commonswarm 0.1.26 → 0.1.28

package/cswarm.cjs

@@ -28443,7 +28443,7 @@ function parseSignalRecord(value) {
     throw new Error("signal read returned a malformed row");
   }
   const row = value;
-  if (typeof row.from_kind !== "string" || !["user", "agent"].includes(row.from_kind) || typeof row.kind !== "string" || !SIGNAL_KINDS.has(row.kind) || typeof row.body !== "string" || row.body.length < 1 || row.body.length > 2e3 || !(row.about === null || typeof row.about === "string" && row.about.length <= 500)) {
+  if (typeof row.from_kind !== "string" || !["user", "agent"].includes(row.from_kind) || typeof row.kind !== "string" || !SIGNAL_KINDS.has(row.kind) || typeof row.body !== "string" || row.body.length < 1 || row.body.length > 8e3 || !(row.about === null || typeof row.about === "string" && row.about.length <= 500)) {
     throw new Error("signal read returned malformed signal data");
   }
   let senderOwnerRelation = "unknown";
@@ -28550,12 +28550,12 @@ function parseRetryAfterMs(header, nowMs = Date.now()) {
   if (!Number.isFinite(when)) return null;
   return Math.max(0, Math.min(when - nowMs, SIGNAL_FOLLOW_BACKOFF_MAX_MS));
 }
-function throwSignalHttp(response, body) {
+function throwSignalHttp(response, body, failure = "signal read failed") {
   const status = response.status;
   const retryAfterMs = parseRetryAfterMs(response.headers.get("retry-after"));
   const envelope = parseServerErrorEnvelope(body);
   const error = new Error(
-    describeServerError(`signal read failed (HTTP ${status})`, envelope)
+    describeServerError(`${failure} (HTTP ${status})`, envelope)
   );
   plainHttpStatus.set(error, status);
   plainHttpRetryAfterMs.set(error, retryAfterMs);
@@ -28912,7 +28912,7 @@ async function readAgentSignalDirectory(target2, token, workspaceId2, fetcherOrO
   }
   const { response, body } = result;
   if (!response.ok) {
-    throw new Error(`member read failed (HTTP ${response.status})`);
+    throwSignalHttp(response, body, "member read failed");
   }
   if (!body || typeof body !== "object" || Array.isArray(body)) {
     throw new Error("member read returned malformed JSON");
@@ -29130,6 +29130,37 @@ function postSignalTargets(recipient) {
   };
 }
 var ASK_WAIT_TIMEOUT_MESSAGE = "Ask shared. No reply arrived before the wait ended; the ask remains live. Check for a reply with: cswarm inbox";
+function askFailureDetail(error) {
+  const readHttp = followHttpDetails(error);
+  if (readHttp !== null) {
+    return {
+      detail: describeServerError(
+        `HTTP ${readHttp.status}`,
+        followErrorEnvelope(error)
+      ),
+      serverError: true
+    };
+  }
+  if (error instanceof CommandHttpError) {
+    return {
+      detail: `HTTP ${error.status}; server detail: ${error.message.replace(/^signal read failed \(HTTP \d+\)(?:: )?/, "").slice(0, 240)}`,
+      serverError: true
+    };
+  }
+  return {
+    detail: error instanceof Error ? error.message.slice(0, 300) : "unknown error",
+    serverError: false
+  };
+}
+function askCreateFailureMessage(workspaceId2, error) {
+  const failure = askFailureDetail(error);
+  const cause = failure.serverError ? `server error before it was confirmed: ${failure.detail}` : `request failure before it was confirmed: ${failure.detail}`;
+  return `Your message may not have been posted (${cause}). Check with: cswarm feed --workspace-id ${workspaceId2} \u2014 and resend if it is not there.`;
+}
+function askReplyReadFailureMessage(workspaceId2, error) {
+  const failure = askFailureDetail(error);
+  return `Your message was posted, but its reply could not be fetched (${failure.detail}). Do not resend this ask. Check with: cswarm inbox --workspace-id ${workspaceId2}`;
+}
 function renderSignals(signals, options) {
   if (signals.length === 0) {
     return [
@@ -29539,11 +29570,15 @@ var ACP_MAX_ACCUMULATED_TEXT_CHARS = 4194304;
 var ACP_DEFAULT_REQUEST_TIMEOUT_MS = 12e4;
 var ACP_VERSION_CHECK_TIMEOUT_MS = 5e3;
 var ACP_CANARY_TIMEOUT_MS = 3e4;
-var GROK_MEASURED_VERSION = "0.2.117";
-var OPENCODE_MEASURED_VERSION = "1.18.10";
-var CLAUDE_ACP_MEASURED_VERSION = "0.64.2";
+var GROK_MIN_VERSION = "0.2.117";
+var GROK_LAST_MEASURED_VERSION = "0.2.117";
+var OPENCODE_MIN_VERSION = "1.18.10";
+var OPENCODE_LAST_MEASURED_VERSION = "1.18.10";
+var CLAUDE_ACP_MIN_VERSION = "0.64.2";
+var CLAUDE_ACP_LAST_MEASURED_VERSION = "0.64.2";
 var CLAUDE_PERMISSION_MODE_ID = "default";
-var CODEX_ACP_MEASURED_VERSION = "1.1.9";
+var CODEX_ACP_MIN_VERSION = "1.1.9";
+var CODEX_ACP_LAST_MEASURED_VERSION = "1.1.9";
 var CODEX_PERMISSION_MODE_ID = "read-only";
 var ACP_PROTOCOL_VERSION = 1;
 var OPENCODE_FORCED_PERMISSION_TOOLS = [
@@ -29758,11 +29793,32 @@ var AcpTransportError = class extends AcpHostError {
   cause;
 };
 var AcpVersionError = class extends AcpHostError {
-  constructor(message) {
-    super("version_refused", message);
+  constructor(message, code = "version_refused") {
+    super(code, message);
     this.name = "AcpVersionError";
   }
 };
+var AcpVersionParseError = class extends AcpVersionError {
+  constructor(message) {
+    super(message, "version_unparseable");
+    this.name = "AcpVersionParseError";
+  }
+};
+var AcpVersionBelowFloorError = class extends AcpVersionError {
+  constructor(provider, minimum, actual) {
+    super(
+      `refusing ${provider} ${actual}; CommonSwarm requires ${minimum} or newer`,
+      "version_below_floor"
+    );
+    this.provider = provider;
+    this.minimum = minimum;
+    this.actual = actual;
+    this.name = "AcpVersionBelowFloorError";
+  }
+  provider;
+  minimum;
+  actual;
+};
 var AcpPermissionCanaryError = class extends AcpHostError {
   constructor(message) {
     super("permission_canary_failed", message);
@@ -29800,11 +29856,26 @@ var AcpTransport = class extends import_node_events.EventEmitter {
     this.writable = options.writable;
     this.handlers = options.handlers ?? {};
     this.requestTimeoutMs = options.requestTimeoutMs ?? ACP_DEFAULT_REQUEST_TIMEOUT_MS;
+    const readableEndGraceMs = Math.max(0, options.readableEndGraceMs ?? 0);
+    let readableEndTimer = null;
     options.readable.on("data", (chunk) => {
       this.onData(typeof chunk === "string" ? Buffer.from(chunk) : chunk);
     });
     options.readable.on("end", () => {
-      this.failAll(new AcpChildExitError(this.childExit?.code ?? null, this.childExit?.signal ?? null));
+      const fail = () => {
+        readableEndTimer = null;
+        this.failAll(
+          new AcpChildExitError(
+            this.childExit?.code ?? null,
+            this.childExit?.signal ?? null
+          )
+        );
+      };
+      if (readableEndGraceMs > 0 && options.onChildExit) {
+        readableEndTimer = setTimeout(fail, readableEndGraceMs);
+      } else {
+        fail();
+      }
     });
     options.readable.on("error", (err) => {
       this.failAll(asAcpHostError(err));
@@ -29813,6 +29884,10 @@ var AcpTransport = class extends import_node_events.EventEmitter {
       this.failAll(asAcpHostError(err));
     });
     options.onChildExit?.((code, signal) => {
+      if (readableEndTimer) {
+        clearTimeout(readableEndTimer);
+        readableEndTimer = null;
+      }
       this.childExit = { code, signal };
       this.failAll(new AcpChildExitError(code, signal));
     });
@@ -30633,6 +30708,7 @@ function createBoundTransport(options) {
     writable: options.writable,
     requestTimeoutMs: options.requestTimeoutMs,
     onChildExit: options.onChildExit,
+    readableEndGraceMs: options.readableEndGraceMs,
     handlers: {
       onNotification: (method, params) => {
         options.getSession()?.handleAgentNotification(method, params);
@@ -30648,6 +30724,98 @@ function createBoundTransport(options) {
   });
 }
 
+// src/host/version.ts
+var CORE_IDENTIFIER = "(?:0|[1-9]\\d*)";
+var PRERELEASE_IDENTIFIER = "(?:0|[1-9]\\d*|[A-Za-z-][0-9A-Za-z-]*)";
+var BUILD_IDENTIFIER = "[0-9A-Za-z-]+";
+var SEMVER_SOURCE = `${CORE_IDENTIFIER}\\.${CORE_IDENTIFIER}\\.${CORE_IDENTIFIER}(?:-${PRERELEASE_IDENTIFIER}(?:\\.${PRERELEASE_IDENTIFIER})*)?(?:\\+${BUILD_IDENTIFIER}(?:\\.${BUILD_IDENTIFIER})*)?`;
+var SEMVER_RE = new RegExp(`^${SEMVER_SOURCE}$`);
+function parseSemVer(value) {
+  if (!SEMVER_RE.test(value)) return null;
+  const withoutBuild = value.split("+", 1)[0];
+  const dash = withoutBuild.indexOf("-");
+  const coreText = dash === -1 ? withoutBuild : withoutBuild.slice(0, dash);
+  const prereleaseText = dash === -1 ? null : withoutBuild.slice(dash + 1);
+  const coreParts = coreText.split(".");
+  if (coreParts.length !== 3) return null;
+  return {
+    core: [BigInt(coreParts[0]), BigInt(coreParts[1]), BigInt(coreParts[2])],
+    prerelease: prereleaseText === null ? null : prereleaseText.split(".")
