paseo-agy-acp 2.3.2 → 2.4.1

package/CHANGELOG.md

@@ -2,6 +2,45 @@
 
 All notable changes to `paseo-agy-acp` are recorded here.
 
+## 2.4.1 - 2026-09-26
+
+### Fixed
+
+- Forward the official kernel's MCP callback through a local bridge. The kernel
+  opens that callback with protocol date `2026-07-28`, and Paseo rejects that
+  date. The bridge presents `2025-11-25`, which both sides accept, on
+  `session/new`, `session/load`, and `session/resume`.
+
+### Verification
+
+- Complete validation: 38 test files, 222 passed, 1 skipped; architecture and
+  secret checks passed. `session/new`, `session/load`, and `session/resume`
+  each hand the kernel a local bridge URL, and a `2026-07-28` initialize is
+  delivered upstream as `2025-11-25`.
+
+## 2.4.0 - 2026-09-25
+
+### Changed
+
+- On first start, download the official Antigravity ACP 1.2.1 archive that
+  matches the current operating system. The npm package stores the official
+  URLs and does not contain the kernels. Linux x86_64 also installs the local
+  compatibility wrapper. A custom `PASEO_AGY_ACP_OFFICIAL_BIN` that is not a
+  managed path is left unchanged.
+- Pin the official Antigravity ACP kernel to registry `antigravity-acp` 1.2.1.
+  The local compatibility markers stay the same: the CCPA proxy is unchanged,
+  and the Gemini-only catalog filter is still rewritten in place. `server.py`
+  stays unmodified.
+- Activating a new pin generation replaces the active wrapper. The previous
+  generation stays on disk and is not a lifecycle rollback target.
+
+### Verification
+
+- Hashes checked against the Linux x86_64 zip published 2026-09-23.
+- Complete validation: 37 test files, 218 passed, 1 skipped; architecture and
+  secret checks passed. A live `session/new` on the 1.2.1 compatibility wrapper
+  returned Gemini 3.8 plus the entitled Claude and GPT-OSS ids.
+
 ## 2.3.2 - 2026-09-24
 
 ### Fixed

package/README.md

@@ -5,7 +5,7 @@
 **Reliable Paseo adapter for Google's official Antigravity ACP kernel**
 
 [![License](https://img.shields.io/badge/license-Apache%202.0-blue?style=flat-square)](./LICENSE)
-[![Version](https://img.shields.io/badge/version-2.3.2-blue?style=flat-square)](./package.json)
+[![Version](https://img.shields.io/badge/version-2.4.1-blue?style=flat-square)](./package.json)
 [![npm](https://img.shields.io/npm/v/paseo-agy-acp?style=flat-square)](https://www.npmjs.com/package/paseo-agy-acp)
 [![Node](https://img.shields.io/badge/node-%3E%3D22-brightgreen?style=flat-square)](./package.json)
 [![ACP](https://img.shields.io/badge/ACP-NDJSON%20v1-8A2BE2?style=flat-square)](https://agentclientprotocol.com)
@@ -104,25 +104,27 @@ Paseo agents.
 
 - **Paseo** with Generic ACP provider support
 - **Node.js 22 or newer**
-- A locally installed official Antigravity ACP kernel wrapper or `.par`
 - An Antigravity account able to complete official `oauth-personal`
 - Linux filesystem ownership and mode support when Admission is enabled
 
-Set `PASEO_AGY_ACP_OFFICIAL_BIN` unless the kernel already exists at the
-maintainer-host default pin. If this variable points directly at a `.par`, the
-adapter starts it from its own directory and, on Linux, appends the official
-`--uid=` launch flag.
+On first start the adapter downloads the official Antigravity ACP 1.2.1 archive
+for the current operating system from Google. The npm package does not contain
+those archives. Linux x86_64 also installs the local compatibility wrapper.
+Leave `PASEO_AGY_ACP_OFFICIAL_BIN` unset, or keep it pointed at the managed
+wrapper. A different existing path is used as-is.
 
