agents-can-communicate 0.5.10 → 0.6.0

package/node_modules/@agents-can-communicate/adapter-antigravity/certification.json

@@ -0,0 +1,91 @@
+{
+  "evidence": [
+    {
+      "client": "antigravity-cli",
+      "version": "1.2.7",
+      "platform": "darwin-arm64",
+      "observedAt": "2026-09-20",
+      "capability": "lifecycle.sessionStart",
+      "fixture": "fixtures/SessionStart-1.2.7.json",
+      "provenance": "fixtures/certification-provenance.json",
+      "provenanceId": "session-start-1-2-7",
+      "idleBehavior": "fires when a session starts",
+      "busyBehavior": "fires before the first model invocation",
+      "authorityLevel": "advisory",
+      "limitations": [
+        "captured in print mode only",
+        "no hook_event_name field; the event is known only from the command argument",
+        "hooks attach only when the Antigravity session has an open workspace; an ordinary print-mode turn sends an empty workspacePaths and no session is created. This capture used --add-dir"
+      ],
+      "result": "pass"
+    },
+    {
+      "client": "antigravity-cli",
+      "version": "1.2.7",
+      "platform": "darwin-arm64",
+      "observedAt": "2026-09-20",
+      "capability": "context.beforeTurnInjection",
+      "fixture": "fixtures/PreInvocation-1.2.7.json",
+      "provenance": "fixtures/certification-provenance.json",
+      "provenanceId": "pre-invocation-1-2-7",
+      "idleBehavior": "waits for the next invocation",
+      "busyBehavior": "does not interrupt an in-progress invocation",
+      "authorityLevel": "context",
+      "limitations": [
+        "requires the injectSteps ephemeralMessage envelope",
+        "userMessage and toolCall injection types were not exercised",
+        "hooks attach only when the Antigravity session has an open workspace; an ordinary print-mode turn sends an empty workspacePaths and no session is created. This capture used --add-dir"
+      ],
+      "result": "pass"
+    },
+    {
+      "client": "antigravity-cli",
+      "version": "1.2.7",
+      "platform": "darwin-arm64",
+      "observedAt": "2026-09-20",
+      "capability": "delivery.nextTurn",
+      "fixture": "fixtures/PreInvocation-1.2.7.json",
+      "provenance": "fixtures/certification-provenance.json",
+      "provenanceId": "pre-invocation-1-2-7",
+      "idleBehavior": "offers complete peer messages at the next invocation",
+      "busyBehavior": "does not interrupt an in-progress invocation",
+      "authorityLevel": "context",
+      "limitations": [
+        "delivery requires the next invocation; there is no live push and no reply route",
+        "the end-of-turn Stop continuation carries its reason to the model and is a bounded nudge, not a gate: this adapter continues one turn at most once and the client caps consecutive continuations itself (vendor 1.1.9)",
+        "the continuation ceiling's own value was not captured, and neither was what the model is told when it is reached",
+        "captured on darwin-arm64 in print mode only; Linux, Windows and interactive sessions were not observed",
+        "agy agentapi send-message needs the running session's language-server address and CSRF token, and hooks are given neither, so ACC has no live push",
+        "reply routing back to ACC was not observed",
+        "hooks attach only when the Antigravity session has an open workspace; an ordinary print-mode turn sends an empty workspacePaths and no session is created. This capture used --add-dir"
+      ],
+      "result": "pass"
+    },
+    {
+      "client": "antigravity-cli",
+      "version": "1.2.7",
+      "platform": "darwin-arm64",
+      "observedAt": "2026-09-21T19:29:23.548Z",
+      "capability": "delivery.livePush",
+      "fixture": "fixtures/delivery/antigravity-cli-1.2.7-relay-product.json",
+      "idleBehavior": "offered",
+      "provenance": "fixtures/certification-provenance.json",
+      "provenanceId": "native-delivery-1-2-7-relay-product",
+      "busyBehavior": "queued_after_turn",
+      "authorityLevel": "experimental",
+      "limitations": [
+        "Observed on darwin-arm64 with Antigravity CLI 1.2.7 in the TUI, model Gemini 3.8 Flash, through a private candidate built from this branch and installed into an isolated ACC data home; print mode ends with its turn and runs no relay.",
+        "The agent started the relay once for the conversation through run_command, after ACC's one-time context line named the command; the operator approved that command and each acc reply once at the client's permission prompt. ACC writes no permission rule.",
+        "The relay holds the session's language-server address and CSRF token in memory only; ACC's registration carries a nonce and a socket path, never the endpoint. ANTIGRAVITY_AGENTAPI_EXE named the same agy the relay runs.",
+        "An idle session woke with no user input. A message accepted while the model was streaming a long text answer was presented only after that answer completed. A message accepted while a turn waited on a tool permission was presented at that turn's next model invocation, after the tool returned, rather than after the turn.",
+        "The busy branch took three sends: the first landed at a tool boundary as above, the second arrived after the answer had already finished and so showed an idle wake; the third, timed against the running stream, is the one recorded.",
+        "The model receives each push as a SYSTEM_MESSAGE; the send-message title is not shown to it.",
+        "The observed reply loop uses the installed acc reply CLI; native delivery.replyRoute remains false. The router reports a relay push as transport live-adapter.",
+        "A repeated logical message kept its message id, took the durable path on the second send, and was pushed and answered once.",
+        "Antigravity runs no SessionEnd: the relay retired itself about five seconds after its agy exited, and a later message stayed queued in the durable inbox.",
+        "The first TUI session in a folder trusted at that launch hands every hook an empty workspacePaths even with --add-dir, so that session gets no ACC context and no relay prompt; the next launch in the now-trusted folder does."
+      ],
+      "result": "pass"
+    }
+  ]
+}

