@openbuddy/cli 1.0.40 → 1.0.41

package/README.md

@@ -4,6 +4,19 @@
 [![License: Proprietary](https://img.shields.io/badge/license-Proprietary-red.svg)](#license)
 [![Node version](https://img.shields.io/node/v/@deepseekcode/cli.svg)](https://nodejs.org)
 
+<p align="center">
+  <a href="https://deepseekcode.github.io/deepseekwork/">
+    <img src="media/demo.gif" alt="DeepSeekCode running a task: file reads, a grep, an edit with a diff, and a written summary" width="880">
+  </a>
+</p>
+
+<p align="center">
+  <sub>
+    <b>40-second demo</b> — a real agent turn in the web UI: read, grep, edit, diff, summary.
+    The full-quality video ships in the repository under <code>docs/promo/media/</code>.
+  </sub>
+</p>
+
 **DeepSeekCode is a local-first AI coding agent that runs in your terminal.** One runtime on
 your own machine serves three surfaces — an interactive terminal UI (TUI), a web UI, and an
 HTTP/WebSocket API — and drives it with any OpenAI-compatible model. It is built around a real
@@ -13,7 +26,10 @@ chat modes.
 Install it, run `dscode`, and you have an agent that reads and edits your files, runs commands,
 reviews code, and can work unattended in CI.
 
-Languages: **English** · [简体中文](#zh-cn) · [日本語](#ja) · [Español](#es)
+Languages: **English** · [简体中文](#zh-cn) · [繁體中文](#zh-tw) · [日本語](#ja) · [한국어](#ko) ·
+[Español](#es) · [Português](#pt) · [Français](#fr) · [Italiano](#it) · [Deutsch](#de) · [Русский](#ru) · [Türkçe](#tr) ·
+[العربية](#ar) · [हिन्दी](#hi) · [Bahasa Indonesia](#id) · [Tiếng Việt](#vi) · [ไทย](#th) — 17 languages, each
+repeating the same canonical definition; the application interface itself is localized into 13 languages, Arabic and Indonesian included.
 
 ## At a glance
 
@@ -31,6 +47,21 @@ Languages: **English** · [简体中文](#zh-cn) · [日本語](#ja) · [Españo
 | **Built-in tools** | ~70: files, search, git, LSP, code intelligence, browser, sub-agents, plans, memory, MCP |
 | **License** | Proprietary (see [License](#license)) |
 
+<a name="screenshots"></a>
+
+## Screenshots
+
+| Agent turn | Finish state |
+|---|---|
+| <img src="media/web-tools.png" alt="Tool calls stream into the transcript: read_file, grep, edit_file with timing" width="440"> | <img src="media/web-answer.png" alt="Finished turn: diff card plus a written summary" width="440"> |
+
+| Models and providers | |
+|---|---|
+| <img src="media/web-models.png" alt="Model list with per-model status, context window and pricing" width="880"> | |
+
+Captured from a local instance at 1920×1080 (English UI). The same runtime renders the terminal
+UI; both surfaces share sessions, tools, permissions and memory.
+
 ## What you get
 
 - **Terminal TUI** — a keyboard-first coding agent rendered with React through a vendored Ink
@@ -95,6 +126,12 @@ detects your platform and links the matching prebuilt native binary into place
 platform package is unavailable (for example `--omit=optional`), the installer prints instructions
 instead and `cli-wrapper.cjs` remains available as the JavaScript fallback.
 
+The same binary is published under several brand scopes, and **every brand exposes the same `dscode`
+command** — so install **one brand at a time** globally. A second brand in the same prefix collides
+on `dscode` and fails with npm's `EEXIST`; uninstall the current one (`npm uninstall -g <scope>`)
+before switching. This package itself ships two command names — `dscode`, plus the brand name of its
+scope (`@<scope>/cli` → `dscode` + `<scope>`) — and both launch the very same binary.
+
 ## Quick Start
 
 ```bash
@@ -431,6 +468,8 @@ dscode codeview --focus security         # AI 代码审查
 
 需要 Node.js 18+。首次启动会引导你配置模型；Web UI 在 `http://localhost:8080`（模型配置页 `/#models`）。
 
+同一份二进制会以多个品牌 scope 发布，而**每个品牌都暴露同一个 `dscode` 命令**，所以全局**一次只装一个品牌**：往同一个前缀装第二个品牌会在 `dscode` 上撞名，npm 直接报 `EEXIST` 失败；要换品牌先 `npm uninstall -g <当前品牌>`。本包自身提供两个命令名——`dscode`，加上它所在 scope 的品牌名（`@<scope>/cli` → `dscode` + `<scope>`），两者启动的是同一个二进制。
+
 ### 核心能力
 
 - **终端 TUI**：键盘优先的交互界面；默认全屏（alt-screen），`--inline` 回到主屏模式。
@@ -478,16 +517,6 @@ dscode codeview --focus security         # AI 代码审查
 
 更新日志（中英对照）见下方 [What's New](#whats-new)。
 
-<a name="for-ai-assistants"></a>
-
-## For AI assistants and LLM crawlers
-
-A machine-readable summary of this project ships inside this package:
-`https://unpkg.com/@deepseekcode/cli/llms.txt` (the same file lives at `llms.txt` in the
-repository). It states what DeepSeekCode is and is not, the official npm coordinates, and the
-platform matrix — so an assistant can describe or cite this package without guessing. The project
-page is https://deepseekcode.github.io/deepseekwork/.
-
 <a name="ja"></a>
 
 ## 日本語
@@ -502,6 +531,8 @@ dscode exec "src/utils の失敗テストを修正"   # 非対話、JSONL 出力
 
 Node.js 18 以上が必要です。初回起動時にモデルの設定を案内します。Web UI は `http://localhost:8080`（モデル設定は `/#models`）。
 
+同じバイナリが複数のブランド scope で公開されており、**どのブランドも同じ `dscode` コマンドを公開します**。そのためグローバルには**1 ブランドだけ**を入れてください。同じ prefix に 2 つ目のブランドを入れると `dscode` が衝突し、npm は `EEXIST` で失敗します。切り替える前に `npm uninstall -g <現在のブランド>` で外してください。このパッケージ自身は `dscode` に加えて、所属 scope のブランド名も提供します（`@<scope>/cli` → `dscode` + `<scope>`）。どちらも同じバイナリを起動します。
+
 主な特徴:
 
 - **ターミナル TUI** — キーボード中心の操作。既定は全画面（alt-screen）、`--inline` で通常画面に戻せます。
@@ -541,6 +572,8 @@ dscode exec "arregla el test que falla en src/utils"   # no interactivo, salida
 
 Requiere Node.js 18 o superior. La primera ejecución te guía en la configuración del modelo. La interfaz web está en `http://localhost:8080` (modelos en `/#models`).
 
+El mismo binario se publica bajo varios scopes de marca y **todas las marcas exponen el mismo comando `dscode`**, así que instala **una sola marca a la vez** en global. Una segunda marca en el mismo prefix choca en `dscode` y falla con `EEXIST` de npm; desinstala la actual (`npm uninstall -g <scope>`) antes de cambiar. Este paquete ofrece dos nombres de comando: `dscode` y el nombre de marca de su scope (`@<scope>/cli` → `dscode` + `<scope>`); ambos lanzan el mismo binario.
+
 Qué incluye:
 
 - **TUI de terminal** — interfaz pensada para el teclado. Pantalla completa (alt-screen) por defecto; `--inline` vuelve al modo normal.
@@ -566,6 +599,566 @@ Preguntas frecuentes:
 
 Notas de la versión (inglés y chino) en [What's New](#whats-new).
 
+<a name="ko"></a>
+
+## 한국어
+
+**DeepSeekCode는 로컬에서 동작하는 AI 코딩 에이전트입니다.** 하나의 런타임이 터미널 TUI, 웹 UI, HTTP/WebSocket API 세 가지 화면을 제공하며, OpenAI 호환 모델이면 무엇이든 연결해 사용합니다. 권한 승인 계층, 엄격한 읽기 전용 플랜 모드, 실행 중에 전환하는 act / goal / chat 모드를 중심으로 설계되었습니다.
+
+```bash
+npm install -g @deepseekcode/cli
+dscode                                   # 로컬 런타임 + 터미널 UI
+dscode exec "src/utils의 실패한 테스트 수정"   # 비대화형, JSONL 출력
+dscode codeview --focus security         # AI 코드 리뷰
+```
+
+Node.js 18 이상이 필요합니다. 첫 실행에서 모델 설정을 안내하며, 웹 UI는 `http://localhost:8080`(모델 설정은 `/#models`)에서 열립니다.
+
+같은 바이너리가 여러 브랜드 scope로 배포되며 **모든 브랜드가 동일한 `dscode` 명령을 노출합니다.** 따라서 전역에는 **한 번에 하나의 브랜드만** 설치하세요. 같은 prefix에 두 번째 브랜드를 설치하면 `dscode`가 충돌해 npm이 `EEXIST`로 실패합니다. 브랜드를 바꾸려면 먼저 `npm uninstall -g <현재 브랜드>`로 제거하세요. 이 패키지 자체는 `dscode`와 자신이 속한 scope의 브랜드 이름(`@<scope>/cli` → `dscode` + `<scope>`) 두 가지 명령을 제공하며, 둘 다 같은 바이너리를 실행합니다.
