agents-can-communicate 0.6.0 → 0.6.2

package/docs/ADAPTER_AUTHORING.md

@@ -118,22 +118,25 @@ example is not a capture. Failed experiments stay in the manifest as `fail`; the
 the false value and can never enable it.
 
 `effectiveCapabilities(adapter, { clientVersion, platform })` returns the full boolean
-shape for the installed client. Only an exact passing version/platform match remains true.
-Unreadable, unknown, or mismatched clients degrade every uncertified row to false.
-
-An adapter for a client that ships often may declare a floor per platform:
-
-```js
-certificationFloor: { "darwin-arm64": "1.2.7" },
-```
-
-A stable version at or above the floor, on that platform, is then judged by the floor
-version's evidence for any capability it has no capture of its own for. A later capture
-wins for its own version, capability by capability - a recorded failure turns that
-capability off for that version and leaves the rest on the floor. Earlier versions,
-prereleases and other platforms stay uncertified, and `defineAdapter` refuses a floor
-that names a version with no passing evidence on its platform. Antigravity CLI declares
-one; every other adapter certifies exact versions only.
+shape for the installed client, resolving each capability independently from the evidence
+that client can reach:
+
+1. Take the rows for that capability, and keep those whose version is at or below the
+   client's. A prerelease is ordered by its release triple, so `1.3.0-rc.1` is judged as
+   `1.3.0`, and a version that cannot be read reaches every row.
+2. Among those, prefer the rows that name this platform; with none, use them all. A loss
+   recorded for one platform at 1.3.0 says nothing about that platform at 1.2.3, where
+   another platform's passing capture is the only evidence in reach.
+3. The highest version left decides. The capability is on when every row at that version
+   passes, so a recorded loss wins a tie between platforms.
+
+A client older than every row gets nothing, and so does a capability whose deciding row
+records a failure. `capabilityEvidence(adapter, facts, capability)` returns that verdict
+with its reason - `undeclared`, `unobserved`, `older-than-evidence` or `recorded-failure` -
+and the version that decided, so a refusal can name the evidence rather than the client.
+
+Recording a regression is an ordinary capture with `result: "fail"` at the version where
+the loss was observed; it applies forward until a later row passes again.
 
 The backing methods for delivery are `renderContextResult()` for `nextTurn`,
 `offerMessage()` for `livePush`, and `routeReply()` for `replyRoute`.

package/docs/ARCHITECTURE.md

@@ -87,12 +87,12 @@ if registration fails. This does not create a session or revive a closed one.
 
 ## Certified capability versus current reachability
 
-Ordinary hook capabilities say an exact client version on an exact platform passed a
-captured behavior. Native live delivery uses a separate contract: installation checks the
+Ordinary hook capabilities say a captured behaviour passed, and apply forward from the
+version that recorded it until a later capture changes it. Native live delivery uses a separate contract: installation checks the
 captured minimum, platform, and current feature probe, then each session publishes a binding
 only after a generation-bound handshake. The router trusts that admission and verifies the
 binding, recipient policy, declared adapter capability, and adapter response; it does not add
-a third exact-version certification check. A binding says what that current generation
+a third certification check. A binding says what that current generation
 exposes and whether its lease is current, while recipient policy says whether it may spend a
 turn.
 

package/docs/CAPABILITIES.md

@@ -3,22 +3,25 @@
 Use this page to set expectations after installation. Integration means ACC can introduce
 peer awareness and coordination instructions; it does not guarantee what a model will do
 with them. Delivery also varies independently from awareness. The durable inbox works for
-every participant, supported exact versions may add next-turn delivery, and the
+every participant, a client at or after a captured version may add next-turn delivery, and the
 experimental Codex LocalDaemon and Claude Code Channel paths can deliver while a session is idle.
 
 Capability honesty separates four questions that are easy to collapse:
 
-1. **Certified support** — did this exact client version and platform pass a shipped
-   real-client fixture?
+1. **Certified support** — does the evidence this client can reach show the capability
+   passing in a shipped real-client fixture?
 2. **Current reachability** — does one current session generation expose a live binding
    whose lease is valid now?
 3. **Recipient policy** — did that recipient opt into spending a turn for this message
    kind?
 4. **Fallback** — what durable path remains when any earlier answer is no?
 
-A source method or vendor documentation is not certification. Uncaptured hook versions and
-unsupported platforms degrade to false, except that an adapter may declare a captured version
-as a floor for later stable releases on the same platform - Antigravity CLI does. Native minimum-based eligibility is separate. No weaker session inherits a stronger peer's capability.
+A source method or vendor documentation is not certification. A capture applies forward: from
+the version that recorded it until a later capture changes that capability, and to every
+platform until one of them records something of its own. A client older than every capture
+degrades to false, and so does a capability a capture recorded as failing. Native
+minimum-based eligibility is separate, and stays per-platform. No weaker session inherits a
+stronger peer's capability.
 
