@opendots/cli 0.0.0-stage → 1.0.41

package/README.md

@@ -1,3 +1,1209 @@
-# Temporary Holding Version
+# DeepSeekCode CLI
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+[![npm version](https://img.shields.io/npm/v/@deepseekcode/cli.svg)](https://www.npmjs.com/package/@deepseekcode/cli)
+[![License: Proprietary](https://img.shields.io/badge/license-Proprietary-red.svg)](#license)
+[![Node version](https://img.shields.io/node/v/@deepseekcode/cli.svg)](https://nodejs.org)
+
+<p align="center">
+  <a href="https://deepseekcode.github.io/deepseekwork/">
+    <img src="media/demo.gif" alt="DeepSeekCode running a task: file reads, a grep, an edit with a diff, and a written summary" width="880">
+  </a>
+</p>
+
+<p align="center">
+  <sub>
+    <b>40-second demo</b> — a real agent turn in the web UI: read, grep, edit, diff, summary.
+    The full-quality video ships in the repository under <code>docs/promo/media/</code>.
+  </sub>
+</p>
+
+**DeepSeekCode is a local-first AI coding agent that runs in your terminal.** One runtime on
+your own machine serves three surfaces — an interactive terminal UI (TUI), a web UI, and an
+HTTP/WebSocket API — and drives it with any OpenAI-compatible model. It is built around a real
+permission/approval layer, a strictly read-only plan mode, and runtime-switchable act / goal /
+chat modes.
+
+Install it, run `dscode`, and you have an agent that reads and edits your files, runs commands,
+reviews code, and can work unattended in CI.
+
+Languages: **English** · [简体中文](#zh-cn) · [繁體中文](#zh-tw) · [日本語](#ja) · [한국어](#ko) ·
+[Español](#es) · [Português](#pt) · [Français](#fr) · [Italiano](#it) · [Deutsch](#de) · [Русский](#ru) · [Türkçe](#tr) ·
+[العربية](#ar) · [हिन्दी](#hi) · [Bahasa Indonesia](#id) · [Tiếng Việt](#vi) · [ไทย](#th) — 17 languages, each
+repeating the same canonical definition; the application interface itself is localized into 13 languages, Arabic and Indonesian included.
+
+## At a glance
+
+|  |  |
+|---|---|
+| **What it is** | A local-first AI coding agent — terminal-first, with an optional web UI |
+| **Project page** | https://deepseekcode.github.io/deepseekwork/ |
+| **Install** | `npm install -g @deepseekcode/cli` |
+| **Run** | `dscode` (interactive) · `dscode exec "..."` (non-interactive) |
+| **Requires** | Node.js >= 18 |
+| **Platforms** | Prebuilt native binaries: Windows x64 / ARM64, macOS Intel / Apple Silicon, Linux glibc & musl, x64 / ARM64 |
+| **Interfaces** | Terminal TUI · Web UI at `http://localhost:8080` · HTTP + WebSocket API · JSONL batch mode |
+| **Modes** | `act` · `auto-act` · `goal` · `auto-goal` · `chat` (`Shift+Tab`), plus a read-only plan toggle (`/plan`) |
+| **Models** | Any OpenAI-compatible endpoint (hosted or local) — no vendor lock-in |
+| **Built-in tools** | ~70: files, search, git, LSP, code intelligence, browser, sub-agents, plans, memory, MCP |
+| **License** | Proprietary (see [License](#license)) |
+
+<a name="screenshots"></a>
+
+## Screenshots
+
+| Agent turn | Finish state |
+|---|---|
+| <img src="media/web-tools.png" alt="Tool calls stream into the transcript: read_file, grep, edit_file with timing" width="440"> | <img src="media/web-answer.png" alt="Finished turn: diff card plus a written summary" width="440"> |
+
+| Models and providers | |
+|---|---|
+| <img src="media/web-models.png" alt="Model list with per-model status, context window and pricing" width="880"> | |
+
+Captured from a local instance at 1920×1080 (English UI). The same runtime renders the terminal
+UI; both surfaces share sessions, tools, permissions and memory.
+
+## What you get
+
+- **Terminal TUI** — a keyboard-first coding agent rendered with React through a vendored Ink
+  kernel. Fullscreen (alt-screen) by default; `--inline` opts back into main-screen mode.
+- **Local runtime, started for you** — `dscode` starts the agent core plus an HTTP/WebSocket
+  server in the same process. There is no separate backend to install or connect.
+- **Web UI** — sessions, tasks, models, themes and settings at `http://localhost:8080`
+  (provider setup lives at `http://localhost:8080/#models`).
+- **Non-interactive modes** — `exec` (JSONL output), `codeview` (AI code review), and `test-fix`
+  (auto-fix test loop) for scripts, hooks and CI.
+- **A permission layer on every tool call** — scopes `system > project > user > local > session`
+  (narrowest wins), `auto` / `ask` / `deny` policies, an optional AI classifier for the grey zone,
+  and timeout-means-deny.
+- **Plan mode that is genuinely read-only** — `/plan` shows a checklist you approve before
+  anything executes; the running loop picks the checklist up instead of switching engines.
+- **Sub-agents, background work and workflows** — delegate isolated jobs to sub-agents, detach
+  long-running work, and orchestrate multi-step tasks with an explicit plan.
+- **Memory and skills** — durable notes that survive across sessions, plus reusable skills
+  inserted with `/skills`.
+- **MCP support** — connect Model Context Protocol servers with `/mcp`.
+- **IM channels** — LINE, Slack, WhatsApp, QQ, DingTalk and Feishu (with inbound
+  request-signature verification), so a session can also be driven from a chat app.
+- **Sandboxed shell tools** — a local command sandbox (bwrap on Linux, SBPL on macOS,
+  MXC / Docker on Windows) that refuses to run rather than fall back to an unsandboxed host
+  shell when no policy is available.
+- **Themes** — dark, light, nord, dracula, monokai, one-dark, tokyo-night.
+- **Bilingual by design** — most interactive commands have Chinese aliases, and the interface
+  text is localized.
+
+## Who it's for
+
+- You want the agent to run on your machine against your own provider credentials, not behind
+  someone else's cloud service.
+- You care about controlling what the agent may touch — approvals, scope policies, a read-only
+  plan pass, and a command sandbox.
+- You want one tool for interactive work **and** for CI (`dscode exec` emits JSONL).
+- You live in a terminal but occasionally want a bigger view (the web UI shares the same runtime).
+- You work in Chinese and/or English.
+
+## Install
+
+```bash
+npm install -g @deepseekcode/cli
+```
+
+Or with your favorite package manager:
+
+```bash
+# pnpm
+pnpm add -g @deepseekcode/cli
+
+# yarn
+yarn global add @deepseekcode/cli
+
+# bun
+bun add -g @deepseekcode/cli
+```
+
+This installs two commands: **`dscode`** (short) and **`deepseekcode`** (full name). Installation
+detects your platform and links the matching prebuilt native binary into place — after that
+`dscode` execs the native binary directly, with no Node process left resident. If the optional
+platform package is unavailable (for example `--omit=optional`), the installer prints instructions
+instead and `cli-wrapper.cjs` remains available as the JavaScript fallback.
+
+The same binary is published under several brand scopes, and **every brand exposes the same `dscode`
+command** — so install **one brand at a time** globally. A second brand in the same prefix collides
+on `dscode` and fails with npm's `EEXIST`; uninstall the current one (`npm uninstall -g <scope>`)
+before switching. This package itself ships two command names — `dscode`, plus the brand name of its
+scope (`@<scope>/cli` → `dscode` + `<scope>`) — and both launch the very same binary.
+
+## Quick Start
+
+```bash
+dscode
+```
+
+That's it. The CLI starts the local agent runtime and opens the interactive terminal. On first run
+(no provider configured) it prints a link to the web UI where you can set up your LLM provider and
+model:
+
+```bash
+# model/provider setup page (also served by the CLI)
+# -> http://localhost:8080/#models
+```
+
+If your terminal's stdin isn't a TTY (e.g. a script or CI pipeline), the CLI skips the TUI and runs
+**headless** — the web UI stays available at the printed URL.
+
+Connect to an **existing** backend instead of starting a local one:
+
+```bash
+dscode run --backend http://localhost:8080
+```
+
+Resume your last session (or a specific one):
+
+```bash
+dscode --resume          # last session
+dscode --resume <id>     # specific session
+```
+
+## CLI Commands
+
+| Command | Description |
+|---------|-------------|
+| `dscode` / `dscode start` | Start local runtime + interactive TUI (also serves Web UI + API) |
+| `dscode start --auto` | Start with auto-approval mode enabled |
+| `dscode run --backend URL` | Connect to an existing backend instead of starting one |
+| `dscode exec <command>` | Execute a command non-interactively (JSONL output) |
+| `dscode exec --file <path>` | Read the command from a file |
+| `dscode codeview` | AI code review — bugs + unwired features (JSON output) |
+| `dscode review` | Review current code changes (legacy) |
+| `dscode test-fix` | Run the auto-fix test loop |
+| `dscode --resume [id]` | Resume the last session, or a specific one |
+| `dscode version` | Print version |
+
+Run `dscode --help` (or `-h`) for the full list.
+
+### Non-interactive examples
+
+```bash
+# Execute a command, get JSONL results
+dscode exec "fix the failing test in src/utils"
+
+# Plain text output, command from file
+dscode exec --file ./task.txt --text
+
+# AI code review focused on security, write report to file
+dscode codeview --focus security --output review.json
+
+# Auto-fix test loop (max 5 retries, analyze only)
+dscode test-fix --packages packages/cli --retries 5 --dry-run
+```
+
+## Interactive Commands
+
+Inside the TUI, use `/help` for the full list (most commands have Chinese aliases). Highlights:
+
+| Command | Action |
+|---------|--------|
+| `/help` | Show all commands |
+| `/model [name]` | Open model picker or switch model directly |
+| `/theme [name]` | Show or change terminal theme |
+| `/plan` | Toggle plan mode (review before executing) |
+| `/auto` | Toggle auto-approval mode |
+| `Shift+Tab` | Cycle modes: act · auto-act · goal · auto-goal · chat |
+| `/goal` | Set goal-directed mode |
+| `/thinking` | Toggle think mode on/off |
+| `/context` | Show current conversation state |
+| `/sessions [id]` / `/resume [id]` | List history / switch session |
+| `/tasks` | Toggle sub-task output panel |
+| `/undo [list]` | Undo the most recent file change |
+| `/clear` | Start a new session (current session is saved, resumable via `/sessions`) |
+| `/mcp <action>` | Manage MCP servers |
+| `/skills` | Insert a skill |
+| `/trace <traceId>` | Query a trace by id |
+| `/stop` `/pause` `/continue` | Control AI generation |
+| `Ctrl+S` / `Ctrl+G` | Stash the current draft / restore the most recent one |
+| `/exit` | Exit |
+
+## Options
+
+| Option | Description |
+|--------|-------------|
+| `-p, --port <port>` | HTTP port (default: first available from 8080) |
+| `--ws-port <port>` | WebSocket port (default: HTTP port + 1) |
+| `-w, --workspace <dir>` | Workspace directory (default: current directory) |
+| `-F, --force` | Kill an existing process on the target port before starting |
+| `-b, --backend <url>` | Backend URL for `run` mode |
+| `--ws <url>` | Override WebSocket URL |
+| `--provider <name>` | Provider to use (exec/review) |
+| `--model <name>` | Model to use (exec/review) |
+| `--theme <name\|path>` | Theme name or JSON theme file path |
+| `--prompt-version <ver>` | Prompt template version |
+| `--timeout <ms>` | Per-attempt LLM timeout (default: 300000 = 5 min) |
+| `--stall-threshold <ms>` | Stream stall detection threshold (default: 240000 = 4 min) |
+| `--no-update-check` | Disable the startup new-version notice |
+| `--no-auto-update` | Disable background auto-update (notice still shown) |
+
+## Permissions and safety
+
+Every tool call goes through the permission layer before it executes:
+
+- **Scopes** — `system > project > user > local > session`; the narrowest matching rule wins, so a
+  session-level decision can grant what a project-level rule would ask about.
