agents-can-communicate 0.10.3 → 0.11.0

package/node_modules/@agents-can-communicate/adapter-antigravity/src/indicator-install.mjs

@@ -0,0 +1,80 @@
+import { mkdir, readFile, rm, writeFile } from "node:fs/promises";
+import path from "node:path";
+import { defaultIndicator, shellQuote, shortPath, windowsHookCommand, writeForeignJson }
+  from "@agents-can-communicate/adapter-sdk";
+import { agySettingsPath } from "./allow-rule.mjs";
+
+const io = { readFile, writeFile, mkdir };
+const load = async file => {
+  try { return JSON.parse(await readFile(file, "utf8")); }
+  catch (error) { if (error.code === "ENOENT") return null; throw error; }
+};
+const markerPath = ({ dataHome, home }) => path.join(dataHome ?? path.join(home, ".gemini", "config"),
+  "acc", "adapter-antigravity", "indicator.json");
+
+/** Own only the wrapper command and the fields ACC actually changed. A later
+ * user edit wins; the original status line is restored only where still ours. */
+export async function configureIndicator(context, enabled) {
+  const file = agySettingsPath(context.home), marker = markerPath(context);
+  const saved = await load(marker);
+  if (!enabled && !saved) return [];
+  const existing = await load(file);
+  if (saved && (saved.schemaVersion !== 1 || typeof saved.installed?.command !== "string"
+    || !Array.isArray(saved.owned) || !saved.owned.every(key => typeof key === "string"))) {
+    throw new Error("ACC status-line ownership is invalid; keep the user's settings and run acc doctor");
+  }
+  if (!enabled) {
+    if (!saved) return [];
+    if (existing?.statusLine?.command === saved.installed.command) {
+      const current = { ...existing.statusLine };
+      for (const key of saved.owned) {
+        const value = saved.installed[key];
+        if (JSON.stringify(current[key]) !== JSON.stringify(value)) continue;
+        if (Object.hasOwn(saved.previous ?? {}, key)) current[key] = saved.previous[key];
+        else delete current[key];
+      }
+      const next = { ...existing };
+      if (Object.keys(current).length) next.statusLine = current;
+      else if (saved.previous !== null) next.statusLine = saved.previous;
+      else delete next.statusLine;
+      if (saved.createdFile && Object.keys(next).length === 0) await rm(file, { force: true });
+      else await writeForeignJson(file, next, io);
+    }
+    await rm(marker, { force: true });
+    return [file];
+  }
+  const ours = saved && existing?.statusLine?.command === saved.installed.command;
+  // Keep the marker after a user replacement or removal, so later updates do
+  // not mistake it for a first install. Explicit disable clears this history.
+  if (saved && !ours) return [];
+  const previous = ours ? saved.previous : existing?.statusLine ?? null;
+  if (previous !== null && (previous.type !== "command" || typeof previous.command !== "string")) {
+    throw new Error("ACC cannot compose this statusLine type; keep it and configure the indicator manually");
+  }
+  const node = context.node ?? process.execPath;
+  const indicator = context.indicatorRunner ?? defaultIndicator();
+  // Each path is one shell argument. The user's old shell program stays in a
+  // JSON record; interpolating it into this command would change its quoting.
+  let command;
+  if ((context.hostPlatform ?? process.platform) === "win32") {
+    const shim = path.join(context.home, ".gemini", "config", "acc", "indicator.mjs");
+    await mkdir(path.dirname(shim), { recursive: true });
+    await writeFile(shim, `import { spawnSync } from "node:child_process";\n`
+      + `const child = spawnSync(${JSON.stringify(node)}, ${JSON.stringify([indicator,
+        "--adapter", "antigravity", "--previous", marker])}, {stdio:"inherit",windowsHide:true});\n`
+      + `process.exitCode = child.status ?? 0;\n`);
+    command = windowsHookCommand("unquoted", { node, shim: await shortPath(shim), args: [] }).trimEnd();
+  } else command = [node, indicator, "--adapter", "antigravity", "--previous", marker]
+    .map(shellQuote).join(" ");
+  const installed = ours ? { ...existing.statusLine, command }
+    : { ...previous, type: "command", command, enabled: true,
+      stack_with_default: previous?.stack_with_default ?? true };
+  const owned = ours ? saved.owned.filter(key =>
+    JSON.stringify(existing.statusLine[key]) === JSON.stringify(saved.installed[key]))
+    : Object.keys(installed).filter(key => JSON.stringify(installed[key]) !== JSON.stringify(previous?.[key]));
+  await mkdir(path.dirname(marker), { recursive: true });
+  await writeFile(marker, JSON.stringify({ schemaVersion: 1, previous, installed, owned,
+    createdFile: saved?.createdFile ?? existing === null }) + "\n");
+  await writeForeignJson(file, { ...existing, statusLine: installed }, io);
+  return [file];
+}

