@supen-ai/cli 0.1.6

package/README.md

@@ -0,0 +1,235 @@
+# `@supen-ai/cli`
+
+Supen CLI for bootstrapping a local Supen daemon, managing agents and skills, and chatting with your local runtime from the terminal.
+
+## Install
+
+```bash
+npm install -g @supen-ai/cli
+```
+
+After install, the binary is available as:
+
+```bash
+supen
+```
+
+## Quick Start
+
+The easiest first run is:
+
+```bash
+supen bootstrap
+```
+
+That walks through initial setup, writes `~/.supen/config.yaml`, and prepares the local daemon/service setup.
+
+If you want to configure models manually instead:
+
+```bash
+supen model add minimax <api-key>
+supen model set minimax:MiniMax-M2.7
+supen doctor
+```
+
+## Common Commands
+
+### Interactive REPL
+
+Run `supen` with no arguments to open the interactive chat REPL:
+
+```bash
+supen
+```
+
+### One-shot Chat
+
+```bash
+supen chat "hi"
+supen chat --agent web-agent --thread <thread-id> "continue"
+supen chat --json "status"
+```
+
+### Daemon Management
+
+```bash
+supen daemon install
+supen daemon status
+supen daemon logs --lines 100
+supen daemon update
+```
+
+### Remote Codex Computer Enrollment
+
+When `app.supen.ai` generates a remote computer claim, paste the generated command
+on a machine that already has `codex` installed and authenticated:
+
+```bash
+npx -y @supen-ai/cli@0.1.6 computer enroll --claim '<one-time-claim-token>' --runtime host --yes
+```
+
+`--gateway-url` is optional for production because `computer enroll` defaults to
+`https://gateway.supen.ai`. The `host` runtime installs `@supen-ai/cli@0.1.6`,
+configures it for Codex app-server transport, and starts it as a user service
+with the existing Codex login on that machine.
+
+### Health Checks
+
+```bash
+supen doctor
+supen doctor list
+supen doctor run
+```
+
+### Models
+
+```bash
+supen model list
+supen model add openai <api-key>
+supen model set openai:gpt-4.1
+supen model remove openai
+```
+
+### Skills
+
+```bash
+supen skills list
+supen skills install <git-url-or-name>
+supen skills install tiwater/skills/ux-design
+supen skills install tiwater/skills --path skills/ux-design
+supen skills enable <name>
+supen skills inspect <name>
+```
+
+### Plugins
+
+```bash
+supen verify
+supen evolve
+supen plugin list
+supen plugin verify lucid
+supen plugin verify /path/to/knowledge-root/plugins/lucid
+supen evolve lucid --json
+supen evolve lucid --output /path/to/evidence
+supen evolve lucid --run-tests
+```
+
+`verify` defaults to the current mounted plugin when exactly one plugin is mounted.
+`plugin verify` resolves the argument as a mounted plugin name first, then as a
+path. For a mounted knowledge root like `lucid-docs/plugins/lucid`, `lucid` is
+the plugin name and `scenarios/` remains the plugin's requirement/evaluation
+context. Verification runs the plugin validators under `plugins/<name>/tests/`,
+discovered plugin test suites, and artifact checks, then publishes evidence,
+runner stdout/stderr, an artifact index, and generated outputs under
+`~/.supen/tasks/task-knowledge-evolve-*` without writing a separate evolution
+round.
+
+`evolve` is knowledge-context scoped, not plugin-scoped. When a focus is provided,
+Supen uses that mounted plugin to resolve the surrounding knowledge root and then
+writes promotion evidence plus knowledge issues to `.supen/evolution/` unless
+`--output` is provided. With one mounted plugin, `supen evolve` can infer the
+current knowledge root; otherwise pass a plugin name or path as the focus.
+
+`knowledge test` and `knowledge evolve` remain as legacy path-based aliases for
+existing scripts. New automation should prefer `supen verify` for plugin checks
+and `supen evolve` for knowledge-context evolution.
+
+### Agents and Threads
+
+```bash
+supen agent list
+supen agent create research-agent
+supen thread list
+supen thread show <thread-id>
+```
+
+### Config
+
+```bash
+supen config list
+supen config get default_model
+supen config set gateway.url https://gateway.example.com
+supen config delete gateway.url
+```
+
+For Codex app-server automation that must send private work-item data to a
+Supen-controlled gateway, the daemon passes trusted data hosts into Codex's
+managed network config. `gateway.supen.ai` is trusted by default. Override or
+extend the list with either `CODEX_TRUSTED_DATA_HOSTS` or:
+
+```yaml
+codex:
+  trusted_data_hosts:
+    - gateway.supen.ai
+```
+
+## Files and Paths
+
+Supen CLI uses the local Supen home directory:
+
+- config: `~/.supen/config.yaml`
+- auth: `~/.supen/auth.json`
+- agents and workspaces: `~/.supen/agents`
+
+### Isolated environments (dev vs test)
+
+The local daemon stores state under `SUPEN_HOME` and now also reads:
+
+- `SUPEN_DAEMON_CONTAINER_NAME` (default: `supen-daemon`)
+- `PORT` (default: daemon port from config or `2756`)
+
+Example dev profile:
+
+```bash
+SUPEN_HOME=$HOME/.supen-dev \
+PORT=2756 \
+SUPEN_DAEMON_CONTAINER_NAME=supen-daemon-dev \
+supen daemon install
+```
+
+Example isolated test profile:
+
+```bash
+SUPEN_HOME=$(mktemp -d) \
+PORT=3760 \
+SUPEN_DAEMON_CONTAINER_NAME=supen-daemon-test \
+supen daemon install
+```
+
+Optional helper scripts are available:
+
+```bash
+./scripts/supen-dev.sh daemon install
+./scripts/supen-test.sh daemon install
+```
+
+## Typical Local Flow
+
+```bash
+supen bootstrap
+supen doctor
+supen daemon status
+supen
+```
+
+Or, for scriptable use:
+
+```bash
+supen chat --json "summarize the current project"
+```
+
+## Help
+
+Every command supports `--help`:
+
+```bash
+supen --help
+supen chat --help
+supen daemon --help
+supen skills --help
+```
+
+## Source
+
+- repo: `https://github.com/tiwater/supen`
+- issues: `https://github.com/tiwater/supen/issues`

