paseo-agy-acp 2.2.0

package/dist/ACP Connector/official-kernel/proxy.js

@@ -0,0 +1,197 @@
+import { TurnClaim } from "../acp/session/turn-scheduler.js";
+import { createOfficialAdmission, issueAdmittedOfficialPromptWrite } from "./admission-fence.js";
+import { extractPromptText, extractSessionId, injectPaseoContext } from "./context.js";
+import { blankTurnError, sessionUpdateShowsVisibleOutput, shouldRejectBlankTurn } from "./errors.js";
+import { overlayProductIdentity } from "./identity.js";
+import { isJsonRpcFailure, isJsonRpcNotification, isJsonRpcRequest, isJsonRpcSuccess, jsonRpcError } from "./json-rpc.js";
+import { rewriteMcpServers } from "./mcp-rewrite.js";
+import { rewriteModeFields } from "./mode-map.js";
+import { createNdjsonParser, encodeNdjson } from "./ndjson.js";
+const INITIALIZE_METHOD = "initialize";
+const SESSION_NEW_METHOD = "session/new";
+const SESSION_PROMPT_METHOD = "session/prompt";
+const SESSION_SET_MODE_METHOD = "session/set_mode";
+const SESSION_SET_CONFIG_METHOD = "session/set_config_option";
+const SESSION_CANCEL_METHOD = "session/cancel";
+const SESSION_UPDATE_METHOD = "session/update";
+export class OfficialKernelProxy {
+    #child;
+    #stdin;
+    #stdout;
+    #version;
+    #pending = new Map();
+    #claims = new Map();
+    #env;
+    #admission;
+    #closed = false;
+    constructor(options) {
+        this.#child = options.child;
+        this.#stdin = options.stdin;
+        this.#stdout = options.stdout;
+        this.#version = options.version;
+        this.#env = options.env ?? process.env;
+        this.#admission = createOfficialAdmission(this.#env);
+    }
+    start() {
+        const parseClient = createNdjsonParser((message) => {
+            void this.#onClientMessage(message);
+        });
+        const parseChild = createNdjsonParser((message) => {
+            this.#onChildMessage(message);
+        });
+        this.#stdin.on("data", parseClient);
+        this.#child.stdout.on("data", parseChild);
+        this.#stdin.on("end", () => this.#child.stdin.end());
+        return new Promise((resolve, reject) => {
+            const finish = () => {
+                if (this.#closed)
+                    return;
+                this.#closed = true;
+                this.#admission?.coordinator.close();
+                this.#admission?.runtime.close();
+                resolve();
+            };
+            this.#child.once("error", reject);
+            this.#child.once("exit", finish);
+        });
+    }
+    #writeClient(message) {
+        this.#stdout.write(encodeNdjson(message));
+    }
+    #writeChild(message) {
+        this.#child.stdin.write(encodeNdjson(message));
+    }
+    async #onClientMessage(message) {
+        try {
+            if (isJsonRpcNotification(message)) {
+                this.#onClientNotification(message);
+                return;
+            }
+            if (!isJsonRpcRequest(message)) {
+                this.#writeChild(message);
+                return;
+            }
+            await this.#onClientRequest(message);
+        }
+        catch (error) {
+            if (isJsonRpcRequest(message)) {
+                this.#writeClient(jsonRpcError(message.id, error instanceof Error ? error.message : "official kernel proxy failed"));
+            }
+        }
+    }
+    #onClientNotification(message) {
+        if (message.method === SESSION_CANCEL_METHOD) {
+            const sessionId = extractSessionId("params" in message ? message.params : undefined);
+            if (sessionId)
+                this.#claims.get(sessionId)?.abort();
+        }
+        this.#writeChild(message);
+    }
+    async #onClientRequest(request) {
+        let params = request.params;
+        if (request.method === SESSION_NEW_METHOD) {
+            params = rewriteMcpServers(rewriteModeFields(params));
+        }
+        else if (request.method === SESSION_SET_MODE_METHOD || request.method === SESSION_SET_CONFIG_METHOD) {
+            params = rewriteModeFields(params);
+        }
+        else if (request.method === SESSION_PROMPT_METHOD) {
+            params = rewriteModeFields(await injectPaseoContext(params, this.#env));
