@wrongstack/acp 0.293.0 → 0.295.1

package/dist/agent/stdio-transport.d.ts

@@ -1,4 +1,5 @@
 import type { ACPMessage } from '../types/acp-messages.js';
+declare function positiveLimit(value: number | undefined, fallback: number): number;
 export interface AgentServerTransport {
     send(msg: ACPMessage): Promise<void>;
     sendRaw(chunk: string): void;
@@ -26,7 +27,12 @@ export declare class StdioTransport implements AgentServerTransport {
     private closed;
     private resolveRead;
     private messageQueue;
-    constructor();
+    private readonly maxFrameChars;
+    private readonly maxQueuedMessages;
+    constructor(opts?: {
+        maxFrameChars?: number;
+        maxQueuedMessages?: number;
+    });
     sendStartupMarker(): void;
     send(msg: ACPMessage): Promise<void>;
     sendRaw(chunk: string): void;
@@ -52,6 +58,10 @@ export interface ClientTransportOptions {
      * server-side transport (the default) keeps the marker check.
      */
     skipHandshakeMarker?: boolean | undefined;
+    /** Maximum pending newline-delimited JSON frame size. Default 20 MiB. */
+    maxFrameChars?: number | undefined;
+    /** Maximum messages retained for the optional read() API. Default 1000. */
+    maxQueuedMessages?: number | undefined;
 }
 export interface ACPChildProcess extends EventEmitter {
     stdout: NodeJS.ReadableStream;
@@ -68,6 +78,8 @@ export declare class ClientTransport implements ACPClientTransport {
     private resolveRead;
     private messageQueue;
     private readonly opts;
+    private readonly maxFrameChars;
+    private readonly maxQueuedMessages;
     constructor(options: ClientTransportOptions);
     start(): Promise<void>;
     send(msg: ACPMessage): Promise<void>;
@@ -79,4 +91,21 @@ export declare class ClientTransport implements ACPClientTransport {
     private onChildClose;
     private dispatch;
 }
+declare function spawnInvocation(command: string, args: string[], platform: NodeJS.Platform): {
+    command: string;
+    args: string[];
+    windowsVerbatimArguments?: true;
+};
+declare function verbatimOptions(invocation: {
+    windowsVerbatimArguments?: true;
+}): {
+    windowsVerbatimArguments?: true;
+};
+/** Direct-module test seam; not re-exported by the package barrel. */
+export declare const stdioTransportCoverage: {
+    positiveLimit: typeof positiveLimit;
+    spawnInvocation: typeof spawnInvocation;
+    verbatimOptions: typeof verbatimOptions;
+};
+export {};
 //# sourceMappingURL=stdio-transport.d.ts.map

package/dist/agent/stdio-transport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stdio-transport.d.ts","sourceRoot":"","sources":["../../src/agent/stdio-transport.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAE3D,MAAM,WAAW,oBAAoB;IACnC,IAAI,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,IAAI,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IACnC,KAAK,IAAI,IAAI,CAAC;IACd,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,UAAU,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CAC3D;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,UAAU,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IAC1D,IAAI,IAAI,IAAI,CAAC;CACd;AAED,qBAAa,cAAe,YAAW,oBAAoB;IACzD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAiB;IACvC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;IACzC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;IAEzC,OAAO,CAAC,MAAM,CAAM;IACpB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwC;IACjE,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,WAAW,CAAmD;IACtE,OAAO,CAAC,YAAY,CAAoB;IAExC,cAMC;IAED,iBAAiB,IAAI,IAAI,CAExB;IAED,IAAI,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAMnC;IAED,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAE3B;IAED,IAAI,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAMjC;IAED,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,UAAU,KAAK,IAAI,GAAG,MAAM,IAAI,CAGxD;IAED,KAAK,IAAI,IAAI,CAKZ;IAED,OAAO,CAAC,MAAM;IAgBd,OAAO,CAAC,QAAQ;IAiBhB,OAAO,CAAC,WAAW;IAMnB,OAAO,CAAC,OAAO;CAIhB;AAMD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAC3C;AAED,MAAM,WAAW,eAAgB,SAAQ,YAAY;IACnD,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC;IAC9B,KAAK,EAAE,MAAM,CAAC,cAAc,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC;IAC9B,