agents-can-communicate 0.3.0 → 0.4.0

package/node_modules/@agents-can-communicate/adapter-claude-code/src/install.mjs

@@ -152,7 +152,7 @@ async function writeChannelMcp(target, { node, channel }) {
 }
 
 /** A plugin tree with the shim written and the skill's command baked in. */
-async function layOutPlugin(target, { runner, node, channel, live }) {
+async function layOutPlugin(target, { runner, node, cli, channel, live }) {
   await rm(target, { recursive: true, force: true });
   await cp(bundle, target, { recursive: true });
   // The bundle ships a placeholder .mcp.json; the real one is written only for a
@@ -161,7 +161,7 @@ async function layOutPlugin(target, { runner, node, channel, live }) {
   if (live) await writeChannelMcp(target, { node, channel });
   // The skill ships with a placeholder where the command belongs: `acc` is not
   // on PATH everywhere, and an agent that cannot run it improvises.
-  await bakeSkillCommand({ root: target, node });
+  await bakeSkillCommand({ root: target, node, cli });
   // The bundle's hooks.json names this script, and nothing else writes it.
   await writeHookShim({ dir: path.join(target, "hooks"), adapterId: "claude_code",
     runner, node });
@@ -172,7 +172,7 @@ async function layOutPlugin(target, { runner, node, channel, live }) {
     version: await pluginVersion(), io: { readFile, writeFile } });
 }
 
-export async function installClaudePlugin({ configDir, runner, node = process.execPath,
+export async function installClaudePlugin({ configDir, runner, cli, preserveVersions = false, node = process.execPath,
   channel = defaultChannel(), livePolicy = "off", now = new Date() }) {
   const live = livePolicy === "actionable" || livePolicy === "all";
   // Everything this will merge into, read before a byte is written. A settings
@@ -191,16 +191,16 @@ export async function installClaudePlugin({ configDir, runner, node = process.ex
   const source = sourceDir(configDir);
   const cached = cachePath(configDir, version);
 
-  await layOutPlugin(source, { runner, node, channel, live });
+  await layOutPlugin(source, { runner, node, cli, channel, live });
   await writeJson(marketplaceFile(configDir), marketplaceManifest());
   // The copy the client runs from. Written here rather than asking the user to
   // run `claude plugin install`, exactly as the Codex adapter does, because the
   // command's only effect is this copy plus the two registry entries below.
-  await layOutPlugin(cached, { runner, node, channel, live });
+  await layOutPlugin(cached, { runner, node, cli, channel, live });
   // One copy, the one just written. A client caches a plugin under its version,
   // so every upgrade would otherwise leave the previous release's tree beside
   // this one - invisible while the version never moved, three deep once it did.
-  await keepOnlyVersion({ root: path.dirname(cached), version,
+  if (!preserveVersions) await keepOnlyVersion({ root: path.dirname(cached), version,
     io: { readdir, rm } });
 
   await writeClientJson(knownMarketplacesPath(configDir), {

package/node_modules/@agents-can-communicate/adapter-claude-code/src/native-delivery.mjs

@@ -1,6 +1,7 @@
 import { readFile, readdir, stat } from "node:fs/promises";
 import net from "node:net";
 import path from "node:path";
+import { decisionBody } from "@agents-can-communicate/adapter-sdk";
 
 import { PROTOCOL_CONTRACT, endpointDir, isSocketSafe, readRegistration, routeAck, routeReply }
   from "./channel.mjs";
@@ -197,7 +198,7 @@ export async function offerMessage({ binding, message, runtimeDir, timeoutMs = 2
 
 function sendEnvelope({ record, message, binding, connect, timeoutMs, rejected }) {
   const envelope = { nonce: record.nonce, messageId: message.messageId, kind: message.kind,
-    subject: message.subject ?? "", body: message.body ?? "",
+    subject: message.subject ?? "", body: decisionBody(message),
     ...(typeof message.inReplyTo === "string" ? { inReplyTo: message.inReplyTo } : {}) };
   return new Promise(resolve => {
     const socket = connect(record.socketPath);