+  };
+}
+function compareSemVer(left, right) {
+  const a = parseSemVer(left);
+  const b2 = parseSemVer(right);
+  if (!a || !b2) {
+    throw new AcpVersionParseError(
+      `cannot compare invalid semantic versions: ${JSON.stringify(left)} and ${JSON.stringify(right)}`
+    );
+  }
+  for (let index = 0; index < 3; index += 1) {
+    if (a.core[index] < b2.core[index]) return -1;
+    if (a.core[index] > b2.core[index]) return 1;
+  }
+  if (a.prerelease === null && b2.prerelease === null) return 0;
+  if (a.prerelease === null) return 1;
+  if (b2.prerelease === null) return -1;
+  const length = Math.max(a.prerelease.length, b2.prerelease.length);
+  for (let index = 0; index < length; index += 1) {
+    const leftPart = a.prerelease[index];
+    const rightPart = b2.prerelease[index];
+    if (leftPart === void 0) return -1;
+    if (rightPart === void 0) return 1;
+    if (leftPart === rightPart) continue;
+    const leftNumeric = /^\d+$/.test(leftPart);
+    const rightNumeric = /^\d+$/.test(rightPart);
+    if (leftNumeric && rightNumeric) {
+      return BigInt(leftPart) < BigInt(rightPart) ? -1 : 1;
+    }
+    if (leftNumeric) return -1;
+    if (rightNumeric) return 1;
+    return leftPart < rightPart ? -1 : 1;
+  }
+  return 0;
+}
+function parseProviderVersionOutput(stdout, productPattern, allowBare = true) {
+  const lines = stdout.split(/\r?\n/);
+  for (const line of lines) {
+    const pattern = new RegExp(productPattern.source, productPattern.flags.replace("g", ""));
+    const product = pattern.exec(line);
+    if (!product) continue;
+    const after = line.slice(product.index + product[0].length);
+    const afterMatch = new RegExp(
+      `^\\s+(${SEMVER_SOURCE})(?=$|\\s|\\()`
+    ).exec(after);
+    if (afterMatch?.[1]) return afterMatch[1];
+    const before = line.slice(0, product.index);
+    const beforeMatch = new RegExp(`(${SEMVER_SOURCE})\\s*\\($`).exec(before);
+    if (beforeMatch?.[1]) return beforeMatch[1];
+  }
+  if (!allowBare) return null;
+  for (const line of lines) {
+    const trimmed = line.trim();
+    const match = new RegExp(`^(${SEMVER_SOURCE})$`).exec(trimmed);
+    if (match?.[1]) return match[1];
+  }
+  return null;
+}
+function assertProviderVersionFloor(options) {
+  if (compareSemVer(options.version, options.minimumVersion) < 0) {
+    throw new AcpVersionBelowFloorError(
+      options.provider,
+      options.minimumVersion,
+      options.version
+    );
+  }
+  if (compareSemVer(options.version, options.lastMeasuredVersion) > 0) {
+    options.onNewerVersion?.({
+      provider: options.provider,
+      runningVersion: options.version,
+      lastMeasuredVersion: options.lastMeasuredVersion
+    });
+  }
+}
+
 // src/host/opencode.ts
 var OPENCODE_HOME_OWNER_FILE = ".cswarm-opencode-owner.json";
 var MAX_OPENCODE_AUTH_BYTES = 256 * 1024;
@@ -30756,11 +30924,11 @@ async function releaseOpenCodeHome(home, instanceId) {
   }
 }
 function parseOpenCodeVersionOutput(stdout) {
-  const m = stdout.match(/\b(\d+\.\d+\.\d+)\b/);
-  return m?.[1] ?? null;
+  return parseProviderVersionOutput(stdout, /\bopencode\b/i);
 }
-async function assertOpenCodeMeasuredVersion(executable, options) {
-  const expected = options?.expected ?? OPENCODE_MEASURED_VERSION;
+async function assertOpenCodeVersionFloor(executable, options) {
+  const minimumVersion = options?.minimumVersion ?? OPENCODE_MIN_VERSION;
+  const lastMeasuredVersion = options?.lastMeasuredVersion ?? OPENCODE_LAST_MEASURED_VERSION;
   const timeoutMs = options?.timeoutMs ?? ACP_VERSION_CHECK_TIMEOUT_MS;
   const env = sanitizeChildEnv(options?.env ?? process.env);
   const stdout = await new Promise((resolve, reject) => {
@@ -30783,15 +30951,17 @@ async function assertOpenCodeMeasuredVersion(executable, options) {
   });
   const version3 = parseOpenCodeVersionOutput(stdout);
   if (!version3) {
-    throw new AcpVersionError(
+    throw new AcpVersionParseError(
       `could not parse opencode version from: ${stdout.trim().slice(0, 200)}`
     );
   }
-  if (version3 !== expected) {
-    throw new AcpVersionError(
-      `refusing opencode ${version3}; host core is measured for ${expected} only`
-    );
-  }
+  assertProviderVersionFloor({
+    provider: "opencode",
+    version: version3,
+    minimumVersion,
+    lastMeasuredVersion,
+    ...options?.onNewerVersion ? { onNewerVersion: options.onNewerVersion } : {}
+  });
   return version3;
 }
 function buildOpenCodeAcpArgs() {
@@ -31158,8 +31328,9 @@ async function openOpenCodeAcpSession(options) {
   };
   try {
     if (!options.skipVersionCheck) {
-      await assertOpenCodeMeasuredVersion(executable, {
-        env
+      await assertOpenCodeVersionFloor(executable, {
+        env,
+        ...options.onVersionNotice ? { onNewerVersion: options.onVersionNotice } : {}
       });
     }
     if (!options.skipConfigProbe) {
@@ -31256,6 +31427,8 @@ var import_node_fs4 = require("node:fs");
 var import_node_path6 = require("node:path");
 var CHILD_EXIT_WAIT_MS2 = 3e3;
 var CHILD_KILL_WAIT_MS2 = 1e3;
+var STDERR_EXIT_GRACE_MS = 100;
+var READABLE_END_GRACE_MS = STDERR_EXIT_GRACE_MS + 50;
 var WINDOWS_NPM_SHIM_MAX_BYTES = 64 * 1024;
 var WINDOWS_NPM_ENTRYPOINT = [
   "node_modules",
@@ -31264,6 +31437,30 @@ var WINDOWS_NPM_ENTRYPOINT = [
   "dist",
   "index.js"
 ];
+function isPackagedClaudeBridge(executable) {
+  const normalized = executable.replaceAll("\\", "/");
+  return normalized.endsWith(
+    "/node_modules/@agentclientprotocol/claude-agent-acp/dist/index.js"
+  );
+}
+function resolvePackagedClaudeBridge(pathEnv, platform = process.platform) {
+  const pathValue = pathEnv ?? process.env.PATH ?? "";
+  const names = platform === "win32" ? ["claude-agent-acp.cmd"] : ["claude-agent-acp"];
+  for (const dir of pathValue.split(import_node_path6.delimiter)) {
+    if (!dir) continue;
+    for (const name of names) {
+      try {
+        const candidate = resolvedClaudeCandidate((0, import_node_path6.join)(dir, name), platform);
+        if (isPackagedClaudeBridge(candidate)) return candidate;
+      } catch {
+      }
+    }
+  }
+  throw new AcpHostError(
+    "executable_missing",
+    "packaged claude-agent-acp executable not found; install @agentclientprotocol/claude-agent-acp@latest (minimum 0.64.2)"
+  );
+}
 function resolveWindowsNpmShim(shim) {
   let source;
   try {
@@ -31333,15 +31530,16 @@ function buildClaudeLaunch(executable, args, platform = process.platform) {
   return platform === "win32" && (0, import_node_path6.extname)(executable).toLowerCase() === ".js" ? { command: process.execPath, args: [executable, ...args] } : { command: executable, args: [...args] };
 }
 function parseClaudeVersionOutput(stdout) {
-  const match = stdout.trim().match(/^(\d+\.\d+\.\d+)$/);
-  return match?.[1] ?? null;
+  return parseProviderVersionOutput(stdout, /\bclaude-agent-acp\b/i);
 }
-async function assertClaudeMeasuredVersion(executable, options) {
-  const expected = options?.expected ?? CLAUDE_ACP_MEASURED_VERSION;
+function parseClaudeCodeVersionOutput(stdout) {
+  return parseProviderVersionOutput(stdout, /\bClaude Code\b/i, false);
+}
