@botconnector/bccli 0.4.10 → 0.4.11

package/dist/{chunk-3PUWH62K.js → chunk-OAXD3X4R.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-PSO7R5AD.js";
 import {
   t
-} from "./chunk-ED5TTYQU.js";
+} from "./chunk-G5TG43R4.js";
 
 // src/tools/bash.ts
 import { spawn } from "child_process";
@@ -34,60 +34,39 @@ function darwinProfile(cwd, network) {
     network ? "(allow network*)" : "(deny network*)"
   ].join("\n");
 }
+function bwrapArgv(cwd, network, command) {
+  return [
+    "bwrap",
+    "--ro-bind",
+    "/",
+    "/",
+    "--dev-bind",
+    "/dev",
+    "/dev",
+    "--proc",
+    "/proc",
+    "--bind",
+    cwd,
+    cwd,
+    "--tmpfs",
+    "/tmp",
+    "--die-with-parent",
+    ...network ? [] : ["--unshare-net"],
+    "--",
+    "/bin/bash",
+    "-c",
+    command
+  ];
+}
 function sandboxArgv(command, opts) {
   if (opts.platform === "darwin") {
     return ["sandbox-exec", "-p", darwinProfile(opts.cwd, opts.network), "/bin/bash", "-c", command];
   }
   if (opts.platform === "linux") {
-    return [
-      "bwrap",
-      "--ro-bind",
-      "/",
-      "/",
-      "--dev-bind",
-      "/dev",
-      "/dev",
-      "--proc",
-      "/proc",
-      "--bind",
-      opts.cwd,
-      opts.cwd,
-      "--tmpfs",
-      "/tmp",
-      "--die-with-parent",
-      ...opts.network ? [] : ["--unshare-net"],
-      "--",
-      "/bin/bash",
-      "-c",
-      command
-    ];
+    return bwrapArgv(opts.cwd, opts.network, command);
   }
   if (opts.platform === "win32" && (opts.wslBwrap || process.env.BCCLI_WIN32_WSL_SANDBOX === "1")) {
-    const wslCwd = winPathToWsl(opts.cwd);
-    return [
-      "wsl.exe",
-      "--",
-      "bwrap",
-      "--ro-bind",
-      "/",
-      "/",
-      "--dev-bind",
-      "/dev",
-      "/dev",
-      "--proc",
-      "/proc",
-      "--bind",
-      wslCwd,
-      wslCwd,
-      "--tmpfs",
-      "/tmp",
-      "--die-with-parent",
-      ...opts.network ? [] : ["--unshare-net"],
-      "--",
-      "/bin/bash",
-      "-c",
-      command
-    ];
+    return ["wsl.exe", "--", ...bwrapArgv(winPathToWsl(opts.cwd), opts.network, command)];
   }
   return void 0;
 }
@@ -156,7 +135,7 @@ function killAllCommands() {
 }
 var backgrounds = /* @__PURE__ */ new Map();
 var nextBackgroundId = 1;
-function startBackground(command, cwd, env, shell) {
+function startBackground(command, cwd, env, shell, maxRetained) {
   const child = spawnChild(command, cwd, env, shell);
   const task = {
     id: nextBackgroundId++,
@@ -177,6 +156,10 @@ function startBackground(command, cwd, env, shell) {
     if (child.pid !== void 0) killProcessTree(child.pid);
   };
   backgrounds.set(task.id, task);
+  for (const [id, other] of backgrounds) {
+    if (backgrounds.size <= maxRetained) break;
+    if (id !== task.id && other.status === "exited") backgrounds.delete(id);
+  }
   const onData = (data) => {
     let s = data;
     if (task.head.length < HALF) {
@@ -385,6 +368,7 @@ var SHELL_NOTE = {
 function createBashTool(options = {}) {
   const offline = options.networkPolicy === "offline";
   const sandbox = options.sandbox === true;
+  const maxRetained = options.maxRetainedTasks ?? 50;
   const platform = options.platform ?? process.platform;
   const shell = resolveShell({ platform, env: process.env, exists: existsSync2, ...options.shellDeps });
   const childEnv = offline ? offlineEnv() : void 0;
@@ -431,7 +415,7 @@ Network access is off (networkPolicy "offline"): internet commands such as curl,
       }
       if (input.background) {
         if (!input.command) return { output: 'The "command" argument is required to start a background task.', isError: true };
-        const task = startBackground(exec, ctx.cwd, childEnv, shell);
+        const task = startBackground(exec, ctx.cwd, childEnv, shell, maxRetained);
         return {
           output: `Background task #${task.id} started: ${input.command}
 Poll it with {task_id: ${task.id}}; stop it with {task_id: ${task.id}, kill: true}.`