+
+주요 기능:
+
+- **터미널 TUI** — 키보드 중심 인터페이스. 기본은 전체 화면(alt-screen)이며 `--inline`으로 일반 화면으로 돌아갑니다.
+- **로컬 런타임** — `dscode`가 에이전트 코어와 HTTP/WebSocket 서버를 같은 프로세스에서 띄웁니다. 따로 설치할 백엔드가 없습니다.
+- **권한 계층** — 모든 도구 호출이 권한 계층을 통과합니다. scope는 `system > project > user > local > session`(좁은 쪽 우선), 정책은 `auto` / `ask` / `deny`, 회색 지대는 선택적 AI 분류기가 판단하며 승인 시간 초과는 거부로 처리됩니다.
+- **읽기 전용 플랜 모드** — `/plan`은 실행 전에 체크리스트를 보여주고, 승인한 내용만 실제로 실행됩니다.
+- **모드 전환** — `Shift+Tab`으로 act · auto-act · goal · auto-goal · chat 전환.
+- **서브에이전트 · 백그라운드 작업 · 워크플로** — 독립적인 작업을 위임하고 오래 걸리는 일을 분리해 실행합니다.
+- **메모리와 스킬** — 세션을 넘어 유지되는 기억과 `/skills`로 삽입하는 재사용 스킬.
+- **확장성** — `/mcp`로 MCP 서버 연결, 플러그인, 메시징 채널(LINE, Slack, WhatsApp, QQ, DingTalk, Feishu).
+- **명령 샌드박스** — 셸 도구는 샌드박스에서 실행되며 정책이 없으면 호스트로 폴백하지 않고 실행을 거부합니다.
+- **테마** — dark, light, nord, dracula, monokai, one-dark, tokyo-night.
+
+자주 묻는 질문:
+
+**오픈소스인가요?** 아닙니다. 사유 소프트웨어이며 소스는 비공개입니다. 조건은 `LICENSE.md`에 있으며, 복제·수정·배포·재라이선스·판매에는 저작권자의 사전 서면 허가가 필요합니다.
+
+**제 코드가 외부로 나가나요?** 런타임, UI, 파일 조작, 셸 도구는 모두 로컬에서 실행되며 DeepSeekCode 클라우드 서비스는 관여하지 않습니다. 외부로 나가는 것은 설정한 모델 엔드포인트로의 요청뿐입니다.
+
+**Windows에서도 되나요?** 됩니다. Windows x64 / ARM64 네이티브 바이너리를 제공합니다(macOS Intel/Apple Silicon, Linux glibc/musl x64/ARM64 포함). 오프라인 패키지에는 포터블 git이 함께 들어 있습니다.
+
+**설정은 어디에 저장되나요?** `~/.agent/`(`config.yaml`, `sessions/`, `skills/`, `logs/`)입니다.
+
+릴리스 노트(영어·중국어)는 아래 [What's New](#whats-new)를 참고하세요.
+
+<a name="fr"></a>
+
+## Français
+
+**DeepSeekCode est un agent de codage IA qui s'exécute en local.** Un seul runtime fournit trois surfaces — une interface terminal (TUI), une interface web et une API HTTP/WebSocket — et s'appuie sur n'importe quel modèle compatible OpenAI. Il est bâti autour d'une véritable couche de permissions et d'approbations, d'un mode plan strictement en lecture seule et de modes act / goal / chat commutables à chaud.
+
+```bash
+npm install -g @deepseekcode/cli
+dscode                                   # runtime local + interface terminal
+dscode exec "corrige le test qui échoue dans src/utils"   # non interactif, sortie JSONL
+dscode codeview --focus security         # revue de code par IA
+```
+
+Node.js 18 ou supérieur est requis. Le premier lancement guide la configuration du modèle. L'interface web est servie sur `http://localhost:8080` (modèles : `/#models`).
+
+Le même binaire est publié sous plusieurs scopes de marque et **chaque marque expose la même commande `dscode`** : n'installez donc **qu'une seule marque à la fois** en global. Une seconde marque dans le même prefix entre en collision sur `dscode` et échoue avec `EEXIST` ; désinstallez la marque courante (`npm uninstall -g <scope>`) avant de changer. Ce paquet fournit deux noms de commande — `dscode` et le nom de marque de son scope (`@<scope>/cli` → `dscode` + `<scope>`) — qui lancent le même binaire.
+
+Ce que vous obtenez :
+
+- **TUI terminal** — interface pensée pour le clavier. Plein écran (alt-screen) par défaut ; `--inline` revient au mode normal.
+- **Runtime local** — `dscode` démarre le cœur de l'agent et le serveur HTTP/WebSocket dans le même processus : aucun backend séparé à installer.
+- **Couche de permissions** — chaque appel d'outil la traverse : portées `system > project > user > local > session` (la plus étroite gagne), politiques `auto` / `ask` / `deny`, classifieur IA optionnel pour la zone grise, et expiration d'une approbation = refus.
+- **Mode plan en lecture seule** — `/plan` affiche une liste de contrôle avant toute exécution ; seule la liste approuvée s'exécute.
+- **Modes commutables** — `Shift+Tab` alterne act · auto-act · goal · auto-goal · chat.
+- **Sous-agents, travail en arrière-plan et workflows** — déléguez des tâches isolées et détachez les traitements longs.
+- **Mémoire et skills** — mémoire persistante entre sessions et skills réutilisables insérables via `/skills`.
+- **Extensible** — serveurs MCP avec `/mcp`, plugins, canaux de messagerie (LINE, Slack, WhatsApp, QQ, DingTalk, Feishu).
+- **Bac à sable des commandes** — les outils shell s'exécutent dans un bac à sable (bwrap sous Linux, SBPL sous macOS, MXC/Docker sous Windows) et refusent d'exécuter s'il n'y a pas de politique, au lieu de retomber sur l'hôte.
+- **Thèmes** — dark, light, nord, dracula, monokai, one-dark, tokyo-night.
+
+Questions fréquentes :
+
+**Est-ce open source ?** Non. C'est un logiciel propriétaire à code fermé ; les conditions figurent dans `LICENSE.md`. Copier, modifier, distribuer, sous-licencier ou vendre exige l'autorisation écrite préalable du titulaire des droits.
+
+**Mon code quitte-t-il ma machine ?** Le runtime, l'interface, les opérations sur les fichiers et les outils shell s'exécutent en local ; aucun service cloud DeepSeekCode ne s'interpose. Seules les requêtes vers l'endpoint de modèle configuré sortent.
+
+**Fonctionne-t-il sous Windows ?** Oui : des binaires natifs existent pour Windows x64 / ARM64 (ainsi que macOS Intel/Apple Silicon et Linux glibc/musl x64/ARM64), avec un paquet hors ligne incluant un git portable.
+
+**Où sont stockés les réglages ?** Dans `~/.agent/` (`config.yaml`, `sessions/`, `skills/`, `logs/`).
+
+Notes de version (anglais et chinois) dans [What's New](#whats-new).
+
+<a name="zh-tw"></a>
+
+## 繁體中文
+
+**DeepSeekCode 是一個在本機執行的 AI 編程代理。** 一套執行環境同時提供終端機 TUI、Web UI 與 HTTP/WebSocket API 三種介面，可接任意 OpenAI 相容模型。核心是權限審批層、嚴格唯讀的方案模式（plan），以及可在執行時切換的 act / goal / chat 模式。
+
+```bash
+npm install -g @deepseekcode/cli
+dscode                                   # 啟動本機執行環境 + 終端機介面
+dscode exec "修好 src/utils 裡失敗的測試"   # 非互動，輸出 JSONL
+dscode codeview --focus security         # AI 程式碼審查
+```
+
+需要 Node.js 18 以上。首次啟動會引導你設定模型；Web UI 在 `http://localhost:8080`（模型設定頁 `/#models`）。
+
+同一份二進位檔會以多個品牌 scope 發佈，而**每個品牌都暴露同一個 `dscode` 指令**，所以全域**一次只裝一個品牌**：把第二個品牌裝到同一個前綴會在 `dscode` 上撞名，npm 直接以 `EEXIST` 失敗；換品牌前先 `npm uninstall -g <目前品牌>`。本套件自身提供兩個指令名——`dscode`，加上它所在 scope 的品牌名（`@<scope>/cli` → `dscode` + `<scope>`），兩者啟動同一個二進位檔。
+
+核心能力：
+
+- **終端機 TUI**：鍵盤優先的互動介面；預設全螢幕（alt-screen），`--inline` 回到主畫面模式。
+- **本機執行環境**：`dscode` 在同一行程內啟動代理核心與 HTTP/WebSocket 服務，不必另裝後端。
+- **權限審批層**：每次工具呼叫都會經過——作用域 `system > project > user > local > session`（越窄越優先）、`auto` / `ask` / `deny` 策略、高風險呼叫可交給 AI 分類器，審批逾時視同拒絕。
+- **唯讀方案模式**：`/plan` 先給清單，你確認後才動手。
+- **模式可執行時切換**：`Shift+Tab` 在 act · auto-act · goal · auto-goal · chat 間切換。
+- **子代理／背景工作／工作流程**：把獨立任務派給子代理，長任務可脫離目前回合繼續跑。
+- **記憶與技能**：跨工作階段的持久記憶，`/skills` 插入可重用技能。
+- **擴充**：`/mcp` 接 MCP 服務、外掛，以及 LINE / Slack / WhatsApp / QQ / 釘釘 / 飛書等 IM 頻道。
+- **指令沙箱**：Shell 工具走本機沙箱（Linux bwrap、macOS SBPL、Windows MXC / Docker），沒有策略時拒絕執行而非退回主機。
+- **主題**：dark / light / nord / dracula / monokai / one-dark / tokyo-night。
+
+常見問題：
+
+**是開源的嗎？** 不是。本專案為閉源專有軟體，條款見倉庫內 `LICENSE.md`；複製、修改、散布、再授權或販售都需事先取得著作權人的書面許可。
+
+**程式碼會上傳到哪裡？** 執行環境、介面、檔案操作與 Shell 工具全在本機執行，中間沒有 DeepSeekCode 的雲端服務；只有前往你設定之模型端點的請求會離開本機。
+
+**支援 Windows 嗎？** 支援，提供 Windows x64 / ARM64 原生二進位檔（另含 macOS、Linux glibc/musl 的 x64/ARM64），並有內建可攜式 git 的離線包。
+
+**設定放在哪？** `~/.agent/`（`config.yaml`、`sessions/`、`skills/`、`logs/`）。
+
+更新日誌（中英對照）見下方 [What's New](#whats-new)。
+
+<a name="pt"></a>
+
+## Português
+
+**O DeepSeekCode é um agente de programação com IA que roda localmente.** Um único runtime na sua máquina serve três superfícies — interface de terminal (TUI), interface web e API HTTP/WebSocket — e funciona com qualquer modelo compatível com OpenAI. A base é uma camada real de permissões e aprovações, um modo de plano estritamente somente leitura e modos act / goal / chat alternáveis em tempo de execução.
