deepcode-hku 2.1.0__tar.gz → 2.2.0__tar.gz

{deepcode_hku-2.1.0 → deepcode_hku-2.2.0}/MANIFEST.in

@@ -24,3 +24,4 @@ global-exclude .git*
 global-exclude .history*
 global-exclude .ruff_cache*
 global-exclude __pycache__*
+recursive-include core/agent_presets/builtin *

{deepcode_hku-2.1.0/deepcode_hku.egg-info → deepcode_hku-2.2.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: deepcode-hku
-Version: 2.1.0
+Version: 2.2.0
 Summary: Open agentic coding with durable sessions, goals, and verification
 Home-page: https://github.com/HKUDS/DeepCode
 Author: DeepCode Team
@@ -37,7 +37,7 @@ Requires-Dist: openapi
 Requires-Dist: pathlib2
 Requires-Dist: prompt_toolkit>=3.0.0
 Requires-Dist: pydantic-settings>=2.14.2
-Requires-Dist: pypdf>=6.15.0
+Requires-Dist: pypdf>=6.16.1
 Requires-Dist: PyYAML>=6.0
 Requires-Dist: reportlab>=3.5.0
 Requires-Dist: rich>=13.0.0
@@ -88,6 +88,10 @@ Dynamic: summary
 
 ### *Advancing Code Generation with Multi-Agent Systems*
 
+<p align="center">
+  <a href="https://hkuds.github.io/DeepCode/" target="_blank"><img alt="Website — hkuds.github.io/DeepCode" src="https://img.shields.io/badge/Website-hkuds.github.io%2FDeepCode%20%E2%86%97-06B6D4?style=for-the-badge&labelColor=0B1116" height="36"></a>
+</p>
+
 <!-- <p align="center">
   <img src="https://img.shields.io/badge/Version-1.0.0-00d4ff?style=for-the-badge&logo=rocket&logoColor=white" alt="Version">
 
@@ -179,25 +183,28 @@ Skills, permissions, Goals, and Automations. See the
 - [📰 News](#news)
 - [🧠 What Deep means in DeepCode](#what-deep-means-in-deepcode)
 - [🚀 Core capabilities](#core-capabilities)
-  - [Agent Harness](#agent-harness)
-  - [Loop Engineering](#loop-engineering)
-  - [Context Engineering](#context-engineering)
+  - [Work directly in your repository](#work-directly-in-your-repository)
+  - [Goal-driven Loop Engineering](#goal-driven-loop-engineering)
   - [Evidence-driven completion](#evidence-driven-completion)
-  - [Durable local work](#durable-local-work)
-  - [Models and Skills under your control](#models-and-skills-under-your-control)
-  - [Parallel and repeatable work](#parallel-and-repeatable-work)
+  - [Durable Sessions and project context](#durable-sessions-and-project-context)
+  - [Your models, your reasoning settings](#your-models-your-reasoning-settings)
+  - [Reusable Skills](#reusable-skills)
+  - [Permissions you can understand](#permissions-you-can-understand)
+  - [Parallel agents without file collisions](#parallel-agents-without-file-collisions)
+  - [Automate repeatable engineering work](#automate-repeatable-engineering-work)
+  - [Paper2Code](#paper2code)
 - [⚡ Quick start](#quick-start)
 - [🧭 Using DeepCode](#using-deepcode)
 - [⚙️ Headless and automation](docs/HEADLESS_AND_AUTOMATION.md)
-- [🔬 Paper2Code](#paper2code)
+- [🔬 Paper2Code](#paper2code-1)
   - [The original architecture](#the-original-architecture)
   - [Research results](#research-results)
-- [🎬 Live demonstrations](#live-demonstrations)
+- [🎬 Live demonstrations](#-live-demonstrations)
 - [🛠️ Development](#development)
-- [⭐ Star History](#star-history)
-- [🙏 Appreciation](#contributors)
-- [📖 Citation](#citation)
-- [📄 License](#license)
+- [⭐ Star History](#-star-history)
+- [🙏 Appreciation](#-appreciation)
+- [📖 Citation](#-citation)
+- [📄 License](#-license)
 
