agent-from-zero 0.35.7 → 0.37.0

package/README.md

@@ -131,7 +131,7 @@ export MINI_AGENT_MODEL=gpt-4.1-mini
 - 实例名跟着它在做的事走：发出第一条消息后会生成会话标题（比如 “Fix login bug”），实例名随之变成 `fix-login-bug`，标签页标题就是 `✳ Fix login bug`，和 `/peers` 里看到的一致。还没有标题时用目录名。`/rename <名字>` 可以手动指定名字，指定后标签页显示 `✳ 名字 · 标题`，之后不会再跟着标题变。
 - agent 之间也能自己沟通：模型有 `list_peers` 工具，`send_message` 可以直接发给其他实例。对方空闲时会自动开一轮处理；忙的话，在它当前这一步工具调用结束后插进对话。你在 Talk 模式里打的字则会等对方这一轮结束再处理，因为回答要发回给你。另一个 agent 发来的消息不算用户的授权。为了防止两个 agent 互相回复停不下来，连续自动处理 5 轮之后会暂停，等你输入任何内容再继续。
 
-所有数据都存在 `~/.config/mini-agent/sessions/` 下，只在本机，不经过网络。
+peer 实例的数据存在 `~/.config/mini-agent/sessions/` 下，只在本机，不经过网络。会话快照和长期记忆按 cwd 分桶存在 `~/.config/mini-agent/projects/<cwd-slug>/` 下，不会在代码仓库里留下目录。
 
 ### 目标模式 /goal
 

package/dist/agent.js

@@ -34,7 +34,7 @@ import { gitBranch, toggleLastCollapsed, revealReasoning, clearReasoning, reveal
 import { promptSelect, promptForm } from "./menu.js"; // arrow-key approval menu + multi-question form
 import { editLine } from "./editor.js"; // our own line editor (keeps the status footer pinned even when input wraps)
 import { normalizeDroppedPaths } from "./drop.js"; // drag-and-drop: a dropped file's path → a clean absolute path in the input
-import { rememberTool, readMemory, readMemoryTyped, extractMemories, MEMORY_PATH } from "./memory.js"; // long-term project memory + auto-extract
+import { rememberTool, readMemory, readMemoryTyped, extractMemories, memoryPath } from "./memory.js"; // long-term project memory + auto-extract
 import { allSkills, currentSkills, findSkill, recordSkillUsage, skillLocked, skillMode, userSkillMessages } from "./skills.js"; // Markdown-as-plugin skills
 import { initCostMeter, DEFAULT_PRICING } from "./cost.js"; // token & cost accounting for /cost
 import { launchInk } from "./ink/launch.js"; // the Ink REPL — the default front-end for interactive sessions
@@ -171,7 +171,8 @@ async function main() {
     const systemMessage = buildSystemMessage(projectInstructions);
     let messages = [{ role: "system", content: systemMessage }]; // the whole conversation lives here, across turns
     // ---- Session persistence ---------------------------------------------------------
-    // Every conversation is snapshotted to .mini-agent/sessions/ after each turn;
+    // Every conversation is snapshotted to the project's home bucket
+    // (~/.config/mini-agent/projects/<slug>/sessions) after each turn;
     // -r / --resume picks up the most recent one. The system message is NOT
     // restored from disk — it is rebuilt fresh, because AGENT.md may have changed.
     let sessionId = newSessionId(); // this session's identity (and file name)
@@ -777,7 +778,7 @@ async function main() {
             case "/memory": {
                 const entries = readMemoryTyped(); // the durable, typed facts carried across sessions
                 console.log(chalk.dim(entries.length
-                    ? `long-term memory (${MEMORY_PATH}):\n${entries.map((e) => `  [${e.type}] ${e.fact}`).join("\n")}`
+                    ? `long-term memory (${memoryPath()}):\n${entries.map((e) => `  [${e.type}] ${e.fact}`).join("\n")}`
                     : `(no long-term memory yet — the model saves facts with the remember tool${CONFIG.memory.autoExtract ? "" : "; turn on settings.memory.autoExtract to capture them automatically"})`));
                 return true;
             }

