@rho-workspace/rho 0.5.2 → 0.5.4

package/node_modules/@hono/node-server/dist/index.js

@@ -52,6 +52,15 @@ var RequestError = class extends Error {
     this.name = "RequestError";
   }
 };
+var validateRequestTarget = (target) => {
+  const backslash = target.indexOf("\\");
+  if (backslash !== -1) {
+    const query = target.indexOf("?");
+    if (query === -1 || backslash < query) {
+      throw new RequestError("Backslash in request path");
+    }
+  }
+};
 var toRequestError = (e) => {
   if (e instanceof RequestError) {
     return e;
@@ -212,6 +221,7 @@ var newRequest = (incoming, defaultHostname) => {
       throw new RequestError("Absolute URL for :path is not allowed in HTTP/2");
     }
     try {
+      validateRequestTarget(incomingUrl);
       const url2 = new URL(incomingUrl);
       req[urlKey] = url2.href;
     } catch (e) {
@@ -232,6 +242,7 @@ var newRequest = (incoming, defaultHostname) => {
   } else {
     scheme = incoming.socket && incoming.socket.encrypted ? "https" : "http";
   }
+  validateRequestTarget(incomingUrl);
   const url = new URL(`${scheme}://${host}${incomingUrl}`);
   if (url.hostname.length !== host.length && url.hostname !== host.replace(/:\d+$/, "")) {
     throw new RequestError("Invalid host header");

package/node_modules/@hono/node-server/dist/index.mjs

@@ -13,6 +13,15 @@ var RequestError = class extends Error {
     this.name = "RequestError";
   }
 };
+var validateRequestTarget = (target) => {
+  const backslash = target.indexOf("\\");
+  if (backslash !== -1) {
+    const query = target.indexOf("?");
+    if (query === -1 || backslash < query) {
+      throw new RequestError("Backslash in request path");
+    }
+  }
+};
 var toRequestError = (e) => {
   if (e instanceof RequestError) {
     return e;
@@ -173,6 +182,7 @@ var newRequest = (incoming, defaultHostname) => {
       throw new RequestError("Absolute URL for :path is not allowed in HTTP/2");
     }
     try {
+      validateRequestTarget(incomingUrl);
       const url2 = new URL(incomingUrl);
       req[urlKey] = url2.href;
     } catch (e) {
@@ -193,6 +203,7 @@ var newRequest = (incoming, defaultHostname) => {
   } else {
     scheme = incoming.socket && incoming.socket.encrypted ? "https" : "http";
   }
+  validateRequestTarget(incomingUrl);
   const url = new URL(`${scheme}://${host}${incomingUrl}`);
   if (url.hostname.length !== host.length && url.hostname !== host.replace(/:\d+$/, "")) {
     throw new RequestError("Invalid host header");

package/node_modules/@hono/node-server/dist/listener.js

@@ -44,6 +44,15 @@ var RequestError = class extends Error {
     this.name = "RequestError";
   }
 };
+var validateRequestTarget = (target) => {
+  const backslash = target.indexOf("\\");
+  if (backslash !== -1) {
+    const query = target.indexOf("?");
+    if (query === -1 || backslash < query) {
+      throw new RequestError("Backslash in request path");
+    }
+  }
+};
 var toRequestError = (e) => {
   if (e instanceof RequestError) {
     return e;
@@ -204,6 +213,7 @@ var newRequest = (incoming, defaultHostname) => {
       throw new RequestError("Absolute URL for :path is not allowed in HTTP/2");
     }
     try {
+      validateRequestTarget(incomingUrl);
       const url2 = new URL(incomingUrl);
       req[urlKey] = url2.href;
     } catch (e) {
@@ -224,6 +234,7 @@ var newRequest = (incoming, defaultHostname) => {
   } else {
     scheme = incoming.socket && incoming.socket.encrypted ? "https" : "http";
   }
+  validateRequestTarget(incomingUrl);
   const url = new URL(`${scheme}://${host}${incomingUrl}`);
   if (url.hostname.length !== host.length && url.hostname !== host.replace(/:\d+$/, "")) {
     throw new RequestError("Invalid host header");

