@xenosystem/agent-interface-host 0.1.3

package/dist/acp/AcpPermissionPolicy.js

@@ -0,0 +1,167 @@
+export class InMemoryAcpPermissionPolicyStore {
+    rules = [];
+    constructor(initial = []) {
+        this.rules.push(...initial);
+    }
+    list() {
+        return [...this.rules];
+    }
+    add(rule) {
+        this.rules.push(rule);
+    }
+}
+/**
+ * Case- and separator-insensitive containment with a BOUNDARY check.
+ *
+ * `C:/repo` must not match `C:/repo-evil`. A bare `startsWith` says it does,
+ * and that is the classic way a scoped grant silently becomes a wider one.
+ */
+export function isWithinPathPrefix(path, prefix) {
+    const normalise = (value) => value.replace(/\\/gu, '/').replace(/\/+$/u, '').toLowerCase();
+    const target = normalise(path);
+    const root = normalise(prefix);
+    if (!root)
+        return false;
+    if (target === root)
+        return true;
+    return target.startsWith(`${root}/`);
+}
+function ruleMatches(rule, request) {
+    const toolCall = request.toolCall;
+    // No tool call means we cannot know what is being permitted. ACP requires the
+    // field, so its absence is a malformed or hostile request — never a match.
+    if (!toolCall)
+        return false;
+    if (rule.kind && toolCall.kind !== rule.kind)
+        return false;
+    if (!rule.pathPrefix)
+        return true;
+    const locations = toolCall.locations || [];
+    // A path-scoped rule cannot speak for a call that declares no path.
+    if (locations.length === 0)
+        return false;
+    return locations.every((location) => isWithinPathPrefix(location.path, rule.pathPrefix));
+}
+export function evaluateAcpPermissionPolicy(request, rules) {
+    let allow;
+    for (const rule of rules) {
+        if (!ruleMatches(rule, request))
+            continue;
+        // Deny wins outright — no need to look further, and order must not matter.
+        if (rule.decision === 'deny')
+            return { decision: 'deny', ruleId: rule.id };
+        allow ??= rule;
+    }
+    return allow ? { decision: 'allow', ruleId: allow.id } : { decision: 'ask' };
+}
+const ALLOW_KINDS = new Set(['allow_once', 'allow_always']);
+const REJECT_KINDS = new Set(['reject_once', 'reject_always']);
+/**
+ * The option to select for a decision, or undefined when the agent offered
+ * nothing that means it. Undefined must escalate to a human — never a guess.
+ */
+export function selectOptionForDecision(options, decision) {
+    const wanted = decision === 'allow' ? ALLOW_KINDS : REJECT_KINDS;
+    // Prefer the `_once` form: the policy already remembers, so re-arming the
+    // agent's own memory would put the same rule in two places.
+    const preferred = decision === 'allow' ? 'allow_once' : 'reject_once';
+    const candidates = (options || []).filter((option) => option.kind && wanted.has(option.kind));
+    return candidates.find((option) => option.kind === preferred) || candidates[0];
+}
+/** Derives the rule to store when a user picks an `*_always` option. */
+export function ruleFromAlwaysChoice(request, optionKind, id, now) {
+    if (optionKind !== 'allow_always' && optionKind !== 'reject_always')
+        return undefined;
+    const toolCall = request.toolCall;
+    if (!toolCall)
+        return undefined;
+    const decision = optionKind === 'allow_always' ? 'allow' : 'deny';
+    const locations = toolCall.locations || [];
+    // Scope to the common directory when the call names files; an unscoped rule
+    // is only minted when the call genuinely has no path (e.g. `execute`).
