@xenosystem/acp-agent 0.1.1

package/dist/adapters/adapterProcessHarness.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Provider-adapter TEST harness (XACP-011).
+ *
+ * Drives the FULL future adapter seam with a harmless, deterministic, XENO-owned fixture adapter:
+ *
+ *   resolveProviderStatus (policy + approval)  →  createProviderSandboxContext (XACP-008)
+ *     →  ProviderProcessSupervisor (XACP-010, shell:false)  →  parse adapter stdout
+ *     →  mapAdapterEvents → ProviderEvent[]  →  providerEventToAcpUpdate → ACP session/update
+ *     →  audit + diagnostics
+ *
+ * It NEVER runs a real provider CLI, makes no network call, loads no secrets, and never spawns a
+ * real adapter — only the fixture process passed in `config.adapter`. The harness fails closed:
+ * a provider that is not runnable gets no sandbox and no process. The minimal supervisor's honest
+ * classification (network/filesystem NOT enforced) is preserved in diagnostics.
+ */
+import type { AdapterHarnessConfig, AdapterHarnessResult } from "./adapterHarnessTypes.js";
+/**
+ * Run one prompt through the test adapter harness. Returns a structured result (it does not throw
+ * for an expected not-runnable / failure path); it throws `AdapterHarnessError` only for an
+ * internal harness fault.
+ */
+export declare function runAdapterPrompt(config: AdapterHarnessConfig): Promise<AdapterHarnessResult>;
+//# sourceMappingURL=adapterProcessHarness.d.ts.map

package/dist/adapters/adapterProcessHarness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapterProcessHarness.d.ts","sourceRoot":"","sources":["../../src/adapters/adapterProcessHarness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAuBH,OAAO,KAAK,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAO3F;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAwJlG"}