package/node_modules/@hono/node-server/dist/listener.mjs

@@ -10,6 +10,15 @@ var RequestError = class extends Error {
     this.name = "RequestError";
   }
 };
+var validateRequestTarget = (target) => {
+  const backslash = target.indexOf("\\");
+  if (backslash !== -1) {
+    const query = target.indexOf("?");
+    if (query === -1 || backslash < query) {
+      throw new RequestError("Backslash in request path");
+    }
+  }
+};
 var toRequestError = (e) => {
   if (e instanceof RequestError) {
     return e;
@@ -170,6 +179,7 @@ var newRequest = (incoming, defaultHostname) => {
       throw new RequestError("Absolute URL for :path is not allowed in HTTP/2");
     }
     try {
+      validateRequestTarget(incomingUrl);
       const url2 = new URL(incomingUrl);
       req[urlKey] = url2.href;
     } catch (e) {
@@ -190,6 +200,7 @@ var newRequest = (incoming, defaultHostname) => {
   } else {
     scheme = incoming.socket && incoming.socket.encrypted ? "https" : "http";
   }
+  validateRequestTarget(incomingUrl);
   const url = new URL(`${scheme}://${host}${incomingUrl}`);
   if (url.hostname.length !== host.length && url.hostname !== host.replace(/:\d+$/, "")) {
     throw new RequestError("Invalid host header");

package/node_modules/@hono/node-server/dist/request.js

@@ -38,6 +38,15 @@ var RequestError = class extends Error {
     this.name = "RequestError";
   }
 };
+var validateRequestTarget = (target) => {
+  const backslash = target.indexOf("\\");
+  if (backslash !== -1) {
+    const query = target.indexOf("?");
+    if (query === -1 || backslash < query) {
+      throw new RequestError("Backslash in request path");
+    }
+  }
+};
 var toRequestError = (e) => {
   if (e instanceof RequestError) {
     return e;
@@ -198,6 +207,7 @@ var newRequest = (incoming, defaultHostname) => {
       throw new RequestError("Absolute URL for :path is not allowed in HTTP/2");
     }
     try {
+      validateRequestTarget(incomingUrl);
       const url2 = new URL(incomingUrl);
       req[urlKey] = url2.href;
     } catch (e) {
@@ -218,6 +228,7 @@ var newRequest = (incoming, defaultHostname) => {
   } else {
     scheme = incoming.socket && incoming.socket.encrypted ? "https" : "http";
   }
+  validateRequestTarget(incomingUrl);
   const url = new URL(`${scheme}://${host}${incomingUrl}`);
   if (url.hostname.length !== host.length && url.hostname !== host.replace(/:\d+$/, "")) {
     throw new RequestError("Invalid host header");

package/node_modules/@hono/node-server/dist/request.mjs

@@ -7,6 +7,15 @@ var RequestError = class extends Error {
     this.name = "RequestError";
   }
 };
+var validateRequestTarget = (target) => {
+  const backslash = target.indexOf("\\");
+  if (backslash !== -1) {
+    const query = target.indexOf("?");
+    if (query === -1 || backslash < query) {
+      throw new RequestError("Backslash in request path");
+    }
+  }
+};
 var toRequestError = (e) => {
   if (e instanceof RequestError) {
     return e;
@@ -167,6 +176,7 @@ var newRequest = (incoming, defaultHostname) => {
       throw new RequestError("Absolute URL for :path is not allowed in HTTP/2");
     }
     try {
+      validateRequestTarget(incomingUrl);
       const url2 = new URL(incomingUrl);
       req[urlKey] = url2.href;
     } catch (e) {
@@ -187,6 +197,7 @@ var newRequest = (incoming, defaultHostname) => {
   } else {
     scheme = incoming.socket && incoming.socket.encrypted ? "https" : "http";
   }
+  validateRequestTarget(incomingUrl);
   const url = new URL(`${scheme}://${host}${incomingUrl}`);
   if (url.hostname.length !== host.length && url.hostname !== host.replace(/:\d+$/, "")) {
     throw new RequestError("Invalid host header");

