Some field data for this discussion: I recently implemented an agent-editor protocol client natively in ST — not ACP itself, but Claude Code’s IDE protocol (WebSocket + JSON-RPC + an MCP subset), which is a close architectural cousin: sublime-claude-code.
On the UI/API-limits concern upthread: for this integration surface, ST’s API turned out to be sufficient — phantoms give you accept/reject buttons on diff proposals, scratch buffers give you a side-by-side edit review, and the status bar covers connection state. The whole client is plugin-host Python 3.8, no dependencies, ~1,800 lines including a blocking diff-review flow. The main friction I hit was dev-time submodule hot-reload, not anything user-facing.
On the security concern: in this direction of integration the editor is the server — localhost-only, token-authenticated — and it acts as a UI/permission surface, not a tool executor. Nothing touches disk without an explicit accept in the editor.
FWIW, the ecosystem does seem to be converging on ACP (Claude Code already speaks ACP inside Zed via an official adapter). Having built this, I’d say a Sublime ACP client is very feasible — the protocol layer is genuinely thin.
Field notes from the other side, if useful: running six Claude Code sessions in parallel against one Sublime window, and what had to change to keep track of the output. https://dev.to/daichikudo/six-claude-code-sessions-in-parallel-and-only-reading-the-output-1i42