Release 0.4.0

elkaix · elkaix · commit 64142346cb33 · 2026-08-03T18:11:20.000-04:00
- Shift-Tab cycles thinking effort; plan mode moves to /plan (docs updated)
- Prompt-box border tints with a per-effort color gradient (grey/blue/magenta/dark red/golden)
- Ported upstream fixes: goal step-cap continuation, repeat breaker counts
  validation-rejected tool calls, fail-fast on quota-exhausted 429s
- No default provider endpoint: pythinker ships no hosted service; base URL
  is required config (fail-loud in provider and env-model)
- Restored real Kimi coding-plan model ids in ACP thinking-toggle list
- Security: dep updates (tar critical, undici, fast-uri, brace-expansion),
  react-router 8, @hono/node-server 2, vite/babel overrides
- Web UI fix batch ported from upstream
diff --git a/apps/dashboard/package.json b/apps/dashboard/package.json
@@ -14,6 +14,6 @@
     "start": "node server/dist/server.mjs"
   },
   "devDependencies": {
-    "concurrently": "^9.1.2"
+    "concurrently": "^9.2.4"
   }
 }
diff --git a/apps/dashboard/server/package.json b/apps/dashboard/server/package.json
@@ -31,13 +31,13 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@hono/node-server": "^1.13.7",
+    "@hono/node-server": "^2.0.5",
     "@pythoughts/agent-core": "workspace:^",
     "@pythoughts/kosong": "workspace:^",
-    "hono": "^4.12.25"
+    "hono": "^4.13.0"
   },
   "devDependencies": {
-    "tsx": "^4.22.4",
+    "tsx": "^4.23.5",
     "vitest": "4.1.9"
   }
 }
diff --git a/apps/dashboard/web/package.json b/apps/dashboard/web/package.json
@@ -21,20 +21,20 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@tanstack/react-query": "^5.101.0",
-    "@tanstack/react-virtual": "^3.14.3",
-    "react": "^19.2.7",
-    "react-dom": "^19.2.7",
-    "react-router-dom": "^7.18.0"
+    "@tanstack/react-query": "^5.101.4",
+    "@tanstack/react-virtual": "^3.14.9",
+    "react": "^19.2.8",
+    "react-dom": "^19.2.8",
+    "react-router": "^8.3.0"
   },
   "devDependencies": {
-    "@tailwindcss/vite": "^4.3.1",
-    "@types/react": "^19.2.17",
-    "@types/react-dom": "^19.1.2",
-    "@vitejs/plugin-react": "^4.4.1",
-    "tailwindcss": "^4.3.1",
+    "@tailwindcss/vite": "^4.3.3",
+    "@types/react": "^19.2.18",
+    "@types/react-dom": "^19.2.4",
+    "@vitejs/plugin-react": "^4.7.0",
+    "tailwindcss": "^4.3.3",
     "typescript": "6.0.3",
-    "vite": "^6.3.3",
+    "vite": "^6.4.3",
     "vite-plugin-singlefile": "^2.3.3"
   }
 }
diff --git a/apps/dashboard/web/src/App.tsx b/apps/dashboard/web/src/App.tsx
@@ -1,4 +1,4 @@
-import { Route, Routes } from 'react-router-dom';
+import { Route, Routes } from 'react-router';
 import { AppShell } from './components/layout/AppShell';
 import { SessionListPage } from './pages/SessionListPage';
 import { SessionDetailPage } from './pages/SessionDetailPage';
diff --git a/apps/dashboard/web/src/components/layout/AppShell.tsx b/apps/dashboard/web/src/components/layout/AppShell.tsx
@@ -1,6 +1,6 @@
 import type { ReactNode } from 'react';
 import { useQueryClient } from '@tanstack/react-query';
-import { Link } from 'react-router-dom';
+import { Link } from 'react-router';
 import { SessionRail } from '../sessions/SessionRail';
 import { useTheme, type ThemeChoice, type ResolvedTheme } from '../../hooks/useTheme';
 
diff --git a/apps/dashboard/web/src/components/layout/TabBar.tsx b/apps/dashboard/web/src/components/layout/TabBar.tsx
@@ -1,4 +1,4 @@
-import { useSearchParams } from 'react-router-dom';
+import { useSearchParams } from 'react-router';
 
