aria-code 0.140.0__tar.gz → 0.141.0__tar.gz

{aria_code-0.140.0/src/aria_code.egg-info → aria_code-0.141.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: aria-code
-Version: 0.140.0
+Version: 0.141.0
 Summary: Open-source AI agent for coding, financial analysis and logistics operations: numbers you can check, client data kept apart, actions a person approves
 License: Apache-2.0
 Project-URL: Homepage, https://github.com/artheras/aria-code
@@ -172,7 +172,7 @@ Numbers you can check, client data kept apart, actions a person approves.</p>
 <p align="center">
   <a href="https://www.npmjs.com/package/@artheras/aria-code"><img src="https://img.shields.io/npm/v/@artheras/aria-code/latest?style=flat-square&logo=npm&label=npm" alt="npm version"></a>
   <!-- Release automation pins PyPI: the default endpoint still selects legacy 4.x. -->
-  <a href="https://pypi.org/project/aria-code/0.140.0/"><img src="https://img.shields.io/badge/dynamic/json?url=https%3A%2F%2Fpypi.org%2Fpypi%2Faria-code%2F0.140.0%2Fjson&amp;query=%24.info.version&amp;prefix=v&amp;style=flat-square&amp;logo=pypi&amp;label=PyPI&amp;color=blue&amp;cacheSeconds=300" alt="PyPI version"></a>
+  <a href="https://pypi.org/project/aria-code/0.141.0/"><img src="https://img.shields.io/badge/dynamic/json?url=https%3A%2F%2Fpypi.org%2Fpypi%2Faria-code%2F0.141.0%2Fjson&amp;query=%24.info.version&amp;prefix=v&amp;style=flat-square&amp;logo=pypi&amp;label=PyPI&amp;color=blue&amp;cacheSeconds=300" alt="PyPI version"></a>
   <a href="https://github.com/artheras/aria-code/actions/workflows/ci.yml"><img src="https://img.shields.io/github/actions/workflow/status/artheras/aria-code/ci.yml?branch=main&style=flat-square&logo=githubactions&label=CI" alt="CI status"></a>
   <a href="LICENSE"><img src="https://img.shields.io/badge/license-Apache%202.0-64748b?style=flat-square" alt="Apache License 2.0"></a>
 </p>

{aria_code-0.140.0 → aria_code-0.141.0}/README.md

@@ -15,7 +15,7 @@ Numbers you can check, client data kept apart, actions a person approves.</p>
 <p align="center">
   <a href="https://www.npmjs.com/package/@artheras/aria-code"><img src="https://img.shields.io/npm/v/@artheras/aria-code/latest?style=flat-square&logo=npm&label=npm" alt="npm version"></a>
   <!-- Release automation pins PyPI: the default endpoint still selects legacy 4.x. -->
-  <a href="https://pypi.org/project/aria-code/0.140.0/"><img src="https://img.shields.io/badge/dynamic/json?url=https%3A%2F%2Fpypi.org%2Fpypi%2Faria-code%2F0.140.0%2Fjson&amp;query=%24.info.version&amp;prefix=v&amp;style=flat-square&amp;logo=pypi&amp;label=PyPI&amp;color=blue&amp;cacheSeconds=300" alt="PyPI version"></a>
+  <a href="https://pypi.org/project/aria-code/0.141.0/"><img src="https://img.shields.io/badge/dynamic/json?url=https%3A%2F%2Fpypi.org%2Fpypi%2Faria-code%2F0.141.0%2Fjson&amp;query=%24.info.version&amp;prefix=v&amp;style=flat-square&amp;logo=pypi&amp;label=PyPI&amp;color=blue&amp;cacheSeconds=300" alt="PyPI version"></a>
   <a href="https://github.com/artheras/aria-code/actions/workflows/ci.yml"><img src="https://img.shields.io/github/actions/workflow/status/artheras/aria-code/ci.yml?branch=main&style=flat-square&logo=githubactions&label=CI" alt="CI status"></a>
   <a href="LICENSE"><img src="https://img.shields.io/badge/license-Apache%202.0-64748b?style=flat-square" alt="Apache License 2.0"></a>
 </p>