package/daemon/dist/acp-client.d.ts

@@ -0,0 +1,42 @@
+import type { ACPAgentManifest, ACPCreateSessionRequest, ACPSendMessageRequest, ACPSessionDescriptor, ACPStreamEvent, ACPToolCallRequest } from './acp-types.js';
+interface SSEFrame {
+    event?: string;
+    data?: string;
+    id?: string;
+    retry?: number;
+}
+export interface ACPStreamHandlers {
+    onEvent?: (event: ACPStreamEvent) => Promise<void> | void;
+    onMessage?: (event: ACPStreamEvent) => Promise<void> | void;
+    onToolCall?: (event: ACPStreamEvent) => Promise<void> | void;
+    onToolResult?: (event: ACPStreamEvent) => Promise<void> | void;
+}
+export interface ACPClientOptions {
+    baseUrl: string;
+    apiKey?: string;
+    fetchImpl?: typeof fetch;
+}
+export declare function parseSSE(stream: ReadableStream<Uint8Array>): AsyncGenerator<SSEFrame>;
+export declare class ACPClient {
+    private readonly baseUrl;
+    private readonly apiKey?;
+    private readonly fetchImpl;
+    constructor(opts: ACPClientOptions);
+    private buildHeaders;
+    private requestJson;
+    getManifest(): Promise<{
+        agents: ACPAgentManifest[];
+    }>;
+    createSession(request: ACPCreateSessionRequest): Promise<{
+        session: ACPSessionDescriptor;
+    }>;
+    getSession(sessionId: string): Promise<{
+        session: ACPSessionDescriptor;
+    }>;
+    sendMessage(sessionId: string, request: ACPSendMessageRequest): Promise<unknown>;
+    sendToolCalls(sessionId: string, request: ACPToolCallRequest): Promise<unknown>;
+    streamSession(sessionId: string, handlers?: ACPStreamHandlers, signal?: AbortSignal): Promise<void>;
+    connectThread(request: ACPCreateSessionRequest, handlers?: ACPStreamHandlers, signal?: AbortSignal): Promise<ACPSessionDescriptor>;
+}
+export {};
+//# sourceMappingURL=acp-client.d.ts.map

