@sleep2agi/agent-node 2.5.0-preview.24 → 2.5.0-preview.26

package/README.md

@@ -5,25 +5,33 @@
 [![License](https://img.shields.io/badge/License-Apache_2.0-blue.svg)](https://github.com/sleep2agi/agent-network/blob/main/LICENSE)
 [![Docs](https://img.shields.io/badge/docs-anet.sh-009e7e.svg)](https://anet.sh)
 
-Agent runtime for Agent Network. Connects to a CommHub server, registers under an alias, and processes incoming tasks with Claude, Codex, Grok Build, OpenCode, or compatible HTTP runtimes.
+Agent runtime for Agent Network. Connects to a CommHub server, registers under an alias, and processes incoming tasks with Claude, Codex, Codex app-server, Grok Build, or OpenCode ACP runtimes.
 
 The supported entry point is the `anet` CLI from `@sleep2agi/agent-network`, which writes the right `config.json`, network token, and environment variables for you.
 
 ## Install
 
-You usually don't install this package directly — except for preview `opencode-cli`, which requires the exact paired global `agent-network`/`agent-node` versions and `opencode-ai@1.18.1`. That credential-bearing path never auto-runs project-context `npx`; `anet` accepts only canonical exact package identities and refuses older or project/monorepo-local capable-looking packages. For the experimental `grok-build-cli` co-presence runtime, `anet` similarly capability-checks the global package. To pin the stable package for other runtimes:
+You usually don't install this package directly — `anet node create` and `anet node start` use it via `npx`. To pin it:
 
 ```bash
 npm install -g @sleep2agi/agent-node
 ```
 
+For the canonical OpenCode preview, install the entire vetted pair exactly. The OpenCode path does not execute an ambient package or automatic `npx` fallback:
+
+```bash
+npm install -g @sleep2agi/agent-network@2.3.0-preview.34 \
+  @sleep2agi/agent-node@2.5.0-preview.26 \
+  opencode-ai@1.18.1
+```
+
 ## Verified flow
 
 ```bash
 npm install -g @sleep2agi/agent-network
 anet hub start                      # local hub (terminal 1)
 anet hub dashboard                  # web UI (terminal 2)
-anet login --username admin --password anethub
+anet login --hub http://127.0.0.1:9200 --username admin --password anethub
 anet node create my-bot             # two-step picker: runtime, then provider
 anet node start my-bot              # → SSE connected
 ```
@@ -44,7 +52,7 @@ CLI flags:
 |---|---|---|
 | `--alias` | required | unique name in the hub |
 | `--hub` | `http://127.0.0.1:9200` | CommHub URL |
-| `--runtime` | `claude-agent-sdk` | `claude-agent-sdk` / `codex-sdk` / `codex-app-server` / `claude-code-cli` / `grok-build-acp` / `grok-build-cli` / `opencode-cli` / `http-api` |
+| `--runtime` | `claude-agent-sdk` | `claude-agent-sdk` / `claude-code-cli` / `codex-sdk` / `codex-app-server` / `grok-build-acp` / `opencode-cli` |
 | `--model` | runtime default | passed through to the SDK |
 | `--tools` | (none) | `all` or comma-separated list |
 | `--max-turns` | `50` | upper bound per task |
@@ -57,44 +65,11 @@ CLI flags:
 | `claude-agent-sdk` | [@anthropic-ai/claude-agent-sdk](https://www.npmjs.com/package/@anthropic-ai/claude-agent-sdk) | verified | Anthropic-compatible API; works with MiniMax, DeepSeek, GLM, Kimi, Anthropic, OpenRouter, or custom endpoints |
 | `codex-sdk` | [@openai/codex-sdk](https://www.npmjs.com/package/@openai/codex-sdk) | unverified end-to-end | unit tests pass, no full E2E with real codex auth |
 | `claude-code-cli` | local `claude` CLI | unverified end-to-end | runs locally for Claude Pro subscribers (v0.8.2 fixed the session-resume default-loss bug; see [changelog](https://anet.sh/en/changelog)) |
+| `codex-app-server` | local `codex app-server` WebSocket | preview, Windows-verified | shares a Codex TUI thread with dispatched network tasks |
 | `grok-build-acp` | local `grok agent stdio` | stable runtime, native MCP injection boundary remains preview | requires Grok Build CLI login; stable for receive/reply, session persistence, and explicit CommHub delegation handled by agent-node |
-| `grok-build-cli` | local Grok TUI or process-per-turn Grok CLI | dangerous experimental preview | shared TUI is text-only with fixed `[todo_write]`; Linux and exact Grok `0.2.93 (f00f96316d)` required; trusted tasks only |
-| `opencode-cli` | local `opencode acp` | preview, Docker E2E gated | exact `opencode-ai@1.18.1`; Anthropic/OpenAI API presets; safe text-only default with fresh private state roots |
-| `http-api` | OpenAI/Anthropic-compatible HTTP | experimental | reads `ANTHROPIC_*`, `OPENAI_*`, or `MINIMAX_CODING_API_KEY` environment variables |
-
-Runtimes are loaded lazily — picking one doesn't pull the others' dependencies. `claude-code-cli` adds zero extra SDK weight.
-
-## OpenCode ACP preview
-
-Use the paired launcher rather than invoking this package directly:
-
-```bash
-npm install -g @sleep2agi/agent-network@preview @sleep2agi/agent-node@preview opencode-ai@1.18.1
-anet node create opencode-demo --runtime opencode-cli
-anet node start opencode-demo
-```
+| `opencode-cli` | exact `opencode-ai@1.18.1` ACP child | canonical preview, release-gated | defaults to a launch-scoped external workspace with tools disabled; Anthropic/OpenAI presets |
 
