qoder-agent-sdk 1.0.13__tar.gz → 1.0.15__tar.gz

{qoder_agent_sdk-1.0.13 → qoder_agent_sdk-1.0.15}/.gitignore

@@ -27,6 +27,7 @@ ENV/
 env/
 .venv
 .venv-release/
+.venv-e2e-build/
 .tmp-brand-packages/
 .tmp-qoder-python-release-plan.json
 uv.lock

{qoder_agent_sdk-1.0.13 → qoder_agent_sdk-1.0.15}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: qoder-agent-sdk
-Version: 1.0.13
+Version: 1.0.15
 Summary: Python SDK for Qoder Agent
 Author: Qoder
 License: Copyright (c) 2026 Qoder
@@ -160,6 +160,27 @@ async for message in query(prompt="Explain this repository", options=options):
                 print(block.text)
 ```
 
+## Code Security
+
+Built-in code security is disabled by default in SDK sessions. Enable only the
+capabilities the integration needs:
+
+```python
+options = QoderAgentOptions(
+    auth=qodercli_auth(),
+    cwd="/path/to/project",
+    security_scan={
+        "l1_static_check": True,
+        "l2_lightweight_scan": True,
+        "l3_deep_scan": False,
+    },
+)
+```
+
+Omitted switches remain disabled. The top-level option is authoritative for
+the SDK session. Enabling any switch also makes the native security skill
+available; project and file scans do not have a separate switch.
+
 ## Tools and Permissions
 
 Qoder Agent can use tools such as file reads, file edits, shell commands, and
@@ -213,6 +234,30 @@ options = QoderAgentOptions(
 )
 ```
 
+## Plan Mode
+
+Plan Mode is independent from tool permissions. Set its initial state with
+`plan_mode`; the SDK applies it after the CLI handshake and before the first
+user message, while preserving the underlying `permission_mode`:
+
+```python
+options = QoderAgentOptions(
+    auth=qodercli_auth(),
+    permission_mode="default",
+    plan_mode=True,
+)
+```
+
+For a live session, use `await client.set_plan_mode(True | False)` to switch
+the state and `await client.get_plan_mode()` to read the authoritative current
+state. These APIs require a CLI that advertises the `plan_mode_v1` capability.
+
+For compatibility with existing consumers, `SystemMessage` init data projects
+`permissionMode` as `"plan"` while Plan Mode is active. This does not replace
+the underlying tool permission mode; after leaving Plan Mode, the field reports
+that mode again. Use the Plan APIs and `PlanModeChangedMessage` as the
+authoritative Plan state.
+
 ## Working Directory
 
 Use `cwd` to run the agent in a specific project directory:
@@ -337,6 +382,21 @@ available through `list_subagents` / `get_subagent_messages` and
 `import_session_to_store` to copy an existing local main transcript,
 child-agent transcripts, and metadata into a store.
 
+Session message readers default to `view="runtime"`, which returns the latest
+Compact Summary and messages written after it. Pass `view="historical"` to
+`get_session_messages` or `get_session_messages_from_store` to read the real
+active lineage across Compact boundaries; Compact Boundary and Summary records
+are hidden from that projection. The local and external `fork_session` helpers
+use the same historical lineage, so `up_to_message_id` may target a message
+before Compact.
+
+For a running local session, `QoderSDKClient.rewind()` previews or executes a
+`conversation`, `files`, or `both` rewind when the bundled CLI advertises
+`session_rewind_v1`. To start a new process from a persisted historical node,
+set `QoderAgentOptions.resume`, `resume_session_at`, and optionally
+`resume_drops_turn`; combine them with `fork_session=True` to preserve the
+source session.
+
 ### Production stores
 
 The SDK exports the `SessionStore` protocol but does not ship a
@@ -345,6 +405,10 @@ against shared storage operated by your application, then validate its
 append/load ordering, project isolation, subkey handling, and deletion behavior
 with `run_session_store_conformance`.
 
+## Memory
+
+Configure native or custom memory with `QoderAgentOptions(memory=...)`. Interactive clients expose `flush_memory()` and `refresh_memory()`. See [Memory](doc/memory.md) for configuration, generation callbacks, and lifecycle behavior.
+
 ## Custom Tools
 
 You can expose Python functions to Qoder Agent as in-process SDK MCP servers.