{aria_code-0.140.0 → aria_code-0.141.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "aria-code"
-version = "0.140.0"
+version = "0.141.0"
 description = "Open-source AI agent for coding, financial analysis and logistics operations: numbers you can check, client data kept apart, actions a person approves"
 readme = "README.md"
 license = { text = "Apache-2.0" }

{aria_code-0.140.0 → aria_code-0.141.0}/src/aria_code/_version.py

@@ -17,4 +17,4 @@ from __future__ import annotations
 
 __all__ = ["__version__"]
 
-__version__ = "0.140.0"
+__version__ = "0.141.0"

{aria_code-0.140.0 → aria_code-0.141.0}/src/aria_code/apps/cli/app_server.py

@@ -108,7 +108,8 @@ class Server:
         choices = [[str(label), str(help_text)] for label, help_text in options]
         answer = self.ask("approval.requested", title=str(title or "Approval / selection"),
                           choices=choices, selected=selected,
-                          shortcuts=kwargs.get("shortcuts", {}))
+                          shortcuts=kwargs.get("shortcuts", {}),
+                          context=getattr(self, "approval_context", ""))
         chosen = answer.get("choice", -1)
         if type(chosen) is not int or not -1 <= chosen < len(choices):
             raise ValueError("Invalid menu response")
@@ -225,6 +226,22 @@ class Server:
                 self.stop_spinner()
 
         cli.TerminalRuntimeEventConsumer = Consumer
+        approval_base = cli.TerminalApprovalEventConsumer
+        class Approvals(approval_base):
+            async def approve(self, tool_name, tool_params, **kwargs):
+                from aria_code.apps.cli.exec_events import _param_view
+                params = _param_view(tool_params)
+                zh = str(server.terminal.config.get("ui_lang", "en")).startswith("zh")
+                context = [("工具" if zh else "Tool") + ": " + tool_name]
+                for key, en, cn in (("path", "File", "文件"), ("command", "Command", "命令"), ("directory", "Directory", "目录")):
+                    if isinstance(params.get(key), str):
+                        context.append((cn if zh else en) + ": " + params[key])
+                server.approval_context = "\n".join(context)
+                try:
+                    return await super().approve(tool_name, tool_params, **kwargs)
+                finally:
+                    server.approval_context = ""
+        cli.TerminalApprovalEventConsumer = Approvals
         config = cli.load_config()
         config["_session_workspace_root"] = str(Path.cwd().resolve())
         config["_session_write_roots"] = [str(Path(p).expanduser().resolve()) for p in self.options.add_dir]
@@ -265,6 +282,9 @@ class Server:
 
     def make_terminal(self, config):
         terminal = self.cli.ArtheraTerminal(config)
+        # The host draws its own turn footer. Keep this presentation flag out
+        # of saved user settings and retain normal Python CLI behaviour.
+        terminal._native_frontend = True
         execute = terminal.tool_executor.execute_local
         def tracked(*args, **kwargs):
             with self.tool_lock:
@@ -329,17 +349,25 @@ class Server:
 
     def snapshot(self, kind):
         from aria_code.apps.cli.native_branding import robot_rows
+        from aria_code.ui import robot
         t = self.terminal
+        rows = robot_rows(hidden=self.options.no_banner or self.options.banner == "off")
+        # Older Rust frontends still consume the spans. New frontends draw the
+        # named design themselves, sharing the same mascot as the Go runtime.
+        # An empty drawing must continue to mean that the banner is disabled.
         # A display snapshot is bounded independently of the model's context.
         messages = [{"role": m.get("role", ""), "content": str(m.get("content", ""))[:4096]}
                     for m in t.conversation[-40:]]
         self.emit(kind, session_id=t.session_id, messages=messages,
                   version=self.cli.__version__,
-                  robot=robot_rows(hidden=self.options.no_banner or self.options.banner == "off"),
+                  robot=rows, robot_design="cream-block-v2" if rows else "",
                   model=t.config.get("model", ""), provider=t.config.get("local_provider", ""),
                   workspace=str(Path.cwd()), commands=sorted(t.commands.commands),
                   permission=t.config.get("permission_mode", "workspace-write"),
-                  network=bool(t.config.get("network_enabled", True)))
+                  network=bool(t.config.get("network_enabled", True)),
+                  ui_lang=t.config.get("ui_lang", "en"),
+                  ui_theme=robot._theme_cache or robot._resolve_theme(),
+                  home_workspace=Path.cwd().resolve() == Path.home().resolve())
 
     def persist(self):
         t = self.terminal

{aria_code-0.140.0 → aria_code-0.141.0}/src/aria_code/apps/cli/chat_turn.py

@@ -641,7 +641,8 @@ class ChatTurnMixin:
             else:
                 print(f"  {text}")
 
