paseo-agy-acp 2.2.0

package/assets/official-kernel-compat/rc01/paseo_model_compat.py

@@ -0,0 +1,172 @@
+"""Local-only request compatibility profile for the RC01 official kernel."""
+
+from __future__ import annotations
+
+from collections import deque
+from typing import Any, Deque, Dict, Iterator, Optional, Set, Tuple
+
+SUPPORTED_NON_GEMINI_MODEL_IDS = frozenset(
+    {
+        "claude-sonnet-4-6",
+        "claude-opus-4-6-thinking",
+        "gpt-oss-120b-medium",
+    }
+)
+
+_MAX_OUTPUT_TOKENS_BY_MODEL_ID = {
+    "claude-sonnet-4-6": 64000,
+    "claude-opus-4-6-thinking": 64000,
+    "gpt-oss-120b-medium": 32768,
+}
+_GPT_OSS_MODEL_ID = "gpt-oss-120b-medium"
+
+__all__ = [
+    "SUPPORTED_NON_GEMINI_MODEL_IDS",
+    "is_catalog_model",
+    "transform_request",
+]
+
+
+def is_catalog_model(model_id: str) -> bool:
+    """Return whether a raw catalog entry is supported by the local profile."""
+    return isinstance(model_id, str) and (
+        model_id.startswith("gemini") or model_id in SUPPORTED_NON_GEMINI_MODEL_IDS
+    )
+
+
+def transform_request(model_id: str, body: Dict[str, Any]) -> Dict[str, Any]:
+    """Adapt a supported non-Gemini request in place and return the same body."""
+    if not isinstance(model_id, str) or not isinstance(body, dict):
+        return body
+    maximum = _MAX_OUTPUT_TOKENS_BY_MODEL_ID.get(model_id)
+    if maximum is None:
+        return body
+
+    _normalize_generation_config(body, maximum, model_id == _GPT_OSS_MODEL_ID)
+    _normalize_tool_schemas(body)
+    _normalize_tool_call_ids(body)
+    return body
+
+
+def _normalize_generation_config(body: Dict[str, Any], maximum: int, gpt_oss: bool) -> None:
+    config = body.get("generationConfig")
+    if not isinstance(config, dict):
+        config = {}
+
+    max_output_tokens = _clamp_max_output_tokens(config.get("maxOutputTokens"), maximum)
+    if gpt_oss:
+        body["generationConfig"] = {"maxOutputTokens": max_output_tokens}
+        return
+
+    config["maxOutputTokens"] = max_output_tokens
+    body["generationConfig"] = config
+
+
+def _clamp_max_output_tokens(value: Any, maximum: int) -> int:
+    if isinstance(value, int) and not isinstance(value, bool) and value > 0:
+        return min(value, maximum)
+    return maximum
+
+
+def _normalize_tool_schemas(body: Dict[str, Any]) -> None:
+    for declaration in _function_declarations(body):
+        if "parameters" in declaration:
+            declaration["parameters"] = _strip_schema(declaration["parameters"])
+            declaration.pop("parametersJsonSchema", None)
+        elif "parametersJsonSchema" in declaration:
+            declaration["parameters"] = _strip_schema(declaration.pop("parametersJsonSchema"))
+
+
+def _function_declarations(body: Dict[str, Any]) -> Iterator[Dict[str, Any]]:
+    tools = body.get("tools")
+    if isinstance(tools, dict):
+        tool_items = [tools]
+    elif isinstance(tools, list):
+        tool_items = tools
+    else:
+        return
+
+    for tool in tool_items:
+        if not isinstance(tool, dict):
+            continue
+        declarations = tool.get("functionDeclarations")
+        if isinstance(declarations, dict):
+            declarations = [declarations]
+        if not isinstance(declarations, list):
+            continue
+        for declaration in declarations:
+            if isinstance(declaration, dict):
+                yield declaration
+
+
+def _strip_schema(value: Any) -> Any:
+    if isinstance(value, dict):
+        return {key: _strip_schema(child) for key, child in value.items() if key != "$schema"}
+    if isinstance(value, list):
+        return [_strip_schema(child) for child in value]
+    return value
+
+
+def _normalize_tool_call_ids(body: Dict[str, Any]) -> None:
+    parts = list(_history_parts(body))
+    reserved_ids = {
+        call_id
+        for part in parts
+        for call_id in [_existing_id(part.get("functionCall"))]
+        if call_id is not None
+    }
+    pending_call_ids: Dict[str, Deque[str]] = {}
+    next_generated_call = 1
+
+    for part in parts:
+        function_call = part.get("functionCall")
+        if isinstance(function_call, dict):
+            call_id = _existing_id(function_call)
+            if call_id is None:
+                call_id, next_generated_call = _next_generated_call_id(reserved_ids, next_generated_call)
+                function_call["id"] = call_id
+            pending_call_ids.setdefault(_function_name(function_call), deque()).append(call_id)
+
+        function_response = part.get("functionResponse")
+        if not isinstance(function_response, dict):
+            continue
+        pending_for_name = pending_call_ids.get(_function_name(function_response))
+        if pending_for_name:
+            function_response["id"] = pending_for_name.popleft()
+
+
+def _history_parts(body: Dict[str, Any]) -> Iterator[Dict[str, Any]]:
+    contents = body.get("contents")
+    if not isinstance(contents, list):
+        return
+
+    for content in contents:
+        if not isinstance(content, dict):
+            continue
+        parts = content.get("parts")
+        if not isinstance(parts, list):
+            continue
+        for part in parts:
+            if isinstance(part, dict):
+                yield part
+
+
+def _existing_id(payload: Any) -> Optional[str]:
+    if not isinstance(payload, dict):
+        return None
+    value = payload.get("id")
+    return value if isinstance(value, str) and value else None
+
+
+def _function_name(payload: Dict[str, Any]) -> str:
+    name = payload.get("name")
+    return name if isinstance(name, str) else ""
+
+
+def _next_generated_call_id(reserved_ids: Set[str], next_index: int) -> Tuple[str, int]:
+    while True:
+        candidate = f"acp-tool-{next_index}"
+        next_index += 1
+        if candidate not in reserved_ids:
+            reserved_ids.add(candidate)
+            return candidate, next_index