package/node_modules/@agents-can-communicate/adapter-antigravity/src/indicator-render.mjs

@@ -0,0 +1,8 @@
+// Antigravity consumes ANSI from a command whose stdout is a pipe, not a TTY.
+// Foreground and intensity affect only the glyph. Never set a background.
+export function renderAntigravityIndicator(report) {
+  const rgb = report.health === "ready" ? "44;122;57"
+    : report.health === "problem" ? "150;108;30" : "102;102;102";
+  return report.label.replace(/^ACC ([●!…])/u,
+    (_, glyph) => `ACC \x1b[22;1;38;2;${rgb}m${glyph}\x1b[22;39m`);
+}

package/node_modules/@agents-can-communicate/adapter-antigravity/src/install.mjs

@@ -5,7 +5,7 @@ import path from "node:path";
 import { fileURLToPath } from "node:url";
 import { promisify } from "node:util";
 
-import { bakeSkillCommand, blankJson, defaultAntigravityRelay, isShellWord, mergeEnv, ownVersion,
+import { bakeSkillCommand, blankJson, compareVersionOrder, versionOrder, defaultAntigravityRelay, isShellWord, mergeEnv, ownVersion,
   removeIfEmpty, shellQuote, shortPath, stampPluginVersion, windowsHookCommand, writeCliShim,
   writeForeignJson, writeHookShim, writeNodeShim }
   from "@agents-can-communicate/adapter-sdk";
@@ -15,6 +15,7 @@ import { agySettingsPath, cliWrapperPath, ensureAllowRule, inspectAllowRule, ins
   withdrawAllowRule } from "./allow-rule.mjs";
 import { ensureDesktopRule, inspectDesktopRule, withdrawDesktopRule } from "./desktop-allow-rule.mjs";
 import { relayShimName, relayStartCommand, runningRelays, stopRelays } from "./relays.mjs";
+import { configureIndicator } from "./indicator-install.mjs";
 
 const run = promisify(execFile);
 
@@ -425,8 +426,10 @@ export async function installAntigravity(context) {
   const allow = await ensureAllowRule(context);
   // Antigravity 2.0 keeps grants of its own, read only where it has run.
   const desktop = await ensureDesktopRule(context);
+  const indicatorChanges = await configureIndicator(context, context.indicator === "on"
+    && compareVersionOrder(versionOrder(context.clientVersion), versionOrder("1.0.6")) >= 0);
   const changes = [shimDir(home), file, pluginInstallPath(home), vendorManifestPath(home),
-    ...allow.changes, ...desktop.changes];
+    ...allow.changes, ...desktop.changes, ...indicatorChanges];
 
   const diagnostics = [...allow.diagnostics, ...desktop.diagnostics];
   const needsAction = [...allow.needsAction, ...desktop.needsAction];
@@ -495,7 +498,7 @@ export async function installAntigravity(context) {
  */
 export async function uninstallAntigravity(context) {
   const { home, keep = [] } = context;
-  const changes = [];
+  const changes = await configureIndicator(context, false);
   const diagnostics = [];
   // Nothing may keep running once ACC is gone. A relay holds a live session
   // endpoint in memory, so it is stopped here rather than left to find out.
@@ -744,7 +747,7 @@ export function planAntigravityInstall(context) {
   // match: a wrapper path that needs quotes gets none.
   const plugin = [{ path: pluginInstallPath(context.home), kind: "merge" },
     { path: vendorManifestPath(context.home), kind: "merge" },
-    ...(isShellWord(cliWrapperPath(context.home, context.hostPlatform))
+    ...(context.indicator === "on" || isShellWord(cliWrapperPath(context.home, context.hostPlatform))
       ? [{ path: agySettingsPath(context.home), kind: "merge" }] : [])];
   if (locationChoice(context) !== null) {
     return [shim, ...plugin,

package/node_modules/@agents-can-communicate/adapter-claude-code/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/adapter-claude-code",
-  "version": "0.10.3",
+  "version": "0.11.0",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/adapter-claude-code/plugin/hooks/indicator.mjs