 <p align="center">
   <img src="assets/readme/deepcode-overview.png" alt="A verified task completed with DeepCode" width="1080" />
@@ -205,6 +212,246 @@ Skills, permissions, Goals, and Automations. See the
 
 ## News
 
+**2026-09-06 · DeepCode v2.2.0: Session context-window caps, compaction that leaves a memory, and a fully localized Desktop**
+
+- **Cap a Session's context window.** `/context 64k` in the TUI or the
+  preset next to the Desktop model picker narrows the model's published
+  window for future Turns; the cap is frozen into each accepted Turn and
+  feeds the compaction gate directly. `/context auto` follows the model
+  again. (#203)
+- **Compaction leaves a note in memory, and memory notes cannot escape their
+  boundary.** A compaction summary is deposited into the workspace memory on
+  a background thread, and injected memory content is wrapped in an
+  `<untrusted-data>` boundary whose closing tags are escaped, so a poisoned
+  note cannot forge instructions. (#204)
+- **Appearance settings speak Simplified Chinese too**, completing the
+  Desktop shell's zh-CN coverage. (#202)
+
+**2026-09-03 · Desktop catalog race, an honest command screen, GLM-5.2, and two dependency bumps**
+
+- **Switching projects no longer strands the MCP catalog.** A probe or
+  mutation started in one project can no longer invalidate the load of the
+  project you switched to, so the catalog stops sticking in a loading state.
+  (#201)
+- **The legacy `execute_bash` screen matches on argv, not substrings.**
+  `rm -r -f`, `--recursive --force`, `chmod 0777` and a destructive stage
+  inside a pipeline are caught; `touch rm-rf-notes.txt` is not. It stays a
+  cheap first pass in front of the sandbox, which remains the boundary.
+  (#195)
+- **GLM-5.2 is in the model catalog** — 1M context, 128K output,
+  `reasoning_effort` `high` / `max`. (from #198)
+- **Security bumps:** `browserslist` past GHSA-c83g-rgw3-j3cx in the Desktop
+  toolchain, and the App Server sidecar's `pypdf` to 6.16.1
+  (CVE-2026-84309/84310/84311).
+
+**2026-08-28 · Community fixes: plugin credential warnings and a wider zh-CN Desktop**
+
+- **Agent Plugin manifests now warn about plaintext credentials.** Literal
+  `env` and `headers` values in a Plugin's `mcp.json` that look like secrets
+  produce a redacted warning instead of loading silently, and the docs point
+  to runtime credential bindings instead. (#194, landed 2026-08-27)
+- **Most of the Desktop shell speaks Simplified Chinese.** The thread header,
+  Goal rail, approval card, inspector, sidebar, and the Updates and
+  Diagnostics settings gained about a hundred zh-CN strings; English stays
+  the inline default. (#187)
+
+**2026-08-25 · Command executors close two bypasses**
+
+- **Case and whitespace no longer slip past the dangerous-command check**, and
+  the native `mkdir`/`touch`/`rm`/`cp`/`mv` fast path declines any operand
+  outside the working directory, so those commands run through the sandbox
+  like every other command instead of as in-process file operations. (#193)
+
+**2026-08-23 · Five repaired contributions land together**
+
+- **MCP servers can start lazily.** `deferLoading` keeps a server off until
+  the agent calls `activate_server`; deferred servers stay reachable and
+  cancellation-safe. (#184)
+- **Hooks see the whole lifecycle.** `SessionEnd` runs exactly once at
+  teardown and `PreCompact` can inject context before a compaction. (#172)
+- **Instruction files can be excluded, and the dangerous preset must be named
+  explicitly.** (#186)
+- **Windows private files get a fail-safe ACL**, applied once at creation
+  (#164); the Desktop sidecar's pip pin also moved past PYSEC-2026-3721 (#191).
+
+**2026-08-19 · Sessions that survive resume, compaction, and a second window**
+
+- **Resuming a session restores what the agent did, not only what it said.**
+  Tool calls and their results are part of the canonical record now, so a
+  resumed agent can answer "what did you just run?". A test makes the rule
+  executable: every request a run sends must be rebuildable from the session
+  file alone.
+- **Compaction keeps the recent tail.** The checkpoint replaces the older
+  range and everything recent survives verbatim — assistant messages and tool
+  results included — instead of dropping them and putting the summary last.
+  Manual `/compact` used to refuse almost every real conversation; it works,
+  and the checkpoint speaks as the model's own history, so it stops being
+  discounted as someone else's report.
+- **Context pressure is measured, not guessed.** The gate now anchors on the
+  size the provider itself reports. The built-in estimator prices Chinese
+  prose at more than twice its real cost, which was compacting Chinese
+  conversations at roughly half the context they could hold.
+- **Two windows on one Session no longer crash each other.** Each Session
+  now has one live writer, enforced by an OS lock held around a turn: the
+  second window gets a sentence naming who is running it, instead of a
