@funnycode/myclaude 0.1.276 → 0.1.285

package/dist/myclaude.js

@@ -4,8 +4,8 @@
 // MACRO - build-time constants (injected by build.ts)
 // MACRO injected by build script
 globalThis.MACRO = {
-  VERSION: "0.1.276",
-  BUILD_TIME: "2026-08-18T07:55:40.831Z",
+  VERSION: "0.1.285",
+  BUILD_TIME: "2026-08-21T08:33:09.704Z",
   PACKAGE_URL: "@funnycode/myclaude",
   NATIVE_PACKAGE_URL: "@funnycode/myclaude",
   VERSION_CHANGELOG: '',
@@ -120027,7 +120027,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@funnycode/myclaude",
-    version: "0.1.276",
+    version: "0.1.285",
     private: false,
     description: "An open-source AI coding assistant in your terminal - powered by Claude",
     license: "MIT",
@@ -282574,18 +282574,20 @@ __export(exports_sessionIdCompat, {
   resetCseShimGateForTesting: () => resetCseShimGateForTesting,
   getCseShimGate: () => getCseShimGate
 });
-function setCseShimGate(gate) {
-  if (_gateLocked)
-    return;
-  _gateLocked = true;
-  _isCseShimEnabled = gate;
+async function setCseShimGate(gate) {
+  await _gateMutex.runExclusive(() => {
+    if (_isCseShimEnabled === undefined) {
+      _isCseShimEnabled = gate;
+    }
+  });
 }
 function getCseShimGate() {
   return _isCseShimEnabled;
 }
-function resetCseShimGateForTesting() {
-  _isCseShimEnabled = undefined;
-  _gateLocked = false;
+async function resetCseShimGateForTesting() {
+  await _gateMutex.runExclusive(() => {
+    _isCseShimEnabled = undefined;
+  });
 }
 function toCompatSessionId(id) {
   if (!id.startsWith("cse_"))
@@ -282601,7 +282603,11 @@ function toInfraSessionId(id) {
     return id;
   return "cse_" + id.slice("session_".length);
 }
-var _isCseShimEnabled, _gateLocked = false;
+var _isCseShimEnabled, _gateMutex;
+var init_sessionIdCompat = __esm(() => {
+  init_async_mutex();
+  _gateMutex = new Mutex;
+});
 
 // src/constants/product.ts
 function isRemoteSessionStaging(sessionId, ingressUrl) {
@@ -282620,7 +282626,7 @@ function getClaudeAiBaseUrl(sessionId, ingressUrl) {
   return CLAUDE_AI_BASE_URL;
 }
 function getRemoteSessionUrl(sessionId, ingressUrl) {
-  const { toCompatSessionId: toCompatSessionId2 } = __toCommonJS(exports_sessionIdCompat);
+  const { toCompatSessionId: toCompatSessionId2 } = (init_sessionIdCompat(), __toCommonJS(exports_sessionIdCompat));
   const compatId = toCompatSessionId2(sessionId);
   const baseUrl = getClaudeAiBaseUrl(compatId, ingressUrl);
   return `${baseUrl}/code/${compatId}`;
@@ -387583,6 +387589,7 @@ var init_concurrentSessions = __esm(() => {
 // src/bridge/replBridgeHandle.ts
 var init_replBridgeHandle = __esm(() => {
   init_concurrentSessions();
+  init_sessionIdCompat();
 });
 
 // src/tasks/LocalMainSessionTask.ts
@@ -464039,6 +464046,7 @@ var init_createSession = __esm(() => {
   init_debug();
   init_errors();
   init_debugUtils();
+  init_sessionIdCompat();
 });
 