+- **Policies** — `auto` (allow), `ask` (prompt), `deny`. High-risk operations ask even when a
+  broader rule would allow them, unless you are in auto-approval mode.
+- **AI classifier** — optional review of risky calls that a static rule does not cover.
+- **Timeout means deny** — an unanswered approval is a refusal, not an implicit yes.
+- **Read-only modes** — plan mode and reviewer/coordinator sessions cannot write at all.
+- **Command sandbox** — shell tools run inside a sandbox when a policy exists, and fail closed when
+  it does not.
+
+`/stop` and `/pause` always win over anything the runtime would otherwise do on its own.
+
+## Providers and models
+
+DeepSeekCode is provider-neutral: point it at any OpenAI-compatible endpoint, hosted or local, and
+switch models per session (or per mode). Provider and model settings are managed in the web UI at
+`http://localhost:8080/#models`, and stored under `~/.agent/`.
+
+## Configuration
+
+The CLI reads `~/.agent/config.yaml`:
+
+```yaml
+backend_url: http://localhost:8080
+ws_url: ws://localhost:8081/ws
+workspace_dir: /path/to/workspace
+```
+
+Provider / model settings are managed through the web UI at `http://localhost:8080/#models`.
+
+### Attention (notifications & bell)
+
+The TUI can notify you when a turn ends, errors, asks a question, needs a tool approval, or a
+subagent finishes. It is focus-aware — by default it only fires while the terminal is in the
+background. Add an `attention:` block to `~/.agent/config.yaml`:
+
+```yaml
+attention:
+  notifications: true   # OSC 9 / OSC 777 desktop notification
+  sound: true           # terminal bell (BEL) — on by default
+  volume: 0.4           # reserved (parity with opencode); BEL has no volume
+  when: blurred         # always | blurred | focused
+  sound_when: always
+  events: { done: true, error: true, question: true, permission: true, subagent_done: true }
+```
+
+The completion sound is on by default. Toggle it in the web UI under
+**Settings → Notifications** (writes `attention.sound` back to `config.yaml`); the CLI reads it at
+startup, so the change applies on the next CLI launch.
+
+`DEEPSEEKCODE_ATTENTION` overrides the file (`off` / `on`, or `notify,bell`). Terminals that don't
+support the OSC sequences drop them silently.
+
+<a name="local-state"></a>
+
+### Local state
+
+| File | Purpose |
+|------|---------|
+| `~/.agent/config.yaml` | Runtime, provider and attention configuration |
+| `~/.agent/sessions/` | Persisted sessions (resumable, format-versioned) |
+| `~/.agent/skills/` | User skills available via `/skills` |
+| `~/.agent/logs/` | Runtime logs |
+| `~/.agent/prompt-stash.json` | Draft stash pushed by `Ctrl+S` (LIFO) |
+| `~/.agent/frecency.json` | `@` file-mention ranking (`count · 0.5^(ageDays/30)`) |
+
+## Themes
+
+Set the theme at startup via the `DEEPSEEKCODE_THEME` env var (or `--theme`):
+
+| Theme | Env Value | Style |
+|-------|-----------|-------|
+| Dark (default) | `dark` | ANSI named colors, broad compat |
+| Light | `light` | Light terminal variant |
+| Nord | `nord` | Arctic blue-grey palette |
+| Dracula | `dracula` | Dark purple-vibrant |
+| Monokai | `monokai` | Classic code editor |
+| One Dark | `one-dark` | Atom's iconic dark |
+| Tokyo Night | `tokyo-night` | Deep navy + vibrant accents |
+
+```bash
+DEEPSEEKCODE_THEME=nord dscode
+DEEPSEEKCODE_THEME=/path/to/my-theme.json dscode
+
+# Partial overrides on the current theme (JSON)
+DEEPSEEKCODE_THEME_COLORS='{"primary":"#ff0000"}' dscode
+```
+
+Switch themes at runtime with `/theme [name]`.
+
+## Auto-Update
+
+On startup, `dscode` checks npm for the latest version asynchronously (non-blocking). When a newer
+version is found, the CLI **automatically reinstalls the global package** in the background
+(`npm install -g @deepseekcode/cli@latest`); the new version takes effect on the next launch.
+
+- Only affects **global npm installs** — source builds and `npx`/`bunx` caches are never touched.
+- Disable auto-install (keep the version notice): `DEEPSEEKCODE_NO_AUTO_UPDATE=1` or `--no-auto-update`
+- Disable the check entirely: `DEEPSEEKCODE_NO_UPDATE_CHECK=1` or `--no-update-check`
+
+## Environment Variables
+
+| Variable | Description |
+|----------|-------------|
+| `DEEPSEEKCODE_THEME` | Theme name or JSON theme file |
+| `DEEPSEEKCODE_THEME_COLORS` | JSON partial color overrides |
+| `DEEPSEEKCODE_ATTENTION` | Attention layer override: `off` / `on` / `notify,bell` |
+| `DEEPSEEKCODE_HTTP_PORT` / `DEEPSEEKCODE_WS_PORT` | Default HTTP / WebSocket ports |
+| `DEEPSEEKCODE_QUIET=1` | Suppress non-fatal startup warnings |
+| `DEEPSEEKCODE_NO_AUTO_UPDATE=1` | Disable background auto-update |
+| `DEEPSEEKCODE_NO_UPDATE_CHECK=1` | Disable the version check |
+| `DEEPSEEKCODE_FORCE_UTF8=0` | Skip forcing the Windows console to UTF-8 |
+| `DSC_HEAP_LIMIT_MB` | Node heap limit hint for large sessions (default: 8192) |
+
+## FAQ
+
+**Is DeepSeekCode open source?**
+No. It is proprietary, closed-source software. `LICENSE.md` holds the terms: copying, modifying,
+distributing, sublicensing or selling it requires the prior written permission of the copyright
+holder.
+
+**Is DeepSeekCode a model?**
+No. It is an agent runtime — a program you run — and it ships no model of its own. It drives
+whichever OpenAI-compatible endpoint you configure; DeepSeek's models are one option among many,
+and a local server works just as well.
+
+**Which package is the official one?**
+`@deepseekcode/cli` on npm — it installs the commands `dscode` and `deepseekcode`. The same build
+is also published under additional brand scopes for distribution; `@deepseekcode` is the canonical
+one, and the project page is https://deepseekcode.github.io/deepseekwork/.
+
+**Is this affiliated with DeepSeek?**
+No. DeepSeekCode is an independent project, not made, sponsored or endorsed by DeepSeek (深度求索)
+or any other model vendor. The name refers to a runtime that drives models — not to a model family.
+
+**Does it need an API key?**
+Yes — it talks to an OpenAI-compatible endpoint you configure. The first run walks you through
+provider setup; a local server (for example an OpenAI-compatible runtime on `localhost`) works too.
+
+**Does my code leave my machine?**
+The runtime, the UI, the file operations and the shell tools all run locally, and no DeepSeekCode
+cloud service sits in the path. Prompts and tool results are sent to the model endpoint you
+configured — that is the only outbound traffic the agent needs.
+
+**Which models and providers are supported?**
+Any endpoint that speaks the OpenAI-compatible API. Nothing is hardwired to a single vendor, and
+you can switch models at runtime with `/model`.
+
+**Does it run on Windows?**
+Yes. Prebuilt native binaries cover Windows x64 and ARM64 (as well as macOS Intel/Apple Silicon and
+Linux glibc/musl on x64/ARM64), and an offline package with bundled portable git is published for
+machines without network access.
+
+**Can it run unattended, or in CI?**
+Yes. `dscode exec "..."` runs a command non-interactively and emits JSONL, and a non-TTY stdin
+makes the CLI skip the TUI entirely. `dscode codeview` and `dscode test-fix` are built for the same
+purpose.
+
+**How do I stop it doing something I don't want?**
+Use the permission layer (scopes plus auto/ask/deny policies), start with `/plan` so nothing
+executes before you approve the checklist, rely on the command sandbox for shell tools, and press
+`/pause` or `/stop` at any time. Reviewer and plan sessions are read-only by construction.
+
+**Can I drive it from chat apps, MCP servers or my own tools?**
+Yes — `/mcp` connects Model Context Protocol servers, plugins extend the runtime, and channel
+plugins (LINE, Slack, WhatsApp, QQ, DingTalk, Feishu) let a chat message drive a session.
+
+**Where is my data and configuration kept?**
+Under `~/.agent/` (`config.yaml`, `sessions/`, `skills/`, `logs/`). See
+[Local state](#local-state).
+
+**How do I update it?**
+It updates itself: on startup a global npm install is upgraded in the background to the latest
+version. Disable that with `DEEPSEEKCODE_NO_AUTO_UPDATE=1` (or disable the check with
+`DEEPSEEKCODE_NO_UPDATE_CHECK=1`).
+
+## How it differs
+
+- **Local-first, single runtime.** The TUI, the web UI and the API come from one process you
+  start — not a hosted service, and not three things to install and wire together.
+- **Permissions are a first-class layer, not a toggle.** Scopes, policies, an optional AI
+  classifier, and fail-closed behaviour for approvals and sandboxed commands.
+- **Plan mode is read-only and live.** The plan is a checklist the running loop adopts, so what you
+  approve is what executes.
+- **Provider-neutral by construction.** Any OpenAI-compatible endpoint; nothing is tied to one
+  vendor's API surface.
+- **Built for both the interactive and the unattended case.** The same agent drives the TUI and
+  emits JSONL for scripts and CI.
+- **Extensible at the edges.** MCP servers, skills, plugins, sub-agents, workflows and chat
+  channels all attach to the same core loop.
+
+## Terminal rendering internals
+
+The TUI is a fork-free React renderer: a vendored Ink kernel plus a pure-TypeScript yoga port live
+under `src/ink/` and `src/ink-yoga/`. If you change them, the layout-cache generations, the
+alt-screen trailing newline and the fd-write ban are hard invariants — they are documented in
+`docs/terminal-rendering-invariants.md` in the repository, together with the regression test that
+guards each one.
+
+The `terminal_figure` tool (capture → xterm.js replay → PNG composition) is an internal
+verification path rather than a user-facing feature. Running it needs a Python interpreter with
+Pillow installed and a Playwright Chromium browser; without them the tool returns an actionable
+setup error instead of writing anything outside the workspace.