{qoder_agent_sdk-1.0.13 → qoder_agent_sdk-1.0.15}/README.md

@@ -118,6 +118,27 @@ async for message in query(prompt="Explain this repository", options=options):
                 print(block.text)
 ```
 
+## Code Security
+
+Built-in code security is disabled by default in SDK sessions. Enable only the
+capabilities the integration needs:
+
+```python
+options = QoderAgentOptions(
+    auth=qodercli_auth(),
+    cwd="/path/to/project",
+    security_scan={
+        "l1_static_check": True,
+        "l2_lightweight_scan": True,
+        "l3_deep_scan": False,
+    },
+)
+```
+
+Omitted switches remain disabled. The top-level option is authoritative for
+the SDK session. Enabling any switch also makes the native security skill
+available; project and file scans do not have a separate switch.
+
 ## Tools and Permissions
 
 Qoder Agent can use tools such as file reads, file edits, shell commands, and
@@ -171,6 +192,30 @@ options = QoderAgentOptions(
 )
 ```
 
+## Plan Mode
+
+Plan Mode is independent from tool permissions. Set its initial state with
+`plan_mode`; the SDK applies it after the CLI handshake and before the first
+user message, while preserving the underlying `permission_mode`:
+
+```python
+options = QoderAgentOptions(
+    auth=qodercli_auth(),
+    permission_mode="default",
+    plan_mode=True,
+)
+```
+
+For a live session, use `await client.set_plan_mode(True | False)` to switch
+the state and `await client.get_plan_mode()` to read the authoritative current
+state. These APIs require a CLI that advertises the `plan_mode_v1` capability.
+
+For compatibility with existing consumers, `SystemMessage` init data projects
+`permissionMode` as `"plan"` while Plan Mode is active. This does not replace
+the underlying tool permission mode; after leaving Plan Mode, the field reports
+that mode again. Use the Plan APIs and `PlanModeChangedMessage` as the
+authoritative Plan state.
+
 ## Working Directory
 
 Use `cwd` to run the agent in a specific project directory:
@@ -295,6 +340,21 @@ available through `list_subagents` / `get_subagent_messages` and
 `import_session_to_store` to copy an existing local main transcript,
 child-agent transcripts, and metadata into a store.
 
+Session message readers default to `view="runtime"`, which returns the latest
+Compact Summary and messages written after it. Pass `view="historical"` to
+`get_session_messages` or `get_session_messages_from_store` to read the real
+active lineage across Compact boundaries; Compact Boundary and Summary records
+are hidden from that projection. The local and external `fork_session` helpers
+use the same historical lineage, so `up_to_message_id` may target a message
+before Compact.
+
+For a running local session, `QoderSDKClient.rewind()` previews or executes a
+`conversation`, `files`, or `both` rewind when the bundled CLI advertises
+`session_rewind_v1`. To start a new process from a persisted historical node,
+set `QoderAgentOptions.resume`, `resume_session_at`, and optionally
+`resume_drops_turn`; combine them with `fork_session=True` to preserve the
+source session.
+
 ### Production stores
 
 The SDK exports the `SessionStore` protocol but does not ship a
@@ -303,6 +363,10 @@ against shared storage operated by your application, then validate its
 append/load ordering, project isolation, subkey handling, and deletion behavior
 with `run_session_store_conformance`.
 
+## Memory
+
+Configure native or custom memory with `QoderAgentOptions(memory=...)`. Interactive clients expose `flush_memory()` and `refresh_memory()`. See [Memory](doc/memory.md) for configuration, generation callbacks, and lifecycle behavior.
+
 ## Custom Tools
 
 You can expose Python functions to Qoder Agent as in-process SDK MCP servers.

{qoder_agent_sdk-1.0.13 → qoder_agent_sdk-1.0.15}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "qoder-agent-sdk"
-version = "1.0.13"
+version = "1.0.15"
 description = "Python SDK for Qoder Agent"
 readme = "README.md"
 requires-python = ">=3.10"

{qoder_agent_sdk-1.0.13 → qoder_agent_sdk-1.0.15}/src/qoder_agent_sdk/__init__.py

