lody 0.83.0 → 0.85.0

package/dist/codex-acp.js

@@ -3,5 +3,5 @@
     console.error("CODEX_PATH is required for the bundled Codex ACP adapter.");
     process.exit(1);
   }
-  await import("./chunks/index-CbTnvx5t.js");
+  await import("./chunks/index-ddMw90Gr.js");
 })();

package/dist/deepseek-acp.js

@@ -2,13 +2,15 @@ import { randomUUID, createHash } from "node:crypto";
 import { isAbsolute } from "node:path";
 import { Readable, Writable } from "node:stream";
 import { n as ndJsonStream, A as AgentSideConnection, R as RequestError, P as PROTOCOL_VERSION } from "./chunks/acp-CrvzLY5A.js";
-import { b as DEEPSEEK_HARNESS_MODELS, D as DEEPSEEK_HARNESS_PERMISSION_MODES, c as DEEPSEEK_HARNESS_REASONING_OPTIONS, e as ACP_EXTENSION_DSH_VERSION, a as DEEPSEEK_HARNESS_AGENT_PRESETS } from "./chunks/profile-RfMzWliN.js";
+import { D as DEEPSEEK_HARNESS_PERMISSION_MODES, c as DEEPSEEK_HARNESS_REASONING_OPTIONS, e as ACP_EXTENSION_DSH_VERSION, a as DEEPSEEK_HARNESS_AGENT_PRESETS } from "./chunks/profile-Cxxl5hCq.js";
 import "./chunks/schemas-Du3qLZPS.js";
 const name = "acp-extension-dsh";
 const inject = [
   "agents",
   "agentPresets",
+  "attachments",
   "loader",
+  "llm",
   "permissionPresets",
   "sessionPersistence",
   "sessionQuery"
@@ -22,7 +24,24 @@ const MCP_TOOL_CALL_TIMEOUT_MS = 6e4;
 const MCP_SERVER_NAME_MAX_LENGTH = 32;
 const MCP_SERVER_NAME_HASH_LENGTH = 8;
 const INVALID_MCP_SERVER_NAME_CHARS = /[^A-Za-z0-9_-]/gu;
-const MODEL_IDS = new Set(DEEPSEEK_HARNESS_MODELS.map((model) => model.modelId));
+const IMAGE_MEDIA_TYPES = [
+  "image/png",
+  "image/jpeg",
+  "image/webp",
+  "image/gif"
+];
+const CANONICAL_BASE64 = /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/u;
+const IMAGE_ADMISSION_ERROR_CODES = /* @__PURE__ */ new Set([
+  "TOO_MANY_IMAGES",
+  "IMAGES_TOO_LARGE",
+  "UNSUPPORTED_IMAGE_TYPE",
+  "INVALID_IMAGE_BASE64",
+  "INVALID_IMAGE",
+  "IMAGE_TYPE_MISMATCH",
+  "IMAGE_TOO_LARGE",
+  "IMAGE_TOO_MANY_PIXELS",
+  "IMAGE_DIMENSION_TOO_LARGE"
+]);
 const PERMISSION_MODE_IDS = new Set(DEEPSEEK_HARNESS_PERMISSION_MODES.map((mode) => mode.id));
 const REASONING_EFFORT_IDS = new Set(DEEPSEEK_HARNESS_REASONING_OPTIONS.map((effort) => effort.value));
 function invalidParams(detail) {
@@ -38,9 +57,6 @@ function resolveAdapterConfig(config) {
   const provider = nonEmptyString(config?.provider, "deepseek-official");
   const model = nonEmptyString(config?.model, "deepseek-v4-pro");
   const reasoningEffort = config?.reasoningEffort ?? "max";
-  if (!MODEL_IDS.has(model)) {
-    throw new Error(`acp-extension-dsh: unsupported model ${JSON.stringify(model)}`);
-  }
   if (!REASONING_EFFORT_IDS.has(reasoningEffort)) {
     throw new Error(`acp-extension-dsh: unsupported reasoning effort ${JSON.stringify(reasoningEffort)}`);
   }
@@ -51,6 +67,27 @@ function resolveAdapterConfig(config) {
     ...config?.stream ? { stream: config.stream } : {}
   };
 }
+async function loadHarnessModels(ctx, provider) {
+  const llm = ctx.get("llm");
+  if (!llm)
+    throw new Error("acp-extension-dsh: no Harness LLM catalog is mounted");
+  const listed = await llm.listModels(provider);
+  const models = [];
+  const ids = /* @__PURE__ */ new Set();
+  for (const model of listed) {
+    if (model.provider !== provider || !model.id.trim())
+      continue;
+    if (ids.has(model.id)) {
+      throw new Error(`acp-extension-dsh: duplicate model ${JSON.stringify(model.id)} for provider ${JSON.stringify(provider)}`);
+    }
+    ids.add(model.id);
+    models.push({
+      ...model,
+      ...model.inputModalities ? { inputModalities: [...model.inputModalities] } : {}
+    });
+  }
+  return models;
+}
 async function loadMcpClientPlugin(agentContext) {
   const module = agentContext.loader.unwrapExports(await agentContext.loader.import(MCP_CLIENT_PACKAGE));
   if (typeof module !== "object" || module === null || !("apply" in module) || typeof module.apply !== "function") {
@@ -202,9 +239,9 @@ function configOptions(record) {
       category: "model",
       type: "select",
       currentValue: record.selection.current.model,
-      options: DEEPSEEK_HARNESS_MODELS.map((model) => ({
-        value: model.modelId,
-        name: model.name,
+      options: record.models.map((model) => ({
+        value: model.id,
+        name: model.name ?? model.id,
         description: model.description ?? null
       }))
     },
@@ -233,28 +270,97 @@ function modeState(record) {
     }))
   };
 }
-function acpPromptToText(prompt) {
-  return prompt.flatMap((block) => {
