jinzd-ai-cli 0.4.105 → 0.4.107

package/dist/{batch-NPK4USGH.js → batch-QNHPXV6U.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import {
   ConfigManager
-} from "./chunk-B6NUQVYK.js";
+} from "./chunk-7J2GXVS5.js";
 import "./chunk-2ZD3YTVM.js";
-import "./chunk-LX5FXZVP.js";
+import "./chunk-76UBRJUT.js";
 import "./chunk-PDX44BCA.js";
 
 // src/cli/batch.ts

package/dist/{chunk-LX5FXZVP.js → chunk-76UBRJUT.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // src/core/constants.ts
-var VERSION = "0.4.105";
+var VERSION = "0.4.107";
 var APP_NAME = "ai-cli";
 var CONFIG_DIR_NAME = ".aicli";
 var CONFIG_FILE_NAME = "config.json";

package/dist/{chunk-B6NUQVYK.js → chunk-7J2GXVS5.js}

@@ -8,7 +8,7 @@ import {
   CONFIG_FILE_NAME,
   HISTORY_DIR_NAME,
   PLUGINS_DIR_NAME
-} from "./chunk-LX5FXZVP.js";
+} from "./chunk-76UBRJUT.js";
 
 // src/config/config-manager.ts
 import { readFileSync, writeFileSync, existsSync, mkdirSync } from "fs";
@@ -268,9 +268,23 @@ ${err}`
   /**
    * 仅修改内存中的配置值，不持久化到磁盘。
    * 用于 CLI 命令行参数覆盖（-p, -m, --no-stream），使其只对当前进程生效。
+   *
+   * M6 fix (v0.4.107)：原版直接赋值不走 Zod，调用点必须自律确保来源可信
+   *   （如 CLI flag、global config）。如果未来谁把外部输入接到这里，类型系统
+   *   不会阻止恶意值偷渡进 config。现在用 partial Zod parse 校验单字段，
+   *   失败时抛 ConfigError。setTransient 永远不接受外部不可信输入——这是
+   *   「调用方信任」契约的硬实现。
    */
   setTransient(key, value) {
-    this.config[key] = value;
+    const draft = { ...this.config, [key]: value };
+    const result = ConfigSchema.safeParse(draft);
+    if (!result.success) {
+      const firstErr = result.error.errors[0];
+      throw new ConfigError(
+        `Invalid transient config value for "${String(key)}": ${firstErr?.message ?? "validation failed"}`
+      );
+    }
+    this.config = result.data;
   }
   isFirstRun() {
     return !existsSync(this.configPath);

package/dist/{chunk-LVX667WL.js → chunk-7JPMYNVW.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   TEST_TIMEOUT
-} from "./chunk-LX5FXZVP.js";
+} from "./chunk-76UBRJUT.js";
 
 // src/tools/builtin/run-tests.ts
 import { execSync, spawnSync } from "child_process";
@@ -9,7 +9,7 @@ import { existsSync, readFileSync, readdirSync } from "fs";
 import { join } from "path";
 import { platform } from "os";
 import chalk from "chalk";
-var FILTER_WHITELIST = /^[\w.\-/:#\s*?|^()\[\]@+]{1,200}$/;
+var FILTER_WHITELIST = /^[\w.\-/:#\s*?()\[\]@+]{1,200}$/;
 var IS_WINDOWS = platform() === "win32";
 function detectNodeTestFramework(cwd, pkg) {
   const devDeps = pkg.devDependencies ?? {};
@@ -289,7 +289,7 @@ async function executeTests(args) {
   const customCmd = args["command"] ? String(args["command"]).trim() : "";
   const filter = args["filter"] ? String(args["filter"]).trim() : "";
   if (filter && !FILTER_WHITELIST.test(filter)) {
-    return `Error: filter contains characters that are not allowed in test names. Allowed: word chars, dots, dashes, slashes, colons, parens, spaces, and basic glob/regex meta (* ? | ^). Rejected: quotes, semicolons, backticks, redirects, and shell metacharacters.
+    return `Error: filter contains characters that are not allowed in test names. Allowed: word chars, dots, dashes, slashes, colons, parens, spaces, and glob (*?). Rejected: quotes, semicolons, pipes, backticks, redirects, and shell metacharacters.
 Got: ${filter.slice(0, 60)}${filter.length > 60 ? "..." : ""}`;
   }
   let command;

package/dist/{chunk-VOF6OTZB.js → chunk-PXTMQ4TC.js}

@@ -6,7 +6,7 @@ import { platform } from "os";
 import chalk from "chalk";
 