@@ -32,6 +32,7 @@ from ._errors import (
     ModelPolicyTimeoutError,
     ProcessError,
     QoderSDKError,
+    UnsupportedCliCapabilityError,
 )
 from ._internal.session_mutations import (
     ForkSessionResult,
@@ -77,6 +78,29 @@ from .auth import (
     service_account_from_env,
 )
 from .client import QoderSDKClient
+from .memory import (
+    EffectiveMemoryConfig,
+    EffectiveMemoryRoot,
+    MemoryConsumptionCallback,
+    MemoryConsumptionFile,
+    MemoryConsumptionFileResult,
+    MemoryConsumptionOptions,
+    MemoryConsumptionResult,
+    MemoryGateContext,
+    MemoryGenerationCallback,
+    MemoryGenerationFailedFile,
+    MemoryGenerationGateInput,
+    MemoryGenerationGateResult,
+    MemoryGenerationOptions,
+    MemoryGenerationResult,
+    MemoryMode,
+    MemoryOptions,
+    MemoryRoot,
+    MemoryRootAccess,
+    MemoryShouldGenerate,
+    MemoryTurnCompleteOptions,
+    MemoryWrittenFile,
+)
 from .plugins import (
     PluginError,
     disable_plugin,
@@ -102,6 +126,7 @@ from .store_sessions import (
     tag_session_via_store,
 )
 from .types import (
+    MAX_SKILL_EVOLUTION_REVIEW_THRESHOLD,
     AgentCreateParams,
     AgentDefinition,
     AssistantMessage,
@@ -145,10 +170,15 @@ from .types import (
     CwdChangedHookSpecificOutput,
     ElicitationRequest,
     ElicitationResult,
+    EvolutionOptions,
     ExitPlanModeApprovalDetails,
     ExitReason,
     FileChangedHookInput,
     FileChangedHookSpecificOutput,
+    GoalClearedMessage,
+    GoalSnapshot,
+    GoalStatus,
+    GoalUpdatedMessage,
     HookCallback,
     HookContext,
     HookEvent,
@@ -179,6 +209,8 @@ from .types import (
     McpStatusResponse,
     McpToolAnnotations,
     McpToolInfo,
+    MemoryConsumptionMessage,
+    MemoryGenerationMessage,
     Message,
     ModelContextConfig,
     ModelContextWindowEntry,
@@ -209,9 +241,12 @@ from .types import (
     PermissionResultAllow,
     PermissionResultDeny,
     PermissionUpdate,
+    PlanModeChangedMessage,
+    PlanModeSnapshot,
     PluginDetails,
     PluginInfo,
     PluginResources,
+    PluginScope,
     PluginValidationDiagnostic,
     PluginValidationLocation,
     PluginValidationPhase,
@@ -237,7 +272,11 @@ from .types import (
     ResolvedSettings,
     ResolvedSettingsSource,
     ResultMessage,
+    RewindFileFailure,
     RewindFilesResult,
+    RewindResult,
+    RewindScope,
+    RewindStatus,
     SDKCapabilities,
     SDKControlGetByokConfigRequest,
     SDKControlGetByokConfigResponse,
@@ -249,6 +288,7 @@ from .types import (
     SDKPermissionDeniedMessage,
     SdkPluginConfig,
     SDKSessionInfo,
+    SecurityScanOptions,
     ServerModelJson,
     ServerModelJsonValue,
     SessionCreateParams,
@@ -258,6 +298,7 @@ from .types import (
     SessionKey,
     SessionListSubkeysKey,
     SessionMessage,
+    SessionMessageView,
     SessionStartHookInput,
     SessionStartHookSpecificOutput,
     SessionStore,
@@ -266,6 +307,19 @@ from .types import (
     SessionStoreListEntry,
     Settings,
     SettingSource,
+    SideQuestionHistoryEntry,
+    SideQuestionRefusalFallback,
+    SideQuestionResult,
+    SkillEvolutionGateRequest,
+    SkillEvolutionGateResult,
+    SkillEvolutionGenerationOptions,
+    SkillEvolutionMessage,
+    SkillEvolutionOptions,
+    SkillEvolutionResult,
+    SkillEvolutionResultCallback,
+    SkillEvolutionShouldReview,
+    SkillEvolutionSuggestion,
+    SkillEvolutionTurnCompleteOptions,
     StopHookInput,
     StreamEvent,
     SubagentStartHookInput,
@@ -815,6 +869,35 @@ def create_sdk_mcp_server(
 
