agents-can-communicate 0.2.0 → 0.3.0

package/node_modules/@agents-can-communicate/adapter-gemini-cli/extension/skills/acc/SKILL.md

@@ -70,8 +70,10 @@ Participant names come from `{{ACC}} status --json`. A request is not an order.
 ## Treat delivery as evidence
 
 Every send records durably before delivery is attempted. A queued diagnostic means
-the message is safe in the recipient's inbox. Exact-certified clients may offer it
-at the next normal turn; no shipped adapter currently has certified live push.
+the message is safe in the recipient's inbox. It may then be offered at the next
+normal turn, or, on a client with native delivery enabled, pushed into the running
+session. Delivery is behaviour, not a promise: a queued message is safe; an offered
+message reached a transport but is not proof the model read it.
 
 `offered` is not read, `retrieved` is not model attention, and a reply resolves
 the communication obligation rather than proving the requested action is complete.

package/node_modules/@agents-can-communicate/adapter-gemini-cli/fixtures/{BeforeAgent.json → BeforeAgent-0.57.0.json}

@@ -1,8 +1,8 @@
 {
-  "session_id": "4fe4a52a-ad70-451d-a5d1-3a58a309f291",
+  "session_id": "d3effafd-204b-4b94-8b01-ad3efed7bf18",
   "transcript_path": "<redacted: conversation transcript>",
   "cwd": "/tmp/example-workspace",
   "hook_event_name": "BeforeAgent",
-  "timestamp": "2026-08-16T07:26:52.819Z",
+  "timestamp": "2026-09-03T16:29:35.391Z",
   "prompt": "<redacted: conversation content>"
 }

package/node_modules/@agents-can-communicate/adapter-gemini-cli/fixtures/{BeforeTool.json → BeforeTool-0.57.0.json}

@@ -1,9 +1,9 @@
 {
-  "session_id": "4fe4a52a-ad70-451d-a5d1-3a58a309f291",
+  "session_id": "d3effafd-204b-4b94-8b01-ad3efed7bf18",
   "transcript_path": "<redacted: conversation transcript>",
   "cwd": "/tmp/example-workspace",
   "hook_event_name": "BeforeTool",
-  "timestamp": "2026-08-16T07:28:20.405Z",
+  "timestamp": "2026-09-03T16:29:35.450Z",
   "tool_name": "write_file",
   "tool_input": {
     "file_path": "/tmp/example-workspace/notes.txt",

package/node_modules/@agents-can-communicate/adapter-gemini-cli/fixtures/{BeforeTool-shell.json → BeforeTool-shell-0.57.0.json}

@@ -1,9 +1,9 @@
 {
-  "session_id": "4fe4a52a-ad70-451d-a5d1-3a58a309f291",
+  "session_id": "d3effafd-204b-4b94-8b01-ad3efed7bf18",
   "transcript_path": "<redacted: conversation transcript>",
   "cwd": "/tmp/example-workspace",
   "hook_event_name": "BeforeTool",
-  "timestamp": "2026-08-16T07:26:39.295Z",
+  "timestamp": "2026-09-03T16:29:35.868Z",
   "tool_name": "run_shell_command",
   "tool_input": {
     "command": "<redacted: conversation content>",

package/node_modules/@agents-can-communicate/adapter-gemini-cli/fixtures/{SessionEnd.json → SessionEnd-0.57.0.json}

@@ -1,8 +1,8 @@
 {
-  "session_id": "4fe4a52a-ad70-451d-a5d1-3a58a309f291",
+  "session_id": "d3effafd-204b-4b94-8b01-ad3efed7bf18",
   "transcript_path": "<redacted: conversation transcript>",
   "cwd": "/tmp/example-workspace",
   "hook_event_name": "SessionEnd",
-  "timestamp": "2026-08-16T07:28:20.484Z",
+  "timestamp": "2026-09-03T16:29:35.927Z",
   "reason": "exit"
 }

package/node_modules/@agents-can-communicate/adapter-gemini-cli/fixtures/{SessionStart.json → SessionStart-0.57.0.json}