+            await this.#handlePrompt(request, params);
+            return;
+        }
+        this.#track(request.id, request.method, params);
+        this.#writeChild({ ...request, jsonrpc: "2.0", params });
+    }
+    async #handlePrompt(request, params) {
+        const sessionId = extractSessionId(params);
+        const promptText = extractPromptText(params) || "prompt";
+        const rewritten = { ...request, jsonrpc: "2.0", params };
+        const coordinator = this.#admission?.coordinator;
+        const processId = this.#child.pid;
+        if (coordinator === undefined || processId === undefined) {
+            this.#track(rewritten.id, rewritten.method, params);
+            this.#writeChild(rewritten);
+            return;
+        }
+        const claim = new TurnClaim("foreground");
+        if (sessionId)
+            this.#claims.set(sessionId, claim);
+        let wrote = false;
+        try {
+            const stopReason = await coordinator.admit({
+                sessionId: sessionId ?? "session",
+                model: "official",
+                promptText,
+                claim,
+                execute: async (boundary) => {
+                    const response = this.#track(rewritten.id, rewritten.method, params);
+                    issueAdmittedOfficialPromptWrite(boundary, processId, () => {
+                        wrote = true;
+                        this.#writeChild(rewritten);
+                    });
+                    await response;
+                    return { stopReason: claim.aborted ? "cancelled" : "end_turn" };
+                }
+            });
+            if (!wrote) {
+                this.#writeClient({
+                    jsonrpc: "2.0",
+                    id: request.id,
+                    result: { stopReason: stopReason === "cancelled" ? "cancelled" : "end_turn" }
+                });
+            }
+        }
+        finally {
+            if (sessionId)
+                this.#claims.delete(sessionId);
+        }
+    }
+    #track(id, method, params) {
+        return new Promise((resolve) => {
+            this.#pending.set(id, {
+                method,
+                sessionId: extractSessionId(params),
+                sawVisibleOutput: false,
+                resolve
+            });
+        });
+    }
+    #onChildMessage(message) {
+        if (isJsonRpcNotification(message) && message.method === SESSION_UPDATE_METHOD) {
+            const sessionId = extractSessionId(message.params);
+            if (sessionUpdateShowsVisibleOutput(message.params)) {
+                for (const pending of this.#pending.values()) {
+                    if (pending.method === SESSION_PROMPT_METHOD &&
+                        (pending.sessionId === undefined || pending.sessionId === sessionId)) {
+                        pending.sawVisibleOutput = true;
+                    }
+                }
+            }
+            this.#writeClient(message);
+            return;
+        }
+        if (isJsonRpcSuccess(message) || isJsonRpcFailure(message)) {
+            const pending = this.#pending.get(message.id);
+            if (pending === undefined) {
+                this.#writeClient(message);
+                return;
+            }
+            this.#pending.delete(message.id);
+            let outbound = message;
+            if (pending.method === INITIALIZE_METHOD && isJsonRpcSuccess(message)) {
+                outbound = { ...message, result: overlayProductIdentity(message.result, this.#version) };
+            }
+            else if (pending.method === SESSION_PROMPT_METHOD &&
+                isJsonRpcSuccess(message) &&
+                shouldRejectBlankTurn(message.result, pending.sawVisibleOutput)) {
+                outbound = blankTurnError(message.id);
+            }
+            this.#writeClient(outbound);
+            pending.resolve(outbound);
+            return;
+        }
+        this.#writeClient(message);
+    }
+}
+//# sourceMappingURL=proxy.js.map

