@shardflux/cli 0.14.0 → 0.14.1

package/CHANGELOG.md

@@ -1,7 +1,21 @@
 # Changelog
 
+## 0.14.1
+
+- `shard ssh-proxy` connects faster: host trust (host key pin and device key) runs alongside the tunnel start, with no guest byte reaching OpenSSH before the host key is pinned, and a reconnect checks its device key with one read.
+
 ## 0.14.0
 
+- Ask for device approval before preparing the VM-backed local worktree; report a failed preparation as the request's result and bound preparation to 30 seconds.
+- Keep desktop programs running after a command returns with detached `setsid -f` guidance.
+- Allocate one VM per new ACP conversation, with cached initial model choices and live updates from that same VM.
+
+- Populate ACP model choices from the cloud adapters for each session, following the VM's native Claude Code and Codex executables. Refresh choices on attachment and model updates, and remove models the live adapter rejects.
+- Register the bound Shardflux conversation MCP server for cloud ACP sessions, so plain chat can fork, join, move, land and request device actions.
+- Request valid 64 MiB file manifests when mirroring native transcripts; the device helper and native history handoff no longer fail with invalid argument.
+- Carry Git fetch/push through the platform binary transport so native protocol flush packets arrive before stdin EOF.
+- Seed the shared project hub before writing Desktop connections so a new thread can initialize its separate VM.
+
 - Parallel conversation launches preserve both sessions in local history.
 
 - Help an agent can set up cloud agents from: `shard --help` has a Cloud agents section (conversations, machine, template, agents) and says how a VM is made (the coding template, then your machine, then the project template), that machine and project templates are saved from an agent's VM, that `shard templates` is for your own app's workspaces (a repository bound to one is refused with `template_not_agent_capable`), and that Claude Code and Codex in the VM have the `shardflux-computer` tools. `shard machine`, `shard template` and `shard templates init|build|draft open` help say the same.

package/README.md

@@ -62,12 +62,15 @@ shard ./
 
 Choose Claude Code or Codex. Claude asks for one cloud sign-in per Shardflux account; Codex uses your copied login.
 Each `shard ./` starts its own conversation VM and opens your agent’s native terminal. Later turns stay in that
-VM; `shard ./ --resume` selects a saved project conversation. You can open conversations in separate terminals at the same time; each stays in the project's local history. `shard` opens the optional command center. On macOS the menu bar starts automatically the first
+VM; `shard ./ --resume` selects a saved project conversation. Native terminal and ACP sessions receive the conversation tools for their own conversation, so the agent can fork, ask for a review, and report to its parent (0.14.0+). You can open conversations in separate terminals at the same time; each stays in the project's local history. `shard` opens the optional command center. On macOS the menu bar starts automatically the first
 time `shard` runs, with launch at login enabled; `shard menubar stop` turns it off. See [Cloud agents](https://docs.shardflux.dev/guides/cloud-agents).
 
 T3 Code uses one **Shardflux** provider; choose a Claude Code or Codex model to start that agent in the cloud.
+Model choices come from your cloud agent's session and use the same coding tools and settings as its terminal.
 The provider is registered automatically when T3 Code is installed. Use a T3 build that supports ACP providers.
 
