noah-code 0.2.2__tar.gz → 0.2.3__tar.gz

{noah_code-0.2.2 → noah_code-0.2.3}/.github/workflows/ci.yml

@@ -9,10 +9,15 @@ on:
 permissions:
   contents: read
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   quality:
     name: Python ${{ matrix.python-version }} quality
     runs-on: ubuntu-latest
+    timeout-minutes: 30
     strategy:
       fail-fast: false
       matrix:
@@ -46,7 +51,17 @@ jobs:
       - name: Lint
         run: uv run ruff check src tests
 
+      - name: Type check
+        run: uv run mypy src/noah_code
+
+      - name: Test with coverage (3.12 only)
+        if: matrix.python-version == '3.12'
+        run: |
+          uv run pytest tests --cov=noah_code --cov-report=term-missing \
+            --cov-fail-under=70 -W error::pytest.PytestUnraisableExceptionWarning
+
       - name: Test
+        if: matrix.python-version != '3.12'
         run: uv run pytest tests -W error::pytest.PytestUnraisableExceptionWarning
 
       - name: Build distributions
@@ -55,6 +70,7 @@ jobs:
   platform:
     name: ${{ matrix.name }} smoke test
     runs-on: ${{ matrix.runner }}
+    timeout-minutes: 40
     strategy:
       fail-fast: false
       matrix:

{noah_code-0.2.2 → noah_code-0.2.3}/.gitignore

@@ -11,3 +11,6 @@ build/
 htmlcov/
 traces/
 .DS_Store
+docs/superpowers/plans/
+docs/superpowers/specs/
+.noah-code/

noah_code-0.2.3/.pre-commit-config.yaml

@@ -0,0 +1,8 @@
+# Pre-commit hooks mirroring the CI lint gate.
+# Install with: uv run pre-commit install  (or `pre-commit install` once installed)
+repos:
+  - repo: https://github.com/astral-sh/ruff-pre-commit
+    rev: v0.16.1
+    hooks:
+      - id: ruff-check
+        args: [--fix]

{noah_code-0.2.2 → noah_code-0.2.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: noah-code
-Version: 0.2.2
+Version: 0.2.3
 Summary: Noah Code terminal coding agent, built on NVIDIA OO Agents (NOOA)
 Project-URL: Homepage, https://github.com/skundu42/noah-code
 Project-URL: Documentation, https://github.com/skundu42/noah-code#readme
@@ -28,9 +28,10 @@ Requires-Dist: pydantic>=2.5.0
 Requires-Dist: pyyaml>=6.0.0
 Requires-Dist: rich>=13.0.0
 Requires-Dist: textual>=1.0.0
-Requires-Dist: tomli>=2.0.0; python_version < '3.11'
 Provides-Extra: dev
+Requires-Dist: mypy>=1.13.0; extra == 'dev'
 Requires-Dist: pytest-asyncio>=0.24.0; extra == 'dev'
+Requires-Dist: pytest-cov>=5.0.0; extra == 'dev'
 Requires-Dist: pytest>=8.0.0; extra == 'dev'
 Requires-Dist: ruff>=0.8.0; extra == 'dev'
 Provides-Extra: mcp
@@ -45,7 +46,7 @@ Description-Content-Type: text/markdown
 
 # Noah Code
 
-**A terminal coding harness built on NVIDIA's NOAA framework**
+**A terminal coding agent built on NVIDIA's NOAA framework**
 
 [![PyPI](https://img.shields.io/pypi/v/noah-code.svg)](https://pypi.org/project/noah-code/)
 [![CI](https://github.com/skundu42/noah-code/actions/workflows/ci.yml/badge.svg)](https://github.com/skundu42/noah-code/actions/workflows/ci.yml)
@@ -57,9 +58,9 @@ Description-Content-Type: text/markdown
 
 <p align="center"><sub>The real Textual interface, captured from a deterministic Noah Code session.</sub></p>
 
-Noah keeps the conversation central while the context rail tracks the workspace, model, session,
-token usage, and current plan. Tool execution stays visible, completed work compacts into readable
-records, and every session remains scoped to its repository.
+Noah keeps the conversation central while the context rail tracks live work, Git changes, session,
+model usage, and the current plan. Tool execution stays visible, completed work compacts into
+readable records, and every session remains scoped to its repository.
 
