pythinker-code 0.30.0__tar.gz → 0.31.0__tar.gz

{pythinker_code-0.30.0 → pythinker_code-0.31.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pythinker-code
-Version: 0.30.0
+Version: 0.31.0
 Summary: Pythinker Code is your next CLI agent.
 Keywords: cli,agent,ai,coding-assistant,llm,claude,openai,terminal
 Author: Mohamed Elkholy
@@ -115,14 +115,15 @@ It speaks the [**Agent Client Protocol (ACP)**](https://github.com/agentclientpr
 
 ---
 
-## 🆕 What's New in 0.30.0
+## 🆕 What's New in 0.31.0
 
-- **ACP session close and auth errors are spec-compliant.** `session/close` now cancels in-flight work and frees session resources before dropping the session; `authenticate` failures serialize correctly so the JSON-RPC error no longer raises `TypeError` on encode.
-- **Auto-mode destructive actions deliberate per turn and context.** Destructive-command one-shots are scoped to the active execution context; duplicate calls keep bouncing while later deliberate retries and isolated subagent calls are handled independently. Missing turn context now fails closed instead of auto-approving.
-- **Release packaging keeps SDK/core pins in lockstep.** The SDK's `pythinker-core` dependency is updated by release automation and checked by CI, preventing binary builds from resolving against a stale core pin.
-- **Routine dependency bumps.** Upgrades `agent-client-protocol` to 0.10.1, `aiohttp` to 3.14.0, and `typer` to 0.26.5 with full ACP 0.10 auth schema migration and restored `--session`/`--resume` optional-value behaviour.
+- **Release promotion no longer stalls when the Homebrew tap is broken.** The `promote-release` workflow now gates only on platform assets and PyPI; a lagging or broken Homebrew tap emits a warning annotation but no longer blocks the GitHub Release from reaching Latest.
+- **Calmer, theme-aligned TUI rendering.** Transcript, recap, and tool-header output now use theme-standardized activity colors, and Markdown tables render as a bordered grid (wide tables no longer collapse into a stacked-record list).
+- **Auto-mode tool approval fails closed when unattended.** In auto/non-interactive runs, actions still needing approval are denied with guidance instead of waiting indefinitely; the `auto_deliberate_destructive_actions` setting extends this backstop to interactive `--yolo` sessions.
+- **Yolo + auto mode hardened against silent over-reach.** Entering plan mode requires confirmation in interactive `--yolo` sessions; a new `--no-yolo` flag overrides yolo globally; resuming a yolo/auto session surfaces a startup warning.
+- **`pythinker review` validates finding evidence.** Reviewflow assembles prompts from a shared security-knowledge manifest and validates findings without failing the whole review on invalid ones.
 
-Upgrade with `pythinker update`, `pip install --upgrade pythinker-code==0.30.0`, or use the native installer for your platform from the [Releases page](https://github.com/Pythoughts-labs/pythinker-code/releases/latest).
+Upgrade with `pythinker update`, `pip install --upgrade pythinker-code==0.31.0`, or use the native installer for your platform from the [Releases page](https://github.com/Pythoughts-labs/pythinker-code/releases/latest).
 
 
 ---
@@ -212,7 +213,7 @@ matches your OS — no Python, Node, or `uv` prerequisite.
 
 | Platform | Recommended install | Artifact source |
 |---|---|---|
-| **🪟 Windows** | `irm https://pythinker.com/install.ps1 \| iex` | `PythinkerSetup-0.30.0.exe` from [Releases](https://github.com/Pythoughts-labs/pythinker-code/releases/latest) |
+| **🪟 Windows** | `irm https://pythinker.com/install.ps1 \| iex` | `PythinkerSetup-0.31.0.exe` from [Releases](https://github.com/Pythoughts-labs/pythinker-code/releases/latest) |
 | **<img src="https://img.shields.io/badge/-macOS-000000?style=flat-square&logo=apple&logoColor=white" alt="macOS"> / <img src="https://img.shields.io/badge/-Linux-FCC624?style=flat-square&logo=linux&logoColor=black" alt="Linux">** | `curl -fsSL https://pythinker.com/install.sh \| bash` | native tarball from [Releases](https://github.com/Pythoughts-labs/pythinker-code/releases/latest) |
 | **<img src="https://img.shields.io/badge/-macOS-000000?style=flat-square&logo=apple&logoColor=white" alt="macOS"> — Homebrew** | `brew install Pythoughts-labs/pythinker/pythinker-code` | auto-published Homebrew tap |
 | **🐳 Docker** | `docker run --rm -it ghcr.io/pythoughts-labs/pythinker-code` | GHCR multi-arch image |
@@ -240,7 +241,7 @@ pythinker                      # start the interactive TUI
 
