PyModel · elkaix · Sep 30, 2026 · Oct 1, 2026 · Oct 1, 2026 · Oct 1, 2026
diff --git a/.changeset/completion-cap-opt-in.md b/.changeset/completion-cap-opt-in.md
@@ -0,0 +1,5 @@
+---
+"@pymodel/pythinker-code": patch
+---
+
+Stop sending a default completion token cap to models; set maxCompletionTokens in modelOverrides to cap output again.
diff --git a/.changeset/fork-cron-clear.md b/.changeset/fork-cron-clear.md
@@ -0,0 +1,5 @@
+---
+"@pymodel/pythinker-code": patch
+---
+
+Forked sessions no longer inherit the source session's scheduled tasks; the source keeps them and the fork notes the clearing.
diff --git a/.changeset/roll-back-trust-boundary-hardening.md b/.changeset/roll-back-trust-boundary-hardening.md
@@ -0,0 +1,5 @@
+---
+"@pymodel/pythinker-code": patch
+---
+
+Stop restricting file tools and background git through symlink-realpath gates and repo-config probes; project-local `local.toml` loads without the trust prompt again. Writes to paths that resolve to env files, credentials, or SSH keys are still blocked.
diff --git a/.changeset/status-and-undo-fixes.md b/.changeset/status-and-undo-fixes.md
@@ -0,0 +1,5 @@
+---
+"@pymodel/pythinker-code": patch
+---
+
+Publish permission mode changes on agent status updates, stop NotifyUser nudges in clients without an updates panel, and drop the interruption reminder when its turn is undone.
diff --git a/.changeset/trust-disclosure.md b/.changeset/trust-disclosure.md
@@ -0,0 +1,5 @@
+---
+"@pymodel/pythinker-code": minor
+---
+
+The workspace trust prompt now lists the MCP servers, extra directories, and project instruction sources that trusting would activate.
diff --git a/.changeset/trust-workspace-env.md b/.changeset/trust-workspace-env.md
@@ -0,0 +1,5 @@
+---
+"@pymodel/pythinker-code": minor
+---
+
+Add PYTHINKER_CODE_TRUST_WORKSPACE=1 to trust the current workspace for headless runs without answering the trust prompt.
diff --git a/.changeset/watch-default-on.md b/.changeset/watch-default-on.md
@@ -0,0 +1,5 @@
+---
+"@pymodel/pythinker-code": patch
+---
+
+Watch config, skills, and AGENTS.md files for changes again by default; set `[watch] enabled = false` or PYTHINKER_CODE_WATCH=0 to keep them off.
diff --git a/README.md b/README.md
@@ -1,207 +1 @@
-<div align="center">
-
-# <img src="https://raw.githubusercontent.com/PyModel/pythinker-code/main/docs/media/pythinker_animated.svg" alt="Pythinker logo" width="34" align="top"> Pythinker Code
-
-### A coding agent you can run as a desktop app
-
-[![release](https://img.shields.io/github/v/release/PyModel/pythinker-desktop-releases?style=flat-square&label=release&color=4f46e5)](https://github.com/PyModel/pythinker-desktop-releases/releases/latest)
-[![Downloads](https://img.shields.io/endpoint?url=https://raw.githubusercontent.com/PyModel/pythinker-code/badges/downloads-total.json&style=flat&label=Downloads&labelColor=18181b&color=dfb317)](https://code.pythinker.com/)
-[![macOS](https://img.shields.io/badge/macOS-e5e7eb?style=flat-square&logo=apple&logoColor=000000)](https://code.pythinker.com/) | [![Windows](https://img.shields.io/badge/Windows-e5e7eb?style=flat-square&logo=data:image/svg%2Bxml;base64,PHN2ZyByb2xlPSJpbWciIHZpZXdCb3g9IjAgMCAyNCAyNCIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj48dGl0bGU+V2luZG93cyAxMTwvdGl0bGU+PHBhdGggZmlsbD0iIzAwNzhENCIgZD0iTTAsMEgxMS4zNzdWMTEuMzcySDBaTTEyLjYyMywwSDI0VjExLjM3MkgxMi42MjNaTTAsMTIuNjIzSDExLjM3N1YyNEgwWm0xMi42MjMsMEgyNFYyNEgxMi42MjMiLz48L3N2Zz4=)](https://code.pythinker.com/)
-[![Node.js](https://img.shields.io/badge/Node.js-24.15%2B-339933?style=flat-square&logo=nodedotjs&logoColor=white)](package.json)
-[![visitors](https://komarev.com/ghpvc/?username=PyModel-pythinker-code&label=visitors&color=4f46e5&style=flat-square)](https://github.com/PyModel/pythinker-code)
-
-<a href="#get-the-desktop-app">Download</a> &nbsp;·&nbsp;
-<a href="#what-the-agent-can-do">Capabilities</a> &nbsp;·&nbsp;