 <!-- readme:quickstart -->
 ## Quickstart
 
-### 1. Point to the official kernel and authenticate
+### 1. Authenticate
 
 ```bash
-export PASEO_AGY_ACP_OFFICIAL_BIN="/absolute/path/to/agy-acp-server-wrapper-or.par"
-npx -y paseo-agy-acp@2.3.2 --login
+npx -y paseo-agy-acp@2.4.1 --login
 ```
 
+The first run downloads and configures official kernel 1.2.1. That download is
+about 320 MiB and stays under `~/.local/opt/`.
+
 OAuth is completed by the official kernel. Its tokens remain in the kernel's
 own state and are not printed by this adapter.
 
@@ -134,7 +136,7 @@ delegation.
 ```bash
 export AGY_ACP_STATE_DIR="$HOME/.local/state/paseo-agy-acp/account-name"
 install -d -m 700 "$AGY_ACP_STATE_DIR"
-npx -y --package=paseo-agy-acp@2.3.2 \
+npx -y --package=paseo-agy-acp@2.4.1 \
   agy-acp-prepare-state "$AGY_ACP_STATE_DIR"
 ```
 
@@ -151,9 +153,8 @@ Add or update the provider in `$PASEO_HOME/config.json` or
   "providers": {
     "antigravity": {
       "type": "acp",
-      "command": ["npx", "-y", "paseo-agy-acp@2.3.2"],
+      "command": ["npx", "-y", "paseo-agy-acp@2.4.1"],
       "env": {
-        "PASEO_AGY_ACP_OFFICIAL_BIN": "/absolute/path/to/agy-acp-server-wrapper-or.par",
         "AGY_ACP_ADMISSION_ENABLED": "true",
         "AGY_ACP_STATE_DIR": "/home/YOU/.local/state/paseo-agy-acp/account-name"
       }
@@ -196,6 +197,15 @@ policy-change procedures are in [Admission operations](docs/operations/admission
 | `dangerously-skip-permissions` | `yolo` |
 | `plan` | `default` (the official kernel has no plan mode) |
 
+Official `yolo` and Paseo's Auto Accept (`features.auto_accept`) are
+separate switches. An unanswered `session/request_permission` keeps
+`session/prompt` open, so the agent can stay `running` after assistant
+text is already visible. For unattended work, enable Auto Accept or
+approve with `paseo permit ls` / `paseo permit allow`, and use `yolo`
+when you also want the kernel to skip tool confirmation. This adapter
+does not treat displayed text as `end_turn`. See
+[#11](https://github.com/tiezbro/paseo-agy-acp/issues/11).
+
 `PASEO_AGY_ACP_KERNEL=legacy` and `--legacy-kernel` fail closed. The official
 kernel is the only execution path.
 
@@ -216,6 +226,10 @@ usable name and description.
 - Restart Paseo after changing provider command, environment, or kernel path.
 - Enabled Admission with missing identity, unsafe state permissions, or invalid
   policy refuses to start instead of silently running unfenced.
+- A turn that stays `running` after visible assistant output is often a
+  pending permission card, not a missing kernel completion. Check Auto Accept
+  and `paseo permit ls`. Paseo's `Worked for …` duration is wall-clock and
+  includes those waits.
 - Tool quality, image generation, backend quota, and provider error text remain
   owned by the official kernel and Google backend.
 - For reproducible upgrades or rollback, pin a three-part npm version in the

package/README.zh-CN.md

@@ -5,7 +5,7 @@
 **Google 官方 Antigravity ACP 内核面向 Paseo 的可靠产品适配器**
 
 [![License](https://img.shields.io/badge/license-Apache%202.0-blue?style=flat-square)](./LICENSE)
-[![Version](https://img.shields.io/badge/version-2.3.2-blue?style=flat-square)](./package.json)
+[![Version](https://img.shields.io/badge/version-2.4.1-blue?style=flat-square)](./package.json)
 [![npm](https://img.shields.io/npm/v/paseo-agy-acp?style=flat-square)](https://www.npmjs.com/package/paseo-agy-acp)
 [![Node](https://img.shields.io/badge/node-%3E%3D22-brightgreen?style=flat-square)](./package.json)
 [![ACP](https://img.shields.io/badge/ACP-NDJSON%20v1-8A2BE2?style=flat-square)](https://agentclientprotocol.com)
@@ -93,24 +93,25 @@ Antigravity 账号服务多个并发 Paseo agent 时建议启用。
 