 ### 🪟 Windows — native installer
 
-`PythinkerSetup-0.30.0.exe` is a signed* Inno Setup wizard. Installs per-user
+`PythinkerSetup-0.31.0.exe` is a signed* Inno Setup wizard. Installs per-user
 into `%LOCALAPPDATA%\Programs\Pythinker`, registers `pythinker` on your user
 PATH (`HKCU\Environment`), broadcasts `WM_SETTINGCHANGE` so new shells see
 the change. **No UAC prompt.**
@@ -251,13 +252,13 @@ irm https://pythinker.com/install.ps1 | iex
 
 # Or manually download the installer + checksum from the Releases page,
 # verify with Get-FileHash, then run:
-.\PythinkerSetup-0.30.0.exe
+.\PythinkerSetup-0.31.0.exe
 
 # Open a fresh PowerShell
 pythinker --version
 ```
 
-**Per-machine install** (IT-managed boxes): `.\PythinkerSetup-0.30.0.exe /ALLUSERS`
+**Per-machine install** (IT-managed boxes): `.\PythinkerSetup-0.31.0.exe /ALLUSERS`
 installs to `%ProgramFiles%\Pythinker` and writes PATH to HKLM (requires admin).
 
 **Upgrade:** `pythinker update` from inside the running app — it downloads
@@ -308,26 +309,26 @@ attached to every GitHub Release.
 
 ```sh
 # Debian / Ubuntu (x86_64)
-sudo dpkg -i pythinker-code_0.30.0_amd64.deb
+sudo dpkg -i pythinker-code_0.31.0_amd64.deb
 sudo apt-get install -f       # only if dpkg reports missing deps
 
 # Debian / Ubuntu (ARM64)
-sudo dpkg -i pythinker-code_0.30.0_arm64.deb
+sudo dpkg -i pythinker-code_0.31.0_arm64.deb
 
 # Fedora / RHEL / openSUSE (x86_64)
-curl -LO https://github.com/Pythoughts-labs/pythinker-code/releases/download/v0.30.0/pythinker-code-0.30.0.x86_64.rpm
-curl -LO https://github.com/Pythoughts-labs/pythinker-code/releases/download/v0.30.0/pythinker-code-0.30.0.x86_64.rpm.sha256
-sha256sum -c pythinker-code-0.30.0.x86_64.rpm.sha256
+curl -LO https://github.com/Pythoughts-labs/pythinker-code/releases/download/v0.31.0/pythinker-code-0.31.0.x86_64.rpm
+curl -LO https://github.com/Pythoughts-labs/pythinker-code/releases/download/v0.31.0/pythinker-code-0.31.0.x86_64.rpm.sha256
+sha256sum -c pythinker-code-0.31.0.x86_64.rpm.sha256
 # Fedora / RHEL:
-sudo dnf install ./pythinker-code-0.30.0.x86_64.rpm
+sudo dnf install ./pythinker-code-0.31.0.x86_64.rpm
 # openSUSE:
-sudo zypper install ./pythinker-code-0.30.0.x86_64.rpm
+sudo zypper install ./pythinker-code-0.31.0.x86_64.rpm
 
 # Fedora / RHEL (aarch64)
-curl -LO https://github.com/Pythoughts-labs/pythinker-code/releases/download/v0.30.0/pythinker-code-0.30.0.aarch64.rpm
-curl -LO https://github.com/Pythoughts-labs/pythinker-code/releases/download/v0.30.0/pythinker-code-0.30.0.aarch64.rpm.sha256
-sha256sum -c pythinker-code-0.30.0.aarch64.rpm.sha256
-sudo dnf install ./pythinker-code-0.30.0.aarch64.rpm
+curl -LO https://github.com/Pythoughts-labs/pythinker-code/releases/download/v0.31.0/pythinker-code-0.31.0.aarch64.rpm
+curl -LO https://github.com/Pythoughts-labs/pythinker-code/releases/download/v0.31.0/pythinker-code-0.31.0.aarch64.rpm.sha256
+sha256sum -c pythinker-code-0.31.0.aarch64.rpm.sha256
+sudo dnf install ./pythinker-code-0.31.0.aarch64.rpm
 ```
 
 Both packages drop a small `/usr/bin/pythinker` launcher that execs the real
@@ -336,8 +337,8 @@ binary under `/usr/lib/pythinker/`, so your `$PATH` stays tidy.
 **Verify before install:**
 
