805a159cdfa942a6a98a159ab158a1baf93b024bbd'],
-                    'linux-x86_64': ['linux-x64', 'b66cc3787bc9dfa6a06761305dc8878f98e7a24f79fa4494c00714229a1486e8'],
-                    'windows-aarch64': ['win32-arm64', '72bb17fef0d165a5f61905ede7e57c552791905d605a778967d054fe702873d4'],
-                    'windows-x86_64': ['win32-x64', '87756a53a9bb0915842d884eaf43f69a06b2e404bcbb05d41c519c12d4b410cb'],
+                binary: kimiCodeBinary('2.3.3', {
+                    'darwin-aarch64': ['darwin-arm64', 'd097b397db785e9bde07e9d169870e315dd9a0d9d6542727ea4a50e4a630a280'],
+                    'darwin-x86_64': ['darwin-x64', '9c42127a60488add5cfb8ca60d35f4df9d881552eb3b05268c3a691f7b3c5406'],
+                    'linux-aarch64': ['linux-arm64', '4b12a13d64dbf9cde631e4c74965ccd1b72bfd93892b30d8272b4bc6448fe45f'],
+                    'linux-x86_64': ['linux-x64', '0e4a766d38e5202a2413b8517bd4b3a2c00486327a6e231c98f99a0bbf7422e1'],
+                    'windows-aarch64': ['win32-arm64', '655a4b0e57090fa414aec6c69e4801c12a28e7ca75dd627bfc64340b600079fd'],
+                    'windows-x86_64': ['win32-x64', '08bd5fcb7b0d6b3bcd70ef42e58b73c884149905b0044544a941ad795f587c4a'],
                 }),
             },
         },
@@ -173,21 +175,20 @@ export const AXOM_AGENT_CATALOG = [
         registryAgent: 'command-code',
         defaultName: 'command-code',
         defaultLabel: 'Command Code',
-        // registry 没有它。1.66.0 还没有 `acp` 子命令，1.74.3 起有、真机试跑通过；2026-10-14 nightly
-        // 升到 1.82.1：`acp` 子命令仍在（四个 bin 不变），commandcode-account-limits 配方已随
-        // generate.py 移植（handler map 换了名字 u/dn→m/hn，锚点已跟）。包里有 `cmd`、`cmdc`、
+        // registry 没有它。1.66.0 还没有 `acp` 子命令，1.74.3 起有、真机试跑通过；2026-10-27 已到 1.88.0（10-25）：`acp` 子命令仍在（四个 bin 不变），commandcode-account-limits 配方已随
+        // generate.py 移植（handler map 枚举每版改名 u/dn→m/hn→m/vn→m/bn，锚点已跟）。包里有 `cmd`、`cmdc`、
         // `commandcode`、`command-code` 四个 bin，npx 挑与包名同名的那个。没有 ACP 登录方法，只有一句
         // 说明（终端里跑 `cmd login`）；凭据在 `~/.commandcode`，与用户自己装的那份共用。npm 上的许可证
         // 写的是 UNLICENSED（专有）。
         supplement: {
             name: 'Command Code',
-            version: '1.82.1',
+            version: '1.88.0',
             description: 'Command Code, coding agent that continuously learns your coding taste.',
             website: 'https://commandcode.ai',
             authors: ['Command Code'],
             license: 'UNLICENSED',
             icon: 'https://commandcode.ai/favicon.ico',
-            distribution: { npx: { package: 'command-code@1.82.1', args: ['acp'] } },
+            distribution: { npx: { package: 'command-code@1.88.0', args: ['acp'] } },
         },
         detect: { commands: ['command-code', 'commandcode'] },
     },
@@ -203,19 +204,19 @@ export const AXOM_AGENT_CATALOG = [
         // 2026-10-13 真机验证（ZCode 桌面 3.14.5 + 0.69.3）：initialize → session/new → 首轮 prompt 通过，
         // 日志 "serving the coding-plan API key (config.json or store)"。0.63/0.64 那轮不兼容（模型只剩
         // 无授权的 builtin:bigmodel-coding-plan\GLM-5.3，首轮 CONFIGURATION_ERROR "Model creation failed"，
-        // 2026-10-06 两台机器复现）自 0.68.1 起修复。2026-10-14 nightly 升到 0.69.4：三份配方的目标文件
-        // 与 0.69.3 字节一致（配方 versions 同时覆盖两版），subagent 探针在 0.69.4 补丁副本上通过、
-        // pristine 证实上游仍未原生发出 subagent/async 变体。
+        // 2026-10-06 两台机器复现）自 0.68.1 起修复。2026-10-27 nightly 升到 0.76.3：subagent 探针在
+        // 0.76.3 补丁副本上通过、pristine 复现缺失（上游仍无 subagent/async 变体、无配额能力、无模型
+        // 兜底）；全部锚点存活，配方纯重哈希。
         supplement: {
             name: 'ZCode',
-            version: '0.69.4',
+            version: '0.76.3',
             description: 'Community bridge that drives the real ZCode app-server (GLM) over ACP.',
             repository: 'https://github.com/william0wang/zcode-acp',