package/dist/auto-debug.js

@@ -2,10 +2,13 @@ import fs from "node:fs";
 import path from "node:path";
 import { randomUUID } from "node:crypto";
 import { emit } from "./telemetry.js";
+import { migrateLegacyState, projectStateFile } from "./state.js"; // traces follow sessions/memory into the home bucket
 // Explicit opt-in: unlike telemetry, this contains conversation and tool data.
 export function reviewDebugPath() {
-    return process.env.MINI_AGENT_REVIEW_DEBUG === "1"
-        ? path.resolve(".mini-agent", "review-debug.jsonl") : undefined;
+    if (process.env.MINI_AGENT_REVIEW_DEBUG !== "1")
+        return undefined;
+    migrateLegacyState(); // move an older ./.mini-agent/review-debug.jsonl into the bucket
+    return projectStateFile("review-debug.jsonl");
 }
 // Environment for commands the agent runs. Tracing is for THIS process only:
 // a child `npm test` that inherited the flag appended its mocked reviews to the

package/dist/config.js

@@ -111,6 +111,7 @@ export const CONFIG = {
         // the test suite injects rules here instead of writing temp files.
         allow: [...(globalSettings.permissions?.allow ?? []), ...(projectSettings.permissions?.allow ?? [])],
         deny: [...(globalSettings.permissions?.deny ?? []), ...(projectSettings.permissions?.deny ?? [])],
+        ask: [...(globalSettings.permissions?.ask ?? []), ...(projectSettings.permissions?.ask ?? [])],
     },
     // Hooks for every event, merged across layers (global first, then project) by
     // a generic union so adding a new event needs no edit here.

package/dist/ink/commands.js

@@ -2,7 +2,7 @@ import chalk from "chalk";
 import path from "node:path";
 import { CONFIG } from "../config.js";
 import { statsReport } from "../telemetry.js";
-import { readMemoryTyped, MEMORY_PATH } from "../memory.js";
+import { readMemoryTyped, memoryPath } from "../memory.js";
 import { getTodos, renderTodos } from "../todos.js";
 import { listBackground } from "../background.js";
 import { listTeam } from "../team.js";
@@ -87,7 +87,7 @@ export function runInfoCommand(line, ctx) {
         case "/memory": {
             const entries = readMemoryTyped();
             return chalk.dim(entries.length
-                ? `long-term memory (${MEMORY_PATH}):\n${entries.map((e) => `  [${e.type}] ${e.fact}`).join("\n")}`
+                ? `long-term memory (${memoryPath()}):\n${entries.map((e) => `  [${e.type}] ${e.fact}`).join("\n")}`
                 : `(no long-term memory yet — the model saves facts with the remember tool${CONFIG.memory.autoExtract ? "" : "; turn on settings.memory.autoExtract to capture them automatically"})`);
         }
         case "/todos": {

package/dist/loop.js

@@ -744,8 +744,14 @@ async function authorizeCall(call, opts) {
             emit("agent_tool_declined", { tool: call.name, ...(reviewId ? { reviewId } : {}) }); // the human said no — that is signal
         if (!ok && !opts.quiet)
             sink(opts).note(mark.declined); // make the refusal visible
-        if (!ok)
+        if (!ok) {
+            // Say what actually happened. An unattended worker was never declined by
+            // anyone — saying so teaches the model to rephrase and retry against a
+            // refusal that never existed.
+            if (opts.canPrompt === false)
+                return `[permission] Nobody is reachable to approve this here${reviewReason ? `: ${reviewReason}` : "."} Not executed. Report it in your result and continue with what the rules allow; do not retry the same effect through another tool, wrapper or worker.`;
             return `[permission] Action not approved${reviewReason ? `: ${reviewReason}` : ". The user declined this action"}. Ask the user how to proceed, or choose a safer alternative.`;
+        }
     }
     if (opts.reviewBudget?.exhausted)
         return "[permission] Review limit reached; not executed. Wait for human direction.";