 Run `acc doctor` in the project when observed behavior differs from this page. It reports
 the installed client version, platform, effective capability, and fallback instead of
@@ -26,10 +29,9 @@ assuming that a newer or differently packaged client behaves like a captured one
 
 ## Certified support
 
-Passing evidence currently ships for these exact versions on `darwin-arm64`. Antigravity
-CLI's column also covers every later stable release there: its adapter declares 1.2.7 as a
-certification floor, so a newer version is judged by the 1.2.7 captures until one of its
-own says otherwise.
+Each column names the version that recorded the capture, on `darwin-arm64`. Every later
+version of that client reads it, on every platform, until a capture of its own says
+otherwise. A client older than the version named here is unproven and gets nothing.
 
 | Capability | Antigravity 1.2.7 | Codex 0.147.0 | Claude Code 2.1.233 | Gemini CLI 0.57.0 | Grok 1.0.13 | Kimi 0.36.1 |
 |---|---:|---:|---:|---:|---:|---:|
@@ -46,7 +48,7 @@ own says otherwise.
 Every other capability in the closed shape defaults to false, including session resume,
 child sessions, startup or safe-point injection, and before-read guards.
 
-The native rows remain `no` for the older exact hook versions in this matrix.
+The native rows are `no` at the hook versions this matrix names.
 Separate installed-client captures establish Codex `livePush` on 0.152.1 and
 0.153.4, Claude Code `livePush` plus `replyRoute` on 2.1.258 and 2.1.260, and
 Antigravity CLI `livePush` on 1.2.7 and later through a relay the agent starts in its own shell.
@@ -58,12 +60,12 @@ The limitations belong next to the adapters they affect:
 
 | Adapter | Exact limitation and evidence |
 |---|---|
-| Antigravity CLI | 1.2.7 on darwin-arm64, captured in print mode, and later stable releases by certification floor. Only `SessionStart`, `PreInvocation`, `PostInvocation` and `Stop` load; `SessionEnd`, `PreToolUse` and `PostToolUse` are accepted into the config file and silently dropped, so there is no tool guard and no session-end deregistration - a session goes offline by presence age or an explicit `acc finish`. Payloads carry no `hook_event_name`, so each registered command passes its own event name. The end-of-turn `Stop` continuation reaches the model and is a bounded nudge, not a gate: ACC continues a turn at most once and fails open, and the client caps consecutive continuations itself (vendor 1.1.9). `agy agentapi send-message` can wake an idle session - captured - but only with that session's language-server address and CSRF token, which exist in the agent's own shell and in no hook. ACC does not take that token, so live push and reply routing are false. A peer message that arrives while the model writes its last answer is carried by the `Stop` continuation instead. A write that parses can register nothing, so install and doctor read `agy -p "/hooks"` back instead of trusting the file. Live push (1.2.7, darwin-arm64, TUI only, experimental, recorded opt-in) runs through a relay the agent starts once per conversation from its own shell - the only process holding the session endpoint - after ACC's context asks it to; the operator approves that command at the client's permission prompt. An idle session wakes; a busy one sees the message after its running answer, or at the next model invocation when the turn waits on a tool. Print mode and the first session in a folder trusted at that launch get no relay. |
-| Codex | Exact 0.147.0 next-turn context requires plugin trust. The observed stock 0.153.4 upgrade from ACC 0.3.1 to 0.4 required fresh review of five modified hook definitions; a subsequent restart retained all five active (activation evidence, not new event certification). LocalDaemon native delivery was captured through the installed package on 0.152.1 and 0.153.4, darwin-arm64; minimum 0.152.1, recorded opt-in, current feature probe and exact thread/cwd/process/version/protocol checks are required. Ordinary launch preserves the receiver workspace without ACC arguments or daemon ownership. Embedded or unreachable sessions keep their inbox. Native `replyRoute` remains false. |
+| Antigravity CLI | 1.2.7 on darwin-arm64, captured in print mode, and every later release by the forward rule. Only `SessionStart`, `PreInvocation`, `PostInvocation` and `Stop` load; `SessionEnd`, `PreToolUse` and `PostToolUse` are accepted into the config file and silently dropped, so there is no tool guard and no session-end deregistration - a session goes offline by presence age or an explicit `acc finish`. Payloads carry no `hook_event_name`, so each registered command passes its own event name. The end-of-turn `Stop` continuation reaches the model and is a bounded nudge, not a gate: ACC continues a turn at most once and fails open, and the client caps consecutive continuations itself (vendor 1.1.9). `agy agentapi send-message` can wake an idle session - captured - but only with that session's language-server address and CSRF token, which exist in the agent's own shell and in no hook. ACC does not take that token, so live push and reply routing are false. A peer message that arrives while the model writes its last answer is carried by the `Stop` continuation instead. A write that parses can register nothing, so install and doctor read `agy -p "/hooks"` back instead of trusting the file. Live push (1.2.7, darwin-arm64, TUI only, experimental, recorded opt-in) runs through a relay the agent starts once per conversation from its own shell - the only process holding the session endpoint - after ACC's context asks it to; the operator approves that command at the client's permission prompt. An idle session wakes; a busy one sees the message after its running answer, or at the next model invocation when the turn waits on a tool. Print mode and the first session in a folder trusted at that launch get no relay. |
+| Codex | Next-turn context, captured on 0.147.0, requires plugin trust. The observed stock 0.153.4 upgrade from ACC 0.3.1 to 0.4 required fresh review of five modified hook definitions; a subsequent restart retained all five active (activation evidence, not new event certification). LocalDaemon native delivery was captured through the installed package on 0.152.1 and 0.153.4, darwin-arm64; minimum 0.152.1, recorded opt-in, current feature probe and exact thread/cwd/process/version/protocol checks are required. Ordinary launch preserves the receiver workspace without ACC arguments or daemon ownership. Embedded or unreachable sessions keep their inbox. Native `replyRoute` remains false. |
 | Claude Code | 2.1.233 next-turn delivery waits for the next user prompt. A 2.1.258 Channel capture proved idle offer, busy queue-after-turn, explicit reply, duplicate suppression, and durable fallback, so `delivery.livePush` and `delivery.replyRoute` are live capabilities behind the native contract (experimental, off until opted in; Claude's development-channel warning is vendor-owned and visible). |
-| Gemini CLI | Only 0.57.0 has package-shipped next-turn certification. Its TUI has no captured external wake or queue interface and `--acp` changes launch ownership, so native delivery is fallback-only; live push and reply routing remain false. |
+| Gemini CLI | Package-shipped next-turn certification starts at 0.57.0. Its TUI has no captured external wake or queue interface and `--acp` changes launch ownership, so native delivery is fallback-only; live push and reply routing remain false. |
 | Grok | The Grok 1.0.24 installed-client check observed own CLI arguments after a terminal result, followed by owned work, message, and finish calls. This identity-only path does not certify peer-context injection. Documentation-shaped payloads do not count as real captures. The public leader surface exposed no proven addressed injection into an ordinary TUI session, so native delivery is `awaiting_compatibility_capture`; all capabilities remain false. |
-| Kimi Code | 0.36.1 has next-turn and guard evidence, plus a 60-second heartbeat. Its server/queue APIs do not prove a transparent binding to an independently opened session, so native delivery is fallback-only. |
+| Kimi Code | Next-turn and guard evidence was captured on 0.36.1, plus a 60-second heartbeat. Its server/queue APIs do not prove a transparent binding to an independently opened session, so native delivery is fallback-only. |
 | Generic MCP | As a receiver, tool polling is not next-turn injection, live push, or a native reply route. It has no write guard or client-lifecycle evidence. Outgoing messages may use an eligible recipient's opted-in native adapter. |
 