package/node_modules/@agents-can-communicate/adapter-codex/certification.json

@@ -127,24 +127,49 @@
       "client": "codex-cli",
       "version": "0.152.1",
       "platform": "darwin-arm64",
-      "observedAt": "2026-09-03T04:45:00.000Z",
+      "observedAt": "2026-09-08T10:45:27.843Z",
       "capability": "delivery.livePush",
-      "fixture": "fixtures/delivery/codex-cli-0.152.1-remote-workspace.json",
+      "fixture": "fixtures/delivery/codex-cli-0.152.1-local-daemon-current-binding-product.json",
       "provenance": "fixtures/certification-provenance.json",
-      "provenanceId": "native-delivery-0-152-1-remote-workspace",
-      "idleBehavior": "unobserved",
-      "busyBehavior": "unobserved",
+      "provenanceId": "native-delivery-0-152-1-local-daemon-current-binding-product",
+      "idleBehavior": "offered",
+      "busyBehavior": "queued_after_turn",
       "authorityLevel": "experimental",
       "limitations": [
-        "release capture on the installed tarball, with the vendor daemon already running from a directory other than the session's",
-        "native delivery requires codex --remote unix://, and in that mode the session runs inside the daemon",
-        "the SessionStart hook payload reported cwd as the daemon's directory rather than the client's: the client was working in a temporary capture project while the payload named the daemon's own checkout",
-        "the App Server's own thread/list recorded that same daemon directory for the live thread, so the session's workspace is not available from anything ACC can reach",
-        "ACC placed the session in an unrelated workspace and injected that workspace's peers into it",
-        "no delivery branch could be observed because the session was never addressable from the workspace it was actually in",
-        "the earlier 0.152.1 pass started the daemon itself in the session's own directory, so the two directories coincided and the substitution was invisible"
+        "Observed on darwin-arm64 with an already-running LocalDaemon and ordinary commands; ACC adds no launch arguments and owns no vendor daemon lifecycle.",
+        "Recorded recipient opt-in and exact current thread, canonical cwd, live process, stable version and protocol checks are required for every session.",
+        "A 120-second delivery lease can refresh on demand for the same non-retired endpoint; this does not renew the 24-hour presence expiry.",
+        "Unsupported or Embedded sessions and unreachable or rejected endpoints retain durable inbox delivery; accepted vendor queue entries cannot be withdrawn by policy off or uninstall.",
+        "A loaded daemon thread may execute opted-in messages after its TUI exits. TUI detachment is not SessionEnd; explicit thread archive or actual server teardown retires it.",
+        "Transport deduplication covers a pending queue entry only. Execution can repeat after queue consumption and acknowledgement loss.",
+        "The observed reply loop uses the installed acc reply CLI; native delivery.replyRoute remains false. No new lifecycle, guard or next-turn certification follows.",
+        "P16 is controlled endpoint fault injection. P18 uses an actual legacy npm artifact; its unrelated Claude shell artifact is not a real Claude capability capture."
       ],
-      "result": "fail"
+      "result": "pass"
+    },
+    {
+      "client": "codex-cli",
+      "version": "0.153.4",
+      "platform": "darwin-arm64",
+      "observedAt": "2026-09-08T10:45:35.663Z",
+      "capability": "delivery.livePush",
+      "fixture": "fixtures/delivery/codex-cli-0.153.4-local-daemon-current-binding-product.json",
+      "provenance": "fixtures/certification-provenance.json",
+      "provenanceId": "native-delivery-0-153-4-local-daemon-current-binding-product",
+      "idleBehavior": "offered",
+      "busyBehavior": "queued_after_turn",
+      "authorityLevel": "experimental",
+      "limitations": [
+        "Observed on darwin-arm64 with an already-running LocalDaemon and ordinary commands; ACC adds no launch arguments and owns no vendor daemon lifecycle.",
+        "Recorded recipient opt-in and exact current thread, canonical cwd, live process, stable version and protocol checks are required for every session.",
+        "A 120-second delivery lease can refresh on demand for the same non-retired endpoint; this does not renew the 24-hour presence expiry.",
+        "Unsupported or Embedded sessions and unreachable or rejected endpoints retain durable inbox delivery; accepted vendor queue entries cannot be withdrawn by policy off or uninstall.",
+        "A loaded daemon thread may execute opted-in messages after its TUI exits. TUI detachment is not SessionEnd; explicit thread archive or actual server teardown retires it.",
+        "Transport deduplication covers a pending queue entry only. Execution can repeat after queue consumption and acknowledgement loss.",
+        "The observed reply loop uses the installed acc reply CLI; native delivery.replyRoute remains false. No new lifecycle, guard or next-turn certification follows.",
+        "P16 is controlled endpoint fault injection. P18 uses an actual legacy npm artifact; its unrelated Claude shell artifact is not a real Claude capability capture."
+      ],
+      "result": "pass"
     }
   ]
 }

package/node_modules/@agents-can-communicate/adapter-codex/fixtures/certification-provenance.json

