noah-code 0.1.0__tar.gz

noah_code-0.1.0/.github/workflows/ci.yml

@@ -0,0 +1,92 @@
+name: CI
+
+on:
+  pull_request:
+  push:
+    branches:
+      - main
+
+permissions:
+  contents: read
+
+jobs:
+  quality:
+    name: Python ${{ matrix.python-version }} quality
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version:
+          - "3.12"
+          - "3.13"
+    steps:
+      - name: Check out source
+        uses: actions/checkout@v7
+        with:
+          persist-credentials: false
+
+      - name: Install uv and Python
+        uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
+        with:
+          enable-cache: true
+          python-version: ${{ matrix.python-version }}
+
+      - name: Install locked dependencies
+        run: uv sync --locked --all-extras --dev
+
+      - name: Check lock file
+        run: uv lock --check
+
+      - name: Lint
+        run: uv run ruff check src tests
+
+      - name: Test
+        run: uv run pytest tests
+
+      - name: Build distributions
+        run: uv build --out-dir build-dist
+
+  platform:
+    name: ${{ matrix.name }} smoke test
+    runs-on: ${{ matrix.runner }}
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - name: Linux x86_64
+            runner: ubuntu-latest
+          - name: Linux arm64
+            runner: ubuntu-24.04-arm
+          - name: macOS arm64
+            runner: macos-15
+          - name: macOS x86_64
+            runner: macos-15-intel
+    steps:
+      - name: Check out source
+        uses: actions/checkout@v7
+        with:
+          persist-credentials: false
+
+      - name: Install uv and Python
+        uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
+        with:
+          enable-cache: true
+          python-version: "3.12"
+
+      - name: Install locked dependencies
+        run: uv sync --locked --all-extras --dev
+
+      - name: Run tests
+        run: uv run pytest tests
+
+      - name: Verify command entry point
+        run: uv run noah --version
+
+      - name: Verify binary-only public installation
+        env:
+          UV_TOOL_DIR: ${{ runner.temp }}/noah-tools
+          UV_TOOL_BIN_DIR: ${{ runner.temp }}/noah-bin
+        run: |
+          uv build --out-dir smoke-dist
+          uv tool install --managed-python --python 3.12 --no-build --with 'nooa[mcp,tracing]==0.0.8' smoke-dist/*.whl
+          "${UV_TOOL_BIN_DIR}/noah" --version

noah_code-0.1.0/.github/workflows/release.yml

@@ -0,0 +1,127 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - "v*"
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    name: Build and verify distributions
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check out tagged source
+        uses: actions/checkout@v7
+        with:
+          persist-credentials: false
+
+      - name: Install uv and Python
+        uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
+        with:
+          enable-cache: true
+          python-version: "3.13"
+
+      - name: Verify tag and package versions
+        env:
+          RELEASE_TAG: ${{ github.ref_name }}
+        run: |
+          python - <<'PY'
+          import os
+          import pathlib
+          import tomllib
+
+          tag_version = os.environ["RELEASE_TAG"].removeprefix("v")
+          project_version = tomllib.loads(pathlib.Path("pyproject.toml").read_text())["project"]["version"]
+          namespace = {}
+          exec(pathlib.Path("src/noah_code/__init__.py").read_text(), namespace)
+          package_version = namespace["__version__"]
+          if tag_version != project_version or tag_version != package_version:
+              raise SystemExit(
+                  f"version mismatch: tag={tag_version}, project={project_version}, package={package_version}"
+              )
+          PY
+
+      - name: Install locked dependencies
+        run: uv sync --locked --all-extras --dev
+
+      - name: Run release checks
+        run: |
+          uv run ruff check src tests
+          uv run pytest tests
+          uv lock --check
+
+      - name: Build wheel and source distribution
+        run: uv build
+
+      - name: Validate package metadata
+        run: uvx twine check dist/*
+
+      - name: Verify binary-only public installation
+        env:
+          UV_TOOL_DIR: ${{ runner.temp }}/noah-tools
+          UV_TOOL_BIN_DIR: ${{ runner.temp }}/noah-bin
+        run: |
+          uv tool install --managed-python --python 3.12 --no-build --with 'nooa[mcp,tracing]==0.0.8' dist/*.whl
+          "${UV_TOOL_BIN_DIR}/noah" --version
+
+      - name: Upload release distributions
+        uses: actions/upload-artifact@v5
+        with:
+          name: python-package-distributions
+          path: dist/
+          if-no-files-found: error
+          retention-days: 7
+
+  publish-pypi:
+    name: Publish to PyPI
+    needs: build
+    runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/p/noah-code
+    permissions:
+      id-token: write
+    steps:
+      - name: Download release distributions
+        uses: actions/download-artifact@v6
+        with:
+          name: python-package-distributions
+          path: dist
+
+      - name: Publish with PyPI Trusted Publishing
+        uses: pypa/gh-action-pypi-publish@release/v1
+
+  github-release:
+    name: Create GitHub release
+    needs:
+      - build
+      - publish-pypi
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      id-token: write
+      attestations: write
+    steps:
+      - name: Download release distributions
+        uses: actions/download-artifact@v6
+        with:
+          name: python-package-distributions
+          path: dist
+
+      - name: Generate checksums
+        working-directory: dist
+        run: sha256sum * > SHA256SUMS
+
+      - name: Attest release artifacts
+        uses: actions/attest@v4
+        with:
+          subject-path: dist/*
+
+      - name: Create release and upload assets
+        env:
+          GH_TOKEN: ${{ github.token }}
+          RELEASE_TAG: ${{ github.ref_name }}
+        run: gh release create "$RELEASE_TAG" dist/* --verify-tag --generate-notes --title "$RELEASE_TAG"

