agents-can-communicate 0.8.4 → 0.8.5

package/docs/ADAPTER_AUTHORING.md

@@ -192,6 +192,9 @@ transport that is technically different on some platform is the probe's fact to
 `docs/design/2026-09-26-native-delivery-across-platforms.md` in the repository.
 - Native methods return closed facts (`validateNativeActivationPlan()` closes the
   activation plan) and never put vendor data - endpoints, sockets, raw errors - into core.
+  A refused handshake may add `launchOption`: the bare command-line option, such as
+  `--search`, that made the client refuse. Doctor and the sender name it; a value, a vendor
+  string or anything but an option token is rejected.
 
 `nativeDelivery.policySource` accepts only `"installation-record"`, which is also the
 default. Hooks and senders read the current recorded recipient consent, independently of

package/docs/ARCHITECTURE.md

@@ -231,10 +231,13 @@ store contract this one does, and run the active generation otherwise. Apart fro
 `SessionEnd`, only the client's confirmed death releases a pin, so a session whose client
 process cannot be found is not pinned, and a pin that names no client is reaped. A
 generation directory is reclaimed once no control pointer, live lease, live pin or staging
-hold names it. An update is run by the installed code, so the reclaim after an activation
-follows the older rule; the new generation's own worker reclaims again on its first pass,
-recorded in `reclaim.json`, and on every later pass. Parsed help, version, and update recovery remain available when workspace
-admission is unavailable.
+hold names it. An update is run by the installed code, so right after an activation the
+activated generation's own reclaim runs from its files, and its worker reclaims on every later
+pass; each pass is recorded in `reclaim.json`. The updating process still runs from the
+generation it replaced, and its lease keeps that one through the pass. Such a pass, like one an
+unknown holder postponed, is recorded as unfinished, and the next ACC command an hour or more
+later starts the worker that finishes it. Parsed help, version, and update recovery remain
+available when workspace admission is unavailable.
 
 An independent worker downloads npm packages with lifecycle scripts disabled, checks exact
 stable package identity and the discovered integrity, and health-checks the staged runtime.

package/docs/TROUBLESHOOTING.md

@@ -139,10 +139,17 @@ client-owned hook and trust review.
 After a reboot no Codex service runs. Codex 0.157.1 and newer start it when the next Codex
 session opens (`daemon_auto_start`), and doctor then says so instead of advising `acc install`.
 A Codex chat that started without the service runs on its own embedded service until it closes,
-and no peer can reach it live. ACC reports it as `client_session_embedded`: the chat is told once,
-a sender sees the cause beside `no live transport`, and doctor names it on the session line.
-Open a new Codex chat while the service runs; start it with `codex app-server daemon start` if
-Codex does not.
+and no peer can reach it live. ACC reports it as `client_session_embedded`: the chat shows the
+user a notice once, a sender sees the cause beside `no live transport`, and doctor names it on
+the session line. Open a new Codex chat while the service runs; start it with
+`codex app-server daemon start` if Codex does not.
+
+Some launch options make Codex run a chat embedded even while the service runs: `-c`/`--config`,
+`--enable`, `--disable`, `--search`, `-p`/`--profile`, `--oss`, `--strict-config`,
+`--dangerously-bypass-hook-trust` and `--no-daemon`, and also the `CODEX_EXEC_SERVER_URL`
+environment variable. ACC names the option in the notice, the sender's line and doctor. For live
+delivery, start Codex without it; put a setting you need in `config.toml` instead of `-c`,
+`--enable`, `--disable`, `--search` or `--profile`.
 
 If a reply stays queued with `transport_permission_denied`, the sender's permissions
 blocked local transport. This is distinct from an unavailable recipient. The message was

package/docs/UPGRADING.md

@@ -57,6 +57,23 @@ From 0.8.3, the download does this itself.
 
 This release adds no store event type or field.
 
+0.8.5 changes what a Codex chat that runs without the daemon is told:
+
+- **The launch option that caused it is named.** Codex also runs a chat embedded, even while
+  its daemon runs, when it starts with `-c`/`--config`, `--enable`, `--disable`, `--search`,
+  `-p`/`--profile`, `--oss`, `--strict-config`, `--dangerously-bypass-hook-trust` or
+  `--no-daemon`. The notice, a sender's line and doctor name the option and advise starting
+  Codex without it; put a setting you need in `config.toml` instead.
+- **You see the notice yourself.** Codex shows it once in the chat as a hook message
+  (`↳ Hook · ACC: …`); the model receives its own line, as before.
+- **The previous runtime generation goes an hour after the update.** `acc update` runs from
+  the generation it replaces, so it cannot remove that one itself. It records the reclaim as
+  unfinished in `reclaim.json`, and the first ACC command an hour or more later removes the old
+  generation, with automatic updates on or off.
+
+This release adds no store event type or field. A sender's delivery JSON may carry
+`nativeLaunchOption` beside `nativeReasonCode`.
+
 ## From 0.7.x
 
 Claude Code live delivery wakes each session through the inbox socket that Claude Code opens

package/node_modules/@agents-can-communicate/adapter-antigravity/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/adapter-antigravity",
-  "version": "0.8.4",
+  "version": "0.8.5",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/adapter-antigravity/plugin/plugin.json

