practicode 0.1.7 → 0.1.9

package/Cargo.lock

@@ -453,7 +453,7 @@ checksum = "439ee305def115ba05938db6eb1644ff94165c5ab5e9420d1c1bcedbba909391"
 
 [[package]]
 name = "practicode"
-version = "0.1.7"
+version = "0.1.9"
 dependencies = [
  "anyhow",
  "crossterm",

package/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "practicode"
-version = "0.1.7"
+version = "0.1.9"
 edition = "2024"
 description = "Local-first coding-test practice in a Rust terminal UI with optional AI help."
 readme = "README.md"

package/README.md

@@ -4,7 +4,10 @@
 ![Ratatui](https://img.shields.io/badge/Ratatui-TUI-00B4D8)
 ![Local first](https://img.shields.io/badge/local--first-practice-14B8A6)
 ![AI ready](https://img.shields.io/badge/AI-Codex%20%2B%20Claude-111827)
+![crates.io](https://img.shields.io/crates/v/practicode?logo=rust)
+![npm](https://img.shields.io/npm/v/practicode?logo=npm)
 ![CI](https://github.com/baba9811/practicode/actions/workflows/ci.yml/badge.svg)
+[Socket.dev package health](https://socket.dev/npm/package/practicode)
 
 ![practicode terminal UI](assets/practicode-terminal.svg)
 
@@ -34,6 +37,8 @@ npm install -g practicode
 practicode
 ```
 
+The npm package has a `postinstall` step that runs `cargo build --release --locked` from the package root so the Rust TUI binary is ready. Set `PRACTICODE_SKIP_BUILD=1` to skip that install-time build; the `practicode` launcher will try the same locked Cargo build on first run if the binary is missing.
+
 ### Cargo
 
 ```bash
@@ -60,9 +65,10 @@ practicode --help
 
 ## Daily Loop
 
-The code editor starts focused.
+On first run, practicode opens a setup panel. After that, the code editor starts focused.
 
 ```text
+first run: review /profile setup
 write code
 Esc, then /
 choose /run
@@ -71,6 +77,8 @@ choose /next when it passes
 
 Typing `/` outside the editor opens the command palette. Use `up/down` to move, `Enter` to run or complete the selected command, and `Esc` to cancel. Press `?` for in-app help or `Ctrl+C` to quit.
 
+Hints, failed cases, answers, and user profile panels are copy-friendly: drag in the output pane to use your terminal's normal text selection/copy behavior. When the code editor is visible in the right pane, mouse focus is enabled for that editor. Use `Esc`, `e`, or `/code` to return from output to code.
+
 Submissions are saved as you type under `submissions/<problem-id>/solution.<ext>`.
 
 ## CLI Flags
@@ -88,17 +96,19 @@ Submissions are saved as you type under `submissions/<problem-id>/solution.<ext>
 | `/run` | Judge the current submission |
 | `/code` | Return to the code editor |
 | `/next` | Open the next unsolved problem, or ask AI only when none remain |
-| `/generate easy string problem` | Ask AI to create a new problem now |
+| `/generate easy string problem` | Ask AI to create a new problem in the background |
 | `/back` | Go back through problem history |
 | `/problems` | Browse problems with `up/down` or `j/k`, open with `Enter` |
 | `/open 2` | Open by number, id, or slug |
 | `/answer` | Show the reference answer |
 | `/hint` | Ask the selected AI for a concise hint |
 | `/hint explain my bug` | Ask the selected AI about the current problem and submission |
-| `/profile` | Show your current practice profile |
+| `/profile` | Show your current user profile |
 | `/difficulty auto` | Set difficulty preference: `auto`, `easy`, `medium`, `hard` |
 | `/topics arrays, strings` | Set preferred topics for future problems |
 | `/avoid dp, graph` | Set topics to avoid in future problems |
+| `/generate-languages python, rust` | Limit generated answer languages, or use `all` |
+| `/generate-ui ko, en` | Limit generated problem text languages, or use `all` |
 | `/provider codex` | Set AI provider and show local CLI/daemon status |
 | `/model auto` | Use the provider default model for `/hint` and AI-backed `/next` |
 | `/language python` | Set code language: `python`, `ts`, `java`, `rust` |
@@ -111,13 +121,17 @@ Older command names such as `/prev`, `/list`, `/giveup`, and `/lang` still work
 
 The default UI language is English. Switch it any time with `/ui ko`, `/ui ja`, `/ui zh`, or `/ui es`.
 
-Your practice profile is saved in `.practicode/problem-state.json`. It keeps UI language, code language, theme, preferred difficulty, preferred topics, and topics to avoid. `auto` difficulty follows gradual progression; a fixed difficulty asks local selection and AI generation to prefer that level.
+Your user profile is saved in `.practicode/problem-state.json`. It keeps UI language, code language, theme, preferred difficulty, preferred topics, topics to avoid, and generation language scope. `auto` difficulty follows gradual progression; a fixed difficulty asks local selection and AI generation to prefer that level.
+
+Inside `/profile`, use `up/down` to move and `Space` or `Enter` to cycle common settings or enable/disable generated answer/UI languages. Use slash commands for free-form lists such as `/topics arrays, strings`.
 
 ## Problem Flow
 
 `/next` is local-first: it opens the next unsolved local problem before generating anything. When no unsolved problem remains, it asks the selected AI provider to create one.
 
-Use `/generate <request>` when you explicitly want to create a new problem now.
+Use `/generate <request>` when you explicitly want to create a new problem in the background while you keep solving the current one. The generated problem stays local and `/next` will pick it up later.
+
+If `/next` has to generate because no local problem remains, it runs in the foreground. Editing and commands are paused so state cannot change halfway through that AI task. Press `Space` for the warmup timing drill, or `q`/`Ctrl+C` to quit.
 