package/node_modules/@hono/node-server/dist/server.js

@@ -48,6 +48,15 @@ var RequestError = class extends Error {
     this.name = "RequestError";
   }
 };
+var validateRequestTarget = (target) => {
+  const backslash = target.indexOf("\\");
+  if (backslash !== -1) {
+    const query = target.indexOf("?");
+    if (query === -1 || backslash < query) {
+      throw new RequestError("Backslash in request path");
+    }
+  }
+};
 var toRequestError = (e) => {
   if (e instanceof RequestError) {
     return e;
@@ -208,6 +217,7 @@ var newRequest = (incoming, defaultHostname) => {
       throw new RequestError("Absolute URL for :path is not allowed in HTTP/2");
     }
     try {
+      validateRequestTarget(incomingUrl);
       const url2 = new URL(incomingUrl);
       req[urlKey] = url2.href;
     } catch (e) {
@@ -228,6 +238,7 @@ var newRequest = (incoming, defaultHostname) => {
   } else {
     scheme = incoming.socket && incoming.socket.encrypted ? "https" : "http";
   }
+  validateRequestTarget(incomingUrl);
   const url = new URL(`${scheme}://${host}${incomingUrl}`);
   if (url.hostname.length !== host.length && url.hostname !== host.replace(/:\d+$/, "")) {
     throw new RequestError("Invalid host header");

package/node_modules/@hono/node-server/dist/server.mjs

@@ -13,6 +13,15 @@ var RequestError = class extends Error {
     this.name = "RequestError";
   }
 };
+var validateRequestTarget = (target) => {
+  const backslash = target.indexOf("\\");
+  if (backslash !== -1) {
+    const query = target.indexOf("?");
+    if (query === -1 || backslash < query) {
+      throw new RequestError("Backslash in request path");
+    }
+  }
+};
 var toRequestError = (e) => {
   if (e instanceof RequestError) {
     return e;
@@ -173,6 +182,7 @@ var newRequest = (incoming, defaultHostname) => {
       throw new RequestError("Absolute URL for :path is not allowed in HTTP/2");
     }
     try {
+      validateRequestTarget(incomingUrl);
       const url2 = new URL(incomingUrl);
       req[urlKey] = url2.href;
     } catch (e) {
@@ -193,6 +203,7 @@ var newRequest = (incoming, defaultHostname) => {
   } else {
     scheme = incoming.socket && incoming.socket.encrypted ? "https" : "http";
   }
+  validateRequestTarget(incomingUrl);
   const url = new URL(`${scheme}://${host}${incomingUrl}`);
   if (url.hostname.length !== host.length && url.hostname !== host.replace(/:\d+$/, "")) {
     throw new RequestError("Invalid host header");

package/node_modules/@hono/node-server/dist/vercel.js

@@ -46,6 +46,15 @@ var RequestError = class extends Error {
     this.name = "RequestError";
   }
 };
+var validateRequestTarget = (target) => {
+  const backslash = target.indexOf("\\");
+  if (backslash !== -1) {
+    const query = target.indexOf("?");
+    if (query === -1 || backslash < query) {
+      throw new RequestError("Backslash in request path");
+    }
+  }
+};
 var toRequestError = (e) => {
   if (e instanceof RequestError) {
     return e;
@@ -206,6 +215,7 @@ var newRequest = (incoming, defaultHostname) => {
       throw new RequestError("Absolute URL for :path is not allowed in HTTP/2");
     }
     try {
+      validateRequestTarget(incomingUrl);
       const url2 = new URL(incomingUrl);
       req[urlKey] = url2.href;
     } catch (e) {
@@ -226,6 +236,7 @@ var newRequest = (incoming, defaultHostname) => {
   } else {
     scheme = incoming.socket && incoming.socket.encrypted ? "https" : "http";
   }
+  validateRequestTarget(incomingUrl);
   const url = new URL(`${scheme}://${host}${incomingUrl}`);
   if (url.hostname.length !== host.length && url.hostname !== host.replace(/:\d+$/, "")) {
     throw new RequestError("Invalid host header");

