acpx 0.20.0 → 0.21.1

package/dist/{session-options-DQlqgFv2.d.ts → session-options-BlnP3WAc.d.ts}

@@ -1,8 +1,5 @@
 import { AgentCapabilities, AnyMessage, ContentBlock, CreateElicitationRequest, ElicitationContentValue, JsonRpcId, McpServer, McpServer as McpServer$1, RequestPermissionRequest, SessionConfigOption, SessionNotification, SetSessionConfigOptionResponse, ToolKind } from "@agentclientprotocol/sdk";
-//#region src/prompt-content.d.ts
 type PromptInput = ContentBlock[];
-//#endregion
-//#region src/types.d.ts
 type AcpPermissionRequest = {
   sessionId: string;
   raw: RequestPermissionRequest;
@@ -145,6 +142,13 @@ type AcpClientOptions = {
   agentArgv?: string[];
   /** Trusted child-only environment overlay; never persisted as session options. */
   agentProcessEnv?: Record<string, string>;
+  /**
+   * Opt-in allowlist: agent children, probes and terminals inherit only process essentials,
+   * these parent names and `ACPX_AUTH_*` grants.
+   */
+  agentProcessEnvAllow?: readonly string[];
+  /** Parent environment names that agent children, probes and terminals do not inherit. */
+  agentProcessEnvBlock?: readonly string[];
   cwd: string;
   mcpServers?: McpServer[];
   permissionMode: PermissionMode;
@@ -325,8 +329,6 @@ type SessionRecord = {
   acpx?: SessionAcpxState;
   importedFrom?: SessionImportedFrom;
 };
-//#endregion
-//#region src/runtime/engine/session-options.d.ts
 type SystemPromptOption = string | {
   append: string;
 };
@@ -346,6 +348,5 @@ type SessionAgentOptions = {
    */
   env?: Record<string, string>;
 };
-//#endregion
 export { PermissionPolicy as C, PromptInput as E, PermissionMode as S, SessionRecord as T, AcpProcessSpawnFailure as _, AcpElicitationHandler as a, McpServer$1 as b, AcpElicitationResponse as c, AcpPermissionHandler as d, AcpPermissionRequest as f, AcpProcessLifecycle as g, AcpProcessLaunchScope as h, AcpElicitationContext as i, AcpJsonRpcMessage as l, AcpProcessLaunch as m, SystemPromptOption as n, AcpElicitationMode as o, AcpProcessExit as p, AcpClientOptions as r, AcpElicitationRequest as s, SessionAgentOptions as t, AcpPermissionDecision as u, AcpProcessStarted as v, PermissionStats as w, NonInteractivePermissionPolicy as x, AuthPolicy as y };
-//# sourceMappingURL=session-options-DQlqgFv2.d.ts.map
+//# sourceMappingURL=session-options-BlnP3WAc.d.ts.map

package/dist/session-options-BlnP3WAc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-options-BlnP3WAc.d.ts","names":[],"sources":["../src/prompt-content.ts","../src/types.ts","../src/runtime/engine/session-options.ts"],"mappings":";KAEY,cAAc;KCgBd;EACV;EACA,KAAK;EACL,cAAc;;KAGJ;EACN;EAAqB;;EACrB;;EACA;;EACA;;EACA;;EACA;;KAEM,wBACV,SAAS,sBACT;EAAW,QAAQ;MAChB,QAAQ;cAEA;KACD,6BAA6B;KAC7B,wBAAwB;KAExB;;EAEV,WAAW;;EAEX,QAAQ;;KAGL;EACH,QAAQ;;KAGE;EAEN;EACA,UAAU,eAAe;IACvB;EACD;IAAsB;EACtB;IAAqB;KAEhB,yBACV,SAAS,uBACT,SAAS,0BACN,QAAQ;cAiBA;KACD,yBAAyB;cAExB;KACD,qBAAqB;cAEpB;KACD,yCAAyC;cAExC;KACD,iCAAiC;KAEjC;EACV;EACA;EACA;EACA,gBAAgB;;KAGN;EACV;EACA;EACA;EACA;EACA;EACA;EACA,WAAW;EACX;EACA;EACA;EACA;;KAQU,oBAAoB;KACpB;KAyCA;EACV;EACA;EACA;EACA;;KAGU;KAUA;KAEA;EACV,QAAQ;EACR,QAAQ;EACR;EACA;EACA;;KAGU;EACV;EACA;EACA;EACA;EACA;EACA;;KAgDU,wBACR;EAAW;KACX;EAAW;EAAyB;KACpC;EAAW;EAAuB;;KAE1B,mBAAmB;EAC7B;EACA,OAAO;EACP;EACA;EACA;;KAGU,oBAAoB,mBAC9B;EACE;EACA;;KAGQ,yBAAyB,mBACnC;EACE;EACA;;KAGQ,iBAAiB,oBAC3B;EACE;EACA,QAAQ,OAAO;EACf;;;;;;;;;KAUQ;EACV,iBAAiB,QAAQ,qBAAqB;EAC9C,aAAa,SAAS,sBAAsB;EAC5C,iBAAiB,SAAS,2BAA2B;EACrD,UAAU,MAAM,mBAAmB;;KAGzB;EACV;EACA;;EAEA,kBAAkB;;;;;EAKlB;;EAEA;EACA;EACA,aAAa;EACb,gBAAgB;EAChB,4BAA4B;EAC5B,mBAAmB;EACnB,kBAAkB;EAClB,aAAa;EACb;EACA;EACA,4BAA4B;EAC5B,mBAAmB;EACnB,qBAAqB;EACrB;EACA;EACA;IACE;IACA;IACA;IACA;MAA0B;;IAC1B,MAAM;;EAER,gBAAgB,WAAW,qBAAqB,SAAS;EACzD,sBAAsB,WAAW,qBAAqB,SAAS;EAC/D,mBAAmB,cAAc;EACjC,qBAAqB,WAAW;EAChC,0BAA0B,OAAO;EACjC,sBAAsB;;cAGX;KACD;EACV;EACA;EACA;IACE;IACA;;;KAIQ;EACV;EACA;;KAGU;EAEN;;EAGA;IACE;IACA;;;EAIF,OAAO;;EAGP,OAAO;;KAGD;EACV;EACA;EACA;EACA;EACA;EACA;;KAGU;EAEN;;EAGA,OAAO;;KAGD;EACV;EACA;EACA;EACA,SAAS;EACT;;KAGU;EAEN;;EAGA;IACE;IACA;;;EAIF;;EAGA,SAAS;;KAGH;EACV;EACA,SAAS;;KAGC;EACV,SAAS;EACT,cAAc,eAAe;EAC7B;;KAGU;EAEN,MAAM;;EAGN,OAAO;;KAID;EACV;EACA;EACA;EACA;EACA;EACA;;KAGU;EACV;EACA;;KAGU;EACV;EACA;EACA;;KAYU;EACV;EACA;EACA;EACA;EACA,yBAAyB;EACzB;EACA;EACA,wBAAwB;EACxB;EACA,qBAAqB;EACrB,iBAAiB;EACjB;IACE;IACA;IACA;IACA;MAA2B;;IAC3B,MAAM;;;KAIE;EACV;EACA;EACA;EACA;;KAGU;EACV,eAAe;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,UAAU;EACV;EACA;EACA;EACA;EACA;EACA;EACA,sBAAsB,OAAO;EAC7B;EACA;EACA;EACA,oBAAoB;EACpB;EACA,UAAU;EACV;EACA,wBAAwB;EACxB,kBAAkB;EAClB,qBAAqB,eAAe;EACpC,OAAO;EACP,eAAe;;KC7fL;EAAgC;;KAEhC;EACV;EACA;EACA;EACA,eAAe;;;;;;;;;;EAUf,MAAM"}

