cli-jaw 2.17.38 → 2.17.39

package/dist/src/agent/runtime/acp/grok-events.js

@@ -0,0 +1,28 @@
+import { acpRecord } from './session.js';
+/** Optional original-response telemetry; malformed counters cannot invalidate a final answer. */
+export function grokUsage(result) {
+    if (result['_meta'] === undefined || result['_meta'] === null)
+        return null;
+    let raw;
+    try {
+        const meta = acpRecord(result['_meta']);
+        if (meta['usage'] === undefined || meta['usage'] === null)
+            return null;
+        raw = acpRecord(meta['usage']);
+    }
+    catch {
+        return null;
+    }
+    const event = { kind: 'usage' };
+    const fields = { inputTokens: 'inputTokens', outputTokens: 'outputTokens', cachedReadTokens: 'cachedTokens' };
+    for (const [source, target] of Object.entries(fields)) {
+        const value = raw[source];
+        if (value === undefined)
+            continue;
+        if (typeof value !== 'number' || !Number.isSafeInteger(value) || value < 0)
+            return null;
+        event[target] = value;
+    }
+    return Object.keys(event).length > 1 ? event : null;
+}
+//# sourceMappingURL=grok-events.js.map

package/dist/src/agent/runtime/acp/grok-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grok-events.js","sourceRoot":"","sources":["../../../../../src/agent/runtime/acp/grok-events.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAIzC,iGAAiG;AACjG,MAAM,UAAU,SAAS,CAAC,MAA+B;IACrD,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC3E,IAAI,GAA4B,CAAC;IACjC,IAAI,CAAC;QACD,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QACxC,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACvE,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IACxB,MAAM,KAAK,GAAU,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACvC,MAAM,MAAM,GAAG,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,cAAc,EAAW,CAAC;IACvH,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACxF,KAAK,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;IAC1B,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACxD,CAAC"}

package/dist/src/agent/runtime/acp/grok-options.js

@@ -0,0 +1,63 @@
+import { normalizeNativePermissions } from './permissions.js';
+import { acpRecord } from './session.js';
+/** Restrictive native policy is unverified on Grok 1.0.13; never silently widen it. */
+export function grokAcpArgs(value) {
+    const permissions = normalizeNativePermissions(value);
+    if (permissions !== 'auto') {
+        throw new Error('grok_acp_restrictive_policy_unverified: select print transport for restrictive permissions');
+    }
+    return ['agent', '--no-leader', '--always-approve', 'stdio'];
+}
+/** Select an existing login mechanism; never silently change auth identity. */
+export function grokAuthMethod(environment, advertised) {
+    const method = environment['XAI_API_KEY']?.trim() ? 'xai.api_key' : 'cached_token';
+    if (!Array.isArray(advertised) || !advertised.some(entry => entry && typeof entry === 'object'
+        && !Array.isArray(entry) && entry['id'] === method))
+        throw new Error('grok_existing_auth_unavailable');
+    return method;
+}
+function identifier(value) {
+    if (typeof value !== 'string' || !value.trim() || value.length > 1024)
+        throw new Error('grok_invalid_model_metadata');
+    return value;
+}
+/** Grok 1.0.13 advertises legacy models, with object-valued reasoningEfforts. */
+export function grokModelSelection(setup, requested, effort) {
+    const state = acpRecord(acpRecord(setup)['models']);
+    const current = identifier(state['currentModelId']);
+    const raw = state['availableModels'];
+    if (!Array.isArray(raw) || raw.length === 0 || raw.length > 2048)
+        throw new Error('grok_invalid_model_metadata');
+    const models = new Map();
+    for (const entry of raw) {
+        const model = acpRecord(entry), id = identifier(model['modelId']);
+        if (models.has(id))
+            throw new Error('grok_ambiguous_model');
+        models.set(id, model);
+    }
+    if (!models.has(current))
+        throw new Error('grok_invalid_model_metadata');
+    const modelId = !requested || requested === 'default' || requested === 'grok-build' ? current : identifier(requested);
+    const selected = models.get(modelId);
+    if (!selected)
+        throw new Error('grok_model_not_advertised');
+    if (!effort)
+        return { modelId };
+    identifier(effort);
+    const meta = acpRecord(selected['_meta']);
+    const choices = meta['reasoningEfforts'];
+    if (meta['supportsReasoningEffort'] !== true || !Array.isArray(choices) || choices.length > 64) {
+        throw new Error('grok_effort_unavailable');
+    }
+    const values = new Set();
+    for (const entry of choices) {
+        const value = identifier(acpRecord(entry)['value']);
+        if (values.has(value))
+            throw new Error('grok_ambiguous_effort');
+        values.add(value);
+    }
+    if (!values.has(effort))
+        throw new Error('grok_effort_unavailable');
+    return { modelId, meta: { reasoningEffort: effort } };
+}
+//# sourceMappingURL=grok-options.js.map