             website: 'https://github.com/william0wang/zcode-acp',
             authors: ['William Wang'],
             license: 'Apache-2.0',
             icon: 'https://raw.githubusercontent.com/william0wang/zcode-acp/main/registry/zcode-acp/icon.svg',
-            distribution: { npx: { package: 'zcode-acp-server@0.69.4' } },
+            distribution: { npx: { package: 'zcode-acp-server@0.76.3' } },
         },
         prerequisite: {
             label: 'ZCode',
@@ -238,7 +239,7 @@ export const AXOM_AGENT_CATALOG = [
         recommended: true,
         // pi-steering 与 pi-subagent-subwork 两份配方只核验过 0.0.34。registry 今天也在 0.0.34，
         // 但那是巧合而不是保护：上游一发 0.0.35，未钉版本的 Install 就会装上一个 steering/子代理
-        // 归一都不生效的包。钉住后版本只随配方移植走（nightly-task.md）。
+        // 归一都不生效的包。钉住后版本只随配方移植走（DAILY_UPGRADE_CHECK.md）。
         distribution: { version: '0.0.34', npx: { package: 'pi-acp@0.0.34' } },
         prerequisite: {
             label: 'Pi',
@@ -287,27 +288,52 @@ export const AXOM_AGENT_CATALOG = [
     // registry 自己的条目（binary .par），我们只补名字与本机检测；`agy` 是 Antigravity 装好后放进 PATH 的命令。
     // distribution 钉住：antigravity 的账号配额靠 native extension（runtime.json
     // native_extensions，account-limits/antigravity-proxy.mjs），proxy 是 stdio sidecar，只在核验过的
-    // 版本上声明能力。2026-10-14 nightly 升到 1.4.0：真实 1.4.0 .par 经 proxy 拉起，initialize 透传无损、
-    // `axom/accountRateLimits` 能力注入成功（本地实测；配额 READ 属于用户凭据路径，留给真机冒烟）。
-    // 归档 URL 抄自 registry 的 1.4.0 条目；registry 本身不给这个条目发 sha256，这里同样不发，校验语义与
-    // registry 直装一致（binaryInstall：无 sha256 即不校验）。上游发新版时按 nightly-task.md 核验后同升。
+    // 版本上声明能力。2026-10-25 nightly 升到 1.4.3：真实 1.4.3 .par 经 proxy 拉起，initialize 透传无损、
+    // `axom/accountRateLimits`（v5）能力注入成功（本地实测；配额 READ 属于用户凭据路径，留给真机冒烟）。
+    // 归档 URL 抄自 registry 的 1.4.3 条目（六平台 HEAD 200）；registry 本身不给这个条目发 sha256，这里同样不发，校验语义与
+    // registry 直装一致（binaryInstall：无 sha256 即不校验）。上游发新版时按 axom-patch/DAILY_UPGRADE_CHECK.md 核验后同升。
     {
         registryAgent: 'antigravity-acp',
         defaultName: 'google-antigravity',
         defaultLabel: 'Google Antigravity',
         detect: { commands: ['agy'] },
         distribution: {
-            version: '1.4.0',
+            version: '1.4.3',
             binary: {
-                'darwin-aarch64': { archive: 'https://dl.google.com/agy-extensions/releases/macos/agy-acp-server-1.4.0-darwin-arm64.zip', cmd: './agy_acp_server.par' },
-                'darwin-x86_64': { archive: 'https://dl.google.com/agy-extensions/releases/macos/agy-acp-server-1.4.0-darwin-x86_64.zip', cmd: './agy_acp_server.par' },
-                'linux-x86_64': { archive: 'https://dl.google.com/agy-extensions/releases/linux/agy-acp-server-1.4.0-linux-x86_64.zip', cmd: './agy_acp_server.par', args: ['--uid='] },
-                'linux-aarch64': { archive: 'https://dl.google.com/agy-extensions/releases/linux/agy-acp-server-1.4.0-linux-arm64.zip', cmd: './agy_acp_server.par', args: ['--uid='] },
-                'windows-x86_64': { archive: 'https://dl.google.com/agy-extensions/releases/windows/agy-acp-server-1.4.0-windows-x86_64.zip', cmd: './agy_acp_server.exe' },
-                'windows-aarch64': { archive: 'https://dl.google.com/agy-extensions/releases/windows/agy-acp-server-1.4.0-windows-arm64.zip', cmd: './agy_acp_server.exe' },
+                'darwin-aarch64': { archive: 'https://dl.google.com/agy-extensions/releases/macos/agy-acp-server-1.4.3-darwin-arm64.zip', cmd: './agy_acp_server.par' },
+                'darwin-x86_64': { archive: 'https://dl.google.com/agy-extensions/releases/macos/agy-acp-server-1.4.3-darwin-x86_64.zip', cmd: './agy_acp_server.par' },
+                'linux-x86_64': { archive: 'https://dl.google.com/agy-extensions/releases/linux/agy-acp-server-1.4.3-linux-x86_64.zip', cmd: './agy_acp_server.par', args: ['--uid='] },
