jinzd-ai-cli 0.4.103 → 0.4.105

package/dist/{server-TNPDHGQT.js → server-ZVY3CKTJ.js}

@@ -13,18 +13,15 @@ import {
   computeCost,
   detectsHallucinatedFileOp,
   formatCost,
-  formatGitContextForPrompt,
   getContentText,
-  getGitContext,
-  getGitRoot,
   hadPreviousWriteToolCalls,
   loadDevState,
   persistToolRound,
   setupProxy
-} from "./chunk-VOWVIR2U.js";
+} from "./chunk-F7XJ67XB.js";
 import {
   ConfigManager
-} from "./chunk-SN56X6RE.js";
+} from "./chunk-B6NUQVYK.js";
 import {
   ToolExecutor,
   ToolRegistry,
@@ -42,16 +39,11 @@ import {
   spawnAgentContext,
   truncateOutput,
   undoStack
-} from "./chunk-RZWWODW7.js";
-import "./chunk-2ZD3YTVM.js";
-import "./chunk-4BKXL7SM.js";
-import "./chunk-ANYYM4CF.js";
-import "./chunk-NHNWUBXB.js";
-import "./chunk-KJLJPUY2.js";
-import "./chunk-6VRJGH25.js";
+} from "./chunk-RFKT3T5S.js";
+import "./chunk-3BICTI5M.js";
 import "./chunk-2DXY7UGF.js";
-import "./chunk-KHYD3WXE.js";
-import "./chunk-OVYOYUP7.js";
+import "./chunk-LVX667WL.js";
+import "./chunk-2ZD3YTVM.js";
 import {
   AGENTIC_BEHAVIOR_GUIDELINE,
   AUTHOR,
@@ -70,7 +62,18 @@ import {
   SKILLS_DIR_NAME,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-JHPSWYO3.js";
+} from "./chunk-LX5FXZVP.js";
+import {
+  formatGitContextForPrompt,
+  getGitContext,
+  getGitRoot
+} from "./chunk-HOSJZMQS.js";
+import "./chunk-4BKXL7SM.js";
+import "./chunk-ANYYM4CF.js";
+import "./chunk-KHYD3WXE.js";
+import "./chunk-NHNWUBXB.js";
+import "./chunk-6VRJGH25.js";
+import "./chunk-PDX44BCA.js";
 