 ```text
 /generate a slightly harder string problem
@@ -164,18 +178,24 @@ cargo install --force practicode
 
 - `/run` executes your local submission as a normal process. practicode runs it from `.practicode/build/<problem-id>/run`, but this is not an OS sandbox. Only run code you trust.
 - `/hint` sends the current problem and submission to the selected AI provider CLI.
-- AI-backed `/next` can run a custom shell command from `settings.ai_next_command`; save only commands you trust.
+- AI-backed `/next` and `/generate` can run a custom shell command from `settings.ai_next_command`; save only commands you trust.
+- npm installs run the package `postinstall` script described above. It only invokes Cargo with the checked-in lockfile from this package root; it does not read local `.env`/`.npmrc` files or contact the configured AI provider.
+- npm releases are published from GitHub Actions with registry signatures and provenance enabled in `package.json`. The release workflow is also prepared for npm Trusted Publishing/OIDC; maintainers should prefer that over long-lived publish tokens when the package setting is enabled on npm.
 - Local `.env`, `.npmrc`, `.practicode/`, `problems/`, and `submissions/` are ignored by git. Do not commit tokens, private prompts, or answer keys.
 
 ## Development Checks
 
 ```bash
+cargo fmt --check
 cargo test
+cargo clippy --all-targets --all-features -- -D warnings
 cargo run -- --smoke
-cargo audit
+cargo audit --deny warnings
+npm pack --dry-run
+npm run smoke
 ```
 
-This repo has no npm dependencies or lockfile today, so `npm audit` and `pnpm audit` are not applicable until a matching lockfile is added.
+CI runs the Rust audit gate with `cargo audit --deny warnings`; release publishing stops before crates.io/npm publish if that audit fails. This repo has no npm dependencies or lockfile today, so `npm audit` and `pnpm audit` are not applicable until a matching lockfile is added.
 
 ## Contributing
 

package/SECURITY.md

@@ -0,0 +1,11 @@
+# Security Policy
+
+## Reporting
+
+Report vulnerabilities through GitHub Security Advisories for this repository when available. If that is not available, open a minimal public issue asking for a private security contact and avoid posting exploit details.
+
+Do not include tokens, private prompts, `.env`, `.npmrc`, `.practicode/`, `problems/`, or `submissions/` contents in public reports.
+
+## Scope
+
+Security-sensitive areas include npm install scripts, release publishing, command execution, local judging, AI provider prompts, update checks, and local user data handling.