package/node_modules/@hono/node-server/dist/vercel.mjs

@@ -10,6 +10,15 @@ var RequestError = class extends Error {
     this.name = "RequestError";
   }
 };
+var validateRequestTarget = (target) => {
+  const backslash = target.indexOf("\\");
+  if (backslash !== -1) {
+    const query = target.indexOf("?");
+    if (query === -1 || backslash < query) {
+      throw new RequestError("Backslash in request path");
+    }
+  }
+};
 var toRequestError = (e) => {
   if (e instanceof RequestError) {
     return e;
@@ -170,6 +179,7 @@ var newRequest = (incoming, defaultHostname) => {
       throw new RequestError("Absolute URL for :path is not allowed in HTTP/2");
     }
     try {
+      validateRequestTarget(incomingUrl);
       const url2 = new URL(incomingUrl);
       req[urlKey] = url2.href;
     } catch (e) {
@@ -190,6 +200,7 @@ var newRequest = (incoming, defaultHostname) => {
   } else {
     scheme = incoming.socket && incoming.socket.encrypted ? "https" : "http";
   }
+  validateRequestTarget(incomingUrl);
   const url = new URL(`${scheme}://${host}${incomingUrl}`);
   if (url.hostname.length !== host.length && url.hostname !== host.replace(/:\d+$/, "")) {
     throw new RequestError("Invalid host header");

package/node_modules/@hono/node-server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hono/node-server",
-  "version": "1.19.17",
+  "version": "1.19.18",
   "description": "Node.js Adapter for Hono",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/node_modules/@rho-workspace/plugin-agent/README.md

@@ -117,7 +117,11 @@ embedding configuration, never values supplied by model output.
 Session settings are the Agent's own ACP `configOptions` (model, effort, mode and the
 like). `config` holds a person's choices by setting id; they are set once the session
 opens and before any prompt, and a setting or value the Agent does not offer fails that
-message with nothing sent. `configure(id, value)` changes one between messages on a
+message with nothing sent. `preferred` holds the embedding application's defaults for a
+new session, such as `{ mode: { value: 'auto', replaces: ['default'] } }`: each applies only
+when `config` names nothing for that setting, the Agent offers the value and the session
+opened with a value it replaces, and is skipped otherwise; a loaded session keeps its own.
+`configure(id, value)` changes one between messages on a
 connected session; `configuration` returns what the session offers now. `inspect()`
 opens a new session only to read its settings, deletes it when the Agent supports
 `session/delete`, and ends the process; it sends no prompt and is an explicit action,
@@ -125,8 +129,9 @@ never a read.
 
 Required process limits protect stdout/stderr bytes per prompt (`maxOutputBytes`),
 one NDJSON line before decoding (`maxLineBytes`), session setup time
-(`connectTimeoutMs`), cancellation wait (`stopGraceMs`) and native step count
-(`maxAgentTurns`, Claude only). Codex uses the embedding application's wall/output
+(`connectTimeoutMs`) and cancellation wait (`stopGraceMs`). An optional native step
+count (`maxAgentTurns`, Claude only) is passed to Claude Code; without it Claude Code
+applies no step cap of its own. Codex uses the embedding application's wall/output
 limits, without a fabricated native step cap. Exceeding output/line/setup limits closes the connection and keeps
 received output; a dispatched prompt without a result stays unknown. The embedding
 application also bounds retained content and connections. Stderr is drained but not
@@ -334,8 +339,13 @@ authorization; explicit release remains possible after an operation is disabled.
 Defaults: 16 KiB reply/page (64 KiB maximum); `RHO_MAX_RESULT_BYTES` 16 MiB,
 `RHO_MAX_RETAINED_RESULT_BYTES` 64 MiB, `RHO_MAX_RESULTS` 64. Capacity is reserved
 before invoking an operation; exhaustion refuses dispatch and preserves existing
-results. Results survive MCP restart. A transport overrun keeps the outcome
-uncertain and directs observation of the original identity, never replacement work.
+results. Results survive MCP restart. One call to the service may take
+`RHO_TRANSPORT_MS` (30 s), plus the `waitMs` it asks the service to wait (at most ten
+minutes, as for a Notebook cell); the call uses `node:http`, whose wait for a reply has
+no limit of its own. A transport overrun keeps the outcome uncertain and directs
+observation of the original identity, never replacement work. A refused connection is the one
+transport failure whose outcome is known: nothing reached the service, so the call
+returns `unavailable` naming the address and saying nothing ran (`delivered: false`).
 