+
+```bash
+npm install -g @deepseekcode/cli
+dscode                                   # runtime local + interface de terminal
+dscode exec "corrija o teste que falha em src/utils"   # não interativo, saída JSONL
+dscode codeview --focus security         # revisão de código por IA
+```
+
+Requer Node.js 18 ou superior. A primeira execução guia a configuração do modelo. A interface web fica em `http://localhost:8080` (modelos em `/#models`).
+
+O mesmo binário é publicado em vários escopos de marca e **toda marca expõe o mesmo comando `dscode`** — instale **apenas uma marca por vez** no global. Uma segunda marca no mesmo prefixo colide em `dscode` e falha com `EEXIST`; rode `npm uninstall -g <marca atual>` antes de trocar. Este pacote oferece dois nomes de comando: `dscode` e o nome da marca do seu escopo (`@<scope>/cli` → `dscode` + `<scope>`) — ambos iniciam o mesmo binário.
+
+O que você recebe:
+
+- **TUI de terminal** — interface pensada para teclado. Tela cheia (alt-screen) por padrão; `--inline` volta ao modo normal.
+- **Runtime local** — `dscode` sobe o núcleo do agente e o servidor HTTP/WebSocket no mesmo processo, sem backend separado.
+- **Camada de permissões** — toda chamada de ferramenta passa por ela: escopos `system > project > user > local > session` (o mais específico vence), políticas `auto` / `ask` / `deny`, classificador de IA opcional para chamadas de risco e timeout de aprovação tratado como negação.
+- **Modo de plano somente leitura** — `/plan` mostra uma lista de verificação antes de executar.
+- **Modos alternáveis** — `Shift+Tab` alterna act · auto-act · goal · auto-goal · chat.
+- **Subagentes, trabalho em segundo plano e workflows** — delegue tarefas isoladas e solte trabalhos longos do turno atual.
+- **Memória e skills** — memória persistente entre sessões e skills reutilizáveis com `/skills`.
+- **Extensível** — servidores MCP com `/mcp`, plugins e canais de mensagem (LINE, Slack, WhatsApp, QQ, DingTalk, Feishu).
+- **Sandbox de comandos** — as ferramentas de shell rodam em sandbox (bwrap no Linux, SBPL no macOS, MXC/Docker no Windows) e recusam executar sem política em vez de cair no host.
+- **Temas** — dark, light, nord, dracula, monokai, one-dark, tokyo-night.
+
+Perguntas frequentes:
+
+**É código aberto?** Não. É software proprietário de código fechado; as condições estão em `LICENSE.md`. Copiar, modificar, distribuir, sublicenciar ou vender exige autorização prévia por escrito do titular dos direitos.
+
+**Meu código sai da minha máquina?** Runtime, interface, operações de arquivo e ferramentas de shell rodam localmente; não há serviço de nuvem do DeepSeekCode no meio. Só saem as requisições ao endpoint de modelo que você configurou.
+
+**Funciona no Windows?** Sim: binários nativos para Windows x64 / ARM64 (além de macOS Intel/Apple Silicon e Linux glibc/musl em x64/ARM64) e um pacote offline com git portátil.
+
+**Onde ficam as configurações?** Em `~/.agent/` (`config.yaml`, `sessions/`, `skills/`, `logs/`).
+
+Notas da versão (inglês e chinês) em [What's New](#whats-new).
+
+<a name="it"></a>
+
+## Italiano
+
+**DeepSeekCode è un agente di programmazione IA che gira in locale.** Un unico runtime sulla tua macchina serve tre superfici — interfaccia terminale (TUI), interfaccia web e API HTTP/WebSocket — e funziona con qualsiasi modello compatibile OpenAI. Al centro ci sono un vero livello di permessi e approvazioni, una modalità piano rigorosamente in sola lettura e modalità act / goal / chat commutabili a runtime.
+
+```bash
+npm install -g @deepseekcode/cli
+dscode                                   # runtime locale + interfaccia terminale
+dscode exec "sistema il test che fallisce in src/utils"   # non interattivo, output JSONL
+dscode codeview --focus security         # code review con IA
+```
+
+Richiede Node.js 18 o superiore. Al primo avvio una procedura guidata configura il modello. L'interfaccia web è su `http://localhost:8080` (modelli su `/#models`).
+
+Lo stesso binario è pubblicato con più scope di marca e **ogni marca espone lo stesso comando `dscode`**: installa quindi **una sola marca alla volta** in globale. Una seconda marca nello stesso prefix va in collisione su `dscode` e fallisce con `EEXIST`; prima di cambiare esegui `npm uninstall -g <marca attuale>`. Il pacchetto fornisce due nomi di comando: `dscode` e il nome di marca del suo scope (`@<scope>/cli` → `dscode` + `<scope>`); entrambi avviano lo stesso binario.
+
+Cosa ottieni:
+
+- **TUI da terminale** — interfaccia pensata per la tastiera. Schermo intero (alt-screen) per impostazione predefinita; `--inline` torna alla modalità normale.
+- **Runtime locale** — `dscode` avvia il core dell'agente e il server HTTP/WebSocket nello stesso processo: nessun backend separato da installare.
+- **Livello di permessi** — ogni chiamata a uno strumento lo attraversa: scope `system > project > user > local > session` (vince il più stretto), policy `auto` / `ask` / `deny`, classificatore IA opzionale per le chiamate a rischio e timeout di approvazione trattato come rifiuto.
+- **Modalità piano in sola lettura** — `/plan` mostra una checklist prima di eseguire qualsiasi cosa.
+- **Modalità commutabili** — `Shift+Tab` alterna act · auto-act · goal · auto-goal · chat.
+- **Subagenti, lavoro in background e workflow** — delega attività isolate e stacca i lavori lunghi dal turno corrente.
+- **Memoria e skill** — memoria persistente tra sessioni e skill riutilizzabili con `/skills`.
+- **Estendibile** — server MCP con `/mcp`, plugin e canali di messaggistica (LINE, Slack, WhatsApp, QQ, DingTalk, Feishu).
+- **Sandbox dei comandi** — gli strumenti shell girano in sandbox (bwrap su Linux, SBPL su macOS, MXC/Docker su Windows) e rifiutano di eseguire senza policy invece di ricadere sull'host.
+- **Temi** — dark, light, nord, dracula, monokai, one-dark, tokyo-night.
+
+Domande frequenti:
+
+**È open source?** No. È software proprietario a codice chiuso; le condizioni sono in `LICENSE.md`. Copiare, modificare, distribuire, sublicenziare o vendere richiede l'autorizzazione scritta preventiva del titolare dei diritti.
+
+**Il mio codice esce dalla macchina?** Runtime, interfaccia, operazioni sui file e strumenti shell girano in locale; non c'è alcun servizio cloud DeepSeekCode in mezzo. Escono solo le richieste all'endpoint del modello che hai configurato.
+
+**Funziona su Windows?** Sì: binari nativi per Windows x64 / ARM64 (oltre a macOS Intel/Apple Silicon e Linux glibc/musl x64/ARM64) e un pacchetto offline con git portatile.
+
+**Dove stanno le impostazioni?** In `~/.agent/` (`config.yaml`, `sessions/`, `skills/`, `logs/`).
+
+Note di rilascio (inglese e cinese) in [What's New](#whats-new).
+
+<a name="de"></a>
+
+## Deutsch
+
+**DeepSeekCode ist ein KI-Programmieragent, der lokal läuft.** Eine einzige Laufzeit auf deinem Rechner bedient drei Oberflächen — ein Terminal-UI (TUI), ein Web-UI und eine HTTP/WebSocket-API — und arbeitet mit jedem OpenAI-kompatiblen Modell. Kern sind eine echte Berechtigungs- und Freigabeschicht, ein strikt lesender Plan-Modus und zur Laufzeit umschaltbare act / goal / chat-Modi.