 `certification.json` beside each adapter is machine-readable. `COMPATIBILITY.md` records the

package/docs/CONCEPTS.md

@@ -123,8 +123,8 @@ recoverable rather than creating a terminal failure state.
 
 ## Durable first, faster delivery second
 
-The durable inbox is universal. Exact-version certified adapters may also offer
-messages at the next normal turn. Codex LocalDaemon and Claude Code Channel add
+The durable inbox is universal. An adapter whose captures reach the installed client may
+also offer messages at the next normal turn. Codex LocalDaemon and Claude Code Channel add
 experimental live delivery, off by default and subject to recipient policy and
 current reachability. Codex can retain an eligible daemon thread after its terminal
 exits. [Capabilities](CAPABILITIES.md) gives the current limits.

package/docs/GETTING_STARTED.md

@@ -53,7 +53,7 @@ are active; `acc doctor` leaves current readiness unverified and directs you to
 Read the delivery summary for each client. Live delivery needs an explicit opt-in and a
 verified channel in the current session. Codex can save your choice even when its local
 service is not running yet. Declining uses the reported fallback: `acc inbox`, or next-turn
-hooks only where the exact client version and platform are certified.
+hooks wherever the client is at or after a captured version.
 
 An interactive install asks one default-No question for all selected clients that need a
 choice. Use `--delivery actionable|all` for explicit noninteractive consent. Use
@@ -131,10 +131,10 @@ or follow the interaction through [How ACC works](HOW_IT_WORKS.md).
 Every message is recorded before ACC attempts faster delivery. Every participant has a
 durable inbox, which is the universal recovery path.
 
-On exact client versions and platforms with captured support, Codex, Claude Code, Gemini
-CLI, Kimi Code and Antigravity CLI can receive a message at the next normal turn. That does
-not wake an idle session. Grok, generic MCP clients, unknown versions, and unsupported
-platforms use the durable inbox instead.
+From the version each capture records onward, Codex, Claude Code, Gemini CLI, Kimi Code
+and Antigravity CLI can receive a message at the next normal turn, on any platform. That
+does not wake an idle session. Grok, generic MCP clients and clients older than every
+capture use the durable inbox instead.
 