 ```sh
-sha256sum -c pythinker-code_0.30.0_amd64.deb.sha256        # Debian/Ubuntu
-sha256sum -c pythinker-code-0.30.0.x86_64.rpm.sha256       # Fedora/RHEL
+sha256sum -c pythinker-code_0.31.0_amd64.deb.sha256        # Debian/Ubuntu
+sha256sum -c pythinker-code-0.31.0.x86_64.rpm.sha256       # Fedora/RHEL
 ```
 
 **Upgrade:** download the new `.deb`/`.rpm` from Releases and `dpkg -i` /

{pythinker_code-0.30.0 → pythinker_code-0.31.0}/README.md

@@ -50,14 +50,15 @@ It speaks the [**Agent Client Protocol (ACP)**](https://github.com/agentclientpr
 
 ---
 
-## 🆕 What's New in 0.30.0
+## 🆕 What's New in 0.31.0
 
-- **ACP session close and auth errors are spec-compliant.** `session/close` now cancels in-flight work and frees session resources before dropping the session; `authenticate` failures serialize correctly so the JSON-RPC error no longer raises `TypeError` on encode.
-- **Auto-mode destructive actions deliberate per turn and context.** Destructive-command one-shots are scoped to the active execution context; duplicate calls keep bouncing while later deliberate retries and isolated subagent calls are handled independently. Missing turn context now fails closed instead of auto-approving.
-- **Release packaging keeps SDK/core pins in lockstep.** The SDK's `pythinker-core` dependency is updated by release automation and checked by CI, preventing binary builds from resolving against a stale core pin.
-- **Routine dependency bumps.** Upgrades `agent-client-protocol` to 0.10.1, `aiohttp` to 3.14.0, and `typer` to 0.26.5 with full ACP 0.10 auth schema migration and restored `--session`/`--resume` optional-value behaviour.
+- **Release promotion no longer stalls when the Homebrew tap is broken.** The `promote-release` workflow now gates only on platform assets and PyPI; a lagging or broken Homebrew tap emits a warning annotation but no longer blocks the GitHub Release from reaching Latest.
+- **Calmer, theme-aligned TUI rendering.** Transcript, recap, and tool-header output now use theme-standardized activity colors, and Markdown tables render as a bordered grid (wide tables no longer collapse into a stacked-record list).
+- **Auto-mode tool approval fails closed when unattended.** In auto/non-interactive runs, actions still needing approval are denied with guidance instead of waiting indefinitely; the `auto_deliberate_destructive_actions` setting extends this backstop to interactive `--yolo` sessions.
+- **Yolo + auto mode hardened against silent over-reach.** Entering plan mode requires confirmation in interactive `--yolo` sessions; a new `--no-yolo` flag overrides yolo globally; resuming a yolo/auto session surfaces a startup warning.
+- **`pythinker review` validates finding evidence.** Reviewflow assembles prompts from a shared security-knowledge manifest and validates findings without failing the whole review on invalid ones.
 
-Upgrade with `pythinker update`, `pip install --upgrade pythinker-code==0.30.0`, or use the native installer for your platform from the [Releases page](https://github.com/Pythoughts-labs/pythinker-code/releases/latest).
+Upgrade with `pythinker update`, `pip install --upgrade pythinker-code==0.31.0`, or use the native installer for your platform from the [Releases page](https://github.com/Pythoughts-labs/pythinker-code/releases/latest).
 
 
 ---
@@ -147,7 +148,7 @@ matches your OS — no Python, Node, or `uv` prerequisite.
 
 | Platform | Recommended install | Artifact source |
 |---|---|---|
-| **🪟 Windows** | `irm https://pythinker.com/install.ps1 \| iex` | `PythinkerSetup-0.30.0.exe` from [Releases](https://github.com/Pythoughts-labs/pythinker-code/releases/latest) |
+| **🪟 Windows** | `irm https://pythinker.com/install.ps1 \| iex` | `PythinkerSetup-0.31.0.exe` from [Releases](https://github.com/Pythoughts-labs/pythinker-code/releases/latest) |
 | **<img src="https://img.shields.io/badge/-macOS-000000?style=flat-square&logo=apple&logoColor=white" alt="macOS"> / <img src="https://img.shields.io/badge/-Linux-FCC624?style=flat-square&logo=linux&logoColor=black" alt="Linux">** | `curl -fsSL https://pythinker.com/install.sh \| bash` | native tarball from [Releases](https://github.com/Pythoughts-labs/pythinker-code/releases/latest) |
 | **<img src="https://img.shields.io/badge/-macOS-000000?style=flat-square&logo=apple&logoColor=white" alt="macOS"> — Homebrew** | `brew install Pythoughts-labs/pythinker/pythinker-code` | auto-published Homebrew tap |
 | **🐳 Docker** | `docker run --rm -it ghcr.io/pythoughts-labs/pythinker-code` | GHCR multi-arch image |
@@ -175,7 +176,7 @@ pythinker                      # start the interactive TUI
 
 ### 🪟 Windows — native installer
 
-`PythinkerSetup-0.30.0.exe` is a signed* Inno Setup wizard. Installs per-user
+`PythinkerSetup-0.31.0.exe` is a signed* Inno Setup wizard. Installs per-user
 into `%LOCALAPPDATA%\Programs\Pythinker`, registers `pythinker` on your user
 PATH (`HKCU\Environment`), broadcasts `WM_SETTINGCHANGE` so new shells see
 the change. **No UAC prompt.**
@@ -186,13 +187,13 @@ irm https://pythinker.com/install.ps1 | iex
 
 # Or manually download the installer + checksum from the Releases page,
 # verify with Get-FileHash, then run:
-.\PythinkerSetup-0.30.0.exe
+.\PythinkerSetup-0.31.0.exe
 
 # Open a fresh PowerShell
 pythinker --version
 ```
 