+Git fetch and push use the coding guest’s platform transport when available, preserving Git’s binary packets (0.14.0+). Older guests retain their existing transport.
+
 To try a conversation on your Mac:
 
 ```sh
@@ -76,8 +79,8 @@ shard conversations try <conversation>
 
 Your branch opens in `.shard/worktrees/<name>`, syncs both ways, and its dev servers appear at localhost.
 Ctrl-C stops local sync. Your main checkout stays available for your own work.
-Device tools ask Allow once or Always for this project on your Mac. Live transcripts stay in
-`~/.config/shardflux/conversations/`; ended sessions enter Claude Code’s or Codex’s native history.
+Device tools ask Allow once or Always for this project on your Mac before preparing the conversation’s local worktree. Live transcripts stay in
+`~/.config/shardflux/conversations/`; ended sessions enter Claude Code’s or Codex’s native history. Transcript files up to 64 MiB are supported (0.14.0+).
 
 For application workspace commands, `shard signup` creates an account and saves a project key, or set
 `SHARDFLUX_API_KEY` to a key from the console and run `shard login`. `shard --help` lists every command.
@@ -1184,7 +1187,8 @@ refused with `template_not_agent_capable` (0.14.0+).
 
 Inside the VM, Claude Code and Codex have Shardflux computer use next to their own tools (0.14.0+, `coding` 13+): the
 `shardflux-computer` MCP server's `computer` and `computer_batch` drive the VM's desktop. The agent starts a program
-on it with `DISPLAY=:1`, for example `DISPLAY=:1 chromium http://localhost:3000 &`, then takes a screenshot.
+on it with `DISPLAY=:1`, detached so it outlives the command, for example
+`DISPLAY=:1 setsid -f chromium http://localhost:3000`, then takes a screenshot.
 
 Volume lists and details (0.14.0+) show `kind`. Project spaces show their measured storage and a platform-managed quota.
 
@@ -1195,7 +1199,7 @@ From 0.14.0, `shard conversations list|get|send|wait|land|move` manages project
 
 Desktop project connections (0.14.0+): `shard agents open codex-app <project>/<workspace>` and
 `shard agents open claude-desktop <project>/<workspace>` register **Shardflux · <project>** in the app.
-Open that project connection to start conversations and return to their saved threads.
+Open that project connection to start conversations and return to their saved threads. The project hub supplies the base commit to each new thread’s VM (0.14.0+).
 
 Conversation JSON includes `join_mode` and the worktree used by reviewers and workers.
 

package/dist/acp-catalog.d.ts

@@ -1,152 +1,7 @@
-export declare const ACP_CATALOG: {
-    claude: {
-        initialize: {
-            protocolVersion: number;
-            agentCapabilities: {
-                _meta: {
-                    claudeCode: {
-                        promptQueueing: boolean;
-                    };
-                    authStatus: {};
-                };
-                promptCapabilities: {
-                    image: boolean;
-                    embeddedContext: boolean;
-                };
-                mcpCapabilities: {
-                    http: boolean;
-                    sse: boolean;
-                };
-                auth: {
-                    logout: {};
-                };
-                providers: {};
-                loadSession: boolean;
-                sessionCapabilities: {
-                    additionalDirectories: {};
-                    close: {};
-                    delete: {};
-                    fork: {};
-                    list: {};
-                    resume: {};
-                    subagents: {};
-                };
-            };
-            agentInfo: {
-                name: string;
-                title: string;
-                version: string;
-            };
-            authMethods: never[];
-            _meta: {
-                steering: {
-                    supported: boolean;
-                };
-            };
-        };
-        session: {
-            modes: {
-                currentModeId: string;
-                availableModes: {
-                    id: string;
-                    name: string;
-                    description: string;
-                }[];
-            };
-            configOptions: {
-                id: string;
-                name: string;
-                description: string;
-                category: string;
-                type: string;
-                currentValue: string;
-                options: {
-                    value: string;
-                    name: string;
-                    description: string;
-                }[];
-            }[];
-        };
-    };
-    codex: {
-        initialize: {
-            protocolVersion: number;
-            agentInfo: {
-                name: string;
-                title: string;
-                version: string;
-            };
-            agentCapabilities: {
-                auth: {
-                    logout: {};
-                };
-                providers: {};
-                loadSession: boolean;
-                promptCapabilities: {
-                    embeddedContext: boolean;
-                    image: boolean;
-                };
-                sessionCapabilities: {
-                    resume: {};
-                    list: {};
-                    close: {};
-                    delete: {};
-                    fork: {};
-                    additionalDirectories: {};
-                    subagents: {};
-                };
-                mcpCapabilities: {
-                    acp: boolean;
-                    http: boolean;
-                    sse: boolean;
-                };
-                _meta: {
-                    authStatus: {};
-                };
-            };
-            authMethods: ({
-                id: string;