package/node_modules/@agents-can-communicate/adapter-antigravity/fixtures/PreInvocation-1.2.7.json

@@ -0,0 +1,11 @@
+{
+  "artifactDirectoryPath": "<redacted: conversation artifact directory>",
+  "conversationId": "00000000-0000-4000-8000-000000000000",
+  "initialNumSteps": 1,
+  "invocationNum": 0,
+  "modelName": "gemini-3.8-flash-high",
+  "transcriptPath": "<redacted: conversation transcript>",
+  "workspacePaths": [
+    "/tmp/example-workspace"
+  ]
+}

package/node_modules/@agents-can-communicate/adapter-antigravity/fixtures/SessionStart-1.2.7.json

@@ -0,0 +1,9 @@
+{
+  "artifactDirectoryPath": "<redacted: conversation artifact directory>",
+  "conversationId": "00000000-0000-4000-8000-000000000000",
+  "modelName": "gemini-3.8-flash-high",
+  "transcriptPath": "<redacted: conversation transcript>",
+  "workspacePaths": [
+    "/tmp/example-workspace"
+  ]
+}

package/node_modules/@agents-can-communicate/adapter-antigravity/fixtures/agentapi-error-answers-1.2.7.json

@@ -0,0 +1,19 @@
+{
+  "note": "How `agy agentapi` reports a failure, captured on Antigravity CLI 1.2.7, macOS arm64, 2026-09-21, with no session endpoint at all: no CSRF token was set in either run, and the second pointed at a closed local port. Both answers are JSON on stdout with exit status 1 and nothing on stderr, so a caller reads failures from the same stream as successes.",
+  "answers": [
+    {
+      "env": "no ANTIGRAVITY_LS_ADDRESS",
+      "command": "agy agentapi get-conversation-metadata probe-id",
+      "exitStatus": 1,
+      "stderr": "",
+      "stdout": { "error": "ANTIGRAVITY_LS_ADDRESS is not set" }
+    },
+    {
+      "env": "ANTIGRAVITY_LS_ADDRESS=127.0.0.1:9 (closed)",
+      "command": "agy agentapi get-conversation-metadata probe-id",
+      "exitStatus": 1,
+      "stderr": "",
+      "stdout": { "response": {}, "error": "rpc error: code = Unavailable desc = connection error: desc = \"transport: Error while dialing: dial tcp 127.0.0.1:9: connect: connection refused\"" }
+    }
+  ]
+}

package/node_modules/@agents-can-communicate/adapter-antigravity/fixtures/agentapi-live-push-1.2.7.json