+                'linux-aarch64': { archive: 'https://dl.google.com/agy-extensions/releases/linux/agy-acp-server-1.4.3-linux-arm64.zip', cmd: './agy_acp_server.par', args: ['--uid='] },
+                'windows-x86_64': { archive: 'https://dl.google.com/agy-extensions/releases/windows/agy-acp-server-1.4.3-windows-x86_64.zip', cmd: './agy_acp_server.exe' },
+                'windows-aarch64': { archive: 'https://dl.google.com/agy-extensions/releases/windows/agy-acp-server-1.4.3-windows-arm64.zip', cmd: './agy_acp_server.exe' },
             },
         },
     },
+    // CodeBuddy（腾讯的编码 agent，npm 是它唯一的官方 CLI 分发）。registry 已收录 `codebuddy-code`
+    // （npx @tencent-ai/codebuddy-code --acp，包自带 @agentclientprotocol/sdk 依赖），于是这是最普通
+    // 的「registry 条目 + 本清单认证」形态：不 supplement（registry 有这个 id）、不 pathLaunch（有可装
+    // 产物，Axom 装自己托管的那份）、不钉版本（没有依赖版本的配方）、不配 launchEnv——本条就是
+    // CodeBuddy 本身，登录落在它的 copilot.tencent.com。
+    //
+    // 2026-10-19/21 真机实测（npm 2.169.0/2.171.0，ACP capture）：`--acp` 起 initialize 通过，能力
+    // image/embeddedContext/mcp http+sse/loadSession/delegateTools/multitask；authMethods 声明
+    // iOA、external（Google/Github）、internal（WeChat）、selfhosted；登录链接经 `_codebuddy.ai/authUrl`
+    // 扩展通知推送（acpClient 的处理器）。凭据在 CODEBUDDY_CONFIG_DIR（默认 ~/.codebuddy）的
+    // credentials.json，登录走 ACP 认证流（一次性，与终端 CLI 共用）。
+    //
+    // 同一引擎另有 App 产品形态（App 内 product.json 声明 productName/endpoint/计费，经其自设的
+    // ACC_PRODUCT_CONFIG_PATH 环境变量切换）——那是**另一个产品、另一套账号**，npm 包名、registry
+    // id、CLI bin 都不带它的名字；Axom 只策展 npm 的 CodeBuddy，不策展那个 App 形态，也不替用户
+    // 预设产品开关（真需要的用户可经 agentEnv 自行覆盖）。
+    //
+    // detect 认 npm 包的两个主 bin（codebuddy 与 cbc；codebuddy-code/codebuddy-lowmem 是同名
+    // 变体，不另列）。
+    {
+        registryAgent: 'codebuddy-code',
+        defaultName: 'codebuddy',
+        defaultLabel: 'CodeBuddy',
+        detect: { commands: ['codebuddy', 'cbc'] },
+    },
 ];
 /**
  * Kimi Code 的六个平台归档：GitHub release `@moonshot-ai/kimi-code@<version>` 下的

package/dist/workstation/acp/registry/launch.js

@@ -1,7 +1,9 @@
 import { existsSync } from 'node:fs';
 import { homedir } from 'node:os';
 import path from 'node:path';
+import semver from 'semver';
 import { fileURLToPath } from 'node:url';
+import { managedRuntimeFor, verifyManagedRuntime, verifyRecordedManagedRuntime } from '../managedRuntime.js';
 import { nativeExtensionFor } from '../patchAssets.js';
 import { verifyPatchedFiles } from '../managedPatches.js';
 import { AdapterNotInstalledError, inside, labelFor } from '../builds/model.js';
@@ -45,10 +47,23 @@ function expandHomeInEnv(env) {
     return Object.fromEntries(Object.entries(env).map(([key, value]) => [key, value === '~' ? home : value.startsWith('~/') ? path.join(home, value.slice(2)) : value]));
 }
 export async function launchForBuild(build, root, options) {
+    const policy = options.policy ?? managedRuntimeFor(build.agentId);
+    // Only a caller resolving an explicit recorded old binding/rollback may use legacy launch rules.
+    // Removing runtimeReleaseId from the strict target never changes its policy classification.
+    const legacy = options.allowLegacy && !build.runtimeReleaseId && policy && (build.package !== policy.package || (semver.valid(build.version) !== null && semver.lt(build.version, policy.version)));
+    if (policy && !legacy) {
+        const verify = options.allowLegacy && build.runtimeReleaseId ? verifyRecordedManagedRuntime : verifyManagedRuntime;
+        await verify({ ...options, policy, build, storeRoot: root, initialize: false });
+    }
+    // A build recorded under a strict policy this CLI no longer ships launches like any other build:
+    // its runtimeReleaseId is history, and the patched-file check below still applies.