package/dist/{session-watch-CpYYtV62.js → session-watch-BnIxHQrU.js}

@@ -1,8 +1,8 @@
-import { i as JsonMessageSanitizer, t as createOutputFormatter } from "./output-B1Srnvko.js";
-import { it as isAcpJsonRpcMessage, lt as parsePromptStopReason } from "./ipc-D2BC99hf.js";
-import { t as watchSession } from "./watch-Db2D1eYN.js";
+import { i as JsonMessageSanitizer, t as createOutputFormatter } from "./output-mqRHzGzM.js";
+import { it as isAcpJsonRpcMessage, lt as parsePromptStopReason } from "./ipc-BbYFsKOj.js";
+import { t as watchSession } from "./watch-bQXyUy3z.js";
 import { once } from "node:events";
-//#region src/cli/session-watch.ts
+// src/cli/session-watch.ts
 function watchRenderer(policy) {
 	const chunks = [];
 	const stdout = { write: (chunk) => {
@@ -70,7 +70,6 @@ async function runSessionWatch(record, options) {
 	}
 	if (outputError) throw outputError;
 }
-//#endregion
 export { runSessionWatch };
 
-//# sourceMappingURL=session-watch-CpYYtV62.js.map
+//# sourceMappingURL=session-watch-BnIxHQrU.js.map