 Built on the [NVIDIA OO Agents (NOOA)](https://github.com/NVIDIA-NeMo/labs-OO-Agents) runtime.
 
@@ -96,6 +97,9 @@ configuration or session history.
   file edits even after restarting Noah.
 - **Persistent sessions.** Resume repository-scoped conversations, todos, model choices, and
   automatically compacted context without losing the full underlying tool results.
+- **Token-efficient by construction.** Lean tool-output bounds with disk-backed recall, condensed
+  subagent results, cache-stable request prefixes (volatile status arrives as appended events),
+  and pointer-eviction compaction — measured live with `/tokens`.
 - **Explicit control.** Switch between implementation-focused **build** mode and read-only
   **plan** mode, with ordered `allow`, `ask`, and `deny` permission rules.
 - **Extensible workflows.** Add slash commands, opt-in skills, MCP servers, or markdown subagents;
@@ -143,7 +147,6 @@ noah --version
 noah doctor .
 noah config show .
 noah update --check
-noah benchmark .
 ```
 
 The package also installs `noah-code` and `nc` as equivalent entry points. Because `nc` commonly
@@ -164,12 +167,13 @@ Type `/` to search the full command and configuration reference. The most common
 | `/theme` | Choose Atom One Dark, Noah Ocean, Graphite, or High Contrast |
 | `/diff` | Review staged and unstaged changes |
 | `/undo` / `/redo` | Traverse the persistent edit journal |
-| `/tokens` | Inspect tokens, cache usage, model wait, and tool output |
+| `/tokens` | Inspect tokens, cache usage, prefix stability, model wait, and tool output |
 | `/efficiency` | Switch between `fast`, `balanced`, and `deep` budgets |
 
-On wide terminals, the side rail keeps the active workspace, session, model, tokens, update state,
-and plan in view. The main pane remains centered on the Noah mark until the first prompt, then
-becomes the conversation and execution timeline.
+On wide terminals, the side rail prioritizes the active operation, Git branch and change counts,
+session, model usage, update state, and plan. Git status is refreshed in the background at turn
+boundaries, so the animated working state stays responsive. The main pane remains centered on the
+Noah mark until the first prompt, then becomes the conversation and execution timeline.
 
 ## Models and providers
 

{noah_code-0.2.2 → noah_code-0.2.3}/README.md

@@ -2,7 +2,7 @@
 
 # Noah Code
 
-**A terminal coding harness built on NVIDIA's NOAA framework**
+**A terminal coding agent built on NVIDIA's NOAA framework**
 
 [![PyPI](https://img.shields.io/pypi/v/noah-code.svg)](https://pypi.org/project/noah-code/)
 [![CI](https://github.com/skundu42/noah-code/actions/workflows/ci.yml/badge.svg)](https://github.com/skundu42/noah-code/actions/workflows/ci.yml)
@@ -14,9 +14,9 @@
 
 <p align="center"><sub>The real Textual interface, captured from a deterministic Noah Code session.</sub></p>
 
-Noah keeps the conversation central while the context rail tracks the workspace, model, session,
-token usage, and current plan. Tool execution stays visible, completed work compacts into readable
-records, and every session remains scoped to its repository.
+Noah keeps the conversation central while the context rail tracks live work, Git changes, session,
+model usage, and the current plan. Tool execution stays visible, completed work compacts into
+readable records, and every session remains scoped to its repository.
 
 Built on the [NVIDIA OO Agents (NOOA)](https://github.com/NVIDIA-NeMo/labs-OO-Agents) runtime.
 
@@ -53,6 +53,9 @@ configuration or session history.
   file edits even after restarting Noah.
 - **Persistent sessions.** Resume repository-scoped conversations, todos, model choices, and
   automatically compacted context without losing the full underlying tool results.
+- **Token-efficient by construction.** Lean tool-output bounds with disk-backed recall, condensed
+  subagent results, cache-stable request prefixes (volatile status arrives as appended events),
+  and pointer-eviction compaction — measured live with `/tokens`.
 - **Explicit control.** Switch between implementation-focused **build** mode and read-only
   **plan** mode, with ordered `allow`, `ask`, and `deny` permission rules.
 - **Extensible workflows.** Add slash commands, opt-in skills, MCP servers, or markdown subagents;
@@ -100,7 +103,6 @@ noah --version
 noah doctor .
 noah config show .
 noah update --check
-noah benchmark .
 ```
 
