@mymuse/cli 0.0.0-stage → 1.0.40

package/LICENSE.md

@@ -0,0 +1,12 @@
+DeepSeekCode
+
+© 2026 DeepSeekCode. All rights reserved.
+
+本软件为专有软件，源代码不公开。保留所有权利。
+
+This software is proprietary and closed source. All rights reserved.
+No part of this software may be copied, modified, distributed, sublicensed,
+sold, or otherwise used without the prior written permission of the
+copyright holder.
+
+Use is subject to a separate written license agreement with the copyright holder.

package/README.md

@@ -1,3 +1,626 @@
-# Temporary Holding Version
+# DeepSeekCode CLI
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+[![npm version](https://img.shields.io/npm/v/@deepseekcode/cli.svg)](https://www.npmjs.com/package/@deepseekcode/cli)
+[![License: Proprietary](https://img.shields.io/badge/license-Proprietary-red.svg)](#license)
+[![Node version](https://img.shields.io/node/v/@deepseekcode/cli.svg)](https://nodejs.org)
+
+**DeepSeekCode is a local-first AI coding agent that runs in your terminal.** One runtime on
+your own machine serves three surfaces — an interactive terminal UI (TUI), a web UI, and an
+HTTP/WebSocket API — and drives it with any OpenAI-compatible model. It is built around a real
+permission/approval layer, a strictly read-only plan mode, and runtime-switchable act / goal /
+chat modes.
+
+Install it, run `dscode`, and you have an agent that reads and edits your files, runs commands,
+reviews code, and can work unattended in CI.
+
+Languages: **English** · [简体中文](#zh-cn) · [日本語](#ja) · [Español](#es)
+
+## At a glance
+
+|  |  |
+|---|---|
+| **What it is** | A local-first AI coding agent — terminal-first, with an optional web UI |
+| **Project page** | https://deepseekcode.github.io/deepseekwork/ |
+| **Install** | `npm install -g @deepseekcode/cli` |
+| **Run** | `dscode` (interactive) · `dscode exec "..."` (non-interactive) |
+| **Requires** | Node.js >= 18 |
+| **Platforms** | Prebuilt native binaries: Windows x64 / ARM64, macOS Intel / Apple Silicon, Linux glibc & musl, x64 / ARM64 |
+| **Interfaces** | Terminal TUI · Web UI at `http://localhost:8080` · HTTP + WebSocket API · JSONL batch mode |
+| **Modes** | `act` · `auto-act` · `goal` · `auto-goal` · `chat` (`Shift+Tab`), plus a read-only plan toggle (`/plan`) |
+| **Models** | Any OpenAI-compatible endpoint (hosted or local) — no vendor lock-in |
+| **Built-in tools** | ~70: files, search, git, LSP, code intelligence, browser, sub-agents, plans, memory, MCP |
+| **License** | Proprietary (see [License](#license)) |
+
+## What you get
+
+- **Terminal TUI** — a keyboard-first coding agent rendered with React through a vendored Ink
+  kernel. Fullscreen (alt-screen) by default; `--inline` opts back into main-screen mode.
+- **Local runtime, started for you** — `dscode` starts the agent core plus an HTTP/WebSocket
+  server in the same process. There is no separate backend to install or connect.
+- **Web UI** — sessions, tasks, models, themes and settings at `http://localhost:8080`
+  (provider setup lives at `http://localhost:8080/#models`).
+- **Non-interactive modes** — `exec` (JSONL output), `codeview` (AI code review), and `test-fix`
+  (auto-fix test loop) for scripts, hooks and CI.
+- **A permission layer on every tool call** — scopes `system > project > user > local > session`
+  (narrowest wins), `auto` / `ask` / `deny` policies, an optional AI classifier for the grey zone,
+  and timeout-means-deny.
+- **Plan mode that is genuinely read-only** — `/plan` shows a checklist you approve before
+  anything executes; the running loop picks the checklist up instead of switching engines.
+- **Sub-agents, background work and workflows** — delegate isolated jobs to sub-agents, detach
+  long-running work, and orchestrate multi-step tasks with an explicit plan.
+- **Memory and skills** — durable notes that survive across sessions, plus reusable skills
+  inserted with `/skills`.
+- **MCP support** — connect Model Context Protocol servers with `/mcp`.
+- **IM channels** — LINE, Slack, WhatsApp, QQ, DingTalk and Feishu (with inbound
+  request-signature verification), so a session can also be driven from a chat app.
+- **Sandboxed shell tools** — a local command sandbox (bwrap on Linux, SBPL on macOS,
+  MXC / Docker on Windows) that refuses to run rather than fall back to an unsandboxed host
+  shell when no policy is available.
+- **Themes** — dark, light, nord, dracula, monokai, one-dark, tokyo-night.
+- **Bilingual by design** — most interactive commands have Chinese aliases, and the interface
+  text is localized.
+
+## Who it's for
+
+- You want the agent to run on your machine against your own provider credentials, not behind
+  someone else's cloud service.
+- You care about controlling what the agent may touch — approvals, scope policies, a read-only
+  plan pass, and a command sandbox.