noah_code-0.1.0/.gitignore

@@ -0,0 +1,13 @@
+.venv/
+__pycache__/
+*.py[cod]
+.pytest_cache/
+.ruff_cache/
+.mypy_cache/
+dist/
+build/
+*.egg-info/
+.coverage
+htmlcov/
+traces/
+.DS_Store

noah_code-0.1.0/PKG-INFO

@@ -0,0 +1,173 @@
+Metadata-Version: 2.4
+Name: noah-code
+Version: 0.1.0
+Summary: Noah Code terminal coding agent, built on NVIDIA OO Agents (NOOA)
+Project-URL: Homepage, https://github.com/skundu42/noah-code
+Project-URL: Documentation, https://github.com/skundu42/noah-code#readme
+Project-URL: Repository, https://github.com/skundu42/noah-code.git
+Project-URL: Issues, https://github.com/skundu42/noah-code/issues
+Project-URL: Releases, https://github.com/skundu42/noah-code/releases
+Author: noah-code contributors
+License: Apache-2.0
+Keywords: agents,coding,nooa,terminal
+Classifier: Development Status :: 3 - Alpha
+Classifier: Environment :: Console
+Classifier: License :: OSI Approved :: Apache Software License
+Classifier: Operating System :: MacOS
+Classifier: Operating System :: POSIX :: Linux
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: Software Development
+Requires-Python: <3.14,>=3.12
+Requires-Dist: click>=8.1.0
+Requires-Dist: litellm<1.92.0,>=1.84.0
+Requires-Dist: nooa-cli==0.0.8
+Requires-Dist: nooa==0.0.8
+Requires-Dist: packaging>=24.0
+Requires-Dist: pydantic>=2.5.0
+Requires-Dist: rich>=13.0.0
+Requires-Dist: textual>=1.0.0
+Requires-Dist: tomli>=2.0.0; python_version < '3.11'
+Provides-Extra: dev
+Requires-Dist: pytest-asyncio>=0.24.0; extra == 'dev'
+Requires-Dist: pytest>=8.0.0; extra == 'dev'
+Requires-Dist: ruff>=0.8.0; extra == 'dev'
+Provides-Extra: mcp
+Requires-Dist: nooa[mcp]==0.0.8; extra == 'mcp'
+Provides-Extra: tracing
+Requires-Dist: nooa[tracing]==0.0.8; extra == 'tracing'
+Provides-Extra: tui
+Requires-Dist: textual>=1.0.0; extra == 'tui'
+Description-Content-Type: text/markdown
+
+# Noah Code
+
+[![PyPI](https://img.shields.io/pypi/v/noah-code.svg)](https://pypi.org/project/noah-code/)
+[![CI](https://github.com/skundu42/noah-code/actions/workflows/ci.yml/badge.svg)](https://github.com/skundu42/noah-code/actions/workflows/ci.yml)
+[![Python](https://img.shields.io/pypi/pyversions/noah-code.svg)](https://pypi.org/project/noah-code/)
+
+**Noah Code** (`noah-code`) is a terminal coding agent for understanding repositories, planning
+changes, editing files, running commands, and carrying work across persistent sessions. It is
+built on the [NVIDIA OO Agents (NOOA)](https://github.com/NVIDIA-NeMo/labs-OO-Agents) runtime.
+
+## Install
+
+Install Noah Code and its managed Python runtime with one command. No existing Python, Homebrew,
+or system package setup is required.
+
+```bash
+curl -LsSf https://raw.githubusercontent.com/skundu42/noah-code/main/install.sh | sh
+```
+
+The bootstrapper validates macOS/Linux support, installs the standalone uv package manager, and
+downloads an isolated Python 3.12 runtime plus Noah Code. It does not modify a system Python.
+
+Open a new terminal, move into a repository, and run:
+
+```bash
+noah .
+```
+
+Noah Code supports macOS on Apple Silicon and Intel, plus Linux on arm64 and x86_64 with Landlock