package/dist/ACP Connector/official-kernel/proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../../../ACP Connector/official-kernel/proxy.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAC7D,OAAO,EAAE,uBAAuB,EAAE,gCAAgC,EAAE,MAAM,sBAAsB,CAAC;AACjG,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACvF,OAAO,EAAE,cAAc,EAAE,+BAA+B,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACrG,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,EAIb,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE/D,MAAM,iBAAiB,GAAG,YAAY,CAAC;AACvC,MAAM,kBAAkB,GAAG,aAAa,CAAC;AACzC,MAAM,qBAAqB,GAAG,gBAAgB,CAAC;AAC/C,MAAM,uBAAuB,GAAG,kBAAkB,CAAC;AACnD,MAAM,yBAAyB,GAAG,2BAA2B,CAAC;AAC9D,MAAM,qBAAqB,GAAG,gBAAgB,CAAC;AAC/C,MAAM,qBAAqB,GAAG,gBAAgB,CAAC;AAiB/C,MAAM,OAAO,mBAAmB;IACrB,MAAM,CAAiC;IACvC,MAAM,CAAW;IACjB,OAAO,CAAW;IAClB,QAAQ,CAAS;IACjB,QAAQ,GAAG,IAAI,GAAG,EAAmC,CAAC;IACtD,OAAO,GAAG,IAAI,GAAG,EAAqB,CAAC;IACvC,IAAI,CAAoB;IACxB,UAAU,CAAC;IACpB,OAAO,GAAG,KAAK,CAAC;IAEhB,YAAY,OAAmC;QAC7C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;QACvC,IAAI,CAAC,UAAU,GAAG,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC;IAED,KAAK;QACH,MAAM,WAAW,GAAG,kBAAkB,CAAC,CAAC,OAAO,EAAE,EAAE;YACjD,KAAK,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,kBAAkB,CAAC,CAAC,OAAO,EAAE,EAAE;YAChD,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QAErD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,MAAM,GAAG,GAAG,EAAE;gBAClB,IAAI,IAAI,CAAC,OAAO;oBAAE,OAAO;gBACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;gBACpB,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,KAAK,EAAE,CAAC;gBACrC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;gBACjC,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,YAAY,CAAC,OAAuB;QAClC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED,WAAW,CAAC,OAAuB;QACjC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,OAAuB;QAC5C,IAAI,CAAC;YACH,IAAI,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnC,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;gBACpC,OAAO;YACT,CAAC;YACD,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/B,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;gBAC1B,OAAO;YACT,CAAC;YACD,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9B,IAAI,CAAC,YAAY,CACf,YAAY,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAClG,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,qBAAqB,CAAC,OAA4C;QAChE,IAAI,OAAO,CAAC,MAAM,KAAK,qBAAqB,EAAE,CAAC;YAC7C,MAAM,SAAS,GAAG,gBAAgB,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACrF,IAAI,SAAS;gBAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC;QACtD,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,OAAuB;QAC5C,IAAI,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC5B,IAAI,OAAO,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;YAC1C,MAAM,GAAG,iBAAiB,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;QACxD,CAAC;aAAM,IAAI,OAAO,CAAC,MAAM,KAAK,uBAAuB,IAAI,OAAO,CAAC,MAAM,KAAK,yBAAyB,EAAE,CAAC;YACtG,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC;aAAM,IAAI,OAAO,CAAC,MAAM,KAAK,qBAAqB,EAAE,CAAC;YACpD,MAAM,GAAG,iBAAiB,CAAC,MAAM,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACxE,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC,WAAW,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAAuB,EAAE,MAAe;QAC1D,MAAM,SAAS,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC;QACzD,MAAM,SAAS,GAAmB,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QACzE,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC;QACjD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;QAElC,IAAI,WAAW,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YACzD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACpD,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;YAC5B,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC,YAAY,CAAC,CAAC;QAC1C,IAAI,SAAS;YAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAClD,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC;gBACzC,SAAS,EAAE,SAAS,IAAI,SAAS;gBACjC,KAAK,EAAE,UAAU;gBACjB,UAAU;gBACV,KAAK;gBACL,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;oBAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;oBACrE,gCAAgC,CAAC,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE;wBACzD,KAAK,GAAG,IAAI,CAAC;wBACb,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;oBAC9B,CAAC,CAAC,CAAC;oBACH,MAAM,QAAQ,CAAC;oBACf,