@@ -0,0 +1,67 @@
+// Interpreter and read-only entrypoint are baked by the installer. No prompts,
+// transcript access, model turns, ACC writes or transport probes are needed.
+const NODE = __ACC_NODE__;
+const INDICATOR = __ACC_INDICATOR__;
+
+let report = { label: "ACC …", health: "starting", detail: "Reading ACC state." };
+let busy = false, sessionId = null, startedAt = 0, lastRead = 0, announced = null;
+
+async function refresh($) {
+  if (busy) return;
+  const id = await $.session.id();
+  const now = await $.clock.now();
+  if (id !== sessionId) {
+    sessionId = id; startedAt = now; lastRead = 0; announced = null;
+    report = { label: "ACC …", health: "starting", detail: "Reading ACC state." };
+  }
+  if (now - lastRead < (now - startedAt < 5000 ? 1000 : 5000)) return;
+  lastRead = now; busy = true;
+  try {
+    const value = await $.process.run([NODE, INDICATOR, "--adapter", "claude_code",
+      "--native-session", id, "--json"], { timeoutMs: 1200 });
+    const next = JSON.parse(value.stdout);
+    if (await $.session.id() !== id) return;
+    if (next.reasonCode === "not_registered" && now - startedAt < 5000) {
+      report = { label: "ACC …", health: "starting",
+        detail: "Waiting up to five seconds for the session hooks to register ACC." };
+    } else report = next;
+  } catch {
+    report = { label: "ACC !", health: "problem", reasonCode: "indicator_unavailable",
+      detail: "The ACC indicator could not read this session's state.",
+      action: "Run acc install --adapter claude_code --indicator on, then /reload-plugins." };
+  } finally { busy = false; }
+  if (report.health === "problem" && report.reasonCode !== announced) {
+    await $.ui.log([report.detail, report.action, "Details: /acc-status"].filter(Boolean).join(" "));
+    announced = report.reasonCode;
+  } else if (report.health === "ready") announced = null;
+  $.ui.invalidate("ui.render");
+}
+
+export function register(on) {
+  on("session.start", async ($, e, next) => {
+    $.clock.every(1000, async () => { await refresh($); });
+    await refresh($);
+    await $.command.register({ name: "acc-status", immediate: true,
+      description: "Explain this chat's ACC indicator and its next recovery step" });
+    return next(e);
+  });
+  on("command.run", { command: "acc-status" }, async ($) => {
+    lastRead = 0;
+    await refresh($);
+    return { text: [report.label, report.detail, report.action].filter(Boolean).join("\n") };
+  });
+  on("ui.render", { component: "SessionMode" }, async ($, e, next) => {
+    const { Box, Text } = $.ui.resolve(e);
+    const symbol = report.health === "ready" ? "●" : report.health === "problem" ? "!" : "…";
+    const color = report.health === "ready" ? "#2c7a39" : report.health === "problem" ? "warning" : "inactive";
+    const qualifier = ["turn", "inbox"].includes(report.reception) ? ` · ${report.reception}` : "";
+    // Native mode strings are all dimmed. Keep their rendering intact and put
+    // only ACC's glyph in its own non-dim Text. Match Antigravity's ready green
+    // exactly instead of allowing Claude's success theme color to desaturate it.
+    return Box({ flexDirection: "row", children: [await next(e),
+      Text({ color: "inactive", children: [" ACC "] }),
+      Text({ color, bold: true, dimColor: false, children: [symbol] }),
+      ...(qualifier ? [Text({ color: "inactive", children: [qualifier] })] : []),
+    ] });
+  });
+}

package/node_modules/@agents-can-communicate/adapter-claude-code/plugin/skills/acc/SKILL.md

@@ -57,19 +57,43 @@ Do this once, not every turn. Update it only when the scope or mode materially
 changes. `--hint` is important: it lets ACC match your plan against a peer's
 claim. Intent is awareness, not permission.
 