     const dir = inside(root, build.dir);
     const entry = inside(dir, build.launch.entry);
     if (build.kind === 'npm-patched' && build.package && build.patchedFiles) {
-        await verifyPatchedFiles(inside(path.join(dir, 'node_modules'), build.package), build.patchedFiles);
+        if (build.patchedFilesBase !== undefined && build.patchedFilesBase !== 'node_modules')
+            throw new Error('Invalid Axom patched file base');
+        const modules = path.join(dir, 'node_modules');
+        await verifyPatchedFiles(build.patchedFilesBase === 'node_modules' ? modules : inside(modules, build.package), build.patchedFiles);
     }
     if (!existsSync(entry))
         throw new AdapterNotInstalledError(build.agentId, `build ${build.buildId} is missing its executable`);

package/dist/workstation/acp/switching.js

@@ -62,7 +62,6 @@ const PLAIN_BLOCKERS = {
     'a permission or elicitation is unanswered': 'it is waiting for an answer',
     'the agent reports it is active': 'the agent says it is still working',
     'an async task or background terminal is still running': 'it has a background task or terminal still running',
-    'a delegation refresh is pending': 'its delegated access is being renewed',
 };
 /** Why a session may not be switched now (spec §6.3 step 2); empty = strictly idle. */
 export function switchBlockers(input) {
@@ -83,8 +82,6 @@ export function switchBlockers(input) {
         blockers.push('the agent reports it is active');
     if ((session.liveBackgroundWork ?? 0) > 0)
         blockers.push('an async task or background terminal is still running');
-    if (session.delegation?.refreshPending)
-        blockers.push('a delegation refresh is pending');
     const quiet = input.quietMs ?? SWITCH_QUIET_MS;
     const last = Math.max(input.lastActivityAt, session.lastFoldAt ?? 0);
     if (input.now - last < quiet)

package/dist/workstation/acp/test/fakeAgent.js

@@ -113,6 +113,12 @@
 //                                               // with this message instead of succeeding — lets a
 //                                               // test prove a real agent-side rejection surfaces as
 //                                               // a rejected promise
+//     authenticateNotifications?: Array<{method: string, params: unknown}>,
+//                                              // sent as client notifications at the top of the
+//                                              // `authenticate` handler, before anything else —
+//                                              // models an agent that pushes a login URL as an
+//                                              // extension notification (`_codebuddy.ai/authUrl`)
+//                                              // rather than eliciting or printing it
 //     hangOnAuthenticate?: boolean,            // if true, `authenticate` never resolves — the shape
 //                                               // measured on a real agent that opens a browser and
 //                                               // waits for its callback (spec §6.2: antigravity's
@@ -348,6 +354,13 @@ async function main() {
             writeFileSync(config.authenticateSink, JSON.stringify(ctx.params));
         if (config.authenticateRejectsWith)
             throw new Error(config.authenticateRejectsWith);
+        // Extension notifications an agent pushes while answering `authenticate` (measured on the real
+        // CodeBuddy adapter: `_codebuddy.ai/authUrl` with `{authUrl, provider}` — a URL channel that
+        // is neither `elicitation/create` nor stderr). Sent before the reply, so a client that only
+        // listens from the reply onward still misses them, exactly like the real one.
+        for (const { method, params } of config.authenticateNotifications ?? []) {
+            await ctx.client.notify(method, params);
+        }
         if (config.createElicitationDuringAuthenticate) {
             // `requestId` is filled in here rather than in the config: a login elicitation is
             // request-scoped (ACP's `ElicitationRequestScope` — "tied to a specific JSON-RPC request

package/dist/workstation/acp/test/keeperWorld.js

@@ -16,8 +16,10 @@ import { expect, vi } from 'vitest';
 import { killKeepersUnder, tempDir } from '../../../test/keeperKit.js';
 import { AcpKeeperClient } from '../../keepers/acp/client.js';
 import { computeBuildVersion } from '../../keepers/kit/buildVersion.js';
+import { readKeeperManifest } from '../../keepers/kit/bundle.js';
 import { keeperGen } from '../../keepers/kit/identity.js';
 import { KeeperLauncher } from '../../keepers/kit/launcher.js';
+import { acquireStartupLock, releaseStartupLock } from '../../keepers/kit/lock.js';
 import { AgentSessionManager } from '../../agentSessions.js';
 import { AGENT_WIRE_VERSION } from '../../protocol/agent.js';
 import { TaskRegistry } from '../../update/taskRegistry.js';
@@ -97,6 +99,32 @@ export class KeeperWorld {
         this.agentDir = this.newAgentDir(`${prefix}agent-`);
         this.launcher = this.launcherFor(realDist);
     }
+    /** These integrations require keeper hosting, rather than fallback after an unrelated lock-port collision. */
+    static async create(prefix, includeOlderGeneration = false) {
+        const current = keeperGen((await readKeeperManifest(join(realDist, 'acp'))).buildVersion);
+        for (let attempt = 0; attempt < 100; attempt++) {
+            const candidate = new this(prefix);
+            const locks = [];
+            try {
+                const generations = [current];
+                if (includeOlderGeneration)
+                    generations.push(candidate.olderGeneration().oldGen);
+                for (const gen of new Set(generations)) {
+                    locks.push(await acquireStartupLock(candidate.launcher.pathsFor('acp', gen).lockPort));
+                }
+                return candidate;
+            }
+            catch (error) {
+                await candidate.dispose();
+                if (error.code !== 'EADDRINUSE')
+                    throw error;
+            }
+            finally {
+                await Promise.all(locks.map(releaseStartupLock));
+            }
+        }
+        throw new Error('No unoccupied keeper-acp integration fixture identity');
+    }
     launcherFor(distDir) {
         return new KeeperLauncher({ configDir: this.configDir, workstationId: 'ws-t21', server: 'http://test.invalid', distDir, useSystemd: false,
             startTimeoutMs: 20_000, umask: 0o022 });

package/dist/workstation/acp/test/raw/sources.js

@@ -1,29 +1,15 @@
-/**
- * Every capture Task 17d's gate runs on, and how each becomes a processor raw log.