package/assets/i18n/en.json

@@ -15,9 +15,12 @@
   "palette_hint": "up/down select | Enter run | Esc cancel",
   "hint_command": "Enter submit | Esc cancel",
   "hint_list": "up/down move | Enter open | Esc close",
-  "hint_output": "Esc/click edit | / command | ? help",
+  "hint_output": "Esc/e edit | drag select to copy | / command",
+  "hint_settings": "up/down move | Space/Enter toggle | Esc close",
   "hint_code": "Esc then / command",
   "hint_idle": "/ command | ? help",
+  "hint_busy": "Working | q quit",
+  "hint_busy_next": "Space warmup | q quit",
   "help_title": "Help",
   "daily_loop": "Daily loop",
   "keys": "Keys",
@@ -26,17 +29,19 @@
   "cmd_code": "Return to the code editor",
   "cmd_edit": "Return to the code editor",
   "cmd_next": "Open the next problem",
-  "cmd_generate": "Generate a new problem now",
+  "cmd_generate": "Generate a new problem in the background",
   "cmd_prev": "Open the previous problem",
   "cmd_list": "Browse problems",
   "cmd_open": "Open by number, id, or slug",
   "cmd_giveup": "Show the reference answer",
   "cmd_hint": "Ask for a hint about the current problem",
   "cmd_ai": "Ask AI about the current problem and code",
-  "cmd_profile": "Show practice profile",
+  "cmd_profile": "Show user profile",
   "cmd_difficulty": "Set preferred difficulty",
   "cmd_topics": "Set preferred topics",
   "cmd_avoid": "Set topics to avoid",
+  "cmd_generate_languages": "Set answer languages for generated problems",
+  "cmd_generate_ui": "Set UI languages for generated problems",
   "cmd_provider": "Set AI provider",
   "cmd_model": "Set AI model",
   "cmd_model_auto": "Use provider default model",
@@ -57,6 +62,10 @@
   "update_check_failed": "Could not check for updates.",
   "generating_next": "Generating next problem",
   "already_busy": "Already busy.",
+  "busy_warmup": "Warmup: press Space when * hits the center.",
+  "busy_commands_paused": "Commands are paused until generation finishes.",
+  "hits": "Hits",
+  "misses": "Misses",
   "run_pass_next": "Next: /next",
-  "run_fail_next": "Fix: press Esc or click this pane to edit, then /run"
+  "run_fail_next": "Fix: press Esc or e to edit, then /run"
 }

package/assets/i18n/es.json

@@ -15,9 +15,12 @@
   "palette_hint": "arriba/abajo elegir | Enter ejecutar | Esc cancelar",
   "hint_command": "Enter ejecutar | Esc cancelar",
   "hint_list": "arriba/abajo mover | Enter abrir | Esc cerrar",
-  "hint_output": "Esc/clic editar | / comando | ? ayuda",
+  "hint_output": "Esc/e editar | arrastra para copiar | / comando",
+  "hint_settings": "arriba/abajo mover | Space/Enter alternar | Esc cerrar",
   "hint_code": "Esc y luego / comando",
   "hint_idle": "/ comando | ? ayuda",
+  "hint_busy": "Trabajando | q salir",
+  "hint_busy_next": "Space calentamiento | q salir",
   "help_title": "Ayuda",
   "daily_loop": "Flujo diario",
   "keys": "Teclas",
@@ -26,17 +29,19 @@
   "cmd_code": "Volver al editor de codigo",
   "cmd_edit": "Volver al editor de codigo",
   "cmd_next": "Abrir el siguiente problema",
-  "cmd_generate": "Generar un problema nuevo ahora",
+  "cmd_generate": "Generar un problema nuevo en segundo plano",
   "cmd_prev": "Abrir el problema anterior",
   "cmd_list": "Abrir la lista de problemas",
   "cmd_open": "Abrir por numero, id o slug",
   "cmd_giveup": "Mostrar la respuesta de referencia",
   "cmd_hint": "Pedir una pista para el problema actual",
   "cmd_ai": "Preguntar a AI sobre el problema y codigo actuales",
-  "cmd_profile": "Mostrar perfil de practica",
+  "cmd_profile": "Mostrar perfil de usuario",
   "cmd_difficulty": "Configurar dificultad preferida",
   "cmd_topics": "Configurar temas preferidos",
   "cmd_avoid": "Configurar temas a evitar",
+  "cmd_generate_languages": "Configurar lenguajes de respuesta generados",
+  "cmd_generate_ui": "Configurar idiomas de UI generados",
   "cmd_provider": "Configurar AI provider",
   "cmd_model": "Configurar AI model",
   "cmd_model_auto": "Usar el modelo predeterminado del provider",
@@ -57,6 +62,10 @@
   "update_check_failed": "No se pudo comprobar actualizaciones.",
   "generating_next": "Generando el siguiente problema",
   "already_busy": "Ya hay una tarea en curso.",
+  "busy_warmup": "Calentamiento: pulsa Space cuando * llegue al centro.",
+  "busy_commands_paused": "Los comandos quedan pausados hasta que termine la generacion.",
+  "hits": "Aciertos",
+  "misses": "Fallos",
   "run_pass_next": "Siguiente: /next",
-  "run_fail_next": "Corrige: pulsa Esc o haz clic en este panel para editar, luego /run"
+  "run_fail_next": "Corrige: pulsa Esc o e para editar, luego /run"
 }