package/dist/ACP Connector/acp/session/paseo-context.d.ts

@@ -0,0 +1,6 @@
+export declare const PASEO_DAEMON_CONTEXT_OPEN = "[Paseo daemon system context]";
+export declare const PASEO_DAEMON_CONTEXT_CLOSE = "[/Paseo daemon system context]";
+export declare function resolvePaseoHome(environment?: NodeJS.ProcessEnv): string;
+export declare function readPaseoDaemonAppendSystemPrompt(environment?: NodeJS.ProcessEnv): Promise<string>;
+export declare function withPaseoDaemonSystemContext(promptText: string, environment?: NodeJS.ProcessEnv): Promise<string>;
+export declare function wrapPaseoDaemonContextBlock(append: string): string;

package/dist/ACP Connector/acp/session/paseo-context.js

@@ -0,0 +1,83 @@
+import { readdir, readFile } from "node:fs/promises";
+import * as os from "node:os";
+import path from "node:path";
+const MAX_PASEO_APPEND_CHARS = 200_000;
+const PASEO_APPEND_RETRY_ATTEMPTS = 25;
+const PASEO_APPEND_RETRY_DELAY_MS = 20;
+export const PASEO_DAEMON_CONTEXT_OPEN = "[Paseo daemon system context]";
+export const PASEO_DAEMON_CONTEXT_CLOSE = "[/Paseo daemon system context]";
+async function findPaseoAgentState(dir, fileName, depth = 4) {
+    if (depth < 0)
+        return undefined;
+    let entries;
+    try {
+        entries = await readdir(dir, { withFileTypes: true });
+    }
+    catch {
+        return undefined;
+    }
+    for (const entry of entries) {
+        const child = path.join(dir, entry.name);
+        if (entry.isFile() && entry.name === fileName)
+            return child;
+    }
+    for (const entry of entries) {
+        if (!entry.isDirectory())
+            continue;
+        const found = await findPaseoAgentState(path.join(dir, entry.name), fileName, depth - 1);
+        if (found)
+            return found;
+    }
+    return undefined;
+}
+function delay(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+export function resolvePaseoHome(environment = process.env) {
+    const configured = environment.PASEO_HOME?.trim();
+    if (configured) {
+        if (configured === "~")
+            return os.homedir();
+        if (configured.startsWith("~/") || configured.startsWith("~\\")) {
+            return path.join(os.homedir(), configured.slice(2));
+        }
+        return configured;
+    }
+    const homeDir = environment.HOME || os.homedir();
+    return homeDir ? path.join(homeDir, ".paseo") : "";
+}
+export async function readPaseoDaemonAppendSystemPrompt(environment = process.env) {
+    const home = resolvePaseoHome(environment);
+    const agentId = environment.PASEO_AGENT_ID;
+    if (!home || !agentId || agentId.includes("/") || agentId.includes("\\"))
+        return "";
+    for (let attempt = 0; attempt < PASEO_APPEND_RETRY_ATTEMPTS; attempt++) {
+        try {
+            const statePath = await findPaseoAgentState(path.join(home, "agents"), `${agentId}.json`);
+            if (statePath) {
+                const state = JSON.parse(await readFile(statePath, "utf8"));
+                const append = state.persistence?.metadata?.daemonAppendSystemPrompt;
+                if (typeof append === "string" && append.trim()) {
+                    return append.trim().slice(0, MAX_PASEO_APPEND_CHARS);
+                }