-    if (block.type === "text")
-      return [block.text];
-    if (block.type === "resource_link") {
-      return [
-        `
+function modelSupportsImages(models, modelId) {
+  return models.some((model) => model.id === modelId && model.inputModalities?.includes("image"));
+}
+function imageMediaType(value) {
+  return IMAGE_MEDIA_TYPES.includes(value) ? value : void 0;
+}
+function decodePromptImage(block) {
+  const mediaType = imageMediaType(block.mimeType);
+  if (!mediaType) {
+    throw invalidParams("image mimeType must be image/png, image/jpeg, image/webp, or image/gif");
+  }
+  if (!block.data || !CANONICAL_BASE64.test(block.data)) {
+    throw invalidParams("image data must be canonical base64");
+  }
+  const decoded = Buffer.from(block.data, "base64");
+  if (decoded.toString("base64") !== block.data) {
+    throw invalidParams("image data must be canonical base64");
+  }
+  return { data: new Uint8Array(decoded), mediaType };
+}
+function isImageAdmissionError(error) {
+  return error instanceof Error && "code" in error && typeof error.code === "string" && IMAGE_ADMISSION_ERROR_CODES.has(error.code);
+}
+async function admitAcpPrompt(prompt, models, modelId, attachments) {
+  const images = [];
+  for (const block of prompt) {
+    switch (block.type) {
+      case "text":
+      case "resource_link":
+        break;
+      case "image":
+        if (!modelSupportsImages(models, modelId)) {
+          throw invalidParams(`model ${JSON.stringify(modelId)} does not support image input`);
+        }
+        images.push(decodePromptImage(block));
+        break;
+      case "audio":
+        throw invalidParams("audio prompt content is not supported");
+      case "resource":
+        throw invalidParams("embedded resource prompt content is not supported");
+      default:
+        throw invalidParams("unsupported ACP prompt content");
+    }
+  }
+  let refs = [];
+  if (images.length > 0) {
+    if (!attachments)
+      throw internalError("no Harness attachment store is mounted");
+    try {
+      refs = await attachments.saveImages(images);
+    } catch (error) {
+      if (isImageAdmissionError(error))
+        throw invalidParams(error.message);
+      throw internalError("unable to persist the prompt image batch");
+    }
+  }
+  const content = [];
+  let pendingText = "";
+  let imageIndex = 0;
+  const flushText = () => {
+    if (!pendingText)
+      return;
+    content.push({ type: "text", text: pendingText });
+    pendingText = "";
+  };
+  for (const block of prompt) {
+    if (block.type === "text") {
+      pendingText += block.text;
+    } else if (block.type === "resource_link") {
+      pendingText += `
 [resource_link name=${JSON.stringify(block.name)} uri=${JSON.stringify(block.uri)}]
-`
-      ];
+`;
+    } else if (block.type === "image") {
+      flushText();
+      const attachment = refs[imageIndex++];
+      if (!attachment)
+        throw internalError("the attachment store returned an incomplete image batch");
+      content.push({ type: "image", attachment });
     }
-    return [];
-  }).join("");
-}
-function promptHasUnsupportedContent(prompt) {
-  return prompt.some((block) => block.type !== "text" && block.type !== "resource_link");
+  }
+  flushText();
+  if (!content.some((block) => block.type === "image" || block.type === "text" && block.text.trim().length > 0)) {
+    throw invalidParams("empty prompt");
+  }
+  return content;
 }
-function createUserMessage(text) {
+function createUserMessage(id, content) {
   return Object.freeze({
-    id: randomUUID(),
+    id,
     role: "user",
-    content: [Object.freeze({ type: "text", text })],
+    content: Object.freeze(content.map((block) => Object.freeze(block))),
     source: Object.freeze({ kind: "user" })
   });
 }
@@ -482,7 +588,7 @@ function apply(ctx, rawConfig) {
         throw invalidParams(`failed to select agent preset ${JSON.stringify(value)}: ${errorChain(error)}`);
       });
     } else if (params.configId === MODEL_CONFIG_ID) {
-      assertAllowed(value, MODEL_IDS, "model");
+      assertAllowed(value, new Set(record.models.map((model) => model.id)), "model");
       record.selection.current = { ...record.selection.current, model: value };
     } else if (params.configId === REASONING_EFFORT_CONFIG_ID) {
       assertAllowed(value, REASONING_EFFORT_IDS, "reasoning effort");
@@ -498,17 +604,22 @@ function apply(ctx, rawConfig) {
   const makeAgent = (connection) => {
     conn = connection;
     return {