-Before changing shared files, claim the smallest useful resource:
+Before changing shared files, claim the smallest useful resources in one operation:
 
 ```bash
-{{ACC}} claim --resource 'file:packages/core/**' --reason "porting the store"
+{{ACC}} claim --resource 'file:packages/core/**' \
+  --resource 'file:packages/protocol/**' --reason "porting the claim model"
 ```
 
-Exit 5 means a conflict. Do not work around it silently. Narrow your scope,
-contact the owner, or ask the human. Give a claim back explicitly when useful:
+Repeat `--resource` for an atomic batch, or supply it once for one claim.
+Shared mode, enforcement, reason, and lease apply to every resource. Duplicate resources after
+normalization are rejected. Exit 5 means a conflict: no claim is created or
+renewed. Batch `details.conflicts` names blocked resources and their holders.
+Narrow your scope, contact the owner, or ask the human. Repeating a successful
+claim command renews your existing claims on those resources.
+
+Release selected claims when useful:
 
 ```bash
-{{ACC}} release --resource 'file:packages/core/**'
+{{ACC}} release --resource 'file:packages/core/**' \
+  --resource 'file:packages/protocol/**'
 ```
 
+Choose exactly one selector family: repeated `--resource`, repeated `--claim`,
+or `--all`. Duplicate selectors after normalization are rejected. A missing or
+foreign explicit target fails without releasing any claims. Repeating an explicit release after its targets were removed is an error.
+Batch release accepts no force-release authority.
+
+To release all your claims while keeping your session and intent open:
+
+```bash
+{{ACC}} release --all
+```
+
+This selects only your session's current claims in its workspace. An empty set
+succeeds. Each retry selects the current set and can release newly acquired claims.
+Use `work --clear` to clear intent, `ack` to acknowledge a message, and `finish`
+to record a handoff and close your ACC presence.
+
 ## Communicate only when it changes another agent's work
 
 Send a message for a dependency, conflict, direct question, decision, or

package/node_modules/@agents-can-communicate/adapter-claude-code/src/adapter.mjs

@@ -34,6 +34,7 @@ export function createClaudeCodeAdapter() {
   return defineAdapter({
     id: "claude_code",
     displayName: "Claude Code",
+    statusIndicator: { minimumVersion: "2.1.287", reload: "run /reload-plugins in the open session" },
     // The binary this client actually installs. Probed for a version to
     // decide whether the client is on this machine, so it has to be the
     // real command rather than the adapter id: `2.1.233 (Claude Code)`.

package/node_modules/@agents-can-communicate/adapter-claude-code/src/install.mjs

@@ -7,7 +7,7 @@ import path from "node:path";
 import { AccError, EXIT } from "@agents-can-communicate/protocol";
 import { fileURLToPath } from "node:url";
 
-import { acccreatedFile, bakeSkillCommand, blankJson,
+import { acccreatedFile, bakeSkillCommand, blankJson, defaultIndicator, compareVersionOrder, versionOrder,
   mergeOwnedEntries, ownedEntries,
   keepVersions, ownVersion, stampPluginVersion,
   removeIfEmpty,
@@ -181,7 +181,7 @@ async function execFormHooks(file, node) {
 }
 