-**Per-machine install** (IT-managed boxes): `.\PythinkerSetup-0.30.0.exe /ALLUSERS`
+**Per-machine install** (IT-managed boxes): `.\PythinkerSetup-0.31.0.exe /ALLUSERS`
 installs to `%ProgramFiles%\Pythinker` and writes PATH to HKLM (requires admin).
 
 **Upgrade:** `pythinker update` from inside the running app — it downloads
@@ -243,26 +244,26 @@ attached to every GitHub Release.
 
 ```sh
 # Debian / Ubuntu (x86_64)
-sudo dpkg -i pythinker-code_0.30.0_amd64.deb
+sudo dpkg -i pythinker-code_0.31.0_amd64.deb
 sudo apt-get install -f       # only if dpkg reports missing deps
 
 # Debian / Ubuntu (ARM64)
-sudo dpkg -i pythinker-code_0.30.0_arm64.deb
+sudo dpkg -i pythinker-code_0.31.0_arm64.deb
 
 # Fedora / RHEL / openSUSE (x86_64)
-curl -LO https://github.com/Pythoughts-labs/pythinker-code/releases/download/v0.30.0/pythinker-code-0.30.0.x86_64.rpm
-curl -LO https://github.com/Pythoughts-labs/pythinker-code/releases/download/v0.30.0/pythinker-code-0.30.0.x86_64.rpm.sha256
-sha256sum -c pythinker-code-0.30.0.x86_64.rpm.sha256
+curl -LO https://github.com/Pythoughts-labs/pythinker-code/releases/download/v0.31.0/pythinker-code-0.31.0.x86_64.rpm
+curl -LO https://github.com/Pythoughts-labs/pythinker-code/releases/download/v0.31.0/pythinker-code-0.31.0.x86_64.rpm.sha256
+sha256sum -c pythinker-code-0.31.0.x86_64.rpm.sha256
 # Fedora / RHEL:
-sudo dnf install ./pythinker-code-0.30.0.x86_64.rpm
+sudo dnf install ./pythinker-code-0.31.0.x86_64.rpm
 # openSUSE:
-sudo zypper install ./pythinker-code-0.30.0.x86_64.rpm
+sudo zypper install ./pythinker-code-0.31.0.x86_64.rpm
 
 # Fedora / RHEL (aarch64)
-curl -LO https://github.com/Pythoughts-labs/pythinker-code/releases/download/v0.30.0/pythinker-code-0.30.0.aarch64.rpm
-curl -LO https://github.com/Pythoughts-labs/pythinker-code/releases/download/v0.30.0/pythinker-code-0.30.0.aarch64.rpm.sha256
-sha256sum -c pythinker-code-0.30.0.aarch64.rpm.sha256
-sudo dnf install ./pythinker-code-0.30.0.aarch64.rpm
+curl -LO https://github.com/Pythoughts-labs/pythinker-code/releases/download/v0.31.0/pythinker-code-0.31.0.aarch64.rpm
+curl -LO https://github.com/Pythoughts-labs/pythinker-code/releases/download/v0.31.0/pythinker-code-0.31.0.aarch64.rpm.sha256
+sha256sum -c pythinker-code-0.31.0.aarch64.rpm.sha256
+sudo dnf install ./pythinker-code-0.31.0.aarch64.rpm
 ```
 