-        _task = _task_isolation.prepare(_runtime_config, notify=_task_note)
+        from aria_code.apps.cli.conversation_policy import is_social_message
+        _task = None if (not (_rt_sys_ov or "").strip() and is_social_message(message)) else _task_isolation.prepare(_runtime_config, notify=_task_note)
         _task_context = _task_isolation.execution_context(_task, _runtime_config)
         try:
             for _rt_attempt in range(2):
@@ -1103,7 +1104,7 @@ class ChatTurnMixin:
                 from ui.render.output import format_turn_footer as _format_turn_footer
                 _footer = _format_turn_footer(
                     metadata,
-                    mode=self.config.get("response_footer", "compact"),
+                    mode="off" if getattr(self, "_native_frontend", False) else self.config.get("response_footer", "compact"),
                     copy_available=bool(final_text),
                 )
                 if _footer:
@@ -1112,7 +1113,7 @@ class ChatTurnMixin:
                 from ui.render.output import format_turn_footer as _format_turn_footer
                 _footer = _format_turn_footer(
                     metadata,
-                    mode=self.config.get("response_footer", "compact"),
+                    mode="off" if getattr(self, "_native_frontend", False) else self.config.get("response_footer", "compact"),
                     copy_available=bool(final_text),
                 )
                 if _footer:

aria_code-0.141.0/src/aria_code/apps/cli/conversation_policy.py

@@ -0,0 +1,21 @@
+"""Recognize standalone social messages without guessing a task's intent.
+
+Matching the whole message is intentional: ``hi, read README.md`` must keep
+its tools, as must ``yes`` or ``continue`` in an ongoing coding conversation.
+"""
+from __future__ import annotations
+
+import re
+
+_SOCIAL = frozenset({
+    "hi", "hello", "hey", "hiya", "hi there", "hello there", "how are you", "how are you doing", "good morning", "good afternoon", "good evening",
+    "hi aria", "hello aria", "hey aria", "thanks", "thank you", "thanks aria",
+    "bye", "goodbye", "你好", "你好啊", "你好呀", "您好", "嗨", "哈喽", "在吗", "你在吗", "早安", "晚安", "早上好", "下午好", "晚上好", "👋",
+    "你好aria", "aria你好", "你好 aria", "aria 你好", "hiaria", "helloaria", "heyaria", "谢谢", "谢谢你", "再见",
+})
+
+
+def is_social_message(message: str) -> bool:
+    text = re.sub(r"[!！?？。，,.~～]+", "", str(message or "").strip().casefold())
+    text = " ".join(text.split())
+    return text in _SOCIAL

{aria_code-0.140.0 → aria_code-0.141.0}/src/aria_code/apps/cli/exec_events.py

@@ -135,6 +135,11 @@ class ExecEvents:
         if result.get("error"):
             fields["error"] = _redact_activity_text(result["error"], limit=PARAM_CHARS)
         data = result.get("data") if isinstance(result.get("data"), dict) else {}
+        if result.get("reused") is True:
+            fields["reused"] = True
+        # Counts describe the returned data, never inferred model prose.
+        if tool == "list_files" and isinstance(data.get("items"), list):
+            fields["item_count"] = len(data["items"])
         for key in ("exit_code", "path", "process_id", "change_id"):
             if key in data:
                 fields[key] = data[key]

{aria_code-0.140.0 → aria_code-0.141.0}/src/aria_code/apps/cli/native_branding.py

@@ -1,4 +1,4 @@
-"""Serialize the existing mascot without copying or changing its design."""
+"""Legacy mascot spans for native frontends predating named Rust artwork."""
 from __future__ import annotations
 
 import os

{aria_code-0.140.0 → aria_code-0.141.0}/src/aria_code/apps/cli/prompts/coding.py

@@ -2,11 +2,13 @@
 # Contains the main coding system prompt for Aria.
 