package/dist/{chunk-VXRW5SYP.js → chunk-OOOS5RCT.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   reasoningPayload
-} from "./chunk-6RVAPAE5.js";
+} from "./chunk-XZ2TI5HV.js";
 import {
   t
-} from "./chunk-ED5TTYQU.js";
+} from "./chunk-G5TG43R4.js";
 
 // src/provider.ts
 import OpenAI from "openai";
@@ -440,7 +440,7 @@ function hasPendingProgrammaticReplay(messages) {
   }
   return pending;
 }
-async function readResponsesStream(res, onText, onThinking) {
+async function readResponsesStream(res, onText, onThinking, signal) {
   let text = "";
   let thinking = "";
   let usage;
@@ -542,17 +542,28 @@ async function readResponsesStream(res, onText, onThinking) {
       );
     }
   };
-  for await (const chunk of res.body) {
-    buffer += decoder.decode(chunk, { stream: true });
-    let newline = buffer.indexOf("\n");
-    while (newline >= 0 && loopAt < 0) {
-      handle(buffer.slice(0, newline).trim());
-      buffer = buffer.slice(newline + 1);
-      newline = buffer.indexOf("\n");
-    }
-    if (loopAt >= 0) {
-      return { text: text.slice(0, loopAt), toolCalls: [], usage, finishReason: "repetition" };
+  const iterator = res.body[Symbol.asyncIterator]();
+  const onAbort = () => void iterator.return?.();
+  if (signal?.aborted) onAbort();
+  else signal?.addEventListener("abort", onAbort);
+  try {
+    for (; ; ) {
+      const step = await iterator.next();
+      if (step.done) break;
+      buffer += decoder.decode(step.value, { stream: true });
+      let newline = buffer.indexOf("\n");
+      while (newline >= 0 && loopAt < 0) {
+        handle(buffer.slice(0, newline).trim());
+        buffer = buffer.slice(newline + 1);
+        newline = buffer.indexOf("\n");
+      }
+      if (loopAt >= 0) {
+        return { text: text.slice(0, loopAt), toolCalls: [], usage, finishReason: "repetition" };
+      }
     }
+  } finally {
+    signal?.removeEventListener("abort", onAbort);
+    void iterator.return?.();
   }
   handle(buffer.trim());
   return {
@@ -996,7 +1007,7 @@ function createProvider(options) {
         );
         if ((res2.headers.get("content-type") ?? "").includes("application/json")) return readResponsesJson(res2, onThinking);
         if (!res2.body) throw new ProviderError(t("Empty response from the provider"));
-        return readResponsesStream(res2, onText, onThinking);
+        return readResponsesStream(res2, onText, onThinking, signal);
       }
       const res = await post(
         "/chat/completions",

package/dist/{chunk-CIEPLTGS.js → chunk-WSZF2CTU.js}

@@ -1,18 +1,18 @@
 #!/usr/bin/env node
 import {
   MODE_ORDER
-} from "./chunk-WFZKJY3R.js";
+} from "./chunk-YYTFJUO2.js";
 import {
   REASONING_LEVELS,
   isReasoningLevel
-} from "./chunk-6RVAPAE5.js";
+} from "./chunk-XZ2TI5HV.js";
 import {
   ConfigError
-} from "./chunk-USFXL5BS.js";
+} from "./chunk-C2FUGQJX.js";
 import {
   parseLang,
   t
-} from "./chunk-ED5TTYQU.js";
+} from "./chunk-G5TG43R4.js";
 