package/dist/adapters/adapterProcessHarness.js

@@ -0,0 +1,235 @@
+/**
+ * Provider-adapter TEST harness (XACP-011).
+ *
+ * Drives the FULL future adapter seam with a harmless, deterministic, XENO-owned fixture adapter:
+ *
+ *   resolveProviderStatus (policy + approval)  →  createProviderSandboxContext (XACP-008)
+ *     →  ProviderProcessSupervisor (XACP-010, shell:false)  →  parse adapter stdout
+ *     →  mapAdapterEvents → ProviderEvent[]  →  providerEventToAcpUpdate → ACP session/update
+ *     →  audit + diagnostics
+ *
+ * It NEVER runs a real provider CLI, makes no network call, loads no secrets, and never spawns a
+ * real adapter — only the fixture process passed in `config.adapter`. The harness fails closed:
+ * a provider that is not runnable gets no sandbox and no process. The minimal supervisor's honest
+ * classification (network/filesystem NOT enforced) is preserved in diagnostics.
+ */
+import { resolveProviderStatus } from "../config/providerRunnability.js";
+import { createProviderSandboxContext } from "../sandbox/providerSandbox.js";
+import { createProviderProcessSupervisor } from "../process/providerProcessSupervisor.js";
+import { createTempWorkspace, useExistingWorkspace } from "../process/providerProcessWorkspace.js";
+import { providerEventToAcpUpdate } from "../providers/providerEvents.js";
+import { ProviderAuthRequiredError, ProviderInternalError, ProviderProtocolError, ProviderRateLimitError, ProviderTimeoutError, ProviderUnavailableError, buildProviderAuthFailureDiagnostic, } from "../providers/providerErrors.js";
+import { parseAdapterOutput } from "./adapterEventParser.js";
+import { mapAdapterEvents } from "./adapterEventMapper.js";
+import { buildAdapterHarnessDiagnostics } from "./adapterDiagnostics.js";
+import { AdapterHarnessError } from "./adapterErrors.js";
+const DEFAULT_TIMEOUT_MS = 5_000;
+const DEFAULT_LIMIT_BYTES = 32 * 1024;
+/**
+ * Run one prompt through the test adapter harness. Returns a structured result (it does not throw
+ * for an expected not-runnable / failure path); it throws `AdapterHarnessError` only for an
+ * internal harness fault.
+ */
+export async function runAdapterPrompt(config) {
+    const { definition: def, request } = config;
+    let nowSeq = 0;
+    const now = config.now ?? (() => `t${++nowSeq}`);
+    const signal = config.signal ?? new AbortController().signal;
+    const collected = [];
+    const emit = (e) => {
+        collected.push(e);
+        config.emit?.(e);
+    };
+    // 1. Gate: definition + policy + approval. Fail closed before any sandbox/process.
+    const runnability = resolveProviderStatus(def, config.runnability);
+    const failResult = (error, disposition, supervisorDiag, truncated) => {
+        const acpUpdates = toAcpUpdates(collected);
+        const authFailure = buildProviderAuthFailureDiagnostic(error);
+        return {
+            runnability,
+            result: disposition === "cancelled" ? { disposition } : { disposition, error },
+            events: collected,
+            acpUpdates,
+            diagnostics: buildAdapterHarnessDiagnostics({
+                providerId: def.id,
+                runnableStatus: runnability.status,
+                eventsEmitted: collected.length,
+                parseDiagnostics: 0,
+                acpUpdates: acpUpdates.length,
+                ...(supervisorDiag ? { supervisor: supervisorDiag } : {}),
+                ...(authFailure ? { authFailure } : {}),
+                stdoutTruncated: truncated?.stdout ?? false,
+                stderrTruncated: truncated?.stderr ?? false,
+            }),
+        };
+    };
+    if (!runnability.runnable) {
+        return failResult(new ProviderInternalError({ safeMessage: `provider not runnable: ${runnability.status}`, providerId: def.id }), "failed");
+    }
+    // 2. Sandbox context — created BEFORE the supervisor; fails closed for a non-runnable provider.
+    try {
+        createProviderSandboxContext({
+            def,
+            sessionId: request.sessionId,
+            requestId: request.requestId,
+            signal,
+            ...(config.runnability.policyEntry ? { policyEntry: config.runnability.policyEntry } : {}),
+            ...(config.runnability.approval ? { approval: config.runnability.approval } : {}),
+            ...(config.runnability.policyInvalid !== undefined ? { policyInvalid: config.runnability.policyInvalid } : {}),
+            now,
+        });
+    }
+    catch (err) {
+        throw new AdapterHarnessError({
+            code: "ADAPTER_SANDBOX_DENIED",
+            safeMessage: "sandbox context denied for a provider that passed the gate (internal inconsistency)",
+            providerId: def.id,
+            redactedDetails: { cause: err instanceof Error ? err.name : "error" },
+        });
+    }
+    // 3. Workspace + supervisor config (no-shell launch, empty/test-only env, isolated cwd).
+    const ws = config.cwd ? useExistingWorkspace(def.id, config.cwd) : await createTempWorkspace(def.id);
+    const supervisor = config.supervisor ?? createProviderProcessSupervisor({ now });
+    try {
+        const handle = supervisor.start({
+            providerId: def.id,
+            executable: config.adapter.executable,
+            args: config.adapter.args,
+            ...(config.adapter.stdin !== undefined ? { stdin: config.adapter.stdin } : {}),
+            cwd: ws.path,
+            envAllowlist: config.envAllowlist ?? {},
+            timeoutMs: config.timeoutMs ?? DEFAULT_TIMEOUT_MS,
+            stdoutLimitBytes: config.stdoutLimitBytes ?? DEFAULT_LIMIT_BYTES,
+            stderrLimitBytes: config.stderrLimitBytes ?? DEFAULT_LIMIT_BYTES,
+            killTree: true,
+            platformMode: "minimal",
+        });
+        // 4. Wire prompt cancellation → kill the supervised process.
+        const onAbort = () => void handle.cancel("prompt cancelled");
+        if (signal.aborted)
+            handle.cancel("prompt already cancelled");
+        else
+            signal.addEventListener("abort", onAbort, { once: true });
+        const procResult = await handle.wait();
+        signal.removeEventListener("abort", onAbort);
+        const supervisorDiag = handle.diagnostics();
+        const truncated = { stdout: procResult.stdoutTruncated, stderr: procResult.stderrTruncated };
+        // 5. Parse adapter stdout → ProviderEvents → ACP updates (works on partial output too).
+        //    Default: the frozen XENO v1 protocol (parse + map). A real local provider (XACP-021)
+        //    may inject `parseStdout` to translate its OWN native format (e.g. Claude stream-json)
+        //    directly into ProviderEvents — same downstream path, frozen v1 protocol untouched.
+        const parseCtx = { providerId: def.id, sessionId: request.sessionId, requestId: request.requestId, now };
+        let mappedEvents;
+        let terminal;
+        let failureCode;
+        let failureMessage;
+        let parseDiagnostics;
+        if (config.parseStdout) {
+            const r = config.parseStdout(procResult.stdout, parseCtx);
+            mappedEvents = r.events;
+            terminal = r.terminal;
+            failureCode = r.failureCode;
+            failureMessage = r.failureMessage;
+            parseDiagnostics = r.diagnosticsCount;
+        }
+        else {
+            const parsed = parseAdapterOutput(procResult.stdout);
+            const mapped = mapAdapterEvents(parsed.events, parseCtx);
+            mappedEvents = mapped.events;
+            terminal = mapped.terminal ?? null;
+            failureMessage = mapped.failureMessage;
+            parseDiagnostics = parsed.diagnostics.length;
+        }
+        for (const e of mappedEvents)
+            emit(e);
+        const acpUpdates = toAcpUpdates(collected);
+        // 6. Decide disposition from process status + the (real or v1) terminal signal.
+        const result = decideDisposition(def.id, procResult.status, {
+            terminal,
+            failureCode,
+            failureMessage,
+            eventCount: mappedEvents.length,
+            events: collected,
+        });
+        const authFailure = result.disposition === "failed" && result.error
+            ? buildProviderAuthFailureDiagnostic(result.error)
+            : undefined;
+        const diagnostics = buildAdapterHarnessDiagnostics({
+            providerId: def.id,
+            runnableStatus: runnability.status,
+            eventsEmitted: collected.length,
+            parseDiagnostics,
+            acpUpdates: acpUpdates.length,
+            supervisor: supervisorDiag,
+            ...(authFailure ? { authFailure } : {}),
+            stdoutTruncated: truncated.stdout,
+            stderrTruncated: truncated.stderr,
+        });
+        return { runnability, result, events: collected, acpUpdates, diagnostics };
+    }
+    finally {
+        await ws.cleanup();
+    }
+}
+function toAcpUpdates(events) {
+    const updates = [];
+    for (const e of events) {
+        const u = providerEventToAcpUpdate(e);
+        if (u)
+            updates.push(u);
+    }
+    return updates;
+}
+function decideDisposition(providerId, procStatus, mapped) {
+    if (procStatus === "cancelled") {
+        return { disposition: "cancelled" };
+    }
+    if (procStatus === "timed_out") {
+        return {
+            disposition: "failed",
+            error: new ProviderTimeoutError({ safeMessage: "adapter timed out", providerId }),
+        };
+    }
+    if (mapped.terminal === "failed") {
+        return {
+            disposition: "failed",
+            error: providerErrorFromCode(providerId, mapped.failureCode, mapped.failureMessage ?? "adapter failed"),
+        };
+    }
+    if (mapped.terminal === "completed") {
+        const usage = deriveUsage(mapped.events);
+        return { disposition: "completed", ...(usage ? { usage } : {}) };
+    }
+    // Process ended but the adapter never signalled completion → protocol failure (fails safely).
+    return {
+        disposition: "failed",
+        error: new ProviderInternalError({
+            safeMessage: mapped.eventCount === 0 ? "adapter produced no valid events" : "adapter did not signal completion",
+            providerId,
+        }),
+    };
+}
+function providerErrorFromCode(providerId, code, safeMessage) {
+    switch (code) {
+        case "PROVIDER_AUTH_REQUIRED":
+            return new ProviderAuthRequiredError({ safeMessage, providerId });
+        case "PROVIDER_RATE_LIMIT":
+            return new ProviderRateLimitError({ safeMessage, providerId });
+        case "PROVIDER_TIMEOUT":
+            return new ProviderTimeoutError({ safeMessage, providerId, retryable: true });
+        case "PROVIDER_UNAVAILABLE":
+            return new ProviderUnavailableError({ safeMessage, providerId, retryable: true });
+        case "PROVIDER_PROTOCOL":
+            return new ProviderProtocolError({ safeMessage, providerId });
+        default:
+            return new ProviderInternalError({ safeMessage, providerId });
+    }
+}
+function deriveUsage(events) {
+    const usageEvent = [...events].reverse().find((e) => e.kind === "usage");
+    if (!usageEvent)
+        return undefined;
+    const p = usageEvent.payload;
+    return typeof p.used === "number" ? { totalTokens: p.used } : undefined;
+}
+//# sourceMappingURL=adapterProcessHarness.js.map