 // src/commands/rename/rename.ts
@@ -480190,34 +480198,84 @@ function sanitizeCommand(command6) {
   for (const node of parsed) {
     if (typeof node === "string") {
       if (/[`$<>|;&\\\n\r]/.test(node)) {
-        throw new Error(`Invalid command: shell metacharacter in token "${node}" is not allowed: "${command6}"`);
+        throw new Error("Invalid command: shell metacharacter in token is not allowed (input omitted for security)");
       }
       argv.push(node);
       continue;
     }
     if (node && typeof node === "object") {
       const kind = node.op || node.pattern || "shell metacharacter";
-      throw new Error(`Invalid command: shell metacharacter/operator (${kind}) is not allowed: "${command6}"`);
+      throw new Error(`Invalid command: shell metacharacter/operator (${kind}) is not allowed (input omitted for security)`);
     }
-    throw new Error(`Invalid command: unexpected token in command: "${command6}"`);
+    throw new Error("Invalid command: unexpected token in command (input omitted for security)");
   }
   if (argv.length === 0) {
     throw new Error("Invalid command: no program specified");
   }
   const program = argv[0];
   if (!ALLOWED_COMMANDS.has(program)) {
-    throw new Error(`Invalid command: program "${program}" is not on the allowlist of permitted commands`);
+    throw new Error("Invalid command: program is not on the allowlist of permitted commands (input omitted for security)");
   }
   return argv;
 }
-async function executeFlow(flow, context2, onStepStart, onStepComplete, onStepFail, onComplete) {
+function escapeCodeSpan(text2) {
+  const maxRun = (text2.match(/`+/g) || []).reduce((m2, s) => Math.max(m2, s.length), 0);
+  const delim = "`".repeat(maxRun + 1);
+  const pad = text2.startsWith("`") || text2.endsWith("`") ? " " : "";
+  return `${delim}${pad}${text2}${pad}${delim}`;
+}
+function escapeMarkdown(text2) {
+  return text2.replace(/\\/g, "\\\\").replace(/`/g, "\\`").replace(/\*/g, "\\*").replace(/_/g, "\\_").replace(/\[/g, "\\[").replace(/\]/g, "\\]").replace(/#/g, "\\#").replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/!/g, "\\!").replace(/\(/g, "\\(").replace(/\)/g, "\\)");
+}
+function generateDiffPreview(flow) {
+  const lines2 = [];
+  lines2.push(`## Diff Preview: ${escapeMarkdown(flow.name)}`);
+  lines2.push(``);
+  lines2.push(`**Description**: ${escapeMarkdown(flow.description)}`);
+  lines2.push(``);
+  lines2.push(`**Steps (${flow.steps.length}):**`);
+  lines2.push(``);
+  for (let i3 = 0;i3 < flow.steps.length; i3++) {
+    const step = flow.steps[i3];
+    lines2.push(`### Step ${i3 + 1}: ${escapeMarkdown(step.description)}`);
+    if (step.reasoning) {
+      lines2.push(`- **Reasoning**: ${escapeMarkdown(step.reasoning)}`);
+    }
+    if (step.command) {
+      lines2.push(`- **Command**: ${escapeCodeSpan(step.command)}`);
+    }
+    if (step.files && step.files.length > 0) {
+      lines2.push(`- **Files**: ${step.files.map((f2) => escapeCodeSpan(f2)).join(", ")}`);
+    }
+    lines2.push(``);
+  }
+  lines2.push(`---`);
+  lines2.push(`Review the above changes carefully before approving.`);
+  return lines2.join(`
+`);
+}
+async function executeFlow(flow, context2, onStepStart, onStepComplete, onStepFail, onComplete, options) {
+  const ids = flow.steps.map((s) => s.id);
+  if (new Set(ids).size !== ids.length) {
+    throw new Error("Flow definition contains duplicate step IDs");
+  }
   const state = {
     currentStepIndex: 0,
     completedSteps: [],
     failedSteps: [],
     totalSteps: flow.steps.length,
-    startTime: Date.now()
-  };
+    startTime: Date.now(),
+    aborted: false
+  };
+  const callbackErrors = [];
+  if (options?.preview && options?.onPreview) {
+    const preview = generateDiffPreview(flow);
+    const approved = await options.onPreview(preview);
+    if (!approved) {
+      state.aborted = true;
+      return state;
+    }
+  }
   for (let i3 = 0;i3 < flow.steps.length; i3++) {
     const step = flow.steps[i3];
     state.currentStepIndex = i3;
@@ -480239,6 +480297,7 @@ async function executeFlow(flow, context2, onStepStart, onStepComplete, onStepFa
           await onStepComplete(step, state);
         } catch (callbackError) {
           console.error(`onStepComplete callback failed for step "${step.id}":`, callbackError);
+          callbackErrors.push(callbackError);
         }
       }
     } catch (error52) {
@@ -480248,10 +480307,12 @@ async function executeFlow(flow, context2, onStepStart, onStepComplete, onStepFa
           await onStepFail(step, state, error52);
         } catch (callbackError) {
           console.error(`onStepFail callback failed for step "${step.id}":`, callbackError);
+          callbackErrors.push(callbackError);
         }
       }
       const shouldContinue = await shouldContinueOnError(error52, step);
       if (!shouldContinue) {
+        state.aborted = true;
         break;
       }
     }
@@ -480261,7 +480322,14 @@ async function executeFlow(flow, context2, onStepStart, onStepComplete, onStepFa
       await onComplete(state);
     } catch (callbackError) {
       console.error("onComplete callback failed:", callbackError);
+      callbackErrors.push(callbackError);
+    }
+  }
+  if (callbackErrors.length > 0) {
+    if (callbackErrors.length === 1) {
+      throw callbackErrors[0];
     }
+    throw new AggregateError(callbackErrors, "Multiple callback errors occurred during flow execution");
   }
   return state;
 }
@@ -480271,26 +480339,51 @@ async function executeCommand(command6, context2) {
     await context2.bridge.runCommand(argv);
     return;
   }
-  throw new Error("No bridge.runCommand available to execute: " + command6);
+  throw new Error("No bridge.runCommand available to execute command (input omitted for security)");
 }
 async function executeFileOperation(file2, context2) {
+  if (typeof file2 !== "string") {
+    throw new Error("Invalid file path: must be a string");
+  }
+  if (file2.includes("\x00")) {
+    throw new Error("Invalid file path: NUL byte detected");
+  }
+  const normalized = file2.replace(/\\/g, "/");
+  if (normalized.startsWith("/") || /^[A-Za-z]:\//.test(normalized)) {
+    throw new Error("Invalid file path: absolute paths are not allowed");
+  }
+  const parts = normalized.split("/");
+  for (const part of parts) {
+    if (part === "..") {
+      throw new Error("Invalid file path: path traversal (..) is not allowed");
+    }
+  }
   if (context2?.bridge?.editFile) {
     await context2.bridge.editFile(file2);
     return;
   }
-  throw new Error("No bridge.editFile available to edit: " + file2);
+  throw new Error("No bridge.editFile available to edit file (input omitted for security)");
 }
 async function shouldContinueOnError(error52, step) {
-  const transientCodes = ["ETIMEDOUT"];
+  const transientCodes = [
+    "ETIMEDOUT",
+    "ECONNRESET",
+    "ENETUNREACH",
+    "EPIPE",
+    "EAI_AGAIN",
+    "ENOTFOUND",
+    "ECONNREFUSED"
+  ];
   const err2 = error52;
-  if (err2.code && transientCodes.includes(err2.code)) {
+  const codeFromProps = typeof err2.code === "string" ? err2.code : typeof err2.errno === "string" ? err2.errno : null;
+  if (codeFromProps && transientCodes.includes(codeFromProps)) {
     return true;
   }
-  if (transientCodes.some((code) => error52.message.includes(code))) {
+  if (transientCodes.some((code) => new RegExp(`(^|:\\s*)${code}\\b`).test(error52.message))) {
     return true;
   }
-  if (error52.message.includes("No bridge")) {
-    return true;
+  if (/^No bridge\.(runCommand|editFile) available/.test(error52.message)) {
+    return false;
   }
   return false;
 }
@@ -480298,18 +480391,11 @@ var import_shell_quote4, ALLOWED_COMMANDS;
 var init_executor = __esm(() => {
   import_shell_quote4 = __toESM(require_shell_quote(), 1);
   ALLOWED_COMMANDS = new Set([
-    "npm",
-    "npx",
-    "node",
-    "bun",
-    "yarn",
-    "pnpm",
     "mkdir",
     "touch",
     "cp",
     "mv",
     "echo",
-    "git",
     "tsc",
     "vitest"
   ]);
@@ -480395,6 +480481,22 @@ var init_flow = __esm(() => {
       if (!flow) {
         throw new Error(`Flow not found: ${args}`);
       }
+      if (context2?.preview !== false) {
+        const preview = generateDiffPreview(flow);
+        console.log(preview);
+        const approved = context2?.onPreview ? await context2.onPreview(preview) : true;
+        if (!approved) {
+          console.log("Flow execution aborted by user.");
+          return {
+            currentStepIndex: 0,
+            completedSteps: [],
+            failedSteps: [],
+            totalSteps: flow.steps.length,
+            startTime: Date.now(),
+            aborted: true
+          };
+        }
+      }
       const state = await executeFlow(flow, context2, async (step, state2) => {
         console.log(`
 ▶️  Starting step ${state2.currentStepIndex + 1}/${state2.totalSteps}: ${step.description}`);
@@ -497326,6 +497428,69 @@ Wait for user confirmation before executing the first step.
   agent_default = agent;
 });
 
