@vegamo/deepcode-cli - npm Package Compare versions

Comparing version 0.1.24 to 0.1.25

package.json

 {
   "name": "@vegamo/deepcode-cli",
-  "version": "0.1.24",
+  "version": "0.1.25",
   "description": "Deep Code CLI - Vibe coding for the deepseek-v4 model in your terminal",
@@ -51,2 +51,3 @@ "license": "MIT",
     "react": "^19.2.5",
+    "undici": "^7.25.0",
     "zod": "^4.4.3"
@@ -53,0 +54,0 @@ },

README.md

@@ -11,2 +11,5 @@ <div align="center">
 
+[![][npm-release-shield]][npm-release-link] [![][npm-downloads-shield]][npm-downloads-link] [![][github-contributors-shield]][github-contributors-link] [![][github-forks-shield]][github-forks-link] [![][github-stars-shield]][github-stars-link]
+[![][github-issues-shield]][github-issues-link] [![][github-issues-pr-shield]][github-issues-pr-link] [![][github-license-shield]][github-license-link]
+
 [English](README-en.md) · 中文
@@ -64,21 +67,23 @@
 
-| 斜杠命令         | 操作                                        |
-|-----------------|---------------------------------------------|
-| `/`             | 打开 skills / 命令菜单                      |
-| `/new`          | 开始新对话                                  |
-| `/resume`       | 选择历史对话继续                            |
-| `/model`        | 切换模型、思考模式和推理强度                |
-| `/raw`          | 切换显示模式（Normal / Lite / Raw 滚动回溯）|
-| `/init`         | 初始化 AGENTS.md 文件                      |
-| `/skills`       | 列出可用 skills                             |
-| `/mcp`          | 查看 MCP 服务器状态和可用工具               |
-| `/exit`         | 退出（也可用连续 `Ctrl+D`）                 |
+| 斜杠命令        | 操作                               |
+|-------------|----------------------------------|
+| `/`         | 打开 skills / 命令菜单                 |
+| `/new`      | 开始新对话                            |
+| `/resume`   | 选择历史对话继续                         |
+| `/continue` | 继续当前对话，或选择历史对话恢复                 |
+| `/model`    | 切换模型、思考模式和推理强度                   |
+| `/raw`      | 切换显示模式（Normal / Lite / Raw 滚动回溯） |
+| `/init`     | 初始化 AGENTS.md 文件                 |
+| `/skills`   | 列出可用 skills                      |
+| `/mcp`      | 查看 MCP 服务器状态和可用工具                |
+| `/undo`     | 将代码和/或对话恢复到之前的状态                 |
+| `/exit`     | 退出（也可用连续 `Ctrl+D`）               |
 
-| 按键             | 操作                                        |
-|-----------------|---------------------------------------------|
-| `Enter`         | 发送消息                                    |
-| `Shift+Enter`   | 插入换行（也可用 `Ctrl+J`）                 |
-| `Ctrl+V`        | 从剪贴板粘贴图片                            |
-| `Esc`           | 中断当前模型回复                            |
-| 连续 `Ctrl+D`    | 退出                                        |
+| 按键            | 操作                 |
+|---------------|--------------------|
+| `Enter`       | 发送消息               |
+| `Shift+Enter` | 插入换行（也可用 `Ctrl+J`） |
+| `Ctrl+V`      | 从剪贴板粘贴图片           |
+| `Esc`         | 中断当前模型回复           |
+| 连续 `Ctrl+D`   | 退出                 |
 