package/dist/adapters/adapterProcessHarness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapterProcessHarness.js","sourceRoot":"","sources":["../../src/adapters/adapterProcessHarness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAC7E,OAAO,EAAE,+BAA+B,EAAE,MAAM,yCAAyC,CAAC;AAC1F,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AACnG,OAAO,EAAE,wBAAwB,EAAsB,MAAM,gCAAgC,CAAC;AAC9F,OAAO,EACL,yBAAyB,EAEzB,qBAAqB,EACrB,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,wBAAwB,EACxB,kCAAkC,GAGnC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAKzD,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,mBAAmB,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAA4B;IACjE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IAC5C,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC,MAAM,CAAC;IAE7D,MAAM,SAAS,GAAoB,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,CAAC,CAAgB,EAAQ,EAAE;QACtC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC,CAAC;IAEF,mFAAmF;IACnF,MAAM,WAAW,GAAG,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IACnE,MAAM,UAAU,GAAG,CACjB,KAA4E,EAC5E,WAAmC,EACnC,cAAwC,EACxC,SAAgD,EAC1B,EAAE;QACxB,MAAM,UAAU,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,WAAW,GAAG,kCAAkC,CAAC,KAAK,CAAC,CAAC;QAC9D,OAAO;YACL,WAAW;YACX,MAAM,EAAE,WAAW,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE;YAC9E,MAAM,EAAE,SAAS;YACjB,UAAU;YACV,WAAW,EAAE,8BAA8B,CAAC;gBAC1C,UAAU,EAAE,GAAG,CAAC,EAAE;gBAClB,cAAc,EAAE,WAAW,CAAC,MAAM;gBAClC,aAAa,EAAE,SAAS,CAAC,MAAM;gBAC/B,gBAAgB,EAAE,CAAC;gBACnB,UAAU,EAAE,UAAU,CAAC,MAAM;gBAC7B,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzD,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvC,eAAe,EAAE,SAAS,EAAE,MAAM,IAAI,KAAK;gBAC3C,eAAe,EAAE,SAAS,EAAE,MAAM,IAAI,KAAK;aAC5C,CAAC;SACH,CAAC;IACJ,CAAC,CAAC;IAEF,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;QAC1B,OAAO,UAAU,CACf,IAAI,qBAAqB,CAAC,EAAE,WAAW,EAAE,0BAA0B,WAAW,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,EAC9G,QAAQ,CACT,CAAC;IACJ,CAAC;IAED,gGAAgG;IAChG,IAAI,CAAC;QACH,4BAA4B,CAAC;YAC3B,GAAG;YACH,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,MAAM;YACN,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1F,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjF,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9G,GAAG;SACJ,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,mBAAmB,CAAC;YAC5B,IAAI,EAAE,wBAAwB;YAC9B,WAAW,EAAE,qFAAqF;YAClG,UAAU,EAAE,GAAG,CAAC,EAAE;YAClB,eAAe,EAAE,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE;SACtE,CAAC,CAAC;IACL,CAAC;IAED,yFAAyF;IACzF,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrG,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,+BAA+B,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IAEjF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC;YAC9B,UAAU,EAAE,GAAG,CAAC,EAAE;YAClB,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU;YACrC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI;YACzB,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9E,GAAG,EAAE,EAAE,CAAC,IAAI;YACZ,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,EAAE;YACvC,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,kBAAkB;YACjD,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI,mBAAmB;YAChE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI,mBAAmB;YAChE,QAAQ,EAAE,IAAI;YACd,YAAY,EAAE,SAAS;SACxB,CAAC,CAAC;QAEH,6DAA6D;QAC7D,MAAM,OAAO,GAAG,GAAS,EAAE,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACnE,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;;YACzD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAE/D,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACvC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7C,MAAM,cAAc,GAAG,MAAM,CAAC,WAAW,EAAwC,CAAC;QAClF,MAAM,SAAS,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,eAAe,EAAE,MAAM,EAAE,UAAU,CAAC,eAAe,EAAE,CAAC;QAE7F,wFAAwF;QACxF,0FAA0F;QAC1F,2FAA2F;QAC3F,wFAAwF;QACxF,MAAM,QAAQ,GAAG,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC;QACzG,IAAI,YAA6B,CAAC;QAClC,IAAI,QAAuC,CAAC;QAC5C,IAAI,WAA0C,CAAC;QAC/C,IAAI,cAAkC,CAAC;QACvC,IAAI,gBAAwB,CAAC;QAC7B,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC1D,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;YACxB,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;YACtB,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC;YAC5B,cAAc,GAAG,CAAC,CAAC,cAAc,CAAC;YAClC,gBAAgB,GAAG,CAAC,CAAC,gBAAgB,CAAC;QACxC,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,kBAAkB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACrD,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACzD,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;YAC7B,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC;YACnC,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC;YACvC,gBAAgB,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC;QAC/C,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,YAAY;YAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,UAAU,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;QAE3C,gFAAgF;QAChF,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,CAAC,MAAM,EAAE;YAC1D,QAAQ;YACR,WAAW;YACX,cAAc;YACd,UAAU,EAAE,YAAY,CAAC,MAAM;YAC/B,MAAM,EAAE,SAAS;SAClB,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK;YACjE,CAAC,CAAC,kCAAkC,CAAC,MAAM,CAAC,KAAK,CAAC;YAClD,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,WAAW,GAAG,8BAA8B,CAAC;YACjD,UAAU,EAAE,GAAG,CAAC,EAAE;YAClB,cAAc,EAAE,WAAW,CAAC,MAAM;YAClC,aAAa,EAAE,SAAS,CAAC,MAAM;YAC/B,gBAAgB;YAChB,UAAU,EAAE,UAAU,CAAC,MAAM;YAC7B,UAAU,EAAE,cAAc;YAC1B,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,eAAe,EAAE,SAAS,CAAC,MAAM;YACjC,eAAe,EAAE,SAAS,CAAC,MAAM;SAClC,CAAC,CAAC;QACH,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;IAC7E,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;IACrB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,MAAuB;IAC3C,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,wBAAwB,CAAC,CAAC,CAAC,CAAC;QACtC,IAAI,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,iBAAiB,CACxB,UAAkB,EAClB,UAAkB,EAClB,MAMC;IAED,IAAI,UAAU,KAAK,WAAW,EAAE,CAAC;QAC/B,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;IACtC,CAAC;IACD,IAAI,UAAU,KAAK,WAAW,EAAE,CAAC;QAC/B,OAAO;YACL,WAAW,EAAE,QAAQ;YACrB,KAAK,EAAE,IAAI,oBAAoB,CAAC,EAAE,WAAW,EAAE,mBAAmB,EAAE,UAAU,EAAE,CAAC;SAClF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,OAAO;YACL,WAAW,EAAE,QAAQ;YACrB,KAAK,EAAE,qBAAqB,CAAC,UAAU,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,cAAc,IAAI,gBAAgB,CAAC;SACxG,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzC,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACnE,CAAC;IACD,8FAA8F;IAC9F,OAAO;QACL,WAAW,EAAE,QAAQ;QACrB,KAAK,EAAE,IAAI,qBAAqB,CAAC;YAC/B,WAAW,EAAE,MAAM,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,mCAAmC;YAC/G,UAAU;SACX,CAAC;KACH,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,UAAkB,EAAE,IAAmC,EAAE,WAAmB;IACzG,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,wBAAwB;YAC3B,OAAO,IAAI,yBAAyB,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC;QACpE,KAAK,qBAAqB;YACxB,OAAO,IAAI,sBAAsB,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC;QACjE,KAAK,kBAAkB;YACrB,OAAO,IAAI,oBAAoB,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChF,KAAK,sBAAsB;YACzB,OAAO,IAAI,wBAAwB,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpF,KAAK,mBAAmB;YACtB,OAAO,IAAI,qBAAqB,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC;QAChE;YACE,OAAO,IAAI,qBAAqB,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,MAAuB;IAC1C,MAAM,UAAU,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;IACzE,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAClC,MAAM,CAAC,GAAG,UAAU,CAAC,OAA4B,CAAC;IAClD,OAAO,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1E,CAAC"}