+// src/commands/composer.ts
+function getComposerPrompt(args) {
+  const featureDesc = args.trim() || "(no description provided)";
+  return `You are in **Composer Mode** — a multi-file editing workflow inspired by Cursor's Composer.
+
+## User's Request
+
+${featureDesc}
+
+## Your Task
+
+You will implement this feature across multiple files in a single turn. Follow this workflow:
+
+### 1. Analyze & Plan
+- Understand the feature request and identify all files that need to be created or modified
+- Create a plan listing every file that will be touched, with a brief description of changes for each
+- Consider dependencies between files (imports, types, shared utilities)
+- Identify test files that need to be created or updated
+
+### 2. Execute Multi-File Edits
+- Edit all necessary files to implement the feature
+- Work through files in dependency order (shared types/utils first, then consumers)
+- Ensure imports and exports are consistent across all files
+- Keep changes focused — only modify what's needed for this feature
+
+### 3. Verify
+- Run the test suite to verify the implementation works
+- Run the build to ensure no type or compile errors
+- If tests fail, fix the issues and re-verify
+
+## Multi-File Editing Guidelines
+
+- **Coordinate changes**: When editing a shared type or utility, update all consumers in the same turn
+- **Consistent naming**: Follow existing project conventions for file names, exports, and patterns
+- **Minimal diffs**: Make surgical edits — avoid rewriting entire files when small changes suffice
+- **Test coverage**: Add or update tests for all new functionality
+- **Error handling**: Add appropriate error handling for new code paths
+
+## Important Rules
+
+- Edit all files needed to complete the feature in a single turn
+- Do not ask for confirmation between file edits — proceed autonomously
+- After all edits are complete, run tests and build to verify
+- If verification fails, fix issues and re-run until green
+- Report a summary of all files changed at the end`;
+}
+var composer, composer_default;
+var init_composer = __esm(() => {
+  composer = {
+    type: "prompt",
+    name: "composer",
+    description: "Composer mode — edit multiple files simultaneously to implement a feature across the codebase",
+    argumentHint: "<feature description>",
+    progressMessage: "composer mode executing",
+    contentLength: 0,
+    source: "builtin",
+    async getPromptForCommand(args) {
+      return [{ type: "text", text: getComposerPrompt(args) }];
+    }
+  };
+  composer_default = composer;
+});
+
 // src/commands/remember.ts
 import { appendFile as appendFile5, mkdir as mkdir36 } from "fs/promises";
 import { join as join133 } from "path";
@@ -506039,6 +506204,7 @@ var init_commands2 = __esm(() => {
   init_frontend_tdd();
   init_agentic_tdd();
   init_agent2();
+  init_composer();
   init_remember();
   init_log3();
   init_errors();
@@ -506172,6 +506338,7 @@ var init_commands2 = __esm(() => {
     frontend_tdd_default,
     agentic_tdd_default,
     agent_default,
+    composer_default,
     tag_default,
     theme_default,
     feedback_default,
@@ -582136,6 +582303,7 @@ var init_replBridge = __esm(() => {
   init_cleanupRegistry();
   init_bridgeMessaging();
   init_workSecret();
+  init_sessionIdCompat();
   init_concurrentSessions();
   init_trustedDevice();
   init_HybridTransport();
@@ -582716,6 +582884,7 @@ var init_remoteBridgeCore = __esm(() => {
   init_axios2();
   init_replBridgeTransport();
   init_workSecret();
+  init_sessionIdCompat();
   init_jwtUtils();
   init_trustedDevice();
   init_envLessBridgeConfig();
@@ -582755,7 +582924,7 @@ async function initReplBridge(options) {
     outboundOnly,
     tags
   } = options ?? {};
-  setCseShimGate(isCseShimEnabled);
+  await setCseShimGate(isCseShimEnabled);
   const [
     { getFeatureValue_CACHED_WITH_REFRESH: getFeatureValue_CACHED_WITH_REFRESH4 },
     { getOrganizationUUID: getOrganizationUUID2 },
@@ -583006,6 +583175,7 @@ var init_initReplBridge = __esm(() => {
   init_envLessBridgeConfig();
   init_pollConfig();
   init_replBridge();
+  init_sessionIdCompat();
 });
 