package/assets/i18n/ja.json

@@ -15,9 +15,12 @@
   "palette_hint": "上下 選択 | Enter 実行 | Esc キャンセル",
   "hint_command": "Enter 実行 | Esc キャンセル",
   "hint_list": "上下 移動 | Enter 開く | Esc 閉じる",
-  "hint_output": "Esc/クリック 編集 | / コマンド | ? ヘルプ",
+  "hint_output": "Esc/e 編集 | ドラッグ選択でコピー | / コマンド",
+  "hint_settings": "上下 移動 | Space/Enter 切替 | Esc 閉じる",
   "hint_code": "Esc の後 / コマンド",
   "hint_idle": "/ コマンド | ? ヘルプ",
+  "hint_busy": "処理中 | q 終了",
+  "hint_busy_next": "Space ウォームアップ | q 終了",
   "help_title": "ヘルプ",
   "daily_loop": "基本フロー",
   "keys": "キー",
@@ -26,17 +29,19 @@
   "cmd_code": "コードエディタに戻る",
   "cmd_edit": "コードエディタに戻る",
   "cmd_next": "次の問題を開く",
-  "cmd_generate": "新しい問題を今すぐ生成",
+  "cmd_generate": "新しい問題をバックグラウンド生成",
   "cmd_prev": "前の問題を開く",
   "cmd_list": "問題一覧を開く",
   "cmd_open": "番号、id、slug で問題を開く",
   "cmd_giveup": "解答を見る",
   "cmd_hint": "現在の問題のヒントを依頼",
   "cmd_ai": "現在の問題とコードについて AI に質問",
-  "cmd_profile": "練習プロファイルを表示",
+  "cmd_profile": "ユーザープロファイルを表示",
   "cmd_difficulty": "希望難易度を設定",
   "cmd_topics": "希望トピックを設定",
   "cmd_avoid": "避けるトピックを設定",
+  "cmd_generate_languages": "生成問題の解答言語を設定",
+  "cmd_generate_ui": "生成問題の UI 言語を設定",
   "cmd_provider": "AI provider を設定",
   "cmd_model": "AI model を設定",
   "cmd_model_auto": "provider の既定モデルを使用",
@@ -57,6 +62,10 @@
   "update_check_failed": "更新を確認できませんでした。",
   "generating_next": "次の問題を生成中",
   "already_busy": "すでに処理中です。",
+  "busy_warmup": "ウォームアップ: * が中央に来たら Space。",
+  "busy_commands_paused": "生成が終わるまでコマンドは一時停止します。",
+  "hits": "成功",
+  "misses": "ミス",
   "run_pass_next": "次: /next",
-  "run_fail_next": "修正: Esc またはこのペインをクリックして編集し、/run"
+  "run_fail_next": "修正: Esc または e で編集し、/run"
 }

