aria-code 0.112.0__tar.gz → 0.114.0__tar.gz

{aria_code-0.112.0/src/aria_code.egg-info → aria_code-0.114.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: aria-code
-Version: 0.112.0
+Version: 0.114.0
 Summary: Open-source AI agent for coding, financial analysis and logistics operations: numbers you can check, client data kept apart, actions a person approves
 License: Apache-2.0
 Project-URL: Homepage, https://github.com/artheras/aria-code
@@ -171,7 +171,7 @@ Numbers you can check, client data kept apart, actions a person approves.</p>
 <p align="center">
   <a href="https://www.npmjs.com/package/@artheras/aria-code"><img src="https://img.shields.io/npm/v/@artheras/aria-code/latest?style=flat-square&logo=npm&label=npm" alt="npm version"></a>
   <!-- Release automation pins PyPI: the default endpoint still selects legacy 4.x. -->
-  <a href="https://pypi.org/project/aria-code/0.112.0/"><img src="https://img.shields.io/badge/dynamic/json?url=https%3A%2F%2Fpypi.org%2Fpypi%2Faria-code%2F0.112.0%2Fjson&amp;query=%24.info.version&amp;prefix=v&amp;style=flat-square&amp;logo=pypi&amp;label=PyPI&amp;color=blue&amp;cacheSeconds=300" alt="PyPI version"></a>
+  <a href="https://pypi.org/project/aria-code/0.114.0/"><img src="https://img.shields.io/badge/dynamic/json?url=https%3A%2F%2Fpypi.org%2Fpypi%2Faria-code%2F0.114.0%2Fjson&amp;query=%24.info.version&amp;prefix=v&amp;style=flat-square&amp;logo=pypi&amp;label=PyPI&amp;color=blue&amp;cacheSeconds=300" alt="PyPI version"></a>
   <a href="https://github.com/artheras/aria-code/actions/workflows/ci.yml"><img src="https://img.shields.io/github/actions/workflow/status/artheras/aria-code/ci.yml?branch=main&style=flat-square&logo=githubactions&label=CI" alt="CI status"></a>
   <a href="LICENSE"><img src="https://img.shields.io/badge/license-Apache%202.0-64748b?style=flat-square" alt="Apache License 2.0"></a>
 </p>

{aria_code-0.112.0 → aria_code-0.114.0}/README.md

@@ -15,7 +15,7 @@ Numbers you can check, client data kept apart, actions a person approves.</p>
 <p align="center">
   <a href="https://www.npmjs.com/package/@artheras/aria-code"><img src="https://img.shields.io/npm/v/@artheras/aria-code/latest?style=flat-square&logo=npm&label=npm" alt="npm version"></a>
   <!-- Release automation pins PyPI: the default endpoint still selects legacy 4.x. -->
-  <a href="https://pypi.org/project/aria-code/0.112.0/"><img src="https://img.shields.io/badge/dynamic/json?url=https%3A%2F%2Fpypi.org%2Fpypi%2Faria-code%2F0.112.0%2Fjson&amp;query=%24.info.version&amp;prefix=v&amp;style=flat-square&amp;logo=pypi&amp;label=PyPI&amp;color=blue&amp;cacheSeconds=300" alt="PyPI version"></a>
+  <a href="https://pypi.org/project/aria-code/0.114.0/"><img src="https://img.shields.io/badge/dynamic/json?url=https%3A%2F%2Fpypi.org%2Fpypi%2Faria-code%2F0.114.0%2Fjson&amp;query=%24.info.version&amp;prefix=v&amp;style=flat-square&amp;logo=pypi&amp;label=PyPI&amp;color=blue&amp;cacheSeconds=300" alt="PyPI version"></a>
   <a href="https://github.com/artheras/aria-code/actions/workflows/ci.yml"><img src="https://img.shields.io/github/actions/workflow/status/artheras/aria-code/ci.yml?branch=main&style=flat-square&logo=githubactions&label=CI" alt="CI status"></a>
   <a href="LICENSE"><img src="https://img.shields.io/badge/license-Apache%202.0-64748b?style=flat-square" alt="Apache License 2.0"></a>
 </p>