-      initialize(_params) {
-        return Promise.resolve({
+      async initialize(_params) {
+        const models = await loadHarnessModels(ctx, config.provider);
+        return {
           protocolVersion: PROTOCOL_VERSION,
           agentInfo: { name: "acp-extension-dsh", version: ACP_EXTENSION_DSH_VERSION },
           agentCapabilities: {
-            promptCapabilities: { image: false, audio: false, embeddedContext: false },
+            promptCapabilities: {
+              image: models.some((model) => modelSupportsImages(models, model.id)),
+              audio: false,
+              embeddedContext: false
+            },
             mcpCapabilities: { http: true },
             sessionCapabilities: { close: {} }
           },
           authMethods: []
-        });
+        };
       },
       authenticate(_params) {
         return Promise.resolve();
@@ -516,6 +627,12 @@ function apply(ctx, rawConfig) {
       async newSession(params) {
         assertOpen();
         validateSessionParams(params);
+        let models;
+        try {
+          models = await loadHarnessModels(ctx, config.provider);
+        } catch (error) {
+          throw internalError(`failed to list models: ${errorChain(error)}`);
+        }
         const sessionId = randomUUID();
         const selection = {
           current: {
@@ -575,13 +692,22 @@ function apply(ctx, rawConfig) {
           permissionMode,
           agentPreset: mountedPreset,
           agentPresetOptions,
+          models,
           started: false
         };
         sessions.set(sessionId, record);
         return {
           sessionId,
           modes: modeState(record),
-          configOptions: configOptions(record)
+          configOptions: configOptions(record),
+          models: {
+            currentModelId: record.selection.current.model,
+            availableModels: record.models.map((model) => ({
+              modelId: model.id,
+              name: model.name ?? model.id,
+              description: model.description ?? null
+            }))
+          }
         };
       },
       setSessionMode(params) {
@@ -596,20 +722,29 @@ function apply(ctx, rawConfig) {
         const record = requireSession(params.sessionId);
         if (record.inflight)
           throw invalidParams("a prompt is already in flight for this session");
-        if (promptHasUnsupportedContent(params.prompt)) {
-          throw invalidParams("only text and resource_link prompt content is supported");
-        }
-        const text = acpPromptToText(params.prompt);
-        if (!text.trim())
-          throw invalidParams("empty prompt");
         if (ctx.agents.get(record.agent.id) !== record.agent) {
           throw internalError("prompt was not queued: the agent was disposed outside the bridge");
         }
-        const message = createUserMessage(text);
-        record.started = true;
-        const stopReason = await new Promise((resolve, reject) => {
-          const inflight = { resolve, reject, messageId: message.id };
-          record.inflight = inflight;
+        const attachments = ctx.get("attachments");
+        const messageId = randomUUID();
+        let resolvePrompt;
+        let rejectPrompt;
+        const completion = new Promise((resolve, reject) => {
+          resolvePrompt = resolve;
+          rejectPrompt = reject;
+        });
+        const inflight = {
+          resolve: resolvePrompt,
+          reject: rejectPrompt,
+          messageId
+        };
+        record.inflight = inflight;
+        try {
+          const content = await admitAcpPrompt(params.prompt, record.models, record.selection.current.model, attachments);
+          if (record.inflight !== inflight)
+            return { stopReason: await completion };
+          const message = createUserMessage(messageId, content);
+          record.started = true;
           try {
             record.agent.followup(message);
           } catch (error) {
@@ -624,8 +759,12 @@ function apply(ctx, rawConfig) {
             const end = inflight.endReason;
             inflight.resolve(end ? end.kind === "max-tokens" ? "end_turn" : turnEndToStopReason(end) : "cancelled");
           });
-        });
-        return { stopReason };
+        } catch (error) {
+          if (record.inflight === inflight)
+            record.inflight = void 0;
+          throw error;
+        }
+        return { stopReason: await completion };
       },
       cancel(params) {
         const record = sessions.get(params.sessionId);