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;gBAClE,CAAC;aACF,CAAC,CAAC;YACH,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,IAAI,CAAC,YAAY,CAAC;oBAChB,OAAO,EAAE,KAAK;oBACd,EAAE,EAAE,OAAO,CAAC,EAAE;oBACd,MAAM,EAAE,EAAE,UAAU,EAAE,UAAU,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,EAAE;iBAC9E,CAAC,CAAC;YACL,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,SAAS;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,MAAM,CAAC,EAAa,EAAE,MAAc,EAAE,MAAe;QACnD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE;gBACpB,MAAM;gBACN,SAAS,EAAE,gBAAgB,CAAC,MAAM,CAAC;gBACnC,gBAAgB,EAAE,KAAK;gBACvB,OAAO;aACR,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,eAAe,CAAC,OAAuB;QACrC,IAAI,qBAAqB,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,qBAAqB,EAAE,CAAC;YAC/E,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACnD,IAAI,+BAA+B,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;oBAC7C,IACE,OAAO,CAAC,MAAM,KAAK,qBAAqB;wBACxC,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,EACpE,CAAC;wBACD,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;oBAClC,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YAC3B,OAAO;QACT,CAAC;QAED,IAAI,gBAAgB,CAAC,OAAO,CAAC,IAAI,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC9C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;gBAC3B,OAAO;YACT,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACjC,IAAI,QAAQ,GAAmB,OAAO,CAAC;YACvC,IAAI,OAAO,CAAC,MAAM,KAAK,iBAAiB,IAAI,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtE,QAAQ,GAAG,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,sBAAsB,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3F,CAAC;iBAAM,IACL,OAAO,CAAC,MAAM,KAAK,qBAAqB;gBACxC,gBAAgB,CAAC,OAAO,CAAC;gBACzB,qBAAqB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,gBAAgB,CAAC,EAC/D,CAAC;gBACD,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACxC,CAAC;YACD,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC5B,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC1B,OAAO;QACT,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;CACF"}

package/dist/ACP Connector/official-kernel/run.d.ts

@@ -0,0 +1,8 @@
+import type { Readable, Writable } from "node:stream";
+export interface RunOfficialKernelOptions {
+    env?: NodeJS.ProcessEnv;
+    stdin?: Readable;
+    stdout?: Writable;
+    version: string;
+}
+export declare function runOfficialKernel(options: RunOfficialKernelOptions): Promise<void>;

package/dist/ACP Connector/official-kernel/run.js

@@ -0,0 +1,22 @@
+import { OfficialKernelProxy } from "./proxy.js";
+import { spawnOfficialKernel } from "./spawn.js";
+export async function runOfficialKernel(options) {
+    const env = options.env ?? process.env;
+    const child = spawnOfficialKernel(env);
+    const proxy = new OfficialKernelProxy({
+        child,
+        stdin: (options.stdin ?? process.stdin),
+        stdout: (options.stdout ?? process.stdout),
+        env,
+        version: options.version
+    });
+    try {
+        await proxy.start();
+    }
+    finally {
+        if (child.exitCode === null && child.signalCode === null) {
+            child.kill("SIGTERM");
+        }
+    }
+}
+//# sourceMappingURL=run.js.map

package/dist/ACP Connector/official-kernel/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../../ACP Connector/official-kernel/run.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AASjD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAiC;IACvE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,IAAI,mBAAmB,CAAC;QACpC,KAAK;QACL,KAAK,EAAE,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAa;QACnD,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAa;QACtD,GAAG;QACH,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YACzD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/ACP Connector/official-kernel/spawn.d.ts

@@ -0,0 +1,5 @@
+import { type ChildProcessWithoutNullStreams } from "node:child_process";
+export declare const DEFAULT_OFFICIAL_BIN: string;
+export declare function resolveOfficialBinary(environment?: NodeJS.ProcessEnv): string;
+export declare function officialSpawnArgs(binary: string): string[];
+export declare function spawnOfficialKernel(environment?: NodeJS.ProcessEnv): ChildProcessWithoutNullStreams;

