@corbet-labs/ccht 0.2.0 → 0.2.3

package/source/CHANGELOG.md

@@ -1,5 +1,63 @@
 # Changelog
 
+## 0.2.3 - 2026-09-19
+
+- No code changes from 0.2.2. Repack the npm distribution from the verified
+  stage (license notices, corresponding source kit, built Wasm). npm 0.2.2
+  was published from the bare working tree, is deprecated, and must not
+  be used.
+
+## 0.2.2 - 2026-09-19
+
+- No runtime behavior changes to existing APIs; all existing APIs unchanged.
+- ADDED: `src/dock.rs` — headless dock state (`DockKind`, `Placement`,
+  `DockId`, `DockManager` with open/placement/focus-token/serialize/restore).
+  Portable Rust with no I/O; mirrored by `web/src/dock.ts`.
+- ADDED: `src/transport.rs` — `TransportKind` (`Stdio` / `Socket`), `Transport`
+  trait, `TransportError`, `StdioTransport`, `SocketTransport` (validation
+  only, no I/O).
+- ADDED: `src/native/env.rs` — `EnvProfile::{strict, permissive}`, `apply()`,
+  `apply_to_command()`.
+- ADDED: `src/native/drivers/` — `Challenge` + `validate()`, `AccountInfo`,
+  `DriverError` + `code()`, `LoginState`, `LoginDriver` trait
+  (`async start` / `poll` / `account` / `cancel`). Native-only, no credential
+  extraction or persistence; the app owns storage via `CredentialsProvider`.
+  Includes `codex.rs` (`CodexDeviceDriver`: spawns the caller's Codex
+  app-server, ChatGPT device-code, host-allowlisted challenge, poll deadline,
+  projection-only account read) and `opencode.rs` (`OpenCodeKeyDriver`:
+  loopback `opencode serve`, ephemeral port, env-only server password, user
+  key PUT, connected check; hand-rolled HTTP, no new dependencies).
+- ADDED: `web/src/dock.ts` + `web/src/components/Dock.svelte`
+  (with `web/README.md` and `web/package.json` / `web/jsr.json` exports) —
+  framework-free dock state (`DockKind`, `Placement`, `validateDockId`,
+  `createDockManager` with open/placement/focus-token/serialize/restore) and
+  a generic Svelte 5 edge rail (unstyled `ccht-dock-` classes, effects via
+  app callbacks, never fetches, spawns, or stores).
+- ADDED: `web/src/auth.ts` + `web/src/components/AccountConnection.svelte`
+  (with `web/README.md` and `web/package.json` exports) — Svelte 5, unstyled
+  `ccht-` classes, effects via app callbacks, never spawns agents.
+- ADDED: `src/native/pool.rs` — `SessionPool`: keyed native sessions over one
+  shared client (lazy per-key sessions, per-key turn serialization, tagged
+  `PoolEvent` stream, per-key conversation snapshots for replay).
+
+### Migration notes
+
+- Private drivers become `LoginDriver` impls (`CodexDeviceDriver`,
+  `OpenCodeKeyDriver`); adapt call sites to `start` / `poll` / `account` /
+  `cancel` and projection-only `AccountInfo`.
+- `AccountConnection.svelte` becomes the shared component; keep product copy,
+  flows, and operation state in the app and drive effects through
+  `onStart` / `onCancel` / `onKeySubmit` / `onDisconnect`.
+- `publish_challenge` URL pinning stays server-side; the browser only renders
+  a validated challenge.
+- careervector-tui gains: its local `AuthState` mirror can become
+  `pub use ccht::auth::AuthState`; `BrowserCredentialsProvider` wraps the
+  shared `CredentialsProvider` shape.
+
+## 0.2.1 — 2026-09-13
+
+- No runtime behavior changes.
+
 ## 0.2.0 — 2026-09-12
 
 - Expose live session configuration and validated model, select and boolean controls.
@@ -19,10 +77,9 @@
 
 ## 0.1.0 — 2026-09-11
 
-- Rename the unpublished cllm package to ccht and license current work LGPL-3.0-only.
+- Rename the unpublished cllm package to ccht.
 - Share the Rust conversation model with browsers through @corbet-labs/ccht Wasm.
 - Integrate installed upstream agents through the official ACP SDK: typed sessions,
   streaming, permissions, cancellation, capability checks and bounded delivery.
 - Remove direct provider HTTP and credential-handling adapters. Applications own
   any explicit local inference backend and emit the shared conversation contract.
-- Keep historical source grants unchanged; no old release is retroactively relicensed.

