commonswarm 0.1.27 → 0.1.29

package/cswarm.cjs

@@ -28337,6 +28337,8 @@ function describeServerError(prefix, envelope) {
 // src/cloud/signals.ts
 var UUID_RE7 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 var SIGNAL_KINDS = /* @__PURE__ */ new Set(["working-on", "note", "ask"]);
+var SIGNAL_BODY_DISPLAY_MAX = 8e3;
+var SIGNAL_ABOUT_DISPLAY_MAX = 500;
 var SIGNAL_READ_TIMEOUT_MS = 3e4;
 var SignalReadTimeoutError = class extends Error {
   constructor(message = "signal read timed out") {
@@ -28443,7 +28445,7 @@ function parseSignalRecord(value) {
     throw new Error("signal read returned a malformed row");
   }
   const row = value;
-  if (typeof row.from_kind !== "string" || !["user", "agent"].includes(row.from_kind) || typeof row.kind !== "string" || !SIGNAL_KINDS.has(row.kind) || typeof row.body !== "string" || row.body.length < 1 || row.body.length > 2e3 || !(row.about === null || typeof row.about === "string" && row.about.length <= 500)) {
+  if (typeof row.from_kind !== "string" || !["user", "agent"].includes(row.from_kind) || typeof row.kind !== "string" || !SIGNAL_KINDS.has(row.kind) || typeof row.body !== "string" || row.body.length < 1 || !(row.about === null || typeof row.about === "string")) {
     throw new Error("signal read returned malformed signal data");
   }
   let senderOwnerRelation = "unknown";
@@ -29175,13 +29177,27 @@ function renderSignals(signals, options) {
     const authorName = signal.from_kind === "agent" ? options.authors?.agents.get(signal.from) : options.authors?.users.get(signal.from);
     const author = authorName === void 0 ? `${authorKind} ${signal.from}` : `${authorKind} ${authorName} (${signal.from})${signal.from_kind === "user" && options.authors?.currentUserId === signal.from ? " \u2014 you" : ""}`;
     const expired = Date.parse(signal.until) <= now ? " (expired)" : "";
-    const about = signal.about === null ? "" : ` about ${JSON.stringify(signal.about)}`;
+    const aboutClipped = signal.about !== null && signal.about.length > SIGNAL_ABOUT_DISPLAY_MAX;
+    const displayedAbout = aboutClipped ? signal.about.slice(0, SIGNAL_ABOUT_DISPLAY_MAX) : signal.about;
+    const about = displayedAbout === null ? "" : ` about ${JSON.stringify(displayedAbout)}`;
     const replyTo = (signal.in_reply_to ?? null) === null ? "" : ` \u2014 in reply to ${signal.in_reply_to}`;
     const replyable = signal.kind === "ask";
     const idHint = replyable ? ` \u2014 reply with: cswarm reply ${signal.id}` : "";
+    const bodyClipped = signal.body.length > SIGNAL_BODY_DISPLAY_MAX;
+    const displayedBody = bodyClipped ? signal.body.slice(0, SIGNAL_BODY_DISPLAY_MAX) : signal.body;
     lines.push(
-      `- [${signal.kind}] ${author} \u2014 ${relativeAge(signal.created_at, now)} \u2014 ${relativeExpiry(signal.until, now)}${expired}${about}${replyTo}: ${JSON.stringify(signal.body)}${idHint}`
+      `- [${signal.kind}] ${author} \u2014 ${relativeAge(signal.created_at, now)} \u2014 ${relativeExpiry(signal.until, now)}${expired}${about}${replyTo}: ${JSON.stringify(displayedBody)}${idHint}`
     );
+    if (bodyClipped) {
+      lines.push(
+        `  WARNING: Body clipped for display. Showing ${SIGNAL_BODY_DISPLAY_MAX} of ${signal.body.length} characters. Use --json to read the full body.`
+      );
+    }
+    if (aboutClipped) {
+      lines.push(
+        `  WARNING: About reference clipped for display. Showing ${SIGNAL_ABOUT_DISPLAY_MAX} of ${signal.about.length} characters. Use --json to read the full reference.`
+      );
+    }
   }
   return lines.join("\n");
 }
@@ -29570,11 +29586,15 @@ var ACP_MAX_ACCUMULATED_TEXT_CHARS = 4194304;
 var ACP_DEFAULT_REQUEST_TIMEOUT_MS = 12e4;
 var ACP_VERSION_CHECK_TIMEOUT_MS = 5e3;
 var ACP_CANARY_TIMEOUT_MS = 3e4;
-var GROK_MEASURED_VERSION = "0.2.117";
-var OPENCODE_MEASURED_VERSION = "1.18.10";
-var CLAUDE_ACP_MEASURED_VERSION = "0.64.2";
+var GROK_MIN_VERSION = "0.2.117";
+var GROK_LAST_MEASURED_VERSION = "0.2.117";
+var OPENCODE_MIN_VERSION = "1.18.10";
+var OPENCODE_LAST_MEASURED_VERSION = "1.18.10";
+var CLAUDE_ACP_MIN_VERSION = "0.64.2";
+var CLAUDE_ACP_LAST_MEASURED_VERSION = "0.64.2";
 var CLAUDE_PERMISSION_MODE_ID = "default";
-var CODEX_ACP_MEASURED_VERSION = "1.1.9";
+var CODEX_ACP_MIN_VERSION = "1.1.9";
+var CODEX_ACP_LAST_MEASURED_VERSION = "1.1.9";
 var CODEX_PERMISSION_MODE_ID = "read-only";
 var ACP_PROTOCOL_VERSION = 1;
 var OPENCODE_FORCED_PERMISSION_TOOLS = [
@@ -29789,21 +29809,30 @@ var AcpTransportError = class extends AcpHostError {
   cause;
 };
 var AcpVersionError = class extends AcpHostError {
-  constructor(message) {
-    super("version_refused", message);
+  constructor(message, code = "version_refused") {
+    super(code, message);
     this.name = "AcpVersionError";
   }
 };
-var AcpVersionMismatchError = class extends AcpVersionError {
-  constructor(expected, actual) {
+var AcpVersionParseError = class extends AcpVersionError {
+  constructor(message) {
+    super(message, "version_unparseable");
+    this.name = "AcpVersionParseError";
+  }
+};
+var AcpVersionBelowFloorError = class extends AcpVersionError {
+  constructor(provider, minimum, actual) {
     super(
-      `refusing claude-agent-acp ${actual}; host core is measured for ${expected} only`
+      `refusing ${provider} ${actual}; CommonSwarm requires ${minimum} or newer`,
+      "version_below_floor"
     );
-    this.expected = expected;
+    this.provider = provider;
+    this.minimum = minimum;
     this.actual = actual;
-    this.name = "AcpVersionMismatchError";
+    this.name = "AcpVersionBelowFloorError";
   }
-  expected;
+  provider;
+  minimum;
   actual;
 };
 var AcpPermissionCanaryError = class extends AcpHostError {
@@ -30711,6 +30740,98 @@ function createBoundTransport(options) {
   });
 }
 
+// src/host/version.ts
+var CORE_IDENTIFIER = "(?:0|[1-9]\\d*)";
+var PRERELEASE_IDENTIFIER = "(?:0|[1-9]\\d*|[A-Za-z-][0-9A-Za-z-]*)";
+var BUILD_IDENTIFIER = "[0-9A-Za-z-]+";
+var SEMVER_SOURCE = `${CORE_IDENTIFIER}\\.${CORE_IDENTIFIER}\\.${CORE_IDENTIFIER}(?:-${PRERELEASE_IDENTIFIER}(?:\\.${PRERELEASE_IDENTIFIER})*)?(?:\\+${BUILD_IDENTIFIER}(?:\\.${BUILD_IDENTIFIER})*)?`;
+var SEMVER_RE = new RegExp(`^${SEMVER_SOURCE}$`);
+function parseSemVer(value) {
+  if (!SEMVER_RE.test(value)) return null;
+  const withoutBuild = value.split("+", 1)[0];
+  const dash = withoutBuild.indexOf("-");
+  const coreText = dash === -1 ? withoutBuild : withoutBuild.slice(0, dash);
+  const prereleaseText = dash === -1 ? null : withoutBuild.slice(dash + 1);
+  const coreParts = coreText.split(".");
+  if (coreParts.length !== 3) return null;
+  return {
+    core: [BigInt(coreParts[0]), BigInt(coreParts[1]), BigInt(coreParts[2])],
+    prerelease: prereleaseText === null ? null : prereleaseText.split(".")
