Files
gen/Cargo.toml
zeekay 67411192cd Programs by full path only, a home read from the environment alone
exe.rs is the one way Gen finds a program: by full path, from absolute
PATH entries only, so a session that starts in a repository cannot be
handed that repository's ./grok, ./hanzo-mcp or ./git. Agents, the
toolset, version probes and machine probes all go through it, the MCP
config names hanzo-mcp by full path, a probe's child gets the same PATH,
`--version` is given three seconds, and spawn refuses a bare name.

Root reads $HOME itself and Gen no longer links `dirs`: an unset, empty
or relative home is no home, never the passwd entry's. Only a binary's
main asks for the user's root (the __mcp proxy is handed it), and
root_is_the_one_resolver holds all of that structurally.

While an agent runs, SIGINT, SIGTERM and SIGHUP keep Gen up (TERM and
HUP pass to the agent), so a session always closes out and removes its
run homes; those are now run-<pid>-*, mode 0700, and a SIGKILLed one is
swept by the next run once its pid is gone. Crush on its own account
keeps its own data directory and history; only a routed run gets a home.

The host's profile is a moment's wait, so a host can read it under the
lock its refresh writes under, and the meter is asked for the session's
brand (gen refuses another brand's rather than read it wrong).

release: builds hold no secret and restore no cache, report each
archive's sha256 as a job output, and publish downloads each artifact by
exact name and refuses one whose digest is not its build's. cicd pins
hanzoai/ci by commit.
2026-10-16 07:42:47 -07:00

36 lines
1.1 KiB
TOML

[package]
name = "hanzo-gen"
version = "0.1.0"
edition = "2021"
authors = ["Hanzo AI"]
description = "Hanzo Gen — the agentic harness: launch and route any coding agent (Hanzo Dev, Claude Code, Codex, Cursor, …) with Hanzo MCP and one model router"
license = "MIT"
repository = "https://github.com/hanzoai/gen"
[[bin]]
name = "gen"
path = "src/main.rs"
[dependencies]
# The platform client the session, target and kit calls ride on: the same wire
# the Hanzo CLI uses, consumed by pinned commit as that crate intends.
hanzo-client = { git = "https://github.com/hanzoai/cli", rev = "695b57aae6abc21dcdfc3bf6a6d61ed965be8af3" }
anyhow = "1.0"
base64 = "0.22"
chrono = "0.4"
clap = { version = "4.5", features = ["derive", "env"] }
colored = "2.1"
rand = "0.8"
reqwest = { version = "0.12", default-features = false, features = ["json", "gzip", "rustls-tls", "http2", "charset"] }
serde = { version = "1.0", features = ["derive"] }
serde_json = "1.0"
sha2 = "0.10"
tempfile = "3.10"
tokio = { version = "1.36", features = ["full"] }
toml = "0.8"
tracing = "0.1"
which = "6.0"
[target.'cfg(unix)'.dependencies]
libc = "0.2"