package/dist/{session-watch-CpYYtV62.js.map → session-watch-BnIxHQrU.js.map}

@@ -1 +1 @@
-{"version":3,"file":"session-watch-CpYYtV62.js","names":[],"sources":["../src/cli/session-watch.ts"],"sourcesContent":["import { once } from \"node:events\";\nimport { isAcpJsonRpcMessage, parsePromptStopReason } from \"../acp/jsonrpc.js\";\nimport type { SessionWatchEvent } from \"../session/journal.js\";\nimport { watchSession } from \"../session/watch.js\";\nimport type { OutputFormatter, OutputPolicy, SessionRecord } from \"../types.js\";\nimport { JsonMessageSanitizer } from \"./output/json-formatter.js\";\nimport { createOutputFormatter } from \"./output/output.js\";\n\nfunction watchRenderer(policy: OutputPolicy): (event: SessionWatchEvent) => string[] {\n  const chunks: string[] = [];\n  const stdout = {\n    write: (chunk: string) => {\n      chunks.push(chunk);\n    },\n  };\n  let sanitizer = new JsonMessageSanitizer(policy.suppressReads, true);\n  let formatter = createOutputFormatter(policy.format, { stdout });\n  return (event) => {\n    chunks.length = 0;\n    if (event.type === \"turn_started\") {\n      sanitizer = new JsonMessageSanitizer(policy.suppressReads, true);\n      formatter = createOutputFormatter(policy.format, { stdout });\n    }\n    if (policy.format === \"json\") {\n      chunks.push(\n        JSON.stringify(\n          event.type === \"message\"\n            ? { ...event, message: sanitizer.sanitize(event.message) }\n            : event,\n        ) + \"\\n\",\n      );\n    } else if (event.type === \"message\") {\n      renderWatchMessage(event, sanitizer, formatter, policy.format === \"quiet\");\n    } else {\n      if (event.type === \"turn_result\") {\n        formatter.flush();\n      }\n      if (policy.format !== \"quiet\") {\n        chunks.push(watchLifecycleLine(event));\n      }\n    }\n    return chunks;\n  };\n}\n\nfunction renderWatchMessage(\n  event: Extract<SessionWatchEvent, { type: \"message\" }>,\n  sanitizer: JsonMessageSanitizer,\n  formatter: OutputFormatter,\n  quiet: boolean,\n): void {\n  const message = sanitizer.sanitize(event.message);\n  if (!isAcpJsonRpcMessage(message)) {\n    throw new Error(\"Invalid sanitized session message\");\n  }\n  if (quiet || parsePromptStopReason(message) === undefined) {\n    formatter.onAcpMessage(message);\n  }\n}\n\nfunction watchLifecycleLine(event: Exclude<SessionWatchEvent, { type: \"message\" }>): string {\n  if (event.type === \"turn_started\") {\n    return `\\n[${event.requestId}] started cursor=${event.cursor}\\n`;\n  }\n  const detail =\n    event.result.status === \"failed\" ? event.result.error.message : event.result.stopReason;\n  return `\\n[${event.requestId}] ${event.result.status}${detail ? `: ${detail}` : \"\"} cursor=${event.cursor}\\n`;\n}\n\nexport async function runSessionWatch(\n  record: SessionRecord,\n  options: { cursor?: string; policy: OutputPolicy },\n): Promise<void> {\n  const stopped = new AbortController();\n  let outputError: Error | undefined;\n  const stop = () => stopped.abort();\n  const onOutputError = (error: Error) => {\n    if ((error as NodeJS.ErrnoException).code !== \"EPIPE\") {\n      outputError = error;\n    }\n    stop();\n  };\n  const render = watchRenderer(options.policy);\n  process.on(\"SIGINT\", stop);\n  process.on(\"SIGTERM\", stop);\n  process.on(\"SIGHUP\", stop);\n  process.stdout.on(\"error\", onOutputError);\n  try {\n    for await (const event of watchSession({\n      record,\n      cursor: options.cursor,\n      signal: stopped.signal,\n    })) {\n      for (const chunk of render(event)) {\n        if (stopped.signal.aborted) {\n          break;\n        }\n        if (!process.stdout.write(chunk)) {\n          await once(process.stdout, \"drain\", { signal: stopped.signal });\n        }\n      }\n    }\n  } catch (error) {\n    if (!stopped.signal.aborted) {\n      throw error;\n    }\n  } finally {\n    process.off(\"SIGINT\", stop);\n    process.off(\"SIGTERM\", stop);\n    process.off(\"SIGHUP\", stop);\n    process.stdout.off(\"error\", onOutputError);\n  }\n  if (outputError) {\n    throw outputError;\n  }\n}\n"],"mappings":";;;;;AAQA,SAAS,cAAc,QAA8D;CACnF,MAAM,SAAmB,CAAC;CAC1B,MAAM,SAAS,EACb,QAAQ,UAAkB;EACxB,OAAO,KAAK,KAAK;CACnB,EACF;CACA,IAAI,YAAY,IAAI,qBAAqB,OAAO,eAAe,IAAI;CACnE,IAAI,YAAY,sBAAsB,OAAO,QAAQ,EAAE,OAAO,CAAC;CAC/D,QAAQ,UAAU;EAChB,OAAO,SAAS;EAChB,IAAI,MAAM,SAAS,gBAAgB;GACjC,YAAY,IAAI,qBAAqB,OAAO,eAAe,IAAI;GAC/D,YAAY,sBAAsB,OAAO,QAAQ,EAAE,OAAO,CAAC;EAC7D;EACA,IAAI,OAAO,WAAW,QACpB,OAAO,KACL,KAAK,UACH,MAAM,SAAS,YACX;GAAE,GAAG;GAAO,SAAS,UAAU,SAAS,MAAM,OAAO;EAAE,IACvD,KACN,IAAI,IACN;OACK,IAAI,MAAM,SAAS,WACxB,mBAAmB,OAAO,WAAW,WAAW,OAAO,WAAW,OAAO;OACpE;GACL,IAAI,MAAM,SAAS,eACjB,UAAU,MAAM;GAElB,IAAI,OAAO,WAAW,SACpB,OAAO,KAAK,mBAAmB,KAAK,CAAC;EAEzC;EACA,OAAO;CACT;AACF;AAEA,SAAS,mBACP,OACA,WACA,WACA,OACM;CACN,MAAM,UAAU,UAAU,SAAS,MAAM,OAAO;CAChD,IAAI,CAAC,oBAAoB,OAAO,GAC9B,MAAM,IAAI,MAAM,mCAAmC;CAErD,IAAI,SAAS,sBAAsB,OAAO,MAAM,KAAA,GAC9C,UAAU,aAAa,OAAO;AAElC;AAEA,SAAS,mBAAmB,OAAgE;CAC1F,IAAI,MAAM,SAAS,gBACjB,OAAO,MAAM,MAAM,UAAU,mBAAmB,MAAM,OAAO;CAE/D,MAAM,SACJ,MAAM,OAAO,WAAW,WAAW,MAAM,OAAO,MAAM,UAAU,MAAM,OAAO;CAC/E,OAAO,MAAM,MAAM,UAAU,IAAI,MAAM,OAAO,SAAS,SAAS,KAAK,WAAW,GAAG,UAAU,MAAM,OAAO;AAC5G;AAEA,eAAsB,gBACpB,QACA,SACe;CACf,MAAM,UAAU,IAAI,gBAAgB;CACpC,IAAI;CACJ,MAAM,aAAa,QAAQ,MAAM;CACjC,MAAM,iBAAiB,UAAiB;EACtC,IAAK,MAAgC,SAAS,SAC5C,cAAc;EAEhB,KAAK;CACP;CACA,MAAM,SAAS,cAAc,QAAQ,MAAM;CAC3C,QAAQ,GAAG,UAAU,IAAI;CACzB,QAAQ,GAAG,WAAW,IAAI;CAC1B,QAAQ,GAAG,UAAU,IAAI;CACzB,QAAQ,OAAO,GAAG,SAAS,aAAa;CACxC,IAAI;EACF,WAAW,MAAM,SAAS,aAAa;GACrC;GACA,QAAQ,QAAQ;GAChB,QAAQ,QAAQ;EAClB,CAAC,GACC,KAAK,MAAM,SAAS,OAAO,KAAK,GAAG;GACjC,IAAI,QAAQ,OAAO,SACjB;GAEF,IAAI,CAAC,QAAQ,OAAO,MAAM,KAAK,GAC7B,MAAM,KAAK,QAAQ,QAAQ,SAAS,EAAE,QAAQ,QAAQ,OAAO,CAAC;EAElE;CAEJ,SAAS,OAAO;EACd,IAAI,CAAC,QAAQ,OAAO,SAClB,MAAM;CAEV,UAAU;EACR,QAAQ,IAAI,UAAU,IAAI;EAC1B,QAAQ,IAAI,WAAW,IAAI;EAC3B,QAAQ,IAAI,UAAU,IAAI;EAC1B,QAAQ,OAAO,IAAI,SAAS,aAAa;CAC3C;CACA,IAAI,aACF,MAAM;AAEV"}