- *
- * - `real`: the committed, sanitised real captures (`*.jsonl` in this directory, by discovery).
- * - `qoder`: Qoder captures wrapped from the update-level Qoder fixtures (`qoderCaptures.ts`) — there
- *   is no raw Qoder capture; a real one is T23's.
- * - `synthetic`: hand-written captures that pin the known ordering fixes — experiment 0.1's wire
- *   (analysis B §0.1) and out-of-turn chunks followed by the next prompt (17b) — an interrupt
- *   mid-turn (`session/cancel`), which no real capture has, and (T19 prerequisite) a `session/load`
- *   with history and a Qoder `session/resume`.
- *
- * {@link buildLog} plays the daemon: the transducer (`fixtures.ts`), plus, for Qoder, the
- * `qoder_terminal_repair` note where `AcpAgents` enables the repair today (after the `session/new`
- * response) and the side-file notes the daemon's `BackgroundSideNotes` reader appends once the native
- * rows exist (after the turn, as the live repair sees them).
- */
-import { existsSync, readFileSync } from 'node:fs';
-import { mkdir, mkdtemp, rm, writeFile } from 'node:fs/promises';
-import { tmpdir } from 'node:os';
-import { dirname, join } from 'node:path';
-import { BackgroundSideNotes, nativeTerminalHistoryPath } from '../../../qoderAdapter/backgroundTerminal.js';
+import { join } from 'node:path';
 import { decodeStreamRecord } from '../../processor/record.js';
-import { sideDemand } from '../../processor/sideChannel.js';
-import { run } from '../../processor/test/harness.js';
 import { fixtureNames, RAW_DIR, readFixtureText, transduce } from './fixtures.js';
-import { captureText, CERTIFIED_QODER, down, qoderCaptures, up, update } from './qoderCaptures.js';
+/** Lines → kit-stream ndjson (a synthetic `proc spawn` first, `t` = position). */
+export function captureText(lines) {
+    const records = [JSON.stringify({ o: 0, t: 0, k: 'proc', kind: 'spawn', spawnId: 'capture', pid: 0, pgid: 0, startTime: 0 })];
+    lines.forEach((line, index) => records.push(JSON.stringify({ o: index + 1, t: index + 1, k: line.k, l: JSON.stringify(line.message) })));
+    return `${records.join('\n')}\n`;
+}
+export const up = (message) => ({ k: 'up', message });
+export const down = (message) => ({ k: 'down', message });
+export const update = (sessionId, value) => up({ jsonrpc: '2.0', method: 'session/update', params: { sessionId, update: value } });
 const SYNTHETIC_PROMPT = [{ type: 'text', text: 'go' }];
 const opening = (sessionId) => [
     down({ jsonrpc: '2.0', id: 1, method: 'initialize', params: { protocolVersion: 1, clientCapabilities: {} } }),
@@ -117,7 +103,7 @@ function loadThenPrompt() {
         ]) };
 }
 /**
- * T19 prerequisite: a Qoder cached `session/resume` (the certified runtime advertising
+ * T19 prerequisite: a cached `session/resume` (an adapter advertising
  * `sessionCapabilities.resume`) — no history, a config snapshot on the response, then one turn.
  */
 function resumeThenPrompt() {
@@ -125,7 +111,7 @@ function resumeThenPrompt() {
     return { name: 'synthetic-resume', kind: 'synthetic', text: captureText([
             down({ jsonrpc: '2.0', id: 1, method: 'initialize', params: { protocolVersion: 1, clientCapabilities: {} } }),
             up({ jsonrpc: '2.0', id: 1, result: { protocolVersion: 1, agentCapabilities: { loadSession: true, sessionCapabilities: { resume: {} } },
-                    authMethods: [], agentInfo: CERTIFIED_QODER } }),
+                    authMethods: [], agentInfo: { name: '@agentclientprotocol/claude-agent-acp', version: '1.0.0' } } }),
             down({ jsonrpc: '2.0', id: 2, method: 'session/resume', params: { sessionId: S, cwd: '/work/synthetic', mcpServers: [] } }),
             up({ jsonrpc: '2.0', id: 2, result: { configOptions: [{ id: 'model', name: 'Model', type: 'select', currentValue: 'model-0001',
                             options: [{ value: 'model-0001', name: 'xxxxx' }, { value: 'model-0002', name: 'xxxxx' }] }] } }),
@@ -134,116 +120,16 @@ function resumeThenPrompt() {
             up({ jsonrpc: '2.0', id: 3, result: { stopReason: 'end_turn' } }),
         ]) };
 }
-/**
- * Real Qoder captures (T30a/T30b): `qoder-real-<what>.jsonl`, written by `scripts/acp-capture.mjs` against `qodercli --acp` or the SDK
- * adapter and sanitised by `axom-cli/scripts/acp-sanitize.mjs` (with `--side` when the capture has one). Each is discovered like any
- * real capture, joins every gate that runs on all sources (`processor/rawFixtures.test.ts`, the goldens of
- * `processor/equivalence.test.ts`), and is played as the daemon plays a live Qoder session: the repair note right after the open's
- * response (`session/new`) or right after a load's open note, for the certified runtime only (`nativeTerminalHistoryPath`), and the
- * side file `<name>.side.ndjson` — the root native transcript rows — read through the daemon's `BackgroundSideNotes` after the turn.