 Antigravity CLI carries one extra condition: its hooks are given a project directory only
 when the session has an open workspace. A session started without one attaches nothing, and

package/docs/GLOSSARY.md

@@ -19,7 +19,7 @@
 - **Live push** — optional delivery through Claude Code Channel or Codex LocalDaemon to an already-running session, behind recipient opt-in. Both wait for an active turn to finish; [Capabilities](CAPABILITIES.md) gives the measured eligibility and limits.
 - **Recipient policy** — `off`, `actionable`, or `all`; opt-in permission to spend a turn, not a capability.
 - **Delivery binding** — ephemeral, generation-bound reachability data owned by an adapter.
-- **Fallback** — durable inbox or exact-certified next-turn recovery when live delivery is unavailable.
+- **Fallback** — durable inbox or certified next-turn recovery when live delivery is unavailable.
 - **Managed / manual lifecycle** — whether hooks report ACC presence automatically; never ownership of the external client process.
 - **MCP participation** — manual incoming polling without native lifecycle, context, guards, or receive wake; outgoing messages can use an eligible recipient's opted-in native route.
 - **Bounded discovery** — inbox/history summary pages with limits and cursors; bodies require selection.

package/node_modules/@agents-can-communicate/adapter-antigravity/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/adapter-antigravity",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/adapter-antigravity/plugin/plugin.json

@@ -1,5 +1,5 @@
 {
   "name": "acc",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "description": "Coordinate this Antigravity CLI session with other AI agent sessions working in the same workspace."
 }

package/node_modules/@agents-can-communicate/adapter-antigravity/src/adapter.mjs

@@ -9,10 +9,10 @@ import { bindNativeSession, nativeActivationHint, offerMessage, planNativeActiva
   probeNativeDelivery, refreshNativeSession } from "./native-delivery.mjs";
 import { PROTOCOL_CONTRACT } from "./relay-endpoint.mjs";
 
-// The version this client has been captured on, and the floor of what is
-// certified: nothing earlier was measured, and later releases - this client
-// ships every few days - are judged by this capture until one of their own
-// says otherwise.
+// The version this client has been captured on. Nothing earlier was measured,
+// and later releases - this client ships every few days - are judged by this
+// capture until one of their own says otherwise, which is how certification
+// evidence reads everywhere since 0.6.2.
 export const ANTIGRAVITY_CLI_VERSION = "1.2.7";
 
 /**
@@ -65,7 +65,6 @@ export function createAntigravityAdapter() {
     client: { command: "agy", certificationName: "antigravity-cli",
       versionArgs: ["--version"] },
     certification,
-    certificationFloor: { "darwin-arm64": ANTIGRAVITY_CLI_VERSION },
     capabilities: {
       lifecycle: { sessionStart: true },
       context: { beforeTurnInjection: true },

package/node_modules/@agents-can-communicate/adapter-claude-code/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/adapter-claude-code",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/adapter-claude-code/src/adapter.mjs

@@ -46,8 +46,8 @@ export function createClaudeCodeAdapter() {
       guards: { beforeWrite: true, beforeShell: true },
       // nextTurn is the certified 2.1.233 hook projection; livePush and
       // replyRoute rest on the 2.1.258 Channel capture and the native contract
-      // below. effectiveCapabilities() still gates every row on an exact
-      // certified version; the native contract is the separate live rule.
+      // below. effectiveCapabilities() carries each of those captures forward
+      // to later clients; the native contract is the separate live rule.
       delivery: { nextTurn: true, livePush: true, replyRoute: true },
     },
     // The first passing capture is the shipped minimum; the research lower

package/node_modules/@agents-can-communicate/adapter-codex/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/adapter-codex",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/adapter-gemini-cli/extension/gemini-extension.json

@@ -1,6 +1,6 @@
 {
   "name": "agents-can-communicate",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "description": "Coordinate this Gemini CLI session with other AI agent sessions working in the same workspace.",
   "contextFileName": "skills/acc/SKILL.md"
 }

package/node_modules/@agents-can-communicate/adapter-gemini-cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/adapter-gemini-cli",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/adapter-grok/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/adapter-grok",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/adapter-kimi/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/adapter-kimi",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/adapter-sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/adapter-sdk",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/adapter-sdk/src/capabilities.mjs

@@ -3,7 +3,6 @@ import { AccError, EXIT, assertPortableId } from "@agents-can-communicate/protoc
 import { CAPABILITY_SHAPE, freezeCapabilities, validateCertification }
   from "./certification.mjs";
 import { validateNativeDeliveryContract } from "./native-delivery.mjs";
-import { parseStableVersion } from "./native-vocabulary.mjs";
 