 Both packages drop a small `/usr/bin/pythinker` launcher that execs the real
@@ -271,8 +272,8 @@ binary under `/usr/lib/pythinker/`, so your `$PATH` stays tidy.
 **Verify before install:**
 
 ```sh
-sha256sum -c pythinker-code_0.30.0_amd64.deb.sha256        # Debian/Ubuntu
-sha256sum -c pythinker-code-0.30.0.x86_64.rpm.sha256       # Fedora/RHEL
+sha256sum -c pythinker-code_0.31.0_amd64.deb.sha256        # Debian/Ubuntu
+sha256sum -c pythinker-code-0.31.0.x86_64.rpm.sha256       # Fedora/RHEL
 ```
 
 **Upgrade:** download the new `.deb`/`.rpm` from Releases and `dpkg -i` /

{pythinker_code-0.30.0 → pythinker_code-0.31.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "pythinker-code"
-version = "0.30.0"
+version = "0.31.0"
 description = "Pythinker Code is your next CLI agent."
 readme = "README.md"
 requires-python = ">=3.12"

{pythinker_code-0.30.0 → pythinker_code-0.31.0}/src/pythinker_code/CHANGELOG.md

@@ -15,6 +15,18 @@ GitHub Releases page; `0.8.0` is the new starting line.
 
 ## Unreleased
 
+## 0.31.0 (2026-06-02)
+
+### What changed in this release
+
+- **Release promotion no longer stalls when the Homebrew tap is broken.** The `promote-release` workflow now gates only on platform assets and PyPI; a lagging or broken Homebrew tap emits a warning annotation and step summary note but no longer blocks the GitHub Release from reaching Latest.
+- **Calmer, theme-aligned TUI rendering.** Transcript, recap, and tool-header output now use theme-standardized activity colors instead of hardcoded values, and Markdown tables render as a bordered grid (wide tables no longer collapse into a stacked-record list).
+- **Auto-mode tool approval fails closed when unattended.** In auto/non-interactive runs, an action that still needs approval under the active safe-mode/trust policy is denied with guidance instead of waiting indefinitely for an absent user, and outside-workspace writes are never auto-approved. A destructive auto-approved action is now bounced once for deliberation whenever no user is present (regardless of config), so the obvious `--yolo --auto` combination is no longer more dangerous than the `autonomous_coding` profile; the `auto_deliberate_destructive_actions` setting extends that backstop to interactive `--yolo` sessions, where a user is present but approvals are skipped.
+- **Yolo + auto mode hardened against silent over-reach.** Entering plan mode now requires confirmation in an interactive `--yolo` session (matching exit), so the plan-review checkpoint is preserved when a user is present. A `--yolo` run no longer clears or persists the workspace's safe-mode/trust state. A new `--no-yolo` flag forces yolo off for a run — overriding the `--yolo` flag, the `default_yolo` config, and any resumed session state. Resuming a session that restores yolo and/or auto now surfaces a startup warning so it is never silent.
+- **`pythinker review` validates finding evidence.** Reviewflow assembles prompts from a shared security-knowledge manifest and validates findings, handling invalid ones without failing the whole review.
+
+Upgrade with `pythinker update`, `pip install --upgrade pythinker-code==0.31.0`, or use the native installer for your OS (see the README install table).
+
 ## 0.30.0 (2026-06-02)
 