 // src/web/server.ts
 import express from "express";
@@ -1033,8 +1036,9 @@ Details: ${errMsg.split("\n")[0]}
           const alreadyWrote = hadPreviousWriteToolCalls(extraMessages);
           if (hasWriteTools && !alreadyWrote && detectsHallucinatedFileOp(result.content) && round < maxToolRounds - 1) {
             this.send({ type: "info", message: "\u26A0 Hallucinated completion detected, forcing retry..." });
+            const reasoningField = result.reasoningContent ? { reasoning_content: result.reasoningContent } : this.currentProvider === "deepseek" ? { reasoning_content: "" } : {};
             extraMessages.push(
-              { role: "assistant", content: result.content },
+              { role: "assistant", content: result.content, ...reasoningField },
               { role: "user", content: HALLUCINATION_CORRECTION_MESSAGE }
             );
             continue;
@@ -2141,9 +2145,9 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
       case "index": {
         const sub = (args[0] ?? "status").toLowerCase();
         const root = process.cwd();
-        const { loadIndex, clearIndex } = await import("./store-S24SPPDZ.js");
-        const { indexProject } = await import("./indexer-C7QYYHSZ.js");
-        const { loadVectorStore, clearVectorStore } = await import("./vector-store-QARQ2P6D.js");
+        const { loadIndex, clearIndex } = await import("./store-JDEW743P.js");
+        const { indexProject } = await import("./indexer-XGY7XGJM.js");
+        const { loadVectorStore, clearVectorStore } = await import("./vector-store-MCQ77OOJ.js");
         if (sub === "status") {
           const idx = loadIndex(root);
           const vec = loadVectorStore(root);
@@ -2192,7 +2196,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
             message: `Building semantic index for ${idx.symbolCount} symbols\u2026 (first run downloads ~117 MB model)`
           });
           try {
-            const { rebuildSemanticIndex } = await import("./semantic-YDRPPVWK.js");
+            const { rebuildSemanticIndex } = await import("./semantic-UFKVYKFE.js");
             const stats = await rebuildSemanticIndex(root);
             const first = stats.modelFirstLoadMs ? ` (model load+first batch ${stats.modelFirstLoadMs}ms)` : "";
             this.send({
@@ -2340,7 +2344,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
         if (rewindSub === "list" || !rewindSub) {
           const lines = [`Conversation messages (${session.messages.length} total):
 `];
-          const cpIndices = (await import("./file-checkpoint-NKBHGC7L.js")).fileCheckpoints.getMessageIndices();
+          const cpIndices = (await import("./file-checkpoint-ZN7KE3TN.js")).fileCheckpoints.getMessageIndices();
           for (let i = 0; i < session.messages.length; i++) {
             const m = session.messages[i];
             const text = getContentText(m.content).replace(/\n/g, " ").slice(0, 60);
@@ -2356,7 +2360,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
           this.send({ type: "error", message: `Invalid message number: ${rewindSub}. Range: 1-${session.messages.length}` });
           break;
         }
-        const { fileCheckpoints: fc } = await import("./file-checkpoint-NKBHGC7L.js");
+        const { fileCheckpoints: fc } = await import("./file-checkpoint-ZN7KE3TN.js");
         const rewindRemoved = session.messages.length - rewindN;
         const rewindResult = fc.restoreToMessageIndex(rewindN);
         session.messages = session.messages.slice(0, rewindN);
@@ -2379,7 +2383,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
       case "test": {
         this.send({ type: "info", message: "\u{1F9EA} Running tests..." });
         try {
-          const { executeTests } = await import("./run-tests-3YOJEN2Q.js");
+          const { executeTests } = await import("./run-tests-VQ3YZB75.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {
@@ -2903,7 +2907,7 @@ Add .md files to create commands.` });
       return;
     }
     try {
-      const { searchChatMemory, loadChatIndex } = await import("./chat-index-W2UZ34ZI.js");
+      const { searchChatMemory, loadChatIndex } = await import("./chat-index-7OHUKJY5.js");
       const loaded = loadChatIndex();
       if (!loaded || loaded.idx.chunks.length === 0) {
         this.send({ type: "memory_hits", query: q, hits: [], indexMissing: true });
@@ -2939,7 +2943,7 @@ Add .md files to create commands.` });
   }
   async handleMemoryStatus() {
     try {
-      const { getChatIndexStatus } = await import("./chat-index-W2UZ34ZI.js");
+      const { getChatIndexStatus } = await import("./chat-index-7OHUKJY5.js");
       const s = getChatIndexStatus();
       this.send({
         type: "memory_status",
@@ -2964,7 +2968,7 @@ Add .md files to create commands.` });
         type: "info",
         message: full ? "\u{1F9E0} Rebuilding chat memory index (this may take a while on first run \u2014 ~117 MB embedder)." : "\u{1F9E0} Refreshing chat memory index (incremental)\u2026"
       });
-      const { buildChatIndex } = await import("./chat-index-W2UZ34ZI.js");
+      const { buildChatIndex } = await import("./chat-index-7OHUKJY5.js");
       const stats = await buildChatIndex({
         full,
         onProgress: (p) => {
@@ -3390,7 +3394,18 @@ async function startWebServer(options = {}) {
   console.log(`   Providers: ${availableProviders.map((p) => p.info.id).join(", ")}`);
   let mcpManager = null;
   const globalMcpServers = config.get("mcpServers") ?? {};
-  const projectMcpServers = loadProjectMcpConfig() ?? {};
+  const projectMcpResolved = resolveProjectMcpPath();
+  let projectMcpServers = {};
+  if (projectMcpResolved) {
+    const { checkTrust } = await import("./project-trust-IFM7FXEV.js");
+    const verdict = checkTrust(config.getConfigDir(), projectMcpResolved);
+    if (verdict.trusted) {
+      projectMcpServers = loadProjectMcpConfig() ?? {};
+    } else {
+      console.log(`   \u26A0 Project .mcp.json found at ${projectMcpResolved} but not trusted (${verdict.reason}).`);
+      console.log(`     Skipped to prevent unintended RCE. Run "aicli" then "/mcp trust-project" to approve.`);
+    }
+  }
   const mergedMcpServers = { ...globalMcpServers, ...projectMcpServers };
   if (Object.keys(mergedMcpServers).length > 0) {
     mcpManager = new McpManager();
@@ -3485,6 +3500,17 @@ async function startWebServer(options = {}) {
   });
   app.use(express.json());
   app.post("/api/auth/register", (req, res) => {
+    const firstRun = !authManager.hasUsers();
+    if (!firstRun) {
+      const authHeader = req.headers.authorization;
+      const token2 = authHeader?.startsWith("Bearer ") ? authHeader.slice(7) : null;
+      const cookieToken = parseCookie(req.headers.cookie ?? "")["aicli_token"];
+      const effectiveToken = token2 ?? cookieToken;
+      if (!effectiveToken || !authManager.verifyToken(effectiveToken)) {
+        res.status(403).json({ error: "Registration is closed. Use `aicli user create` on the host to add users." });
+        return;
+      }
+    }
     const { username, password } = req.body ?? {};
     if (!username || !password) {
       res.status(400).json({ error: "Username and password required" });
@@ -3496,7 +3522,7 @@ async function startWebServer(options = {}) {
       return;
     }
     const token = authManager.login(username, password);
-    console.log(`   \u2713 User registered via API: ${username}`);
+    console.log(`   \u2713 User registered via API: ${username}${firstRun ? " (first-run)" : ""}`);
     res.cookie("aicli_token", token, { httpOnly: true, sameSite: "strict", maxAge: 7 * 24 * 3600 * 1e3 });
     res.json({ success: true, token, username });
   });
@@ -3723,6 +3749,10 @@ async function startWebServer(options = {}) {
         if (parsed.type === "auth") {
           const { action, username, password } = parsed;
           if (action === "register") {
+            if (authManager.hasUsers() && !authenticatedUser) {
+              ws.send(JSON.stringify({ type: "auth_result", success: false, error: "Registration is closed. Use `aicli user create` on the host to add users." }));
+              return;
+            }
             const err = authManager.register(username, password);
             if (err) {
               ws.send(JSON.stringify({ type: "auth_result", success: false, error: err }));
@@ -3849,6 +3879,13 @@ async function startWebServer(options = {}) {
   });
   return result;
 }
+function resolveProjectMcpPath() {
+  const cwd = process.cwd();
+  const gitRoot = getGitRoot(cwd);
+  const projectRoot = gitRoot ?? cwd;
+  const configPath = join3(projectRoot, MCP_PROJECT_CONFIG_NAME);
+  return existsSync4(configPath) ? configPath : null;
+}
 function loadProjectMcpConfig() {
   const cwd = process.cwd();
   const gitRoot = getGitRoot(cwd);