+async function readClaudeVersionOutput(executable, options) {
   const timeoutMs = options?.timeoutMs ?? ACP_VERSION_CHECK_TIMEOUT_MS;
   const env = options?.env ?? sanitizeChildEnv(process.env);
   const launch = buildClaudeLaunch(executable, ["--version"], options?.platform);
-  const stdout = await new Promise((resolve, reject) => {
+  return await new Promise((resolve, reject) => {
     (0, import_node_child_process4.execFile)(
       launch.command,
       launch.args,
@@ -31359,24 +31557,35 @@ async function assertClaudeMeasuredVersion(executable, options) {
       }
     );
   });
+}
+async function assertClaudeVersionFloor(executable, options) {
+  const minimumVersion = options?.minimumVersion ?? CLAUDE_ACP_MIN_VERSION;
+  const lastMeasuredVersion = options?.lastMeasuredVersion ?? CLAUDE_ACP_LAST_MEASURED_VERSION;
+  const stdout = await readClaudeVersionOutput(executable, options);
   const version3 = parseClaudeVersionOutput(stdout);
   if (!version3) {
-    throw new AcpVersionError(
+    throw new AcpVersionParseError(
       `could not parse claude-agent-acp version from: ${stdout.trim().slice(0, 200)}`
     );
   }
-  if (version3 !== expected) {
-    throw new AcpVersionError(
-      `refusing claude-agent-acp ${version3}; host core is measured for ${expected} only`
-    );
-  }
+  assertProviderVersionFloor({
+    provider: "claude-agent-acp",
+    version: version3,
+    minimumVersion,
+    lastMeasuredVersion,
+    ...options?.onNewerVersion ? { onNewerVersion: options.onNewerVersion } : {}
+  });
   return version3;
 }
 function buildClaudeAcpArgs() {
   return [];
 }
-function buildClaudeChildEnv(parent) {
-  return sanitizeChildEnv(parent);
+function buildClaudeChildEnv(parent, claudeCodeExecutable) {
+  const env = sanitizeChildEnv(parent);
+  if (claudeCodeExecutable) {
+    env.CLAUDE_CODE_EXECUTABLE = claudeCodeExecutable;
+  }
+  return env;
 }
 function waitForChildExit2(child, timeoutMs) {
   if (child.exitCode !== null || child.signalCode !== null) {
@@ -31419,13 +31628,56 @@ async function openClaudeAcpSession(options) {
     );
   }
   const pathEnv = parentEnv.PATH;
-  const executable = resolveClaudeExecutable(
-    options.executable ?? "claude-agent-acp",
-    typeof pathEnv === "string" ? pathEnv : void 0
-  );
-  const env = buildClaudeChildEnv(parentEnv);
-  if (!options.skipVersionCheck) {
-    await assertClaudeMeasuredVersion(executable, { env });
+  const resolvedPathEnv = typeof pathEnv === "string" ? pathEnv : void 0;
+  if (options.skipVersionCheck && options.executable) {
+    throw new AcpHostError(
+      "version_check_required",
+      "skipVersionCheck cannot classify an explicit Claude executable"
+    );
+  }
+  const requestedExecutable = options.executable ? resolveClaudeExecutable(options.executable, resolvedPathEnv) : null;
+  const baseEnv = buildClaudeChildEnv(parentEnv);
+  let executable;
+  let env = baseEnv;
+  let claudeCodeExecutable;
+  if (requestedExecutable) {
+    const output = await readClaudeVersionOutput(requestedExecutable, {
+      env: baseEnv
+    });
+    const bridgeVersion = parseClaudeVersionOutput(output);
+    if (bridgeVersion) {
+      assertProviderVersionFloor({
+        provider: "claude-agent-acp",
+        version: bridgeVersion,
+        minimumVersion: CLAUDE_ACP_MIN_VERSION,
+        lastMeasuredVersion: CLAUDE_ACP_LAST_MEASURED_VERSION,
+        ...options.onVersionNotice ? { onNewerVersion: options.onVersionNotice } : {}
+      });
+      executable = requestedExecutable;
+    } else if (parseClaudeCodeVersionOutput(output)) {
+      claudeCodeExecutable = requestedExecutable;
+      executable = resolvePackagedClaudeBridge(resolvedPathEnv);
+      env = buildClaudeChildEnv(parentEnv, claudeCodeExecutable);
+      await assertClaudeVersionFloor(executable, {
+        env,
+        ...options.onVersionNotice ? { onNewerVersion: options.onVersionNotice } : {}
+      });
+    } else {
+      throw new AcpVersionError(
+        `could not identify Claude executable from: ${output.trim().slice(0, 200)}`
+      );
+    }
+  } else {
+    executable = requestedExecutable ?? resolveClaudeExecutable(
+      "claude-agent-acp",
+      resolvedPathEnv
+    );
+    if (!options.skipVersionCheck) {
+      await assertClaudeVersionFloor(executable, {
+        env: baseEnv,
+        ...options.onVersionNotice ? { onNewerVersion: options.onVersionNotice } : {}
+      });
+    }
   }
   if (options.signal?.aborted) {
     throw new AcpHostError(
@@ -31474,25 +31726,33 @@ async function openClaudeAcpSession(options) {
     throw new AcpHostError("spawn_failed", "child missing stdio pipes");
   }
   const stderrTail = attachStderrTailRing(child.stderr);
-  if (options.onStderrTail) {
-    const deliverTail = options.onStderrTail;
-    let tailDelivered = false;
-    const publishTail = () => {
-      if (tailDelivered) return;
-      tailDelivered = true;
-      deliverTail(stderrTail.read());
-    };
-    child.once("exit", publishTail);
-    child.once("close", publishTail);
-  }
   let sessionRef = null;
   const transport = createBoundTransport({
     readable: child.stdout,
     writable: child.stdin,
     requestTimeoutMs: options.requestTimeoutMs ?? ACP_DEFAULT_REQUEST_TIMEOUT_MS,
+    readableEndGraceMs: READABLE_END_GRACE_MS,
     getSession: () => sessionRef,
     onChildExit: (handler) => {
-      child.on("exit", (code, signal) => handler(code, signal));
+      const observeExit = (code, signal) => {
+        let completed = false;
+        let timer2 = null;
+        const complete = () => {
+          if (completed) return;
+          completed = true;
+          if (timer2) clearTimeout(timer2);
+          child.removeListener("close", complete);
+          options.onStderrTail?.(stderrTail.read());
+          handler(code, signal);
+        };
+        child.once("close", complete);
+        timer2 = setTimeout(complete, STDERR_EXIT_GRACE_MS);
+      };
+      if (child.exitCode !== null || child.signalCode !== null) {
+        observeExit(child.exitCode, child.signalCode);
+      } else {
+        child.once("exit", observeExit);
+      }
     }
   });
   try {
@@ -31617,13 +31877,11 @@ function buildCodexLaunch(executable, args, platform = process.platform) {
   return platform === "win32" && (0, import_node_path7.extname)(executable).toLowerCase() === ".js" ? { command: process.execPath, args: [executable, ...args] } : { command: executable, args: [...args] };
 }
 function parseCodexVersionOutput(stdout) {
-  const match = stdout.trim().match(
-    /^@agentclientprotocol\/codex-acp (\d+\.\d+\.\d+)$/
-  );
-  return match?.[1] ?? null;
+  return parseProviderVersionOutput(stdout, /@agentclientprotocol\/codex-acp\b/i);
 }
-async function assertCodexMeasuredVersion(executable, options) {
-  const expected = options?.expected ?? CODEX_ACP_MEASURED_VERSION;
+async function assertCodexVersionFloor(executable, options) {
+  const minimumVersion = options?.minimumVersion ?? CODEX_ACP_MIN_VERSION;
+  const lastMeasuredVersion = options?.lastMeasuredVersion ?? CODEX_ACP_LAST_MEASURED_VERSION;