+{"version":3,"file":"session-watch-BnIxHQrU.js","names":[],"sources":["../src/cli/session-watch.ts"],"sourcesContent":["import { once } from \"node:events\";\nimport { isAcpJsonRpcMessage, parsePromptStopReason } from \"../acp/jsonrpc.js\";\nimport type { SessionWatchEvent } from \"../session/journal.js\";\nimport { watchSession } from \"../session/watch.js\";\nimport type { OutputFormatter, OutputPolicy, SessionRecord } from \"../types.js\";\nimport { JsonMessageSanitizer } from \"./output/json-formatter.js\";\nimport { createOutputFormatter } from \"./output/output.js\";\n\nfunction watchRenderer(policy: OutputPolicy): (event: SessionWatchEvent) => string[] {\n  const chunks: string[] = [];\n  const stdout = {\n    write: (chunk: string) => {\n      chunks.push(chunk);\n    },\n  };\n  let sanitizer = new JsonMessageSanitizer(policy.suppressReads, true);\n  let formatter = createOutputFormatter(policy.format, { stdout });\n  return (event) => {\n    chunks.length = 0;\n    if (event.type === \"turn_started\") {\n      sanitizer = new JsonMessageSanitizer(policy.suppressReads, true);\n      formatter = createOutputFormatter(policy.format, { stdout });\n    }\n    if (policy.format === \"json\") {\n      chunks.push(\n        JSON.stringify(\n          event.type === \"message\"\n            ? { ...event, message: sanitizer.sanitize(event.message) }\n            : event,\n        ) + \"\\n\",\n      );\n    } else if (event.type === \"message\") {\n      renderWatchMessage(event, sanitizer, formatter, policy.format === \"quiet\");\n    } else {\n      if (event.type === \"turn_result\") {\n        formatter.flush();\n      }\n      if (policy.format !== \"quiet\") {\n        chunks.push(watchLifecycleLine(event));\n      }\n    }\n    return chunks;\n  };\n}\n\nfunction renderWatchMessage(\n  event: Extract<SessionWatchEvent, { type: \"message\" }>,\n  sanitizer: JsonMessageSanitizer,\n  formatter: OutputFormatter,\n  quiet: boolean,\n): void {\n  const message = sanitizer.sanitize(event.message);\n  if (!isAcpJsonRpcMessage(message)) {\n    throw new Error(\"Invalid sanitized session message\");\n  }\n  if (quiet || parsePromptStopReason(message) === undefined) {\n    formatter.onAcpMessage(message);\n  }\n}\n\nfunction watchLifecycleLine(event: Exclude<SessionWatchEvent, { type: \"message\" }>): string {\n  if (event.type === \"turn_started\") {\n    return `\\n[${event.requestId}] started cursor=${event.cursor}\\n`;\n  }\n  const detail =\n    event.result.status === \"failed\" ? event.result.error.message : event.result.stopReason;\n  return `\\n[${event.requestId}] ${event.result.status}${detail ? `: ${detail}` : \"\"} cursor=${event.cursor}\\n`;\n}\n\nexport async function runSessionWatch(\n  record: SessionRecord,\n  options: { cursor?: string; policy: OutputPolicy },\n): Promise<void> {\n  const stopped = new AbortController();\n  let outputError: Error | undefined;\n  const stop = () => stopped.abort();\n  const onOutputError = (error: Error) => {\n    if ((error as NodeJS.ErrnoException).code !== \"EPIPE\") {\n      outputError = error;\n    }\n    stop();\n  };\n  const render = watchRenderer(options.policy);\n  process.on(\"SIGINT\", stop);\n  process.on(\"SIGTERM\", stop);\n  process.on(\"SIGHUP\", stop);\n  process.stdout.on(\"error\", onOutputError);\n  try {\n    for await (const event of watchSession({\n      record,\n      cursor: options.cursor,\n      signal: stopped.signal,\n    })) {\n      for (const chunk of render(event)) {\n        if (stopped.signal.aborted) {\n          break;\n        }\n        if (!process.stdout.write(chunk)) {\n          await once(process.stdout, \"drain\", { signal: stopped.signal });\n        }\n      }\n    }\n  } catch (error) {\n    if (!stopped.signal.aborted) {\n      throw error;\n    }\n  } finally {\n    process.off(\"SIGINT\", stop);\n    process.off(\"SIGTERM\", stop);\n    process.off(\"SIGHUP\", stop);\n    process.stdout.off(\"error\", onOutputError);\n  }\n  if (outputError) {\n    throw outputError;\n  }\n}\n"],"mappings":";;;;;AAQA,SAAS,cAAc,QAA8D;CACnF,MAAM,SAAmB,CAAC;CAC1B,MAAM,SAAS,EACb,QAAQ,UAAkB;EACxB,OAAO,KAAK,KAAK;CACnB,EACF;CACA,IAAI,YAAY,IAAI,qBAAqB,OAAO,eAAe,IAAI;CACnE,IAAI,YAAY,sBAAsB,OAAO,QAAQ,EAAE,OAAO,CAAC;CAC/D,QAAQ,UAAU;EAChB,OAAO,SAAS;EAChB,IAAI,MAAM,SAAS,gBAAgB;GACjC,YAAY,IAAI,qBAAqB,OAAO,eAAe,IAAI;GAC/D,YAAY,sBAAsB,OAAO,QAAQ,EAAE,OAAO,CAAC;EAC7D;EACA,IAAI,OAAO,WAAW,QACpB,OAAO,KACL,KAAK,UACH,MAAM,SAAS,YACX;GAAE,GAAG;GAAO,SAAS,UAAU,SAAS,MAAM,OAAO;EAAE,IACvD,KACN,IAAI,IACN;OACK,IAAI,MAAM,SAAS,WACxB,mBAAmB,OAAO,WAAW,WAAW,OAAO,WAAW,OAAO;OACpE;GACL,IAAI,MAAM,SAAS,eACjB,UAAU,MAAM;GAElB,IAAI,OAAO,WAAW,SACpB,OAAO,KAAK,mBAAmB,KAAK,CAAC;EAEzC;EACA,OAAO;CACT;AACF;AAEA,SAAS,mBACP,OACA,WACA,WACA,OACM;CACN,MAAM,UAAU,UAAU,SAAS,MAAM,OAAO;CAChD,IAAI,CAAC,oBAAoB,OAAO,GAC9B,MAAM,IAAI,MAAM,mCAAmC;CAErD,IAAI,SAAS,sBAAsB,OAAO,MAAM,KAAA,GAC9C,UAAU,aAAa,OAAO;AAElC;AAEA,SAAS,mBAAmB,OAAgE;CAC1F,IAAI,MAAM,SAAS,gBACjB,OAAO,MAAM,MAAM,UAAU,mBAAmB,MAAM,OAAO;CAE/D,MAAM,SACJ,MAAM,OAAO,WAAW,WAAW,MAAM,OAAO,MAAM,UAAU,MAAM,OAAO;CAC/E,OAAO,MAAM,MAAM,UAAU,IAAI,MAAM,OAAO,SAAS,SAAS,KAAK,WAAW,GAAG,UAAU,MAAM,OAAO;AAC5G;AAEA,eAAsB,gBACpB,QACA,SACe;CACf,MAAM,UAAU,IAAI,gBAAgB;CACpC,IAAI;CACJ,MAAM,aAAa,QAAQ,MAAM;CACjC,MAAM,iBAAiB,UAAiB;EACtC,IAAK,MAAgC,SAAS,SAC5C,cAAc;EAEhB,KAAK;CACP;CACA,MAAM,SAAS,cAAc,QAAQ,MAAM;CAC3C,QAAQ,GAAG,UAAU,IAAI;CACzB,QAAQ,GAAG,WAAW,IAAI;CAC1B,QAAQ,GAAG,UAAU,IAAI;CACzB,QAAQ,OAAO,GAAG,SAAS,aAAa;CACxC,IAAI;EACF,WAAW,MAAM,SAAS,aAAa;GACrC;GACA,QAAQ,QAAQ;GAChB,QAAQ,QAAQ;EAClB,CAAC,GACC,KAAK,MAAM,SAAS,OAAO,KAAK,GAAG;GACjC,IAAI,QAAQ,OAAO,SACjB;GAEF,IAAI,CAAC,QAAQ,OAAO,MAAM,KAAK,GAC7B,MAAM,KAAK,QAAQ,QAAQ,SAAS,EAAE,QAAQ,QAAQ,OAAO,CAAC;EAElE;CAEJ,SAAS,OAAO;EACd,IAAI,CAAC,QAAQ,OAAO,SAClB,MAAM;CAEV,UAAU;EACR,QAAQ,IAAI,UAAU,IAAI;EAC1B,QAAQ,IAAI,WAAW,IAAI;EAC3B,QAAQ,IAAI,UAAU,IAAI;EAC1B,QAAQ,OAAO,IAAI,SAAS,aAAa;CAC3C;CACA,IAAI,aACF,MAAM;AAEV"}