package/dist/src/agent/runtime/acp/grok-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grok-options.js","sourceRoot":"","sources":["../../../../../src/agent/runtime/acp/grok-options.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,uFAAuF;AACvF,MAAM,UAAU,WAAW,CAAC,KAAc;IACtC,MAAM,WAAW,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;IACtD,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,4FAA4F,CAAC,CAAC;IAClH,CAAC;IACD,OAAO,CAAC,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,OAAO,CAAC,CAAC;AACjE,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,cAAc,CAAC,WAA8B,EAAE,UAAmB;IAC9E,MAAM,MAAM,GAAG,WAAW,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,cAAc,CAAC;IACnF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;WACvF,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAC3G,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACtH,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,kBAAkB,CAAC,KAAc,EAAE,SAAyB,EAAE,MAAsB;IAGhG,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjH,MAAM,MAAM,GAAG,IAAI,GAAG,EAAmC,CAAC;IAC1D,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QAClE,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC5D,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAC1B,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,CAAC,SAAS,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IACtH,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAChC,UAAU,CAAC,MAAM,CAAC,CAAC;IACnB,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACzC,IAAI,IAAI,CAAC,yBAAyB,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QAC7F,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACpD,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAChE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACpE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,CAAC;AAC1D,CAAC"}