+- You want one tool for interactive work **and** for CI (`dscode exec` emits JSONL).
+- You live in a terminal but occasionally want a bigger view (the web UI shares the same runtime).
+- You work in Chinese and/or English.
+
+## Install
+
+```bash
+npm install -g @deepseekcode/cli
+```
+
+Or with your favorite package manager:
+
+```bash
+# pnpm
+pnpm add -g @deepseekcode/cli
+
+# yarn
+yarn global add @deepseekcode/cli
+
+# bun
+bun add -g @deepseekcode/cli
+```
+
+This installs two commands: **`dscode`** (short) and **`deepseekcode`** (full name). Installation
+detects your platform and links the matching prebuilt native binary into place — after that
+`dscode` execs the native binary directly, with no Node process left resident. If the optional
+platform package is unavailable (for example `--omit=optional`), the installer prints instructions
+instead and `cli-wrapper.cjs` remains available as the JavaScript fallback.
+
+## Quick Start
+
+```bash
+dscode
+```
+
+That's it. The CLI starts the local agent runtime and opens the interactive terminal. On first run
+(no provider configured) it prints a link to the web UI where you can set up your LLM provider and
+model:
+
+```bash
+# model/provider setup page (also served by the CLI)
+# -> http://localhost:8080/#models
+```
+
+If your terminal's stdin isn't a TTY (e.g. a script or CI pipeline), the CLI skips the TUI and runs
+**headless** — the web UI stays available at the printed URL.
+
+Connect to an **existing** backend instead of starting a local one:
+
+```bash
+dscode run --backend http://localhost:8080
+```
+
+Resume your last session (or a specific one):
+
+```bash
+dscode --resume          # last session
+dscode --resume <id>     # specific session
+```
+
+## CLI Commands
+
+| Command | Description |
+|---------|-------------|
+| `dscode` / `dscode start` | Start local runtime + interactive TUI (also serves Web UI + API) |
+| `dscode start --auto` | Start with auto-approval mode enabled |
+| `dscode run --backend URL` | Connect to an existing backend instead of starting one |
+| `dscode exec <command>` | Execute a command non-interactively (JSONL output) |
+| `dscode exec --file <path>` | Read the command from a file |
+| `dscode codeview` | AI code review — bugs + unwired features (JSON output) |
+| `dscode review` | Review current code changes (legacy) |
+| `dscode test-fix` | Run the auto-fix test loop |
+| `dscode --resume [id]` | Resume the last session, or a specific one |
+| `dscode version` | Print version |
+
+Run `dscode --help` (or `-h`) for the full list.
+
+### Non-interactive examples
+
+```bash
+# Execute a command, get JSONL results
+dscode exec "fix the failing test in src/utils"
+
+# Plain text output, command from file
+dscode exec --file ./task.txt --text
+
+# AI code review focused on security, write report to file
+dscode codeview --focus security --output review.json
+
+# Auto-fix test loop (max 5 retries, analyze only)
+dscode test-fix --packages packages/cli --retries 5 --dry-run
+```
+
+## Interactive Commands
+
+Inside the TUI, use `/help` for the full list (most commands have Chinese aliases). Highlights:
+
+| Command | Action |
+|---------|--------|
+| `/help` | Show all commands |
+| `/model [name]` | Open model picker or switch model directly |
+| `/theme [name]` | Show or change terminal theme |
+| `/plan` | Toggle plan mode (review before executing) |
+| `/auto` | Toggle auto-approval mode |
+| `Shift+Tab` | Cycle modes: act · auto-act · goal · auto-goal · chat |
+| `/goal` | Set goal-directed mode |
+| `/thinking` | Toggle think mode on/off |
+| `/context` | Show current conversation state |
+| `/sessions [id]` / `/resume [id]` | List history / switch session |
+| `/tasks` | Toggle sub-task output panel |
+| `/undo [list]` | Undo the most recent file change |
+| `/clear` | Start a new session (current session is saved, resumable via `/sessions`) |
+| `/mcp <action>` | Manage MCP servers |
+| `/skills` | Insert a skill |
+| `/trace <traceId>` | Query a trace by id |
+| `/stop` `/pause` `/continue` | Control AI generation |
+| `Ctrl+S` / `Ctrl+G` | Stash the current draft / restore the most recent one |
+| `/exit` | Exit |
+
+## Options
+
+| Option | Description |
+|--------|-------------|
+| `-p, --port <port>` | HTTP port (default: first available from 8080) |
+| `--ws-port <port>` | WebSocket port (default: HTTP port + 1) |
+| `-w, --workspace <dir>` | Workspace directory (default: current directory) |
+| `-F, --force` | Kill an existing process on the target port before starting |
+| `-b, --backend <url>` | Backend URL for `run` mode |
+| `--ws <url>` | Override WebSocket URL |
+| `--provider <name>` | Provider to use (exec/review) |
+| `--model <name>` | Model to use (exec/review) |
+| `--theme <name\|path>` | Theme name or JSON theme file path |
+| `--prompt-version <ver>` | Prompt template version |
+| `--timeout <ms>` | Per-attempt LLM timeout (default: 300000 = 5 min) |
+| `--stall-threshold <ms>` | Stream stall detection threshold (default: 240000 = 4 min) |
+| `--no-update-check` | Disable the startup new-version notice |
+| `--no-auto-update` | Disable background auto-update (notice still shown) |
+
+## Permissions and safety
+
+Every tool call goes through the permission layer before it executes:
+
+- **Scopes** — `system > project > user > local > session`; the narrowest matching rule wins, so a
+  session-level decision can grant what a project-level rule would ask about.