+    const pathPrefix = locations.length > 0 ? commonDirectory(locations.map((l) => l.path)) : undefined;
+    return {
+        id,
+        decision,
+        ...(toolCall.kind ? { kind: toolCall.kind } : {}),
+        ...(pathPrefix ? { pathPrefix } : {}),
+        createdAt: now,
+    };
+}
+function commonDirectory(paths) {
+    const dirs = paths.map((path) => {
+        const normalised = path.replace(/\\/gu, '/');
+        const cut = normalised.lastIndexOf('/');
+        return cut === -1 ? '' : normalised.slice(0, cut);
+    });
+    if (dirs.length === 0 || dirs.some((dir) => !dir))
+        return undefined;
+    let common = dirs[0];
+    for (const dir of dirs.slice(1)) {
+        while (!isWithinPathPrefix(dir, common)) {
+            const cut = common.lastIndexOf('/');
+            if (cut <= 0)
+                return undefined;
+            common = common.slice(0, cut);
+        }
+    }
+    return common;
+}
+/**
+ * Answers permission requests from stored policy, delegating anything the
+ * policy cannot decide.
+ *
+ * Note it never *reports* an allow it could not actually express: if the policy
+ * says allow and the agent offered no allow-kind option, the request escalates
+ * with a named reason rather than being answered.
+ */
+export class PolicyGatedAcpPermissionBridge {
+    store;
+    delegate;
+    onDecision;
+    now;
+    newRuleId;
+    ruleCounter = 0;
+    constructor(options) {
+        this.store = options.store;
+        this.delegate = options.delegate;
+        this.onDecision = options.onDecision;
+        this.now = options.now || (() => Date.now());
+        this.newRuleId = options.newRuleId || (() => `acp-permission-rule-${++this.ruleCounter}`);
+    }
+    async requestPermission(request) {
+        const evaluation = evaluateAcpPermissionPolicy(request, this.store.list());
+        if (evaluation.decision !== 'ask') {
+            const option = selectOptionForDecision(request.options, evaluation.decision);
+            if (option) {
+                const outcome = { outcome: 'selected', selectedOptionId: option.id };
+                this.onDecision?.({ ...evaluation, source: 'policy', outcome });
+                return outcome;
+            }
+            // The policy has an answer the agent gave us no way to express. Guessing
+            // an option id here would grant or refuse something other than what was
+            // decided, so it escalates instead.
+            this.onDecision?.({
+                ...evaluation,
+                source: 'policy',
+                outcome: { outcome: 'cancelled' },
+                escalationReason: `policy decided ${evaluation.decision} but the agent offered no matching option kind`,
+            });
+        }
+        const outcome = await this.delegate.requestPermission(request);
+        if (outcome.outcome === 'selected') {
+            const chosen = (request.options || []).find((option) => option.id === outcome.selectedOptionId);
+            const rule = chosen?.kind
+                ? ruleFromAlwaysChoice(request, chosen.kind, this.newRuleId(), this.now())
+                : undefined;
+            if (rule)
+                this.store.add(rule);
+        }
+        this.onDecision?.({ decision: 'ask', source: 'user', outcome });
+        return outcome;
+    }
+    cancelOutstanding(reason) {
+        this.delegate.cancelOutstanding?.(reason);
+    }
+}
+//# sourceMappingURL=AcpPermissionPolicy.js.map

package/dist/acp/AcpPermissionPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AcpPermissionPolicy.js","sourceRoot":"","sources":["../../src/acp/AcpPermissionPolicy.ts"],"names":[],"mappings":"AA2DA,MAAM,OAAO,gCAAgC;IAC1B,KAAK,GAAwB,EAAE,CAAA;IAEhD,YAAY,UAA+B,EAAE;QAC3C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAA;IAC7B,CAAC;IAED,IAAI;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAA;IACxB,CAAC;IAED,GAAG,CAAC,IAAuB;QACzB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACvB,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,MAAc;IAC7D,MAAM,SAAS,GAAG,CAAC,KAAa,EAAU,EAAE,CAC1C,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;IAC/D,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;IAC9B,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAA;IAC9B,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAA;IACvB,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAChC,OAAO,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAA;AACtC,CAAC;AAED,SAAS,WAAW,CAAC,IAAuB,EAAE,OAA6B;IACzE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAA;IACjC,8EAA8E;IAC9E,2EAA2E;IAC3E,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3B,IAAI,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAA;IAC1D,IAAI,CAAC,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAA;IAEjC,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,IAAI,EAAE,CAAA;IAC1C,oEAAoE;IACpE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACxC,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,kBAAkB,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,UAAoB,CAAC,CAAC,CAAA;AACpG,CAAC;AAOD,MAAM,UAAU,2BAA2B,CACzC,OAA6B,EAC7B,KAAmC;IAEnC,IAAI,KAAoC,CAAA;IACxC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC;YAAE,SAAQ;QACzC,2EAA2E;QAC3E,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM;YAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAA;QAC1E,KAAK,KAAK,IAAI,CAAA;IAChB,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;AAC9E,CAAC;AAED,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,CAAA;AAC3D,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC,CAAA;AAE9D;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAAmD,EACnD,QAA0B;IAE1B,MAAM,MAAM,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAA;IAChE,0EAA0E;IAC1E,4DAA4D;IAC5D,MAAM,SAAS,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa,CAAA;IACrE,MAAM,UAAU,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;IAC7F,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAA;AAChF,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,oBAAoB,CAClC,OAA6B,EAC7B,UAAkB,EAClB,EAAU,EACV,GAAW;IAEX,IAAI,UAAU,KAAK,cAAc,IAAI,UAAU,KAAK,eAAe;QAAE,OAAO,SAAS,CAAA;IACrF,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAA;IACjC,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAA;IAC/B,MAAM,QAAQ,GAAG,UAAU,KAAK,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAA;IACjE,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,IAAI,EAAE,CAAA;IAC1C,4EAA4E;IAC5E,uEAAuE;IACvE,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACnG,OAAO;QACL,EAAE;QACF,QAAQ;QACR,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,SAAS,EAAE,GAAG;KACf,CAAA;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAwB;IAC/C,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAC5C,MAAM,GAAG,GAAG,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;QACvC,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;IACF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAA;IACnE,IAAI,MAAM,GAAG,IAAI,CAAC,CAAC,CAAW,CAAA;IAC9B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAChC,OAAO,CAAC,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;YACxC,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;YACnC,IAAI,GAAG,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAA;YAC9B,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;QAC/B,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAqBD;;;;;;;GAOG;AACH,MAAM,OAAO,8BAA8B;IACxB,KAAK,CAA0B;IAC/B,QAAQ,CAAqB;IAC7B,UAAU,CAAiE;IAC3E,GAAG,CAAc;IACjB,SAAS,CAAc;IAChC,WAAW,GAAG,CAAC,CAAA;IAEvB,YAAY,OAA8C;QACxD,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAA;QAC1B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAA;QAChC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAA;QACpC,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;QAC5C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,CAAC,GAAG,EAAE,CAAC,uBAAuB,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;IAC3F,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,OAA6B;QACnD,MAAM,UAAU,GAAG,2BAA2B,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;QAE1E,IAAI,UAAU,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,uBAAuB,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAA;YAC5E,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,OAAO,GAAyB,EAAE,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,CAAC,EAAE,EAAE,CAAA;gBAC1F,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,GAAG,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;gBAC/D,OAAO,OAAO,CAAA;YAChB,CAAC;YACD,yEAAyE;YACzE,wEAAwE;YACxE,oCAAoC;YACpC,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,GAAG,UAAU;gBACb,MAAM,EAAE,QAAQ;gBAChB,OAAO,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE;gBACjC,gBAAgB,EAAE,kBAAkB,UAAU,CAAC,QAAQ,gDAAgD;aACxG,CAAC,