agents-can-communicate 0.1.17 → 0.2.0

package/node_modules/@agents-can-communicate/adapter-claude-code/src/adapter.mjs

@@ -1,9 +1,16 @@
-import { defineAdapter, projectContext } from "@agents-can-communicate/adapter-sdk";
+import { defineAdapter, projectContext, projectContextResult }
+  from "@agents-can-communicate/adapter-sdk";
+import certification from "../certification.json" with { type: "json" };
 
 import { denyOutcome, injectOutcome, normalizeClaudeHook } from "./hooks.mjs";
 import { planClaudeInstall, detectClaude, installClaudePlugin, uninstallClaudePlugin } from "./install.mjs";
 
 export const CLAUDE_CODE_VERSION = "2.1.233";
+export const CLAUDE_DELIVERY_FALLBACK = Object.freeze({
+  diagnostic: "Claude Code native delivery is off: the 2.1.252 capture stopped at the "
+    + "development-channel security warning before the ACC MCP child started; messages "
+    + "stay durable for certified next-turn delivery or acc inbox",
+});
 
 /**
  * Every true capability below was observed in a real `claude -p` session on
@@ -14,7 +21,7 @@ export const CLAUDE_CODE_VERSION = "2.1.233";
  * and a parent/child mapping claimed without observation is the kind of thing
  * that quietly maps every child onto its parent. `startupInjection` and
  * `safePointInjection` were not exercised - only the before-turn path was.
- * `execution.*` and wake are not offered by this harness.
+ * Native live delivery and reply routing are not certified for this harness.
  */
 export function createClaudeCodeAdapter() {
   return defineAdapter({
@@ -23,7 +30,9 @@ export function createClaudeCodeAdapter() {
     // The binary this client actually installs. Probed for a version to
     // decide whether the client is on this machine, so it has to be the
     // real command rather than the adapter id: `2.1.233 (Claude Code)`.
-    client: { command: "claude", versionArgs: ["--version"] },
+    client: { command: "claude", certificationName: "claude-code", versionArgs: ["--version"] },
+    certification,
+    deliveryFallback: CLAUDE_DELIVERY_FALLBACK,
     capabilities: {
       lifecycle: { sessionStart: true, sessionEnd: true },
       // A UserPromptSubmit hook's additionalContext was observed arriving in
@@ -31,14 +40,13 @@ export function createClaudeCodeAdapter() {
       context: { beforeTurnInjection: true },
       // PreToolUse denied both a Write and a Bash call; neither ran.
       guards: { beforeWrite: true, beforeShell: true },
-      delivery: { polling: true },
+      delivery: { nextTurn: true },
     },
 
     startSession: async () => ({ ok: true, changes: [], diagnostics: [] }),
     endSession: async () => ({ ok: true, changes: [], diagnostics: [] }),
     guardWrite: async () => ({ ok: true, changes: [], diagnostics: [] }),
     guardShell: async () => ({ ok: true, changes: [], diagnostics: [] }),
-    poll: async () => ({ ok: true, changes: [], diagnostics: [] }),
 
     planInstall: context => planClaudeInstall(context),
     detect: context => detectClaude(context),
@@ -50,6 +58,7 @@ export function createClaudeCodeAdapter() {
       return { ok: true, changes: [], diagnostics: [
         ...detected.diagnostics,
         "hook payloads captured from Claude Code 2.1.233",
+        CLAUDE_DELIVERY_FALLBACK.diagnostic,
         // SessionEnd is advisory and cannot summarise a conversation that has
         // already stopped, so the handoff is written from Stop or the skill.
         "handoff is written while the model is active, not at SessionEnd",
@@ -60,5 +69,6 @@ export function createClaudeCodeAdapter() {
     injectOutcome,
     normalizeHook: payload => normalizeClaudeHook(payload),
     renderContext: (sync, options) => projectContext(sync, options),
+    renderContextResult: (sync, options) => projectContextResult(sync, options),
   });
 }