 // The capability surface, documented in docs/ADAPTER_AUTHORING.md and measured
 // per client in docs/CAPABILITIES.md. False is the default for every
@@ -116,10 +115,13 @@ export function defineAdapter(manifest) {
         { evidenceClient: item.client, client });
     }
   }
-  const floor = {};
+  // A floor said "judge later versions by this capture". Evidence now does that
+  // by itself, on every platform, so the field has nothing left to express and
+  // an adapter still declaring one is stale rather than strict. See
+  // docs/design/2026-09-22-certification-applies-forward.md.
   if (manifest.certificationFloor !== undefined) {
-    floor.certificationFloor = validateCertificationFloor(manifest.certificationFloor,
-      { certification, client: manifest.client.certificationName ?? manifest.client.command });
+    usage("certificationFloor was removed: certification evidence applies forward from the "
+      + "version that recorded it", { id: manifest.id });
   }
   const native = {};
   for (const method of ["refreshNativeSession", "retireNativeSession", "nativeActivationHint"]) {
@@ -140,37 +142,9 @@ export function defineAdapter(manifest) {
   return Object.freeze({
     ...manifest,
     certification,
-    ...floor,
     ...native,
     capabilities: assertCapabilities(manifest.capabilities, manifest, certification),
   });
 }
 
-const FLOOR_PLATFORM = /^(?:darwin|linux|win32)-(?:arm64|x64)$/;
 
-/**
- * An optional per-platform floor: later stable versions are judged by this
- * version's evidence until a capture of their own says otherwise. It can only
- * name a version that has passing evidence on that platform, so a floor never
- * certifies anything nobody captured.
- */
-function validateCertificationFloor(value, { certification, client }) {
-  if (value === null || typeof value !== "object" || Array.isArray(value)) {
-    usage("certificationFloor must map a platform to a stable version");
-  }
-  for (const [platform, version] of Object.entries(value)) {
-    if (!FLOOR_PLATFORM.test(platform)) {
-      usage(`certificationFloor names an unknown platform ${platform}`, { platform });
-    }
-    if (parseStableVersion(version) === null) {
-      usage(`certificationFloor ${platform} must be a stable version`, { platform, version });
-    }
-    const proven = certification.evidence.some(item => item.result === "pass"
-      && item.client === client && item.version === version && item.platform === platform);
-    if (!proven) {
-      usage(`certificationFloor ${version} on ${platform} has no passing evidence`,
-        { platform, version });
-    }
-  }
-  return Object.freeze({ ...value });
-}

package/node_modules/@agents-can-communicate/adapter-sdk/src/certification.mjs

@@ -2,8 +2,6 @@ import path from "node:path";
 
 import { AccError, EXIT } from "@agents-can-communicate/protocol";
 
-import { compareStableVersions, parseStableVersion } from "./native-vocabulary.mjs";
-
 export const CAPABILITY_SHAPE = Object.freeze({
   lifecycle: Object.freeze(["sessionStart", "sessionResume", "sessionEnd", "heartbeat",
     "childSessions"]),
@@ -20,6 +18,26 @@ const EVIDENCE_KEYS = new Set([...REQUIRED_TEXT, "limitations", "result"]);
 const RESULTS = new Set(["pass", "fail"]);
 const VERSION = /^\d+\.\d+\.\d+(?:[-+][0-9A-Za-z.-]+)?$/;
 const PLATFORM = /^(?:darwin|linux|win32)-(?:arm64|x64)$/;
+const TRIPLE = /^(\d+)\.(\d+)\.(\d+)(?:[-+][0-9A-Za-z.-]+)?$/;
+
+/** A client version as the triple that orders it. A prerelease is ordered by
+ * its release triple: 1.3.0-rc.1 is judged as 1.3.0, because a prerelease of a
+ * version ACC has already observed is not an older client. Anything unreadable
+ * - a probe that failed, "unknown", a vendor string - returns null.
+ */
+function versionOrder(text) {
+  const match = typeof text === "string" && text.toLowerCase() !== "unknown"
+    ? TRIPLE.exec(text) : null;
+  return match === null ? null : [Number(match[1]), Number(match[2]), Number(match[3])];
+}
+
+function compareVersionOrder(left, right) {
+  if (left === null || right === null) return left === right ? 0 : left === null ? -1 : 1;
+  for (let index = 0; index < 3; index += 1) {
+    if (left[index] !== right[index]) return left[index] < right[index] ? -1 : 1;
+  }
+  return 0;
+}
 const DATE = /^\d{4}-\d{2}-\d{2}$/;
 const TIMESTAMP = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,3})?Z$/;
 