 - 支持 Generic ACP provider 的 **Paseo**
 - **Node.js 22 或更新版本**
-- 本机已安装的官方 Antigravity ACP kernel wrapper 或 `.par`
 - 可以完成官方 `oauth-personal` 的 Antigravity 账号
 - 启用 Admission 时，系统需支持 Linux 文件 owner 与 mode
 
-除非官方内核已经位于维护者主机默认 pin 路径，否则必须设置
-`PASEO_AGY_ACP_OFFICIAL_BIN`。若它直接指向 `.par`，适配器会从该文件所在目录
-启动，并仅在 Linux 上附加官方 `--uid=` 启动参数。
+首次启动时，适配器按当前操作系统从 Google 下载对应的官方 Antigravity ACP 1.2.1
+包。npm 包本身不包含这些内核。Linux x86_64 还会装上本机兼容包装器。
+`PASEO_AGY_ACP_OFFICIAL_BIN` 留空，或继续指向托管包装器即可。指向其他已存在路径时，
+按该路径启动。
 
 <!-- readme:quickstart -->
 ## 快速开始
 
-### 1. 指定官方内核并完成认证
+### 1. 完成认证
 
 ```bash
-export PASEO_AGY_ACP_OFFICIAL_BIN="/absolute/path/to/agy-acp-server-wrapper-or.par"
-npx -y paseo-agy-acp@2.3.2 --login
+npx -y paseo-agy-acp@2.4.1 --login
 ```
 
+第一次运行会下载并配置官方内核 1.2.1。下载约 320 MiB，放在 `~/.local/opt/`。
+
 OAuth 由官方内核完成。Token 保留在内核自己的状态中，本适配器不会打印。
 
 ### 2. 准备 Admission 状态
@@ -120,7 +121,7 @@ OAuth 由官方内核完成。Token 保留在内核自己的状态中，本适
 ```bash
 export AGY_ACP_STATE_DIR="$HOME/.local/state/paseo-agy-acp/account-name"
 install -d -m 700 "$AGY_ACP_STATE_DIR"
-npx -y --package=paseo-agy-acp@2.3.2 \
+npx -y --package=paseo-agy-acp@2.4.1 \
   agy-acp-prepare-state "$AGY_ACP_STATE_DIR"
 ```
 
@@ -136,9 +137,8 @@ npx -y --package=paseo-agy-acp@2.3.2 \
   "providers": {
     "antigravity": {
       "type": "acp",
-      "command": ["npx", "-y", "paseo-agy-acp@2.3.2"],
+      "command": ["npx", "-y", "paseo-agy-acp@2.4.1"],
       "env": {
-        "PASEO_AGY_ACP_OFFICIAL_BIN": "/absolute/path/to/agy-acp-server-wrapper-or.par",
         "AGY_ACP_ADMISSION_ENABLED": "true",
         "AGY_ACP_STATE_DIR": "/home/YOU/.local/state/paseo-agy-acp/account-name"
       }
@@ -180,6 +180,13 @@ Paseo 会向 provider 进程提供 `PASEO_AGENT_ID` 和 `PASEO_AGENT_CWD`。只
 | `dangerously-skip-permissions` | `yolo` |
 | `plan` | `default`（官方内核没有 plan mode） |
 
+官方 `yolo` 与 Paseo 的 Auto Accept（`features.auto_accept`）是两套独立开关。
+未应答的 `session/request_permission` 会让 `session/prompt` 一直保持打开，
+因此即使 assistant 文本已经可见，agent 仍可能保持 `running`。无人值守运行时，
+请打开 Auto Accept，或用 `paseo permit ls` / `paseo permit allow` 批准，
+并在需要内核跳过工具确认时使用 `yolo`。本适配器不会把已显示的文本当成
+`end_turn`。见 [#11](https://github.com/tiezbro/paseo-agy-acp/issues/11)。
+
 `PASEO_AGY_ACP_KERNEL=legacy` 和 `--legacy-kernel` 会 fail closed。官方内核是唯一
 执行路径。
 