package/dist/adapters/providerContractTypes.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Frozen provider runtime contract surfaces (XACP-012 v1): the `ProviderEvent` schema, the
+ * `ProviderEvent → ACP session/update` mapping reference, and the diagnostics/audit shapes.
+ *
+ * These pin the shapes a real adapter and the ACP server rely on. Validators are pure and never
+ * throw. Diagnostics/audit carry NO secret values, raw env, tokens, credential paths, or stack
+ * traces, and explicitly surface that network/filesystem are NOT enforced.
+ */
+import { type ProviderProcessEnforcement } from "../process/providerProcessTypes.js";
+import type { ProviderEvent, ProviderEventKind } from "../providers/providerEvents.js";
+import type { ProviderSafetyDecision } from "../security/securityTypes.js";
+import type { AdapterFailureCode } from "./adapterFailureTaxonomy.js";
+/** The frozen set of normalized ProviderEvent kinds (v1). */
+export declare const PROVIDER_EVENT_KINDS: readonly ProviderEventKind[];
+/** Terminal ProviderEvent kinds. */
+export declare const TERMINAL_PROVIDER_EVENT_KINDS: readonly ProviderEventKind[];
+/**
+ * Frozen reference of which ACP `session/update` each ProviderEvent kind maps to (or `null` for
+ * terminal/diagnostic kinds, which do not produce a streamed update). This MUST agree with
+ * `providerEventToAcpUpdate` — a conformance test asserts that.
+ */
+export declare const PROVIDER_EVENT_TO_ACP: Record<ProviderEventKind, string | null>;
+/** Pure, fail-safe validator for a normalized ProviderEvent (envelope + known kind). */
+export declare function isValidProviderEvent(event: unknown): event is ProviderEvent;
+export declare function isTerminalProviderEventKind(kind: ProviderEventKind): boolean;
+export interface ProviderRuntimeDiagnosticsV1 {
+    providerId: string;
+    providerDisplayName: string;
+    contractVersion: number;
+    providerStatus: string;
+    safetyDecision: ProviderSafetyDecision;
+    policyHash: string;
+    definitionHash: string;
+    approvalStatus: "present" | "absent";
+    /** Honest process-enforcement classification (network/filesystem NOT enforced). */
+    enforcementClassification: ProviderProcessEnforcement;
+    auditEventCount: number;
+    lastErrorCode?: AdapterFailureCode;
+    redactionState: "active";
+}
+export interface ProviderAuditEventV1 {
+    eventId: string;
+    timestamp: string;
+    providerId: string;
+    sessionId?: string;
+    requestId?: string;
+    kind: string;
+    safeMessage: string;
+    redactedDetails?: Record<string, unknown>;
+}
+export interface BuildRuntimeDiagnosticsInput {
+    providerId: string;
+    providerDisplayName: string;
+    providerStatus: string;
+    safetyDecision: ProviderSafetyDecision;
+    policyHash?: string;
+    definitionHash: string;
+    approvalPresent: boolean;
+    auditEventCount: number;
+    lastErrorCode?: AdapterFailureCode;
+    enforcement?: ProviderProcessEnforcement;
+}
+export declare function buildProviderRuntimeDiagnostics(input: BuildRuntimeDiagnosticsInput): ProviderRuntimeDiagnosticsV1;
+//# sourceMappingURL=providerContractTypes.d.ts.map