+
+```bash
+npm install -g @deepseekcode/cli
+dscode                                   # lokale Laufzeit + Terminal-UI
+dscode exec "fehlschlagenden Test in src/utils reparieren"   # nicht interaktiv, JSONL
+dscode codeview --focus security         # KI-Code-Review
+```
+
+Node.js 18 oder neuer. Beim ersten Start führt dich die Einrichtung durch die Modellkonfiguration; das Web-UI läuft unter `http://localhost:8080` (Modelle unter `/#models`).
+
+Dasselbe Binary erscheint unter mehreren Marken-Scopes, und **jede Marke stellt denselben Befehl `dscode` bereit** — installiere global also **nur eine Marke**. Eine zweite Marke im selben Prefix kollidiert bei `dscode` und scheitert mit `EEXIST`; vor dem Wechsel `npm uninstall -g <bisherige Marke>` ausführen. Dieses Paket liefert zwei Befehlsnamen: `dscode` und den Markennamen seines Scopes (`@<scope>/cli` → `dscode` + `<scope>`) — beide starten dasselbe Binary.
+
+Was du bekommst:
+
+- **Terminal-TUI** — tastaturzentrierte Oberfläche. Standard ist Vollbild (alt-screen); `--inline` kehrt zum normalen Bildschirm zurück.
+- **Lokale Laufzeit** — `dscode` startet Agent-Kern und HTTP/WebSocket-Server im selben Prozess; kein separates Backend nötig.
+- **Berechtigungsschicht** — jeder Tool-Aufruf läuft durch sie: Scopes `system > project > user > local > session` (enger gewinnt), Richtlinien `auto` / `ask` / `deny`, optionaler KI-Klassifikator für Grauzonen, Timeout einer Freigabe gilt als Ablehnung.
+- **Plan-Modus nur lesend** — `/plan` zeigt vorab eine Checkliste; erst nach Bestätigung wird ausgeführt.
+- **Umschaltbare Modi** — `Shift+Tab` wechselt zwischen act · auto-act · goal · auto-goal · chat.
+- **Subagenten, Hintergrundarbeit, Workflows** — isolierte Aufgaben delegieren, lange Läufe vom aktuellen Turn lösen.
+- **Speicher und Skills** — sitzungsübergreifendes Gedächtnis, wiederverwendbare Skills über `/skills`.
+- **Erweiterbar** — MCP-Server via `/mcp`, Plugins, Messaging-Kanäle (LINE, Slack, WhatsApp, QQ, DingTalk, Feishu).
+- **Befehlssandbox** — Shell-Tools laufen in einer Sandbox (bwrap unter Linux, SBPL unter macOS, MXC/Docker unter Windows) und verweigern die Ausführung ohne Richtlinie statt auf den Host zurückzufallen.
+- **Themes** — dark, light, nord, dracula, monokai, one-dark, tokyo-night.
+
+Häufige Fragen:
+
+**Ist es Open Source?** Nein. Es ist proprietäre Software mit geschlossenem Quellcode; die Bedingungen stehen in `LICENSE.md`. Vervielfältigen, Ändern, Verbreiten, Unterlizenzieren oder Verkaufen erfordert vorherige schriftliche Zustimmung des Rechteinhabers.
+
+**Verlässt mein Code die Maschine?** Laufzeit, UI, Dateioperationen und Shell-Tools laufen lokal; es gibt keinen Cloud-Dienst von DeepSeekCode dazwischen. Nach außen gehen nur Anfragen an den von dir konfigurierten Modell-Endpunkt.
+
+**Läuft es unter Windows?** Ja — native Binaries für Windows x64 / ARM64 (dazu macOS Intel/Apple Silicon und Linux glibc/musl auf x64/ARM64) und ein Offline-Paket mit portablem git.
+
+**Wo liegen die Einstellungen?** Unter `~/.agent/` (`config.yaml`, `sessions/`, `skills/`, `logs/`).
+
+Versionshinweise (Englisch und Chinesisch) im Abschnitt [What's New](#whats-new).
+
+<a name="ru"></a>
+
+## Русский
+
+**DeepSeekCode — это ИИ-агент для программирования, работающий локально.** Один рантайм на вашей машине обслуживает три интерфейса — TUI в терминале, веб-интерфейс и HTTP/WebSocket API — и работает с любой моделью, совместимой с OpenAI. В основе — реальный слой разрешений и подтверждений, строго режим плана «только чтение» и переключаемые на ходу режимы act / goal / chat.
+
+```bash
+npm install -g @deepseekcode/cli
+dscode                                   # локальный рантайм + интерфейс терминала
+dscode exec "починить падающий тест в src/utils"   # неинтерактивно, вывод JSONL
+dscode codeview --focus security         # ИИ-ревью кода
+```
+
+Нужен Node.js 18+. При первом запуске мастер поможет настроить модель. Веб-интерфейс — `http://localhost:8080` (модели: `/#models`).
+
+Один и тот же бинарник публикуется под несколькими брендовыми scope, и **каждый бренд предоставляет одну и ту же команду `dscode`** — поэтому глобально ставьте **только один бренд**. Второй бренд в том же prefix конфликтует по `dscode` и падает с `EEXIST`; перед сменой выполните `npm uninstall -g <текущий бренд>`. Сам пакет даёт два имени команды: `dscode` и брендовое имя своего scope (`@<scope>/cli` → `dscode` + `<scope>`); обе запускают один и тот же бинарник.
+
+Что вы получаете:
+
+- **TUI в терминале** — интерфейс, рассчитанный на клавиатуру. По умолчанию полный экран (alt-screen), `--inline` возвращает обычный режим.
+- **Локальный рантайм** — `dscode` поднимает ядро агента и HTTP/WebSocket-сервер в одном процессе, отдельный бэкенд не нужен.
+- **Слой разрешений** — через него проходит каждый вызов инструмента: scope `system > project > user > local > session` (побеждает более узкий), политики `auto` / `ask` / `deny`, опциональный ИИ-классификатор для спорных вызовов, истёкшее подтверждение считается отказом.
+- **Режим плана только для чтения** — `/plan` сначала показывает чек-лист, работа начинается после подтверждения.
+- **Переключение режимов** — `Shift+Tab` циклически переключает act · auto-act · goal · auto-goal · chat.
+- **Субагенты, фоновая работа, workflow** — изолированные задачи можно делегировать, а долгие процессы отвязать от текущего хода.
+- **Память и навыки** — постоянная память между сессиями и переиспользуемые навыки через `/skills`.
+- **Расширяемость** — MCP-серверы через `/mcp`, плагины и каналы мессенджеров (LINE, Slack, WhatsApp, QQ, DingTalk, Feishu).
+- **Песочница команд** — инструменты shell выполняются в песочнице (bwrap в Linux, SBPL в macOS, MXC/Docker в Windows) и при отсутствии политики отказываются работать, а не откатываются на хост.
+- **Темы** — dark, light, nord, dracula, monokai, one-dark, tokyo-night.
+
+Частые вопросы:
+
+**Это open source?** Нет. Это проприетарное ПО с закрытым исходным кодом, условия — в `LICENSE.md`. Копирование, изменение, распространение, сублицензирование и продажа требуют предварительного письменного разрешения правообладателя.
+
+**Код уходит с машины?** Рантайм, интерфейс, работа с файлами и инструменты shell выполняются локально; облачных сервисов DeepSeekCode в цепочке нет. Наружу уходят только запросы к настроенному вами endpoint модели.
+
+**Работает под Windows?** Да — есть нативные бинарники для Windows x64 / ARM64 (а также macOS Intel/Apple Silicon и Linux glibc/musl на x64/ARM64) и офлайн-пакет с портативным git.
+
+**Где хранится конфигурация?** В `~/.agent/` (`config.yaml`, `sessions/`, `skills/`, `logs/`).
+
+Заметки о выпуске (английский и китайский) — в разделе [What's New](#whats-new).
+
+<a name="tr"></a>
+
+## Türkçe
+
+**DeepSeekCode, yerelde çalışan bir yapay zekâ kodlama ajanıdır.** Tek bir çalışma zamanı makinenizde üç yüzey sunar — terminal TUI, web arayüzü ve HTTP/WebSocket API — ve herhangi bir OpenAI uyumlu modelle çalışır. Temelinde gerçek bir izin/onay katmanı, kesinlikle salt okunur plan modu ve çalışma anında geçiş yapılabilen act / goal / chat modları vardır.
+
+```bash
+npm install -g @deepseekcode/cli
+dscode                                   # yerel çalışma zamanı + terminal arayüzü
+dscode exec "src/utils içindeki hatalı testi düzelt"   # etkileşimsiz, JSONL çıktı
+dscode codeview --focus security         # yapay zekâ kod incelemesi
+```
+
+Node.js 18 veya üzeri gerekir. İlk başlatmada model kurulumu adım adım yönlendirilir. Web arayüzü `http://localhost:8080` adresinde (modeller: `/#models`).