   const timeoutMs = options?.timeoutMs ?? ACP_VERSION_CHECK_TIMEOUT_MS;
   const env = options?.env ?? sanitizeChildEnv(process.env);
   const launch = buildCodexLaunch(executable, ["--version"], options?.platform);
@@ -31647,15 +31905,17 @@ async function assertCodexMeasuredVersion(executable, options) {
   });
   const version3 = parseCodexVersionOutput(stdout);
   if (!version3) {
-    throw new AcpVersionError(
+    throw new AcpVersionParseError(
       `could not parse codex-acp version from: ${stdout.trim().slice(0, 200)}`
     );
   }
-  if (version3 !== expected) {
-    throw new AcpVersionError(
-      `refusing codex-acp ${version3}; host core is measured for ${expected} only`
-    );
-  }
+  assertProviderVersionFloor({
+    provider: "codex-acp",
+    version: version3,
+    minimumVersion,
+    lastMeasuredVersion,
+    ...options?.onNewerVersion ? { onNewerVersion: options.onNewerVersion } : {}
+  });
   return version3;
 }
 function buildCodexAcpArgs() {
@@ -31711,7 +31971,10 @@ async function openCodexAcpSession(options) {
   );
   const env = buildCodexChildEnv(parentEnv);
   if (!options.skipVersionCheck) {
-    await assertCodexMeasuredVersion(executable, { env });
+    await assertCodexVersionFloor(executable, {
+      env,
+      ...options.onVersionNotice ? { onNewerVersion: options.onVersionNotice } : {}
+    });
   }
   if (options.signal?.aborted) {
     throw new AcpHostError(
@@ -32621,10 +32884,12 @@ function resolveGrokExecutable(executable = "grok") {
   return executable;
 }
 function parseGrokVersionOutput(stdout) {
-  const m = stdout.match(/\bgrok\s+(\d+\.\d+\.\d+)\b/i);
-  return m?.[1] ?? null;
+  return parseProviderVersionOutput(stdout, /\bgrok\b/i);
 }
-async function assertGrokMeasuredVersion(executable, expected = GROK_MEASURED_VERSION, timeoutMs = ACP_VERSION_CHECK_TIMEOUT_MS) {
+async function assertGrokVersionFloor(executable, options) {
+  const minimumVersion = options?.minimumVersion ?? GROK_MIN_VERSION;
+  const lastMeasuredVersion = options?.lastMeasuredVersion ?? GROK_LAST_MEASURED_VERSION;
+  const timeoutMs = options?.timeoutMs ?? ACP_VERSION_CHECK_TIMEOUT_MS;
   const stdout = await new Promise((resolve, reject) => {
     (0, import_node_child_process6.execFile)(
       executable,
@@ -32645,15 +32910,17 @@ async function assertGrokMeasuredVersion(executable, expected = GROK_MEASURED_VE
   });
   const version3 = parseGrokVersionOutput(stdout);
   if (!version3) {
-    throw new AcpVersionError(
+    throw new AcpVersionParseError(
       `could not parse grok version from: ${stdout.trim().slice(0, 200)}`
     );
   }
-  if (version3 !== expected) {
-    throw new AcpVersionError(
-      `refusing grok ${version3}; host core is measured for ${expected} only`
-    );
-  }
+  assertProviderVersionFloor({
+    provider: "grok",
+    version: version3,
+    minimumVersion,
+    lastMeasuredVersion,
+    ...options?.onNewerVersion ? { onNewerVersion: options.onNewerVersion } : {}
+  });
   return version3;
 }
 function buildGrokAcpArgs(options) {
@@ -32711,7 +32978,9 @@ async function terminateGrokChild(child) {
 async function openGrokAcpSession(options) {
   const executable = resolveGrokExecutable(options.executable ?? "grok");
   if (!options.skipVersionCheck) {
-    await assertGrokMeasuredVersion(executable);
+    await assertGrokVersionFloor(executable, {
+      ...options.onVersionNotice ? { onNewerVersion: options.onVersionNotice } : {}
+    });
   }
   const args = buildGrokAcpArgs({
     model: options.model,
@@ -32840,6 +33109,7 @@ var GrokListenerModel = class {
       ...this.options.model ? { model: this.options.model } : {},
       ...this.options.effort ? { effort: this.options.effort } : {},
       ...this.options.env ? { env: this.options.env } : {},
+      ...this.options.onVersionNotice ? { onVersionNotice: this.options.onVersionNotice } : {},
       ...this.options.onWorkerStderrTail ? { onStderrTail: this.options.onWorkerStderrTail } : {},
       clientName: "cswarm-listener"
     });
@@ -33248,6 +33518,7 @@ var OpenCodeListenerModel = class {
         ...this.options.executable ? { executable: this.options.executable } : {},
         ...this.options.model ? { model: this.options.model } : {},
         ...this.options.env ? { env: this.options.env } : {},
+        ...this.options.onVersionNotice ? { onVersionNotice: this.options.onVersionNotice } : {},
         ...this.options.allowMissingAuth === true ? { allowMissingAuth: true } : {},
         ...this.options.onWorkerStderrTail ? { onStderrTail: this.options.onWorkerStderrTail } : {},
         clientName: "cswarm-listener"
@@ -33457,6 +33728,7 @@ var ClaudeListenerModel = class {
         permissionCallback,
         ...this.options.executable ? { executable: this.options.executable } : {},
         ...this.options.env ? { env: this.options.env } : {},
+        ...this.options.onVersionNotice ? { onVersionNotice: this.options.onVersionNotice } : {},
         signal: controller.signal,
         ...this.options.onWorkerStderrTail ? { onStderrTail: this.options.onWorkerStderrTail } : {},
         clientName: "cswarm-listener"
@@ -33625,6 +33897,7 @@ var CodexListenerModel = class {
         permissionCallback,
         ...this.options.executable ? { executable: this.options.executable } : {},
         ...this.options.env ? { env: this.options.env } : {},
+        ...this.options.onVersionNotice ? { onVersionNotice: this.options.onVersionNotice } : {},
         signal: controller.signal,
         ...this.options.onWorkerStderrTail ? { onStderrTail: this.options.onWorkerStderrTail } : {},
         clientName: "cswarm-listener"
@@ -35518,6 +35791,7 @@ var import_node_net = require("node:net");
 var import_promises9 = require("node:fs/promises");
 var import_node_path15 = require("node:path");
 var UUID_RE13 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var SEMVER_RE2 = /^(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)(?:-(?:0|[1-9]\d*|[A-Za-z-][0-9A-Za-z-]*)(?:\.(?:0|[1-9]\d*|[A-Za-z-][0-9A-Za-z-]*))*)?(?:\+[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?$/;
 var MAX_STATUS_BYTES = 16 * 1024;
 var MAX_CONTROL_BYTES = 8 * 1024;
 var CONTROL_TIMEOUT_MS = 2e3;
@@ -35564,6 +35838,8 @@ var STATUS_ALLOWED_KEYS = /* @__PURE__ */ new Set([
   "stoppedAt",
   "lastSignalId",
   "lastErrorCode",
+  "providerVersion",
+  "providerLastMeasuredVersion",
   "lastWorkerStderrTail",
   "logPath",
   "deliveryMode",
@@ -35623,7 +35899,7 @@ function parseStatus(raw) {
   const nullableUuid2 = (candidate) => candidate === null || typeof candidate === "string" && UUID_RE13.test(candidate);
   const nullableCount = (candidate) => candidate === null || typeof candidate === "number" && Number.isSafeInteger(candidate) && candidate >= 0;
   const nullableTimestamp = (candidate) => candidate === null || typeof candidate === "string" && Number.isFinite(Date.parse(candidate));