 ### What changed in this release

{pythinker_code-0.30.0 → pythinker_code-0.31.0}/src/pythinker_code/agents/default/code_reviewer.yaml

@@ -7,20 +7,22 @@ agent:
 
       Role and scope:
       - Perform read-only, evidence-first review of the current repository diff.
-      - Use `pythinker review diff` by default; add `--with-security` when the parent requests security coverage.
+      - Use `pythinker review diff` by default for bounded branch/diff review; add `--with-security` when the parent requests security coverage.
+      - For repo-wide, long-running, resumable, or feature-slice review requests, prefer the stateful flow: `pythinker review init`, `pythinker review map`, then `pythinker review review --limit <n> --jobs <n>` followed by `report`/`next`/`show`/`triage` as needed.
       - Use `pythinker review describe`, `suggest`/`improve`, `ask`, `ask-line`, `labels`, `changelog`, `docs`, `compliance`, `help-docs`, `similar-issues`, `tools`, or `config` only when the parent explicitly asks for that artifact/helper.
       - For code-reviewr parity requests, prefer local read-only options such as `--labels-file`, `--extra-instructions`, `--best-practices-file`, `--min-score`, `--docs-style`, `--symbol`, `--pr-url`, and `--issues-dir` instead of provider publishing.
       - Do not edit files, commit, stage, push, approve, merge, or publish provider comments.
 
       Tool policy:
-      - Prefer `pythinker review diff --format json --no-save` so results are structured and do not write run state.
+      - Prefer `pythinker review diff --format json --no-save` for one-shot diff review so results are structured and do not write run state.
+      - Use stateful Reviewflow only when persistence, resumability, feature-slice coverage, or explicit fix/revalidate follow-up is part of the task.
       - If persistence is requested, omit `--no-save` and report where run state was written.
       - If the requested base ref fails, report the exact blocker instead of guessing another branch unless the parent gave fallback instructions.
       - Read files only to verify a load-bearing finding or command failure.
 
       Review discipline:
       - If `.pythinker/review-guidelines.md` exists, read it before scoring findings.
-      - Build a review context packet: base ref/diff scope, changed behavior, likely tests, user-visible impact, and validation evidence.
+      - Build a review context packet: base ref/diff scope or Reviewflow feature IDs, changed behavior, likely tests, user-visible impact, valid evidence paths, omitted/truncated context, and validation evidence.
       - Flag only issues introduced or made reachable by the diff.
       - Prefer no finding over vague speculation. Every finding must cite concrete evidence and a failure mode.
 

{pythinker_code-0.30.0 → pythinker_code-0.31.0}/src/pythinker_code/agents/default/security_reviewer.yaml

@@ -16,9 +16,12 @@ agent:
       Operating rules:
       - If `.pythinker/review-guidelines.md` exists, read it before scoring findings.
       - Read-only by convention. You may run secscan/security-scan CLI commands and read outputs, but do not edit source files.
-      - Diff mode default: `pythinker secscan diff --format json --no-save`.
-      - Repo-wide mode default: `pythinker security-scan scan --json`, then only run `pythinker security-scan process` when the parent explicitly asks for model-backed investigation.
-      - Use `--fail-on critical` for triage runs unless the parent specifies otherwise.
+      - Choose the smallest scan mode that answers the parent: diff review for changed code, repo-wide scan for discovery, process/revalidate only for model-backed investigation.
+      - Diff mode default: `pythinker secscan diff --format json --no-save --fail-on critical`.
+      - Repo-wide discovery default: `pythinker security-scan scan --json`; if the project mirror is missing, run `pythinker security-scan init` first.
+      - Before deep repo-wide processing, preview state with `pythinker security-scan status` or `pythinker security-scan prompt --limit 1`; keep INFO.md project context short and specific if the parent asks you to improve it.
+      - Only run `pythinker security-scan process`, `revalidate`, or `triage` when the parent explicitly asks for model-backed investigation or deep validation; use `--limit`/`--jobs` to bound cost unless told otherwise.
+      - Treat matcher hits as leads, not findings. Framework and slug notes are reviewer instincts; still verify source → sink → missing mitigation in code.
       - Check graceful degradation, observability/logging, recovery behavior, structured result/status correctness, and approval/policy mismatches when they affect security posture.
       - Translate JSON output into the structured response block below.
 

