@lamplitisles/dsh-nanocodex 0.1.0-beta.0

package/LICENSE

@@ -0,0 +1,65 @@
+Apache License
+Version 2.0, January 2004
+http://www.apache.org/licenses/
+
+TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+1. Definitions.
+
+"License" shall mean the terms and conditions for use, reproduction, and distribution as defined by Sections 1 through 9 of this document.
+
+"Licensor" shall mean the copyright owner or entity authorized by the copyright owner that is granting the License.
+
+"Legal Entity" shall mean the union of the acting entity and all other entities that control, are controlled by, or are under common control with that entity. For the purposes of this definition, "control" means (i) the power, direct or indirect, to cause the direction or management of such entity, whether by contract or otherwise, or (ii) ownership of fifty percent (50%) or more of the outstanding shares, or (iii) beneficial ownership of fifty percent (50%) or more of the outstanding shares.
+
+"You" (or "Your") shall mean an individual or Legal Entity exercising permissions granted by this License.
+
+"Source" form shall mean the preferred form for making modifications, including but not limited to software source code, documentation source, and configuration files.
+
+"Object" form shall mean any form resulting from mechanical transformation or translation of a Source form, including but not limited to compiled object code, generated documentation, and conversions to other media types.
+
+"Work" shall mean the work of authorship, whether in Source or Object form, made available under the License, as indicated by a copyright notice that is included in or attached to the work (an example is provided in the Appendix below).
+
+"Derivative Works" shall mean any work of authorship, whether in Source or Object form, that is based on (or derived from) the Work and for which the editorial revisions, annotations, elaborations, or other modifications represent, as a whole, an original work of authorship. For the purposes of this definition, Derivative Works shall not include works that remain separable from, or merely link (or bind) to the interfaces of, the Work and Derivative Works thereof.
+
+"Contribution" shall mean any work of authorship, including the original version of the Work and any modifications or additions to that Work, that is intentionally submitted to Licensor for inclusion in the Work by the copyright owner or by an individual or Legal Entity authorized to submit on behalf of the copyright owner.
+
+"Contributor" shall mean Licensor and any individual or Legal Entity on behalf of whom a Contribution has been received by Licensor and subsequently incorporated within the Work.
+
+2. Grant of Copyright License. Subject to the terms and conditions of this License, each Contributor hereby grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare Derivative Works of, publicly display, publicly perform, sublicense, and distribute the Work in Source or Object form.
+
+3. Grant of Patent License. Subject to the terms and conditions of this License, each Contributor hereby grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free patent license to make, have made, use, offer to sell, sell, import, and otherwise transfer the Work.
+
+4. Redistribution. You may reproduce and distribute copies of the Work or Derivative Works thereof in any medium, with or without modifications, provided that You meet the following conditions:
+
+   (a) You must give any other recipients a copy of this License; and
+
+   (b) You must cause modified files to carry prominent notices stating that You changed the files; and
+
+   (c) You must retain all copyright, patent, trademark, and attribution notices from the Source form.
+
+5. Submission of Contributions. Unless You explicitly state otherwise, any Contribution intentionally submitted for inclusion in the Work shall be under the terms and conditions of this License.
+
+6. Trademarks. This License does not grant permission to use the trade names, trademarks, service marks, or product names of the Licensor.
+
+7. Disclaimer of Warranty. The Work is provided on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+
+8. Limitation of Liability. In no event shall any Contributor be liable for any damages arising from the use or inability to use the Work.
+
+9. Accepting Warranty or Additional Liability. While redistributing the Work, You may choose to offer support or warranty obligations consistent with this License, but only on Your own behalf.
+
+END OF TERMS AND CONDITIONS
+
+Copyright 2026 LamplitIsles
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.