package/dist/{watch-Db2D1eYN.js → watch-bQXyUy3z.js}

@@ -1,5 +1,5 @@
-import { E as observeProcessIncarnation, J as SessionWatchError, L as readSessionRecord, Y as watchSession$1, Zt as SessionNotFoundError, l as readQueueOwnerRecord } from "./ipc-D2BC99hf.js";
-//#region src/session/watch.ts
+import { E as observeProcessIncarnation, J as SessionWatchError, L as readSessionRecord, Y as watchSession$1, Zt as SessionNotFoundError, l as readQueueOwnerRecord } from "./ipc-BbYFsKOj.js";
+// src/session/watch.ts
 const OWNER_OBSERVATION_REUSE_MS = 1e3;
 function reuseObservation(cached) {
 	if (!cached) return false;
@@ -79,7 +79,6 @@ function watchSession(options) {
 		})[Symbol.asyncIterator]();
 	} };
 }
-//#endregion
 export { watchSession as t };
 
-//# sourceMappingURL=watch-Db2D1eYN.js.map
+//# sourceMappingURL=watch-bQXyUy3z.js.map

package/dist/{watch-Db2D1eYN.js.map → watch-bQXyUy3z.js.map}

@@ -1 +1 @@
-{"version":3,"file":"watch-Db2D1eYN.js","names":["watchJournal"],"sources":["../src/session/watch.ts"],"sourcesContent":["import { SessionNotFoundError } from \"../errors.js\";\nimport { observeProcessIncarnation, type ProcessIncarnation } from \"../process-identity.js\";\nimport type { SessionRecord } from \"../types.js\";\nimport {\n  SessionWatchError,\n  watchSession as watchJournal,\n  type SessionWatchEvent,\n} from \"./journal.js\";\nimport { readSessionRecord } from \"./persistence.js\";\nimport { readQueueOwnerRecord, type QueueOwnerRecord } from \"./queue/lease-store.js\";\n\nconst OWNER_OBSERVATION_REUSE_MS = 1_000;\n\ntype WatchObservation = {\n  ownerKey: string | null;\n  incarnation?: { state: ProcessIncarnation; checkedAt: number; decisionPending: boolean };\n  missingRequest: string | null;\n};\n\nfunction reuseObservation(cached: WatchObservation[\"incarnation\"]): boolean {\n  if (!cached) {\n    return false;\n  }\n  // A query first forces a journal reread, then gets one decision pass even\n  // after a slow consumer. Otherwise repeated probes can defer errors forever.\n  if (cached.decisionPending) {\n    cached.decisionPending = false;\n    return true;\n  }\n  return (\n    cached.state === \"gone\" || performance.now() - cached.checkedAt < OWNER_OBSERVATION_REUSE_MS\n  );\n}\n\nfunction selectOwner(owner: QueueOwnerRecord | undefined, observation: WatchObservation): boolean {\n  // Heartbeats and retirement receipts do not change the owner's incarnation.\n  // Keep only this small key, never the potentially large descendant receipt.\n  const key = owner\n    ? JSON.stringify([owner.pid, owner.ownerGeneration, owner.processIdentity])\n    : null;\n  if (key === observation.ownerKey) {\n    return false;\n  }\n  observation.ownerKey = key;\n  observation.incarnation = undefined;\n  observation.missingRequest = null;\n  return true;\n}\n\nasync function runningOwner(\n  recordId: string,\n  observation: WatchObservation,\n): Promise<{ owner?: QueueOwnerRecord; queried: boolean }> {\n  let owner = await readQueueOwnerRecord(recordId);\n  selectOwner(owner, observation);\n  if (!owner) {\n    return { queried: false };\n  }\n  const cached = observation.incarnation;\n  let queried = false;\n  // A verified departed incarnation cannot return. Cache that fact even for\n  // idle watches; other observations are bounded independently of journal polls.\n  if (!reuseObservation(cached)) {\n    queried = true;\n    // Observation cadence must not truncate the canonical provider's query budget.\n    const state = await observeProcessIncarnation(owner.pid, owner.processIdentity);\n    owner = await readQueueOwnerRecord(recordId);\n    if (selectOwner(owner, observation)) {\n      // A replacement may have settled or recovered the journal during the\n      // query. Let the reader revisit it before interpreting the old result.\n      return { owner, queried };\n    }\n    observation.incarnation = { state, checkedAt: performance.now(), decisionPending: true };\n  }\n  return { owner: observation.incarnation?.state === \"gone\" ? undefined : owner, queried };\n}\n\nasync function continueWatching(\n  recordId: string,\n  pendingRequestId: string | null,\n  observation: WatchObservation,\n): Promise<boolean> {\n  const { owner, queried } = await runningOwner(recordId, observation);\n  if (queried) {\n    // A probe can outlast a journal update, including replacement by an older\n    // owner. Revisit the journal before any unsupported/unknown/end decision.\n    observation.missingRequest = owner ? null : pendingRequestId;\n    return true;\n  }\n  if (owner) {\n    if (!owner.sessionWatch) {\n      throw new SessionWatchError(\n        \"WATCH_OWNER_UNSUPPORTED\",\n        \"This running session owner predates passive watching. Let it expire when idle or explicitly close the session before starting new work.\",\n      );\n    }\n    observation.missingRequest = null;\n    return true;\n  }\n  if (pendingRequestId && pendingRequestId === observation.missingRequest) {\n    throw new SessionWatchError(\n      \"WATCH_OUTCOME_UNKNOWN\",\n      `Session owner ended without a settled result for request ${pendingRequestId}; its outcome is unknown. Resume watching from the last cursor after recovery, and do not automatically replay the prompt.`,\n    );\n  }\n  observation.missingRequest = pendingRequestId;\n  if (pendingRequestId) {\n    return true;\n  }\n  return await isSessionOpen(recordId);\n}\n\nasync function isSessionOpen(recordId: string): Promise<boolean> {\n  const record = await readSessionRecord(recordId);\n  if (!record || record.acpxRecordId !== recordId) {\n    throw new SessionNotFoundError(recordId);\n  }\n  return record.closed !