+- **Policies** — `auto` (allow), `ask` (prompt), `deny`. High-risk operations ask even when a
+  broader rule would allow them, unless you are in auto-approval mode.
+- **AI classifier** — optional review of risky calls that a static rule does not cover.
+- **Timeout means deny** — an unanswered approval is a refusal, not an implicit yes.
+- **Read-only modes** — plan mode and reviewer/coordinator sessions cannot write at all.
+- **Command sandbox** — shell tools run inside a sandbox when a policy exists, and fail closed when
+  it does not.
+
+`/stop` and `/pause` always win over anything the runtime would otherwise do on its own.
+
+## Providers and models
+
+DeepSeekCode is provider-neutral: point it at any OpenAI-compatible endpoint, hosted or local, and
+switch models per session (or per mode). Provider and model settings are managed in the web UI at
+`http://localhost:8080/#models`, and stored under `~/.agent/`.
+
+## Configuration
+
+The CLI reads `~/.agent/config.yaml`:
+
+```yaml
+backend_url: http://localhost:8080
+ws_url: ws://localhost:8081/ws
+workspace_dir: /path/to/workspace
+```
+
+Provider / model settings are managed through the web UI at `http://localhost:8080/#models`.
+
+### Attention (notifications & bell)
+
+The TUI can notify you when a turn ends, errors, asks a question, needs a tool approval, or a
+subagent finishes. It is focus-aware — by default it only fires while the terminal is in the
+background. Add an `attention:` block to `~/.agent/config.yaml`:
+
+```yaml
+attention:
+  notifications: true   # OSC 9 / OSC 777 desktop notification
+  sound: true           # terminal bell (BEL) — on by default
+  volume: 0.4           # reserved (parity with opencode); BEL has no volume
+  when: blurred         # always | blurred | focused
+  sound_when: always
+  events: { done: true, error: true, question: true, permission: true, subagent_done: true }
+```
+
+The completion sound is on by default. Toggle it in the web UI under
+**Settings → Notifications** (writes `attention.sound` back to `config.yaml`); the CLI reads it at
+startup, so the change applies on the next CLI launch.
+
+`DEEPSEEKCODE_ATTENTION` overrides the file (`off` / `on`, or `notify,bell`). Terminals that don't
+support the OSC sequences drop them silently.
+
+<a name="local-state"></a>
+
+### Local state
+
+| File | Purpose |
+|------|---------|
+| `~/.agent/config.yaml` | Runtime, provider and attention configuration |
+| `~/.agent/sessions/` | Persisted sessions (resumable, format-versioned) |
+| `~/.agent/skills/` | User skills available via `/skills` |
+| `~/.agent/logs/` | Runtime logs |
+| `~/.agent/prompt-stash.json` | Draft stash pushed by `Ctrl+S` (LIFO) |
+| `~/.agent/frecency.json` | `@` file-mention ranking (`count · 0.5^(ageDays/30)`) |
+
+## Themes
+
+Set the theme at startup via the `DEEPSEEKCODE_THEME` env var (or `--theme`):
+
+| Theme | Env Value | Style |
+|-------|-----------|-------|
+| Dark (default) | `dark` | ANSI named colors, broad compat |
+| Light | `light` | Light terminal variant |
+| Nord | `nord` | Arctic blue-grey palette |
+| Dracula | `dracula` | Dark purple-vibrant |
+| Monokai | `monokai` | Classic code editor |
+| One Dark | `one-dark` | Atom's iconic dark |
+| Tokyo Night | `tokyo-night` | Deep navy + vibrant accents |
+
+```bash
+DEEPSEEKCODE_THEME=nord dscode
+DEEPSEEKCODE_THEME=/path/to/my-theme.json dscode
+
+# Partial overrides on the current theme (JSON)
+DEEPSEEKCODE_THEME_COLORS='{"primary":"#ff0000"}' dscode
+```
+
+Switch themes at runtime with `/theme [name]`.
+
+## Auto-Update
+
+On startup, `dscode` checks npm for the latest version asynchronously (non-blocking). When a newer
+version is found, the CLI **automatically reinstalls the global package** in the background
+(`npm install -g @deepseekcode/cli@latest`); the new version takes effect on the next launch.
+
+- Only affects **global npm installs** — source builds and `npx`/`bunx` caches are never touched.