@@ -194,6 +194,226 @@
           }
         }
       ]
+    },
+    {
+      "id": "native-delivery-0-152-1-local-daemon-product",
+      "client": "codex-cli",
+      "version": "0.152.1",
+      "platform": "darwin-arm64",
+      "observedAt": "2026-09-08T09:42:03.910Z",
+      "fixture": "fixtures/delivery/codex-cli-0.152.1-local-daemon-product.json",
+      "sha256": "12ba4994612c8ac38adb3f02bac4710b14dc897c8ae51f41d5ac8f81efcda7a9",
+      "event": null,
+      "tool": null,
+      "claims": [
+        {
+          "capability": "delivery.livePush",
+          "result": "pass",
+          "outcome": {
+            "kind": "native-delivery-observed",
+            "idle": "offered",
+            "busy": "queued_after_turn",
+            "authority": "experimental",
+            "limitations": [
+              "Observed on darwin-arm64 with an already-running LocalDaemon and ordinary commands; ACC adds no launch arguments and owns no vendor daemon lifecycle.",
+              "Recorded recipient opt-in and exact current thread, canonical cwd, live process, stable version and protocol checks are required for every session.",
+              "A 120-second delivery lease can refresh on demand for the same non-retired endpoint; this does not renew the 24-hour presence expiry.",
+              "Unsupported or Embedded sessions and unreachable or rejected endpoints retain durable inbox delivery; accepted vendor queue entries cannot be withdrawn by policy off or uninstall.",
+              "A loaded daemon thread may execute opted-in messages after its TUI exits. TUI detachment is not SessionEnd; explicit thread archive or actual server teardown retires it.",
+              "Transport deduplication covers a pending queue entry only. Execution can repeat after queue consumption and acknowledgement loss.",
+              "The observed reply loop uses the installed acc reply CLI; native delivery.replyRoute remains false. No new lifecycle, guard or next-turn certification follows.",
+              "P16 is controlled endpoint fault injection. P18 uses an actual legacy npm artifact; its unrelated Claude shell artifact is not a real Claude capability capture."
+            ]
+          }
+        }
+      ],
+      "productEvidence": {
+        "fixture": "fixtures/delivery/codex-cli-0.152.1-local-daemon-product-evidence.json",
+        "sha256": "1a53d02db21a472ba7e8b37cca3d935826a3e1a17a8c17223dc56ecbebac1e21"
+      },
+      "historicalFixtures": [
+        {
+          "fixture": "fixtures/delivery/codex-cli-0.152.1-local-daemon-transport.json",
+          "sha256": "3cea07a9d655b7a78764eacd30bbcdc941a81095633ba08eee1c1c0900958c18"
+        },
+        {
+          "fixture": "fixtures/delivery/codex-cli-0.152.1-local-daemon-transport-evidence.json",
+          "sha256": "911a8e451bd726aedfb2be9379ed521e4042b2c7a8be1f280349dbeabc101cf1"
+        },
+        {
+          "fixture": "fixtures/delivery/codex-cli-0.152.1-remote-workspace.json",
+          "sha256": "e4f419111d254223f3930eeee61c30c447bb68dd51a4faf81be2a33b144bbaca"
+        }
+      ]
+    },
+    {
+      "id": "native-delivery-0-153-4-local-daemon-product",
+      "client": "codex-cli",
+      "version": "0.153.4",
+      "platform": "darwin-arm64",
+      "observedAt": "2026-09-08T09:42:02.609Z",
+      "fixture": "fixtures/delivery/codex-cli-0.153.4-local-daemon-product.json",
+      "sha256": "35cc452a24dd9cbbb4a0f130928ce8b3ed89784d362518d6997cded3b5ea2c1b",
+      "event": null,
+      "tool": null,
+      "claims": [
+        {
+          "capability": "delivery.livePush",
+          "result": "pass",
+          "outcome": {
+            "kind": "native-delivery-observed",
+            "idle": "offered",
+            "busy": "queued_after_turn",
+            "authority": "experimental",
+            "limitations": [
+              "Observed on darwin-arm64 with an already-running LocalDaemon and ordinary commands; ACC adds no launch arguments and owns no vendor daemon lifecycle.",
+              "Recorded recipient opt-in and exact current thread, canonical cwd, live process, stable version and protocol checks are required for every session.",
+              "A 120-second delivery lease can refresh on demand for the same non-retired endpoint; this does not renew the 24-hour presence expiry.",