@@ -0,0 +1,31 @@
+{
+  "note": "The live-push half of the agentapi capture, run by the operator on Antigravity CLI 1.2.7, macOS arm64, 2026-09-21. Step 1: in an interactive TUI opened in a probe project, the operator had the agent run one script from its own shell and approved it at the permission prompt; the script wrote the session's endpoint to a 0600 file and printed variable names only. Step 2: a separate process loaded that endpoint only inside subshells, asked the idle session's language server to deliver one message, watched the transcript, and deleted the endpoint file. Every value printed passed through a mask that replaced the exact token; no credential value was recorded anywhere. Conversation and initialization ids are redacted.",
+  "agentShellVariables": ["ANTIGRAVITY_CONVERSATION_ID", "ANTIGRAVITY_CSRF_TOKEN", "ANTIGRAVITY_LS_ADDRESS"],
+  "hookVariables": ["ANTIGRAVITY_CONVERSATION_ID"],
+  "getConversationMetadata": {
+    "response": { "conversationMetadata": { "metadata": {
+      "workspaces": [ { "workspaceFolderAbsoluteUri": "file://<probe project>", "gitRootAbsoluteUri": "file://<probe project>" } ],
+      "createdAt": "2026-09-21T16:28:32.249291Z",
+      "parentConversationId": "",
+      "rootConversationId": "<conversation>" } } }
+  },
+  "sendMessage": {
+    "command": "agy agentapi send-message --title \"ACC live push probe\" <conversation> \"Live push probe LP8812. Reply with the single word LP8812.\"",
+    "response": { "response": { "sendMessage": { "recipientId": "<conversation>",
+      "content": "Live push probe LP8812. Reply with the single word LP8812." } } }
+  },
+  "idleSessionAfterwards": {
+    "stepsBefore": 6,
+    "stepsAfter": 8,
+    "newSteps": [
+      { "at": "16:29:09Z", "source": "SYSTEM", "type": "SYSTEM_MESSAGE", "carriesMessage": true },
+      { "at": "16:29:09Z", "source": "MODEL", "type": "PLANNER_RESPONSE", "reply": "LP8812" }
+    ]
+  },
+  "findings": [
+    "an idle interactive session woke and answered a message pushed through agentapi, with no user input",
+    "the pushed message is presented to the model as a SYSTEM_MESSAGE, the same system framing as a Stop continuation reason",
+    "the endpoint that makes this possible - language-server address and CSRF token - exists in the agent's own tool shell and not in any hook's environment",
+    "an auto-mode coding agent was refused permission to materialize that token twice; the capture ran only because the operator performed the token step himself"
+  ]
+}

package/node_modules/@agents-can-communicate/adapter-antigravity/fixtures/certification-provenance.json