+  };
+}
+function compareSemVer(left, right) {
+  const a = parseSemVer(left);
+  const b2 = parseSemVer(right);
+  if (!a || !b2) {
+    throw new AcpVersionParseError(
+      `cannot compare invalid semantic versions: ${JSON.stringify(left)} and ${JSON.stringify(right)}`
+    );
+  }
+  for (let index = 0; index < 3; index += 1) {
+    if (a.core[index] < b2.core[index]) return -1;
+    if (a.core[index] > b2.core[index]) return 1;
+  }
+  if (a.prerelease === null && b2.prerelease === null) return 0;
+  if (a.prerelease === null) return 1;
+  if (b2.prerelease === null) return -1;
+  const length = Math.max(a.prerelease.length, b2.prerelease.length);
+  for (let index = 0; index < length; index += 1) {
+    const leftPart = a.prerelease[index];
+    const rightPart = b2.prerelease[index];
+    if (leftPart === void 0) return -1;
+    if (rightPart === void 0) return 1;
+    if (leftPart === rightPart) continue;
+    const leftNumeric = /^\d+$/.test(leftPart);
+    const rightNumeric = /^\d+$/.test(rightPart);
+    if (leftNumeric && rightNumeric) {
+      return BigInt(leftPart) < BigInt(rightPart) ? -1 : 1;
+    }
+    if (leftNumeric) return -1;
+    if (rightNumeric) return 1;
+    return leftPart < rightPart ? -1 : 1;
+  }
+  return 0;
+}
+function parseProviderVersionOutput(stdout, productPattern, allowBare = true) {
+  const lines = stdout.split(/\r?\n/);
+  for (const line of lines) {
+    const pattern = new RegExp(productPattern.source, productPattern.flags.replace("g", ""));
+    const product = pattern.exec(line);
+    if (!product) continue;
+    const after = line.slice(product.index + product[0].length);
+    const afterMatch = new RegExp(
+      `^\\s+(${SEMVER_SOURCE})(?=$|\\s|\\()`
+    ).exec(after);
+    if (afterMatch?.[1]) return afterMatch[1];
+    const before = line.slice(0, product.index);
+    const beforeMatch = new RegExp(`(${SEMVER_SOURCE})\\s*\\($`).exec(before);
+    if (beforeMatch?.[1]) return beforeMatch[1];
+  }
+  if (!allowBare) return null;
+  for (const line of lines) {
+    const trimmed = line.trim();
+    const match = new RegExp(`^(${SEMVER_SOURCE})$`).exec(trimmed);
+    if (match?.[1]) return match[1];
+  }
+  return null;
+}
+function assertProviderVersionFloor(options) {
+  if (compareSemVer(options.version, options.minimumVersion) < 0) {
+    throw new AcpVersionBelowFloorError(
+      options.provider,
+      options.minimumVersion,
+      options.version
+    );
+  }
+  if (compareSemVer(options.version, options.lastMeasuredVersion) > 0) {
+    options.onNewerVersion?.({
+      provider: options.provider,
+      runningVersion: options.version,
+      lastMeasuredVersion: options.lastMeasuredVersion
+    });
+  }
+}
+
 // src/host/opencode.ts
 var OPENCODE_HOME_OWNER_FILE = ".cswarm-opencode-owner.json";
 var MAX_OPENCODE_AUTH_BYTES = 256 * 1024;
@@ -30819,11 +30940,11 @@ async function releaseOpenCodeHome(home, instanceId) {
   }
 }
 function parseOpenCodeVersionOutput(stdout) {
-  const m = stdout.match(/\b(\d+\.\d+\.\d+)\b/);
-  return m?.[1] ?? null;
+  return parseProviderVersionOutput(stdout, /\bopencode\b/i);
 }
-async function assertOpenCodeMeasuredVersion(executable, options) {
-  const expected = options?.expected ?? OPENCODE_MEASURED_VERSION;
+async function assertOpenCodeVersionFloor(executable, options) {
+  const minimumVersion = options?.minimumVersion ?? OPENCODE_MIN_VERSION;
+  const lastMeasuredVersion = options?.lastMeasuredVersion ?? OPENCODE_LAST_MEASURED_VERSION;
   const timeoutMs = options?.timeoutMs ?? ACP_VERSION_CHECK_TIMEOUT_MS;
   const env = sanitizeChildEnv(options?.env ?? process.env);
   const stdout = await new Promise((resolve, reject) => {
@@ -30846,15 +30967,17 @@ async function assertOpenCodeMeasuredVersion(executable, options) {
   });
   const version3 = parseOpenCodeVersionOutput(stdout);
   if (!version3) {
-    throw new AcpVersionError(
+    throw new AcpVersionParseError(
       `could not parse opencode version from: ${stdout.trim().slice(0, 200)}`
     );
   }
-  if (version3 !== expected) {
-    throw new AcpVersionError(
-      `refusing opencode ${version3}; host core is measured for ${expected} only`
-    );
-  }
+  assertProviderVersionFloor({
+    provider: "opencode",
+    version: version3,
+    minimumVersion,
+    lastMeasuredVersion,
+    ...options?.onNewerVersion ? { onNewerVersion: options.onNewerVersion } : {}
+  });
   return version3;
 }
 function buildOpenCodeAcpArgs() {
@@ -31221,8 +31344,9 @@ async function openOpenCodeAcpSession(options) {
   };
   try {
     if (!options.skipVersionCheck) {
-      await assertOpenCodeMeasuredVersion(executable, {
-        env
+      await assertOpenCodeVersionFloor(executable, {
+        env,
+        ...options.onVersionNotice ? { onNewerVersion: options.onVersionNotice } : {}
       });
     }
     if (!options.skipConfigProbe) {
@@ -31350,7 +31474,7 @@ function resolvePackagedClaudeBridge(pathEnv, platform = process.platform) {
   }
   throw new AcpHostError(
     "executable_missing",
-    "packaged claude-agent-acp executable not found; install @agentclientprotocol/claude-agent-acp@0.64.2"
+    "packaged claude-agent-acp executable not found; install @agentclientprotocol/claude-agent-acp@latest (minimum 0.64.2)"
   );
 }
 function resolveWindowsNpmShim(shim) {
@@ -31422,14 +31546,10 @@ function buildClaudeLaunch(executable, args, platform = process.platform) {
   return platform === "win32" && (0, import_node_path6.extname)(executable).toLowerCase() === ".js" ? { command: process.execPath, args: [executable, ...args] } : { command: executable, args: [...args] };
 }
 function parseClaudeVersionOutput(stdout) {
-  const match = stdout.trim().match(/^(\d+\.\d+\.\d+)$/);
-  return match?.[1] ?? null;
+  return parseProviderVersionOutput(stdout, /\bclaude-agent-acp\b/i);
 }
 function parseClaudeCodeVersionOutput(stdout) {
-  const match = stdout.match(
-    /^(\d+\.\d+\.\d+(?:-[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?(?:\+[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?) \(Claude Code\)\s*$/m
-  );
-  return match?.[1] ?? null;
+  return parseProviderVersionOutput(stdout, /\bClaude Code\b/i, false);
 }
 async function readClaudeVersionOutput(executable, options) {
   const timeoutMs = options?.timeoutMs ?? ACP_VERSION_CHECK_TIMEOUT_MS;
@@ -31454,18 +31574,23 @@ async function readClaudeVersionOutput(executable, options) {
     );
   });
 }
-async function assertClaudeMeasuredVersion(executable, options) {
-  const expected = options?.expected ?? CLAUDE_ACP_MEASURED_VERSION;