@@ -198,6 +205,9 @@ Agents/Codex 目录和全局 Gemini/Agents/Codex 目录。每个 skill 目录需
 - 修改 provider command、环境变量或内核路径后要重启 Paseo。
 - 已启用 Admission 但 identity 缺失、状态权限不安全或 policy 非法时，系统拒绝启动，
   不会静默变成 unfenced 运行。
+- assistant 文本已经可见但 turn 仍 `running`，通常是未处理的权限卡片，而不是内核
+  丢失完成态。检查 Auto Accept 和 `paseo permit ls`。Paseo 的 `Worked for …`
+  是墙钟时间，权限等待也会计入。
 - 工具质量、生图、backend 配额与 provider 错误文案仍由官方内核和 Google backend
   负责。
 - 可复现升级或回滚应在 provider command 中固定三段 npm 版本，然后重启 Paseo。

package/dist/ACP Connector/official-kernel/ensure-managed-kernel.d.ts

@@ -0,0 +1,12 @@
+export interface OfficialKernelDownload {
+    readonly id: string;
+    readonly url: string;
+    readonly binaryName: string;
+    readonly compat: boolean;
+}
+export declare function officialKernelDownload(platform?: NodeJS.Platform, arch?: string): OfficialKernelDownload;
+export declare function managedOfficialKernelRoot(home?: string): string;
+export declare function managedCompatRoot(home?: string): string;
+export declare function managedStableWrapper(home?: string): string;
+export declare function usesManagedOfficialKernel(configured: string | undefined, home?: string): boolean;
+export declare function ensureManagedOfficialKernel(environment?: NodeJS.ProcessEnv): Promise<string>;

