acp-websocket-transport 0.1.1

package/dist/src/transport.js

@@ -0,0 +1,120 @@
+/**
+ * WebSocket transport for ACP (Agent Client Protocol).
+ *
+ * Converts a `ws` WebSocket into the SDK's {@link Stream} interface,
+ * enabling ACP connections over WebSocket instead of stdio.
+ *
+ * Each WebSocket text frame carries exactly one JSON-encoded AnyMessage.
+ * Binary frames are silently ignored (ACP only uses text frames).
+ */
+/**
+ * Safely converts ws `RawData` (Buffer | ArrayBuffer | Buffer[]) to a UTF-8 string.
+ * Handles all three variants that `ws` may produce for text frames.
+ */
+function rawDataToString(data) {
+    if (Array.isArray(data)) {
+        // Buffer[] — concatenate all chunks first
+        return Buffer.concat(data).toString("utf8");
+    }
+    if (data instanceof ArrayBuffer) {
+        return Buffer.from(data).toString("utf8");
+    }
+    // Buffer (most common case for text frames)
+    return data.toString("utf8");
+}
+/**
+ * Creates an ACP {@link Stream} from an open (or opening) `ws` WebSocket.
+ *
+ * Stream lifetime is tied to the WebSocket:
+ * - WS `close` / `error` → readable stream closes / errors
+ * - WritableStream `close()` → `ws.close(1000, ...)`
+ * - WritableStream `abort()` → `ws.terminate()` (hard close)
+ *
+ * @param ws - An open or opening `ws` WebSocket instance
+ * @returns Bidirectional ACP message stream
+ */
+export function wsStream(ws) {
+    // ─── Readable side ───────────────────────────────────────────────────
+    // Buffers incoming frames until the consumer pulls them.
+    // ReadableStream's built-in queue provides natural backpressure.
+    let readableController;
+    const readable = new ReadableStream({
+        start(controller) {
+            readableController = controller;
+            ws.on("message", (data, isBinary) => {
+                // ACP uses only text frames; drop binary frames silently
+                if (isBinary)
+                    return;
+                const text = rawDataToString(data);
+                let message;
+                try {
+                    message = JSON.parse(text);
+                }
+                catch {
+                    // Malformed JSON frame — close the readable with an error
+                    // so the connection layer can surface it to the caller.
+                    try {
+                        controller.error(new SyntaxError(`Invalid JSON in WebSocket frame: ${text.slice(0, 200)}`));
+                    }
+                    catch {
+                        /* controller already closed/errored */
+                    }
+                    ws.close(1003, "Invalid JSON");
+                    return;
+                }
+                try {
+                    controller.enqueue(message);
+                }
+                catch {
+                    /* controller already closed */
+                }
+            });
+            ws.on("close", () => {
+                try {
+                    controller.close();
+                }
+                catch {
+                    /* already closed */
+                }
+            });
+            ws.on("error", (err) => {
+                try {
+                    controller.error(err);
+                }
+                catch {
+                    /* already errored */
+                }
+            });
+        },
+        cancel() {
+            // Consumer cancelled the readable — close the WebSocket cleanly
+            ws.close(1000, "Stream cancelled");
+        },
+    });
+    // ─── Writable side ───────────────────────────────────────────────────
+    // Serialises each AnyMessage to a JSON text frame and calls ws.send().
+    // The Promise-based send callback provides backpressure to the
+    // WritableStream's internal queue.
+    const writable = new WritableStream({
+        write(message) {
+            return new Promise((resolve, reject) => {
+                const payload = JSON.stringify(message);
+                ws.send(payload, (err) => {
+                    if (err != null)
+                        reject(err);
+                    else
+                        resolve();
+                });
+            });
+        },
+        close() {
+            ws.close(1000, "Stream closed");
+        },
+        abort(_reason) {
+            // Hard close — destroy the TCP socket immediately without a close frame
+            ws.terminate();
+        },
+    });
+    return { readable, writable };
+}
+//# sourceMappingURL=transport.js.map