package/assets/i18n/ko.json

@@ -15,9 +15,12 @@
   "palette_hint": "위/아래 선택 | Enter 실행 | Esc 취소",
   "hint_command": "Enter 실행 | Esc 취소",
   "hint_list": "위/아래 이동 | Enter 열기 | Esc 닫기",
-  "hint_output": "Esc/클릭 편집 | / 명령 | ? 도움말",
+  "hint_output": "Esc/e 편집 | 드래그 선택으로 복사 | / 명령",
+  "hint_settings": "위/아래 이동 | Space/Enter 토글 | Esc 닫기",
   "hint_code": "Esc 후 / 명령",
   "hint_idle": "/ 명령 | ? 도움말",
+  "hint_busy": "작업 중 | q 종료",
+  "hint_busy_next": "Space 워밍업 | q 종료",
   "help_title": "도움말",
   "daily_loop": "기본 흐름",
   "keys": "키",
@@ -26,17 +29,19 @@
   "cmd_code": "코드 편집기로 돌아가기",
   "cmd_edit": "코드 편집기로 돌아가기",
   "cmd_next": "다음 문제 열기",
-  "cmd_generate": "새 문제를 바로 생성",
+  "cmd_generate": "새 문제를 백그라운드에서 생성",
   "cmd_prev": "이전 문제 열기",
   "cmd_list": "문제 목록 열기",
   "cmd_open": "번호, id, slug로 문제 열기",
   "cmd_giveup": "정답 보기",
   "cmd_hint": "현재 문제 힌트 요청",
   "cmd_ai": "현재 문제와 코드에 대해 AI에게 질문",
-  "cmd_profile": "연습 프로파일 보기",
+  "cmd_profile": "사용자 프로필 보기",
   "cmd_difficulty": "선호 난이도 설정",
   "cmd_topics": "선호 주제 설정",
   "cmd_avoid": "피할 주제 설정",
+  "cmd_generate_languages": "생성 문제의 정답 언어 설정",
+  "cmd_generate_ui": "생성 문제의 UI 언어 설정",
   "cmd_provider": "AI provider 설정",
   "cmd_model": "AI model 설정",
   "cmd_model_auto": "provider 기본 모델 사용",
@@ -57,6 +62,10 @@
   "update_check_failed": "업데이트를 확인할 수 없습니다.",
   "generating_next": "다음 문제 생성 중",
   "already_busy": "이미 작업 중입니다.",
+  "busy_warmup": "워밍업: *가 가운데에 왔을 때 Space를 누르세요.",
+  "busy_commands_paused": "생성이 끝날 때까지 명령은 잠시 멈춥니다.",
+  "hits": "성공",
+  "misses": "실패",
   "run_pass_next": "다음: /next",
-  "run_fail_next": "수정: Esc를 누르거나 이 창을 클릭해 편집한 뒤 /run"
+  "run_fail_next": "수정: Esc 또는 e로 편집한 뒤 /run"
 }

package/assets/i18n/zh.json

@@ -15,9 +15,12 @@
   "palette_hint": "上下 选择 | Enter 执行 | Esc 取消",
   "hint_command": "Enter 执行 | Esc 取消",
   "hint_list": "上下 移动 | Enter 打开 | Esc 关闭",
-  "hint_output": "Esc/点击 编辑 | / 命令 | ? 帮助",
+  "hint_output": "Esc/e 编辑 | 拖拽选择复制 | / 命令",
+  "hint_settings": "上下移动 | Space/Enter 切换 | Esc 关闭",
   "hint_code": "Esc 后输入 / 命令",
   "hint_idle": "/ 命令 | ? 帮助",
+  "hint_busy": "处理中 | q 退出",
+  "hint_busy_next": "Space 热身 | q 退出",
   "help_title": "帮助",
   "daily_loop": "日常流程",
   "keys": "按键",
@@ -26,17 +29,19 @@
   "cmd_code": "回到代码编辑器",
   "cmd_edit": "回到代码编辑器",
   "cmd_next": "打开下一题",
-  "cmd_generate": "立即生成新题",
+  "cmd_generate": "后台生成新题",
   "cmd_prev": "打开上一题",
   "cmd_list": "打开题目列表",
   "cmd_open": "按编号、id 或 slug 打开题目",
   "cmd_giveup": "显示参考答案",
   "cmd_hint": "请求当前题目的提示",
   "cmd_ai": "向 AI 询问当前题目和代码",
-  "cmd_profile": "显示练习配置",
+  "cmd_profile": "显示用户配置",
   "cmd_difficulty": "设置偏好难度",
   "cmd_topics": "设置偏好主题",
   "cmd_avoid": "设置要避开的主题",
+  "cmd_generate_languages": "设置生成题目的答案语言",
+  "cmd_generate_ui": "设置生成题目的 UI 语言",
   "cmd_provider": "设置 AI provider",
   "cmd_model": "设置 AI model",
   "cmd_model_auto": "使用 provider 默认模型",
@@ -57,6 +62,10 @@
   "update_check_failed": "无法检查更新。",
   "generating_next": "正在生成下一题",
   "already_busy": "已有任务正在运行。",
+  "busy_warmup": "热身：当 * 到达中间时按 Space。",
+  "busy_commands_paused": "生成完成前命令会暂停。",
+  "hits": "命中",
+  "misses": "失误",
   "run_pass_next": "下一步: /next",
-  "run_fail_next": "修复: 按 Esc 或点击此面板编辑，然后 /run"
+  "run_fail_next": "修复: 按 Esc 或 e 编辑，然后 /run"
 }

package/docs/ARCHITECTURE.md

@@ -5,19 +5,24 @@ Practicode is local-first: user data stays under `.practicode/`, `problems/`, an
 ## Source Layout
 