@@ -1,8 +1,8 @@
 {
-  "session_id": "4fe4a52a-ad70-451d-a5d1-3a58a309f291",
+  "session_id": "d3effafd-204b-4b94-8b01-ad3efed7bf18",
   "transcript_path": "<redacted: conversation transcript>",
   "cwd": "/tmp/example-workspace",
   "hook_event_name": "SessionStart",
-  "timestamp": "2026-08-16T07:26:52.802Z",
+  "timestamp": "2026-09-03T16:29:35.381Z",
   "source": "startup"
 }

package/node_modules/@agents-can-communicate/adapter-gemini-cli/fixtures/certification-provenance.json

@@ -2,65 +2,292 @@
   "schemaVersion": 1,
   "captures": [
     {
-      "id": "session-start", "client": "gemini-cli", "version": "0.37.0",
-      "platform": "darwin-arm64", "observedAt": "2026-08-16",
+      "id": "session-start",
+      "client": "gemini-cli",
+      "version": "0.37.0",
+      "platform": "darwin-arm64",
+      "observedAt": "2026-08-16",
       "fixture": "fixtures/SessionStart.json",
       "sha256": "30ee33373127ebedea181f743dc606a193911f6a259d58ef4cdedffc09512ad3",
-      "event": "SessionStart", "tool": null,
-      "claims": [{ "capability": "lifecycle.sessionStart", "result": "pass",
-        "outcome": { "kind": "event-observed", "idle": "fires when a session starts",
-          "busy": "fires before the first model turn", "authority": "advisory",
-          "limitations": ["capture used temporary project settings"] } }]
+      "event": "SessionStart",
+      "tool": null,
+      "claims": [
+        {
+          "capability": "lifecycle.sessionStart",
+          "result": "pass",
+          "outcome": {
+            "kind": "event-observed",
+            "idle": "fires when a session starts",
+            "busy": "fires before the first model turn",
+            "authority": "advisory",
+            "limitations": [
+              "capture used temporary project settings"
+            ]
+          }
+        }
+      ]
     },
     {
-      "id": "session-end", "client": "gemini-cli", "version": "0.37.0",
-      "platform": "darwin-arm64", "observedAt": "2026-08-16",
+      "id": "session-end",
+      "client": "gemini-cli",
+      "version": "0.37.0",
+      "platform": "darwin-arm64",
+      "observedAt": "2026-08-16",
       "fixture": "fixtures/SessionEnd.json",
       "sha256": "e4a61680c96b4d1a921a142e29b34b667cd843cfb27f361c05efb07dfea75796",
-      "event": "SessionEnd", "tool": null,
-      "claims": [{ "capability": "lifecycle.sessionEnd", "result": "pass",
-        "outcome": { "kind": "event-observed", "idle": "fires when a session exits",
-          "busy": "does not run until the session exits", "authority": "advisory",
-          "limitations": ["handoff must be written before session end"] } }]
+      "event": "SessionEnd",
+      "tool": null,
+      "claims": [
+        {
+          "capability": "lifecycle.sessionEnd",
+          "result": "pass",
+          "outcome": {
+            "kind": "event-observed",
+            "idle": "fires when a session exits",
+            "busy": "does not run until the session exits",
+            "authority": "advisory",
+            "limitations": [
+              "handoff must be written before session end"
+            ]
+          }
+        }
+      ]
     },
     {
-      "id": "before-agent", "client": "gemini-cli", "version": "0.37.0",
-      "platform": "darwin-arm64", "observedAt": "2026-08-16",
+      "id": "before-agent",
+      "client": "gemini-cli",
+      "version": "0.37.0",
+      "platform": "darwin-arm64",
+      "observedAt": "2026-08-16",
       "fixture": "fixtures/BeforeAgent.json",
       "sha256": "87e1baebbf94ecd7d6a56d92a594a095f20d893bcde7e46ad053f164855528d5",
-      "event": "BeforeAgent", "tool": null,
+      "event": "BeforeAgent",
+      "tool": null,
       "claims": [
-        { "capability": "context.beforeTurnInjection", "result": "pass",
-          "outcome": { "kind": "model-context-observed", "idle": "waits for the next user prompt",
-            "busy": "does not interrupt an in-progress turn", "authority": "context",
-            "limitations": ["requires the hookSpecificOutput additionalContext envelope"] } },
-        { "capability": "delivery.nextTurn", "result": "pass",
-          "outcome": { "kind": "model-context-observed", "idle": "offers complete peer messages at the next prompt",
-            "busy": "does not interrupt an in-progress turn", "authority": "context",
-            "limitations": ["delivery requires the next normal user turn"] } }