{aria_code-0.112.0 → aria_code-0.114.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "aria-code"
-version = "0.112.0"
+version = "0.114.0"
 description = "Open-source AI agent for coding, financial analysis and logistics operations: numbers you can check, client data kept apart, actions a person approves"
 readme = "README.md"
 license = { text = "Apache-2.0" }
@@ -45,7 +45,7 @@ classifiers = [
 # parsers, the SQL engine and chart renderer are optional extras below — the
 # code already lazy-imports them and degrades gracefully when absent.
 dependencies = [
-    # The default model's client. DEFAULT_MODEL is google/gemini-2.5-pro, and
+    # The default model's client. DEFAULT_MODEL is google/gemini-3.5-flash, and
     # this used to be the optional `google` extra — so a plain
     # `pip install aria-code` failed on the very first prompt with "Gemini/Vertex
     # AI 需要 google-genai，当前未安装". The comment above that extra said as

{aria_code-0.112.0 → aria_code-0.114.0}/src/aria_code/_version.py

@@ -17,4 +17,4 @@ from __future__ import annotations
 
 __all__ = ["__version__"]
 
-__version__ = "0.112.0"
+__version__ = "0.114.0"

{aria_code-0.112.0 → aria_code-0.114.0}/src/aria_code/apps/cli/bootstrap.py

@@ -146,7 +146,10 @@ def initialize_cli_environment() -> None:
 # Provider configuration is the user's to make (that is what `/model` and
 # `.ariarc` are for); the code's job is to have a sane default and then get
 # out of the way.
-DEFAULT_MODEL = os.getenv("ARIA_DEFAULT_MODEL", "google/gemini-2.5-pro")
+DEFAULT_MODEL = os.getenv("ARIA_DEFAULT_MODEL", "google/gemini-3.5-flash")
+# A stable model (Google: available until at least May 2027), not a short-term
+# one: an install that is rarely updated should not lose its default within
+# months. gemini-2.5-pro, the previous default, retires in October 2026.
 
 
 def default_config() -> dict:
@@ -159,7 +162,7 @@ def default_config() -> dict:
         "ollama_url": os.getenv("OLLAMA_URL", "http://localhost:11434"),
         # Which backend serves a bare, unprefixed model name. Only consulted
         # for names that do not name their own provider ("qwen2.5:7b"); a
-        # prefixed id like "google/gemini-2.5-pro" always wins.
+        # prefixed id like "google/gemini-3.5-flash" always wins.
         "local_provider": os.getenv("ARIA_LLM_PROVIDER", "ollama"),
         "provider_fallback": "configured",
         "model": DEFAULT_MODEL,

{aria_code-0.112.0 → aria_code-0.114.0}/src/aria_code/apps/cli/commands/model_cmds.py

@@ -185,6 +185,17 @@ class ModelCommandsMixin:
     async def cmd_model(self, args: str):
         name = args.strip()
 
+        # A model Google has retired would fail on the next request; switch
+        # to its replacement and say so (model_retirement.py).
+        from aria_code.apps.cli.model_retirement import retired_replacement
+
+        _replacement = retired_replacement(name)
+        if _replacement:
+            msg = ui_text(self, f"ℹ {name} 已被 Google 停用，改用 {_replacement}。",
+                          f"ℹ {name} has been retired by Google; using {_replacement}.")
+            self.context.console.print(f"[yellow]{msg}[/yellow]") if self.context.has_rich else print(msg)
+            name = _replacement
+
         # ── "provider/model" format (Open Interpreter style) ─────────────────
         # Examples: /model deepseek/deepseek-chat  /model ollama/qwen2.5:7b
         #           /model openai/gpt-4.5          /model openai/o3  /model openai/o4-mini
@@ -1421,7 +1432,7 @@ class ModelCommandsMixin:
             ("deepseek",    "DeepSeek",      "deepseek/deepseek-chat"),
             ("anthropic",   "Anthropic",     "anthropic/claude-sonnet-4-6"),
             ("openai",      "OpenAI",        "openai/gpt-4.5"),
-            ("google",      "Google Gemini", "google/gemini-2.0-flash-exp"),
+            ("google",      "Google Gemini", "google/gemini-3.5-flash"),
             ("xai",         "xAI Grok",      "xai/grok-3-fast"),
             ("groq",        "Groq",          "groq/llama-3.3-70b-versatile"),
             ("mistral",     "Mistral",       "mistral/mistral-large-latest"),

{aria_code-0.112.0 → aria_code-0.114.0}/src/aria_code/apps/cli/commands/orchestrator_cmds.py

@@ -78,7 +78,7 @@ class OrchestratorCommandsMixin:
             return
             
         if self.context.has_rich:
-            provider = ConfiguredProvider(self.context.config, "gemini-2.5-flash")
+            provider = ConfiguredProvider(self.context.config, "gemini-3.5-flash")
         
         with self.context.console.status(f"[dim]{ui_text(self, 'Orchestrator 正在编排智能体网络', 'Orchestrator is planning the agent network')}...[/dim]"): 
             result = await dynamic_agent_orchestration(request, provider)