 CODING_SYSTEM_PROMPT = (
-    "You are the Aria Code Supervisor for this workspace. You have direct file system access on macOS.\n"
+    "You are Aria, the coding assistant for the user's selected workspace. File tools run on the user's computer under the host's permissions.\n"
 
-    "Act as three explicit roles: Supervisor plans and delegates; Coder inspects and proposes/writes complete-file changes; Tester performs verification of proposals/changes.\n"
+    "Plan, implement and verify the requested task. Keep internal role labels out of user-facing replies.\n"
 
     "Required workflow: orient → read → proposal/write → verification. Skip a step only when its evidence is already present.\n\n"
+    "Inspect only files relevant to the task. Do not explore personal folders merely to greet the user. "
+    "Use existing tool results instead of repeating the same read without a reason.\n\n"
 
     "## ORIENT BEFORE YOU SEARCH\n"
     "In an unfamiliar repository, call `repo_map` FIRST. It returns the classes, functions and "

{aria_code-0.140.0 → aria_code-0.141.0}/src/aria_code/apps/cli/prompts/select.py

@@ -51,6 +51,9 @@ def select_base_prompt(message: str, *, intent: Optional[str] = None) -> str:
     (a live-data lookup, where the finance prompt is assembled with fetched
     data by the caller that has it).
     """
+    from aria_code.apps.cli.conversation_policy import is_social_message
+    if intent is None and is_social_message(message):
+        return _general_prompt()
     resolved = intent or _intent_of(message)
     if resolved == "general" and intent is None and _needs_workspace(message):
         # "Write a stock brief to report_BETA.md from inventory.csv" read as
@@ -134,6 +137,8 @@ def _general_prompt() -> str:
         "- State the scope before a change and the verification after it.\n"
         "- Do not invent prices, exchange rates, or other live figures.\n"
         "- Answer in the user's language. Be concise and specific."
+        "\n- A standalone greeting or thanks needs only a short direct reply, with no tools, "
+        "directory inventory, personal-file references or internal role titles."
     )
 
 
@@ -154,6 +159,10 @@ def build_turn_system_prompt(
     if override and override.strip():
         return override
 
+    from aria_code.apps.cli.conversation_policy import is_social_message
+    if intent is None and is_social_message(message):
+        return _general_prompt()
+
     parts = [select_base_prompt(message, intent=intent), OUTPUT_DISCIPLINE]
     if project_context and project_context.strip():
         parts.append(project_context.strip())

{aria_code-0.140.0 → aria_code-0.141.0}/src/aria_code/apps/cli/providers/runtime_bridge.py

@@ -307,7 +307,7 @@ def make_provider_fn(
         try:
             from aria_code.apps.cli.tool_scope import select_tool_schemas
 
-            return select_tool_schemas(tool_schemas, prompt)
+            return select_tool_schemas(tool_schemas, prompt, allow_social_tools=bool((system_override or "").strip()))
         except Exception:
             return list(tool_schemas)
 
@@ -438,8 +438,16 @@ async def run_chat_via_runtime(
     """
     from aria_code.runtime.gateway import run_turn
     from aria_code.apps.cli.workspace_route import workspace_config
+    from aria_code.apps.cli.conversation_policy import is_social_message
 
     config = workspace_config(prompt, model, config, api_url)
+    social_only = not (system_override or "").strip() and is_social_message(prompt)
+    if social_only:
+        # Host-owned policy, also enforced at execution if a provider returns
+        # an unsolicited call despite receiving no schemas. Never save it.
+        config = {**config, "_conversation_only": True}
+        tool_schemas = []
+        project_context = None
 
     provider_fn = make_provider_fn(
         model=model, config=config, api_url=api_url, ollama_url=ollama_url,
@@ -448,9 +456,9 @@ async def run_chat_via_runtime(
         system_override=system_override,
     )
     executor = build_tool_executor(local_tools, config, execution_context)
-    gate = build_acceptance_gate(executor, config, prompt)
-    contract = build_change_contract(config, prompt, executor)
-    review = build_review_gate(config, model=model, api_url=api_url, ollama_url=ollama_url,
+    gate = None if social_only else build_acceptance_gate(executor, config, prompt)
+    contract = None if social_only else build_change_contract(config, prompt, executor)
+    review = None if social_only else build_review_gate(config, model=model, api_url=api_url, ollama_url=ollama_url,
                                thinking_mode=thinking_mode, auth_token=auth_token)
 
     result = await run_turn(

{aria_code-0.140.0 → aria_code-0.141.0}/src/aria_code/apps/cli/tool_scope.py

@@ -67,10 +67,12 @@ def select_tool_schemas(
     *,
     always: Iterable[str] = (),
     activations: Optional[Sequence] = None,
+    allow_social_tools: bool = False,
 ) -> list[dict]:
     """The schemas to offer for *message*.
 