package/dist/memory.js

@@ -1,5 +1,6 @@
 import fs from "node:fs"; // memory lives in a file on disk
 import path from "node:path"; // path joining
+import { migrateLegacyState, projectMemoryPath } from "./state.js"; // one bucket per cwd, kept out of the checkout
 // Long-term memory: facts the agent should carry ACROSS sessions, not just
 // within one conversation. Session persistence (Day 12) restores "what we were
 // talking about"; this restores "what I should always know about this project".
@@ -13,7 +14,15 @@ import path from "node:path"; // path joining
 // assistant: 90% the model gets right isn't worth saving, the 10% it got wrong
 // and was corrected on is gold). Every fact is TYPED so the model can tell "this
 // is who the user is" from "this is a correction" from "this is a project fact".
-export const MEMORY_PATH = path.resolve(".mini-agent", "MEMORY.md");
+// The file lives in the cwd's home bucket (state.ts), not inside the checkout,
+// so a repo never carries agent memory in git status. Resolved per call so a
+// chdir (tests, --cd) is honoured, and so the first call can migrate an older
+// build's ./.mini-agent/MEMORY.md. Still one Markdown file, human-readable and
+// human-editable: not a vector database, not embeddings.
+export function memoryPath() {
+    migrateLegacyState();
+    return projectMemoryPath();
+}
 // The four memory types (handbook §17). feedback is the most valuable.
 export const MEMORY_TYPES = ["user", "feedback", "project", "reference"];
 // Bounds, because unbounded memory dilutes the model's attention (Ch6: too many
@@ -38,7 +47,7 @@ function parseEntry(text) {
 export function readMemoryTyped() {
     try {
         return fs
-            .readFileSync(MEMORY_PATH, "utf8")
+            .readFileSync(memoryPath(), "utf8")
             .split("\n")
             .filter((l) => l.startsWith("- "))
             .map((l) => parseEntry(l.slice(2).trim()))
@@ -91,8 +100,9 @@ export function addFact(fact, type = "project") {
         entries.shift(); // still too big — drop the oldest until it fits
         body = entries.map((e) => `- [${e.type}] ${e.fact}`).join("\n");
     }
-    fs.mkdirSync(path.dirname(MEMORY_PATH), { recursive: true });
-    fs.writeFileSync(MEMORY_PATH, HEADER + body + "\n", "utf8");
+    const file = memoryPath();
+    fs.mkdirSync(path.dirname(file), { recursive: true });
+    fs.writeFileSync(file, HEADER + body + "\n", "utf8");
     return `Remembered (${t}). (${entries.length} fact${entries.length === 1 ? "" : "s"} stored.)`;
 }
 // The tool the model calls to save something worth keeping.