package/dist/src/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../../src/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH;;;GAGG;AACH,SAAS,eAAe,CAAC,IAAuB;IAC9C,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,0CAA0C;QAC1C,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,IAAI,YAAY,WAAW,EAAE,CAAC;QAChC,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC;IACD,4CAA4C;IAC5C,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,QAAQ,CAAC,EAAa;IACpC,wEAAwE;IACxE,yDAAyD;IACzD,iEAAiE;IAEjE,IAAI,kBAAgE,CAAC;IAErE,MAAM,QAAQ,GAAG,IAAI,cAAc,CAAa;QAC9C,KAAK,CAAC,UAAU;YACd,kBAAkB,GAAG,UAAU,CAAC;YAEhC,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAuB,EAAE,QAAiB,EAAE,EAAE;gBAC9D,yDAAyD;gBACzD,IAAI,QAAQ;oBAAE,OAAO;gBAErB,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;gBACnC,IAAI,OAAmB,CAAC;gBACxB,IAAI,CAAC;oBACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAe,CAAC;gBAC3C,CAAC;gBAAC,MAAM,CAAC;oBACP,0DAA0D;oBAC1D,wDAAwD;oBACxD,IAAI,CAAC;wBACH,UAAU,CAAC,KAAK,CACd,IAAI,WAAW,CACb,oCAAoC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CACzD,CACF,CAAC;oBACJ,CAAC;oBAAC,MAAM,CAAC;wBACP,uCAAuC;oBACzC,CAAC;oBACD,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;oBAC/B,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC;oBACH,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBAC9B,CAAC;gBAAC,MAAM,CAAC;oBACP,+BAA+B;gBACjC,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBAClB,IAAI,CAAC;oBACH,UAAU,CAAC,KAAK,EAAE,CAAC;gBACrB,CAAC;gBAAC,MAAM,CAAC;oBACP,oBAAoB;gBACtB,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;gBAC5B,IAAI,CAAC;oBACH,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACxB,CAAC;gBAAC,MAAM,CAAC;oBACP,qBAAqB;gBACvB,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QAED,MAAM;YACJ,gEAAgE;YAChE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;QACrC,CAAC;KACF,CAAC,CAAC;IAEH,wEAAwE;IACxE,uEAAuE;IACvE,+DAA+D;IAC/D,mCAAmC;IAEnC,MAAM,QAAQ,GAAG,IAAI,cAAc,CAAa;QAC9C,KAAK,CAAC,OAAmB;YACvB,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;gBACxC,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAW,EAAE,EAAE;oBAC/B,IAAI,GAAG,IAAI,IAAI;wBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;wBACxB,OAAO,EAAE,CAAC;gBACjB,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;QAED,KAAK;YACH,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QAClC,CAAC;QAED,KAAK,CAAC,OAAiB;YACrB,wEAAwE;YACxE,EAAE,CAAC,SAAS,EAAE,CAAC;QACjB,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC"}

package/dist/tests/auth.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=auth.test.d.ts.map

package/dist/tests/auth.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.test.d.ts","sourceRoot":"","sources":["../../tests/auth.test.ts"],"names":[],"mappings":""}