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACxB,IAAI,IAAI,IAAI,CAAC;CACd;AAED,qBAAa,eAAgB,YAAW,kBAAkB;IACxD,OAAO,CAAC,KAAK,CAAgC;IAC7C,OAAO,CAAC,MAAM,CAAM;IACpB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwC;IACjE,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,WAAW,CAAmD;IACtE,OAAO,CAAC,YAAY,CAAoB;IACxC,OAAO,CAAC,QAAQ,CAAC,IAAI,CACI;IAEzB,YAAY,OAAO,EAAE,sBAAsB,EAK1C;IAEK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAyG3B;IAED,IAAI,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CASnC;IAED,IAAI,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAMjC;IAED,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,UAAU,KAAK,IAAI,GAAG,MAAM,IAAI,CAGxD;IAED,IAAI,IAAI,IAAI,CASX;IAED,OAAO,CAAC,WAAW;IAgBnB,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,YAAY;IASpB,OAAO,CAAC,QAAQ;CAgBjB"}
+{"version":3,"file":"stdio-transport.d.ts","sourceRoot":"","sources":["../../src/agent/stdio-transport.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAM3D,iBAAS,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE1E;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,IAAI,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IACnC,KAAK,IAAI,IAAI,CAAC;IACd,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,UAAU,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CAC3D;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,UAAU,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IAC1D,IAAI,IAAI,IAAI,CAAC;CACd;AAED,qBAAa,cAAe,YAAW,oBAAoB;IACzD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAiB;IACvC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;IACzC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;IAEzC,OAAO,CAAC,MAAM,CAAM;IACpB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwC;IACjE,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,WAAW,CAAmD;IACtE,OAAO,CAAC,YAAY,CAAoB;IACxC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAS;IAE3C,YAAY,IAAI,GAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAAO,EAQ5E;IAED,iBAAiB,IAAI,IAAI,CAExB;IAED,IAAI,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAMnC;IAED,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAE3B;IAED,IAAI,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAOjC;IAED,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,UAAU,KAAK,IAAI,GAAG,MAAM,IAAI,CAGxD;IAED,KAAK,IAAI,IAAI,CAQZ;IAED,OAAO,CAAC,MAAM;IAgCd,OAAO,CAAC,QAAQ;IAyBhB,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,OAAO;CAIhB;AAMD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC1C,yEAAyE;IACzE,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,2EAA2E;IAC3E,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAED,MAAM,WAAW,eAAgB,SAAQ,YAAY;IACnD,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC;IAC9B,KAAK,EAAE,MAAM,CAAC,cAAc,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC;IAC9B,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACxB,IAAI,IAAI,IAAI,CAAC;CACd;AAED,qBAAa,eAAgB,YAAW,kBAAkB;IACxD,OAAO,CAAC,KAAK,CAAgC;IAC7C,OAAO,CAAC,MAAM,CAAM;IACpB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwC;IACjE,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,WAAW,CAAmD;IACtE,OAAO,CAAC,YAAY,CAAoB;IACxC,OAAO,CAAC,QAAQ,CAAC,IAAI,CACI;IACzB,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAS;IAE3C,YAAY,OAAO,EAAE,sBAAsB,EAO1C;IAEK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAuG3B;IAED,IAAI,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CASnC;IAED,IAAI,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAOjC;IAED,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,UAAU,KAAK,IAAI,GAAG,MAAM,IAAI,CAGxD;IAED,IAAI,IAAI,IAAI,CAaX;IAED,OAAO,CAAC,WAAW;IA0BnB,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,YAAY;IAYpB,OAAO,CAAC,QAAQ;CAqBjB;AAED,iBAAS,eAAe,CACtB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,QAAQ,EAAE,MAAM,CAAC,QAAQ,GACxB;IACD,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,wBAAwB,CAAC,EAAE,IAAI,CAAC;CACjC,CAGA;AAED,iBAAS,eAAe,CAAC,UAAU,EAAE;IAAE,wBAAwB,CAAC,EAAE,IAAI,CAAA;CAAE,GAAG;IACzE,wBAAwB,CAAC,EAAE,IAAI,CAAC;CACjC,CAIA;AAED,sEAAsE;AACtE,eAAO,MAAM,sBAAsB;;;;CAAsD,CAAC"}

package/dist/agent/tools-registry.d.ts

@@ -4,7 +4,7 @@
  * Translates WrongStack Tool definitions → ACP ACPToolDefinition format.
  * Provides tool lookup and result assembly for the ACP protocol handler.