== true;\n}\n\nexport function watchSession(options: {\n  record: SessionRecord | Promise<SessionRecord>;\n  cursor?: string;\n  signal?: AbortSignal;\n}): AsyncIterable<SessionWatchEvent> {\n  return {\n    [Symbol.asyncIterator]() {\n      const observation: WatchObservation = { ownerKey: null, missingRequest: null };\n      return watchJournal({\n        ...options,\n        continueWatching: (record, requestId) =>\n          continueWatching(record.acpxRecordId, requestId, observation),\n      })[Symbol.asyncIterator]();\n    },\n  };\n}\n"],"mappings":";;AAWA,MAAM,6BAA6B;AAQnC,SAAS,iBAAiB,QAAkD;CAC1E,IAAI,CAAC,QACH,OAAO;CAIT,IAAI,OAAO,iBAAiB;EAC1B,OAAO,kBAAkB;EACzB,OAAO;CACT;CACA,OACE,OAAO,UAAU,UAAU,YAAY,IAAI,IAAI,OAAO,YAAY;AAEtE;AAEA,SAAS,YAAY,OAAqC,aAAwC;CAGhG,MAAM,MAAM,QACR,KAAK,UAAU;EAAC,MAAM;EAAK,MAAM;EAAiB,MAAM;CAAe,CAAC,IACxE;CACJ,IAAI,QAAQ,YAAY,UACtB,OAAO;CAET,YAAY,WAAW;CACvB,YAAY,cAAc,KAAA;CAC1B,YAAY,iBAAiB;CAC7B,OAAO;AACT;AAEA,eAAe,aACb,UACA,aACyD;CACzD,IAAI,QAAQ,MAAM,qBAAqB,QAAQ;CAC/C,YAAY,OAAO,WAAW;CAC9B,IAAI,CAAC,OACH,OAAO,EAAE,SAAS,MAAM;CAE1B,MAAM,SAAS,YAAY;CAC3B,IAAI,UAAU;CAGd,IAAI,CAAC,iBAAiB,MAAM,GAAG;EAC7B,UAAU;EAEV,MAAM,QAAQ,MAAM,0BAA0B,MAAM,KAAK,MAAM,eAAe;EAC9E,QAAQ,MAAM,qBAAqB,QAAQ;EAC3C,IAAI,YAAY,OAAO,WAAW,GAGhC,OAAO;GAAE;GAAO;EAAQ;EAE1B,YAAY,cAAc;GAAE;GAAO,WAAW,YAAY,IAAI;GAAG,iBAAiB;EAAK;CACzF;CACA,OAAO;EAAE,OAAO,YAAY,aAAa,UAAU,SAAS,KAAA,IAAY;EAAO;CAAQ;AACzF;AAEA,eAAe,iBACb,UACA,kBACA,aACkB;CAClB,MAAM,EAAE,OAAO,YAAY,MAAM,aAAa,UAAU,WAAW;CACnE,IAAI,SAAS;EAGX,YAAY,iBAAiB,QAAQ,OAAO;EAC5C,OAAO;CACT;CACA,IAAI,OAAO;EACT,IAAI,CAAC,MAAM,cACT,MAAM,IAAI,kBACR,2BACA,yIACF;EAEF,YAAY,iBAAiB;EAC7B,OAAO;CACT;CACA,IAAI,oBAAoB,qBAAqB,YAAY,gBACvD,MAAM,IAAI,kBACR,yBACA,4DAA4D,iBAAiB,2HAC/E;CAEF,YAAY,iBAAiB;CAC7B,IAAI,kBACF,OAAO;CAET,OAAO,MAAM,cAAc,QAAQ;AACrC;AAEA,eAAe,cAAc,UAAoC;CAC/D,MAAM,SAAS,MAAM,kBAAkB,QAAQ;CAC/C,IAAI,CAAC,UAAU,OAAO,iBAAiB,UACrC,MAAM,IAAI,qBAAqB,QAAQ;CAEzC,OAAO,OAAO,WAAW;AAC3B;AAEA,SAAgB,aAAa,SAIQ;CACnC,OAAO,EACL,CAAC,OAAO,iBAAiB;EACvB,MAAM,cAAgC;GAAE,UAAU;GAAM,gBAAgB;EAAK;EAC7E,OAAOA,eAAa;GAClB,GAAG;GACH,mBAAmB,QAAQ,cACzB,iBAAiB,OAAO,cAAc,WAAW,WAAW;EAChE,CAAC,CAAC,CAAC,OAAO,cAAc,CAAC;CAC3B,EACF;AACF"}
+{"version":3,"file":"watch-bQXyUy3z.js","names":["watchJournal"],"sources":["../src/session/watch.ts"],"sourcesContent":["import { SessionNotFoundError } from \"../errors.js\";\nimport { observeProcessIncarnation, type ProcessIncarnation } from \"../process-identity.js\";\nimport type { SessionRecord } from \"../types.js\";\nimport {\n  SessionWatchError,\n  watchSession as watchJournal,\n  type SessionWatchEvent,\n} from \"./journal.js\";\nimport { readSessionRecord } from \"./persistence.js\";\nimport { readQueueOwnerRecord, type QueueOwnerRecord } from \"./queue/lease-store.js\";\n\nconst OWNER_OBSERVATION_REUSE_MS = 1_000;\n\ntype WatchObservation = {\n  ownerKey: string | null;\n  incarnation?: { state: ProcessIncarnation; checkedAt: number; decisionPending: boolean };\n  missingRequest: string | null;\n};\n\nfunction reuseObservation(cached: WatchObservation[\"incarnation\"]): boolean {\n  if (!cached) {\n    return false;\n  }\n  // A query first forces a journal reread, then gets one decision pass even\n  // after a slow consumer. Otherwise repeated probes can defer errors forever.\n  if (cached.decisionPending) {\n    cached.decisionPending = false;\n    return true;\n  }\n  return (\n    cached.state === \"gone\" || performance.now() - cached.checkedAt < OWNER_OBSERVATION_REUSE_MS\n  );\n}\n\nfunction selectOwner(owner: QueueOwnerRecord | undefined, observation: WatchObservation): boolean {\n  // Heartbeats and retirement receipts do not change the owner's incarnation.\n  // Keep only this small key, never the potentially large descendant receipt.\n  const key = owner\n    ? JSON.stringify([owner.pid, owner.ownerGeneration, owner.processIdentity])\n    : null;\n  if (key === observation.ownerKey) {\n    return false;\n  }\n  observation.ownerKey = key;\n  observation.incarnation = undefined;\n  observation.missingRequest = null;\n  return true;\n}\n\nasync function runningOwner(\n  recordId: string,\n  observation: WatchObservation,\n): Promise<{ owner?: QueueOwnerRecord; queried: boolean }> {\n  let owner = await readQueueOwnerRecord(recordId);\n  selectOwner(owner, observation);\n  if (!owner) {\n    return { queried: false };\n  }\n  const cached = observation.incarnation;\n  let queried = false;\n  // A verified departed incarnation cannot return. Cache that fact even for\n  // idle watches; other observations are bounded independently of journal polls.\n  if (!reuseObservation(cached)) {\n    queried = true;\n    // Observation cadence must not truncate the canonical provider's query budget.\n    const state = await observeProcessIncarnation(owner.pid, owner.processIdentity);\n    owner = await readQueueOwnerRecord(recordId);\n    if (selectOwner(owner, observation)) {\n      // A replacement may have settled or recovered the journal during the\n      // query. Let the reader revisit it before interpreting the old result.\n      return { owner, queried };\n    }\n    observation.incarnation = { state, checkedAt: performance.now(), decisionPending: true };\n  }\n  return { owner: observation.incarnation?.state === \"gone\" ? undefined : owner, queried };\n}\n\nasync function continueWatching(\n  recordId: string,\n  pendingRequestId: string | null,\n  observation: WatchObservation,\n): Promise<boolean> {\n  const { owner, queried } = await runningOwner(recordId, observation);\n  if (queried) {\n    // A probe can outlast a journal update, including replacement by an older\n    // owner. Revisit the journal before any unsupported/unknown/end decision.