package/dist/deepseek-agent-presets/code/agent.cordis.yml

@@ -198,9 +198,10 @@
         toolName: subagent_fork
         backgroundMode: continuable
 
-    # Production dsh does not install these optional providers. An opting-in
-    # Profile mounts each provider once on the host plane; copy this preset,
-    # then remove `disabled` from the matching tool row.
+    # Production dsh does not install these optional providers. Install the
+    # matching Bundle in this Profile and restart the Host, then copy this
+    # preset and remove `disabled` from the matching tool row. Host availability
+    # alone grants no tool.
     - id: tool-subagent-codex
       name: '@deepseek-ai/dsh-tool-subagent'
       disabled: true

package/dist/deepseek-agent-presets/cordis/agent.cordis.yml

@@ -185,9 +185,10 @@
         toolName: subagent_fork
         backgroundMode: continuable
 
-    # Production dsh does not install these optional providers. An opting-in
-    # Profile mounts each provider once on the host plane; copy this preset,
-    # then remove `disabled` from the matching tool row.
+    # Production dsh does not install these optional providers. Install the
+    # matching Bundle in this Profile and restart the Host, then copy this
+    # preset and remove `disabled` from the matching tool row. Host availability
+    # alone grants no tool.
     - id: tool-subagent-codex
       name: '@deepseek-ai/dsh-tool-subagent'
       disabled: true

package/dist/deepseek-agent-presets/cordis/skills/editing-cordis-compositions/SKILL.md

@@ -123,7 +123,16 @@ After a clean mount-validation, ask the user to start a session on the new prese
 
 ## Native product subagents
 
-Codex and Claude Code providers belong on the host plane but are not installed by production `dsh`. The active Profile must install and mount the selected provider before a preset can expose its ordinary delegation-tool row; never move a product provider into the preset and never add a product-specific settings field.
+Codex and Claude Code providers are independent optional Profile Bundles. Install only the products a Profile needs, then restart the Profile so its Host registers those providers:
+
+```sh
+dsh plugin --profile <name> add @deepseek-ai/dsh-subagent-codex
+dsh plugin --profile <name> add @deepseek-ai/dsh-subagent-claude-code
+dsh plugin --profile <name> remove @deepseek-ai/dsh-subagent-codex
+dsh plugin --profile <name> remove @deepseek-ai/dsh-subagent-claude-code
+```
+
+Each Bundle owns its Host availability; the preset separately grants one Agent its ordinary delegation tool. Never move a product provider into the preset and never add a product-specific settings field. Removing one package withdraws only that provider on the next Profile start.
 