-  if (row.version !== 1 || typeof row.instanceId !== "string" || !UUID_RE13.test(row.instanceId) || row.provider !== "grok" && row.provider !== "opencode" && row.provider !== "claude" && row.provider !== "codex" || typeof row.profileId !== "string" || typeof row.workspaceId !== "string" || !UUID_RE13.test(row.workspaceId) || typeof row.principalId !== "string" || !UUID_RE13.test(row.principalId) || !Number.isSafeInteger(row.pid) || row.pid < 1 || typeof row.state !== "string" || !["starting", "ready", "stopping", "stopped", "failed"].includes(row.state) || typeof row.startedAt !== "string" || !Number.isFinite(Date.parse(row.startedAt)) || !(row.readyAt === null || typeof row.readyAt === "string" && Number.isFinite(Date.parse(row.readyAt))) || typeof row.updatedAt !== "string" || !Number.isFinite(Date.parse(row.updatedAt)) || !(row.stoppedAt === null || typeof row.stoppedAt === "string" && Number.isFinite(Date.parse(row.stoppedAt))) || !nullableUuid2(row.lastSignalId) || !(row.lastErrorCode === null || typeof row.lastErrorCode === "string" && /^[a-z0-9_-]{1,96}$/.test(row.lastErrorCode)) || !(row.lastWorkerStderrTail === void 0 || row.lastWorkerStderrTail === null || typeof row.lastWorkerStderrTail === "string" && row.lastWorkerStderrTail.length > 0 && row.lastWorkerStderrTail.length <= 2048 && !/swm_(?:agt|inv|cap)_/i.test(row.lastWorkerStderrTail)) || typeof row.logPath !== "string" || !(0, import_node_path15.isAbsolute)(row.logPath) || !(row.deliveryMode === void 0 || row.deliveryMode === null || typeof row.deliveryMode === "string" && STATUS_DELIVERY_MODES.has(row.deliveryMode)) || !(row.pendingDeliveryCount === void 0 || nullableCount(row.pendingDeliveryCount)) || !(row.lastTerminalDeliveryFailureCount === void 0 || nullableCount(row.lastTerminalDeliveryFailureCount)) || !(row.lastTerminalDeliveryFailureAt === void 0 || nullableTimestamp(row.lastTerminalDeliveryFailureAt)) || !(row.lastClaimAt === void 0 || nullableTimestamp(row.lastClaimAt)) || !(row.lastAckAt === void 0 || nullableTimestamp(row.lastAckAt)) || !(row.routeMode === void 0 || row.routeMode === "worker" || row.routeMode === "main" || row.routeMode === "split") || !(row.deferOverChars === void 0 || row.deferOverChars === null || typeof row.deferOverChars === "number" && Number.isSafeInteger(row.deferOverChars) && row.deferOverChars >= 1 && row.deferOverChars <= 1e4) || !(row.pendingForMainCount === void 0 || typeof row.pendingForMainCount === "number" && Number.isSafeInteger(row.pendingForMainCount) && row.pendingForMainCount >= 0) || !(row.droppedForMainCount === void 0 || typeof row.droppedForMainCount === "number" && Number.isSafeInteger(row.droppedForMainCount) && row.droppedForMainCount >= 0)) {
+  if (row.version !== 1 || typeof row.instanceId !== "string" || !UUID_RE13.test(row.instanceId) || row.provider !== "grok" && row.provider !== "opencode" && row.provider !== "claude" && row.provider !== "codex" || typeof row.profileId !== "string" || typeof row.workspaceId !== "string" || !UUID_RE13.test(row.workspaceId) || typeof row.principalId !== "string" || !UUID_RE13.test(row.principalId) || !Number.isSafeInteger(row.pid) || row.pid < 1 || typeof row.state !== "string" || !["starting", "ready", "stopping", "stopped", "failed"].includes(row.state) || typeof row.startedAt !== "string" || !Number.isFinite(Date.parse(row.startedAt)) || !(row.readyAt === null || typeof row.readyAt === "string" && Number.isFinite(Date.parse(row.readyAt))) || typeof row.updatedAt !== "string" || !Number.isFinite(Date.parse(row.updatedAt)) || !(row.stoppedAt === null || typeof row.stoppedAt === "string" && Number.isFinite(Date.parse(row.stoppedAt))) || !nullableUuid2(row.lastSignalId) || !(row.lastErrorCode === null || typeof row.lastErrorCode === "string" && /^[a-z0-9_-]{1,96}$/.test(row.lastErrorCode)) || !(row.providerVersion === void 0 || row.providerVersion === null || typeof row.providerVersion === "string" && SEMVER_RE2.test(row.providerVersion)) || !(row.providerLastMeasuredVersion === void 0 || row.providerLastMeasuredVersion === null || typeof row.providerLastMeasuredVersion === "string" && SEMVER_RE2.test(row.providerLastMeasuredVersion)) || (row.providerVersion === null || row.providerVersion === void 0) !== (row.providerLastMeasuredVersion === null || row.providerLastMeasuredVersion === void 0) || !(row.lastWorkerStderrTail === void 0 || row.lastWorkerStderrTail === null || typeof row.lastWorkerStderrTail === "string" && row.lastWorkerStderrTail.length > 0 && row.lastWorkerStderrTail.length <= 2048 && !/swm_(?:agt|inv|cap)_/i.test(row.lastWorkerStderrTail)) || typeof row.logPath !== "string" || !(0, import_node_path15.isAbsolute)(row.logPath) || !(row.deliveryMode === void 0 || row.deliveryMode === null || typeof row.deliveryMode === "string" && STATUS_DELIVERY_MODES.has(row.deliveryMode)) || !(row.pendingDeliveryCount === void 0 || nullableCount(row.pendingDeliveryCount)) || !(row.lastTerminalDeliveryFailureCount === void 0 || nullableCount(row.lastTerminalDeliveryFailureCount)) || !(row.lastTerminalDeliveryFailureAt === void 0 || nullableTimestamp(row.lastTerminalDeliveryFailureAt)) || !(row.lastClaimAt === void 0 || nullableTimestamp(row.lastClaimAt)) || !(row.lastAckAt === void 0 || nullableTimestamp(row.lastAckAt)) || !(row.routeMode === void 0 || row.routeMode === "worker" || row.routeMode === "main" || row.routeMode === "split") || !(row.deferOverChars === void 0 || row.deferOverChars === null || typeof row.deferOverChars === "number" && Number.isSafeInteger(row.deferOverChars) && row.deferOverChars >= 1 && row.deferOverChars <= 1e4) || !(row.pendingForMainCount === void 0 || typeof row.pendingForMainCount === "number" && Number.isSafeInteger(row.pendingForMainCount) && row.pendingForMainCount >= 0) || !(row.droppedForMainCount === void 0 || typeof row.droppedForMainCount === "number" && Number.isSafeInteger(row.droppedForMainCount) && row.droppedForMainCount >= 0)) {
     throw new Error("stored listener status is malformed");
   }
   const routeMode = row.routeMode ?? "worker";
@@ -35640,6 +35916,8 @@ function parseStatus(raw) {
     lastClaimAt: row.lastClaimAt ?? null,
     lastAckAt: row.lastAckAt ?? null,
     lastWorkerStderrTail: row.lastWorkerStderrTail ?? null,
+    providerVersion: row.providerVersion ?? null,
+    providerLastMeasuredVersion: row.providerLastMeasuredVersion ?? null,
     routeMode,
     deferOverChars,
     pendingForMainCount: row.pendingForMainCount ?? 0,
@@ -36051,6 +36329,8 @@ async function runListenerSupervisor(options) {
     stoppedAt: null,
     lastSignalId: null,
     lastErrorCode: null,
+    providerVersion: null,
+    providerLastMeasuredVersion: null,
     lastWorkerStderrTail: null,
     deliveryMode: null,
     pendingDeliveryCount: null,
@@ -36120,10 +36400,13 @@ async function runListenerSupervisor(options) {
   };
   const onEvent = (event) => {
     if (event.type === "ready") {
+      const versionNotice = options.getProviderVersionNotice?.() ?? null;
       transition("ready", {
         readyAt: event.ts,
         lastErrorCode: null,
-        lastWorkerStderrTail: null
+        lastWorkerStderrTail: null,
+        providerVersion: versionNotice?.runningVersion ?? null,
+        providerLastMeasuredVersion: versionNotice?.lastMeasuredVersion ?? null
       });
       log({ ts: event.ts, event: "listener_ready" });
       return;
