agents-can-communicate 0.10.3 → 0.10.4

package/docs/TROUBLESHOOTING.md

@@ -158,6 +158,16 @@ delivery, start Codex without it; put a setting you need in `config.toml` instea
 If a reply stays queued with `transport_permission_denied`, the sender's permissions
 blocked local transport. This is distinct from an unavailable recipient. The message was
 recorded successfully; the error does not mean it was read or acknowledged.
+For Codex sends, use the exact installed ACC wrapper through the client's approved
+command path (`exec_command` with `sandbox_permissions: "require_escalated"`). The
+installed ACC prefix rule can authorize that command. Keep it separate from other
+shell commands. If delivery was already attempted, retry the same arguments and
+the original `--client-message-id` printed by the CLI. This retries the recorded
+message instead of recording another one. An initial execution refusal records
+nothing; a refused retry does not erase an earlier recorded message.
+On Codex 0.162.0 on macOS, even an installed socket allowlist did not permit direct
+access to the daemon socket from the sandbox. A configured profile alone therefore
+does not prove that a sandboxed sender can reach another Codex session.
 On Codex 0.153.4 or newer, rerun `acc install --adapter codex` with existing
 live consent. Add `--delivery actionable` when new consent is required, then start a new session.
 With ACC 0.8.0 or 0.8.1, every live offer from a Codex session to Claude Code failed this way:

package/docs/UPGRADING.md

@@ -1,5 +1,21 @@
 # Upgrading
 
+## From 0.10.3
+
+Update as usual with `acc update`. Version 0.10.4 preserves sender permission
+failures as `transport_permission_denied`, including when access to socket
+metadata or an expired delivery binding is denied. The CLI prints the original
+retry key so the same recorded message can be offered again without a duplicate.
+
+The refreshed Codex skill uses the client's approved command path for outgoing
+ACC messages. ACC's existing exact-wrapper rule can authorize those commands.
+An initial execution refusal records no message; a refused retry preserves an
+earlier durable message. See [sender permissions](TROUBLESHOOTING.md#i-enabled-live-delivery-but-got-fallback)
+for the recovery procedure.
+
+This release keeps store contract 7 and adds no data migration. The update
+refreshes installed integrations while preserving their recorded delivery policy.
+
 ## Store contract 6 to 7
 
 ACC moves each workspace's store from contract 6 to 7 by itself, right after an update

package/node_modules/@agents-can-communicate/adapter-antigravity/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/adapter-antigravity",
-  "version": "0.10.3",
+  "version": "0.10.4",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/adapter-antigravity/plugin/plugin.json

@@ -1,5 +1,5 @@
 {
   "name": "acc",
-  "version": "0.10.3",
+  "version": "0.10.4",
   "description": "Coordinate this Antigravity CLI session with other AI agent sessions working in the same workspace."
 }

package/node_modules/@agents-can-communicate/adapter-claude-code/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/adapter-claude-code",
-  "version": "0.10.3",
+  "version": "0.10.4",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/adapter-codex/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/adapter-codex",
-  "version": "0.10.3",
+  "version": "0.10.4",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/adapter-codex/plugin/skills/acc/SKILL.md

@@ -16,6 +16,25 @@ Use this skill when hook context reports peers or actionable attention, or
 the user asks for coordination between sessions. An `ACC CLI (append):` header
 by itself supplies identity for later use; continue the user's ordinary work.
 
+### Send through Codex's approved command path
+
+Run `message`, `request`, `reply`, and `finish` with `exec_command` and
+`sandbox_permissions: "require_escalated"`. Put the installed `{{ACC}}` wrapper
+first in the command. ACC's installed prefix rule can then authorize that exact
+local command. Do not combine it with other shell commands. These sends stay
+on this machine and reach the user's own agent sessions.
+
+Codex can deny its daemon socket inside the sandbox even when the ACC profile
+allows the socket. The approved command path preserves that sandbox boundary.
+An initial execution refusal records no message. If a retry is refused, the
+earlier recorded message remains durable. Report which case occurred.
+
+Choose a distinct `--client-message-id` for each new send. If delivery reports
+`transport_permission_denied`, retry the same command through approved execution
+with the same key and content. The CLI prints the original key when it generated
+one. A retry uses the recorded message and offers it again only while queued.
+Use normal sandboxed execution for local reads and claims.
+
 ## Use your own CLI credentials
 
 When this turn's ACC hook supplies `ACC CLI (append):`, append those exact

package/node_modules/@agents-can-communicate/adapter-codex/src/native-delivery.mjs