@@ -1,5 +1,5 @@
 {
   "name": "acc",
-  "version": "0.8.4",
+  "version": "0.8.5",
   "description": "Coordinate this Antigravity CLI session with other AI agent sessions working in the same workspace."
 }

package/node_modules/@agents-can-communicate/adapter-claude-code/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/adapter-claude-code",
-  "version": "0.8.4",
+  "version": "0.8.5",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/adapter-codex/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/adapter-codex",
-  "version": "0.8.4",
+  "version": "0.8.5",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/adapter-codex/src/embedded-host.mjs

@@ -55,11 +55,54 @@ export function interactiveHost(argv) {
   return true;
 }
 
-/** True only when the host was read and is an interactive TUI; never throws. */
-export async function runsEmbedded(pid, argvOf = hostArgv) {
+// Options that make Codex run a chat on its own embedded app server even while
+// the daemon runs. Measured on 0.159.1, which says so only behind its status
+// line: "Running without the shared background server: command-line
+// configuration overrides (-c, --enable, --disable, or --search) requires
+// embedded mode." The same sentence names --profile, --oss, --strict-config,
+// --dangerously-bypass-hook-trust and --no-daemon.
+const EMBEDDING_OPTIONS = new Set(["-c", "--config", "--enable", "--disable", "--search", "-p",
+  "--profile", "--oss", "--strict-config", "--dangerously-bypass-hook-trust", "--no-daemon"]);
+const OPENS_CHAT = new Set(["resume", "fork"]);
+
+// `--config=x` and `-cx` carry their value; both name the option they spell.
+const optionName = word => word.startsWith("--") ? word.split("=", 1)[0] : word.slice(0, 2);
+
+/**
+ * The first option on this interactive command line that keeps the chat
+ * embedded, as typed, or null. Scanning stops at the prompt: `ps` drops quotes,
+ * so a later word may be the prompt's own text.
+ */
+export function embeddingOption(argv) {
+  const words = codexArguments(argv);
+  if (words === null) return null;
+  let value = false;
+  let opened = false;
+  for (const word of words) {
+    if (value) { value = false; continue; }
+    // `--` ends the options: what follows is the prompt, however it reads.
+    if (word === "--") return null;
+    if (word.startsWith("-")) {
+      if (EMBEDDING_OPTIONS.has(optionName(word))) return optionName(word);
+      value = VALUE_OPTIONS.has(word);
+      continue;
+    }
+    if (opened || !OPENS_CHAT.has(word)) return null;
+    opened = true;
+  }
+  return null;
+}
+
+/**
+ * For a host that was read and is an interactive TUI, `{ launchOption }` - the
+ * option that keeps it embedded, or null when its command line shows none.
+ * Null for any other host or an unreadable one; never throws.
+ */
+export async function embeddedHost(pid, argvOf = hostArgv) {
   try {
-    return interactiveHost(await argvOf(pid));
+    const argv = await argvOf(pid);
+    return interactiveHost(argv) ? { launchOption: embeddingOption(argv) } : null;
   } catch {
-    return false;
+    return null;
   }
 }

package/node_modules/@agents-can-communicate/adapter-codex/src/hooks.mjs

@@ -138,15 +138,25 @@ export function allowOutcome() {
 /**
  * Context for the next turn.
  *
- * This client wraps nothing: a UserPromptSubmit hook's stdout arrives at the
- * model as a `developer` role message, verbatim. So the injection is plain
- * text - emitting Claude Code's JSON envelope would put the envelope itself
- * into the conversation, the same mistake it would be on Kimi Code.
+ * This client wraps nothing: a UserPromptSubmit hook's plain stdout arrives at
+ * the model as a `developer` role message, verbatim, so the ordinary injection
+ * is plain text. Codex also parses a JSON answer - 0.147.0, 0.155.1 and 0.159.1
+ * took `hookSpecificOutput.additionalContext` into the same developer message
+ * and kept the envelope out of the conversation, measured 2026-09-29 - which
+ * is how a notice for the user rides beside the context.
  *
  * The developer role is the most direct channel of the four, which is a reason
  * to be careful with what goes into it: anything a peer wrote must stay framed
  * as data, because at this role the model reads text as instruction.
  */
-export function injectOutcome(context) {
-  return { stdout: context, stderr: "", exitCode: 0 };
+export function injectOutcome(context, notice) {
+  if (typeof notice?.userMessage !== "string") return { stdout: context, stderr: "", exitCode: 0 };
+  // A line the user must see rides as the hook's systemMessage, which Codex
+  // shows in the chat and never sends to the model; the context goes to the
+  // model as additionalContext, the same developer message plain text becomes.
+  // Measured with a probe hook on 0.147.0, 0.155.1 and 0.159.1. Only the ask's
+  // one turn prints JSON; every other turn keeps the plain text above.
+  return { stdout: JSON.stringify({ systemMessage: notice.userMessage,
+    hookSpecificOutput: { hookEventName: "UserPromptSubmit", additionalContext: context } }),
+  stderr: "", exitCode: 0 };
 }

package/node_modules/@agents-can-communicate/adapter-codex/src/native-delivery.mjs