-<a href="#in-the-terminal">Terminal</a> &nbsp;·&nbsp;
-<a href="#in-your-editor">Editor</a> &nbsp;·&nbsp;
-<a href="#development">Development</a>
-
-<br />
-
-<img src="docs/media/desktop-ui.webp" alt="Pythinker Desktop" width="860">
-
-</div>
-
----
-
-## Get the desktop app
-
-**[Download for macOS or Windows](https://code.pythinker.com/)**
-
-Install it, open it, and describe a task. Pythinker then works on your project the way a colleague would: it reads the code, changes files, runs commands, checks what happened, and keeps going until the job is done.
-
-The app runs the whole agent on your machine. It starts a local host bound to loopback, so nothing is exposed to your network. Closing the window hides the app to the tray instead of killing it, so a long session survives.
-
-If you already use the CLI, the app picks up the same data directory (`~/.pythinker-code/` by default). Your login, providers, MCP servers, and past sessions are already there. Updates install themselves, and Settings has a switch if you would rather they did not.
-
-macOS gets a `.dmg`. Windows gets a per-user installer that does not ask for administrator rights. There is no Linux build yet, so on Linux use the terminal version or run `pythinker web` for the browser interface.
-
-More detail is in the [desktop guide](https://pymodel.github.io/pythinker-code/guides/desktop).
-
----
-
-## What the agent can do
-
-Everything below behaves the same in the app, in the terminal, and in your editor.
-
-### Work on a real codebase
-
-Pythinker searches and reads your repository, edits files, runs shell commands, and reads the output before it decides what to do next. It runs your tests, reads the failures, and tries again. Ask it to refactor a module, trace a bug, or fill in missing tests, and give it as much rope as you are comfortable with.
-
-### Split work across subagents
-
-Large tasks get delegated. A `coder` subagent makes scoped edits, `explore` maps unfamiliar parts of the repo, and `plan` designs the approach. They run in parallel with their own context, so the main conversation stays readable instead of filling with file dumps.
-
-### Keep control of the tools
-
-You see a tool call before it runs, and you approve it. The permission model lets you pre-approve the boring calls and hold the risky ones. Hooks fire on lifecycle events, so you can block a command, record a decision, or trigger something in your own systems.
-
-### Load your own tools and instructions
-
-`/mcp-config` adds and authenticates [Model Context Protocol](https://modelcontextprotocol.io/) servers from inside a session, over stdio or HTTP, and remembers them for next time. Skills are repo-local instruction files that load on demand with `/skill:<name>`. Plugins bundle skills, servers, and data sources from the marketplace or straight from GitHub.
-
-### Use the model you want
-
-Pythinker models work out of the box. Other providers work by configuration, including any OpenAI-compatible endpoint and local ones.
-
-### Show it instead of describing it
-
-Drop a screen recording into the conversation when the bug is easier to show than to write down.
-
----
-
-## In the terminal
-
-The CLI ships as a native binary, so there is no Node.js prerequisite.
-
-| Platform | Command |
-|---|---|
-| macOS / Linux | `curl -fsSL https://code.pythinker.com/pythinker-code/install.sh \| bash` |
-| Homebrew | `brew install pymodel/tap/pythinker-code` |
-| Windows (PowerShell) | `irm https://code.pythinker.com/pythinker-code/install.ps1 \| iex` |
-| Nix | `nix run github:PyModel/pythinker-code` |
-| npm | `npm install -g @pymodel/pythinker-code` (needs Node.js 24.15+) |
-
-```sh
-cd your-project
-pythinker
-```
-
-Run `/login` on first launch and pick [OAuth](https://pythinker.com/code) or an [API key](https://pythinker.com/code/console). Then ask for something real:
-
-```text
-Find where authentication is handled and add a unit test for the token refresh path.