 The pure `./layered-contract` entry defines the four tool inputs and Agent note
 props. `./layered` provides the bounded complete-object cache and caller checks;

package/node_modules/@rho-workspace/plugin-agent/dist/acp-conversation.d.ts

@@ -17,6 +17,10 @@ export interface AcpConversationOptions {
     sessionMeta?: acp.NewSessionRequest['_meta'];
     instructions?: string;
     config?: Record<string, string | boolean>;
+    preferred?: Record<string, {
+        value: string | boolean;
+        replaces: Array<string | boolean>;
+    }>;
     observation?: SessionObservation;
     observe?: (observation: SessionObservation) => void;
     observationLimits?: Partial<typeof sessionObservationLimits>;

package/node_modules/@rho-workspace/plugin-agent/dist/acp-conversation.js

@@ -34,6 +34,9 @@ function toolDetail(input) {
     }
     return undefined;
 }
+// Whether a setting the Agent offers accepts this value.
+const offers = (option, value) => option.type === 'boolean' ? typeof value === 'boolean'
+    : typeof value === 'string' && option.options.some(entry => 'group' in entry ? entry.options.some(v => v.value === value) : entry.value === value);
 /** One selected ACP connection, independent of views and prompt turns. */
 export class AcpConversation {
     options;
@@ -192,15 +195,31 @@ export class AcpConversation {
             let model;
             this.observationOrigin = this.sessionId ? 'history' : 'initial';
             if (this.sessionId) {
-                if (!initialized.agentCapabilities?.loadSession)
+                const caps = initialized.agentCapabilities;
+                if (caps?.loadSession) {
+                    const loaded = await connection.agent.request(acp.methods.agent.session.load, { ...params, sessionId: this.sessionId });
+                    this.settings = loaded.configOptions ?? [];
+                }
+                else if (caps?.sessionCapabilities?.resume) {
+                    // ACP session/resume (e.g. dsh): restore the persisted session on a fresh process. It composes
+                    // the request's MCP connections and validates only the workspace, so the non-standard
+                    // systemPrompt is omitted; history is restored from the Agent's own persistence, not replayed.
+                    const resumed = await connection.agent.request(acp.methods.agent.session.resume, { cwd: o.cwd, mcpServers: o.mcpServers, sessionId: this.sessionId });
+                    this.settings = resumed?.configOptions ?? [];
+                }
+                else {
                     throw new Error('This Agent cannot load the original session. Nothing was resent.');
-                const loaded = await connection.agent.request(acp.methods.agent.session.load, { ...params, sessionId: this.sessionId });
-                this.settings = loaded.configOptions ?? [];
+                }
             }
             else {
                 const created = await connection.agent.request(acp.methods.agent.session.new, params);
                 this.sessionId = created.sessionId;
                 this.settings = created.configOptions ?? [];
+                for (const [id, preferred] of Object.entries(o.preferred ?? {})) {
+                    const option = this.settings.find(x => x.id === id);
+                    if (option && !(id in (o.config ?? {})) && preferred.replaces.includes(option.currentValue) && offers(option, preferred.value))
+                        await this.set(id, preferred.value);
+                }
             }
             for (const [id, value] of Object.entries(o.config ?? {}))
                 await this.set(id, value);
@@ -225,7 +244,7 @@ export class AcpConversation {
             throw new Error(`The Agent does not offer the setting ${configId}. Nothing was sent.`);
         if (option.currentValue === value)
             return;
-        if (option.type === 'boolean' ? typeof value !== 'boolean' : typeof value !== 'string' || !option.options.some(entry => 'group' in entry ? entry.options.some(v => v.value === value) : entry.value === value))
+        if (!offers(option, value))
             throw new Error(`The Agent does not offer ${String(value)} for ${option.name}. Nothing was sent.`);
         const changed = await this.connection.agent.request(acp.methods.agent.session.setConfigOption, option.type === 'boolean'
             ? { sessionId: this.sessionId, configId, type: 'boolean', value: value } : { sessionId: this.sessionId, configId, value: value });

