@xenosystem/acp-agent 0.1.1

package/dist/security/securityDiagnostics.js

@@ -0,0 +1,36 @@
+/**
+ * Safe, redacted provider diagnostics.
+ *
+ * Builds a value-free summary of a provider's security posture for `check` / logs. It includes
+ * secret reference IDs/labels and allowed hosts, but NEVER secret values, tokens, keys,
+ * cookies, raw env, or credential contents.
+ */
+import { evaluateProviderSafety } from "./capabilityGate.js";
+import { summarizeAuthPolicy } from "./authPolicy.js";
+import { summarizeEgressPolicy } from "./egressPolicy.js";
+export function buildProviderDiagnostic(def) {
+    const gate = evaluateProviderSafety(def);
+    const auth = def.authPolicy ? summarizeAuthPolicy(def.authPolicy) : undefined;
+    const egress = def.egressPolicy ? summarizeEgressPolicy(def.egressPolicy) : undefined;
+    return {
+        providerId: def.id,
+        displayName: def.displayName,
+        trustClass: def.trustClass,
+        enabled: def.enabled,
+        authRequirement: def.authRequirement,
+        networkRequirement: def.networkRequirement,
+        ioAuthority: { ...def.ioAuthority },
+        safety: {
+            overall: gate.overallDecision.status,
+            auth: gate.authDecision.status,
+            egress: gate.egressDecision.status,
+            io: gate.ioDecision.status,
+            reason: gate.overallDecision.reasonCode,
+            message: gate.overallDecision.safeMessage,
+        },
+        secretRefs: auth?.secretRefs ?? [],
+        allowedHosts: egress?.allowedHosts ?? [],
+        ...(def.metadata ? { metadata: def.metadata } : {}),
+    };
+}
+//# sourceMappingURL=securityDiagnostics.js.map

package/dist/security/securityDiagnostics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"securityDiagnostics.js","sourceRoot":"","sources":["../../src/security/securityDiagnostics.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAyB1D,MAAM,UAAU,uBAAuB,CAAC,GAAuB;IAC7D,MAAM,IAAI,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9E,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEtF,OAAO;QACL,UAAU,EAAE,GAAG,CAAC,EAAE;QAClB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,eAAe,EAAE,GAAG,CAAC,eAAe;QACpC,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;QAC1C,WAAW,EAAE,EAAE,GAAG,GAAG,CAAC,WAAW,EAAE;QACnC,MAAM,EAAE;YACN,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,MAAM;YACpC,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM;YAC9B,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,MAAM;YAClC,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM;YAC1B,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,UAAU;YACvC,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,WAAW;SAC1C;QACD,UAAU,EAAE,IAAI,EAAE,UAAU,IAAI,EAAE;QAClC,YAAY,EAAE,MAAM,EAAE,YAAY,IAAI,EAAE;QACxC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpD,CAAC;AACJ,CAAC"}

package/dist/security/securityTypes.d.ts

@@ -0,0 +1,77 @@
+/**
+ * Provider security policy types (XACP-006 — Network/Auth/Egress Safety Layer).
+ *
+ * This module defines the *controlled allow-path* a future provider adapter must pass before
+ * it can become runnable. XACP-006 is policy + validation ONLY:
+ *   - secret references are METADATA — no real secret is ever loaded, no process.env read for
+ *     provider auth, no credential files, no keychain, no interactive login;
+ *   - egress rules are validated with PURE functions — no real network call, no DNS lookup;
+ *   - the default stance is FAIL-CLOSED.
+ *
+ * These types are a leaf module (no imports from `../providers/`) to avoid cycles.
+ */
+export type SafetyStatus = "allowed" | "blocked" | "requires_approval" | "not_applicable";
+export interface ProviderSafetyDiagnostic {
+    level: "info" | "warn";
+    code: string;
+    message: string;
+}
+export interface ProviderSafetyDecision {
+    status: SafetyStatus;
+    reasonCode: string;
+    safeMessage: string;
+    diagnostics?: ProviderSafetyDiagnostic[];
+}
+export type SecretRefKind = "env" | "file" | "keychain" | "manual";
+/** A REFERENCE to a secret — never the secret value itself. */
+export interface ProviderSecretReference {
+    id: string;
+    kind: SecretRefKind;
+    label: string;
+    required: boolean;
+    redactionHint?: string;
+}
+export interface ProviderAuthPolicy {
+    requirement: "none" | "optional" | "required";
+    allowedSecretRefs: ProviderSecretReference[];
+    /** Whether inline plaintext env values are permitted (default false → blocked). */
+    allowPlainEnv: boolean;
+    /** Whether reading process.env for auth is permitted (default false; not done in XACP-006). */
+    allowProcessEnv: boolean;
+    allowCredentialFiles: boolean;
+    allowInteractiveLogin: boolean;
+}
+export interface ProviderEgressRule {
+    host: string;
+    protocols: Array<"http" | "https">;
+}
+export interface ProviderEgressPolicy {
+    mode: "none" | "allowlist" | "blocked";
+    allowedHosts: string[];
+    blockedHosts: string[];
+    allowLocalhost: boolean;
+    allowPrivateNetwork: boolean;
+    allowHttp: boolean;
+    allowHttps: boolean;
+    maxRedirects: number;
+}
+export interface ProviderRuntimePermission {
+    filesystem: SafetyStatus;
+    terminal: SafetyStatus;
+}
+export interface ProviderCapabilityGate {
+    providerId: string;
+    authDecision: ProviderSafetyDecision;
+    egressDecision: ProviderSafetyDecision;
+    ioDecision: ProviderSafetyDecision;
+    runtimeDecision: ProviderSafetyDecision;
+    overallDecision: ProviderSafetyDecision;
+}
+export interface ProviderRedactionPolicy {
+    /** Replacement token for redacted values. */
+    mask: string;
+    /** Extra key-name substrings whose values must be redacted. */
+    sensitiveKeyHints: string[];
+}
+export declare const DEFAULT_REDACTION_POLICY: ProviderRedactionPolicy;
+//# sourceMappingURL=securityTypes.d.ts.map