package/dist/adapters/providerContractTypes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"providerContractTypes.d.ts","sourceRoot":"","sources":["../../src/adapters/providerContractTypes.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAkC,KAAK,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAErH,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACvF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAC3E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAEtE,6DAA6D;AAC7D,eAAO,MAAM,oBAAoB,EAAE,SAAS,iBAAiB,EAY5D,CAAC;AAEF,oCAAoC;AACpC,eAAO,MAAM,6BAA6B,EAAE,SAAS,iBAAiB,EAAyC,CAAC;AAEhH;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,EAAE,MAAM,CAAC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAY1E,CAAC;AAIF,wFAAwF;AACxF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,aAAa,CAa3E;AAED,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAE5E;AAID,MAAM,WAAW,4BAA4B;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,sBAAsB,CAAC;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,SAAS,GAAG,QAAQ,CAAC;IACrC,mFAAmF;IACnF,yBAAyB,EAAE,0BAA0B,CAAC;IACtD,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,kBAAkB,CAAC;IACnC,cAAc,EAAE,QAAQ,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,4BAA4B;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,sBAAsB,CAAC;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,OAAO,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,kBAAkB,CAAC;IACnC,WAAW,CAAC,EAAE,0BAA0B,CAAC;CAC1C;AAED,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,4BAA4B,GAAG,4BAA4B,CAejH"}