@@ -168,22 +168,25 @@ async function bindAttempt({ event, clientPid, clientVersion, runtimeDir,
 // what `codex --version` printed, and a daemon that had updated under its CLI
 // was refused here on that difference alone.
 async function receiverFor(binding, runtimeDir, platform = process.platform) {
-  const endpoint = await readNativeEndpoint({ runtimeDir, endpointId: binding?.opaqueEndpointRef, platform });
-  return endpoint !== null && await socketIsReady(endpoint.socketPath, { platform }) ? endpoint : null;
+  const endpoint = await readNativeEndpoint({ runtimeDir, endpointId: binding?.opaqueEndpointRef,
+    platform, throwPermissionErrors: true });
+  return endpoint !== null && await socketIsReady(endpoint.socketPath,
+    { platform, throwPermissionErrors: true }) ? endpoint : null;
 }
 
 export async function refreshNativeSession({ binding, runtimeDir, timeoutMs = 750,
   now = Date.now, open = openCodexAppServer, platform = process.platform } = {}) {
   const rejected = reason => closed(binding?.clientVersion, reason);
-  const endpoint = await receiverFor(binding, runtimeDir, platform);
-  if (endpoint === null) return rejected("handshake_failed");
   try {
+    const endpoint = await receiverFor(binding, runtimeDir, platform);
+    if (endpoint === null) return rejected("handshake_failed");
     return await usingPeer(endpoint.socketPath, timeoutMs, open, async peer => {
       const { reasonCode, servingVersion } = await verifyReceiver(peer, endpoint);
       return reasonCode === null
         ? handshake({ ...endpoint, clientVersion: servingVersion }, now) : rejected(reasonCode);
     });
   } catch (error) {
+    if (["EPERM", "EACCES"].includes(error?.code)) return rejected("transport_permission_denied");
     return rejected(error?.code === "ETIMEDOUT" ? "handshake_timeout" : "handshake_failed");
   }
 }
@@ -192,9 +195,9 @@ export async function offerMessage({ binding, message, runtimeDir, timeoutMs = 5
   open = openCodexAppServer, platform = process.platform } = {}) {
   const rejected = safeErrorCode => ({ accepted: false, transport: "codex-app-server",
     clientVersion: binding?.clientVersion ?? null, safeErrorCode });
-  const endpoint = await receiverFor(binding, runtimeDir, platform);
-  if (endpoint === null) return rejected("recipient_unavailable");
   try {
+    const endpoint = await receiverFor(binding, runtimeDir, platform);
+    if (endpoint === null) return rejected("recipient_unavailable");
     return await usingPeer(endpoint.socketPath, timeoutMs, open, async peer => {
       const { reasonCode, servingVersion } = await verifyReceiver(peer, endpoint);
       if (reasonCode !== null) return rejected(reasonCode === "handshake_timeout" ? "transport_error"

package/node_modules/@agents-can-communicate/adapter-codex/src/native-endpoint.mjs

@@ -50,18 +50,25 @@ async function directory(runtimeDir, create = false, platform = process.platform
  * 0.159.3), so there the socket counts while its directory lists it; Codex keeps
  * that directory to its user.
  */
-export async function socketIsReady(socketPath, { platform = process.platform } = {}) {
+export async function socketIsReady(socketPath, { platform = process.platform,
+  throwPermissionErrors = false } = {}) {
   if (isWindowsPlatform(platform)) {
     if (!absolute(socketPath)) return false;
     const name = path.basename(socketPath).toLowerCase();
-    const names = await readdir(path.dirname(socketPath)).catch(() => []);
+    const names = await readdir(path.dirname(socketPath)).catch(error => {
+      if (throwPermissionErrors && ["EPERM", "EACCES"].includes(error.code)) throw error;
+      return [];
+    });
     return names.some(entry => entry.toLowerCase() === name);
   }
   if (!absolute(socketPath)) return false;
   try {
     const info = await lstat(socketPath);
     return info.isSocket() && !info.isSymbolicLink() && own(info);
-  } catch { return false; }
+  } catch (error) {
+    if (throwPermissionErrors && ["EPERM", "EACCES"].includes(error.code)) throw error;
+    return false;
+  }
 }
 
 /** The socket a control socket path leads to, or null. Codex 0.157.1 keeps a
@@ -104,7 +111,8 @@ export async function writeNativeEndpoint({ runtimeDir, record, platform = proce
 
