WIP: feat(curry): add versioned ledger tools and direct commands #10

2026-08-26T13:30:34Z

Athena commented

2026-08-26 13:30:34 +00:00

Summary

Vendors the stdlib-only Curry functional/versioned database and preloads a dedicated data/curry.db ledger.
Registers ten Curry read/write/execute tools.
Adds literal-only /tool_name(arg=value) commands that bypass the model and treat the typed command as explicit approval.
Forces per-call approval for model-issued Curry writes and function execution.
Carries the str.format/format_map sandbox-escape regression fix and a repeatable preload test.

Dependency

Stacked on the TUI PR, the packaging PR, and #5. Merge those first; this PR then reduces to the fourteen Curry-specific files.

Verification

39 focused Curry, slash-command, and TUI tests passed.
Full suite: 156 passed, 1 skipped, with only the four existing Windows-only failures that reproduce on main.
The wheel built successfully and archive inspection confirmed curry_core.py, curry_store.py, slash_commands.py, TUI, modules, and compiled web assets.

Merge hold

The upstream Athena-Pro/Curry repository currently has no LICENSE file. Confirm redistribution terms or add an appropriate upstream license before merging this vendored source.

## Summary - Vendors the stdlib-only Curry functional/versioned database and preloads a dedicated data/curry.db ledger. - Registers ten Curry read/write/execute tools. - Adds literal-only /tool_name(arg=value) commands that bypass the model and treat the typed command as explicit approval. - Forces per-call approval for model-issued Curry writes and function execution. - Carries the str.format/format_map sandbox-escape regression fix and a repeatable preload test. ## Dependency Stacked on the TUI PR, the packaging PR, and #5. Merge those first; this PR then reduces to the fourteen Curry-specific files. ## Verification - 39 focused Curry, slash-command, and TUI tests passed. - Full suite: 156 passed, 1 skipped, with only the four existing Windows-only failures that reproduce on main. - The wheel built successfully and archive inspection confirmed curry_core.py, curry_store.py, slash_commands.py, TUI, modules, and compiled web assets. ## Merge hold The upstream Athena-Pro/Curry repository currently has no LICENSE file. Confirm redistribution terms or add an appropriate upstream license before merging this vendored source.

Athena added 16 commits 2026-08-26 13:30:35 +00:00

fix(sync): close SQLite handles before restore c3a7b6eefd

Use contextlib.closing for dump, comparison, and restore connections so Windows can unlink the live database immediately after the comparison step.

fix(memory): sweep legacy orphaned message vectors d56d579755

Repair vector rows left behind by older databases at store startup. Keep the existing single-statement delete path from main and avoid reintroducing the redundant batched helper.

fix(ollama): normalize hosts, errors, and reasoning output 2ebe93b4f7

Separate bind and client addresses, include Ollama's response body in HTTP failures, and strip inline <think> blocks from complete and streamed replies.

feat: add portable NexusOS CLI and packaging d579502a5b

feat(packaging): move the CLI into nexusos_cli and make the wheel self-sufficient 9104c724c4

The CLI shipped from `management/`, which also holds desktop-only pieces (the
Tk control panel, the XFCE panel wiring, the shell wrappers). Packaging that
directory meant the wheel either dragged in tkinter or shipped a broken import.
Split it: `nexusos_cli/` is what the wheel ships and what `nexus`/`ncp`/
`nexusos` dispatch to, `management/` keeps the desktop half.

Alongside the move:

* hatch_build.py decides the interface/web/dist include at build time. dist/
  is gitignored, so a static force-include aborts `pip install -e .` on a
  fresh clone - before the reader reaches the `npm run build` step. Editable
  installs now skip a missing dist; wheels and sdists hard-error naming the
  command to run.
* synapse/proc_util.py gives frontend_manager and ncp process inspection and
  termination without psutil, which became an optional extra when the wheel
  landed. It routes around Windows having no signals, where os.kill(pid, 15)
  is an unblockable TerminateProcess rather than a polite request.
* nexusos_cli/monitor.py adds `ncp monitor`, an ASCII dashboard with no curses
  or rich dependency so it works in Termux, plain SSH and Windows Terminal.
  Collector and renderer are separate so tests feed fixtures, no stack needed.
* tests/test_packaging_deps.py fails the gate when synapse or nexusos_cli
  import a distribution pyproject does not declare, and when an optional
  dependency is imported at module scope instead of lazily.
* bin/check.sh now builds the wheel, twine-checks it, and asserts the compiled
  UI and seed playbooks are actually inside it. A wheel that builds but ships
  no dist/ serves a blank page, which only shows up after release.