 The package also installs `noah-code` and `nc` as equivalent entry points. Because `nc` commonly
@@ -121,12 +123,13 @@ Type `/` to search the full command and configuration reference. The most common
 | `/theme` | Choose Atom One Dark, Noah Ocean, Graphite, or High Contrast |
 | `/diff` | Review staged and unstaged changes |
 | `/undo` / `/redo` | Traverse the persistent edit journal |
-| `/tokens` | Inspect tokens, cache usage, model wait, and tool output |
+| `/tokens` | Inspect tokens, cache usage, prefix stability, model wait, and tool output |
 | `/efficiency` | Switch between `fast`, `balanced`, and `deep` budgets |
 
-On wide terminals, the side rail keeps the active workspace, session, model, tokens, update state,
-and plan in view. The main pane remains centered on the Noah mark until the first prompt, then
-becomes the conversation and execution timeline.
+On wide terminals, the side rail prioritizes the active operation, Git branch and change counts,
+session, model usage, update state, and plan. Git status is refreshed in the background at turn
+boundaries, so the animated working state stays responsive. The main pane remains centered on the
+Noah mark until the first prompt, then becomes the conversation and execution timeline.
 
 ## Models and providers
 

{noah_code-0.2.2 → noah_code-0.2.3}/docs/configuration.md

@@ -234,9 +234,10 @@ objective, decisions, files, validation, blockers, and next steps.
 | Mode | Behavior |
 |------|----------|
 | `build` | Reads are allowed; edits and shell commands follow permission rules and ask by default |
-| `plan` | Reads are allowed; file edits and mutating shell commands are denied |
+| `plan` | Reads are allowed; file edits and mutating shell commands are denied. `self.plan.write` may pin `.noah-code/plan.md` |
 
-Switch modes with `--mode`, `/mode build`, or `/mode plan`. The active mode is stored with the
+Switch modes with `--mode`, `/mode build`, or `/mode plan`. The agent can propose a switch with
+`self.plan.enter()` / `self.plan.exit_to_build()` after writing a plan. The active mode is stored with the
 session.
 
 Permission rules are evaluated in order, and the last matching rule wins. The default policy:
@@ -246,13 +247,23 @@ Permission rules are evaluated in order, and the last matching rule wins. The de
   databases. `.env.example` remains readable.
 - Asks before workspace edits, shell commands, web fetches, web searches, and subagents.
 - Allows the question tool so the agent can pause for a structured choice.
-- Denies `git push`, `git clean`, and `git reset --hard`.
+- Denies `git push`, `git clean`, `git reset --hard`, and mutating `gh pr`
+  (`create`, `checkout`, `merge`, `close`, `ready`, `review`). Push and PR
+  mutations go through `/pr` / `self.github` instead.
+- Allows listing and viewing pull requests; asks before create, push, checkout,
+  or comment.
 - Keeps file tools inside the active workspace and asks before skill or MCP access.
 - Denies plan-mode mutations regardless of broader allow rules. Plan mode may still run
-  read-only subagents.
-
-`--auto` changes ask decisions to allow but never overrides an explicit deny. Compound shell
-commands and mutating or unrecognized Git commands cannot be silently auto-approved.
+  read-only subagents. Its shell allowlist accepts only literal, unqualified read-only programs;
+  test collection and interpreter execution are not treated as read-only because they can load
+  repository code.
+
+`--auto` changes routine ask decisions to allow but never overrides an explicit deny.
+Elevated-risk commands such as file removal, downloads, and package installation still require
+explicit approval. Compound shell commands and mutating or unrecognized Git commands cannot be
+silently auto-approved. Interpreters, eval/source commands, and indirect execution wrappers, plus
+arguments hidden behind variable, command, ANSI-C, or brace expansion, are denied under `--auto`;
+run without `--auto` when one of these commands needs explicit approval.
 