{aria_code-0.112.0 → aria_code-0.114.0}/src/aria_code/apps/cli/config_store.py

@@ -64,15 +64,57 @@ def load_cli_config(
     starting, because the user would then have no way to run the tool that
     would fix it.
     """
-    config = build_settings_service(paths, defaults, sync_policy=sync_policy).load()
+    service = build_settings_service(paths, defaults, sync_policy=sync_policy)
+    config = service.load()
+    # A model Google has retired fails on every request. The user's own saved
+    # choice is replaced once and written back; see model_retirement.
+    from aria_code.apps.cli.model_retirement import migrate_config
+
+    saved = migrate_config(config)
+    if saved:
+        try:
+            service.save(config)
+        except Exception:
+            pass
+        _announce(saved, config, pinned=False)
     try:
         from aria_code.ariarc import apply_to_config
 
         apply_to_config(config)
     except Exception:
         pass
+    # A project's .ariarc is the user's file: replace in memory, say so, never rewrite it.
+    pinned = migrate_config(config)
+    if pinned:
+        _announce(pinned, config, pinned=True)
     return config
 
 
+_ANNOUNCED: set[tuple[str, str]] = set()
+
+
+def _announce(changes, config: dict, *, pinned: bool) -> None:
+    """One line on stderr per retired model, once per process."""
+    import sys
+
+    zh = str(config.get("ui_lang", "")).lower().startswith("zh")
+    for _key, old, new in changes:
+        if (old, new) in _ANNOUNCED:
+            continue
+        _ANNOUNCED.add((old, new))
+        if zh:
+            where = "项目 .ariarc 里固定的" if pinned else "你设置的"
+            tail = "，请修改 .ariarc 里的 model" if pinned else "。可以用 /model 换成其他模型"
+            msg = f"ℹ {where}模型 {old} 已被 Google 停用，本次改用 {new}{tail}。"
+        else:
+            where = "The model pinned in this project's .ariarc" if pinned else "Your model"
+            tail = "; update the model in .ariarc" if pinned else "; use /model to pick another"
+            msg = f"ℹ {where}, {old}, has been retired by Google. Using {new}{tail}."
+        try:
+            print(msg, file=sys.stderr)
+        except Exception:
+            pass
+
+
 def save_cli_config(paths: AriaConfigPaths, cfg: dict) -> None:
     build_settings_service(paths, {}).save(cfg)