package/dist/src/agent/runtime/acp/grok-session.js

@@ -0,0 +1,118 @@
+import { spawn } from 'node:child_process';
+import { realpathSync, statSync } from 'node:fs';
+import { resolveWindowsLaunchSpec, launchArgv } from '../../../core/windows-launch-spec.js';
+import { detectCliBinary } from '../../../core/cli-detect.js';
+import { mergeEnvWindowsSafe } from '../../spawn-env.js';
+import { ownProcess } from '../../spawn/process-kill.js';
+import { normalizeNativePermissions } from './permissions.js';
+import { AcpSession, acpRecord, validateAcpSessionOptions } from './session.js';
+import { grokAcpArgs, grokAuthMethod, grokModelSelection } from './grok-options.js';
+const STARTUP_REAP_TIMEOUT_MS = 6_000;
+/** Startup can be aborted before an AcpSession exists to own close(). */
+async function reapStartupChild(child) {
+    if (child.exitCode !== null || child.signalCode !== null)
+        return;
+    await new Promise((resolve, reject) => {
+        const cleanup = () => { clearTimeout(timer); child.off('exit', exited); child.off('close', exited); };
+        const exited = () => { cleanup(); resolve(); };
+        const timer = setTimeout(() => { cleanup(); reject(new Error('grok_acp_startup_cleanup_failed')); }, STARTUP_REAP_TIMEOUT_MS);
+        child.once('exit', exited);
+        child.once('close', exited);
+    });
+}
+/** One dedicated Grok process, with existing auth/config and no print fallback. */
+export async function createGrokSession(options) {
+    // Capture the requested identity before any async provider setup begins.
+    const { model, effort, resumeSessionId } = options;
+    validateAcpSessionOptions(options);
+    const permissions = normalizeNativePermissions(options.permissions);
+    const args = grokAcpArgs(permissions); // Policy admission must precede spawn, auth and session setup.
+    if (typeof options.binary !== 'string' || !options.binary.trim())
+        throw new Error('grok_acp_invalid_binary');
+    for (const value of [model, effort, resumeSessionId]) {
+        if (value !== undefined && value !== null && (typeof value !== 'string' || value.length > 1024
+            || (value.length > 0 && !value.trim())))
+            throw new Error('grok_acp_invalid_option');
+    }
+    if (options.signal?.aborted)
+        throw new Error('grok_acp_acquire_aborted');
+    let cwd;
+    try {
+        cwd = realpathSync(options.cwd);
+        if (!statSync(cwd).isDirectory())
+            throw new Error('not_directory');
+    }
+    catch {
+        throw new Error('grok_acp_invalid_cwd');
+    }
+    const env = { ...options.env };
+    const windows = (options.platform ?? process.platform) === 'win32';
+    const launch = windows ? resolveWindowsLaunchSpec(options.binary, args, options.launchDeps ?? {
+        which: name => detectCliBinary(name).path || null,
+    }) : null;
+    if (windows && !launch)
+        throw new Error('grok_acp_launch_unsupported');
+    if (options.signal?.aborted)
+        throw new Error('grok_acp_acquire_aborted');
+    const child = (options.spawnImpl ?? spawn)(launch?.command ?? options.binary, launch ? launchArgv(launch) : args, { cwd, env: launch ? mergeEnvWindowsSafe(env, launch.envDelta) : env,
+        stdio: 'pipe', shell: false, windowsHide: true });
+    const owned = ownProcess(child, options.ownedProcessOptions);
+    let session;
+    const abort = () => {
+        if (session)
+            session.retire(new Error('grok_acp_acquire_aborted'));
+        else
+            owned.terminate('startup-failed');
+    };
+    options.signal?.addEventListener('abort', abort, { once: true });
+    try {
+        if (options.signal?.aborted) {
+            abort();
+            throw new Error('grok_acp_acquire_aborted');
+        }
+        session = new AcpSession(child, { permissions, promptTimeoutMs: options.promptTimeoutMs,
+            ...(options.requestTimeoutMs === undefined ? {} : { requestTimeoutMs: options.requestTimeoutMs }),
+            ...(options.controlTimeoutMs === undefined ? {} : { controlTimeoutMs: options.controlTimeoutMs }),
+            ...(options.drainTimeoutMs === undefined ? {} : { drainTimeoutMs: options.drainTimeoutMs }),
+            ...(options.ownedProcessOptions === undefined ? {} : { ownedProcessOptions: options.ownedProcessOptions }),
+            ...(options.registry === undefined ? {} : { registry: options.registry }),
+            ...(options.failed === undefined ? {} : { failed: options.failed }) });
+        await session.start({ cwd, authMethodId: init => grokAuthMethod(env, init['authMethods']),
+            ...(resumeSessionId ? { resumeSessionId } : {}) });
+        const setup = session.getSessionSetup();
+        const selected = grokModelSelection(setup, model, effort);
+        // Preserve the provider's current effort when only a product alias was requested.
+        if (selected.meta || selected.modelId !== acpRecord(setup['models'])['currentModelId']) {
+            await session.setModel(selected.modelId, selected.meta);
+        }
+        if (options.signal?.aborted || !session.idle)
+            throw new Error('grok_acp_acquire_aborted');
+        return session;
+    }
+    catch (error) {
+        if (session) {
+            try {
+                await session.close();
+            }
+            catch {
+                throw new Error('grok_acp_startup_cleanup_failed');
+            }
+        }
+        else {
+            owned.terminate('startup-failed');
+            try {
+                await reapStartupChild(child);
+            }
+            finally {
+                child.stdin?.destroy();
+                child.stdout?.destroy();
+                child.stderr?.destroy();
+            }
+        }
+        throw error;
+    }
+    finally {
+        options.signal?.removeEventListener('abort', abort);
+    }
+}
+//# sourceMappingURL=grok-session.js.map

package/dist/src/agent/runtime/acp/grok-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grok-session.js","sourceRoot":"","sources":["../../../../../src/agent/runtime/acp/grok-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAuC,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,wBAAwB,EAAE,UAAU,EAAoB,MAAM,sCAAsC,CAAC;AAC9G,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,yBAAyB,EAA0B,MAAM,cAAc,CAAC;AACxG,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAepF,MAAM,uBAAuB,GAAG,KAAK,CAAC;AAEtC,yEAAyE;AACzE,KAAK,UAAU,gBAAgB,CAAC,KAAqC;IACjE,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;QAAE,OAAO;IACjE,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,MAAM,OAAO,GAAG,GAAG,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACtG,MAAM,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC;QAC9H,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACP,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAA2B;IAC/D,yEAAyE;IACzE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,GAAG,OAAO,CAAC;IACnD,yBAAyB,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,WAAW,GAAG,0BAA0B,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,+DAA+D;IACtG,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7G,KAAK,MAAM,KAAK,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,CAAC;QACnD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI;eACvF,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACzE,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACD,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAAC,CAAC;IACpD,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC;IACnE,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,UAAU,IAAI;QAC1F,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI;KACpD,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACV,IAAI,OAAO,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACvE,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACzE,MAAM,KAAK,GAAmC,CAAC,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC,MAAM,EAAE,OAAO,IAAI,OAAO,CAAC,MAAM,EACxG,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG;QACpG,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC7D,IAAI,OAA+B,CAAC;IACpC,MAAM,KAAK,GAAG,GAAG,EAAE;QACf,IAAI,OAAO;YAAE,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;;YAC9D,KAAK,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAC3C,CAAC,CAAC;IACF,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,IAAI,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YAAC,KAAK,EAAE,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAAC,CAAC;QACtF,OAAO,GAAG,IAAI,UAAU,CAAC,KAAK,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe;YACnF,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;YACjG,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;YACjG,GAAG,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;YAC3F,GAAG,CAAC,OAAO,CAAC,mBAAmB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,EAAE,CAAC;YAC1G,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;YACzE,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QAC3E,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;YACrF,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAC1D,kFAAkF;QAClF,IAAI,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACrF,MAAM,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC1F,OAAO,OAAO,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,OAAO,EAAE,CAAC;YACV,IAAI,CAAC;gBAAC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;YAC9B,MAAM,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YAAC,CAAC;QACjE,CAAC;aAAM,CAAC;YACJ,KAAK,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;YAClC,IAAI,CAAC;gBAAC,MAAM,gBAAgB,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;oBAC9B,CAAC;gBAAC,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;gBAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;gBAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YAAC,CAAC;QACzF,CAAC;QACD,MAAM,KAAK,CAAC;IAChB,CAAC;YAAS,CAAC;QAAC,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;AACtE,CAAC"}