-    Core tools always; a domain tool only while its pack has claimed the
+    Standalone social messages need no tools. Otherwise core tools always;
+    a domain tool only while its pack has claimed the
     message. ``always`` forces specific names in regardless — for a caller that
     knows this turn needs one (a slash command that resolved to a tool, a
     subagent handed a narrowed brief).
@@ -80,8 +82,13 @@ def select_tool_schemas(
     the tax is the safer default.
     """
     all_schemas = list(schemas or [])
+    always = tuple(always)
     if not all_schemas:
         return all_schemas
+    from aria_code.apps.cli.conversation_policy import is_social_message
+
+    if is_social_message(message) and not always and not allow_social_tools:
+        return []
 
     # One try around the whole decision. domain_tool_names() sat outside it,
     # so a failure there propagated instead of degrading — the docstring

{aria_code-0.140.0 → aria_code-0.141.0}/src/aria_code/runtime/agent_loop.py

@@ -854,12 +854,26 @@ async def run_parallel_tools(
 ) -> Dict[int, dict]:
     """Execute parallel-safe pending tools and return results by original index."""
     parallel_batch, _ = split_tool_calls(pending, serial_tools)
+    # Reuse only identical local reads in this batch. There are no intervening
+    # writes here, and nothing is cached across rounds (external edits matter).
+    import copy
+    import json
+    shared_reads: dict[str, asyncio.Task] = {}
 
     async def _exec_one(tool_call: dict) -> tuple:
         tool_name = tool_call.get("tool", "")
         tool_params = tool_call.get("params", {})
         if tool_name in tool_executor.local_tools:
-            result = await tool_executor.execute(tool_name, tool_params)
+            if tool_name in {"read_file", "list_files", "glob", "search_code"}:
+                key = tool_name + json.dumps(tool_params, sort_keys=True, ensure_ascii=False)
+                reused = key in shared_reads
+                if not reused:
+                    shared_reads[key] = asyncio.create_task(tool_executor.execute(tool_name, tool_params))
+                result = copy.deepcopy(await shared_reads[key])
+                if reused:
+                    result["reused"] = True
+            else:
+                result = await tool_executor.execute(tool_name, tool_params)
         elif remote_runner is not None:
             if hook is not None:
                 hook("pre_tool", tool_name, tool_params, None)

{aria_code-0.140.0 → aria_code-0.141.0}/src/aria_code/runtime/tool_executor.py

@@ -41,6 +41,8 @@ class ToolExecutor:
         self, tool_name: str, params: dict, *, approval: ApprovalDecision | None = None
     ) -> dict:
         """Execute a local tool synchronously."""
+        if self.config.get("_conversation_only"):
+            return {"success": False, "error": "This is a standalone social message. Reply directly without tools or file inspection."}
         if tool_name not in self.local_tools:
             return {"success": False, "error": f"Unknown local tool: {tool_name}"}
         if approval is not None and not approval.approved:
@@ -64,6 +66,8 @@ class ToolExecutor:
 
     async def execute(self, tool_name: str, params: dict) -> dict:
         """Execute a tool asynchronously, using remote executor when needed."""
+        if self.config.get("_conversation_only"):
+            return {"success": False, "error": "This is a standalone social message. Reply directly without tools or file inspection."}
         if tool_name in self.local_tools:
             loop = asyncio.get_event_loop()
             return await loop.run_in_executor(None, self.execute_local, tool_name, params)