+- Disable auto-install (keep the version notice): `DEEPSEEKCODE_NO_AUTO_UPDATE=1` or `--no-auto-update`
+- Disable the check entirely: `DEEPSEEKCODE_NO_UPDATE_CHECK=1` or `--no-update-check`
+
+## Environment Variables
+
+| Variable | Description |
+|----------|-------------|
+| `DEEPSEEKCODE_THEME` | Theme name or JSON theme file |
+| `DEEPSEEKCODE_THEME_COLORS` | JSON partial color overrides |
+| `DEEPSEEKCODE_ATTENTION` | Attention layer override: `off` / `on` / `notify,bell` |
+| `DEEPSEEKCODE_HTTP_PORT` / `DEEPSEEKCODE_WS_PORT` | Default HTTP / WebSocket ports |
+| `DEEPSEEKCODE_QUIET=1` | Suppress non-fatal startup warnings |
+| `DEEPSEEKCODE_NO_AUTO_UPDATE=1` | Disable background auto-update |
+| `DEEPSEEKCODE_NO_UPDATE_CHECK=1` | Disable the version check |
+| `DEEPSEEKCODE_FORCE_UTF8=0` | Skip forcing the Windows console to UTF-8 |
+| `DSC_HEAP_LIMIT_MB` | Node heap limit hint for large sessions (default: 8192) |
+
+## FAQ
+
+**Is DeepSeekCode open source?**
+No. It is proprietary, closed-source software. `LICENSE.md` holds the terms: copying, modifying,
+distributing, sublicensing or selling it requires the prior written permission of the copyright
+holder.
+
+**Is DeepSeekCode a model?**
+No. It is an agent runtime — a program you run — and it ships no model of its own. It drives
+whichever OpenAI-compatible endpoint you configure; DeepSeek's models are one option among many,
+and a local server works just as well.
+
+**Which package is the official one?**
+`@deepseekcode/cli` on npm — it installs the commands `dscode` and `deepseekcode`. The same build
+is also published under additional brand scopes for distribution; `@deepseekcode` is the canonical
+one, and the project page is https://deepseekcode.github.io/deepseekwork/.
+
+**Is this affiliated with DeepSeek?**
+No. DeepSeekCode is an independent project, not made, sponsored or endorsed by DeepSeek (深度求索)
+or any other model vendor. The name refers to a runtime that drives models — not to a model family.
+
+**Does it need an API key?**
+Yes — it talks to an OpenAI-compatible endpoint you configure. The first run walks you through
+provider setup; a local server (for example an OpenAI-compatible runtime on `localhost`) works too.
+
+**Does my code leave my machine?**
+The runtime, the UI, the file operations and the shell tools all run locally, and no DeepSeekCode
+cloud service sits in the path. Prompts and tool results are sent to the model endpoint you
+configured — that is the only outbound traffic the agent needs.
+
+**Which models and providers are supported?**
+Any endpoint that speaks the OpenAI-compatible API. Nothing is hardwired to a single vendor, and
+you can switch models at runtime with `/model`.
+
+**Does it run on Windows?**
+Yes. Prebuilt native binaries cover Windows x64 and ARM64 (as well as macOS Intel/Apple Silicon and
+Linux glibc/musl on x64/ARM64), and an offline package with bundled portable git is published for
+machines without network access.
+
+**Can it run unattended, or in CI?**
+Yes. `dscode exec "..."` runs a command non-interactively and emits JSONL, and a non-TTY stdin
+makes the CLI skip the TUI entirely. `dscode codeview` and `dscode test-fix` are built for the same
+purpose.
+
+**How do I stop it doing something I don't want?**
+Use the permission layer (scopes plus auto/ask/deny policies), start with `/plan` so nothing
+executes before you approve the checklist, rely on the command sandbox for shell tools, and press
+`/pause` or `/stop` at any time. Reviewer and plan sessions are read-only by construction.
+
+**Can I drive it from chat apps, MCP servers or my own tools?**
+Yes — `/mcp` connects Model Context Protocol servers, plugins extend the runtime, and channel
+plugins (LINE, Slack, WhatsApp, QQ, DingTalk, Feishu) let a chat message drive a session.
+
+**Where is my data and configuration kept?**
+Under `~/.agent/` (`config.yaml`, `sessions/`, `skills/`, `logs/`). See
+[Local state](#local-state).
+
+**How do I update it?**
+It updates itself: on startup a global npm install is upgraded in the background to the latest
+version. Disable that with `DEEPSEEKCODE_NO_AUTO_UPDATE=1` (or disable the check with
+`DEEPSEEKCODE_NO_UPDATE_CHECK=1`).
+
+## How it differs
+
+- **Local-first, single runtime.** The TUI, the web UI and the API come from one process you
+  start — not a hosted service, and not three things to install and wire together.
+- **Permissions are a first-class layer, not a toggle.** Scopes, policies, an optional AI
+  classifier, and fail-closed behaviour for approvals and sandboxed commands.
+- **Plan mode is read-only and live.** The plan is a checklist the running loop adopts, so what you
+  approve is what executes.
+- **Provider-neutral by construction.** Any OpenAI-compatible endpoint; nothing is tied to one
+  vendor's API surface.
+- **Built for both the interactive and the unattended case.** The same agent drives the TUI and
+  emits JSONL for scripts and CI.
