shesh-core

• License: GPL-3.0-or-later
• Owner: Gagan Jain (@gaganjainse)
• Layer: Brain + Soma (16 folded packages) — Part of: shesh-ecosystem
• CI: green (GitHub Actions)

Why one repo#

This consolidation followed a 2026-08-13 fleet audit (ADR-0019): federation is the right shape for independently versioned services, but a 150-line module is not a service — it is a file. The 16 folded repositories each carried their own pyproject.toml, CI, SECURITY.md, and Dependabot config, and that duplication drifted: different ruff configs, a missing console script here or there, cross-repo dependencies that could not resolve from PyPI.

One repo fixes that at the source: one pyproject.toml, one ruff config, one CI pipeline, one license, and relative imports that always resolve.

The console-script command names are unchanged from the old repos, so every existing MCP client config (~/.config/shesh/mcp/*.json) keeps working after the move.

Governance#

Every tool call passes through the shesh_audit Guard — policy verdicts (allow / confirm / deny) are logged to a hash-chained audit trail. The policy itself is config-driven via ~/.config/shesh/policy.json (surfaced in the desktop app under Settings → Shesh → Governance).

Related repos#

Kept separate on purpose, as real, independently versioned services: shesh-memory, shesh-orchestrator, shesh-harness, shesh-phone, shesh-omniroute — each depends on shesh-core>=0.1. See the ecosystem manifest (manifests/components.toml) and the compiled reading list, shesh-docs, in the source repository.