@@ -0,0 +1,217 @@
+{
+  "schemaVersion": 1,
+  "captures": [
+    {
+      "client": "antigravity-cli",
+      "version": "1.2.7",
+      "platform": "darwin-arm64",
+      "observedAt": "2026-09-20",
+      "id": "session-start-1-2-7",
+      "event": "SessionStart",
+      "fixture": "fixtures/SessionStart-1.2.7.json",
+      "claims": [
+        {
+          "capability": "lifecycle.sessionStart",
+          "result": "pass",
+          "outcome": {
+            "kind": "event-observed",
+            "idle": "fires when a session starts",
+            "busy": "fires before the first model invocation",
+            "authority": "advisory",
+            "limitations": [
+              "captured in print mode only",
+              "no hook_event_name field; the event is known only from the command argument",
+              "hooks attach only when the Antigravity session has an open workspace; an ordinary print-mode turn sends an empty workspacePaths and no session is created. This capture used --add-dir"
+            ]
+          }
+        }
+      ],
+      "sha256": "b6c1eaaf4efc1d103757402c904e0154973d5bd25b6706928356087db1cafa90",
+      "tool": null
+    },
+    {
+      "client": "antigravity-cli",
+      "version": "1.2.7",
+      "platform": "darwin-arm64",
+      "observedAt": "2026-09-20",
+      "id": "pre-invocation-1-2-7",
+      "event": "PreInvocation",
+      "fixture": "fixtures/PreInvocation-1.2.7.json",
+      "claims": [
+        {
+          "capability": "context.beforeTurnInjection",
+          "result": "pass",
+          "outcome": {
+            "kind": "model-visible",
+            "idle": "waits for the next invocation",
+            "busy": "does not interrupt an in-progress invocation",
+            "authority": "context",
+            "limitations": [
+              "requires the injectSteps ephemeralMessage envelope",
+              "userMessage and toolCall injection types were not exercised",
+              "hooks attach only when the Antigravity session has an open workspace; an ordinary print-mode turn sends an empty workspacePaths and no session is created. This capture used --add-dir"
+            ]
+          }
+        },
+        {
+          "capability": "delivery.nextTurn",
+          "result": "pass",
+          "outcome": {
+            "kind": "model-visible",
+            "idle": "offers complete peer messages at the next invocation",
+            "busy": "does not interrupt an in-progress invocation",
+            "authority": "context",
+            "limitations": [
+              "delivery requires the next invocation; there is no live push and no reply route",
+              "the end-of-turn Stop continuation carries its reason to the model and is a bounded nudge, not a gate: this adapter continues one turn at most once and the client caps consecutive continuations itself (vendor 1.1.9)",
+              "the continuation ceiling's own value was not captured, and neither was what the model is told when it is reached",
+              "captured on darwin-arm64 in print mode only; Linux, Windows and interactive sessions were not observed",
+              "agy agentapi send-message needs the running session's language-server address and CSRF token, and hooks are given neither, so ACC has no live push",
+              "reply routing back to ACC was not observed",
+              "hooks attach only when the Antigravity session has an open workspace; an ordinary print-mode turn sends an empty workspacePaths and no session is created. This capture used --add-dir"
+            ]
+          }
+        }
+      ],
+      "sha256": "4543fa62b5668ad4aef6a34e6a5a3263c0c7cbf53b710339accca70721c7cad9",
+      "tool": null
+    },
+    {
+      "client": "antigravity-cli",
+      "version": "1.2.7",
+      "platform": "darwin-arm64",
+      "observedAt": "2026-09-20",
+      "id": "post-invocation-1-2-7",
+      "event": "PostInvocation",
+      "fixture": "fixtures/PostInvocation-1.2.7.json",
+      "claims": [
+        {
+          "capability": "lifecycle.postInvocation",
+          "result": "pass",
+          "outcome": {
+            "kind": "event-observed",
+            "idle": "does not fire",
+            "busy": "fires after each invocation",
+            "authority": "advisory",
+            "limitations": [
+              "envelope is byte-identical to PreInvocation for the same invocation"
+            ]
+          }
+        }
+      ],
+      "sha256": "4543fa62b5668ad4aef6a34e6a5a3263c0c7cbf53b710339accca70721c7cad9",
+      "tool": null
+    },
+    {
+      "client": "antigravity-cli",
+      "version": "1.2.7",
+      "platform": "darwin-arm64",
+      "observedAt": "2026-09-20",
+      "id": "stop-continue-1-2-7",
+      "event": "Stop",
+      "fixture": "fixtures/Stop-1.2.7.json",
+      "claims": [
+        {
+          "capability": "delivery.endOfTurnContinuation",
+          "result": "pass",
+          "outcome": {
+            "kind": "model-visible",
+            "idle": "fires with fullyIdle true",
+            "busy": "fires once per execution before the turn ends",
+            "authority": "bounded-blocking",
+            "limitations": [