package/dist/adapters/providerContractTypes.js

@@ -0,0 +1,79 @@
+/**
+ * Frozen provider runtime contract surfaces (XACP-012 v1): the `ProviderEvent` schema, the
+ * `ProviderEvent → ACP session/update` mapping reference, and the diagnostics/audit shapes.
+ *
+ * These pin the shapes a real adapter and the ACP server rely on. Validators are pure and never
+ * throw. Diagnostics/audit carry NO secret values, raw env, tokens, credential paths, or stack
+ * traces, and explicitly surface that network/filesystem are NOT enforced.
+ */
+import { MINIMAL_SUPERVISOR_ENFORCEMENT } from "../process/providerProcessTypes.js";
+import { ADAPTER_RUNTIME_CONTRACT_VERSION } from "./adapterContractVersion.js";
+/** The frozen set of normalized ProviderEvent kinds (v1). */
+export const PROVIDER_EVENT_KINDS = [
+    "plan",
+    "message_delta",
+    "tool_started",
+    "tool_updated",
+    "tool_completed",
+    "tool_failed",
+    "usage",
+    "completed",
+    "cancelled",
+    "failed",
+    "diagnostic",
+];
+/** Terminal ProviderEvent kinds. */
+export const TERMINAL_PROVIDER_EVENT_KINDS = ["completed", "cancelled", "failed"];
+/**
+ * Frozen reference of which ACP `session/update` each ProviderEvent kind maps to (or `null` for
+ * terminal/diagnostic kinds, which do not produce a streamed update). This MUST agree with
+ * `providerEventToAcpUpdate` — a conformance test asserts that.
+ */
+export const PROVIDER_EVENT_TO_ACP = {
+    plan: "plan",
+    message_delta: "agent_message_chunk",
+    tool_started: "tool_call",
+    tool_updated: "tool_call_update",
+    tool_completed: "tool_call_update",
+    tool_failed: "tool_call_update",
+    usage: "usage_update",
+    completed: null,
+    cancelled: null,
+    failed: null,
+    diagnostic: null,
+};
+const KIND_SET = new Set(PROVIDER_EVENT_KINDS);
+/** Pure, fail-safe validator for a normalized ProviderEvent (envelope + known kind). */
+export function isValidProviderEvent(event) {
+    if (!event || typeof event !== "object")
+        return false;
+    const e = event;
+    return (typeof e.eventId === "string" &&
+        typeof e.providerId === "string" &&
+        typeof e.sessionId === "string" &&
+        typeof e.requestId === "string" &&
+        typeof e.timestamp === "string" &&
+        typeof e.kind === "string" &&
+        KIND_SET.has(e.kind) &&
+        "payload" in e);
+}
+export function isTerminalProviderEventKind(kind) {
+    return TERMINAL_PROVIDER_EVENT_KINDS.includes(kind);
+}
+export function buildProviderRuntimeDiagnostics(input) {
+    return {
+        providerId: input.providerId,
+        providerDisplayName: input.providerDisplayName,
+        contractVersion: ADAPTER_RUNTIME_CONTRACT_VERSION,
+        providerStatus: input.providerStatus,
+        safetyDecision: input.safetyDecision,
+        policyHash: input.policyHash ?? "",
+        definitionHash: input.definitionHash,
+        approvalStatus: input.approvalPresent ? "present" : "absent",
+        enforcementClassification: input.enforcement ?? MINIMAL_SUPERVISOR_ENFORCEMENT,
+        auditEventCount: input.auditEventCount,
+        ...(input.lastErrorCode ? { lastErrorCode: input.lastErrorCode } : {}),
+        redactionState: "active",
+    };
+}
+//# sourceMappingURL=providerContractTypes.js.map

package/dist/adapters/providerContractTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providerContractTypes.js","sourceRoot":"","sources":["../../src/adapters/providerContractTypes.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,8BAA8B,EAAmC,MAAM,oCAAoC,CAAC;AACrH,OAAO,EAAE,gCAAgC,EAAE,MAAM,6BAA6B,CAAC;AAK/E,6DAA6D;AAC7D,MAAM,CAAC,MAAM,oBAAoB,GAAiC;IAChE,MAAM;IACN,eAAe;IACf,cAAc;IACd,cAAc;IACd,gBAAgB;IAChB,aAAa;IACb,OAAO;IACP,WAAW;IACX,WAAW;IACX,QAAQ;IACR,YAAY;CACb,CAAC;AAEF,oCAAoC;AACpC,MAAM,CAAC,MAAM,6BAA6B,GAAiC,CAAC,WAAW,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;AAEhH;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA6C;IAC7E,IAAI,EAAE,MAAM;IACZ,aAAa,EAAE,qBAAqB;IACpC,YAAY,EAAE,WAAW;IACzB,YAAY,EAAE,kBAAkB;IAChC,cAAc,EAAE,kBAAkB;IAClC,WAAW,EAAE,kBAAkB;IAC/B,KAAK,EAAE,cAAc;IACrB,SAAS,EAAE,IAAI;IACf,SAAS,EAAE,IAAI;IACf,MAAM,EAAE,IAAI;IACZ,UAAU,EAAE,IAAI;CACjB,CAAC;AAEF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAS,oBAAoB,CAAC,CAAC;AAEvD,wFAAwF;AACxF,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,OAAO,CACL,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAC7B,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;QAChC,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAC/B,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAC/B,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAC/B,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;QAC1B,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QACpB,SAAS,IAAI,CAAC,CACf,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,IAAuB;IACjE,OAAQ,6BAAmD,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC7E,CAAC;AA4CD,MAAM,UAAU,+BAA+B,CAAC,KAAmC;IACjF,OAAO;QACL,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,eAAe,EAAE,gCAAgC;QACjD,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,EAAE;QAClC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,cAAc,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;QAC5D,yBAAyB,EAAE,KAAK,CAAC,WAAW,IAAI,8BAA8B;QAC9E,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,cAAc,EAAE,QAAQ;KACzB,CAAC;AACJ,CAAC"}