{aria_code-0.112.0 → aria_code-0.114.0}/src/aria_code/apps/cli/model_catalog.py

@@ -16,27 +16,43 @@ MODELS = {
     # ════════════════════════════════════════════════════════════════════
     # ── Google Gemini 平台核心默认模型（Google Cloud）───────────────────────
     # ════════════════════════════════════════════════════════════════════
-    "gemini-pro": {
-        "id": "google/gemini-2.5-pro",
-        "name": "Gemini Pro",
-        "version": "2.5",
+    # Gemini 2.5 retires in October 2026 (model_retirement.py). The default is
+    # a stable model; the newest Flash is offered beside it, but its line is
+    # replaced every few months.
+    "gemini-flash": {
+        "id": "google/gemini-3.5-flash",
+        "name": "Gemini Flash",
+        "version": "3.5",
         "tag": "Platform",
         "speed": "★★★★★",
         "intelligence": "★★★★★",
-        "description": "平台内置：Google Cloud 旗舰多模态、百万级上下文、量化核心",
+        "description": "平台默认：稳定版（至少到 2027 年 5 月）、百万级上下文、代码与金融分析",
         "capabilities": ["multimodal", "1M context", "tool calls", "quant", "code"],
         "thinking": True, "tools": True,
         "max_tokens": 8192, "num_ctx": 1048576, "temperature": 0.2,
         "badge": "Default",
     },
-    "gemini-flash": {
-        "id": "google/gemini-2.5-flash",
-        "name": "Gemini Flash",
-        "version": "2.5",
+    "gemini-pro": {
+        "id": "google/gemini-3.8-flash",
+        "name": "Gemini Flash (latest)",
+        "version": "3.8",
+        "tag": "Platform",
+        "speed": "★★★★★",
+        "intelligence": "★★★★★",
+        "description": "最新最强：推理与工具调用最好；迭代快，Google 几个月内会推出替代版",
+        "capabilities": ["multimodal", "1M context", "tool calls", "quant", "code"],
+        "thinking": True, "tools": True,
+        "max_tokens": 8192, "num_ctx": 1048576, "temperature": 0.2,
+        "badge": "Latest",
+    },
+    "gemini-lite": {
+        "id": "google/gemini-3.5-flash-lite",
+        "name": "Gemini Flash-Lite",
+        "version": "3.5",
         "tag": "Platform",
         "speed": "★★★★★",
         "intelligence": "★★★★",
-        "description": "极速默认：超低延迟、毫秒级响应、代码与实时行情",
+        "description": "极速低价：低延迟、适合批量与实时行情",
         "capabilities": ["fast inference", "1M context", "tool calls", "low latency"],
         "thinking": False, "tools": True,
         "max_tokens": 8192, "num_ctx": 1048576, "temperature": 0.2,
@@ -341,8 +357,10 @@ MODELS = {
 # Model aliases: short names / Ollama IDs → MODELS key
 MODEL_ALIASES = {
     # ── Google Gemini ─────────────────────────────────────────────────
-    "gemini": "gemini-pro", "gemini-pro": "gemini-pro", "gemini2.5": "gemini-pro", "gpro": "gemini-pro",
+    "gemini": "gemini-flash", "gemini-pro": "gemini-pro", "gemini2.5": "gemini-flash", "gpro": "gemini-pro",
+    "gemini-latest": "gemini-pro", "glatest": "gemini-pro",
     "gemini-flash": "gemini-flash", "gflash": "gemini-flash", "flash": "gemini-flash",
+    "gemini-lite": "gemini-lite", "glite": "gemini-lite",
     # ── Qwen 2.5 ──────────────────────────────────────────────────────
     "qwen7b": "qwen7b",   "q7": "qwen7b",   "sonata": "qwen7b",   "s": "qwen7b",
     "qwen14b": "qwen14b", "q14": "qwen14b",
@@ -464,7 +482,7 @@ _MODEL_ID_INDEX: dict[str, str] | None = None
 def _model_id_index() -> dict[str, str]:
     """Lazily build a lowercase {model id -> MODELS key} index.
 
-    The config stores the provider-qualified *id* ("google/gemini-2.5-pro")
+    The config stores the provider-qualified *id* ("google/gemini-3.5-flash")
     while MODELS is keyed by short name ("gemini-pro"), so without this lookup
     a registered model resolves to "_community_" and its own registry entry is
     never used.

aria_code-0.114.0/src/aria_code/apps/cli/model_retirement.py

@@ -0,0 +1,63 @@
+"""Models Google has retired, and what Aria moves their users to.
+
+Google's Vertex AI lifecycle page retires gemini-2.5-pro, -flash and
+-flash-lite on 20 October 2026 (the release notes give 16 October, so plan
+for the earlier date); the Gemini API already admits only users who have
+used 2.5 before. gemini-2.0-flash and -flash-lite shut down on 1 June 2026,
+and every 1.5 model in 2025. A saved config that still names one of them
+would fail on every request with an error that does not say why.
+
+So a retired id is replaced when the config is loaded, and the replacement
+is written back so it happens once: a stable model, not a short-term one,
+so an install that is rarely updated does not break again within months.
+The replacements follow Google's recommendations; 2.5 Flash moves to 3.5
+Flash rather than a Lite model so the user loses nothing in capability.
+"""
+
+from __future__ import annotations
+
+import re
+
+# bare id -> bare replacement
+RETIRED: dict[str, str] = {
+    "gemini-2.5-pro": "gemini-3.5-flash",
+    "gemini-2.5-flash": "gemini-3.5-flash",
+    "gemini-2.5-flash-lite": "gemini-3.1-flash-lite",
+    "gemini-2.0-flash": "gemini-3.5-flash",
+    "gemini-2.0-flash-lite": "gemini-3.1-flash-lite",
+    "gemini-1.5-pro": "gemini-3.5-flash",
+    "gemini-1.5-flash": "gemini-3.5-flash",
+    "gemini-1.0-pro": "gemini-3.5-flash",
+}
+
+# Dated, versioned and preview spellings of the same models:
+# gemini-2.5-pro-preview-06-05, gemini-2.0-flash-001, gemini-1.5-pro-latest.
+_SUFFIX = re.compile(r"(-preview(-[\w-]+)?|-exp(-[\w-]+)?|-latest|-\d{3}|-\d{2}-\d{2}|-\d{2}-\d{4})+$")
+
+
+def retired_replacement(model: str) -> str | None:
+    """The id to use instead of *model*, keeping its provider prefix; None if it is not retired."""
+    if not model:
+        return None
+    text = str(model).strip()
+    prefix, _, bare = text.rpartition("/")
+    key = _SUFFIX.sub("", bare.lower())
+    replacement = RETIRED.get(key)
+    if replacement is None:
+        return None
+    return f"{prefix}/{replacement}" if prefix else replacement
+
+
+def migrate_config(config: dict, keys: tuple[str, ...] = ("model",)) -> list[tuple[str, str, str]]:
+    """Replace retired model ids in *config* in place; return (key, old, new) for each."""
+    changes = []
+    for key in keys:
+        old = config.get(key)
+        new = retired_replacement(old) if isinstance(old, str) else None
+        if new:
+            config[key] = new
+            changes.append((key, old, new))
+    return changes
+
+
+__all__ = ["RETIRED", "migrate_config", "retired_replacement"]