package/source/Cargo.lock

@@ -214,6 +214,12 @@ version = "3.20.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "72f5acc6cb2ba439de613abc23857ec3d78374d8ed5ac84e9d11336e87da8649"
 
+[[package]]
+name = "bytes"
+version = "1.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fc652a48c352aef3ea3aed32080501cf3ef6ed5da78602a020c991775b0aff04"
+
 [[package]]
 name = "cc"
 version = "1.4.5"
@@ -226,7 +232,7 @@ dependencies = [
 
 [[package]]
 name = "ccht"
-version = "0.2.0"
+version = "0.2.3"
 dependencies = [
  "agent-client-protocol",
  "agent-client-protocol-schema",
@@ -1347,9 +1353,11 @@ version = "1.53.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "202caea871b69668250d242070849eb495be178ed697a3e98aebce5bc81a0bed"
 dependencies = [
+ "bytes",
  "libc",
  "mio",
  "pin-project-lite",
+ "signal-hook-registry",
  "socket2",
  "tokio-macros",
  "windows-sys",

package/source/Cargo.toml

@@ -1,13 +1,13 @@
 [package]
 name = "ccht"
-version = "0.2.0"
+version = "0.2.3"
 edition = "2024"
 rust-version = "1.88"
-license = "LGPL-3.0-only"
+license = "LGPL-3.0-only WITH LGPL-3.0-linking-exception"
 description = "Reusable conversations for native applications and the web, with upstream ACP agent integration"
 repository = "https://github.com/corbet-labs/ccht"
 readme = "README.md"
-include = ["Cargo.toml", "Cargo.lock", "src/**", "examples/**", "README.md", "CHANGELOG.md", "LICENSE", "LICENSE.md", "LICENSES/LGPL-3.0-only.txt", "LICENSES/GPL-3.0-only.txt", "THIRD-PARTY.md"]
+include = ["Cargo.toml", "Cargo.lock", "src/**", "examples/**", "README.md", "CHANGELOG.md", "LICENSE", "LICENSE.md", "LICENSES/LGPL-3.0-only.txt", "LICENSES/LGPL-3.0-only WITH LGPL-3.0-linking-exception.txt", "LICENSES/LGPL-3.0-linking-exception.txt", "LICENSES/GPL-3.0-only.txt", "THIRD-PARTY.md"]
 keywords = ["chat", "acp", "agents", "wasm", "streaming"]
 categories = ["development-tools", "web-programming"]
 
@@ -34,7 +34,7 @@ wasm-bindgen = { version = "=0.2.128", optional = true }
 [target.'cfg(not(target_family = "wasm"))'.dependencies]
 # Keep the SDK and schema paired: both expose the same public ACP types.
 agent-client-protocol = { version = "=2.1.0", optional = true }
-tokio = { version = "1", features = ["macros", "rt", "rt-multi-thread", "sync", "time"], optional = true }
+tokio = { version = "1", features = ["io-std", "io-util", "macros", "net", "process", "rt", "rt-multi-thread", "sync", "time"], optional = true }
 futures = { version = "0.3", optional = true }
 
 [target.'cfg(not(target_family = "wasm"))'.dev-dependencies]

package/source/LICENSE.md

@@ -2,15 +2,20 @@
 
 Copyright 2026 Julian Y. Richard Corbet.
 
-The current ccht library is licensed under **LGPL-3.0-only**. The complete
+The current ccht library is licensed under **LGPL-3.0-only WITH
+LGPL-3.0-linking-exception**. The complete
 [LGPL version 3](LICENSES/LGPL-3.0-only.txt) incorporates
-[GPL version 3](LICENSES/GPL-3.0-only.txt).
+[GPL version 3](LICENSES/GPL-3.0-only.txt); the
+[linking exception](<LICENSES/LGPL-3.0-only WITH LGPL-3.0-linking-exception.txt>) waives the
+Minimal Corresponding Source, Minimal Application Code and
+installation-information duties (LGPLv3 §§4d/4e) for combined works that
+link statically or dynamically.
 
 Applications may use the library under different licenses subject to the LGPL's
-conditions. Distribution must preserve the library's notices and rights to modify
-and replace or relink it, including reverse engineering to debug such changes.
-The application license must not restrict those library rights. See section 4
-of the LGPL for the complete conditions for combined works.
+conditions. Distribution must preserve the library's notices and the openness
+of library modifications, including reverse engineering to debug such changes.
+The application license must not restrict those library rights. No relinking
+route or object files are required for combined works under the exception.
 