package/dist/src/agent/runtime/acp/notification-queue.js

@@ -0,0 +1,107 @@
+const COUNT_LIMIT = 256;
+const BYTE_LIMIT = 8 * 1024 * 1024;
+/** Per-turn queue. Human requests bypass it; consumers bind effects to its signal and owner. */
+export class AcpNotificationQueue {
+    failed;
+    jobs = [];
+    waiters = new Set();
+    controller = new AbortController();
+    active = null;
+    bytes = 0;
+    scheduled = false;
+    sealed = false;
+    failure = null;
+    constructor(failed) {
+        this.failed = failed;
+    }
+    get idle() { return this.active === null && this.jobs.length === 0; }
+    enqueue(frame, consume) {
+        if (this.sealed)
+            throw new Error('acp_notification_after_terminal');
+        let bytes;
+        try {
+            bytes = Buffer.byteLength(JSON.stringify(frame));
+        }
+        catch {
+            this.fail(new Error('acp_invalid_notification'));
+            return;
+        }
+        if (this.sealed)
+            throw new Error('acp_notification_after_terminal');
+        if (this.jobs.length + Number(this.active !== null) >= COUNT_LIMIT || this.bytes + bytes > BYTE_LIMIT) {
+            this.fail(new Error('acp_notification_limit'));
+            return;
+        }
+        this.jobs.push({ frame, consume, bytes });
+        this.bytes += bytes;
+        this.schedule();
+    }
+    seal() { this.sealed = true; }
+    close(error = new Error('acp_notification_closed')) {
+        if (this.failure)
+            return;
+        this.failure = error;
+        this.sealed = true;
+        this.jobs.length = 0;
+        this.active = null;
+        this.bytes = 0;
+        this.controller.abort(error);
+        for (const waiter of this.waiters)
+            waiter.reject(error);
+        this.waiters.clear();
+    }
+    drain() {
+        if (this.failure)
+            return Promise.reject(this.failure);
+        if (this.idle)
+            return Promise.resolve();
+        const pending = new Promise((resolve, reject) => this.waiters.add({ resolve, reject }));
+        void pending.catch(() => undefined);
+        return pending;
+    }
+    fail(error) {
+        if (this.failure)
+            return;
+        this.close(error);
+        try {
+            this.failed(error);
+        }
+        catch { /* The closed queue cannot be resurrected by its owner. */ }
+    }
+    schedule() {
+        if (this.scheduled || this.active || this.failure)
+            return;
+        this.scheduled = true;
+        queueMicrotask(() => {
+            this.scheduled = false;
+            if (!this.failure)
+                void this.run();
+        });
+    }
+    async run() {
+        const job = this.jobs.shift();
+        if (!job || this.failure)
+            return;
+        this.active = job;
+        try {
+            await job.consume(job.frame, this.controller.signal);
+        }
+        catch {
+            this.fail(new Error('acp_notification_consumer_failed'));
+        }
+        finally {
+            if (this.active === job) {
+                this.active = null;
+                this.bytes -= job.bytes;
+            }
+            if (!this.failure && this.idle) {
+                for (const waiter of this.waiters)
+                    waiter.resolve();
+                this.waiters.clear();
+            }
+            if (!this.failure)
+                this.schedule();
+        }
+    }
+}
+//# sourceMappingURL=notification-queue.js.map