+async function assertClaudeVersionFloor(executable, options) {
+  const minimumVersion = options?.minimumVersion ?? CLAUDE_ACP_MIN_VERSION;
+  const lastMeasuredVersion = options?.lastMeasuredVersion ?? CLAUDE_ACP_LAST_MEASURED_VERSION;
   const stdout = await readClaudeVersionOutput(executable, options);
   const version3 = parseClaudeVersionOutput(stdout);
   if (!version3) {
-    throw new AcpVersionError(
+    throw new AcpVersionParseError(
       `could not parse claude-agent-acp version from: ${stdout.trim().slice(0, 200)}`
     );
   }
-  if (version3 !== expected) {
-    throw new AcpVersionMismatchError(expected, version3);
-  }
+  assertProviderVersionFloor({
+    provider: "claude-agent-acp",
+    version: version3,
+    minimumVersion,
+    lastMeasuredVersion,
+    ...options?.onNewerVersion ? { onNewerVersion: options.onNewerVersion } : {}
+  });
   return version3;
 }
 function buildClaudeAcpArgs() {
@@ -31537,18 +31662,22 @@ async function openClaudeAcpSession(options) {
     });
     const bridgeVersion = parseClaudeVersionOutput(output);
     if (bridgeVersion) {
-      if (bridgeVersion !== CLAUDE_ACP_MEASURED_VERSION) {
-        throw new AcpVersionMismatchError(
-          CLAUDE_ACP_MEASURED_VERSION,
-          bridgeVersion
-        );
-      }
+      assertProviderVersionFloor({
+        provider: "claude-agent-acp",
+        version: bridgeVersion,
+        minimumVersion: CLAUDE_ACP_MIN_VERSION,
+        lastMeasuredVersion: CLAUDE_ACP_LAST_MEASURED_VERSION,
+        ...options.onVersionNotice ? { onNewerVersion: options.onVersionNotice } : {}
+      });
       executable = requestedExecutable;
     } else if (parseClaudeCodeVersionOutput(output)) {
       claudeCodeExecutable = requestedExecutable;
       executable = resolvePackagedClaudeBridge(resolvedPathEnv);
       env = buildClaudeChildEnv(parentEnv, claudeCodeExecutable);
-      await assertClaudeMeasuredVersion(executable, { env });
+      await assertClaudeVersionFloor(executable, {
+        env,
+        ...options.onVersionNotice ? { onNewerVersion: options.onVersionNotice } : {}
+      });
     } else {
       throw new AcpVersionError(
         `could not identify Claude executable from: ${output.trim().slice(0, 200)}`
@@ -31560,7 +31689,10 @@ async function openClaudeAcpSession(options) {
       resolvedPathEnv
     );
     if (!options.skipVersionCheck) {
-      await assertClaudeMeasuredVersion(executable, { env: baseEnv });
+      await assertClaudeVersionFloor(executable, {
+        env: baseEnv,
+        ...options.onVersionNotice ? { onNewerVersion: options.onVersionNotice } : {}
+      });
     }
   }
   if (options.signal?.aborted) {
@@ -31761,13 +31893,11 @@ function buildCodexLaunch(executable, args, platform = process.platform) {
   return platform === "win32" && (0, import_node_path7.extname)(executable).toLowerCase() === ".js" ? { command: process.execPath, args: [executable, ...args] } : { command: executable, args: [...args] };
 }
 function parseCodexVersionOutput(stdout) {
-  const match = stdout.trim().match(
-    /^@agentclientprotocol\/codex-acp (\d+\.\d+\.\d+)$/
-  );
-  return match?.[1] ?? null;
+  return parseProviderVersionOutput(stdout, /@agentclientprotocol\/codex-acp\b/i);
 }
-async function assertCodexMeasuredVersion(executable, options) {
-  const expected = options?.expected ?? CODEX_ACP_MEASURED_VERSION;
+async function assertCodexVersionFloor(executable, options) {
+  const minimumVersion = options?.minimumVersion ?? CODEX_ACP_MIN_VERSION;
+  const lastMeasuredVersion = options?.lastMeasuredVersion ?? CODEX_ACP_LAST_MEASURED_VERSION;
   const timeoutMs = options?.timeoutMs ?? ACP_VERSION_CHECK_TIMEOUT_MS;
   const env = options?.env ?? sanitizeChildEnv(process.env);
   const launch = buildCodexLaunch(executable, ["--version"], options?.platform);
@@ -31791,15 +31921,17 @@ async function assertCodexMeasuredVersion(executable, options) {
   });
   const version3 = parseCodexVersionOutput(stdout);
   if (!version3) {
-    throw new AcpVersionError(
+    throw new AcpVersionParseError(
       `could not parse codex-acp version from: ${stdout.trim().slice(0, 200)}`
     );
   }
-  if (version3 !== expected) {
-    throw new AcpVersionError(
-      `refusing codex-acp ${version3}; host core is measured for ${expected} only`
-    );
-  }
+  assertProviderVersionFloor({
+    provider: "codex-acp",
+    version: version3,
+    minimumVersion,
+    lastMeasuredVersion,
+    ...options?.onNewerVersion ? { onNewerVersion: options.onNewerVersion } : {}
+  });
   return version3;
 }
 function buildCodexAcpArgs() {
@@ -31855,7 +31987,10 @@ async function openCodexAcpSession(options) {
   );
   const env = buildCodexChildEnv(parentEnv);
   if (!options.skipVersionCheck) {
-    await assertCodexMeasuredVersion(executable, { env });
+    await assertCodexVersionFloor(executable, {
+      env,
+      ...options.onVersionNotice ? { onNewerVersion: options.onVersionNotice } : {}
+    });
   }
   if (options.signal?.aborted) {
     throw new AcpHostError(
@@ -32452,7 +32587,7 @@ var import_node_path8 = require("node:path");
 var import_node_util = require("node:util");
 var UUID_RE9 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 var COMMAND_ID_RE2 = /^[A-Za-z0-9_-]{8,72}$/;
-var MAX_EFFECT_BYTES = 32 * 1024;
+var MAX_EFFECT_BYTES = 1024 * 1024;
 var STATES = /* @__PURE__ */ new Set([
   "received",
   "prompting",
@@ -32534,7 +32669,7 @@ function parseListenerEffectRecord(raw, expectedId) {
   return parseV2Record(row);
 }
 function upcastV1Ask(row) {
-  if (row.effectOrdinal !== 0 || typeof row.commandId !== "string" || !COMMAND_ID_RE2.test(row.commandId) || typeof row.askBody !== "string" || row.askBody.length < 1 || row.askBody.length > 2e3 || typeof row.askUntil !== "string" || !Number.isFinite(Date.parse(row.askUntil)) || typeof row.senderOwnerRelation !== "string" || !RELATIONS.has(row.senderOwnerRelation) || typeof row.state !== "string" || !STATES.has(row.state) || !integer(row.promptAttempts) || !integer(row.postAttempts) || !nullableString(row.replyBody, 2e3) || typeof row.replyTruncated !== "boolean" || !nullableString(row.replySignalId, 64) || !nullableString(row.failureCode, 96) || typeof row.updatedAt !== "string" || !Number.isFinite(Date.parse(row.updatedAt))) {
