🔒 Terminal REPL POC (#774) — VIEW_ONLY evidence

.github/workflows/publish-packages.yml

@@ -30,7 +30,7 @@ jobs:
       - name: Validate the manifests declare this version
         run: |
           VERSION="${{ steps.resolve.outputs.value }}"
-          for f in packages/durable-streams/deno.json packages/runtime/deno.json packages/core/deno.json packages/acp/deno.json packages/testing/deno.json packages/test-agent/deno.json packages/web/deno.json packages/workflow/deno.json packages/cli/deno.json packages/code-review-agent/deno.json; do
+          for f in packages/durable-streams/deno.json packages/runtime/deno.json packages/terminal/deno.json packages/core/deno.json packages/acp/deno.json packages/terminal-tmux/deno.json packages/testing/deno.json packages/test-agent/deno.json packages/web/deno.json packages/workflow/deno.json packages/cli/deno.json packages/code-review-agent/deno.json; do
             declared="$(jq -r .version "$f")"
             if [ "$declared" != "$VERSION" ]; then
               echo "::error::$f declares $declared, not $VERSION — the tag does not match the manifests"
@@ -75,20 +75,34 @@ jobs:
       package: packages/runtime
       version: ${{ needs.version.outputs.value }}
 
+  terminal:
+    needs: [version, durable-streams]
+    uses: ./.github/workflows/publish-one.yml
+    with:
+      package: packages/terminal
+      version: ${{ needs.version.outputs.value }}
+
   core:
-    needs: [version, durable-streams, runtime]
+    needs: [version, durable-streams, runtime, terminal]
     uses: ./.github/workflows/publish-one.yml
     with:
       package: packages/core
       version: ${{ needs.version.outputs.value }}
 
   acp:
-    needs: [version, core, runtime]
+    needs: [version, core, runtime, terminal]
     uses: ./.github/workflows/publish-one.yml
     with:
       package: packages/acp
       version: ${{ needs.version.outputs.value }}
 
+  terminal-tmux:
+    needs: [version, terminal]
+    uses: ./.github/workflows/publish-one.yml
+    with:
+      package: packages/terminal-tmux
+      version: ${{ needs.version.outputs.value }}
+
   testing:
     needs: [version, core, durable-streams, runtime]
     uses: ./.github/workflows/publish-one.yml
@@ -97,7 +111,7 @@ jobs:
       version: ${{ needs.version.outputs.value }}
 
   test-agent:
-    needs: [version, acp, core, durable-streams, runtime, testing]
+    needs: [version, acp, core, durable-streams, runtime, terminal, testing]
     uses: ./.github/workflows/publish-one.yml
     with:
       package: packages/test-agent
@@ -118,7 +132,7 @@ jobs:
       version: ${{ needs.version.outputs.value }}
 
   cli:
-    needs: [version, acp, core, durable-streams, runtime, test-agent, testing, web, workflow]
+    needs: [version, acp, core, durable-streams, runtime, terminal, terminal-tmux, test-agent, testing, web, workflow]
     uses: ./.github/workflows/publish-one.yml
     with:
       package: packages/cli

package.json

@@ -57,6 +57,8 @@
     "@executablemd/core": "workspace:*",
     "@executablemd/durable-streams": "workspace:*",
     "@executablemd/runtime": "workspace:*",
+    "@executablemd/terminal": "workspace:*",
+    "@executablemd/terminal-tmux": "workspace:*",
     "@executablemd/test-agent": "workspace:*",
     "@executablemd/test-support": "workspace:*",
     "@executablemd/testing": "workspace:*",

packages/acp/THIRD_PARTY_NOTICES.md

@@ -7,15 +7,14 @@ license.
 ## acpx
 
 The ACP runtime under `vendor/acpx/generated` is npm `acpx@0.12.0`, carried in
-source with one local patch. `vendor/acpx/PROVENANCE.md` states the patch, the
+source with local patches. `vendor/acpx/PROVENANCE.md` states each patch, the
 upstream release commit it is taken from, and why it exists. dnt inlines this
 closure into the npm artifact, so the notice belongs with it.
 
-The snapshot is carried by issue #561 and removed by issue #566,
-<https://github.com/taras/executable.md/issues/566>, once a released upstream
-package set provides the same scoped, non-retaining transient agent-environment
-input the patch supplies and passes that issue's stated removal gate. Until then
-the patch is maintained here rather than upstreamed piecemeal.
+The patches supply a transient agent environment (#561), completing-turn
+metadata (#622), backend-accepted materialization (#648), and canonical native
+identity confirmation at reconnect (#755). Their independent upstream removal
+gates are recorded in the provenance; removing one does not remove the others.
 
 - Project: <https://github.com/openclaw/acpx>
 - Copyright (c) 2025 OpenClaw Team

packages/acp/mod.ts

@@ -34,23 +34,46 @@ export { DEFAULT_AGENT_NAME } from "./src/acpx-runtime.ts";
 
 /**
  * Native session launch: the adapters whose resume command shape this package
- * knows, and the two separate sets it is willing to use them for — handing a
- * session to a native UI, and attaching ACP to one a native process made.
+ * knows, and the separate capabilities each host may admit.
  */
 export {
   ADVERTISED_CLIENT_NATIVE_ATTACHMENT,
   ADVERTISED_NATIVE_LAUNCH,
+  ADVERTISED_PROVIDER_NATIVE_CONTINUATION,
   knownNativeAdapters,
   nativeAdapterFor,
+  nativeCapabilityPolicy,
 } from "./src/native-launch.ts";
-export { allocatesIdentity } from "./src/native-launch.ts";
+export { allocatesIdentity, bindsBuild } from "./src/native-launch.ts";
 export type {
   ClientAllocatedAdapter,
+  BoundProviderReturnedAdapter,
+  BuildBoundAdapter,
+  MaterializationContract,
   NativeAdapter,
   NativeBinding,
+  NativeCapabilityProbe,
+  ProbedNativeCapabilities,
   ProviderReturnedAdapter,
 } from "./src/native-launch.ts";
 
+/**
+ * Which protocol shapes and machines a native capability is admitted on.
+ *
+ * Public because the host is what states them: it supplies its own OS and
+ * architecture beside the coordinator and the observer, and shared provider
+ * code must not detect either for itself.
+ */
+export { admitsNativeCapability } from "./src/native-capability.ts";
+export type {
+  NativeCapability,
+  NativeCapabilityAdmission,
+  NativeCapabilityHost,
+  NativeCapabilityPolicy,
+  ObservedNativeCapability,
+  ProvedNativeCapability,
+} from "./src/native-capability.ts";
+
 /**
  * ACPX's own runtime types.
  *
@@ -109,4 +132,5 @@ export type {
   AgentSessionRouteStore,
   AgentSessionRouteV1,
   AgentSessionRouteV2,
+  AgentSessionRouteV3,
 } from "./src/session-route.ts";

packages/acp/package.json

@@ -11,6 +11,7 @@
     "@agentclientprotocol/sdk": "1.3.0",
     "@executablemd/core": "workspace:*",
     "@executablemd/runtime": "workspace:*",
+    "@executablemd/terminal": "workspace:*",
     "acpx": "0.12.0",
     "effection": "4.1.0"
   }