CAAA;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAA;QAC9D,IAAI,OAAO,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;YACnC,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAA;YAC/F,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI;gBACvB,CAAC,CAAC,oBAAoB,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC1E,CAAC,CAAC,SAAS,CAAA;YACb,IAAI,IAAI;gBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAChC,CAAC;QACD,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;QAC/D,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,iBAAiB,CAAC,MAA2B;QAC3C,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC,MAAM,CAAC,CAAA;IAC3C,CAAC;CACF"}

package/dist/acp/AcpProcessSupervisor.d.ts

@@ -0,0 +1,134 @@
+import { type AcpPermissionBridge } from './AcpPermissionBridge.js';
+import { type AcpHostBridge } from './AcpHostBridge.js';
+import { type CoordinationLaneBridge } from '../coordination/laneBridge.js';
+import type { AcpAgentConfig, AcpDiagnostics, AcpInitializeResponse, AcpProcessStatus, AcpPromptExecutionContext, AcpSessionNewRequest, AcpSessionNewResponse, AcpSessionPromptResponse, AcpSessionUpdateNotification } from './acpTypes.js';
+export interface AcpSupervisorOptions {
+    permissionBridge?: undefined | AcpPermissionBridge;
+    hostBridge?: undefined | AcpHostBridge;
+    /** §5.2b. Absent means coordination is refused BY NAME, never silently empty. */
+    coordinationBridge?: undefined | CoordinationLaneBridge;
+    requestTimeoutMs?: undefined | number;
+}
+export interface AcpPromptResult {
+    result: AcpSessionPromptResponse;
+    updates: AcpSessionUpdateNotification[];
+}
+export interface AcpCreateSessionOptions {
+    cwd?: undefined | string;
+    mcpServers?: undefined | AcpSessionNewRequest['mcpServers'];
+    additionalDirectories?: undefined | string[];
+    _meta?: undefined | Record<string, unknown>;
+}
+export declare const XENO_ACP_CONTEXT_META_KEY = "xeno.dev/context";
+/**
+ * What `initialize` actually sends. Exported so the advertisement can be
+ * asserted where it is TRANSMITTED rather than where it is computed — a test
+ * against the helper alone stays green while this object hand-lists something
+ * else, which is exactly how the list fell behind the dispatcher before.
+ */
+export declare const DEFAULT_CLIENT_CAPABILITIES: {
+    readonly fs: {
+        readonly readTextFile: false;
+        readonly writeTextFile: false;
+    };
+    readonly terminal: false;
+    readonly _meta: {
+        readonly "xeno.dev": {
+            readonly chooseDirectory: true;
+            /**
+             * 🔴 DERIVED from the dispatch table, never listed here.
+             *
+             * `initialize` sends this, and it is the whole difference between a
+             * method that is reachable and one that is merely implemented. Hand-listed,
+             * it silently fell behind the dispatcher — exactly the shape this repo has
+             * hit five times. Now a method cannot be dispatched without being
+             * advertised, because both read the same array.
+             */
+            readonly hostRequests: Record<string, true>;
+        };
+    };
+};
+/**
+ * Hub-facing facade over `@xenosystem/acp-core`.
+ *
+ * Hub owns policy, redacted diagnostics, and UI bridges. Core owns spawning, the official
+ * ACP SDK connection, session lifecycle, cancellation, and transport validation.
+ */
+export declare class AcpProcessSupervisor {
+    private readonly config;
+    private runtime;
+    private readonly sessions;
+    private status;
+    private lifecycle;
+    private stderrTail;
+    private protocolVersion;
+    private agentInfo;
+    private agentCapabilities;
+    private lastErrorCode;
+    private readonly permissionBridge;
+    private readonly hostBridge;
+    private readonly coordinationBridge;
+    private readonly requestTimeoutMs;
+    constructor(config: AcpAgentConfig, options?: AcpSupervisorOptions);
+    getStatus(): AcpProcessStatus;
+    initialize(): Promise<AcpInitializeResponse>;
+    createSession(options?: AcpCreateSessionOptions): Promise<AcpSessionNewResponse>;
+    supportsResumeSession(): boolean;
+    /**
+     * XENO ACP compatibility path for embedding cores that predate `AgentProcess.resumeSession`.
+     * The provider-native continuation id is rebound to a fresh ACP session via bounded `_meta`.
+     */
+    supportsSessionNewResumeState(): boolean;
+    resumeSession(sessionId: string, options?: AcpCreateSessionOptions): Promise<AcpSessionNewResponse>;
+    prompt(sessionId: string, prompt: string, options?: {
+        timeoutMs?: undefined | number;
+        signal?: undefined | AbortSignal;
+        model?: undefined | string;
+        systemPrompt?: undefined | string;
+        execution?: undefined | AcpPromptExecutionContext;
+        onUpdate?: undefined | ((update: AcpSessionUpdateNotification) => void);
+    }): Promise<AcpPromptResult>;
+    cancelSession(sessionId: string): Promise<unknown>;
+    restart(): Promise<AcpInitializeResponse>;
+    /**
+     * Wait, briefly, for a transport that is going away to actually be gone.
+     *
+     * This exists because `getStatus()` is a LIVE READ of a value that is still settling right
+     * after a cancellation, and three separate decisions were each sampling it at one arbitrary
+     * instant: whether to emit `acp.agent.exited` against the cancelled request, whether to discard
+     * the conversation session, and whether the next prompt may reuse the process.
+     *
+     * ⚠️ What that costs is ATTRIBUTION, not the event: a missed sample defers the exit to
+     * `closeConversationSession`, which reports it under the synthetic id `acp-session-close`. The
+     * first draft of this note claimed the event could be lost entirely; it cannot, and the
+     * distinction matters to anyone consuming these events.
+     *
+     * A cancelled prompt aborts the connection mid-flight, so "is it dead yet" is genuinely
+     * unanswerable in that same tick. This gives the answer a bounded chance to arrive instead of
+     * guessing, and returns what was actually established.
+     *
+     * ⚠️ INTERIM, with a named exit condition. The right mechanism is a push: `AgentProcess`
+     * (`@xenosystem/acp-core`, which we own) exposes `onStderr` and `status()` and **no exit
+     * callback**, so there is nothing to subscribe to and polling is the only honest option from
+     * this side. Adding `onExit` upstream and reporting the exit when it is OBSERVED — rather than
+     * when someone thinks to look — removes both the poll and the deadline. Raised as a cross-repo
+     * requirement rather than worked around silently.
+     */
+    waitForExit(timeoutMs: number): Promise<boolean>;
+    stop(): Promise<void>;
+    diagnostics(): AcpDiagnostics;
+    private validateConfig;
+    private buildSessionNewRequest;
+    private classifyCoreError;
+    private transition;
+    private captureStderr;
+    private normalizeSessionUpdate;
+    private normalizeUpdate;
+    private normalizeToolStatus;
+    private normalizePlanEntries;
+    private normalizeToolContent;
+    private normalizeToolLocations;
+    private normalizeToolPayload;
+    private waitForExitDiagnostics;
+}
+//# sourceMappingURL=AcpProcessSupervisor.d.ts.map