+  if (row.effectOrdinal !== 0 || typeof row.commandId !== "string" || !COMMAND_ID_RE2.test(row.commandId) || typeof row.askBody !== "string" || row.askBody.length < 1 || typeof row.askUntil !== "string" || !Number.isFinite(Date.parse(row.askUntil)) || typeof row.senderOwnerRelation !== "string" || !RELATIONS.has(row.senderOwnerRelation) || typeof row.state !== "string" || !STATES.has(row.state) || !integer(row.promptAttempts) || !integer(row.postAttempts) || !nullableString(row.replyBody, 2e3) || typeof row.replyTruncated !== "boolean" || !nullableString(row.replySignalId, 64) || !nullableString(row.failureCode, 96) || typeof row.updatedAt !== "string" || !Number.isFinite(Date.parse(row.updatedAt))) {
     throw new Error("stored listener effect is malformed");
   }
   if (row.replySignalId !== null && !UUID_RE9.test(row.replySignalId)) {
@@ -32561,7 +32696,7 @@ function upcastV1Ask(row) {
 }
 function parseV2Record(row) {
   const signalKind2 = row.signalKind;
-  if (typeof signalKind2 !== "string" || !SIGNAL_KINDS2.has(signalKind2) || row.effectOrdinal !== 0 || typeof row.askBody !== "string" || row.askBody.length < 1 || row.askBody.length > 2e3 || typeof row.askUntil !== "string" || !Number.isFinite(Date.parse(row.askUntil)) || typeof row.senderOwnerRelation !== "string" || !RELATIONS.has(row.senderOwnerRelation) || typeof row.state !== "string" || !STATES.has(row.state) || !integer(row.promptAttempts) || !integer(row.postAttempts) || !nullableString(row.replyBody, 2e3) || typeof row.replyTruncated !== "boolean" || !nullableString(row.replySignalId, 64) || !nullableString(row.failureCode, 96) || typeof row.updatedAt !== "string" || !Number.isFinite(Date.parse(row.updatedAt))) {
+  if (typeof signalKind2 !== "string" || !SIGNAL_KINDS2.has(signalKind2) || row.effectOrdinal !== 0 || typeof row.askBody !== "string" || row.askBody.length < 1 || typeof row.askUntil !== "string" || !Number.isFinite(Date.parse(row.askUntil)) || typeof row.senderOwnerRelation !== "string" || !RELATIONS.has(row.senderOwnerRelation) || typeof row.state !== "string" || !STATES.has(row.state) || !integer(row.promptAttempts) || !integer(row.postAttempts) || !nullableString(row.replyBody, 2e3) || typeof row.replyTruncated !== "boolean" || !nullableString(row.replySignalId, 64) || !nullableString(row.failureCode, 96) || typeof row.updatedAt !== "string" || !Number.isFinite(Date.parse(row.updatedAt))) {
     throw new Error("stored listener effect is malformed");
   }
   if (signalKind2 === "note") {
@@ -32603,7 +32738,7 @@ function newObservedNoteRecord(input) {
   if (!UUID_RE9.test(input.signalId)) {
     throw new Error("listener note signal id must be a UUID");
   }
-  if (input.body.length < 1 || input.body.length > 2e3) {
+  if (input.body.length < 1) {
     throw new Error("listener note body is invalid");
   }
   if (!Number.isFinite(Date.parse(input.until))) {
@@ -32765,10 +32900,12 @@ function resolveGrokExecutable(executable = "grok") {
   return executable;
 }
 function parseGrokVersionOutput(stdout) {
-  const m = stdout.match(/\bgrok\s+(\d+\.\d+\.\d+)\b/i);
-  return m?.[1] ?? null;
+  return parseProviderVersionOutput(stdout, /\bgrok\b/i);
 }
-async function assertGrokMeasuredVersion(executable, expected = GROK_MEASURED_VERSION, timeoutMs = ACP_VERSION_CHECK_TIMEOUT_MS) {
+async function assertGrokVersionFloor(executable, options) {
+  const minimumVersion = options?.minimumVersion ?? GROK_MIN_VERSION;
+  const lastMeasuredVersion = options?.lastMeasuredVersion ?? GROK_LAST_MEASURED_VERSION;
+  const timeoutMs = options?.timeoutMs ?? ACP_VERSION_CHECK_TIMEOUT_MS;
   const stdout = await new Promise((resolve, reject) => {
     (0, import_node_child_process6.execFile)(
       executable,
@@ -32789,15 +32926,17 @@ async function assertGrokMeasuredVersion(executable, expected = GROK_MEASURED_VE
   });
   const version3 = parseGrokVersionOutput(stdout);
   if (!version3) {
-    throw new AcpVersionError(
+    throw new AcpVersionParseError(
       `could not parse grok version from: ${stdout.trim().slice(0, 200)}`
     );
   }
-  if (version3 !== expected) {
-    throw new AcpVersionError(
-      `refusing grok ${version3}; host core is measured for ${expected} only`
-    );
-  }
+  assertProviderVersionFloor({
+    provider: "grok",
+    version: version3,
+    minimumVersion,
+    lastMeasuredVersion,
+    ...options?.onNewerVersion ? { onNewerVersion: options.onNewerVersion } : {}
+  });
   return version3;
 }
 function buildGrokAcpArgs(options) {
@@ -32855,7 +32994,9 @@ async function terminateGrokChild(child) {
 async function openGrokAcpSession(options) {
   const executable = resolveGrokExecutable(options.executable ?? "grok");
   if (!options.skipVersionCheck) {
-    await assertGrokMeasuredVersion(executable);
+    await assertGrokVersionFloor(executable, {
+      ...options.onVersionNotice ? { onNewerVersion: options.onVersionNotice } : {}
+    });
   }
   const args = buildGrokAcpArgs({
     model: options.model,
@@ -32984,6 +33125,7 @@ var GrokListenerModel = class {
       ...this.options.model ? { model: this.options.model } : {},
       ...this.options.effort ? { effort: this.options.effort } : {},
       ...this.options.env ? { env: this.options.env } : {},
+      ...this.options.onVersionNotice ? { onVersionNotice: this.options.onVersionNotice } : {},
       ...this.options.onWorkerStderrTail ? { onStderrTail: this.options.onWorkerStderrTail } : {},
       clientName: "cswarm-listener"
     });
@@ -33392,6 +33534,7 @@ var OpenCodeListenerModel = class {
         ...this.options.executable ? { executable: this.options.executable } : {},
         ...this.options.model ? { model: this.options.model } : {},
         ...this.options.env ? { env: this.options.env } : {},
+        ...this.options.onVersionNotice ? { onVersionNotice: this.options.onVersionNotice } : {},
         ...this.options.allowMissingAuth === true ? { allowMissingAuth: true } : {},
         ...this.options.onWorkerStderrTail ? { onStderrTail: this.options.onWorkerStderrTail } : {},
         clientName: "cswarm-listener"
@@ -33601,6 +33744,7 @@ var ClaudeListenerModel = class {
         permissionCallback,
         ...this.options.executable ? { executable: this.options.executable } : {},
         ...this.options.env ? { env: this.options.env } : {},
+        ...this.options.onVersionNotice ? { onVersionNotice: this.options.onVersionNotice } : {},
         signal: controller.signal,
         ...this.options.onWorkerStderrTail ? { onStderrTail: this.options.onWorkerStderrTail } : {},
         clientName: "cswarm-listener"
@@ -33769,6 +33913,7 @@ var CodexListenerModel = class {
         permissionCallback,
         ...this.options.executable ? { executable: this.options.executable } : {},
         ...this.options.env ? { env: this.options.env } : {},
+        ...this.options.onVersionNotice ? { onVersionNotice: this.options.onVersionNotice } : {},