@@ -2,7 +2,7 @@ import { createHash } from "node:crypto";
 import { mkdir, rm, writeFile } from "node:fs/promises";
 import path from "node:path";
 
-import { decisionBody } from "@agents-can-communicate/adapter-sdk";
+import { decisionBody, isLaunchOption } from "@agents-can-communicate/adapter-sdk";
 
 import { CODEX_QUEUE_MINIMUM, MINIMUM_VERSION, PROTOCOL_CONTRACT, QUEUE_MODES,
   addCodexQueueMessage, canonicalCwd, compareVersions, controlSocketPath,
@@ -10,7 +10,7 @@ import { CODEX_QUEUE_MINIMUM, MINIMUM_VERSION, PROTOCOL_CONTRACT, QUEUE_MODES,
   versionOrder } from "./app-server-client.mjs";
 import { newEndpointId, readNativeEndpoint, readySocketPath, removeNativeEndpoint, socketIsReady,
   writeNativeEndpoint } from "./native-endpoint.mjs";
-import { hostArgv, runsEmbedded } from "./embedded-host.mjs";
+import { embeddedHost, hostArgv } from "./embedded-host.mjs";
 
 // The receiver's hook supplies thread and cwd. Core holds only a random endpoint
 // reference; sender environment never decides which daemon receives the message.
@@ -110,8 +110,10 @@ export async function verifyReceiver(peer, endpoint, { probe = probeCodexQueue,
 export async function bindNativeSession({ argvOf = hostArgv, ...options } = {}) {
   const result = await bindAttempt(options);
   if (result.supported || !Number.isInteger(options.clientPid) || options.clientPid <= 0) return result;
-  return await runsEmbedded(options.clientPid, argvOf)
-    ? closed(options.clientVersion, "client_session_embedded") : result;
+  const host = await embeddedHost(options.clientPid, argvOf);
+  if (host === null) return result;
+  const refusal = closed(options.clientVersion, "client_session_embedded");
+  return host.launchOption === null ? refusal : { ...refusal, launchOption: host.launchOption };
 }
 
 async function bindAttempt({ event, clientPid, clientVersion, runtimeDir,
@@ -208,10 +210,30 @@ export async function offerMessage({ binding, message, runtimeDir, timeoutMs = 5
 export const retireNativeSession = ({ binding, runtimeDir }) =>
   removeNativeEndpoint({ runtimeDir, endpointId: binding?.opaqueEndpointRef });
 
-const EMBEDDED_NOTICE = "ACC: live peer delivery is off in this Codex chat. It runs on its own "
-  + "embedded app server, so peer messages reach it only with the user's next prompt. Tell the "
-  + "user once: for live delivery, open a new Codex chat; if Codex does not start its app-server "
-  + "daemon itself, run `codex app-server daemon start` first.";
+const OPEN_A_CHAT = "open a new Codex chat; if Codex does not start its app-server daemon itself, "
+  + "run `codex app-server daemon start` first";
+// Options a setting in config.toml can replace; the rest are simply left off.
+const SETTING_OPTIONS = new Set(["-c", "--config", "--enable", "--disable", "--search", "-p",
+  "--profile"]);
+
+// What the chat is told: one line for the model, one the client shows the user
+// (Codex prints a hook's systemMessage, which never reaches the model).
+function embeddedNotice(launchOption) {
+  if (!isLaunchOption(launchOption)) {
+    return { line: "ACC: live peer delivery is off in this Codex chat. It runs on its own embedded "
+      + "app server, so peer messages reach it only with the user's next prompt. ACC has shown the "
+      + `user how to get it: ${OPEN_A_CHAT}.`,
+    userMessage: "ACC: live peer delivery is off in this chat, which runs on its own app server. "
+      + `For live delivery, ${OPEN_A_CHAT}.` };
+  }
+  const advice = `start Codex without \`${launchOption}\``
+    + (SETTING_OPTIONS.has(launchOption) ? " and move what it sets into config.toml" : "");
+  return { line: `ACC: live peer delivery is off in this Codex chat. It was started with `
+    + `\`${launchOption}\`, so it runs on its own embedded app server and peer messages reach it `
+    + `only with the user's next prompt. ACC has shown the user how to get it: ${advice}.`,
+  userMessage: `ACC: live peer delivery is off in this chat: \`${launchOption}\` makes Codex run `
+    + `it on its own app server. For live delivery, ${advice}.` };
+}
 
 // One delivered notice per chat. The marker is created exclusively, so a
 // second turn finds it; a notice the runner did not deliver gives it back.
@@ -227,7 +249,7 @@ export async function nativeActivationHint({ event, nativeBinding, runtimeDir })
   } catch {
     return null;
   }
-  return { line: EMBEDDED_NOTICE, release: () => rm(marker, { force: true }) };
+  return { ...embeddedNotice(nativeBinding.launchOption), release: () => rm(marker, { force: true }) };
 }
 
 function renderText(message) {

package/node_modules/@agents-can-communicate/adapter-gemini-cli/extension/gemini-extension.json