{aria_code-0.112.0 → aria_code-0.114.0}/src/aria_code/apps/cli/tools/write_tools.py

@@ -118,6 +118,19 @@ def _print_lsp_diags(diags: list, console, has_rich: bool, limit: int = 6) -> No
         console.print(f"  [dim]… +{extra} more[/dim]") if has_rich else print(f"  ... +{extra} more")
 
 
+def _client_isolation_error(p: pathlib.Path, content: str) -> str | None:
+    """Why a client's document must not be written as it stands (aria_code.safety.client_isolation).
+
+    A failure inside the check never blocks a write: it is a guard on top of
+    the write path, not a new way for writing to break.
+    """
+    try:
+        from aria_code.safety.client_isolation import check_write
+        return check_write(p, content, [pathlib.Path.cwd()])
+    except Exception:
+        return None
+
+
 def _is_safe(p: pathlib.Path, params: dict | None = None) -> bool:
     if params and params.get("_workspace"):
         from aria_code.workspace.files import WorkspaceSecurity
@@ -463,6 +476,9 @@ def tool_write_file(params: dict) -> dict:
         p = raw_path.resolve()
         if not _is_safe(p, params):
             return {"success": False, "error": f"Access denied: path '{p}' is outside allowed directories"}
+        leak = _client_isolation_error(p, content)
+        if leak:
+            return {"success": False, "error": leak, "data": {"client_isolation": True}}
 
         existed = p.exists()
         desktop = pathlib.Path.home() / "Desktop"
@@ -719,6 +735,9 @@ def tool_edit_file(params: dict) -> dict:
 
         replacements = occurrences if replace_all else 1
         new_content = content.replace(old_str, new_str, -1 if replace_all else 1)
+        leak = _client_isolation_error(p, new_content)
+        if leak:
+            return {"success": False, "error": leak, "data": {"client_isolation": True}}
         store = _change_store()
         change = store.stage(p, new_content, source="edit_file")
         added = len(new_str.splitlines())
@@ -855,6 +874,9 @@ def tool_multi_edit(params: dict) -> dict:
 
         # ── Phase 2: stage + apply once ───────────────────────────────────────
         store = _change_store()
+        leak = _client_isolation_error(p, working)
+        if leak:
+            return {"success": False, "error": leak, "data": {"client_isolation": True}}
         change = store.stage(p, working, source="multi_edit")
         console, has_rich = _ui()
 

{aria_code-0.112.0 → aria_code-0.114.0}/src/aria_code/aria_cli.py

@@ -508,7 +508,7 @@ _PROVIDER_DESC: Dict[str, str] = {
     "anthropic":   "Claude Sonnet 4 / Opus 4  长文档·代码·分析",
     "groq":        "Llama3/Qwen  超高速推理 (免费额度)",
     "together":    "开源模型聚合  Llama/Qwen/DeepSeek 等 100+ 模型",
-    "google":      "Gemini 2.5 Pro / 2.0 Flash  多模态·超长上下文",
+    "google":      "Gemini 3.8 Flash / 3.5 Flash / 3.5 Flash-Lite  多模态·超长上下文",
     "xai":         "Grok-3 / Grok-3-Fast  实时网络数据·Twitter整合",
     "mistral":     "Mistral Large / Codestral  欧洲顶级·代码生成强",
     "cohere":      "Command R+  RAG检索增强·企业文档处理",
@@ -660,17 +660,17 @@ _PROVIDER_GUIDE: Dict[str, str] = {
         "1. 打开 aistudio.google.com/app/apikey\n"
         "2. 用 Google 账号登录 → 「Create API key」\n"
         "3. 复制 AIzaSy... 格式的密钥\n\n"
-        "解锁: Gemini 2.5 Pro · Gemini 2.0 Flash · 多模态视觉\n"
-        "用法: /model google/gemini-2.0-flash-exp\n"
-        "免费额度: Flash 每分钟 15次，每天 1500次"
+        "解锁: Gemini 3.8 Flash · Gemini 3.5 Flash · 多模态视觉\n"
+        "用法: /model google/gemini-3.5-flash\n"
+        "免费额度以 Google AI Studio 当前公布为准"
     ),
     "gemini": (
         "同 google provider，填入 Google AI Studio 的 API Key\n\n"
         "推荐模型:\n"
-        "  gemini-2.5-pro        — 最强推理，128K 上下文\n"
-        "  gemini-2.0-flash-exp  — 超快，每分钟 15 次免费\n"
-        "  gemini-1.5-flash      — 稳定版，适合生产\n\n"
-        "用法: /model gemini/gemini-2.5-pro"
+        "  gemini-3.5-flash       — 稳定版，适合生产（默认）\n"
+        "  gemini-3.8-flash       — 最新最强，迭代较快\n"
+        "  gemini-3.5-flash-lite  — 更快更省\n\n"
+        "用法: /model gemini/gemini-3.5-flash"
     ),
     "xai": (
         "1. 打开 console.x.ai → 注册/登录\n"