 export interface TabSpec {
   id: string;
diff --git a/apps/dashboard/web/src/components/sessions/SessionCard.tsx b/apps/dashboard/web/src/components/sessions/SessionCard.tsx
@@ -1,5 +1,5 @@
 import type { MouseEvent } from 'react';
-import { useParams, Link } from 'react-router-dom';
+import { useParams, Link } from 'react-router';
 import type { SessionSummary } from '../../types';
 import { formatRelativeTime } from '../../util/time';
 
diff --git a/apps/dashboard/web/src/components/sessions/SessionRail.tsx b/apps/dashboard/web/src/components/sessions/SessionRail.tsx
@@ -1,5 +1,5 @@
 import { useMemo, useState } from 'react';
-import { useNavigate, useParams } from 'react-router-dom';
+import { useNavigate, useParams } from 'react-router';
 
 import { useDeleteSession, useSessions } from '../../hooks/useSession';
 import type { SessionSummary, SessionHealth } from '../../types';
diff --git a/apps/dashboard/web/src/components/subagents/SubagentNode.tsx b/apps/dashboard/web/src/components/subagents/SubagentNode.tsx
@@ -1,4 +1,4 @@
-import { Link, useParams } from 'react-router-dom';
+import { Link, useParams } from 'react-router';
 import type { AgentNode } from '../../types';
 import { Pill, type PillTone } from '../shared/Pill';
 
diff --git a/apps/dashboard/web/src/main.tsx b/apps/dashboard/web/src/main.tsx
@@ -1,7 +1,7 @@
 import { StrictMode } from 'react';
 import { createRoot } from 'react-dom/client';
 import { QueryClient, QueryClientProvider } from '@tanstack/react-query';
-import { BrowserRouter } from 'react-router-dom';
+import { BrowserRouter } from 'react-router';
 import { App } from './App';
 import './theme.css';
 
diff --git a/apps/dashboard/web/src/pages/SessionDetailPage.tsx b/apps/dashboard/web/src/pages/SessionDetailPage.tsx
@@ -1,5 +1,5 @@
 import { useState } from 'react';
-import { useParams } from 'react-router-dom';
+import { useParams } from 'react-router';
 
 import { api } from '../api';
 import { CopyButton } from '../components/shared/CopyButton';
diff --git a/apps/dashboard/web/src/pages/SubagentDetailPage.tsx b/apps/dashboard/web/src/pages/SubagentDetailPage.tsx
@@ -1,4 +1,4 @@
-import { Link, useParams } from 'react-router-dom';
+import { Link, useParams } from 'react-router';
 import { useSession } from '../hooks/useSession';
 import { TabBar, useActiveTab } from '../components/layout/TabBar';
 import { ContextTab } from '../components/context/ContextTab';
diff --git a/apps/pythinker-code/CHANGELOG.md b/apps/pythinker-code/CHANGELOG.md
@@ -1,5 +1,11 @@
 # @pythoughts/pythinker-code
 
+## 0.4.0
+
+### Minor Changes
+
+- Shift-Tab now cycles thinking effort (plan mode moves to /plan), the prompt-box border tints with a per-effort color gradient, upstream fixes ported (goal step-cap continuation, repeat-breaker for validation-rejected tool calls, fail-fast on quota-exhausted 429s), no default provider endpoint (configure your own base URL), restored real Kimi coding-plan model ids in the ACP thinking-toggle list, and dependency security updates.
+
 ## 0.3.0
 