package/node_modules/@agents-can-communicate/adapter-codex/certification.json

@@ -0,0 +1,117 @@
+{
+  "evidence": [
+    {
+      "client": "codex-cli",
+      "version": "0.147.0",
+      "platform": "darwin-arm64",
+      "observedAt": "2026-08-16",
+      "capability": "lifecycle.sessionStart",
+      "fixture": "fixtures/SessionStart.json",
+      "provenance": "fixtures/certification-provenance.json",
+      "provenanceId": "session-start",
+      "idleBehavior": "fires when a client session starts",
+      "busyBehavior": "fires before the first model turn",
+      "authorityLevel": "advisory",
+      "limitations": ["plugin hooks must be explicitly trusted by the user"],
+      "result": "pass"
+    },
+    {
+      "client": "codex-cli",
+      "version": "0.147.0",
+      "platform": "darwin-arm64",
+      "observedAt": "2026-08-16",
+      "capability": "lifecycle.sessionEnd",
+      "fixture": "fixtures/SessionEnd.json",
+      "provenance": "fixtures/certification-provenance.json",
+      "provenanceId": "session-end",
+      "idleBehavior": "fires when a client session exits",
+      "busyBehavior": "does not run until the session exits",
+      "authorityLevel": "advisory",
+      "limitations": ["plugin hooks must be explicitly trusted by the user"],
+      "result": "pass"
+    },
+    {
+      "client": "codex-cli",
+      "version": "0.147.0",
+      "platform": "darwin-arm64",
+      "observedAt": "2026-08-16",
+      "capability": "context.beforeTurnInjection",
+      "fixture": "fixtures/UserPromptSubmit.json",
+      "provenance": "fixtures/certification-provenance.json",
+      "provenanceId": "user-prompt-submit",
+      "idleBehavior": "waits for the next user prompt",
+      "busyBehavior": "does not interrupt an in-progress turn",
+      "authorityLevel": "context",
+      "limitations": ["stdout arrives as an unwrapped developer-role message"],
+      "result": "pass"
+    },
+    {
+      "client": "codex-cli",
+      "version": "0.147.0",
+      "platform": "darwin-arm64",
+      "observedAt": "2026-08-16",
+      "capability": "guards.beforeWrite",
+      "fixture": "fixtures/PreToolUse.json",
+      "provenance": "fixtures/certification-provenance.json",
+      "provenanceId": "pre-tool-use",
+      "idleBehavior": "no write exists to guard",
+      "busyBehavior": "blocks an apply_patch call before disk mutation",
+      "authorityLevel": "blocking",
+      "limitations": ["runtime and unrecognised shell writes can bypass the guard"],
+      "result": "pass"
+    },
+    {
+      "client": "codex-cli",
+      "version": "0.147.0",
+      "platform": "darwin-arm64",
+      "observedAt": "2026-08-16",
+      "capability": "delivery.nextTurn",
+      "fixture": "fixtures/UserPromptSubmit.json",
+      "provenance": "fixtures/certification-provenance.json",
+      "provenanceId": "user-prompt-submit",
+      "idleBehavior": "offers complete peer messages at the next prompt",
+      "busyBehavior": "does not interrupt an in-progress turn",
+      "authorityLevel": "context",
+      "limitations": ["delivery requires the next normal user turn"],
+      "result": "pass"
+    },
+    {
+      "client": "codex-cli",
+      "version": "0.152.0",
+      "platform": "darwin-arm64",
+      "observedAt": "2026-09-01T16:20:40.386Z",
+      "capability": "delivery.livePush",
+      "fixture": "fixtures/delivery/codex-cli-0.152.0.json",
+      "provenance": "fixtures/certification-provenance.json",
+      "provenanceId": "native-delivery-0-152-0",
+      "idleBehavior": "unobserved",
+      "busyBehavior": "unobserved",
+      "authorityLevel": "none",
+      "limitations": [
+        "daemon control socket absent; proxy was not started",
+        "no daemon or target client process was started by this capture",
+        "idle, busy, reply, duplicate, and fallback branches were not observed"
+      ],
+      "result": "fail"
+    },
+    {
+      "client": "codex-cli",
+      "version": "0.152.0",
+      "platform": "darwin-arm64",
+      "observedAt": "2026-09-01T16:20:40.386Z",
+      "capability": "delivery.replyRoute",
+      "fixture": "fixtures/delivery/codex-cli-0.152.0.json",
+      "provenance": "fixtures/certification-provenance.json",
+      "provenanceId": "native-delivery-0-152-0",
+      "idleBehavior": "unobserved",
+      "busyBehavior": "unobserved",
+      "authorityLevel": "none",
+      "limitations": [
+        "daemon control socket absent; proxy was not started",
+        "no daemon or target client process was started by this capture",
+        "idle, busy, reply, duplicate, and fallback branches were not observed"
+      ],
+      "result": "fail"
+    }
+  ]
+}

package/node_modules/@agents-can-communicate/adapter-codex/fixtures/PreToolUse.json