+
+Aynı ikili dosya birden çok marka scope'u altında yayınlanır ve **her marka aynı `dscode` komutunu sunar**; bu yüzden global olarak **aynı anda tek marka** kurun. Aynı prefix'e ikinci bir marka kurulursa `dscode` çakışır ve npm `EEXIST` ile başarısız olur; markayı değiştirmeden önce `npm uninstall -g <mevcut marka>` çalıştırın. Bu paket iki komut adı sağlar: `dscode` ve bulunduğu scope'un marka adı (`@<scope>/cli` → `dscode` + `<scope>`); ikisi de aynı ikili dosyayı başlatır.
+
+Neler alırsınız:
+
+- **Terminal TUI** — klavye odaklı arayüz. Varsayılan tam ekran (alt-screen); `--inline` normal ekrana döner.
+- **Yerel çalışma zamanı** — `dscode` ajan çekirdeğini ve HTTP/WebSocket sunucusunu aynı süreçte başlatır; ayrı bir arka uç kurmanız gerekmez.
+- **İzin katmanı** — her araç çağrısı bu katmandan geçer: `system > project > user > local > session` kapsamları (dar olan önceliklidir), `auto` / `ask` / `deny` politikaları, riskli çağrılar için isteğe bağlı yapay zekâ sınıflandırıcısı ve onay zaman aşımı red sayılır.
+- **Salt okunur plan modu** — `/plan` çalıştırmadan önce bir kontrol listesi gösterir; yalnızca onayladığınız adımlar yürütülür.
+- **Mod geçişi** — `Shift+Tab` ile act · auto-act · goal · auto-goal · chat arasında geçiş.
+- **Alt ajanlar, arka plan işleri ve iş akışları** — bağımsız işleri devredin, uzun işleri mevcut turdan ayırın.
+- **Bellek ve beceriler** — oturumlar arası kalıcı bellek ve `/skills` ile eklenen yeniden kullanılabilir beceriler.
+- **Genişletilebilirlik** — `/mcp` ile MCP sunucuları, eklentiler ve mesajlaşma kanalları (LINE, Slack, WhatsApp, QQ, DingTalk, Feishu).
+- **Komut sandbox'ı** — shell araçları sandbox içinde çalışır (Linux'ta bwrap, macOS'ta SBPL, Windows'ta MXC/Docker) ve politika yoksa ana makineye düşmek yerine çalışmayı reddeder.
+- **Temalar** — dark, light, nord, dracula, monokai, one-dark, tokyo-night.
+
+Sık sorulanlar:
+
+**Açık kaynak mı?** Hayır. Kapalı kaynaklı, tescilli bir yazılımdır; koşullar `LICENSE.md` içinde. Kopyalamak, değiştirmek, dağıtmak, alt lisanslamak veya satmak için hak sahibinin önceden yazılı izni gerekir.
+
+**Kodum makineden çıkıyor mu?** Çalışma zamanı, arayüz, dosya işlemleri ve shell araçları yerelde çalışır; arada DeepSeekCode bulut servisi yoktur. Yalnızca yapılandırdığınız model uç noktasına giden istekler dışarı çıkar.
+
+**Windows'ta çalışır mı?** Evet — Windows x64 / ARM64 için yerel ikili dosyalar (ayrıca macOS Intel/Apple Silicon ve Linux glibc/musl x64/ARM64) ve taşınabilir git içeren çevrimdışı paket var.
+
+**Ayarlar nerede?** `~/.agent/` altında (`config.yaml`, `sessions/`, `skills/`, `logs/`).
+
+Sürüm notları (İngilizce ve Çince) [What's New](#whats-new) bölümünde.
+
+<a name="ar"></a>
+
+## العربية
+
+**DeepSeekCode وكيل برمجة بالذكاء الاصطناعي يعمل محليًا.** وقت تشغيل واحد على جهازك يقدّم ثلاث واجهات — واجهة طرفية (TUI) وواجهة ويب وواجهة HTTP/WebSocket API — ويعمل مع أي نموذج متوافق مع OpenAI. يقوم على طبقة حقيقية للأذونات والموافقات، ووضع خطة للقراءة فقط بشكل صارم، وأوضاع act / goal / chat قابلة للتبديل أثناء التشغيل.
+
+```bash
+npm install -g @deepseekcode/cli
+dscode                                   # وقت التشغيل المحلي + واجهة الطرفية
+dscode exec "أصلح الاختبار الفاشل في src/utils"   # بدون تفاعل، ناتج JSONL
+dscode codeview --focus security         # مراجعة كود بالذكاء الاصطناعي
+```
+
+يتطلب Node.js 18 أو أحدث. عند أول تشغيل يرشدك معالج الإعداد إلى ضبط النموذج. واجهة الويب على `http://localhost:8080` (النماذج على `/#models`).
+
+يُنشر الملف التنفيذي نفسه تحت عدة نطاقات (scope) للعلامات، و**كل علامة تُظهر الأمر `dscode` نفسه**؛ لذا ثبّت **علامة واحدة فقط** على المستوى العام. تثبيت علامة ثانية في البادئة نفسها يتعارض على `dscode` ويفشل بخطأ `EEXIST` من npm؛ نفّذ `npm uninstall -g <العلامة الحالية>` قبل التبديل. توفّر هذه الحزمة اسمَي أمر: `dscode` واسم علامة نطاقه (`@<scope>/cli` → `dscode` + `<scope>`)، وكلاهما يشغّل الملف نفسه.
+
+ما الذي تحصل عليه:
+
+- **واجهة طرفية TUI** — واجهة تعتمد على لوحة المفاتيح أولًا. الشاشة الكاملة (alt-screen) هي الافتراضي، و`--inline` يعيدك إلى الوضع العادي.
+- **وقت تشغيل محلي** — يشغّل `dscode` نواة الوكيل وخادم HTTP/WebSocket في العملية نفسها، دون خدمة خلفية منفصلة.
+- **طبقة الأذونات** — يمرّ كل استدعاء أداة عبرها: النطاقات `system > project > user > local > session` (الأضيق يفوز)، والسياسات `auto` / `ask` / `deny`، ومصنّف ذكاء اصطناعي اختياري للاستدعاءات عالية الخطورة، وانتهاء مهلة الموافقة يُعامل كرفض.
+- **وضع خطة للقراءة فقط** — يعرض `/plan` قائمة تحقق قبل التنفيذ، ولا يُنفَّذ إلا ما توافق عليه.
+- **تبديل الأوضاع** — `Shift+Tab` يتنقل بين act · auto-act · goal · auto-goal · chat.
+- **وكلاء فرعيون وعمل في الخلفية وسير عمل** — فوّض المهام المستقلة وافصل الأعمال الطويلة عن الجولة الحالية.
+- **الذاكرة والمهارات** — ذاكرة دائمة بين الجلسات ومهارات قابلة لإعادة الاستخدام تُدرج بـ `/skills`.
+- **قابل للتوسيع** — خوادم MCP عبر `/mcp`، وإضافات، وقنوات مراسلة (LINE وSlack وWhatsApp وQQ وDingTalk وFeishu).
+- **عزل للأوامر (sandbox)** — أدوات الصدفة تُنفَّذ داخل عزل (bwrap على Linux، وSBPL على macOS، وMXC/Docker على Windows)، وترفض التنفيذ عند غياب السياسة بدل الرجوع إلى المضيف.
+- **السمات** — dark / light / nord / dracula / monokai / one-dark / tokyo-night.
+
+أسئلة شائعة:
+
+**هل هو مفتوح المصدر؟** لا. برنامج احتكاري مغلق المصدر، والشروط في `LICENSE.md`؛ النسخ أو التعديل أو التوزيع أو الترخيص من الباطن أو البيع يتطلب إذنًا كتابيًا مسبقًا من صاحب الحقوق.
+
+**هل يخرج الكود من جهازي؟** وقت التشغيل والواجهة وعمليات الملفات وأدوات الصدفة تعمل محليًا، ولا توجد خدمة سحابية من DeepSeekCode في المسار. لا يخرج سوى الطلبات إلى نقطة نهاية النموذج التي أعددتها.
+
+**هل يعمل على Windows؟** نعم — ملفات تنفيذية أصلية لـ Windows x64 / ARM64 (إضافة إلى macOS بنسختي Intel وApple Silicon وLinux glibc/musl على x64/ARM64)، وحزمة دون اتصال تتضمن git محمولًا.
+
+**أين تُحفظ الإعدادات؟** في `~/.agent/` (`config.yaml` و`sessions/` و`skills/` و`logs/`).
+
+ملاحظات الإصدار (بالإنجليزية والصينية) في [What's New](#whats-new).