         signal: controller.signal,
         ...this.options.onWorkerStderrTail ? { onStderrTail: this.options.onWorkerStderrTail } : {},
         clientName: "cswarm-listener"
@@ -34427,7 +34572,7 @@ function parseEntry(value) {
   if (Object.keys(row).some((key2) => !allowed.has(key2))) {
     throw new Error("stored pending-for-main entry is malformed");
   }
-  if (typeof row.signalId !== "string" || !UUID_RE11.test(row.signalId) || typeof row.workspaceId !== "string" || !UUID_RE11.test(row.workspaceId) || typeof row.principalId !== "string" || !UUID_RE11.test(row.principalId) || typeof row.fromId !== "string" || !UUID_RE11.test(row.fromId) || row.fromKind !== "user" && row.fromKind !== "agent" || !(row.kind === void 0 || row.kind === "ask" || row.kind === "note") || !(row.senderName === null || typeof row.senderName === "string" && row.senderName.length <= 200) || typeof row.body !== "string" || row.body.length < 1 || row.body.length > 2e3 || !checkedTimestamp2(row.createdAt) || !checkedTimestamp2(row.queuedAt)) {
+  if (typeof row.signalId !== "string" || !UUID_RE11.test(row.signalId) || typeof row.workspaceId !== "string" || !UUID_RE11.test(row.workspaceId) || typeof row.principalId !== "string" || !UUID_RE11.test(row.principalId) || typeof row.fromId !== "string" || !UUID_RE11.test(row.fromId) || row.fromKind !== "user" && row.fromKind !== "agent" || !(row.kind === void 0 || row.kind === "ask" || row.kind === "note") || !(row.senderName === null || typeof row.senderName === "string" && row.senderName.length <= 200) || typeof row.body !== "string" || row.body.length < 1 || !checkedTimestamp2(row.createdAt) || !checkedTimestamp2(row.queuedAt)) {
     throw new Error("stored pending-for-main entry is malformed");
   }
   return {
@@ -35662,6 +35807,7 @@ var import_node_net = require("node:net");
 var import_promises9 = require("node:fs/promises");
 var import_node_path15 = require("node:path");
 var UUID_RE13 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var SEMVER_RE2 = /^(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)(?:-(?:0|[1-9]\d*|[A-Za-z-][0-9A-Za-z-]*)(?:\.(?:0|[1-9]\d*|[A-Za-z-][0-9A-Za-z-]*))*)?(?:\+[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?$/;
 var MAX_STATUS_BYTES = 16 * 1024;
 var MAX_CONTROL_BYTES = 8 * 1024;
 var CONTROL_TIMEOUT_MS = 2e3;
@@ -35708,6 +35854,8 @@ var STATUS_ALLOWED_KEYS = /* @__PURE__ */ new Set([
   "stoppedAt",
   "lastSignalId",
   "lastErrorCode",
+  "providerVersion",
+  "providerLastMeasuredVersion",
   "lastWorkerStderrTail",
   "logPath",
   "deliveryMode",
@@ -35767,7 +35915,7 @@ function parseStatus(raw) {
   const nullableUuid2 = (candidate) => candidate === null || typeof candidate === "string" && UUID_RE13.test(candidate);
   const nullableCount = (candidate) => candidate === null || typeof candidate === "number" && Number.isSafeInteger(candidate) && candidate >= 0;
   const nullableTimestamp = (candidate) => candidate === null || typeof candidate === "string" && Number.isFinite(Date.parse(candidate));
-  if (row.version !== 1 || typeof row.instanceId !== "string" || !UUID_RE13.test(row.instanceId) || row.provider !== "grok" && row.provider !== "opencode" && row.provider !== "claude" && row.provider !== "codex" || typeof row.profileId !== "string" || typeof row.workspaceId !== "string" || !UUID_RE13.test(row.workspaceId) || typeof row.principalId !== "string" || !UUID_RE13.test(row.principalId) || !Number.isSafeInteger(row.pid) || row.pid < 1 || typeof row.state !== "string" || !["starting", "ready", "stopping", "stopped", "failed"].includes(row.state) || typeof row.startedAt !== "string" || !Number.isFinite(Date.parse(row.startedAt)) || !(row.readyAt === null || typeof row.readyAt === "string" && Number.isFinite(Date.parse(row.readyAt))) || typeof row.updatedAt !== "string" || !Number.isFinite(Date.parse(row.updatedAt)) || !(row.stoppedAt === null || typeof row.stoppedAt === "string" && Number.isFinite(Date.parse(row.stoppedAt))) || !nullableUuid2(row.lastSignalId) || !(row.lastErrorCode === null || typeof row.lastErrorCode === "string" && /^[a-z0-9_-]{1,96}$/.test(row.lastErrorCode)) || !(row.lastWorkerStderrTail === void 0 || row.lastWorkerStderrTail === null || typeof row.lastWorkerStderrTail === "string" && row.lastWorkerStderrTail.length > 0 && row.lastWorkerStderrTail.length <= 2048 && !/swm_(?:agt|inv|cap)_/i.test(row.lastWorkerStderrTail)) || typeof row.logPath !== "string" || !(0, import_node_path15.isAbsolute)(row.logPath) || !(row.deliveryMode === void 0 || row.deliveryMode === null || typeof row.deliveryMode === "string" && STATUS_DELIVERY_MODES.has(row.deliveryMode)) || !(row.pendingDeliveryCount === void 0 || nullableCount(row.pendingDeliveryCount)) || !(row.lastTerminalDeliveryFailureCount === void 0 || nullableCount(row.lastTerminalDeliveryFailureCount)) || !(row.lastTerminalDeliveryFailureAt === void 0 || nullableTimestamp(row.lastTerminalDeliveryFailureAt)) || !(row.lastClaimAt === void 0 || nullableTimestamp(row.lastClaimAt)) || !(row.lastAckAt === void 0 || nullableTimestamp(row.lastAckAt)) || !(row.routeMode === void 0 || row.routeMode === "worker" || row.routeMode === "main" || row.routeMode === "split") || !(row.deferOverChars === void 0 || row.deferOverChars === null || typeof row.deferOverChars === "number" && Number.isSafeInteger(row.deferOverChars) && row.deferOverChars >= 1 && row.deferOverChars <= 1e4) || !(row.pendingForMainCount === void 0 || typeof row.pendingForMainCount === "number" && Number.isSafeInteger(row.pendingForMainCount) && row.pendingForMainCount >= 0) || !(row.droppedForMainCount === void 0 || typeof row.droppedForMainCount === "number" && Number.isSafeInteger(row.droppedForMainCount) && row.droppedForMainCount >= 0)) {