@@ -144,29 +162,62 @@ function falseCapabilities() {
  * capability, is judged by the floor version's evidence for that capability.
  * Versions below the floor, prereleases and other platforms stay uncertified.
  */
-export function effectiveCapabilities(adapter, { clientVersion, platform } = {}) {
-  const resolved = falseCapabilities();
-  if (typeof clientVersion !== "string" || !VERSION.test(clientVersion)
-    || clientVersion.toLowerCase() === "unknown"
-    || typeof platform !== "string" || !PLATFORM.test(platform)
-    || platform.toLowerCase() === "unknown") return freezeCapabilities(resolved);
+/**
+ * Why a capability is on or off for one client, so a refusal can name the
+ * evidence that refused it instead of the version that asked.
+ *
+ * A capture says where a behaviour was observed, not which single release may
+ * use it. Clients ship almost daily, so evidence applies forward from the
+ * version that recorded it until a later capture changes that capability, and
+ * across platforms until one of them records something of its own. A version
+ * that cannot be read is judged by the newest evidence: a hook that runs has
+ * already proven the integration is installed.
+ *
+ * `reason` is one of `undeclared` (the adapter does not claim it), `unobserved`
+ * (nobody has captured it), `older-than-evidence` (this client predates the
+ * first capture, whose version is returned) or `recorded-failure` (a capture at
+ * the returned version recorded the loss).
+ */
+export function capabilityEvidence(adapter, { clientVersion, platform } = {}, capability) {
+  const [group, name] = capability.split(".");
+  if (adapter.capabilities?.[group]?.[name] !== true) {
+    return { granted: false, reason: "undeclared", version: null };
+  }
   const client = adapter.client?.certificationName ?? adapter.client?.command;
-  const rows = (adapter.certification?.evidence ?? [])
-    .filter(item => item.client === client && item.platform === platform);
-  const floor = adapter.certificationFloor?.[platform];
-  const floored = typeof floor === "string" && parseStableVersion(floor) !== null
-    && parseStableVersion(clientVersion) !== null
-    && compareStableVersions(clientVersion, floor) >= 0;
-  const certified = capability => {
-    const own = rows.filter(item => item.version === clientVersion && item.capability === capability);
-    const judged = own.length > 0 || !floored ? own
-      : rows.filter(item => item.version === floor && item.capability === capability);
-    return judged.some(item => item.result === "pass");
-  };
+  const named = (adapter.certification?.evidence ?? [])
+    .filter(item => item.client === client && item.capability === capability);
+  if (named.length === 0) return { granted: false, reason: "unobserved", version: null };
+  const asked = versionOrder(clientVersion);
+  const reachable = asked === null ? named
+    : named.filter(item => compareVersionOrder(versionOrder(item.version), asked) <= 0);
+  // Version first, platform second: a loss recorded on one platform at 1.3.0
+  // says nothing about that platform at 1.2.3, where the only evidence in
+  // reach is another platform's passing capture.
+  const own = reachable.filter(item => item.platform === platform);
+  const usable = own.length > 0 ? own : reachable;
+  if (usable.length === 0) {
+    const first = named.reduce((earliest, item) =>
+      compareVersionOrder(versionOrder(item.version), versionOrder(earliest.version)) < 0
+        ? item : earliest);
+    return { granted: false, reason: "older-than-evidence", version: first.version };
+  }
+  const newest = usable.reduce((best, item) =>
+    compareVersionOrder(versionOrder(item.version), versionOrder(best.version)) > 0 ? item : best);
+  const deciding = versionOrder(newest.version);
+  // Two platforms can disagree at the deciding version when neither is the
+  // platform in hand. Withholding a body costs a trip to acc inbox; a false
+  // "delivered" loses the message, so a recorded loss wins the tie.
+  const granted = usable
+    .filter(item => compareVersionOrder(versionOrder(item.version), deciding) === 0)
+    .every(item => item.result === "pass");
+  return { granted, reason: granted ? null : "recorded-failure", version: newest.version };
+}
+
+export function effectiveCapabilities(adapter, facts = {}) {
+  const resolved = falseCapabilities();
   for (const [group, names] of Object.entries(CAPABILITY_SHAPE)) {
     for (const name of names) {
-      resolved[group][name] = adapter.capabilities?.[group]?.[name] === true
-        && certified(`${group}.${name}`);
+      resolved[group][name] = capabilityEvidence(adapter, facts, `${group}.${name}`).granted;
     }
   }
   return freezeCapabilities(resolved);

package/node_modules/@agents-can-communicate/adapter-sdk/src/index.mjs

@@ -1,7 +1,8 @@
 // Capability contract, context projection, config ownership, and the binding
 // that survives between two ephemeral hook processes.
 export { CAPABILITY_SHAPE, assertCapabilities, defineAdapter } from "./capabilities.mjs";
-export { effectiveCapabilities, validateCertification } from "./certification.mjs";
+export { capabilityEvidence, effectiveCapabilities, validateCertification }
+  from "./certification.mjs";
 export { NATIVE_ACTIVATION_KINDS, NATIVE_BINDING_MODES, NATIVE_PLATFORMS, NATIVE_REASON_CODES,
   compareStableVersions, evaluateNativeEligibility, evaluateVersionContract, parseStableVersion,
   validateNativeActivationPlan, validateNativeDeliveryContract, validateNativeHandshake }

package/node_modules/@agents-can-communicate/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/cli",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/core",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/core/src/sessions.mjs