package/dist/tests/auth.test.js

@@ -0,0 +1,115 @@
+import { describe, it, expect } from "vitest";
+import { bearerAuth, basicAuth, apiKeyAuth, anyAuth, } from "../src/auth.js";
+/** Creates a minimal mock VerifyClientInfo with the given headers. */
+function mockInfo(headers) {
+    // IncomingMessage headers are lowercase by the Node.js HTTP parser
+    const lowerHeaders = {};
+    for (const [k, v] of Object.entries(headers)) {
+        lowerHeaders[k.toLowerCase()] = v;
+    }
+    return {
+        req: { headers: lowerHeaders },
+        origin: "",
+        secure: false,
+    };
+}
+// ─── bearerAuth ───────────────────────────────────────────────────────────────
+describe("bearerAuth", () => {
+    const verify = bearerAuth(["token-alice", "token-bob"]);
+    it("accepts a valid bearer token", () => {
+        expect(verify(mockInfo({ authorization: "Bearer token-alice" }))).toBe(true);
+        expect(verify(mockInfo({ authorization: "Bearer token-bob" }))).toBe(true);
+    });
+    it("rejects an unknown token", () => {
+        expect(verify(mockInfo({ authorization: "Bearer unknown" }))).toBe(false);
+    });
+    it("is case-sensitive for the token value", () => {
+        expect(verify(mockInfo({ authorization: "Bearer TOKEN-ALICE" }))).toBe(false);
+    });
+    it("is case-insensitive for the 'Bearer' scheme keyword", () => {
+        expect(verify(mockInfo({ authorization: "bearer token-alice" }))).toBe(true);
+        expect(verify(mockInfo({ authorization: "BEARER token-alice" }))).toBe(true);
+    });
+    it("rejects a non-bearer scheme", () => {
+        expect(verify(mockInfo({ authorization: "Basic dG9rZW4tYWxpY2U=" }))).toBe(false);
+    });
+    it("rejects a missing Authorization header", () => {
+        expect(verify(mockInfo({}))).toBe(false);
+    });
+    it("rejects a malformed Authorization header with no space", () => {
+        expect(verify(mockInfo({ authorization: "BearerNoSpace" }))).toBe(false);
+    });
+});
+// ─── basicAuth ────────────────────────────────────────────────────────────────
+describe("basicAuth", () => {
+    const verify = basicAuth({ alice: "pass1", bob: "pass2" });
+    it("accepts valid credentials", () => {
+        const encoded = Buffer.from("alice:pass1").toString("base64");
+        expect(verify(mockInfo({ authorization: `Basic ${encoded}` }))).toBe(true);
+    });
+    it("rejects wrong password", () => {
+        const encoded = Buffer.from("alice:wrong").toString("base64");
+        expect(verify(mockInfo({ authorization: `Basic ${encoded}` }))).toBe(false);
+    });
+    it("rejects unknown user", () => {
+        const encoded = Buffer.from("charlie:pass1").toString("base64");
+        expect(verify(mockInfo({ authorization: `Basic ${encoded}` }))).toBe(false);
+    });
+    it("is case-insensitive for the 'Basic' scheme keyword", () => {
+        const encoded = Buffer.from("alice:pass1").toString("base64");
+        expect(verify(mockInfo({ authorization: `basic ${encoded}` }))).toBe(true);
+    });
+    it("handles passwords containing colons correctly", () => {
+        const verifyColonPass = basicAuth({ user: "pass:with:colons" });
+        const encoded = Buffer.from("user:pass:with:colons").toString("base64");
+        expect(verifyColonPass(mockInfo({ authorization: `Basic ${encoded}` }))).toBe(true);
+    });
+    it("rejects missing Authorization header", () => {
+        expect(verify(mockInfo({}))).toBe(false);
+    });
+    it("rejects a non-basic scheme", () => {
+        expect(verify(mockInfo({ authorization: "Bearer alice:pass1" }))).toBe(false);
+    });
+});
+// ─── apiKeyAuth ───────────────────────────────────────────────────────────────
+describe("apiKeyAuth", () => {
+    const verify = apiKeyAuth("x-api-key", ["key1", "key2"]);
+    it("accepts a valid API key", () => {
+        expect(verify(mockInfo({ "x-api-key": "key1" }))).toBe(true);
+        expect(verify(mockInfo({ "x-api-key": "key2" }))).toBe(true);
+    });
+    it("rejects an unknown key", () => {
+        expect(verify(mockInfo({ "x-api-key": "key3" }))).toBe(false);
+    });
+    it("is case-insensitive for the header name", () => {
+        // Node.js lowercases header names, but the factory itself normalises too
+        const verifyUpper = apiKeyAuth("X-API-Key", ["key1"]);
+        expect(verifyUpper(mockInfo({ "x-api-key": "key1" }))).toBe(true);
+    });
+    it("rejects a missing header", () => {
+        expect(verify(mockInfo({}))).toBe(false);
+    });
+    it("rejects an empty key", () => {
+        expect(verify(mockInfo({ "x-api-key": "" }))).toBe(false);
+    });
+});
+// ─── anyAuth ──────────────────────────────────────────────────────────────────
+describe("anyAuth", () => {
+    const bearer = bearerAuth(["bearer-tok"]);
+    const apiKey = apiKeyAuth("x-api-key", ["api-key-tok"]);
+    const combined = anyAuth(bearer, apiKey);
+    it("accepts if the first verifier passes", async () => {
+        expect(await combined(mockInfo({ authorization: "Bearer bearer-tok" }))).toBe(true);
+    });
+    it("accepts if the second verifier passes", async () => {
+        expect(await combined(mockInfo({ "x-api-key": "api-key-tok" }))).toBe(true);
+    });
+    it("rejects if no verifier passes", async () => {
+        expect(await combined(mockInfo({}))).toBe(false);
+    });
+    it("accepts with an async verifier", async () => {
+        const asyncVerifier = anyAuth(async (_info) => true);
+        expect(await asyncVerifier(mockInfo({}))).toBe(true);
+    });
+});
+//# sourceMappingURL=auth.test.js.map