 // src/cli/print.ts

package/dist/myclaude.mjs

@@ -4,8 +4,8 @@
 // MACRO - build-time constants (injected by build.ts)
 // MACRO injected by build script
 globalThis.MACRO = {
-  VERSION: "0.1.276",
-  BUILD_TIME: "2026-08-18T07:55:40.831Z",
+  VERSION: "0.1.285",
+  BUILD_TIME: "2026-08-21T08:33:09.704Z",
   PACKAGE_URL: "@funnycode/myclaude",
   NATIVE_PACKAGE_URL: "@funnycode/myclaude",
   VERSION_CHANGELOG: '',
@@ -120027,7 +120027,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@funnycode/myclaude",
-    version: "0.1.276",
+    version: "0.1.285",
     private: false,
     description: "An open-source AI coding assistant in your terminal - powered by Claude",
     license: "MIT",
@@ -282574,18 +282574,20 @@ __export(exports_sessionIdCompat, {
   resetCseShimGateForTesting: () => resetCseShimGateForTesting,
   getCseShimGate: () => getCseShimGate
 });
-function setCseShimGate(gate) {
-  if (_gateLocked)
-    return;
-  _gateLocked = true;
-  _isCseShimEnabled = gate;
+async function setCseShimGate(gate) {
+  await _gateMutex.runExclusive(() => {
+    if (_isCseShimEnabled === undefined) {
+      _isCseShimEnabled = gate;
+    }
+  });
 }
 function getCseShimGate() {
   return _isCseShimEnabled;
 }
-function resetCseShimGateForTesting() {
-  _isCseShimEnabled = undefined;
-  _gateLocked = false;
+async function resetCseShimGateForTesting() {
+  await _gateMutex.runExclusive(() => {
+    _isCseShimEnabled = undefined;
+  });
 }
 function toCompatSessionId(id) {
   if (!id.startsWith("cse_"))
@@ -282601,7 +282603,11 @@ function toInfraSessionId(id) {
     return id;
   return "cse_" + id.slice("session_".length);
 }
-var _isCseShimEnabled, _gateLocked = false;
+var _isCseShimEnabled, _gateMutex;
+var init_sessionIdCompat = __esm(() => {
+  init_async_mutex();
+  _gateMutex = new Mutex;
+});
 
 // src/constants/product.ts
 function isRemoteSessionStaging(sessionId, ingressUrl) {
@@ -282620,7 +282626,7 @@ function getClaudeAiBaseUrl(sessionId, ingressUrl) {
   return CLAUDE_AI_BASE_URL;
 }
 function getRemoteSessionUrl(sessionId, ingressUrl) {
-  const { toCompatSessionId: toCompatSessionId2 } = __toCommonJS(exports_sessionIdCompat);
+  const { toCompatSessionId: toCompatSessionId2 } = (init_sessionIdCompat(), __toCommonJS(exports_sessionIdCompat));
   const compatId = toCompatSessionId2(sessionId);
   const baseUrl = getClaudeAiBaseUrl(compatId, ingressUrl);
   return `${baseUrl}/code/${compatId}`;
@@ -387583,6 +387589,7 @@ var init_concurrentSessions = __esm(() => {
 // src/bridge/replBridgeHandle.ts
 var init_replBridgeHandle = __esm(() => {
   init_concurrentSessions();
+  init_sessionIdCompat();
 });
 
 // src/tasks/LocalMainSessionTask.ts
@@ -464039,6 +464046,7 @@ var init_createSession = __esm(() => {
   init_debug();
   init_errors();
   init_debugUtils();
+  init_sessionIdCompat();
 });
 