tests/test_nexus_api.py moves to tests/ with the module it covers.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

fix(packaging): include backend modules in distributions

package / wheel (pull_request) Waiting to run

Details

5f67d19e80

feat(cli): add interactive TUI chat 1449280fcd

Add a Textual chat interface with threaded SSE streaming, slash commands, interrupt handling, and bare nexus dispatch. Package it behind the tui extra, document usage, and cover command routing, dependencies, and headless interaction with tests.

fix(tui): preserve errors and deny gated tools safely 6f5094b5fc

Keep stream failures in the persistent transcript instead of clearing them with the live preview. Use each tool request's capability token to deny actions immediately until the TUI has an interactive approval flow, and cover both behaviors with focused regressions.

fix(tui): retain stream conversation for tool denial da3509eb04

Capture each stream's conversation ID before starting its worker so /new cannot redirect a later action denial. Add a headless regression that mutates the active conversation while a tool request is in flight.

fix(tui): cancel silent streams promptly 9ca37057eb

Move chat streaming onto a cancellable async task so Ctrl+C interrupts a pending socket read on macOS instead of waiting for the 120-second read timeout. Add a headless silent-stream regression that verifies prompt recovery and a successful next message.

fix(tui): prioritize interrupt and quit keys

package / wheel (pull_request) Waiting to run

Details

9ed2908170

Declare Ctrl+C and Ctrl+D as priority Textual bindings so the focused prompt cannot consume them. Drive exit and silent-stream cancellation regressions through Pilot key events instead of calling action handlers directly.

feat: vendor Curry, preloaded and callable across the one universal wheel 4a6d1bf8bb

Vendors curry_core.py from Athena-Pro/Curry (with the str.format()/format_map()
sandbox-escape fix from https://github.com/Athena-Pro/Curry/pull/4 already
applied) into synapse/, since Curry itself isn't a pip-installable package -
it's meant to be pointed at via a config path, which only works from a source
checkout. Vendoring a single self-contained, stdlib-only file ships it inside
NexusOS's own wheel with no extra dependency to reconcile.

synapse/curry_store.py opens it into a module-level singleton (curry_db) at
import time, the same pattern as memory.store.store and
playbooks.store.playbook_store, and main.py imports it so it's genuinely
initialized at process startup - preloaded, not lazy-on-first-use. Backed by
its own CURRY_DB file (nexus_config.py), separate from memory.db.

NexusOS builds exactly one wheel (py3-none-any, no compiled extensions) -
there is no separate Windows/macOS/Linux artifact; platform differences are
handled by requirement overlays at install time, not by building different
wheels. Verified the same wheel actually carries this correctly: built it,
confirmed twine check passes, confirmed synapse/curry_core.py and
curry_store.py are present in the archive (bin/check.sh's packaging gate now
asserts this too), then installed that exact wheel into a throwaway venv and
round-tripped a declare_constant/get_constant_latest call against it with no
source checkout present - proving "preloaded and ready to be called" holds
from the shipped artifact, not just editable-install execution.

Android/Termux is unaffected by this change in either direction: it already
has a separate, documented, pre-existing blocker in docs/TERMUX.md (no
published Android pydantic-core wheel) that has nothing to do with Curry,
which is pure stdlib and adds no new native/binary dependency.

Scope: preload only, nothing wired into a chat-facing tool yet - no model or
user-authored content reaches declare_function/call_function today.