package/dist/ACP Connector/official-kernel/spawn.js

@@ -0,0 +1,33 @@
+import { spawn } from "node:child_process";
+import { existsSync } from "node:fs";
+import { homedir } from "node:os";
+import path from "node:path";
+export const DEFAULT_OFFICIAL_BIN = path.join(homedir(), ".local/opt/agy-acp-server-agy_acp_server_20260818_01_RC01/agy-acp-server-canary");
+export function resolveOfficialBinary(environment = process.env) {
+    const configured = environment.PASEO_AGY_ACP_OFFICIAL_BIN?.trim();
+    return configured && configured.length > 0 ? configured : DEFAULT_OFFICIAL_BIN;
+}
+export function officialSpawnArgs(binary) {
+    const base = path.basename(binary);
+    if (base.endsWith(".par") || base === "agy_acp_server.par")
+        return ["--uid="];
+    return [];
+}
+export function spawnOfficialKernel(environment = process.env) {
+    const binary = resolveOfficialBinary(environment);
+    if (!existsSync(binary)) {
+        throw new Error(`official Antigravity ACP kernel is missing at ${binary}; set PASEO_AGY_ACP_OFFICIAL_BIN`);
+    }
+    const child = spawn(binary, officialSpawnArgs(binary), {
+        cwd: path.dirname(binary),
+        env: environment,
+        stdio: ["pipe", "pipe", "pipe"]
+    });
+    if (child.stdin === null || child.stdout === null || child.stderr === null) {
+        child.kill("SIGKILL");
+        throw new Error("official kernel stdio pipes are unavailable");
+    }
+    child.stderr.pipe(process.stderr);
+    return child;
+}
+//# sourceMappingURL=spawn.js.map

package/dist/ACP Connector/official-kernel/spawn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spawn.js","sourceRoot":"","sources":["../../../ACP Connector/official-kernel/spawn.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAuC,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC,IAAI,CAC3C,OAAO,EAAE,EACT,iFAAiF,CAClF,CAAC;AAEF,MAAM,UAAU,qBAAqB,CAAC,WAAW,GAAsB,OAAO,CAAC,GAAG;IAChF,MAAM,UAAU,GAAG,WAAW,CAAC,0BAA0B,EAAE,IAAI,EAAE,CAAC;IAClE,OAAO,UAAU,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,oBAAoB,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,KAAK,oBAAoB;QAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9E,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,WAAW,GAAsB,OAAO,CAAC,GAAG;IAE5C,MAAM,MAAM,GAAG,qBAAqB,CAAC,WAAW,CAAC,CAAC;IAClD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,iDAAiD,MAAM,kCAAkC,CAC1F,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,iBAAiB,CAAC,MAAM,CAAC,EAAE;QACrD,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QACzB,GAAG,EAAE,WAAW;QAChB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;KAChC,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC3E,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/Admission Controller/controller.d.ts

@@ -0,0 +1,338 @@
+import { type LinuxProcessEvidenceReaders } from "./process-evidence.js";
+export { isAllowedAdmissionActiveTurns, isAllowedAdmissionConcurrentStarts } from "./policy-limits.js";
+export interface AdmissionPolicy {
+    maxActiveTurns: number;
+    maxConcurrentStarts: number;
+    minStartIntervalMs: number;
+    queueTimeoutMs: number;
+    capacityCooldownMs: number;
+}
+export interface AdmissionControllerOptions {
+    databasePath: string;
+    policy: AdmissionPolicy;
+    encryptionKey?: Buffer;
+    contentFingerprintKey?: Buffer;
+    /** Test-only synchronous hook for proving rollback at the atomic dispatch boundary. */
+    faultInjection?: AdmissionControllerFaultInjection;
+}
+/** Test-only synchronous hooks for proving rollback at durable transaction midpoints. */
+export interface AdmissionControllerFaultInjection {
+    afterProcessIdentityPersisted?(): void;
+}
+interface EnqueueRequestBase {
+    requestId: string;
+    sessionId: string;
+    fingerprint: string;
+    provider: string;
+    model: string;
+    now: number;
+    ownerIdentity?: VerifiedLinuxConnectorIdentity;
+}
+export type EnqueueRequest = EnqueueRequestBase & {
+    agentId?: string;
+    parentId?: string;
+};
+export type ConfirmedProviderOutcome = "completed" | "failed" | "cancelled";