 // Expired records are metadata for revalidation, never proof of reachability.
 // Refuse links and oversized files before reading; no foreign error text escapes.
-export async function readNativeEndpoint({ runtimeDir, endpointId, platform = process.platform }) {
+export async function readNativeEndpoint({ runtimeDir, endpointId, platform = process.platform,
+  throwPermissionErrors = false }) {
   if (typeof endpointId !== "string" || !ENDPOINT.test(endpointId)) return null;
   let handle;
   try {
@@ -116,7 +124,10 @@ export async function readNativeEndpoint({ runtimeDir, endpointId, platform = pr
     }
     const record = JSON.parse(await handle.readFile("utf8"));
     return valid(record) && record.endpointId === endpointId ? record : null;
-  } catch { return null; }
+  } catch (error) {
+    if (throwPermissionErrors && ["EPERM", "EACCES"].includes(error.code)) throw error;
+    return null;
+  }
   finally { await handle?.close().catch(() => null); }
 }
 

package/node_modules/@agents-can-communicate/adapter-gemini-cli/extension/gemini-extension.json

@@ -1,6 +1,6 @@
 {
   "name": "agents-can-communicate",
-  "version": "0.10.3",
+  "version": "0.10.4",
   "description": "Coordinate this Gemini CLI session with other AI agent sessions working in the same workspace.",
   "contextFileName": "skills/acc/SKILL.md"
 }

package/node_modules/@agents-can-communicate/adapter-gemini-cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/adapter-gemini-cli",
-  "version": "0.10.3",
+  "version": "0.10.4",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/adapter-grok/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/adapter-grok",
-  "version": "0.10.3",
+  "version": "0.10.4",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/adapter-kimi/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/adapter-kimi",
-  "version": "0.10.3",
+  "version": "0.10.4",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/adapter-sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/adapter-sdk",
-  "version": "0.10.3",
+  "version": "0.10.4",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/adapter-sdk/src/native-vocabulary.mjs

@@ -29,6 +29,8 @@ export const NATIVE_REASON_CODES = Object.freeze([
   "prerelease_not_captured", "below_minimum_version", "known_bad_version",
   "feature_probe_failed", "probe_timeout", "probe_version_mismatch", "protocol_mismatch",
   "native_endpoint_unavailable", "native_session_unavailable",
+  // A caller can be denied access to a healthy receiver's local transport.
+  "transport_permission_denied",
   "handshake_failed", "handshake_timeout", "handshake_version_mismatch",
   "session_generation_stale", "client_process_unknown", "unsupported_shell",
   // The current session's canonical workspace identity could not be verified.

package/node_modules/@agents-can-communicate/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/cli",
-  "version": "0.10.3",
+  "version": "0.10.4",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/cli/src/main.mjs

@@ -6,6 +6,7 @@ import { AccError, CONFIG_FILENAME, EXIT, GENERIC_MESSAGE_KINDS, VALID_OBLIGATIO
   failure, ok }
   from "@agents-can-communicate/protocol";
 import { createCoordinationService } from "@agents-can-communicate/core";
+import { shellQuote } from "@agents-can-communicate/adapter-sdk";
 import { describeNativeReason } from "@agents-can-communicate/installer";
 import { openFilesystemStore } from "@agents-can-communicate/storage-filesystem";
 
@@ -162,7 +163,10 @@ export function recordedText(message, delivery) {
       ? `woke ${item.recipientParticipantId} via ${item.transport}; the message arrives with its next turn`
     : item.outcome === "queued"
       ? item.errorCode === "transport_permission_denied"
-        ? "live offer blocked by sender permissions; message remains queued; run acc doctor in the sending session"
+        ? "live offer blocked by sender permissions; message remains queued; retry the same command "
+          + "through approved execution"
+          + (typeof message.clientMessageId === "string"
+            ? ` with --client-message-id ${shellQuote(message.clientMessageId)}` : " with its original retry key")
         : item.errorCode === "no_live_transport"
           ? `${item.recipientParticipantId} has no live transport`
             + `${item.nativeReasonCode ? ` (${describeNativeReason(item.nativeReasonCode,

package/node_modules/@agents-can-communicate/cli/src/native-session-diagnostics.mjs

@@ -97,6 +97,8 @@ export async function updateNativeSessions(adapters, { service, status, root, no
 }
 
 const failures = {
+  transport_permission_denied: "this command cannot access the local delivery channel; "
+    + "check the sender's command permissions",
   client_process_unknown: "the client process could not be identified; start a new client session",
   handshake_failed: "the session handshake failed; check the client's integration/channel setup",
   handshake_timeout: "the session handshake timed out; check the local channel and retry on the next turn",

package/node_modules/@agents-can-communicate/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/core",
-  "version": "0.10.3",
+  "version": "0.10.4",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/delivery-router/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/delivery-router",
-  "version": "0.10.3",
+  "version": "0.10.4",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/delivery-router/src/refresh-binding.mjs