 // src/core/constants.ts
-var VERSION = "0.4.105";
+var VERSION = "0.4.107";
 var APP_NAME = "ai-cli";
 var CONFIG_DIR_NAME = ".aicli";
 var CONFIG_FILE_NAME = "config.json";
@@ -133,7 +133,7 @@ var AUTHOR_EMAIL = "zhengdong.jin@gmail.com";
 var DESCRIPTION = "Cross-platform REPL-style AI conversation tool with multi-provider and agentic tool calling support";
 
 // src/tools/builtin/run-tests.ts
-var FILTER_WHITELIST = /^[\w.\-/:#\s*?|^()\[\]@+]{1,200}$/;
+var FILTER_WHITELIST = /^[\w.\-/:#\s*?()\[\]@+]{1,200}$/;
 var IS_WINDOWS = platform() === "win32";
 function detectNodeTestFramework(cwd, pkg) {
   const devDeps = pkg.devDependencies ?? {};
@@ -413,7 +413,7 @@ async function executeTests(args) {
   const customCmd = args["command"] ? String(args["command"]).trim() : "";
   const filter = args["filter"] ? String(args["filter"]).trim() : "";
   if (filter && !FILTER_WHITELIST.test(filter)) {
-    return `Error: filter contains characters that are not allowed in test names. Allowed: word chars, dots, dashes, slashes, colons, parens, spaces, and basic glob/regex meta (* ? | ^). Rejected: quotes, semicolons, backticks, redirects, and shell metacharacters.
+    return `Error: filter contains characters that are not allowed in test names. Allowed: word chars, dots, dashes, slashes, colons, parens, spaces, and glob (*?). Rejected: quotes, semicolons, pipes, backticks, redirects, and shell metacharacters.
 Got: ${filter.slice(0, 60)}${filter.length > 60 ? "..." : ""}`;
   }
   let command;

package/dist/{chunk-RFKT3T5S.js → chunk-QJ42A4GF.js}

@@ -5,7 +5,7 @@ import {
 } from "./chunk-3BICTI5M.js";
 import {
   runTestsTool
-} from "./chunk-LVX667WL.js";
+} from "./chunk-7JPMYNVW.js";
 import {
   EnvLoader,
   NetworkError,
@@ -18,7 +18,7 @@ import {
   SUBAGENT_ALLOWED_TOOLS,
   SUBAGENT_DEFAULT_MAX_ROUNDS,
   SUBAGENT_MAX_ROUNDS_LIMIT
-} from "./chunk-LX5FXZVP.js";
+} from "./chunk-76UBRJUT.js";
 import {
   fileCheckpoints
 } from "./chunk-4BKXL7SM.js";
@@ -1136,21 +1136,26 @@ function simpleDiff(oldLines, newLines) {
 
 // src/tools/hooks.ts
 import { execSync } from "child_process";
-function shellEscape(value) {
-  return "'" + value.replace(/'/g, "'\\''") + "'";
+function rewriteTemplate(template, isWindows) {
+  const ref = (name) => isWindows ? `%${name}%` : `$${name}`;
+  return template.replace(/\{tool\}/g, ref("AICLI_HOOK_TOOL")).replace(/\{dangerLevel\}/g, ref("AICLI_HOOK_DANGER_LEVEL")).replace(/\{args\}/g, ref("AICLI_HOOK_ARGS")).replace(/\{status\}/g, ref("AICLI_HOOK_STATUS"));
 }
 function runHook(template, vars) {
   if (!template) return;
-  let cmd = template;
-  cmd = cmd.replace(/\{tool\}/g, shellEscape(vars.tool));
-  cmd = cmd.replace(/\{dangerLevel\}/g, shellEscape(vars.dangerLevel ?? ""));
-  cmd = cmd.replace(/\{args\}/g, shellEscape(vars.args ?? ""));
-  cmd = cmd.replace(/\{status\}/g, shellEscape(vars.status ?? ""));
+  const isWindows = process.platform === "win32";
+  const cmd = rewriteTemplate(template, isWindows);
   try {
     execSync(cmd, {
       timeout: 5e3,
       stdio: ["pipe", "pipe", "pipe"],
-      encoding: "utf-8"
+      encoding: "utf-8",
+      env: {
+        ...process.env,
+        AICLI_HOOK_TOOL: vars.tool,
+        AICLI_HOOK_DANGER_LEVEL: vars.dangerLevel ?? "",
+        AICLI_HOOK_ARGS: vars.args ?? "",
+        AICLI_HOOK_STATUS: vars.status ?? ""
+      }
     });
   } catch {
     process.stderr.write(`\u26A0 Hook failed: ${cmd.slice(0, 100)}