  */
-import type { Tool } from '@wrongstack/core';
+import type { Tool } from '@wrongstack/core/types';
 import type { ACPToolList, ACPToolResult } from '../types/acp-messages.js';
 export declare class ACPToolsRegistry {
     private tools;

package/dist/agent/tools-registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tools-registry.d.ts","sourceRoot":"","sources":["../../src/agent/tools-registry.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAC,IAAI,EAAC,MAAM,kBAAkB,CAAC;AAC3C,OAAO,KAAK,EAEV,WAAW,EAEX,aAAa,EAEd,MAAM,0BAA0B,CAAC;AAElC,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,KAAK,CAA2B;IACxC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAE/B,YAAY,KAAK,SAAe,EAE/B;IAED;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAI5B;IAED;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAG5B;IAED,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAElC;IAED,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEzB;IAED,IAAI,IAAI,IAAI,EAAE,CAEb;IAED,8DAA8D;IAC9D,aAAa,IAAI,WAAW,CAM3B;IAED;;;OAGG;IACG,OAAO,CACX,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,GAAG,EAAE,OAAO,EACZ,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAa/B;CACF"}
+{"version":3,"file":"tools-registry.d.ts","sourceRoot":"","sources":["../../src/agent/tools-registry.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,KAAK,EAEV,WAAW,EAEX,aAAa,EAEd,MAAM,0BAA0B,CAAC;AAElC,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,KAAK,CAA2B;IACxC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAE/B,YAAY,KAAK,SAAe,EAE/B;IAED;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAI5B;IAED;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAG5B;IAED,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAElC;IAED,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEzB;IAED,IAAI,IAAI,IAAI,EAAE,CAEb;IAED,8DAA8D;IAC9D,aAAa,IAAI,WAAW,CAM3B;IAED;;;OAGG;IACG,OAAO,CACX,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,GAAG,EAAE,OAAO,EACZ,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAa/B;CACF"}

package/dist/agent/wrongstack-acp-agent.d.ts

@@ -1,3 +1,29 @@
+/**
+ * WrongStackACPServer — ACP v1 server-side entry point.
+ *
+ * Exposes WrongStack as an ACP-compatible agent. ACP clients (Zed, JetBrains
+ * Junie, VS Code ACP extension) spawn this as a subprocess, send JSON-RPC
+ * messages over stdio, and receive v1-protocol responses.
+ *
+ * Usage:
+ *   node dist/agent/wrongstack-acp-agent.js
+ *
+ * Or via the CLI:
+ *   wstack acp-server
+ *
+ * Wiring a real agent: this class is the surface; the bootstrap
+ * binary uses a no-op echo by default so the binary is a useful
+ * connectivity smoke test. For a real server, instantiate
+ * `WrongStackACPServer` programmatically and pass a `runTurn`
+ * produced by `makeACPServerAgentTurn({ agentFor: ... })` from
+ * `./server-agent-turn.js`. The factory is responsible for building
+ * a real core `Agent` (with the right provider, model, system prompt,
+ * etc.) per session.
+ *
+ * Startup: stdout is JSON-RPC only by default. The legacy `[wstack-acp]\n`
+ * marker can be enabled for older internal harnesses with
+ * `legacyStartupMarker`, but ACP clients should rely on v1 initialize.
+ */
 import { type RunTurn, type SessionPersistence } from './protocol-handler.js';
 export interface WrongStackACPServerOptions {
     runTurn?: RunTurn | undefined;
@@ -37,6 +63,8 @@ export interface WrongStackACPServerOptions {
         sessionUpdate: string;
         content: unknown;
     }>) => void) | undefined;
+    /** Per-session cleanup hook, normally `makeACPServerAgentTurn(...).dispose`. */
+    disposeFor?: ((sessionId: string) => void) | undefined;
     /**
      * Durable session store. When set, sessions + history are persisted and
      * restored across restarts for `session/load`. Pass an `ACPSessionStore`.