 ## Installation and updates
 

{noah_code-0.2.2 → noah_code-0.2.3}/docs/development.md

@@ -7,28 +7,39 @@ Install the development environment and run the local checks:
 ```bash
 uv sync --extra dev --extra mcp --extra tracing
 uv run ruff check src tests
+uv run mypy src/noah_code
 uv run pytest tests
 uv build
 ```
 
-The default test suite is hermetic and does not require network access or provider keys.
+The default test suite is hermetic and does not require network access or provider keys. A single
+opt-in test performs a live HTTP fetch; run it explicitly on a connected machine:
 
-Run the deterministic efficiency fixture without making provider calls:
+```bash
+uv run pytest tests -m integration
+```
+
+Measure coverage (a 70% total gate runs in CI):
+
+```bash
+uv run pytest tests --cov=noah_code --cov-report=term-missing
+```
+
+Optional git hooks mirror the lint gate:
 
 ```bash
-uv run noah benchmark .
-uv run noah benchmark . --json
+uvx pre-commit install
 ```
 
-It compares standard and lean NOOA trajectory rendering, then measures the configured managed
-preview against a fixed high-volume tool result. The report uses a transparent four-characters-
-per-token estimate; use `/tokens` during a real session for provider-reported usage.
+Use `/tokens` during a real session to inspect provider-reported token use, cache hits, model wait,
+tool output, and estimated cost.
 
 ## CI
 
 GitHub Actions runs the complete test suite on Python 3.12 and 3.13, plus platform smoke tests on
-Linux and macOS for arm64 and x86_64. Every pull request and push to `main` must pass lint, tests,
-lockfile validation, and a package build.
+Linux and macOS for arm64 and x86_64. Every pull request and push to `main` must pass lint, static
+type checking (mypy), tests with a 70% coverage floor, lockfile validation, and a package build.
+Concurrent runs for the same reference are cancelled automatically.
 
 ## Releases
 

{noah_code-0.2.2 → noah_code-0.2.3}/docs/extensions.md

@@ -6,7 +6,7 @@ Add reusable Markdown prompts in either location:
 
 - `~/.config/noah-code/commands/*.md` for user commands.
 - `.noah-code/commands/*.md` for repository commands. Repository commands override user commands
-  with the same name.
+  with the same non-built-in name. A repository cannot shadow Noah's built-in slash commands.
 
 For example, `.noah-code/commands/fix.md`:
 
@@ -25,8 +25,13 @@ through `$9`. Front matter may also select a mode or model.
 ## Subagents
 
 The parent agent invokes nested NOOA agents with `self.task.run("explore", prompt)` or
-`self.task.run("general", prompt)`. Each child gets isolated in-memory session storage and the
-same permission broker. Add project or user markdown agents:
+`self.task.run("general", prompt)`, and fans out independent units concurrently with
+`self.task.run_many([("explore", "..."), ("general", "...")])`. Each child gets isolated
+in-memory session storage, its own permission-engine clone (so concurrent children never race
+on mode), and the same approval broker. Results are bounded: oversized transcripts are
+condensed by the lightweight model (fallback: truncation with a recall pointer) before they
+enter the parent's context. Tune with `subagent_result_max_chars` and
+`max_concurrent_subagents` under `[efficiency]`. Add project or user markdown agents:
 