+  if (row.version !== 1 || typeof row.instanceId !== "string" || !UUID_RE13.test(row.instanceId) || row.provider !== "grok" && row.provider !== "opencode" && row.provider !== "claude" && row.provider !== "codex" || typeof row.profileId !== "string" || typeof row.workspaceId !== "string" || !UUID_RE13.test(row.workspaceId) || typeof row.principalId !== "string" || !UUID_RE13.test(row.principalId) || !Number.isSafeInteger(row.pid) || row.pid < 1 || typeof row.state !== "string" || !["starting", "ready", "stopping", "stopped", "failed"].includes(row.state) || typeof row.startedAt !== "string" || !Number.isFinite(Date.parse(row.startedAt)) || !(row.readyAt === null || typeof row.readyAt === "string" && Number.isFinite(Date.parse(row.readyAt))) || typeof row.updatedAt !== "string" || !Number.isFinite(Date.parse(row.updatedAt)) || !(row.stoppedAt === null || typeof row.stoppedAt === "string" && Number.isFinite(Date.parse(row.stoppedAt))) || !nullableUuid2(row.lastSignalId) || !(row.lastErrorCode === null || typeof row.lastErrorCode === "string" && /^[a-z0-9_-]{1,96}$/.test(row.lastErrorCode)) || !(row.providerVersion === void 0 || row.providerVersion === null || typeof row.providerVersion === "string" && SEMVER_RE2.test(row.providerVersion)) || !(row.providerLastMeasuredVersion === void 0 || row.providerLastMeasuredVersion === null || typeof row.providerLastMeasuredVersion === "string" && SEMVER_RE2.test(row.providerLastMeasuredVersion)) || (row.providerVersion === null || row.providerVersion === void 0) !== (row.providerLastMeasuredVersion === null || row.providerLastMeasuredVersion === void 0) || !(row.lastWorkerStderrTail === void 0 || row.lastWorkerStderrTail === null || typeof row.lastWorkerStderrTail === "string" && row.lastWorkerStderrTail.length > 0 && row.lastWorkerStderrTail.length <= 2048 && !/swm_(?:agt|inv|cap)_/i.test(row.lastWorkerStderrTail)) || typeof row.logPath !== "string" || !(0, import_node_path15.isAbsolute)(row.logPath) || !(row.deliveryMode === void 0 || row.deliveryMode === null || typeof row.deliveryMode === "string" && STATUS_DELIVERY_MODES.has(row.deliveryMode)) || !(row.pendingDeliveryCount === void 0 || nullableCount(row.pendingDeliveryCount)) || !(row.lastTerminalDeliveryFailureCount === void 0 || nullableCount(row.lastTerminalDeliveryFailureCount)) || !(row.lastTerminalDeliveryFailureAt === void 0 || nullableTimestamp(row.lastTerminalDeliveryFailureAt)) || !(row.lastClaimAt === void 0 || nullableTimestamp(row.lastClaimAt)) || !(row.lastAckAt === void 0 || nullableTimestamp(row.lastAckAt)) || !(row.routeMode === void 0 || row.routeMode === "worker" || row.routeMode === "main" || row.routeMode === "split") || !(row.deferOverChars === void 0 || row.deferOverChars === null || typeof row.deferOverChars === "number" && Number.isSafeInteger(row.deferOverChars) && row.deferOverChars >= 1 && row.deferOverChars <= 1e4) || !(row.pendingForMainCount === void 0 || typeof row.pendingForMainCount === "number" && Number.isSafeInteger(row.pendingForMainCount) && row.pendingForMainCount >= 0) || !(row.droppedForMainCount === void 0 || typeof row.droppedForMainCount === "number" && Number.isSafeInteger(row.droppedForMainCount) && row.droppedForMainCount >= 0)) {
     throw new Error("stored listener status is malformed");
   }
   const routeMode = row.routeMode ?? "worker";
@@ -35784,6 +35932,8 @@ function parseStatus(raw) {
     lastClaimAt: row.lastClaimAt ?? null,
     lastAckAt: row.lastAckAt ?? null,
     lastWorkerStderrTail: row.lastWorkerStderrTail ?? null,
+    providerVersion: row.providerVersion ?? null,
+    providerLastMeasuredVersion: row.providerLastMeasuredVersion ?? null,
     routeMode,
     deferOverChars,
     pendingForMainCount: row.pendingForMainCount ?? 0,
@@ -36195,6 +36345,8 @@ async function runListenerSupervisor(options) {
     stoppedAt: null,
     lastSignalId: null,
     lastErrorCode: null,
+    providerVersion: null,
+    providerLastMeasuredVersion: null,
     lastWorkerStderrTail: null,
     deliveryMode: null,
     pendingDeliveryCount: null,
@@ -36264,10 +36416,13 @@ async function runListenerSupervisor(options) {
   };
   const onEvent = (event) => {
     if (event.type === "ready") {
+      const versionNotice = options.getProviderVersionNotice?.() ?? null;
       transition("ready", {
         readyAt: event.ts,
         lastErrorCode: null,
-        lastWorkerStderrTail: null
+        lastWorkerStderrTail: null,
+        providerVersion: versionNotice?.runningVersion ?? null,
+        providerLastMeasuredVersion: versionNotice?.lastMeasuredVersion ?? null
       });
       log({ ts: event.ts, event: "listener_ready" });
       return;
@@ -36465,7 +36620,9 @@ async function runListenerSupervisor(options) {
       transition("starting", {
         readyAt: null,
         lastErrorCode: restartCode,
-        lastWorkerStderrTail: restartStderrTail
+        lastWorkerStderrTail: restartStderrTail,
+        providerVersion: null,
+        providerLastMeasuredVersion: null
       });
       await restartSleep(delayMs, controller.signal);
       if (controller.signal.aborted) {
@@ -37994,8 +38151,8 @@ var ACCEPTED_AGENT_CREDENTIAL_MESSAGES = [
   AGENT_CREDENTIAL_MESSAGE_D088
 ];
 function packageVersion() {
-  if ("0.1.27".length > 0) {
-    return "0.1.27";
+  if ("0.1.29".length > 0) {
+    return "0.1.29";
   }
   try {
     const value = JSON.parse(
@@ -38111,8 +38268,8 @@ Usage:
   cswarm status [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--json]
   cswarm members [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--agent-token-stdin] [--json]
   cswarm working-on "<what>" [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--about <ref>] [--until <dur>] [--json]
-  cswarm note "<text>" [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--to <member|agent>] [--about <ref>] [--until <dur>] [--json]
-  cswarm ask "<text>" [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--to <member|agent>] [--about <ref>] [--until <dur>] [--wait <seconds>] [--json]
+  cswarm note "<text>" [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--to <member|agent>] [--about <ref>] [--until <dur>] [--json]  # text: 1..8000 characters
+  cswarm ask "<text>" [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--to <member|agent>] [--about <ref>] [--until <dur>] [--wait <seconds>] [--json]  # text: 1..8000 characters
   cswarm reply <signal-id> "<text>" [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--until <dur>] [--json]
   cswarm feed [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--about <ref>] [--kind <kind>] [--since <timestamp>] [--limit <n>] [--include-stale] [--json]
   cswarm inbox [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--kind <kind>] [--about <ref>] [--since <timestamp>] [--limit <n>] [--include-stale] [--wait <seconds>] [--json]
@@ -38178,7 +38335,7 @@ Signals (intention sharing) accept the same credential selection. Agent mode
 never opens a browser or infers a human's saved workspace. Durations use a whole
 number plus m, h, or d (for example 90m, 24h, or 7d) and are capped at 30d.
 Place -- before signal text that itself begins with -- to stop option parsing.
-Signal text is at most 2000 characters and --about at most 500; a longer body is
+Signal text is at most 8000 characters and --about at most 500; a longer body is
 refused locally before any network call, so compose within the limit.