@@ -116,3 +121,12 @@ ## 支持的模型
 
+### 如何配置 Deep Code 任务完成后发送通知？
 
+当 AI 助手完成一轮任务后，Deep Code 可以自动执行一个通知脚本，将任务结果发送到你指定的渠道（如 Slack、系统通知等）。
+
+详细配置指南：[docs/notify.md](docs/notify.md)
+
+### Deep Code 只支持 YOLO 模式吗？
+
+不是。Deep Code 内置了细粒度的权限控制机制，支持在 AI 助手执行 Shell 命令、读写文件、访问网络等操作前进行确认。你可以通过 `settings.json` 中的 `permissions` 字段按需配置每种权限范围的策略：始终允许、始终询问、或直接拒绝。详见 [docs/permission.md](docs/permission.md)。
+
 ### 是否支持 Coding Plan？
@@ -132,2 +146,3 @@
 ```
+
 ## 贡献
@@ -173,1 +188,20 @@
 - 分享给你的朋友和同事
+
+<!-- LINK GROUP -->
+
+[npm-release-link]: https://www.npmjs.com/package/@vegamo/deepcode-cli
+[npm-release-shield]: https://img.shields.io/npm/v/@vegamo/deepcode-cli?color=4d6BFE&labelColor=black&logo=npm&logoColor=white&style=flat-square&cacheSeconds=1800
+[npm-downloads-link]: https://www.npmjs.com/package/@vegamo/deepcode-cli
+[npm-downloads-shield]: https://img.shields.io/npm/dt/@vegamo/deepcode-cli?labelColor=black&style=flat-square&color=4d6BFE&cacheSeconds=1800
+[github-contributors-link]: https://github.com/lessweb/deepcode-cli/graphs/contributors
+[github-contributors-shield]: https://img.shields.io/github/contributors/lessweb/deepcode-cli?color=4d6BFE&labelColor=black&style=flat-square&cacheSeconds=1800
+[github-forks-link]: https://github.com/lessweb/deepcode-cli/network/members
+[github-forks-shield]: https://img.shields.io/github/forks/lessweb/deepcode-cli?color=4d6BFE&labelColor=black&style=flat-square&cacheSeconds=1800
+[github-stars-link]: https://github.com/lessweb/deepcode-cli/network/stargazers
+[github-stars-shield]: https://img.shields.io/github/stars/lessweb/deepcode-cli?color=4d6BFE&labelColor=black&style=flat-square&cacheSeconds=1800
+[github-issues-link]: https://github.com/lessweb/deepcode-cli/issues
+[github-issues-shield]: https://img.shields.io/github/issues/lessweb/deepcode-cli?color=4d6BFE&labelColor=black&style=flat-square&cacheSeconds=1800
+[github-issues-pr-link]: https://github.com/lessweb/deepcode-cli/pulls
+[github-issues-pr-shield]: https://img.shields.io/github/issues-pr/lessweb/deepcode-cli?color=4d6BFE&labelColor=black&style=flat-square&cacheSeconds=1800
+[github-license-link]: https://github.com/lessweb/deepcode-cli/blob/main/LICENSE
+[github-license-shield]: https://img.shields.io/github/license/lessweb/deepcode-cli?color=4d6BFE&labelColor=black&style=flat-square&cacheSeconds=1800

templates/tools/bash.md

@@ -31,2 +31,7 @@ ## Bash
   - The command argument is required.
+  - The sideEffects argument is required. Declare the minimum permission scopes the command may need.
+  - Use `sideEffects: []` only for commands that do not read, write, delete, query Git history, mutate Git history, or access the network, such as `date` or `node --version`.
+  - Use `*-out-cwd` when the command accesses paths outside the current workspace. For example, `cat /etc/hosts` requires `["read-out-cwd"]`.
+  - Use `query-git-log` for commands such as `git log`, `git show HEAD`, `git blame`, or history diffs. Use `mutate-git-log` for commands such as `git commit`, `git reset`, `git rebase`, `git merge`, `git cherry-pick`, or `git tag`.
+  - Use `["unknown"]` when you cannot classify the command safely.
   - It is very helpful if you write a clear, concise description of what this command does. For simple commands, keep it brief (5-10 words). For complex commands (piped commands, obscure flags, or anything hard to understand at a glance), add enough context to clarify what it does.
@@ -64,6 +69,27 @@ - If the output exceeds 30000 characters, output will be truncated before being returned to you.
       "type": "string"
+    },
+    "sideEffects": {
+      "description": "Permission scopes required by this bash command. Use [] only for commands that do not read, write, delete, or access the network. Use [\"unknown\"] when the effects cannot be classified safely.",
+      "type": "array",
+      "items": {
+        "type": "string",
+        "enum": [
+          "read-in-cwd",
+          "read-out-cwd",
+          "write-in-cwd",
+          "write-out-cwd",
+          "delete-in-cwd",
+          "delete-out-cwd",
+          "query-git-log",
+          "mutate-git-log",
+          "network",
+          "unknown"
+        ]
+      },
+      "uniqueItems": true
     }
   },
   "required": [
-    "command"
+    "command",
+    "sideEffects"
   ],
@@ -70,0 +96,0 @@ "additionalProperties": false

New alerts

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

516214

13.35%

Lines of code

13490

13.22%

Number of lines in readme file

202

19.53%

Worsened metrics

Dependency count

11

10%

Number of low supply chain risk alerts

36

5.88%

Number of medium supply chain risk alerts

14

16.67%

Dependency changes

• + Added

  undici@^7.25.0

• + Added

  undici@7.27.2
  (transitive)