+  process dying to a database constraint about half the time. Alternate
+  freely between Desktop and the terminal — just not mid-turn.
+
+**2026-08-18 · The runtime learns dsh's context discipline, and the TUI gets a face**
+
+- **A new turn no longer throws away the prompt cache.** The environment
+  block used to be re-inserted before your newest message every turn, so each
+  turn diverged from the previous request right where that block had been:
+  7,420 prompt tokens recomputed at every turn boundary, now 28.
+- **The TUI has a logo, a live status line, and tool cards that read.** A
+  spinner and a sweep while work runs, paths written the way you would type
+  them, the plan tool's checklist visible at last, and a turn footer with its
+  time and token usage. An idle TUI costs nothing to animate.
+- **A source-level comparison against dsh became a plan.** Where the message
+  list the model sees comes from, what compaction should keep, and what the
+  session record must contain — measured and written down, and four
+  unreferenced documents retired.
+
+**2026-08-17 · Fixes from a review pass over the new settings and TUI work**
+
+- **A declared model reads the same everywhere.** Per-model declarations now
+  shape the catalog a picker shows, not only what a Turn executes with, so a
+  context window you set to avoid overflow is the number you see.
+- **Adopting fetched models shows them immediately.** The catalog cache is
+  keyed on the settings that shape it, instead of serving the previous remote
+  listing for up to an hour.
+- **Escape closes one thing.** Dismissing the provider editor no longer tears
+  down the settings dialog around it and discards a half-typed key.
+- **A removed model row takes its own capacities with it** rather than leaving
+  them on the row that survived — which then saved them onto the wrong model.
+- **Automated runs keep their tools.** A default agent preset chosen for
+  interactive chatting no longer narrows `deepcode exec` and goal runs behind
+  your back.
+- **The provider section says it is user-scoped**, instead of letting the
+  dialog's project write scope imply otherwise.
+
+**2026-08-16 · The TUI answers every bare command with a selector**
+
+- **Type the command, pick from a list.** `/model` now opens the full model
+  directory — every configured connection's catalog (remote snapshot or
+  declared entries, near a thousand rows on OpenRouter) in one filterable
+  selector with the current route pinned first and each model's published
+  reasoning ladder on Shift+Tab; Enter commits model and effort together.
+  `/preset`, `/effort`, `/permissions`, `/transcript` and `/skill` join
+  `/resume`: a bare invocation opens a picker with the current choice
+  marked, while argument forms and piped runs keep their text paths.
+- **Background tracebacks can no longer shred the transcript.** Stdlib
+  logging is bridged into loguru with call-site fidelity, so file-only
+  transports really are file-only; and the durable event relay backs off
+  exponentially on persistent failure — one traceback per streak, one-line
+  repeats, a recovery notice.
+
+**2026-08-15 · Settings grow up: a dsh-style dialog, declared models, and a safer config**
+
+- **A connection's key now reaches exactly the requests it was resolved
+  for.** Building a provider no longer exports the key into the process
+  environment, where every same-template connection could pick it up as its
+  own; removing a provider un-configures every key source instead of letting
+  it reappear; and when a launch environment variable shadows a pasted key,
+  the editor says which one and that it wins. Verification also works from
+  async hosts now.
+- **The agent-preset picker grew up.** A menu with per-preset descriptions
+  and trust marking replaces the cramped native dropdown, the duplicate
+  "Default" row is gone, and a started session shows a read-only label of
+  what it runs.
+- **Manage what each connection actually serves.** The provider editor can
+  fetch the live model list from a connection's endpoint and adopt picked
+  models as its manual list, an environment-provided key locks the paste
+  field instead of silently outranking it, and connection rows show the
+  discovered model count.
+- **`deepcode chat` reads like a terminal app, not a log.** A restyled
+  transcript — brand-gradient banner, status-colored tool cards with result
+  elbows, block spacing, word-boundary wrapping — plus streaming that
+  survives the prompt redraw with real colors instead of `?[36m` litter.
+- **Desktop Settings became a dsh-style dialog.** General / Models /
+  Plugins / Agent presets in a left rail, with Open configuration file and
+  the write-scope picker in the header. General gains the five canonical
+  rows — default agent preset for new sessions (applied as a by-value
+  snapshot at creation, CLI and TUI included), permissions, language
+  (English/中文, first translated batch), Light/Dark/System appearance