 Copy these disabled templates from a shipped full preset and remove `disabled` only for the products the user requested:
 
@@ -147,7 +156,9 @@ Copy these disabled templates from a shipped full preset and remove `disabled` o
     maxDepth: provider-managed
 ```
 
-The two rows are independent. Leaving both disabled preserves the copied preset, enabling one exposes only that product tool, and enabling both exposes both. Production `dsh` does not install or mount either optional provider: before enabling a row, the Profile must install the matching `@deepseek-ai/dsh-subagent-codex` or `@deepseek-ai/dsh-subagent-claude-code` package and mount it once on the host plane. A preset cannot provide that host dependency. `backgroundMode: one-shot` keeps omitted or `false` calls in the foreground and lets explicit `run_in_background: true` return a generic Job id. Full presets already carry `tool-jobs`, while the base host carries the job registry; retain both so `job_output`, `job_list`, `job_kill`, cancellation, and completion notices stay available. The host must also provide `codex` or `claude` on `PATH`; the preset does not install, authenticate, select a model for, or probe either product.
+For additional named Codex or Claude Code instances, mount a separate host-plane provider row for each instance with a unique `providerName`, then add a separate preset tool row whose `provider` exactly matches that name and whose `toolName` is also unique. Keep the shipped rows for the default `codex` and `claude-code` names; do not reuse one tool row for several providers or derive either name from permission or environment settings.
+
+The two rows are independent. Leaving both disabled preserves the copied preset, enabling one exposes only that product tool, and enabling both exposes both. Production `dsh` does not install either optional provider: before enabling a row, install the matching `@deepseek-ai/dsh-subagent-codex` or `@deepseek-ai/dsh-subagent-claude-code` Bundle in the Profile and restart it. Each Bundle registers its dormant default provider and exclusively uses its pinned package-local platform CLI; additional named instances use extra host-plane rows from the same installed package. A preset cannot provide that host dependency. `backgroundMode: one-shot` keeps omitted or `false` calls in the foreground and lets explicit `run_in_background: true` return a generic Job id. Full presets already carry `tool-jobs`, while the base host carries the job registry; retain both so `job_output`, `job_list`, `job_kill`, cancellation, and completion notices stay available. Installing a Bundle or composing a preset row does not start a product, authenticate an account, select a model, probe credentials, or manage native product settings.
 
 ## What not to move into a preset
 

package/dist/deepseek-agent-presets/minimal/agent.cordis.yml

@@ -3,7 +3,8 @@
 # The persona is the complete system prompt, so global identity, Web orientation,
 # tool guidance, and later assembly listeners cannot add prompt text. Runtime
 # context snapshots are suppressed for this preset, and the model composes only
-# persistent `bash` and `str_replace_editor`. Context compaction is absent.
+# the persistent shell (`bash` on POSIX, `pwsh` on win32) and
+# `str_replace_editor`. Context compaction is absent.
 
 - id: persona
   name: '@deepseek-ai/dsh-persona'
@@ -15,6 +16,8 @@
 # The PTY registry is an agent-owned service, so it lives in an entry-local
 # realm. The backend still consumes the host sandbox policy and subprocess
 # implementation, while the tool registers into this agent's scoped catalog.
+# Exactly one shell stack mounts per host: the bash stack gates off win32 and
+# its pwsh twin gates off POSIX, mirroring the one-shot shell rows.
 - id: persistent-shell
   name: cordis:group
   group: true
@@ -26,11 +29,13 @@
 
     - id: terminal-bash
       name: '@deepseek-ai/dsh-terminal-bash'
+      disabled: !!js process.platform === 'win32'
       config:
         timeoutMs: 300000
 
     - id: persistent-bash
       name: '@deepseek-ai/dsh-tool-bash-persistent'
+      disabled: !!js process.platform === 'win32'
       config:
         timeoutMs: 300000
         description: |-
@@ -43,6 +48,27 @@
           * Please avoid commands that may produce a very large amount of output.
           * Please run long lived commands in the background, e.g. 'sleep 10 &' or start a server in the background.
 
+    - id: terminal-pwsh
+      name: '@deepseek-ai/dsh-terminal-bash'
+      disabled: !!js process.platform !== 'win32'
+      config:
+        shellDialect: pwsh
+        timeoutMs: 300000
+
+    - id: persistent-pwsh
+      name: '@deepseek-ai/dsh-tool-pwsh-persistent'
+      disabled: !!js process.platform !== 'win32'
+      config:
+        timeoutMs: 300000
+        description: |-
+          Run commands in a PowerShell shell
