chore(deps): bump github.com/coder/acp-go-sdk from 0.12.2 to 0.13.0 in /packages/vm-agent

[dependabot]

Bumps github.com/coder/acp-go-sdk from 0.12.2 to 0.13.0.

Release notes

Sourced from github.com/coder/acp-go-sdk's releases.

v0.13.0: MCP-over-ACP and named string-enum constants

Tracks ACP schema 0.13.0. The headline additions are the unstable MCP-over-ACP transport (mcp/connect, mcp/message, mcp/disconnect) and a code-generation improvement that turns "open" string enums into named Go constants — which means two existing types change shape.

Added

Unstable MCP-over-ACP surface (#39 by @​ThomasK33)

Agents can now host MCP servers over the ACP channel itself instead of (or alongside) stdio/http/sse. The regenerated bindings expose:

• A new McpServer variant Acp *McpServerAcpInline plus McpServerAcp / McpServerAcpId, gated by a new McpCapabilities.Acp boolean.

• Request/response/notification types UnstableConnectMcp{Request,Response}, UnstableDisconnectMcp{Request,Response}, UnstableMessageMcp{Request,Notification,Response}, and a new UnstableMcpConnectionId opaque identifier.

• AgentSideConnection.UnstableConnectMcp(ctx, params) and AgentSideConnection.UnstableDisconnectMcp(ctx, params) for the agent to open and close MCP-over-ACP connections against the client.

• Client-side dispatch for mcp/connect and mcp/disconnect. Implement these on your Client to handle them — they are detected via optional interfaces, so existing clients continue to compile and simply return MethodNotFound:

  type Client interface {
      // ... existing methods ...
  // Optional, both sides:
  UnstableConnectMcp(ctx context.Context, p acp.UnstableConnectMcpRequest) (acp.UnstableConnectMcpResponse, error)
  UnstableDisconnectMcp(ctx context.Context, p acp.UnstableDisconnectMcpRequest) (acp.UnstableDisconnectMcpResponse, error)
  
  }

• New method-name constants: ClientMethodMcpConnect, ClientMethodMcpDisconnect, ClientMethodMcpMessage, and AgentMethodMcpMessage.

Everything above is marked UNSTABLE in the schema and may change in future releases.

Named constants for open string enums (#37 by @​agentcooper)

The code generator now recognizes schemas that describe a string with a recommended set of values plus a free-form fallback, and emits them as a named string type with const declarations. Two existing types switch to this form:

type SessionConfigOptionCategory string
const (
SessionConfigOptionCategoryMode         SessionConfigOptionCategory = "mode"
SessionConfigOptionCategoryModel        SessionConfigOptionCategory = "model"
SessionConfigOptionCategoryThoughtLevel SessionConfigOptionCategory = "thought_level"
)
type UnstableLlmProtocol string
const (
UnstableLlmProtocolAnthropic UnstableLlmProtocol = "anthropic"
UnstableLlmProtocolOpenai    UnstableLlmProtocol = "openai"
UnstableLlmProtocolAzure     UnstableLlmProtocol = "azure"
UnstableLlmProtocolVertex    UnstableLlmProtocol = "vertex"
UnstableLlmProtocolBedrock   UnstableLlmProtocol = "bedrock"
)

... (truncated)

Commits

• 192e108 release: v0.13.0 (#39)
• 07c06a0 chore: bump nixpkgs from 755f5aa to 0c88e1f in the nix group (#38)
• ea9713a Better constants (#37)
• 6332601 chore: bump nixpkgs from a4bf066 to 755f5aa in the nix group (#36)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud