You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Commit 2593478
Browse filesBrowse the repository at this point in the historyBrowse files
@@ -45,7 +45,14 @@ tested property (see [Security posture](#security-posture)).
45
45
---
46
46
47
47
## See it
48
-
Captured from the live desktop client at 1920×1080 through browser automation, against the Codescape service running on the CUDA engine. The scene is the real VisionClaw and agentbox checkouts, not a demo dataset.
48
+
The screenshots below were captured for the 19 October 2026 README update from the desktop client at 1920×1080 through browser automation, against the Codescape service running on the CUDA engine. The scene is the real VisionClaw and agentbox checkouts, not a demo dataset.
49
+
50
+
### Repository scenes and input
51
+
52
+
A local 21 October development commit adds a collapsible repository panel, estate-scene links and revised SpaceMouse axes. That commit (`ffb98c2`) was not on the published main branch when this documentation update was prepared. These controls remain pending publication; the screenshots below predate them. See [deployment configuration](deploy/README.md) for the published scene and input contract.
53
+
54
+
<details>
55
+
<summary><strong>Captured gallery: tiers, filters, queries and timeline</strong></summary>
49
56
50
57
### Three levels of detail
51
58
The client shows one tier at a time: leave it on `auto` or pin L0, L1 or L2 from the tier panel. L0 shows directories, L1 files, L2 symbols.
@@ -77,6 +84,8 @@ The command box takes the same grammar as push-to-talk ([Voice and typed command
77
84
78
85
Not shown: agent presence (an actor appearing at the node it touches), voice and the XR client. Those need the hook token, the speech services and a headset respectively, and are described in [Status & honesty](#status--honesty).
79
86
87
+
</details>
88
+
80
89
---
81
90
82
91
## Where Codescape sits
@@ -87,7 +96,7 @@ Codescape is one section of the [VisionFlow](https://github.com/DreamLab-AI/Visi
87
96
|---|---|
88
97
|[VisionFlow](https://github.com/DreamLab-AI/VisionFlow)| The canon: ecosystem map, compatibility matrix and honest status ledger. |
89
98
|[VisionClaw](https://github.com/DreamLab-AI/VisionClaw)| The host deployment. It mounts this repository as the `codescape/` submodule, owns the compose service and nginx route, builds the CUDA PTX, and publishes [`visionclaw-wire`](https://crates.io/crates/visionclaw-wire), the frozen position wire. Its Godot XR client connects through `/wss`. |
90
-
|[agentbox](https://github.com/DreamLab-AI/agentbox)| The agent container. The activity-sink hook ([ADR-2144](https://github.com/DreamLab-AI/agentbox/blob/feat/codescape-activity-sink/docs/adr/ADR-2144-activity-sink-hook.md), branch `feat/codescape-activity-sink`) posts agent activity to `:4101`. |
99
+
|[agentbox](https://github.com/DreamLab-AI/agentbox)| The agent container. The activity-sink hook ([ADR-2146](https://github.com/DreamLab-AI/agentbox/blob/main/docs/adr/ADR-2146-activity-sink-hook.md); merged, default-off) posts agent activity to `:4101`. |
91
100
|[loom](https://github.com/DreamLab-AI/loom)| Optional out-of-grammar command parse (`CODESCAPE_LOOM_URL`); voice runs without it. |
92
101
|[graphicle](https://github.com/Graphicle-AI/graphicle)| The code-graph extraction engine, used unmodified as a pinned git dependency. |
93
102
@@ -115,7 +124,7 @@ flowchart LR
115
124
end
116
125
D[Desktop client<br/>React, three, R3F]
117
126
X[Godot XR client<br/>unchanged, via /wss]
118
-
H[Agent activity hook<br/>agentbox ADR-2144]
127
+
H[Agent activity hook<br/>agentbox ADR-2146]
119
128
subgraph voice[Voice stack]
120
129
ASR[nemotron-asr]
121
130
TTS[pocket-tts]
@@ -136,8 +145,7 @@ flowchart LR
136
145
```
137
146
138
147
Positions go out as the frozen 52-byte V3 record inside V5 envelopes, the
139
-
same bytes VisionClaw's clients already decode, so the XR client needs no
140
-
change. Topology, selections, captions and query results go out as JSON on
148
+
same position record VisionClaw’s clients decode. The shared record reduces decoder changes; client connection, presence and device acceptance remain separate integration work. Topology, selections, captions and query results go out as JSON on
141
149
`/ws/events`. There is no Codescape-specific wire format.