+        {
+          "capability": "context.beforeTurnInjection",
+          "result": "pass",
+          "outcome": {
+            "kind": "model-context-observed",
+            "idle": "waits for the next user prompt",
+            "busy": "does not interrupt an in-progress turn",
+            "authority": "context",
+            "limitations": [
+              "requires the hookSpecificOutput additionalContext envelope"
+            ]
+          }
+        },
+        {
+          "capability": "delivery.nextTurn",
+          "result": "pass",
+          "outcome": {
+            "kind": "model-context-observed",
+            "idle": "offers complete peer messages at the next prompt",
+            "busy": "does not interrupt an in-progress turn",
+            "authority": "context",
+            "limitations": [
+              "delivery requires the next normal user turn"
+            ]
+          }
+        }
       ]
     },
     {
-      "id": "before-tool-write", "client": "gemini-cli", "version": "0.37.0",
-      "platform": "darwin-arm64", "observedAt": "2026-08-16",
+      "id": "before-tool-write",
+      "client": "gemini-cli",
+      "version": "0.37.0",
+      "platform": "darwin-arm64",
+      "observedAt": "2026-08-16",
       "fixture": "fixtures/BeforeTool.json",
       "sha256": "23c08aaf65f4b3bc060e99fdb7fab0c2db7242a0fc0e86b6dea02e85e8b1383c",
-      "event": "BeforeTool", "tool": "write_file",
-      "claims": [{ "capability": "guards.beforeWrite", "result": "pass",
-        "outcome": { "kind": "tool-denied-before-mutation", "idle": "no write exists to guard",
-          "busy": "blocks write_file before mutation", "authority": "blocking",
-          "limitations": ["write tools are unavailable in plan mode"] } }]
+      "event": "BeforeTool",
+      "tool": "write_file",
+      "claims": [
+        {
+          "capability": "guards.beforeWrite",
+          "result": "pass",
+          "outcome": {
+            "kind": "tool-denied-before-mutation",
+            "idle": "no write exists to guard",
+            "busy": "blocks write_file before mutation",
+            "authority": "blocking",
+            "limitations": [
+              "write tools are unavailable in plan mode"
+            ]
+          }
+        }
+      ]
     },
     {
-      "id": "before-tool-shell", "client": "gemini-cli", "version": "0.37.0",
-      "platform": "darwin-arm64", "observedAt": "2026-08-16",
+      "id": "before-tool-shell",
+      "client": "gemini-cli",
+      "version": "0.37.0",
+      "platform": "darwin-arm64",
+      "observedAt": "2026-08-16",
       "fixture": "fixtures/BeforeTool-shell.json",
       "sha256": "05dc4f6fb0aa6fa59a195fbbb4faf0c05db8cb12ce6098c6a1bba3b62065a285",
-      "event": "BeforeTool", "tool": "run_shell_command",
-      "claims": [{ "capability": "guards.beforeShell", "result": "pass",
-        "outcome": { "kind": "tool-denied-before-execution", "idle": "no shell call exists to guard",
-          "busy": "blocks run_shell_command before execution", "authority": "blocking",
-          "limitations": ["shell tools depend on approval mode"] } }]
+      "event": "BeforeTool",
+      "tool": "run_shell_command",
+      "claims": [
+        {
+          "capability": "guards.beforeShell",
+          "result": "pass",
+          "outcome": {
+            "kind": "tool-denied-before-execution",
+            "idle": "no shell call exists to guard",
+            "busy": "blocks run_shell_command before execution",
+            "authority": "blocking",
+            "limitations": [
+              "shell tools depend on approval mode"
+            ]
+          }
+        }
+      ]
+    },
+    {
+      "id": "session-start-0-57-0",
+      "client": "gemini-cli",
+      "version": "0.57.0",
+      "platform": "darwin-arm64",
+      "observedAt": "2026-09-03",
+      "fixture": "fixtures/SessionStart-0.57.0.json",
+      "sha256": "00f008ea112e8be1c49dfad2cf03a319cdd7b07e1fc436615539864e3f30fe00",
+      "event": "SessionStart",
+      "tool": null,
+      "claims": [
+        {
+          "capability": "lifecycle.sessionStart",
+          "result": "pass",
+          "outcome": {
+            "kind": "event-observed",
+            "idle": "fires when a session starts",
+            "busy": "fires before the first model turn",
+            "authority": "advisory",
+            "limitations": [