@@ -62,4 +90,13 @@ export declare class WrongStackACPServer {
     /** Stop the server. */
     stop(): void;
 }
+declare function headerValue(value: string | string[] | undefined): string | undefined;
+declare function requestPath(value: string | undefined): string;
+/** Direct-module test seam; not re-exported by the package barrel. */
+export declare const wrongStackACPServerCoverage: {
+    defaultEchoRunTurn: RunTurn;
+    headerValue: typeof headerValue;
+    requestPath: typeof requestPath;
+};
+export {};
 //# sourceMappingURL=wrongstack-acp-agent.d.ts.map

package/dist/agent/wrongstack-acp-agent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wrongstack-acp-agent.d.ts","sourceRoot":"","sources":["../../src/agent/wrongstack-acp-agent.ts"],"names":[],"mappings":"AA8BA,OAAO,EAEL,KAAK,OAAO,EAEZ,KAAK,kBAAkB,EACxB,MAAM,uBAAuB,CAAC;AAG/B,MAAM,WAAW,0BAA0B;IACzC,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;IACzC,wDAAwD;IACxD,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,kEAAkE;IAClE,mBAAmB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC1C;;;;OAIG;IACH,SAAS,CAAC,EAAE,CAAC,CAAC,SAAS,EAAE,MAAM,KAAK,KAAK,CAAC;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC,GAAG,SAAS,CAAC;IACpG;;;OAGG;IACH,OAAO,CAAC,EAAE,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;IACjH;;;OAGG;IACH,KAAK,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;CACxC;AAED,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAiB;IAC3C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IACrD,+CAA+C;IAC/C,OAAO,CAAC,UAAU,CAAuB;IACzC,OAAO,CAAC,OAAO,CAAS;IAExB,YAAY,IAAI,GAAE,0BAA+B,EAahD;IAED;;;;OAIG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAO3B;YAEa,UAAU;YAcV,SAAS;IAmKvB,uBAAuB;IACvB,IAAI,IAAI,IAAI,CAOX;CACF"}
+{"version":3,"file":"wrongstack-acp-agent.d.ts","sourceRoot":"","sources":["../../src/agent/wrongstack-acp-agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAMH,OAAO,EAEL,KAAK,OAAO,EAEZ,KAAK,kBAAkB,EACxB,MAAM,uBAAuB,CAAC;AAG/B,MAAM,WAAW,0BAA0B;IACzC,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;IACzC,wDAAwD;IACxD,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,kEAAkE;IAClE,mBAAmB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC1C;;;;OAIG;IACH,SAAS,CAAC,EACN,CAAC,CAAC,SAAS,EAAE,MAAM,KAAK,KAAK,CAAC;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC,GAC3E,SAAS,CAAC;IACd;;;OAGG;IACH,OAAO,CAAC,EACJ,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,KAAK,IAAI,CAAC,GAC1F,SAAS,CAAC;IACd,gFAAgF;IAChF,UAAU,CAAC,EAAE,CAAC,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;IACvD;;;OAGG;IACH,KAAK,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;CACxC;AAED,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAiB;IAC3C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IACrD,+CAA+C;IAC/C,OAAO,CAAC,UAAU,CAAuB;IACzC,OAAO,CAAC,OAAO,CAAS;IAExB,YAAY,IAAI,GAAE,0BAA+B,EAchD;IAED;;;;OAIG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAO3B;YAEa,UAAU;YAkBV,SAAS;IA4JvB,uBAAuB;IACvB,IAAI,IAAI,IAAI,CAQX;CACF;AAaD,iBAAS,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAE7E;AAED,iBAAS,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAEtD;AAED,sEAAsE;AACtE,eAAO,MAAM,2BAA2B;;;;CAAmD,CAAC"}

package/dist/agent.js

@@ -1,5 +1,11 @@
 // src/agent/stdio-transport.ts
-import { expectDefined, writeErr } from "@wrongstack/core";
+import { expectDefined, writeErr } from "@wrongstack/core/utils";
+import { treeKill } from "@wrongstack/core/utils/tree-kill";
+var DEFAULT_MAX_FRAME_CHARS = 20 * 1024 * 1024;
+var DEFAULT_MAX_QUEUED_MESSAGES = 1e3;
+function positiveLimit(value, fallback) {
+  return value !== void 0 && Number.isFinite(value) && value > 0 ? Math.floor(value) : fallback;
+}
 var StdioTransport = class {
   stdin = process.stdin;
   stdout = process.stdout;
@@ -9,7 +15,11 @@ var StdioTransport = class {
   closed = false;
   resolveRead = null;
   messageQueue = [];
-  constructor() {
+  maxFrameChars;
+  maxQueuedMessages;
+  constructor(opts = {}) {
+    this.maxFrameChars = positiveLimit(opts.maxFrameChars, DEFAULT_MAX_FRAME_CHARS);
+    this.maxQueuedMessages = positiveLimit(opts.maxQueuedMessages, DEFAULT_MAX_QUEUED_MESSAGES);