+and seccomp support. You also need an LLM provider account such as OpenAI, Anthropic, OpenRouter or NVIDIA.
+
+## Features
+
+- Read files, search with ripgrep, and inspect Git status, diffs, and history.
+- Edit files with anchored replacements, full rewrites, and concurrent-change detection.
+- Run permission-gated shell commands with timeouts and streamed output.
+- Follow repository instructions from `AGENTS.md`, `CLAUDE.md`, and `.noah-code/instructions.md`.
+- Switch between implementation-focused **build** mode and read-only **plan** mode.
+- Approve actions once or for a session with ordered `allow`, `ask`, and `deny` rules.
+- Undo and redo journaled file edits across process restarts.
+- Work in a full-screen TUI, a classic console, or one-shot non-interactive mode.
+- Resume workspace-scoped sessions with todos and automatic context compaction.
+- Extend workflows with slash commands, opt-in skills, MCP servers, model selection, and tracing.
+
+## Quick start
+
+Start the TUI in the current repository and describe the desired end state in plain language:
+
+```bash
+noah .
+```
+
+```text
+Find the cause of the failing parser tests, implement the smallest safe fix, and run the
+focused test file.
+```
+
+Common commands:
+
+```bash
+# Open another workspace
+noah /path/to/repository
+
+# Use the line-oriented console
+noah --console .
+
+# Run one task and exit
+noah run "Explain how authentication is wired" .
+
+# Allow actions that would normally ask; explicit deny rules still apply
+noah run --auto "Fix the failing unit test" .
+
+# Inspect and plan without editing
+noah --mode plan .
+
+# Resume work
+noah --continue .
+noah --session SESSION_ID .
+```
+
+Check the installation or inspect resolved configuration with:
+
+```bash
+noah --version
+noah doctor .
+noah config show .
+noah update --check
+```
+
+The package also installs `noah-code` and `nc` as equivalent entry points. Because `nc` commonly
+refers to netcat, `noah` or `noah-code` is recommended. Keep provider API keys in the environment
+or trusted NOOA user configuration, never in a repository or Noah Code session metadata.
+
+## Documentation
+
+- [Interactive interface and sessions](docs/interactive-reference.md)
+- [Configuration, modes, permissions, and updates](docs/configuration.md)
+- [Generated-code security](docs/security.md)
+- [Custom commands, skills, MCP, and tracing](docs/extensions.md)
+- [Development, CI, and releases](docs/development.md)
+
+## Updates
+
+Noah Code checks PyPI for new versions at most once every 24 hours and updates uv-managed
+installations automatically. To check or update immediately:
+
+```bash
+noah update --check
+noah update
+```
+
+## Development
+
+```bash
+uv sync --extra dev
+uv run ruff check src tests
+uv run pytest tests
+uv build
+```
+
+See the [development guide](docs/development.md) for platform checks and the release process.
+
+## License
+
+Apache-2.0, as declared in the project metadata. NOOA remains separately licensed by its upstream
+project.
+
+## Credits
+
+Built on [NVIDIA OO Agents (NOOA)](https://github.com/NVIDIA-NeMo/labs-OO-Agents). Thanks to the
+NVIDIA NeMo team and NOOA contributors for the agent runtime that powers Noah Code.