 /** A plugin tree with the shim written and the skill's command baked in. */
-async function layOutPlugin(target, { runner, node, cli, hostPlatform }) {
+async function layOutPlugin(target, { runner, node, cli, hostPlatform, indicator, indicatorRunner, clientVersion }) {
   await rm(target, { recursive: true, force: true });
   await cp(bundle, target, { recursive: true });
   // The skill ships with a placeholder where the command belongs: `acc` is not
@@ -194,6 +194,15 @@ async function layOutPlugin(target, { runner, node, cli, hostPlatform }) {
   await writeHookShim({ dir: path.join(target, "hooks"), adapterId: "claude_code",
     runner, node, platform: hostPlatform });
   if (hostPlatform === "win32") await execFormHooks(path.join(target, "hooks", "hooks.json"), node);
+  if (indicator === "on" && compareVersionOrder(versionOrder(clientVersion), versionOrder("2.1.287")) >= 0) {
+    const hooksFile = path.join(target, "hooks", "hooks.json");
+    const hooks = await readJson(hooksFile, {});
+    await writeJson(hooksFile, { ...hooks, modules: ["./indicator.mjs"] });
+    const moduleFile = path.join(target, "hooks", "indicator.mjs");
+    const source = await readFile(moduleFile, "utf8");
+    await writeFile(moduleFile, source.replace("__ACC_NODE__", JSON.stringify(node))
+      .replace("__ACC_INDICATOR__", JSON.stringify(indicatorRunner ?? defaultIndicator())));
+  } else await rm(path.join(target, "hooks", "indicator.mjs"), { force: true });
   // The copy the client reads says which ACC wrote it. The shipped manifest
   // carries no version, so there is nothing in the repository to fall out of
   // step - which is how every client came to report 0.1.6 while running 0.1.9.
@@ -202,7 +211,8 @@ async function layOutPlugin(target, { runner, node, cli, hostPlatform }) {
 }
 
 export async function installClaudePlugin({ configDir, runner, cli, keepPreviousVersion = null,
-  node = process.execPath, now = new Date(), hostPlatform = process.platform }) {
+  node = process.execPath, now = new Date(), hostPlatform = process.platform,
+  indicator = "off", indicatorRunner, clientVersion }) {
   // Everything this will merge into, read before a byte is written. A settings
   // file that will not parse used to be discovered after the plugin tree was
   // already on disk, and the install then failed with nineteen files left
@@ -219,12 +229,13 @@ export async function installClaudePlugin({ configDir, runner, cli, keepPrevious
   const source = sourceDir(configDir);
   const cached = cachePath(configDir, version);
 
-  await layOutPlugin(source, { runner, node, cli, hostPlatform });
+  const layout = { runner, node, cli, hostPlatform, indicator, indicatorRunner, clientVersion };
+  await layOutPlugin(source, layout);
   await writeJson(marketplaceFile(configDir), marketplaceManifest());
   // The copy the client runs from. Written here rather than asking the user to
   // run `claude plugin install`, exactly as the Codex adapter does, because the
   // command's only effect is this copy plus the two registry entries below.
-  await layOutPlugin(cached, { runner, node, cli, hostPlatform });
+  await layOutPlugin(cached, layout);
   // The copy just written, plus the one an upgrade moved off. A client caches a
   // plugin under its version, so every upgrade would otherwise leave the previous
   // release's tree beside this one - invisible while the version never moved,

package/node_modules/@agents-can-communicate/adapter-codex/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/adapter-codex",
-  "version": "0.10.3",
+  "version": "0.11.0",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/adapter-codex/plugin/skills/acc/SKILL.md

@@ -16,6 +16,25 @@ Use this skill when hook context reports peers or actionable attention, or
 the user asks for coordination between sessions. An `ACC CLI (append):` header
 by itself supplies identity for later use; continue the user's ordinary work.
 
+### Send through Codex's approved command path
+
+Run `message`, `request`, `reply`, and `finish` with `exec_command` and
+`sandbox_permissions: "require_escalated"`. Put the installed `{{ACC}}` wrapper
+first in the command. ACC's installed prefix rule can then authorize that exact
+local command. Do not combine it with other shell commands. These sends stay
+on this machine and reach the user's own agent sessions.
+
+Codex can deny its daemon socket inside the sandbox even when the ACC profile
+allows the socket. The approved command path preserves that sandbox boundary.
+An initial execution refusal records no message. If a retry is refused, the
+earlier recorded message remains durable. Report which case occurred.
+
+Choose a distinct `--client-message-id` for each new send. If delivery reports
+`transport_permission_denied`, retry the same command through approved execution
+with the same key and content. The CLI prints the original key when it generated
+one. A retry uses the recorded message and offers it again only while queued.
+Use normal sandboxed execution for local reads and claims.
+
 ## Use your own CLI credentials
 
 When this turn's ACC hook supplies `ACC CLI (append):`, append those exact
@@ -57,19 +76,43 @@ Do this once, not every turn. Update it only when the scope or mode materially
 changes. `--hint` is important: it lets ACC match your plan against a peer's
 claim. Intent is awareness, not permission.
 