package/dist/{store-S24SPPDZ.js → store-JDEW743P.js}

@@ -7,6 +7,7 @@ import {
   saveIndex,
   upsertFileSymbols
 } from "./chunk-6VRJGH25.js";
+import "./chunk-PDX44BCA.js";
 export {
   clearIndex,
   emptyIndex,

package/dist/{store-247B3TAU.js → store-Q7NMUCPP.js}

@@ -6,6 +6,7 @@ import {
   saveIndex,
   upsertFileSymbols
 } from "./chunk-BJAT4GNC.js";
+import "./chunk-3RG5ZIWI.js";
 export {
   clearIndex,
   emptyIndex,

package/dist/{task-orchestrator-MUIH3XBY.js → task-orchestrator-UEZOFXQX.js}

@@ -4,19 +4,20 @@ import {
   getDangerLevel,
   googleSearchContext,
   truncateOutput
-} from "./chunk-RZWWODW7.js";
+} from "./chunk-RFKT3T5S.js";
+import "./chunk-3BICTI5M.js";
+import "./chunk-2DXY7UGF.js";
+import "./chunk-LVX667WL.js";
 import "./chunk-2ZD3YTVM.js";
+import {
+  SUBAGENT_ALLOWED_TOOLS
+} from "./chunk-LX5FXZVP.js";
 import "./chunk-4BKXL7SM.js";
 import "./chunk-ANYYM4CF.js";
+import "./chunk-KHYD3WXE.js";
 import "./chunk-NHNWUBXB.js";
-import "./chunk-KJLJPUY2.js";
 import "./chunk-6VRJGH25.js";
-import "./chunk-2DXY7UGF.js";
-import "./chunk-KHYD3WXE.js";
-import "./chunk-OVYOYUP7.js";
-import {
-  SUBAGENT_ALLOWED_TOOLS
-} from "./chunk-JHPSWYO3.js";
+import "./chunk-PDX44BCA.js";
 
 // src/hub/task-orchestrator.ts
 import { createInterface } from "readline";

package/dist/{vector-store-NDUFLNGN.js → vector-store-AK6J3RIA.js}

@@ -6,6 +6,7 @@ import {
   searchVectorStore
 } from "./chunk-PASCDYMH.js";
 import "./chunk-JV5N65KN.js";
+import "./chunk-3RG5ZIWI.js";
 export {
   clearVectorStore,
   emptyVectorStore,

package/dist/{vector-store-QARQ2P6D.js → vector-store-MCQ77OOJ.js}

@@ -7,6 +7,7 @@ import {
   searchVectorStore
 } from "./chunk-2DXY7UGF.js";
 import "./chunk-KHYD3WXE.js";
+import "./chunk-PDX44BCA.js";
 export {
   clearVectorStore,
   emptyVectorStore,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jinzd-ai-cli",
-  "version": "0.4.103",
+  "version": "0.4.105",
   "description": "Cross-platform REPL-style AI CLI with multi-provider support",
   "type": "module",
   "main": "./dist/index.js",

package/dist/{chunk-KJLJPUY2.js → chunk-3BICTI5M.js}

@@ -1,7 +1,4 @@
 #!/usr/bin/env node
-import {
-  loadIndex
-} from "./chunk-6VRJGH25.js";
 import {
   loadVectorStore,
   saveVectorStore,
@@ -12,6 +9,9 @@ import {
   embed,
   embedOne
 } from "./chunk-KHYD3WXE.js";
+import {
+  loadIndex
+} from "./chunk-6VRJGH25.js";
 
 // src/symbols/semantic.ts
 function pathTokens(absFile, root) {