 ### Minor Changes
diff --git a/apps/pythinker-code/package.json b/apps/pythinker-code/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@pythoughts/pythinker-code",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "The Starting Point for Next-Gen Agents",
   "license": "MIT",
   "author": "Pythoughts",
@@ -76,15 +76,15 @@
   },
   "optionalDependencies": {
     "@mariozechner/clipboard": "^0.3.9",
-    "chalk": "^5.4.1",
+    "chalk": "^5.6.2",
     "cli-highlight": "^2.1.11",
     "commander": "^13.1.0",
-    "koffi": "^2.16.0",
+    "koffi": "^2.16.3",
     "node-pty": "^1.1.0",
     "pathe": "^2.0.3",
-    "pino-pretty": "^13.0.0",
-    "semver": "^7.8.4",
-    "smol-toml": "^1.6.1",
+    "pino-pretty": "^13.1.3",
+    "semver": "^7.8.5",
+    "smol-toml": "^1.7.1",
     "zod": "^4.4.3"
   },
   "dependencies": {
@@ -105,8 +105,8 @@
     "@pythoughts/pythinker-telemetry": "workspace:^",
     "@pythoughts/pythinker-web": "workspace:^",
     "@pythoughts/server": "workspace:^",
-    "@types/node": "^26.1.1",
-    "@types/semver": "^7.7.0",
+    "@types/node": "^26.1.2",
+    "@types/semver": "^7.8.0",
     "@types/yazl": "^2.4.6",
     "@xterm/headless": "6.0.0",
     "chalk": "^5.4.1",
@@ -116,9 +116,9 @@
     "postject": "1.0.0-alpha.6",
     "semver": "^7.7.4",
     "smol-toml": "^1.6.1",
-    "tsx": "^4.22.4",
+    "tsx": "^4.23.5",
     "unplugin-solid": "1.0.0",
-    "vite": "^6.3.3",
+    "vite": "^6.4.3",
     "yazl": "^3.3.1",
     "zod": "^4.4.3"
   },
diff --git a/apps/pythinker-code/src/tui/controllers/editor-keyboard.ts b/apps/pythinker-code/src/tui/controllers/editor-keyboard.ts
@@ -318,7 +318,8 @@ export class EditorKeyboardController {
     }
     host.setAppState({ thinkingLevel: next });
     host.track('thinking_toggle', { enabled: next !== 'off', effort: next });
-    host.showNotice(`Thinking effort: ${next}`);
+    // No transcript notice: the footer already shows the new level live, and
+    // rapid cycling would stack a line per keypress in the chat history.
   }
 
   private cancelCurrentCompaction(): void {
diff --git a/apps/pythinker-code/src/tui/pythinker-tui.ts b/apps/pythinker-code/src/tui/pythinker-tui.ts
@@ -24,6 +24,7 @@ import { resolve } from 'pathe';
 
 import type { CLIOptions } from '#/cli/options';
 import { MigrationScreenComponent, type MigrationScreenResult } from '#/migration/index';
+import { effortColorToken } from '#/tui/utils/thinking-levels';
 import { copyTextToClipboard } from '#/utils/clipboard/clipboard-text';
 import {
   appendInputHistory,
@@ -2003,8 +2004,14 @@ export class PythinkerTUI {
     const highlighted =
       this.state.appState.planMode || findSlashAutocompleteContext(currentLine, col) !== null;
     this.state.editor.borderHighlighted = highlighted;
-    this.state.editor.borderColor = (s: string) =>
-      currentTheme.fg(highlighted ? 'primary' : 'border', s);
+    // Reads thinkingLevel at paint time so cycling effort (Shift-Tab/Ctrl-T)
+    // recolors the prompt box on the next render without re-wiring the closure.
+    this.state.editor.borderColor = (s: string) => {
+      if (highlighted) return currentTheme.fg('primary', s);
+      const level = this.state.appState.thinkingLevel;
+      if (level === 'off' || level.trim().length === 0) return currentTheme.fg('border', s);
+      return currentTheme.fg(effortColorToken(level), s);
+    };
     this.state.ui.requestRender();
   }
 
diff --git a/apps/pythinker-code/src/tui/theme/colors.ts b/apps/pythinker-code/src/tui/theme/colors.ts
@@ -197,11 +197,11 @@ export const darkColors: ColorPalette = {
   warning: '#E8A838',
   error: '#E85454',
 
-  effortLow: '#E8A838',
-  effortMedium: '#F08C46',
-  effortHigh: '#EF6666',
-  effortXHigh: '#FF7A7A',
-  effortMax: '#FFF0E8',
+  effortLow: '#8A8A8A',
+  effortMedium: '#6FA8DC',
+  effortHigh: '#D33682',
+  effortXHigh: '#C0392B',
+  effortMax: '#F2C744',
 
   diffAdded: '#4EC87E',
   diffRemoved: '#E85454',
@@ -271,11 +271,11 @@ export const lightColors: ColorPalette = {
   warning: '#92660A',
   error: '#B91C1C',
 