package/dist/security/securityTypes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"securityTypes.d.ts","sourceRoot":"","sources":["../../src/security/securityTypes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,SAAS,GAAG,mBAAmB,GAAG,gBAAgB,CAAC;AAE1F,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,YAAY,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,wBAAwB,EAAE,CAAC;CAC1C;AAID,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,MAAM,GAAG,UAAU,GAAG,QAAQ,CAAC;AAEnE,+DAA+D;AAC/D,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,aAAa,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,OAAO,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,GAAG,UAAU,GAAG,UAAU,CAAC;IAC9C,iBAAiB,EAAE,uBAAuB,EAAE,CAAC;IAC7C,mFAAmF;IACnF,aAAa,EAAE,OAAO,CAAC;IACvB,+FAA+F;IAC/F,eAAe,EAAE,OAAO,CAAC;IACzB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,qBAAqB,EAAE,OAAO,CAAC;CAChC;AAID,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAAC;IACvC,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,cAAc,EAAE,OAAO,CAAC;IACxB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;CACtB;AAID,MAAM,WAAW,yBAAyB;IACxC,UAAU,EAAE,YAAY,CAAC;IACzB,QAAQ,EAAE,YAAY,CAAC;CACxB;AAED,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,sBAAsB,CAAC;IACrC,cAAc,EAAE,sBAAsB,CAAC;IACvC,UAAU,EAAE,sBAAsB,CAAC;IACnC,eAAe,EAAE,sBAAsB,CAAC;IACxC,eAAe,EAAE,sBAAsB,CAAC;CACzC;AAID,MAAM,WAAW,uBAAuB;IACtC,6CAA6C;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,+DAA+D;IAC/D,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED,eAAO,MAAM,wBAAwB,EAAE,uBAGtC,CAAC"}

package/dist/security/securityTypes.js

@@ -0,0 +1,17 @@
+/**
+ * Provider security policy types (XACP-006 — Network/Auth/Egress Safety Layer).
+ *
+ * This module defines the *controlled allow-path* a future provider adapter must pass before
+ * it can become runnable. XACP-006 is policy + validation ONLY:
+ *   - secret references are METADATA — no real secret is ever loaded, no process.env read for
+ *     provider auth, no credential files, no keychain, no interactive login;
+ *   - egress rules are validated with PURE functions — no real network call, no DNS lookup;
+ *   - the default stance is FAIL-CLOSED.
+ *
+ * These types are a leaf module (no imports from `../providers/`) to avoid cycles.
+ */
+export const DEFAULT_REDACTION_POLICY = {
+    mask: "***REDACTED***",
+    sensitiveKeyHints: ["token", "secret", "key", "password", "passwd", "cookie", "authorization", "bearer"],
+};
+//# sourceMappingURL=securityTypes.js.map

package/dist/security/securityTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"securityTypes.js","sourceRoot":"","sources":["../../src/security/securityTypes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAoFH,MAAM,CAAC,MAAM,wBAAwB,GAA4B;IAC/D,IAAI,EAAE,gBAAgB;IACtB,iBAAiB,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,CAAC;CACzG,CAAC"}

package/dist/sessionStore.d.ts

@@ -0,0 +1,33 @@
+/**
+ * In-memory ACP session store for the agent endpoint.
+ *
+ * XACP-002 keeps sessions in memory only — no user data is persisted to disk. Session ids
+ * are deterministic (`xacp-agent-session-NNNN`).
+ */
+export interface AgentSession {
+    sessionId: string;
+    createdAt: string;
+    status: "idle" | "active" | "cancelled" | "done";
+    cwd?: string;
+    additionalDirectories?: string[];
+    activePromptId?: string;
+    cancelled: boolean;
+    providerName: string;
+    /** Aborts the in-flight prompt on `session/cancel`. */
+    controller?: AbortController;
+}
+export declare class SessionStore {
+    private readonly providerName;
+    private seq;
+    private readonly sessions;
+    constructor(providerName: string);
+    create(now: string, params?: {
+        cwd?: string;
+        additionalDirectories?: string[];
+    }): AgentSession;
+    get(id: string): AgentSession | undefined;
+    has(id: string): boolean;
+    all(): AgentSession[];
+    size(): number;
+}
+//# sourceMappingURL=sessionStore.d.ts.map