 // src/args.ts
 import { parseArgs } from "util";

package/dist/{chunk-MPYSYTSO.js → chunk-X24APPXO.js}

@@ -6,7 +6,7 @@ import {
   readJsonConfig,
   removeCredential,
   writeFileAtomic
-} from "./chunk-USFXL5BS.js";
+} from "./chunk-C2FUGQJX.js";
 
 // src/providers.ts
 import { join } from "path";

package/dist/{chunk-6RVAPAE5.js → chunk-XZ2TI5HV.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   t
-} from "./chunk-ED5TTYQU.js";
+} from "./chunk-G5TG43R4.js";
 
 // src/reasoning.ts
 var REASONING_LEVELS = ["auto", "off", "low", "medium", "high", "max"];

package/dist/{chunk-SXRQ2Q7A.js → chunk-Y6AZGGH7.js}

@@ -2,17 +2,17 @@
 import {
   hasKey,
   providerName
-} from "./chunk-MPYSYTSO.js";
+} from "./chunk-X24APPXO.js";
 import {
   createProvider
-} from "./chunk-VXRW5SYP.js";
+} from "./chunk-OOOS5RCT.js";
 import {
   PRESETS,
   readCredentials
-} from "./chunk-USFXL5BS.js";
+} from "./chunk-C2FUGQJX.js";
 import {
   t
-} from "./chunk-ED5TTYQU.js";
+} from "./chunk-G5TG43R4.js";
 
 // src/models.ts
 function order(ids) {

package/dist/{chunk-WFZKJY3R.js → chunk-YYTFJUO2.js}

@@ -94,7 +94,7 @@ var Permissions = class {
   }
   /** Rules that "[a] allow for this session" would add; undefined when it must always be asked. */
   rulesFor(req) {
-    if (requiresSensitiveToolApproval(req) && (req.kind === "read" || process.env.BC_TOOL_POLICY_ENFORCE === "true"))
+    if (requiresSensitiveToolApproval(req) && (req.kind === "read" || req.kind === "edit" || process.env.BC_TOOL_POLICY_ENFORCE === "true"))
       return void 0;
     if (req.kind === "edit") return this.editInProject(req.target) ? ["edit(project)"] : void 0;
     if (req.kind === "fetch") {
@@ -116,7 +116,8 @@ var Permissions = class {
   }
   check(req) {
     if (this.mode === "plan" && req.kind !== "read") return "deny";
-    if (req.kind === "read" && this.mode !== "allowAll" && requiresSensitiveToolApproval(req)) return "ask";
+    if ((req.kind === "read" || req.kind === "edit") && this.mode !== "allowAll" && requiresSensitiveToolApproval(req))
+      return "ask";
     if (process.env.BC_TOOL_POLICY_ENFORCE === "true" && requiresSensitiveToolApproval(req)) return "ask";
     if (req.kind === "read") return "allow";
     if (this.mode === "allowAll") return "allow";

package/dist/cli.js

@@ -3,47 +3,47 @@ import {
   resolvePrintPrompt,
   resolveWorktree,
   runPrint
-} from "./chunk-3K66L37W.js";
+} from "./chunk-6M5T7N7A.js";
 import {
   createRuntime
-} from "./chunk-5QCCV2JM.js";
+} from "./chunk-6BXW7DGQ.js";
 import "./chunk-OK2USAXX.js";
-import "./chunk-3PUWH62K.js";
-import "./chunk-4WI5ON64.js";
+import "./chunk-OAXD3X4R.js";
+import "./chunk-6KZIOICR.js";
 import "./chunk-PSO7R5AD.js";
 import {
   VERSION
-} from "./chunk-CBD52BYV.js";
+} from "./chunk-N6APAYSF.js";
 import {
   helpText,
   parseCliArgs
-} from "./chunk-CIEPLTGS.js";
-import "./chunk-WFZKJY3R.js";
-import "./chunk-PGDYPOQW.js";
-import "./chunk-SXRQ2Q7A.js";
+} from "./chunk-WSZF2CTU.js";
+import "./chunk-YYTFJUO2.js";
+import "./chunk-JFYQCPXL.js";
+import "./chunk-Y6AZGGH7.js";
 import {
   readGlobalConfigFile
-} from "./chunk-MPYSYTSO.js";
+} from "./chunk-X24APPXO.js";
 import {
   defaultLoginDeps,
   runLogin
-} from "./chunk-ZWXKBFKW.js";
-import "./chunk-67REFMSY.js";
+} from "./chunk-MBAMDCCV.js";
+import "./chunk-IHQGXDSG.js";
 import {
   pruneSessions
-} from "./chunk-24KDXQZT.js";
-import "./chunk-VXRW5SYP.js";
-import "./chunk-6RVAPAE5.js";
-import "./chunk-7HDBPDAD.js";
+} from "./chunk-F54FDJBD.js";
+import "./chunk-OOOS5RCT.js";
+import "./chunk-XZ2TI5HV.js";
+import "./chunk-2DFY43RP.js";
 import {
   ConfigError,
   setTheme
-} from "./chunk-USFXL5BS.js";
+} from "./chunk-C2FUGQJX.js";
 import {
   resolveLanguage,
   setLanguage,
   t
-} from "./chunk-ED5TTYQU.js";
+} from "./chunk-G5TG43R4.js";
 