 - `~/.config/noah-code/agents/*.md`
 - `.noah-code/agents/*.md`
@@ -39,7 +44,14 @@ readonly: true
 Review the assigned change. Cite files. Do not edit.
 ```
 
-`/agents` lists discovered names. Project files override user files with the same stem.
+`/agents` lists discovered names. Project files override user files with the same stem, except that
+the built-in `explore` and `general` agents are reserved and cannot be replaced by repository
+content.
+
+Repository command and agent files are limited to 64 KiB and must be ordinary, singly linked files
+inside their expected `.noah-code` directory. Symlinks, hardlinks, linked directories, special
+files, and oversized files are ignored. User-level files remain linkable because they are trusted
+configuration owned by the user.
 
 ## Skills
 

{noah_code-0.2.2 → noah_code-0.2.3}/docs/interactive-reference.md

@@ -4,14 +4,14 @@
 
 | Key | Action |
 |-----|--------|
-| `Enter` | Send the current message |
+| `Enter` | Send the current message, or queue a follow-up while a turn is running |
 | `Shift+Enter` | Insert a newline without sending |
 | `Tab` | Toggle `build`/`plan` mode; accept the highlighted slash option while suggestions are open |
 | `Ctrl+P` | Open the command palette |
 | `Ctrl+K` | Open the searchable skills picker |
 | `Ctrl+O` | Open the session picker |
 | `Ctrl+N` | Start a new session |
-| `Ctrl+C` | Cancel the active turn; press twice while idle to quit |
+| `Ctrl+C` | Cancel the active turn and clear queued follow-ups; press twice while idle to quit |
 | `Ctrl+Q` | Quit |
 | `F1` or `?` | Show help |
 | `F2` | Open recent activity and full captured output |
@@ -22,10 +22,11 @@ At an approval prompt, press `1` to approve once, `2` to remember the approval f
 session, or `3`/`Esc` to reject it.
 
 The TUI uses Atom One Dark by default and also includes Noah Ocean, Graphite, and High Contrast.
-Switch and persist the active palette with `/theme`. Its conversation-first layout adapts to terminal size. At
-110 columns or wider, a context rail shows the session, active tool, and up to six open or blocked
-todos. Narrow terminals retain the transcript, live activity, suggestions, and composer without
-the rail. Terminals 25 rows high or shorter use compact spacing.
+Switch and persist the active palette with `/theme`. Its conversation-first layout adapts to
+terminal size. At 110 columns or wider, a change-ledger rail prioritizes the current action, Git
+branch and staged/modified/new counts, session, model usage, and up to six open or blocked todos.
+Narrow terminals retain the transcript, live activity, suggestions, and composer without the rail.
+Terminals 25 rows high or shorter use compact spacing.
 
 Type `/` in the composer to open the inline command list; the list remains visible and filters
 continuously. Use `Up`/`Down` to highlight a command, `Enter` or `Tab` to complete it, and `Esc` to
@@ -33,8 +34,29 @@ close the list. Press `Enter` again to run the completed command. Typing `/confi
 to every resolved configuration path and its current redacted value.
 
 Until a session has its first user prompt, the main pane keeps the Noah mark centered. Startup,
-workspace, model, mode, and update state live in the context rail on wide terminals. Existing
-sessions with user history restore their transcript normally.
+repository changes, model, mode, usage, and update state live in the context rail on wide
+terminals. Git status is collected in a background worker at startup and turn boundaries; spinner
+frames update only the header and working banner. Existing sessions with user history restore
+their transcript normally.
+
+### Mid-turn follow-ups
+