-                name: string;
-                description: string;
-                _meta: {
-                    "api-key": {
-                        provider: string;
-                    };
-                };
-            } | {
-                id: string;
-                name: string;
-                description: string;
-                _meta?: undefined;
-            })[];
-            _meta: {
-                steering: {
-                    supported: boolean;
-                };
-            };
-        };
-        session: {
-            modes: {
-                availableModes: {
-                    id: string;
-                    name: string;
-                    description: string;
-                }[];
-                currentModeId: string;
-            };
-            configOptions: {
-                id: string;
-                name: string;
-                description: string;
-                category: string;
-                type: string;
-                currentValue: string;
-                options: {
-                    value: string;
-                    name: string;
-                    description: string;
-                }[];
-            }[];
-        };
-    };
-};
+import type { ObjectValue } from './acp-rpc.js';
+export type AcpApp = 'claude' | 'codex';
+export type AcpCatalog = Partial<Record<AcpApp, ObjectValue>>;
+export declare const ACP_PROBE_CATALOG: AcpCatalog;
+export declare function nativeModelOptions(session: ObjectValue): ObjectValue[];
+export declare function nativeCurrentModel(session: ObjectValue): string;
+export declare function withoutNativeModel(session: ObjectValue, id: string): ObjectValue;

package/dist/acp-catalog.js

@@ -1,287 +1,40 @@
-// Captured from the pinned adapters; refreshed when their versions change.
-export const ACP_CATALOG = {
-    "claude": {
-        "initialize": {
-            "protocolVersion": 1,
-            "agentCapabilities": {
-                "_meta": {
-                    "claudeCode": {
-                        "promptQueueing": true
-                    },
-                    "authStatus": {}
-                },
-                "promptCapabilities": {
-                    "image": true,
-                    "embeddedContext": true
-                },
-                "mcpCapabilities": {
-                    "http": true,
-                    "sse": true
-                },
-                "auth": {
-                    "logout": {}
-                },
-                "providers": {},
-                "loadSession": true,
-                "sessionCapabilities": {
-                    "additionalDirectories": {},
-                    "close": {},
-                    "delete": {},
-                    "fork": {},
-                    "list": {},
-                    "resume": {},
-                    "subagents": {}
-                }
-            },
-            "agentInfo": {
-                "name": "@agentclientprotocol/claude-agent-acp",
-                "title": "Claude Agent",
-                "version": "0.87.0"
-            },
-            "authMethods": [],
-            "_meta": {
-                "steering": {
-                    "supported": true
-                }
-            }
-        },
-        "session": {
-            "modes": {
-                "currentModeId": "auto",
-                "availableModes": [
-                    {
-                        "id": "default",
-                        "name": "Manual",
-                        "description": "Always ask before making changes"
-                    },
-                    {
-                        "id": "acceptEdits",
-                        "name": "Accept edits",
-                        "description": "Automatically accept all file edits"
-                    },
-                    {
-                        "id": "plan",
-                        "name": "Plan",
-                        "description": "Create a plan before making changes"
-                    },
-                    {
-                        "id": "auto",
-                        "name": "Auto",
-                        "description": "Claude handles permission decisions"
-                    },
-                    {
-                        "id": "bypassPermissions",
-                        "name": "Bypass permissions",
-                        "description": "Accepts all permissions"
-                    }
-                ]
-            },
-            "configOptions": [
-                {
-                    "id": "model",
-                    "name": "Model",
-                    "description": "AI model to use",
-                    "category": "model",
-                    "type": "select",
-                    "currentValue": "opus",
-                    "options": [
-                        {
-                            "value": "default",
-                            "name": "Default (recommended)",
-                            "description": "Opus 5.5"
-                        },
-                        {
-                            "value": "opus",
-                            "name": "Opus 5.5",
-                            "description": "Best for everyday, complex tasks"
-                        },
-                        {
-                            "value": "fable",
-                            "name": "Fable 5.1",
-                            "description": "Most capable for your hardest and longest-running tasks"
-                        },
-                        {
-                            "value": "sonnet",
-                            "name": "Sonnet 5.5",
-                            "description": "Efficient for routine tasks"
-                        },
-                        {
-                            "value": "haiku",