@@ -0,0 +1,14 @@
+{
+  "session_id": "01a0090b-1d56-7df0-92b7-0512e339f3da",
+  "turn_id": "01a0090b-1d8e-7062-8c92-3e312d3150df",
+  "transcript_path": "<redacted: conversation transcript>",
+  "cwd": "/tmp/example-workspace",
+  "hook_event_name": "PreToolUse",
+  "model": "gpt-5.6-sol",
+  "permission_mode": "bypassPermissions",
+  "tool_name": "apply_patch",
+  "tool_input": {
+    "command": "*** Begin Patch\n*** Add File: guarded.txt\n+hello\n*** End Patch"
+  },
+  "tool_use_id": "exec-e62649b4-5f0d-4549-a367-da8f7d4e24fd"
+}

package/node_modules/@agents-can-communicate/adapter-codex/fixtures/SessionEnd.json

@@ -0,0 +1,7 @@
+{
+  "session_id": "01a0090b-1d56-7df0-92b7-0512e339f3da",
+  "transcript_path": "<redacted: conversation transcript>",
+  "cwd": "/tmp/example-workspace",
+  "hook_event_name": "SessionEnd",
+  "reason": "other"
+}

package/node_modules/@agents-can-communicate/adapter-codex/fixtures/SessionStart.json

@@ -0,0 +1,9 @@
+{
+  "session_id": "01a0090b-1d56-7df0-92b7-0512e339f3da",
+  "transcript_path": "<redacted: conversation transcript>",
+  "cwd": "/tmp/example-workspace",
+  "hook_event_name": "SessionStart",
+  "model": "gpt-5.6-sol",
+  "permission_mode": "bypassPermissions",
+  "source": "startup"
+}

package/node_modules/@agents-can-communicate/adapter-codex/fixtures/UserPromptSubmit.json

@@ -0,0 +1,10 @@
+{
+  "session_id": "01a0090b-1d56-7df0-92b7-0512e339f3da",
+  "turn_id": "01a0090b-1d8e-7062-8c92-3e312d3150df",
+  "transcript_path": "<redacted: conversation transcript>",
+  "cwd": "/tmp/example-workspace",
+  "hook_event_name": "UserPromptSubmit",
+  "model": "gpt-5.6-sol",
+  "permission_mode": "bypassPermissions",
+  "prompt": "<redacted: user prompt>"
+}

package/node_modules/@agents-can-communicate/adapter-codex/fixtures/certification-provenance.json