noah_code-0.1.0/README.md

@@ -0,0 +1,131 @@
+# Noah Code
+
+[![PyPI](https://img.shields.io/pypi/v/noah-code.svg)](https://pypi.org/project/noah-code/)
+[![CI](https://github.com/skundu42/noah-code/actions/workflows/ci.yml/badge.svg)](https://github.com/skundu42/noah-code/actions/workflows/ci.yml)
+[![Python](https://img.shields.io/pypi/pyversions/noah-code.svg)](https://pypi.org/project/noah-code/)
+
+**Noah Code** (`noah-code`) is a terminal coding agent for understanding repositories, planning
+changes, editing files, running commands, and carrying work across persistent sessions. It is
+built on the [NVIDIA OO Agents (NOOA)](https://github.com/NVIDIA-NeMo/labs-OO-Agents) runtime.
+
+## Install
+
+Install Noah Code and its managed Python runtime with one command. No existing Python, Homebrew,
+or system package setup is required.
+
+```bash
+curl -LsSf https://raw.githubusercontent.com/skundu42/noah-code/main/install.sh | sh
+```
+
+The bootstrapper validates macOS/Linux support, installs the standalone uv package manager, and
+downloads an isolated Python 3.12 runtime plus Noah Code. It does not modify a system Python.
+
+Open a new terminal, move into a repository, and run:
+
+```bash
+noah .
+```
+
+Noah Code supports macOS on Apple Silicon and Intel, plus Linux on arm64 and x86_64 with Landlock
+and seccomp support. You also need an LLM provider account such as OpenAI, Anthropic, OpenRouter or NVIDIA.
+
+## Features
+
+- Read files, search with ripgrep, and inspect Git status, diffs, and history.
+- Edit files with anchored replacements, full rewrites, and concurrent-change detection.
+- Run permission-gated shell commands with timeouts and streamed output.
+- Follow repository instructions from `AGENTS.md`, `CLAUDE.md`, and `.noah-code/instructions.md`.
+- Switch between implementation-focused **build** mode and read-only **plan** mode.
+- Approve actions once or for a session with ordered `allow`, `ask`, and `deny` rules.
+- Undo and redo journaled file edits across process restarts.
+- Work in a full-screen TUI, a classic console, or one-shot non-interactive mode.
+- Resume workspace-scoped sessions with todos and automatic context compaction.
+- Extend workflows with slash commands, opt-in skills, MCP servers, model selection, and tracing.
+
+## Quick start
+
+Start the TUI in the current repository and describe the desired end state in plain language:
+
+```bash
+noah .
+```
+
+```text
+Find the cause of the failing parser tests, implement the smallest safe fix, and run the
+focused test file.
+```
+
+Common commands:
+
+```bash
+# Open another workspace
+noah /path/to/repository
+
+# Use the line-oriented console
+noah --console .
+
+# Run one task and exit
+noah run "Explain how authentication is wired" .
+
+# Allow actions that would normally ask; explicit deny rules still apply
+noah run --auto "Fix the failing unit test" .
+
+# Inspect and plan without editing
+noah --mode plan .
+
+# Resume work
+noah --continue .
+noah --session SESSION_ID .
+```
+
+Check the installation or inspect resolved configuration with:
+
+```bash
+noah --version
+noah doctor .
+noah config show .
+noah update --check
+```
+
+The package also installs `noah-code` and `nc` as equivalent entry points. Because `nc` commonly
+refers to netcat, `noah` or `noah-code` is recommended. Keep provider API keys in the environment
+or trusted NOOA user configuration, never in a repository or Noah Code session metadata.
+
+## Documentation
+
+- [Interactive interface and sessions](docs/interactive-reference.md)
+- [Configuration, modes, permissions, and updates](docs/configuration.md)
+- [Generated-code security](docs/security.md)
+- [Custom commands, skills, MCP, and tracing](docs/extensions.md)
+- [Development, CI, and releases](docs/development.md)
+
+## Updates
+
+Noah Code checks PyPI for new versions at most once every 24 hours and updates uv-managed
+installations automatically. To check or update immediately:
+
+```bash
+noah update --check
+noah update
+```
+
+## Development
+
+```bash
+uv sync --extra dev
+uv run ruff check src tests
+uv run pytest tests
+uv build
+```
+
+See the [development guide](docs/development.md) for platform checks and the release process.
+
+## License
+
+Apache-2.0, as declared in the project metadata. NOOA remains separately licensed by its upstream
+project.
+
+## Credits
+
+Built on [NVIDIA OO Agents (NOOA)](https://github.com/NVIDIA-NeMo/labs-OO-Agents). Thanks to the
+NVIDIA NeMo team and NOOA contributors for the agent runtime that powers Noah Code.