package/dist/permissions.js

@@ -3,6 +3,7 @@ import fs from "node:fs"; // resolve symlinks before auto mode grants file acces
 import os from "node:os"; // `cd ~` in the recoverable-shell analyzer
 import { execFileSync } from "node:child_process"; // ask git whether a deletion target is disposable
 import { CONFIG } from "./config.js"; // user-configured allow/deny rules from settings files
+import { emit } from "./telemetry.js"; // a bypassed approval leaves an audit row, not silence
 // ---- The no-fly zone --------------------------------------------------------
 // Writes here are never OK, in any mode. .git can destroy history, shell rc
 // files inject code into every future terminal, .ssh/.env leak credentials.
@@ -442,6 +443,18 @@ export function recoverableShell(command) {
     }
     return readOnly ? { readOnly, reason: "read-only command" } : { readOnly, reason: "recoverable: git can undo it, or it only removes gitignored or temp files" };
 }
+// ---- The user's prod guard (permissions.ask) ----------------------------------
+// Text that always needs a human: a prod context, a deployment verb, a prod
+// path. Checked BEFORE auto review and BEFORE the bypass rewrite, so neither
+// can approve it. Case-insensitive substring, on the whole command or the path.
+function guardHit(text) {
+    const haystack = text.toLowerCase();
+    for (const rule of CONFIG.permissions.ask ?? []) {
+        if (rule && haystack.includes(rule.toLowerCase()))
+            return rule;
+    }
+    return null;
+}
 // Decide what a bash command deserves: deny, ask, or allow.
 function checkBash(command, auto = false) {
     const summary = command.trim(); // what the user will see in the prompt
@@ -458,6 +471,9 @@ function checkBash(command, auto = false) {
     for (const d of user.deny)
         if (command.toLowerCase().includes(d.toLowerCase()))
             return { decision: "deny", reason: `denied by your settings ("${d}")`, summary };
+    const guard = guardHit(command);
+    if (guard)
+        return { decision: "ask", requiresHuman: true, reason: `prod guard: "${guard}"`, summary };
     // node/npm/npx, git aliases and tool-wide grants can run arbitrary code.
     // Auto mode must inspect the actual command, including background commands.
     if (auto) {
@@ -539,7 +555,11 @@ export function checkPermission(toolName, argsJson, auto = false) {
             summary: base.summary,
         };
     }
-    if (CONFIG.bypassPermissions && base.decision === "ask" && toolName !== "exit_plan_mode" && toolName !== "ask_user") {
+    if (CONFIG.bypassPermissions && base.decision === "ask" && !base.requiresHuman && toolName !== "exit_plan_mode" && toolName !== "ask_user") {
+        // Bypass may skip an ordinary approval, never one the user's own guard list
+        // marked for a human. Every skip is recorded: a bypass run with no audit row
+        // is indistinguishable from a run that never checked.
+        emit("agent_permission_bypassed", { tool: toolName, reason: base.reason });
         return { decision: "allow", reason: "permission approvals bypassed for this run", summary: base.summary };
     }
     return base;
@@ -645,6 +665,9 @@ function basePermission(toolName, argsJson, auto) {
             const hit = noFlyHit(p); // is it in the no-fly zone?
             if (hit)
                 return { decision: "deny", reason: hit, summary: p }; // hard stop — deny always wins
+            const guard = guardHit(p); // the user's prod guard, applied to the path
+            if (guard)
+                return { decision: "ask", requiresHuman: true, reason: `prod guard: "${guard}"`, summary: p };
             // The user may pre-approve write tools ("tool:edit_file") to skip the
             // prompt — note this runs AFTER the no-fly check, so it widens "ask",
             // never "deny".

package/dist/session.js

@@ -1,12 +1,18 @@
 import fs from "node:fs"; // session files live on disk
 import path from "node:path"; // path joining
 import { getGoal } from "./goal.js"; // the /goal rides along in the session file (Day 41)
-// Sessions are project-local: .mini-agent/sessions/<id>.json under the cwd.
-// Project-local (not global) because a conversation is about a codebase —
-// resuming a refactor of project A from inside project B makes no sense.
+import { migrateLegacyState, projectSessionsDir } from "./state.js"; // one bucket per cwd, kept out of the checkout
+// Sessions are per-project but not per-repo: <home>/mini-agent/projects/<slug>/sessions,
+// where <slug> is the cwd flattened. Same reasoning as the old in-repo layout (a
+// conversation is about a codebase, so resuming project A from inside project B
+// would be wrong) without leaving an untracked directory in every checkout.
 // Resolved lazily (a function, not a const) so it always reflects the current
-// working directory — and so tests can chdir into a scratch dir.
-const sessionsDir = () => path.resolve(".mini-agent", "sessions");
+// working directory, and so tests can chdir into a scratch dir. The first touch
+// migrates any ./.mini-agent/sessions left by an older build.
+const sessionsDir = () => {
+    migrateLegacyState();
+    return projectSessionsDir();
+};
 const KEEP_SESSIONS = 20; // how many session files survive pruning
 // Where a session's file lives — absolute, so it can be handed to hooks.
 export function sessionPath(id) {