 // src/commands/rename/rename.ts
@@ -480190,34 +480198,84 @@ function sanitizeCommand(command6) {
   for (const node of parsed) {
     if (typeof node === "string") {
       if (/[`$<>|;&\\\n\r]/.test(node)) {
-        throw new Error(`Invalid command: shell metacharacter in token "${node}" is not allowed: "${command6}"`);
+        throw new Error("Invalid command: shell metacharacter in token is not allowed (input omitted for security)");
       }
       argv.push(node);
       continue;
     }
     if (node && typeof node === "object") {
       const kind = node.op || node.pattern || "shell metacharacter";
-      throw new Error(`Invalid command: shell metacharacter/operator (${kind}) is not allowed: "${command6}"`);
+      throw new Error(`Invalid command: shell metacharacter/operator (${kind}) is not allowed (input omitted for security)`);
     }
-    throw new Error(`Invalid command: unexpected token in command: "${command6}"`);
+    throw new Error("Invalid command: unexpected token in command (input omitted for security)");
   }
   if (argv.length === 0) {
     throw new Error("Invalid command: no program specified");
   }
   const program = argv[0];
   if (!ALLOWED_COMMANDS.has(program)) {
-    throw new Error(`Invalid command: program "${program}" is not on the allowlist of permitted commands`);
+    throw new Error("Invalid command: program is not on the allowlist of permitted commands (input omitted for security)");
   }
   return argv;
 }
-async function executeFlow(flow, context2, onStepStart, onStepComplete, onStepFail, onComplete) {
+function escapeCodeSpan(text2) {
+  const maxRun = (text2.match(/`+/g) || []).reduce((m2, s) => Math.max(m2, s.length), 0);
+  const delim = "`".repeat(maxRun + 1);
+  const pad = text2.startsWith("`") || text2.endsWith("`") ? " " : "";
+  return `${delim}${pad}${text2}${pad}${delim}`;
+}
+function escapeMarkdown(text2) {
+  return text2.replace(/\\/g, "\\\\").replace(/`/g, "\\`").replace(/\*/g, "\\*").replace(/_/g, "\\_").replace(/\[/g, "\\[").replace(/\]/g, "\\]").replace(/#/g, "\\#").replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/!/g, "\\!").replace(/\(/g, "\\(").replace(/\)/g, "\\)");
+}
+function generateDiffPreview(flow) {
+  const lines2 = [];
+  lines2.push(`## Diff Preview: ${escapeMarkdown(flow.name)}`);
+  lines2.push(``);
+  lines2.push(`**Description**: ${escapeMarkdown(flow.description)}`);
+  lines2.push(``);
+  lines2.push(`**Steps (${flow.steps.length}):**`);
+  lines2.push(``);
+  for (let i3 = 0;i3 < flow.steps.length; i3++) {
+    const step = flow.steps[i3];
+    lines2.push(`### Step ${i3 + 1}: ${escapeMarkdown(step.description)}`);
+    if (step.reasoning) {
+      lines2.push(`- **Reasoning**: ${escapeMarkdown(step.reasoning)}`);
+    }
+    if (step.command) {
+      lines2.push(`- **Command**: ${escapeCodeSpan(step.command)}`);
+    }
+    if (step.files && step.files.length > 0) {
+      lines2.push(`- **Files**: ${step.files.map((f2) => escapeCodeSpan(f2)).join(", ")}`);
+    }
+    lines2.push(``);
+  }
+  lines2.push(`---`);
+  lines2.push(`Review the above changes carefully before approving.`);
+  return lines2.join(`
+`);
+}
+async function executeFlow(flow, context2, onStepStart, onStepComplete, onStepFail, onComplete, options) {
+  const ids = flow.steps.map((s) => s.id);
+  if (new Set(ids).size !== ids.length) {
+    throw new Error("Flow definition contains duplicate step IDs");
+  }
   const state = {
     currentStepIndex: 0,
     completedSteps: [],
     failedSteps: [],
     totalSteps: flow.steps.length,
-    startTime: Date.now()
-  };
+    startTime: Date.now(),
+    aborted: false
+  };
+  const callbackErrors = [];
+  if (options?.preview && options?.onPreview) {
+    const preview = generateDiffPreview(flow);
+    const approved = await options.onPreview(preview);
+    if (!approved) {
+      state.aborted = true;
+      return state;
+    }
+  }
   for (let i3 = 0;i3 < flow.steps.length; i3++) {
     const step = flow.steps[i3];
     state.currentStepIndex = i3;
@@ -480239,6 +480297,7 @@ async function executeFlow(flow, context2, onStepStart, onStepComplete, onStepFa
           await onStepComplete(step, state);
         } catch (callbackError) {
           console.error(`onStepComplete callback failed for step "${step.id}":`, callbackError);
+          callbackErrors.push(callbackError);
         }
       }
     } catch (error52) {
@@ -480248,10 +480307,12 @@ async function executeFlow(flow, context2, onStepStart, onStepComplete, onStepFa
           await onStepFail(step, state, error52);
         } catch (callbackError) {
           console.error(`onStepFail callback failed for step "${step.id}":`, callbackError);
+          callbackErrors.push(callbackError);
         }
       }
       const shouldContinue = await shouldContinueOnError(error52, step);
       if (!shouldContinue) {
+        state.aborted = true;
         break;
       }
     }
@@ -480261,7 +480322,14 @@ async function executeFlow(flow, context2, onStepStart, onStepComplete, onStepFa
       await onComplete(state);
     } catch (callbackError) {
       console.error("onComplete callback failed:", callbackError);
+      callbackErrors.push(callbackError);
+    }
+  }
+  if (callbackErrors.length > 0) {
+    if (callbackErrors.length === 1) {
+      throw callbackErrors[0];
     }
+    throw new AggregateError(callbackErrors, "Multiple callback errors occurred during flow execution");
   }
   return state;
 }
@@ -480271,26 +480339,51 @@ async function executeCommand(command6, context2) {
     await context2.bridge.runCommand(argv);
     return;
   }
-  throw new Error("No bridge.runCommand available to execute: " + command6);
+  throw new Error("No bridge.runCommand available to execute command (input omitted for security)");
 }
 async function executeFileOperation(file2, context2) {
+  if (typeof file2 !== "string") {
+    throw new Error("Invalid file path: must be a string");
+  }
+  if (file2.includes("\x00")) {
+    throw new Error("Invalid file path: NUL byte detected");
+  }
+  const normalized = file2.replace(/\\/g, "/");
+  if (normalized.startsWith("/") || /^[A-Za-z]:\//.test(normalized)) {
+    throw new Error("Invalid file path: absolute paths are not allowed");
+  }
+  const parts = normalized.split("/");
+  for (const part of parts) {
+    if (part === "..") {
+      throw new Error("Invalid file path: path traversal (..) is not allowed");
+    }
+  }
   if (context2?.bridge?.editFile) {
     await context2.bridge.editFile(file2);
     return;
   }
-  throw new Error("No bridge.editFile available to edit: " + file2);
+  throw new Error("No bridge.editFile available to edit file (input omitted for security)");
 }
 async function shouldContinueOnError(error52, step) {
-  const transientCodes = ["ETIMEDOUT"];
+  const transientCodes = [
+    "ETIMEDOUT",
+    "ECONNRESET",
+    "ENETUNREACH",
+    "EPIPE",
+    "EAI_AGAIN",
+    "ENOTFOUND",
+    "ECONNREFUSED"
+  ];
   const err2 = error52;
-  if (err2.code && transientCodes.includes(err2.code)) {
+  const codeFromProps = typeof err2.code === "string" ? err2.code : typeof err2.errno === "string" ? err2.errno : null;
+  if (codeFromProps && transientCodes.includes(codeFromProps)) {
     return true;
   }
-  if (transientCodes.some((code) => error52.message.includes(code))) {
+  if (transientCodes.some((code) => new RegExp(`(^|:\\s*)${code}\\b`).test(error52.message))) {
     return true;
   }
-  if (error52.message.includes("No bridge")) {
-    return true;
+  if (/^No bridge\.(runCommand|editFile) available/.test(error52.message)) {
+    return false;
   }
   return false;
 }
@@ -480298,18 +480391,11 @@ var import_shell_quote4, ALLOWED_COMMANDS;
 var init_executor = __esm(() => {
   import_shell_quote4 = __toESM(require_shell_quote(), 1);
   ALLOWED_COMMANDS = new Set([
-    "npm",
-    "npx",
-    "node",
-    "bun",
-    "yarn",
-    "pnpm",
     "mkdir",
     "touch",
     "cp",
     "mv",
     "echo",
-    "git",
     "tsc",
     "vitest"
   ]);
@@ -480395,6 +480481,22 @@ var init_flow = __esm(() => {
       if (!flow) {
         throw new Error(`Flow not found: ${args}`);
       }
+      if (context2?.preview !== false) {
+        const preview = generateDiffPreview(flow);
+        console.log(preview);
+        const approved = context2?.onPreview ? await context2.onPreview(preview) : true;
+        if (!approved) {
+          console.log("Flow execution aborted by user.");
+          return {
+            currentStepIndex: 0,
+            completedSteps: [],
+            failedSteps: [],
+            totalSteps: flow.steps.length,
+            startTime: Date.now(),
+            aborted: true
+          };
+        }
+      }
       const state = await executeFlow(flow, context2, async (step, state2) => {
         console.log(`
 ▶️  Starting step ${state2.currentStepIndex + 1}/${state2.totalSteps}: ${step.description}`);
@@ -497326,6 +497428,69 @@ Wait for user confirmation before executing the first step.
   agent_default = agent;
 });
 