- */
-export const REAL_QODER_PREFIX = 'qoder-real-';
-export const sideFileOf = (fixture) => fixture.replace(/\.jsonl$/, '.side.ndjson');
-/** The discovered real Qoder capture names (without `.jsonl`), for the static source lists of the gates. */
-export const realQoderNames = () => fixtureNames().filter((name) => name.startsWith(REAL_QODER_PREFIX)).map((name) => name.replace(/\.jsonl$/, ''));
-/** The capture's first open (`session/new` / `load` / `resume`), its response and the adapter's `initialize` identity. */
-export function openFacts(capture) {
-    const lines = capture.filter((r) => r.kind === 'up' || r.kind === 'down')
-        .map((r) => { try {
-        return { r, m: JSON.parse(r.line) };
-    }
-    catch {
-        return undefined;
-    } }).filter((x) => x !== undefined);
-    const responseTo = (id) => lines.find(({ r, m }) => r.kind === 'up' && m.method === undefined && JSON.stringify(m.id) === JSON.stringify(id));
-    const init = lines.find(({ r, m }) => r.kind === 'down' && m.method === 'initialize');
-    const agentInfo = init ? responseTo(init.m.id)?.m.result?.agentInfo : undefined;
-    const open = lines.find(({ r, m }) => r.kind === 'down' && ['session/new', 'session/load', 'session/resume'].includes(m.method ?? ''));
-    if (!open)
-        return undefined;
-    const response = responseTo(open.m.id);
-    if (!response)
-        return undefined;
-    const mode = open.m.method.slice('session/'.length);
-    const sessionId = String(mode === 'new' ? response.m.result?.sessionId : open.m.params?.sessionId);
-    return { mode, responseO: response.r.o, sessionId, cwd: String(open.m.params?.cwd), ...(agentInfo ? { agentInfo } : {}) };
-}
-/** A real Qoder source from a capture's text and its side file's text (if any). */
-export function qoderRealSource(name, text, sideText, path) {
-    const facts = openFacts(text.split('\n').filter((line) => line.trim()).map((line) => decodeStreamRecord(JSON.parse(line))));
-    return { name, kind: 'qoder-real', text, ...(path ? { path } : {}),
-        ...(facts ? { sessionId: facts.sessionId, cwd: facts.cwd } : {}),
-        ...(sideText !== undefined ? { nativeRows: sideText.split('\n').filter((line) => line.trim()).map((line) => JSON.parse(line)) } : {}) };
-}
-function realQoderSource(fixture) {
-    const side = join(RAW_DIR, sideFileOf(fixture));
-    return qoderRealSource(fixture.replace(/\.jsonl$/, ''), readFixtureText(fixture), existsSync(side) ? readFileSync(side, 'utf8') : undefined, join(RAW_DIR, fixture));
-}
 export async function allSources() {
-    const real = fixtureNames().map((name) => (name.startsWith(REAL_QODER_PREFIX) ? realQoderSource(name) : {
+    const real = fixtureNames().map((name) => ({
         name: name.replace(/\.jsonl$/, ''), kind: 'real', text: readFixtureText(name), path: join(RAW_DIR, name),
     }));
-    const qoder = (await qoderCaptures()).map((capture) => ({ ...capture, kind: 'qoder' }));
-    return [...real, ...qoder, experiment01(), outOfTurnThenPrompt(), interruptMidTurn(), loadThenPrompt(), resumeThenPrompt()];
+    return [...real, experiment01(), outOfTurnThenPrompt(), interruptMidTurn(), loadThenPrompt(), resumeThenPrompt()];
 }
 export function captureRecords(source) {
     return source.text.split('\n').filter((line) => line.trim()).map((line) => decodeStreamRecord(JSON.parse(line)));
 }
-/** Write the Qoder native rows where the certified repair reads them under `home`. */
-export async function writeNativeRows(source, home) {
-    const path = nativeTerminalHistoryPath(CERTIFIED_QODER, source.sessionId, source.cwd, home);
-    await mkdir(dirname(path), { recursive: true });
-    await writeFile(path, `${source.nativeRows.map((row) => JSON.stringify(row)).join('\n')}\n`);
-    return path;
-}
-/** The processor raw log for `source` (see the file comment). */
 export async function buildLog(source, options = {}) {
-    const capture = captureRecords(source);
-    const after = new Map();
-    const repairNote = (nativeSessionId) => [{ kind: 'note', note: { type: 'qoder_terminal_repair', nativeSessionId } }];
-    let afterLoadOpen;
-    if (source.kind === 'qoder') {
-        const openResponse = capture.find((record) => record.kind === 'up' && JSON.parse(record.line).id === 2);
-        after.set(openResponse.o, () => repairNote(source.sessionId));
-    }
-    else if (source.kind === 'qoder-real') {
-        // `AcpAgents.startSession`: the repair is enabled only where `nativeTerminalHistoryPath` certifies the runtime.