@@ -1,6 +1,6 @@
 {
   "name": "agents-can-communicate",
-  "version": "0.8.4",
+  "version": "0.8.5",
   "description": "Coordinate this Gemini CLI session with other AI agent sessions working in the same workspace.",
   "contextFileName": "skills/acc/SKILL.md"
 }

package/node_modules/@agents-can-communicate/adapter-gemini-cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/adapter-gemini-cli",
-  "version": "0.8.4",
+  "version": "0.8.5",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/adapter-grok/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/adapter-grok",
-  "version": "0.8.4",
+  "version": "0.8.5",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/adapter-kimi/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/adapter-kimi",
-  "version": "0.8.4",
+  "version": "0.8.5",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/adapter-sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/adapter-sdk",
-  "version": "0.8.4",
+  "version": "0.8.5",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/adapter-sdk/src/index.mjs

@@ -5,7 +5,8 @@ export { capabilityEvidence, compareVersionOrder, effectiveCapabilities, validat
   versionOrder }
   from "./certification.mjs";
 export { NATIVE_ACTIVATION_KINDS, NATIVE_BINDING_MODES, NATIVE_REASON_CODES,
-  compareStableVersions, evaluateNativeEligibility, evaluateVersionContract, parseStableVersion,
+  compareStableVersions, evaluateNativeEligibility, evaluateVersionContract, isLaunchOption,
+  parseStableVersion,
   validateNativeActivationPlan, validateNativeDeliveryContract, validateNativeHandshake }
   from "./native-delivery.mjs";
 export { EVENT_KINDS, NORMALIZED_EVENT_KEYS, normalizedEvent } from "./events.mjs";

package/node_modules/@agents-can-communicate/adapter-sdk/src/native-attempt.mjs

@@ -3,7 +3,7 @@ import { readFile } from "node:fs/promises";
 import path from "node:path";
 import { Worker } from "node:worker_threads";
 
-import { NATIVE_REASON_CODES, TIMESTAMP } from "./native-vocabulary.mjs";
+import { NATIVE_REASON_CODES, TIMESTAMP, isLaunchOption } from "./native-vocabulary.mjs";
 
 // Optional diagnostic metadata beside the hook-owner file, never an event
 // history or injected context. Copy only closed values: vendor errors, prompts,
@@ -18,9 +18,13 @@ export function nativeAttemptFrom(value) {
     || !["bootstrap-environment", "installation-record"].includes(value.policySource)
     || !["enabled", "off", "missing", "invalid", "unavailable"].includes(value.policyStatus)
     || !["identified", "unknown"].includes(value.clientProcess)) return null;
+  // The option a refusal named is optional and closed to a bare option token;
+  // anything else is dropped and the attempt itself kept.
   return { at: value.at, event: value.event, state: value.state, reasonCode: value.reasonCode,
     policy: value.policy, policySource: value.policySource, policyStatus: value.policyStatus,
-    clientProcess: value.clientProcess };
+    clientProcess: value.clientProcess,
+    ...(value.state !== "active" && isLaunchOption(value.launchOption)
+      ? { launchOption: value.launchOption } : {}) };
 }
 
 const keyFor = harnessSessionId => createHash("sha256").update(String(harnessSessionId))

package/node_modules/@agents-can-communicate/adapter-sdk/src/native-delivery.mjs

@@ -1,7 +1,7 @@
-import { CONTRACT_ID, FINGERPRINT, HANDSHAKE_KEYS, KNOWN_BAD_REASON, NATIVE_BINDING_MODES,
-  PLANNABLE_ACTIVATION_KINDS, PROBE_KEYS, TIMESTAMP, assertModes, assertReasonCode, closed,
-  compareStableVersions, deepFreeze, isPlainObject, isText, parseStableVersion, usage }
-  from "./native-vocabulary.mjs";
+import { CONTRACT_ID, FINGERPRINT, HANDSHAKE_KEYS, HANDSHAKE_OPTIONAL_KEYS, KNOWN_BAD_REASON,
+  NATIVE_BINDING_MODES, PLANNABLE_ACTIVATION_KINDS, PROBE_KEYS, TIMESTAMP, assertModes,
+  assertReasonCode, closed, compareStableVersions, deepFreeze, isLaunchOption, isPlainObject, isText,
+  parseStableVersion, usage } from "./native-vocabulary.mjs";
 import { compareVersionOrder, versionOrder } from "./certification.mjs";
 
 // The native-delivery compatibility contract: a minimum that is a real passing
@@ -17,7 +17,8 @@ import { compareVersionOrder, versionOrder } from "./certification.mjs";
 // live delivery alone.
 