-                            "name": "Haiku 4.5",
-                            "description": "Fastest for quick answers"
-                        },
-                        {
-                            "value": "claude-sonnet-5",
-                            "name": "Sonnet 5",
-                            "description": "Efficient for routine tasks"
-                        },
-                        {
-                            "value": "claude-opus-5",
-                            "name": "Opus 5",
-                            "description": "Best for everyday, complex tasks"
-                        },
-                        {
-                            "value": "claude-fable-5",
-                            "name": "Fable 5",
-                            "description": "Most capable for your hardest and longest-running tasks"
-                        },
-                        {
-                            "value": "claude-opus-4-8",
-                            "name": "Opus 4.8",
-                            "description": "Best for everyday, complex tasks"
-                        },
-                        {
-                            "value": "claude-opus-4-7",
-                            "name": "Opus 4.7",
-                            "description": "Best for everyday, complex tasks"
-                        },
-                        {
-                            "value": "claude-opus-4-6",
-                            "name": "Opus 4.6",
-                            "description": "Best for everyday, complex tasks"
-                        },
-                        {
-                            "value": "claude-sonnet-4-6",
-                            "name": "Sonnet 4.6",
-                            "description": "Efficient for routine tasks"
-                        }
-                    ]
-                }
-            ]
-        }
-    },
-    "codex": {
-        "initialize": {
-            "protocolVersion": 1,
-            "agentInfo": {
-                "name": "@agentclientprotocol/codex-acp",
-                "title": "Codex",
-                "version": "2.1.1"
-            },
-            "agentCapabilities": {
-                "auth": {
-                    "logout": {}
-                },
-                "providers": {},
-                "loadSession": true,
-                "promptCapabilities": {
-                    "embeddedContext": true,
-                    "image": true
-                },
-                "sessionCapabilities": {
-                    "resume": {},
-                    "list": {},
-                    "close": {},
-                    "delete": {},
-                    "fork": {},
-                    "additionalDirectories": {},
-                    "subagents": {}
-                },
-                "mcpCapabilities": {
-                    "acp": false,
-                    "http": true,
-                    "sse": false
-                },
-                "_meta": {
-                    "authStatus": {}
-                }
-            },
-            "authMethods": [
-                {
-                    "id": "api-key",
-                    "name": "API Key",
-                    "description": "Use an API key to authenticate",
-                    "_meta": {
-                        "api-key": {
-                            "provider": "openai"
-                        }
-                    }
-                },
-                {
-                    "id": "chat-gpt",
-                    "name": "ChatGPT",
-                    "description": "Use ChatGPT to authenticate"
-                }
-            ],
-            "_meta": {
-                "steering": {
-                    "supported": true
-                }
-            }
-        },
-        "session": {
-            "modes": {
-                "availableModes": [
-                    {
-                        "id": "read-only",
-                        "name": "Read-only",
-                        "description": "Requires approval to edit files and access the internet."
-                    },
-                    {
-                        "id": "workspace-write",
-                        "name": "Workspace access",
-                        "description": "Edit workspace files; ask before writing outside the workspace or accessing the network."
-                    },
-                    {
-                        "id": "agent",
-                        "name": "Auto review",
-                        "description": "Only ask for actions detected as potentially unsafe"
-                    },
-                    {
-                        "id": "agent-full-access",
-                        "name": "Full access",
-                        "description": "Unrestricted access to the internet and any file on your computer"
-                    }
-                ],
-                "currentModeId": "agent"
-            },
-            "configOptions": [
-                {
-                    "id": "model",
-                    "name": "Model",
-                    "description": "Model Codex uses for the session",
-                    "category": "model",
-                    "type": "select",
-                    "currentValue": "gpt-6-astra",
-                    "options": [
-                        {
-                            "value": "gpt-6.1-sol",
-                            "name": "6.1 Sol",
-                            "description": "Latest workhorse model for coding and everyday work."
-                        },
-                        {
-                            "value": "gpt-6-astra",
-                            "name": "6 Astra",
-                            "description": "Frontier intelligence for the most demanding work."