@@ -36321,7 +36604,9 @@ async function runListenerSupervisor(options) {
       transition("starting", {
         readyAt: null,
         lastErrorCode: restartCode,
-        lastWorkerStderrTail: restartStderrTail
+        lastWorkerStderrTail: restartStderrTail,
+        providerVersion: null,
+        providerLastMeasuredVersion: null
       });
       await restartSleep(delayMs, controller.signal);
       if (controller.signal.aborted) {
@@ -37850,8 +38135,8 @@ var ACCEPTED_AGENT_CREDENTIAL_MESSAGES = [
   AGENT_CREDENTIAL_MESSAGE_D088
 ];
 function packageVersion() {
-  if ("0.1.26".length > 0) {
-    return "0.1.26";
+  if ("0.1.28".length > 0) {
+    return "0.1.28";
   }
   try {
     const value = JSON.parse(
@@ -37967,8 +38252,8 @@ Usage:
   cswarm status [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--json]
   cswarm members [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--agent-token-stdin] [--json]
   cswarm working-on "<what>" [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--about <ref>] [--until <dur>] [--json]
-  cswarm note "<text>" [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--to <member|agent>] [--about <ref>] [--until <dur>] [--json]
-  cswarm ask "<text>" [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--to <member|agent>] [--about <ref>] [--until <dur>] [--wait <seconds>] [--json]
+  cswarm note "<text>" [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--to <member|agent>] [--about <ref>] [--until <dur>] [--json]  # text: 1..8000 characters
+  cswarm ask "<text>" [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--to <member|agent>] [--about <ref>] [--until <dur>] [--wait <seconds>] [--json]  # text: 1..8000 characters
   cswarm reply <signal-id> "<text>" [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--until <dur>] [--json]
   cswarm feed [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--about <ref>] [--kind <kind>] [--since <timestamp>] [--limit <n>] [--include-stale] [--json]
   cswarm inbox [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--kind <kind>] [--about <ref>] [--since <timestamp>] [--limit <n>] [--include-stale] [--wait <seconds>] [--json]
@@ -38034,7 +38319,7 @@ Signals (intention sharing) accept the same credential selection. Agent mode
 never opens a browser or infers a human's saved workspace. Durations use a whole
 number plus m, h, or d (for example 90m, 24h, or 7d) and are capped at 30d.
 Place -- before signal text that itself begins with -- to stop option parsing.
-Signal text is at most 2000 characters and --about at most 500; a longer body is
+Signal text is at most 8000 characters and --about at most 500; a longer body is
 refused locally before any network call, so compose within the limit.
 
 listen start --turn-budget bounds ONE worker prompt turn (default 10m): how long
@@ -39518,13 +39803,18 @@ function resolveTurnBudgetOrDefer(configuredBudgetMs, credentialExpiresAt, nowMs
   }
   return clampTurnBudgetToCredential(configuredBudgetMs, credentialExpiresAt, nowMs);
 }
-var SIGNAL_BODY_MAX = 2e3;
+var SIGNAL_BODY_MAX = 8e3;
 var SIGNAL_ABOUT_MAX = 500;
 function signalText(value, label) {
   const maximum = label === "body" ? SIGNAL_BODY_MAX : SIGNAL_ABOUT_MAX;
   if (value.length < (label === "body" ? 1 : 0) || value.length > maximum) {
+    if (label === "body") {
+      throw new Error(
+        `signal text is ${value.length} characters; the maximum is ${maximum}`
+      );
+    }
     throw new Error(
-      `${label === "body" ? "signal text" : "--about"} must be ${label === "body" ? "1.." : "at most "}${maximum} characters`
+      `--about must be at most ${maximum} characters`
     );
   }
   return value;
@@ -39666,10 +39956,25 @@ async function runPostSignal(args, kind) {
     validateHumanWorkspace: true
   });
   const toSelector = allowTo ? args.optional("to") : void 0;
-  const recipient = toSelector === void 0 ? null : resolveSignalRecipient(
-    toSelector,
-    await signalDirectory(cloud, credential.selectedWorkspace, credential)
-  );
+  let recipient = null;
+  if (toSelector !== void 0) {
+    let directory;
+    try {
+      directory = await signalDirectory(
+        cloud,
+        credential.selectedWorkspace,
+        credential
+      );
+    } catch (error) {
+      if (kind === "ask") {
+        throw new Error(
+          askCreateFailureMessage(credential.selectedWorkspace, error)
+        );
+      }
+      throw error;
+    }
+    recipient = resolveSignalRecipient(toSelector, directory);
+  }
   if (waitSeconds !== void 0 && recipient === null) {
     throw new Error(
       "ask --wait requires --to with a direct member or agent recipient"
@@ -39684,21 +39989,38 @@ async function runPostSignal(args, kind) {
     about: args.optional("about") === void 0 ? null : signalText(args.required("about"), "about"),
     ...untilMs2 === void 0 ? {} : { until_ms: untilMs2 }
   };
-  const result = await postSignalCommand(cloud, credential, command2);
+  let result;
+  try {
+    result = await postSignalCommand(cloud, credential, command2);
+  } catch (error) {
+    if (kind === "ask") {
+      throw new Error(
+        askCreateFailureMessage(credential.selectedWorkspace, error)
+      );
+    }
+    throw error;
+  }
   const signal = result.response.signal;
   if (waitSeconds !== void 0) {
     const credentialForRead = signalCredentialOf(credential);
     const deadlineMs = waitDeadlineMs(waitSeconds);
-    const waitResult = await pollForSignals({
-      deadlineMs,
-      read: () => readSignals(cloud, credentialForRead, {
-        workspaceId: credential.selectedWorkspace,
-        inbox: true,
-        in_reply_to: signal.id,
-        includeStale: false,
-        limit: 1
-      }, { deadlineMs })
-    });
+    let waitResult;
+    try {
+      waitResult = await pollForSignals({
+        deadlineMs,
+        read: () => readSignals(cloud, credentialForRead, {
+          workspaceId: credential.selectedWorkspace,
+          inbox: true,
+          in_reply_to: signal.id,
+          includeStale: false,
+          limit: 1
+        }, { deadlineMs })
+      });
+    } catch (error) {
+      throw new Error(
+        askReplyReadFailureMessage(credential.selectedWorkspace, error)
+      );
+    }
     const reply = waitResult.signals[0] ?? null;
     if (args.has("json")) {
       printJson(askWaitJsonPayload(signal, reply, waitResult.timedOut));
@@ -40153,7 +40475,7 @@ function listenerModelLabel(provider) {
 }
 function listenerProvider(args) {
   const provider = args.optional("provider");
-  const hints = "supported providers: grok \u2014 install Grok CLI 0.2.117 and run grok login; opencode \u2014 install OpenCode 1.18.10 and authenticate it; claude \u2014 npm install -g @agentclientprotocol/claude-agent-acp@0.64.2; codex \u2014 npm install -g @agentclientprotocol/codex-acp@1.1.9. You can use working-on, note, ask, and feed now; detached live receipt needs one of these adapters";