noah_code-0.1.0/docs/configuration.md

@@ -0,0 +1,126 @@
+# Configuration, permissions, and updates
+
+## Configuration
+
+Configuration is merged in this order, with later layers taking precedence:
+
+1. Built-in defaults.
+2. User config at `~/.config/noah-code/config.toml`.
+3. Project config at `.noah-code/config.toml`.
+4. `NOAH_CODE_*` environment variables.
+5. CLI flags.
+
+Example user configuration:
+
+```toml
+model = "gpt-4o-mini"
+lightweight_model = "gpt-4o-mini"
+mode = "build"
+max_iterations = 40
+cell_timeout = 120
+command_timeout = 60
+
+[ui]
+frontend = "tui"       # "tui" or "console"
+markdown = true
+stream_shell = true
+show_reasoning = false
+
+[summarization]
+policy = "token_budget" # or "none"
+preserve_recent = 10
+target_chars = 4000
+
+[tracing]
+enabled = true
+viewer = true
+# jsonl_dir = "~/.local/share/noah-code/traces"
+
+[updates]
+auto_install = true
+interval_hours = 24
+```
+
+Supported environment overrides include:
+
+- `NOAH_CODE_MODEL`
+- `NOAH_CODE_LIGHTWEIGHT_MODEL`
+- `NOAH_CODE_AUTO`
+- `NOAH_CODE_SESSION_DIR`
+- `NOAH_CODE_MODE`
+- `NOAH_CODE_UNSAFE_INPROCESS`
+- `NOAH_CODE_AUTO_UPDATE`
+
+Repository-controlled configuration cannot weaken the host trust boundary. Project config is
+ignored for `auto_approve`, `enabled_skills`, `mcp`, `permission_rules`, `session_dir`, `tracing`,
+`updates`, and `unsafe_inprocess_code_execution`. Put those settings in trusted user config, the
+environment, or an explicit CLI flag.
+
+A user-configured `permission_rules` array replaces the default rule array. Copy forward every
+default you still want before adding overrides. Hard secret, destructive-shell, and plan-mode
+gates remain enforced in code.
+
+Inspect the resolved configuration with:
+
+```bash
+noah config show .
+```
+
+Model and provider configuration follows NOOA conventions, including its model registry,
+environment variables, and configuration under `~/.config/nooa/`.
+
+## Modes and permissions
+
+| Mode | Behavior |
+|------|----------|
+| `build` | Reads are allowed; edits and shell commands follow permission rules and ask by default |
+| `plan` | Reads are allowed; file edits and mutating shell commands are denied |
+
+Switch modes with `--mode`, `/mode build`, or `/mode plan`. The active mode is stored with the
+session.
+
+Permission rules are evaluated in order, and the last matching rule wins. The default policy:
+
+- Allows ordinary reads.
+- Denies likely secrets, including `.env` variants, private keys, `.git` internals, and session
+  databases. `.env.example` remains readable.
+- Asks before workspace edits and shell commands.
+- Denies `git push`, `git clean`, and `git reset --hard`.
+- Keeps file tools inside the active workspace and asks before skill or MCP access.
+- Denies plan-mode mutations regardless of broader allow rules.
+
+`--auto` changes ask decisions to allow but never overrides an explicit deny. Compound shell
+commands and mutating or unrecognized Git commands cannot be silently auto-approved.
+
+## Installation and updates
+
+The README executes the checked-in bootstrapper directly from GitHub. From a local clone, run the
+same installer with:
+
+```bash
+sh install.sh
+```
+
+Installs created by the one-line command check PyPI at most once every 24 hours and install newer
+Noah Code releases through uv. When an update is installed, Noah exits before starting the task
+so it cannot mix old and new runtime modules. Rerun the command to continue on the new version.
+
+```bash
+# Check without changing the installation
+noah update --check
+
+# Update immediately
+noah update
+```
+
+Disable automatic installation from trusted user configuration or the environment:
+
+```toml
+[updates]
+auto_install = false
+interval_hours = 24
+```
+
+```bash
+export NOAH_CODE_AUTO_UPDATE=0
+```