+
+<a name="zh-cn"></a>
+
+## 简体中文
+
+**DeepSeekCode 是一个本地运行的 AI 编程智能体：一条命令在终端里跑起来，同时提供终端 TUI、Web UI 和本地 HTTP/WebSocket API 三个界面**，可接任意 OpenAI 兼容模型。它的核心是权限审批层、严格只读的方案模式（plan），以及可在运行时切换的 act / goal / chat 三种工作模式。
+
+安装后运行 `dscode`，它就能读改文件、执行命令、审查代码，也能在 CI 里无人值守地跑。
+
+### 安装与启动
+
+```bash
+npm install -g @deepseekcode/cli
+dscode                                   # 启动本地运行时 + 终端界面
+dscode exec "修复 src/utils 里失败的测试"   # 非交互，输出 JSONL
+dscode codeview --focus security         # AI 代码审查
+```
+
+需要 Node.js 18+。首次启动会引导你配置模型；Web UI 在 `http://localhost:8080`（模型配置页 `/#models`）。
+
+同一份二进制会以多个品牌 scope 发布，而**每个品牌都暴露同一个 `dscode` 命令**，所以全局**一次只装一个品牌**：往同一个前缀装第二个品牌会在 `dscode` 上撞名，npm 直接报 `EEXIST` 失败；要换品牌先 `npm uninstall -g <当前品牌>`。本包自身提供两个命令名——`dscode`，加上它所在 scope 的品牌名（`@<scope>/cli` → `dscode` + `<scope>`），两者启动的是同一个二进制。
+
+### 核心能力
+
+- **终端 TUI**：键盘优先的交互界面；默认全屏（alt-screen），`--inline` 回到主屏模式。
+- **本地运行时**：`dscode` 在同进程内启动智能体内核与 HTTP/WebSocket 服务，不用另装后端。
+- **权限审批层**：每次工具调用都过权限层 —— 作用域 `system > project > user > local > session`（越窄越优先）、`auto` / `ask` / `deny` 策略、高风险调用可交给 AI 分类器，审批超时按拒绝处理。
+- **只读方案模式**：`/plan` 先给一份清单，你确认后才动手；执行中的回合会直接采纳这份清单。
+- **模式可运行时切换**：`Shift+Tab` 在 act · auto-act · goal · auto-goal · chat 之间切换。
+- **子智能体 / 后台任务 / 工作流**：把独立任务派给子智能体，长任务可脱离当前回合继续跑。
+- **记忆与技能**：跨会话的持久记忆，`/skills` 插入可复用技能。
+- **扩展**：`/mcp` 接 MCP 服务、插件、以及 LINE / Slack / WhatsApp / QQ / 钉钉 / 飞书等 IM 频道（入站请求带签名校验）。
+- **命令沙箱**：Shell 工具走本地沙箱（Linux bwrap、macOS SBPL、Windows MXC / Docker），没有策略时拒绝执行而不是退回宿主机。
+- **主题**：dark / light / nord / dracula / monokai / one-dark / tokyo-night。
+- **中文友好**：界面文案本地化，多数交互命令有中文别名。
+
+### 常用命令
+
+| 命令 | 作用 |
+|------|------|
+| `dscode` | 启动本地运行时 + 交互 TUI（同时提供 Web UI 与 API） |
+| `dscode exec "<任务>"` | 非交互执行，输出 JSONL（适合脚本与 CI） |
+| `dscode exec --file ./task.txt --text` | 从文件读任务，输出纯文本 |
+| `dscode codeview --focus security` | AI 代码审查（可指定关注点并落盘报告） |
+| `dscode test-fix --retries 5` | 自动修复测试循环 |
+| `dscode --resume [id]` | 恢复上一次（或指定）会话 |
+
+### 常见问题
+
+**是开源的吗？** 不是。本项目是闭源专有软件，条款见仓库内 `LICENSE.md`；复制、修改、分发、再授权或销售均需事先获得著作权人的书面许可。
+
+**它是模型吗？** 不是。它是跑在你机器上的智能体程序（runtime），自身不带模型 —— 模型由你配置：任何 OpenAI 兼容端点都行，DeepSeek 的模型只是其中一种，本地起一个服务也同样可用。
+
+**哪个包才是官方的？** npm 上的 `@deepseekcode/cli`，安装后得到 `dscode` 与 `deepseekcode` 两个命令。同一份构建也会以其他品牌 scope 分发；`@deepseekcode` 是规范名称，项目主页是 https://deepseekcode.github.io/deepseekwork/。
+
+**它和 DeepSeek 官方有关系吗？** 没有。DeepSeekCode 是独立项目，与 DeepSeek（深度求索）及任何模型厂商没有隶属、赞助或背书关系；名字指的是驱动模型的运行时，不指代任何模型家族。
+
+**代码会上传到哪里？** 运行时、界面、文件操作与 Shell 工具全部在本机执行，中间没有 DeepSeekCode 的云服务；只有到你配置的模型端点的请求会离开本机。
+
+**必须联网吗？** 需要能访问一个 OpenAI 兼容端点（可以是本机的兼容服务）。
+
+**怎么防止它乱动我的项目？** 三层：权限层（作用域 + auto/ask/deny，超时即拒绝）、`/plan` 只读方案模式、命令沙箱；随时可以 `/pause` 或 `/stop`。
+
+**支持 Windows 吗？** 支持，提供 Windows x64 / ARM64 原生二进制（另含 macOS、Linux glibc/musl 的 x64/ARM64）；还发布了内置便携 git 的离线包。
+
+**配置放在哪？** `~/.agent/` 下（`config.yaml`、`sessions/`、`skills/`、`logs/`）。
+
+更新日志（中英对照）见下方 [What's New](#whats-new)。
+
+<a name="ja"></a>
+
+## 日本語
+
+**DeepSeekCode はローカルで動く AI コーディングエージェントです。** 1 つのランタイムがターミナル TUI、Web UI、HTTP/WebSocket API の 3 つの画面を提供し、任意の OpenAI 互換モデルで動作します。権限承認レイヤー、読み取り専用のプランモード、実行中に切り替えられる act / goal / chat モードを中心に設計されています。
+
+```bash
+npm install -g @deepseekcode/cli
+dscode                                   # ローカルランタイム + ターミナル UI
+dscode exec "src/utils の失敗テストを修正"   # 非対話、JSONL 出力
+```
+
+Node.js 18 以上が必要です。初回起動時にモデルの設定を案内します。Web UI は `http://localhost:8080`（モデル設定は `/#models`）。
+
+同じバイナリが複数のブランド scope で公開されており、**どのブランドも同じ `dscode` コマンドを公開します**。そのためグローバルには**1 ブランドだけ**を入れてください。同じ prefix に 2 つ目のブランドを入れると `dscode` が衝突し、npm は `EEXIST` で失敗します。切り替える前に `npm uninstall -g <現在のブランド>` で外してください。このパッケージ自身は `dscode` に加えて、所属 scope のブランド名も提供します（`@<scope>/cli` → `dscode` + `<scope>`）。どちらも同じバイナリを起動します。
+
+主な特徴:
+
+- **ターミナル TUI** — キーボード中心の操作。既定は全画面（alt-screen）、`--inline` で通常画面に戻せます。
+- **ローカルランタイム** — `dscode` がエージェント本体と HTTP/WebSocket サーバーを同一プロセスで起動します。別途バックエンドを用意する必要はありません。
+- **権限承認レイヤー** — すべてのツール呼び出しが権限レイヤーを通ります。スコープは `system > project > user > local > session`（狭い方が優先）、ポリシーは `auto` / `ask` / `deny`、リスクの高い呼び出しは AI 分類器に委ねられ、承認のタイムアウトは拒否として扱われます。
+- **読み取り専用のプランモード** — `/plan` で実行前に対象のチェックリストを確認できます。
+- **モード切り替え** — `Shift+Tab` で act · auto-act · goal · auto-goal · chat を切り替え。
+- **サブエージェント / バックグラウンド作業 / ワークフロー** — 独立した作業を委譲し、長時間の処理を切り離して実行できます。
+- **メモリとスキル** — セッションをまたぐ記憶と、`/skills` で挿入できる再利用可能なスキル。
+- **拡張性** — `/mcp` で MCP サーバー、プラグイン、LINE / Slack / WhatsApp / QQ / DingTalk / Feishu の各チャネル。
+- **コマンドサンドボックス** — シェルツールはサンドボックス内で実行され、ポリシーがない場合は実行を拒否します（ホスト側にフォールバックしません）。
+- **テーマ** — dark / light / nord / dracula / monokai / one-dark / tokyo-night。
+
+よくある質問:
+
+**オープンソースですか？** いいえ。本ソフトウェアはプロプライエタリ（非公開ソース）です。条件は `LICENSE.md` に記載されており、複製・改変・配布・再許諾・販売には著作権者の事前の書面による許可が必要です。
+
+**コードはどこかに送られますか？** ランタイム、UI、ファイル操作、シェルツールはすべてローカルで動作します。DeepSeekCode のクラウドサービスは介在せず、設定したモデルエンドポイントへのリクエストのみが外部に出ます。
+
+**Windows でも使えますか？** はい。Windows x64 / ARM64 向けのネイティブバイナリを提供しています（macOS、Linux の glibc/musl・x64/ARM64 も同様）。
+
+**設定はどこに保存されますか？** `~/.agent/`（`config.yaml`、`sessions/`、`skills/`、`logs/`）。
+
+リリースノート（英語・中文）は下の [What's New](#whats-new) を参照してください。
+
+<a name="es"></a>
+
+## Español
+
+**DeepSeekCode es un agente de programación con IA que se ejecuta localmente.** Un único runtime ofrece tres superficies —una interfaz de terminal (TUI), una interfaz web y una API HTTP/WebSocket— y funciona con cualquier modelo compatible con la API de OpenAI. Está construido alrededor de una capa real de permisos y aprobaciones, un modo de plan estrictamente de solo lectura y modos act / goal / chat conmutables en caliente.
+
+```bash
+npm install -g @deepseekcode/cli
+dscode                                   # runtime local + interfaz de terminal
+dscode exec "arregla el test que falla en src/utils"   # no interactivo, salida JSONL
+```
+
+Requiere Node.js 18 o superior. La primera ejecución te guía en la configuración del modelo. La interfaz web está en `http://localhost:8080` (modelos en `/#models`).
+
+El mismo binario se publica bajo varios scopes de marca y **todas las marcas exponen el mismo comando `dscode`**, así que instala **una sola marca a la vez** en global. Una segunda marca en el mismo prefix choca en `dscode` y falla con `EEXIST` de npm; desinstala la actual (`npm uninstall -g <scope>`) antes de cambiar. Este paquete ofrece dos nombres de comando: `dscode` y el nombre de marca de su scope (`@<scope>/cli` → `dscode` + `<scope>`); ambos lanzan el mismo binario.
+
+Qué incluye:
+
+- **TUI de terminal** — interfaz pensada para el teclado. Pantalla completa (alt-screen) por defecto; `--inline` vuelve al modo normal.
+- **Runtime local** — `dscode` inicia el núcleo del agente y el servidor HTTP/WebSocket en el mismo proceso: no hay un backend aparte que instalar.
+- **Capa de permisos** — cada llamada a una herramienta pasa por ella: ámbitos `system > project > user > local > session` (gana el más específico), políticas `auto` / `ask` / `deny`, clasificador de IA opcional para llamadas de riesgo y tiempo de espera que equivale a denegación.
+- **Modo de plan de solo lectura** — `/plan` te muestra una lista de comprobación antes de ejecutar nada.
+- **Modos conmutables** — `Shift+Tab` alterna act · auto-act · goal · auto-goal · chat.
+- **Subagentes, trabajo en segundo plano y flujos de trabajo** — delega tareas aisladas y deja correr trabajos largos sin bloquear el turno.
+- **Memoria y skills** — memoria persistente entre sesiones y skills reutilizables con `/skills`.
+- **Extensible** — servidores MCP con `/mcp`, plugins y canales de mensajería (LINE, Slack, WhatsApp, QQ, DingTalk, Feishu).
+- **Sandbox de comandos** — las herramientas de shell se ejecutan en un sandbox (bwrap en Linux, SBPL en macOS, MXC/Docker en Windows) y se niegan a ejecutar si no hay política, en lugar de recurrir al host.
+- **Temas** — dark, light, nord, dracula, monokai, one-dark, tokyo-night.
+
+Preguntas frecuentes:
+
+**¿Es código abierto?** No. Es software propietario y de código cerrado; las condiciones están en `LICENSE.md`. Copiarlo, modificarlo, distribuirlo, sublicenciarlo o venderlo requiere autorización previa por escrito del titular de los derechos.
+
+**¿Sale mi código de mi máquina?** El runtime, la interfaz, las operaciones de archivos y las herramientas de shell se ejecutan en local; no hay ningún servicio en la nube de DeepSeekCode en medio. Solo salen las peticiones al endpoint de modelo que hayas configurado.
+
+**¿Funciona en Windows?** Sí: hay binarios nativos para Windows x64 / ARM64 (además de macOS y Linux glibc/musl en x64/ARM64) y un paquete offline con git portátil.
+
+**¿Dónde se guarda la configuración?** En `~/.agent/` (`config.yaml`, `sessions/`, `skills/`, `logs/`).
+
+Notas de la versión (inglés y chino) en [What's New](#whats-new).
+
+<a name="ko"></a>
+
+## 한국어
+
+**DeepSeekCode는 로컬에서 동작하는 AI 코딩 에이전트입니다.** 하나의 런타임이 터미널 TUI, 웹 UI, HTTP/WebSocket API 세 가지 화면을 제공하며, OpenAI 호환 모델이면 무엇이든 연결해 사용합니다. 권한 승인 계층, 엄격한 읽기 전용 플랜 모드, 실행 중에 전환하는 act / goal / chat 모드를 중심으로 설계되었습니다.
+
+```bash
+npm install -g @deepseekcode/cli
+dscode                                   # 로컬 런타임 + 터미널 UI
+dscode exec "src/utils의 실패한 테스트 수정"   # 비대화형, JSONL 출력
+dscode codeview --focus security         # AI 코드 리뷰
+```
+
+Node.js 18 이상이 필요합니다. 첫 실행에서 모델 설정을 안내하며, 웹 UI는 `http://localhost:8080`(모델 설정은 `/#models`)에서 열립니다.