package/dist/tests/auth.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.test.js","sourceRoot":"","sources":["../../tests/auth.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EACL,UAAU,EACV,SAAS,EACT,UAAU,EACV,OAAO,GACR,MAAM,gBAAgB,CAAC;AAGxB,sEAAsE;AACtE,SAAS,QAAQ,CAAC,OAA+B;IAC/C,mEAAmE;IACnE,MAAM,YAAY,GAA2B,EAAE,CAAC;IAChD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,YAAY,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC;IACD,OAAO;QACL,GAAG,EAAE,EAAE,OAAO,EAAE,YAAY,EAAgC;QAC5D,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,KAAK;KACd,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;IAExD,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CACpE,IAAI,CACL,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CACpE,KAAK,CACN,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CACpE,IAAI,CACL,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CACpE,IAAI,CACL,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CACxE,KAAK,CACN,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,iFAAiF;AAEjF,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;IACzB,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IAE3D,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC9D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,SAAS,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC9D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,SAAS,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAChE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,SAAS,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC9D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,SAAS,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,eAAe,GAAG,SAAS,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACxE,MAAM,CACJ,eAAe,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,SAAS,OAAO,EAAE,EAAE,CAAC,CAAC,CACjE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CACpE,KAAK,CACN,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,iFAAiF;AAEjF,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAEzD,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,yEAAyE;QACzE,MAAM,WAAW,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;QACtD,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,iFAAiF;AAEjF,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE;IACvB,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEzC,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,CACJ,MAAM,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,mBAAmB,EAAE,CAAC,CAAC,CACjE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CACnE,IAAI,CACL,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,CAAC,MAAM,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tests/client.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=client.test.d.ts.map

package/dist/tests/client.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.test.d.ts","sourceRoot":"","sources":["../../tests/client.test.ts"],"names":[],"mappings":""}