{aria_code-0.112.0 → aria_code-0.114.0}/src/aria_code/ariarc.py

@@ -51,7 +51,7 @@ parent directories (walks up to filesystem root, stops at $HOME).
       // Which model this project runs on. Pins the backend for everyone who
       // opens the repo, so it does not depend on each developer's global
       // config. An explicit /model during a session still wins.
-      "model":      "google/gemini-2.5-pro",
+      "model":      "google/gemini-3.5-flash",
       "provider":   "google",
       "max_rounds": 40,
 

{aria_code-0.112.0 → aria_code-0.114.0}/src/aria_code/doctor.py

@@ -680,7 +680,7 @@ def _iter_required_modules() -> Iterable[tuple[str, str]]:
     yield "pandas", "dataframes"
     yield "numpy", "numeric processing"
     yield "yfinance", "US/HK/global market data"
-    # The default model is google/gemini-2.5-pro, so without this a fresh
+    # The default model is google/gemini-3.5-flash, so without this a fresh
     # install cannot answer a single prompt.
     yield "google.genai", "Gemini / Vertex AI (the default model)"
 

{aria_code-0.112.0 → aria_code-0.114.0}/src/aria_code/model_capability.py

@@ -196,6 +196,11 @@ _CAPABILITY_TABLE: Dict[str, ModelCapability] = {
     # Registered here as well as in the MODELS catalogue: callers such as the
     # tool-routing check in aria_cli use get_model_capability() directly, and a
     # missing entry silently degrades the model to text_only / 4K context.
+    "gemini-3.8-flash":         ModelCapability(tool_calls=True, format="openai_native", context_window=1048576, temperature=0.2, size_class="large",  vision=True, thinking=True, notes="Gemini 3.8 Flash — 1M context, short-term line"),
+    "gemini-3.5-flash-lite":    ModelCapability(tool_calls=True, format="openai_native", context_window=1048576, temperature=0.2, size_class="medium", vision=True,                notes="Gemini 3.5 Flash-Lite — 1M context"),
+    "gemini-3.5-flash":         ModelCapability(tool_calls=True, format="openai_native", context_window=1048576, temperature=0.2, size_class="large",  vision=True, thinking=True, notes="Gemini 3.5 Flash — 1M context, stable (default)"),
+    "gemini-3.1-flash-lite":    ModelCapability(tool_calls=True, format="openai_native", context_window=1048576, temperature=0.2, size_class="medium", vision=True,                notes="Gemini 3.1 Flash-Lite — 1M context"),
+    # Retired by Google (model_retirement.py migrates configs that name them).
     "gemini-2.5-pro":           ModelCapability(tool_calls=True, format="openai_native", context_window=1048576, temperature=0.2, size_class="large",  vision=True, thinking=True, notes="Gemini 2.5 Pro — 1M context"),
     "gemini-2.5-flash":         ModelCapability(tool_calls=True, format="openai_native", context_window=1048576, temperature=0.2, size_class="medium", vision=True,                notes="Gemini 2.5 Flash — 1M context"),
     "gemini-2.0-flash":         ModelCapability(tool_calls=True, format="openai_native", context_window=1048576, temperature=0.2, size_class="medium", vision=True),

{aria_code-0.112.0 → aria_code-0.114.0}/src/aria_code/providers/llm/openai_compat.py