+            }
+        }
+        catch {
+            // Paseo may still be writing the state file. Retry briefly, then fail open.
+        }
+        if (attempt < PASEO_APPEND_RETRY_ATTEMPTS - 1) {
+            await delay(PASEO_APPEND_RETRY_DELAY_MS);
+        }
+    }
+    return "";
+}
+export async function withPaseoDaemonSystemContext(promptText, environment = process.env) {
+    const append = await readPaseoDaemonAppendSystemPrompt(environment);
+    if (!append)
+        return promptText;
+    return [PASEO_DAEMON_CONTEXT_OPEN, append, PASEO_DAEMON_CONTEXT_CLOSE, "", promptText].join("\n");
+}
+export function wrapPaseoDaemonContextBlock(append) {
+    return [PASEO_DAEMON_CONTEXT_OPEN, append, PASEO_DAEMON_CONTEXT_CLOSE].join("\n");
+}
+//# sourceMappingURL=paseo-context.js.map

package/dist/ACP Connector/acp/session/paseo-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paseo-context.js","sourceRoot":"","sources":["../../../../ACP Connector/acp/session/paseo-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,sBAAsB,GAAG,OAAO,CAAC;AACvC,MAAM,2BAA2B,GAAG,EAAE,CAAC;AACvC,MAAM,2BAA2B,GAAG,EAAE,CAAC;AAEvC,MAAM,CAAC,MAAM,yBAAyB,GAAG,+BAA+B,CAAC;AACzE,MAAM,CAAC,MAAM,0BAA0B,GAAG,gCAAgC,CAAC;AAE3E,KAAK,UAAU,mBAAmB,CAChC,GAAW,EACX,QAAgB,EAChB,KAAK,GAAG,CAAC;IAET,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAChC,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;IAC9D,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;YAAE,SAAS;QACnC,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QACzF,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,WAAW,GAAsB,OAAO,CAAC,GAAG;IAC3E,MAAM,UAAU,GAAG,WAAW,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;IAClD,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,UAAU,KAAK,GAAG;YAAE,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC;QAC5C,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IACjD,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACrD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,WAAW,GAAsB,OAAO,CAAC,GAAG;IAE5C,MAAM,IAAI,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,WAAW,CAAC,cAAc,CAAC;IAC3C,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpF,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,2BAA2B,EAAE,OAAO,EAAE,EAAE,CAAC;QACvE,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,GAAG,OAAO,OAAO,CAAC,CAAC;YAC1F,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAEzD,CAAC;gBACF,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,EAAE,QAAQ,EAAE,wBAAwB,CAAC;gBACrE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;oBAChD,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC;gBACxD,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,4EAA4E;QAC9E,CAAC;QACD,IAAI,OAAO,GAAG,2BAA2B,GAAG,CAAC,EAAE,CAAC;YAC9C,MAAM,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,UAAkB,EAClB,WAAW,GAAsB,OAAO,CAAC,GAAG;IAE5C,MAAM,MAAM,GAAG,MAAM,iCAAiC,CAAC,WAAW,CAAC,CAAC;IACpE,IAAI,CAAC,MAAM;QAAE,OAAO,UAAU,CAAC;IAC/B,OAAO,CAAC,yBAAyB,EAAE,MAAM,EAAE,0BAA0B,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpG,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAAc;IACxD,OAAO,CAAC,yBAAyB,EAAE,MAAM,EAAE,0BAA0B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpF,CAAC"}