-Before changing shared files, claim the smallest useful resource:
+Before changing shared files, claim the smallest useful resources in one operation:
 
 ```bash
-{{ACC}} claim --resource 'file:packages/core/**' --reason "porting the store"
+{{ACC}} claim --resource 'file:packages/core/**' \
+  --resource 'file:packages/protocol/**' --reason "porting the claim model"
 ```
 
-Exit 5 means a conflict. Do not work around it silently. Narrow your scope,
-contact the owner, or ask the human. Give a claim back explicitly when useful:
+Repeat `--resource` for an atomic batch, or supply it once for one claim.
+Shared mode, enforcement, reason, and lease apply to every resource. Duplicate resources after
+normalization are rejected. Exit 5 means a conflict: no claim is created or
+renewed. Batch `details.conflicts` names blocked resources and their holders.
+Narrow your scope, contact the owner, or ask the human. Repeating a successful
+claim command renews your existing claims on those resources.
+
+Release selected claims when useful:
 
 ```bash
-{{ACC}} release --resource 'file:packages/core/**'
+{{ACC}} release --resource 'file:packages/core/**' \
+  --resource 'file:packages/protocol/**'
 ```
 
+Choose exactly one selector family: repeated `--resource`, repeated `--claim`,
+or `--all`. Duplicate selectors after normalization are rejected. A missing or
+foreign explicit target fails without releasing any claims. Repeating an explicit release after its targets were removed is an error.
+Batch release accepts no force-release authority.
+
+To release all your claims while keeping your session and intent open:
+
+```bash
+{{ACC}} release --all
+```
+
+This selects only your session's current claims in its workspace. An empty set
+succeeds. Each retry selects the current set and can release newly acquired claims.
+Use `work --clear` to clear intent, `ack` to acknowledge a message, and `finish`
+to record a handoff and close your ACC presence.
+
 ## Communicate only when it changes another agent's work
 
 Send a message for a dependency, conflict, direct question, decision, or

package/node_modules/@agents-can-communicate/adapter-codex/src/native-delivery.mjs

@@ -168,22 +168,25 @@ async function bindAttempt({ event, clientPid, clientVersion, runtimeDir,
 // what `codex --version` printed, and a daemon that had updated under its CLI
 // was refused here on that difference alone.
 async function receiverFor(binding, runtimeDir, platform = process.platform) {
-  const endpoint = await readNativeEndpoint({ runtimeDir, endpointId: binding?.opaqueEndpointRef, platform });
-  return endpoint !== null && await socketIsReady(endpoint.socketPath, { platform }) ? endpoint : null;
+  const endpoint = await readNativeEndpoint({ runtimeDir, endpointId: binding?.opaqueEndpointRef,
+    platform, throwPermissionErrors: true });
+  return endpoint !== null && await socketIsReady(endpoint.socketPath,
+    { platform, throwPermissionErrors: true }) ? endpoint : null;
 }
 
 export async function refreshNativeSession({ binding, runtimeDir, timeoutMs = 750,
   now = Date.now, open = openCodexAppServer, platform = process.platform } = {}) {
   const rejected = reason => closed(binding?.clientVersion, reason);
-  const endpoint = await receiverFor(binding, runtimeDir, platform);
-  if (endpoint === null) return rejected("handshake_failed");
   try {
+    const endpoint = await receiverFor(binding, runtimeDir, platform);
+    if (endpoint === null) return rejected("handshake_failed");
     return await usingPeer(endpoint.socketPath, timeoutMs, open, async peer => {
       const { reasonCode, servingVersion } = await verifyReceiver(peer, endpoint);
       return reasonCode === null
         ? handshake({ ...endpoint, clientVersion: servingVersion }, now) : rejected(reasonCode);
     });
   } catch (error) {
+    if (["EPERM", "EACCES"].includes(error?.code)) return rejected("transport_permission_denied");
     return rejected(error?.code === "ETIMEDOUT" ? "handshake_timeout" : "handshake_failed");
   }
 }
@@ -192,9 +195,9 @@ export async function offerMessage({ binding, message, runtimeDir, timeoutMs = 5
   open = openCodexAppServer, platform = process.platform } = {}) {
   const rejected = safeErrorCode => ({ accepted: false, transport: "codex-app-server",
     clientVersion: binding?.clientVersion ?? null, safeErrorCode });
-  const endpoint = await receiverFor(binding, runtimeDir, platform);
-  if (endpoint === null) return rejected("recipient_unavailable");
   try {
+    const endpoint = await receiverFor(binding, runtimeDir, platform);
+    if (endpoint === null) return rejected("recipient_unavailable");
     return await usingPeer(endpoint.socketPath, timeoutMs, open, async peer => {
       const { reasonCode, servingVersion } = await verifyReceiver(peer, endpoint);
       if (reasonCode !== null) return rejected(reasonCode === "handshake_timeout" ? "transport_error"