+While Noah is working, the composer stays open. `Enter` queues the current text instead of starting
+a second turn. Chrome shows `queued · n`. When the in-flight `handle()` returns (`DONE`,
+`NEED_INPUT`, or `WAIT`), the host injects the next item in the same journaled turn — one persist
+and one checkpoint for the whole steered run. `/undo` therefore reverts every follow-up together.
+
+The queue holds at most 5 items. A sixth `Enter` drops the oldest and status-prints
+`steer dropped oldest`. `@path` mentions and `/attach` paths expand when the item is injected, not
+when it is queued. A follow-up that names files Noah cannot resolve is dropped; later items stay.
+`Ctrl+C` cancels the turn and clears the queue. Switching or starting a session also clears it.
+
+Approval and `ask.question` modals keep the composer. Queueing resumes after the modal closes.
+
+These slash commands still run while a turn is in progress: `/status`, `/tokens`, `/todos`,
+`/help`, `/trace`. `/attach PATH` remembers the file for the next queued follow-up. `/exit` cancels
+the turn (and the queue) then leaves. Mutating commands wait until the turn finishes, including
+`/undo`, `/redo`, `/mode`, `/model`, `/diff`, `/new`, `/sessions`, `/worktree`, `/pr`, `/plan`, `/memory`, and `/compact`.
 
 Tool and shell output is batched into a live execution panel instead of forcing one full-screen
 redraw for every chunk. While a turn is running, a spinner names the current action the way
@@ -57,7 +79,11 @@ latest 100 activity records, bounded by the configured `max_output_chars` per ac
 | `/reasoning [EFFORT]` | Show or set default/none/minimal/low/medium/high/xhigh for this session |
 | `/reasoning --global EFFORT` | Set reasoning effort for this and future sessions |
 | `/providers [use PROVIDER MODEL]` | Search and securely configure API providers |
-| `/session`, `/sessions`, `/new`, `/continue` | Inspect, switch, create, and resume sessions |
+| `/session`, `/sessions`, `/new`, `/continue` | Inspect, switch, create, and resume sessions. `/sessions` lists the whole git-repo family (primary checkout plus isolated copies) |
+| `/worktree` | Opt-in isolation: create a linked git worktree and start a new session there. Subcommands: `create [NAME]`, `list`, `remove NAME`. `/new` stays on the current directory. CLI: `noah worktree create` prints a path and does not start a session |
+| `/pr` | First-class GitHub pull-request loop. Subcommands: `list`, `view [N]`, `create [TITLE]`, `push`, `checkout N`, `comment N TEXT`. `/pr 12` views PR 12. Create pushes HEAD through the host (never via bash) then opens the PR. CLI: `noah pr` |
+| `/plan` | Show the pinned `.noah-code/plan.md`. `/plan clear` dismisses it. In plan mode the agent writes this file with `self.plan.write`, then `self.plan.exit_to_build` asks to switch to build and follow it |
+| `/memory` | Show project conventions in `.noah-code/memory.md`. `/memory save FACT`, `/memory forget TEXT`, `/memory clear`. The agent can `self.memory.save`; successful turns may auto-extract tagged conventions |
 | `/compact` | Apply a coding checkpoint to eligible older context |
 | `/tokens` | Show tokens, cache hits, cost, model wait, and tool-output volume |
 | `/efficiency [fast|balanced|deep]` | Show or switch live tool-output budgets |
@@ -95,11 +121,23 @@ after resuming it. Other sessions and repositories keep their existing defaults
 noah sessions list .
 noah sessions show SESSION_ID
 noah sessions delete SESSION_ID
+noah worktree create [NAME]
+noah worktree list
+noah worktree remove NAME
+noah pr list
+noah pr view [N]
+noah pr create [TITLE]
+noah pr push
+noah pr checkout N
+noah pr comment N TEXT
 ```
 