package/dist/ACP Connector/acp/session/turn-scheduler.d.ts

@@ -0,0 +1,90 @@
+/** Thrown when a claim is aborted; unwinds the turn pipeline to its reporter. */
+export declare class TurnCancelled extends Error {
+    constructor(message?: string);
+}
+export declare function isTurnCancelled(error: unknown): boolean;
+/**
+ * Run `fn` for an abort signal, now or later. Plain `addEventListener` never
+ * fires for a signal that is already aborted, which repeatedly produced turns
+ * that ran after they had been cancelled.
+ */
+export declare function onAbort(signal: AbortSignal, fn: () => void): () => void;
+export type TurnKind = "foreground" | "queued" | "steer";
+/** A request's ownership of (or reservation on) the session's single turn slot. */
+export declare class TurnClaim {
+    readonly kind: TurnKind;
+    /**
+     * For claimed queued prompts, the client-visible queue id. Lets a targeted
+     * `session/cancel` find the turn its queued item grew into, so it aborts
+     * exactly that claim instead of falling back to a session-wide abort.
+     */
+    readonly tag?: string;
+    private readonly controller;
+    private isReleased;
+    constructor(kind: TurnKind, parent?: AbortSignal, tag?: string);
+    get signal(): AbortSignal;
+    get aborted(): boolean;
+    get released(): boolean;
+    abort(): void;
+    throwIfAborted(): void;
+    /** @internal — the scheduler marks a claim finished exactly once. */
+    markReleased(): boolean;
+}
+/**
+ * Await `promise`, rejecting with `TurnCancelled` as soon as `signal` aborts.
+ *
+ * The single implementation behind invariant I4: every client-bound delivery
+ * goes through here (directly, or via `raceClaim` for turn claims), so a
+ * client transport that never settles unwinds on cancel/close instead of
+ * pinning the turn slot or the queue-preparation chain.
+ */
+export declare function raceSignal<T>(promise: Promise<T>, signal: AbortSignal): Promise<T>;
+/** Await `promise`, rejecting as soon as `claim` is aborted. */
+export declare function raceClaim<T>(promise: Promise<T>, claim: TurnClaim): Promise<T>;
+/** Lazily attach a scheduler to a session-like object. */
+export declare function turnsOf(session: {
+    turns?: TurnScheduler;
+}): TurnScheduler;
+export declare class TurnScheduler {
+    private active?;
+    /** Steer reservations in FIFO order; the head is next to take the slot. */
+    private reservations;
+    private waiters;
+    private closed;
+    /** True when a turn is running or a steer has reserved the next turn. */
+    busy(): boolean;
+    get activeClaim(): TurnClaim | undefined;
+    /**
+     * Take the slot for a request that found the session idle. Synchronous by
+     * design: no await may separate the busy check from the claim (I1).
+     */
+    claimIdle(kind: Exclude<TurnKind, "steer">, parent?: AbortSignal, tag?: string): TurnClaim;
+    /**
+     * Reserve the next turn for a steer. Synchronous, so the claim — and its
+     * abort controller — exist before the first await (I1, I2). The reservation
+     * keeps the session `busy()`, so no queued follow-up can slip in front.
+     */
+    reserveSteer(parent?: AbortSignal): TurnClaim;
+    /**
+     * Wait for `claim` to reach the head of the reservation queue, stop whatever
+     * is running, and hand it the slot. Throws `TurnCancelled` if the claim is
+     * aborted at any point, including while the backend is being killed.
+     *
+     * A reservation stays in the queue until it is *released*, not merely until
+     * it is promoted. Otherwise a later steer would reach the head while an
+     * earlier one was running and displace it before it ever reached the backend.
+     */
+    promote(claim: TurnClaim, cancelActive: () => Promise<void>): Promise<void>;
+    /**
+     * Finish a claim. Idempotent, and safe to call from a `finally` on any exit
+     * path — success, cancellation, or setup failure.
+     */
+    release(claim: TurnClaim): void;
+    /** Abort every live claim (`session/cancel`). Queued items are untouched. */
+    abortAll(): void;
+    /** Abort everything and refuse further claims (close / delete / evict). */
+    close(): void;
+    private change;
+    /** Resolve on the next ownership change, or reject if `claim` is aborted. */
+    private nextChange;
+}