+
+같은 바이너리가 여러 브랜드 scope로 배포되며 **모든 브랜드가 동일한 `dscode` 명령을 노출합니다.** 따라서 전역에는 **한 번에 하나의 브랜드만** 설치하세요. 같은 prefix에 두 번째 브랜드를 설치하면 `dscode`가 충돌해 npm이 `EEXIST`로 실패합니다. 브랜드를 바꾸려면 먼저 `npm uninstall -g <현재 브랜드>`로 제거하세요. 이 패키지 자체는 `dscode`와 자신이 속한 scope의 브랜드 이름(`@<scope>/cli` → `dscode` + `<scope>`) 두 가지 명령을 제공하며, 둘 다 같은 바이너리를 실행합니다.
+
+주요 기능:
+
+- **터미널 TUI** — 키보드 중심 인터페이스. 기본은 전체 화면(alt-screen)이며 `--inline`으로 일반 화면으로 돌아갑니다.
+- **로컬 런타임** — `dscode`가 에이전트 코어와 HTTP/WebSocket 서버를 같은 프로세스에서 띄웁니다. 따로 설치할 백엔드가 없습니다.
+- **권한 계층** — 모든 도구 호출이 권한 계층을 통과합니다. scope는 `system > project > user > local > session`(좁은 쪽 우선), 정책은 `auto` / `ask` / `deny`, 회색 지대는 선택적 AI 분류기가 판단하며 승인 시간 초과는 거부로 처리됩니다.
+- **읽기 전용 플랜 모드** — `/plan`은 실행 전에 체크리스트를 보여주고, 승인한 내용만 실제로 실행됩니다.
+- **모드 전환** — `Shift+Tab`으로 act · auto-act · goal · auto-goal · chat 전환.
+- **서브에이전트 · 백그라운드 작업 · 워크플로** — 독립적인 작업을 위임하고 오래 걸리는 일을 분리해 실행합니다.
+- **메모리와 스킬** — 세션을 넘어 유지되는 기억과 `/skills`로 삽입하는 재사용 스킬.
+- **확장성** — `/mcp`로 MCP 서버 연결, 플러그인, 메시징 채널(LINE, Slack, WhatsApp, QQ, DingTalk, Feishu).
+- **명령 샌드박스** — 셸 도구는 샌드박스에서 실행되며 정책이 없으면 호스트로 폴백하지 않고 실행을 거부합니다.
+- **테마** — dark, light, nord, dracula, monokai, one-dark, tokyo-night.
+
+자주 묻는 질문:
+
+**오픈소스인가요?** 아닙니다. 사유 소프트웨어이며 소스는 비공개입니다. 조건은 `LICENSE.md`에 있으며, 복제·수정·배포·재라이선스·판매에는 저작권자의 사전 서면 허가가 필요합니다.
+
+**제 코드가 외부로 나가나요?** 런타임, UI, 파일 조작, 셸 도구는 모두 로컬에서 실행되며 DeepSeekCode 클라우드 서비스는 관여하지 않습니다. 외부로 나가는 것은 설정한 모델 엔드포인트로의 요청뿐입니다.
+
+**Windows에서도 되나요?** 됩니다. Windows x64 / ARM64 네이티브 바이너리를 제공합니다(macOS Intel/Apple Silicon, Linux glibc/musl x64/ARM64 포함). 오프라인 패키지에는 포터블 git이 함께 들어 있습니다.
+
+**설정은 어디에 저장되나요?** `~/.agent/`(`config.yaml`, `sessions/`, `skills/`, `logs/`)입니다.
+
+릴리스 노트(영어·중국어)는 아래 [What's New](#whats-new)를 참고하세요.
+
+<a name="fr"></a>
+
+## Français
+
+**DeepSeekCode est un agent de codage IA qui s'exécute en local.** Un seul runtime fournit trois surfaces — une interface terminal (TUI), une interface web et une API HTTP/WebSocket — et s'appuie sur n'importe quel modèle compatible OpenAI. Il est bâti autour d'une véritable couche de permissions et d'approbations, d'un mode plan strictement en lecture seule et de modes act / goal / chat commutables à chaud.
+
+```bash
+npm install -g @deepseekcode/cli
+dscode                                   # runtime local + interface terminal
+dscode exec "corrige le test qui échoue dans src/utils"   # non interactif, sortie JSONL
+dscode codeview --focus security         # revue de code par IA
+```
+
+Node.js 18 ou supérieur est requis. Le premier lancement guide la configuration du modèle. L'interface web est servie sur `http://localhost:8080` (modèles : `/#models`).
+
+Le même binaire est publié sous plusieurs scopes de marque et **chaque marque expose la même commande `dscode`** : n'installez donc **qu'une seule marque à la fois** en global. Une seconde marque dans le même prefix entre en collision sur `dscode` et échoue avec `EEXIST` ; désinstallez la marque courante (`npm uninstall -g <scope>`) avant de changer. Ce paquet fournit deux noms de commande — `dscode` et le nom de marque de son scope (`@<scope>/cli` → `dscode` + `<scope>`) — qui lancent le même binaire.
+
+Ce que vous obtenez :
+
+- **TUI terminal** — interface pensée pour le clavier. Plein écran (alt-screen) par défaut ; `--inline` revient au mode normal.
+- **Runtime local** — `dscode` démarre le cœur de l'agent et le serveur HTTP/WebSocket dans le même processus : aucun backend séparé à installer.
+- **Couche de permissions** — chaque appel d'outil la traverse : portées `system > project > user > local > session` (la plus étroite gagne), politiques `auto` / `ask` / `deny`, classifieur IA optionnel pour la zone grise, et expiration d'une approbation = refus.
+- **Mode plan en lecture seule** — `/plan` affiche une liste de contrôle avant toute exécution ; seule la liste approuvée s'exécute.
+- **Modes commutables** — `Shift+Tab` alterne act · auto-act · goal · auto-goal · chat.
+- **Sous-agents, travail en arrière-plan et workflows** — déléguez des tâches isolées et détachez les traitements longs.
+- **Mémoire et skills** — mémoire persistante entre sessions et skills réutilisables insérables via `/skills`.
+- **Extensible** — serveurs MCP avec `/mcp`, plugins, canaux de messagerie (LINE, Slack, WhatsApp, QQ, DingTalk, Feishu).
+- **Bac à sable des commandes** — les outils shell s'exécutent dans un bac à sable (bwrap sous Linux, SBPL sous macOS, MXC/Docker sous Windows) et refusent d'exécuter s'il n'y a pas de politique, au lieu de retomber sur l'hôte.
+- **Thèmes** — dark, light, nord, dracula, monokai, one-dark, tokyo-night.
+
+Questions fréquentes :
+
+**Est-ce open source ?** Non. C'est un logiciel propriétaire à code fermé ; les conditions figurent dans `LICENSE.md`. Copier, modifier, distribuer, sous-licencier ou vendre exige l'autorisation écrite préalable du titulaire des droits.
+
+**Mon code quitte-t-il ma machine ?** Le runtime, l'interface, les opérations sur les fichiers et les outils shell s'exécutent en local ; aucun service cloud DeepSeekCode ne s'interpose. Seules les requêtes vers l'endpoint de modèle configuré sortent.
+
+**Fonctionne-t-il sous Windows ?** Oui : des binaires natifs existent pour Windows x64 / ARM64 (ainsi que macOS Intel/Apple Silicon et Linux glibc/musl x64/ARM64), avec un paquet hors ligne incluant un git portable.
+
+**Où sont stockés les réglages ?** Dans `~/.agent/` (`config.yaml`, `sessions/`, `skills/`, `logs/`).
+
+Notes de version (anglais et chinois) dans [What's New](#whats-new).
+
+<a name="zh-tw"></a>
+
+## 繁體中文
+
+**DeepSeekCode 是一個在本機執行的 AI 編程代理。** 一套執行環境同時提供終端機 TUI、Web UI 與 HTTP/WebSocket API 三種介面，可接任意 OpenAI 相容模型。核心是權限審批層、嚴格唯讀的方案模式（plan），以及可在執行時切換的 act / goal / chat 模式。
+
+```bash
+npm install -g @deepseekcode/cli
+dscode                                   # 啟動本機執行環境 + 終端機介面
+dscode exec "修好 src/utils 裡失敗的測試"   # 非互動，輸出 JSONL
+dscode codeview --focus security         # AI 程式碼審查
+```
+
+需要 Node.js 18 以上。首次啟動會引導你設定模型；Web UI 在 `http://localhost:8080`（模型設定頁 `/#models`）。
+
+同一份二進位檔會以多個品牌 scope 發佈，而**每個品牌都暴露同一個 `dscode` 指令**，所以全域**一次只裝一個品牌**：把第二個品牌裝到同一個前綴會在 `dscode` 上撞名，npm 直接以 `EEXIST` 失敗；換品牌前先 `npm uninstall -g <目前品牌>`。本套件自身提供兩個指令名——`dscode`，加上它所在 scope 的品牌名（`@<scope>/cli` → `dscode` + `<scope>`），兩者啟動同一個二進位檔。
+
+核心能力：
+
+- **終端機 TUI**：鍵盤優先的互動介面；預設全螢幕（alt-screen），`--inline` 回到主畫面模式。
+- **本機執行環境**：`dscode` 在同一行程內啟動代理核心與 HTTP/WebSocket 服務，不必另裝後端。
+- **權限審批層**：每次工具呼叫都會經過——作用域 `system > project > user > local > session`（越窄越優先）、`auto` / `ask` / `deny` 策略、高風險呼叫可交給 AI 分類器，審批逾時視同拒絕。
+- **唯讀方案模式**：`/plan` 先給清單，你確認後才動手。
+- **模式可執行時切換**：`Shift+Tab` 在 act · auto-act · goal · auto-goal · chat 間切換。
+- **子代理／背景工作／工作流程**：把獨立任務派給子代理，長任務可脫離目前回合繼續跑。
+- **記憶與技能**：跨工作階段的持久記憶，`/skills` 插入可重用技能。
+- **擴充**：`/mcp` 接 MCP 服務、外掛，以及 LINE / Slack / WhatsApp / QQ / 釘釘 / 飛書等 IM 頻道。
+- **指令沙箱**：Shell 工具走本機沙箱（Linux bwrap、macOS SBPL、Windows MXC / Docker），沒有策略時拒絕執行而非退回主機。
+- **主題**：dark / light / nord / dracula / monokai / one-dark / tokyo-night。
+
+常見問題：
+
+**是開源的嗎？** 不是。本專案為閉源專有軟體，條款見倉庫內 `LICENSE.md`；複製、修改、散布、再授權或販售都需事先取得著作權人的書面許可。
+
+**程式碼會上傳到哪裡？** 執行環境、介面、檔案操作與 Shell 工具全在本機執行，中間沒有 DeepSeekCode 的雲端服務；只有前往你設定之模型端點的請求會離開本機。
+
+**支援 Windows 嗎？** 支援，提供 Windows x64 / ARM64 原生二進位檔（另含 macOS、Linux glibc/musl 的 x64/ARM64），並有內建可攜式 git 的離線包。
+
+**設定放在哪？** `~/.agent/`（`config.yaml`、`sessions/`、`skills/`、`logs/`）。
+
+更新日誌（中英對照）見下方 [What's New](#whats-new)。
+
+<a name="pt"></a>
+
+## Português
+
+**O DeepSeekCode é um agente de programação com IA que roda localmente.** Um único runtime na sua máquina serve três superfícies — interface de terminal (TUI), interface web e API HTTP/WebSocket — e funciona com qualquer modelo compatível com OpenAI. A base é uma camada real de permissões e aprovações, um modo de plano estritamente somente leitura e modos act / goal / chat alternáveis em tempo de execução.
+
+```bash
+npm install -g @deepseekcode/cli
+dscode                                   # runtime local + interface de terminal
+dscode exec "corrija o teste que falha em src/utils"   # não interativo, saída JSONL
+dscode codeview --focus security         # revisão de código por IA
+```
+
+Requer Node.js 18 ou superior. A primeira execução guia a configuração do modelo. A interface web fica em `http://localhost:8080` (modelos em `/#models`).