+  const hints = "supported providers: grok \u2014 install Grok CLI 0.2.117 or newer and run grok login; opencode \u2014 install OpenCode 1.18.10 or newer and authenticate it; claude \u2014 npm install -g @agentclientprotocol/claude-agent-acp@latest (minimum 0.64.2); codex \u2014 npm install -g @agentclientprotocol/codex-acp@latest (minimum 1.1.9). You can use working-on, note, ask, and feed now; detached live receipt needs one of these adapters";
   if (provider === void 0) {
     throw new Error(`--provider is required; ${hints}`);
   }
@@ -40214,7 +40536,7 @@ function listenerHostLimits(provider) {
     };
   }
   if (provider === "claude") {
-    const host_configuration2 = "The Claude worker uses the operator-selected cwd and the normal Claude Code home through claude-agent-acp 0.64.2. Keychain/OAuth auth was measured; ANTHROPIC_API_KEY is stripped by the listener environment sanitizer.";
+    const host_configuration2 = "The Claude worker uses the operator-selected cwd and the normal Claude Code home through claude-agent-acp 0.64.2 or newer. Keychain/OAuth auth was measured; ANTHROPIC_API_KEY is stripped by the listener environment sanitizer.";
     const deny_canary_scope2 = "The deny canary proves host reject + correlated terminal deny only.";
     const steady_allow_unproven2 = "The deny canary does not prove steady-state --permissions allow behavior.";
     const cross_owner_context2 = "All sender relations reach that same worker and local context; each prompt carries sender and operator provenance.";
@@ -40238,7 +40560,7 @@ function listenerHostLimits(provider) {
     };
   }
   if (provider === "codex") {
-    const host_configuration2 = "The Codex worker uses the operator-selected cwd and normal ChatGPT/Codex auth through codex-acp 1.1.9. CommonSwarm explicitly selects read-only mode after every session/new; API-key variables are stripped by the listener environment sanitizer.";
+    const host_configuration2 = "The Codex worker uses the operator-selected cwd and normal ChatGPT/Codex auth through codex-acp 1.1.9 or newer. CommonSwarm explicitly selects read-only mode after every session/new; API-key variables are stripped by the listener environment sanitizer.";
     const deny_canary_scope2 = "The deny canary proves host reject + correlated terminal deny only.";
     const steady_allow_unproven2 = "The deny canary does not prove steady-state --permissions allow behavior.";
     const cross_owner_context2 = "All sender relations reach that same worker and local context; each prompt carries sender and operator provenance.";
@@ -40327,6 +40649,11 @@ function renderListenerStatus(status) {
       lines.push(`  ${line}`);
     }
   }
+  if (status.providerVersion && status.providerLastMeasuredVersion) {
+    lines.push(
+      `Provider version ${status.providerVersion} is newer than the last measured version ${status.providerLastMeasuredVersion}. It is unverified but allowed because the startup permission canary passed. Next: verify this provider release with CommonSwarm and update the last-measured version.`
+    );
+  }
   if (status.deliveryMode === "durable_claim") {
     lines.push("Delivery mode: durable claim and acknowledgement.");
   } else if (status.deliveryMode === "cursor_fallback") {
@@ -40369,29 +40696,35 @@ function renderListenerStatus(status) {
   return lines.join("\n");
 }
 function listenerFailureMessage(code, provider) {
-  if (code === "version_refused") {
+  if (code === "version_below_floor") {
     if (provider === "codex") {
-      return "the Codex listener requires codex-acp 1.1.9; run npm install -g @agentclientprotocol/codex-acp@1.1.9, then retry";
+      return "the Codex listener requires codex-acp 1.1.9 or newer; update the bridge, then retry";
     }
     if (provider === "claude") {
-      return "the Claude listener requires claude-agent-acp 0.64.2; run npm install -g @agentclientprotocol/claude-agent-acp@0.64.2, then retry";
+      return "the Claude listener requires claude-agent-acp 0.64.2 or newer; update the bridge, then retry";
     }
     if (provider === "opencode") {
-      return "the OpenCode listener requires OpenCode 1.18.10; install that pinned build, then retry";
+      return "the OpenCode listener requires OpenCode 1.18.10 or newer; update OpenCode, then retry";
     }
-    return "the Grok listener requires Grok 0.2.117; install that pinned build and run grok login, then retry";
+    return "the Grok listener requires Grok 0.2.117 or newer; update Grok, confirm grok login, then retry";
+  }
+  if (code === "version_unparseable") {
+    return `the ${provider ?? "provider"} version output was not valid semantic version data, so startup stopped. Next: run the provider's --version command, then update or reinstall it`;
+  }
+  if (code === "version_refused") {
+    return `the ${provider ?? "provider"} version check could not run, so startup stopped. Next: run the provider's --version command and fix that error, then retry`;
   }
   if (code === "executable_missing" && provider === "claude") {
-    return "claude-agent-acp is not installed; run npm install -g @agentclientprotocol/claude-agent-acp@0.64.2, then retry";
+    return "claude-agent-acp is not installed; run npm install -g @agentclientprotocol/claude-agent-acp@latest (minimum 0.64.2), then retry";
   }
   if (code === "executable_missing" && provider === "codex") {
-    return "codex-acp is not installed; run npm install -g @agentclientprotocol/codex-acp@1.1.9, then retry";
+    return "codex-acp is not installed; run npm install -g @agentclientprotocol/codex-acp@latest (minimum 1.1.9), then retry";
   }
   if (code === "permission_mode_unavailable" && provider === "claude") {
-    return "the Claude bridge does not expose the required manual permission mode; reinstall claude-agent-acp 0.64.2, then retry";
+    return "the Claude bridge does not expose the required manual permission mode; update or reinstall claude-agent-acp, then retry";
   }
   if (code === "permission_mode_unavailable" && provider === "codex") {
-    return "the Codex bridge does not expose the required read-only permission mode; reinstall codex-acp 1.1.9, then retry";
+    return "the Codex bridge does not expose the required read-only permission mode; update or reinstall codex-acp, then retry";
   }
   if (provider === "claude" && (code === "rpc_error" || code === "child_exit" || code === "timeout")) {
     return `the Claude bridge could not start (${code}); confirm Claude Code keychain/OAuth sign-in and network access, then retry. ANTHROPIC_API_KEY is not forwarded to detached listeners`;
@@ -40443,7 +40776,7 @@ function resolveDetachedClaudeExecutable(executable = "claude-agent-acp", pathEn
       if ((0, import_node_path19.isAbsolute)(executable) || executable.includes("/") || executable.includes("\\")) {
         const detail = error instanceof Error ? error.message : code;
         throw new Error(
-          `could not use --claude-executable: ${detail}; reinstall the measured bridge with npm install -g @agentclientprotocol/claude-agent-acp@0.64.2 if this path should be replaced`
+          `could not use --claude-executable: ${detail}; install the current bridge with npm install -g @agentclientprotocol/claude-agent-acp@latest if this path should be replaced`
         );
       }