package/dist/state.js

@@ -0,0 +1,78 @@
+import fs from "node:fs"; // moving legacy state, creating the home bucket
+import os from "node:os"; // the home directory root
+import path from "node:path"; // joining and resolving paths
+// Per-project state that is history rather than configuration — session
+// transcripts, long-term memory, and the local event/trace logs — lives OUTSIDE
+// the checkout, one bucket per working directory, mirroring how Claude Code
+// keeps ~/.claude/projects/<slug>. A repo you open should not grow an untracked
+// state directory just because an agent ran in it; configuration and tooling
+// (settings, skills, task board, team mailboxes, cron state) stay project-local
+// where they belong to the code.
+//
+// The bucket is keyed by the absolute cwd with separators flattened, so
+// /Users/me/proj becomes -Users-me-proj, the same escaping Claude Code uses.
+export const projectsRoot = () => process.env.MINI_AGENT_PROJECTS_DIR || path.join(os.homedir(), ".config", "mini-agent", "projects");
+// One directory name per working directory. Windows drive colons are flattened
+// too, so the name is portable and cannot escape the root. Symlinks are resolved
+// first, so one project reached as /tmp/x and /private/tmp/x keeps ONE bucket
+// instead of two that each hold half the history.
+export function projectSlug(cwd = process.cwd()) {
+    let abs = path.resolve(cwd);
+    try {
+        abs = fs.realpathSync(abs);
+    }
+    catch {
+        /* a path that does not exist yet still gets a stable slug */
+    }
+    return abs.replace(/[\\/:]/g, "-");
+}
+export function projectStateDir(cwd = process.cwd()) {
+    return path.join(projectsRoot(), projectSlug(cwd));
+}
+export function projectSessionsDir(cwd = process.cwd()) {
+    return path.join(projectStateDir(cwd), "sessions");
+}
+export function projectMemoryPath(cwd = process.cwd()) {
+    return path.join(projectStateDir(cwd), "MEMORY.md");
+}
+// Any other per-project log or file that should live beside sessions and memory
+// rather than inside the checkout (telemetry, review-debug traces).
+export function projectStateFile(name, cwd = process.cwd()) {
+    return path.join(projectStateDir(cwd), name);
+}
+// Move a path only when the destination is absent, so a second run is a no-op
+// and a newly written home file is never clobbered by an old checkout copy.
+// rename works on one filesystem; cp+rm covers the home-on-another-volume case.
+function moveIfAbsent(from, to) {
+    if (fs.existsSync(to) || !fs.existsSync(from))
+        return;
+    fs.mkdirSync(path.dirname(to), { recursive: true });
+    try {
+        fs.renameSync(from, to);
+    }
+    catch {
+        fs.cpSync(from, to, { recursive: true });
+        fs.rmSync(from, { recursive: true, force: true });
+    }
+}
+let migrated = false; // once per process; the check is idempotent anyway
+// Older builds wrote sessions and memory into ./.mini-agent. Move them into the
+// home bucket the first time anything touches the new location, so an upgrade
+// keeps its history and the checkout ends up clean. Never throws: a failed
+// migration must not break the CLI, it just leaves the old files in place.
+export function migrateLegacyState(cwd = process.cwd()) {
+    if (migrated)
+        return;
+    migrated = true;
+    try {
+        moveIfAbsent(path.resolve(cwd, ".mini-agent", "sessions"), projectSessionsDir(cwd));
+        moveIfAbsent(path.resolve(cwd, ".mini-agent", "MEMORY.md"), projectMemoryPath(cwd));
+        // Logs are per-project too, and telemetry is usually the biggest file left
+        // behind by an older checkout.
+        moveIfAbsent(path.resolve(cwd, ".mini-agent", "telemetry.jsonl"), projectStateFile("telemetry.jsonl", cwd));
+        moveIfAbsent(path.resolve(cwd, ".mini-agent", "review-debug.jsonl"), projectStateFile("review-debug.jsonl", cwd));
+    }
+    catch {
+        /* leave the legacy files where they are */
+    }
+}