package/dist/sessionStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionStore.d.ts","sourceRoot":"","sources":["../src/sessionStore.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,GAAG,QAAQ,GAAG,WAAW,GAAG,MAAM,CAAC;IACjD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IACjC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,uDAAuD;IACvD,UAAU,CAAC,EAAE,eAAe,CAAC;CAC9B;AAED,qBAAa,YAAY;IAIX,OAAO,CAAC,QAAQ,CAAC,YAAY;IAHzC,OAAO,CAAC,GAAG,CAAK;IAChB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;gBAE/B,YAAY,EAAE,MAAM;IAEjD,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,GAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAA;KAAO,GAAG,YAAY;IAgBlG,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS;IAGzC,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAGxB,GAAG,IAAI,YAAY,EAAE;IAGrB,IAAI,IAAI,MAAM;CAGf"}

package/dist/sessionStore.js

@@ -0,0 +1,42 @@
+/**
+ * In-memory ACP session store for the agent endpoint.
+ *
+ * XACP-002 keeps sessions in memory only — no user data is persisted to disk. Session ids
+ * are deterministic (`xacp-agent-session-NNNN`).
+ */
+export class SessionStore {
+    providerName;
+    seq = 0;
+    sessions = new Map();
+    constructor(providerName) {
+        this.providerName = providerName;
+    }
+    create(now, params = {}) {
+        this.seq += 1;
+        const sessionId = `xacp-agent-session-${String(this.seq).padStart(4, "0")}`;
+        const session = {
+            sessionId,
+            createdAt: now,
+            status: "idle",
+            cancelled: false,
+            providerName: this.providerName,
+            ...(params.cwd ? { cwd: params.cwd } : {}),
+            ...(params.additionalDirectories?.length ? { additionalDirectories: params.additionalDirectories } : {}),
+        };
+        this.sessions.set(sessionId, session);
+        return session;
+    }
+    get(id) {
+        return this.sessions.get(id);
+    }
+    has(id) {
+        return this.sessions.has(id);
+    }
+    all() {
+        return [...this.sessions.values()];
+    }
+    size() {
+        return this.sessions.size;
+    }
+}
+//# sourceMappingURL=sessionStore.js.map

package/dist/sessionStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionStore.js","sourceRoot":"","sources":["../src/sessionStore.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAeH,MAAM,OAAO,YAAY;IAIM;IAHrB,GAAG,GAAG,CAAC,CAAC;IACC,QAAQ,GAAG,IAAI,GAAG,EAAwB,CAAC;IAE5D,YAA6B,YAAoB;QAApB,iBAAY,GAAZ,YAAY,CAAQ;IAAG,CAAC;IAErD,MAAM,CAAC,GAAW,EAAE,SAA6D,EAAE;QACjF,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QACd,MAAM,SAAS,GAAG,sBAAsB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QAC5E,MAAM,OAAO,GAAiB;YAC5B,SAAS;YACT,SAAS,EAAE,GAAG;YACd,MAAM,EAAE,MAAM;YACd,SAAS,EAAE,KAAK;YAChB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1C,GAAG,CAAC,MAAM,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,MAAM,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzG,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACtC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,GAAG,CAAC,EAAU;QACZ,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;IACD,GAAG,CAAC,EAAU;QACZ,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;IACD,GAAG;QACD,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACrC,CAAC;IACD,IAAI;QACF,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC5B,CAAC;CACF"}

package/dist/stdioJsonRpc.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Newline-delimited JSON-RPC 2.0 over stdio — the agent-side transport.
+ *
+ * Contract (CLAUDE.md stdout-is-sacred):
+ *   - stdout carries ONLY JSON-RPC messages (responses + outbound notifications)
+ *   - stderr carries diagnostics only
+ *   - malformed input never crashes the process (parse error response + stderr, then continue)
+ *   - the stdin data handler never throws; async handlers never produce unhandled rejections
+ *   - string OR number ids are echoed back unchanged
+ */
+import { Writable, Readable } from "node:stream";
+export declare function logStderr(...parts: unknown[]): void;
+export interface StdioServerHandlers {
+    /** Handle a request; return the result object, or throw `AcpError` for a JSON-RPC error. */
+    onRequest: (method: string, params: unknown) => Promise<unknown>;
+    /** Handle a notification (no response). Errors are logged to stderr only. */
+    onNotification: (method: string, params: unknown) => void | Promise<void>;
+}
+export interface StdioServerOptions {
+    /** Streams to use (defaults to process stdio). Injectable for tests. */
+    stdin?: NodeJS.ReadableStream;
+    stdout?: NodeJS.WritableStream;
+    /** Default timeout for outbound client requests issued by the agent. */
+    requestTimeoutMs?: number;
+    /** Called when the input stream ends (client disconnected). */
+    onClose?: (reason: string) => void;
+}
+export interface StdioRequestOptions {
+    timeoutMs?: number;
+    signal?: AbortSignal;
+}
+export interface StdioServer {
+    /** Send an outbound JSON-RPC request to the client and await its response. */
+    request(method: string, params?: unknown, options?: StdioRequestOptions): Promise<unknown>;
+    /** Send an outbound JSON-RPC notification. */
+    notify(method: string, params: unknown): void;
+    /** Stop listening. */
+    close(): void;
+}
+export declare function createStdioServer(handlers: StdioServerHandlers, options?: StdioServerOptions): StdioServer;
+/** Re-export stream adapters so callers/tests can wire child stdio uniformly. */
+export { Writable, Readable };
+//# sourceMappingURL=stdioJsonRpc.d.ts.map