+          * When invoking this tool, the contents of the "command" parameter does NOT need to be XML-escaped.
+          * You don't have access to the internet via this tool.
+          * State is persistent across command calls and discussions with the user.
+          * Use native Windows paths (C:\...) and $env:NAME variables; this is PowerShell, not bash.
+          * Please avoid commands that may produce a very large amount of output.
+          * Please run long lived commands in the background, e.g. 'Start-Job' or start a server with Start-Process.
+
 # The bare local filesystem shadows the host's sandboxed provider only for this
 # preset. The editor shares that realm and requires absolute paths.
 - id: filesystem

package/dist/deepseek-agent-presets/standard/agent.cordis.yml

@@ -197,9 +197,10 @@
         toolName: subagent_fork
         backgroundMode: continuable
 
-    # Production dsh does not install these optional providers. An opting-in
-    # Profile mounts each provider once on the host plane; copy this preset,
-    # then remove `disabled` from the matching tool row.
+    # Production dsh does not install these optional providers. Install the
+    # matching Bundle in this Profile and restart the Host, then copy this
+    # preset and remove `disabled` from the matching tool row. Host availability
+    # alone grants no tool.
     - id: tool-subagent-codex
       name: '@deepseek-ai/dsh-tool-subagent'
       disabled: true

package/dist/grok-acp.js

@@ -200,6 +200,45 @@ function permissionNotification(clientIdentifier, mode) {
   if (!mapped) return void 0;
   return extensionNotification("permissionNotification", { clientIdentifier, ...mapped });
 }
+function stripLodySessionConfig(meta) {
+  if (!meta || typeof meta !== "object") return meta;
+  const lody = meta.lody;
+  if (!lody || typeof lody !== "object" || !Object.hasOwn(lody, "sessionConfig")) return meta;
+  const { sessionConfig: _sessionConfig, ...remainingLody } = lody;
+  const { lody: _lody, ...remainingMeta } = meta;
+  return Object.keys(remainingLody).length > 0 ? { ...remainingMeta, lody: remainingLody } : remainingMeta;
+}
+function readLodySessionConfigOption(meta, configId) {
+  if (!meta || typeof meta !== "object") return void 0;
+  const sessionConfig = meta.lody?.sessionConfig;
+  if (!sessionConfig || typeof sessionConfig !== "object" || sessionConfig.version !== 1 || !sessionConfig.configOptionValues || typeof sessionConfig.configOptionValues !== "object") {
+    return void 0;
+  }
+  const value = sessionConfig.configOptionValues[configId];
+  return typeof value === "string" || typeof value === "boolean" ? value : void 0;
+}
+function translateSessionStart(message) {
+  const params = message.params ?? {};
+  const permissionMode = readLodySessionConfigOption(params._meta, "permission_mode");
+  const mapped = typeof permissionMode === "string" ? PERMISSION_MODES[permissionMode] : void 0;
+  if (!mapped) return { message, permissionMode: void 0, notification: void 0 };
+  const clientIdentifier = params._meta?.clientIdentifier;
+  const translated = {
+    ...message,
+    params: {
+      ...params,
+      _meta: {
+        ...stripLodySessionConfig(params._meta),
+        yoloMode: mapped.yolo_mode
+      }
+    }
+  };
+  return {
+    message: translated,
+    permissionMode,
+    notification: mapped.auto_mode && typeof clientIdentifier === "string" ? permissionNotification(clientIdentifier, permissionMode) : void 0
+  };
+}
 class GrokAcpCompatibilityProxy {
   constructor() {
     this.sessions = /* @__PURE__ */ new Map();
@@ -236,8 +275,12 @@ class GrokAcpCompatibilityProxy {
   handleClient(message) {
     if (!message || typeof message !== "object") return { toRuntime: [message], toClient: [] };
     const params = message.params ?? {};
-    if (message.method === "session/new" || message.method === "session/load" || message.method === "session/resume") {
+    if (message.method === "session/new" || message.method === "session/load" || message.method === "session/resume" || message.method === "session/fork") {
       const clientIdentifier = params._meta?.clientIdentifier;
+      const translated2 = translateSessionStart(message);
+      if (translated2.permissionMode && typeof clientIdentifier === "string") {
+        this.permissionModes.set(clientIdentifier, translated2.permissionMode);
+      }
       if (message.id !== void 0) {
         this.pending.set(message.id, {
           kind: "session",
@@ -246,7 +289,10 @@ class GrokAcpCompatibilityProxy {
           clientIdentifier
         });
       }
-      return { toRuntime: [message], toClient: [] };
+      return {
+        toRuntime: translated2.notification ? [translated2.notification, translated2.message] : [translated2.message],
+        toClient: []
+      };
     }
     if (message.method === "session/prompt") {
       if (message.id !== void 0) {