 // src/exit.ts
 var EXIT_GRACE_MS = 1e3;
@@ -85,17 +85,17 @@ async function main() {
   if (args.worktree) cwd = (await resolveWorktree(cwd, args.worktree)).path;
   if (args.command === "login") return runLogin(args.loginProvider ?? "bc-cloud", cwd, args, defaultLoginDeps());
   if (args.command === "mcp") {
-    const { runMcpCommand } = await import("./mcpCli-TAPKYGHO.js");
-    const { readSecret } = await import("./login-2TZRODUL.js");
+    const { runMcpCommand } = await import("./mcpCli-CUIOYJ2A.js");
+    const { readSecret } = await import("./login-MQEZGF2C.js");
     return runMcpCommand(args, { env: process.env, cwd, out: (s) => console.log(s), err: (s) => console.error(s), readSecret });
   }
   if (args.command === "provider") {
-    const { runProviderCommand } = await import("./providerCli-XA4LTWRD.js");
-    const { readSecret } = await import("./login-2TZRODUL.js");
+    const { runProviderCommand } = await import("./providerCli-TXMVPSW5.js");
+    const { readSecret } = await import("./login-MQEZGF2C.js");
     return runProviderCommand(args, { env: process.env, cwd, out: (s) => console.log(s), err: (s) => console.error(s), readSecret });
   }
   if (args.command === "connect" || args.command === "disconnect" || args.command === "integrations") {
-    const { runIntegrationCommand } = await import("./integrationCli-PKMICTHC.js");
+    const { runIntegrationCommand } = await import("./integrationCli-LNNZDGZX.js");
     return runIntegrationCommand(args, {
       env: process.env,
       cwd,
@@ -105,20 +105,20 @@ async function main() {
     });
   }
   if (args.command === "models") {
-    const { runModelsCommand } = await import("./modelsCli-6PK7V2QZ.js");
+    const { runModelsCommand } = await import("./modelsCli-AAFHFI4H.js");
     return runModelsCommand(args, { env: process.env, cwd, out: (s) => console.log(s), err: (s) => console.error(s), fetch: globalThis.fetch });
   }
   if (args.command === "update") {
-    const { runUpdateCommand } = await import("./update-JSNVVXPS.js");
+    const { runUpdateCommand } = await import("./update-TR62JV3A.js");
     return runUpdateCommand({ env: process.env });
   }
   if (args.command === "acp") {
-    const { runtimeAgent, runAcp } = await import("./acp-L4WGVJTY.js");
+    const { runtimeAgent, runAcp } = await import("./acp-IPHWC6CO.js");
     await runAcp(process.stdin, process.stdout, { cwd, newAgent: (c) => runtimeAgent(c, args.allowAll) });
     return 0;
   }
   if (args.command === "serve") {
-    const { serveBanner, startServe } = await import("./serve-7BFCIEPJ.js");
+    const { serveBanner, startServe } = await import("./serve-QYDBFTHC.js");
     const handle = await startServe({ port: args.port, host: args.host, token: args.token, cwd, env: process.env });
     process.stderr.write(serveBanner(handle, { token: args.token }));
     await new Promise((resolve) => {
@@ -131,8 +131,8 @@ async function main() {
     return 0;
   }
   if (args.command === "plugins") {
-    const { runPluginsCommand } = await import("./pluginsCli-RCF33U5J.js");
-    const { readGlobalPlugins, updateGlobalConfig } = await import("./config-JKMYKNAT.js");
+    const { runPluginsCommand } = await import("./pluginsCli-2QXXFLQA.js");
+    const { readGlobalPlugins, updateGlobalConfig } = await import("./config-RZY3XQZJ.js");
     const { runNpmSync } = await import("./npmRunner-LU43GM3W.js");
     return runPluginsCommand(args, {
       out: (s) => console.log(s),