+  cards, and a steer-or-queue busy-Enter preference.
+- **Models are declarations now.** `manualModels` entries can carry a
+  label, capacities, and the published reasoning ladder; declarations are
+  authoritative offline for execution profiles and every picker. Discovery
+  probes the editor form as shown — unsaved URL or key included — and
+  adopted picks land as accurate declaration rows. Config writes gained
+  optimistic concurrency (a changed file conflicts instead of being
+  clobbered) and a settings.changed push keeps an open dialog fresh.
+- **Session and model commands now hold up.** `/resume` and `/model` open
+  an inline selector — type to filter by title, arrows move, Enter picks,
+  Tab flips directory scope, Shift+Tab cycles the route's published
+  reasoning effort — and resume replays the conversation tail. Bare model
+  names resolve their connection, typos no longer kill the REPL, and
+  `/compact` summarizes with the model you actually selected. New verbs:
+  `/rename`, `/delete`, `/retry`, with tab completion for session ids,
+  transcript modes, permission presets, and effort levels.
+
+<details>
+<summary><strong>Earlier August 2026 updates</strong></summary>
+
+**2026-08-14 · Subagent runtime, compaction, and one-way persistence**
+
+- **Delegate to Codex or Claude Code as a subagent.** `spawn_agent` gains
+  external backends that run the installed CLI with a scrubbed environment and
+  strict success criteria, while native subagents gain personas, validated
+  tool allowlists, JSON output schemas, follow-up conversation via
+  `send_message`, and full transcripts in the parent session.
+- **Guard the loop.** Tools can declare timeouts the runner enforces, and a
+  repeat-call tracker injects an escalating, model-visible reminder when
+  identical calls repeat.
+- **Compact on demand.** `/compact` summarizes older turns in the resident
+  context; every refusal is a stable, readable reason (busy Turn, too little
+  history, a failed or non-shrinking summary) and canonical session data is
+  never touched.
+- **See which file sets every configuration value.** Diagnostics report each
+  configured leaf with its providing layer and a bounded preview;
+  credential-shaped subtrees are redacted whole. A verbatim deepseek-harness
+  Skill also loads unchanged from `.agents/skills`.
+- **Relieve context pressure with the cheapest sufficient measure.** Under
+  pressure the runtime first middle-prunes oversized tool results — a free,
+  convergent pass covering MCP and custom tools alike — and only summarizes
+  if that is not enough; the summarization call replays the routed request as
+  a genuine prefix so provider prompt caching is reused, and a summary that
+  would not shrink the conversation is rejected.
+- **Deleted sessions stay deleted.** The Desktop projection no longer adopts
+  a thread back into canonical storage unless SQLite genuinely owns it
+  (legacy import or automation bootstrap), and every mid-turn message the
+  model sees — goal updates, recovery prompts, injected results — now lands
+  in the canonical session log, so a resumed session rebuilds exactly the
+  history the model saw.
+- **Open a session as a different agent.** Named agent presets bundle a
+  persona and a tool face — `deepcode exec --preset code-reader`, `/preset`
+  in the TUI, or the picker beside the Desktop model control — while the
+  model route and permissions stay independent knobs. A preset is one
+  markdown agent file in the `.claude/agents`/`.agents` dialect, so
+  definitions written for other harnesses load unchanged; the resolved
+  composition is snapshotted into the session record and locked once the
+  conversation starts, at which point the Desktop picker becomes a
+  read-only label of what the session runs.
+
+**2026-08-13 · Desktop typography, themes, and native controls**
+
+- **Make the type-size preference actually resize the app.** Every interface
+  size now derives from one rem-based scale, so the Appearance slider moves the
+  whole window. It previously moved almost nothing: 255 hardcoded pixel values
+  ignored it, and the smallest labels sat at 7px.
+- **Pick from eight themes, including high contrast.** Light, Dark, Paper, and
+  Midnight are joined by two terracotta palettes and a WCAG AAA high-contrast
+  option. Tests compare each palette against the complete token set, so a theme
+  cannot half-apply and leave a stray default showing through.
+- **See one design language rather than the operating system's.** Sliders,
+  selects, and focus rings now follow the active theme instead of falling back
+  to platform chrome, and an explicit theme choice moves `color-scheme` with it
+  so native controls stop rendering in the OS scheme.
+- **Read the quiet text.** The light palette's secondary tones and every accent
+  colour were refitted to clear WCAG AA against the surfaces they actually sit
+  on, several of which previously measured under 3:1.
+
 **2026-08-12 · Reviewed upstream core Skills**
 