package/daemon/dist/acp-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"acp-client.d.ts","sourceRoot":"","sources":["../src/acp-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,uBAAuB,EACvB,qBAAqB,EACrB,oBAAoB,EACpB,cAAc,EACd,kBAAkB,EACnB,MAAM,gBAAgB,CAAC;AAExB,UAAU,QAAQ;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC1D,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC5D,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC7D,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAChE;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAsCD,wBAAuB,QAAQ,CAC7B,MAAM,EAAE,cAAc,CAAC,UAAU,CAAC,GACjC,cAAc,CAAC,QAAQ,CAAC,CAuB1B;AAED,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;gBAE7B,IAAI,EAAE,gBAAgB;IAMlC,OAAO,CAAC,YAAY;YASN,WAAW;IAkBnB,WAAW,IAAI,OAAO,CAAC;QAAE,MAAM,EAAE,gBAAgB,EAAE,CAAA;KAAE,CAAC;IAOtD,aAAa,CACjB,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC;QAAE,OAAO,EAAE,oBAAoB,CAAA;KAAE,CAAC;IAOvC,UAAU,CACd,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC;QAAE,OAAO,EAAE,oBAAoB,CAAA;KAAE,CAAC;IAOvC,WAAW,CACf,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,OAAO,CAAC;IAOb,aAAa,CACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,OAAO,CAAC;IAUb,aAAa,CACjB,SAAS,EAAE,MAAM,EACjB,QAAQ,GAAE,iBAAsB,EAChC,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,IAAI,CAAC;IAoCV,aAAa,CACjB,OAAO,EAAE,uBAAuB,EAChC,QAAQ,GAAE,iBAAsB,EAChC,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,oBAAoB,CAAC;CAKjC"}

package/daemon/dist/acp-client.js

@@ -0,0 +1,149 @@
+function normalizeBaseUrl(baseUrl) {
+    return baseUrl.replace(/\/+$/, '');
+}
+function buildSSEFrames(chunkBuffer) {
+    const normalized = chunkBuffer.replace(/\r\n/g, '\n');
+    const segments = normalized.split('\n\n');
+    const remainder = normalized.endsWith('\n\n') ? '' : (segments.pop() ?? '');
+    const frames = segments
+        .map((segment) => {
+        const frame = {};
+        for (const line of segment.split('\n')) {
+            if (!line || line.startsWith(':'))
+                continue;
+            const idx = line.indexOf(':');
+            const field = idx === -1 ? line : line.slice(0, idx);
+            const rawValue = idx === -1 ? '' : line.slice(idx + 1).trimStart();
+            if (field === 'event')
+                frame.event = rawValue;
+            if (field === 'data') {
+                frame.data = frame.data ? `${frame.data}\n${rawValue}` : rawValue;
+            }
+            if (field === 'id')
+                frame.id = rawValue;
+            if (field === 'retry') {
+                const retry = Number(rawValue);
+                if (Number.isFinite(retry))
+                    frame.retry = retry;
+            }
+        }
+        return frame;
+    })
+        .filter((frame) => frame.data || frame.event || frame.id);
+    return { frames, remainder };
+}
+export async function* parseSSE(stream) {
+    const reader = stream.getReader();
+    const decoder = new TextDecoder();
+    let buffer = '';
+    while (true) {
+        const { done, value } = await reader.read();
+        if (done)
+            break;
+        buffer += decoder.decode(value, { stream: true });
+        const { frames, remainder } = buildSSEFrames(buffer);
+        buffer = remainder;
+        for (const frame of frames) {
+            yield frame;
+        }
+    }
+    buffer += decoder.decode();
+    const { frames } = buildSSEFrames(`${buffer}\n\n`);
+    for (const frame of frames) {
+        yield frame;
+    }
+}
+export class ACPClient {
+    baseUrl;
+    apiKey;
+    fetchImpl;
+    constructor(opts) {
+        this.baseUrl = normalizeBaseUrl(opts.baseUrl);
+        this.apiKey = opts.apiKey;
+        this.fetchImpl = opts.fetchImpl || fetch;
+    }
+    buildHeaders(extra) {
+        const headers = new Headers(extra);
+        headers.set('Accept', headers.get('Accept') || 'application/json');
+        if (this.apiKey) {
+            headers.set('Authorization', `Bearer ${this.apiKey}`);
+        }
+        return headers;
+    }
+    async requestJson(path, init) {
+        const response = await this.fetchImpl(`${this.baseUrl}${path}`, {
+            ...init,
+            headers: this.buildHeaders({
+                'Content-Type': 'application/json',
+                ...init?.headers,
+            }),
+        });
+        if (!response.ok) {
+            throw new Error(`ACP request failed (${response.status} ${response.statusText})`);
+        }
+        return (await response.json());
+    }
+    async getManifest() {
+        return this.requestJson('/acp/agents', {
+            method: 'GET',
+            headers: this.buildHeaders(),
+        });
+    }
+    async createSession(request) {
+        return this.requestJson('/acp/sessions', {
+            method: 'POST',
+            body: JSON.stringify(request),
+        });
+    }
+    async getSession(sessionId) {
+        return this.requestJson(`/acp/sessions/${encodeURIComponent(sessionId)}`, {
+            method: 'GET',
+            headers: this.buildHeaders(),
+        });
+    }
+    async sendMessage(sessionId, request) {
+        return this.requestJson(`/acp/sessions/${encodeURIComponent(sessionId)}`, {
+            method: 'POST',
+            body: JSON.stringify(request),
+        });
+    }
+    async sendToolCalls(sessionId, request) {
+        return this.requestJson(`/acp/sessions/${encodeURIComponent(sessionId)}/tools`, {
+            method: 'POST',
+            body: JSON.stringify(request),
+        });
+    }
+    async streamSession(sessionId, handlers = {}, signal) {
+        const response = await this.fetchImpl(`${this.baseUrl}/acp/sessions/${encodeURIComponent(sessionId)}?stream=1`, {
+            method: 'GET',
+            headers: this.buildHeaders({
+                Accept: 'text/event-stream',
+            }),
+            signal,
+        });
+        if (!response.ok || !response.body) {
+            throw new Error(`ACP stream failed (${response.status} ${response.statusText})`);
+        }
+        for await (const frame of parseSSE(response.body)) {
+            if (!frame.data)
+                continue;
+            const event = JSON.parse(frame.data);
+            await handlers.onEvent?.(event);
+            if (event.type === 'message' || event.type === 'message.delta') {
+                await handlers.onMessage?.(event);
+            }
+            if (event.type === 'tool_call') {
+                await handlers.onToolCall?.(event);
+            }
+            if (event.type === 'tool_result') {
+                await handlers.onToolResult?.(event);
+            }
+        }
+    }
+    async connectThread(request, handlers = {}, signal) {
+        const { session } = await this.createSession(request);
+        void this.streamSession(session.id, handlers, signal);
+        return session;
+    }
+}
+//# sourceMappingURL=acp-client.js.map