+              "capture used an isolated HOME and a locally stubbed model endpoint"
+            ]
+          }
+        }
+      ]
+    },
+    {
+      "id": "session-end-0-57-0",
+      "client": "gemini-cli",
+      "version": "0.57.0",
+      "platform": "darwin-arm64",
+      "observedAt": "2026-09-03",
+      "fixture": "fixtures/SessionEnd-0.57.0.json",
+      "sha256": "5f1400f3ae607b16e2318325f33f7a32abe9ff71ace78facfb0ea8c799c3a0f4",
+      "event": "SessionEnd",
+      "tool": null,
+      "claims": [
+        {
+          "capability": "lifecycle.sessionEnd",
+          "result": "pass",
+          "outcome": {
+            "kind": "event-observed",
+            "idle": "fires when a session exits",
+            "busy": "does not run until the session exits",
+            "authority": "advisory",
+            "limitations": [
+              "handoff must be written before session end"
+            ]
+          }
+        }
+      ]
+    },
+    {
+      "id": "before-agent-0-57-0",
+      "client": "gemini-cli",
+      "version": "0.57.0",
+      "platform": "darwin-arm64",
+      "observedAt": "2026-09-03",
+      "fixture": "fixtures/BeforeAgent-0.57.0.json",
+      "sha256": "ce955c2067f95ee4fd451955d0e154e056d2399d52301afa0ac90a300cbcee3e",
+      "event": "BeforeAgent",
+      "tool": null,
+      "claims": [
+        {
+          "capability": "context.beforeTurnInjection",
+          "result": "pass",
+          "outcome": {
+            "kind": "model-context-observed",
+            "idle": "waits for the next user prompt",
+            "busy": "does not interrupt an in-progress turn",
+            "authority": "context",
+            "limitations": [
+              "requires the hookSpecificOutput additionalContext envelope; the client forwards it to the model as a <hook_context> part"
+            ]
+          }
+        },
+        {
+          "capability": "delivery.nextTurn",
+          "result": "pass",
+          "outcome": {
+            "kind": "model-context-observed",
+            "idle": "offers complete peer messages at the next prompt",
+            "busy": "does not interrupt an in-progress turn",
+            "authority": "context",
+            "limitations": [
+              "delivery requires the next normal user turn"
+            ]
+          }
+        }
+      ]
+    },
+    {
+      "id": "before-tool-write-0-57-0",
+      "client": "gemini-cli",
+      "version": "0.57.0",
+      "platform": "darwin-arm64",
+      "observedAt": "2026-09-03",
+      "fixture": "fixtures/BeforeTool-0.57.0.json",
+      "sha256": "19c27c915c33b3f6c8f3c9d23dd0d42674d82d47cda54565fd84fd3cf1a4a09c",
+      "event": "BeforeTool",
+      "tool": "write_file",
+      "claims": [
+        {
+          "capability": "guards.beforeWrite",
+          "result": "pass",
+          "outcome": {
+            "kind": "tool-denied-before-mutation",
+            "idle": "no write exists to guard",
+            "busy": "blocks write_file before mutation",
+            "authority": "blocking",
+            "limitations": [
+              "write tools are absent in the default and plan approval modes; the capture used yolo",
+              "an untrusted folder silently downgrades the approval mode, so the capture disabled security.folderTrust"
+            ]
+          }
+        }
+      ]
+    },
+    {
+      "id": "before-tool-shell-0-57-0",
+      "client": "gemini-cli",
+      "version": "0.57.0",
+      "platform": "darwin-arm64",
+      "observedAt": "2026-09-03",
+      "fixture": "fixtures/BeforeTool-shell-0.57.0.json",
+      "sha256": "fb82c02b935d2ffcf414fc3487342f002d413ad90e21f7e2c7c67b63dbaf97e8",
+      "event": "BeforeTool",
+      "tool": "run_shell_command",
+      "claims": [
+        {
+          "capability": "guards.beforeShell",
+          "result": "pass",
+          "outcome": {
+            "kind": "tool-denied-before-execution",
+            "idle": "no shell call exists to guard",
+            "busy": "blocks run_shell_command before execution",
+            "authority": "blocking",
+            "limitations": [
+              "run_shell_command is absent below the yolo approval mode",
+              "a deny must be {\"decision\":\"block\"}; the hookSpecificOutput permissionDecision shape still does not deny on this client"
+            ]
+          }
+        }
+      ]
     }
   ]
 }