+              "decision must be the exact string continue; any other value permits shutdown",
+              "vendor 1.1.9 caps consecutive continuations, so a turn cannot be held open indefinitely",
+              "the ceiling value was not captured"
+            ]
+          }
+        }
+      ],
+      "sha256": "f8ad528f27afa6306d63d1da295001170f9e1afbe5bf52be452d988d6c8d2431",
+      "tool": null
+    },
+    {
+      "client": "antigravity-cli",
+      "version": "1.2.7",
+      "platform": "darwin-arm64",
+      "observedAt": "2026-09-20",
+      "id": "stop-allow-1-2-7",
+      "event": "Stop",
+      "fixture": "fixtures/Stop-continued-1.2.7.json",
+      "claims": [
+        {
+          "capability": "delivery.endOfTurnContinuation",
+          "result": "pass",
+          "outcome": {
+            "kind": "event-observed",
+            "idle": "fires with fullyIdle true",
+            "busy": "second execution after a continuation",
+            "authority": "bounded-blocking",
+            "limitations": [
+              "executionNum increments across a continuation"
+            ]
+          }
+        }
+      ],
+      "sha256": "240c53e86e77c31a45ef12bfe4dd84732b4dfbb66faa3167c8c03c0034884d03",
+      "tool": null
+    },
+    {
+      "id": "native-delivery-1-2-7-relay-product",
+      "client": "antigravity-cli",
+      "version": "1.2.7",
+      "platform": "darwin-arm64",
+      "observedAt": "2026-09-21T19:29:23.548Z",
+      "fixture": "fixtures/delivery/antigravity-cli-1.2.7-relay-product.json",
+      "sha256": "ed06638f0210137992a2daab62f8bb80c42fa866981f6c461c530cdecf677845",
+      "event": null,
+      "tool": null,
+      "claims": [
+        {
+          "capability": "delivery.livePush",
+          "result": "pass",
+          "outcome": {
+            "kind": "native-delivery-observed",
+            "idle": "offered",
+            "busy": "queued_after_turn",
+            "authority": "experimental",
+            "limitations": [
+              "Observed on darwin-arm64 with Antigravity CLI 1.2.7 in the TUI, model Gemini 3.8 Flash, through a private candidate built from this branch and installed into an isolated ACC data home; print mode ends with its turn and runs no relay.",
+              "The agent started the relay once for the conversation through run_command, after ACC's one-time context line named the command; the operator approved that command and each acc reply once at the client's permission prompt. ACC writes no permission rule.",
+              "The relay holds the session's language-server address and CSRF token in memory only; ACC's registration carries a nonce and a socket path, never the endpoint. ANTIGRAVITY_AGENTAPI_EXE named the same agy the relay runs.",
+              "An idle session woke with no user input. A message accepted while the model was streaming a long text answer was presented only after that answer completed. A message accepted while a turn waited on a tool permission was presented at that turn's next model invocation, after the tool returned, rather than after the turn.",
+              "The busy branch took three sends: the first landed at a tool boundary as above, the second arrived after the answer had already finished and so showed an idle wake; the third, timed against the running stream, is the one recorded.",
+              "The model receives each push as a SYSTEM_MESSAGE; the send-message title is not shown to it.",
+              "The observed reply loop uses the installed acc reply CLI; native delivery.replyRoute remains false. The router reports a relay push as transport live-adapter.",
+              "A repeated logical message kept its message id, took the durable path on the second send, and was pushed and answered once.",
+              "Antigravity runs no SessionEnd: the relay retired itself about five seconds after its agy exited, and a later message stayed queued in the durable inbox.",
+              "The first TUI session in a folder trusted at that launch hands every hook an empty workspacePaths even with --add-dir, so that session gets no ACC context and no relay prompt; the next launch in the now-trusted folder does."
+            ]
+          }
+        }
+      ],
+      "productEvidence": {
+        "fixture": "fixtures/delivery/antigravity-cli-1.2.7-relay-product-evidence.json",
+        "sha256": "26b7bd826f0f2b74756b0f1bec31c45ba761d04295897ec4d8c9ec821b109877"
+      },
+      "historicalFixtures": [
+        {
+          "fixture": "fixtures/agentapi-live-push-1.2.7.json",
+          "sha256": "57cfd9d4178d3799fe48aff787c0bcf5bed5f59d885a03d74f97d0a1b573048e"
+        },
+        {
+          "fixture": "fixtures/live-push-surfaces-1.2.7.json",
+          "sha256": "38e24cb807fa3781b803997d70f9bf24ff8a10837e29b6e7b77b7b0b5607f716"
+        },
+        {
+          "fixture": "fixtures/agentapi-error-answers-1.2.7.json",
+          "sha256": "970dd701d2796c647425b5a7e65ce68dd26b6d6e887a919d8246d934c5b55af0"
+        },
+        {
+          "fixture": "fixtures/hooks-first-trust-no-workspace-1.2.7.json",
+          "sha256": "024c5c53915c0f09fac9b2ba118f1831eb97f26c6d4b28aacc4e4a2c5d7500ee"
+        }
+      ]
+    }
+  ]
+}