package/node_modules/@agents-can-communicate/adapter-codex/src/native-endpoint.mjs

@@ -50,18 +50,25 @@ async function directory(runtimeDir, create = false, platform = process.platform
  * 0.159.3), so there the socket counts while its directory lists it; Codex keeps
  * that directory to its user.
  */
-export async function socketIsReady(socketPath, { platform = process.platform } = {}) {
+export async function socketIsReady(socketPath, { platform = process.platform,
+  throwPermissionErrors = false } = {}) {
   if (isWindowsPlatform(platform)) {
     if (!absolute(socketPath)) return false;
     const name = path.basename(socketPath).toLowerCase();
-    const names = await readdir(path.dirname(socketPath)).catch(() => []);
+    const names = await readdir(path.dirname(socketPath)).catch(error => {
+      if (throwPermissionErrors && ["EPERM", "EACCES"].includes(error.code)) throw error;
+      return [];
+    });
     return names.some(entry => entry.toLowerCase() === name);
   }
   if (!absolute(socketPath)) return false;
   try {
     const info = await lstat(socketPath);
     return info.isSocket() && !info.isSymbolicLink() && own(info);
-  } catch { return false; }
+  } catch (error) {
+    if (throwPermissionErrors && ["EPERM", "EACCES"].includes(error.code)) throw error;
+    return false;
+  }
 }
 
 /** The socket a control socket path leads to, or null. Codex 0.157.1 keeps a
@@ -104,7 +111,8 @@ export async function writeNativeEndpoint({ runtimeDir, record, platform = proce
 
 // Expired records are metadata for revalidation, never proof of reachability.
 // Refuse links and oversized files before reading; no foreign error text escapes.
-export async function readNativeEndpoint({ runtimeDir, endpointId, platform = process.platform }) {
+export async function readNativeEndpoint({ runtimeDir, endpointId, platform = process.platform,
+  throwPermissionErrors = false }) {
   if (typeof endpointId !== "string" || !ENDPOINT.test(endpointId)) return null;
   let handle;
   try {
@@ -116,7 +124,10 @@ export async function readNativeEndpoint({ runtimeDir, endpointId, platform = pr
     }
     const record = JSON.parse(await handle.readFile("utf8"));
     return valid(record) && record.endpointId === endpointId ? record : null;
-  } catch { return null; }
+  } catch (error) {
+    if (throwPermissionErrors && ["EPERM", "EACCES"].includes(error.code)) throw error;
+    return null;
+  }
   finally { await handle?.close().catch(() => null); }
 }
 

package/node_modules/@agents-can-communicate/adapter-gemini-cli/extension/gemini-extension.json

@@ -1,6 +1,6 @@
 {
   "name": "agents-can-communicate",
-  "version": "0.10.3",
+  "version": "0.11.0",
   "description": "Coordinate this Gemini CLI session with other AI agent sessions working in the same workspace.",
   "contextFileName": "skills/acc/SKILL.md"
 }

package/node_modules/@agents-can-communicate/adapter-gemini-cli/extension/skills/acc/SKILL.md

@@ -57,19 +57,43 @@ Do this once, not every turn. Update it only when the scope or mode materially
 changes. `--hint` is important: it lets ACC match your plan against a peer's
 claim. Intent is awareness, not permission.
 