package/node_modules/@agents-can-communicate/adapter-gemini-cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/adapter-gemini-cli",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "private": true,
   "type": "module",
   "exports": {
@@ -9,11 +9,11 @@
   "files": [
     "certification.json",
     "fixtures/certification-provenance.json",
-    "fixtures/SessionStart.json",
-    "fixtures/SessionEnd.json",
-    "fixtures/BeforeAgent.json",
-    "fixtures/BeforeTool.json",
-    "fixtures/BeforeTool-shell.json",
+    "fixtures/SessionStart-0.57.0.json",
+    "fixtures/SessionEnd-0.57.0.json",
+    "fixtures/BeforeAgent-0.57.0.json",
+    "fixtures/BeforeTool-0.57.0.json",
+    "fixtures/BeforeTool-shell-0.57.0.json",
     "src/",
     "extension/"
   ]

package/node_modules/@agents-can-communicate/adapter-gemini-cli/src/adapter.mjs

@@ -5,11 +5,13 @@ import certification from "../certification.json" with { type: "json" };
 import { denyOutcome, injectOutcome, normalizeGeminiHook } from "./hooks.mjs";
 import { planGeminiInstall, detectGemini, installGeminiExtension, uninstallGeminiExtension } from "./install.mjs";
 
-// Verified on both. The version jump changed how a session is authenticated and
-// how a turn is routed, and changed neither the hook events nor either of the
-// two response contracts.
-export const GEMINI_CLI_VERSIONS = Object.freeze(["0.37.0", "0.55.1"]);
-export const GEMINI_CLI_VERSION = "0.55.1";
+// Verified on all three. Two version jumps changed how a session is
+// authenticated, how a turn is routed, and whether a folder is trusted at all,
+// and changed neither the hook events nor either of the two response contracts.
+// The certified tier is the last of them, because that is the one this client
+// is shipped as; the earlier captures stay in provenance as history.
+export const GEMINI_CLI_VERSIONS = Object.freeze(["0.37.0", "0.55.1", "0.57.0"]);
+export const GEMINI_CLI_VERSION = "0.57.0";
 
