I guess there are 2 sides of ACP that are valid then. What was asked is for Juggler to act as a ACP client. I, on the other hand, would appreciate it to be a ACP server, so that I can interact with it from my editor when I’m on my machine and from the web when on the go or for more advanced functionality. That’s my current approach with opencode.
This seems like an odd request to me, but maybe I'm misunderstanding what you want or what Juggler does.
To my understanding, Juggler is a frontend to your agent and would replace your editor. That's the selling point I got, a better UI than text for orchestrating your agents.
ACP servers are agents (like if you look at the spec you have to implement an entire agent's worth of endpoints, from creating sessions and sending messages to handling starting MCP servers the client specifies).
I don't get the sense that the point of Juggler is to make the world's best agent (rather it's to make the world's best interface to agents), but OP would know way better than me.
What you're describing sounds like an ACP proxy, which probably exists but is a different class of thing.
If you just want to drive OpenCode via Juggler rather than your text editor, you also want Juggler to be an ACP client (it can be both an HTTP server and ACP client, I have some stuff at home that does that).
Connecting to juggler remotely from a browser is baked into its whole architecture! The entire GUI is identical in the desktop app or browser, local or remote. So I'm not really sure I see much point in making it a server. But as a client, sure, will add that.
For me is the ability to maintain the same keyboard workflow, no matter if I’m dealing with files or terminal (switching buffers, navigating/searching/selecting/copying/pasting text, etc.), I get to keep the same set of shortcuts and mental model. And i get to do some small automation on top of it with elisp, which I already do for the rest of my editor anyway.
Yes, a link requires user interaction. But what if the attacker decides to render an image instead and put the secret data in the query params? Loading an image is a way to trigger a request without user interaction
I would even go one step further: why would an AI tasked with summarizing external comments require any tool access, especially being able to reach into non public data?
The solution to prompt injection is not more AI on top of it, it starts with data access controls
> SANA-WM uses only ~213K public video clips with metric-scale pose supervision, completes training in 15 days on 64 H100s, and generates each 60-second clip on a single GPU; its distilled variant runs on a single RTX 5090 with NVFP4 quantization to denoise a 60s 720p clip in 34s.
Anthropeum.com · Jul 28 2026
YYBGYYRGGB
61,616 · top 66% of players today!
reply