package/dist/acp/AcpProcessSupervisor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AcpProcessSupervisor.d.ts","sourceRoot":"","sources":["../../src/acp/AcpProcessSupervisor.ts"],"names":[],"mappings":"AAaA,OAAO,EAEL,KAAK,mBAAmB,EAGzB,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAKL,KAAK,aAAa,EACnB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAqC,KAAK,sBAAsB,EAAE,MAAM,+BAA+B,CAAA;AAO9G,OAAO,KAAK,EACV,cAAc,EACd,cAAc,EACd,qBAAqB,EAIrB,gBAAgB,EAChB,yBAAyB,EACzB,oBAAoB,EACpB,qBAAqB,EACrB,wBAAwB,EACxB,4BAA4B,EAE7B,MAAM,eAAe,CAAA;AAEtB,MAAM,WAAW,oBAAoB;IACnC,gBAAgB,CAAC,EAAE,SAAS,GAAG,mBAAmB,CAAA;IAClD,UAAU,CAAC,EAAE,SAAS,GAAG,aAAa,CAAA;IACtC,iFAAiF;IACjF,kBAAkB,CAAC,EAAE,SAAS,GAAG,sBAAsB,CAAA;IACvD,gBAAgB,CAAC,EAAE,SAAS,GAAG,MAAM,CAAA;CACtC;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,wBAAwB,CAAA;IAChC,OAAO,EAAE,4BAA4B,EAAE,CAAA;CACxC;AAED,MAAM,WAAW,uBAAuB;IACtC,GAAG,CAAC,EAAE,SAAS,GAAG,MAAM,CAAA;IACxB,UAAU,CAAC,EAAE,SAAS,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAA;IAC3D,qBAAqB,CAAC,EAAE,SAAS,GAAG,MAAM,EAAE,CAAA;IAC5C,KAAK,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC5C;AAcD,eAAO,MAAM,yBAAyB,qBAAqB,CAAA;AAE3D;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;YASlC;;;;;;;;eAQG;;;;CAIC,CAAA;AAOV;;;;;GAKG;AACH,qBAAa,oBAAoB;IAgB7B,OAAO,CAAC,QAAQ,CAAC,MAAM;IAfzB,OAAO,CAAC,OAAO,CAA4B;IAC3C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6B;IACtD,OAAO,CAAC,MAAM,CAA8B;IAC5C,OAAO,CAAC,SAAS,CAA0B;IAC3C,OAAO,CAAC,UAAU,CAAe;IACjC,OAAO,CAAC,eAAe,CAAoB;IAC3C,OAAO,CAAC,SAAS,CAAgD;IACjE,OAAO,CAAC,iBAAiB,CAAqC;IAC9D,OAAO,CAAC,aAAa,CAAoB;IACzC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAqB;IACtD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAe;IAC1C,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAwB;IAC3D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAQ;gBAGtB,MAAM,EAAE,cAAc,EACvC,OAAO,GAAE,oBAAyB;IASpC,SAAS,IAAI,gBAAgB;IAMvB,UAAU,IAAI,OAAO,CAAC,qBAAqB,CAAC;IA+E5C,aAAa,CAAC,OAAO,GAAE,uBAA4B,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAiB1F,qBAAqB,IAAI,OAAO;IAWhC;;;OAGG;IACH,6BAA6B,IAAI,OAAO;IAalC,aAAa,CACjB,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,qBAAqB,CAAC;IAqB3B,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE;QACvD,SAAS,CAAC,EAAE,SAAS,GAAG,MAAM,CAAA;QAC9B,MAAM,CAAC,EAAE,SAAS,GAAG,WAAW,CAAA;QAChC,KAAK,CAAC,EAAE,SAAS,GAAG,MAAM,CAAA;QAC1B,YAAY,CAAC,EAAE,SAAS,GAAG,MAAM,CAAA;QACjC,SAAS,CAAC,EAAE,SAAS,GAAG,yBAAyB,CAAA;QACjD,QAAQ,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,MAAM,EAAE,4BAA4B,KAAK,IAAI,CAAC,CAAA;KACnE,GAAG,OAAO,CAAC,eAAe,CAAC;IA8D3B,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAQlD,OAAO,IAAI,OAAO,CAAC,qBAAqB,CAAC;IAK/C;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACG,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAUhD,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAa3B,WAAW,IAAI,cAAc;IA0B7B,OAAO,CAAC,cAAc;IA0BtB,OAAO,CAAC,sBAAsB;IAsB9B,OAAO,CAAC,iBAAiB;IAkBzB,OAAO,CAAC,UAAU;IAKlB,OAAO,CAAC,aAAa;IAOrB,OAAO,CAAC,sBAAsB;IAS9B,OAAO,CAAC,eAAe;IAiGvB,OAAO,CAAC,mBAAmB;IAI3B,OAAO,CAAC,oBAAoB;IAc5B,OAAO,CAAC,oBAAoB;IAuC5B,OAAO,CAAC,sBAAsB;IAmB9B,OAAO,CAAC,oBAAoB;YAed,sBAAsB;CAMrC"}