+
+O mesmo binário é publicado em vários escopos de marca e **toda marca expõe o mesmo comando `dscode`** — instale **apenas uma marca por vez** no global. Uma segunda marca no mesmo prefixo colide em `dscode` e falha com `EEXIST`; rode `npm uninstall -g <marca atual>` antes de trocar. Este pacote oferece dois nomes de comando: `dscode` e o nome da marca do seu escopo (`@<scope>/cli` → `dscode` + `<scope>`) — ambos iniciam o mesmo binário.
+
+O que você recebe:
+
+- **TUI de terminal** — interface pensada para teclado. Tela cheia (alt-screen) por padrão; `--inline` volta ao modo normal.
+- **Runtime local** — `dscode` sobe o núcleo do agente e o servidor HTTP/WebSocket no mesmo processo, sem backend separado.
+- **Camada de permissões** — toda chamada de ferramenta passa por ela: escopos `system > project > user > local > session` (o mais específico vence), políticas `auto` / `ask` / `deny`, classificador de IA opcional para chamadas de risco e timeout de aprovação tratado como negação.
+- **Modo de plano somente leitura** — `/plan` mostra uma lista de verificação antes de executar.
+- **Modos alternáveis** — `Shift+Tab` alterna act · auto-act · goal · auto-goal · chat.
+- **Subagentes, trabalho em segundo plano e workflows** — delegue tarefas isoladas e solte trabalhos longos do turno atual.
+- **Memória e skills** — memória persistente entre sessões e skills reutilizáveis com `/skills`.
+- **Extensível** — servidores MCP com `/mcp`, plugins e canais de mensagem (LINE, Slack, WhatsApp, QQ, DingTalk, Feishu).
+- **Sandbox de comandos** — as ferramentas de shell rodam em sandbox (bwrap no Linux, SBPL no macOS, MXC/Docker no Windows) e recusam executar sem política em vez de cair no host.
+- **Temas** — dark, light, nord, dracula, monokai, one-dark, tokyo-night.
+
+Perguntas frequentes:
+
+**É código aberto?** Não. É software proprietário de código fechado; as condições estão em `LICENSE.md`. Copiar, modificar, distribuir, sublicenciar ou vender exige autorização prévia por escrito do titular dos direitos.
+
+**Meu código sai da minha máquina?** Runtime, interface, operações de arquivo e ferramentas de shell rodam localmente; não há serviço de nuvem do DeepSeekCode no meio. Só saem as requisições ao endpoint de modelo que você configurou.
+
+**Funciona no Windows?** Sim: binários nativos para Windows x64 / ARM64 (além de macOS Intel/Apple Silicon e Linux glibc/musl em x64/ARM64) e um pacote offline com git portátil.
+
+**Onde ficam as configurações?** Em `~/.agent/` (`config.yaml`, `sessions/`, `skills/`, `logs/`).
+
+Notas da versão (inglês e chinês) em [What's New](#whats-new).
+
+<a name="it"></a>
+
+## Italiano
+
+**DeepSeekCode è un agente di programmazione IA che gira in locale.** Un unico runtime sulla tua macchina serve tre superfici — interfaccia terminale (TUI), interfaccia web e API HTTP/WebSocket — e funziona con qualsiasi modello compatibile OpenAI. Al centro ci sono un vero livello di permessi e approvazioni, una modalità piano rigorosamente in sola lettura e modalità act / goal / chat commutabili a runtime.
+
+```bash
+npm install -g @deepseekcode/cli
+dscode                                   # runtime locale + interfaccia terminale
+dscode exec "sistema il test che fallisce in src/utils"   # non interattivo, output JSONL
+dscode codeview --focus security         # code review con IA
+```
+
+Richiede Node.js 18 o superiore. Al primo avvio una procedura guidata configura il modello. L'interfaccia web è su `http://localhost:8080` (modelli su `/#models`).
+
+Lo stesso binario è pubblicato con più scope di marca e **ogni marca espone lo stesso comando `dscode`**: installa quindi **una sola marca alla volta** in globale. Una seconda marca nello stesso prefix va in collisione su `dscode` e fallisce con `EEXIST`; prima di cambiare esegui `npm uninstall -g <marca attuale>`. Il pacchetto fornisce due nomi di comando: `dscode` e il nome di marca del suo scope (`@<scope>/cli` → `dscode` + `<scope>`); entrambi avviano lo stesso binario.
+
+Cosa ottieni:
+
+- **TUI da terminale** — interfaccia pensata per la tastiera. Schermo intero (alt-screen) per impostazione predefinita; `--inline` torna alla modalità normale.
+- **Runtime locale** — `dscode` avvia il core dell'agente e il server HTTP/WebSocket nello stesso processo: nessun backend separato da installare.
+- **Livello di permessi** — ogni chiamata a uno strumento lo attraversa: scope `system > project > user > local > session` (vince il più stretto), policy `auto` / `ask` / `deny`, classificatore IA opzionale per le chiamate a rischio e timeout di approvazione trattato come rifiuto.
+- **Modalità piano in sola lettura** — `/plan` mostra una checklist prima di eseguire qualsiasi cosa.
+- **Modalità commutabili** — `Shift+Tab` alterna act · auto-act · goal · auto-goal · chat.
+- **Subagenti, lavoro in background e workflow** — delega attività isolate e stacca i lavori lunghi dal turno corrente.
+- **Memoria e skill** — memoria persistente tra sessioni e skill riutilizzabili con `/skills`.
+- **Estendibile** — server MCP con `/mcp`, plugin e canali di messaggistica (LINE, Slack, WhatsApp, QQ, DingTalk, Feishu).
+- **Sandbox dei comandi** — gli strumenti shell girano in sandbox (bwrap su Linux, SBPL su macOS, MXC/Docker su Windows) e rifiutano di eseguire senza policy invece di ricadere sull'host.
+- **Temi** — dark, light, nord, dracula, monokai, one-dark, tokyo-night.
+
+Domande frequenti:
+
+**È open source?** No. È software proprietario a codice chiuso; le condizioni sono in `LICENSE.md`. Copiare, modificare, distribuire, sublicenziare o vendere richiede l'autorizzazione scritta preventiva del titolare dei diritti.
+
+**Il mio codice esce dalla macchina?** Runtime, interfaccia, operazioni sui file e strumenti shell girano in locale; non c'è alcun servizio cloud DeepSeekCode in mezzo. Escono solo le richieste all'endpoint del modello che hai configurato.
+
+**Funziona su Windows?** Sì: binari nativi per Windows x64 / ARM64 (oltre a macOS Intel/Apple Silicon e Linux glibc/musl x64/ARM64) e un pacchetto offline con git portatile.
+
+**Dove stanno le impostazioni?** In `~/.agent/` (`config.yaml`, `sessions/`, `skills/`, `logs/`).
+
+Note di rilascio (inglese e cinese) in [What's New](#whats-new).
+
+<a name="de"></a>
+
+## Deutsch
+
+**DeepSeekCode ist ein KI-Programmieragent, der lokal läuft.** Eine einzige Laufzeit auf deinem Rechner bedient drei Oberflächen — ein Terminal-UI (TUI), ein Web-UI und eine HTTP/WebSocket-API — und arbeitet mit jedem OpenAI-kompatiblen Modell. Kern sind eine echte Berechtigungs- und Freigabeschicht, ein strikt lesender Plan-Modus und zur Laufzeit umschaltbare act / goal / chat-Modi.
+
+```bash
+npm install -g @deepseekcode/cli
+dscode                                   # lokale Laufzeit + Terminal-UI
+dscode exec "fehlschlagenden Test in src/utils reparieren"   # nicht interaktiv, JSONL
+dscode codeview --focus security         # KI-Code-Review
+```
+
+Node.js 18 oder neuer. Beim ersten Start führt dich die Einrichtung durch die Modellkonfiguration; das Web-UI läuft unter `http://localhost:8080` (Modelle unter `/#models`).
+
+Dasselbe Binary erscheint unter mehreren Marken-Scopes, und **jede Marke stellt denselben Befehl `dscode` bereit** — installiere global also **nur eine Marke**. Eine zweite Marke im selben Prefix kollidiert bei `dscode` und scheitert mit `EEXIST`; vor dem Wechsel `npm uninstall -g <bisherige Marke>` ausführen. Dieses Paket liefert zwei Befehlsnamen: `dscode` und den Markennamen seines Scopes (`@<scope>/cli` → `dscode` + `<scope>`) — beide starten dasselbe Binary.
+
+Was du bekommst:
+
+- **Terminal-TUI** — tastaturzentrierte Oberfläche. Standard ist Vollbild (alt-screen); `--inline` kehrt zum normalen Bildschirm zurück.
+- **Lokale Laufzeit** — `dscode` startet Agent-Kern und HTTP/WebSocket-Server im selben Prozess; kein separates Backend nötig.
+- **Berechtigungsschicht** — jeder Tool-Aufruf läuft durch sie: Scopes `system > project > user > local > session` (enger gewinnt), Richtlinien `auto` / `ask` / `deny`, optionaler KI-Klassifikator für Grauzonen, Timeout einer Freigabe gilt als Ablehnung.
+- **Plan-Modus nur lesend** — `/plan` zeigt vorab eine Checkliste; erst nach Bestätigung wird ausgeführt.
+- **Umschaltbare Modi** — `Shift+Tab` wechselt zwischen act · auto-act · goal · auto-goal · chat.
+- **Subagenten, Hintergrundarbeit, Workflows** — isolierte Aufgaben delegieren, lange Läufe vom aktuellen Turn lösen.
+- **Speicher und Skills** — sitzungsübergreifendes Gedächtnis, wiederverwendbare Skills über `/skills`.
+- **Erweiterbar** — MCP-Server via `/mcp`, Plugins, Messaging-Kanäle (LINE, Slack, WhatsApp, QQ, DingTalk, Feishu).
+- **Befehlssandbox** — Shell-Tools laufen in einer Sandbox (bwrap unter Linux, SBPL unter macOS, MXC/Docker unter Windows) und verweigern die Ausführung ohne Richtlinie statt auf den Host zurückzufallen.
+- **Themes** — dark, light, nord, dracula, monokai, one-dark, tokyo-night.
+
+Häufige Fragen:
+
+**Ist es Open Source?** Nein. Es ist proprietäre Software mit geschlossenem Quellcode; die Bedingungen stehen in `LICENSE.md`. Vervielfältigen, Ändern, Verbreiten, Unterlizenzieren oder Verkaufen erfordert vorherige schriftliche Zustimmung des Rechteinhabers.
+
+**Verlässt mein Code die Maschine?** Laufzeit, UI, Dateioperationen und Shell-Tools laufen lokal; es gibt keinen Cloud-Dienst von DeepSeekCode dazwischen. Nach außen gehen nur Anfragen an den von dir konfigurierten Modell-Endpunkt.
+
+**Läuft es unter Windows?** Ja — native Binaries für Windows x64 / ARM64 (dazu macOS Intel/Apple Silicon und Linux glibc/musl auf x64/ARM64) und ein Offline-Paket mit portablem git.
+
+**Wo liegen die Einstellungen?** Unter `~/.agent/` (`config.yaml`, `sessions/`, `skills/`, `logs/`).
+
+Versionshinweise (Englisch und Chinesisch) im Abschnitt [What's New](#whats-new).
+
+<a name="ru"></a>
+
+## Русский
+
+**DeepSeekCode — это ИИ-агент для программирования, работающий локально.** Один рантайм на вашей машине обслуживает три интерфейса — TUI в терминале, веб-интерфейс и HTTP/WebSocket API — и работает с любой моделью, совместимой с OpenAI. В основе — реальный слой разрешений и подтверждений, строго режим плана «только чтение» и переключаемые на ходу режимы act / goal / chat.
+
+```bash
+npm install -g @deepseekcode/cli
+dscode                                   # локальный рантайм + интерфейс терминала
+dscode exec "починить падающий тест в src/utils"   # неинтерактивно, вывод JSONL
+dscode codeview --focus security         # ИИ-ревью кода
+```
+
+Нужен Node.js 18+. При первом запуске мастер поможет настроить модель. Веб-интерфейс — `http://localhost:8080` (модели: `/#models`).
