rockycode 0.1.0__tar.gz

rockycode-0.1.0/.dockerignore

@@ -0,0 +1,22 @@
+__pycache__/
+*.py[cod]
+*.egg-info/
+dist/
+build/
+.venv/
+venv/
+.cache/
+.pytest_cache/
+.ruff_cache/
+.mypy_cache/
+results/
+logs/
+.git/
+.gitignore
+.dockerignore
+docker-compose.yml
+Dockerfile
+*.md
+!README.md
+.env
+.env.*.local

rockycode-0.1.0/.github/workflows/ci.yml

@@ -0,0 +1,27 @@
+name: ci
+
+# Smoke tier only: pure tests (fake DeepSeek streams) — no API key, no docker,
+# no network. Runs on every push/PR, including fork PRs, because there are no
+# secrets to leak. The real (token-spending) canary stays local; see
+# tests/run_real.py.
+on:
+  push:
+    branches: [main, permit]
+  pull_request:
+
+jobs:
+  smoke:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v8.2.0  # no floating v8 tag; pin the exact release
+        with:
+          enable-cache: true
+
+      - name: Sync deps from the lockfile
+        run: uv sync --frozen
+
+      - name: Smoke tests (the CORE gate)
+        run: uv run python tests/run_all.py

rockycode-0.1.0/.github/workflows/release.yml

@@ -0,0 +1,73 @@
+name: Release
+
+on:
+  push:
+    tags: ["v*"]
+  workflow_dispatch:
+
+jobs:
+  release:
+    runs-on: macos-13  # x86_64 Mac — the only platform missing cbor2 wheels
+    strategy:
+      matrix:
+        python: ["3.11", "3.12", "3.13"]
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup uv
+        uses: astral-sh/setup-uv@v5
+        with:
+          enable-cache: true
+          python-version: ${{ matrix.python }}
+
+      - name: Install Rust (cbor2 needs it on macOS x86_64)
+        run: rustup update stable
+
+      - name: Build rockycode wheel (only once)
+        if: matrix.python == '3.11'
+        run: uv build
+
+      - name: Build cbor2 wheel
+        run: uv pip wheel cbor2==6.1.2 --no-deps -w dist/
+
+      - name: Upload wheels
+        uses: actions/upload-artifact@v4
+        with:
+          name: wheels-${{ matrix.python }}
+          path: dist/
+
+  publish:
+    needs: release
+    runs-on: ubuntu-latest
+    steps:
+      - name: Download all wheels
+        uses: actions/download-artifact@v4
+        with:
+          path: dist/
+          pattern: wheels-*
+          merge-multiple: true
+
+      - name: Show artifacts
+        run: ls -la dist/
+
+      - name: Release
+        uses: softprops/action-gh-release@v2
+        with:
+          files: dist/*
+          generate_release_notes: true
+
+  # rockycode is pure-Python, so PyPI publishing builds on Ubuntu and does NOT
+  # depend on the macOS `release` job (which only exists for the cbor2 wheel on
+  # the GitHub-Release side). This keeps publishing off the slow macOS queue.
+  pypi:
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write            # OIDC — this is what Trusted Publishing uses
+    steps:
+      - uses: actions/checkout@v4
+      - name: Setup uv
+        uses: astral-sh/setup-uv@v5
+      - name: Build rockycode (sdist + wheel — only our project lands in dist/)
+        run: uv build
+      - name: Publish to PyPI (Trusted Publishing, no token)
+        uses: pypa/gh-action-pypi-publish@release/v1

rockycode-0.1.0/.gitignore

@@ -0,0 +1,46 @@
+# Python
+__pycache__/
+*.py[cod]
+*$py.class
+*.egg-info/
+dist/
+build/
+
+# Virtual envs
+.venv/
+venv/
+.python-version
+
+# Env / secrets
+.env
+.env.local
+.env.*.local
+
+# Caches
+.cache/
+.pytest_cache/
+.ruff_cache/
+.mypy_cache/
+
+# Benchmark run artifacts (predictions, eval logs, scorer summaries)
+results/predictions/
+results/runs/
+results/*.jsonl
+logs/
+/raw-*.json
+/rockycode-*.json
+
+# rockycode runtime (trajectories, artifacts, local config)
+.rockycode/
+
+# OS
+.DS_Store
+
+# Editors
+.vscode/
+.idea/
+*.swp
+# ...but the VS Code extension commits its own launch/build config so
+# contributors can F5 the Extension Development Host. Re-include it.
+!rockycode-vscode/.vscode/
+!rockycode-vscode/.vscode/*

rockycode-0.1.0/CHANGELOG.md

@@ -0,0 +1,20 @@
+# Changelog
+
+All notable changes to rockycode are recorded here. The format follows
+[Keep a Changelog](https://keepachangelog.com/), and the project follows
+[Semantic Versioning](https://semver.org/) — pre-1.0, so the surface may still
+change between minor versions.
+
+## [Unreleased]
+
+_Nothing yet._
+
+## [0.1.0] — first public release
+
+Initial public release. One repo, one engine, three ways to use it — interactive
+`chat`, autonomous `goal`, and the `bench` measurement rig — running on DeepSeek
+or any OpenAI-compatible model.
+
+Some capabilities ship as **experimental and default-off** (self-improvement,
+`prove` / `lean-prover`, `explore`, and providers other than DeepSeek); see the
+README's Experimental section for what they are and how to enable them.