@@ -225,7 +225,7 @@ class GoogleProvider(OpenAICompatProvider):
 
     provider_name    = "google"
     DEFAULT_BASE_URL = "https://generativelanguage.googleapis.com/v1beta/openai"
-    DEFAULT_MODEL    = "gemini-2.5-flash"
+    DEFAULT_MODEL    = "gemini-3.5-flash"
 
     def __init__(self, config: ProviderConfig):
         if not config.api_key:

{aria_code-0.112.0 → aria_code-0.114.0}/src/aria_code/providers/llm/registry.py

@@ -73,7 +73,7 @@ _DEFAULT_FALLBACK_CHAIN = [
     ("dashscope",    "DASHSCOPE_API_KEY",     "qwen-plus"),
     ("moonshot",     "MOONSHOT_API_KEY",      "moonshot-v1-8k"),
     ("zhipu",        "ZHIPUAI_API_KEY",       "glm-4-flash"),
-    ("google",       "GEMINI_API_KEY",        "gemini-2.5-flash"),
+    ("google",       "GEMINI_API_KEY",        "gemini-3.5-flash"),
     ("openai",       "OPENAI_API_KEY",        "gpt-4o-mini"),
     ("anthropic",    "ANTHROPIC_API_KEY",     "claude-3-5-haiku-latest"),
     ("groq",         "GROQ_API_KEY",          "llama-3.3-70b-versatile"),