{aria_code-0.140.0 → aria_code-0.141.0/src/aria_code.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: aria-code
-Version: 0.140.0
+Version: 0.141.0
 Summary: Open-source AI agent for coding, financial analysis and logistics operations: numbers you can check, client data kept apart, actions a person approves
 License: Apache-2.0
 Project-URL: Homepage, https://github.com/artheras/aria-code
@@ -172,7 +172,7 @@ Numbers you can check, client data kept apart, actions a person approves.</p>
 <p align="center">
   <a href="https://www.npmjs.com/package/@artheras/aria-code"><img src="https://img.shields.io/npm/v/@artheras/aria-code/latest?style=flat-square&logo=npm&label=npm" alt="npm version"></a>
   <!-- Release automation pins PyPI: the default endpoint still selects legacy 4.x. -->
-  <a href="https://pypi.org/project/aria-code/0.140.0/"><img src="https://img.shields.io/badge/dynamic/json?url=https%3A%2F%2Fpypi.org%2Fpypi%2Faria-code%2F0.140.0%2Fjson&amp;query=%24.info.version&amp;prefix=v&amp;style=flat-square&amp;logo=pypi&amp;label=PyPI&amp;color=blue&amp;cacheSeconds=300" alt="PyPI version"></a>
+  <a href="https://pypi.org/project/aria-code/0.141.0/"><img src="https://img.shields.io/badge/dynamic/json?url=https%3A%2F%2Fpypi.org%2Fpypi%2Faria-code%2F0.141.0%2Fjson&amp;query=%24.info.version&amp;prefix=v&amp;style=flat-square&amp;logo=pypi&amp;label=PyPI&amp;color=blue&amp;cacheSeconds=300" alt="PyPI version"></a>
   <a href="https://github.com/artheras/aria-code/actions/workflows/ci.yml"><img src="https://img.shields.io/github/actions/workflow/status/artheras/aria-code/ci.yml?branch=main&style=flat-square&logo=githubactions&label=CI" alt="CI status"></a>
   <a href="LICENSE"><img src="https://img.shields.io/badge/license-Apache%202.0-64748b?style=flat-square" alt="Apache License 2.0"></a>
 </p>

{aria_code-0.140.0 → aria_code-0.141.0}/src/aria_code.egg-info/SOURCES.txt

@@ -162,6 +162,7 @@ src/aria_code/apps/cli/config_paths.py
 src/aria_code/apps/cli/config_store.py
 src/aria_code/apps/cli/constants.py
 src/aria_code/apps/cli/context.py
+src/aria_code/apps/cli/conversation_policy.py
 src/aria_code/apps/cli/deterministic.py
 src/aria_code/apps/cli/direct.py
 src/aria_code/apps/cli/earnings_view.py
@@ -600,6 +601,7 @@ tests/test_context_checkpoints.py
 tests/test_context_references.py
 tests/test_context_service.py
 tests/test_conversation_core.py
+tests/test_conversation_policy.py
 tests/test_crash_report.py
 tests/test_credential_file_permissions.py
 tests/test_custom_providers.py