package/dist/adapters/testAdapterProvider.d.ts

@@ -0,0 +1,19 @@
+/**
+ * `xeno-test-adapter` — a XENO-OWNED, harness-only provider definition (XACP-011).
+ *
+ * It exists to prove the future adapter seam end-to-end. It is **implemented for test/harness use
+ * only** and is intentionally NOT registered in the default registry (`createDefaultRegistry`),
+ * so the normal CLI/ACP path still presents only the fixture as runnable. It is xeno-owned with
+ * NO auth and NO network; it declares `filesystem: workspace-scoped` + `canReadFiles` truthfully
+ * (the fixture adapter runs in a supervisor-owned temp workspace), which routes it through the
+ * **requires_approval** gate so the manual-approval flow can be exercised.
+ *
+ * Its runtime delegates `prompt()` to the adapter harness (`runAdapterPrompt`). It launches only
+ * the harmless fixture adapter passed via `options.adapter` — never a real provider CLI.
+ */
+import type { ProviderCapabilitySet, ProviderDefinition } from "../providers/providerTypes.js";
+export declare const TEST_ADAPTER_ID = "xeno-test-adapter";
+export declare const TEST_ADAPTER_CAPABILITIES: ProviderCapabilitySet;
+/** Build the harness-only `xeno-test-adapter` definition. NOT added to the default registry. */
+export declare function createTestAdapterDefinition(): ProviderDefinition;
+//# sourceMappingURL=testAdapterProvider.d.ts.map

package/dist/adapters/testAdapterProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"testAdapterProvider.d.ts","sourceRoot":"","sources":["../../src/adapters/testAdapterProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,OAAO,KAAK,EACV,qBAAqB,EACrB,kBAAkB,EAOnB,MAAM,+BAA+B,CAAC;AAGvC,eAAO,MAAM,eAAe,sBAAsB,CAAC;AAEnD,eAAO,MAAM,yBAAyB,EAAE,qBAYvC,CAAC;AAgEF,gGAAgG;AAChG,wBAAgB,2BAA2B,IAAI,kBAAkB,CAkBhE"}

package/dist/adapters/testAdapterProvider.js

@@ -0,0 +1,95 @@
+/**
+ * `xeno-test-adapter` — a XENO-OWNED, harness-only provider definition (XACP-011).
+ *
+ * It exists to prove the future adapter seam end-to-end. It is **implemented for test/harness use
+ * only** and is intentionally NOT registered in the default registry (`createDefaultRegistry`),
+ * so the normal CLI/ACP path still presents only the fixture as runnable. It is xeno-owned with
+ * NO auth and NO network; it declares `filesystem: workspace-scoped` + `canReadFiles` truthfully
+ * (the fixture adapter runs in a supervisor-owned temp workspace), which routes it through the
+ * **requires_approval** gate so the manual-approval flow can be exercised.
+ *
+ * Its runtime delegates `prompt()` to the adapter harness (`runAdapterPrompt`). It launches only
+ * the harmless fixture adapter passed via `options.adapter` — never a real provider CLI.
+ */
+import { ProviderConfigurationError } from "../providers/providerErrors.js";
+import { runAdapterPrompt } from "./adapterProcessHarness.js";
+export const TEST_ADAPTER_ID = "xeno-test-adapter";
+export const TEST_ADAPTER_CAPABILITIES = {
+    streamsText: true,
+    emitsPlan: true,
+    emitsToolCalls: true,
+    emitsUsage: true,
+    supportsCancel: true,
+    supportsMultipleSessions: true,
+    requiresAuth: false,
+    usesNetwork: false,
+    canReadFiles: true, // reads within the supervisor-owned temp workspace (honest)
+    canWriteFiles: false,
+    canRunTerminal: false,
+};
+class TestAdapterRuntime {
+    definition;
+    options;
+    log;
+    sessionSeq = 0;
+    promptCount = 0;
+    constructor(definition, config) {
+        this.definition = definition;
+        this.options = (config?.options ?? {});
+        this.log = config?.log ?? (() => { });
+    }
+    initialize() { }
+    createSession() {
+        this.sessionSeq += 1;
+        return { sessionId: `${TEST_ADAPTER_ID}-session-${this.sessionSeq}`, createdAt: `s${this.sessionSeq}` };
+    }
+    cancel() {
+        /* cancellation flows via the prompt AbortSignal into the supervisor */
+    }
+    dispose() { }
+    diagnostics() {
+        return { provider: this.definition.id, sessionsCreated: this.sessionSeq, promptsRun: this.promptCount };
+    }
+    async prompt(request, ctx) {
+        this.promptCount += 1;
+        if (!this.options.adapter) {
+            throw new ProviderConfigurationError({
+                safeMessage: "xeno-test-adapter requires options.adapter (a harmless fixture command)",
+                providerId: this.definition.id,
+            });
+        }
+        const harness = await runAdapterPrompt({
+            definition: this.definition,
+            runnability: this.options.runnability ?? {},
+            request,
+            adapter: this.options.adapter,
+            signal: ctx.signal,
+            emit: ctx.emit,
+            ...(this.options.timeoutMs !== undefined ? { timeoutMs: this.options.timeoutMs } : {}),
+            ...(this.options.envAllowlist ? { envAllowlist: this.options.envAllowlist } : {}),
+        });
+        this.log(`test-adapter prompt: ${harness.result.disposition} (${harness.events.length} events)`);
+        return harness.result;
+    }
+}
+/** Build the harness-only `xeno-test-adapter` definition. NOT added to the default registry. */
+export function createTestAdapterDefinition() {
+    const definition = {
+        id: TEST_ADAPTER_ID,
+        displayName: "XENO Test Adapter (harness only)",
+        description: "Harness-only cooperative adapter for proving the adapter seam. Not a real provider.",
+        kind: "local-adapter",
+        trustClass: "xeno-owned",
+        authRequirement: "none",
+        networkRequirement: "none",
+        ioAuthority: { filesystem: "workspace-scoped", terminal: "none" },
+        capabilities: TEST_ADAPTER_CAPABILITIES,
+        enabled: true,
+        metadata: { acpEntrypoint: "adapter", installedLocally: true, note: "XACP-011 test harness only" },
+        createRuntime(config) {
+            return new TestAdapterRuntime(definition, config);
+        },
+    };
+    return definition;
+}
+//# sourceMappingURL=testAdapterProvider.js.map