rockycode-0.1.0/CONTRIBUTING.md

@@ -0,0 +1,63 @@
+# Contributing to rockycode
+
+Thanks for wanting to help Rocky get there anyway. This is a small, opinionated
+project, so a little context up front saves everyone time.
+
+## What rockycode is trying to be
+
+- **Its own agent, not a clone.** We borrow good ideas from Claude Code, Codex,
+  and others selectively — but the design is our own, and *minimal* is the
+  default. A feature earns its place; it doesn't get in because a bigger tool has
+  it.
+- **Small core, honest extras.** The base install stays lean. Anything heavy
+  (SWE-bench, pandas, PDF, keyring) lives behind an extra. A PR that pulls a big
+  new runtime dependency into the core needs a strong reason.
+- **Security-conscious by default.** rockycode is built to run inside repos you
+  don't fully trust. New code that touches shell, network, file paths, config
+  loading, or credentials is held to that bar — see [SECURITY.md](SECURITY.md).
+- **Measured, not guessed.** Behavior changes to the agent should come with a
+  way to tell if they helped. The `bench` harness exists for exactly this.
+
+## Getting set up
+
+```bash
+git clone https://github.com/cicialgo/rockycode.git
+cd rockycode
+uv pip install -e .            # or: pip install -e .
+# extras as needed:
+uv pip install -e '.[bench]'   # SWE-bench harness (heavy: docker, datasets)
+uv pip install -e '.[keyring]' # store your key in the OS keychain
+```
+
+First run walks you through pasting an API key (DeepSeek or any
+OpenAI-compatible endpoint). Then:
+
+```bash
+rockycode chat                 # interactive TUI
+rockycode goal "…"             # autonomous run (sandboxed worktree copy)
+```
+
+## Before you open a PR
+
+1. **Run the test suite** — `python tests/run_all.py`. It should be green.
+2. **Lint** — `ruff check .` (config is in `pyproject.toml`).
+3. **Match the surrounding code.** Read the file you're editing and mirror its
+   naming, comment density, and idioms. New code should be indistinguishable in
+   style from what's around it.
+4. **Keep the diff tight.** One change per PR. No drive-by reformatting of files
+   you didn't otherwise touch — it buries the real change in noise.
+5. **Explain the why.** The PR description should say what problem this solves,
+   not just what it does. If it changes agent behavior, say how you checked it
+   helped.
+
+## Reporting bugs and ideas
+
+- **Bugs / features** — open a GitHub issue with enough to reproduce (command,
+  OS, what you expected vs. saw).
+- **Security vulnerabilities** — **do not** open a public issue. Use GitHub's
+  private advisory flow; see [SECURITY.md](SECURITY.md).
+
+## Licensing
+
+rockycode is MIT-licensed. By contributing, you agree your contribution is
+licensed under the same terms.

rockycode-0.1.0/Dockerfile

@@ -0,0 +1,23 @@
+FROM ghcr.io/astral-sh/uv:python3.12-bookworm
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    git \
+    docker.io \
+    && rm -rf /var/lib/apt/lists/*
+
+WORKDIR /app
+COPY pyproject.toml uv.lock ./
+RUN uv sync --frozen --no-dev --no-install-project
+
+COPY rockycode /app/rockycode
+COPY prompts /app/prompts
+COPY bench /app/bench
+COPY README.md /app/README.md
+
+RUN uv sync --frozen --no-dev
+
+ENV PATH="/app/.venv/bin:$PATH"
+ENV TEXTUAL_DISABLE_KITTY_KEY=1
+
+ENTRYPOINT ["rockycode"]
+CMD ["chat"]

rockycode-0.1.0/Dockerfile.sandbox

@@ -0,0 +1,13 @@
+FROM debian:bookworm-slim
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    git \
+    python3 \
+    python3-pip \
+    curl \
+    grep \
+    findutils \
+    && rm -rf /var/lib/apt/lists/*
+
+WORKDIR /workspace
+CMD ["tail", "-f", "/dev/null"]

rockycode-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 rockycode contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.