 Each session has a NOOA-backed SQLite database plus metadata for its workspace identity, model,
 mode, title, remembered permission rules, todos, and edit journal. Session files are created with
-private filesystem permissions and cannot accidentally be resumed against another workspace.
+private filesystem permissions. `/sessions` lists every session in the same git repository family
+(primary checkout plus Noah worktree copies). Switching or `noah --session` / `--continue` rebinds
+the workspace to that session's stored path. A missing copy errors with `worktree missing` instead
+of falling back to the current directory. Deleting a session does not remove its worktree.
 
 The latest 50 persisted user, agent, summary, error, and activity events are restored after the
 TUI's first paint. `F3` loads older history in read-only pages of 50, so resuming a long session
@@ -146,9 +184,13 @@ Lifecycle updates appear in the TUI without copying continuous logs into model c
 The parent agent can run isolated NOOA subagents with `self.task.run("explore", ...)` or
 `self.task.run("general", ...)`. Explore is read-only. General can edit but does not own todos.
 Custom agents are markdown files in `.noah-code/agents/` or `~/.config/noah-code/agents/`. List
-them with `/agents`. Plan mode can run read-only agents only.
+them with `/agents`. Repository files cannot replace the built-in `explore` or `general` agents,
+and unsafe linked or oversized repository definitions are ignored. Plan mode can run read-only
+agents only.
 
-`self.web.fetch(url)` and `self.web.search(query)` ask before leaving the machine.
+`self.web.fetch(url)` and `self.web.search(query)` ask before leaving the machine. Fetch follows a
+bounded number of redirects and accepts only public HTTP(S) destinations; private, loopback,
+link-local, and mixed public/private DNS results are rejected at every hop.
 `self.ask.question(header, prompt, options)` pauses the turn for a structured choice.
 
 Type `@path` in the composer to inline a workspace file or attach a PNG/JPEG/WebP/GIF as a NOOA

{noah_code-0.2.2 → noah_code-0.2.3}/docs/releases/v0.1.1.md

@@ -16,7 +16,7 @@ repositories.
 - Added paginated, read-only conversation history through `F3` when resuming sessions.
 - Added keyboard-driven command and session pickers, safer approval cards, scroll locking, and new
   output indicators.
-- Batched high-volume shell events and bounded display history; the 2,000-chunk local benchmark
+- Batched high-volume shell events and bounded display history; a 2,000-chunk stress measurement
   improved from approximately 454 ms to 123 ms.
 
 ## Reliability

{noah_code-0.2.2 → noah_code-0.2.3}/docs/releases/v0.2.0.md

@@ -1,6 +1,6 @@
 # Noah Code v0.2.0
 
-This release turns Noah Code into a more capable, responsive coding harness while keeping its
+This release turns Noah Code into a more capable, responsive coding agent while keeping its
 NOOA-based execution path compact and token efficient.
 
 ## Highlights
@@ -26,8 +26,8 @@ NOOA-based execution path compact and token efficient.
 - Added `fast`, `balanced`, and `deep` efficiency profiles, compact NOOA trajectory rendering,
   bounded reopenable tool previews, batched repository inspection, and cache-friendly context
   refreshes.
-- Added `/tokens` reporting and an offline benchmark for inspecting prompt-cache, model-wait,
-  tool-output, and estimated token usage.
+- Added `/tokens` reporting for inspecting prompt-cache, model-wait, tool-output, and estimated
+  token usage.
 - Upgraded the runtime integration to NOOA 0.0.9.
 
 ## Reliability

noah_code-0.2.3/docs/releases/v0.2.3.md

@@ -0,0 +1,50 @@
+# Noah Code v0.2.3
+
+This release focuses Noah Code on the core coding-agent product while making long-running work
+safer, more recoverable, and easier to follow from the terminal.
+
+## Agent workflow
+
+- Added mid-turn steering so follow-up instructions can be queued without interrupting active work.
+- Added durable plan handoff and project memory, including explicit plan-mode boundaries and a
+  guided transition back to build mode.
+- Added isolated Git worktrees, repository-family sessions, and a first-class GitHub pull-request
+  workflow for listing, reviewing, creating, pushing, checking out, and commenting on PRs.
+- Added session budgets, turn-boundary Git checkpoints, configurable hooks, and persistent undo/redo
+  safeguards for more controlled autonomous work.
+- Improved conversational handling, context compaction, tool-result retention, and subagent result
+  shaping to keep long sessions useful and token efficient.
+
+## Interface
+
+- Redesigned the wide-terminal context rail around the current action, Git branch and staged,
+  modified, and untracked counts, session and model state, usage and cost, and the active plan.
+- Moved Git status collection to a background worker and stopped spinner frames from rebuilding the
+  rail or rereading plan state, keeping the TUI responsive during active turns.
+- Added contextual busy/idle key hints, clearer live activity, paginated history, searchable
+  commands and sessions, and a detailed change ledger with validation and checkpoint controls.
+
+## Security and reliability
+
+- Enforced read-only plan-mode boundaries across tools, shell execution, task delegation, and
+  project-note writes.
+- Hardened permission parsing, credential and error redaction, generated-code isolation, secure file
+  handling, and session persistence against races and concurrent edits.
+- Made web access DNS-pinned, redirect-safe, and public-unicast-only to prevent private-network and
+  mixed-resolution request forgery.
+- Removed the SWE-bench runner, offline benchmark command, automation-only `exec` driver, and LLM
+  response record/replay cache so the package is solely the core product.
+- Expanded the hermetic suite to 470 passing tests across the runtime, interface, security, and
+  repository workflows.
+
+## Upgrade
+
+Existing managed installations can run:
+
+```bash
+noah update
+```
+
+New installations can use the one-command installer from the README.
+
+**Full changelog:** https://github.com/skundu42/noah-code/compare/v0.2.2...v0.2.3