+- **Extensible at the edges.** MCP servers, skills, plugins, sub-agents, workflows and chat
+  channels all attach to the same core loop.
+
+## Terminal rendering internals
+
+The TUI is a fork-free React renderer: a vendored Ink kernel plus a pure-TypeScript yoga port live
+under `src/ink/` and `src/ink-yoga/`. If you change them, the layout-cache generations, the
+alt-screen trailing newline and the fd-write ban are hard invariants — they are documented in
+`docs/terminal-rendering-invariants.md` in the repository, together with the regression test that
+guards each one.
+
+The `terminal_figure` tool (capture → xterm.js replay → PNG composition) is an internal
+verification path rather than a user-facing feature. Running it needs a Python interpreter with
+Pillow installed and a Playwright Chromium browser; without them the tool returns an actionable
+setup error instead of writing anything outside the workspace.
+
+<a name="zh-cn"></a>
+
+## 简体中文
+
+**DeepSeekCode 是一个本地运行的 AI 编程智能体：一条命令在终端里跑起来，同时提供终端 TUI、Web UI 和本地 HTTP/WebSocket API 三个界面**，可接任意 OpenAI 兼容模型。它的核心是权限审批层、严格只读的方案模式（plan），以及可在运行时切换的 act / goal / chat 三种工作模式。
+
+安装后运行 `dscode`，它就能读改文件、执行命令、审查代码，也能在 CI 里无人值守地跑。
+
+### 安装与启动
+
+```bash
+npm install -g @deepseekcode/cli
+dscode                                   # 启动本地运行时 + 终端界面
+dscode exec "修复 src/utils 里失败的测试"   # 非交互，输出 JSONL
+dscode codeview --focus security         # AI 代码审查
+```
+
+需要 Node.js 18+。首次启动会引导你配置模型；Web UI 在 `http://localhost:8080`（模型配置页 `/#models`）。
+
+### 核心能力
+
+- **终端 TUI**：键盘优先的交互界面；默认全屏（alt-screen），`--inline` 回到主屏模式。
+- **本地运行时**：`dscode` 在同进程内启动智能体内核与 HTTP/WebSocket 服务，不用另装后端。
+- **权限审批层**：每次工具调用都过权限层 —— 作用域 `system > project > user > local > session`（越窄越优先）、`auto` / `ask` / `deny` 策略、高风险调用可交给 AI 分类器，审批超时按拒绝处理。
+- **只读方案模式**：`/plan` 先给一份清单，你确认后才动手；执行中的回合会直接采纳这份清单。
+- **模式可运行时切换**：`Shift+Tab` 在 act · auto-act · goal · auto-goal · chat 之间切换。
+- **子智能体 / 后台任务 / 工作流**：把独立任务派给子智能体，长任务可脱离当前回合继续跑。
+- **记忆与技能**：跨会话的持久记忆，`/skills` 插入可复用技能。
+- **扩展**：`/mcp` 接 MCP 服务、插件、以及 LINE / Slack / WhatsApp / QQ / 钉钉 / 飞书等 IM 频道（入站请求带签名校验）。
+- **命令沙箱**：Shell 工具走本地沙箱（Linux bwrap、macOS SBPL、Windows MXC / Docker），没有策略时拒绝执行而不是退回宿主机。
+- **主题**：dark / light / nord / dracula / monokai / one-dark / tokyo-night。
+- **中文友好**：界面文案本地化，多数交互命令有中文别名。
+
+### 常用命令
+
+| 命令 | 作用 |
+|------|------|
+| `dscode` | 启动本地运行时 + 交互 TUI（同时提供 Web UI 与 API） |
+| `dscode exec "<任务>"` | 非交互执行，输出 JSONL（适合脚本与 CI） |
+| `dscode exec --file ./task.txt --text` | 从文件读任务，输出纯文本 |
+| `dscode codeview --focus security` | AI 代码审查（可指定关注点并落盘报告） |
+| `dscode test-fix --retries 5` | 自动修复测试循环 |
+| `dscode --resume [id]` | 恢复上一次（或指定）会话 |
+
+### 常见问题
+
+**是开源的吗？** 不是。本项目是闭源专有软件，条款见仓库内 `LICENSE.md`；复制、修改、分发、再授权或销售均需事先获得著作权人的书面许可。
+
+**它是模型吗？** 不是。它是跑在你机器上的智能体程序（runtime），自身不带模型 —— 模型由你配置：任何 OpenAI 兼容端点都行，DeepSeek 的模型只是其中一种，本地起一个服务也同样可用。
+
+**哪个包才是官方的？** npm 上的 `@deepseekcode/cli`，安装后得到 `dscode` 与 `deepseekcode` 两个命令。同一份构建也会以其他品牌 scope 分发；`@deepseekcode` 是规范名称，项目主页是 https://deepseekcode.github.io/deepseekwork/。
+
+**它和 DeepSeek 官方有关系吗？** 没有。DeepSeekCode 是独立项目，与 DeepSeek（深度求索）及任何模型厂商没有隶属、赞助或背书关系；名字指的是驱动模型的运行时，不指代任何模型家族。
+
+**代码会上传到哪里？** 运行时、界面、文件操作与 Shell 工具全部在本机执行，中间没有 DeepSeekCode 的云服务；只有到你配置的模型端点的请求会离开本机。
+
+**必须联网吗？** 需要能访问一个 OpenAI 兼容端点（可以是本机的兼容服务）。
+
+**怎么防止它乱动我的项目？** 三层：权限层（作用域 + auto/ask/deny，超时即拒绝）、`/plan` 只读方案模式、命令沙箱；随时可以 `/pause` 或 `/stop`。
+
+**支持 Windows 吗？** 支持，提供 Windows x64 / ARM64 原生二进制（另含 macOS、Linux glibc/musl 的 x64/ARM64）；还发布了内置便携 git 的离线包。
+
+**配置放在哪？** `~/.agent/` 下（`config.yaml`、`sessions/`、`skills/`、`logs/`）。
+
+更新日志（中英对照）见下方 [What's New](#whats-new)。
+
+<a name="for-ai-assistants"></a>
+
+## For AI assistants and LLM crawlers
+
+A machine-readable summary of this project ships inside this package:
+`https://unpkg.com/@deepseekcode/cli/llms.txt` (the same file lives at `llms.txt` in the
+repository). It states what DeepSeekCode is and is not, the official npm coordinates, and the
+platform matrix — so an assistant can describe or cite this package without guessing. The project
+page is https://deepseekcode.github.io/deepseekwork/.