package/node_modules/@rho-workspace/plugin-agent/dist/claude-acp.js

@@ -5,7 +5,7 @@ export class ClaudeAcpConversation extends AcpConversation {
         super({ ...o, command: o.command ?? acpCommand('claude'), ...(o.command ? {} : { client: 'claude' }),
             // Expose native task tools on custom models; retain native permission policy.
             env: acpEnvironment('claude', { CLAUDE_CODE_ENABLE_TODO_TOOLS: '1', ...process.env, ...o.env }, o.claude),
-            sessionMeta: { claudeCode: { options: { maxTurns: o.limits.maxAgentTurns, promptSuggestions: false,
+            sessionMeta: { claudeCode: { options: { ...(o.limits.maxAgentTurns !== undefined ? { maxTurns: o.limits.maxAgentTurns } : {}), promptSuggestions: false,
                         ...(o.model ? { model: o.model } : {}), ...(o.settingSources ? { settingSources: o.settingSources } : {}),
                         ...(o.plugins?.length ? { plugins: o.plugins.map(p => ({ type: 'local', path: p, skipMcpDiscovery: true })) } : {}),
                         allowedTools: [...new Set([...['rho_index', 'rho_resolve', 'rho_call', 'rho_read'].map(x => 'mcp__rho__' + x), ...(o.allowedTools ?? [])])]

package/node_modules/@rho-workspace/plugin-agent/dist/claude-cli.js

@@ -22,7 +22,7 @@ export class ClaudeCliConversation {
         const mcp = JSON.stringify({ mcpServers: Object.fromEntries(o.mcpServers.map(s => [s.name, { command: s.command, args: s.args, env: Object.fromEntries(s.env.map(x => [x.name, x.value])) }])) });
         const args = ['-p', '--output-format', 'stream-json', '--verbose', ...(o.confirmed ? ['--resume', o.sessionId] : ['--session-id', o.sessionId]),
             '--mcp-config', mcp, '--allowedTools', ...['rho_index', 'rho_resolve', 'rho_call', 'rho_read'].map(name => 'mcp__rho__' + name),
-            '--max-turns', String(o.limits.maxAgentTurns),
+            ...(o.limits.maxAgentTurns !== undefined ? ['--max-turns', String(o.limits.maxAgentTurns)] : []),
             '--append-system-prompt', `You were started from Rho by the person working in the Rho project "${o.projectName}". They read your replies in Rho's Agent panel, next to the project's files, documents, tables, figures and runs. Use your native tools normally, with their existing permissions. Choose Core managed execution only when a task needs its execution continuity or retained operation record. For shared workspace state, rho_index finds operations, rho_resolve gives their contracts, rho_call calls one and rho_read reads a large result. Preserve shared unsaved documents through their document operations. Keep results in this project and say what you changed or ran. External activity observations do not establish managed execution or scientific validity.` + (o.instructions ? '\n\n' + o.instructions : '')];
         const child = spawn(o.binary, args, { cwd: o.cwd, ...ownGroup, stdio: ['pipe', 'pipe', 'pipe'], env: process.env });
         this.child = child;

package/node_modules/@rho-workspace/plugin-agent/dist/conversation.d.ts

@@ -104,7 +104,7 @@ export interface AgentConversation {
     close(): Promise<void>;
 }
 export interface AgentProcessLimits {
-    maxAgentTurns: number;
+    maxAgentTurns?: number;
     maxOutputBytes: number;
     maxLineBytes: number;
     stopGraceMs: number;
@@ -123,5 +123,6 @@ export declare function visibleError(error: unknown, env?: NodeJS.ProcessEnv): s
 export { ClaudeAcpConversation, type ClaudeAcpOptions } from './claude-acp.js';
 export { writeClaudePlugin, claudePluginLimits, type ClaudePlugin, type ClaudePluginSkill, type ClaudePluginHook } from './claude-plugin.js';
 export { CodexAcpConversation, type CodexAcpOptions } from './codex-acp.js';
+export { GenericAcpConversation, type GenericAcpOptions } from './generic-acp.js';
 export { ClaudeCliConversation } from './claude-cli.js';
 export type { SessionObservation, SessionTool, ConfigOption, ConfigValue } from './session-observation.js';

package/node_modules/@rho-workspace/plugin-agent/dist/conversation.js

@@ -25,4 +25,5 @@ export function visibleError(error, env = process.env) {
 export { ClaudeAcpConversation } from './claude-acp.js';
 export { writeClaudePlugin, claudePluginLimits } from './claude-plugin.js';
 export { CodexAcpConversation } from './codex-acp.js';
+export { GenericAcpConversation } from './generic-acp.js';
 export { ClaudeCliConversation } from './claude-cli.js';