package/dist/ACP Connector/acp/session/turn-scheduler.js

@@ -0,0 +1,247 @@
+// Turn ownership for a single ACP session.
+//
+// One session may only run one prompt turn against the agy backend at a time.
+// Requests compete for that slot in three ways: an idle request claims it
+// directly, a `queue` request waits in FIFO, and a `steer` request reserves it
+// and displaces whatever is running.
+//
+// The invariants below exist because ad-hoc ownership flags spread across the
+// prompt handlers made every `await` a window where the session could be
+// half-owned, and every such window was a cancellation bug:
+//
+//  I1. A claim is one object that exists from admission until the turn is fully
+//      finished — including a steer's wait for the previous turn to stop. There
+//      is no phase where a request owns the session but has no claim.
+//  I2. Every claim carries its AbortController from the moment it is created,
+//      so cancel/close/evict always have something to abort in every phase.
+//  I3. Cancellation unwinds by throwing (`TurnCancelled`), not by polling a
+//      flag after each await. Callers cannot forget to re-check.
+//  I4. Every client-bound delivery is raced against the turn's claim (or a
+//      queued item's controller). agy's prompt loop awaits each update
+//      callback, so a client transport that never settles would otherwise pin
+//      the slot forever — killing the backend cannot settle a wedged notify.
+/** Thrown when a claim is aborted; unwinds the turn pipeline to its reporter. */
+export class TurnCancelled extends Error {
+    constructor(message = "turn cancelled") {
+        super(message);
+        this.name = "TurnCancelled";
+    }
+}
+export function isTurnCancelled(error) {
+    const name = error?.name;
+    return error instanceof TurnCancelled || name === "TurnCancelled" || name === "AbortError";
+}
+/**
+ * Run `fn` for an abort signal, now or later. Plain `addEventListener` never
+ * fires for a signal that is already aborted, which repeatedly produced turns
+ * that ran after they had been cancelled.
+ */
+export function onAbort(signal, fn) {
+    if (signal.aborted) {
+        fn();
+        return () => { };
+    }
+    signal.addEventListener("abort", fn, { once: true });
+    return () => signal.removeEventListener("abort", fn);
+}
+/** A request's ownership of (or reservation on) the session's single turn slot. */
+export class TurnClaim {
+    kind;
+    /**
+     * For claimed queued prompts, the client-visible queue id. Lets a targeted
+     * `session/cancel` find the turn its queued item grew into, so it aborts
+     * exactly that claim instead of falling back to a session-wide abort.
+     */
+    tag;
+    controller = new AbortController();
+    isReleased = false;
+    constructor(kind, parent, tag) {
+        this.kind = kind;
+        this.tag = tag;
+        // A request-scoped signal (v1 `session/prompt` cancellation) folds into the
+        // claim, so downstream code only ever consults one signal.
+        if (parent)
+            onAbort(parent, () => this.abort());
+    }
+    get signal() {
+        return this.controller.signal;
+    }
+    get aborted() {
+        return this.controller.signal.aborted;
+    }
+    get released() {
+        return this.isReleased;
+    }
+    abort() {
+        if (!this.controller.signal.aborted)
+            this.controller.abort(new TurnCancelled());
+    }
+    throwIfAborted() {
+        if (this.aborted)
+            throw new TurnCancelled();
+    }
+    /** @internal — the scheduler marks a claim finished exactly once. */
+    markReleased() {
+        if (this.isReleased)
+            return false;
+        this.isReleased = true;
+        return true;
+    }
+}
+/**
+ * Await `promise`, rejecting with `TurnCancelled` as soon as `signal` aborts.
+ *
+ * The single implementation behind invariant I4: every client-bound delivery
+ * goes through here (directly, or via `raceClaim` for turn claims), so a
+ * client transport that never settles unwinds on cancel/close instead of
+ * pinning the turn slot or the queue-preparation chain.
+ */
+export function raceSignal(promise, signal) {
+    return new Promise((resolve, reject) => {
+        if (signal.aborted) {
+            reject(new TurnCancelled());
+            return;
+        }
+        const off = onAbort(signal, () => reject(new TurnCancelled()));
+        promise.then((value) => {
+            off();
+            resolve(value);
+        }, (error) => {
+            off();
+            reject(error);
+        });
+    });
+}
+/** Await `promise`, rejecting as soon as `claim` is aborted. */
+export function raceClaim(promise, claim) {
+    return raceSignal(promise, claim.signal);
+}