package/daemon/dist/acp-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"acp-client.js","sourceRoot":"","sources":["../src/acp-client.ts"],"names":[],"mappings":"AA6BA,SAAS,gBAAgB,CAAC,OAAe;IACvC,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,cAAc,CAAC,WAAmB;IAIzC,MAAM,UAAU,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,QAAQ;SACpB,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACf,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC9B,MAAM,KAAK,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACrD,MAAM,QAAQ,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;YACnE,IAAI,KAAK,KAAK,OAAO;gBAAE,KAAK,CAAC,KAAK,GAAG,QAAQ,CAAC;YAC9C,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;gBACrB,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;YACpE,CAAC;YACD,IAAI,KAAK,KAAK,IAAI;gBAAE,KAAK,CAAC,EAAE,GAAG,QAAQ,CAAC;YACxC,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;gBACtB,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAC/B,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;oBAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;YAClD,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC;IAE5D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,QAAQ,CAC7B,MAAkC;IAElC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,IAAI,MAAM,GAAG,EAAE,CAAC;IAEhB,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,IAAI;YAAE,MAAM;QAEhB,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QACrD,MAAM,GAAG,SAAS,CAAC;QAEnB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAC3B,MAAM,EAAE,MAAM,EAAE,GAAG,cAAc,CAAC,GAAG,MAAM,MAAM,CAAC,CAAC;IACnD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,OAAO,SAAS;IACH,OAAO,CAAS;IAChB,MAAM,CAAU;IAChB,SAAS,CAAe;IAEzC,YAAY,IAAsB;QAChC,IAAI,CAAC,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC3C,CAAC;IAEO,YAAY,CAAC,KAA8B;QACjD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,kBAAkB,CAAC,CAAC;QACnE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,WAAW,CAAI,IAAY,EAAE,IAAkB;QAC3D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;YAC9D,GAAG,IAAI;YACP,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC;gBACzB,cAAc,EAAE,kBAAkB;gBAClC,GAAI,IAAI,EAAE,OAA8C;aACzD,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,uBAAuB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,GAAG,CACjE,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,WAAW;QACf,OAAO,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE;YACrC,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,OAAgC;QAEhC,OAAO,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE;YACvC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SAC9B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,UAAU,CACd,SAAiB;QAEjB,OAAO,IAAI,CAAC,WAAW,CAAC,iBAAiB,kBAAkB,CAAC,SAAS,CAAC,EAAE,EAAE;YACxE,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,WAAW,CACf,SAAiB,EACjB,OAA8B;QAE9B,OAAO,IAAI,CAAC,WAAW,CAAC,iBAAiB,kBAAkB,CAAC,SAAS,CAAC,EAAE,EAAE;YACxE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SAC9B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,SAAiB,EACjB,OAA2B;QAE3B,OAAO,IAAI,CAAC,WAAW,CACrB,iBAAiB,kBAAkB,CAAC,SAAS,CAAC,QAAQ,EACtD;YACE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SAC9B,CACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,SAAiB,EACjB,WAA8B,EAAE,EAChC,MAAoB;QAEpB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CACnC,GAAG,IAAI,CAAC,OAAO,iBAAiB,kBAAkB,CAAC,SAAS,CAAC,WAAW,EACxE;YACE,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC;gBACzB,MAAM,EAAE,mBAAmB;aAC5B,CAAC;YACF,MAAM;SACP,CACF,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CACb,sBAAsB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,GAAG,CAChE,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAClD,IAAI,CAAC,KAAK,CAAC,IAAI;gBAAE,SAAS;YAE1B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAmB,CAAC;YACvD,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;YAEhC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;gBAC/D,MAAM,QAAQ,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC;YACpC,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAC/B,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC;YACrC,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBACjC,MAAM,QAAQ,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,OAAgC,EAChC,WAA8B,EAAE,EAChC,MAAoB;QAEpB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACtD,KAAK,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACtD,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/daemon/dist/acp-types.d.ts

