ACP connectors, the session's model and mode, and a socket for the user's answers

[endrix]

Connectors. A connector is a named ACP agent: its command line, what it can do, its defaults. wfpy discovers the known ones on the PATH (opencode acp, Zed's claude-agent-acp for Claude Code, codex-acp, gemini --experimental-acp); the user's ~/.config/wfpy/connectors.toml (XDG) adds or overrides; the workspace's .wfpy/connectors.toml at the project root (the directory with a pyproject.toml or .git above the workflow file) overrides both. wfpy connectors [--json] lists them, available (the command's first word on the PATH) or not.

[connectors.claude]
command = "claude-agent-acp"
model = "sonnet"          # a session config option the agent offers
mode = "acceptEdits"      # a session mode the agent offers

The transport. acp is the generic ACP transport (opencode-acp stays as its older name). An agent names its connector, @agent(transport="acp", connector="claude"); a run's --acp-connector NAME is the default (opencode when nothing names one); an explicit --agent-cli-acp-command wins as before. A connector's or an agent's model and mode are applied to the session through what the agent offers at new_session / load_session: a model config option (Claude Code: default, sonnet, haiku, opus...) matched by value, name or prefix, and the session modes by id; what is not offered is logged and left. OpenCode keeps OPENCODE_CONFIG_CONTENT.

The human port, for an IDE. --elicit-socket PATH: the agents' questions and, over ACP, their permission requests go to whoever listens on a Unix socket, one JSON object a line; the wire format is on SocketElicitationHandler:

wfpy -> client   {"type": "question", "id": 1, "agent": "planner", "model": "opus", "run_id": "...",
                  "question": "Write hello.txt", "context": "...", "choices": ["Always Allow", "Allow", "Reject"],
                  "timeout_ms": 600000}
client -> wfpy   {"id": 1, "answer": "Allow"}   |   {"id": 1, "declined": true, "reason": "..."}

No listener, a closed one, a reply to another question: a declined question (the reject option for a permission), never a failed run.

Verified on the adapter: a session with model=sonnet mode=default applied (applied in the response); a write permission answered Reject over the socket leaves no file, Allow writes it; wfpy connectors on this machine lists opencode and claude available, codex and gemini not. 26 new tests; whole suite 637 passed.