-```
-
-> [!NOTE]
-> On Windows, install [Git for Windows](https://gitforwindows.org/) first. Pythinker uses the bundled Git Bash as its shell. To point at a different one, set `PYTHINKER_SHELL_PATH` to the full path of `bash.exe`.
-
-<div align="center">
-<img src="https://raw.githubusercontent.com/PyModel/pythinker-code/main/docs/media/terminal-ui.webp" alt="Pythinker Code terminal demo" width="860">
-</div>
-
----
-
-## In your editor
-
-Pythinker speaks the [Agent Client Protocol](https://agentclientprotocol.com/), so Zed, JetBrains, and other ACP editors can host a full session inline. Log in once from the CLI, then point the editor at `pythinker acp`.
-
-<details>
-<summary>Zed configuration</summary>
-
-Add to `~/.config/zed/settings.json`:
-
-```json
-{
-  "agent_servers": {
-    "Pythinker Code": {
-      "type": "custom",
-      "command": "pythinker",
-      "args": ["acp"],
-      "env": {}
-    }
-  }
-}
-```
-
-</details>
-
-[Using in IDEs](https://pymodel.github.io/pythinker-code/guides/ides) covers JetBrains setup and the capability matrix.
-
-<div align="center">
-<img src="https://raw.githubusercontent.com/PyModel/pythinker-code/main/docs/media/acp-integration.gif" alt="ACP IDE integration demo" width="860">
-</div>
-
----
-
-## Documentation
-
-| Topic | Link |
-|-------|------|
-| Desktop app | [guides/desktop](https://pymodel.github.io/pythinker-code/guides/desktop) |
-| Getting started | [guides/getting-started](https://pymodel.github.io/pythinker-code/guides/getting-started) |
-| Interaction and approvals | [guides/interaction](https://pymodel.github.io/pythinker-code/guides/interaction) |
-| Sessions | [guides/sessions](https://pymodel.github.io/pythinker-code/guides/sessions) |
-| Configuration | [configuration/config-files](https://pymodel.github.io/pythinker-code/configuration/config-files) |
-| Command reference | [reference/pythinker-command](https://pymodel.github.io/pythinker-code/reference/pythinker-command) |
-
----
-
-## Development
-
-Pythinker Code is a pnpm monorepo. The desktop app and the CLI both talk to the SDK, never to the engine packages directly.
-
-<p align="center">
-  <img src="docs/media/Architecture.webp" alt="Pythinker Code architecture" width="836" />
-</p>
-
-| Package | Role |
-|---------|------|
-| `apps/desktop` | macOS and Windows desktop application |
-| `apps/pythinker-code` | CLI and terminal UI |
-| `apps/pythinker-web` | Browser interface that the desktop app renders |
-| `packages/agent-core` | Agent engine: sessions, tools, skills, permissions, plans |
-| `packages/kosong` | LLM and provider abstraction |
-| `packages/pyaos` | Execution environment, file and process abstractions |
-| `packages/server` | REST and WebSocket session host (`/api/v1`) |
-| `packages/node-sdk` | Public TypeScript SDK |
-
-Requirements: Node.js 24.15-24.x, pnpm 10.34.3, Git.
-
-```sh
-git clone https://github.com/PyModel/pythinker-code.git
-cd pythinker-code
-pnpm install
-
-pnpm dev:desktop    # desktop app in dev mode
-pnpm dev:cli        # CLI in dev mode
-pnpm test           # Vitest
-pnpm typecheck      # TypeScript
-pnpm lint           # oxlint
-pnpm build          # build everything
-```
-
----
-
-## Contributing
-
-Bug reports, PRs, plugins, skills, and docs are all welcome. Start with [`CONTRIBUTING.md`](CONTRIBUTING.md), and read [`SECURITY.md`](SECURITY.md) before reporting a vulnerability.
-
-Open an issue before large refactors or API changes. Use Conventional Commits, add a changeset (`pnpm changeset`) when your PR affects a release artifact, and be ready to explain your diff. AI-assisted PRs are held to the same standard as hand-written ones.