package/dist/stdioJsonRpc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdioJsonRpc.d.ts","sourceRoot":"","sources":["../src/stdioJsonRpc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAIjD,wBAAgB,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAGnD;AAUD,MAAM,WAAW,mBAAmB;IAClC,4FAA4F;IAC5F,SAAS,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACjE,6EAA6E;IAC7E,cAAc,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3E;AAED,MAAM,WAAW,kBAAkB;IACjC,wEAAwE;IACxE,KAAK,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;IAC/B,wEAAwE;IACxE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,+DAA+D;IAC/D,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;CACpC;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,8EAA8E;IAC9E,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3F,8CAA8C;IAC9C,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,IAAI,CAAC;IAC9C,sBAAsB;IACtB,KAAK,IAAI,IAAI,CAAC;CACf;AAeD,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,mBAAmB,EAC7B,OAAO,GAAE,kBAAuB,GAC/B,WAAW,CAoMb;AAED,iFAAiF;AACjF,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC"}

package/dist/stdioJsonRpc.js

@@ -0,0 +1,219 @@
+/**
+ * Newline-delimited JSON-RPC 2.0 over stdio — the agent-side transport.
+ *
+ * Contract (CLAUDE.md stdout-is-sacred):
+ *   - stdout carries ONLY JSON-RPC messages (responses + outbound notifications)
+ *   - stderr carries diagnostics only
+ *   - malformed input never crashes the process (parse error response + stderr, then continue)
+ *   - the stdin data handler never throws; async handlers never produce unhandled rejections
+ *   - string OR number ids are echoed back unchanged
+ */
+import { Writable, Readable } from "node:stream";
+import { JSONRPC, AcpError } from "./errors.js";
+export function logStderr(...parts) {
+    const text = parts.map((p) => (typeof p === "string" ? p : safeStringify(p))).join(" ");
+    process.stderr.write(`[xeno-acp-agent] ${text}\n`);
+}
+function safeStringify(v) {
+    try {
+        return JSON.stringify(v);
+    }
+    catch {
+        return String(v);
+    }
+}
+function keyForId(id) {
+    return `${typeof id}:${String(id)}`;
+}
+export function createStdioServer(handlers, options = {}) {
+    const stdin = options.stdin ?? process.stdin;
+    const stdout = options.stdout ?? process.stdout;
+    const requestTimeoutMs = Math.max(1, options.requestTimeoutMs ?? 10 * 60_000);
+    const pendingClientRequests = new Map();
+    let nextClientRequestId = 1;
+    function writeMessage(obj) {
+        stdout.write(JSON.stringify(obj) + "\n");
+    }
+    function request(method, params, requestOptions = {}) {
+        if (!method.trim())
+            return Promise.reject(AcpError.invalidRequest("request method is required"));
+        const id = nextClientRequestId++;
+        const timeoutMs = Math.max(1, requestOptions.timeoutMs ?? requestTimeoutMs);
+        return new Promise((resolve, reject) => {
+            const pending = {
+                method,
+                resolve,
+                reject,
+                signal: requestOptions.signal,
+            };
+            pending.timeout = setTimeout(() => {
+                pendingClientRequests.delete(keyForId(id));
+                clearPendingClientRequest(pending);
+                reject(AcpError.internal(`client request timed out: ${method}`));
+            }, timeoutMs);
+            if (typeof pending.timeout.unref === "function")
+                pending.timeout.unref();
+            if (requestOptions.signal) {
+                if (requestOptions.signal.aborted) {
+                    clearPendingClientRequest(pending);
+                    reject(AcpError.internal(`client request cancelled before send: ${method}`));
+                    return;
+                }
+                pending.abortListener = () => {
+                    pendingClientRequests.delete(keyForId(id));
+                    clearPendingClientRequest(pending);
+                    reject(AcpError.internal(`client request cancelled: ${method}`));
+                };
+                requestOptions.signal.addEventListener("abort", pending.abortListener, { once: true });
+            }
+            pendingClientRequests.set(keyForId(id), pending);
+            try {
+                writeMessage({
+                    jsonrpc: "2.0",
+                    id,
+                    method,
+                    ...(params === undefined ? {} : { params }),
+                });
+            }
+            catch (err) {
+                pendingClientRequests.delete(keyForId(id));
+                clearPendingClientRequest(pending);
+                reject(err);
+            }
+        });
+    }
+    function notify(method, params) {
+        writeMessage({ jsonrpc: "2.0", method, params });
+    }
+    function respondResult(id, result) {
+        writeMessage({ jsonrpc: "2.0", id, result: result ?? null });
+    }
+    function respondError(id, error) {
+        writeMessage({ jsonrpc: "2.0", id, error });
+    }
+    function clearPendingClientRequest(pending) {
+        if (pending.timeout)
+            clearTimeout(pending.timeout);
+        if (pending.signal && pending.abortListener)