package/dist/{chunk-F7XJ67XB.js → chunk-YMFTF57T.js}

@@ -2,7 +2,7 @@
 import {
   schemaToJsonSchema,
   truncateForPersist
-} from "./chunk-RFKT3T5S.js";
+} from "./chunk-QJ42A4GF.js";
 import {
   AuthError,
   ProviderError,
@@ -18,7 +18,7 @@ import {
   MCP_PROTOCOL_VERSION,
   MCP_TOOL_PREFIX,
   VERSION
-} from "./chunk-LX5FXZVP.js";
+} from "./chunk-76UBRJUT.js";
 import {
   redactJson
 } from "./chunk-ANYYM4CF.js";

package/dist/{constants-HK5BB5EZ.js → constants-G7IWRPVI.js}

@@ -36,7 +36,7 @@ import {
   TEST_TIMEOUT,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-LX5FXZVP.js";
+} from "./chunk-76UBRJUT.js";
 import "./chunk-PDX44BCA.js";
 export {
   AGENTIC_BEHAVIOR_GUIDELINE,

package/dist/electron-server.js

@@ -36,7 +36,7 @@ import {
   VERSION,
   buildUserIdentityPrompt,
   runTestsTool
-} from "./chunk-VOF6OTZB.js";
+} from "./chunk-PXTMQ4TC.js";
 import {
   hasSemanticIndex,
   semanticSearch
@@ -421,9 +421,23 @@ ${err}`
   /**
    * 仅修改内存中的配置值，不持久化到磁盘。
    * 用于 CLI 命令行参数覆盖（-p, -m, --no-stream），使其只对当前进程生效。
+   *
+   * M6 fix (v0.4.107)：原版直接赋值不走 Zod，调用点必须自律确保来源可信
+   *   （如 CLI flag、global config）。如果未来谁把外部输入接到这里，类型系统
+   *   不会阻止恶意值偷渡进 config。现在用 partial Zod parse 校验单字段，
+   *   失败时抛 ConfigError。setTransient 永远不接受外部不可信输入——这是
+   *   「调用方信任」契约的硬实现。
    */
   setTransient(key, value) {
-    this.config[key] = value;
+    const draft = { ...this.config, [key]: value };
+    const result = ConfigSchema.safeParse(draft);
+    if (!result.success) {
+      const firstErr = result.error.errors[0];
+      throw new ConfigError(
+        `Invalid transient config value for "${String(key)}": ${firstErr?.message ?? "validation failed"}`
+      );
+    }
+    this.config = result.data;
   }
   isFirstRun() {
     return !existsSync(this.configPath);
@@ -4528,21 +4542,26 @@ function simpleDiff(oldLines, newLines) {
 