package/node_modules/@agents-can-communicate/adapter-antigravity/fixtures/delivery/antigravity-cli-1.2.7-relay-product-evidence.json

@@ -0,0 +1,132 @@
+{
+  "schemaVersion": 1,
+  "source": "real-client-capture",
+  "client": "antigravity-cli",
+  "phase": "product",
+  "clientVersion": "1.2.7",
+  "platform": "darwin-arm64",
+  "packageSha256": "fa1dab632b9ec5cef0e391b3779816eb479beaaee6c6197b0b166a24b0cf2887",
+  "startedAt": "2026-09-21T19:11:03.000Z",
+  "finishedAt": "2026-09-21T19:29:23.548Z",
+  "scenarioCount": 5,
+  "passedCount": 5,
+  "failedCount": 0,
+  "cleanup": {
+    "attempted": true,
+    "outcome": "passed",
+    "ownedProcesses": "stopped",
+    "temporaryState": "removed"
+  },
+  "scenarios": [
+    {
+      "caseId": "A01",
+      "outcome": "passed",
+      "startedAt": "2026-09-21T19:11:03.000Z",
+      "finishedAt": "2026-09-21T19:13:43.911Z",
+      "messageId": "message_LcQceupPfUv_I5WCnb1bCw",
+      "observations": [
+        {
+          "kind": "delivery",
+          "at": "2026-09-21T19:13:43.911Z",
+          "outcome": "offered"
+        },
+        {
+          "kind": "relay-push",
+          "at": "2026-09-21T19:11:04.018Z",
+          "outcome": "pushed"
+        },
+        {
+          "kind": "model-turn",
+          "outcome": "started-without-user-input",
+          "at": "2026-09-21T19:11:04.000Z"
+        }
+      ]
+    },
+    {
+      "caseId": "A02",
+      "outcome": "passed",
+      "startedAt": "2026-09-21T19:23:38.000Z",
+      "finishedAt": "2026-09-21T19:24:47.608Z",
+      "messageId": "message_JkME_nTn55TeLLB3Qk31mQ",
+      "observations": [
+        {
+          "kind": "delivery",
+          "at": "2026-09-21T19:24:47.608Z",
+          "outcome": "offered"
+        },
+        {
+          "kind": "relay-push",
+          "at": "2026-09-21T19:23:43.599Z",
+          "outcome": "pushed"
+        },
+        {
+          "kind": "presentation",
+          "outcome": "after-running-turn",
+          "at": "2026-09-21T19:24:09.000Z"
+        }
+      ]
+    },
+    {
+      "caseId": "A03",
+      "outcome": "passed",
+      "startedAt": "2026-09-21T19:11:03.000Z",
+      "finishedAt": "2026-09-21T19:13:43.943Z",
+      "messageId": "message_LcQceupPfUv_I5WCnb1bCw",
+      "observations": [
+        {
+          "kind": "answer",
+          "outcome": "recorded",
+          "at": "2026-09-21T19:11:56.127Z"
+        },
+        {
+          "kind": "receipt",
+          "outcome": "acknowledged",
+          "at": "2026-09-21T19:11:56.000Z"
+        }
+      ]
+    },
+    {
+      "caseId": "A04",
+      "outcome": "passed",
+      "startedAt": "2026-09-21T19:26:19.000Z",
+      "finishedAt": "2026-09-21T19:26:44.795Z",
+      "messageId": "message_zVsXVuB-kvhdCx-HchIyjA",
+      "observations": [
+        {
+          "kind": "relay-push",
+          "at": "2026-09-21T19:26:19.584Z",
+          "outcome": "pushed-once"
+        },
+        {
+          "kind": "logical-message",
+          "outcome": "same-message-id",
+          "at": "2026-09-21T19:26:20.000Z"
+        }
+      ]
+    },
+    {
+      "caseId": "A05",
+      "outcome": "passed",
+      "startedAt": "2026-09-21T19:28:49.000Z",
+      "finishedAt": "2026-09-21T19:29:23.548Z",
+      "messageId": "message_rO75hkkmDXB0Mf6fVCj7Uw",
+      "observations": [
+        {
+          "kind": "delivery",
+          "at": "2026-09-21T19:29:23.548Z",
+          "outcome": "queued"
+        },
+        {
+          "kind": "relay",
+          "at": "2026-09-21T19:28:55.391Z",
+          "outcome": "retired"
+        },
+        {
+          "kind": "client",
+          "outcome": "exited",
+          "at": "2026-09-21T19:28:50.000Z"
+        }
+      ]
+    }
+  ]
+}

package/node_modules/@agents-can-communicate/adapter-antigravity/fixtures/delivery/antigravity-cli-1.2.7-relay-product.json