+            pending.signal.removeEventListener("abort", pending.abortListener);
+    }
+    function handleClientResponse(msg) {
+        if (!Object.prototype.hasOwnProperty.call(msg, "id"))
+            return false;
+        if (!Object.prototype.hasOwnProperty.call(msg, "result") && !Object.prototype.hasOwnProperty.call(msg, "error")) {
+            return false;
+        }
+        const id = msg.id;
+        const pending = pendingClientRequests.get(keyForId(id));
+        if (!pending) {
+            logStderr("ignoring response for unknown client request id", safeStringify(id));
+            return true;
+        }
+        pendingClientRequests.delete(keyForId(id));
+        clearPendingClientRequest(pending);
+        if (Object.prototype.hasOwnProperty.call(msg, "error")) {
+            const error = msg.error && typeof msg.error === "object" && !Array.isArray(msg.error)
+                ? msg.error
+                : {};
+            pending.reject(new AcpError(typeof error.code === "number" ? error.code : JSONRPC.INTERNAL_ERROR, typeof error.message === "string" && error.message.trim() ? error.message : `client request failed: ${pending.method}`, error.data));
+            return true;
+        }
+        pending.resolve(msg.result);
+        return true;
+    }
+    function rejectAllPendingClientRequests(reason) {
+        for (const [id, pending] of pendingClientRequests.entries()) {
+            pendingClientRequests.delete(id);
+            clearPendingClientRequest(pending);
+            pending.reject(AcpError.internal(reason));
+        }
+    }
+    async function dispatch(msg) {
+        if (msg.jsonrpc !== "2.0") {
+            const id = (("id" in msg ? msg.id : null) ?? null);
+            respondError(id, { code: JSONRPC.INVALID_REQUEST, message: 'invalid request: jsonrpc must be "2.0"' });
+            return;
+        }
+        if (handleClientResponse(msg))
+            return;
+        const isRequest = typeof msg.method === "string" &&
+            Object.prototype.hasOwnProperty.call(msg, "id") &&
+            msg.id !== undefined;
+        if (isRequest) {
+            const id = msg.id;
+            try {
+                const result = await handlers.onRequest(msg.method, msg.params);
+                respondResult(id, result);
+            }
+            catch (err) {
+                if (err instanceof AcpError) {
+                    respondError(id, err.toResponseError());
+                }
+                else {
+                    logStderr("internal error handling", String(msg.method), err?.message ?? String(err));
+                    respondError(id, { code: JSONRPC.INTERNAL_ERROR, message: "internal error" });
+                }
+            }
+            return;
+        }
+        if (typeof msg.method === "string") {
+            try {
+                await handlers.onNotification(msg.method, msg.params);
+            }
+            catch (err) {
+                logStderr("notification handler error", String(msg.method), err?.message ?? String(err));
+            }
+            return;
+        }
+        // A response or otherwise unexpected message — the agent issues no client requests in
+        // fixture mode, so nothing to correlate. Ignore safely.
+        logStderr("ignoring unexpected message (no method)");
+    }
+    let buffer = "";
+    const onData = (chunk) => {
+        buffer += typeof chunk === "string" ? chunk : chunk.toString("utf8");
+        let idx;
+        while ((idx = buffer.indexOf("\n")) >= 0) {
+            const line = buffer.slice(0, idx).trim();
+            buffer = buffer.slice(idx + 1);
+            if (!line)
+                continue;
+            let msg;
+            try {
+                msg = JSON.parse(line);
+            }
+            catch {
+                logStderr("parse error: unparseable input line");
+                respondError(null, { code: JSONRPC.PARSE_ERROR, message: "Parse error" });
+                continue;
+            }
+            if (typeof msg !== "object" || msg === null || Array.isArray(msg)) {
+                respondError(null, { code: JSONRPC.INVALID_REQUEST, message: "invalid request: not a JSON-RPC object" });
+                continue;
+            }
+            // Never let an async handler reject out of the data handler.
+            void dispatch(msg).catch((err) => logStderr("unexpected dispatch error", err?.message ?? String(err)));
+        }
+    };
+    const onEnd = () => {
+        rejectAllPendingClientRequests("stdio input ended before client request completed");
+        options.onClose?.("stdin ended");
+    };
+    if (stdin instanceof Readable || typeof stdin.setEncoding === "function") {
+        stdin.setEncoding?.("utf8");
+    }
+    stdin.on("data", onData);
+    stdin.on("end", onEnd);
+    return {
+        request,
+        notify,
+        close() {
+            stdin.off("data", onData);
+            stdin.off("end", onEnd);
+            rejectAllPendingClientRequests("stdio server closed before client request completed");
+        },
+    };
+}
+/** Re-export stream adapters so callers/tests can wire child stdio uniformly. */
+export { Writable, Readable };
+//# sourceMappingURL=stdioJsonRpc.js.map