{pythinker_code-0.30.0 → pythinker_code-0.31.0}/src/pythinker_code/app.py

@@ -63,6 +63,23 @@ def _safe_git_branch(cwd: str | Path | HostPath) -> str | None:
     return branch or None
 
 
+def _resumed_unsupervised_notice(*, resumed: bool, yolo: bool, auto: bool) -> str | None:
+    """Welcome-banner warning when a resumed session is running unsupervised.
+
+    Resuming restores ``yolo``/``auto`` from persisted state, so a session can come back
+    unattended and, under YOLO, auto-approving actions with no prompt. Surface that
+    prominently at startup (it also fires when the modes were passed explicitly on the
+    resume command — acceptable over-notification). ``None`` when not a resume or no
+    unsupervised mode is active.
+    """
+    if not resumed or not (yolo or auto):
+        return None
+    modes = " + ".join(name for name, active in (("YOLO", yolo), ("auto", auto)) if active)
+    if yolo:
+        return f"{modes} active — actions auto-approved; toggle with /yolo /auto"
+    return "auto active — interactive approvals still required; toggle with /auto"
+
+
 def _patch_session_id(record: dict[str, Any]) -> None:
     """Inject the current session ID (from ContextVar) into log records."""
     try:
@@ -153,6 +170,7 @@ class PythinkerCLI:
         thinking_effort: ThinkingEffort | None = None,
         # Run mode
         yolo: bool = False,
+        no_yolo: bool = False,
         auto: bool = False,
         runtime_auto: bool = False,
         plan_mode: bool = False,
@@ -183,6 +201,8 @@ class PythinkerCLI:
                 Defaults to None.
             yolo (bool, optional): Dangerously skip permission approvals. The user is still
                 reachable via ``AskUserQuestion``. Defaults to False.
+            no_yolo (bool, optional): Force yolo OFF for this run, overriding the ``yolo``
+                flag, config ``default_yolo``, and persisted session state. Defaults to False.
             auto (bool, optional): Invocation-level auto mode (no user is present to answer
                 questions or approve actions). Implies auto-approve. Defaults to False.
             runtime_auto (bool, optional): Internal invocation-only auto-mode overlay, used by
@@ -307,6 +327,7 @@ class PythinkerCLI:
             yolo,
             auto=auto,
             runtime_auto=runtime_auto,
+            no_yolo=no_yolo,
             skills_dirs=skills_dirs,
             scratchpad_section=scratchpad_section,
         )
@@ -783,6 +804,14 @@ class PythinkerCLI:
         if branch_name:
             welcome_info.append(WelcomeInfoItem(name="Branch", value=branch_name))
         welcome_info.append(WelcomeInfoItem(name="Session", value=self._runtime.session.id))
+        if notice := _resumed_unsupervised_notice(
+            resumed=self._runtime.resumed,
+            yolo=self._runtime.approval.is_yolo(),
+            auto=self._runtime.approval.is_auto(),
+        ):
+            welcome_info.append(
+                WelcomeInfoItem(name="Mode", value=notice, level=WelcomeInfoItem.Level.WARN)
+            )
         try:
             auto_save_path = str(
                 shorten_home(HostPath.unsafe_from_local_path(self._runtime.session.context_file))

{pythinker_code-0.30.0 → pythinker_code-0.31.0}/src/pythinker_code/cli/__init__.py