     this.stdin.resume();
     this.stdin.setEncoding("utf8");
     this.stdin.on("data", (chunk) => this.onData(chunk));
@@ -30,7 +40,8 @@ var StdioTransport = class {
     this.stdout.write(chunk, "utf8");
   }
   read() {
-    if (this.messageQueue.length > 0) return Promise.resolve(expectDefined(this.messageQueue.shift()));
+    if (this.messageQueue.length > 0)
+      return Promise.resolve(expectDefined(this.messageQueue.shift()));
     if (this.closed) return Promise.resolve(null);
     return new Promise((resolve) => {
       this.resolveRead = resolve;
@@ -45,13 +56,34 @@ var StdioTransport = class {
     this.stdin.pause();
     this.resolveRead?.(null);
     this.resolveRead = null;
+    this.buffer = "";
+    this.messageQueue.length = 0;
+    this.handlers.clear();
   }
   onData(chunk) {
     this.buffer += chunk;
     const lines = this.buffer.split("\n");
     this.buffer = lines.pop() ?? "";
+    if (this.buffer.length > this.maxFrameChars) {
+      this.stderr.write(
+        `[wstack-acp frame error] pending frame exceeds ${this.maxFrameChars} characters
+`,
+        "utf8"
+      );
+      this.close();
+      return;
+    }
     for (const raw of lines) {
       if (!raw.trim()) continue;
+      if (raw.length > this.maxFrameChars) {
+        this.stderr.write(
+          `[wstack-acp frame error] frame exceeds ${this.maxFrameChars} characters
+`,
+          "utf8"
+        );
+        this.close();
+        return;
+      }
       try {
         this.dispatch(JSON.parse(raw));
       } catch (err) {
@@ -66,6 +98,15 @@ var StdioTransport = class {
       this.resolveRead = null;
       resolve(msg);
     } else {
+      if (this.messageQueue.length >= this.maxQueuedMessages) {
+        this.stderr.write(
+          `[wstack-acp queue error] pending message queue exceeds ${this.maxQueuedMessages} entries
+`,
+          "utf8"
+        );
+        this.close();
+        return;
+      }
       this.messageQueue.push(msg);
     }
     for (const handler of this.handlers) {
@@ -78,9 +119,7 @@ var StdioTransport = class {
     }
   }
   handleClose() {
-    this.closed = true;
-    this.resolveRead?.(null);
-    this.resolveRead = null;
+    this.close();
   }
   failAll(err) {
     this.stderr.write(`[wstack-acp stdin error] ${err.message}
@@ -206,11 +245,28 @@ function toolToPriority(tool) {
 // src/types/acp-v1.ts
 var ACP_PROTOCOL_VERSION = 1;
 
-// src/agent/protocol-handler.ts
+// src/version.ts
+import { createRequire } from "node:module";
+var require2 = createRequire(import.meta.url);
+function readPackageVersion(load = () => require2("../package.json")) {
+  try {
+    const packageJson = load();
+    if (typeof packageJson.version === "string" && packageJson.version.length > 0) {
+      return packageJson.version;
+    }
+  } catch {
+  }
+  return "dev";
+}
+var ACP_PACKAGE_VERSION = readPackageVersion();
+
+// src/agent/protocol-contract.ts
 function toWire(msg) {
   return msg;
 }
-var WRONGSTACK_VERSION = "0.274.1";
+var WRONGSTACK_VERSION = ACP_PACKAGE_VERSION;
+
+// src/agent/protocol-handler.ts
 var WRONGSTACK_AUTH_METHODS = [
   {
     id: "wrongstack-auth",
@@ -221,6 +277,7 @@ var WRONGSTACK_AUTH_METHODS = [
   }
 ];
 var DEFAULT_MODE_ID = "code";
+var DEFAULT_MAX_SESSIONS = 64;
 var DEFAULT_MODES = [
   {
     id: DEFAULT_MODE_ID,
@@ -238,6 +295,8 @@ var ACPProtocolHandler = class {
   agentName;
   replayFor;
   seedFor;
+  disposeFor;
+  maxSessions;
   store;
   initialized = false;
   clientCapabilities = {};
@@ -258,6 +317,8 @@ var ACPProtocolHandler = class {
     this.agentName = opts.agentName ?? "wrongstack";
     this.replayFor = opts.replayFor;
     this.seedFor = opts.seedFor;
+    this.disposeFor = opts.disposeFor;
+    this.maxSessions = Number.isFinite(opts.maxSessions) && opts.maxSessions > 0 ? Math.floor(opts.maxSessions) : DEFAULT_MAX_SESSIONS;
     this.store = opts.store;
     if (typeof this.transport.onMessage === "function") {
       this.transport.onMessage((m) => this.maybeResolvePending(m));
@@ -315,8 +376,9 @@ var ACPProtocolHandler = class {
   }
   /** Abort all active turns and drop session state. */
