@ai-zen/agents-host 0.0.0-stage → 0.1.0-alpha.0

package/CHANGELOG.md

@@ -0,0 +1,39 @@
+# Changelog
+
+All notable changes to `@ai-zen/agents-host` are documented here.
+Format follows [Keep a Changelog](https://keepachangelog.com/); versions use SemVer.
+
+## [0.1.0] - 2026-11-09
+
+First extraction step. The package exists so that CLI and Desktop stop maintaining two
+parallel implementations of the same session logic.
+
+### Added
+
+- Package skeleton (`@ai-zen/agents-host`): builds to `dist` with declarations, unit tests
+  run with **isolation on** (an intentionally stricter default than `agents-sdk`, so that a
+  hidden global fails loudly instead of being masked by leftover state).
+- `service/progress/PhaseTracker` — the six-state generation phase machine
+  (`connecting` / `queued` / `thinking` / `tool-calling` / `tool-waiting` / `streaming`) and
+  `pendingToolCalls()`, moved out of the CLI.
+- `protocol/` — transport-agnostic JSON-lines framing (`FrameDecoder` with a hard 8 MiB frame
+  cap) and the single source of truth for wire shapes: a mandatory `hello` handshake carrying
+  `protocol`, request/response frames with per-direction id spaces, and unsolicited events.
+- `daemon/` — a resident listener bound to loopback, a mandatory handshake, and a discovery
+  file (`<aiZenDir>/run/host.json`) carrying `pid` / `version` / `protocol` so clients can
+  distinguish "crashed leftover" from "a different build is running" before connecting.
+- `agents-host` bin: `serve` (default) / `status` / `stop`, single-instance protection, logs
+  appended to `<aiZenDir>/logs/host.log`.
+
+### Design notes
+
+- **No authentication in this version, therefore loopback only.** `Daemon.start()` throws on
+  any non-loopback host. The service can execute shell commands; an unauthenticated listener
+  reachable from the network hands a shell to the LAN. The handshake exists anyway (and is
+  mandatory) so that adding tokens/keys later touches the handshake payload only, not every
+  client's connection logic.
+- **No i18n here.** The phase machine emits facts (`{ kind, tools }`); turning them into
+  "Waiting for edit, exec…" stays in the client.
+- **No process-wide state.** Everything is constructor-injected; the only file allowed to read
+  `AI_ZEN_DIR` / `HOME` is the `cli.ts` composition root, which immediately turns them into
+  values.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024 LZQCN
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.