aria_code-0.141.0/tests/test_conversation_policy.py

@@ -0,0 +1,94 @@
+import asyncio
+
+import pytest
+
+from aria_code.apps.cli.conversation_policy import is_social_message
+from aria_code.apps.cli.prompts.select import build_turn_system_prompt
+from aria_code.apps.cli.tool_scope import select_tool_schemas
+from aria_code.runtime.agent_loop import run_parallel_tools
+from aria_code.runtime.tool_executor import ToolExecutor
+
+
+@pytest.mark.parametrize("text", ["你好", "您好！", "你好 Aria", "Hello, Aria!", "THANK YOU", "再见。"])
+def test_standalone_social_messages_have_no_tools_or_project_context(text):
+    assert is_social_message(text)
+    schemas = [{"name": "list_files"}, {"name": "read_file"}]
+    assert select_tool_schemas(schemas, text) == []
+    prompt = build_turn_system_prompt(text, project_context="PRIVATE_WORKSPACE_CONTENT")
+    assert "PRIVATE_WORKSPACE_CONTENT" not in prompt
+    assert "repo_map" not in prompt
+
+
+@pytest.mark.parametrize("text", ["你好，读取 README.md", "Hello, fix my tests", "yes", "continue", "谢谢，继续修复", "hi.txt", "运行 ls"])
+def test_greetings_with_a_task_and_task_continuations_keep_their_tools(text):
+    assert not is_social_message(text)
+    assert select_tool_schemas([{"name": "read_file"}], text)
+
+
+def test_unsolicited_model_call_cannot_scan_files_during_a_greeting(monkeypatch, tmp_path):
+    from aria_code.apps.cli.providers import runtime_bridge as rb
+    scanned = []
+    settings = []
+    async def provider(prompt, history, **kwargs):
+        if not history:
+            return {"success": True, "response": "", "tool_calls_pending": [
+                {"tool": "list_files", "params": {"path": str(tmp_path)}}]}
+        return {"success": True, "response": "你好！"}
+    def factory(**kwargs):
+        settings.append(kwargs)
+        return provider
+    monkeypatch.setattr(rb, "make_provider_fn", factory)
+    config = {"acceptance_gate": True, "_session_workspace_root": str(tmp_path)}
+    result = asyncio.run(rb.run_chat_via_runtime(
+        prompt="你好", history=[], local_tools={"list_files": (lambda p: scanned.append(p) or {"success": True, "data": {"items": []}}, "List")},
+        tool_schemas=[{"name": "list_files"}], model="fixture", config=config,
+        api_url=None, ollama_url="", project_context="PRIVATE_WORKSPACE_CONTENT", max_rounds=3,
+    ))
+    assert result == "你好！"
+    assert scanned == []
+    assert settings[0]["tool_schemas"] == []
+    assert settings[0]["project_context"] is None
+    assert "_conversation_only" not in config
+
+
+def test_social_policy_also_blocks_remote_execution():
+    calls = []
+    async def remote(*args):
+        calls.append(args)
+        return {"success": True}
+    executor = ToolExecutor({}, remote_executor=remote, config={"_conversation_only": True})
+    assert not asyncio.run(executor.execute("external", {}))["success"]
+    assert not executor.execute_local("external", {})["success"]
+    assert calls == []
+
+
+def test_duplicate_parallel_reads_execute_once_but_new_round_reads_fresh(tmp_path):
+    file = tmp_path / "note.txt"
+    file.write_text("before")
+    calls = []
+    def read(params):
+        calls.append(params["path"])
+        return {"success": True, "data": {"content": file.read_text()}}
+    executor = ToolExecutor({"read_file": (read, "Read")})
+    pending = [{"tool": "read_file", "params": {"path": str(file)}} for _ in range(3)]
+    results = asyncio.run(run_parallel_tools(pending, executor))
+    assert len(calls) == 1 and len(results) == 3
+    assert results[1]["reused"] and results[2]["reused"]
+    results[1]["data"]["content"] = "modified result"
+    assert results[0]["data"]["content"] == "before"
+    file.write_text("after")
+    assert asyncio.run(run_parallel_tools(pending, executor))[0]["data"]["content"] == "after"
+    assert len(calls) == 2
+
+
+def test_different_read_targets_and_side_effects_are_not_coalesced():
+    calls = []
+    def handler(params):
+        from pathlib import Path
+        calls.append(Path(params["path"]).name)
+        return {"success": True}
+    executor = ToolExecutor({"read_file": (handler, "Read"), "custom": (handler, "Action")})
+    pending = [{"tool": tool, "params": {"path": path}} for tool, path in
+               [("read_file", "one"), ("read_file", "two"), ("custom", "same"), ("custom", "same")]]
+    asyncio.run(run_parallel_tools(pending, executor))
+    assert sorted(calls) == ["one", "same", "same", "two"]

{aria_code-0.140.0 → aria_code-0.141.0}/tests/test_exec_events.py

@@ -41,6 +41,15 @@ def test_a_file_body_is_reported_by_size():
     assert json.loads(out.getvalue())["params"] == {"path": "a.py", "content": "<5000 chars>"}
 
 
+def test_list_summary_reports_actual_returned_count_without_file_contents():
+    out = io.StringIO()
+    ExecEvents(out).tool_completed("list_files", {"success": True, "reused": True,
+        "data": {"path": "/project", "items": ["private-note", "second"], "count": 999}})
+    value = json.loads(out.getvalue())
+    assert value["item_count"] == 2 and value["reused"]
+    assert "private-note" not in out.getvalue()
+
+
 def test_no_stream_writes_nothing_and_odd_values_still_serialise():
     ExecEvents(None).emit("turn.started", prompt="x")
     path = Path("/a")