 // src/tools/hooks.ts
 import { execSync } from "child_process";
-function shellEscape(value) {
-  return "'" + value.replace(/'/g, "'\\''") + "'";
+function rewriteTemplate(template, isWindows) {
+  const ref = (name) => isWindows ? `%${name}%` : `$${name}`;
+  return template.replace(/\{tool\}/g, ref("AICLI_HOOK_TOOL")).replace(/\{dangerLevel\}/g, ref("AICLI_HOOK_DANGER_LEVEL")).replace(/\{args\}/g, ref("AICLI_HOOK_ARGS")).replace(/\{status\}/g, ref("AICLI_HOOK_STATUS"));
 }
 function runHook(template, vars) {
   if (!template) return;
-  let cmd = template;
-  cmd = cmd.replace(/\{tool\}/g, shellEscape(vars.tool));
-  cmd = cmd.replace(/\{dangerLevel\}/g, shellEscape(vars.dangerLevel ?? ""));
-  cmd = cmd.replace(/\{args\}/g, shellEscape(vars.args ?? ""));
-  cmd = cmd.replace(/\{status\}/g, shellEscape(vars.status ?? ""));
+  const isWindows = process.platform === "win32";
+  const cmd = rewriteTemplate(template, isWindows);
   try {
     execSync(cmd, {
       timeout: 5e3,
       stdio: ["pipe", "pipe", "pipe"],
-      encoding: "utf-8"
+      encoding: "utf-8",
+      env: {
+        ...process.env,
+        AICLI_HOOK_TOOL: vars.tool,
+        AICLI_HOOK_DANGER_LEVEL: vars.dangerLevel ?? "",
+        AICLI_HOOK_ARGS: vars.args ?? "",
+        AICLI_HOOK_STATUS: vars.status ?? ""
+      }
     });
   } catch {
     process.stderr.write(`\u26A0 Hook failed: ${cmd.slice(0, 100)}
@@ -11754,7 +11773,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
       case "test": {
         this.send({ type: "info", message: "\u{1F9EA} Running tests..." });
         try {
-          const { executeTests } = await import("./run-tests-IMVI43CZ.js");
+          const { executeTests } = await import("./run-tests-GMO7E3UK.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {
@@ -13117,7 +13136,25 @@ async function startWebServer(options = {}) {
     const token = authManager.login(username, password);
     console.log(`   \u2713 User registered via API: ${username}${firstRun ? " (first-run)" : ""}`);
     res.cookie("aicli_token", token, { httpOnly: true, sameSite: "strict", maxAge: 7 * 24 * 3600 * 1e3 });
-    res.json({ success: true, token, username });
+    res.json({ success: true, username });
+  });
+  app.post("/api/auth/login", (req, res) => {
+    const { username, password } = req.body ?? {};
+    if (!username || !password) {
+      res.status(400).json({ error: "Username and password required" });
+      return;
+    }
+    const token = authManager.login(username, password);
+    if (!token) {
+      res.status(401).json({ error: "Invalid username or password" });
+      return;
+    }
+    res.cookie("aicli_token", token, { httpOnly: true, sameSite: "strict", maxAge: 7 * 24 * 3600 * 1e3 });
+    res.json({ success: true, username });
+  });
+  app.post("/api/auth/logout", (_req, res) => {
+    res.clearCookie("aicli_token", { httpOnly: true, sameSite: "strict" });
+    res.json({ success: true });
   });
   app.get("/api/files", requireAuth, (req, res) => {
     const cwd = process.cwd();
@@ -13358,7 +13395,7 @@ async function startWebServer(options = {}) {
             handlers.set(tabId, handler);
             clearPreAuthTimer();
             console.log(`   \u2713 User registered & connected: ${username} (tab: ${tabId.slice(0, 12)})`);
-            ws.send(JSON.stringify({ type: "auth_result", success: true, token: newToken, username, setCookie: true }));
+            ws.send(JSON.stringify({ type: "auth_result", success: true, token: newToken, username }));
             return;
           }
           if (action === "token") {
@@ -13389,7 +13426,7 @@ async function startWebServer(options = {}) {
             handlers.set(tabId, handler);
             clearPreAuthTimer();
             console.log(`   \u2713 User logged in: ${username} (tab: ${tabId.slice(0, 12)})`);
-            ws.send(JSON.stringify({ type: "auth_result", success: true, token: loginToken, username, setCookie: true }));
+            ws.send(JSON.stringify({ type: "auth_result", success: true, token: loginToken, username }));
             return;
           }
           ws.send(JSON.stringify({ type: "auth_result", success: false, error: "Unknown auth action" }));

package/dist/{hub-5VFGLTHY.js → hub-GBL3BURO.js}

@@ -386,7 +386,7 @@ ${content}`);
   }
 }
 async function runTaskMode(config, providers, configManager, topic) {
-  const { TaskOrchestrator } = await import("./task-orchestrator-UEZOFXQX.js");
+  const { TaskOrchestrator } = await import("./task-orchestrator-FAQWRMJH.js");
   const orchestrator = new TaskOrchestrator(config, providers, configManager);
   let interrupted = false;
   const onSigint = () => {