-        const facts = openFacts(capture);
-        if (facts && nativeTerminalHistoryPath(facts.agentInfo, facts.sessionId, facts.cwd, '/home/certification')) {
-            if (facts.mode === 'load')
-                afterLoadOpen = repairNote;
-            else
-                after.set(facts.responseO, () => repairNote(facts.sessionId));
-        }
-    }
-    const transduced = transduce(capture, { after, ...(afterLoadOpen ? { afterLoadOpen } : {}),
-        ...(options.launch !== undefined ? { launch: options.launch } : {}) });
-    let sideNotes = 0;
-    if (source.nativeRows && source.sessionId && source.cwd && after.size + (afterLoadOpen ? 1 : 0) > 0) {
-        const home = await mkdtemp(join(tmpdir(), 'axom-raw-side-'));
-        try {
-            const path = await writeNativeRows(source, home);
-            const reader = new BackgroundSideNotes({ path, nativeSessionId: source.sessionId, cwd: source.cwd });
-            let next = transduced.session.log.head;
-            // T19's loop: ask the processor's current demand, read, append the notes, fold; until a poll
-            // brings nothing new (the live repair's 1 s timer, without the timer).
-            for (let poll = 0; poll < 8; poll += 1) {
-                const demand = sideDemand(transduced.processor.state);
-                if (!demand)
-                    break;
-                const notes = await reader.poll(demand);
-                for (const note of notes)
-                    transduced.session.log.append({ kind: 'note', note });
-                next = run(transduced.processor, transduced.session, next);
-                sideNotes += notes.length;
-                if (notes.length === 0)
-                    break;
-            }
-            reader.close();
-        }
-        finally {
-            await rm(home, { recursive: true, force: true });
-        }
-    }
-    return { ...transduced, records: transduced.session.log.read(0), source, sideNotes };
+    const transduced = transduce(captureRecords(source), options);
+    return { ...transduced, records: transduced.session.log.read(0), source, sideNotes: 0 };
 }

package/dist/workstation/acp/test/realAdapter.js

@@ -1,37 +1,3 @@
-/**
- * The opt-in real-adapter harness on the processor path (Task 30a). It replaces the real-adapter coverage Task 29 deleted with
- * `AcpSession` (`qoderContract.test.ts`'s `AXOM_ACP_CONTRACT_COMMAND` certification, `providerLifecycleBaseline`,
- * `qoderAdapter/acpHostIntegration`): every case opens through `AcpAgents.open` → `ProcessorSession`, over the local transport and
- * over a real keeper-acp (the built bundle in `dist/keepers`), and reads what the daemon would — the session's frames and its raw log.
- *
- * ## Isolation
- *
- * Every run gets its own temp config dir (keeper-acp's sockets, raw logs and outboxes live there, never `~/.config/axom`), its own
- * temp workspace and its own temp HOME. The adapter is started by a small launcher ({@link writeLauncher}) that:
- * - puts it in a process group of its own (the owned-group cleanup of the deleted certification), and
- * - replaces its environment with a minimal one read from a 0600 file in the run dir: PATH, the temp HOME, temp `CLAUDE_CONFIG_DIR`,
- *   `CODEX_HOME`, `XDG_CONFIG_HOME` (all created), the build's own launch env, and only the variables named in
- *   `AXOM_REAL_ADAPTER_ENV_PASS`. Nothing else of this process's environment (API keys, `CLAUDE_CODE_*`, tokens) reaches the
- *   adapter, and the environment is never in the spawn's argv (keeper-acp records argv in its label).
- *
- * A case that needs a logged-in adapter uses `AXOM_REAL_ADAPTER_AUTH_HOME` as HOME instead of a temp one: a directory the operator
- * prepared for this purpose (e.g. `HOME=<dir> qodercli` once, then log in). The harness never defaults to the real HOME.