+
+Один и тот же бинарник публикуется под несколькими брендовыми scope, и **каждый бренд предоставляет одну и ту же команду `dscode`** — поэтому глобально ставьте **только один бренд**. Второй бренд в том же prefix конфликтует по `dscode` и падает с `EEXIST`; перед сменой выполните `npm uninstall -g <текущий бренд>`. Сам пакет даёт два имени команды: `dscode` и брендовое имя своего scope (`@<scope>/cli` → `dscode` + `<scope>`); обе запускают один и тот же бинарник.
+
+Что вы получаете:
+
+- **TUI в терминале** — интерфейс, рассчитанный на клавиатуру. По умолчанию полный экран (alt-screen), `--inline` возвращает обычный режим.
+- **Локальный рантайм** — `dscode` поднимает ядро агента и HTTP/WebSocket-сервер в одном процессе, отдельный бэкенд не нужен.
+- **Слой разрешений** — через него проходит каждый вызов инструмента: scope `system > project > user > local > session` (побеждает более узкий), политики `auto` / `ask` / `deny`, опциональный ИИ-классификатор для спорных вызовов, истёкшее подтверждение считается отказом.
+- **Режим плана только для чтения** — `/plan` сначала показывает чек-лист, работа начинается после подтверждения.
+- **Переключение режимов** — `Shift+Tab` циклически переключает act · auto-act · goal · auto-goal · chat.
+- **Субагенты, фоновая работа, workflow** — изолированные задачи можно делегировать, а долгие процессы отвязать от текущего хода.
+- **Память и навыки** — постоянная память между сессиями и переиспользуемые навыки через `/skills`.
+- **Расширяемость** — MCP-серверы через `/mcp`, плагины и каналы мессенджеров (LINE, Slack, WhatsApp, QQ, DingTalk, Feishu).
+- **Песочница команд** — инструменты shell выполняются в песочнице (bwrap в Linux, SBPL в macOS, MXC/Docker в Windows) и при отсутствии политики отказываются работать, а не откатываются на хост.
+- **Темы** — dark, light, nord, dracula, monokai, one-dark, tokyo-night.
+
+Частые вопросы:
+
+**Это open source?** Нет. Это проприетарное ПО с закрытым исходным кодом, условия — в `LICENSE.md`. Копирование, изменение, распространение, сублицензирование и продажа требуют предварительного письменного разрешения правообладателя.
+
+**Код уходит с машины?** Рантайм, интерфейс, работа с файлами и инструменты shell выполняются локально; облачных сервисов DeepSeekCode в цепочке нет. Наружу уходят только запросы к настроенному вами endpoint модели.
+
+**Работает под Windows?** Да — есть нативные бинарники для Windows x64 / ARM64 (а также macOS Intel/Apple Silicon и Linux glibc/musl на x64/ARM64) и офлайн-пакет с портативным git.
+
+**Где хранится конфигурация?** В `~/.agent/` (`config.yaml`, `sessions/`, `skills/`, `logs/`).
+
+Заметки о выпуске (английский и китайский) — в разделе [What's New](#whats-new).
+
+<a name="tr"></a>
+
+## Türkçe
+
+**DeepSeekCode, yerelde çalışan bir yapay zekâ kodlama ajanıdır.** Tek bir çalışma zamanı makinenizde üç yüzey sunar — terminal TUI, web arayüzü ve HTTP/WebSocket API — ve herhangi bir OpenAI uyumlu modelle çalışır. Temelinde gerçek bir izin/onay katmanı, kesinlikle salt okunur plan modu ve çalışma anında geçiş yapılabilen act / goal / chat modları vardır.
+
+```bash
+npm install -g @deepseekcode/cli
+dscode                                   # yerel çalışma zamanı + terminal arayüzü
+dscode exec "src/utils içindeki hatalı testi düzelt"   # etkileşimsiz, JSONL çıktı
+dscode codeview --focus security         # yapay zekâ kod incelemesi
+```
+
+Node.js 18 veya üzeri gerekir. İlk başlatmada model kurulumu adım adım yönlendirilir. Web arayüzü `http://localhost:8080` adresinde (modeller: `/#models`).
+
+Aynı ikili dosya birden çok marka scope'u altında yayınlanır ve **her marka aynı `dscode` komutunu sunar**; bu yüzden global olarak **aynı anda tek marka** kurun. Aynı prefix'e ikinci bir marka kurulursa `dscode` çakışır ve npm `EEXIST` ile başarısız olur; markayı değiştirmeden önce `npm uninstall -g <mevcut marka>` çalıştırın. Bu paket iki komut adı sağlar: `dscode` ve bulunduğu scope'un marka adı (`@<scope>/cli` → `dscode` + `<scope>`); ikisi de aynı ikili dosyayı başlatır.
+
+Neler alırsınız:
+
+- **Terminal TUI** — klavye odaklı arayüz. Varsayılan tam ekran (alt-screen); `--inline` normal ekrana döner.
+- **Yerel çalışma zamanı** — `dscode` ajan çekirdeğini ve HTTP/WebSocket sunucusunu aynı süreçte başlatır; ayrı bir arka uç kurmanız gerekmez.
+- **İzin katmanı** — her araç çağrısı bu katmandan geçer: `system > project > user > local > session` kapsamları (dar olan önceliklidir), `auto` / `ask` / `deny` politikaları, riskli çağrılar için isteğe bağlı yapay zekâ sınıflandırıcısı ve onay zaman aşımı red sayılır.
+- **Salt okunur plan modu** — `/plan` çalıştırmadan önce bir kontrol listesi gösterir; yalnızca onayladığınız adımlar yürütülür.
+- **Mod geçişi** — `Shift+Tab` ile act · auto-act · goal · auto-goal · chat arasında geçiş.
+- **Alt ajanlar, arka plan işleri ve iş akışları** — bağımsız işleri devredin, uzun işleri mevcut turdan ayırın.
+- **Bellek ve beceriler** — oturumlar arası kalıcı bellek ve `/skills` ile eklenen yeniden kullanılabilir beceriler.
+- **Genişletilebilirlik** — `/mcp` ile MCP sunucuları, eklentiler ve mesajlaşma kanalları (LINE, Slack, WhatsApp, QQ, DingTalk, Feishu).
+- **Komut sandbox'ı** — shell araçları sandbox içinde çalışır (Linux'ta bwrap, macOS'ta SBPL, Windows'ta MXC/Docker) ve politika yoksa ana makineye düşmek yerine çalışmayı reddeder.
+- **Temalar** — dark, light, nord, dracula, monokai, one-dark, tokyo-night.
+
+Sık sorulanlar:
+
+**Açık kaynak mı?** Hayır. Kapalı kaynaklı, tescilli bir yazılımdır; koşullar `LICENSE.md` içinde. Kopyalamak, değiştirmek, dağıtmak, alt lisanslamak veya satmak için hak sahibinin önceden yazılı izni gerekir.
+
+**Kodum makineden çıkıyor mu?** Çalışma zamanı, arayüz, dosya işlemleri ve shell araçları yerelde çalışır; arada DeepSeekCode bulut servisi yoktur. Yalnızca yapılandırdığınız model uç noktasına giden istekler dışarı çıkar.
+
+**Windows'ta çalışır mı?** Evet — Windows x64 / ARM64 için yerel ikili dosyalar (ayrıca macOS Intel/Apple Silicon ve Linux glibc/musl x64/ARM64) ve taşınabilir git içeren çevrimdışı paket var.
+
+**Ayarlar nerede?** `~/.agent/` altında (`config.yaml`, `sessions/`, `skills/`, `logs/`).
+
+Sürüm notları (İngilizce ve Çince) [What's New](#whats-new) bölümünde.
+
+<a name="ar"></a>
+
+## العربية
+
+**DeepSeekCode وكيل برمجة بالذكاء الاصطناعي يعمل محليًا.** وقت تشغيل واحد على جهازك يقدّم ثلاث واجهات — واجهة طرفية (TUI) وواجهة ويب وواجهة HTTP/WebSocket API — ويعمل مع أي نموذج متوافق مع OpenAI. يقوم على طبقة حقيقية للأذونات والموافقات، ووضع خطة للقراءة فقط بشكل صارم، وأوضاع act / goal / chat قابلة للتبديل أثناء التشغيل.
+
+```bash
+npm install -g @deepseekcode/cli
+dscode                                   # وقت التشغيل المحلي + واجهة الطرفية
+dscode exec "أصلح الاختبار الفاشل في src/utils"   # بدون تفاعل، ناتج JSONL
+dscode codeview --focus security         # مراجعة كود بالذكاء الاصطناعي
+```
+
+يتطلب Node.js 18 أو أحدث. عند أول تشغيل يرشدك معالج الإعداد إلى ضبط النموذج. واجهة الويب على `http://localhost:8080` (النماذج على `/#models`).
+
+يُنشر الملف التنفيذي نفسه تحت عدة نطاقات (scope) للعلامات، و**كل علامة تُظهر الأمر `dscode` نفسه**؛ لذا ثبّت **علامة واحدة فقط** على المستوى العام. تثبيت علامة ثانية في البادئة نفسها يتعارض على `dscode` ويفشل بخطأ `EEXIST` من npm؛ نفّذ `npm uninstall -g <العلامة الحالية>` قبل التبديل. توفّر هذه الحزمة اسمَي أمر: `dscode` واسم علامة نطاقه (`@<scope>/cli` → `dscode` + `<scope>`)، وكلاهما يشغّل الملف نفسه.
+
+ما الذي تحصل عليه:
+
+- **واجهة طرفية TUI** — واجهة تعتمد على لوحة المفاتيح أولًا. الشاشة الكاملة (alt-screen) هي الافتراضي، و`--inline` يعيدك إلى الوضع العادي.
+- **وقت تشغيل محلي** — يشغّل `dscode` نواة الوكيل وخادم HTTP/WebSocket في العملية نفسها، دون خدمة خلفية منفصلة.
+- **طبقة الأذونات** — يمرّ كل استدعاء أداة عبرها: النطاقات `system > project > user > local > session` (الأضيق يفوز)، والسياسات `auto` / `ask` / `deny`، ومصنّف ذكاء اصطناعي اختياري للاستدعاءات عالية الخطورة، وانتهاء مهلة الموافقة يُعامل كرفض.
+- **وضع خطة للقراءة فقط** — يعرض `/plan` قائمة تحقق قبل التنفيذ، ولا يُنفَّذ إلا ما توافق عليه.
+- **تبديل الأوضاع** — `Shift+Tab` يتنقل بين act · auto-act · goal · auto-goal · chat.
+- **وكلاء فرعيون وعمل في الخلفية وسير عمل** — فوّض المهام المستقلة وافصل الأعمال الطويلة عن الجولة الحالية.
+- **الذاكرة والمهارات** — ذاكرة دائمة بين الجلسات ومهارات قابلة لإعادة الاستخدام تُدرج بـ `/skills`.
+- **قابل للتوسيع** — خوادم MCP عبر `/mcp`، وإضافات، وقنوات مراسلة (LINE وSlack وWhatsApp وQQ وDingTalk وFeishu).
+- **عزل للأوامر (sandbox)** — أدوات الصدفة تُنفَّذ داخل عزل (bwrap على Linux، وSBPL على macOS، وMXC/Docker على Windows)، وترفض التنفيذ عند غياب السياسة بدل الرجوع إلى المضيف.
+- **السمات** — dark / light / nord / dracula / monokai / one-dark / tokyo-night.
+
+أسئلة شائعة:
+
+**هل هو مفتوح المصدر؟** لا. برنامج احتكاري مغلق المصدر، والشروط في `LICENSE.md`؛ النسخ أو التعديل أو التوزيع أو الترخيص من الباطن أو البيع يتطلب إذنًا كتابيًا مسبقًا من صاحب الحقوق.
+
+**هل يخرج الكود من جهازي؟** وقت التشغيل والواجهة وعمليات الملفات وأدوات الصدفة تعمل محليًا، ولا توجد خدمة سحابية من DeepSeekCode في المسار. لا يخرج سوى الطلبات إلى نقطة نهاية النموذج التي أعددتها.