package/dist/ACP Connector/official-kernel/ensure-managed-kernel.js

@@ -0,0 +1,204 @@
+import { createHash } from "node:crypto";
+import { spawnSync } from "node:child_process";
+import { chmodSync, existsSync, mkdirSync, renameSync } from "node:fs";
+import { homedir } from "node:os";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { OfficialKernelCompatLifecycle } from "./kernel-compat-lifecycle.js";
+import { PRODUCTION_KERNEL_COMPAT_PINS } from "./kernel-compat-pins.js";
+import { RC01_KERNEL_COMPAT_PATCH_PLAN } from "./kernel-compat-rc01-recipe.js";
+const MANAGED_ARTIFACT_PREFIX = "1.2.1-adbf34295671-";
+const OFFICIAL_KERNEL_DOWNLOADS = Object.freeze({
+    "linux-x64": Object.freeze({
+        id: "linux-x64",
+        url: "https://dl.google.com/agy-extensions/releases/linux/agy-acp-server-1.2.1-linux-x86_64.zip",
+        binaryName: "agy_acp_server.par",
+        compat: true
+    }),
+    "linux-arm64": Object.freeze({
+        id: "linux-arm64",
+        url: "https://dl.google.com/agy-extensions/releases/linux/agy-acp-server-1.2.1-linux-arm64.zip",
+        binaryName: "agy_acp_server.par",
+        compat: false
+    }),
+    "darwin-arm64": Object.freeze({
+        id: "darwin-arm64",
+        url: "https://dl.google.com/agy-extensions/releases/macos/agy-acp-server-1.2.1-darwin-arm64.zip",
+        binaryName: "agy_acp_server.par",
+        compat: false
+    }),
+    "darwin-x64": Object.freeze({
+        id: "darwin-x64",
+        url: "https://dl.google.com/agy-extensions/releases/macos/agy-acp-server-1.2.1-darwin-x86_64.zip",
+        binaryName: "agy_acp_server.par",
+        compat: false
+    }),
+    "win32-x64": Object.freeze({
+        id: "win32-x64",
+        url: "https://dl.google.com/agy-extensions/releases/windows/agy-acp-server-1.2.1-windows-x86_64.zip",
+        binaryName: "agy_acp_server.exe",
+        compat: false
+    }),
+    "win32-arm64": Object.freeze({
+        id: "win32-arm64",
+        url: "https://dl.google.com/agy-extensions/releases/windows/agy-acp-server-1.2.1-windows-arm64.zip",
+        binaryName: "agy_acp_server.exe",
+        compat: false
+    })
+});
+export function officialKernelDownload(platform = process.platform, arch = process.arch) {
+    const download = OFFICIAL_KERNEL_DOWNLOADS[`${platform}-${arch}`];
+    if (download === undefined) {
+        throw new Error(`no official Antigravity ACP 1.2.1 download for ${platform} ${arch}`);
+    }
+    return download;
+}
+export function managedOfficialKernelRoot(home = homedir()) {
+    return path.join(home, ".local", "opt", "agy-acp-server-1.2.1");
+}
+export function managedCompatRoot(home = homedir()) {
+    return path.join(home, ".local", "opt", "paseo-agy-acp-kernel-compat");
+}
+export function managedStableWrapper(home = homedir()) {
+    return path.join(managedCompatRoot(home), "agy-acp-kernel-compat-active");
+}
+export function usesManagedOfficialKernel(configured, home = homedir()) {
+    const value = configured?.trim() ?? "";
+    if (value.length === 0)
+        return true;
+    const normalized = path.resolve(value);
+    const managed = [
+        managedStableWrapper(home),
+        path.join(managedOfficialKernelRoot(home), "agy-acp-server-canary"),
+        path.join(home, ".local", "opt", "agy-acp-server-agy_acp_server_20260818_01_RC01", "agy-acp-server-canary")
+    ];
+    return managed.includes(normalized);
+}
+export async function ensureManagedOfficialKernel(environment = process.env) {
+    const configured = environment.PASEO_AGY_ACP_OFFICIAL_BIN?.trim();
+    if (!usesManagedOfficialKernel(configured))
+        return configured ?? "";
+    const download = officialKernelDownload();
+    const home = environment.HOME?.trim() || homedir();
+    const officialRoot = managedOfficialKernelRoot(home);
+    if (download.compat) {
+        const wrapper = managedStableWrapper(home);
+        if (await currentManagedWrapper(home))
+            return wrapper;
+        await ensureOfficialPayload(officialRoot, download);
+        const lifecycle = new OfficialKernelCompatLifecycle({ stateRoot: managedCompatRoot(home) });
+        const prepared = await lifecycle.prepare({
+            parPath: path.join(officialRoot, download.binaryName),
+            externalHarnessPath: path.join(officialRoot, "localharness_external"),
+            compatModulePath: compatModulePath(),
+            patchPlan: RC01_KERNEL_COMPAT_PATCH_PLAN
+        });
+        await lifecycle.activate(prepared.artifactId);
+        process.stderr.write(`paseo-agy-acp is using the managed 1.2.1 kernel at ${wrapper}\n`);
+        return wrapper;
+    }