package/dist/tests/client.test.js

@@ -0,0 +1,121 @@
+import { describe, it, expect, beforeEach, afterEach } from "vitest";
+import { WebSocketServer } from "ws";
+import { createClientConnection, withBearerToken, withBasicAuth, withApiKey, } from "../src/client.js";
+/** Creates a minimal echo WebSocket server for testing. */
+async function createEchoServer() {
+    const connections = [];
+    const wss = new WebSocketServer({ port: 0 });
+    wss.on("connection", (ws) => {
+        connections.push(ws);
+        // Echo all messages back (simulates an ACP agent stream)
+        ws.on("message", (data) => ws.send(data));
+    });
+    await new Promise((resolve) => wss.once("listening", resolve));
+    const port = wss.address().port;
+    return { wss, port, connections };
+}
+async function closeServer(wss) {
+    return new Promise((resolve) => {
+        wss.clients.forEach((ws) => ws.terminate());
+        wss.close(() => resolve());
+        setTimeout(resolve, 500);
+    });
+}
+describe("createClientConnection", () => {
+    let wss;
+    let port;
+    beforeEach(async () => {
+        ({ wss, port } = await createEchoServer());
+    });
+    afterEach(async () => {
+        await closeServer(wss);
+    });
+    it("opens a WebSocket and returns a ClientConnection", async () => {
+        const { connection, stream, close } = await createClientConnection(`ws://localhost:${port}`);
+        expect(connection).toBeDefined();
+        expect(stream).toBeDefined();
+        expect(typeof close).toBe("function");
+        close();
+    });
+    it("resolves the connection once the WebSocket is open", async () => {
+        const { close } = await createClientConnection(`ws://localhost:${port}`);
+        // If we got here without an error, the connection is open
+        expect(true).toBe(true);
+        close();
+    });
+    it("rejects if the server is not reachable", async () => {
+        await expect(createClientConnection("ws://localhost:1", { connectTimeout: 500 })).rejects.toThrow();
+    });
+    it("rejects if the connection times out", async () => {
+        // Point to a host that never responds to simulate a timeout
+        // Use an unrouteable address (TEST-NET-1) to force a timeout
+        await expect(createClientConnection("ws://192.0.2.1:9999", { connectTimeout: 200 })).rejects.toThrow(/timed out/i);
+    });
+    it("calls close() to shut down the connection", async () => {
+        const { close } = await createClientConnection(`ws://localhost:${port}`);
+        // Should not throw
+        expect(() => close()).not.toThrow();
+    });
+});
+// ─── Auth helpers ─────────────────────────────────────────────────────────────
+describe("withBearerToken", () => {
+    it("returns wsOptions with Authorization: Bearer header", () => {
+        const opts = withBearerToken("my-token");
+        expect(opts.wsOptions?.headers).toMatchObject({
+            Authorization: "Bearer my-token",
+        });
+    });
+});
+describe("withBasicAuth", () => {
+    it("returns wsOptions with Authorization: Basic header", () => {
+        const opts = withBasicAuth("user", "pass");
+        const expected = Buffer.from("user:pass").toString("base64");
+        expect(opts.wsOptions?.headers).toMatchObject({
+            Authorization: `Basic ${expected}`,
+        });
+    });
+    it("correctly encodes credentials with special characters", () => {
+        const opts = withBasicAuth("user@example.com", "p@$$word:123");
+        const expected = Buffer.from("user@example.com:p@$$word:123").toString("base64");
+        expect(opts.wsOptions?.headers).toMatchObject({
+            Authorization: `Basic ${expected}`,
+        });
+    });
+});
+describe("withApiKey", () => {
+    it("returns wsOptions with the given header", () => {
+        const opts = withApiKey("x-api-key", "abc123");
+        expect(opts.wsOptions?.headers).toMatchObject({
+            "x-api-key": "abc123",
+        });
+    });
+    it("preserves the header name casing provided by the caller", () => {
+        const opts = withApiKey("X-Custom-Auth", "token");
+        expect(opts.wsOptions?.headers).toMatchObject({
+            "X-Custom-Auth": "token",
+        });
+    });
+});
+// ─── auth headers reach the server ───────────────────────────────────────────
+describe("auth headers in upgrade request", () => {
+    it("sends the Authorization header during the WebSocket upgrade", async () => {
+        const receivedHeaders = [];
+        const wssAuth = new WebSocketServer({ port: 0 });
+        wssAuth.on("connection", (_ws, req) => {
+            receivedHeaders.push(req.headers);
+        });
+        await new Promise((resolve) => wssAuth.once("listening", resolve));
+        const authPort = wssAuth.address().port;
+        try {
+            const { close } = await createClientConnection(`ws://localhost:${authPort}`, withBearerToken("test-bearer-token"));
+            // Give the server a moment to record the headers
+            await new Promise((r) => setTimeout(r, 50));
+            expect(receivedHeaders[0]?.["authorization"]).toBe("Bearer test-bearer-token");
+            close();
+        }
+        finally {
+            await closeServer(wssAuth);
+        }
+    });
+});
+//# sourceMappingURL=client.test.js.map