@@ -0,0 +1,66 @@
+{
+  "schemaVersion": 1,
+  "captures": [
+    {
+      "id": "session-start", "client": "codex-cli", "version": "0.147.0",
+      "platform": "darwin-arm64", "observedAt": "2026-08-16",
+      "fixture": "fixtures/SessionStart.json",
+      "sha256": "1580157d6b48c10f6de5f155aa1d7c68d1695409a5a178eb36c85ce5e01de956",
+      "event": "SessionStart", "tool": null,
+      "claims": [{ "capability": "lifecycle.sessionStart", "result": "pass",
+        "outcome": { "kind": "event-observed", "idle": "fires when a client session starts",
+          "busy": "fires before the first model turn", "authority": "advisory",
+          "limitations": ["plugin hooks must be explicitly trusted by the user"] } }]
+    },
+    {
+      "id": "session-end", "client": "codex-cli", "version": "0.147.0",
+      "platform": "darwin-arm64", "observedAt": "2026-08-16",
+      "fixture": "fixtures/SessionEnd.json",
+      "sha256": "e1468c9d5cd2ff5408184158004e9877684f1ae2815239691bbaa386327fe58e",
+      "event": "SessionEnd", "tool": null,
+      "claims": [{ "capability": "lifecycle.sessionEnd", "result": "pass",
+        "outcome": { "kind": "event-observed", "idle": "fires when a client session exits",
+          "busy": "does not run until the session exits", "authority": "advisory",
+          "limitations": ["plugin hooks must be explicitly trusted by the user"] } }]
+    },
+    {
+      "id": "user-prompt-submit", "client": "codex-cli", "version": "0.147.0",
+      "platform": "darwin-arm64", "observedAt": "2026-08-16",
+      "fixture": "fixtures/UserPromptSubmit.json",
+      "sha256": "1774062b17ea917cf67d8adca3408525a928c5b9b88adda1ff6b92f3e89a459f",
+      "event": "UserPromptSubmit", "tool": null,
+      "claims": [
+        { "capability": "context.beforeTurnInjection", "result": "pass",
+          "outcome": { "kind": "model-context-observed", "idle": "waits for the next user prompt",
+            "busy": "does not interrupt an in-progress turn", "authority": "context",
+            "limitations": ["stdout arrives as an unwrapped developer-role message"] } },
+        { "capability": "delivery.nextTurn", "result": "pass",
+          "outcome": { "kind": "model-context-observed", "idle": "offers complete peer messages at the next prompt",
+            "busy": "does not interrupt an in-progress turn", "authority": "context",
+            "limitations": ["delivery requires the next normal user turn"] } }
+      ]
+    },
+    {
+      "id": "pre-tool-use", "client": "codex-cli", "version": "0.147.0",
+      "platform": "darwin-arm64", "observedAt": "2026-08-16",
+      "fixture": "fixtures/PreToolUse.json",
+      "sha256": "8d3785cfcffbe9affef6c10c1dbbeaf5a0b7062eaed4414e4a66c073f0397a77",
+      "event": "PreToolUse", "tool": "apply_patch",
+      "claims": [{ "capability": "guards.beforeWrite", "result": "pass",
+        "outcome": { "kind": "tool-denied-before-mutation", "idle": "no write exists to guard",
+          "busy": "blocks an apply_patch call before disk mutation", "authority": "blocking",
+          "limitations": ["runtime and unrecognised shell writes can bypass the guard"] } }]
+    },
+    {
+      "id": "native-delivery-0-152-0", "client": "codex-cli", "version": "0.152.0",
+      "platform": "darwin-arm64", "observedAt": "2026-09-01T16:20:40.386Z",
+      "fixture": "fixtures/delivery/codex-cli-0.152.0.json",
+      "sha256": "e7879ed95374a4e0450a3c8c0e291357a8c9cf41f6bee90978d920a14f9dc954",
+      "event": null, "tool": null,
+      "claims": [
+        { "capability": "delivery.livePush", "result": "fail", "outcome": { "kind": "native-capture-failed" } },
+        { "capability": "delivery.replyRoute", "result": "fail", "outcome": { "kind": "native-capture-failed" } }
+      ]
+    }
+  ]
+}

package/node_modules/@agents-can-communicate/adapter-codex/fixtures/delivery/codex-cli-0.152.0.json

@@ -0,0 +1,19 @@
+{
+  "client": "codex-cli",
+  "version": "0.152.0",
+  "platform": "darwin-arm64",
+  "observedAt": "2026-09-01T16:20:40.386Z",
+  "capability": "native_delivery_existing_session",
+  "result": "fail",
+  "fixture": "codex-cli-0.152.0-existing-session",
+  "idle": "unobserved",
+  "busy": "unobserved",
+  "reply": "unobserved",
+  "duplicate": "unobserved",
+  "fallback": "unobserved",
+  "limitations": [
+    "daemon control socket absent; proxy was not started",
+    "no daemon or target client process was started by this capture",
+    "idle, busy, reply, duplicate, and fallback branches were not observed"
+  ]
+}

package/node_modules/@agents-can-communicate/adapter-codex/package.json

@@ -1,12 +1,19 @@
 {
   "name": "@agents-can-communicate/adapter-codex",
-  "version": "0.1.17",
+  "version": "0.2.0",
   "private": true,
   "type": "module",
   "exports": {
     ".": "./src/adapter.mjs"
   },
   "files": [
+    "certification.json",
+    "fixtures/certification-provenance.json",
+    "fixtures/SessionStart.json",
+    "fixtures/SessionEnd.json",
+    "fixtures/UserPromptSubmit.json",
+    "fixtures/PreToolUse.json",
+    "fixtures/delivery/codex-cli-0.152.0.json",
     "src/",
     "plugin/"
   ]

package/node_modules/@agents-can-communicate/adapter-codex/plugin/.codex-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "agents-can-communicate",
   "description": "Coordinate this Codex session with other AI agent sessions working in the same workspace.",
-  "license": "UNLICENSED",
+  "license": "MIT",
   "keywords": [
     "coordination",
     "multi-agent",