-                        },
-                        {
-                            "value": "gpt-6-sol",
-                            "name": "6 Sol",
-                            "description": "Previous generation workhorse model."
-                        },
-                        {
-                            "value": "gpt-6-luna",
-                            "name": "6 Luna",
-                            "description": "Fast and affordable model for easier tasks."
-                        },
-                        {
-                            "value": "gpt-5.6-sol",
-                            "name": "5.6 Sol",
-                            "description": "Older generation workhorse model."
-                        },
-                        {
-                            "value": "gpt-5.6-terra",
-                            "name": "5.6 Terra",
-                            "description": "Older balanced model for straightforward work."
-                        },
-                        {
-                            "value": "gpt-5.6-luna",
-                            "name": "5.6 Luna",
-                            "description": "Older fast and efficient model."
-                        }
-                    ]
-                }
-            ]
-        }
-    }
+import { objectValue } from "./acp-rpc.js";
+// T3's installation probe works offline, without a VM. These are harness
+// labels only. Real sessions always replace them with guest metadata.
+export const ACP_PROBE_CATALOG = {
+    claude: { models: { currentModelId: 'default', availableModels: [{ modelId: 'default', name: 'Claude Code' }] } },
+    codex: { models: { currentModelId: 'default', availableModels: [{ modelId: 'default', name: 'Codex' }] } },
 };
+export function nativeModelOptions(session) {
+    const configs = Array.isArray(session.configOptions) ? session.configOptions.map(objectValue) : [];
+    const model = configs.find(c => c.category === 'model' || c.id === 'model');
+    const options = model && Array.isArray(model.options)
+        ? model.options.flatMap(raw => {
+            const option = objectValue(raw);
+            return Array.isArray(option.options) ? option.options.map(objectValue) : [option];
+        })
+        : (Array.isArray(objectValue(session.models).availableModels) ? objectValue(session.models).availableModels : [])
+            .map(raw => { const m = objectValue(raw); return { value: m.modelId, name: m.name, ...(m.description ? { description: m.description } : {}) }; });
+    const seen = new Set();
+    return options.map(option => {
+        if (typeof option.value !== 'string' || !option.value || typeof option.name !== 'string' || !option.name || seen.has(option.value))
+            throw new Error('Agent model metadata omitted a unique ID or name');
+        seen.add(option.value);
+        return option;
+    });
+}
+export function nativeCurrentModel(session) {
+    const configs = Array.isArray(session.configOptions) ? session.configOptions.map(objectValue) : [];
+    const current = configs.find(c => c.category === 'model' || c.id === 'model')?.currentValue ?? objectValue(session.models).currentModelId;
+    const options = nativeModelOptions(session);
+    if (typeof current === 'string' && options.some(o => o.value === current))
+        return current;
+    throw new Error('The guest adapter returned no current model among its available models.');
+}
+export function withoutNativeModel(session, id) {
+    const options = nativeModelOptions(session).filter(o => o.value !== id);
+    const configs = Array.isArray(session.configOptions) ? session.configOptions.map(objectValue) : [];
+    const current = configs.find(c => c.category === 'model' || c.id === 'model')?.currentValue ?? objectValue(session.models).currentModelId;
+    return { ...session, configOptions: [{ id: 'model', category: 'model', type: 'select', options,
+                ...(options.some(o => o.value === current) ? { currentValue: current } : {}) }, ...configs.filter(c => c.category !== 'model' && c.id !== 'model')] };
+}

package/dist/acp-models.d.ts

@@ -0,0 +1,36 @@
+import type { Workspace, WorkspaceView } from '@shardflux/sdk';
+import type { Ctx } from './commands.js';
+import type { Conversation } from './conversations.js';
+import type { AcpCatalog } from './acp-catalog.js';
+/** No prompts, login, logout or credential writes. Every child process group is
+ * terminated, including initialization failures and interrupted clients. */
+export declare const ACP_MODELS_SCRIPT: string;
+export interface AcpScope {
+    apiUrl: string;
+    organizationId: string;
+    template: string;
+}
+export declare function acpScope(apiUrl: string, ws: Pick<WorkspaceView, 'organization_id' | 'template'>): AcpScope;
+/** Model payloads are account/harness/template scoped. The credential fingerprint
+ * only locates the last verified binding; it is never stored or logged in clear. */
+export declare class AcpModelCache {
+    #private;
+    constructor(dir: string);
+    lookup(ctx: Ctx, folder: string): {
+        scope: AcpScope;
+        catalog: AcpCatalog;
+    } | undefined;
+    remember(ctx: Ctx, folder: string, scope: AcpScope): void;
+    read(scope: AcpScope): AcpCatalog;
+    write(scope: AcpScope, catalog: AcpCatalog): void;
+}
+export declare function discoverAcpCatalog(ctx: Ctx, ws: Workspace, root: string): Promise<AcpCatalog>;
+export interface AcpPreparation {
+    allocated(conversation: Conversation, workspace: WorkspaceView): void;
+    ready(workspace: Workspace): void;
+    prepared(): void;
+}
+export interface AcpLifecycle {
+    prepare(ctx: Ctx, folder: string, name: string, callbacks: AcpPreparation): Promise<AcpCatalog>;
+}
+export declare const ACP_LIFECYCLE: AcpLifecycle;