package/dist/tests/client.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.test.js","sourceRoot":"","sources":["../../tests/client.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,IAAI,CAAC;AAGrC,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,aAAa,EACb,UAAU,GACX,MAAM,kBAAkB,CAAC;AAE1B,2DAA2D;AAC3D,KAAK,UAAU,gBAAgB;IAK7B,MAAM,WAAW,GAAgB,EAAE,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7C,GAAG,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,EAAE,EAAE,EAAE;QAC1B,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrB,yDAAyD;QACzD,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;IACrE,MAAM,IAAI,GAAI,GAAG,CAAC,OAAO,EAAkB,CAAC,IAAI,CAAC;IACjD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,GAAoB;IAC7C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;QAC5C,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3B,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,IAAI,GAAoB,CAAC;IACzB,IAAI,IAAY,CAAC;IAEjB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,MAAM,gBAAgB,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,sBAAsB,CAChE,kBAAkB,IAAI,EAAE,CACzB,CAAC;QAEF,MAAM,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7B,MAAM,CAAC,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAEtC,KAAK,EAAE,CAAC;IACV,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,sBAAsB,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;QACzE,0DAA0D;QAC1D,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,KAAK,EAAE,CAAC;IACV,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,MAAM,CACV,sBAAsB,CAAC,kBAAkB,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CACpE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,4DAA4D;QAC5D,6DAA6D;QAC7D,MAAM,MAAM,CACV,sBAAsB,CAAC,qBAAqB,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CACvE,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,sBAAsB,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;QAEzE,mBAAmB;QACnB,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,iFAAiF;AAEjF,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,IAAI,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,aAAa,CAAC;YAC5C,aAAa,EAAE,iBAAiB;SACjC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC7D,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,aAAa,CAAC;YAC5C,aAAa,EAAE,SAAS,QAAQ,EAAE;SACnC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,IAAI,GAAG,aAAa,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC,QAAQ,CACpE,QAAQ,CACT,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,aAAa,CAAC;YAC5C,aAAa,EAAE,SAAS,QAAQ,EAAE;SACnC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,IAAI,GAAG,UAAU,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC/C,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,aAAa,CAAC;YAC5C,WAAW,EAAE,QAAQ;SACtB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,IAAI,GAAG,UAAU,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,aAAa,CAAC;YAC5C,eAAe,EAAE,OAAO;SACzB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,gFAAgF;AAEhF,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,eAAe,GAA6B,EAAE,CAAC;QACrD,MAAM,OAAO,GAAG,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACpC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,OAAiC,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QACzE,MAAM,QAAQ,GAAI,OAAO,CAAC,OAAO,EAAkB,CAAC,IAAI,CAAC;QAEzD,IAAI,CAAC;YACH,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,sBAAsB,CAC5C,kBAAkB,QAAQ,EAAE,EAC5B,eAAe,CAAC,mBAAmB,CAAC,CACrC,CAAC;YAEF,iDAAiD;YACjD,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAElD,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAChD,0BAA0B,CAC3B,CAAC;YACF,KAAK,EAAE,CAAC;QACV,CAAC;gBAAS,CAAC;YACT,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tests/e2e.test.d.ts

@@ -0,0 +1,8 @@
+/**
+ * End-to-end tests: Client library → WebSocketACPServer → echo-agent process.
+ *
+ * These tests exercise the full stack:
+ *   createClientConnection  →  WebSocketACPServer  →  echo-agent (stdio)
+ */
+export {};
+//# sourceMappingURL=e2e.test.d.ts.map

package/dist/tests/e2e.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"e2e.test.d.ts","sourceRoot":"","sources":["../../tests/e2e.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/tests/e2e.test.js