 /**
  * The gap this adapter used to carry is closed.
@@ -25,6 +27,14 @@ export const GEMINI_CLI_VERSION = "0.55.1";
  * measured rather than assumed: a deny must be `{"decision":"block"}`, while an
  * injection must be the `hookSpecificOutput` envelope. Swapping them silently
  * does nothing at all.
+ *
+ * Re-measured the same way on 0.57.0, the version this client now ships as, and
+ * both contracts still hold: a `{"decision":"block"}` deny left the workspace
+ * empty with no AfterTool event, while the `permissionDecision` shape other
+ * clients accept let the write through. Injection was checked at the far end
+ * rather than at the hook: a marker returned as `additionalContext` arrived in
+ * the request the client sent to the model, as its own `<hook_context>` part.
+ * Printing an envelope is not evidence that anything consumed it.
  */
 export function createGeminiCliAdapter() {
   return defineAdapter({
@@ -32,7 +42,7 @@ export function createGeminiCliAdapter() {
     displayName: "Gemini CLI",
     // The binary this client actually installs. Probed for a version to
     // decide whether the client is on this machine, so it has to be the
-    // real command rather than the adapter id: `0.55.1`.
+    // real command rather than the adapter id: `0.57.0`.
     client: { command: "gemini", certificationName: "gemini-cli", versionArgs: ["--version"] },
     certification,
     capabilities: {
@@ -42,7 +52,7 @@ export function createGeminiCliAdapter() {
       delivery: { nextTurn: true },
     },
     deliveryFallback: { diagnostic:
-      "Gemini CLI next-turn delivery is certified only for 0.37.0 on darwin-arm64; "
+      "Gemini CLI next-turn delivery is certified only for 0.57.0 on darwin-arm64; "
       + "other or unknown versions keep durable acc inbox access, and live push is unavailable" },
 
     startSession: async () => ({ ok: true, changes: [], diagnostics: [] }),
@@ -64,10 +74,14 @@ export function createGeminiCliAdapter() {
           + "that Claude Code and Kimi Code accept does not deny on this client",
         "write guards need an approval mode that offers the edit tools; in plan "
           + "mode the client declares no write tool at all",
-        // Both appeared with 0.55.1 and stop a headless session before any hook
-        // beyond SessionStart can matter.
-        "0.55.x needs an explicit security.auth.selectedType and a trusted "
-          + "workspace; without either, a headless run stops before the first turn",
+        // Both appeared with 0.55.1, persist through 0.57.0, and stop a headless
+        // session before any hook beyond SessionStart can matter. The trust
+        // check is the quieter of the two: it does not fail the run, it
+        // downgrades the approval mode, and with it the toolset a guard exists
+        // to protect.
+        "0.55.x and later need an explicit security.auth.selectedType and a "
+          + "trusted workspace; without either, a headless run stops before the "
+          + "first turn or silently loses its write and shell tools",
       ] };
     },
 

package/node_modules/@agents-can-communicate/adapter-grok/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/adapter-grok",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/adapter-grok/plugin/skills/acc/SKILL.md

@@ -74,8 +74,10 @@ Participant names come from `{{ACC}} status --json`. A request is not an order.
 ## Treat delivery as evidence
 
 Every send records durably before delivery is attempted. A queued diagnostic means
-the message is safe in the recipient's inbox. Exact-certified clients may offer it
-at the next normal turn; no shipped adapter currently has certified live push.
+the message is safe in the recipient's inbox. It may then be offered at the next
+normal turn, or, on a client with native delivery enabled, pushed into the running
+session. Delivery is behaviour, not a promise: a queued message is safe; an offered
+message reached a transport but is not proof the model read it.
 