@@ -146,30 +146,30 @@ async function main() {
     });
   }
   if (args.command === "gh-bot") {
-    const { runGhBotCommand } = await import("./ghBotCli-WEVS6S6O.js");
+    const { runGhBotCommand } = await import("./ghBotCli-HHJ4ANTH.js");
     return runGhBotCommand(args, { env: process.env, cwd, out: (s) => console.log(s), err: (s) => console.error(s) });
   }
   if (args.command === "completion") {
-    const { runCompletionCommand } = await import("./completion-GEFRIQWV.js");
+    const { runCompletionCommand } = await import("./completion-QVDGAYUY.js");
     return runCompletionCommand(args, { out: (s) => console.log(s), err: (s) => console.error(s) });
   }
   if (args.command === "stats") {
-    const { runStatsCommand } = await import("./statsCli-QDHE4TKB.js");
-    const { bccliHome } = await import("./config-JKMYKNAT.js");
+    const { runStatsCommand } = await import("./statsCli-EHNJIQ2Z.js");
+    const { bccliHome } = await import("./config-RZY3XQZJ.js");
     return runStatsCommand(
       { subArgs: args.subArgs, home: bccliHome(process.env), cwd, days: args.days, tools: args.tools, models: args.models, project: args.project },
       { out: (s) => console.log(s), err: (s) => console.error(s) }
     );
   }
   if (args.command === "export" || args.command === "import") {
-    const { runExportCommand, runImportCommand } = await import("./transferCli-7OKKYGG2.js");
-    const { bccliHome } = await import("./config-JKMYKNAT.js");
+    const { runExportCommand, runImportCommand } = await import("./transferCli-IXJ2O74Q.js");
+    const { bccliHome } = await import("./config-RZY3XQZJ.js");
     const deps = { subArgs: args.subArgs, home: bccliHome(process.env), cwd };
     const io = { out: (s) => console.log(s), err: (s) => console.error(s) };
     return args.command === "export" ? runExportCommand(deps, io) : runImportCommand(deps, io);
   }
   if (args.command === "pr") {
-    const { runPrCommand } = await import("./prCli-24PMW7NS.js");
+    const { runPrCommand } = await import("./prCli-KSA73RCS.js");
     return runPrCommand(
       {
         subArgs: args.subArgs,
@@ -199,7 +199,7 @@ async function main() {
     }
     const finalPrompt = resolvePrintPrompt(args.prompt, stdinText);
     if (!finalPrompt) throw new ConfigError(t('-p mode needs a task, e.g. bccli -p "explain this repo"'));
-    const { serversToStart } = await import("./config-JLOH5M6B.js");
+    const { serversToStart } = await import("./config-7TQ2KVVX.js");
     const plan = serversToStart(rt.home, cwd);
     for (const s of plan.needTrust) {
       console.error(t('Project MCP server "{name}" skipped (not approved yet; run interactive bccli once to approve it).', { name: s.name }));
@@ -215,13 +215,13 @@ async function main() {
   let updateMessage;
   if (rt.config.updateCheck !== "off" && !process.env.BCCLI_NO_UPDATE_CHECK) {
     try {
-      const { checkForUpdate } = await import("./update-JSNVVXPS.js");
+      const { checkForUpdate } = await import("./update-TR62JV3A.js");
       const update = await checkForUpdate({ home: rt.home, fetch: globalThis.fetch, now: /* @__PURE__ */ new Date() });
       updateMessage = update;
     } catch {
     }
   }
-  const { startInteractive } = await import("./ui-SZAIIJC5.js");
+  const { startInteractive } = await import("./ui-A2LASWDK.js");
   return startInteractive(rt, { initialPrompt: args.prompt, resume: args.resume, version: VERSION, updateMessage });
 }
 main().then(