 
 listen start --turn-budget bounds ONE worker prompt turn (default 10m): how long
@@ -39662,13 +39819,18 @@ function resolveTurnBudgetOrDefer(configuredBudgetMs, credentialExpiresAt, nowMs
   }
   return clampTurnBudgetToCredential(configuredBudgetMs, credentialExpiresAt, nowMs);
 }
-var SIGNAL_BODY_MAX = 2e3;
+var SIGNAL_BODY_MAX = 8e3;
 var SIGNAL_ABOUT_MAX = 500;
 function signalText(value, label) {
   const maximum = label === "body" ? SIGNAL_BODY_MAX : SIGNAL_ABOUT_MAX;
   if (value.length < (label === "body" ? 1 : 0) || value.length > maximum) {
+    if (label === "body") {
+      throw new Error(
+        `signal text is ${value.length} characters; the maximum is ${maximum}`
+      );
+    }
     throw new Error(
-      `${label === "body" ? "signal text" : "--about"} must be ${label === "body" ? "1.." : "at most "}${maximum} characters`
+      `--about must be at most ${maximum} characters`
     );
   }
   return value;
@@ -40329,7 +40491,7 @@ function listenerModelLabel(provider) {
 }
 function listenerProvider(args) {
   const provider = args.optional("provider");
-  const hints = "supported providers: grok \u2014 install Grok CLI 0.2.117 and run grok login; opencode \u2014 install OpenCode 1.18.10 and authenticate it; claude \u2014 npm install -g @agentclientprotocol/claude-agent-acp@0.64.2; codex \u2014 npm install -g @agentclientprotocol/codex-acp@1.1.9. You can use working-on, note, ask, and feed now; detached live receipt needs one of these adapters";
+  const hints = "supported providers: grok \u2014 install Grok CLI 0.2.117 or newer and run grok login; opencode \u2014 install OpenCode 1.18.10 or newer and authenticate it; claude \u2014 npm install -g @agentclientprotocol/claude-agent-acp@latest (minimum 0.64.2); codex \u2014 npm install -g @agentclientprotocol/codex-acp@latest (minimum 1.1.9). You can use working-on, note, ask, and feed now; detached live receipt needs one of these adapters";
   if (provider === void 0) {
     throw new Error(`--provider is required; ${hints}`);
   }
@@ -40390,7 +40552,7 @@ function listenerHostLimits(provider) {
     };
   }
   if (provider === "claude") {
-    const host_configuration2 = "The Claude worker uses the operator-selected cwd and the normal Claude Code home through claude-agent-acp 0.64.2. Keychain/OAuth auth was measured; ANTHROPIC_API_KEY is stripped by the listener environment sanitizer.";
+    const host_configuration2 = "The Claude worker uses the operator-selected cwd and the normal Claude Code home through claude-agent-acp 0.64.2 or newer. Keychain/OAuth auth was measured; ANTHROPIC_API_KEY is stripped by the listener environment sanitizer.";
     const deny_canary_scope2 = "The deny canary proves host reject + correlated terminal deny only.";
     const steady_allow_unproven2 = "The deny canary does not prove steady-state --permissions allow behavior.";
     const cross_owner_context2 = "All sender relations reach that same worker and local context; each prompt carries sender and operator provenance.";
@@ -40414,7 +40576,7 @@ function listenerHostLimits(provider) {
     };
   }
   if (provider === "codex") {
-    const host_configuration2 = "The Codex worker uses the operator-selected cwd and normal ChatGPT/Codex auth through codex-acp 1.1.9. CommonSwarm explicitly selects read-only mode after every session/new; API-key variables are stripped by the listener environment sanitizer.";
+    const host_configuration2 = "The Codex worker uses the operator-selected cwd and normal ChatGPT/Codex auth through codex-acp 1.1.9 or newer. CommonSwarm explicitly selects read-only mode after every session/new; API-key variables are stripped by the listener environment sanitizer.";
     const deny_canary_scope2 = "The deny canary proves host reject + correlated terminal deny only.";
     const steady_allow_unproven2 = "The deny canary does not prove steady-state --permissions allow behavior.";
     const cross_owner_context2 = "All sender relations reach that same worker and local context; each prompt carries sender and operator provenance.";
@@ -40503,6 +40665,11 @@ function renderListenerStatus(status) {
       lines.push(`  ${line}`);
     }
   }
+  if (status.providerVersion && status.providerLastMeasuredVersion) {
+    lines.push(
+      `Provider version ${status.providerVersion} is newer than the last measured version ${status.providerLastMeasuredVersion}. It is unverified but allowed because the startup permission canary passed. Next: verify this provider release with CommonSwarm and update the last-measured version.`
+    );
+  }
   if (status.deliveryMode === "durable_claim") {
     lines.push("Delivery mode: durable claim and acknowledgement.");
   } else if (status.deliveryMode === "cursor_fallback") {
@@ -40545,29 +40712,35 @@ function renderListenerStatus(status) {
   return lines.join("\n");
 }
 function listenerFailureMessage(code, provider) {
-  if (code === "version_refused") {
+  if (code === "version_below_floor") {
     if (provider === "codex") {
-      return "the Codex listener requires codex-acp 1.1.9; run npm install -g @agentclientprotocol/codex-acp@1.1.9, then retry";
+      return "the Codex listener requires codex-acp 1.1.9 or newer; update the bridge, then retry";
     }
     if (provider === "claude") {
-      return "the Claude listener requires claude-agent-acp 0.64.2; run npm install -g @agentclientprotocol/claude-agent-acp@0.64.2, then retry";
+      return "the Claude listener requires claude-agent-acp 0.64.2 or newer; update the bridge, then retry";
     }
     if (provider === "opencode") {
-      return "the OpenCode listener requires OpenCode 1.18.10; install that pinned build, then retry";
+      return "the OpenCode listener requires OpenCode 1.18.10 or newer; update OpenCode, then retry";
     }
-    return "the Grok listener requires Grok 0.2.117; install that pinned build and run grok login, then retry";
+    return "the Grok listener requires Grok 0.2.117 or newer; update Grok, confirm grok login, then retry";
+  }
+  if (code === "version_unparseable") {
+    return `the ${provider ?? "provider"} version output was not valid semantic version data, so startup stopped. Next: run the provider's --version command, then update or reinstall it`;
+  }
+  if (code === "version_refused") {
+    return `the ${provider ?? "provider"} version check could not run, so startup stopped. Next: run the provider's --version command and fix that error, then retry`;
   }
   if (code === "executable_missing" && provider === "claude") {
-    return "claude-agent-acp is not installed; run npm install -g @agentclientprotocol/claude-agent-acp@0.64.2, then retry";
+    return "claude-agent-acp is not installed; run npm install -g @agentclientprotocol/claude-agent-acp@latest (minimum 0.64.2), then retry";
   }
   if (code === "executable_missing" && provider === "codex") {
-    return "codex-acp is not installed; run npm install -g @agentclientprotocol/codex-acp@1.1.9, then retry";
+    return "codex-acp is not installed; run npm install -g @agentclientprotocol/codex-acp@latest (minimum 1.1.9), then retry";
   }
   if (code === "permission_mode_unavailable" && provider === "claude") {
-    return "the Claude bridge does not expose the required manual permission mode; reinstall claude-agent-acp 0.64.2, then retry";
+    return "the Claude bridge does not expose the required manual permission mode; update or reinstall claude-agent-acp, then retry";
   }
   if (code === "permission_mode_unavailable" && provider === "codex") {
-    return "the Codex bridge does not expose the required read-only permission mode; reinstall codex-acp 1.1.9, then retry";
+    return "the Codex bridge does not expose the required read-only permission mode; update or reinstall codex-acp, then retry";
   }
   if (provider === "claude" && (code === "rpc_error" || code === "child_exit" || code === "timeout")) {