+export type RequestState = "queued" | "admitted" | "starting" | "dispatch_intent" | "dispatch_ambiguous" | "active" | "provider_terminal" | "completed" | "failed" | "cancelled" | "queue_timeout" | "recovery_required";
+export type PolicyEventState = "policy_steady" | "policy_soft_draining_to_1";
+export type SanitizedEventState = RequestState | PolicyEventState | "absent";
+export type SanitizedEventKind = "request_enqueued" | "request_cancelled" | "request_abandoned" | "request_queue_timed_out" | "request_admitted" | "request_starting" | "request_dispatch_intent" | "request_active" | "request_dispatch_ambiguous" | "request_provider_terminal" | "request_released" | "request_recovery_required" | "request_recovery_seat_released" | "queued_owner_dead" | "policy_drain_completed";
+/** Exact, identifier-free pagination input for the sanitized audit journal. */
+export interface SanitizedEventPageRequest {
+    afterEventSeq: number;
+    limit: number;
+}
+/** Audit-only state transition. It cannot be used to recover request payloads or identities. */
+export interface SanitizedAdmissionEvent {
+    readonly eventSeq: number;
+    readonly kind: SanitizedEventKind;
+    readonly fromState: SanitizedEventState;
+    readonly toState: SanitizedEventState;
+    readonly occurredAt: number;
+    readonly correlationHmac: string;
+}
+export interface StoredRequest {
+    requestId: string;
+    sessionId: string;
+    agentId: string;
+    fingerprint: string;
+    provider: string;
+    model: string;
+    state: RequestState;
+    enqueuedAt: number;
+}
+/** Terminal fact for the existing online ACP output path. */
+export interface LiveTurnCompletion {
+    readonly outcome: ConfirmedProviderOutcome;
+    readonly failure?: Readonly<{
+        readonly category: "provider_capacity" | "quota" | "auth" | "permission" | "timeout" | "transport" | "unknown";
+        readonly httpStatus?: number;
+        readonly code?: string;
+        readonly reason?: string;
+    }>;
+}
+/** Durable queue observation. It grants no admission or recovery authority. */
+export interface AdmissionQueueSnapshot {
+    readonly requestId: string;
+    readonly position: number;
+    readonly eligiblePosition: number | null;
+    readonly enqueuedAt: number;
+    readonly waitedMs: number;
+    readonly cooldownUntil: number | null;
+}
+export interface AdmissionLease {
+    leaseId: string;
+    requestId: string;
+    generation: number;
+    ownerInstanceId: string;
+}
+export type LeaseFence = Pick<AdmissionLease, "leaseId" | "generation" | "ownerInstanceId">;
+/** Nonterminal controller phases which need a startup recovery decision. */
+export type RecoverableDispatchPhase = "admitted" | "starting" | "dispatch_intent" | "dispatch_ambiguous" | "active" | "recovery_required";
+/** Immutable evidence for one Linux process instance. */
+export interface VerifiedLinuxProcessIdentity {
+    bootId: string;
+    pid: number;
+    startTimeTicks: string;
+    pidNamespaceInode: number;
+    ppid: number;
+    pgrp: number;
+    session: number;
+}
+/** Connector owner evidence paired with the connector's stable instance ID. */
+export interface VerifiedLinuxConnectorIdentity extends VerifiedLinuxProcessIdentity {
+    ownerInstanceId: string;
+    createdAt: string;
+}
+/** The only process record accepted at the irreversible dispatch boundary. */
+export interface VerifiedLinuxProcessRecord {
+    requestId: string;
+    leaseId: string;
+    generation: number;
+    ownerInstanceId: string;
+    processIdentity: {
+        connector: VerifiedLinuxConnectorIdentity;
+        child: VerifiedLinuxProcessIdentity;
+    };
+    promptChannel: "stdin" | "pty";
+}
+/** Durable process evidence available to startup recovery, never request content. */
+export interface RecoverableDispatchProcessIdentity {
+    readonly promptChannel: "stdin" | "pty";
+    readonly connector: VerifiedLinuxConnectorIdentity;
+    readonly child: VerifiedLinuxProcessIdentity;
+}
+/**
+ * One nonterminal dispatch candidate after connector startup. A null process
+ * identity is intentionally explicit: the caller must fail closed into
+ * recovery and must not resume or replay the dispatch from this inventory.