+
+<a name="hi"></a>
+
+## हिन्दी
+
+**DeepSeekCode एक लोकल-फ़र्स्ट AI कोडिंग एजेंट है।** आपकी मशीन पर एक ही रनटाइम तीन सतहें देता है — टर्मिनल TUI, वेब UI और HTTP/WebSocket API — और किसी भी OpenAI-संगत मॉडल के साथ चलता है। इसका आधार असली permission/approval लेयर, सख़्त read-only plan मोड और रनटाइम पर बदले जा सकने वाले act / goal / chat मोड हैं।
+
+```bash
+npm install -g @deepseekcode/cli
+dscode                                   # लोकल रनटाइम + टर्मिनल UI
+dscode exec "src/utils का फ़ेल होता टेस्ट ठीक करो"   # नॉन-इंटरैक्टिव, JSONL आउटपुट
+dscode codeview --focus security         # AI कोड रिव्यू
+```
+
+Node.js 18 या नया चाहिए। पहले लॉन्च पर मॉडल सेटअप का गाइड मिलता है। वेब UI `http://localhost:8080` पर है (मॉडल: `/#models`)।
+
+वही बाइनरी कई ब्रांड scope में प्रकाशित होती है और **हर ब्रांड वही `dscode` कमांड देता है**, इसलिए ग्लोबली **एक बार में सिर्फ़ एक ब्रांड** इंस्टॉल करें। उसी prefix में दूसरा ब्रांड `dscode` पर टकरा जाता है और npm `EEXIST` के साथ फ़ेल होता है; बदलने से पहले `npm uninstall -g <मौजूदा ब्रांड>` चलाएँ। यह पैकेज दो कमांड नाम देता है — `dscode` और अपने scope का ब्रांड नाम (`@<scope>/cli` → `dscode` + `<scope>`) — दोनों एक ही बाइनरी चलाते हैं।
+
+आपको क्या मिलता है:
+
+- **टर्मिनल TUI** — कीबोर्ड-फ़र्स्ट इंटरफ़ेस। डिफ़ॉल्ट पूरी स्क्रीन (alt-screen); `--inline` से सामान्य मोड।
+- **लोकल रनटाइम** — `dscode` एजेंट कोर और HTTP/WebSocket सर्वर एक ही प्रोसेस में शुरू करता है, अलग बैकएंड नहीं चाहिए।
+- **Permission लेयर** — हर टूल कॉल इससे गुज़रता है: scope `system > project > user > local > session` (संकीर्ण पहले), नीतियाँ `auto` / `ask` / `deny`, जोखिम भरे कॉल के लिए वैकल्पिक AI क्लासिफ़ायर, और approval का टाइमआउट अस्वीकृति माना जाता है।
+- **read-only plan मोड** — `/plan` पहले चेकलिस्ट दिखाता है; मंज़ूरी के बाद ही काम होता है।
+- **मोड बदलना** — `Shift+Tab` से act · auto-act · goal · auto-goal · chat।
+- **सब-एजेंट, बैकग्राउंड काम और वर्कफ़्लो** — अलग काम सौंपें और लंबे काम मौजूदा टर्न से अलग चलाएँ।
+- **मेमोरी और स्किल** — सेशन के पार टिकने वाली मेमोरी और `/skills` से जोड़ी जाने वाली दोबारा इस्तेमाल योग्य स्किल।
+- **एक्सटेंसिबल** — `/mcp` से MCP सर्वर, प्लगइन, और मैसेजिंग चैनल (LINE, Slack, WhatsApp, QQ, DingTalk, Feishu)।
+- **कमांड सैंडबॉक्स** — शेल टूल सैंडबॉक्स में चलते हैं (Linux पर bwrap, macOS पर SBPL, Windows पर MXC/Docker) और नीति न होने पर होस्ट पर लौटने के बजाय चलने से मना कर देते हैं।
+- **थीम** — dark / light / nord / dracula / monokai / one-dark / tokyo-night।
+
+आम सवाल:
+
+**क्या यह ओपन सोर्स है?** नहीं। यह क्लोज़्ड-सोर्स प्रोप्राइटरी सॉफ़्टवेयर है, शर्तें `LICENSE.md` में हैं; कॉपी, बदलाव, वितरण, सब-लाइसेंस या बिक्री के लिए अधिकारधारी की पूर्व लिखित अनुमति चाहिए।
+
+**क्या मेरा कोड मशीन से बाहर जाता है?** रनटाइम, UI, फ़ाइल ऑपरेशन और शेल टूल सब लोकल चलते हैं; बीच में DeepSeekCode की कोई क्लाउड सेवा नहीं है। बाहर सिर्फ़ आपके सेट किए मॉडल endpoint की रिक्वेस्ट जाती हैं।
+
+**Windows पर चलता है?** हाँ — Windows x64 / ARM64 के नेटिव बाइनरी (साथ में macOS Intel/Apple Silicon और Linux glibc/musl x64/ARM64) और पोर्टेबल git वाला ऑफ़लाइन पैकेज।
+
+**सेटिंग्स कहाँ रहती हैं?** `~/.agent/` में (`config.yaml`, `sessions/`, `skills/`, `logs/`)।
+
+रिलीज़ नोट्स (अंग्रेज़ी और चीनी) नीचे [What's New](#whats-new) में।
+
+<a name="id"></a>
+
+## Bahasa Indonesia
+
+**DeepSeekCode adalah agen coding AI yang berjalan lokal.** Satu runtime di mesin Anda melayani tiga permukaan — TUI terminal, UI web, dan API HTTP/WebSocket — dan bekerja dengan model apa pun yang kompatibel dengan OpenAI. Fondasinya lapisan izin/persetujuan yang nyata, mode plan yang benar-benar hanya-baca, dan mode act / goal / chat yang bisa diganti saat berjalan.
+
+```bash
+npm install -g @deepseekcode/cli
+dscode                                   # runtime lokal + UI terminal
+dscode exec "perbaiki tes yang gagal di src/utils"   # non-interaktif, keluaran JSONL
+dscode codeview --focus security         # review kode dengan AI
+```
+
+Butuh Node.js 18 atau lebih baru. Peluncuran pertama memandu penyiapan model. UI web ada di `http://localhost:8080` (model di `/#models`).
+
+Biner yang sama dirilis di beberapa scope merek dan **setiap merek menyediakan perintah `dscode` yang sama**, jadi pasang **hanya satu merek** secara global. Merek kedua di prefix yang sama bentrok di `dscode` dan npm gagal dengan `EEXIST`; jalankan `npm uninstall -g <merek saat ini>` sebelum berganti. Paket ini menyediakan dua nama perintah: `dscode` dan nama merek scope-nya (`@<scope>/cli` → `dscode` + `<scope>`); keduanya menjalankan biner yang sama.
+
+Yang Anda dapat:
+
+- **TUI terminal** — antarmuka yang mengutamakan keyboard. Layar penuh (alt-screen) sebagai default; `--inline` kembali ke mode biasa.
+- **Runtime lokal** — `dscode` menjalankan inti agen dan server HTTP/WebSocket dalam proses yang sama, tanpa backend terpisah.
+- **Lapisan izin** — setiap pemanggilan alat melewatinya: scope `system > project > user > local > session` (yang paling sempit menang), kebijakan `auto` / `ask` / `deny`, klasifikasi AI opsional untuk panggilan berisiko, dan timeout persetujuan dianggap penolakan.
+- **Mode plan hanya-baca** — `/plan` menampilkan daftar periksa sebelum eksekusi, dan hanya yang Anda setujui yang dijalankan.
+- **Mode yang bisa diganti** — `Shift+Tab` berganti act · auto-act · goal · auto-goal · chat.
+- **Subagen, kerja latar belakang, dan workflow** — delegasikan tugas terisolasi dan lepaskan pekerjaan panjang dari giliran berjalan.
+- **Memori dan skill** — memori lintas sesi dan skill yang bisa dipakai ulang lewat `/skills`.
+- **Dapat diperluas** — server MCP lewat `/mcp`, plugin, dan kanal perpesanan (LINE, Slack, WhatsApp, QQ, DingTalk, Feishu).
+- **Sandbox perintah** — alat shell berjalan di sandbox (bwrap di Linux, SBPL di macOS, MXC/Docker di Windows) dan menolak jalan bila tidak ada kebijakan, bukan jatuh ke host.
+- **Tema** — dark, light, nord, dracula, monokai, one-dark, tokyo-night.
+
+Pertanyaan umum:
+
+**Apakah open source?** Tidak. Ini perangkat lunak proprietari dengan kode tertutup; ketentuannya di `LICENSE.md`. Menyalin, mengubah, mendistribusikan, menyublisensikan, atau menjual memerlukan izin tertulis sebelumnya dari pemegang hak.
+
+**Apakah kode saya keluar dari mesin?** Runtime, UI, operasi berkas, dan alat shell berjalan lokal; tidak ada layanan cloud DeepSeekCode di antaranya. Yang keluar hanya permintaan ke endpoint model yang Anda konfigurasi.
+
+**Jalan di Windows?** Ya — tersedia biner native untuk Windows x64 / ARM64 (juga macOS Intel/Apple Silicon dan Linux glibc/musl x64/ARM64), plus paket offline dengan git portabel.
+
+**Di mana konfigurasi disimpan?** Di `~/.agent/` (`config.yaml`, `sessions/`, `skills/`, `logs/`).
+
+Catatan rilis (Inggris dan Tionghoa) di [What's New](#whats-new).
+
+<a name="vi"></a>
+
+## Tiếng Việt
+
+**DeepSeekCode là một tác tử lập trình AI chạy cục bộ.** Một runtime trên máy bạn phục vụ ba bề mặt — TUI trên terminal, giao diện web và API HTTP/WebSocket — và chạy với bất kỳ mô hình nào tương thích OpenAI. Nền tảng là lớp phân quyền/phê duyệt thực sự, chế độ plan chỉ đọc tuyệt đối và các chế độ act / goal / chat đổi được ngay khi đang chạy.