- *
- * ## Flags (all off: `npm test` runs only the hermetic cases and reports the rest as skipped, with the reason)
- *
- * | variable | effect |
- * |---|---|
- * | `AXOM_REAL_ADAPTER_HARNESS=1` | enables the real-adapter tiers at all |
- * | `AXOM_REAL_ADAPTER_AGENTS=claude-acp,codex-acp` | registry adapters for the no-prompt tier, installed into the temp config dir |
- * | `AXOM_ACP_CONTRACT_COMMAND` / `AXOM_ACP_CONTRACT_ARGS` | an adapter command (and a JSON argv, default `["--acp"]`): the no-prompt tier, and the Qoder certification's adapter |
- * | `AXOM_REAL_ADAPTER_PROMPTS=1` | also runs the cases that send prompts (model usage, see each case's cost) |
- * | `AXOM_REAL_ADAPTER_AUTH_HOME` | HOME for the prompt cases (required by them) |
- * | `AXOM_REAL_ADAPTER_ENV_PASS=A,B` | extra variables passed through to the adapter (token-based auth) |
- * | `AXOM_REAL_ADAPTER_TRANSPORTS=local,keeper` | which transports to run on (default both) |
- * | `AXOM_QODER_SDK_QODERCLI=<path>` | the real SDK adapter tier: `node dist/cli.js qoder-acp --qodercli <path>` (prompts) |
- */
-import { spawn } from 'node:child_process';
-import { existsSync } from 'node:fs';
 import { chmod, mkdir, mkdtemp, readFile, rm, writeFile } from 'node:fs/promises';
 import { tmpdir } from 'node:os';
 import path, { join } from 'node:path';
@@ -68,7 +34,6 @@ export function realAdapterConfig(env = process.env) {
         ...(env.AXOM_REAL_ADAPTER_AUTH_HOME ? { authHome: env.AXOM_REAL_ADAPTER_AUTH_HOME } : {}),
         envPass: list(env.AXOM_REAL_ADAPTER_ENV_PASS),
         transports: transports.length > 0 ? transports : ['local', 'keeper'],
-        ...(env.AXOM_QODER_SDK_QODERCLI ? { sdkQodercli: env.AXOM_QODER_SDK_QODERCLI } : {}),
     };
 }
 /** Why a tier does not run (undefined: it runs). Shown as the skipped test's name. */
@@ -84,7 +49,7 @@ export function skipReason(config, tier) {
         return 'needs a logged-in adapter: set AXOM_REAL_ADAPTER_AUTH_HOME';
     if (tier === 'qoder')
         return config.command ? undefined : 'set AXOM_ACP_CONTRACT_COMMAND to qodercli';
-    return config.sdkQodercli ? undefined : 'set AXOM_QODER_SDK_QODERCLI to qodercli';
+    return undefined;
 }
 /**
  * A provider history failure fails certification but never prevents local teardown; each local step is guarded on its own, so one
@@ -364,14 +329,3 @@ export async function historyOf(opened) {
             history.push(event);
     return history;
 }
-/** `node dist/cli.js` (the built CLI), for the real SDK adapter (`qoder-acp --qodercli`). */
-export const BUILT_CLI = join(PACKAGE_ROOT, 'dist', 'cli.js');
-export const builtCliExists = () => existsSync(BUILT_CLI);
-/** Runs `node dist/cli.js qoder-acp --prepare-sdk` once (network: the SDK runtime) under `env`. */
-export async function prepareSdkRuntime(env) {
-    await new Promise((resolve, reject) => {
-        const child = spawn(process.execPath, [BUILT_CLI, 'qoder-acp', '--prepare-sdk'], { env, stdio: ['ignore', 'inherit', 'inherit'] });
-        child.once('error', reject);
-        child.once('exit', (code) => (code === 0 ? resolve() : reject(new Error(`qoder-acp --prepare-sdk exited ${code}`))));
-    });
-}

package/dist/workstation/acp/test/scriptAgent.js

@@ -19,7 +19,9 @@
 //   stderrMcpHeaders?: boolean       on session/new and session/load: every MCP header value received, on stderr (raw and JSON)
 //   version?: string                 initialize's agentInfo.version (default '1.0.0')                                    (Task 24)
 //   noLoad?: boolean                 initialize does not advertise loadSession
+//   failInitializeOn?: string        initialize answers an error once this marker exists
 //   failLoad?: boolean               session/load answers an error
+//   failLoadOn?: string              session/load answers an error once this marker exists
 //   loadWaitFor?: string             session/load waits for this file before it answers
 //   historyOnLoad?: string[]         agent_message_chunk texts replayed (as history) before session/load answers
 //   configOptions?: object[]         session/new and session/load answer these configOptions (load: as configured — the agent keeps
@@ -118,8 +120,14 @@ function onLine(line) {
     }
     switch (message.method) {
         case 'initialize': {
-            const answer = () => send({ id: message.id, result: { protocolVersion: 1, agentCapabilities: { loadSession: !config.noLoad, ...(config.mcpHttp ? { mcpCapabilities: { http: true } } : {}) }, authMethods: [],
-                    agentInfo: { name: 'script-agent', version: config.version ?? '1.0.0' } } });
+            const answer = () => {
+                if (config.failInitializeOn && existsSync(at(config.failInitializeOn))) {
+                    send({ id: message.id, error: { code: -32002, message: 'Initialize refused: old build unavailable' } });
+                    return;
+                }
+                send({ id: message.id, result: { protocolVersion: 1, agentCapabilities: { loadSession: !config.noLoad, ...(config.mcpHttp ? { mcpCapabilities: { http: true } } : {}) }, authMethods: [],
+                        agentInfo: { name: 'script-agent', version: config.version ?? '1.0.0' } } });
+            };
             if (config.initializeWaitFor)
                 void waitForFile(config.initializeWaitFor).then(answer);
             else
@@ -135,7 +143,7 @@ function onLine(line) {
             void (async () => {
                 if (config.loadWaitFor)
                     await waitForFile(config.loadWaitFor);
-                if (config.failLoad) {
+                if (config.failLoad || (config.failLoadOn && existsSync(at(config.failLoadOn)))) {
                     send({ id: message.id, error: { code: -32002, message: 'Resource not found: session' } });
                     return;
                 }