+ */
+export interface RecoverableDispatch {
+    readonly requestId: string;
+    readonly sessionId: string;
+    readonly provider: string;
+    readonly model: string;
+    readonly fence: LeaseFence;
+    readonly phase: RecoverableDispatchPhase;
+    readonly heartbeatAt: number;
+    readonly processIdentity: RecoverableDispatchProcessIdentity | null;
+}
+/** Durable queued-owner evidence for a request that has not dispatched. */
+export interface RecoverableQueuedOwner {
+    readonly requestId: string;
+    readonly owner: VerifiedLinuxConnectorIdentity;
+}
+export type LeaseSuspectReason = "heartbeat_expired" | "identity_unverifiable";
+export interface AdmissionRuntimeReaperReaders extends LinuxProcessEvidenceReaders {
+    listProcessIds(): readonly number[];
+}
+export interface AdmissionRuntimeReaperSummary {
+    readonly inspected: number;
+    readonly released: number;
+    readonly retained: number;
+    readonly markedRecoveryRequired: number;
+    readonly suspected: number;
+    readonly queuedSettled: number;
+}
+export type DispatchIntentFailureReason = "invalid_process_identity" | "stale_lease" | "conflicting_intent" | "transaction_fault";
+/** Result for the dispatcher identity callback. Success means dispatch_intent is already durable too. */
+export type ProcessIdentityRecordResult = {
+    status: "recorded";
+    idempotent: boolean;
+} | {
+    status: "not_recorded";
+    reason: DispatchIntentFailureReason;
+};
+/** Result for the dispatch boundary's following commit callback; only an exact durable replay succeeds. */
+export type DispatchIntentCommitResult = {
+    status: "committed";
+    idempotent: boolean;
+} | {
+    status: "not_committed";
+    reason: DispatchIntentFailureReason;
+};
+export declare class AdmissionConflictError extends Error {
+    constructor(_requestId: string);
+}
+export declare class PayloadExpiredError extends Error {
+    constructor(_requestId: string);
+}
+export declare class PayloadConflictError extends Error {
+    constructor(_requestId: string);
+}
+export declare class LeaseFenceError extends Error {
+    constructor(_leaseId: string);
+}
+/** Raised when durable recovery inventory data cannot be trusted. */
+export declare class RecoverableDispatchInventoryError extends Error {
+    constructor();
+}
+export declare class AdmissionMigrationError extends Error {
+    constructor(detail: string);
+}
+export declare class AdmissionRuntimeError extends Error {
+    constructor(message: string);
+}
+/**
+ * A local, cross-process admission plane. It deliberately refuses to infer
+ * that a dispatched turn is safe to replay after a crash.
+ */
+export declare class AdmissionController {
+    #private;
+    readonly databasePath: string;
+    readonly policy: AdmissionPolicy;
+    constructor(options: AdmissionControllerOptions);
+    close(): void;
+    get schemaVersion(): number;
+    enqueue(input: EnqueueRequest): {
+        requestId: string;
+        existed: boolean;
+    };
+    enqueueWithPayload(input: EnqueueRequest, plaintext: string, expiresAt: number): {
+        requestId: string;
+        existed: boolean;
+    };
+    persistPayload(requestId: string, plaintext: string, now: number, expiresAt: number): void;
+    readPayload(requestId: string, now: number): string;
+    /** Cancelling after admission needs process and provider-terminal evidence. */
+    cancelQueued(requestId: string, now: number): void;
+    admitNext(now: number, ownerInstanceId: string): AdmissionLease | null;
+    /**
+     * Atomically admit this request only when the global selector chose it.
+     * Callers may wait on their own request, but cannot bypass the controller's
+     * oldest-eligible and agent-fair ordering.
+     */
+    admitRequest(requestId: string, now: number, ownerInstanceId: string): AdmissionLease | null;
+    getQueueSnapshot(requestId: string, now: number): AdmissionQueueSnapshot | null;
+    markStarting(fence: LeaseFence, now: number): void;
+    /**
+     * Persist a verified Linux process record and dispatch_intent in one SQLite
+     * transaction. The following dispatch-boundary commit callback is an exact replay
+     * check, so no crash window exists between those two callbacks.
+     */
+    recordProcessIdentity(input: unknown): ProcessIdentityRecordResult;
+    /**
+     * Confirm the atomic identity-and-intent persistence. A fresh call performs
+     * the same transaction; a matching dispatch_intent record is idempotent.
+     */
+    commitDispatchIntent(input: unknown): DispatchIntentCommitResult;
+    markDispatchIntent(fence: LeaseFence, now: number): void;
+    markActive(fence: LeaseFence, now: number): void;
+    markDispatchAmbiguous(fence: LeaseFence, now: number): void;
+    /**
+     * End a reserved turn only when the Connector still has direct proof that no
+     * business prompt write occurred. This is terminal, never a requeue.