-  effortLow: '#8A5A00',
-  effortMedium: '#9A4A00',
-  effortHigh: '#B42318',
-  effortXHigh: '#991B1B',
-  effortMax: '#7F1D1D',
+  effortLow: '#8A8A8A',
+  effortMedium: '#2E6FB8',
+  effortHigh: '#A81D6E',
+  effortXHigh: '#8B1A1A',
+  effortMax: '#B8860B',
 
   diffAdded: '#0E7A38',
   diffRemoved: '#B91C1C',
diff --git a/apps/pythinker-code/test/scripts/node-version-floor.test.ts b/apps/pythinker-code/test/scripts/node-version-floor.test.ts
@@ -29,7 +29,7 @@ describe('Node.js version floor', () => {
     expect(readRepositoryFile('.nvmrc').trim()).toBe('26.4.0');
     expect(rootPackage.engines?.node).toBe('>=26.4.0');
     expect(appPackage.engines?.node).toBe('>=26.4.0');
-    expect(appPackage.devDependencies?.['@types/node']).toBe('^26.1.1');
+    expect(appPackage.devDependencies?.['@types/node']).toBe('^26.1.2');
     expect(extractTsdownTarget('apps/pythinker-code/tsdown.config.ts')).toBe('node26');
     expect(extractTsdownTarget('apps/pythinker-code/tsdown.native.config.ts')).toBe(
       'node26',
diff --git a/apps/pythinker-code/test/tui/pythinker-tui-message-flow.test.ts b/apps/pythinker-code/test/tui/pythinker-tui-message-flow.test.ts
@@ -3,6 +3,8 @@ import { mkdtemp, rm, writeFile } from 'node:fs/promises';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
 
+import chalk from 'chalk';
+
 import {
   deleteAllKittyImages,
   resetCapabilitiesCache,
@@ -5447,6 +5449,45 @@ command = "vim"
     expect(driver.state.appState.thinkingLevel).toBe('off');
   });
 