+              "Unsupported or Embedded sessions and unreachable or rejected endpoints retain durable inbox delivery; accepted vendor queue entries cannot be withdrawn by policy off or uninstall.",
+              "A loaded daemon thread may execute opted-in messages after its TUI exits. TUI detachment is not SessionEnd; explicit thread archive or actual server teardown retires it.",
+              "Transport deduplication covers a pending queue entry only. Execution can repeat after queue consumption and acknowledgement loss.",
+              "The observed reply loop uses the installed acc reply CLI; native delivery.replyRoute remains false. No new lifecycle, guard or next-turn certification follows.",
+              "P16 is controlled endpoint fault injection. P18 uses an actual legacy npm artifact; its unrelated Claude shell artifact is not a real Claude capability capture."
+            ]
+          }
+        }
+      ],
+      "productEvidence": {
+        "fixture": "fixtures/delivery/codex-cli-0.153.4-local-daemon-product-evidence.json",
+        "sha256": "81ff85c16e7320df233d353267bf216dc2c40ee5b86ccbcc2e2fe754e2e99591"
+      },
+      "historicalFixtures": [
+        {
+          "fixture": "fixtures/delivery/codex-cli-0.153.4-local-daemon-transport.json",
+          "sha256": "a458fdcc9fc843580663f8d21c79e911e202fe8e5db83a951b9e22ed79761168"
+        },
+        {
+          "fixture": "fixtures/delivery/codex-cli-0.153.4-local-daemon-transport-evidence.json",
+          "sha256": "2fb31e3a8503582472b2589f2009e39e0d8a6b91f6c361682eaa3989eafef4c2"
+        },
+        {
+          "fixture": "fixtures/delivery/codex-cli-0.152.1-remote-workspace.json",
+          "sha256": "e4f419111d254223f3930eeee61c30c447bb68dd51a4faf81be2a33b144bbaca"
+        }
+      ]
+    },
+    {
+      "id": "native-delivery-0-152-1-local-daemon-current-binding-product",
+      "client": "codex-cli",
+      "version": "0.152.1",
+      "platform": "darwin-arm64",
+      "observedAt": "2026-09-08T10:45:27.843Z",
+      "fixture": "fixtures/delivery/codex-cli-0.152.1-local-daemon-current-binding-product.json",
+      "sha256": "63ecebc2b28a07e90df4414ea1a7091f99c1848a523854ae6e7bdc65d8ba62a6",
+      "event": null,
+      "tool": null,
+      "claims": [
+        {
+          "capability": "delivery.livePush",
+          "result": "pass",
+          "outcome": {
+            "kind": "native-delivery-observed",
+            "idle": "offered",
+            "busy": "queued_after_turn",
+            "authority": "experimental",
+            "limitations": [
+              "Observed on darwin-arm64 with an already-running LocalDaemon and ordinary commands; ACC adds no launch arguments and owns no vendor daemon lifecycle.",
+              "Recorded recipient opt-in and exact current thread, canonical cwd, live process, stable version and protocol checks are required for every session.",
+              "A 120-second delivery lease can refresh on demand for the same non-retired endpoint; this does not renew the 24-hour presence expiry.",
+              "Unsupported or Embedded sessions and unreachable or rejected endpoints retain durable inbox delivery; accepted vendor queue entries cannot be withdrawn by policy off or uninstall.",
+              "A loaded daemon thread may execute opted-in messages after its TUI exits. TUI detachment is not SessionEnd; explicit thread archive or actual server teardown retires it.",
+              "Transport deduplication covers a pending queue entry only. Execution can repeat after queue consumption and acknowledgement loss.",
+              "The observed reply loop uses the installed acc reply CLI; native delivery.replyRoute remains false. No new lifecycle, guard or next-turn certification follows.",
+              "P16 is controlled endpoint fault injection. P18 uses an actual legacy npm artifact; its unrelated Claude shell artifact is not a real Claude capability capture."
+            ]
+          }
+        }
+      ],
+      "productEvidence": {
+        "fixture": "fixtures/delivery/codex-cli-0.152.1-local-daemon-current-binding-product-evidence.json",
+        "sha256": "72eac209e0007c617c51038b0e780de4fafe4601753e525172b09b480337295e"
+      },
+      "historicalFixtures": [
+        {
+          "fixture": "fixtures/delivery/codex-cli-0.152.1-local-daemon-product.json",
+          "sha256": "12ba4994612c8ac38adb3f02bac4710b14dc897c8ae51f41d5ac8f81efcda7a9"