\n    observation.missingRequest = owner ? null : pendingRequestId;\n    return true;\n  }\n  if (owner) {\n    if (!owner.sessionWatch) {\n      throw new SessionWatchError(\n        \"WATCH_OWNER_UNSUPPORTED\",\n        \"This running session owner predates passive watching. Let it expire when idle or explicitly close the session before starting new work.\",\n      );\n    }\n    observation.missingRequest = null;\n    return true;\n  }\n  if (pendingRequestId && pendingRequestId === observation.missingRequest) {\n    throw new SessionWatchError(\n      \"WATCH_OUTCOME_UNKNOWN\",\n      `Session owner ended without a settled result for request ${pendingRequestId}; its outcome is unknown. Resume watching from the last cursor after recovery, and do not automatically replay the prompt.`,\n    );\n  }\n  observation.missingRequest = pendingRequestId;\n  if (pendingRequestId) {\n    return true;\n  }\n  return await isSessionOpen(recordId);\n}\n\nasync function isSessionOpen(recordId: string): Promise<boolean> {\n  const record = await readSessionRecord(recordId);\n  if (!record || record.acpxRecordId !== recordId) {\n    throw new SessionNotFoundError(recordId);\n  }\n  return record.closed !== true;\n}\n\nexport function watchSession(options: {\n  record: SessionRecord | Promise<SessionRecord>;\n  cursor?: string;\n  signal?: AbortSignal;\n}): AsyncIterable<SessionWatchEvent> {\n  return {\n    [Symbol.asyncIterator]() {\n      const observation: WatchObservation = { ownerKey: null, missingRequest: null };\n      return watchJournal({\n        ...options,\n        continueWatching: (record, requestId) =>\n          continueWatching(record.acpxRecordId, requestId, observation),\n      })[Symbol.asyncIterator]();\n    },\n  };\n}\n"],"mappings":";;AAWA,MAAM,6BAA6B;AAQnC,SAAS,iBAAiB,QAAkD;CAC1E,IAAI,CAAC,QACH,OAAO;CAIT,IAAI,OAAO,iBAAiB;EAC1B,OAAO,kBAAkB;EACzB,OAAO;CACT;CACA,OACE,OAAO,UAAU,UAAU,YAAY,IAAI,IAAI,OAAO,YAAY;AAEtE;AAEA,SAAS,YAAY,OAAqC,aAAwC;CAGhG,MAAM,MAAM,QACR,KAAK,UAAU;EAAC,MAAM;EAAK,MAAM;EAAiB,MAAM;CAAe,CAAC,IACxE;CACJ,IAAI,QAAQ,YAAY,UACtB,OAAO;CAET,YAAY,WAAW;CACvB,YAAY,cAAc,KAAA;CAC1B,YAAY,iBAAiB;CAC7B,OAAO;AACT;AAEA,eAAe,aACb,UACA,aACyD;CACzD,IAAI,QAAQ,MAAM,qBAAqB,QAAQ;CAC/C,YAAY,OAAO,WAAW;CAC9B,IAAI,CAAC,OACH,OAAO,EAAE,SAAS,MAAM;CAE1B,MAAM,SAAS,YAAY;CAC3B,IAAI,UAAU;CAGd,IAAI,CAAC,iBAAiB,MAAM,GAAG;EAC7B,UAAU;EAEV,MAAM,QAAQ,MAAM,0BAA0B,MAAM,KAAK,MAAM,eAAe;EAC9E,QAAQ,MAAM,qBAAqB,QAAQ;EAC3C,IAAI,YAAY,OAAO,WAAW,GAGhC,OAAO;GAAE;GAAO;EAAQ;EAE1B,YAAY,cAAc;GAAE;GAAO,WAAW,YAAY,IAAI;GAAG,iBAAiB;EAAK;CACzF;CACA,OAAO;EAAE,OAAO,YAAY,aAAa,UAAU,SAAS,KAAA,IAAY;EAAO;CAAQ;AACzF;AAEA,eAAe,iBACb,UACA,kBACA,aACkB;CAClB,MAAM,EAAE,OAAO,YAAY,MAAM,aAAa,UAAU,WAAW;CACnE,IAAI,SAAS;EAGX,YAAY,iBAAiB,QAAQ,OAAO;EAC5C,OAAO;CACT;CACA,IAAI,OAAO;EACT,IAAI,CAAC,MAAM,cACT,MAAM,IAAI,kBACR,2BACA,yIACF;EAEF,YAAY,iBAAiB;EAC7B,OAAO;CACT;CACA,IAAI,oBAAoB,qBAAqB,YAAY,gBACvD,MAAM,IAAI,kBACR,yBACA,4DAA4D,iBAAiB,2HAC/E;CAEF,YAAY,iBAAiB;CAC7B,IAAI,kBACF,OAAO;CAET,OAAO,MAAM,cAAc,QAAQ;AACrC;AAEA,eAAe,cAAc,UAAoC;CAC/D,MAAM,SAAS,MAAM,kBAAkB,QAAQ;CAC/C,IAAI,CAAC,UAAU,OAAO,iBAAiB,UACrC,MAAM,IAAI,qBAAqB,QAAQ;CAEzC,OAAO,OAAO,WAAW;AAC3B;AAEA,SAAgB,aAAa,SAIQ;CACnC,OAAO,EACL,CAAC,OAAO,iBAAiB;EACvB,MAAM,cAAgC;GAAE,UAAU;GAAM,gBAAgB;EAAK;EAC7E,OAAOA,eAAa;GAClB,GAAG;GACH,mBAAmB,QAAQ,cACzB,iBAAiB,OAAO,cAAc,WAAW,WAAW;EAChE,CAAC,CAAC,CAAC,OAAO,cAAc,CAAC;CAC3B,EACF;AACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "acpx",
-  "version": "0.20.0",
+  "version": "0.21.1",
   "description": "Headless CLI client for the Agent Client Protocol (ACP) — talk to coding agents from the command line",
   "keywords": [
     "acp",
@@ -81,39 +81,39 @@
     "viewer:typecheck": "tsc -p examples/flows/replay-viewer/tsconfig.json --noEmit && tsc -p examples/flows/replay-viewer/tsconfig.server.json --noEmit"
   },
   "dependencies": {
-    "@agentclientprotocol/sdk": "^1.5.0",
-    "@openclaw/fs-safe": "^0.26.7",
+    "@agentclientprotocol/sdk": "^1.9.0",
+    "@openclaw/fs-safe": "^0.26.13",
     "commander": "^15.0.0",
     "skillflag": "^0.2.1",
     "tsx": "^4.23.15",
-    "zod": "^4.6.5"
+    "zod": "^4.6.7"
   },
   "devDependencies": {
-    "@stryker-mutator/core": "^10.0.0",
-    "@types/node": "^26.6.2",
+    "@stryker-mutator/core": "^10.1.1",
+    "@types/node": "^26.6.5",
     "@types/react": "^19.3.0",
     "@types/react-dom": "^19.3.0",
     "@types/react-test-renderer": "^19.3.0",
-    "@types/ws": "^8.18.1",
+    "@types/ws": "^8.18.2",
     "@typescript/native": "npm:typescript@^7.0.2",
-    "@vitejs/plugin-react": "^6.1.1",
-    "@xyflow/react": "^12.11.6",
+    "@vitejs/plugin-react": "^6.1.2",
+    "@xyflow/react": "^12.12.0",
     "c8": "^12.0.0",
     "elkjs": "^0.12.0",
     "fast-json-patch": "^3.1.1",
     "husky": "^9.1.7",
-    "lint-staged": "^17.5.1",
-    "markdownlint-cli2": "^0.23.3",
-    "oxfmt": "^0.73.0",
-    "oxlint": "^1.85.0",
-    "oxlint-tsgolint": "^7.0.2002",
-    "react": "^19.3.0",
-    "react-dom": "^19.3.0",
-    "react-test-renderer": "^19.3.0",
-    "tsdown": "^0.23.0",
+    "lint-staged": "^17.6.0",
+    "markdownlint-cli2": "^0.24.0",
+    "oxfmt": "^0.74.0",
+    "oxlint": "^1.89.0",
+    "oxlint-tsgolint": "^7.0.2005",
+    "react": "^19.3.1",
+    "react-dom": "^19.3.1",
+    "react-test-renderer": "^19.3.1",
+    "tsdown": "^0.23.2",
     "typescript": "npm:@typescript/typescript6@^6.0.2",
-    "vite": "^8.3.1",
-    "ws": "^8.21.3"
+    "vite": "^8.3.5",
+    "ws": "^8.22.0"
   },
   "lint-staged": {
     "*.{js,ts}": [