-The default runtime policy disables local filesystem/shell/delegation tools
-and the unattended `question` tool. This preview requires Linux for both safe
-and unsafe OpenCode launches. Safe mode creates one external,
-random, `0700`, launch-scoped root containing the empty workspace and fresh
-HOME/XDG tree; copied API credentials, OpenCode DB/log files, and the workspace
-are removed together after exit. Only explicit
-`flags.opencodeUnsafeTools=true` restores project cwd and local tools for
-trusted tasks, but it is not a sandbox.
-
-The default trusted base is `/run/user/$uid`. Non-systemd environments must
-pre-create an owner-only directory and set its absolute path through
-`ANET_OPENCODE_SAFE_BASE`. The base and all ancestors must be canonical
-directories with no group/other write bit; an unverifiable base or non-Linux
-host makes the runtime fail closed. Unsafe mode still needs the same external
-writable root; it changes only cwd/tool policy. Exact 1.18.1 workspace ancestors are rejected
-if they contain `opencode.jsonc`, `opencode.json`, `.opencode`, `AGENTS.md`,
-`CLAUDE.md`, `CONTEXT.md`, `.claude`, `.agents`, or `.git`; identities and
-candidates are revalidated after the version probe immediately before spawn.
-`OPENCODE_PURE` / `OPENCODE_DISABLE_PROJECT_CONFIG` and the other discovery
-disable flags are defense in depth only. A process restart may therefore log
-`session lost on restart` and open a new session.
+The canonical preview picker exposes exactly these 6 runtimes. They are loaded lazily; picking one does not pull the others' SDK dependencies. `claude-code-cli` adds zero extra SDK weight.
 
 ## Grok Build ACP
 
@@ -123,74 +98,6 @@ Known boundary:
 - `grok ACP error -32603` is treated as retryable once with a fresh session; the runtime now logs JSON-RPC `error.data` when Grok provides it.
 - Grok tool-state boilerplate such as "Do not attempt to use tools from these servers yet" is stripped from final CommHub replies so users see the actual task answer.
 