package/dist/adapters/testAdapterProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"testAdapterProvider.js","sourceRoot":"","sources":["../../src/adapters/testAdapterProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAa9D,MAAM,CAAC,MAAM,eAAe,GAAG,mBAAmB,CAAC;AAEnD,MAAM,CAAC,MAAM,yBAAyB,GAA0B;IAC9D,WAAW,EAAE,IAAI;IACjB,SAAS,EAAE,IAAI;IACf,cAAc,EAAE,IAAI;IACpB,UAAU,EAAE,IAAI;IAChB,cAAc,EAAE,IAAI;IACpB,wBAAwB,EAAE,IAAI;IAC9B,YAAY,EAAE,KAAK;IACnB,WAAW,EAAE,KAAK;IAClB,YAAY,EAAE,IAAI,EAAE,4DAA4D;IAChF,aAAa,EAAE,KAAK;IACpB,cAAc,EAAE,KAAK;CACtB,CAAC;AAWF,MAAM,kBAAkB;IACb,UAAU,CAAqB;IACvB,OAAO,CAAqB;IAC5B,GAAG,CAAsB;IAClC,UAAU,GAAG,CAAC,CAAC;IACf,WAAW,GAAG,CAAC,CAAC;IAExB,YAAY,UAA8B,EAAE,MAA8B;QACxE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE,CAAuB,CAAC;QAC7D,IAAI,CAAC,GAAG,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACvC,CAAC;IAED,UAAU,KAAU,CAAC;IAErB,aAAa;QACX,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;QACrB,OAAO,EAAE,SAAS,EAAE,GAAG,eAAe,YAAY,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;IAC1G,CAAC;IAED,MAAM;QACJ,uEAAuE;IACzE,CAAC;IAED,OAAO,KAAU,CAAC;IAElB,WAAW;QACT,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,eAAe,EAAE,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;IAC1G,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAA8B,EAAE,GAA2B;QACtE,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YAC1B,MAAM,IAAI,0BAA0B,CAAC;gBACnC,WAAW,EAAE,yEAAyE;gBACtF,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE;aAC/B,CAAC,CAAC;QACL,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC;YACrC,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE;YAC3C,OAAO;YACP,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtF,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClF,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,wBAAwB,OAAO,CAAC,MAAM,CAAC,WAAW,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,UAAU,CAAC,CAAC;QACjG,OAAO,OAAO,CAAC,MAAM,CAAC;IACxB,CAAC;CACF;AAED,gGAAgG;AAChG,MAAM,UAAU,2BAA2B;IACzC,MAAM,UAAU,GAAuB;QACrC,EAAE,EAAE,eAAe;QACnB,WAAW,EAAE,kCAAkC;QAC/C,WAAW,EAAE,qFAAqF;QAClG,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,YAAY;QACxB,eAAe,EAAE,MAAM;QACvB,kBAAkB,EAAE,MAAM;QAC1B,WAAW,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,EAAE;QACjE,YAAY,EAAE,yBAAyB;QACvC,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,gBAAgB,EAAE,IAAI,EAAE,IAAI,EAAE,4BAA4B,EAAE;QAClG,aAAa,CAAC,MAA8B;YAC1C,OAAO,IAAI,kBAAkB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACpD,CAAC;KACF,CAAC;IACF,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,16 @@
+#!/usr/bin/env node
+/**
+ * xeno-acp-agent CLI.
+ *
+ * Commands:
+ *   xeno-acp-agent --version
+ *   xeno-acp-agent check                      # lists providers + safety (human-readable)
+ *   xeno-acp-agent agent --provider fixture [--delay-ms N] [--fail] [--stderr-test]
+ *
+ * stdout contract: `--version`/`check`/`--help` are NON-ACP and print human text. `agent` is
+ * ACP mode → stdout is JSON-RPC ONLY; all diagnostics go to stderr. Provider selection goes
+ * through the registry; an unknown or not-implemented provider fails safely (never falls back
+ * to fixture).
+ */
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;GAYG"}