@@ -378,6 +378,16 @@ def pythinker(
             help="Automatically approve all actions. Default: no.",
         ),
     ] = False,
+    no_yolo: Annotated[
+        bool,
+        typer.Option(
+            "--no-yolo",
+            help=(
+                "Force yolo OFF for this run, overriding --yolo, config default_yolo, and "
+                "any persisted/resumed yolo state. Default: no."
+            ),
+        ),
+    ] = False,
     plan: Annotated[
         bool,
         typer.Option(
@@ -390,9 +400,11 @@ def pythinker(
         typer.Option(
             "--auto",
             help=(
-                "Run in auto mode: no user is present, AskUserQuestion is auto-dismissed, "
-                "and tool calls are auto-approved. Use when running unattended "
-                "(scripts, CI, scheduled jobs). Default: no."
+                "Run in auto mode: no user is present and AskUserQuestion is "
+                "auto-dismissed. Tool calls are auto-approved only when current "
+                "trust/safe-mode policy permits; otherwise approval-required actions "
+                "fail closed. Use when running unattended (scripts, CI, scheduled jobs). "
+                "Default: no."
             ),
         ),
     ] = False,
@@ -412,7 +424,9 @@ def pythinker(
             "--print",
             help=(
                 "Run in print mode (non-interactive). Print mode auto-dismisses "
-                "AskUserQuestion and auto-approves tool calls for this invocation."
+                "AskUserQuestion and enables invocation-only auto mode; approval-required "
+                "tool calls still follow trust/safe-mode policy and fail closed when "
+                "approval is unavailable."
             ),
         ),
     ] = False,
@@ -840,6 +854,7 @@ def pythinker(
                 thinking=thinking,
                 thinking_effort=normalized_thinking_effort,
                 yolo=yolo,
+                no_yolo=no_yolo,
                 auto=auto,
                 runtime_auto=ui == "print",
                 plan_mode=plan,

{pythinker_code-0.30.0 → pythinker_code-0.31.0}/src/pythinker_code/config.py

@@ -328,6 +328,39 @@ class TUIConfig(BaseModel):
         default=True,
         description="Show a compact recap line after completed interactive shell turns.",
     )
+    code_theme: str = Field(
+        default="pythinker-ansi",
+        description=(
+            "Syntax-highlighting theme for assistant code blocks. Default "
+            "'pythinker-ansi' keeps the terminal-adaptive, transparent look. "
+            "Set to any Pygments style name (e.g. 'monokai', 'material', "
+            "'dracula', 'one-dark') to render code fences with that style on a "
+            "solid dark background block."
+        ),
+    )
+    smooth_streaming: bool = Field(
+        default=True,
+        description=(
+            "Pace streamed assistant text so it reveals smoothly instead of "
+            "landing in bursty delta-sized clumps. Keeps up with the model "
+            "(bounded catch-up). Set false to reveal each delta immediately."
+        ),
+    )
+
+    @field_validator("code_theme")
+    @classmethod
+    def _validate_code_theme(cls, value: str) -> str:
+        from pythinker_code.utils.rich.syntax import available_code_themes
+
+        allowed = available_code_themes()
+        if value in allowed:
+            return value
+        if value.lower() in allowed:
+            return value.lower()
+        raise ValueError(
+            f"Unknown code_theme {value!r}. Choose 'pythinker-ansi' or a Pygments "
+            f"style name. Available: {', '.join(allowed)}"
+        )
 
 
 class MCPConfig(BaseModel):
@@ -374,11 +407,17 @@ class Config(BaseModel):
             description=(
                 "Controls AskUserQuestion behavior: always ask, ask except in auto mode, "
                 "never pause (best judgment), or auto_deliberate (in auto mode, run an "
-                "advisor-assisted self-decision instead of dismissing, and bounce "
-                "destructive actions once for deliberation)."
+                "advisor-assisted self-decision instead of dismissing)."
             ),
         )
     )
+    auto_deliberate_destructive_actions: bool = Field(
+        default=False,
+        description=(
+            "When true, destructive auto-approved actions are bounced once for agent "
+            "deliberation before running. This is independent of AskUserQuestion policy."
+        ),
+    )
     skip_auto_prompt_injection: bool = Field(
         default=False,
         description=(
@@ -481,12 +520,10 @@ class Config(BaseModel):
             if "default_yolo" not in fields_set:
                 self.default_yolo = True
             if "ask_user_question_policy" not in fields_set:
-                # NOTE: spec §6 #1 proposes shifting this to "auto_deliberate", but
-                # that is only safe once the profile also enables auto mode (so
-                # AskUserQuestion's Entry A self-decision engages and never blocks a
-                # headless run waiting for an absent user). Until that auto-from-
-                # profile path exists, keep the robust "never" (always dismiss).
+                # Preserve no-human AskUserQuestion behavior for headless autonomy.
                 self.ask_user_question_policy = "never"
+            if "auto_deliberate_destructive_actions" not in fields_set:
+                self.auto_deliberate_destructive_actions = True
         elif profile == "plan_only":
             if "default_plan_mode" not in fields_set:
                 self.default_plan_mode = True