✨ Launch Codex sessions with <Session.Launch> (#755)

package.json

@@ -57,6 +57,8 @@
     "@executablemd/core": "workspace:*",
     "@executablemd/durable-streams": "workspace:*",
     "@executablemd/runtime": "workspace:*",
+    "@executablemd/terminal": "workspace:*",
+    "@executablemd/terminal-tmux": "workspace:*",
     "@executablemd/test-agent": "workspace:*",
     "@executablemd/test-support": "workspace:*",
     "@executablemd/testing": "workspace:*",

packages/acp/THIRD_PARTY_NOTICES.md

@@ -7,15 +7,14 @@ license.
 ## acpx
 
 The ACP runtime under `vendor/acpx/generated` is npm `acpx@0.12.0`, carried in
-source with one local patch. `vendor/acpx/PROVENANCE.md` states the patch, the
+source with local patches. `vendor/acpx/PROVENANCE.md` states each patch, the
 upstream release commit it is taken from, and why it exists. dnt inlines this
 closure into the npm artifact, so the notice belongs with it.
 
-The snapshot is carried by issue #561 and removed by issue #566,
-<https://github.com/taras/executable.md/issues/566>, once a released upstream
-package set provides the same scoped, non-retaining transient agent-environment
-input the patch supplies and passes that issue's stated removal gate. Until then
-the patch is maintained here rather than upstreamed piecemeal.
+The patches supply a transient agent environment (#561), completing-turn
+metadata (#622), backend-accepted materialization (#648), and canonical native
+identity confirmation at reconnect (#755). Their independent upstream removal
+gates are recorded in the provenance; removing one does not remove the others.
 
 - Project: <https://github.com/openclaw/acpx>
 - Copyright (c) 2025 OpenClaw Team

packages/acp/mod.ts

@@ -34,23 +34,46 @@ export { DEFAULT_AGENT_NAME } from "./src/acpx-runtime.ts";
 
 /**
  * Native session launch: the adapters whose resume command shape this package
- * knows, and the two separate sets it is willing to use them for — handing a
- * session to a native UI, and attaching ACP to one a native process made.
+ * knows, and the separate capabilities each host may admit.
  */
 export {
   ADVERTISED_CLIENT_NATIVE_ATTACHMENT,
   ADVERTISED_NATIVE_LAUNCH,
+  ADVERTISED_PROVIDER_NATIVE_CONTINUATION,
   knownNativeAdapters,
   nativeAdapterFor,
+  nativeCapabilityPolicy,
 } from "./src/native-launch.ts";
-export { allocatesIdentity } from "./src/native-launch.ts";
+export { allocatesIdentity, bindsBuild } from "./src/native-launch.ts";
 export type {
   ClientAllocatedAdapter,
+  BoundProviderReturnedAdapter,
+  BuildBoundAdapter,
+  MaterializationContract,
   NativeAdapter,
   NativeBinding,
+  NativeCapabilityProbe,
+  ProbedNativeCapabilities,
   ProviderReturnedAdapter,
 } from "./src/native-launch.ts";
 
+/**
+ * Which protocol shapes and machines a native capability is admitted on.
+ *
+ * Public because the host is what states them: it supplies its own OS and
+ * architecture beside the coordinator and the observer, and shared provider
+ * code must not detect either for itself.
+ */
+export { admitsNativeCapability } from "./src/native-capability.ts";
+export type {
+  NativeCapability,
+  NativeCapabilityAdmission,
+  NativeCapabilityHost,
+  NativeCapabilityPolicy,
+  ObservedNativeCapability,
+  ProvedNativeCapability,
+} from "./src/native-capability.ts";
+
 /**
  * ACPX's own runtime types.
  *
@@ -109,4 +132,5 @@ export type {
   AgentSessionRouteStore,
   AgentSessionRouteV1,
   AgentSessionRouteV2,
+  AgentSessionRouteV3,
 } from "./src/session-route.ts";