     return `the Claude bridge could not start (${code}); confirm Claude Code keychain/OAuth sign-in and network access, then retry. ANTHROPIC_API_KEY is not forwarded to detached listeners`;
@@ -40619,7 +40792,7 @@ function resolveDetachedClaudeExecutable(executable = "claude-agent-acp", pathEn
       if ((0, import_node_path19.isAbsolute)(executable) || executable.includes("/") || executable.includes("\\")) {
         const detail = error instanceof Error ? error.message : code;
         throw new Error(
-          `could not use --claude-executable: ${detail}; reinstall the measured bridge with npm install -g @agentclientprotocol/claude-agent-acp@0.64.2 if this path should be replaced`
+          `could not use --claude-executable: ${detail}; install the current bridge with npm install -g @agentclientprotocol/claude-agent-acp@latest if this path should be replaced`
         );
       }
       throw new Error(listenerFailureMessage(code, "claude"));
@@ -40636,7 +40809,7 @@ function resolveDetachedCodexExecutable(executable = "codex-acp", pathEnv = proc
       if ((0, import_node_path19.isAbsolute)(executable) || executable.includes("/") || executable.includes("\\")) {
         const detail = error instanceof Error ? error.message : code;
         throw new Error(
-          `could not use --codex-executable: ${detail}; reinstall the measured bridge with npm install -g @agentclientprotocol/codex-acp@1.1.9 if this path should be replaced`
+          `could not use --codex-executable: ${detail}; install the current bridge with npm install -g @agentclientprotocol/codex-acp@latest if this path should be replaced`
         );
       }
       throw new Error(listenerFailureMessage(code, "codex"));
@@ -40740,6 +40913,10 @@ async function runConfiguredListener(options) {
   };
   let lastWorkerStderrTail = null;
   let workerStderrGeneration = 0;
+  let providerVersionNotice = null;
+  const onVersionNotice = (notice) => {
+    providerVersionNotice = notice;
+  };
   const newWorkerStderrTailSink = () => {
     const generation = ++workerStderrGeneration;
     lastWorkerStderrTail = null;
@@ -40748,34 +40925,41 @@ async function runConfiguredListener(options) {
       lastWorkerStderrTail = tail.length > 0 ? tail : null;
     };
   };
-  const newModel = () => options.provider === "opencode" ? new OpenCodeListenerModel({
-    cwd: options.cwd,
-    permissionMode: options.permissionMode,
-    promptTimeoutMs: resolveTurnBudgetMs,
-    onWorkerStderrTail: newWorkerStderrTailSink(),
-    ...options.model ? { model: options.model } : {},
-    ...options.opencodeExecutable ? { executable: options.opencodeExecutable } : options.executable ? { executable: options.executable } : {}
-  }) : options.provider === "claude" ? new ClaudeListenerModel({
-    cwd: options.cwd,
-    permissionMode: options.permissionMode,
-    promptTimeoutMs: resolveTurnBudgetMs,
-    onWorkerStderrTail: newWorkerStderrTailSink(),
-    ...options.claudeExecutable ? { executable: options.claudeExecutable } : options.executable ? { executable: options.executable } : {}
-  }) : options.provider === "codex" ? new CodexListenerModel({
-    cwd: options.cwd,
-    permissionMode: options.permissionMode,
-    promptTimeoutMs: resolveTurnBudgetMs,
-    onWorkerStderrTail: newWorkerStderrTailSink(),
-    ...options.codexExecutable ? { executable: options.codexExecutable } : options.executable ? { executable: options.executable } : {}
-  }) : new GrokListenerModel({
-    cwd: options.cwd,
-    permissionMode: options.permissionMode,
-    promptTimeoutMs: resolveTurnBudgetMs,
-    onWorkerStderrTail: newWorkerStderrTailSink(),
-    ...options.model ? { model: options.model } : {},
-    ...options.effort ? { effort: options.effort } : {},
-    ...options.executable ? { executable: options.executable } : {}
-  });
+  const newModel = () => {
+    providerVersionNotice = null;
+    return options.provider === "opencode" ? new OpenCodeListenerModel({
+      cwd: options.cwd,
+      permissionMode: options.permissionMode,
+      promptTimeoutMs: resolveTurnBudgetMs,
+      onWorkerStderrTail: newWorkerStderrTailSink(),
+      onVersionNotice,
+      ...options.model ? { model: options.model } : {},
+      ...options.opencodeExecutable ? { executable: options.opencodeExecutable } : options.executable ? { executable: options.executable } : {}
+    }) : options.provider === "claude" ? new ClaudeListenerModel({
+      cwd: options.cwd,
+      permissionMode: options.permissionMode,
+      promptTimeoutMs: resolveTurnBudgetMs,
+      onWorkerStderrTail: newWorkerStderrTailSink(),
+      onVersionNotice,
+      ...options.claudeExecutable ? { executable: options.claudeExecutable } : options.executable ? { executable: options.executable } : {}
+    }) : options.provider === "codex" ? new CodexListenerModel({
+      cwd: options.cwd,
+      permissionMode: options.permissionMode,
+      promptTimeoutMs: resolveTurnBudgetMs,
+      onWorkerStderrTail: newWorkerStderrTailSink(),
+      onVersionNotice,
+      ...options.codexExecutable ? { executable: options.codexExecutable } : options.executable ? { executable: options.executable } : {}
+    }) : new GrokListenerModel({
+      cwd: options.cwd,
+      permissionMode: options.permissionMode,
+      promptTimeoutMs: resolveTurnBudgetMs,
+      onWorkerStderrTail: newWorkerStderrTailSink(),
+      onVersionNotice,
+      ...options.model ? { model: options.model } : {},
+      ...options.effort ? { effort: options.effort } : {},
+      ...options.executable ? { executable: options.executable } : {}
+    });
+  };
   const onProcessSignal = () => {
     void stopListener(paths);
   };
@@ -40799,6 +40983,7 @@ async function runConfiguredListener(options) {
       // The bound a timeout event reports: the last turn's clamped budget when
       // one has run, else the configured cap.
       getTurnBudgetMs: () => lastAppliedTurnBudgetMs ?? turnBudgetMs,
+      getProviderVersionNotice: () => providerVersionNotice,
       takeWorkerStderrTail: () => {
         const tail = lastWorkerStderrTail;
         lastWorkerStderrTail = null;
@@ -41017,8 +41202,8 @@ async function runListenStart(args) {
 ` : "";
   const workerAudience = routing.routeMode === "main" ? "Directed asks do not reach that worker." : routing.routeMode === "split" ? "Only asks at or below the split threshold reach that worker, with sender and operator provenance in the prompt." : "Every sender reaches that worker with sender and operator provenance in the prompt.";
   const hostNote = provider === "opencode" ? `The OpenCode worker uses one private auth/config home and your selected project cwd. ${workerAudience} Tool requests are approved one at a time by default, when the worker asks and the host offers a one-time approval; --permissions deny refuses them. The deny canary does not cover steady-state allow.
-` : provider === "claude" ? `The Claude worker uses your selected cwd and normal Claude Code keychain/OAuth state through claude-agent-acp 0.64.2. ${workerAudience}
-` : provider === "codex" ? `The Codex worker uses your selected cwd and normal ChatGPT/Codex auth through codex-acp 1.1.9. CommonSwarm selects read-only mode before its deny canary. ${workerAudience}
+` : provider === "claude" ? `The Claude worker uses your selected cwd and normal Claude Code keychain/OAuth state through claude-agent-acp 0.64.2 or newer. ${workerAudience}
+` : provider === "codex" ? `The Codex worker uses your selected cwd and normal ChatGPT/Codex auth through codex-acp 1.1.9 or newer. CommonSwarm selects read-only mode before its deny canary. ${workerAudience}
 ` : `The Grok worker uses your selected cwd and local Grok configuration, including user and cmux hooks. ${workerAudience}
 `;
   process.stdout.write(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "commonswarm",
-  "version": "0.1.27",
+  "version": "0.1.29",
   "description": "CommonSwarm CLI — coordination for teams where people and AI agents work side by side.",
   "bin": {
     "cswarm": "cswarm.cjs"