+
+<a name="ja"></a>
+
+## 日本語
+
+**DeepSeekCode はローカルで動く AI コーディングエージェントです。** 1 つのランタイムがターミナル TUI、Web UI、HTTP/WebSocket API の 3 つの画面を提供し、任意の OpenAI 互換モデルで動作します。権限承認レイヤー、読み取り専用のプランモード、実行中に切り替えられる act / goal / chat モードを中心に設計されています。
+
+```bash
+npm install -g @deepseekcode/cli
+dscode                                   # ローカルランタイム + ターミナル UI
+dscode exec "src/utils の失敗テストを修正"   # 非対話、JSONL 出力
+```
+
+Node.js 18 以上が必要です。初回起動時にモデルの設定を案内します。Web UI は `http://localhost:8080`（モデル設定は `/#models`）。
+
+主な特徴:
+
+- **ターミナル TUI** — キーボード中心の操作。既定は全画面（alt-screen）、`--inline` で通常画面に戻せます。
+- **ローカルランタイム** — `dscode` がエージェント本体と HTTP/WebSocket サーバーを同一プロセスで起動します。別途バックエンドを用意する必要はありません。
+- **権限承認レイヤー** — すべてのツール呼び出しが権限レイヤーを通ります。スコープは `system > project > user > local > session`（狭い方が優先）、ポリシーは `auto` / `ask` / `deny`、リスクの高い呼び出しは AI 分類器に委ねられ、承認のタイムアウトは拒否として扱われます。
+- **読み取り専用のプランモード** — `/plan` で実行前に対象のチェックリストを確認できます。
+- **モード切り替え** — `Shift+Tab` で act · auto-act · goal · auto-goal · chat を切り替え。
+- **サブエージェント / バックグラウンド作業 / ワークフロー** — 独立した作業を委譲し、長時間の処理を切り離して実行できます。
+- **メモリとスキル** — セッションをまたぐ記憶と、`/skills` で挿入できる再利用可能なスキル。
+- **拡張性** — `/mcp` で MCP サーバー、プラグイン、LINE / Slack / WhatsApp / QQ / DingTalk / Feishu の各チャネル。
+- **コマンドサンドボックス** — シェルツールはサンドボックス内で実行され、ポリシーがない場合は実行を拒否します（ホスト側にフォールバックしません）。
+- **テーマ** — dark / light / nord / dracula / monokai / one-dark / tokyo-night。
+
+よくある質問:
+
+**オープンソースですか？** いいえ。本ソフトウェアはプロプライエタリ（非公開ソース）です。条件は `LICENSE.md` に記載されており、複製・改変・配布・再許諾・販売には著作権者の事前の書面による許可が必要です。
+
+**コードはどこかに送られますか？** ランタイム、UI、ファイル操作、シェルツールはすべてローカルで動作します。DeepSeekCode のクラウドサービスは介在せず、設定したモデルエンドポイントへのリクエストのみが外部に出ます。
+
+**Windows でも使えますか？** はい。Windows x64 / ARM64 向けのネイティブバイナリを提供しています（macOS、Linux の glibc/musl・x64/ARM64 も同様）。
+
+**設定はどこに保存されますか？** `~/.agent/`（`config.yaml`、`sessions/`、`skills/`、`logs/`）。
+
+リリースノート（英語・中文）は下の [What's New](#whats-new) を参照してください。
+
+<a name="es"></a>
+
+## Español
+
+**DeepSeekCode es un agente de programación con IA que se ejecuta localmente.** Un único runtime ofrece tres superficies —una interfaz de terminal (TUI), una interfaz web y una API HTTP/WebSocket— y funciona con cualquier modelo compatible con la API de OpenAI. Está construido alrededor de una capa real de permisos y aprobaciones, un modo de plan estrictamente de solo lectura y modos act / goal / chat conmutables en caliente.