+    return ensureStockOfficialBinary(officialRoot, download);
+}
+async function currentManagedWrapper(home) {
+    const lifecycle = new OfficialKernelCompatLifecycle({ stateRoot: managedCompatRoot(home) });
+    try {
+        const status = await lifecycle.status();
+        return status.current?.verified === true && status.current.artifactId.startsWith(MANAGED_ARTIFACT_PREFIX) && existsSync(managedStableWrapper(home));
+    }
+    catch {
+        return false;
+    }
+}
+async function ensureStockOfficialBinary(root, download) {
+    const binaryPath = path.join(root, download.binaryName);
+    if (!existsSync(binaryPath))
+        await ensureOfficialPayload(root, download);
+    process.stderr.write(`paseo-agy-acp is using the official 1.2.1 kernel at ${binaryPath}\n`);
+    return binaryPath;
+}
+async function ensureOfficialPayload(root, download) {
+    mkdirSync(root, { recursive: true, mode: 0o755 });
+    const binaryPath = path.join(root, download.binaryName);
+    const harnessPath = path.join(root, "localharness_external");
+    if (download.compat && existsSync(binaryPath) && existsSync(harnessPath)) {
+        if ((await sha256File(binaryPath)) === PRODUCTION_KERNEL_COMPAT_PINS.parSha256 &&
+            (await sha256File(harnessPath)) === PRODUCTION_KERNEL_COMPAT_PINS.externalHarnessSha256) {
+            return;
+        }
+    }
+    else if (!download.compat && existsSync(binaryPath)) {
+        return;
+    }
+    const zipPath = path.join(root, "agy-acp-server.zip.partial");
+    process.stderr.write(`Downloading the official Antigravity ACP kernel 1.2.1 for ${download.id}\n${download.url}\n`);
+    await downloadFile(download.url, zipPath);
+    const finalZip = path.join(root, "agy-acp-server.zip");
+    renameSync(zipPath, finalZip);
+    extractZip(finalZip, root);
+    if (process.platform !== "win32") {
+        chmodSync(binaryPath, 0o755);
+        if (existsSync(harnessPath))
+            chmodSync(harnessPath, 0o755);
+    }
+    if (download.compat) {
+        const wrapper = path.join(root, "agy-acp-server-canary");
+        await writeFileText(wrapper, "#!/bin/bash\nset -euo pipefail\ncd \"$(dirname \"$(readlink -f \"$0\")\")\"\nexec ./agy_acp_server.par --uid= \"$@\"\n");
+        chmodSync(wrapper, 0o755);
+    }
+}
+function extractZip(zipPath, root) {
+    const extracted = process.platform === "win32"
+        ? spawnSync("powershell.exe", ["-NoProfile", "-Command", `Expand-Archive -Force -LiteralPath '${zipPath}' -DestinationPath '${root}'`], { stdio: "inherit" })
+        : spawnSync("python3", ["-c", "import sys, zipfile; zipfile.ZipFile(sys.argv[1]).extractall(sys.argv[2])", zipPath, root], { stdio: "inherit" });
+    if (extracted.status !== 0)
+        throw new Error("official kernel archive could not be extracted");
+}
+function compatModulePath() {
+    let directory = path.dirname(fileURLToPath(import.meta.url));
+    for (let depth = 0; depth < 6; depth += 1) {
+        const candidate = path.join(directory, "assets", "official-kernel-compat", "rc01", "paseo_model_compat.py");
+        if (existsSync(candidate))
+            return candidate;
+        directory = path.dirname(directory);
+    }
+    throw new Error("bundled kernel compatibility module is missing from the package");
+}
+async function downloadFile(url, destination) {
+    const response = await fetch(url);
+    if (!response.ok || response.body === null)
+        throw new Error(`official kernel download failed with HTTP ${response.status}`);
+    const { open } = await import("node:fs/promises");
+    const handle = await open(destination, "w", 0o644);
+    try {
+        const reader = response.body.getReader();
+        while (true) {
+            const { done, value } = await reader.read();
+            if (done)
+                return;
+            if (value !== undefined)
+                await handle.write(value);
+        }
+    }
+    finally {
+        await handle.close();
+    }
+}
+async function sha256File(filePath) {
+    const { open } = await import("node:fs/promises");
+    const handle = await open(filePath, "r");
+    try {
+        const hash = createHash("sha256");
+        const stream = handle.createReadStream();
+        for await (const chunk of stream)
+            hash.update(chunk);
+        return hash.digest("hex");
+    }
+    finally {
+        await handle.close();
+    }
+}
+async function writeFileText(filePath, contents) {
+    const { writeFile } = await import("node:fs/promises");
+    await writeFile(filePath, contents, { mode: 0o755 });
+}
+//# sourceMappingURL=ensure-managed-kernel.js.map