 export { NATIVE_ACTIVATION_KINDS, NATIVE_BINDING_MODES, NATIVE_REASON_CODES,
-  PLANNABLE_ACTIVATION_KINDS, compareStableVersions, parseStableVersion } from "./native-vocabulary.mjs";
+  PLANNABLE_ACTIVATION_KINDS, compareStableVersions, isLaunchOption, parseStableVersion }
+  from "./native-vocabulary.mjs";
 export { validateNativeActivationPlan } from "./native-activation.mjs";
 
 const orderedModes = modes => NATIVE_BINDING_MODES.filter(mode => modes.includes(mode));
@@ -214,7 +215,7 @@ export function evaluateNativeEligibility(adapter, { clientVersion, probe }) {
 }
 
 function validateNativeHandshakeShape(handshake) {
-  closed(handshake, HANDSHAKE_KEYS, "native handshake");
+  closed(handshake, HANDSHAKE_KEYS, "native handshake", HANDSHAKE_OPTIONAL_KEYS);
   if (typeof handshake.supported !== "boolean") usage("native handshake supported must be a boolean");
   if (handshake.clientVersion !== null && !isText(handshake.clientVersion)) {
     usage("native handshake clientVersion must be a string or null");
@@ -236,6 +237,12 @@ function validateNativeHandshakeShape(handshake) {
   } else if (handshake.opaqueEndpointRef !== null || handshake.leaseUntil !== null) {
     usage("an unsupported native handshake carries no endpoint or lease");
   }
+  if (Object.hasOwn(handshake, "launchOption")) {
+    if (handshake.supported) usage("only a refused native handshake names a launchOption");
+    if (!isLaunchOption(handshake.launchOption)) {
+      usage("native handshake launchOption must be a bare command-line option");
+    }
+  }
   return handshake;
 }
 
@@ -264,7 +271,10 @@ export function validateNativeHandshake(adapter, { clientVersion, handshake }) {
   if (rule.reasonCode !== null) return closedResult(rule.reasonCode);
   if (handshake === null || handshake === undefined) return closedResult("handshake_failed");
   const facts = validateNativeHandshakeShape(handshake);
-  if (facts.supported !== true) return closedResult(facts.reasonCode ?? "handshake_failed");
+  if (facts.supported !== true) {
+    return deepFreeze({ ...base, reasonCode: facts.reasonCode ?? "handshake_failed",
+      ...(Object.hasOwn(facts, "launchOption") ? { launchOption: facts.launchOption } : {}) });
+  }
   if (facts.protocolContract !== rule.protocolContract) return closedResult("protocol_mismatch");
   const modes = orderedModes(facts.modes);
   if (!modes.includes("livePush")) return closedResult("handshake_failed");

package/node_modules/@agents-can-communicate/adapter-sdk/src/native-vocabulary.mjs

@@ -50,6 +50,13 @@ export const PROBE_KEYS = ["supported", "clientVersion", "protocolContract", "ex
   "modes", "reasonCode"];
 export const HANDSHAKE_KEYS = ["supported", "clientVersion", "protocolContract", "modes",
   "opaqueEndpointRef", "leaseUntil", "reasonCode"];
+// A refused handshake may name the client launch option that caused it, such
+// as Codex's `--search`. A bare option token, never its value: a value can be
+// anything a user typed.
+export const HANDSHAKE_OPTIONAL_KEYS = ["launchOption"];
+export const LAUNCH_OPTION = /^-(?:[a-z]|-[a-z][a-z0-9]*(?:-[a-z0-9]+)*)$/;
+export const isLaunchOption = value => typeof value === "string" && value.length <= 40
+  && LAUNCH_OPTION.test(value);
 
 export function usage(message, details = {}) {
   throw new AccError(EXIT.USAGE, message, details);
@@ -58,10 +65,10 @@ export function usage(message, details = {}) {
 export const isPlainObject = value => value !== null && typeof value === "object" && !Array.isArray(value);
 export const isText = value => typeof value === "string" && value !== "";
 
-export function closed(value, keys, label) {
+export function closed(value, keys, label, optional = []) {
   if (!isPlainObject(value)) usage(`${label} must be an object`);
   for (const key of Object.keys(value)) {
-    if (!keys.includes(key)) usage(`unknown ${label} field ${key}`, { key });
+    if (!keys.includes(key) && !optional.includes(key)) usage(`unknown ${label} field ${key}`, { key });
   }
   for (const key of keys) {
     if (!Object.hasOwn(value, key)) usage(`${label} requires ${key}`, { key });

package/node_modules/@agents-can-communicate/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/cli",
-  "version": "0.8.4",
+  "version": "0.8.5",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/cli/src/main.mjs

@@ -164,7 +164,8 @@ export function recordedText(message, delivery) {
         ? "live offer blocked by sender permissions; message remains queued; run acc doctor in the sending session"
         : item.errorCode === "no_live_transport"
           ? `${item.recipientParticipantId} has no live transport`
-            + `${item.nativeReasonCode ? ` (${describeNativeReason(item.nativeReasonCode)})` : ""}`
+            + `${item.nativeReasonCode ? ` (${describeNativeReason(item.nativeReasonCode,
+              { launchOption: item.nativeLaunchOption })})` : ""}`
             + "; the message waits in its inbox"
         : item.errorCode === "recipient_offline" && item.endReason === "clear"
           ? `${item.recipientParticipantId}'s conversation was cleared (/clear); the message waits `

package/node_modules/@agents-can-communicate/cli/src/managed-runtime/worker.mjs

@@ -2,6 +2,7 @@ import { realpath } from "node:fs/promises";
 import path from "node:path";
 