+
+**هل يعمل على Windows؟** نعم — ملفات تنفيذية أصلية لـ Windows x64 / ARM64 (إضافة إلى macOS بنسختي Intel وApple Silicon وLinux glibc/musl على x64/ARM64)، وحزمة دون اتصال تتضمن git محمولًا.
+
+**أين تُحفظ الإعدادات؟** في `~/.agent/` (`config.yaml` و`sessions/` و`skills/` و`logs/`).
+
+ملاحظات الإصدار (بالإنجليزية والصينية) في [What's New](#whats-new).
+
+<a name="hi"></a>
+
+## हिन्दी
+
+**DeepSeekCode एक लोकल-फ़र्स्ट AI कोडिंग एजेंट है।** आपकी मशीन पर एक ही रनटाइम तीन सतहें देता है — टर्मिनल TUI, वेब UI और HTTP/WebSocket API — और किसी भी OpenAI-संगत मॉडल के साथ चलता है। इसका आधार असली permission/approval लेयर, सख़्त read-only plan मोड और रनटाइम पर बदले जा सकने वाले act / goal / chat मोड हैं।
+
+```bash
+npm install -g @deepseekcode/cli
+dscode                                   # लोकल रनटाइम + टर्मिनल UI
+dscode exec "src/utils का फ़ेल होता टेस्ट ठीक करो"   # नॉन-इंटरैक्टिव, JSONL आउटपुट
+dscode codeview --focus security         # AI कोड रिव्यू
+```
+
+Node.js 18 या नया चाहिए। पहले लॉन्च पर मॉडल सेटअप का गाइड मिलता है। वेब UI `http://localhost:8080` पर है (मॉडल: `/#models`)।
+
+वही बाइनरी कई ब्रांड scope में प्रकाशित होती है और **हर ब्रांड वही `dscode` कमांड देता है**, इसलिए ग्लोबली **एक बार में सिर्फ़ एक ब्रांड** इंस्टॉल करें। उसी prefix में दूसरा ब्रांड `dscode` पर टकरा जाता है और npm `EEXIST` के साथ फ़ेल होता है; बदलने से पहले `npm uninstall -g <मौजूदा ब्रांड>` चलाएँ। यह पैकेज दो कमांड नाम देता है — `dscode` और अपने scope का ब्रांड नाम (`@<scope>/cli` → `dscode` + `<scope>`) — दोनों एक ही बाइनरी चलाते हैं।
+
+आपको क्या मिलता है:
+
+- **टर्मिनल TUI** — कीबोर्ड-फ़र्स्ट इंटरफ़ेस। डिफ़ॉल्ट पूरी स्क्रीन (alt-screen); `--inline` से सामान्य मोड।
+- **लोकल रनटाइम** — `dscode` एजेंट कोर और HTTP/WebSocket सर्वर एक ही प्रोसेस में शुरू करता है, अलग बैकएंड नहीं चाहिए।
+- **Permission लेयर** — हर टूल कॉल इससे गुज़रता है: scope `system > project > user > local > session` (संकीर्ण पहले), नीतियाँ `auto` / `ask` / `deny`, जोखिम भरे कॉल के लिए वैकल्पिक AI क्लासिफ़ायर, और approval का टाइमआउट अस्वीकृति माना जाता है।
+- **read-only plan मोड** — `/plan` पहले चेकलिस्ट दिखाता है; मंज़ूरी के बाद ही काम होता है।
+- **मोड बदलना** — `Shift+Tab` से act · auto-act · goal · auto-goal · chat।
+- **सब-एजेंट, बैकग्राउंड काम और वर्कफ़्लो** — अलग काम सौंपें और लंबे काम मौजूदा टर्न से अलग चलाएँ।
+- **मेमोरी और स्किल** — सेशन के पार टिकने वाली मेमोरी और `/skills` से जोड़ी जाने वाली दोबारा इस्तेमाल योग्य स्किल।
+- **एक्सटेंसिबल** — `/mcp` से MCP सर्वर, प्लगइन, और मैसेजिंग चैनल (LINE, Slack, WhatsApp, QQ, DingTalk, Feishu)।
+- **कमांड सैंडबॉक्स** — शेल टूल सैंडबॉक्स में चलते हैं (Linux पर bwrap, macOS पर SBPL, Windows पर MXC/Docker) और नीति न होने पर होस्ट पर लौटने के बजाय चलने से मना कर देते हैं।
+- **थीम** — dark / light / nord / dracula / monokai / one-dark / tokyo-night।
+
+आम सवाल:
+
+**क्या यह ओपन सोर्स है?** नहीं। यह क्लोज़्ड-सोर्स प्रोप्राइटरी सॉफ़्टवेयर है, शर्तें `LICENSE.md` में हैं; कॉपी, बदलाव, वितरण, सब-लाइसेंस या बिक्री के लिए अधिकारधारी की पूर्व लिखित अनुमति चाहिए।
+
+**क्या मेरा कोड मशीन से बाहर जाता है?** रनटाइम, UI, फ़ाइल ऑपरेशन और शेल टूल सब लोकल चलते हैं; बीच में DeepSeekCode की कोई क्लाउड सेवा नहीं है। बाहर सिर्फ़ आपके सेट किए मॉडल endpoint की रिक्वेस्ट जाती हैं।
+
+**Windows पर चलता है?** हाँ — Windows x64 / ARM64 के नेटिव बाइनरी (साथ में macOS Intel/Apple Silicon और Linux glibc/musl x64/ARM64) और पोर्टेबल git वाला ऑफ़लाइन पैकेज।
+
+**सेटिंग्स कहाँ रहती हैं?** `~/.agent/` में (`config.yaml`, `sessions/`, `skills/`, `logs/`)।
+
+रिलीज़ नोट्स (अंग्रेज़ी और चीनी) नीचे [What's New](#whats-new) में।
+
+<a name="id"></a>
+
+## Bahasa Indonesia
+
+**DeepSeekCode adalah agen coding AI yang berjalan lokal.** Satu runtime di mesin Anda melayani tiga permukaan — TUI terminal, UI web, dan API HTTP/WebSocket — dan bekerja dengan model apa pun yang kompatibel dengan OpenAI. Fondasinya lapisan izin/persetujuan yang nyata, mode plan yang benar-benar hanya-baca, dan mode act / goal / chat yang bisa diganti saat berjalan.
+
+```bash
+npm install -g @deepseekcode/cli
+dscode                                   # runtime lokal + UI terminal
+dscode exec "perbaiki tes yang gagal di src/utils"   # non-interaktif, keluaran JSONL
+dscode codeview --focus security         # review kode dengan AI
+```
+
+Butuh Node.js 18 atau lebih baru. Peluncuran pertama memandu penyiapan model. UI web ada di `http://localhost:8080` (model di `/#models`).
+
+Biner yang sama dirilis di beberapa scope merek dan **setiap merek menyediakan perintah `dscode` yang sama**, jadi pasang **hanya satu merek** secara global. Merek kedua di prefix yang sama bentrok di `dscode` dan npm gagal dengan `EEXIST`; jalankan `npm uninstall -g <merek saat ini>` sebelum berganti. Paket ini menyediakan dua nama perintah: `dscode` dan nama merek scope-nya (`@<scope>/cli` → `dscode` + `<scope>`); keduanya menjalankan biner yang sama.
+
+Yang Anda dapat:
+
+- **TUI terminal** — antarmuka yang mengutamakan keyboard. Layar penuh (alt-screen) sebagai default; `--inline` kembali ke mode biasa.
+- **Runtime lokal** — `dscode` menjalankan inti agen dan server HTTP/WebSocket dalam proses yang sama, tanpa backend terpisah.
+- **Lapisan izin** — setiap pemanggilan alat melewatinya: scope `system > project > user > local > session` (yang paling sempit menang), kebijakan `auto` / `ask` / `deny`, klasifikasi AI opsional untuk panggilan berisiko, dan timeout persetujuan dianggap penolakan.
+- **Mode plan hanya-baca** — `/plan` menampilkan daftar periksa sebelum eksekusi, dan hanya yang Anda setujui yang dijalankan.
+- **Mode yang bisa diganti** — `Shift+Tab` berganti act · auto-act · goal · auto-goal · chat.
+- **Subagen, kerja latar belakang, dan workflow** — delegasikan tugas terisolasi dan lepaskan pekerjaan panjang dari giliran berjalan.
+- **Memori dan skill** — memori lintas sesi dan skill yang bisa dipakai ulang lewat `/skills`.
+- **Dapat diperluas** — server MCP lewat `/mcp`, plugin, dan kanal perpesanan (LINE, Slack, WhatsApp, QQ, DingTalk, Feishu).
+- **Sandbox perintah** — alat shell berjalan di sandbox (bwrap di Linux, SBPL di macOS, MXC/Docker di Windows) dan menolak jalan bila tidak ada kebijakan, bukan jatuh ke host.
+- **Tema** — dark, light, nord, dracula, monokai, one-dark, tokyo-night.
+
+Pertanyaan umum:
+
+**Apakah open source?** Tidak. Ini perangkat lunak proprietari dengan kode tertutup; ketentuannya di `LICENSE.md`. Menyalin, mengubah, mendistribusikan, menyublisensikan, atau menjual memerlukan izin tertulis sebelumnya dari pemegang hak.
+
+**Apakah kode saya keluar dari mesin?** Runtime, UI, operasi berkas, dan alat shell berjalan lokal; tidak ada layanan cloud DeepSeekCode di antaranya. Yang keluar hanya permintaan ke endpoint model yang Anda konfigurasi.
+
+**Jalan di Windows?** Ya — tersedia biner native untuk Windows x64 / ARM64 (juga macOS Intel/Apple Silicon dan Linux glibc/musl x64/ARM64), plus paket offline dengan git portabel.
+
+**Di mana konfigurasi disimpan?** Di `~/.agent/` (`config.yaml`, `sessions/`, `skills/`, `logs/`).
+
+Catatan rilis (Inggris dan Tionghoa) di [What's New](#whats-new).
+
+<a name="vi"></a>
+
+## Tiếng Việt
+
+**DeepSeekCode là một tác tử lập trình AI chạy cục bộ.** Một runtime trên máy bạn phục vụ ba bề mặt — TUI trên terminal, giao diện web và API HTTP/WebSocket — và chạy với bất kỳ mô hình nào tương thích OpenAI. Nền tảng là lớp phân quyền/phê duyệt thực sự, chế độ plan chỉ đọc tuyệt đối và các chế độ act / goal / chat đổi được ngay khi đang chạy.
+
+```bash
+npm install -g @deepseekcode/cli
+dscode                                   # runtime cục bộ + giao diện terminal
+dscode exec "sửa bài test hỏng trong src/utils"   # không tương tác, xuất JSONL
+dscode codeview --focus security         # review mã bằng AI
+```
+
+Cần Node.js 18 trở lên. Lần chạy đầu sẽ hướng dẫn cấu hình mô hình. Giao diện web ở `http://localhost:8080` (mô hình tại `/#models`).
+
+Cùng một tệp nhị phân được phát hành dưới nhiều scope thương hiệu và **mọi thương hiệu đều cung cấp cùng lệnh `dscode`**, nên chỉ cài **một thương hiệu tại một thời điểm**. Thương hiệu thứ hai trong cùng prefix sẽ đụng `dscode` và npm báo `EEXIST`; chạy `npm uninstall -g <thương hiệu hiện tại>` trước khi đổi. Gói này cung cấp hai tên lệnh: `dscode` và tên thương hiệu của scope chứa nó (`@<scope>/cli` → `dscode` + `<scope>`); cả hai chạy cùng tệp nhị phân.
+
+Bạn nhận được gì:
+
+- **TUI trên terminal** — giao diện ưu tiên bàn phím. Mặc định toàn màn hình (alt-screen); `--inline` quay về chế độ thường.
+- **Runtime cục bộ** — `dscode` khởi động lõi tác tử và máy chủ HTTP/WebSocket trong cùng tiến trình, không cần backend riêng.