 Dependencies and external agent executables retain their own licenses and service
 terms. The library's license does not grant rights to an external runtime or

package/source/LICENSES/LGPL-3.0-linking-exception.txt

@@ -0,0 +1,16 @@
+As a special exception to the GNU Lesser General Public License version 3
+("LGPL3"), the copyright holders of this Library give you permission to
+convey to a third party a Combined Work that links statically or dynamically
+to this Library without providing any Minimal Corresponding Source or
+Minimal Application Code as set out in 4d or providing the installation
+information set out in section 4e, provided that you comply with the other
+provisions of LGPL3 and provided that you meet, for the Application the
+terms and conditions of the license(s) which apply to the Application.
+
+Except as stated in this special exception, the provisions of LGPL3 will
+continue to comply in full to this Library. If you modify this Library, you
+may apply this exception to your version of this Library, but you are not
+obliged to do so. If you do not wish to do so, delete this exception
+statement from your version. This exception does not (and cannot) modify any
+license terms which apply to the Application, with which you must still
+comply.

package/source/LICENSES/LGPL-3.0-only WITH LGPL-3.0-linking-exception.txt

@@ -0,0 +1,16 @@
+As a special exception to the GNU Lesser General Public License version 3
+("LGPL3"), the copyright holders of this Library give you permission to
+convey to a third party a Combined Work that links statically or dynamically
+to this Library without providing any Minimal Corresponding Source or
+Minimal Application Code as set out in 4d or providing the installation
+information set out in section 4e, provided that you comply with the other
+provisions of LGPL3 and provided that you meet, for the Application the
+terms and conditions of the license(s) which apply to the Application.
+
+Except as stated in this special exception, the provisions of LGPL3 will
+continue to comply in full to this Library. If you modify this Library, you
+may apply this exception to your version of this Library, but you are not
+obliged to do so. If you do not wish to do so, delete this exception
+statement from your version. This exception does not (and cannot) modify any
+license terms which apply to the Application, with which you must still
+comply.