+     */
+    abandonBeforePrompt(fence: LeaseFence, now: number, outcome: Extract<ConfirmedProviderOutcome, "failed" | "cancelled">): void;
+    /** Retain an uncertain dispatch as visible capacity debt; never requeue it. */
+    markExecutionRecoveryRequired(fence: LeaseFence, now: number): void;
+    /**
+     * Release only the local seat after the Connector has independently proved
+     * that the persisted connector, child, and process group are all gone. The
+     * request deliberately remains recovery_required and cannot be replayed.
+     */
+    releaseExitedRecoverySeat(fence: LeaseFence, now: number): void;
+    /**
+     * Persist the terminal state and release the seat used by the existing live
+     * ACP update path. No delivery replay record is created.
+     */
+    completeLiveTurn(fence: LeaseFence, now: number, completion: LiveTurnCompletion): void;
+    heartbeat(fence: LeaseFence, now: number): void;
+    /**
+     * Runtime recovery is evidence-only: a stale heartbeat can mark suspicion,
+     * but only connector/child/process-group proof can release local capacity.
+     */
+    reapSuspects(now: number, readers: AdmissionRuntimeReaperReaders): AdmissionRuntimeReaperSummary;
+    setCapacityCooldown(provider: string, model: string, notBefore: number, now: number): void;
+    /**
+     * Read an identifier-free page of the append-only audit journal. The exact
+     * input shape deliberately provides no request/session/provider lookup seam.
+     */
+    readSanitizedEvents(input: unknown): readonly SanitizedAdmissionEvent[];
+    getRequest(requestId: string): StoredRequest | null;
+    /**
+     * Enumerate durable, nonterminal dispatches for connector startup recovery.
+     * This deliberately reads no prompt or outbox table, never decrypts data,
+     * and returns a null identity instead of implying that a dispatch is safe to
+     * resume when immutable process evidence is absent.
+     */
+    listRecoverableDispatches(): readonly RecoverableDispatch[];
+    /**
+     * Enumerate queued requests whose owning connector was durably recorded at
+     * enqueue time. This returns no payload and grants no replay authority.
+     */
+    listRecoverableQueuedOwners(): readonly RecoverableQueuedOwner[];
+    settleQueuedOwnerDeath(requestId: string, ownerInstanceId: string, now: number): boolean;
+    claimDurablePolicy(policy: AdmissionPolicy, ownerInstanceId: string, now: number): void;
+    assertDurablePolicyMatch(policy: AdmissionPolicy, ownerInstanceId: string, now: number): void;
+    beginSoftDrainTo1(ownerInstanceId: string, now: number): void;
+    private migrate;
+    private assertRenameColumnAvailable;
+    private createInitialV1Schema;
+    private migrateV1ToV2;
+    private migrateV2ToV3;
+    private transaction;
+    private runInjectedTransactionFault;
+    private persistProcessIdentityAndDispatchIntent;
+    /** A failed writer may inspect only a committed, exact winner; it never retries a write. */
+    private recheckDispatchIdentityAfterContention;
+    /** Reads the lease and identity under one snapshot so no partial winner can be inferred. */
+    private inspectDispatchIdentityContentionWinner;
+    private persistProcessIdentityAndDispatchIntentInTransaction;
+    private findLeaseProcessIdentity;
+    private insertLeaseProcessIdentity;
+    private persistQueuedOwnerReference;
+    private findQueuedOwnerIdentity;
+    private insertQueuedOwnerIdentity;
+    private expireQueued;
+    private activeLeaseCount;
+    private hasSeatCapacity;
+    private markSuspect;
+    private completeSoftDrainTo1IfSettled;
+    private hasDispatchCapacity;
+    private reserveAdmission;
+    private orderedQueuedRequests;
+    private selectEligibleRequest;
+    private isCooldownActive;
+    private cooldownUntil;
+    private requireLease;
+    private requireLeaseById;
+    private requireRequest;
+    private requireRequestState;
+    private requireEncryptionKey;
+    private requireContentFingerprintKey;
+    private journalTransition;
+    private encrypt;
+    private decrypt;
+    private enqueueRequest;
+    private insertPayload;
+    private contentFingerprint;
+    private payloadAad;
+    private policyFingerprint;
+    private assertDurablePolicyMatchInTransaction;
+    private readPolicyStateInTransaction;
+    private requirePolicyStateInTransaction;
+    private validatePayloadExpiry;
+    private transition;
+    private setLeasePhase;
+}