+        },
+        {
+          "fixture": "fixtures/delivery/codex-cli-0.152.1-local-daemon-product-evidence.json",
+          "sha256": "1a53d02db21a472ba7e8b37cca3d935826a3e1a17a8c17223dc56ecbebac1e21"
+        },
+        {
+          "fixture": "fixtures/delivery/codex-cli-0.152.1-local-daemon-transport.json",
+          "sha256": "3cea07a9d655b7a78764eacd30bbcdc941a81095633ba08eee1c1c0900958c18"
+        },
+        {
+          "fixture": "fixtures/delivery/codex-cli-0.152.1-local-daemon-transport-evidence.json",
+          "sha256": "911a8e451bd726aedfb2be9379ed521e4042b2c7a8be1f280349dbeabc101cf1"
+        },
+        {
+          "fixture": "fixtures/delivery/codex-cli-0.152.1-remote-workspace.json",
+          "sha256": "e4f419111d254223f3930eeee61c30c447bb68dd51a4faf81be2a33b144bbaca"
+        }
+      ]
+    },
+    {
+      "id": "native-delivery-0-153-4-local-daemon-current-binding-product",
+      "client": "codex-cli",
+      "version": "0.153.4",
+      "platform": "darwin-arm64",
+      "observedAt": "2026-09-08T10:45:35.663Z",
+      "fixture": "fixtures/delivery/codex-cli-0.153.4-local-daemon-current-binding-product.json",
+      "sha256": "6f13ebe9abdcd2826ba2adf82ce96efd0aab88d1e64dee9c9a7cd476a5449eff",
+      "event": null,
+      "tool": null,
+      "claims": [
+        {
+          "capability": "delivery.livePush",
+          "result": "pass",
+          "outcome": {
+            "kind": "native-delivery-observed",
+            "idle": "offered",
+            "busy": "queued_after_turn",
+            "authority": "experimental",
+            "limitations": [
+              "Observed on darwin-arm64 with an already-running LocalDaemon and ordinary commands; ACC adds no launch arguments and owns no vendor daemon lifecycle.",
+              "Recorded recipient opt-in and exact current thread, canonical cwd, live process, stable version and protocol checks are required for every session.",
+              "A 120-second delivery lease can refresh on demand for the same non-retired endpoint; this does not renew the 24-hour presence expiry.",
+              "Unsupported or Embedded sessions and unreachable or rejected endpoints retain durable inbox delivery; accepted vendor queue entries cannot be withdrawn by policy off or uninstall.",
+              "A loaded daemon thread may execute opted-in messages after its TUI exits. TUI detachment is not SessionEnd; explicit thread archive or actual server teardown retires it.",
+              "Transport deduplication covers a pending queue entry only. Execution can repeat after queue consumption and acknowledgement loss.",
+              "The observed reply loop uses the installed acc reply CLI; native delivery.replyRoute remains false. No new lifecycle, guard or next-turn certification follows.",
+              "P16 is controlled endpoint fault injection. P18 uses an actual legacy npm artifact; its unrelated Claude shell artifact is not a real Claude capability capture."
+            ]
+          }
+        }
+      ],
+      "productEvidence": {
+        "fixture": "fixtures/delivery/codex-cli-0.153.4-local-daemon-current-binding-product-evidence.json",
+        "sha256": "8aad29c7bf32098d12f3acb8d63fa18246e5feaf3d106de9c6eb32c7f1a7d562"
+      },
+      "historicalFixtures": [
+        {
+          "fixture": "fixtures/delivery/codex-cli-0.153.4-local-daemon-product.json",
+          "sha256": "35cc452a24dd9cbbb4a0f130928ce8b3ed89784d362518d6997cded3b5ea2c1b"
+        },
+        {
+          "fixture": "fixtures/delivery/codex-cli-0.153.4-local-daemon-product-evidence.json",
+          "sha256": "81ff85c16e7320df233d353267bf216dc2c40ee5b86ccbcc2e2fe754e2e99591"
+        },
+        {
+          "fixture": "fixtures/delivery/codex-cli-0.153.4-local-daemon-transport.json",
+          "sha256": "a458fdcc9fc843580663f8d21c79e911e202fe8e5db83a951b9e22ed79761168"
+        },
+        {
+          "fixture": "fixtures/delivery/codex-cli-0.153.4-local-daemon-transport-evidence.json",
+          "sha256": "2fb31e3a8503582472b2589f2009e39e0d8a6b91f6c361682eaa3989eafef4c2"
+        },
+        {
+          "fixture": "fixtures/delivery/codex-cli-0.152.1-remote-workspace.json",
+          "sha256": "e4f419111d254223f3930eeee61c30c447bb68dd51a4faf81be2a33b144bbaca"
+        }
+      ]
     }
   ]
 }