@@ -0,0 +1,98 @@
+export type ACPRole = 'system' | 'user' | 'assistant' | 'tool';
+export type ACPContentType = 'text' | 'markdown' | 'artifact';
+export interface ACPTextContentPart {
+    type: 'text' | 'markdown';
+    text: string;
+}
+export interface ACPArtifactContentPart {
+    type: 'artifact';
+    name?: string;
+    mime_type?: string;
+    uri?: string;
+    path?: string;
+    description?: string;
+    data?: string;
+}
+export type ACPContentPart = ACPTextContentPart | ACPArtifactContentPart;
+export interface ACPToolCall {
+    id: string;
+    name: string;
+    arguments?: Record<string, unknown>;
+}
+export interface ACPToolResult {
+    tool_call_id: string;
+    name?: string;
+    result?: unknown;
+    is_error?: boolean;
+}
+export interface ACPMessageEnvelope {
+    id: string;
+    role: ACPRole;
+    content: ACPContentPart[];
+    tool_calls?: ACPToolCall[];
+    tool_results?: ACPToolResult[];
+    metadata?: Record<string, unknown>;
+    created_at: string;
+}
+export interface ACPSessionDescriptor {
+    id: string;
+    thread_id: string;
+    agent_id: string;
+    session_id: string;
+    chat_jid: string;
+    created_at: string;
+    updated_at: string;
+    stream_url: string;
+    message_url: string;
+    tools_url: string;
+}
+export interface ACPAgentManifest {
+    id: string;
+    protocol: 'acp';
+    name: string;
+    description: string;
+    version: string;
+    agent_id: string;
+    endpoints: {
+        agents: string;
+        sessions: string;
+    };
+    capabilities: {
+        streaming: boolean;
+        inbound: boolean;
+        outbound: boolean;
+        tool_calls: boolean;
+        tool_results: boolean;
+        content_types: ACPContentType[];
+    };
+}
+export interface ACPCreateSessionRequest {
+    agent_id: string;
+    session_id?: string;
+    thread_id?: string;
+    metadata?: Record<string, unknown>;
+    message?: Partial<ACPMessageEnvelope>;
+}
+export interface ACPSendMessageRequest {
+    message: Partial<ACPMessageEnvelope>;
+}
+export interface ACPToolCallRequest {
+    tool_calls: ACPToolCall[];
+    content?: string | ACPContentPart[];
+    metadata?: Record<string, unknown>;
+}
+export interface ACPStreamEvent {
+    type: 'session' | 'message' | 'message.delta' | 'task' | 'tool_call' | 'tool_result' | 'error' | 'heartbeat';
+    session_id: string;
+    task_id?: string;
+    message?: ACPMessageEnvelope;
+    tool_calls?: ACPToolCall[];
+    tool_results?: ACPToolResult[];
+    data?: Record<string, unknown>;
+    error?: {
+        code: string;
+        message: string;
+        details?: Record<string, unknown>;
+    };
+}
+//# sourceMappingURL=acp-types.d.ts.map