-## Grok shared TUI — experimental preview
-
-> **Not production-ready:** network tasks drive the same TUI and share its conversation context. Approval ownership is not fully hardened. Use only with trusted tasks on a trusted network. This path belongs to the npm `preview` channel and is not a capability claim for `latest`.
-
-The preview is currently supported only on Linux with procfs mounted at `/proc` (including `/proc/self/fd`) and is pinned to build `grok 0.2.93 (f00f96316d)`; the known stable installer prints the same build with an optional trailing ` [stable]`. Install and authenticate that Grok CLI build as the same operating-system user that runs the node:
-
-```bash
-grok login
-grok --version
-```
-
-Use the supported `anet` entry point. In terminal 1:
-
-```bash
-anet node create grok-shared --runtime grok-build-cli
-anet node start grok-shared
-```
-
-In terminal 2 on the same machine and user account:
-
-```bash
-anet grok attach grok-shared
-```
-
-`anet node start` owns the Grok PTY and the local attach socket. `anet grok attach` relays that same terminal and detaches on `Ctrl-]`. A task delivered by CommHub is submitted into the visible shared session, and the completed answer is routed back to the originating task.
-
-For credential isolation, this preview selects a runtime-owned TUI agent
-profile with the exact model-tool inventory `[todo_write]`. Filesystem, shell,
-network, media, MCP, scheduler, and subagent tools are unavailable. Generic
-`tools` and `maxTurns` settings are rejected in co-presence because pinned
-Grok ignores those CLI flags in interactive mode. This is a text-only shared
-conversation preview, not a coding runtime.
-
-Grok 0.2.93 automatically resolves the fixed session-local `todo_write`
-helper. The preview accepts at most one exact observed no-request-ID
-`permission_requested` → `permission_resolved(decision=allow)` lifecycle
-during each active network turn and only when no human decision was sent. Every
-other automatic, mismatched, overlapping, or unfinished permission lifecycle
-still fails closed. This exception is preview-only and does not satisfy the
-approval-owner gate required for `latest`.
-
-If no compatible global `agent-node` is installed, `anet` uses `npx -y @sleep2agi/agent-node@preview` to fetch and resolve the package, verifies preview metadata plus the machine-readable `ANET_CAPABILITY_GROK_COPRESENCE_V2` marker, and then launches the resolved entrypoint directly so stop signals reach the real runtime. An older headless-only or V1 co-presence package does not pass this check. First start therefore needs npm registry access or an already populated npm cache. An incompatible global package is not silently allowed to select another runtime.
-
-This preview supports the CommHub inbox lane used by `anet node start`.
-Feishu configuration is rejected for `grok-build-cli`: its forked worker log
-path is not yet inside this runtime's credential-isolated boundary. The npm
-resolver, agent-node parent, Grok probes, PTY, and helper processes each use
-an exact from-empty environment; durable pending replies and goal state are
-redacted and owner-only. Same-UID host processes remain trusted.
-
-The legacy process-per-turn Grok CLI path uses the same runtime name with an explicit creation flag:
-
-```bash
-anet node create grok-turn --runtime grok-build-cli --grok-headless
-anet node start grok-turn
-```
-
-This headless node cannot be used with `anet grok attach`. It is also distinct from ACP headless mode:
-
-```bash
-anet node create grok-acp --runtime grok-build-acp
-anet node start grok-acp
-```
-
-`grok-build-acp` launches `grok agent stdio`; `grok-build-cli --grok-headless` launches one streaming-JSON Grok CLI turn per task.
-
-The formal native Leader/Policy Gateway design is not shipped by this experimental path. Its Phase 0 protocol freeze, Phase 1A gate, production-grade approval ownership, and `latest` release gate remain locked. See the [Grok co-presence preview guide](../docs/grok-build-cli-preview.md).
-
 ## Provider presets (claude-agent-sdk)
 
 `anet node create` step 2 picks one of these and writes `ANTHROPIC_BASE_URL` + a default model. All Anthropic-compatible HTTP API; `--model` is passed through verbatim.