@goodandready/dsh-dsml-artifact-guard 0.1.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 GooDAnDReaDY
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,54 @@
+# dsh-dsml-artifact-guard
+
+Safe DeepSeek DSML artifact sanitizer for DeepSeek Harness.
+
+## What it fixes
+
+Some provider responses append protocol closing tags such as
+`</｜DSML｜parameter> </｜DSML｜invoke> </｜DSML｜tool_calls>` to the visible
+assistant text. The guard detects that terminal artifact and can remove it
+before the text reaches the chat UI.
+
+The `llm/stream` hook is deliberately synchronous. Cordis expects a stream (an
+`AsyncIterable`) immediately; making the hook `async` would return a `Promise`
+and break every turn with `stream is not async iterable`.
+
+## Configuration
+
+The bundle accepts:
+
+- `mode`: `audit` (default, log detections without changing text),
+  `sanitize` (remove the terminal artifact), or `disabled`;
+- `providerId`: provider identifier to inspect (default `opencode-go`);
+- `modelId`: model identifier to inspect (default `deepseek-v4-flash`).
+
+Only matching provider/model streams are changed. Other streams pass through
+unchanged. The sanitizer is fail-open: malformed or non-text chunks are
+forwarded, and only a terminal closing-tag sequence is considered an artifact.
+
+## Compatibility
+
+Version 0.1.0 is compatible with DeepSeek Harness 0.1.2 alpha and rc web
+profiles and Cordis 4.x. The synchronous hook fix is required for the rc.1
+runtime and remains valid for later 0.1.2 releases.
+
+## Development and tests
+
+```bash
+npm test
+npm run check
+npm pack --dry-run --json
+```
+
+Tests cover split stream chunks, audit versus sanitize behavior, scope
+matching, and the synchronous Cordis hook contract.
+
+## Related fixes
+
+- Gitea issue #4: synchronous `llm/stream` hook (`stream is not async iterable`).
+- Gitea issue #6: package license, ignore rules, and deterministic package
+  contents.
+
+## Release v0.1.1
+
+This public hotfix release packages the synchronous stream-hook repair and the deterministic package hygiene changes from Gitea PR #7. It is compatible with DeepSeek Harness 0.1.2 alpha/rc web profiles and keeps the fail-open, provider/model-scoped sanitizer behavior described above.

package/cordis.patch.yml

@@ -0,0 +1,8 @@
+# Host-only DSH bundle.
+- insert:
+    - id: dsh-dsml-artifact-guard
+      name: '@goodandready/dsh-dsml-artifact-guard'
+      config:
+        mode: sanitize
+        providerId: opencode-go
+        modelId: deepseek-v4-flash

package/lib/index.js

@@ -0,0 +1 @@
+import Schema from '@deepseek-ai/schemastery'; const TAIL=/(?:<\/｜DSML｜parameter>\s*)?(?:<\/｜DSML｜invoke>\s*)?<\/｜DSML｜tool_calls>\s*$/u,OPEN=/<｜DSML｜(?:tool_calls|invoke|parameter)>/u,KEEP=96; export const name='@goodandready/dsh-dsml-artifact-guard',inject=['llm'],Config=Schema.object({mode:Schema.string().default('audit'),providerId:Schema.string().default('opencode-go'),modelId:Schema.string().default('deepseek-v4-flash')}); export function matchesScope(o,c){return (o?.providerId??o?.provider?.id??o?.provider)==c.providerId&&(o?.modelId??o?.model?.id??o?.model?.name??o?.model)==c.modelId} export async function* sanitizeDsmlArtifacts(s,{mode,onArtifact}={}){let p='',i,open=false;const flush=async function*(end){if(!p)return;let text=p;if(end&&!open&&TAIL.test(text)){onArtifact?.({mode,removed:1});if(mode==='sanitize')text=text.replace(TAIL,'')}if(text)yield{type:'text-delta',index:i,text};p='';i=undefined};for await(const c of s){if(c?.type==='text-delta'&&typeof c.text==='string'){if(p&&i!==c.index)yield*flush(false);i=c.index;p+=c.text;open||=OPEN.test(c.text);if(p.length>KEEP){const n=p.length-KEEP;yield{type:'text-delta',index:i,text:p.slice(0,n)};p=p.slice(n)}continue}if(c?.type==='finish'){yield*flush(true);yield c;continue}yield*flush(false);yield c}yield*flush(true)} export function apply(ctx,c={}){const e=Config(c)??{};ctx.on('llm/stream',(o,next)=>{const s=next(o);return e.mode==='disabled'||!matchesScope(o,e)?s:sanitizeDsmlArtifacts(s,{mode:e.mode,onArtifact:x=>ctx.logger?.info?.('DSML closing-tag artifact detected',x)})})}