package/dist/ACP Connector/official-kernel/ensure-managed-kernel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensure-managed-kernel.js","sourceRoot":"","sources":["../../../ACP Connector/official-kernel/ensure-managed-kernel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EACL,SAAS,EACT,UAAU,EACV,SAAS,EACT,UAAU,EACX,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAAE,6BAA6B,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,EAAE,6BAA6B,EAAE,MAAM,gCAAgC,CAAC;AAE/E,MAAM,uBAAuB,GAAG,qBAAqB,CAAC;AAStD,MAAM,yBAAyB,GAAqD,MAAM,CAAC,MAAM,CAAC;IAChG,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC;QACzB,EAAE,EAAE,WAAW;QACf,GAAG,EAAE,2FAA2F;QAChG,UAAU,EAAE,oBAAoB;QAChC,MAAM,EAAE,IAAI;KACb,CAAC;IACF,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC;QAC3B,EAAE,EAAE,aAAa;QACjB,GAAG,EAAE,0FAA0F;QAC/F,UAAU,EAAE,oBAAoB;QAChC,MAAM,EAAE,KAAK;KACd,CAAC;IACF,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC;QAC5B,EAAE,EAAE,cAAc;QAClB,GAAG,EAAE,2FAA2F;QAChG,UAAU,EAAE,oBAAoB;QAChC,MAAM,EAAE,KAAK;KACd,CAAC;IACF,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC;QAC1B,EAAE,EAAE,YAAY;QAChB,GAAG,EAAE,4FAA4F;QACjG,UAAU,EAAE,oBAAoB;QAChC,MAAM,EAAE,KAAK;KACd,CAAC;IACF,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC;QACzB,EAAE,EAAE,WAAW;QACf,GAAG,EAAE,+FAA+F;QACpG,UAAU,EAAE,oBAAoB;QAChC,MAAM,EAAE,KAAK;KACd,CAAC;IACF,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC;QAC3B,EAAE,EAAE,aAAa;QACjB,GAAG,EAAE,8FAA8F;QACnG,UAAU,EAAE,oBAAoB;QAChC,MAAM,EAAE,KAAK;KACd,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,UAAU,sBAAsB,CACpC,QAAQ,GAAoB,OAAO,CAAC,QAAQ,EAC5C,IAAI,GAAW,OAAO,CAAC,IAAI;IAE3B,MAAM,QAAQ,GAAG,yBAAyB,CAAC,GAAG,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAC;IAClE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,kDAAkD,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,IAAI,GAAG,OAAO,EAAE;IACxD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,sBAAsB,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAI,GAAG,OAAO,EAAE;IAChD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,6BAA6B,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAI,GAAG,OAAO,EAAE;IACnD,OAAO,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,8BAA8B,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,UAA8B,EAAE,IAAI,GAAG,OAAO,EAAE;IACxF,MAAM,KAAK,GAAG,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACvC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG;QACd,oBAAoB,CAAC,IAAI,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,EAAE,uBAAuB,CAAC;QACnE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,gDAAgD,EAAE,uBAAuB,CAAC;KAC5G,CAAC;IACF,OAAO,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,WAAW,GAAsB,OAAO,CAAC,GAAG;IAC5F,MAAM,UAAU,GAAG,WAAW,CAAC,0BAA0B,EAAE,IAAI,EAAE,CAAC;IAClE,IAAI,CAAC,yBAAyB,CAAC,UAAU,CAAC;QAAE,OAAO,UAAU,IAAI,EAAE,CAAC;IACpE,MAAM,QAAQ,GAAG,sBAAsB,EAAE,CAAC;IAC1C,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC;IACnD,MAAM,YAAY,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;IACrD,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,MAAM,qBAAqB,CAAC,IAAI,CAAC;YAAE,OAAO,OAAO,CAAC;QACtD,MAAM,qBAAqB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC,EAAE,SAAS,EAAE,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5F,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC;YACvC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,UAAU,CAAC;YACrD,mBAAmB,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,uBAAuB,CAAC;YACrE,gBAAgB,EAAE,gBAAgB,EAAE;YACpC,SAAS,EAAE,6BAA6B;SACzC,CAAC,CAAC;QACH,MAAM,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sDAAsD,OAAO,IAAI,CAAC,CAAC;QACxF,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,yBAAyB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;AAC3D,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,IAAY;IAC/C,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC,EAAE,SAAS,EAAE,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5F,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,CAAC;QACxC,OAAO,MAAM,CAAC,OAAO,EAAE,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,uBAAuB,CAAC,IAAI,UAAU,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC;IACtJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAC,IAAY,EAAE,QAAgC;IACrF,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;IACxD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,MAAM,qBAAqB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACzE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uDAAuD,UAAU,IAAI,CAAC,CAAC;IAC5F,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,IAAY,EAAE,QAAgC;IACjF,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;IACxD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;IAC7D,IAAI,QAAQ,CAAC,MAAM,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACzE,IACE,CAAC,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC,KAAK,6BAA6B,CAAC,SAAS;YAC1E,CAAC,MAAM,UAAU,CAAC,WAAW,CAAC,CAAC,KAAK,6BAA6B,CAAC,qBAAqB,EACvF,CAAC;YACD,OAAO;QACT,CAAC;IACH,CAAC;SAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACtD,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,4BAA4B,CAAC,CAAC;IAC9D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6DAA6D,QAAQ,CAAC,EAAE,KAAK,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC;IACpH,MAAM,YAAY,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;IACvD,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC9B,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC3B,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC7B,IAAI,UAAU,CAAC,WAAW,CAAC;YAAE,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;QACzD,MAAM,aAAa,CAAC,OAAO,EAAE,wHAAwH,CAAC,CAAC;QACvJ,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,OAAe,EAAE,IAAY;IAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO;QAC5C,CAAC,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,uCAAuC,OAAO,uBAAuB,IAAI,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QAC7J,CAAC,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,2EAA2E,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACnJ,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;AAChG,CAAC;AAED,SAAS,gBAAgB;IACvB,IAAI,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7D,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,wBAAwB,EAAE,MAAM,EAAE,uBAAuB,CAAC,CAAC;QAC5G,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAC5C,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;AACrF,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,GAAW,EAAE,WAAmB;IAC1D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5H,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACnD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACzC,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,OAAO;YACjB,IAAI,KAAK,KAAK,SAAS;gBAAE,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,QAAgB;IACxC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,CAAC,gBAAgB,EAAE,CAAC;QACzC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM;YAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,QAAgB,EAAE,QAAgB;IAC7D,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACvD,MAAM,SAAS,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACvD,CAAC"}