 import { activatePending, reclaimGenerations } from "./activation.mjs";
+import { listRuntimeHolds } from "./leases.mjs";
 import { downloadRelease, fetchRelease, newerVersion } from "./download.mjs";
 import { withManagerLock } from "./mutex.mjs";
 import { readControl, writeControl, writeManagedJson } from "./state.mjs";
@@ -82,10 +83,24 @@ export async function reclaimAsActive(root, generationRoot) {
     const control = await readControl(root);
     if (control === null || await realpath(generationRoot) !== await realpath(control.active.root)) return;
     const result = await reclaimGenerations({ root });
-    // A postponed pass is recorded as unfinished, so the scheduler tries again
-    // (hourly) even with automatic updates off.
+    // The process that activated this generation still runs from the one it
+    // replaced, and its own lease keeps that generation through this pass -
+    // measured in the 0.8.5 upgrade preflight. That pass is unfinished, so the
+    // hourly retry removes the old generation once the process has exited. A
+    // worker started at once would race every command right after an update.
+    const active = await realpath(control.active.root);
+    const own = await listRuntimeHolds(root).then(async holds => {
+      for (const hold of holds) {
+        if (hold.pid === process.pid && await realpath(hold.runtime.root).catch(() => null) !== active) {
+          return true;
+        }
+      }
+      return false;
+    }, () => false);
+    // A postponed pass is recorded as unfinished too, so the scheduler tries
+    // again (hourly) even with automatic updates off.
     await writeManagedJson(path.join(root, RECLAIM_MARKER), { schemaVersion: 1,
-      activeRoot: control.active.root, complete: result?.postponed !== true,
+      activeRoot: control.active.root, complete: result?.postponed !== true && !own,
       attemptedAt: new Date().toISOString() });
   } catch { /* Best effort; the next pass reclaims again. */ }
 }

package/node_modules/@agents-can-communicate/cli/src/native-session-diagnostics.mjs

@@ -120,7 +120,10 @@ function describeAttempt(attempt) {
         : attempt.policyStatus === "unavailable" ? `${source} delivery policy could not be read`
           : `${source} delivery policy was off`;
   } else if (attempt.state === "active") detail = "local handshake succeeded";
-  else detail = failures[attempt.reasonCode] ?? describeNativeReason(attempt.reasonCode);
+  else if (attempt.reasonCode === "client_session_embedded" && attempt.launchOption) {
+    detail = `${describeNativeReason(attempt.reasonCode, { launchOption: attempt.launchOption })}; `
+      + `start a new client session without ${attempt.launchOption}`;
+  } else detail = failures[attempt.reasonCode] ?? describeNativeReason(attempt.reasonCode);
   return `last attempt ${attempt.at}: ${detail}`;
 }
 

package/node_modules/@agents-can-communicate/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/core",
-  "version": "0.8.4",
+  "version": "0.8.5",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/delivery-router/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/delivery-router",
-  "version": "0.8.4",
+  "version": "0.8.5",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/delivery-router/src/native-reason.mjs

@@ -1,7 +1,9 @@
 import { listSessionBindings, loadNativeAttempt } from "@agents-can-communicate/adapter-sdk";
 
 /**
- * Why a session has no live transport, as its own last native attempt said.
+ * Why a session has no live transport, as its own last native attempt said:
+ * `{ reasonCode, launchOption? }`, the option being the client launch option
+ * that attempt named as the cause.
  *
  * The same record `acc doctor` reads, found through the hook-owner file that
  * names this exact session generation. Null when none says: an attempt that
@@ -14,5 +16,7 @@ export async function lastNativeReason({ runtimeDir, sessionId, generation }) {
   if (owners.length !== 1) return null;
   const attempt = await loadNativeAttempt({ runtimeDir,
     harnessSessionId: owners[0].harnessSessionId, accSessionId: sessionId, generation });
-  return attempt !== null && attempt.state !== "active" ? attempt.reasonCode : null;
+  if (attempt === null || attempt.state === "active") return null;
+  return { reasonCode: attempt.reasonCode,
+    ...(attempt.launchOption ? { launchOption: attempt.launchOption } : {}) };
 }

package/node_modules/@agents-can-communicate/delivery-router/src/router.mjs

@@ -1,4 +1,5 @@
-import { NATIVE_REASON_CODES, evaluateVersionContract } from "@agents-can-communicate/adapter-sdk";
+import { NATIVE_REASON_CODES, evaluateVersionContract, isLaunchOption }
+  from "@agents-can-communicate/adapter-sdk";
 
 import { lastNativeReason } from "./native-reason.mjs";
 import { refreshExpiredBinding } from "./refresh-binding.mjs";
@@ -51,13 +52,16 @@ export function createDeliveryRouter({ service, adapters, clock, readLivePolicy,
   const registry = adaptersById(adapters);
 