@@ -0,0 +1,130 @@
+/**
+ * End-to-end tests: Client library → WebSocketACPServer → echo-agent process.
+ *
+ * These tests exercise the full stack:
+ *   createClientConnection  →  WebSocketACPServer  →  echo-agent (stdio)
+ */
+import { describe, it, expect, beforeAll, afterAll } from "vitest";
+import { WebSocketACPServer } from "../src/server.js";
+import { createClientConnection, withBearerToken } from "../src/client.js";
+import { bearerAuth } from "../src/auth.js";
+const ECHO_AGENT = new URL("../dist/examples/echo-agent.js", import.meta.url)
+    .pathname;
+// ─── No-auth E2E ──────────────────────────────────────────────────────────────
+describe("E2E (no auth)", () => {
+    let server;
+    let wsUrl;
+    beforeAll(async () => {
+        server = new WebSocketACPServer({
+            port: 0,
+            command: "node",
+            args: [ECHO_AGENT],
+        });
+        await server.listening();
+        const { port } = server.address;
+        wsUrl = `ws://localhost:${port}`;
+    });
+    afterAll(async () => {
+        await server.close().catch(() => { });
+    });
+    it("completes initialize → session/new → prompt flow", async () => {
+        const updates = [];
+        const { connection, close } = await createClientConnection(wsUrl, {
+            toClient: (_agent) => ({
+                sessionUpdate: async (params) => {
+                    const { update } = params;
+                    if ("content" in update && update.content.type === "text") {
+                        updates.push(update.content.text);
+                    }
+                },
+                requestPermission: async () => ({ outcome: "allow_once" }),
+            }),
+        });
+        // 1. Initialize
+        const init = await connection.initialize({
+            protocolVersion: 0,
+            clientInfo: { name: "e2e-test", version: "0.0.1" },
+            clientCapabilities: {},
+        });
+        expect(init.agentInfo?.name).toBe("echo-agent");
+        // 2. Create session
+        const session = await connection.newSession({
+            cwd: "/tmp",
+            mcpServers: [],
+        });
+        expect(typeof session.sessionId).toBe("string");
+        expect(session.sessionId.length).toBeGreaterThan(0);
+        // 3. Send prompt
+        const result = await connection.prompt({
+            sessionId: session.sessionId,
+            prompt: [{ type: "text", text: "Hello, world!" }],
+        });
+        expect(result.stopReason).toBe("end_turn");
+        // 4. The echo agent sends a session/update notification before responding
+        expect(updates.some((t) => t.includes("Echo: Hello, world!"))).toBe(true);
+        close();
+        await new Promise((r) => setTimeout(r, 200));
+    });
+    it("handles multiple sessions on the same server", async () => {
+        // Open two independent client connections (each gets its own agent process)
+        const { connection: c1, close: close1 } = await createClientConnection(wsUrl);
+        const { connection: c2, close: close2 } = await createClientConnection(wsUrl);
+        const [init1, init2] = await Promise.all([
+            c1.initialize({ protocolVersion: 0, clientCapabilities: {} }),
+            c2.initialize({ protocolVersion: 0, clientCapabilities: {} }),
+        ]);
+        expect(init1.agentInfo?.name).toBe("echo-agent");
+        expect(init2.agentInfo?.name).toBe("echo-agent");
+        const [sess1, sess2] = await Promise.all([
+            c1.newSession({ cwd: "/tmp", mcpServers: [] }),
+            c2.newSession({ cwd: "/tmp", mcpServers: [] }),
+        ]);
+        // Each connection has its own independent session
+        expect(sess1.sessionId).not.toBe(sess2.sessionId);
+        close1();
+        close2();
+        await new Promise((r) => setTimeout(r, 200));
+    });
+});
+// ─── Bearer-auth E2E ──────────────────────────────────────────────────────────
+describe("E2E (bearer auth)", () => {
+    const VALID_TOKEN = "e2e-test-token";
+    let server;
+    let wsUrl;
+    beforeAll(async () => {
+        server = new WebSocketACPServer({
+            port: 0,
+            command: "node",
+            args: [ECHO_AGENT],
+            verifyClient: bearerAuth([VALID_TOKEN]),
+        });
+        await server.listening();
+        const { port } = server.address;
+        wsUrl = `ws://localhost:${port}`;
+    });
+    afterAll(async () => {
+        await server.close().catch(() => { });
+    });
+    it("connects successfully with the correct token", async () => {
+        const { connection, close } = await createClientConnection(wsUrl, {
+            ...withBearerToken(VALID_TOKEN),
+        });
+        const init = await connection.initialize({
+            protocolVersion: 0,
+            clientCapabilities: {},
+        });
+        expect(init.agentInfo?.name).toBe("echo-agent");
+        close();
+        await new Promise((r) => setTimeout(r, 200));
+    });
+    it("rejects connection with a wrong token", async () => {
+        await expect(createClientConnection(wsUrl, {
+            ...withBearerToken("wrong-token"),
+            connectTimeout: 3000,
+        })).rejects.toThrow();
+    });
+    it("rejects connection with no token", async () => {
+        await expect(createClientConnection(wsUrl, { connectTimeout: 3000 })).rejects.toThrow();
+    });
+});
+//# sourceMappingURL=e2e.test.js.map