package/dist/ACP Connector/official-kernel/kernel-compat-lifecycle.js

@@ -88,7 +88,7 @@ export class OfficialKernelCompatLifecycle {
         return withWriterLock(this.#stateRoot, uid, this.#clock, () => {
             const selected = verifyRelease(releasePathFor(this.#stateRoot, selectedArtifactId, uid), this.#pins, this.#pinDigest, uid);
             ensureStableActivationWrapper(this.#stateRoot, this.#pinDigest, uid);
-            const active = readActiveState(this.#stateRoot, uid, this.#pinDigest);
+            const active = readActiveStateForActivation(this.#stateRoot, uid, this.#pinDigest);
             if (active?.currentArtifactId === selectedArtifactId) {
                 return {
                     changed: false,
@@ -1533,6 +1533,18 @@ function readActiveState(root, uid, expectedPinDigest) {
     }
     return state;
 }
+function readActiveStateForActivation(root, uid, expectedPinDigest) {
+    try {
+        return readActiveState(root, uid, expectedPinDigest);
+    }
+    catch (error) {
+        if (error instanceof KernelCompatLifecycleError &&
+            error.message === "active compatibility state uses stale or unknown kernel compatibility pins") {
+            return undefined;
+        }
+        throw error;
+    }
+}
 function readActiveStateReference(root, uid) {
     const referencePath = path.join(root, ACTIVE_REFERENCE);
     const linkStat = tryLstat(referencePath);