package/daemon/dist/acp-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"acp-types.d.ts","sourceRoot":"","sources":["../src/acp-types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,OAAO,GAAG,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,MAAM,CAAC;AAE/D,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,UAAU,GAAG,UAAU,CAAC;AAE9D,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,GAAG,UAAU,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,cAAc,GAAG,kBAAkB,GAAG,sBAAsB,CAAC;AAEzE,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,UAAU,CAAC,EAAE,WAAW,EAAE,CAAC;IAC3B,YAAY,CAAC,EAAE,aAAa,EAAE,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,KAAK,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE;QACT,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,YAAY,EAAE;QACZ,SAAS,EAAE,OAAO,CAAC;QACnB,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,OAAO,CAAC;QAClB,UAAU,EAAE,OAAO,CAAC;QACpB,YAAY,EAAE,OAAO,CAAC;QACtB,aAAa,EAAE,cAAc,EAAE,CAAC;KACjC,CAAC;CACH;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,OAAO,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,WAAW,EAAE,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,GAAG,cAAc,EAAE,CAAC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EACA,SAAS,GACT,SAAS,GACT,eAAe,GACf,MAAM,GACN,WAAW,GACX,aAAa,GACb,OAAO,GACP,WAAW,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,kBAAkB,CAAC;IAC7B,UAAU,CAAC,EAAE,WAAW,EAAE,CAAC;IAC3B,YAAY,CAAC,EAAE,aAAa,EAAE,CAAC;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,KAAK,CAAC,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACnC,CAAC;CACH"}

package/daemon/dist/acp-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=acp-types.js.map

package/daemon/dist/acp-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"acp-types.js","sourceRoot":"","sources":["../src/acp-types.ts"],"names":[],"mappings":""}

package/daemon/dist/agent-sdk/app-server-approvals.d.ts

@@ -0,0 +1,24 @@
+export type PendingAppServerApproval = {
+    approvalId: string;
+    toolCallId: string;
+    toolName: string;
+    input: Record<string, unknown>;
+    method: string;
+    params: Record<string, unknown>;
+};
+export declare function isAppServerApprovalRequest(method: string): boolean;
+export declare function registerAppServerApproval(input: {
+    ownerId: string;
+    requestId: string | number;
+    method: string;
+    params: Record<string, unknown>;
+    respond: (result: Record<string, unknown>) => void;
+}): PendingAppServerApproval;
+export declare function respondAppServerApproval(input: {
+    approvalId: string;
+    approved: boolean;
+}): PendingAppServerApproval;
+export declare function cancelAppServerApprovalsForOwner(ownerId: string): void;
+export declare function clearAppServerApprovalsForOwner(ownerId: string): void;
+export declare function createAppServerApprovalOwnerId(): string;
+//# sourceMappingURL=app-server-approvals.d.ts.map

package/daemon/dist/agent-sdk/app-server-approvals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-server-approvals.d.ts","sourceRoot":"","sources":["../../src/agent-sdk/app-server-approvals.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,wBAAwB,GAAG;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC,CAAC;AA4CF,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAQlE;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CACpD,GAAG,wBAAwB,CA0B3B;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;CACnB,GAAG,wBAAwB,CAS3B;AAED,wBAAgB,gCAAgC,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAOtE;AAED,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAMrE;AAED,wBAAgB,8BAA8B,IAAI,MAAM,CAEvD"}