+  it('tints the prompt-box border by the current thinking effort', async () => {
+    const session = makeSession();
+    const { driver } = await makeDriver(session, {
+      getConfig: vi.fn(async () => ({
+        models: {
+          k2: {
+            provider: 'managed:pythinker-code',
+            model: 'pythinker-k2',
+            maxContextSize: 100,
+            displayName: 'Kimi K2',
+            capabilities: ['thinking'],
+          },
+        },
+        defaultModel: 'k2',
+        defaultThinking: false,
+      })),
+    });
+
+    // Non-TTY test env strips ANSI at chalk level 0; force truecolor so the
+    // painted border actually carries the per-effort color codes.
+    const previousLevel = chalk.level;
+    chalk.level = 3;
+    try {
+      const tui = driver as unknown as PythinkerTUI;
+      const paintAt = (level: string): string => {
+        tui.setAppState({ thinkingLevel: level });
+        return driver.state.editor.borderColor('─');
+      };
+      const offPaint = paintAt('off');
+      const perLevel = ['low', 'medium', 'high'].map(paintAt);
+      // Effort levels tint the border away from the default, each with the
+      // theme's own gradient stop for that level.
+      for (const painted of perLevel) expect(painted).not.toBe(offPaint);
+      expect(new Set(perLevel).size).toBe(perLevel.length);
+    } finally {
+      chalk.level = previousLevel;
+    }
+  });
+
   it('shows a notice instead of cycling effort when the model has no selectable levels', async () => {
     const session = makeSession({
       getStatus: vi.fn(async () => ({
diff --git a/apps/pythinker-code/test/tui/theme/palette.test.ts b/apps/pythinker-code/test/tui/theme/palette.test.ts
@@ -117,22 +117,22 @@ const expectedVisualDefaults = {
   dark: {
     primary: '#BBC6FF',
     primaryShimmer: '#F4F5FF',
-    effortLow: '#E8A838',
-    effortMedium: '#F08C46',
-    effortHigh: '#EF6666',
-    effortXHigh: '#FF7A7A',
-    effortMax: '#FFF0E8',
+    effortLow: '#8A8A8A',
+    effortMedium: '#6FA8DC',
+    effortHigh: '#D33682',
+    effortXHigh: '#C0392B',
+    effortMax: '#F2C744',
     workflowTitle: '#EE9983',
     progressFill: '#25764A',
     progressHead: '#4EC87E',
     progressEmpty: '#D9DEE8',
   },
   light: {
-    effortLow: '#8A5A00',
-    effortMedium: '#9A4A00',
-    effortHigh: '#B42318',
-    effortXHigh: '#991B1B',
-    effortMax: '#7F1D1D',
+    effortLow: '#8A8A8A',
+    effortMedium: '#2E6FB8',
+    effortHigh: '#A81D6E',
+    effortXHigh: '#8B1A1A',
+    effortMax: '#B8860B',
     workflowTitle: '#9C261C',
     progressFill: '#3B9A65',
     progressHead: '#0E7A38',
diff --git a/apps/pythinker-web/package.json b/apps/pythinker-web/package.json
@@ -12,26 +12,26 @@
     "test": "vitest run"
   },
   "dependencies": {
-    "@fontsource-variable/inter": "^5.2.8",
-    "@fontsource-variable/jetbrains-mono": "^5.2.8",
+    "@fontsource-variable/inter": "^5.3.0",
+    "@fontsource-variable/jetbrains-mono": "^5.3.0",
     "@xterm/addon-fit": "^0.11.0",
     "@xterm/xterm": "^6.0.0",
     "markstream-vue": "1.0.1-beta.5",
-    "shiki": "^4.2.0",
+    "shiki": "^4.4.1",
     "stream-markdown": "^0.0.16",
-    "vue": "^3.5.38",
-    "vue-i18n": "^11.4.5"
+    "vue": "^3.5.40",
+    "vue-i18n": "^11.4.8"
   },
   "devDependencies": {
-    "@tailwindcss/vite": "^4.3.1",
+    "@tailwindcss/vite": "^4.3.3",
     "@vitejs/plugin-vue": "^5.2.4",
-    "@vue/test-utils": "^2.4.6",
+    "@vue/test-utils": "^2.4.11",
     "jsdom": "^25.0.1",
-    "tailwindcss": "^4.3.1",
+    "tailwindcss": "^4.3.3",
     "typescript": "6.0.3",
-    "vite": "^6.3.3",
+    "vite": "^6.4.3",
     "vitest": "4.1.9",
-    "vue-tsc": "~3.3.0",
-    "ws": "^8.21.0"
+    "vue-tsc": "~3.3.9",
+    "ws": "^8.21.2"
   }
 }
diff --git a/apps/site/package.json b/apps/site/package.json
@@ -11,10 +11,10 @@
     "preview": "vite preview"
   },
   "dependencies": {
-    "vue": "^3.5.38"
+    "vue": "^3.5.40"
   },
   "devDependencies": {
     "@vitejs/plugin-vue": "^5.2.4",
-    "vite": "^6.3.3"
+    "vite": "^6.4.3"
   }
 }
diff --git a/docs/customization/themes.md b/docs/customization/themes.md
diff --git a/docs/package.json b/docs/package.json
diff --git a/package.json b/package.json
diff --git a/packages/agent-core/package.json b/packages/agent-core/package.json
diff --git a/packages/kosong/package.json b/packages/kosong/package.json
diff --git a/packages/migration-legacy/package.json b/packages/migration-legacy/package.json
diff --git a/packages/node-sdk/package.json b/packages/node-sdk/package.json
diff --git a/packages/protocol/package.json b/packages/protocol/package.json
diff --git a/packages/server-e2e/package.json b/packages/server-e2e/package.json
diff --git a/packages/server/package.json b/packages/server/package.json
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml

Original file line number	Diff line number	Diff line change
`@@ -14,6 +14,6 @@`
`14`	`14`	`"start": "node server/dist/server.mjs"`
`15`	`15`	`},`
`16`	`16`	`"devDependencies": {`
`17`		`- "concurrently": "^9.1.2"`
	`17`	`+ "concurrently": "^9.2.4"`
`18`	`18`	`}`
`19`	`19`	`}`
Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-import { Route, Routes } from 'react-router-dom';`
	`1`	`+import { Route, Routes } from 'react-router';`
`2`	`2`	`import { AppShell } from './components/layout/AppShell';`
`3`	`3`	`import { SessionListPage } from './pages/SessionListPage';`
`4`	`4`	`import { SessionDetailPage } from './pages/SessionDetailPage';`
Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-import { useSearchParams } from 'react-router-dom';`
	`1`	`+import { useSearchParams } from 'react-router';`
`2`	`2`
`3`	`3`	`export interface TabSpec {`
`4`	`4`	`id: string;`
Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-import { Link, useParams } from 'react-router-dom';`
	`1`	`+import { Link, useParams } from 'react-router';`
`2`	`2`	`import type { AgentNode } from '../../types';`
`3`	`3`	`import { Pill, type PillTone } from '../shared/Pill';`
`4`	`4`