   close() {
-    for (const [, session] of this.sessions) {
+    for (const [sessionId, session] of this.sessions) {
       session.abort.abort();
+      this.disposeSession(sessionId);
     }
     this.sessions.clear();
     for (const [, p] of this.pendingOut) {
@@ -325,6 +387,12 @@ var ACPProtocolHandler = class {
     }
     this.pendingOut.clear();
   }
+  disposeSession(sessionId) {
+    try {
+      this.disposeFor?.(sessionId);
+    } catch {
+    }
+  }
   // ────────────────────────────────────────────────────────────────────
   // Requests
   // ────────────────────────────────────────────────────────────────────
@@ -444,6 +512,10 @@ var ACPProtocolHandler = class {
     return false;
   }
   async handleSessionNew(id, params) {
+    if (this.sessions.size >= this.maxSessions) {
+      await this.sendError(id, -32e3, `active session limit reached (${this.maxSessions})`);
+      return false;
+    }
     const p = params ?? {};
     const cwd = typeof p.cwd === "string" ? p.cwd : this.defaultCwd;
     const sessionId = `sess_${this.allocId()}`;
@@ -494,6 +566,10 @@ var ACPProtocolHandler = class {
     if (!existing && sessionId && this.store) {
       const persisted = await this.store.load(sessionId);
       if (persisted) {
+        if (this.sessions.size >= this.maxSessions) {
+          await this.sendError(id, -32e3, `active session limit reached (${this.maxSessions})`);
+          return false;
+        }
         const restored = {
           id: sessionId,
           cwd: persisted.cwd ?? loadCwd ?? this.defaultCwd,
@@ -524,7 +600,7 @@ var ACPProtocolHandler = class {
     }
     if (existing) {
       existing.updatedAt = (/* @__PURE__ */ new Date()).toISOString();
-      const replay = sessionId ? this.replayFor?.(sessionId) : void 0;
+      const replay = this.replayFor?.(sessionId);
       if (replay) {
         for (const update of replay) {
           await this.sendNotification({ sessionId, update });
@@ -589,7 +665,8 @@ var ACPProtocolHandler = class {
       return false;
     }
     session.abort.abort();
-    if (sessionId) this.sessions.delete(sessionId);
+    this.sessions.delete(sessionId);
+    this.disposeSession(sessionId);
     await this.transport.send(toWire({
       jsonrpc: "2.0",
       id,
@@ -611,6 +688,7 @@ var ACPProtocolHandler = class {
     const session = this.sessions.get(sessionId);
     session.abort.abort();
     this.sessions.delete(sessionId);
+    this.disposeSession(sessionId);
     await this.transport.send(toWire({
       jsonrpc: "2.0",
       id,
@@ -626,6 +704,10 @@ var ACPProtocolHandler = class {
       await this.sendError(id, -32e3, `session not found: ${sourceId}`);
       return false;
     }
+    if (this.sessions.size >= this.maxSessions) {
+      await this.sendError(id, -32e3, `active session limit reached (${this.maxSessions})`);
+      return false;
+    }
     const now = (/* @__PURE__ */ new Date()).toISOString();
     const sessionId = `sess_${this.allocId()}`;
     const forked = {
@@ -919,8 +1001,10 @@ var ACPSessionStore = class {
    */
   async save(state, history) {
     await this.init();
+    const target = path.join(this.dir, `${state.id}.json`);
+    const tmp = `${target}.${process.pid}.${Date.now()}.tmp`;
     await fsp.writeFile(
-      path.join(this.dir, `${state.id}.json`),
+      tmp,
       JSON.stringify({
         id: state.id,
         cwd: state.cwd,
@@ -932,6 +1016,7 @@ var ACPSessionStore = class {
       }),
       "utf8"
     );
+    await fsp.rename(tmp, target);
     await this.updateIndex(state.id, state.updatedAt);
     return state.id;
   }
@@ -1092,9 +1177,9 @@ var WsBridgeTransport = class {
 };
 
 // src/agent/wrongstack-acp-agent.ts
-import { fileURLToPath } from "node:url";
 import { createServer } from "node:http";
-import { writeErr as writeErr2 } from "@wrongstack/core";
+import { fileURLToPath } from "node:url";
+import { writeErr as writeErr2 } from "@wrongstack/core/utils";
 var WrongStackACPServer = class {
   transport;
   handler;
@@ -1113,6 +1198,7 @@ var WrongStackACPServer = class {
       agentName: opts.agentName,