package/dist/stdioJsonRpc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdioJsonRpc.js","sourceRoot":"","sources":["../src/stdioJsonRpc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAA0B,MAAM,aAAa,CAAC;AAGxE,MAAM,UAAU,SAAS,CAAC,GAAG,KAAgB;IAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,IAAI,IAAI,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,aAAa,CAAC,CAAU;IAC/B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC;AACH,CAAC;AA0CD,SAAS,QAAQ,CAAC,EAAa;IAC7B,OAAO,GAAG,OAAO,EAAE,IAAI,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,QAA6B,EAC7B,UAA8B,EAAE;IAEhC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;IAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAChD,MAAM,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,gBAAgB,IAAI,EAAE,GAAG,MAAM,CAAC,CAAC;IAC9E,MAAM,qBAAqB,GAAG,IAAI,GAAG,EAAgC,CAAC;IACtE,IAAI,mBAAmB,GAAG,CAAC,CAAC;IAE5B,SAAS,YAAY,CAAC,GAA4B;QAChD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IAC3C,CAAC;IACD,SAAS,OAAO,CAAC,MAAc,EAAE,MAAgB,EAAE,iBAAsC,EAAE;QACzF,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,4BAA4B,CAAC,CAAC,CAAC;QACjG,MAAM,EAAE,GAAG,mBAAmB,EAAE,CAAC;QACjC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,CAAC,SAAS,IAAI,gBAAgB,CAAC,CAAC;QAC5E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,OAAO,GAAyB;gBACpC,MAAM;gBACN,OAAO;gBACP,MAAM;gBACN,MAAM,EAAE,cAAc,CAAC,MAAM;aAC9B,CAAC;YACF,OAAO,CAAC,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBAChC,qBAAqB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC3C,yBAAyB,CAAC,OAAO,CAAC,CAAC;gBACnC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,6BAA6B,MAAM,EAAE,CAAC,CAAC,CAAC;YACnE,CAAC,EAAE,SAAS,CAAC,CAAC;YACd,IAAI,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,KAAK,UAAU;gBAAE,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YAEzE,IAAI,cAAc,CAAC,MAAM,EAAE,CAAC;gBAC1B,IAAI,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBAClC,yBAAyB,CAAC,OAAO,CAAC,CAAC;oBACnC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,yCAAyC,MAAM,EAAE,CAAC,CAAC,CAAC;oBAC7E,OAAO;gBACT,CAAC;gBACD,OAAO,CAAC,aAAa,GAAG,GAAG,EAAE;oBAC3B,qBAAqB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;oBAC3C,yBAAyB,CAAC,OAAO,CAAC,CAAC;oBACnC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,6BAA6B,MAAM,EAAE,CAAC,CAAC,CAAC;gBACnE,CAAC,CAAC;gBACF,cAAc,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACzF,CAAC;YAED,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;YACjD,IAAI,CAAC;gBACH,YAAY,CAAC;oBACX,OAAO,EAAE,KAAK;oBACd,EAAE;oBACF,MAAM;oBACN,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;iBAC5C,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,qBAAqB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC3C,yBAAyB,CAAC,OAAO,CAAC,CAAC;gBACnC,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IACD,SAAS,MAAM,CAAC,MAAc,EAAE,MAAe;QAC7C,YAAY,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,SAAS,aAAa,CAAC,EAAa,EAAE,MAAe;QACnD,YAAY,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,SAAS,YAAY,CAAC,EAAa,EAAE,KAAwB;QAC3D,YAAY,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,SAAS,yBAAyB,CAAC,OAA6B;QAC9D,IAAI,OAAO,CAAC,OAAO;YAAE,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,aAAa;YAAE,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAClH,CAAC;IACD,SAAS,oBAAoB,CAAC,GAA4B;QACxD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACnE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC;YAChH,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,EAAE,GAAG,GAAG,CAAC,EAAe,CAAC;QAC/B,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;QACxD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,SAAS,CAAC,iDAAiD,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC;YAChF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,qBAAqB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3C,yBAAyB,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC;YACvD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;gBACnF,CAAC,CAAC,GAAG,CAAC,KAA8D;gBACpE,CAAC,CAAC,EAAE,CAAC;YACP,OAAO,CAAC,MAAM,CAAC,IAAI,QAAQ,CACzB,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,EACpE,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,OAAO,CAAC,MAAM,EAAE,EACtH,KAAK,CAAC,IAAI,CACX,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,SAAS,8BAA8B,CAAC,MAAc;QACpD,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,qBAAqB,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5D,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACjC,yBAAyB,CAAC,OAAO,CAAC,CAAC;YACnC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,KAAK,UAAU,QAAQ,CAAC,GAA4B;QAClD,IAAI,GAAG,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YAC1B,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,CAAc,CAAC;YAChE,YAAY,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,eAAe,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC,CAAC;YACvG,OAAO;QACT,CAAC;QAED,IAAI,oBAAoB,CAAC,GAAG,CAAC;YAAE,OAAO;QAEtC,MAAM,SAAS,GACb,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;YAC9B,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC;YAC/C,GAAG,CAAC,EAAE,KAAK,SAAS,CAAC;QAEvB,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,EAAE,GAAG,GAAG,CAAC,EAAe,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,MAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC1E,aAAa,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAC5B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,QAAQ,EAAE,CAAC;oBAC5B,YAAY,CAAC,EAAE,EAAE,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC;gBAC1C,CAAC;qBAAM,CAAC;oBACN,SAAS,CAAC,yBAAyB,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAG,GAAa,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;oBACjG,YAAY,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,cAAc,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;gBAChF,CAAC;YACH,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;