package/dist/src/agent/runtime/acp/notification-queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification-queue.js","sourceRoot":"","sources":["../../../../../src/agent/runtime/acp/notification-queue.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,GAAG,GAAG,CAAC;AACxB,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEnC,gGAAgG;AAChG,MAAM,OAAO,oBAAoB;IAUA;IATZ,IAAI,GAAU,EAAE,CAAC;IACjB,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAC5B,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IAC5C,MAAM,GAAe,IAAI,CAAC;IAC1B,KAAK,GAAG,CAAC,CAAC;IACV,SAAS,GAAG,KAAK,CAAC;IAClB,MAAM,GAAG,KAAK,CAAC;IACf,OAAO,GAAiB,IAAI,CAAC;IAErC,YAA6B,MAA8B;QAA9B,WAAM,GAAN,MAAM,CAAwB;IAAG,CAAC;IAC/D,IAAI,IAAI,KAAc,OAAO,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC;IAE9E,OAAO,CAAC,KAAe,EAAE,OAAiB;QACtC,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACpE,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YAAC,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAAC,CAAC;QACzD,MAAM,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACnE,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACpE,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI,WAAW,IAAI,IAAI,CAAC,KAAK,GAAG,KAAK,GAAG,UAAU,EAAE,CAAC;YACpG,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC;YAC/C,OAAO;QACX,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;QACpB,IAAI,CAAC,QAAQ,EAAE,CAAC;IACpB,CAAC;IACD,IAAI,KAAW,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC;IACpC,KAAK,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,yBAAyB,CAAC;QAC9C,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;QACf,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;IACD,KAAK;QACD,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtD,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAC9F,KAAK,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACpC,OAAO,OAAO,CAAC;IACnB,CAAC;IACO,IAAI,CAAC,KAAY;QACrB,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAClB,IAAI,CAAC;YAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,0DAA0D,CAAC,CAAC;IACpG,CAAC;IACO,QAAQ;QACZ,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1D,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,cAAc,CAAC,GAAG,EAAE;YAChB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;YACvB,IAAI,CAAC,IAAI,CAAC,OAAO;gBAAE,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;QACvC,CAAC,CAAC,CAAC;IACP,CAAC;IACO,KAAK,CAAC,GAAG;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACjC,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC;QAClB,IAAI,CAAC;YAAC,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QAC7D,MAAM,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAC;QAAC,CAAC;gBAC3D,CAAC;YACL,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACtB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;gBACnB,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC;YAC5B,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC7B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO;oBAAE,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACzB,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,OAAO;gBAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACvC,CAAC;IACL,CAAC;CACJ"}