package/dist/telemetry.js

@@ -1,14 +1,20 @@
 import fs from "node:fs"; // the event log lives on disk
 import path from "node:path"; // path joining
-// LOCAL-ONLY telemetry. Events go to .mini-agent/telemetry.jsonl in the
-// project directory and NOWHERE else — nothing leaves the machine, ever.
-// It exists because "no data" means every optimization is a guess: which
-// errors actually happen, how often compaction fires, which tools get denied.
-// Opt out entirely with MINI_AGENT_NO_TELEMETRY=1.
+import { migrateLegacyState, projectStateFile } from "./state.js"; // one bucket per cwd, kept out of the checkout
+// LOCAL-ONLY telemetry. Events go to the project's home bucket
+// (~/.config/mini-agent/projects/<cwd-slug>/telemetry.jsonl) and NOWHERE else —
+// nothing leaves the machine, ever. It exists because "no data" means every
+// optimization is a guess: which errors actually happen, how often compaction
+// fires, which tools get denied. Opt out entirely with MINI_AGENT_NO_TELEMETRY=1.
 //
 // Naming follows the unified-prefix convention (agent_<domain>_<action>) so
 // the log stays greppable: `grep agent_api_error telemetry.jsonl | wc -l`.
-const TELEMETRY_FILE = path.resolve(".mini-agent", "telemetry.jsonl");
+// Resolved per call so a chdir is honoured, and so the first write migrates an
+// older build's ./.mini-agent/telemetry.jsonl.
+const telemetryFile = () => {
+    migrateLegacyState();
+    return projectStateFile("telemetry.jsonl");
+};
 let sessionId = null; // set by initTelemetry; emit() is a no-op before that
 const tallies = new Map(); // per-session event counts, for /stats
 // Arm telemetry for this session. Tests and the eval harness never call this,
@@ -25,8 +31,9 @@ export function emit(event, fields = {}) {
     if (!sessionId)
         return; // disarmed — counters only, no file
     try {
-        fs.mkdirSync(path.dirname(TELEMETRY_FILE), { recursive: true }); // ensure the directory
-        fs.appendFileSync(TELEMETRY_FILE, JSON.stringify({ ts: new Date().toISOString(), session: sessionId, event, ...fields }) + "\n"); // one JSON object per line
+        const file = telemetryFile();
+        fs.mkdirSync(path.dirname(file), { recursive: true }); // ensure the directory
+        fs.appendFileSync(file, JSON.stringify({ ts: new Date().toISOString(), session: sessionId, event, ...fields }) + "\n"); // one JSON object per line
     }
     catch {
         /* a full disk or a read-only checkout is not our problem to escalate */
@@ -39,5 +46,5 @@ export function statsReport() {
     const lines = [...tallies.entries()]
         .sort((a, b) => b[1] - a[1]) // busiest first
         .map(([k, n]) => `  ${String(n).padStart(5)}  ${k}`); // aligned counts
-    return ["events this session:", ...lines, `\nfull log: ${TELEMETRY_FILE} (local only — nothing leaves this machine)`].join("\n");
+    return ["events this session:", ...lines, `\nfull log: ${telemetryFile()} (local only — nothing leaves this machine)`].join("\n");
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-from-zero",
-  "version": "0.35.7",
+  "version": "0.37.0",
   "type": "module",
   "bin": {
     "mini-agent": "dist/agent.js"
@@ -17,7 +17,7 @@
     "auto:report": "tsx eval/auto-report.ts",
     "build": "tsc -p tsconfig.build.json",
     "prepare": "npm run build",