 `offered` is not read, `retrieved` is not model attention, and a reply resolves
 the communication obligation rather than proving the requested action is complete.

package/node_modules/@agents-can-communicate/adapter-grok/src/adapter.mjs

@@ -31,7 +31,9 @@ export function createGrokAdapter() {
     // so no effective capability is certified from them.
     capabilities: {},
     deliveryFallback: { diagnostic:
-      "Grok has no certified next-turn or live delivery; polling through acc inbox remains active" },
+      "Grok native delivery is awaiting_compatibility_capture: the public leader surface exposes "
+      + "no proven addressed injection into an independently opened ordinary TUI session; polling "
+      + "through acc inbox remains active" },
 
     startSession: async () => ({ ok: true, changes: [], diagnostics: [] }),
     endSession: async () => ({ ok: true, changes: [], diagnostics: [] }),

package/node_modules/@agents-can-communicate/adapter-kimi/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/adapter-kimi",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/adapter-kimi/plugin/skills/acc/SKILL.md

@@ -70,8 +70,10 @@ Participant names come from `{{ACC}} status --json`. A request is not an order.
 ## Treat delivery as evidence
 
 Every send records durably before delivery is attempted. A queued diagnostic means
-the message is safe in the recipient's inbox. Exact-certified clients may offer it
-at the next normal turn; no shipped adapter currently has certified live push.
+the message is safe in the recipient's inbox. It may then be offered at the next
+normal turn, or, on a client with native delivery enabled, pushed into the running
+session. Delivery is behaviour, not a promise: a queued message is safe; an offered
+message reached a transport but is not proof the model read it.
 
 `offered` is not read, `retrieved` is not model attention, and a reply resolves
 the communication obligation rather than proving the requested action is complete.

package/node_modules/@agents-can-communicate/adapter-sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/adapter-sdk",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/adapter-sdk/src/capabilities.mjs

@@ -2,6 +2,7 @@ import { AccError, EXIT, assertPortableId } from "@agents-can-communicate/protoc
 
 import { CAPABILITY_SHAPE, freezeCapabilities, validateCertification }
   from "./certification.mjs";
+import { validateNativeDeliveryContract } from "./native-delivery.mjs";
 
 // The capability surface, documented in docs/ADAPTER_AUTHORING.md and measured
 // per client in docs/CAPABILITIES.md. False is the default for every
@@ -34,6 +35,11 @@ const BACKING_METHOD = Object.freeze({
 const BASE_METHODS = Object.freeze(["detect", "install", "uninstall", "doctor",
   "normalizeHook", "renderContext"]);
 
+// A static native-delivery contract is only honest with the three methods
+// that read the client, plan its activation, and bind a live session.
+const NATIVE_METHODS = Object.freeze(["probeNativeDelivery", "planNativeActivation",
+  "bindNativeSession"]);
+
 function usage(message, details = {}) {
   throw new AccError(EXIT.USAGE, message, details);
 }
@@ -109,9 +115,21 @@ export function defineAdapter(manifest) {
         { evidenceClient: item.client, client });
     }
   }
+  const native = {};
+  if (manifest.nativeDelivery !== undefined) {
+    const client = manifest.client.certificationName ?? manifest.client.command;
+    native.nativeDelivery = validateNativeDeliveryContract(manifest.nativeDelivery,
+      { certification, client });
+    for (const method of NATIVE_METHODS) {
+      if (typeof manifest[method] !== "function") {
+        usage(`a native delivery contract requires ${method}()`, { id: manifest.id, method });
+      }
+    }
+  }
   return Object.freeze({
     ...manifest,
     certification,
+    ...native,
     capabilities: assertCapabilities(manifest.capabilities, manifest, certification),
   });
 }

package/node_modules/@agents-can-communicate/adapter-sdk/src/hook-shim.mjs

@@ -58,6 +58,8 @@ const ownBinary = name => {
 };
 
 export const defaultRunner = () => ownBinary("acc-hook.mjs");
+export const defaultBootstrap = () => ownBinary("acc-bootstrap.mjs");
+export const defaultChannel = () => ownBinary("acc-claude-channel.mjs");
 
 export const runnerExists = async runner => {
   try {