+
+```bash
+npm install -g @deepseekcode/cli
+dscode                                   # runtime cục bộ + giao diện terminal
+dscode exec "sửa bài test hỏng trong src/utils"   # không tương tác, xuất JSONL
+dscode codeview --focus security         # review mã bằng AI
+```
+
+Cần Node.js 18 trở lên. Lần chạy đầu sẽ hướng dẫn cấu hình mô hình. Giao diện web ở `http://localhost:8080` (mô hình tại `/#models`).
+
+Cùng một tệp nhị phân được phát hành dưới nhiều scope thương hiệu và **mọi thương hiệu đều cung cấp cùng lệnh `dscode`**, nên chỉ cài **một thương hiệu tại một thời điểm**. Thương hiệu thứ hai trong cùng prefix sẽ đụng `dscode` và npm báo `EEXIST`; chạy `npm uninstall -g <thương hiệu hiện tại>` trước khi đổi. Gói này cung cấp hai tên lệnh: `dscode` và tên thương hiệu của scope chứa nó (`@<scope>/cli` → `dscode` + `<scope>`); cả hai chạy cùng tệp nhị phân.
+
+Bạn nhận được gì:
+
+- **TUI trên terminal** — giao diện ưu tiên bàn phím. Mặc định toàn màn hình (alt-screen); `--inline` quay về chế độ thường.
+- **Runtime cục bộ** — `dscode` khởi động lõi tác tử và máy chủ HTTP/WebSocket trong cùng tiến trình, không cần backend riêng.
+- **Lớp phân quyền** — mọi lệnh gọi công cụ đều đi qua: scope `system > project > user > local > session` (hẹp hơn thắng), chính sách `auto` / `ask` / `deny`, bộ phân loại AI tùy chọn cho lệnh rủi ro, hết hạn phê duyệt được coi là từ chối.
+- **Chế độ plan chỉ đọc** — `/plan` đưa danh sách kiểm tra trước khi thực thi; chỉ phần bạn duyệt mới được chạy.
+- **Đổi chế độ** — `Shift+Tab` luân chuyển act · auto-act · goal · auto-goal · chat.
+- **Tác tử con, việc chạy nền và workflow** — giao việc độc lập và tách việc dài khỏi lượt hiện tại.
+- **Bộ nhớ và skill** — bộ nhớ bền vững giữa các phiên và skill dùng lại được chèn bằng `/skills`.
+- **Mở rộng** — máy chủ MCP qua `/mcp`, plugin và các kênh nhắn tin (LINE, Slack, WhatsApp, QQ, DingTalk, Feishu).
+- **Sandbox lệnh** — công cụ shell chạy trong sandbox (bwrap trên Linux, SBPL trên macOS, MXC/Docker trên Windows) và từ chối chạy khi thiếu chính sách thay vì rơi về máy chủ.
+- **Giao diện màu** — dark, light, nord, dracula, monokai, one-dark, tokyo-night.
+
+Câu hỏi thường gặp:
+
+**Có phải mã nguồn mở?** Không. Đây là phần mềm độc quyền, đóng mã nguồn; điều khoản trong `LICENSE.md`. Sao chép, sửa, phân phối, cấp phép lại hoặc bán đều cần sự đồng ý trước bằng văn bản của chủ sở hữu quyền.
+
+**Mã của tôi có rời khỏi máy?** Runtime, giao diện, thao tác tệp và công cụ shell đều chạy cục bộ; không có dịch vụ đám mây DeepSeekCode ở giữa. Chỉ các yêu cầu tới endpoint mô hình bạn cấu hình mới ra ngoài.
+
+**Có chạy trên Windows?** Có — có tệp nhị phân gốc cho Windows x64 / ARM64 (kèm macOS Intel/Apple Silicon và Linux glibc/musl x64/ARM64) và gói offline kèm git di động.
+
+**Cấu hình lưu ở đâu?** Trong `~/.agent/` (`config.yaml`, `sessions/`, `skills/`, `logs/`).
+
+Ghi chú phát hành (tiếng Anh và tiếng Trung) ở [What's New](#whats-new).
+
+<a name="th"></a>
+
+## ไทย
+
+**DeepSeekCode คือเอเจนต์เขียนโค้ด AI ที่ทำงานบนเครื่องคุณเอง** รันไทม์เดียวให้สามหน้าจอ — TUI บนเทอร์มินัล, เว็บ UI และ HTTP/WebSocket API — ใช้ได้กับโมเดลที่รองรับ OpenAI ทุกรุ่น หัวใจคือชั้นสิทธิ์และการอนุมัติจริง โหมด plan ที่อ่านได้อย่างเดียวโดยแท้ และโหมด act / goal / chat ที่สลับได้ระหว่างใช้งาน
+
+```bash
+npm install -g @deepseekcode/cli
+dscode                                   # รันไทม์ในเครื่อง + UI เทอร์มินัล
+dscode exec "แก้เทสต์ที่พังใน src/utils"   # ไม่โต้ตอบ แสดงผลเป็น JSONL
+dscode codeview --focus security         # รีวิวโค้ดด้วย AI
+```
+
+ต้องใช้ Node.js 18 ขึ้นไป ครั้งแรกจะมีตัวช่วยตั้งค่าโมเดล เว็บ UI อยู่ที่ `http://localhost:8080` (ตั้งค่าโมเดลที่ `/#models`)
+
+ไบนารีเดียวกันถูกเผยแพร่ภายใต้หลาย scope แบรนด์ และ**ทุกแบรนด์ให้คำสั่ง `dscode` เดียวกัน** จึงควรติดตั้ง**เพียงแบรนด์เดียว**ในระดับ global แบรนด์ที่สองใน prefix เดียวกันจะชนกันที่ `dscode` และ npm จะล้มเหลวด้วย `EEXIST` ก่อนเปลี่ยนให้รัน `npm uninstall -g <แบรนด์ปัจจุบัน>` แพ็กเกจนี้ให้ชื่อคำสั่งสองชื่อคือ `dscode` และชื่อแบรนด์ของ scope ที่มันอยู่ (`@<scope>/cli` → `dscode` + `<scope>`) ทั้งคู่เรียกไบนารีเดียวกัน
+
+สิ่งที่คุณได้:
+
+- **TUI บนเทอร์มินัล** — อินเทอร์เฟซที่เน้นคีย์บอร์ด ค่าเริ่มต้นเป็นเต็มหน้าจอ (alt-screen) ใช้ `--inline` เพื่อกลับไปโหมดปกติ
+- **รันไทม์ในเครื่อง** — `dscode` เปิดคอร์ของเอเจนต์และเซิร์ฟเวอร์ HTTP/WebSocket ในโปรเซสเดียวกัน ไม่ต้องติดตั้งแบ็กเอนด์แยก
+- **ชั้นสิทธิ์** — ทุกการเรียกเครื่องมือต้องผ่านชั้นนี้: ขอบเขต `system > project > user > local > session` (แคบกว่าชนะ), นโยบาย `auto` / `ask` / `deny`, ตัวจำแนก AI เสริมสำหรับการเรียกที่มีความเสี่ยง และการอนุมัติที่หมดเวลาถือเป็นการปฏิเสธ
+- **โหมด plan แบบอ่านอย่างเดียว** — `/plan` แสดงเช็กลิสต์ก่อนลงมือ และทำเฉพาะข้อที่คุณอนุมัติ
+- **สลับโหมดได้** — `Shift+Tab` สลับ act · auto-act · goal · auto-goal · chat
+- **เอเจนต์ย่อย งานเบื้องหลัง และเวิร์กโฟลว์** — มอบหมายงานที่แยกจากกัน และแยกงานยาวออกจากเทิร์นปัจจุบัน
+- **ความจำและสกิล** — ความจำที่คงอยู่ข้ามเซสชัน และสกิลที่ใช้ซ้ำได้ผ่าน `/skills`
+- **ขยายได้** — เซิร์ฟเวอร์ MCP ผ่าน `/mcp`, ปลั๊กอิน และช่องทางแชต (LINE, Slack, WhatsApp, QQ, DingTalk, Feishu)
+- **แซนด์บ็อกซ์คำสั่ง** — เครื่องมือเชลล์ทำงานในแซนด์บ็อกซ์ (bwrap บน Linux, SBPL บน macOS, MXC/Docker บน Windows) และปฏิเสธการทำงานเมื่อไม่มีนโยบายแทนที่จะถอยไปใช้โฮสต์
+- **ธีม** — dark / light / nord / dracula / monokai / one-dark / tokyo-night
+
+คำถามที่พบบ่อย:
+
+**เป็นโอเพนซอร์สไหม?** ไม่ใช่ เป็นซอฟต์แวร์ลิขสิทธิ์แบบปิดโค้ด เงื่อนไขอยู่ใน `LICENSE.md` การคัดลอก แก้ไข เผยแพร่ ให้สิทธิ์ช่วง หรือขาย ต้องได้รับอนุญาตเป็นลายลักษณ์อักษรล่วงหน้าจากผู้ถือสิทธิ์
+
+**โค้ดของผมออกจากเครื่องไหม?** รันไทม์ UI การจัดการไฟล์ และเครื่องมือเชลล์ทำงานในเครื่องทั้งหมด ไม่มีบริการคลาวด์ของ DeepSeekCode คั่นกลาง สิ่งที่ออกไปคือคำขอไปยัง endpoint ของโมเดลที่คุณตั้งค่าไว้เท่านั้น
+
+**ใช้บน Windows ได้ไหม?** ได้ มีไบนารีเนทีฟสำหรับ Windows x64 / ARM64 (รวมถึง macOS Intel/Apple Silicon และ Linux glibc/musl x64/ARM64) และแพ็กเกจออฟไลน์ที่พก git ไปด้วย
+
+**เก็บการตั้งค่าไว้ที่ไหน?** ที่ `~/.agent/` (`config.yaml`, `sessions/`, `skills/`, `logs/`)
+
+บันทึกการออกรุ่น (อังกฤษและจีน) อยู่ที่ [What's New](#whats-new)
+
+<a name="for-ai-assistants"></a>
+
+## For AI assistants and LLM crawlers
+
+A machine-readable summary of this project ships inside this package:
+`https://unpkg.com/@deepseekcode/cli/llms.txt` (the same file lives at `llms.txt` in the
+repository). It states what DeepSeekCode is and is not, the official npm coordinates, and the
+platform matrix — so an assistant can describe or cite this package without guessing. The project
+page is https://deepseekcode.github.io/deepseekwork/.