       ...opts.replayFor ? { replayFor: opts.replayFor } : {},
       ...opts.seedFor ? { seedFor: opts.seedFor } : {},
+      ...opts.disposeFor ? { disposeFor: opts.disposeFor } : {},
       ...opts.store ? { store: opts.store } : {}
     });
   }
@@ -1134,13 +1220,17 @@ var WrongStackACPServer = class {
       this.transport.sendStartupMarker();
     }
     this.running = true;
-    while (this.running) {
-      const msg = await this.transport.read();
-      if (!msg) break;
-      const terminal = await this.handler.handleMessage(msg);
-      if (terminal) break;
+    try {
+      while (this.running) {
+        const msg = await this.transport.read();
+        if (!msg) break;
+        const terminal = await this.handler.handleMessage(msg);
+        if (terminal) break;
+      }
+    } finally {
+      this.handler.close();
+      this.transport.close();
     }
-    this.transport.close();
   }
   async startHttp(port) {
     const host = this.options.host ?? "127.0.0.1";
@@ -1149,10 +1239,9 @@ var WrongStackACPServer = class {
     let httpChain = Promise.resolve();
     this.httpServer = createServer(async (req, res) => {
       if (authToken) {
-        const url = new URL(req.url ?? "/", `http://${host}:${port}`);
+        const url = new URL(requestPath(req.url), `http://${host}:${port}`);
         const queryToken = url.searchParams.get("token");
-        const authHeader = req.headers["authorization"];
-        const bearerToken = Array.isArray(authHeader) ? authHeader[0]?.replace(/^Bearer\s+/i, "") : authHeader?.replace(/^Bearer\s+/i, "");
+        const bearerToken = headerValue(req.headers.authorization)?.replace(/^Bearer\s+/i, "");
         const supplied = queryToken ?? bearerToken ?? "";
         if (supplied !== authToken) {
           res.writeHead(401, { "Content-Type": "application/json" });
@@ -1161,7 +1250,7 @@ var WrongStackACPServer = class {
         }
       }
       const selfOrigin = `http://${host}:${port}`;
-      const reqOrigin = Array.isArray(req.headers.origin) ? req.headers.origin[0] : req.headers.origin;
+      const reqOrigin = headerValue(req.headers.origin);
       if (reqOrigin && reqOrigin !== selfOrigin) {
         res.writeHead(403);
         res.end(JSON.stringify({ error: "cross-origin request forbidden" }));
@@ -1241,6 +1330,8 @@ var WrongStackACPServer = class {
       try {
         await requestPromise;
       } catch {
+        res.writeHead(500, { "Content-Type": "application/json" });
+        res.end(JSON.stringify({ error: { code: -32603, message: "Internal error" } }));
       }
     });
     return new Promise((resolve) => {
@@ -1255,6 +1346,7 @@ var WrongStackACPServer = class {
   /** Stop the server. */
   stop() {
     this.running = false;
+    this.handler.close();
     this.transport.close();
     if (this.httpServer) {
       this.httpServer.close();
@@ -1265,6 +1357,12 @@ var WrongStackACPServer = class {
 var defaultEchoRunTurn = async (_input, _emit) => {
   return { stopReason: "end_turn" };
 };
+function headerValue(value) {
+  return Array.isArray(value) ? value[0] : value;
+}
+function requestPath(value) {
+  return value ?? "/";
+}
 async function main() {
   const server = new WrongStackACPServer();
   await server.start();
@@ -1283,8 +1381,11 @@ function makeACPServerAgentTurn(opts) {
   const agents = /* @__PURE__ */ new Map();
   const timeouts = /* @__PURE__ */ new Map();
   const history = /* @__PURE__ */ new Map();
+  const historyBytes = /* @__PURE__ */ new Map();
   const pendingSeed = /* @__PURE__ */ new Set();
   const timeoutMs = opts.timeoutMs ?? 5 * 6e4;
+  const maxHistoryEntries = finitePositiveLimit(opts.maxHistoryEntries, 1e3);
+  const maxHistoryBytes = finitePositiveLimit(opts.maxHistoryBytes, 8 * 1024 * 1024);
   const turn = async (input, emit, api) => {
     let agent = agents.get(input.sessionId);
     if (!agent) {
@@ -1292,7 +1393,7 @@ function makeACPServerAgentTurn(opts) {
       agents.set(input.sessionId, agent);
       if (pendingSeed.has(input.sessionId)) {
         pendingSeed.delete(input.sessionId);
-        seedAgentContext(agent, history.get(input.sessionId) ?? []);