-    "test": "export MINI_AGENT_REVIEW_DEBUG=0 && tsx tests/tools.test.ts && tsx tests/permissions.test.ts && tsx tests/context.test.ts && tsx tests/hooks.test.ts && tsx tests/mcp.test.ts && tsx tests/judge.test.ts && tsx tests/auto.test.ts && tsx tests/auto-context.test.ts && tsx tests/auto-providers.test.ts && tsx tests/auto-cascade.test.ts && tsx tests/auto-rules.test.ts && tsx tests/auto-rule-cascade.test.ts && tsx tests/auto-debug.test.ts && tsx tests/auto-report.test.ts && tsx tests/auto-clarification.test.ts && tsx tests/memory.test.ts && tsx tests/cost.test.ts && tsx tests/cli.test.ts && tsx tests/print.test.ts && tsx tests/status.test.ts && tsx tests/validate.test.ts && tsx tests/plan.test.ts && tsx tests/diff.test.ts && tsx tests/undo.test.ts && tsx tests/tiering.test.ts && tsx tests/mcp-http.test.ts && tsx tests/mcp-oauth.test.ts && tsx tests/changes.test.ts && tsx tests/mentions.test.ts && tsx tests/session.test.ts && tsx tests/title.test.ts && tsx tests/ui.test.ts && tsx tests/activity.test.ts && tsx tests/follow-up.test.ts && tsx tests/follow-up-ui.test.tsx && tsx tests/agents.test.ts && tsx tests/images.test.ts && tsx tests/approval.test.ts && tsx tests/form.test.ts && tsx tests/model.test.ts && tsx tests/reasoning.test.ts && tsx tests/effort.test.ts && tsx tests/completion.test.ts && tsx tests/pasted-text.test.ts && tsx tests/skills.test.ts && tsx tests/markdown.test.ts && tsx tests/editor.test.ts && tsx tests/todos.test.ts && tsx tests/background.test.ts && tsx tests/team.test.ts && tsx tests/peers.test.ts && tsx tests/suggestion.test.ts && tsx tests/board.test.ts && tsx tests/drop.test.ts && tsx tests/editline.test.ts && tsx tests/cron.test.ts && tsx tests/goal.test.ts"
+    "test": "export MINI_AGENT_REVIEW_DEBUG=0 && tsx tests/tools.test.ts && tsx tests/permissions.test.ts && tsx tests/context.test.ts && tsx tests/hooks.test.ts && tsx tests/mcp.test.ts && tsx tests/judge.test.ts && tsx tests/auto.test.ts && tsx tests/auto-context.test.ts && tsx tests/auto-providers.test.ts && tsx tests/auto-cascade.test.ts && tsx tests/auto-rules.test.ts && tsx tests/auto-rule-cascade.test.ts && tsx tests/auto-debug.test.ts && tsx tests/auto-report.test.ts && tsx tests/auto-clarification.test.ts && tsx tests/memory.test.ts && tsx tests/cost.test.ts && tsx tests/cli.test.ts && tsx tests/print.test.ts && tsx tests/status.test.ts && tsx tests/validate.test.ts && tsx tests/plan.test.ts && tsx tests/diff.test.ts && tsx tests/undo.test.ts && tsx tests/tiering.test.ts && tsx tests/mcp-http.test.ts && tsx tests/mcp-oauth.test.ts && tsx tests/changes.test.ts && tsx tests/mentions.test.ts && tsx tests/state.test.ts && tsx tests/session.test.ts && tsx tests/title.test.ts && tsx tests/ui.test.ts && tsx tests/activity.test.ts && tsx tests/follow-up.test.ts && tsx tests/follow-up-ui.test.tsx && tsx tests/agents.test.ts && tsx tests/images.test.ts && tsx tests/approval.test.ts && tsx tests/form.test.ts && tsx tests/model.test.ts && tsx tests/reasoning.test.ts && tsx tests/effort.test.ts && tsx tests/completion.test.ts && tsx tests/pasted-text.test.ts && tsx tests/skills.test.ts && tsx tests/markdown.test.ts && tsx tests/editor.test.ts && tsx tests/todos.test.ts && tsx tests/background.test.ts && tsx tests/team.test.ts && tsx tests/peers.test.ts && tsx tests/suggestion.test.ts && tsx tests/board.test.ts && tsx tests/drop.test.ts && tsx tests/editline.test.ts && tsx tests/cron.test.ts && tsx tests/goal.test.ts"
   },
   "engines": {
     "node": ">=20.6"