package/dist/{completion-GEFRIQWV.js → completion-QVDGAYUY.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   t
-} from "./chunk-ED5TTYQU.js";
+} from "./chunk-G5TG43R4.js";
 
 // src/completion.ts
 var SHELLS = ["bash", "zsh", "fish", "powershell"];

package/dist/{config-JLOH5M6B.js → config-7TQ2KVVX.js}

@@ -9,9 +9,9 @@ import {
   removeGlobalServer,
   serversToStart,
   setProjectTrust
-} from "./chunk-7HDBPDAD.js";
-import "./chunk-USFXL5BS.js";
-import "./chunk-ED5TTYQU.js";
+} from "./chunk-2DFY43RP.js";
+import "./chunk-C2FUGQJX.js";
+import "./chunk-G5TG43R4.js";
 export {
   addGlobalServer,
   expandEnvVars,

package/dist/{config-JKMYKNAT.js → config-RZY3XQZJ.js}

@@ -14,8 +14,8 @@ import {
   saveCredential,
   updateGlobalConfig,
   writeFileAtomic
-} from "./chunk-USFXL5BS.js";
-import "./chunk-ED5TTYQU.js";
+} from "./chunk-C2FUGQJX.js";
+import "./chunk-G5TG43R4.js";
 export {
   ConfigError,
   DEFAULT_MAX_STEPS,

package/dist/{ghBotCli-WEVS6S6O.js → ghBotCli-HHJ4ANTH.js}

@@ -1,32 +1,32 @@
 #!/usr/bin/env node
 import {
   createRuntime
-} from "./chunk-5QCCV2JM.js";
+} from "./chunk-6BXW7DGQ.js";
 import "./chunk-OK2USAXX.js";
-import "./chunk-3PUWH62K.js";
-import "./chunk-4WI5ON64.js";
+import "./chunk-OAXD3X4R.js";
+import "./chunk-6KZIOICR.js";
 import "./chunk-PSO7R5AD.js";
 import {
   LOOPBACK_BIND,
   parseCliArgs
-} from "./chunk-CIEPLTGS.js";
-import "./chunk-WFZKJY3R.js";
-import "./chunk-PGDYPOQW.js";
-import "./chunk-SXRQ2Q7A.js";
-import "./chunk-MPYSYTSO.js";
-import "./chunk-67REFMSY.js";
-import "./chunk-24KDXQZT.js";
-import "./chunk-VXRW5SYP.js";
-import "./chunk-6RVAPAE5.js";
-import "./chunk-7HDBPDAD.js";
+} from "./chunk-WSZF2CTU.js";
+import "./chunk-YYTFJUO2.js";
+import "./chunk-JFYQCPXL.js";
+import "./chunk-Y6AZGGH7.js";
+import "./chunk-X24APPXO.js";
+import "./chunk-IHQGXDSG.js";
+import "./chunk-F54FDJBD.js";
+import "./chunk-OOOS5RCT.js";
+import "./chunk-XZ2TI5HV.js";
+import "./chunk-2DFY43RP.js";
 import {
   ConfigError,
   globalConfigPath,
   readJsonConfig
-} from "./chunk-USFXL5BS.js";
+} from "./chunk-C2FUGQJX.js";
 import {
   t
-} from "./chunk-ED5TTYQU.js";
+} from "./chunk-G5TG43R4.js";
 