+// src/commands/composer.ts
+function getComposerPrompt(args) {
+  const featureDesc = args.trim() || "(no description provided)";
+  return `You are in **Composer Mode** — a multi-file editing workflow inspired by Cursor's Composer.
+
+## User's Request
+
+${featureDesc}
+
+## Your Task
+
+You will implement this feature across multiple files in a single turn. Follow this workflow:
+
+### 1. Analyze & Plan
+- Understand the feature request and identify all files that need to be created or modified
+- Create a plan listing every file that will be touched, with a brief description of changes for each
+- Consider dependencies between files (imports, types, shared utilities)
+- Identify test files that need to be created or updated
+
+### 2. Execute Multi-File Edits
+- Edit all necessary files to implement the feature
+- Work through files in dependency order (shared types/utils first, then consumers)
+- Ensure imports and exports are consistent across all files
+- Keep changes focused — only modify what's needed for this feature
+
+### 3. Verify
+- Run the test suite to verify the implementation works
+- Run the build to ensure no type or compile errors
+- If tests fail, fix the issues and re-verify
+
+## Multi-File Editing Guidelines
+
+- **Coordinate changes**: When editing a shared type or utility, update all consumers in the same turn
+- **Consistent naming**: Follow existing project conventions for file names, exports, and patterns
+- **Minimal diffs**: Make surgical edits — avoid rewriting entire files when small changes suffice
+- **Test coverage**: Add or update tests for all new functionality
+- **Error handling**: Add appropriate error handling for new code paths
+
+## Important Rules
+
+- Edit all files needed to complete the feature in a single turn
+- Do not ask for confirmation between file edits — proceed autonomously
+- After all edits are complete, run tests and build to verify
+- If verification fails, fix issues and re-run until green
+- Report a summary of all files changed at the end`;
+}
+var composer, composer_default;
+var init_composer = __esm(() => {
+  composer = {
+    type: "prompt",
+    name: "composer",
+    description: "Composer mode — edit multiple files simultaneously to implement a feature across the codebase",
+    argumentHint: "<feature description>",
+    progressMessage: "composer mode executing",
+    contentLength: 0,
+    source: "builtin",
+    async getPromptForCommand(args) {
+      return [{ type: "text", text: getComposerPrompt(args) }];
+    }
+  };
+  composer_default = composer;
+});
+
 // src/commands/remember.ts
 import { appendFile as appendFile5, mkdir as mkdir36 } from "fs/promises";
 import { join as join133 } from "path";
@@ -506039,6 +506204,7 @@ var init_commands2 = __esm(() => {
   init_frontend_tdd();
   init_agentic_tdd();
   init_agent2();
+  init_composer();
   init_remember();
   init_log3();
   init_errors();
@@ -506172,6 +506338,7 @@ var init_commands2 = __esm(() => {
     frontend_tdd_default,
     agentic_tdd_default,
     agent_default,
+    composer_default,
     tag_default,
     theme_default,
     feedback_default,
@@ -582136,6 +582303,7 @@ var init_replBridge = __esm(() => {
   init_cleanupRegistry();
   init_bridgeMessaging();
   init_workSecret();
+  init_sessionIdCompat();
   init_concurrentSessions();
   init_trustedDevice();
   init_HybridTransport();
@@ -582716,6 +582884,7 @@ var init_remoteBridgeCore = __esm(() => {
   init_axios2();
   init_replBridgeTransport();
   init_workSecret();
+  init_sessionIdCompat();
   init_jwtUtils();
   init_trustedDevice();
   init_envLessBridgeConfig();
@@ -582755,7 +582924,7 @@ async function initReplBridge(options) {
     outboundOnly,
     tags
   } = options ?? {};
-  setCseShimGate(isCseShimEnabled);
+  await setCseShimGate(isCseShimEnabled);
   const [
     { getFeatureValue_CACHED_WITH_REFRESH: getFeatureValue_CACHED_WITH_REFRESH4 },
     { getOrganizationUUID: getOrganizationUUID2 },
@@ -583006,6 +583175,7 @@ var init_initReplBridge = __esm(() => {
   init_envLessBridgeConfig();
   init_pollConfig();
   init_replBridge();
+  init_sessionIdCompat();
 });
 