142
150
143
151
@@ -161,15 +169,22 @@ A permissive crate never depends on an AGPL crate. See [LICENSE](LICENSE).
161
169
## Quick start
162
170
### Standalone, CPU layout
163
171
172
+
From this repository root, build the browser client first (Node 22.3 or later and Rust 1.94 or later):
173
+
164
174
```bash
175
+
cd client
176
+
npm ci --include=dev
177
+
npm run build
178
+
cd ..
165
179
cargo run --release -p codescape-server -- \
166
180
--bind 127.0.0.1 \
167
181
--data-dir ./.codescape \
182
+
--static-dir target/codescape-dist \
168
183
--repo myrepo=/path/to/myrepo
169
-
# open http://127.0.0.1:4100/ (build the client first: see client/README.md,
170
-
# then add --static-dir target/codescape-dist)
171
184
```
172
185
186
+
Open `http://127.0.0.1:4100/`, select a tier, then try `overview` and `focus on <symbol-name>` in the command box. The path in `--repo` must name the source tree you want to inspect. Voice additionally needs speech services; typed navigation does not.
187
+
173
188
`--repo` is repeatable (`--repo a=/src/a --repo b=/src/b`). The default data
174
189
directory is `/data/codescape`, which is rarely writable on a workstation;
175
190
`./.codescape` is gitignored. The CPU engine needs no GPU and no CUDA
@@ -192,6 +207,8 @@ back to the CPU engine with the reason shown in `/api/health`.
192
207
VisionClaw mounts this repository as a git submodule at `codescape/` and owns
193
208
the compose service and the nginx location (see [deploy/README.md](deploy/README.md)).
194
209
210
+
Run from the **VisionClaw** checkout, in its authorised host shell:
Every flag has a `CODESCAPE_*` environment variable. The main ones:
233
252
234
253
| Variable | Default | Purpose |
@@ -261,9 +280,11 @@ P6 auth flags).
261
280
262
281
---
263
282
283
+
</details>
284
+
264
285
## Security posture
265
286
-**Authentication is open until P6.**`/api/health` reports `"auth":"open"`.
266
-
NIP-98 on every route and a pubkey allowlist land in P6. Until then, do not
287
+
NIP-98 and the allowlist remain planned. `--require-auth` currently refuses startup; it does not enable a verifier ([source](crates/codescape-server/src/auth.rs)). Until then, do not
267
288
expose `:4100` to a network you do not trust. Under VisionClaw the port is
268
289
published on host loopback only; the dev nginx path `/codescape/` on `:3001`
269
290
is a recorded dev-only owner waiver.
@@ -303,6 +324,9 @@ cd client && npm ci && npm run typecheck && npm test && npm run build
303
324
---
304
325
305
326
## Status & honesty
327
+
328
+
**Publication checked 21 October 2026 against main `e300451`.** Local development at `ffb98c2` adds the repository panel, scene links and SpaceMouse mapping; this documentation publication leaves that feature commit unmerged. The phase evidence below records earlier runs; its counts and hardware observations are not fresh results for this revision.
329
+
306
330
| Phase | State |
307
331
|---|---|
308
332
| P0 Spine | landed |
@@ -313,10 +337,9 @@ cd client && npm ci && npm run typecheck && npm test && npm run build
313
337
| P5 Voice | not gated: one spoken round trip (ASR, grammar, answer, TTS) observed; the goldens and contention evidence are open |
314
338
| P6 Publish and dispatch | pending: TLS, NIP-98, allowlist, signed dispatch |
315
339
316
-
Shared-port access through the VisionClaw dev nginx at `http://<host>:3001/codescape/`is live as of 2026-10-18 (ADR-2143 A4), and the XR headset runs against it with the client's Backend toggle in Codescape mode.
340
+
The recorded 18 October host setup serves `/codescape/`through VisionClaw’s development nginx on port 3001 (ADR-2143 A4). The evidence index links the earlier headset run. This README review has not revalidated the running host, current GPU conformance or headset behaviour.
317
341
318
-
The 100k-node targets (GPU step 5 ms, cold settle 10 s) are missed at 7.8 ms
319
-
and 13.7 s, both attributed to host-side work per step. Evidence:
342
+
Earlier reported 100k-node figures (7.8 ms GPU step and 13.7 s cold settle) miss the 5 ms / 10 s targets. The evidence index says performance and conformance numbers were reported without a committed rerun; treat them as provisional, not certified measurements. Evidence:
0 commit comments