v0.2.0 — stream through the App Server, install as a bundle

Install — one command, no patch file to edit

dsh plugin --profile web add git+ssh://git@github.com/zhangzhangco/dsh-llm-codex.git

The package now declares dsh.bundle.patch, so dsh plugin appends it to the
profile's dsh.profile.bundles, and the cordis.patch.yml shipped inside the
package mounts the llm-codex row by itself. Restart the profile afterwards.
The .tgz attached below is the same package if you would rather copy a file.

Added

• True streaming. cliBackend: app-server runs Codex's stdio App Server and
  forwards item/agentMessage/delta as it arrives, instead of emitting one
  text-delta per completed item. The default stays exec, so nothing changes
  until you opt in.
• app-server.js — one isolated process and ephemeral thread per request,
  JSON-RPC over stdio, deltas mapped to text and reasoning chunks, final
  item/completed adding only the tail that was not streamed.
• appServerArgs, and 15 tests over a fake app-server.

Changed

• cordis.patch.yml now ships with the package as its profile layer, carrying
  nothing but defaults so it stays machine-independent.
• README: one-command quick start, the tarball / git / linked-folder forms
  without the hand-written mount row, and a "Why GitHub and not npm" note.

Upgrading from 0.1.x

Delete the hand-written insert row for llm-codex from your profile's
cordis.patch.yml, and keep only per-machine overrides as an id-targeted patch:

- id: llm-codex
  config:
    sandbox: danger-full-access

Two entries sharing an id are fatal at boot — the loader throws
duplicate loader entry id: llm-codex and the profile does not start. Check the
composed tree without booting anything with dsh --profile web --dump-config.

Distribution

Not published to npm: the name dsh-llm-codex there belongs to an unrelated
implementation by another author, so the git repository is the channel and
private: true stays set as a guard. Discovery is the GitHub dsh-plugin
topic — there is no official DSH plugin registry.