 // src/cli/print.ts

package/package.json

@@ -1,131 +1,131 @@
-{
-  "name": "@funnycode/myclaude",
-  "version": "0.1.276",
-  "private": false,
-  "description": "An open-source AI coding assistant in your terminal - powered by Claude",
-  "license": "MIT",
-  "type": "module",
-  "packageManager": "bun@1.3.5",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/thomaslwq/myclaude.git"
-  },
-  "bugs": {
-    "url": "https://github.com/thomaslwq/myclaude/issues"
-  },
-  "homepage": "https://github.com/thomaslwq/myclaude",
-  "engines": {
-    "bun": ">=1.3.5",
-    "node": ">=18.17.0"
-  },
-  "scripts": {
-    "dev": "bun run ./src/dev-entry.ts",
-    "start": "bun run ./src/dev-entry.ts",
-    "test": "bun test",
-    "test:watch": "bun test --watch",
-    "test:perf": "bun test src/tests/performance-regression.test.ts",
-    "build": "bun run ./scripts/build.ts",
-    "prepublishOnly": "bun run build",
-    "version": "bun run ./src/dev-entry.ts --version"
-  },
-  "bin": {
-    "myclaude": "bin/myclaude.cjs"
-  },
-  "files": [
-    "dist/",
-    "seed/",
-    "bin/",
-    "LICENSE",
-    "README.md",
-    "README.zh-CN.md",
-    "CHANGELOG.md",
-    "docs/funnycode.png",
-    "shims/node-domexception/"
-  ],
-  "publishConfig": {
-    "access": "public"
-  },
-  "dependencies": {
-    "@alcalzone/ansi-tokenize": "0.3.0",
-    "@anthropic-ai/claude-agent-sdk": "0.3.207",
-    "@anthropic-ai/mcpb": "2.1.2",
-    "@anthropic-ai/sandbox-runtime": "0.0.44",
-    "@anthropic-ai/sdk": "0.111.0",
-    "@aws-sdk/client-bedrock-runtime": "3.1020.0",
-    "@commander-js/extra-typings": "14.0.0",
-    "@growthbook/growthbook": "1.6.5",
-    "@modelcontextprotocol/sdk": "1.29.0",
-    "@opentelemetry/api": "1.9.1",
-    "@opentelemetry/api-logs": "0.221.0",
-    "@opentelemetry/core": "1.28.0",
-    "@opentelemetry/resources": "1.28.0",
-    "@opentelemetry/sdk-logs": "0.52.0",
-    "@opentelemetry/sdk-metrics": "1.28.0",
-    "@opentelemetry/sdk-trace-base": "1.28.0",
-    "@opentelemetry/semantic-conventions": "1.43.0",
-    "ajv": "8.18.0",
-    "asciichart": "1.5.25",
-    "async-mutex": "0.5.0",
-    "auto-bind": "5.0.1",
-    "axios": "1.19.0",
-    "bidi-js": "1.0.3",
-    "chalk": "5.6.2",
-    "chokidar": "5.0.0",
-    "cli-boxes": "4.0.1",
-    "code-excerpt": "4.0.0",
-    "diff": "8.0.4",
-    "emoji-regex": "10.6.0",
-    "env-paths": "4.0.0",
-    "execa": "9.6.1",
-    "figures": "6.1.0",
-    "fuse.js": "7.1.0",
-    "get-east-asian-width": "1.5.0",
-    "google-auth-library": "10.6.2",
-    "highlight.js": "11.11.1",
-    "https-proxy-agent": "8.0.0",
-    "ignore": "7.0.5",
-    "indent-string": "5.0.0",
-    "ink": "6.8.0",
-    "jsonc-parser": "3.3.1",
-    "lodash-es": "4.17.23",
-    "lru-cache": "11.5.2",
-    "marked": "18.0.9",
-    "p-map": "7.0.4",
-    "picomatch": "4.0.4",
-    "proper-lockfile": "4.1.2",
-    "qrcode": "1.5.4",
-    "react": "19.2.8",
-    "react-reconciler": "0.33.0",
-    "semver": "7.8.5",
-    "shell-quote": "1.8.3",
-    "signal-exit": "4.1.0",
-    "stack-utils": "2.0.6",
-    "strip-ansi": "7.2.0",
-    "supports-hyperlinks": "4.4.0",
-    "tree-kill": "1.2.2",
-    "type-fest": "5.5.0",
-    "undici": "7.24.6",
-    "usehooks-ts": "3.1.1",
-    "vscode-jsonrpc": "8.2.1",
-    "vscode-languageserver-protocol": "3.17.5",
-    "vscode-languageserver-types": "3.17.5",
-    "wrap-ansi": "10.0.0",
-    "ws": "8.20.0",
-    "xss": "1.0.15",
-    "yaml": "2.8.3",
-    "zod": "4.4.3"
-  },
-  "optionalDependencies": {
-    "@ant/claude-for-chrome-mcp": "file:./shims/ant-claude-for-chrome-mcp",
-    "@ant/computer-use-input": "file:./shims/ant-computer-use-input",
-    "@ant/computer-use-mcp": "file:./shims/ant-computer-use-mcp",
-    "@ant/computer-use-swift": "file:./shims/ant-computer-use-swift",
-    "color-diff-napi": "file:./shims/color-diff-napi",
-    "modifiers-napi": "file:./shims/modifiers-napi",
-    "node-domexception": "file:./shims/node-domexception",
-    "url-handler-napi": "file:./shims/url-handler-napi"
-  },
-  "overrides": {