+/** Lazily attach a scheduler to a session-like object. */
+export function turnsOf(session) {
+    return (session.turns ??= new TurnScheduler());
+}
+export class TurnScheduler {
+    active;
+    /** Steer reservations in FIFO order; the head is next to take the slot. */
+    reservations = [];
+    waiters = new Set();
+    closed = false;
+    /** True when a turn is running or a steer has reserved the next turn. */
+    busy() {
+        return this.active !== undefined || this.reservations.length > 0;
+    }
+    get activeClaim() {
+        return this.active;
+    }
+    /**
+     * Take the slot for a request that found the session idle. Synchronous by
+     * design: no await may separate the busy check from the claim (I1).
+     */
+    claimIdle(kind, parent, tag) {
+        if (this.busy()) {
+            // Callers must check `busy()` with no await in between; overwriting the
+            // slot here would silently orphan a running turn.
+            throw new Error("cannot claim a busy session turn slot");
+        }
+        const claim = new TurnClaim(kind, parent, tag);
+        this.active = claim;
+        if (this.closed)
+            claim.abort();
+        return claim;
+    }
+    /**
+     * Reserve the next turn for a steer. Synchronous, so the claim — and its
+     * abort controller — exist before the first await (I1, I2). The reservation
+     * keeps the session `busy()`, so no queued follow-up can slip in front.
+     */
+    reserveSteer(parent) {
+        const claim = new TurnClaim("steer", parent);
+        this.reservations.push(claim);
+        if (this.closed)
+            claim.abort();
+        return claim;
+    }
+    /**
+     * Wait for `claim` to reach the head of the reservation queue, stop whatever
+     * is running, and hand it the slot. Throws `TurnCancelled` if the claim is
+     * aborted at any point, including while the backend is being killed.
+     *
+     * A reservation stays in the queue until it is *released*, not merely until
+     * it is promoted. Otherwise a later steer would reach the head while an
+     * earlier one was running and displace it before it ever reached the backend.
+     */
+    async promote(claim, cancelActive) {
+        claim.throwIfAborted();
+        while (this.reservations[0] !== claim) {
+            if (!this.reservations.includes(claim))
+                throw new TurnCancelled();
+            await this.nextChange(claim);
+        }
+        const displaced = this.active;
+        if (displaced) {
+            displaced.abort();
+            // Cancellable while the backend shuts down: a stop arriving during a slow
+            // kill must not be swallowed and then followed by the replacement turn.
+            await raceClaim(cancelActive(), claim);
+            while (this.active)
+                await this.nextChange(claim);
+        }
+        claim.throwIfAborted();
+        if (this.reservations[0] !== claim)
+            throw new TurnCancelled();
+        this.active = claim;
+        this.change();
+    }
+    /**
+     * Finish a claim. Idempotent, and safe to call from a `finally` on any exit
+     * path — success, cancellation, or setup failure.
+     */
+    release(claim) {
+        if (!claim.markReleased())
+            return;
+        if (this.active === claim)
+            this.active = undefined;
+        const idx = this.reservations.indexOf(claim);
+        if (idx >= 0)
+            this.reservations.splice(idx, 1);
+        this.change();
+    }
+    /** Abort every live claim (`session/cancel`). Queued items are untouched. */
+    abortAll() {
+        this.active?.abort();
+        for (const reservation of [...this.reservations])
+            reservation.abort();
+    }
+    /** Abort everything and refuse further claims (close / delete / evict). */
+    close() {
+        this.closed = true;
+        this.abortAll();
+        this.change();
+    }
+    change() {
+        const pending = [...this.waiters];
+        this.waiters.clear();
+        for (const waiter of pending)
+            waiter();
+    }
+    /** Resolve on the next ownership change, or reject if `claim` is aborted. */
+    nextChange(claim) {
+        return new Promise((resolve, reject) => {
+            if (claim.aborted) {
+                reject(new TurnCancelled());
+                return;
+            }
+            let off = () => { };
+            const waiter = () => {
+                off();
+                resolve();
+            };
+            this.waiters.add(waiter);
+            off = onAbort(claim.signal, () => {
+                this.waiters.delete(waiter);
+                reject(new TurnCancelled());
+            });
+        });
+    }
+}
+//# sourceMappingURL=turn-scheduler.js.map