YACxD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,SAAS,CAAC,4BAA4B,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAG,GAAa,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACtG,CAAC;YACD,OAAO;QACT,CAAC;QAED,sFAAsF;QACtF,wDAAwD;QACxD,SAAS,CAAC,yCAAyC,CAAC,CAAC;IACvD,CAAC;IAED,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,MAAM,MAAM,GAAG,CAAC,KAAsB,EAAQ,EAAE;QAC9C,MAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACrE,IAAI,GAAW,CAAC;QAChB,OAAO,CAAC,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACzC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;YAC/B,IAAI,CAAC,IAAI;gBAAE,SAAS;YACpB,IAAI,GAAY,CAAC;YACjB,IAAI,CAAC;gBACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS,CAAC,qCAAqC,CAAC,CAAC;gBACjD,YAAY,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;gBAC1E,SAAS;YACX,CAAC;YACD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClE,YAAY,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,eAAe,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC,CAAC;gBACzG,SAAS;YACX,CAAC;YACD,6DAA6D;YAC7D,KAAK,QAAQ,CAAC,GAA8B,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAC1D,SAAS,CAAC,2BAA2B,EAAG,GAAa,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAC/E,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,GAAS,EAAE;QACvB,8BAA8B,CAAC,mDAAmD,CAAC,CAAC;QACpF,OAAO,CAAC,OAAO,EAAE,CAAC,aAAa,CAAC,CAAC;IACnC,CAAC,CAAC;IAEF,IAAI,KAAK,YAAY,QAAQ,IAAI,OAAQ,KAA+B,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QACnG,KAA+B,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC;IACD,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzB,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAEvB,OAAO;QACL,OAAO;QACP,MAAM;QACN,KAAK;YACH,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC1B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACxB,8BAA8B,CAAC,qDAAqD,CAAC,CAAC;QACxF,CAAC;KACF,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,78 @@
+/**
+ * ACP v1 agent-side WIRE types (what the agent emits over JSON-RPC).
+ *
+ * These mirror the shapes the agent sends so they validate against the canonical
+ * `@agentclientprotocol/sdk` client used in tests. Kept local so `@xenosystem/acp-agent` has no
+ * runtime dependency on the SDK.
+ *
+ * The provider-adapter contract (ProviderDefinition/Runtime/Event/…) lives under
+ * `./providers/` (XACP-005) — these are only the protocol wire types.
+ */
+export type JsonRpcId = string | number | null;
+/** Stop reasons (subset we use). */
+export type StopReason = "end_turn" | "cancelled" | "refusal" | "max_tokens" | "max_turn_requests";
+/** Tool-call lifecycle status (ACP `ToolCallStatus`). */
+export type ToolStatus = "pending" | "in_progress" | "completed" | "failed";
+/** Valid ACP `ToolKind` values we use. */
+export type ToolKind = "read" | "edit" | "delete" | "move" | "search" | "execute" | "think" | "fetch" | "other";
+export interface TextContent {
+    type: "text";
+    text: string;
+}
+export interface PlanEntry {
+    content: string;
+    priority: "high" | "medium" | "low";
+    status: "pending" | "in_progress" | "completed";
+}
+export interface Usage {
+    inputTokens: number;
+    outputTokens: number;
+    totalTokens: number;
+}
+/** Session update notifications the agent sends to the client (`session/update`). */
+export type SessionUpdate = {
+    sessionUpdate: "plan";
+    entries: PlanEntry[];
+} | {
+    sessionUpdate: "agent_message_chunk";
+    content: TextContent;
+} | {
+    sessionUpdate: "agent_thought_chunk";
+    content: TextContent;
+} | {
+    sessionUpdate: "tool_call";
+    toolCallId: string;
+    title: string;
+    kind?: ToolKind;
+    status?: ToolStatus;
+} | {
+    sessionUpdate: "tool_call_update";
+    toolCallId: string;
+    status?: ToolStatus;
+    title?: string;
+    _meta?: Record<string, unknown>;
+} | {
+    sessionUpdate: "usage_update";
+    used: number;
+    size: number;
+};
+export interface InitializeResult {
+    protocolVersion: 1;
+    agentCapabilities: {
+        loadSession: boolean;
+        promptCapabilities: {
+            image: boolean;
+            audio: boolean;
+            embeddedContext: boolean;
+        };
+        _meta?: Record<string, unknown>;
+    };
+    agentInfo: {
+        name: string;
+        title: string;
+        version: string;
+    };
+    /** This endpoint requires no authentication. */
+    authMethods: [];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;AAE/C,oCAAoC;AACpC,MAAM,MAAM,UAAU,GAAG,UAAU,GAAG,WAAW,GAAG,SAAS,GAAG,YAAY,GAAG,mBAAmB,CAAC;AAEnG,yDAAyD;AACzD,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,aAAa,GAAG,WAAW,GAAG,QAAQ,CAAC;AAE5E,0CAA0C;AAC1C,MAAM,MAAM,QAAQ,GAChB,MAAM,GACN,MAAM,GACN,QAAQ,GACR,MAAM,GACN,QAAQ,GACR,SAAS,GACT,OAAO,GACP,OAAO,GACP,OAAO,CAAC;AAEZ,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACpC,MAAM,EAAE,SAAS,GAAG,aAAa,GAAG,WAAW,CAAC;CACjD;AAED,MAAM,WAAW,KAAK;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,qFAAqF;AACrF,MAAM,MAAM,aAAa,GACrB;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS,EAAE,CAAA;CAAE,GAC/C;IAAE,aAAa,EAAE,qBAAqB,CAAC;IAAC,OAAO,EAAE,WAAW,CAAA;CAAE,GAC9D;IAAE,aAAa,EAAE,qBAAqB,CAAC;IAAC,OAAO,EAAE,WAAW,CAAA;CAAE,GAC9D;IAAE,aAAa,EAAE,WAAW,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,QAAQ,CAAC;IAAC,MAAM,CAAC,EAAE,UAAU,CAAA;CAAE,GACvG;IACE,aAAa,EAAE,kBAAkB,CAAC;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC,GACD;IAAE,aAAa,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAElE,MAAM,WAAW,gBAAgB;IAC/B,eAAe,EAAE,CAAC,CAAC;IACnB,iBAAiB,EAAE;QACjB,WAAW,EAAE,OAAO,CAAC;QACrB,kBAAkB,EAAE;YAAE,KAAK,EAAE,OAAO,CAAC;YAAC,KAAK,EAAE,OAAO,CAAC;YAAC,eAAe,EAAE,OAAO,CAAA;SAAE,CAAC;QACjF,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACjC,CAAC;IACF,SAAS,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5D,gDAAgD;IAChD,WAAW,EAAE,EAAE,CAAC;CACjB"}