 - `src/core.rs` owns problem data, state loading/saving, judging, and file generation.
-- `src/core/profile.rs` owns practice-profile defaults and normalization.
-- `src/tui.rs` owns Ratatui rendering and interaction flow.
+- `src/core/profile.rs` owns user-profile defaults and normalization.
+- `src/tui.rs` owns the Ratatui app shell, event routing, and workflow orchestration.
 - `src/tui/commands.rs` owns the command palette catalog.
-- `src/ai.rs` owns provider commands, daemon/model checks, and AI prompts.
+- `src/tui/editor.rs` owns the in-terminal code editor state.
+- `src/tui/problem_view.rs` owns problem-statement rendering.
+- `src/tui/settings_panel.rs` owns `/profile` setup-panel rendering and keyboard toggles.
+- `src/ai.rs` owns provider commands, daemon/model checks, and AI prompts for foreground `/next` generation and background `/generate` prefetch.
 - `src/update.rs` owns update checks.
 - `src/text.rs` owns terminal text editing and markdown/plain rendering helpers.
 
 ## Extension Rules
 
-- Add domain logic under the owning module first; keep `tui.rs` as orchestration and rendering.
+- Add domain logic under the owning module first; keep `tui.rs` as orchestration, not a catch-all.
 - Add user-visible commands in `src/tui/commands.rs`, then route behavior in `PracticodeApp::handle_command`.
-- Add persisted profile settings to `Settings`, normalize them in `normalize_settings`, and cover old-state compatibility with tests.
+- Add persisted user profile settings to `Settings`, normalize them in `normalize_settings`, and cover old-state compatibility with tests.
 - Keep provider-specific behavior in `src/ai.rs`; TUI should ask for status or start tasks, not know provider internals.
+- Keep foreground and background generation flows separate: `/next` may block when no local problem exists, while `/generate` must preserve the current problem and user profile state.
+- Keep output panes copy-friendly. Mouse capture should be enabled for the visible code editor, but disabled while output, hints, answers, lists, or settings panels are shown so terminal drag selection keeps working.
 - Keep local user data backwards-compatible. Missing fields should default cleanly.
 
 ## Release

package/docs/MAINTAINING.md

@@ -45,11 +45,16 @@ Verify publication:
 ```bash
 gh run list --limit 5
 npm view practicode version
+npm view practicode dist.signatures dist.attestations --json
 cargo search practicode --limit 1
 ```
 
 Do not print or commit tokens. Local `.env` and `.npmrc` are ignored; GitHub Actions uses `NPM_TOKEN` and `CRATES_TOKEN` repository secrets.
 
+For npm supply-chain posture, keep `publishConfig.provenance` enabled and keep the release job's `id-token: write` permission. When the npm package's Trusted Publisher setting is configured for this repository and `.github/workflows/release.yml`, remove the long-lived `NPM_TOKEN` dependency from the npm publish steps and disallow token publishing in the npm package settings.
+
+Socket.dev indexes the npm package page at <https://socket.dev/npm/package/practicode>. It may lag behind npm immediately after a release; verify npm first with `npm view practicode version`, then re-check Socket after indexing catches up. If Socket flags the npm `postinstall` script, confirm it still only runs the locked Cargo build documented in the README.
+
 ## Documentation Ownership
 
 | File | Audience |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "practicode",
-  "version": "0.1.7",
+  "version": "0.1.9",
   "description": "Local-first coding-test practice in a Rust terminal UI with optional AI help.",
   "license": "MIT",
   "repository": {
@@ -8,6 +8,9 @@
     "url": "git+https://github.com/baba9811/practicode.git"
   },
   "homepage": "https://github.com/baba9811/practicode#readme",
+  "bugs": {
+    "url": "https://github.com/baba9811/practicode/issues"
+  },
   "bin": {
     "practicode": "bin/practicode.js"
   },
@@ -27,6 +30,7 @@
     "Cargo.toml",
     "LICENSE",
     "README.md",
+    "SECURITY.md",
     "THIRD_PARTY_LICENSES.md"
   ],
   "keywords": [
@@ -41,6 +45,7 @@
     "node": ">=18"
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   }
 }

package/src/ai.rs

@@ -1,7 +1,7 @@
 use crate::{
     core::{
-        AppState, PROBLEM_NOTES_PATH, Problem, Settings, ensure_submission, normalize_ai_provider,
-        render_problem,
+        AppState, LANGUAGES, PROBLEM_NOTES_PATH, Problem, Settings, UI_LANGUAGES,
+        ensure_submission, normalize_ai_provider, render_problem,
     },
     process::{run_capture, sh_quote, shell_process, unique_temp_path, which},
 };
@@ -78,6 +78,38 @@ pub fn run_ai_next(root: &Path, state: &AppState, force: bool, request: &str) ->
     }
 }
 