-
----
-
-## License
-
-MIT. See [`LICENSE`](LICENSE).
-
-Our TUI is built on [`pi-tui`](https://github.com/earendil-works/pi-mono/tree/main/packages/tui). Thanks to its authors.
-
-<div align="center">
-
-[code.pythinker.com](https://code.pythinker.com) &nbsp;·&nbsp;
-[Download](https://code.pythinker.com/) &nbsp;·&nbsp;
-[npm](https://www.npmjs.com/package/@pymodel/pythinker-code) &nbsp;·&nbsp;
-[Docs](https://pymodel.github.io/pythinker-code/)
-
-</div>
+# fixture
diff --git a/apps/pythinker-code/src/cli/v2/run-v2-print.ts b/apps/pythinker-code/src/cli/v2/run-v2-print.ts
@@ -519,7 +519,7 @@ export function formatTrustGatedMcpWarning(servers: readonly TrustGatedMcpServer
   const list = servers.map((server) => `${server.name} (${server.target})`).join(', ');
   return (
     `Warning: this folder is not trusted; skipped ${servers.length} project-level MCP ${noun}: ${list}.\n` +
-    '  Run `pythinker` here and choose "Trust this folder" to enable them.\n\n'
+    '  Run `pythinker` here and choose "Trust this folder", or set PYTHINKER_CODE_TRUST_WORKSPACE=1, to enable them.\n\n'
   );
 }
 

diff --git a/apps/pythinker-code/src/feedback/codebase/scanner.ts b/apps/pythinker-code/src/feedback/codebase/scanner.ts
@@ -4,8 +4,6 @@ import { lstat, readdir } from 'node:fs/promises';
 import { join, relative, resolve } from 'node:path';
 import { promisify } from 'node:util';
 
-import { GIT_CONFIG_ARGS } from '#/utils/git/git-args';
-
 import {
   DEFAULT_MAX_ARCHIVE_SIZE,
   DEFAULT_MAX_FILES,
@@ -48,9 +46,9 @@ export async function scanCodebase(
   const root = resolve(rootInput);
   const limits = resolveLimits(options.limits);
   throwIfAborted(options.signal);
-  const usedGitIgnore = await isInsideGitWorkTree(root, GIT_CONFIG_ARGS);
+  const usedGitIgnore = await isInsideGitWorkTree(root);
   const collected = usedGitIgnore
-    ? await scanWithGit(root, GIT_CONFIG_ARGS, limits, options.signal)
+    ? await scanWithGit(root, limits, options.signal)
     : await scanWithoutFilter(root, limits, options.signal);
   const sortedFiles = collected.files.toSorted((a, b) => a.path.localeCompare(b.path));
 
@@ -71,18 +69,9 @@ function resolveLimits(limits: ScanCodebaseOptions['limits']): ScanCodebaseLimit
   };
 }
 
-async function isInsideGitWorkTree(
-  root: string,
-  configArgs: readonly string[],
-): Promise<boolean> {
+async function isInsideGitWorkTree(root: string): Promise<boolean> {
   try {
-    const { stdout } = await execFileAsync('git', [
-      ...configArgs,
-      '-C',
-      root,
-      'rev-parse',
-      '--is-inside-work-tree',
-    ]);
+    const { stdout } = await execFileAsync('git', ['-C', root, 'rev-parse', '--is-inside-work-tree']);
     return stdout.trim() === 'true';
   } catch {
     return false;
@@ -91,21 +80,12 @@ async function isInsideGitWorkTree(
 
 async function scanWithGit(
   root: string,
-  configArgs: readonly string[],
   limits: ScanCodebaseLimits,
   signal?: AbortSignal,
 ): Promise<CollectedFiles> {
   const { stdout } = await execFileAsync(
     'git',
-    [
-      ...configArgs,
-      '-C',
-      root,
-      'ls-files',
-      '-co',
-      '--exclude-standard',
-      '-z',
-    ],
+    ['-C', root, 'ls-files', '-co', '--exclude-standard', '-z'],
     { encoding: 'buffer', maxBuffer: 1024 * 1024 * 64, signal },
   );