package/package.json

@@ -0,0 +1 @@
+{"name":"@goodandready/dsh-dsml-artifact-guard","version":"0.1.1","description":"Sanitizes leaked DeepSeek DSML closing tags from model text streams","type":"module","main":"lib/index.js","license":"MIT","files":["lib","test","README.md","LICENSE","cordis.patch.yml"],"scripts":{"check":"node --check lib/index.js","test":"node --test"},"dsh":{"bundle":{"patch":"./cordis.patch.yml"}},"peerDependencies":{"@deepseek-ai/cordis":"^4.0.1","@deepseek-ai/schemastery":"^3.18.1"}}

package/test/index.test.js

@@ -0,0 +1 @@
+import assert from'node:assert/strict';import test from'node:test';import{apply,matchesScope,sanitizeDsmlArtifacts}from'../lib/index.js';const tail='</｜DSML｜parameter> </｜DSML｜invoke> </｜DSML｜tool_calls>';async function collect(c,o){const r=[];async function*s(){yield*c}for await(const x of sanitizeDsmlArtifacts(s(),o))r.push(x);return r}test('removes terminal tail',async()=>{const c=[{type:'tool-call-delta',index:1},{type:'text-delta',index:2,text:'Done. '+tail},{type:'finish'}];assert.deepEqual(await collect(c,{mode:'sanitize'}),[c[0],{type:'text-delta',index:2,text:'Done. '},c[2]])});test('split tail',async()=>{const c=[{type:'text-delta',index:0,text:'A '+tail.slice(0,20)},{type:'text-delta',index:0,text:tail.slice(20)},{type:'finish'}];assert.deepEqual(await collect(c,{mode:'sanitize'}),[{type:'text-delta',index:0,text:'A '},c[2]])});test('audit unchanged',async()=>{const c=[{type:'text-delta',index:0,text:tail},{type:'finish'}];assert.deepEqual(await collect(c,{mode:'audit'}),c)});test('keeps prose',async()=>{const c=[{type:'text-delta',index:0,text:'<｜DSML｜tool_calls>x</｜DSML｜tool_calls>'},{type:'usage'},{type:'finish'}];assert.deepEqual(await collect(c,{mode:'sanitize'}),c)});test('scope',()=>assert.equal(matchesScope({providerId:'opencode-go',modelId:'deepseek-v4-flash'},{providerId:'opencode-go',modelId:'deepseek-v4-flash'}),true));test('llm stream hook returns an async iterable synchronously',()=>{let hook;const ctx={on(_event,fn){hook=fn},logger:{info(){}}};apply(ctx,{mode:'sanitize',providerId:'opencode-go',modelId:'deepseek-v4-flash'});assert.equal(typeof hook,'function');async function*stream(){yield{type:'finish'}}const source=stream();const result=hook({providerId:'opencode-go',modelId:'deepseek-v4-flash'},()=>source);assert.equal(typeof result?.[Symbol.asyncIterator],'function');assert.equal(typeof result?.then,'undefined')});test('out of scope stream passes through unchanged',()=>{let hook;const ctx={on(_event,fn){hook=fn},logger:{info(){}}};apply(ctx,{mode:'sanitize',providerId:'opencode-go',modelId:'deepseek-v4-flash'});async function*stream(){yield{type:'finish'}}const source=stream();assert.equal(hook({providerId:'other',modelId:'model'},()=>source),source)});