@@ -1,6 +1,7 @@
 import { validateNativeHandshake } from "@agents-can-communicate/adapter-sdk";
 
 const MAX_REFRESH_LEASE_MS = 120_000;
+const refused = (errorCode = "recipient_unavailable") => ({ refreshed: false, errorCode });
 
 function sameBinding(current, expected, leaseUntil) {
   return current !== null && current !== undefined
@@ -15,24 +16,26 @@ function sameBinding(current, expected, leaseUntil) {
 
 export async function refreshExpiredBinding({ service, adapter, binding, runtimeDir,
   clock, timeoutMs = 750 }) {
-  if (typeof adapter?.refreshNativeSession !== "function") return false;
+  if (typeof adapter?.refreshNativeSession !== "function") return refused();
   const now = Date.parse(clock.now());
-  if (!Number.isFinite(now)) return false;
+  if (!Number.isFinite(now)) return refused();
   try {
     const handshake = await adapter.refreshNativeSession({ binding, runtimeDir, timeoutMs });
     const validated = validateNativeHandshake(adapter, {
       clientVersion: binding.clientVersion, handshake,
     });
-    if (!validated.ok || validated.opaqueEndpointRef !== binding.opaqueEndpointRef) return false;
+    if (!validated.ok) return refused(validated.reasonCode === "transport_permission_denied"
+      ? "transport_permission_denied" : "recipient_unavailable");
+    if (validated.opaqueEndpointRef !== binding.opaqueEndpointRef) return refused();
     const requestedLease = Date.parse(validated.leaseUntil);
-    if (!Number.isFinite(requestedLease) || requestedLease <= now) return false;
+    if (!Number.isFinite(requestedLease) || requestedLease <= now) return refused();
     const leaseUntil = new Date(Math.min(requestedLease,
       now + MAX_REFRESH_LEASE_MS)).toISOString();
     await service.refreshDeliveryBinding({ sessionId: binding.sessionId,
       generation: binding.generation, leaseUntil });
     const current = await service.store?.ephemeral?.get("deliveryBinding", binding.sessionId);
-    return sameBinding(current, binding, leaseUntil);
+    return sameBinding(current, binding, leaseUntil) ? { refreshed: true, errorCode: null } : refused();
   } catch {
-    return false;
+    return refused();
   }
 }

package/node_modules/@agents-can-communicate/delivery-router/src/router.mjs

@@ -132,7 +132,12 @@ export function createDeliveryRouter({ service, adapters, clock, readLivePolicy,
     if (Date.parse(binding.leaseUntil) <= Date.parse(now)) {
       const refreshed = await refreshExpiredBinding({ service, adapter, binding,
         runtimeDir: service.store?.root, clock });
-      if (!refreshed) return durable(participantId, "recipient_unavailable");
+      if (!refreshed.refreshed) {
+        if (refreshed.errorCode === "transport_permission_denied") {
+          await recordFailure(binding, message, participantId, "live-adapter", refreshed.errorCode);
+        }
+        return durable(participantId, refreshed.errorCode);
+      }
       const current = (await service.listDeliveryBindings({
         participantId, now: clock.now() })).filter(item => item.sessionId === binding.sessionId
           && item.generation === binding.generation

package/node_modules/@agents-can-communicate/hook-runner/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/hook-runner",
-  "version": "0.10.3",
+  "version": "0.10.4",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/installer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/installer",
-  "version": "0.10.3",
+  "version": "0.10.4",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/installer/src/delivery-diagnostics.mjs

@@ -10,6 +10,7 @@ const REASONS = Object.freeze({
   known_bad_version: "this client version has a known native delivery failure",
   native_endpoint_unavailable: "the client's local delivery service is unavailable",
   native_session_unavailable: "the local delivery service has no loaded client session",
+  transport_permission_denied: "the calling process lacks permission to access the local delivery channel",
   feature_probe_failed: "the native protocol probe did not succeed",
   probe_timeout: "the native protocol probe timed out",
   probe_version_mismatch: "the local service and CLI versions differ",

package/node_modules/@agents-can-communicate/mcp-server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/mcp-server",
-  "version": "0.10.3",
+  "version": "0.10.4",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/protocol/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/protocol",
-  "version": "0.10.3",
+  "version": "0.10.4",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/storage-filesystem/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/storage-filesystem",
-  "version": "0.10.3",
+  "version": "0.10.4",
   "private": true,
   "type": "module",
   "exports": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agents-can-communicate",
-  "version": "0.10.3",
+  "version": "0.10.4",
   "accManagedUpdateProtocol": 2,
   "accStoreVersion": 7,
   "type": "module",