+pub fn run_ai_generate(root: &Path, state: &AppState, request: &str) -> String {
+    let provider = normalize_ai_provider(&state.settings.ai_provider);
+    let command = if state.settings.next_ai_command().trim().is_empty() {
+        default_ai_generate_command(root, &state.settings, request)
+    } else {
+        state.settings.next_ai_command().to_string()
+    };
+    let mut process = shell_process(&command);
+    process
+        .current_dir(root)
+        .env("PRACTICODE_NEXT_REQUEST", request)
+        .env("PRACTICODE_GENERATE_BACKGROUND", "1")
+        .env("PRACTICODE_AI_PROVIDER", &provider)
+        .env("PRACTICODE_AI_MODEL", &state.settings.ai_model);
+    match run_capture(&mut process, "", Duration::from_secs(900)) {
+        Ok(run) if run.code == Some(0) => {
+            let output = output_text(&run.stdout, &run.stderr);
+            format!("{provider} background generation finished\n{output}")
+                .trim()
+                .to_string()
+        }
+        Ok(run) => {
+            let output = output_text(&run.stdout, &run.stderr);
+            format!(
+                "{provider} background generation failed ({})\n{output}",
+                run.code.unwrap_or(-1)
+            )
+        }
+        Err(error) => format!("{provider} background generation failed\n{error}"),
+    }
+}
+
 pub fn default_ai_next_command(root: &Path, settings: &Settings, request: &str) -> String {
     match normalize_ai_provider(&settings.ai_provider).as_str() {
         "claude" => default_claude_next_command(root, settings, request),
@@ -85,6 +117,13 @@ pub fn default_ai_next_command(root: &Path, settings: &Settings, request: &str)
     }
 }
 
+pub fn default_ai_generate_command(root: &Path, settings: &Settings, request: &str) -> String {
+    match normalize_ai_provider(&settings.ai_provider).as_str() {
+        "claude" => default_claude_generate_command(root, settings, request),
+        _ => default_codex_generate_command(root, settings, request),
+    }
+}
+
 pub fn provider_status(provider: &str) -> String {
     match normalize_ai_provider(provider).as_str() {
         "claude" => {
@@ -128,7 +167,7 @@ pub fn default_ai_next_prompt(request: &str) -> String {
 