package/dist/src/agent/runtime/acp/permissions.js

@@ -0,0 +1,133 @@
+import { randomUUID } from 'node:crypto';
+const OPTION_LIMIT = 20;
+const ID_LIMIT = 240;
+const TEXT_LIMIT = 1000;
+const TOKEN_LIMIT = 64;
+const TOKEN_PATTERN = /^[a-zA-Z0-9._:*-]+$/;
+function record(value) {
+    if (value === null || typeof value !== 'object' || Array.isArray(value))
+        return false;
+    const prototype = Object.getPrototypeOf(value);
+    return prototype === Object.prototype || prototype === null;
+}
+export function permissionOptions(value) {
+    if (!Array.isArray(value) || value.length === 0 || value.length > OPTION_LIMIT) {
+        throw new Error('acp_invalid_options');
+    }
+    const seen = new Set();
+    const options = [];
+    for (const item of value) {
+        if (!record(item))
+            throw new Error('acp_invalid_option');
+        const optionId = item['optionId'];
+        const name = item['name'];
+        const kind = item['kind'];
+        if (typeof optionId !== 'string' || !optionId || optionId.length > ID_LIMIT || seen.has(optionId)
+            || typeof name !== 'string' || name.length > TEXT_LIMIT
+            || (kind !== 'allow_once' && kind !== 'allow_always' && kind !== 'reject_once' && kind !== 'reject_always')) {
+            throw new Error('acp_invalid_option');
+        }
+        seen.add(optionId);
+        options.push({ optionId, name, kind });
+    }
+    return options;
+}
+export function validatedPermissionParams(value, nativeSessionId) {
+    if (!record(value))
+        throw new Error('acp_invalid_permission');
+    const sessionId = value['sessionId'];
+    if (typeof sessionId !== 'string' || !sessionId || sessionId !== nativeSessionId) {
+        throw new Error('acp_wrong_session');
+    }
+    const tool = value['toolCall'];
+    if (!record(tool))
+        throw new Error('acp_invalid_tool');
+    const toolCallId = tool['toolCallId'];
+    const title = tool['title'];
+    if (typeof toolCallId !== 'string' || !toolCallId || toolCallId.length > ID_LIMIT
+        || (title !== undefined && title !== null && (typeof title !== 'string' || title.length > TEXT_LIMIT))) {
+        throw new Error('acp_invalid_tool');
+    }
+    return {
+        options: permissionOptions(value['options']),
+        title: typeof title === 'string' ? title : 'Permission request',
+    };
+}
+export function normalizeNativePermissions(value) {
+    if (value === 'auto' || value === 'safe')
+        return value;
+    if (!Array.isArray(value))
+        throw new Error('invalid_native_permissions');
+    const tokens = [];
+    for (const entry of value) {
+        if (typeof entry !== 'string')
+            throw new Error('invalid_native_permissions');
+        const token = entry.trim();
+        if (!token)
+            continue;
+        if (token.length > TOKEN_LIMIT || !TOKEN_PATTERN.test(token))
+            throw new Error('invalid_native_permissions');
+        tokens.push(token);
+    }
+    // Capture policy for this runtime without freezing or modifying persisted settings.
+    return Object.freeze(tokens);
+}
+export function automaticPermission(permissions, options) {
+    if (permissions === 'auto') {
+        return (options.find(option => option.kind === 'allow_once')
+            ?? options.find(option => option.kind === 'allow_always'))?.optionId ?? null;
+    }
+    if (permissions === 'safe' || Array.isArray(permissions))
+        return undefined;
+    return null;
+}
+function responseOptionId(value) {
+    if (!record(value))
+        throw new Error('invalid_response');
+    const keys = Reflect.ownKeys(value);
+    if (keys.length !== 1 || keys[0] !== 'optionId')
+        throw new Error('invalid_response');
+    const optionId = value['optionId'];
+    if (optionId !== null && typeof optionId !== 'string')
+        throw new Error('invalid_option');
+    return optionId;
+}
+/** Native-wire-only: accepts native IDs for an already-authorized automatic decision. */
+export function permissionResponse(value, options) {
+    const optionId = responseOptionId(value);
+    if (optionId === null)
+        return { outcome: { outcome: 'cancelled' } };
+    if (!options.some(option => option.optionId === optionId))
+        throw new Error('invalid_option');
+    return { outcome: { outcome: 'selected', optionId } };
+}
+/** Consumes validated options; only the registry may sanitize and publish the returned view. */
+export function preparePermissionRequest(title, options) {
+    const nativeByHandle = new Map();
+    const view = {
+        title,
+        fields: [{
+                id: randomUUID(), label: 'Permission', multiSelect: false, allowFreeform: false,
+                options: options.map(option => {
+                    const id = randomUUID();
+                    nativeByHandle.set(id, option.optionId);
+                    // Do not clip or redact here: the canonical registry boundary owns both.
+                    return { id, label: option.name };
+                }),
+            }],
+    };
+    return {
+        view,
+        validate(value) {
+            const handle = responseOptionId(value);
+            if (handle === null)
+                return { outcome: { outcome: 'cancelled' } };
+            const optionId = nativeByHandle.get(handle);
+            if (optionId === undefined)
+                throw new Error('invalid_option');
+            return { outcome: { outcome: 'selected', optionId } };
+        },
+        dispose() { nativeByHandle.clear(); },
+    };
+}
+//# sourceMappingURL=permissions.js.map