package/NOTICE

@@ -0,0 +1,2 @@
+OpenAI Codex
+Copyright 2025 OpenAI

package/README.md

@@ -0,0 +1,182 @@
+# DSH Nanocodex
+
+This package replaces the selected DeepSeek Harness agent loop with the
+Nanocodex Node/WASM engine. DSH remains the owner of session events, settings,
+credentials, workspace policy, and tool execution; Nanocodex owns model
+execution, Code Mode, QuickJS, and model-context compaction.
+
+The workspace install hook downloads the Nanocodex SDK and tools from the
+GitHub release pinned in `engine-release.json`, verifies their SHA-256 hashes,
+and caches them under the repository's `.cache/nanocodex/`. Local development
+and CI use these same archives without a sibling checkout. During packing,
+`prepack` copies both archives into `vendor/`, rewrites their internal imports,
+and removes the local dependency entries from the packed manifest. The packed
+plugin includes the release pin and runs without downloading engine artifacts.
+Source provenance is recorded in `docs/IMPORTS.md` and
+`docs/nanocodex-companion-engine.md`.
+
+## Supported route
+
+The adapter accepts only the explicit OpenAI Responses route (`openai` or
+`openai-codex-responses`) and the four Nanocodex model ids:
+`gpt-5.6-sol`, `gpt-5.6-terra`, `gpt-5.6-luna`, and `gpt-6-astra`.
+The selected route's `apiKeyEnv` and optional `baseURL` are read from the
+DSH-owned `llm-pi-ai` settings shape and its credential is resolved through
+`ctx.credentials` for each engine creation. Unsupported routes fail before a
+provider request. The adapter accepts only the named `openai` and
+`openai-codex-responses` providers with an `openai`/`openai-responses` API.
+
+## Tool surface
+
+Nanocodex exposes the ordinary tools composed by the active DSH profile,
+including DSH Bash, MCP, and delegation. Nanocodex's built-in subagent tools
+are disabled so delegation remains DSH-owned. The package also registers the
+DSH-authorized `apply_patch` tool as a raw custom model tool:
+
+```text
+*** Begin Patch
+*** Add File: notes/example.txt
++new text
+*** Update File: notes/existing.txt
+@@
+-old text
++new text
+*** End Patch
+```
+
+Only `Add File` and `Update File` operations are supported. `Delete File` and
+`Move to` are rejected. The patch parser and matcher are maintained in this
+package, while the active DSH filesystem resolves paths, observes versions,
+enforces workspace containment, and performs guarded writes. Historical patch
+calls are hydrated as raw custom calls and are never executed again during
+resume or compaction; their results retain diff metadata for the Host.
+
+For local images, use DSH's official `read_image` tool and emit its adapted
+Code Mode result:
+
+```js
+image(await tools.read_image({ file_path: "picture.png" }));
+```
+
+The Code Mode result contains only `path` and `image_url`; the DSH result
+keeps its durable attachment reference. Call `image(result)` to emit the image;
+a bare `return result` completes the script without emitting it. Reading images
+through bash output is unnecessary and can truncate binary data.
+
+At a stopped driver boundary, interrupted calls receive an explicit error
+result. Agent activation also closes missing results left by an earlier failed
+turn, preserving the original calls and completed child operations. Recovery
+never re-executes tools or assumes their side effects were rolled back. A
+projection failure retains its original cause instead of reporting only the
+cancellation used to stop generation.
+
+Existing sessions are continued from DSH's active surface through typed
+`historySeed` hydration. Text-only reasoning blocks remain in the DSH transcript
+but are omitted from the model history: they are not portable provider reasoning
+items. Visible answers and tool exchanges retain their order, and reasoning-only
+messages do not create empty model messages.
+Pi-style `call_id|item_id` tool identities are split before replay: calls and
+results share the sanitized, at-most-64-character call part. DSH keeps the full
+original identity, including during compaction; ambiguous projected call IDs
+are rejected instead of merging tool exchanges.
+
+After each successful turn, the adapter replaces that session's checkpoint in
+DSH's private `nanocodex_checkpoints` storage domain and awaits persistence.
+The record includes the Nanocodex snapshot and an exact active
+surface boundary (replacement generation, surface sequence list, message count,
+and fingerprint). A new Host uses a checkpoint only when its route and boundary
+match; otherwise it hydrates the current DSH surface and never lets stale engine
+state override newer facts. Browser-visible `request/context` events contain
+only route and context-window metadata; image-heavy engine snapshots never
+travel in history pages. The private domain closes with the plugin and retains