package/node_modules/@rho-workspace/plugin-agent/dist/generic-acp.d.ts

@@ -0,0 +1,11 @@
+import { AcpConversation, type AcpConversationOptions } from './acp-conversation.js';
+/** A generic ACP agent: any program that speaks ACP v1 over stdio. Rho starts the
+ * operator-selected command and drives it exactly as it drives Claude Code or Codex, so
+ * supporting another agent is configuration (`--acp-command`), not a new adapter. The
+ * command is a file plus its arguments and needs no per-agent environment. */
+export interface GenericAcpOptions extends Omit<AcpConversationOptions, 'command' | 'sessionMeta'> {
+    command: AcpConversationOptions['command'];
+}
+export declare class GenericAcpConversation extends AcpConversation {
+    constructor(o: GenericAcpOptions);
+}

package/node_modules/@rho-workspace/plugin-agent/dist/generic-acp.js

@@ -0,0 +1,7 @@
+import { AcpConversation } from './acp-conversation.js';
+export class GenericAcpConversation extends AcpConversation {
+    constructor(o) {
+        // A supplied command skips the missing-client check: the operator named the program.
+        super({ ...o, command: o.command });
+    }
+}

package/node_modules/@rho-workspace/plugin-agent/dist/mcp.js

@@ -1,5 +1,6 @@
 #!/usr/bin/env node
 import * as fs from 'node:fs/promises';
+import http from 'node:http';
 import path from 'node:path';
 import { retainAgentIntent } from './agent-intents.js';
 import { layeredSchemas } from './layered-contract.js';
@@ -22,23 +23,35 @@ const limits = { ...resultLimits,
     maxRetainedBytes: Number(process.env.RHO_MAX_RETAINED_RESULT_BYTES ?? resultLimits.maxRetainedBytes),
     maxResults: Number(process.env.RHO_MAX_RESULTS ?? resultLimits.maxResults) };
 requireThat(Object.values(limits).every(n => Number.isSafeInteger(n) && n > 0) && limits.maxResultBytes > 2048 && limits.maxRetainedBytes >= limits.maxResultBytes, 'invalid', 'Invalid result retention budget.');
+// The transport's own allowance for one call. An operation asked to wait for its work (kernel.run's
+// waitMs, at most ten minutes) gets that long on top; otherwise a cell still running within the
+// wait it was given ended the call at 30 s with an unknown outcome, and the Agent left the session.
+const transportMs = Number(process.env.RHO_TRANSPORT_MS ?? 30000);
+requireThat(Number.isSafeInteger(transportMs) && transportMs > 0, 'invalid', 'Invalid transport allowance.');
+const allowance = (input) => transportMs + (Number.isSafeInteger(input.waitMs) && input.waitMs > 0 ? Math.min(input.waitMs, 600000) : 0);
+// node:http rather than fetch: fetch stops waiting for a response's headers after 300 s whatever
+// the signal allows, and the service answers a waited cell only when the cell ends (P3, run 2).
 async function invoke(method, input = {}, contractRef) {
-    const response = await fetch(new URL('/api/v2/' + method, endpoint), {
-        method: 'POST', headers: { authorization: 'Bearer ' + c.token, 'content-type': 'application/json', ...(contractRef ? { 'x-rho-contract-ref': contractRef } : {}) },
-        body: JSON.stringify({ ...input, projectId: c.projectId }), signal: AbortSignal.timeout(30000)
+    const body = JSON.stringify({ ...input, projectId: c.projectId });
+    const response = await new Promise((resolve, reject) => {
+        const request = http.request(new URL('/api/v2/' + method, endpoint), { method: 'POST', signal: AbortSignal.timeout(allowance(input)),
+            headers: { authorization: 'Bearer ' + c.token, 'content-type': 'application/json', 'content-length': Buffer.byteLength(body), ...(contractRef ? { 'x-rho-contract-ref': contractRef } : {}) } }, resolve);
+        // A refused connection is the one failure whose outcome is known: nothing reached the
+        // service, so nothing ran. It is usually Rho not running, and the person can start it.
+        request.once('error', error => reject(error.code === 'ECONNREFUSED'
+            ? new Fault('unavailable', `Rho is not running at ${c.url}, so this call did not reach it and nothing ran. Ask the person to start Rho, then call again.`, { url: c.url, delivered: false })
+            : error));
+        request.end(body);
     });
-    const reader = response.body.getReader(), chunks = [];
+    const chunks = [];
     let size = 0;
-    for (;;) {
-        const part = await reader.read();
-        if (part.done)
-            break;
-        size += part.value.byteLength;
+    for await (const part of response) {
+        size += part.byteLength;
         if (size > limits.maxResultBytes - 2048) {
-            await reader.cancel();
+            response.destroy();
             throw new Fault('limit', 'The response exceeded the transport budget. The operation may have completed; observe its original identity, never submit replacement work.', { limit: 'maxResultBytes', maximum: limits.maxResultBytes, outcomeUnknown: true });
         }
-        chunks.push(part.value);
+        chunks.push(part);
     }
     return JSON.parse(Buffer.concat(chunks).toString('utf8'));
 }