package/dist/src/agent/runtime/acp/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../../../../src/agent/runtime/acp/permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AASzC,MAAM,YAAY,GAAG,EAAE,CAAC;AACxB,MAAM,QAAQ,GAAG,GAAG,CAAC;AACrB,MAAM,UAAU,GAAG,IAAI,CAAC;AACxB,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,MAAM,aAAa,GAAG,qBAAqB,CAAC;AAE5C,SAAS,MAAM,CAAC,KAAc;IAC1B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,SAAS,GAAY,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IACxD,OAAO,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC5C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,YAAY,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC3C,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,OAAO,GAA0B,EAAE,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;eAC1F,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,UAAU;eACpD,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,eAAe,CAAC,EAAE,CAAC;YAC9G,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAc,EAAE,eAAuB;IAG7E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC;IACrC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,eAAe,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5B,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,GAAG,QAAQ;WAC1E,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC,EAAE,CAAC;QACzG,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACxC,CAAC;IACD,OAAO;QACH,OAAO,EAAE,iBAAiB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC5C,KAAK,EAAE,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,oBAAoB;KAClE,CAAC;AACN,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACrD,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IACvD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACzE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QACxB,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC7E,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,IAAI,KAAK,CAAC,MAAM,GAAG,WAAW,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC5G,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,oFAAoF;IACpF,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAC/B,WAA0D,EAAE,OAA2C;IAEvG,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;QACzB,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC;eACrD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,EAAE,QAAQ,IAAI,IAAI,CAAC;IACrF,CAAC;IACD,IAAI,WAAW,KAAK,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3E,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACpC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACrF,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;IACnC,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACzF,OAAO,QAAQ,CAAC;AACpB,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,kBAAkB,CAAC,KAAc,EAAE,OAA2C;IAC1F,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,WAAoB,EAAE,EAAE,CAAC;IAC7E,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC7F,OAAO,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,UAAmB,EAAE,QAAQ,EAAE,EAAE,CAAC;AACnE,CAAC;AAID,gGAAgG;AAChG,MAAM,UAAU,wBAAwB,CAAC,KAAa,EAAE,OAA2C;IAC/F,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IACjD,MAAM,IAAI,GAAuB;QAC7B,KAAK;QACL,MAAM,EAAE,CAAC;gBACL,EAAE,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK;gBAC/E,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;oBAC1B,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;oBACxB,cAAc,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;oBACxC,yEAAyE;oBACzE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;gBACtC,CAAC,CAAC;aACL,CAAC;KACL,CAAC;IACF,OAAO;QACH,IAAI;QACJ,QAAQ,CAAC,KAAc;YACnB,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACvC,IAAI,MAAM,KAAK,IAAI;gBAAE,OAAO,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,CAAC;YAClE,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC5C,IAAI,QAAQ,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;YAC9D,OAAO,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,CAAC;QAC1D,CAAC;QACD,OAAO,KAAW,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;KAC9C,CAAC;AACN,CAAC"}