   // A session that bound no live transport may have said why: the reason its
-  // own last native attempt recorded, from the closed vocabulary only.
+  // own last native attempt recorded, from the closed vocabulary only, and the
+  // client launch option behind it when the attempt named one.
   async function withoutLiveTransport(participantId, target) {
-    const reason = await Promise.resolve()
+    const found = await Promise.resolve()
       .then(() => readNativeReason({ sessionId: target.sessionId, generation: target.generation }))
       .catch(() => null);
-    return { ...durable(participantId, "no_live_transport"),
-      ...(NATIVE_REASON_CODES.includes(reason) ? { nativeReasonCode: reason } : {}) };
+    const reason = found?.reasonCode;
+    if (!NATIVE_REASON_CODES.includes(reason)) return durable(participantId, "no_live_transport");
+    return { ...durable(participantId, "no_live_transport"), nativeReasonCode: reason,
+      ...(isLaunchOption(found.launchOption) ? { nativeLaunchOption: found.launchOption } : {}) };
   }
 
   // Read at offer time, not from the binding: consent withdrawn after a session

package/node_modules/@agents-can-communicate/hook-runner/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/hook-runner",
-  "version": "0.8.4",
+  "version": "0.8.5",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/hook-runner/src/native-attempt.mjs

@@ -45,6 +45,7 @@ export async function bindNative({ adapter, event, hookBinding, clientVersion, p
         reasonCode: result.reasonCode, policy, policySource, policyStatus,
         clientProcess: Number.isInteger(hookBinding.clientPid) && hookBinding.clientPid > 0
           ? "identified" : "unknown",
+        ...(result.launchOption === undefined ? {} : { launchOption: result.launchOption }),
       } }).catch(() => {});
   }
   return result;
@@ -57,6 +58,7 @@ function asHint(value) {
   if (typeof value === "string") return { line: value, release: async () => {} };
   if (value !== null && typeof value === "object" && typeof value.line === "string") {
     return { line: value.line,
+      ...(usableHint(value.userMessage) ? { userMessage: value.userMessage } : {}),
       release: typeof value.release === "function" ? value.release : async () => {} };
   }
   if (value !== null && typeof value === "object" && typeof value.release === "function") {
@@ -66,7 +68,8 @@ function asHint(value) {
 }
 
 function usableHint(line) {
-  return line !== "" && !/[\r\n]/.test(line) && Buffer.byteLength(line, "utf8") <= HINT_MAX_BYTES;
+  return typeof line === "string" && line !== "" && !/[\r\n]/.test(line)
+    && Buffer.byteLength(line, "utf8") <= HINT_MAX_BYTES;
 }
 
 // An adapter may release with a synchronous function. Calling `.catch` on its
@@ -91,6 +94,8 @@ export function callRelease(release) {
  * A string has nothing reserved. `{ line, release }` has reserved an ask; this
  * function calls `release` when it drops the line, including when the adapter
  * answers after the budget. The caller releases a line it does not deliver.
+ * `{ line, userMessage }` also asks for a line the user sees and the model
+ * does not, held to the same bound; one that does not fit is dropped alone.
  */
 export async function nativeActivationHintFor({ adapter, event, nativeBinding, binding, context,
   paths, deadline }) {

package/node_modules/@agents-can-communicate/hook-runner/src/native-binding.mjs

@@ -37,8 +37,11 @@ function discardEndpoint(adapter, handshake, runtimeDir) {
 export async function establishNativeBinding({ adapter, event, hookBinding, clientVersion,
   platform, livePolicy, service, runtimeDir, clock, env,
   timeoutMs = DEFAULT_TIMEOUT_MS, heartbeatCadenceMs = DEFAULT_CADENCE_MS }) {
-  const outcome = (state, reasonCode, modes = []) =>
-    Object.freeze({ state, reasonCode, modes: Object.freeze([...modes]) });
+  // A refusal may name the client launch option behind it; see
+  // validateNativeHandshake, which admits only a bare option token.
+  const outcome = (state, reasonCode, modes = [], launchOption = null) =>
+    Object.freeze({ state, reasonCode, modes: Object.freeze([...modes]),
+      ...(launchOption === null ? {} : { launchOption }) });
   const sessionId = hookBinding?.accSessionId;
   const generation = hookBinding?.generation;
   if (typeof sessionId !== "string" || typeof generation !== "string") return outcome("off", null);
@@ -80,7 +83,7 @@ export async function establishNativeBinding({ adapter, event, hookBinding, clie
     if (!verdict.ok) {
       await discardEndpoint(adapter, handshake, runtimeDir);
       return outcome(STATIC_REASONS.has(verdict.reasonCode) ? "unsupported" : "degraded",
-        verdict.reasonCode);
+        verdict.reasonCode, [], verdict.launchOption ?? null);
     }
     const now = Date.parse(clock.now());
     const lease = Date.parse(verdict.leaseUntil);

package/node_modules/@agents-can-communicate/hook-runner/src/runner.mjs

@@ -238,8 +238,8 @@ async function openContext({ event, adapterId, dataHome, runtime, env, deadline
 // offered. Runs after the heartbeat and the bounded native retry.
 // `render` is how the projected text reaches this client: before a turn it is
 // the adapter's context envelope, at the end of one it is a continuation.
-async function projectTurn({ binding, context, adapter, adapterId,
-  render = text => adapter.injectOutcome?.(text), activationHint = null, repeats = true }) {
+async function projectTurn({ binding, context, adapter, adapterId, render = null,
+  activationHint = null, activationNotice = null, repeats = true }) {
   const sync = await context.service.sync({ sessionId: binding.accSessionId,
     cursor: null, scope: "delta" });
 