-Before changing shared files, claim the smallest useful resource:
+Before changing shared files, claim the smallest useful resources in one operation:
 
 ```bash
-{{ACC}} claim --resource 'file:packages/core/**' --reason "porting the store"
+{{ACC}} claim --resource 'file:packages/core/**' \
+  --resource 'file:packages/protocol/**' --reason "porting the claim model"
 ```
 
-Exit 5 means a conflict. Do not work around it silently. Narrow your scope,
-contact the owner, or ask the human. Give a claim back explicitly when useful:
+Repeat `--resource` for an atomic batch, or supply it once for one claim.
+Shared mode, enforcement, reason, and lease apply to every resource. Duplicate resources after
+normalization are rejected. Exit 5 means a conflict: no claim is created or
+renewed. Batch `details.conflicts` names blocked resources and their holders.
+Narrow your scope, contact the owner, or ask the human. Repeating a successful
+claim command renews your existing claims on those resources.
+
+Release selected claims when useful:
 
 ```bash
-{{ACC}} release --resource 'file:packages/core/**'
+{{ACC}} release --resource 'file:packages/core/**' \
+  --resource 'file:packages/protocol/**'
 ```
 
+Choose exactly one selector family: repeated `--resource`, repeated `--claim`,
+or `--all`. Duplicate selectors after normalization are rejected. A missing or
+foreign explicit target fails without releasing any claims. Repeating an explicit release after its targets were removed is an error.
+Batch release accepts no force-release authority.
+
+To release all your claims while keeping your session and intent open:
+
+```bash
+{{ACC}} release --all
+```
+
+This selects only your session's current claims in its workspace. An empty set
+succeeds. Each retry selects the current set and can release newly acquired claims.
+Use `work --clear` to clear intent, `ack` to acknowledge a message, and `finish`
+to record a handoff and close your ACC presence.
+
 ## Communicate only when it changes another agent's work
 
 Send a message for a dependency, conflict, direct question, decision, or

package/node_modules/@agents-can-communicate/adapter-gemini-cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/adapter-gemini-cli",
-  "version": "0.10.3",
+  "version": "0.11.0",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/adapter-grok/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/adapter-grok",
-  "version": "0.10.3",
+  "version": "0.11.0",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/adapter-grok/plugin/skills/acc/SKILL.md

@@ -73,19 +73,43 @@ Do this once, not every turn. Update it only when the scope or mode materially
 changes. `--hint` is important: it lets ACC match your plan against a peer's
 claim. Intent is awareness, not permission.
 
-Before changing shared files, claim the smallest useful resource:
+Before changing shared files, claim the smallest useful resources in one operation:
 
 ```bash
-{{ACC}} claim --resource 'file:packages/core/**' --reason "porting the store"
+{{ACC}} claim --resource 'file:packages/core/**' \
+  --resource 'file:packages/protocol/**' --reason "porting the claim model"
 ```
 
-Exit 5 means a conflict. Do not work around it silently. Narrow your scope,
-contact the owner, or ask the human. Give a claim back explicitly when useful:
+Repeat `--resource` for an atomic batch, or supply it once for one claim.
+Shared mode, enforcement, reason, and lease apply to every resource. Duplicate resources after
+normalization are rejected. Exit 5 means a conflict: no claim is created or
+renewed. Batch `details.conflicts` names blocked resources and their holders.
+Narrow your scope, contact the owner, or ask the human. Repeating a successful
+claim command renews your existing claims on those resources.
+
+Release selected claims when useful:
 
 ```bash
-{{ACC}} release --resource 'file:packages/core/**'
+{{ACC}} release --resource 'file:packages/core/**' \
+  --resource 'file:packages/protocol/**'
 ```
 
+Choose exactly one selector family: repeated `--resource`, repeated `--claim`,
+or `--all`. Duplicate selectors after normalization are rejected. A missing or
+foreign explicit target fails without releasing any claims. Repeating an explicit release after its targets were removed is an error.
+Batch release accepts no force-release authority.
+
+To release all your claims while keeping your session and intent open:
+
+```bash
+{{ACC}} release --all
+```
+
+This selects only your session's current claims in its workspace. An empty set
+succeeds. Each retry selects the current set and can release newly acquired claims.
+Use `work --clear` to clear intent, `ack` to acknowledge a message, and `finish`
+to record a handoff and close your ACC presence.
+
 ## Communicate only when it changes another agent's work
 
 Send a message for a dependency, conflict, direct question, decision, or