package/skills/acpx/SKILL.md

@@ -117,6 +117,7 @@ Rules:
 - Default agent is `codex` for top-level `prompt`, `exec`, and `sessions`.
 - Unknown positional agent tokens are treated as raw agent commands.
 - `--agent <command>` explicitly sets a raw ACP adapter command.
+- Claude package fallback uses the ACPX-owned adapter range. An adapter installed alongside ACPX takes precedence; update it and any explicitly selected native Claude executable separately. Existing custom launchers stay operator-controlled.
 - Do not combine a positional agent and `--agent` in the same command.
 - Gemini version checks, Copilot ACP support checks, and their startup diagnostics use the selected agent's working directory and child environment, including session environment and embedded runtime overrides.
 - Embedded host lifecycle admission also covers compatibility and diagnostic invocations. Correlate their events by `launchId`; one session can produce several adapter processes. Checks retire their owned processes and output pipes before settling.
@@ -399,7 +400,32 @@ Use `acpx config show` to inspect the resolved config and `acpx config init` to
 For ACP `authenticate` handshakes, use either config `auth` entries or explicit
 `ACPX_AUTH_<METHOD_ID>` environment variables such as `ACPX_AUTH_OPENAI_API_KEY`.
 Ambient provider env vars such as `OPENAI_API_KEY` are still passed through to
-child agents, but they do not trigger ACP auth-method selection on their own.
+child agents by default, but they do not trigger ACP auth-method selection on
+their own.
+
+## Embedded environment inheritance
+
+Embedding hosts can set `agentProcessEnvAllow` or `agentProcessEnvBlock` on
+`createAcpRuntime()` to keep parent variables, such as the host's own service
+credentials, out of agents, command probes, and ACP terminals. Both are off by
+default and the CLI does not set them, so without them children inherit the
+whole environment as before.
+
+- `agentProcessEnvAllow` keeps only process essentials (`PATH`, `HOME`, locale,
+  temp and similar names) plus the listed names. An empty list keeps only the
+  essentials and explicit grants.
+- `agentProcessEnvBlock` removes the listed names, applied after the allowlist.
+- Explicit grants still apply: `ACPX_AUTH_<METHOD_ID>` variables pass through
+  both lists, and `agentProcessEnv`, saved session `env`, and a terminal
+  request's own `env` are layered on top.
+
+A filtered provider key does not reach the agent. Agent-specific environment
+authentication that ACPX selects itself, such as Grok Build's `XAI_API_KEY` for
+`xai.api_key`, is skipped as well when the key is filtered. Keep such a key by
+listing it in the allowlist and leaving it off the blocklist, or pass it as an
+`ACPX_AUTH_*` grant (for Grok Build, `ACPX_AUTH_XAI_API_KEY`). See
+[`docs/runtime-environment.md`](https://github.com/openclaw/acpx/blob/main/docs/runtime-environment.md)
+and [`agents/GrokBuild.md`](https://github.com/openclaw/acpx/blob/main/agents/GrokBuild.md).
 
 ## Devin ACP compatibility
 

package/dist/client-R5OmZ--S.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"client-R5OmZ--S.d.ts","names":[],"sources":["../src/async-control.ts","../src/acp/model-config-state.ts","../src/acp/client.ts"],"mappings":";;;KAcY;EACV,SAAS;EACT;;;;KChBU;EACV;EACA;EACA,iBAAiB;IACf;IACA;;;;;KCiNC;EACH,YAAY;EACZ;EACA;EACA;;KAGU;EACV;EACA;EACA,gBAAgB;EAChB,SAAS;EACT;EACA;;KAGU;EACV;EACA,gBAAgB;EAChB,SAAS;EACT;EACA;;KAGU,sBAAsB;KA4C7B;KAsFO;EACV;EACA,QAAQ,OAAO;EACf;EACA,QAAQ;EACR;;KAGU;EACV;EACA;EACA;EACA,WAAW;;cAoBA;UACH;UACA;UACA;mBACS;mBACA;mBACA;UACT;UACA;UACA;mBAQS;mBAMA;mBACA;UACT;UACA;UACA;UACA;UACA;UACA;mBACS;mBACA;mBACA;UACT;UACA;UAEA;UACA;UACA;UACA;mBACS;mBACA;EAEL,YAAA,SAAS;MAmCjB,oBAAoB;EAIxB;EAIA,sBAAsB;EAItB,6BAA6B;EAW7B;EAIA;EAIA;EAIA;EAIA,iBACE,UAAU,KACR;EAWJ;EAIA,qBAAqB;IACnB,iBAAiB;IACjB,4BAA4B;IAC5B,mBAAmB;IACnB;IACA;IACA;IACA;;UAuBM;UASA;UAcA;EAUR,mBAAmB;EAInB,gBAAgB;EAUhB;UAIQ;EAWF,MACJ,YAAY,qBACZ,UAAU,KAAK,sCACd;UA0FW;UAWA;UA4DN;UAiBM;UAkBN;UAwBA;UAIM;UAwCN;UAOM;UA6EA;UAaA;UAoBN;UAgEM;UAwBA;UAoBA;UA+BN;UAgBA;EAWF,cACJ,cACA,YAAY,sBACX,QAAQ;EAiDL,YAAY,mBAAmB,eAAyB,QAAQ;EAKhE,uBACJ,mBACA,cACA,UAAS,qBACR,QAAQ;EAoCL,cACJ,mBACA,cACA,YAAY,sBACX,QAAQ;UAqBH;UAWA;EAKF,OACJ,mBACA,QAAQ,sBACR,yBAAyB,sBACzB,gBAAgB,uBAChB,sBAAsB,sBACtB,YAAY,sBACX,QAAQ;UA2CH;UAsBA;UAaA;UAUA;UAcA;UAwBA;UAYA;UAQA;EAOF,eACJ,mBACA,gBACA,YAAY,sBACX;EAaG,uBACJ,mBACA,kBACA,eACA,QAAQ,+BACR,YAAY,sBACX,QAAQ;EAuBL,gBACJ,mBACA,iBACA,QAAQ,+BACR,YAAY,sBACX,QAAQ;UAmBH;UAUM;UAoBA;UAqBN;EAoBF,OAAO,oBAAoB;EA8B3B,aAAa,oBAAoB;EAcjC,aAAa,SAAQ,sBAA2B,QAAQ;EAOxD,6BAA6B;EAS7B,mBAAmB,kBAAiB,QAAQ;EAyClD,SAAS;UAgBK;UAiCA;UAyCA;UAeN;UAIA;UAIM;UAON;UAcM;UA8BN;UAYM;UAyBN;UAkBA;UAOA;UAOA;UAcA;UASA;UAqEM;UA0BN;UA2CA;UAQA;UAUA;UAcM;UA6BA;UAiCN;UAUA;UAQM;UAuCN;UAuBA;UAqBA;UAIA;UAwBA;UASM;UA8BN;UAoBA;UAiBM;UAwBN;UAqBA;UAQA;UAQA;UA6BA;UAmBA;UAmBA;UAmBA;UAyBA;UAKA;UAwBA;UASA;UAUM;UAqDN;UAYM;UAmBA;UASA;UASA;UAoBN;UASA;UAMA;UAaA;UAWM;UAkBA;EAgCR,0BAA0B;IAC9B;IACA;MACE"}