@@ -0,0 +1,29 @@
+{
+  "client": "antigravity-cli",
+  "version": "1.2.7",
+  "platform": "darwin-arm64",
+  "observedAt": "2026-09-21T19:29:23.548Z",
+  "capability": "native_delivery",
+  "result": "pass",
+  "fixture": "antigravity-cli-1.2.7-relay-product",
+  "launchMode": "ordinary-command-with-installed-hooks",
+  "protocolContract": "antigravity-agentapi-relay-v1",
+  "idle": "offered",
+  "busy": "queued_after_turn",
+  "reply": "routed",
+  "duplicate": "same_message_id",
+  "fallback": "queued",
+  "limitations": [
+    "Observed on darwin-arm64 with Antigravity CLI 1.2.7 in the TUI, model Gemini 3.8 Flash, through a private candidate built from this branch and installed into an isolated ACC data home; print mode ends with its turn and runs no relay.",
+    "The agent started the relay once for the conversation through run_command, after ACC's one-time context line named the command; the operator approved that command and each acc reply once at the client's permission prompt. ACC writes no permission rule.",
+    "The relay holds the session's language-server address and CSRF token in memory only; ACC's registration carries a nonce and a socket path, never the endpoint. ANTIGRAVITY_AGENTAPI_EXE named the same agy the relay runs.",
+    "An idle session woke with no user input. A message accepted while the model was streaming a long text answer was presented only after that answer completed. A message accepted while a turn waited on a tool permission was presented at that turn's next model invocation, after the tool returned, rather than after the turn.",
+    "The busy branch took three sends: the first landed at a tool boundary as above, the second arrived after the answer had already finished and so showed an idle wake; the third, timed against the running stream, is the one recorded.",
+    "The model receives each push as a SYSTEM_MESSAGE; the send-message title is not shown to it.",
+    "The observed reply loop uses the installed acc reply CLI; native delivery.replyRoute remains false. The router reports a relay push as transport live-adapter.",
+    "A repeated logical message kept its message id, took the durable path on the second send, and was pushed and answered once.",
+    "Antigravity runs no SessionEnd: the relay retired itself about five seconds after its agy exited, and a later message stayed queued in the durable inbox.",
+    "The first TUI session in a folder trusted at that launch hands every hook an empty workspacePaths even with --add-dir, so that session gets no ACC context and no relay prompt; the next launch in the now-trusted folder does."
+  ],
+  "packageSha256": "fa1dab632b9ec5cef0e391b3779816eb479beaaee6c6197b0b166a24b0cf2887"
+}

package/node_modules/@agents-can-communicate/adapter-antigravity/fixtures/hooks-first-trust-no-workspace-1.2.7.json

@@ -0,0 +1,37 @@
+{
+  "note": "What every hook receives in the first TUI session opened in a folder that was trusted at that same launch, captured on Antigravity CLI 1.2.7, macOS arm64, 2026-09-21. The client was started as `agy --add-dir . -i <prompt>` in a fresh git project, the trust prompt was answered yes, and SessionStart, PreInvocation and Stop all carried an empty workspacePaths - so ACC had no project to join and every hook failed open with no context and no relay prompt. The same reproduced in three fresh folders. The next launch in the now-trusted folder carried the project in workspacePaths and worked. Conversation ids and home paths redacted; every other field is verbatim.",
+  "launch": "agy --add-dir . -i <prompt>, in a folder not yet trusted",
+  "trustPrompt": "answered: Yes, I trust this folder",
+  "hookStderr": "acc: coordination unavailable; hook continued without context",
+  "refusal": "antigravity_no_open_workspace",
+  "payloads": {
+    "SessionStart": {
+      "artifactDirectoryPath": "<home>/.gemini/antigravity-cli/brain/<conversation>",
+      "conversationId": "<conversation>",
+      "modelName": "gemini-3.8-flash-high",
+      "transcriptPath": "<home>/.gemini/antigravity-cli/brain/<conversation>/.system_generated/logs/transcript_full.jsonl",
+      "workspacePaths": []
+    },
+    "PreInvocation": {
+      "artifactDirectoryPath": "<home>/.gemini/antigravity-cli/brain/<conversation>",
+      "conversationId": "<conversation>",
+      "initialNumSteps": 1,
+      "invocationNum": 0,
+      "modelName": "gemini-3.8-flash-high",
+      "transcriptPath": "<home>/.gemini/antigravity-cli/brain/<conversation>/.system_generated/logs/transcript_full.jsonl",
+      "workspacePaths": []
+    },
+    "Stop": {
+      "artifactDirectoryPath": "<home>/.gemini/antigravity-cli/brain/<conversation>",
+      "conversationId": "<conversation>",
+      "error": "",
+      "executionNum": 0,
+      "fullyIdle": true,
+      "modelName": "gemini-3.8-flash-high",
+      "terminationReason": "NO_TOOL_CALL",
+      "transcriptPath": "<home>/.gemini/antigravity-cli/brain/<conversation>/.system_generated/logs/transcript_full.jsonl",
+      "workspacePaths": []
+    }
+  },
+  "nextLaunchInTheSameFolder": "workspacePaths carried the project; SessionStart bound the session and PreInvocation injected ACC context"
+}

package/node_modules/@agents-can-communicate/adapter-antigravity/fixtures/live-push-surfaces-1.2.7.json