package/dist/types.js

@@ -0,0 +1,12 @@
+/**
+ * ACP v1 agent-side WIRE types (what the agent emits over JSON-RPC).
+ *
+ * These mirror the shapes the agent sends so they validate against the canonical
+ * `@agentclientprotocol/sdk` client used in tests. Kept local so `@xenosystem/acp-agent` has no
+ * runtime dependency on the SDK.
+ *
+ * The provider-adapter contract (ProviderDefinition/Runtime/Event/…) lives under
+ * `./providers/` (XACP-005) — these are only the protocol wire types.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG"}

package/dist/version.d.ts

@@ -0,0 +1,7 @@
+/** Identity constants for the XENO ACP agent endpoint. */
+export declare const VERSION = "0.1.1";
+export declare const AGENT_NAME = "xeno-acp-agent";
+export declare const AGENT_TITLE = "XENO ACP Agent";
+/** The ACP protocol version this endpoint speaks. */
+export declare const ACP_PROTOCOL_VERSION: 1;
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,eAAO,MAAM,OAAO,UAAU,CAAC;AAC/B,eAAO,MAAM,UAAU,mBAAmB,CAAC;AAC3C,eAAO,MAAM,WAAW,mBAAmB,CAAC;AAE5C,qDAAqD;AACrD,eAAO,MAAM,oBAAoB,EAAG,CAAU,CAAC"}

package/dist/version.js

@@ -0,0 +1,7 @@
+/** Identity constants for the XENO ACP agent endpoint. */
+export const VERSION = "0.1.1";
+export const AGENT_NAME = "xeno-acp-agent";
+export const AGENT_TITLE = "XENO ACP Agent";
+/** The ACP protocol version this endpoint speaks. */
+export const ACP_PROTOCOL_VERSION = 1;
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC;AAC/B,MAAM,CAAC,MAAM,UAAU,GAAG,gBAAgB,CAAC;AAC3C,MAAM,CAAC,MAAM,WAAW,GAAG,gBAAgB,CAAC;AAE5C,qDAAqD;AACrD,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAU,CAAC"}