Post

Bob Shell ships a hidden `bob acp` server. I connected it to Zed and used one failing Java check to exercise permissions, plans, diffs, session restore, and MCP handoff. The editor/agent boundary is clearer than I expected. buff.ly/l941ESU

0 reposts3 likes

For MCP we stopped using “server is up” as the unit of truth. initialize, tools/list, and one bounded external call each catch a different class of production drift.

The editor/agent boundary is the right place to look. What I'd probe next is what a permission grant actually covers: this exact command, or anything starting with that binary? "Allow git" that also lets "git status; curl ... | sh" through is a much bigger grant than the dialog suggests.