package/dist/tests/e2e.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"e2e.test.js","sourceRoot":"","sources":["../../tests/e2e.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAEnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE5C,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,gCAAgC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;KAC1E,QAAQ,CAAC;AAEZ,iFAAiF;AAEjF,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,IAAI,MAA0B,CAAC;IAC/B,IAAI,KAAa,CAAC;IAElB,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,GAAG,IAAI,kBAAkB,CAAC;YAC9B,IAAI,EAAE,CAAC;YACP,OAAO,EAAE,MAAM;YACf,IAAI,EAAE,CAAC,UAAU,CAAC;SACnB,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;QACzB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,OAAsB,CAAC;QAC/C,KAAK,GAAG,kBAAkB,IAAI,EAAE,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,KAAK,IAAI,EAAE;QAClB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAgB,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,OAAO,GAAa,EAAE,CAAC;QAE7B,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,MAAM,sBAAsB,CAAC,KAAK,EAAE;YAChE,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBACrB,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;oBAC9B,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;oBAC1B,IAAI,SAAS,IAAI,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;wBAC1D,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;oBACpC,CAAC;gBACH,CAAC;gBACD,iBAAiB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,YAAqB,EAAE,CAAC;aACpE,CAAC;SACH,CAAC,CAAC;QAEH,gBAAgB;QAChB,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC;YACvC,eAAe,EAAE,CAAC;YAClB,UAAU,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE;YAClD,kBAAkB,EAAE,EAAE;SACvB,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAEhD,oBAAoB;QACpB,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC;YAC1C,GAAG,EAAE,MAAM;YACX,UAAU,EAAE,EAAE;SACf,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAEpD,iBAAiB;QACjB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC;YACrC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;SAClD,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAE3C,0EAA0E;QAC1E,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE1E,KAAK,EAAE,CAAC;QACR,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,4EAA4E;QAC5E,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAC9E,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAE9E,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACvC,EAAE,CAAC,UAAU,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,kBAAkB,EAAE,EAAE,EAAE,CAAC;YAC7D,EAAE,CAAC,UAAU,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,kBAAkB,EAAE,EAAE,EAAE,CAAC;SAC9D,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAEjD,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACvC,EAAE,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;YAC9C,EAAE,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;SAC/C,CAAC,CAAC;QAEH,kDAAkD;QAClD,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAElD,MAAM,EAAE,CAAC;QACT,MAAM,EAAE,CAAC;QACT,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,iFAAiF;AAEjF,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,MAAM,WAAW,GAAG,gBAAgB,CAAC;IACrC,IAAI,MAA0B,CAAC;IAC/B,IAAI,KAAa,CAAC;IAElB,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,GAAG,IAAI,kBAAkB,CAAC;YAC9B,IAAI,EAAE,CAAC;YACP,OAAO,EAAE,MAAM;YACf,IAAI,EAAE,CAAC,UAAU,CAAC;YAClB,YAAY,EAAE,UAAU,CAAC,CAAC,WAAW,CAAC,CAAC;SACxC,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;QACzB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,OAAsB,CAAC;QAC/C,KAAK,GAAG,kBAAkB,IAAI,EAAE,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,KAAK,IAAI,EAAE;QAClB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAgB,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,MAAM,sBAAsB,CAAC,KAAK,EAAE;YAChE,GAAG,eAAe,CAAC,WAAW,CAAC;SAChC,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC;YACvC,eAAe,EAAE,CAAC;YAClB,kBAAkB,EAAE,EAAE;SACvB,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAEhD,KAAK,EAAE,CAAC;QACR,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,MAAM,CACV,sBAAsB,CAAC,KAAK,EAAE;YAC5B,GAAG,eAAe,CAAC,aAAa,CAAC;YACjC,cAAc,EAAE,IAAI;SACrB,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,MAAM,CACV,sBAAsB,CAAC,KAAK,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CACxD,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tests/server.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=server.test.d.ts.map

package/dist/tests/server.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.test.d.ts","sourceRoot":"","sources":["../../tests/server.test.ts"],"names":[],"mappings":""}