package/daemon/dist/agent-sdk/app-server-approvals.js

@@ -0,0 +1,99 @@
+import { randomUUID } from 'node:crypto';
+const pendingApprovals = new Map();
+function readString(record, key) {
+    const value = record[key];
+    return typeof value === 'string' ? value.trim() : '';
+}
+function approvalToolName(method) {
+    if (method === 'item/fileChange/requestApproval' || method === 'applyPatchApproval')
+        return 'Apply Patch';
+    if (method === 'item/commandExecution/requestApproval' || method === 'execCommandApproval')
+        return 'Command';
+    return 'Approval';
+}
+function approvalInput(method, params) {
+    if (method === 'item/commandExecution/requestApproval' || method === 'execCommandApproval') {
+        return {
+            ...(readString(params, 'command') ? { command: readString(params, 'command') } : {}),
+            ...(readString(params, 'cwd') ? { cwd: readString(params, 'cwd') } : {}),
+            ...(params.commandActions !== undefined ? { commandActions: params.commandActions } : {}),
+            ...(params.networkApprovalContext !== undefined ? { networkApprovalContext: params.networkApprovalContext } : {}),
+            ...(params.additionalPermissions !== undefined ? { additionalPermissions: params.additionalPermissions } : {}),
+            ...(readString(params, 'reason') ? { reason: readString(params, 'reason') } : {}),
+        };
+    }
+    if (method === 'item/fileChange/requestApproval' || method === 'applyPatchApproval') {
+        return {
+            ...(params.changes !== undefined ? { changes: params.changes } : {}),
+            ...(params.grantRoot !== undefined ? { grantRoot: params.grantRoot } : {}),
+            ...(readString(params, 'reason') ? { reason: readString(params, 'reason') } : {}),
+        };
+    }
+    return { ...params };
+}
+export function isAppServerApprovalRequest(method) {
+    return (method === 'item/commandExecution/requestApproval' ||
+        method === 'item/fileChange/requestApproval' ||
+        method === 'applyPatchApproval' ||
+        method === 'execCommandApproval' ||
+        method.endsWith('/requestApproval'));
+}
+export function registerAppServerApproval(input) {
+    const itemId = readString(input.params, 'itemId');
+    const approvalId = `codex-${input.ownerId.slice(0, 8)}-${String(input.requestId)}`;
+    const toolCallId = itemId || approvalId;
+    const pending = {
+        approvalId,
+        toolCallId,
+        toolName: approvalToolName(input.method),
+        input: approvalInput(input.method, input.params),
+        method: input.method,
+        params: input.params,
+    };
+    const timeout = setTimeout(() => {
+        const entry = pendingApprovals.get(approvalId);
+        if (!entry)
+            return;
+        pendingApprovals.delete(approvalId);
+        entry.respond('decline');
+    }, 10 * 60 * 1000);
+    timeout.unref?.();
+    pendingApprovals.set(approvalId, {
+        ...pending,
+        ownerId: input.ownerId,
+        timeout,
+        respond: (decision) => input.respond({ decision }),
+    });
+    return pending;
+}
+export function respondAppServerApproval(input) {
+    const pending = pendingApprovals.get(input.approvalId);
+    if (!pending) {
+        throw new Error(`No pending Codex approval request for ${input.approvalId}`);
+    }
+    pendingApprovals.delete(input.approvalId);
+    clearTimeout(pending.timeout);
+    pending.respond(input.approved ? 'accept' : 'decline');
+    return pending;
+}
+export function cancelAppServerApprovalsForOwner(ownerId) {
+    for (const [approvalId, pending] of pendingApprovals.entries()) {
+        if (pending.ownerId !== ownerId)
+            continue;
+        pendingApprovals.delete(approvalId);
+        clearTimeout(pending.timeout);
+        pending.respond('decline');
+    }
+}
+export function clearAppServerApprovalsForOwner(ownerId) {
+    for (const [approvalId, pending] of pendingApprovals.entries()) {
+        if (pending.ownerId !== ownerId)
+            continue;
+        pendingApprovals.delete(approvalId);
+        clearTimeout(pending.timeout);
+    }
+}
+export function createAppServerApprovalOwnerId() {
+    return randomUUID();
+}
+//# sourceMappingURL=app-server-approvals.js.map