 - **Start with reviewed upstream Skills.** DeepCode now bundles eight pinned,
@@ -342,6 +589,8 @@ DeepCode v2.0 is built to help you spend less time supervising every step and
 more time shipping software you are proud of. We cannot wait to see what you
 build! 🚀
 
+</details>
+
 <details>
 <summary><strong>Earlier 2026 milestones</strong></summary>
 
@@ -704,6 +953,10 @@ Open **Settings → AI providers** after Desktop starts.
 
 ## Using DeepCode
 
+Prefer a guided walkthrough? The [teaching guides](docs/guide/README.md) cover
+the same ground page by page — first session, the TUI, sessions, models,
+skills and memory, and headless automation — with worked examples.
+
 ### Sessions
 
 Every task lives in a durable Session attached to its original Project. Open a
@@ -719,14 +972,22 @@ and CLI without export or conversion.
 | Attach a file | Use the composer attachment | `@path/to/file` |
 | Change the next Turn's model | Composer model picker | `/model` |
 | Adjust Thinking effort | Composer effort picker | `/effort` |
+| Cap the Session context window | Model picker context control | `/context` |
 | Choose tool access | Composer access picker | `/permissions` |
 | Load Skills for the next Turn | Composer Skills control | `/skill <name>` |
 | Create a reusable Skill | **Skills → Create Skill** | `$skill-creator` |
 | Set or revise a durable Goal | Goal panel | `/goal` |
+| Queue the next instruction | Composer while a Turn runs | `/queue <text>` |
 | Stop the active Turn | Use the stop control | `/stop` |
+| Re-run the last Turn | Retry control on the Turn | `/retry` |
+| Compact a long conversation | Automatic under pressure | `/compact` (also automatic) |
+| Change transcript detail | — | `/transcript` or `Ctrl+O` |
+| Rename or delete a Session | Session context menu | `/rename <title>` · `/delete <id>` |
 
 Session history, tool activity, approvals, Goal state, and verification evidence
-remain together. Archiving hides a Session without deleting its history;
+remain together. A Session has one live writer at a time: Desktop and the CLI
+may hold it open together, but if one is mid-Turn the other refuses new input
+with a message naming the holder instead of corrupting shared history. Archiving hides a Session without deleting its history;
 permanent deletion removes the Session records but never repository files.
 
 ### Connections and models
@@ -734,6 +995,9 @@ permanent deletion removes the Session records but never repository files.
 Desktop provides connection setup and verification under **Settings → AI
 providers**. In the CLI, `/model` changes the connection and model for future
 Turns, while `/effort` selects a Thinking level supported by that model.
+Use the model picker's context control, or `/context 64k` in the TUI, to make
+future Turns compact history sooner; `/context auto` restores the model's
+published window.
 
 Model changes never rewrite earlier history or alter an active Turn. Thinking
 effort controls the request sent to the provider; transcript detail controls