package/dist/ACP Connector/acp/session/turn-scheduler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"turn-scheduler.js","sourceRoot":"","sources":["../../../../ACP Connector/acp/session/turn-scheduler.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,EAAE;AACF,8EAA8E;AAC9E,0EAA0E;AAC1E,+EAA+E;AAC/E,qCAAqC;AACrC,EAAE;AACF,8EAA8E;AAC9E,yEAAyE;AACzE,4DAA4D;AAC5D,EAAE;AACF,gFAAgF;AAChF,gFAAgF;AAChF,sEAAsE;AACtE,8EAA8E;AAC9E,4EAA4E;AAC5E,4EAA4E;AAC5E,iEAAiE;AACjE,2EAA2E;AAC3E,uEAAuE;AACvE,8EAA8E;AAC9E,6EAA6E;AAE7E,iFAAiF;AACjF,MAAM,OAAO,aAAc,SAAQ,KAAK;IACtC,YAAY,OAAO,GAAG,gBAAgB;QACpC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAED,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,MAAM,IAAI,GAAI,KAA+C,EAAE,IAAI,CAAC;IACpE,OAAO,KAAK,YAAY,aAAa,IAAI,IAAI,KAAK,eAAe,IAAI,IAAI,KAAK,YAAY,CAAC;AAC7F,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,OAAO,CAAC,MAAmB,EAAE,EAAc;IACzD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,EAAE,EAAE,CAAC;QACL,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AACvD,CAAC;AAID,mFAAmF;AACnF,MAAM,OAAO,SAAS;IACX,IAAI,CAAW;IACxB;;;;OAIG;IACM,GAAG,CAAU;IACL,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IAC5C,UAAU,GAAG,KAAK,CAAC;IAE3B,YAAY,IAAc,EAAE,MAAoB,EAAE,GAAY;QAC5D,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,4EAA4E;QAC5E,2DAA2D;QAC3D,IAAI,MAAM;YAAE,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;IAChC,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC;IACxC,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,KAAK;QACH,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO;YAAE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,aAAa,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,cAAc;QACZ,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,aAAa,EAAE,CAAC;IAC9C,CAAC;IAED,qEAAqE;IACrE,YAAY;QACV,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO,KAAK,CAAC;QAClC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CAAI,OAAmB,EAAE,MAAmB;IACpE,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC,CAAC;YAC5B,OAAO;QACT,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC,CAAC,CAAC;QAC/D,OAAO,CAAC,IAAI,CACV,CAAC,KAAK,EAAE,EAAE;YACR,GAAG,EAAE,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,EACD,CAAC,KAAK,EAAE,EAAE;YACR,GAAG,EAAE,CAAC;YACN,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,SAAS,CAAI,OAAmB,EAAE,KAAgB;IAChE,OAAO,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,OAAO,CAAC,OAAkC;IACxD,OAAO,CAAC,OAAO,CAAC,KAAK,KAAK,IAAI,aAAa,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,OAAO,aAAa;IAChB,MAAM,CAAa;IAC3B,2EAA2E;IACnE,YAAY,GAAgB,EAAE,CAAC;IAC/B,OAAO,GAAG,IAAI,GAAG,EAAc,CAAC;IAChC,MAAM,GAAG,KAAK,CAAC;IAEvB,yEAAyE;IACzE,IAAI;QACF,OAAO,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;IACnE,CAAC;IAED,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;;OAGG;IACH,SAAS,CAAC,IAAgC,EAAE,MAAoB,EAAE,GAAY;QAC5E,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YAChB,wEAAwE;YACxE,kDAAkD;YAClD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,IAAI,CAAC,MAAM;YAAE,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;OAIG;IACH,YAAY,CAAC,MAAoB;QAC/B,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,IAAI,CAAC,MAAM;YAAE,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,OAAO,CAAC,KAAgB,EAAE,YAAiC;QAC/D,KAAK,CAAC,cAAc,EAAE,CAAC;QAEvB,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;YACtC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,aAAa,EAAE,CAAC;YAClE,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC;QAC9B,IAAI,SAAS,EAAE,CAAC;YACd,SAAS,CAAC,KAAK,EAAE,CAAC;YAClB,0EAA0E;YAC1E,wEAAwE;YACxE,MAAM,SAAS,CAAC,YAAY,EAAE,EAAE,KAAK,CAAC,CAAC;YACvC,OAAO,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACnD,CAAC;QAED,KAAK,CAAC,cAAc,EAAE,CAAC;QACvB,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,KAAK;YAAE,MAAM,IAAI,aAAa,EAAE,CAAC;QAC9D,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,MAAM,EAAE,CAAC;IAChB,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,KAAgB;QACtB,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE;YAAE,OAAO;QAClC,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK;YAAE,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACnD,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,GAAG,IAAI,CAAC;YAAE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;IAChB,CAAC;IAED,6EAA6E;IAC7E,QAAQ;QACN,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;QACrB,KAAK,MAAM,WAAW,IAAI,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC;YAAE,WAAW,CAAC,KAAK,EAAE,CAAC;IACxE,CAAC;IAED,2EAA2E;IAC3E,KAAK;QACH,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,IAAI,CAAC,MAAM,EAAE,CAAC;IAChB,CAAC;IAEO,MAAM;QACZ,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,KAAK,MAAM,MAAM,IAAI,OAAO;YAAE,MAAM,EAAE,CAAC;IACzC,CAAC;IAED,6EAA6E;IACrE,UAAU,CAAC,KAAgB;QACjC,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC3C,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClB,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC,CAAC;gBAC5B,OAAO;YACT,CAAC;YACD,IAAI,GAAG,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;YACnB,MAAM,MAAM,GAAG,GAAG,EAAE;gBAClB,GAAG,EAAE,CAAC;gBACN,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACzB,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE;gBAC/B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC5B,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC,CAAC;YAC9B,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/ACP Connector/admission/dispatch-boundary.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Request-scoped stdin write fence used by Admission around one official
+ * `session/prompt` dispatch. The official kernel owns process creation; this
+ * boundary only sequences prepare → write → settle.
+ */
+export interface AgyAdmissionDispatchBoundary {
+    prepare(processId: number): void;
+    beforePromptWrite(): void;
+    afterPromptWrite(): void;
+}
+export declare class AgyCliError extends Error {
+    readonly command: string[];
+    readonly exitCode: number | null;
+    readonly stderr: string;
+    constructor(message: string, command: string[], exitCode: number | null, stderr: string);
+}
+/** Provider failure proven terminal by the official kernel or a classified 5xx. */
+export declare class AgyTerminalProviderError extends AgyCliError {
+}