@@ -58,8 +58,7 @@ export function createSessionService(ports) {
     const ephemeral = await store.ephemeral.get("session", sessionId);
     const resolved = workspaceId ?? store.workspaceId ?? ephemeral?.workspaceId;
     if (resolved === undefined) return null;
-    const durable = (await store.snapshot(resolved, { kinds: ["session"] })).sessions
-      .find(session => session.sessionId === sessionId) ?? null;
+    const durable = await store.stateRecord(resolved, "session", sessionId);
     if (durable !== null) return { record: durable, durable: true };
     return ephemeral !== null && ephemeral.workspaceId === resolved
       ? { record: ephemeral, durable: false } : null;

package/node_modules/@agents-can-communicate/delivery-router/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/delivery-router",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/hook-runner/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/hook-runner",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/hook-runner/src/runner.mjs

@@ -4,7 +4,8 @@ import { readFile, realpath } from "node:fs/promises";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
 
-import { clearNativeAttempt, clearSessionBinding, effectiveCapabilities, loadSessionBinding, storeSessionBinding }
+import { capabilityEvidence, clearNativeAttempt, clearSessionBinding, effectiveCapabilities,
+  loadSessionBinding, storeSessionBinding }
   from "@agents-can-communicate/adapter-sdk";
 import { createCoordinationService } from "@agents-can-communicate/core";
 import { AccError, createId } from "@agents-can-communicate/protocol";
@@ -301,12 +302,17 @@ async function projectTurn({ binding, context, adapter, adapterId,
     ? { text: await adapter.renderContext?.(projectionInput, projectionOptions) ?? "",
       offeredMessageIds: [], includedAttentionIds: [] }
     : await adapter.renderContextResult(projectionInput, projectionOptions);
-  const clientFactsKnown = typeof binding.clientVersion === "string"
-    && typeof binding.platform === "string";
+  // Name the evidence that refused, never the version that asked. "not
+  // certified" told the person their own client was at fault for existing;
+  // these two say what acc knows and what would change it.
+  const evidence = capabilityEvidence(adapter, binding, "delivery.nextTurn");
+  const refusal = {
+    "older-than-evidence": () => `client ${binding.clientVersion} is older than `
+      + `${evidence.version}, the first version acc verified for nextTurn`,
+    "recorded-failure": () => `acc recorded that nextTurn stopped working in ${evidence.version}`,
+  }[evidence.reason] ?? (() => "this client has no nextTurn evidence");
   const reason = !effective.delivery.nextTurn
-    ? clientFactsKnown
-      ? `client ${binding.clientVersion} on ${binding.platform} is not certified for nextTurn`
-      : "the client version or platform is unknown"
+    ? refusal()
     : !hasStructuredRenderer ? "this adapter lacks structured delivery metadata" : null;
   const degradation = reason !== null && messages.length > 0
     ? `acc: ${messages.length} pending message(s) withheld because ${reason}; read `

package/node_modules/@agents-can-communicate/installer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/installer",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/installer/src/detect.mjs

@@ -1,7 +1,8 @@
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
 
-import { effectiveCapabilities, evaluateNativeEligibility, validateNativeActivationPlan }
+import { capabilityEvidence, effectiveCapabilities, evaluateNativeEligibility,
+  validateNativeActivationPlan }
   from "@agents-can-communicate/adapter-sdk";
 
 import { resolveExecutable, shellOf, shimDirFor } from "./native-activation.mjs";
@@ -186,9 +187,20 @@ export async function detectInstallation({ adapters, context, probe = spawnProbe
         } else if (typeof adapter.deliveryFallback?.diagnostic === "string") {
           const downgraded = adapter.capabilities?.delivery?.nextTurn === true
             && entry.capabilities?.delivery?.nextTurn !== true;
-          entry.deliveryDiagnostic = (downgraded
-            ? `${adapter.displayName} ${entry.version ?? "unknown version"} has no certified `
-              + `next-turn delivery on ${platform}; ` : "") + adapter.deliveryFallback.diagnostic;
+          // Name the evidence, not the version in hand: "has no certified
+          // next-turn delivery" told people their own client was the problem,
+          // and left them nothing to act on.
+          const evidence = capabilityEvidence(adapter,
+            { clientVersion: entry.version, platform }, "delivery.nextTurn");
+          const named = entry.version ?? "unknown version";
+          const why = evidence.reason === "older-than-evidence"
+            ? `${adapter.displayName} ${named} is older than ${evidence.version}, the first `
+              + "version acc verified for next-turn delivery; "
+            : evidence.reason === "recorded-failure"
+              ? `acc recorded that ${adapter.displayName} next-turn delivery stopped working `
+                + `in ${evidence.version}; `
+              : `${adapter.displayName} next-turn delivery has not been captured; `;
+          entry.deliveryDiagnostic = (downgraded ? why : "") + adapter.deliveryFallback.diagnostic;
         }
         if (entry.deliveryDiagnostic !== null) entry.diagnostics.push(entry.deliveryDiagnostic);
       }

package/node_modules/@agents-can-communicate/mcp-server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/mcp-server",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/protocol/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/protocol",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/storage-filesystem/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/storage-filesystem",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/storage-filesystem/src/retention.mjs