package/dist/src/agent/runtime/acp/projection.js

@@ -0,0 +1,162 @@
+import { FULLTEXT_MAX_CHARS } from '../../events/fulltext-bound.js';
+import { acpRecord } from './session.js';
+import { acpSnapshot, acpText } from './content.js';
+const TOOL_LIMIT = 4096;
+const NATIVE_ID_CHARS = 1024;
+const UNSUPPORTED_CONTENT = '[unsupported ACP content]';
+function nativeId(value) {
+    if (typeof value !== 'string' || !value.trim() || value.length > NATIVE_ID_CHARS)
+        throw new Error('acp_invalid_id');
+    return value;
+}
+function title(value) {
+    if (value === undefined || value === null)
+        return undefined;
+    if (typeof value !== 'string')
+        throw new Error('acp_invalid_content');
+    if (value.length > FULLTEXT_MAX_CHARS)
+        throw new Error('acp_content_limit');
+    return value;
+}
+function toolStatus(value, prior) {
+    if (value === undefined || value === null)
+        return prior ?? 'running';
+    switch (value) {
+        case 'pending':
+        case 'in_progress': return 'running';
+        case 'completed': return 'done';
+        case 'failed': return 'error';
+        default: throw new Error('acp_invalid_tool_status');
+    }
+}
+function exitDetail(raw) {
+    if (!raw || typeof raw !== 'object' || Array.isArray(raw))
+        return undefined;
+    const code = acpRecord(raw)['exit_code'];
+    return typeof code === 'number' && Number.isSafeInteger(code) && code !== 0 ? `Exit code: ${code}` : undefined;
+}
+/** ACP protocol state only. Generic projection owns public IDs, privacy and preview budgets. */
+export class AcpProjection {
+    projection;
+    tools = new Map();
+    active = null;
+    thoughtRef = null;
+    partial = '';
+    nextSegment = 0;
+    toolEpoch = 0;
+    stopped = false;
+    constructor(projection) {
+        this.projection = projection;
+    }
+    get partialText() { return this.partial; }
+    update(params, nativeSessionId) {
+        const frame = acpRecord(params);
+        if (!nativeSessionId || frame['sessionId'] !== nativeSessionId)
+            throw new Error('acp_wrong_session');
+        const update = acpRecord(frame['update']), kind = update['sessionUpdate'];
+        if (typeof kind !== 'string' || !kind)
+            throw new Error('acp_invalid_update');
+        switch (kind) {
+            case 'agent_message_chunk':
+                this.message(update);
+                break;
+            case 'agent_thought_chunk':
+                this.thought(update);
+                break;
+            case 'tool_call':
+            case 'tool_call_update':
+                this.tool(update, kind);
+                break;
+            case 'user_message_chunk':
+                this.closeSegment();
+                break;
+            default: break; // Config/plan/future metadata is not an assistant answer or terminal.
+        }
+    }
+    closeSegment() { this.active = null; this.thoughtRef = null; }
+    message(update) {
+        const id = update['messageId'] === undefined || update['messageId'] === null ? null : nativeId(update['messageId']);
+        if (update['content'] === undefined || update['content'] === null)
+            throw new Error('acp_invalid_content');
+        const content = acpText(update['content']);
+        // Check the cumulative raw bound before changing either answer accumulator.
+        if (content.text !== null && this.partial.length + content.text.length > FULLTEXT_MAX_CHARS)
+            throw new Error('acp_text_limit');
+        this.stopped = false;
+        this.thoughtRef = null;
+        if (this.active && this.active.nativeId !== id)
+            this.active = null;
+        if (content.unsupported) {
+            this.active = null;
+            this.projection.text('message', 'unsupported-' + (++this.nextSegment), UNSUPPORTED_CONTENT, 'replace');
+        }
+        if (content.text === null)
+            return;
+        // A missing discriminator cannot separate consecutive anonymous same-type messages.
+        if (!this.active || this.active.nativeId !== id) {
+            this.active = { ref: 'message-' + (++this.nextSegment), nativeId: id, text: '' };
+        }
+        this.partial += content.text;
+        this.active.text += content.text;
+        this.projection.text('message', this.active.ref, content.text, 'append', 'unknown');
+    }
+    thought(update) {
+        if (update['content'] === undefined || update['content'] === null)
+            throw new Error('acp_invalid_content');
+        const content = acpText(update['content']);
+        this.stopped = false;
+        this.active = null;
+        if (!this.thoughtRef)
+            this.thoughtRef = 'thought-' + (++this.nextSegment);
+        if (content.text !== null)
+            this.projection.text('reasoning', this.thoughtRef, content.text, 'append');
+        if (content.unsupported)
+            this.projection.text('reasoning', this.thoughtRef, UNSUPPORTED_CONTENT, 'append');
+    }
+    tool(update, kind) {
+        const id = nativeId(update['toolCallId']), prior = this.tools.get(id);
+        // A retired tool's replay is metadata, not a boundary for a newer answer.
+        if (prior !== undefined && prior !== 'running')
+            return;
+        if (prior === undefined && this.tools.size >= TOOL_LIMIT)
+            throw new Error('acp_tool_limit');
+        const status = toolStatus(update['status'], prior), name = title(update['title']);
+        const content = acpText(update['content']);
+        const rawInput = update['rawInput'], rawOutput = update['rawOutput'];
+        const input = rawInput === undefined || rawInput === null ? undefined : acpSnapshot(rawInput);
+        const hasRawOutput = rawOutput !== undefined && rawOutput !== null;
+        const output = hasRawOutput ? acpSnapshot(rawOutput) : content.text ?? undefined;
+        const details = [kind === 'tool_call_update' ? name : undefined,
+            content.unsupported ? UNSUPPORTED_CONTENT : undefined, exitDetail(rawOutput)].filter(value => value !== undefined && value !== '');
+        this.closeSegment();
+        this.stopped = false;
+        this.tools.set(id, status);
+        this.projection.tool(this.toolRef(id), { status,
+            ...(name === undefined ? {} : { name }),
+            ...(input === undefined ? {} : { input, inputStructured: true }),
+            ...(output === undefined ? {} : { output, outputStructured: hasRawOutput && typeof rawOutput !== 'string' }),
+            ...(details.length ? { detail: details.join('\n') } : {}),
+        });
+    }
+    toolRef(id) { return JSON.stringify([this.toolEpoch, id]); }
+    finalText(result) {
+        if (result['stopReason'] !== 'end_turn' || !this.active)
+            return null;
+        this.projection.text('message', this.active.ref, this.active.text, 'replace', 'final');
+        return this.active.text; // Raw authoritative value, including empty, independent of recording.
+    }
+    /** Caller invokes this after the old attempt's terminal/drain fence, never on cancel dispatch. */
+    stopTools() {
+        this.closeSegment();
+        if (this.stopped)
+            return;
+        for (const [id, status] of this.tools) {
+            if (status === 'running')
+                this.projection.tool(this.toolRef(id), { status: 'stopped' });
+        }
+        this.tools.clear();
+        this.toolEpoch++;
+        this.stopped = true;
+    }
+}
+//# sourceMappingURL=projection.js.map