Verified: 216 backend tests pass (4 new in test_curry_store.py, including a
regression test proving the vendored sandbox fix survived the copy); the 12
pre-existing C/C++/Rust toolchain failures are unrelated and unchanged.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

feat: direct tool invocation via /tool_name(arg=val) + wire Curry as real tools 1183ab5282

Adds synapse/slash_commands.py: a chat message that's nothing but
/tool_name(arg=val, arg=val) dispatches straight through tools.dispatch(),
skipping model selection, RAG/playbook context assembly, and the ask-policy
approval round-trip entirely. A human typing this IS the approval - there's
no one else to ask - so it's a deliberate, reviewed bypass of the approval
step specifically, not of anything a tool validates internally (path
boundaries, size caps, Curry's own sandbox checks all still run). Argument
values parse via ast.literal_eval only: strings/numbers/bools/None/literal
containers, no names, no calls, no attribute access - a malformed or
hostile-looking argument fails to parse rather than executing anything.

Wired into chat_stream_endpoint (main.py) as an early short-circuit, before
any of the RAG/model-selection work that a slash-command doesn't need. Web
needed no changes (it already forwards raw text unchanged); the TUI
previously swallowed every leading "/" locally and never reached the backend
with it, so tui_app.py's _handle_slash now falls through to _start_chat for
anything shaped like a tool call while still handling its own local
meta-commands (/help, /model, /new, ...) exactly as before.

Also finally wires Curry in as ten real tools (curry_declare_constant,
curry_get_constant/_latest, curry_list_constants, curry_retire_constant,
curry_declare_function, curry_get_function, curry_list_functions,
curry_call_function, curry_retire_function) - deferred from the vendoring
pass. The five write/execute ones are ACTION tools in the same
always-ask-regardless-of-global-policy floor as edit_source
(ALWAYS_ASK_ACTION_TOOLS, generalized in tools.py from the old
self_edit-only ALWAYS_ASK_TOOLS so future tool families share one place to
register into). curry_call_function is gated as an action for the same
reason run_snippet is: it executes code, even sandboxed.

Fixed a real bug surfaced while wiring this up: curry_db is a long-lived
singleton holding one sqlite3 connection (unlike NexusOS's own memory store,
which opens/closes a fresh connection per call specifically to dodge this),
and sqlite3 forbids using a connection from a different thread than created
it. That's a non-issue in production (uvicorn's single event-loop thread),
but Starlette's TestClient runs the ASGI app through an anyio portal thread,
so it broke immediately under test. Fixed at the source (curry_core.py,
Curry.__init__) with check_same_thread=False, documented as a second
deliberate vendoring deviation alongside the PR #4 sandbox fix - there was
never real concurrent access here, just an overly strict same-thread
assertion tripping on a thread-identity change with only one logical caller.

Verified: 244 backend tests pass (18 new for the parser + endpoint wiring +
curry tool registration, 4 new for the TUI passthrough); the 12 pre-existing
C/C++/Rust toolchain failures are unrelated and unchanged. Confirmed by hand
over the real HTTP endpoint: successful dispatch, zero tool_request events
(approval bypass working as designed), a format()-dunder exploit attempt
still rejected by the vendored sandbox fix even through the new tool
registration, malformed arguments rejected before ever reaching dispatch,
and an unknown tool name rejected cleanly. Wheel rebuilt and content-checked
(bin/check.sh's gate now also asserts slash_commands.py ships).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

docs: update CLAUDE.md for curry tool wiring + slash commands 841464f9b1

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

chore(curry): ignore the runtime ledger 13bffc41e9

test(curry): keep preload check repeatable

package / wheel (pull_request) Waiting to run

Details

a9ff8c0c24

Some checks are pending

package / wheel (pull_request) Waiting to run

Details

This pull request has changes conflicting with the target branch.

synapse/chat.py
synapse/tools.py

This pull request is marked as a work in progress.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u https://git.enderofwings.com/Athena/NexusOS codex/curry-tools-pr:Athena-codex/curry-tools-pr

git checkout Athena-codex/curry-tools-pr

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: enderofwings/NexusOS#10

Allow edits from maintainers