{noah_code-0.2.2 → noah_code-0.2.3}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "noah-code"
-version = "0.2.2"
+version = "0.2.3"
 description = "Noah Code terminal coding agent, built on NVIDIA OO Agents (NOOA)"
 readme = "README.md"
 requires-python = ">=3.12,<3.14"
@@ -28,7 +28,6 @@ dependencies = [
     "pydantic>=2.5.0",
     "PyYAML>=6.0.0",
     "packaging>=24.0",
-    "tomli>=2.0.0; python_version < '3.11'",
     "rich>=13.0.0",
     "textual>=1.0.0",
 ]
@@ -44,7 +43,9 @@ Releases = "https://github.com/skundu42/noah-code/releases"
 dev = [
     "pytest>=8.0.0",
     "pytest-asyncio>=0.24.0",
+    "pytest-cov>=5.0.0",
     "ruff>=0.8.0",
+    "mypy>=1.13.0",
 ]
 tui = [
     "textual>=1.0.0",
@@ -77,6 +78,8 @@ package = true
 asyncio_mode = "auto"
 asyncio_default_fixture_loop_scope = "function"
 testpaths = ["tests"]
+# Keep the default suite hermetic; opt in with `pytest -m integration`.
+addopts = ["-m", "not integration"]
 markers = [
     "integration: tests that may touch the network (deselect by default)",
 ]
@@ -89,3 +92,27 @@ src = ["src", "tests"]
 [tool.ruff.lint]
 select = ["E", "F", "I", "UP", "B", "SIM"]
 ignore = ["E501"]
+
+[tool.mypy]
+python_version = "3.12"
+files = ["src/noah_code"]
+check_untyped_defs = true
+no_implicit_optional = true
+warn_redundant_casts = true
+warn_unused_ignores = true
+# NOOA's tool/skill framework stacks @hidden/@property and spec() decorators
+# in ways mypy's plugin model does not describe; these codes are noise here.
+disable_error_code = ["prop-decorator", "empty-body"]
+
+[[tool.mypy.overrides]]
+# nooa resolves attributes lazily (PEP 562) and litellm ships no stubs;
+# treat every public surface as Any instead of half-analyzing sources.
+module = ["nooa", "nooa.*", "nooa_cli", "nooa_cli.*", "litellm", "litellm.*"]
+follow_imports = "skip"
+ignore_missing_imports = true
+
+[dependency-groups]
+dev = [
+    "mypy>=2.3.1",
+    "types-pyyaml>=6.0.12.20260815",
+]

noah_code-0.2.3/src/noah_code/__init__.py

@@ -0,0 +1,3 @@
+"""Noah Code: terminal coding agent on NVIDIA OO Agents."""
+
+__version__ = "0.2.3"

{noah_code-0.2.2 → noah_code-0.2.3}/src/noah_code/__main__.py

@@ -3,4 +3,4 @@
 from noah_code.cli import main
 
 if __name__ == "__main__":
-    raise SystemExit(main())
+    main()