 // src/ghBotWebhook.ts
 import { createHmac, timingSafeEqual } from "crypto";
@@ -531,8 +531,10 @@ function makeRunJob(o, cfg, gh) {
             provider: o.provider,
             fetch: o.fetch ?? globalThis.fetch,
             // injectable (review #3)
-            maxSteps: cfg.stepLimit
+            maxSteps: cfg.stepLimit,
             // the knob the Agent actually uses
+            // A draft is one-shot: no session log (and no file per webhook comment).
+            persistSession: false
           });
           rt.agent.setSystemPrompt(ghSystemPrompt());
           rt.agent.setTools([]);

package/dist/{integrationCli-PKMICTHC.js → integrationCli-LNNZDGZX.js}

@@ -5,13 +5,14 @@ import {
   loadConfig,
   readCredentials,
   resolveModel
-} from "./chunk-USFXL5BS.js";
+} from "./chunk-C2FUGQJX.js";
 import {
   t
-} from "./chunk-ED5TTYQU.js";
+} from "./chunk-G5TG43R4.js";
 
 // src/integrationCli.ts
 import { chmodSync, copyFileSync, existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "fs";
+import { createHash } from "crypto";
 import { dirname, join } from "path";
 import { parseDocument } from "yaml";
 var BASE_URL = "https://api.botconnector.id/v1";
@@ -67,9 +68,20 @@ function safeBackup(path, env) {
 function writeState(target, state, env) {
   const path = statePath(target, env);
   mkdirSync(dirname(path), { recursive: true });
-  writeFileSync(path, `${JSON.stringify(state, null, 2)}
+  const files = state.files.map((file) => {
+    const hash = hashFile(file.path);
+    return hash ? { ...file, hash } : file;
+  });
+  writeFileSync(path, `${JSON.stringify({ ...state, files }, null, 2)}
 `, { mode: 384 });
 }
+function hashFile(path) {
+  try {
+    return createHash("sha256").update(readFileSync(path)).digest("hex");
+  } catch {
+    return void 0;
+  }
+}
 function readState(target, env) {
   const path = statePath(target, env);
   if (!existsSync(path)) return null;
@@ -622,7 +634,14 @@ async function connectHermes(deps) {
     discover_models: true,
     models: Object.fromEntries(models.map((id) => [id, {}]))
   });
-  doc.setIn(["model"], { default: model, provider: `custom:${HERMES_PROVIDER_ID}` });
+  const providerRef = `custom:${HERMES_PROVIDER_ID}`;
+  const currentModel = doc.getIn(["model"]);
+  if (currentModel && typeof currentModel === "object" && !Array.isArray(currentModel)) {
+    doc.setIn(["model", "default"], model);
+    doc.setIn(["model", "provider"], providerRef);
+  } else {
+    doc.setIn(["model"], { default: model, provider: providerRef });
+  }
   mkdirSync(hermesHome, { recursive: true });
   writeFileSync(path, doc.toString());
   writeState("hermes", {
@@ -640,7 +659,18 @@ function disconnect(target, deps) {
     deps.out(t("{target}: not managed by BCCLI yet.", { target }));
     return;
   }
+  let leftBehind = 0;
   for (const file of [...state.files].reverse()) {
+    if (file.hash !== void 0 && hashFile(file.path) !== file.hash) {
+      leftBehind++;
+      deps.err(
+        t(
+          '{target}: {path} changed after BCCLI connected it, so the old backup was not copied over it. Remove the BCCLI part (provider "botconnector" or the marked block) from that file by hand.',
+          { target, path: file.path }
+        )
+      );
+      continue;
+    }
     if (file.backup && existsSync(file.backup)) {
       mkdirSync(dirname(file.path), { recursive: true });
       copyFileSync(file.backup, file.path);
@@ -649,7 +679,12 @@ function disconnect(target, deps) {
     }
   }
   rmSync(statePath(target, deps.env), { force: true });
-  deps.out(t("{target}: the BotConnector integration was removed and the config restored.", { target }));
+  deps.out(
+    leftBehind ? t(
+      "{target}: the BotConnector integration was removed. {n} file(s) were left untouched (see above); delete the BCCLI entries in them by hand for a clean removal.",
+      { target, n: String(leftBehind) }
+    ) : t("{target}: the BotConnector integration was removed and the config restored.", { target })
+  );
 }
 function listIntegrations(deps) {
   for (const target of ["opencode", "aider", "cline", "deepseek-harness", "cursor", "openai-cli", "openai-sdk", "openai-compatible", "codex", "claude-code", "openclaw", "hermes"]) {