 
 __all__ = [
+    "EffectiveMemoryConfig",
+    "EffectiveMemoryRoot",
+    "MemoryMode",
+    "MemoryRootAccess",
+    "MemoryRoot",
+    "MemoryConsumptionFile",
+    "MemoryGenerationGateInput",
+    "MemoryGenerationGateResult",
+    "MemoryGateContext",
+    "MemoryWrittenFile",
+    "MemoryGenerationFailedFile",
+    "MemoryGenerationResult",
+    "MemoryConsumptionFileResult",
+    "MemoryConsumptionResult",
+    "MemoryShouldGenerate",
+    "MemoryGenerationCallback",
+    "MemoryConsumptionCallback",
+    "MemoryTurnCompleteOptions",
+    "MemoryGenerationOptions",
+    "MemoryConsumptionOptions",
+    "MemoryOptions",
+    "MemoryGenerationMessage",
+    "MemoryConsumptionMessage",
+    "GoalClearedMessage",
+    "GoalSnapshot",
+    "GoalStatus",
+    "GoalUpdatedMessage",
+    "PlanModeChangedMessage",
+    "PlanModeSnapshot",
     # Main exports
     "query",
     "__version__",
@@ -905,6 +988,19 @@ __all__ = [
     "CloudAgentEventMessage",
     "Message",
     "QoderAgentOptions",
+    "SecurityScanOptions",
+    "EvolutionOptions",
+    "SkillEvolutionOptions",
+    "MAX_SKILL_EVOLUTION_REVIEW_THRESHOLD",
+    "SkillEvolutionGenerationOptions",
+    "SkillEvolutionTurnCompleteOptions",
+    "SkillEvolutionMessage",
+    "SkillEvolutionResult",
+    "SkillEvolutionSuggestion",
+    "SkillEvolutionGateRequest",
+    "SkillEvolutionGateResult",
+    "SkillEvolutionShouldReview",
+    "SkillEvolutionResultCallback",
     "TextBlock",
     "ThinkingBlock",
     "ToolUseBlock",
@@ -920,6 +1016,9 @@ __all__ = [
     "ContextUsageSkills",
     "ContextUsageToolCalls",
     "ContextUsageWindow",
+    "SideQuestionHistoryEntry",
+    "SideQuestionRefusalFallback",
+    "SideQuestionResult",
     "NonNullableUsage",
     "ModelUsage",
     "SessionCreditsModelUsage",
@@ -1013,6 +1112,7 @@ __all__ = [
     "PluginInfo",
     "PluginDetails",
     "PluginResources",
+    "PluginScope",
     "InstallPluginResult",
     "UninstallPluginResult",
     "PluginValidationSeverity",
@@ -1036,6 +1136,10 @@ __all__ = [
     "PluginError",
     # File checkpointing
     "RewindFilesResult",
+    "RewindFileFailure",
+    "RewindResult",
+    "RewindScope",
+    "RewindStatus",
     # Session listing
     "list_sessions",
     "get_session_info",
@@ -1044,6 +1148,7 @@ __all__ = [
     "get_subagent_messages",
     "SDKSessionInfo",
     "SessionMessage",
+    "SessionMessageView",
     # Session mutations
     "rename_session",
     "tag_session",
@@ -1068,6 +1173,7 @@ __all__ = [
     "ProcessError",
     "CLIJSONDecodeError",
     "ModelPolicyTimeoutError",
+    "UnsupportedCliCapabilityError",
     # Model Policy
     "ModelInfo",
     "ModelContextConfig",

{qoder_agent_sdk-1.0.13 → qoder_agent_sdk-1.0.15}/src/qoder_agent_sdk/_brand.py

@@ -16,3 +16,4 @@ ACCESS_TOKEN_ENV = (
 SERVICE_ACCOUNT_ENV = (
     "QODERCN_SERVICE_ACCOUNT_KEY" if IS_CN_SDK else "QODER_SERVICE_ACCOUNT_KEY"
 )
+VPC_ENDPOINT_ENV = "QODERCN_VPC_ENDPOINT" if IS_CN_SDK else "QODER_VPC_ENDPOINT"

{qoder_agent_sdk-1.0.13 → qoder_agent_sdk-1.0.15}/src/qoder_agent_sdk/_cli_version.py

@@ -1,3 +1,3 @@
 """Bundled runtime CLI version."""
 
-__cli_version__ = "1.1.23"
+__cli_version__ = "1.1.61"

{qoder_agent_sdk-1.0.13 → qoder_agent_sdk-1.0.15}/src/qoder_agent_sdk/_errors.py

@@ -111,6 +111,17 @@ class CLIJSONDecodeError(QoderSDKError):
         super().__init__(f"Failed to decode JSON: {line[:100]}...")
 