aria_code-0.114.0/src/aria_code/safety/client_isolation.py

@@ -0,0 +1,178 @@
+"""Keep one client's document free of other clients' data.
+
+A 3PL's stock file, a fund's holdings export or a merchant ledger often holds
+several clients side by side. A document written *for one of them* (named for
+it: ``report_BETA.md``, ``statement-acme.csv``) must not carry another
+client's name, id or item codes. The prompt says so, and in an eval run the
+agent still copied two notes from Beta's own rows that named Acme and Gamma
+SKUs into Beta's report.
+
+This is the check behind that rule, the way a liquid handler's checker
+tracks what each tip has touched rather than trusting the protocol's
+comments: before a client document is written, its text is scanned for the
+identifiers of every *other* client found in the workspace's data files, and
+the write is refused with a list of what leaked.
+
+Clients are found in CSV files near the document that have an owner column
+(``owner_id``, ``shipper``, ``client``, ``customer``…). A document is a
+client's when its file name names exactly one of them. Code is not checked:
+a script that processes every client legitimately names them all, and so
+does an internal report whose name does not single one out.
+"""
+
+from __future__ import annotations
+
+import csv
+import re
+from dataclasses import dataclass, field
+from pathlib import Path
+from typing import Iterable
+
+OWNER_COLUMNS = ("owner_id", "owner", "shipper_id", "shipper", "client_id", "client",
+                 "customer_id", "customer", "account_id", "货主", "客户")
+NAME_COLUMNS = ("owner_name", "shipper_name", "client_name", "customer_name", "account_name",
+                "货主名称", "客户名称")
+ITEM_COLUMNS = ("sku", "item", "item_id", "item_code", "product_id", "product_code", "sku_id")
+DOCUMENT_SUFFIXES = {".md", ".markdown", ".txt", ".csv", ".tsv", ".json", ".html", ".htm",
+                     ".xml", ".yaml", ".yml", ".rst", ".eml"}
+MIN_TERM = 3                       # "A" or "AB" as an owner id would match everywhere
+MAX_FILE_BYTES = 5 * 1024 * 1024
+MAX_FILES = 25
+
+
+@dataclass
+class Client:
+    id: str
+    names: set[str] = field(default_factory=set)
+    items: set[str] = field(default_factory=set)
+
+    def terms(self) -> list[str]:
+        return sorted({t for t in {self.id, *self.names, *self.items} if len(t) >= MIN_TERM}, key=len, reverse=True)
+
+
+_CACHE: dict[tuple[str, float, int], dict[str, Client]] = {}
+
+
+def _column(header: Iterable[str], wanted: tuple[str, ...]) -> str | None:
+    lowered = {h.strip().lower(): h for h in header if h}
+    for name in wanted:
+        if name in lowered:
+            return lowered[name]
+    return None
+
+
+def _clients_in(path: Path) -> dict[str, Client]:
+    try:
+        stat = path.stat()
+    except OSError:
+        return {}
+    if stat.st_size > MAX_FILE_BYTES:
+        return {}
+    key = (str(path), stat.st_mtime, stat.st_size)
+    if key in _CACHE:
+        return _CACHE[key]
+    found: dict[str, Client] = {}
+    try:
+        with path.open(newline="", encoding="utf-8-sig", errors="replace") as fh:
+            reader = csv.DictReader(fh)
+            header = reader.fieldnames or []
+            owner = _column(header, OWNER_COLUMNS)
+            if owner:
+                name = _column(header, NAME_COLUMNS)
+                item = _column(header, ITEM_COLUMNS)
+                for row in reader:
+                    cid = (row.get(owner) or "").strip()
+                    if not cid:
+                        continue
+                    client = found.setdefault(cid, Client(cid))
+                    if name and (row.get(name) or "").strip():
+                        client.names.add(row[name].strip())
+                    if item and (row.get(item) or "").strip():
+                        client.items.add(row[item].strip())
+    except (OSError, csv.Error, UnicodeError):
+        found = {}
+    _CACHE[key] = found
+    return found
+
+
+def client_index(roots: Iterable[Path]) -> dict[str, Client]:
+    """Every client named in the CSV data files in *roots* and their immediate subfolders."""
+    index: dict[str, Client] = {}
+    seen = 0
+    for root in dict.fromkeys(Path(r) for r in roots):
+        if not root.is_dir():
+            continue
+        candidates = sorted(root.glob("*.csv")) + sorted(root.glob("*/*.csv"))
+        for path in candidates:
+            if seen >= MAX_FILES:
+                return index
+            seen += 1
+            for cid, client in _clients_in(path).items():
+                merged = index.setdefault(cid, Client(cid))
+                merged.names |= client.names
+                merged.items |= client.items
+    return index if len(index) > 1 else {}
+
+
+def _words(text: str) -> set[str]:
+    return {w.lower() for w in re.split(r"[^0-9A-Za-z一-鿿]+", text) if w}
+
+
+def target_client(path: Path, index: dict[str, Client]) -> str | None:
+    """The one client a document's file name singles out, if it singles out exactly one."""
+    words = _words(Path(path).stem)
+    compact = re.sub(r"[^0-9a-z一-鿿]", "", Path(path).stem.lower())
+    hits = set()
+    for cid, client in index.items():
+        if cid.lower() in words:
+            hits.add(cid)
+            continue
+        for name in client.names:
+            squashed = re.sub(r"[^0-9a-z一-鿿]", "", name.lower())
+            if len(squashed) >= MIN_TERM and squashed in compact:
+                hits.add(cid)
+    return next(iter(hits)) if len(hits) == 1 else None
+
+
+def _mentions(text: str, term: str) -> bool:
+    if re.search(r"[一-鿿]", term):
+        return term in text
+    return re.search(rf"(?<![0-9A-Za-z]){re.escape(term)}(?![0-9A-Za-z])", text, re.IGNORECASE) is not None
+
+
+def foreign_mentions(text: str, target: str, index: dict[str, Client]) -> dict[str, list[str]]:
+    """Other clients' identifiers that appear in *text*, by client."""
+    own = {t.lower() for t in index[target].terms()} if target in index else set()
+    leaks: dict[str, list[str]] = {}
+    for cid, client in sorted(index.items()):
+        if cid == target:
+            continue
+        hits = [t for t in client.terms() if t.lower() not in own and _mentions(text, t)]
+        if hits:
+            leaks[cid] = hits[:4]
+    return leaks
+
+
+def check_write(path: Path | str, content: str, roots: Iterable[Path | str] = ()) -> str | None:
+    """Why this write must be refused, or None when it may go ahead."""
+    path = Path(path)
+    if path.suffix.lower() not in DOCUMENT_SUFFIXES:
+        return None
+    search = [path.parent, *(Path(r) for r in roots)]
+    index = client_index(search)
+    if not index:
+        return None
+    target = target_client(path, index)
+    if target is None:
+        return None
+    leaks = foreign_mentions(content, target, index)
+    if not leaks:
+        return None
+    listed = "; ".join(f"{cid} ({', '.join(terms)})" for cid, terms in leaks.items())
+    return (f"Not written: {path.name} is for client {target}, but it contains other clients' data: {listed}. "
+            f"A client's document holds only that client's data. Remove these, including any that came "
+            f"from notes or comments in {target}'s own rows, and write it again. If this is meant to be an "
+            f"internal cross-client document, name it without singling out one client.")
+
+
+__all__ = ["Client", "check_write", "client_index", "foreign_mentions", "target_client"]

aria_code-0.114.0/src/aria_code/training/__init__.py

@@ -0,0 +1 @@
+"""Training data and evaluation for Aria's own model (docs/training-protocol.md)."""