 pub fn default_ai_next_prompt_with_settings(settings: &Settings, request: &str) -> String {
     format!(
-        "Read AGENTS.md, docs/problem-authoring-notes.md if present, .practicode/problem_notes.md if present, problems/INDEX.md if present, .practicode/problem_bank.json if present, and .practicode/problem-state.json. Create exactly one new non-duplicate coding practice problem. The built-in 001-hello-world already exists, so do not duplicate it. User request: {}. Practice profile: difficulty preference: {}; preferred topics: {}; avoid topics: {}; code language: {}; UI language: {}. Treat difficulty auto as gradual progression from state; otherwise prefer the requested difficulty unless the direct user request conflicts. Make the smallest valid edits: update .practicode/problem_bank.json, one problem directory, problems/INDEX.md, and .practicode/problem-state.json. Do not include the answer in the problem statement.",
+        "Read AGENTS.md, docs/problem-authoring-notes.md if present, .practicode/problem_notes.md if present, problems/INDEX.md if present, .practicode/problem_bank.json if present, and .practicode/problem-state.json. Create exactly one new non-duplicate coding practice problem. The built-in 001-hello-world already exists, so do not duplicate it. User request: {}. User profile: difficulty preference: {}; preferred topics: {}; avoid topics: {}; code language: {}; UI language: {}; generated answer languages: {}; generated UI languages: {}. Treat difficulty auto as gradual progression from state; otherwise prefer the requested difficulty unless the direct user request conflicts. Make the smallest valid edits: update .practicode/problem_bank.json, one problem directory, problems/INDEX.md, and .practicode/problem-state.json. Do not include the answer in the problem statement.",
         if request.is_empty() {
             "(none)"
         } else {
@@ -138,7 +177,27 @@ pub fn default_ai_next_prompt_with_settings(settings: &Settings, request: &str)
         list_or_none(&settings.topics),
         list_or_none(&settings.avoid_topics),
         settings.language,
-        settings.ui_language
+        settings.ui_language,
+        list_or_all(&settings.generate_languages, LANGUAGES),
+        list_or_all(&settings.generate_ui_languages, UI_LANGUAGES)
+    )
+}
+
+pub fn default_ai_generate_prompt_with_settings(settings: &Settings, request: &str) -> String {
+    format!(
+        "Read AGENTS.md, docs/problem-authoring-notes.md if present, .practicode/problem_notes.md if present, problems/INDEX.md if present, .practicode/problem_bank.json if present, and .practicode/problem-state.json. Create exactly one new non-duplicate coding practice problem for later use. The built-in 001-hello-world already exists, so do not duplicate it. User request: {}. User profile: difficulty preference: {}; preferred topics: {}; avoid topics: {}; current code language: {}; current UI language: {}; generated answer languages: {}; generated UI languages: {}. Treat difficulty auto as gradual progression from state; otherwise prefer the requested difficulty unless the direct user request conflicts. Make the smallest valid edits: update .practicode/problem_bank.json, one problem directory, and problems/INDEX.md. Preserve .practicode/problem-state.json current_problem, history, solved, and settings; do not switch the current problem. Do not include the answer in the problem statement.",
+        if request.is_empty() {
+            "(none)"
+        } else {
+            request
+        },
+        settings.difficulty,
+        list_or_none(&settings.topics),
+        list_or_none(&settings.avoid_topics),
+        settings.language,
+        settings.ui_language,
+        list_or_all(&settings.generate_languages, LANGUAGES),
+        list_or_all(&settings.generate_ui_languages, UI_LANGUAGES)
     )
 }
 
@@ -319,6 +378,22 @@ fn default_codex_next_command(root: &Path, settings: &Settings, request: &str) -
     format!("{start}; {exec}")
 }
 
+fn default_codex_generate_command(root: &Path, settings: &Settings, request: &str) -> String {
+    let start = "if [ -x \"$HOME/.codex/packages/standalone/current/codex\" ]; then codex app-server daemon start >/dev/null 2>&1 || true; fi";
+    let mut exec = format!(
+        "codex exec --ephemeral --cd {} --sandbox workspace-write",
+        sh_quote(&root.display().to_string())
+    );
+    if let Some(model) = settings.model_arg() {
+        exec.push_str(&format!(" --model {}", sh_quote(model)));
+    }
+    exec.push(' ');
+    exec.push_str(&sh_quote(&default_ai_generate_prompt_with_settings(
+        settings, request,
+    )));
+    format!("{start}; {exec}")
+}
+
 fn codex_daemon_path() -> Option<PathBuf> {
     env::var_os("HOME").map(|home| {
         PathBuf::from(home)
@@ -343,6 +418,22 @@ fn default_claude_next_command(root: &Path, settings: &Settings, request: &str)
     )
 }
 
+fn default_claude_generate_command(root: &Path, settings: &Settings, request: &str) -> String {
+    let mut claude = "claude --permission-mode acceptEdits".to_string();
+    if let Some(model) = settings.model_arg() {
+        claude.push_str(&format!(" --model {}", sh_quote(model)));
+    }
+    claude.push_str(" -p ");
+    claude.push_str(&sh_quote(&default_ai_generate_prompt_with_settings(
+        settings, request,
+    )));
+    format!(
+        "claude daemon status >/dev/null 2>&1 || true; cd {}; {}",
+        sh_quote(&root.display().to_string()),
+        claude
+    )
+}
+
 fn output_text(stdout: &str, stderr: &str) -> String {
     [stdout.trim(), stderr.trim()]
         .into_iter()
@@ -359,6 +450,14 @@ fn list_or_none(values: &[String]) -> String {
     }
 }
 
+fn list_or_all(values: &[String], all: &[&str]) -> String {
+    if values.is_empty() {
+        all.join(", ")
+    } else {
+        values.join(", ")
+    }
+}
+
 #[cfg(test)]
 mod tests {
     use super::parse_model_list;