+- **Lớp phân quyền** — mọi lệnh gọi công cụ đều đi qua: scope `system > project > user > local > session` (hẹp hơn thắng), chính sách `auto` / `ask` / `deny`, bộ phân loại AI tùy chọn cho lệnh rủi ro, hết hạn phê duyệt được coi là từ chối.
+- **Chế độ plan chỉ đọc** — `/plan` đưa danh sách kiểm tra trước khi thực thi; chỉ phần bạn duyệt mới được chạy.
+- **Đổi chế độ** — `Shift+Tab` luân chuyển act · auto-act · goal · auto-goal · chat.
+- **Tác tử con, việc chạy nền và workflow** — giao việc độc lập và tách việc dài khỏi lượt hiện tại.
+- **Bộ nhớ và skill** — bộ nhớ bền vững giữa các phiên và skill dùng lại được chèn bằng `/skills`.
+- **Mở rộng** — máy chủ MCP qua `/mcp`, plugin và các kênh nhắn tin (LINE, Slack, WhatsApp, QQ, DingTalk, Feishu).
+- **Sandbox lệnh** — công cụ shell chạy trong sandbox (bwrap trên Linux, SBPL trên macOS, MXC/Docker trên Windows) và từ chối chạy khi thiếu chính sách thay vì rơi về máy chủ.
+- **Giao diện màu** — dark, light, nord, dracula, monokai, one-dark, tokyo-night.
+
+Câu hỏi thường gặp:
+
+**Có phải mã nguồn mở?** Không. Đây là phần mềm độc quyền, đóng mã nguồn; điều khoản trong `LICENSE.md`. Sao chép, sửa, phân phối, cấp phép lại hoặc bán đều cần sự đồng ý trước bằng văn bản của chủ sở hữu quyền.
+
+**Mã của tôi có rời khỏi máy?** Runtime, giao diện, thao tác tệp và công cụ shell đều chạy cục bộ; không có dịch vụ đám mây DeepSeekCode ở giữa. Chỉ các yêu cầu tới endpoint mô hình bạn cấu hình mới ra ngoài.
+
+**Có chạy trên Windows?** Có — có tệp nhị phân gốc cho Windows x64 / ARM64 (kèm macOS Intel/Apple Silicon và Linux glibc/musl x64/ARM64) và gói offline kèm git di động.
+
+**Cấu hình lưu ở đâu?** Trong `~/.agent/` (`config.yaml`, `sessions/`, `skills/`, `logs/`).
+
+Ghi chú phát hành (tiếng Anh và tiếng Trung) ở [What's New](#whats-new).
+
+<a name="th"></a>
+
+## ไทย
+
+**DeepSeekCode คือเอเจนต์เขียนโค้ด AI ที่ทำงานบนเครื่องคุณเอง** รันไทม์เดียวให้สามหน้าจอ — TUI บนเทอร์มินัล, เว็บ UI และ HTTP/WebSocket API — ใช้ได้กับโมเดลที่รองรับ OpenAI ทุกรุ่น หัวใจคือชั้นสิทธิ์และการอนุมัติจริง โหมด plan ที่อ่านได้อย่างเดียวโดยแท้ และโหมด act / goal / chat ที่สลับได้ระหว่างใช้งาน
+
+```bash
+npm install -g @deepseekcode/cli
+dscode                                   # รันไทม์ในเครื่อง + UI เทอร์มินัล
+dscode exec "แก้เทสต์ที่พังใน src/utils"   # ไม่โต้ตอบ แสดงผลเป็น JSONL
+dscode codeview --focus security         # รีวิวโค้ดด้วย AI
+```
+
+ต้องใช้ Node.js 18 ขึ้นไป ครั้งแรกจะมีตัวช่วยตั้งค่าโมเดล เว็บ UI อยู่ที่ `http://localhost:8080` (ตั้งค่าโมเดลที่ `/#models`)
+
+ไบนารีเดียวกันถูกเผยแพร่ภายใต้หลาย scope แบรนด์ และ**ทุกแบรนด์ให้คำสั่ง `dscode` เดียวกัน** จึงควรติดตั้ง**เพียงแบรนด์เดียว**ในระดับ global แบรนด์ที่สองใน prefix เดียวกันจะชนกันที่ `dscode` และ npm จะล้มเหลวด้วย `EEXIST` ก่อนเปลี่ยนให้รัน `npm uninstall -g <แบรนด์ปัจจุบัน>` แพ็กเกจนี้ให้ชื่อคำสั่งสองชื่อคือ `dscode` และชื่อแบรนด์ของ scope ที่มันอยู่ (`@<scope>/cli` → `dscode` + `<scope>`) ทั้งคู่เรียกไบนารีเดียวกัน
+
+สิ่งที่คุณได้:
+
+- **TUI บนเทอร์มินัล** — อินเทอร์เฟซที่เน้นคีย์บอร์ด ค่าเริ่มต้นเป็นเต็มหน้าจอ (alt-screen) ใช้ `--inline` เพื่อกลับไปโหมดปกติ
+- **รันไทม์ในเครื่อง** — `dscode` เปิดคอร์ของเอเจนต์และเซิร์ฟเวอร์ HTTP/WebSocket ในโปรเซสเดียวกัน ไม่ต้องติดตั้งแบ็กเอนด์แยก
+- **ชั้นสิทธิ์** — ทุกการเรียกเครื่องมือต้องผ่านชั้นนี้: ขอบเขต `system > project > user > local > session` (แคบกว่าชนะ), นโยบาย `auto` / `ask` / `deny`, ตัวจำแนก AI เสริมสำหรับการเรียกที่มีความเสี่ยง และการอนุมัติที่หมดเวลาถือเป็นการปฏิเสธ
+- **โหมด plan แบบอ่านอย่างเดียว** — `/plan` แสดงเช็กลิสต์ก่อนลงมือ และทำเฉพาะข้อที่คุณอนุมัติ
+- **สลับโหมดได้** — `Shift+Tab` สลับ act · auto-act · goal · auto-goal · chat
+- **เอเจนต์ย่อย งานเบื้องหลัง และเวิร์กโฟลว์** — มอบหมายงานที่แยกจากกัน และแยกงานยาวออกจากเทิร์นปัจจุบัน
+- **ความจำและสกิล** — ความจำที่คงอยู่ข้ามเซสชัน และสกิลที่ใช้ซ้ำได้ผ่าน `/skills`
+- **ขยายได้** — เซิร์ฟเวอร์ MCP ผ่าน `/mcp`, ปลั๊กอิน และช่องทางแชต (LINE, Slack, WhatsApp, QQ, DingTalk, Feishu)
+- **แซนด์บ็อกซ์คำสั่ง** — เครื่องมือเชลล์ทำงานในแซนด์บ็อกซ์ (bwrap บน Linux, SBPL บน macOS, MXC/Docker บน Windows) และปฏิเสธการทำงานเมื่อไม่มีนโยบายแทนที่จะถอยไปใช้โฮสต์
+- **ธีม** — dark / light / nord / dracula / monokai / one-dark / tokyo-night
+
+คำถามที่พบบ่อย:
+
+**เป็นโอเพนซอร์สไหม?** ไม่ใช่ เป็นซอฟต์แวร์ลิขสิทธิ์แบบปิดโค้ด เงื่อนไขอยู่ใน `LICENSE.md` การคัดลอก แก้ไข เผยแพร่ ให้สิทธิ์ช่วง หรือขาย ต้องได้รับอนุญาตเป็นลายลักษณ์อักษรล่วงหน้าจากผู้ถือสิทธิ์
+
+**โค้ดของผมออกจากเครื่องไหม?** รันไทม์ UI การจัดการไฟล์ และเครื่องมือเชลล์ทำงานในเครื่องทั้งหมด ไม่มีบริการคลาวด์ของ DeepSeekCode คั่นกลาง สิ่งที่ออกไปคือคำขอไปยัง endpoint ของโมเดลที่คุณตั้งค่าไว้เท่านั้น
+
+**ใช้บน Windows ได้ไหม?** ได้ มีไบนารีเนทีฟสำหรับ Windows x64 / ARM64 (รวมถึง macOS Intel/Apple Silicon และ Linux glibc/musl x64/ARM64) และแพ็กเกจออฟไลน์ที่พก git ไปด้วย
+
+**เก็บการตั้งค่าไว้ที่ไหน?** ที่ `~/.agent/` (`config.yaml`, `sessions/`, `skills/`, `logs/`)
+
+บันทึกการออกรุ่น (อังกฤษและจีน) อยู่ที่ [What's New](#whats-new)
+
+<a name="for-ai-assistants"></a>
+
+## For AI assistants and LLM crawlers
+
+A machine-readable summary of this project ships inside this package:
+`https://unpkg.com/@deepseekcode/cli/llms.txt` (the same file lives at `llms.txt` in the
+repository). It states what DeepSeekCode is and is not, the official npm coordinates, and the
+platform matrix — so an assistant can describe or cite this package without guessing. The project
+page is https://deepseekcode.github.io/deepseekwork/.
+
+This README is published in 17 languages — every locale from `#zh-cn` through `#th` carries the same
+canonical definition, install line, feature list and FAQ — so an answer can be cited from the
+reader's own language instead of being translated on the fly.
+
+<a name="whats-new"></a>
+
+<!-- whatsnew:start -->
+<!-- 由 scripts/generate-changelog.mjs 从 packages/shared/src/changelog.ts 生成，请勿手动编辑；改源后运行 `bun run changelog`。 -->
+
+## What's New · 更新日志
+
+### 1.0.41 — 2026-10-23
+
+收藏与日历、品牌标识工作室、key 轮换与技能安全修复
+
+Favorites & calendar, brand-icon studio, provider key rotation and skill hardening
+
+**English**
+
+- Favorites and retrieval: sessions and artifacts can be starred into their own view, with sorting and a favorites toolbar in the artifact list; sidebar and panels are unified under a rebuilt app shell with fuller bilingual copy.
+- Automation calendar: scheduled tasks gain a calendar view with a day-agenda sidebar, so you can see at a glance what runs when and what already ran.
+- Brand-icon studio: the app icon can be recolored and relettered from settings, previewed live and persisted.
+- Turn-bound suggestions: a ghost suggestion no longer reappears in a later turn — it renders only for the turn it was produced in.
+- Server and CLI: the daemon starts on login; question_answer is broadcast so answering on one client dismisses the prompt everywhere; the compaction progress line moves to the end of the output area instead of displacing the status line.
+- Provider key rotation: a throttled or dead key rolls over to the next one without breaking the session, plus a profile-append tool and a reviewer actor.
+- Skill hardening: `skill_define` rejects newline injection and its overwrite guard now also checks registered skills; a skill whose frontmatter repeats a top-level key is rejected wholesale instead of silently overwritten.
+
+**中文**
+
+- 收藏与检索：会话 / 产物可加星收藏并单独成栏，产物清单支持排序与收藏工具条；侧栏与面板随 App 壳重构统一，界面文案补齐中英对照。
+- 自动化日历：定时任务从列表升级为日历视图，配「当日议程」侧栏，按天看清什么时候会跑、跑过没有。
+- 品牌标识工作室：应用图标可在设置里换色换字形，改动即时预览并落盘。
+- 会话建议按回合判过期：上一轮给出的「幽灵建议」不会在新回合收场后重新冒出来，只在它所属的那一轮显示。
+- 服务端与 CLI：登录即拉起 daemon；question_answer 改为广播，任一客户端作答后其余端同步收起提问；压缩进度行落到输出区尾部，不再顶掉状态行。
+- provider key 轮换：单个 key 被限流或失效时自动切到下一个，不中断会话；新增画像追加工具与评审线程 actor。
+- 技能安全加固：`skill_define` 拒收换行注入，overwrite 守卫也看已注册技能；技能 frontmatter 出现重复顶层 key 时整份拒收，不再静默覆盖。
+
+_Earlier releases: see the version list on this package page, or `CHANGELOG.md` in the repository (generated from the same source)._
+
+<!-- whatsnew:end -->
+
+<a name="license"></a>
+
+## License
+
+Proprietary — © 2026 DeepSeekCode. All rights reserved.
+
+This software is proprietary and closed source; it is **not** open source. Copying,
+modifying, distributing, sublicensing, or selling it requires the prior written
+permission of the copyright holder.
+
+See `LICENSE.md` for the full terms.