package/source/README.md

@@ -12,13 +12,68 @@ TUI / native UI ── ccht::Conversation ── ccht::native ── upstream AC
 ```
 
 The library owns structured conversation events, ordered replay, native sessions,
-streaming, cancellation and permission requests. Your application owns its UI,
-instructions, context, tools, user authorization, storage and HTTP/WebSocket/SSE
-transport. No Corbet-specific prompts or database are required.
-
-Agent reasoning, tools, authentication and protocol translation remain upstream.
-ccht does not implement an agent loop, read provider credentials, install agents,
-call paid model HTTP APIs or select an API-key fallback.
+streaming, cancellation, permission requests, native login MECHANISMS
+(`native::env`, `native::drivers`), and generic web auth contracts/components
+(`auth.ts`, `AccountConnection.svelte`). Your application owns product flows,
+product UI, instructions, context, tools, user authorization, storage and
+HTTP/WebSocket/SSE transport. No Corbet-specific prompts or database are required.
+
+Agent reasoning, tools, and protocol translation remain upstream.
+ccht does not implement an agent loop, persist or read back provider credentials,
+install agents, call paid model HTTP APIs or select an API-key fallback. Login
+drivers project vendor state only; storage, prompts, and authority stay in the app.
+
+## Layers
+
+Core (everywhere, including Wasm): conversation model, `WireEvent` contract,
+auth state/store shapes (`src/auth.rs`), and transport validation
+(`src/transport.rs`). No I/O, spawning, or storage.
+
+Native effects (optional `native` feature, never Wasm): ACP sessions
+(`src/native/`), environment allowlist (`src/native/env.rs` with
+`EnvProfile::strict` / `permissive`), and vendor login drivers
+(`src/native/drivers/` with `LoginDriver`, `Challenge` + `validate()`,
+`AccountInfo`, `DriverError` + `code()`, `LoginState`, `CodexDeviceDriver`,
+`OpenCodeKeyDriver`). Drivers run handshakes only and report projection-only
+state; the app owns storage via `CredentialsProvider`.
+
+Web bindings + components (`web/`, see `web/README.md`): Wasm conversation
+model plus `web/src/auth.ts` mirrors and
+`web/src/components/AccountConnection.svelte` (Svelte 5, unstyled `ccht-`
+classes, effects via app callbacks, never spawns agents).
+
+Feature flags: `native` is the default feature (ACP sessions, env, drivers;
+requires Tokio; native-only). `web` enables Wasm bindings. Use
+`default-features = false` for the portable model alone.
+
+Transport: one ACP-style JSON-RPC protocol over two validated endpoints
+(`src/transport.rs`): `StdioTransport` (explicit native program + args, no
+shell) today, and `SocketTransport` (`ws` / `wss` / `http` / `https` with a
+host, shape-only check) for a later Wasm socket bridge. `TransportKind`
+(`Stdio` / `Socket`), the `Transport` trait, and `TransportError` describe
+and validate endpoints only; they never connect, spawn, or perform I/O, and
+errors use fixed text so secrets cannot leak. The app owns actual delivery
+and storage.
+
+## Acceptable use — single-operator local use only
+
+ccht is for single-operator local use only. No pooling, sharing, resale, or
+multi-tenant hosting of subscriptions. ccht grants no rights to external
+runtimes or subscriptions; their own terms apply (see [THIRD-PARTY.md](THIRD-PARTY.md)).
+
+- No credential persistence or read-back in the library. Drivers report
+  projection-only state (`AccountInfo`, `AuthState`); the app owns storage
+  via `CredentialsProvider`.
+- The caller supplies binary paths, homes, and clientInfo; ccht never
+  hard-codes product strings.
+- Respect upstream gates: device-code settings, forced methods, and usage limits.
+- OpenCode use is one operator key to one loopback `opencode serve`; the
+  server password is ephemeral and env-only. Use the API-key path for
+  CI/programmatic use.
+
+Module details: `src/native/drivers/mod.rs`, `src/native/drivers/codex.rs`,
+`src/native/drivers/opencode.rs`, `src/native/env.rs`, `src/transport.rs`,
+`web/src/auth.ts`, `web/README.md`.
 
 ## Rust
 
@@ -219,12 +274,12 @@ its advertised capabilities, login state and execution policy.
 
 ## License
 
-ccht is **LGPL-3.0-only**. See [LICENSE.md](LICENSE.md) and
+ccht is **LGPL-3.0-only WITH LGPL-3.0-linking-exception**. See [LICENSE.md](LICENSE.md) and
 [THIRD-PARTY.md](THIRD-PARTY.md). Applications may use different licenses while
-preserving the LGPL library rights. Distributing a combined Rust binary requires
-a compliant relinking route; making source available somewhere is not by itself
-sufficient. Keep the browser's Wasm replaceable and provide its corresponding
-source and notices. Review the complete license for your distribution method.
+preserving the LGPL library rights. Combined works may link statically or
+dynamically without a relinking route; library modifications stay LGPL.
+Provide the library's corresponding source and notices. Review the complete
+license for your distribution method.
 
 ACP and an account's subscription do not guarantee a billing mode. The operator
 must configure the native agent/account and disable unwanted paid usage. Known

package/source/THIRD-PARTY.md

@@ -21,8 +21,25 @@ comply with their runtime and service conditions when packaging them yourself.
 Do not infer permission to offer a customer-facing subscription login or pooled
 account service from the wrapper's permissive license.
 
+Permissive references informing the native login drivers (no vendored code;
+hand-rolled protocol shapes with attribution in the module docs):
+
+- Codex app-server protocol (`account/login/start` device-code challenge,
+  `account/login/completed`, `account/read`) from openai/codex under
+  Apache-2.0 informs `src/native/drivers/codex.rs` (`CodexDeviceDriver`).
+  The driver spawns the caller's Codex `app-server`, relays the
+  host-allowlisted challenge, and projects presence only.
+- OpenCode `serve` control plane (`GET /global/health`,
+  `PUT /auth/opencode-go`, `GET /provider`) under MIT informs
+  `src/native/drivers/opencode.rs` (`OpenCodeKeyDriver`). The driver uses
+  loopback `opencode serve` with an ephemeral port, an env-only server
+  password, and hand-rolled HTTP with no new dependencies.
+
+Preserve their original grants and notices when reusing these shapes.
+
 Upstream sources: [ACP SDK](https://github.com/agentclientprotocol/rust-sdk),
 [Codex ACP](https://github.com/agentclientprotocol/codex-acp),
+[openai/codex](https://github.com/openai/codex),
 [Claude ACP](https://github.com/agentclientprotocol/claude-agent-acp),
 [OpenCode](https://github.com/anomalyco/opencode),
 [wasm-bindgen](https://github.com/wasm-bindgen/wasm-bindgen).