@@ -0,0 +1,38 @@
+{
+  "note": "Where Antigravity CLI 1.2.7 exposes the session endpoint that `agy agentapi send-message` needs, and how a push behaves, captured 2026-09-21 on macOS arm64. Environment variables are recorded by name only; no credential value was written anywhere. Conversation and sender ids are redacted.",
+  "endpointByProcess": {
+    "hook": ["ANTIGRAVITY_CONVERSATION_ID"],
+    "mcpServerSpawnedByTheClient": [],
+    "agentToolShell": ["ANTIGRAVITY_CONVERSATION_ID", "ANTIGRAVITY_CSRF_TOKEN", "ANTIGRAVITY_LS_ADDRESS"],
+    "backgroundProcessStartedFromTheAgentShell": ["ANTIGRAVITY_AGENT", "ANTIGRAVITY_AGENTAPI_EXE",
+      "ANTIGRAVITY_APP_DATA_DIR", "ANTIGRAVITY_CONVERSATION_ID", "ANTIGRAVITY_CSRF_TOKEN",
+      "ANTIGRAVITY_LS_ADDRESS", "ANTIGRAVITY_LS_VERSION", "ANTIGRAVITY_PROJECT_ID",
+      "ANTIGRAVITY_SOURCE_METADATA", "ANTIGRAVITY_TRAJECTORY_ID"]
+  },
+  "mcp": {
+    "workspacePluginMcpConfigLoads": "a stdio server declared in <workspace>/.agents/plugins/<name>/mcp_config.json was spawned, its parent process being agy",
+    "clientSends": ["server/discover", "initialize", "notifications/initialized", "tools/list"],
+    "initialize": { "protocolVersion": "2025-11-25", "clientInfo": { "name": "antigravity-client", "version": "v1.0.0" },
+      "capabilities": { "elicitation": { "form": {}, "url": {} }, "roots": { "listChanged": true } } },
+    "meaning": "no sampling and no channel-like capability: a server cannot put text in front of the model, and elicitation asks the human, not the agent"
+  },
+  "agentToolset": "the print-mode stream `init` event lists send_message, manage_inbox, schedule and wait among the agent's own tools - a first-party inbox between conversations that agentapi send-message writes into",
+  "relayPrototype": {
+    "startedBy": "the agent, once, through run_command - approved by the operator at the TUI permission prompt",
+    "detachedParent": "/sbin/launchd",
+    "survivedTurnEnd": true,
+    "survivedClientExit": true,
+    "pushes": [
+      { "sentAt": "16:57:57Z", "sessionState": "idle", "accepted": true,
+        "observed": "SYSTEM_MESSAGE and a model reply at 16:57:57Z, with no user input" },
+      { "sentAt": "16:59:28Z", "sessionState": "busy - generating a 524-word answer started at 16:59:22Z", "accepted": true,
+        "observed": "held until that answer completed uninterrupted; the SYSTEM_MESSAGE and the reply to it appeared at 16:59:38Z" },
+      { "sentAt": "17:03:49Z", "sessionState": "client exited", "accepted": false,
+        "observed": "rpc error: code = Unavailable desc = connection error" }
+    ]
+  },
+  "asTheModelSeesIt": "The following is a <SYSTEM_MESSAGE> not actually sent by the user. It is provided by the system as important information to pay attention to.\n\n<SYSTEM_MESSAGE>\n[Message] timestamp=<utc> sender=<conversation> priority=MESSAGE_PRIORITY_HIGH content=<the text>\n</SYSTEM_MESSAGE>",
+  "notShown": "the --title given to send-message did not appear in what the model received",
+  "streamJsonInput": "one NDJSON line per turn: {\"event\":\"user\",\"message\":{\"content\":\"<text>\"}}, with an empty attached prompt (--print=) and --output-format stream-json",
+  "permissionRuleSyntax": "command(<prefix>) under permissions.allow, per strings in the binary; not exercised - an auto-mode coding agent was refused permission to add one, as security weakening"
+}