       throw new Error(listenerFailureMessage(code, "claude"));
@@ -40460,7 +40793,7 @@ function resolveDetachedCodexExecutable(executable = "codex-acp", pathEnv = proc
       if ((0, import_node_path19.isAbsolute)(executable) || executable.includes("/") || executable.includes("\\")) {
         const detail = error instanceof Error ? error.message : code;
         throw new Error(
-          `could not use --codex-executable: ${detail}; reinstall the measured bridge with npm install -g @agentclientprotocol/codex-acp@1.1.9 if this path should be replaced`
+          `could not use --codex-executable: ${detail}; install the current bridge with npm install -g @agentclientprotocol/codex-acp@latest if this path should be replaced`
         );
       }
       throw new Error(listenerFailureMessage(code, "codex"));
@@ -40564,6 +40897,10 @@ async function runConfiguredListener(options) {
   };
   let lastWorkerStderrTail = null;
   let workerStderrGeneration = 0;
+  let providerVersionNotice = null;
+  const onVersionNotice = (notice) => {
+    providerVersionNotice = notice;
+  };
   const newWorkerStderrTailSink = () => {
     const generation = ++workerStderrGeneration;
     lastWorkerStderrTail = null;
@@ -40572,34 +40909,41 @@ async function runConfiguredListener(options) {
       lastWorkerStderrTail = tail.length > 0 ? tail : null;
     };
   };
-  const newModel = () => options.provider === "opencode" ? new OpenCodeListenerModel({
-    cwd: options.cwd,
-    permissionMode: options.permissionMode,
-    promptTimeoutMs: resolveTurnBudgetMs,
-    onWorkerStderrTail: newWorkerStderrTailSink(),
-    ...options.model ? { model: options.model } : {},
-    ...options.opencodeExecutable ? { executable: options.opencodeExecutable } : options.executable ? { executable: options.executable } : {}
-  }) : options.provider === "claude" ? new ClaudeListenerModel({
-    cwd: options.cwd,
-    permissionMode: options.permissionMode,
-    promptTimeoutMs: resolveTurnBudgetMs,
-    onWorkerStderrTail: newWorkerStderrTailSink(),
-    ...options.claudeExecutable ? { executable: options.claudeExecutable } : options.executable ? { executable: options.executable } : {}
-  }) : options.provider === "codex" ? new CodexListenerModel({
-    cwd: options.cwd,
-    permissionMode: options.permissionMode,
-    promptTimeoutMs: resolveTurnBudgetMs,
-    onWorkerStderrTail: newWorkerStderrTailSink(),
-    ...options.codexExecutable ? { executable: options.codexExecutable } : options.executable ? { executable: options.executable } : {}
-  }) : new GrokListenerModel({
-    cwd: options.cwd,
-    permissionMode: options.permissionMode,
-    promptTimeoutMs: resolveTurnBudgetMs,
-    onWorkerStderrTail: newWorkerStderrTailSink(),
-    ...options.model ? { model: options.model } : {},
-    ...options.effort ? { effort: options.effort } : {},
-    ...options.executable ? { executable: options.executable } : {}
-  });
+  const newModel = () => {
+    providerVersionNotice = null;
+    return options.provider === "opencode" ? new OpenCodeListenerModel({
+      cwd: options.cwd,
+      permissionMode: options.permissionMode,
+      promptTimeoutMs: resolveTurnBudgetMs,
+      onWorkerStderrTail: newWorkerStderrTailSink(),
+      onVersionNotice,
+      ...options.model ? { model: options.model } : {},
+      ...options.opencodeExecutable ? { executable: options.opencodeExecutable } : options.executable ? { executable: options.executable } : {}
+    }) : options.provider === "claude" ? new ClaudeListenerModel({
+      cwd: options.cwd,
+      permissionMode: options.permissionMode,
+      promptTimeoutMs: resolveTurnBudgetMs,
+      onWorkerStderrTail: newWorkerStderrTailSink(),
+      onVersionNotice,
+      ...options.claudeExecutable ? { executable: options.claudeExecutable } : options.executable ? { executable: options.executable } : {}
+    }) : options.provider === "codex" ? new CodexListenerModel({
+      cwd: options.cwd,
+      permissionMode: options.permissionMode,
+      promptTimeoutMs: resolveTurnBudgetMs,
+      onWorkerStderrTail: newWorkerStderrTailSink(),
+      onVersionNotice,
+      ...options.codexExecutable ? { executable: options.codexExecutable } : options.executable ? { executable: options.executable } : {}
+    }) : new GrokListenerModel({
+      cwd: options.cwd,
+      permissionMode: options.permissionMode,
+      promptTimeoutMs: resolveTurnBudgetMs,
+      onWorkerStderrTail: newWorkerStderrTailSink(),
+      onVersionNotice,
+      ...options.model ? { model: options.model } : {},
+      ...options.effort ? { effort: options.effort } : {},
+      ...options.executable ? { executable: options.executable } : {}
+    });
+  };
   const onProcessSignal = () => {
     void stopListener(paths);
   };
@@ -40623,6 +40967,7 @@ async function runConfiguredListener(options) {
       // The bound a timeout event reports: the last turn's clamped budget when
       // one has run, else the configured cap.
       getTurnBudgetMs: () => lastAppliedTurnBudgetMs ?? turnBudgetMs,
+      getProviderVersionNotice: () => providerVersionNotice,
       takeWorkerStderrTail: () => {
         const tail = lastWorkerStderrTail;
         lastWorkerStderrTail = null;
@@ -40841,8 +41186,8 @@ async function runListenStart(args) {
 ` : "";
   const workerAudience = routing.routeMode === "main" ? "Directed asks do not reach that worker." : routing.routeMode === "split" ? "Only asks at or below the split threshold reach that worker, with sender and operator provenance in the prompt." : "Every sender reaches that worker with sender and operator provenance in the prompt.";
   const hostNote = provider === "opencode" ? `The OpenCode worker uses one private auth/config home and your selected project cwd. ${workerAudience} Tool requests are approved one at a time by default, when the worker asks and the host offers a one-time approval; --permissions deny refuses them. The deny canary does not cover steady-state allow.
-` : provider === "claude" ? `The Claude worker uses your selected cwd and normal Claude Code keychain/OAuth state through claude-agent-acp 0.64.2. ${workerAudience}
-` : provider === "codex" ? `The Codex worker uses your selected cwd and normal ChatGPT/Codex auth through codex-acp 1.1.9. CommonSwarm selects read-only mode before its deny canary. ${workerAudience}
+` : provider === "claude" ? `The Claude worker uses your selected cwd and normal Claude Code keychain/OAuth state through claude-agent-acp 0.64.2 or newer. ${workerAudience}
+` : provider === "codex" ? `The Codex worker uses your selected cwd and normal ChatGPT/Codex auth through codex-acp 1.1.9 or newer. CommonSwarm selects read-only mode before its deny canary. ${workerAudience}
 ` : `The Grok worker uses your selected cwd and local Grok configuration, including user and cmux hooks. ${workerAudience}
 `;
   process.stdout.write(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "commonswarm",
-  "version": "0.1.26",
+  "version": "0.1.28",
   "description": "CommonSwarm CLI — coordination for teams where people and AI agents work side by side.",
   "bin": {
     "cswarm": "cswarm.cjs"