+one latest checkpoint per session across Host restarts.
+
+## Compaction ownership
+
+Nanocodex performs manual and automatic custom compaction on the retained live
+runtime. Before each summary it sends a non-generating `purpose: "compaction"`
+request through DSH's existing `llm/stream` waterfall, ending at an empty
+stream. The original Companion middleware therefore selects its product-owned
+continuity instruction for configured sessions; this package does not copy
+that prompt. Unconfigured sessions use the adapter's short generic continuity
+instruction.
+
+The adapter consumes Nanocodex's `model.compaction.replaced` outcome exactly
+once per live runtime/revision. Its half-open model-history range and ordered
+retained-tail identities are mapped to DSH messages by exact history-item
+`kind`, `id`, and `call_id`, including complete retained tool exchanges. The
+DSH surface then replaces the prefix before the latest real user-led tail with
+the normal private compaction checkpoint. A public `compactRegion` request is
+supported only for that current prefix; arbitrary middle ranges fail with a
+`changed` error before any model or surface mutation.
+
+The successful replacement stays in the same Nanocodex runtime, preserving its
+model/tool configuration and transport policy. If mapping or DSH persistence
+fails after installation, the runtime is invalidated and the next request
+rebuilds from the authoritative DSH surface. Failed or canceled generation
+does not publish a successful checkpoint. The next ordinary request may miss
+the provider cache after replacement; cache-hit evidence requires authorized
+Owner acceptance and is not inferred from the local smoke.
+
+## Hosted transport fallback
+
+The adapter passes the configured `baseURL` and `websocketURL` to Nanocodex's
+public Node `Transport.openAi` route for ordinary Agent turns, manual
+compaction, and ancillary LLM requests. Nanocodex initially prefers its
+WebSocket transport. A failure during connection, before response output or
+tool execution, falls back to POST HTTPS/SSE; caller cancellation,
+authentication or validation failures, and failures after output begins are not
+resubmitted. SSE remains sticky for the affected Node runtime, so the adapter
+does not add a second loop, provider switch, or fallback settings surface.
+
+Each eligible fallback is projected to the existing Host logger under
+`dsh-nanocodex.transport` as a sanitized
+`nanocodex.transport_fallback` record containing the DSH session, request
+correlation, previous/next transport, error class, and reason. Credentials,
+headers, request bodies, prompts, provider errors, and private compaction data
+are not included, and the record is not published as Companion chat.
+
+For an authorized live check, obtain the exact Host PID (for example, with
+`systemctl --user show dsh-dev.service --property=MainPID --value`), attach a
+loopback Node Inspector to that process (if it is not already listening, the
+authorized operator can send `SIGUSR1`, then use the target from
+`http://127.0.0.1:9229/json/list`), and pause in a Nanocodex engine or LLM
+adapter method where the live `this.ctx` is in scope. Evaluate this scoped
+query; do not import a new Cordis root or dump the full buffer:
+
+```js
+this.ctx.logger.buffer
+  .filter((entry) => entry.name === "dsh-nanocodex.transport")
+  .map((entry) => entry.args[0])
+  .filter((record) => record?.kind === "nanocodex.transport_fallback");
+```
+
+Resume execution, disconnect the Inspector, and disable/close the loopback
+Inspector when finished. The in-process logger retains the latest 1,000
+messages across logger names; a Host restart discards them. The built-in buffer
+is not exported to the systemd journal by default, so use an existing Host
+logger exporter only when an external sink is already configured. The plugin
+does not create a second telemetry store.
+
+## Development
+
+```sh
+corepack pnpm --filter @lamplitisles/dsh-nanocodex run typecheck
+corepack pnpm --filter @lamplitisles/dsh-nanocodex run test
+corepack pnpm --filter @lamplitisles/dsh-nanocodex run build
+DSH_CLI=/absolute/path/to/dsh corepack pnpm --filter @lamplitisles/dsh-nanocodex run pack-smoke
+```
+
+The plugin uses Nanocodex's public `createQuickJsEvaluator` binding. DSH tools
+are exposed to Code Mode as guarded bridge functions; their calls retain the
+real DSH agent, session identity, and cancellation signal.
+
+The packed smoke uses a test-owned official DSH `0.1.2-rc.1` runtime and a
+loopback scripted provider. It does not use live credentials or the persistent
+development profile. Its Nanocodex provider rejects WebSocket upgrades and
+serves the scripted responses through local HTTP/SSE, proving the actual packed
+WASM/QuickJS fallback path and the queryable Host diagnostic.
+
+## License
+
+[Apache-2.0](LICENSE).