@@ -58,28 +58,34 @@ function ephemeralDirectory(paths, kind, id) {
   return path.join(paths.retained, "ephemeral", kind, id);
 }
 
+// The newest marker decides a record's state, so only that one is read and
+// checked. Every name is still validated first - an unparsable sequence fails
+// closed before anything is selected - and names are ordered as numbers, since
+// a sequence can outgrow its padding. Reading every marker made each lookup
+// cost an open and a full ancestor check per marker ever written: thousands
+// for a delivery binding renewed every forty seconds, and seconds for one
+// status in a workspace that had been in use for weeks.
 async function latestEphemeralMarker(paths, root, kind, id) {
   const directory = ephemeralDirectory(paths, kind, id);
-  const markers = [];
-  for (const filePath of await listJsonFiles(directory, { root })) {
+  const named = (await listJsonFiles(directory, { root })).map(filePath => {
     const sequence = path.basename(filePath, ".json");
+    if (typeof sequence !== "string" || !/^\d+$/.test(sequence)
+      || BigInt(sequence) < 1n || sequence !== pad(BigInt(sequence))) {
+      data("invalid ephemeral retention marker", { filePath });
+    }
+    return { filePath, sequence, order: BigInt(sequence) };
+  }).sort((left, right) => (left.order < right.order ? 1 : left.order > right.order ? -1 : 0));
+  for (const { filePath, sequence } of named) {
     const found = await readJsonIfPresent(filePath, root);
     if (found === null) continue;
     const marker = found.value;
-    if (typeof sequence !== "string" || !/^\d+$/.test(sequence)
-      || BigInt(sequence) < 1n || sequence !== pad(BigInt(sequence))
-      || !(marker?.state === "present" || marker?.state === "deleted")) {
+    if (!(marker?.state === "present" || marker?.state === "deleted")) {
       data("invalid ephemeral retention marker", { filePath });
     }
-    assertMarker(found, { area: "ephemeral", kind, id, sequence, state: marker.state },
-      filePath);
-    markers.push(marker);
+    assertMarker(found, { area: "ephemeral", kind, id, sequence, state: marker.state }, filePath);
+    return marker;
   }
-  return markers.sort((left, right) => {
-    const leftSequence = BigInt(left.sequence);
-    const rightSequence = BigInt(right.sequence);
-    return leftSequence < rightSequence ? -1 : leftSequence > rightSequence ? 1 : 0;
-  }).at(-1) ?? null;
+  return null;
 }
 
 export async function ephemeralIsDeleted(paths, root, kind, id) {
@@ -91,6 +97,10 @@ export async function markEphemeral(paths, options, kind, id, state) {
     data("invalid ephemeral retention state", { state });
   }
   const previous = await latestEphemeralMarker(paths, options.root, kind, id);
+  // A marker that repeats the current state changes nothing, and every renewal
+  // of a live record used to append one. History now grows only with a real
+  // change: published after a deletion, or deleted.
+  if (previous?.state === state) return previous;
   const sequence = pad(previous === null ? 1n : BigInt(previous.sequence) + 1n);
   const record = { retentionVersion: RETENTION_VERSION, area: "ephemeral", kind, id,
     sequence, state };

package/node_modules/@agents-can-communicate/storage-filesystem/src/store.mjs

@@ -265,6 +265,23 @@ export async function openFilesystemStore({ root, clock, ids, workspaceId, failA
    * cost grow with the number of messages the workspace had ever carried, and
    * the hook budget is five seconds after which it allows the write.
    */
+  /**
+   * One state record by id, or null - the checks a listing applies to each
+   * record (the path names it, a deleted generation is absent, the record
+   * validates, it belongs to this workspace) without reading every other
+   * record of its kind. Looking one session up by listing them all cost a full
+   * pass over every session the workspace ever had, several times a hook.
+   */
+  async function stateRecord(workspace, kind, id) {
+    const filePath = statePath(paths, kind, id);
+    const found = await readJsonIfPresent(filePath, root);
+    if (found === null) return null;
+    const envelope = assertStateBinding(found.value, kind, id, filePath);
+    if (await stateGenerationIsDeleted(paths, root, kind, envelope.id, envelope.generation)) return null;
+    validateRecord(kind, envelope.record);
+    return envelope.record.workspaceId === workspace ? envelope.record : null;
+  }
+
   async function snapshot(workspace, { kinds } = {}) {
     const wanted = kinds === undefined ? null : new Set(kinds);
     const of = async kind => {
@@ -348,6 +365,6 @@ export async function openFilesystemStore({ root, clock, ids, workspaceId, failA
     },
   });
 
-  return Object.freeze({ transaction, eventsSince, snapshot, ephemeral, paths, root,
+  return Object.freeze({ transaction, eventsSince, snapshot, stateRecord, ephemeral, paths, root,
     workspaceId });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agents-can-communicate",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "accManagedUpdateProtocol": 2,
   "accStoreVersion": 6,
   "type": "module",