+        seedAgentContext(agent, history.get(input.sessionId));
       }
     }
     const turnAbort = new AbortController();
@@ -1348,13 +1449,36 @@ function makeACPServerAgentTurn(opts) {
       }
       const userText = promptToText(input.prompt);
       const hist = history.get(input.sessionId) ?? [];
+      let retainedHistoryBytes = historyBytes.get(input.sessionId) ?? 0;
       if (userText) {
-        hist.push({ sessionUpdate: "user_message_chunk", content: { type: "text", text: userText } });
+        const update = {
+          sessionUpdate: "user_message_chunk",
+          content: { type: "text", text: userText }
+        };
+        hist.push(update);
+        retainedHistoryBytes += replayEntryBytes(update);
       }
       if (text) {
-        hist.push({ sessionUpdate: "agent_message_chunk", content: { type: "text", text } });
+        const update = {
+          sessionUpdate: "agent_message_chunk",
+          content: { type: "text", text }
+        };
+        hist.push(update);
+        retainedHistoryBytes += replayEntryBytes(update);
+      }
+      retainedHistoryBytes = trimHistory(
+        hist,
+        retainedHistoryBytes,
+        maxHistoryEntries,
+        maxHistoryBytes
+      );
+      if (hist.length > 0) {
+        history.set(input.sessionId, hist);
+        historyBytes.set(input.sessionId, retainedHistoryBytes);
+      } else {
+        history.delete(input.sessionId);
+        historyBytes.delete(input.sessionId);
       }
-      if (hist.length > 0) history.set(input.sessionId, hist);
       const plan = extractPlan(result);
       if (plan.length > 0) {
         emit({
@@ -1388,13 +1512,46 @@ function makeACPServerAgentTurn(opts) {
       for (const u of unsub) u();
     }
   };
-  const replay = (sessionId) => history.get(sessionId) ?? [];
+  const replay = (sessionId) => [
+    ...history.get(sessionId) ?? []
+  ];
   const seed = (sessionId, incoming) => {
     if (incoming.length === 0) return;
-    history.set(sessionId, [...incoming]);
+    const seeded = [...incoming];
+    const retainedBytes = trimHistory(
+      seeded,
+      seeded.reduce((total, entry) => total + replayEntryBytes(entry), 0),
+      maxHistoryEntries,
+      maxHistoryBytes
+    );
+    history.set(sessionId, seeded);
+    historyBytes.set(sessionId, retainedBytes);
     pendingSeed.add(sessionId);
   };
-  return Object.assign(turn, { replay, seed });
+  const dispose = (sessionId) => {
+    const timer = timeouts.get(sessionId);
+    if (timer) clearTimeout(timer);
+    timeouts.delete(sessionId);
+    agents.delete(sessionId);
+    history.delete(sessionId);
+    historyBytes.delete(sessionId);
+    pendingSeed.delete(sessionId);
+  };
+  return Object.assign(turn, { replay, seed, dispose });
+}
+function finitePositiveLimit(value, fallback) {
+  return Number.isFinite(value) && value > 0 ? Math.floor(value) : fallback;
+}
+function trimHistory(entries, retainedBytes, maxEntries, maxBytes) {
+  while (entries.length > maxEntries || retainedBytes > maxBytes) {
+    const removed = entries.shift();
+    if (!removed) break;
+    retainedBytes -= replayEntryBytes(removed);
+  }
+  return Math.max(0, retainedBytes);
+}
+function replayEntryBytes(entry) {
+  return Buffer.byteLength(JSON.stringify(entry), "utf8");
 }
 function seedAgentContext(agent, history) {
   const state = agent.ctx?.state;
@@ -1410,7 +1567,7 @@ function toolNameToKind(name) {
   const n = name.toLowerCase();
   if (n.includes("read") || n.includes("cat")) return "read";
   if (n.includes("write") || n.includes("edit") || n.includes("apply") || n.includes("patch")) return "edit";
-  if (n.includes("delete") || n.includes("rm")) return "delete";
+  if (n.includes("delete") || n === "rm" || n.startsWith("rm_") || n.endsWith("_rm")) return "delete";
   if (n.includes("move") || n.includes("rename") || n.includes("mv")) return "move";
   if (n.includes("grep") || n.includes("glob") || n.includes("search") || n.includes("find")) return "search";
   if (n.includes("bash") || n.includes("shell") || n.includes("exec") || n.includes("run") || n.includes("terminal")) return "execute";