package/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,29 @@
+# Third-party notices
+
+The direct `apply_patch` tool carries the parser, matcher, and text-file
+portions of OpenAI Codex at commit
+`8e6a44b428e31f91b21edc97904fcdf4f0931ade`. It is limited to Codex `Add File`
+and `Update File` operations; Delete File and Move to are intentionally
+rejected. The wire grammar follows the same source with those operations
+removed.
+
+Sources:
+
+- <https://github.com/openai/codex/blob/8e6a44b428e31f91b21edc97904fcdf4f0931ade/codex-rs/core/assets/tools/apply_patch.lark>
+- <https://github.com/openai/codex/tree/8e6a44b428e31f91b21edc97904fcdf4f0931ade/codex-rs/apply-patch/src>
+
+OpenAI's attribution is reproduced in [`NOTICE`](NOTICE). The port is
+distributed under the Apache License 2.0; [`LICENSE`](LICENSE) contains the
+license text.
+
+This package carries the packed JavaScript and WebAssembly runtime from the
+Nanocodex project and its platform-neutral tool package so the DSH artifact does
+not depend on a sibling checkout.
+
+- `vendor/nanocodex` — Nanocodex, version 0.5.0, licensed under MIT OR Apache-2.0.
+  Source: <https://github.com/gakonst/nanocodex>.
+- `vendor/nanocodex-tools` — nanocodex-tools, version 0.1.0, licensed under MIT
+  OR Apache-2.0. Source: <https://github.com/gakonst/nanocodex>.
+
+The exact local source checkout and packing procedure are recorded in
+[`docs/nanocodex-companion-engine.md`](../../docs/nanocodex-companion-engine.md).

package/cordis.patch.yml

@@ -0,0 +1,52 @@
+# Nanocodex is the selected profile's only agent driver. The rows disabled here
+# are the old request/compaction/code-mode owners; ordinary DSH tools and their
+# business integrations remain composed by the profile.
+- id: agent-loop
+  disabled: true
+
+- id: llm-pi-ai
+  disabled: true
+
+- id: llm-deepseek
+  disabled: true
+
+- id: compaction-basic
+  disabled: true
+
+- id: command-compact
+  disabled: true
+
+# Replace only the shipped standard preset with the package-owned wrapper. The
+# wrapper includes the installed official composition and disables the nested
+# Basic owner through cordis-plugin-include's public patch seam. Other shipped
+# presets remain discoverable from the official root, and the user root remains
+# enabled by the agent-presets defaults.
+- id: agent-presets
+  name: "@deepseek-ai/dsh-agent-presets"
+  config:
+    default: standard
+    includeShippedRoot: false
+    includeUserRoot: true
+    roots:
+      - path: !!js "process.getBuiltinModule('node:path').join(process.getBuiltinModule('node:path').dirname(process.getBuiltinModule('node:module').createRequire(baseUrl).resolve('@lamplitisles/dsh-nanocodex/package.json')), 'presets')"
+        trust: system
+      - path: !!js "process.getBuiltinModule('node:path').join(process.getBuiltinModule('node:path').dirname(process.getBuiltinModule('node:module').createRequire(baseUrl).resolve('@deepseek-ai/dsh-agent-presets/package.json')), 'presets')"
+        trust: system
+
+- insert:
+    - id: dsh-nanocodex
+      name: "@lamplitisles/dsh-nanocodex"
+      inject:
+        [
+          agents,
+          sessions,
+          settings,
+          credentials,
+          attachments,
+          commands,
+          systemPrompt,
+          tools,
+          fs,
+          storageDomain,
+          llm,
+        ]