package/dist/ACP Connector/admission/dispatch-boundary.js

@@ -0,0 +1,16 @@
+export class AgyCliError extends Error {
+    command;
+    exitCode;
+    stderr;
+    constructor(message, command, exitCode, stderr) {
+        super(message);
+        this.name = "AgyCliError";
+        this.command = command;
+        this.exitCode = exitCode;
+        this.stderr = stderr;
+    }
+}
+/** Provider failure proven terminal by the official kernel or a classified 5xx. */
+export class AgyTerminalProviderError extends AgyCliError {
+}
+//# sourceMappingURL=dispatch-boundary.js.map

package/dist/ACP Connector/admission/dispatch-boundary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch-boundary.js","sourceRoot":"","sources":["../../../ACP Connector/admission/dispatch-boundary.ts"],"names":[],"mappings":"AAWA,MAAM,OAAO,WAAY,SAAQ,KAAK;IAC3B,OAAO,CAAW;IAClB,QAAQ,CAAgB;IACxB,MAAM,CAAS;IAExB,YAAY,OAAe,EAAE,OAAiB,EAAE,QAAuB,EAAE,MAAc;QACrF,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;QAC1B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,mFAAmF;AACnF,MAAM,OAAO,wBAAyB,SAAQ,WAAW;CAAG"}