+
+This README is published in 17 languages — every locale from `#zh-cn` through `#th` carries the same
+canonical definition, install line, feature list and FAQ — so an answer can be cited from the
+reader's own language instead of being translated on the fly.
+
 <a name="whats-new"></a>
 
 <!-- whatsnew:start -->
@@ -573,41 +1166,31 @@ Notas de la versión (inglés y chino) en [What's New](#whats-new).
 
 ## What's New · 更新日志
 
-### 1.0.40 — 2026-10-15
+### 1.0.41 — 2026-10-23
 
-可视化产物分层渲染 + 线程与值守 + 记忆/技能收敛
+收藏与日历、品牌标识工作室、key 轮换与技能安全修复
 
-Layered visual artifacts, threads & on-duty coverage, memory and skills consolidation
+Favorites & calendar, brand-icon studio, provider key rotation and skill hardening
 
 **English**
 
-- Layered visual artifacts: flowcharts become indented outlines (character grids are gone), tool results render as inline cards in the transcript, and two new self-contained HTML snapshot kinds — dashboard and analysis — ship with charts and metric cards.
-- Threads & on-duty coverage: project/task threads and session kinds are separated, IM notifications group by project → task instead of collapsing into one line, and a project-manager roster plus a global on-duty seat let a goal reach its own project manager with an honest delivery report.
-- Memory & skills: the memory write/retrieve path is in place (extractor, write agent, search tool) and Chinese-query recall is fixed; skill ids are normalized with a one-off migration of existing data.
-- Dynamic workflows now declare themselves explicitly: `declare_workflow` replaces the filename convention, goal mode blocks agent primitives until a workflow is declared, and the plan syncs with execution through update_plan.
-- Sandbox: the P0 local command sandbox is wired into BashTool (bwrap on Linux, SBPL on macOS, fail-closed when the policy is missing or invalid), with Windows MXC / docker backends added.
-- Channels & connectors: inbound request-signature verification lands for line / slack / whatsapp / qqbot / dingtalk / feishu; the connector catalog gains REA and connector env vars can be declared optional, so a missing engine path no longer blocks the connector.
-- Session persistence hardening: the on-disk format is version-gated with an adjacent migration chain, compaction cut points pair up correctly and orphaned tool results are repairable — a session can no longer be permanently bricked.
-- CLI: a `/skill` category bar, an `/agents` picker, full-depth `@` file indexing and `/btw` side conversations arrive, backed by a static audit and a three-layer dispatch scan of command wiring.
-- Web: the Projects front door is rebuilt with a consistent warm theme and overlay layer, a design-system view arrives with a design-token gate, the right rail gains collapsible session groups and an assistant workbench, and HTML snapshots support charts and metrics.
-- Distribution & install: a one-line installer with mirror racing and an embedded hash, bundled portable git in the offline package, and speech dependencies installed into a dedicated venv (which also works on PEP 668 machines).
-- Release-audit closure: the dead-export checker no longer counts test files as consumers, so "shipped implementation + thorough unit tests + zero production wiring" is finally caught (exposed legacy cases are frozen in a shrink-only ratchet baseline). The first real gap it uncovered is closed: the session secret vault had zero production callers and is now wired to runtime dispose, so rebuilding a runtime in-process no longer leaves session secrets from the previous instance behind.
-- Web: the Tools and Connectors pages now spell out how they divide the work (tools = what the model can call; connectors = whether an external process is installed and connected) and link to each other, so "I turned the connector off, why does it still work?" no longer happens.
+- Favorites and retrieval: sessions and artifacts can be starred into their own view, with sorting and a favorites toolbar in the artifact list; sidebar and panels are unified under a rebuilt app shell with fuller bilingual copy.
+- Automation calendar: scheduled tasks gain a calendar view with a day-agenda sidebar, so you can see at a glance what runs when and what already ran.
+- Brand-icon studio: the app icon can be recolored and relettered from settings, previewed live and persisted.
+- Turn-bound suggestions: a ghost suggestion no longer reappears in a later turn — it renders only for the turn it was produced in.
+- Server and CLI: the daemon starts on login; question_answer is broadcast so answering on one client dismisses the prompt everywhere; the compaction progress line moves to the end of the output area instead of displacing the status line.
+- Provider key rotation: a throttled or dead key rolls over to the next one without breaking the session, plus a profile-append tool and a reviewer actor.
+- Skill hardening: `skill_define` rejects newline injection and its overwrite guard now also checks registered skills; a skill whose frontmatter repeats a top-level key is rejected wholesale instead of silently overwritten.
 
 **中文**
 
-- 可视化产物分层渲染：流程图改为缩进大纲（去掉字符网格），工具结果在会话里内联成卡片；新增 dashboard / analysis 两类自包含 HTML 快照，自带图表与数字卡片。
-- 线程与值守：项目 / 任务线程与 session kind 分流，IM 通知改按「项目 → 任务」分组归并，多线程进度不再糊成一条；项目经理名册与全局值守席位落地，目标可投递到所属项目的经理并如实回报投递结果。
-- 记忆与技能：记忆写入 / 检索链路成型（抽取器、写入 agent、搜索工具），修掉中文提问召回；技能 id 规范化并对旧数据做一次性迁移。
-- 动态工作流改为显式声明：`declare_workflow` 取代文件名约定，goal 模式下未声明即拦截 agent 原语，计划经 update_plan 与执行态同步。
-- 沙箱：本地命令沙箱 P0 接入 BashTool（Linux bwrap / macOS SBPL，策略缺失即拒绝启动），并补上 Windows 的 MXC / docker 后端。
-- 频道与连接器：频道入站请求签名校验落地（line / slack / whatsapp / qqbot / dingtalk / feishu）；连接器目录加入 REA，环境变量支持「可选」声明，缺引擎路径不再锁死连接器。
-- 会话持久化加固：落盘格式版本强制 + 相邻迁移链，压缩切点配对对齐、孤儿工具结果可修复，会话不再被永久写死。
-- CLI：新增 `/skill` 分类条、`/agents` 选择器、`@` 文件索引全深度化与 `/btw` 旁问侧会话；命令接线加了静态审计与三层派发扫描。
-- Web：Projects 正门重做并统一暖调主题与遮罩层，新增设计系统视图与设计令牌闸门；右栏可折叠会话区与助手工作台，html 快照支持图表与数字。
-- 分发与安装：新增一键安装脚本（镜像竞速 + 内嵌 hash）、便携 git 内置进离线包，语音依赖改用独立 venv（PEP 668 的机器也能装）。
-- 发布审计收口：死导出检查器不再把测试文件算作「有人用」，于是「实现 + 齐全单测 + 零生产接线」这个最坏组合终于判得死（暴露的存量以只缩不涨的棘轮基线固化）；由此揪出的第一个真实缺口已补——会话密钥保管箱原先生产调用点为 0，现已接到 runtime 的 dispose，进程内重建 runtime 不再残留上个实例的会话明文。
-- Web：工具页与连接器页互相说明分工（前者管模型能调用哪些工具，后者管外部进程装没装 / 连没连）并各给一个当场跳过去的入口，不再出现「关掉连接器为什么还能用」这类误判。
+- 收藏与检索：会话 / 产物可加星收藏并单独成栏，产物清单支持排序与收藏工具条；侧栏与面板随 App 壳重构统一，界面文案补齐中英对照。
+- 自动化日历：定时任务从列表升级为日历视图，配「当日议程」侧栏，按天看清什么时候会跑、跑过没有。
+- 品牌标识工作室：应用图标可在设置里换色换字形，改动即时预览并落盘。
+- 会话建议按回合判过期：上一轮给出的「幽灵建议」不会在新回合收场后重新冒出来，只在它所属的那一轮显示。
+- 服务端与 CLI：登录即拉起 daemon；question_answer 改为广播，任一客户端作答后其余端同步收起提问；压缩进度行落到输出区尾部，不再顶掉状态行。
+- provider key 轮换：单个 key 被限流或失效时自动切到下一个，不中断会话；新增画像追加工具与评审线程 actor。
+- 技能安全加固：`skill_define` 拒收换行注入，overwrite 守卫也看已注册技能；技能 frontmatter 出现重复顶层 key 时整份拒收，不再静默覆盖。
 
 _Earlier releases: see the version list on this package page, or `CHANGELOG.md` in the repository (generated from the same source)._