@@ -283,11 +283,17 @@ async function projectTurn({ binding, context, adapter, adapterId,
   const owner = hintFits ? `${header}\n${activationHint}` : header;
   const withHint = (outcome, attached) => ({ ...outcome,
     activationHintIncluded: attached === true && outcome.stdout !== "" });
+  // The ask's line for the user travels with its line for the model, or not
+  // at all: the adapter shows it where the client shows a hook's message.
+  const notice = hintFits && activationNotice !== null ? { userMessage: activationNotice } : null;
+  const inject = text => notice === null ? adapter.injectOutcome?.(text)
+    : adapter.injectOutcome?.(text, notice);
+  const renderText = render ?? inject;
   // A peer can join after this prompt has begun. The current turn must already
   // have its own arguments when it needs inbox/reply, without reattaching or
   // waiting for another user prompt. Solo emits identity, not a peer notice.
   if (sync.solo && messages.length === 0) {
-    return withHint(ownerOnlyOutcome(text => adapter.injectOutcome?.(text), owner, totalBudget),
+    return withHint(ownerOnlyOutcome(inject, owner, totalBudget),
       hintFits);
   }
 
@@ -336,7 +342,7 @@ async function projectTurn({ binding, context, adapter, adapterId,
   // Own claims make sync non-solo but produce no peer context. They cannot
   // remove this turn's identity or consume a nonexistent body separator.
   if (body === "" && messages.length === 0) {
-    return withHint(ownerOnlyOutcome(text => adapter.injectOutcome?.(text), owner, totalBudget),
+    return withHint(ownerOnlyOutcome(inject, owner, totalBudget),
       hintFits);
   }
   const projected = body === "" ? "" : ownerFits ? `${owner}\n${body}` : body;
@@ -361,7 +367,7 @@ async function projectTurn({ binding, context, adapter, adapterId,
   // The entry point owns the transport boundary. This handler only prepares
   // offer inputs; recording them here would claim delivery before stdout's
   // callback proves that the bytes crossed.
-  const outcome = { stdout: "", ...render(projected) };
+  const outcome = { stdout: "", ...renderText(projected) };
   const writableOffers = outcome.stdout === "" ? [] : offerInputs;
   return withHint({ ...outcome,
     stderr: [outcome.stderr, ownerWarning, degradation].filter(Boolean).join("\n"),
@@ -373,7 +379,8 @@ async function projectTurn({ binding, context, adapter, adapterId,
 // so the reservation goes with it.
 async function projectActivation(input, offered) {
   try {
-    const turn = await projectTurn({ ...input, activationHint: offered?.line ?? null });
+    const turn = await projectTurn({ ...input, activationHint: offered?.line ?? null,
+      activationNotice: offered?.userMessage ?? null });
     const included = turn.activationHintIncluded === true;
     delete turn.activationHintIncluded;
     if (!offered) return turn;

package/node_modules/@agents-can-communicate/installer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/installer",
-  "version": "0.8.4",
+  "version": "0.8.5",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/installer/src/delivery-diagnostics.mjs

@@ -1,3 +1,5 @@
+import { isLaunchOption } from "@agents-can-communicate/adapter-sdk";
+
 // Shared presentation of observed delivery facts. Vendor probes provide closed
 // reasons; installation and doctor must not turn a version floor into readiness.
 const REASONS = Object.freeze({
@@ -16,10 +18,16 @@ const REASONS = Object.freeze({
     + "cannot reach",
 });
 
-export function describeNativeReason(reason, { clientVersion, minimumVersion } = {}) {
+export function describeNativeReason(reason, { clientVersion, minimumVersion, launchOption } = {}) {
   if (reason === "below_minimum_version" && clientVersion && minimumVersion) {
     return `client ${clientVersion} needs version ${minimumVersion} or newer for native delivery`;
   }
+  // A client can run embedded because of how it was started - Codex does for
+  // `--search`, `-c`, `--profile` and others while its daemon runs.
+  if (reason === "client_session_embedded" && isLaunchOption(launchOption)) {
+    return `the client was started with ${launchOption}, which runs this session on its own `
+      + "embedded service that peers cannot reach";
+  }
   return REASONS[reason] ?? reason ?? "readiness is unverified";
 }
 export const describeDeliveryFallback = entry => entry.capabilities?.delivery?.nextTurn === true

package/node_modules/@agents-can-communicate/mcp-server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/mcp-server",
-  "version": "0.8.4",
+  "version": "0.8.5",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/protocol/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/protocol",
-  "version": "0.8.4",
+  "version": "0.8.5",
   "private": true,
   "type": "module",
   "exports": {

package/node_modules/@agents-can-communicate/storage-filesystem/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agents-can-communicate/storage-filesystem",
-  "version": "0.8.4",
+  "version": "0.8.5",
   "private": true,
   "type": "module",
   "exports": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agents-can-communicate",
-  "version": "0.8.4",
+  "version": "0.8.5",
   "accManagedUpdateProtocol": 2,
   "accStoreVersion": 6,
   "type": "module",