package/node_modules/@rho-workspace/plugin-agent/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rho-workspace/plugin-agent",
-  "version": "0.4.25",
+  "version": "0.4.28",
   "type": "module",
   "description": "Rho agent plugin",
   "license": "AGPL-3.0-only",

package/node_modules/@rho-workspace/plugin-annotations/package.json

@@ -23,7 +23,7 @@
     "@rho-workspace/plugin-contracts": "0.4.0"
   },
   "peerDependencies": {
-    "@rho-workspace/plugin-documents": "0.4.1 || 0.4.2 || 0.4.3 || 0.4.4 || 0.4.5 || 0.4.6 || 0.4.7 || 0.4.8 || 0.4.9 || 0.4.10",
+    "@rho-workspace/plugin-documents": "0.4.1 || 0.4.2 || 0.4.3 || 0.4.4 || 0.4.5 || 0.4.6 || 0.4.7 || 0.4.8 || 0.4.9 || 0.4.10 || 0.4.11",
     "react": "19.3.1",
     "react-dom": "19.3.1"
   },

package/node_modules/@rho-workspace/plugin-documents/README.md

@@ -157,3 +157,7 @@ Documents 0.4.7 adds a confirmed-text selection callback for Review and an optio
 excerpt, reads at most 1 MiB per version and previews at most 64 KiB without cutting
 a Unicode sequence. Buffer snapshots continue to identify their version/dirty
 state separately from disk captures. No comparison rewrites a buffer or its undo.
+
+Documents 0.4.11 lets the editor view (`rho.editor`) keep a boolean `flow` beside its
+`title`: an application that shows a script's data flow beside the editor saves the person's
+switch with the page. The buffer, its undo and its saves are unchanged by it.

package/node_modules/@rho-workspace/plugin-documents/dist/index.d.ts

@@ -1095,6 +1095,9 @@ export declare const plugin: {
                     type: string;
                     minLength: number;
                 };
+                flow: {
+                    type: string;
+                };
             };
             required: string[];
         };

package/node_modules/@rho-workspace/plugin-documents/dist/index.js

@@ -499,5 +499,5 @@ export const plugin = {
                 description: 'Change a project file that is open in Rho through its shared buffer (document.read, document.edit, document.save), so a person\'s unsaved text, undo and saves stay intact.' }],
         hooks: [{ id: 'documents.unsaved-text', event: 'PreToolUse', matcher: 'Edit|Write|MultiEdit', entry: './claude-hook', timeoutSeconds: 10 }]
     },
-    components: [{ id: 'rho.editor', version: '0.2.0', owner: 'rho-plugins.documents', bindings: { document: 'document' }, ui: './ui', presentation: viewPresentation, propsSchema: { type: 'object', additionalProperties: false, properties: { title: { type: 'string', minLength: 1 } }, required: ['title'] } }]
+    components: [{ id: 'rho.editor', version: '0.2.0', owner: 'rho-plugins.documents', bindings: { document: 'document' }, ui: './ui', presentation: viewPresentation, propsSchema: { type: 'object', additionalProperties: false, properties: { title: { type: 'string', minLength: 1 }, flow: { type: 'boolean' } }, required: ['title'] } }]
 };

package/node_modules/@rho-workspace/plugin-documents/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rho-workspace/plugin-documents",
-  "version": "0.4.10",
+  "version": "0.4.11",
   "type": "module",
   "description": "Rho documents plugin",
   "license": "AGPL-3.0-only",