+
+```bash
+npm install -g @deepseekcode/cli
+dscode                                   # runtime local + interfaz de terminal
+dscode exec "arregla el test que falla en src/utils"   # no interactivo, salida JSONL
+```
+
+Requiere Node.js 18 o superior. La primera ejecución te guía en la configuración del modelo. La interfaz web está en `http://localhost:8080` (modelos en `/#models`).
+
+Qué incluye:
+
+- **TUI de terminal** — interfaz pensada para el teclado. Pantalla completa (alt-screen) por defecto; `--inline` vuelve al modo normal.
+- **Runtime local** — `dscode` inicia el núcleo del agente y el servidor HTTP/WebSocket en el mismo proceso: no hay un backend aparte que instalar.
+- **Capa de permisos** — cada llamada a una herramienta pasa por ella: ámbitos `system > project > user > local > session` (gana el más específico), políticas `auto` / `ask` / `deny`, clasificador de IA opcional para llamadas de riesgo y tiempo de espera que equivale a denegación.
+- **Modo de plan de solo lectura** — `/plan` te muestra una lista de comprobación antes de ejecutar nada.
+- **Modos conmutables** — `Shift+Tab` alterna act · auto-act · goal · auto-goal · chat.
+- **Subagentes, trabajo en segundo plano y flujos de trabajo** — delega tareas aisladas y deja correr trabajos largos sin bloquear el turno.
+- **Memoria y skills** — memoria persistente entre sesiones y skills reutilizables con `/skills`.
+- **Extensible** — servidores MCP con `/mcp`, plugins y canales de mensajería (LINE, Slack, WhatsApp, QQ, DingTalk, Feishu).
+- **Sandbox de comandos** — las herramientas de shell se ejecutan en un sandbox (bwrap en Linux, SBPL en macOS, MXC/Docker en Windows) y se niegan a ejecutar si no hay política, en lugar de recurrir al host.
+- **Temas** — dark, light, nord, dracula, monokai, one-dark, tokyo-night.
+
+Preguntas frecuentes:
+
+**¿Es código abierto?** No. Es software propietario y de código cerrado; las condiciones están en `LICENSE.md`. Copiarlo, modificarlo, distribuirlo, sublicenciarlo o venderlo requiere autorización previa por escrito del titular de los derechos.
+
+**¿Sale mi código de mi máquina?** El runtime, la interfaz, las operaciones de archivos y las herramientas de shell se ejecutan en local; no hay ningún servicio en la nube de DeepSeekCode en medio. Solo salen las peticiones al endpoint de modelo que hayas configurado.
+
+**¿Funciona en Windows?** Sí: hay binarios nativos para Windows x64 / ARM64 (además de macOS y Linux glibc/musl en x64/ARM64) y un paquete offline con git portátil.
+
+**¿Dónde se guarda la configuración?** En `~/.agent/` (`config.yaml`, `sessions/`, `skills/`, `logs/`).
+
+Notas de la versión (inglés y chino) en [What's New](#whats-new).
+
+<a name="whats-new"></a>
+
+<!-- whatsnew:start -->
+<!-- 由 scripts/generate-changelog.mjs 从 packages/shared/src/changelog.ts 生成，请勿手动编辑；改源后运行 `bun run changelog`。 -->
+
+## What's New · 更新日志
+
+### 1.0.40 — 2026-10-15
+
+可视化产物分层渲染 + 线程与值守 + 记忆/技能收敛
+
+Layered visual artifacts, threads & on-duty coverage, memory and skills consolidation
+
+**English**
+
+- Layered visual artifacts: flowcharts become indented outlines (character grids are gone), tool results render as inline cards in the transcript, and two new self-contained HTML snapshot kinds — dashboard and analysis — ship with charts and metric cards.
+- Threads & on-duty coverage: project/task threads and session kinds are separated, IM notifications group by project → task instead of collapsing into one line, and a project-manager roster plus a global on-duty seat let a goal reach its own project manager with an honest delivery report.
+- Memory & skills: the memory write/retrieve path is in place (extractor, write agent, search tool) and Chinese-query recall is fixed; skill ids are normalized with a one-off migration of existing data.
+- Dynamic workflows now declare themselves explicitly: `declare_workflow` replaces the filename convention, goal mode blocks agent primitives until a workflow is declared, and the plan syncs with execution through update_plan.
+- Sandbox: the P0 local command sandbox is wired into BashTool (bwrap on Linux, SBPL on macOS, fail-closed when the policy is missing or invalid), with Windows MXC / docker backends added.
+- Channels & connectors: inbound request-signature verification lands for line / slack / whatsapp / qqbot / dingtalk / feishu; the connector catalog gains REA and connector env vars can be declared optional, so a missing engine path no longer blocks the connector.
+- Session persistence hardening: the on-disk format is version-gated with an adjacent migration chain, compaction cut points pair up correctly and orphaned tool results are repairable — a session can no longer be permanently bricked.