 
+class UnsupportedCliCapabilityError(QoderSDKError):
+    """Raised when the running CLI does not advertise a required capability."""
+
+    def __init__(self, capability: str):
+        self.capability = capability
+        super().__init__(
+            "The running qodercli does not advertise the required capability "
+            f'"{capability}". Upgrade qodercli or use a matching bundled SDK runtime.'
+        )
+
+
 class MessageParseError(QoderSDKError):
     """Raised when unable to parse a message from CLI output."""
 

{qoder_agent_sdk-1.0.13 → qoder_agent_sdk-1.0.15}/src/qoder_agent_sdk/_internal/client.py

@@ -1,6 +1,5 @@
 """Internal client implementation."""
 
-import json
 from collections.abc import AsyncIterable, AsyncIterator
 from dataclasses import asdict, replace
 from typing import Any
@@ -17,12 +16,16 @@ from .auth_helpers import (
     get_fetch_service_account_token,
     once_callback,
 )
+from .memory import prepare_memory_options
 from .message_parser import parse_message
 from .query import Query, resolve_initialize_timeout
 from .session_storage import (
     materialize_session_from_store,
     validate_session_storage_options,
 )
+from .skill_evolution import (
+    prepare_evolution_options,
+)
 from .transport import Transport
 from .transport.subprocess_cli import SubprocessCLITransport
 
@@ -61,6 +64,13 @@ class InternalClient:
 
         # Validate and configure permission settings (matching TypeScript SDK logic)
         configured_options = options
+        normalized_evolution, normalized_skill_evolution = prepare_evolution_options(
+            configured_options.evolution
+        )
+        if normalized_evolution is not configured_options.evolution:
+            configured_options = replace(
+                configured_options, evolution=normalized_evolution
+            )
         validate_session_storage_options(
             options.session_store,
             options.session_store_flush,
@@ -92,6 +102,7 @@ class InternalClient:
                 configured_options, on_auth_expired=on_auth_expired
             )
 
+        prepared_memory = prepare_memory_options(configured_options.memory)
         requires_store_resume = configured_options.session_store is not None and (
             configured_options.resume is not None
             or configured_options.continue_conversation
@@ -161,6 +172,7 @@ class InternalClient:
         try:
             query = Query(
                 transport=chosen_transport,
+                memory=prepared_memory,
                 is_streaming_mode=True,  # Always streaming internally
                 can_use_tool=configured_options.can_use_tool,
                 hooks=convert_hooks_to_internal_format(configured_options.hooks)
@@ -172,6 +184,7 @@ class InternalClient:
                 skills=configured_options.skills
                 if isinstance(configured_options.skills, list)
                 else None,
+                initial_plan_mode=configured_options.plan_mode,
                 enable_file_checkpointing=configured_options.enable_file_checkpointing,
                 on_mcp_oauth_required=configured_options.on_mcp_oauth_required,
                 on_mcp_status_change=configured_options.on_mcp_status_change,
@@ -186,6 +199,8 @@ class InternalClient:
                 resolve_model_timeout_ms=configured_options.resolve_model_timeout_ms,
                 session_store=configured_options.session_store,
                 session_store_flush=configured_options.session_store_flush,
+                default_custom_context=configured_options.custom_context,
+                skill_evolution=normalized_skill_evolution,
             )
         except BaseException:
             await chosen_transport.close()
@@ -210,7 +225,7 @@ class InternalClient:
                     "message": {"role": "user", "content": prompt},
                     "parent_tool_use_id": None,
                 }
-                await chosen_transport.write(json.dumps(user_message) + "\n")
+                await query.write_user_message(user_message)
                 query.spawn_task(query.wait_for_result_and_end_input())
             elif isinstance(prompt, AsyncIterable):
                 # Stream input in background for async iterables

{qoder_agent_sdk-1.0.13 → qoder_agent_sdk-1.0.15}/src/qoder_agent_sdk/_internal/cloud_agent.py

@@ -950,6 +950,15 @@ class CloudAgentClientSession:
         _ = dry_run
         self._unsupported("rewind_files")
 
+    async def rewind(
+        self,
+        _user_message_id: str,
+        scope: str = "both",
+        dry_run: bool = False,
+    ) -> Any:
+        _ = (scope, dry_run)
+        self._unsupported("rewind")
+
     async def reload_plugins(self) -> Any:
         self._unsupported("reload_plugins")