-    "node-domexception": "file:./shims/node-domexception"
-  }
-}
+{
+  "name": "@funnycode/myclaude",
+  "version": "0.1.285",
+  "private": false,
+  "description": "An open-source AI coding assistant in your terminal - powered by Claude",
+  "license": "MIT",
+  "type": "module",
+  "packageManager": "bun@1.3.5",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/thomaslwq/myclaude.git"
+  },
+  "bugs": {
+    "url": "https://github.com/thomaslwq/myclaude/issues"
+  },
+  "homepage": "https://github.com/thomaslwq/myclaude",
+  "engines": {
+    "bun": ">=1.3.5",
+    "node": ">=18.17.0"
+  },
+  "scripts": {
+    "dev": "bun run ./src/dev-entry.ts",
+    "start": "bun run ./src/dev-entry.ts",
+    "test": "bun test",
+    "test:watch": "bun test --watch",
+    "test:perf": "bun test src/tests/performance-regression.test.ts",
+    "build": "bun run ./scripts/build.ts",
+    "prepublishOnly": "bun run build",
+    "version": "bun run ./src/dev-entry.ts --version"
+  },
+  "bin": {
+    "myclaude": "bin/myclaude.cjs"
+  },
+  "files": [
+    "dist/",
+    "seed/",
+    "bin/",
+    "LICENSE",
+    "README.md",
+    "README.zh-CN.md",
+    "CHANGELOG.md",
+    "docs/funnycode.png",
+    "shims/node-domexception/"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@alcalzone/ansi-tokenize": "0.3.0",
+    "@anthropic-ai/claude-agent-sdk": "0.3.207",
+    "@anthropic-ai/mcpb": "2.1.2",
+    "@anthropic-ai/sandbox-runtime": "0.0.44",
+    "@anthropic-ai/sdk": "0.111.0",
+    "@aws-sdk/client-bedrock-runtime": "3.1020.0",
+    "@commander-js/extra-typings": "14.0.0",
+    "@growthbook/growthbook": "1.6.5",
+    "@modelcontextprotocol/sdk": "1.29.0",
+    "@opentelemetry/api": "1.9.1",
+    "@opentelemetry/api-logs": "0.221.0",
+    "@opentelemetry/core": "1.28.0",
+    "@opentelemetry/resources": "1.28.0",
+    "@opentelemetry/sdk-logs": "0.52.0",
+    "@opentelemetry/sdk-metrics": "1.28.0",
+    "@opentelemetry/sdk-trace-base": "1.28.0",
+    "@opentelemetry/semantic-conventions": "1.43.0",
+    "ajv": "8.18.0",
+    "asciichart": "1.5.25",
+    "async-mutex": "0.5.0",
+    "auto-bind": "5.0.1",
+    "axios": "1.19.0",
+    "bidi-js": "1.0.3",
+    "chalk": "5.6.2",
+    "chokidar": "5.0.0",
+    "cli-boxes": "4.0.1",
+    "code-excerpt": "4.0.0",
+    "diff": "8.0.4",
+    "emoji-regex": "10.6.0",
+    "env-paths": "4.0.0",
+    "execa": "9.6.1",
+    "figures": "6.1.0",
+    "fuse.js": "7.1.0",
+    "get-east-asian-width": "1.5.0",
+    "google-auth-library": "10.6.2",
+    "highlight.js": "11.11.1",
+    "https-proxy-agent": "8.0.0",
+    "ignore": "7.0.5",
+    "indent-string": "5.0.0",
+    "ink": "6.8.0",
+    "jsonc-parser": "3.3.1",
+    "lodash-es": "4.17.23",
+    "lru-cache": "11.5.2",
+    "marked": "18.0.9",
+    "p-map": "7.0.4",
+    "picomatch": "4.0.4",
+    "proper-lockfile": "4.1.2",
+    "qrcode": "1.5.4",
+    "react": "19.2.8",
+    "react-reconciler": "0.33.0",
+    "semver": "7.8.5",
+    "shell-quote": "1.8.3",
+    "signal-exit": "4.1.0",
+    "stack-utils": "2.0.6",
+    "strip-ansi": "7.2.0",
+    "supports-hyperlinks": "4.4.0",
+    "tree-kill": "1.2.2",
+    "type-fest": "5.5.0",
+    "undici": "7.24.6",
+    "usehooks-ts": "3.1.1",
+    "vscode-jsonrpc": "8.2.1",
+    "vscode-languageserver-protocol": "3.17.5",
+    "vscode-languageserver-types": "3.17.5",
+    "wrap-ansi": "10.0.0",
+    "ws": "8.20.0",
+    "xss": "1.0.15",
+    "yaml": "2.8.3",
+    "zod": "4.4.3"
+  },
+  "optionalDependencies": {
+    "@ant/claude-for-chrome-mcp": "file:./shims/ant-claude-for-chrome-mcp",
+    "@ant/computer-use-input": "file:./shims/ant-computer-use-input",
+    "@ant/computer-use-mcp": "file:./shims/ant-computer-use-mcp",
+    "@ant/computer-use-swift": "file:./shims/ant-computer-use-swift",
+    "color-diff-napi": "file:./shims/color-diff-napi",
+    "modifiers-napi": "file:./shims/modifiers-napi",
+    "node-domexception": "file:./shims/node-domexception",
+    "url-handler-napi": "file:./shims/url-handler-napi"
+  },
+  "overrides": {
+    "node-domexception": "file:./shims/node-domexception"
+  }
+}