+- CLI: a `/skill` category bar, an `/agents` picker, full-depth `@` file indexing and `/btw` side conversations arrive, backed by a static audit and a three-layer dispatch scan of command wiring.
+- Web: the Projects front door is rebuilt with a consistent warm theme and overlay layer, a design-system view arrives with a design-token gate, the right rail gains collapsible session groups and an assistant workbench, and HTML snapshots support charts and metrics.
+- Distribution & install: a one-line installer with mirror racing and an embedded hash, bundled portable git in the offline package, and speech dependencies installed into a dedicated venv (which also works on PEP 668 machines).
+- Release-audit closure: the dead-export checker no longer counts test files as consumers, so "shipped implementation + thorough unit tests + zero production wiring" is finally caught (exposed legacy cases are frozen in a shrink-only ratchet baseline). The first real gap it uncovered is closed: the session secret vault had zero production callers and is now wired to runtime dispose, so rebuilding a runtime in-process no longer leaves session secrets from the previous instance behind.
+- Web: the Tools and Connectors pages now spell out how they divide the work (tools = what the model can call; connectors = whether an external process is installed and connected) and link to each other, so "I turned the connector off, why does it still work?" no longer happens.
+
+**中文**
+
+- 可视化产物分层渲染：流程图改为缩进大纲（去掉字符网格），工具结果在会话里内联成卡片；新增 dashboard / analysis 两类自包含 HTML 快照，自带图表与数字卡片。
+- 线程与值守：项目 / 任务线程与 session kind 分流，IM 通知改按「项目 → 任务」分组归并，多线程进度不再糊成一条；项目经理名册与全局值守席位落地，目标可投递到所属项目的经理并如实回报投递结果。
+- 记忆与技能：记忆写入 / 检索链路成型（抽取器、写入 agent、搜索工具），修掉中文提问召回；技能 id 规范化并对旧数据做一次性迁移。
+- 动态工作流改为显式声明：`declare_workflow` 取代文件名约定，goal 模式下未声明即拦截 agent 原语，计划经 update_plan 与执行态同步。
+- 沙箱：本地命令沙箱 P0 接入 BashTool（Linux bwrap / macOS SBPL，策略缺失即拒绝启动），并补上 Windows 的 MXC / docker 后端。
+- 频道与连接器：频道入站请求签名校验落地（line / slack / whatsapp / qqbot / dingtalk / feishu）；连接器目录加入 REA，环境变量支持「可选」声明，缺引擎路径不再锁死连接器。
+- 会话持久化加固：落盘格式版本强制 + 相邻迁移链，压缩切点配对对齐、孤儿工具结果可修复，会话不再被永久写死。
+- CLI：新增 `/skill` 分类条、`/agents` 选择器、`@` 文件索引全深度化与 `/btw` 旁问侧会话；命令接线加了静态审计与三层派发扫描。
+- Web：Projects 正门重做并统一暖调主题与遮罩层，新增设计系统视图与设计令牌闸门；右栏可折叠会话区与助手工作台，html 快照支持图表与数字。
+- 分发与安装：新增一键安装脚本（镜像竞速 + 内嵌 hash）、便携 git 内置进离线包，语音依赖改用独立 venv（PEP 668 的机器也能装）。
+- 发布审计收口：死导出检查器不再把测试文件算作「有人用」，于是「实现 + 齐全单测 + 零生产接线」这个最坏组合终于判得死（暴露的存量以只缩不涨的棘轮基线固化）；由此揪出的第一个真实缺口已补——会话密钥保管箱原先生产调用点为 0，现已接到 runtime 的 dispose，进程内重建 runtime 不再残留上个实例的会话明文。
+- Web：工具页与连接器页互相说明分工（前者管模型能调用哪些工具，后者管外部进程装没装 / 连没连）并各给一个当场跳过去的入口，不再出现「关掉连接器为什么还能用」这类误判。
+
+_Earlier releases: see the version list on this package page, or `CHANGELOG.md` in the repository (generated from the same source)._
+
+<!-- whatsnew:end -->
+
+<a name="license"></a>
+
+## License
+
+Proprietary — © 2026 DeepSeekCode. All rights reserved.
+
+This software is proprietary and closed source; it is **not** open source. Copying,
+modifying, distributing, sublicensing, or selling it requires the prior written
+permission of the copyright holder.
+
+See `LICENSE.md` for the full terms.

package/bin/dscode.exe

@@ -0,0 +1,12 @@
+#!/bin/sh
+echo "Error: dscode native binary not installed." >&2
+echo "" >&2
+echo "Either postinstall did not run (--ignore-scripts, some pnpm configs)" >&2
+echo "or the platform-native optional dependency was not downloaded" >&2
+echo "(--omit=optional)." >&2
+echo "" >&2
+echo "Run the postinstall manually (adjust path for local vs global install):" >&2
+echo "  node node_modules/@deepseekcode/cli/install.cjs" >&2
+echo "" >&2
+echo "Or reinstall without --ignore-scripts / --omit=optional." >&2
+exit 1