package/dist/index.js

@@ -25,10 +25,10 @@ import {
   saveDevState,
   sessionHasMeaningfulContent,
   setupProxy
-} from "./chunk-F7XJ67XB.js";
+} from "./chunk-YMFTF57T.js";
 import {
   ConfigManager
-} from "./chunk-B6NUQVYK.js";
+} from "./chunk-7J2GXVS5.js";
 import {
   ToolExecutor,
   ToolRegistry,
@@ -47,10 +47,10 @@ import {
   spawnAgentContext,
   theme,
   undoStack
-} from "./chunk-RFKT3T5S.js";
+} from "./chunk-QJ42A4GF.js";
 import "./chunk-3BICTI5M.js";
 import "./chunk-2DXY7UGF.js";
-import "./chunk-LVX667WL.js";
+import "./chunk-7JPMYNVW.js";
 import "./chunk-2ZD3YTVM.js";
 import {
   AGENTIC_BEHAVIOR_GUIDELINE,
@@ -73,7 +73,7 @@ import {
   SKILLS_DIR_NAME,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-LX5FXZVP.js";
+} from "./chunk-76UBRJUT.js";
 import {
   formatGitContextForPrompt,
   getGitContext,
@@ -1594,7 +1594,7 @@ ${text}
           const { join: join6 } = await import("path");
           const { existsSync: existsSync6 } = await import("fs");
           const { getGitRoot: getGitRoot2 } = await import("./git-context-7KIP4X2V.js");
-          const { MCP_PROJECT_CONFIG_NAME: MCP_PROJECT_CONFIG_NAME2 } = await import("./constants-HK5BB5EZ.js");
+          const { MCP_PROJECT_CONFIG_NAME: MCP_PROJECT_CONFIG_NAME2 } = await import("./constants-G7IWRPVI.js");
           const { approveProject, hashMcpFile } = await import("./project-trust-IFM7FXEV.js");
           const cwd = process.cwd();
           const projectRoot = getGitRoot2(cwd) ?? cwd;
@@ -2644,7 +2644,7 @@ ${hint}` : "")
       usage: "/test [command|filter]",
       async execute(args, ctx) {
         try {
-          const { executeTests } = await import("./run-tests-VQ3YZB75.js");
+          const { executeTests } = await import("./run-tests-3JWA5IJ2.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {
@@ -6800,7 +6800,7 @@ program.command("web").description("Start Web UI server with browser-based chat
     console.error("Error: Invalid port number. Must be between 1 and 65535.");
     process.exit(1);
   }
-  const { startWebServer } = await import("./server-ZVY3CKTJ.js");
+  const { startWebServer } = await import("./server-RTABJZZZ.js");
   await startWebServer({ port, host: options.host });
 });
 program.command("user [action] [username]").description("Manage Web UI users (list | create <name> | delete <name> | reset-password <name> | migrate <name>)").action(async (action, username) => {
@@ -6923,7 +6923,7 @@ program.command("sessions").description("List recent conversation sessions").act
 });
 program.command("batch <action> [arg] [arg2]").description("Anthropic Message Batches: submit | list | status <id> | results <id> [out] | cancel <id>").option("--dry-run", "Parse and validate input without submitting (submit only)").action(async (action, arg, arg2, options) => {
   try {
-    const batch = await import("./batch-NPK4USGH.js");
+    const batch = await import("./batch-QNHPXV6U.js");
     switch (action) {
       case "submit":
         if (!arg) {
@@ -6966,7 +6966,7 @@ program.command("batch <action> [arg] [arg2]").description("Anthropic Message Ba
   }
 });
 program.command("mcp-serve").description("Start an MCP server over STDIO, exposing aicli's built-in tools to Claude Desktop / Cursor / other MCP clients").option("--allow-destructive", "Allow bash / run_interactive / task_create (always destructive in MCP mode)").option("--allow-outside-cwd", "Allow tool path arguments to escape the sandbox root \u2014 disabled by default").option("--tools <list>", "Comma-separated whitelist of tools to expose (default: all eligible tools)").option("--cwd <path>", "Working directory AND sandbox root (default: current directory)").action(async (options) => {
-  const { startMcpServer } = await import("./server-XDBIWNRW.js");
+  const { startMcpServer } = await import("./server-2BKTE6Z4.js");
   await startMcpServer({
     allowDestructive: !!options.allowDestructive,
     allowOutsideCwd: !!options.allowOutsideCwd,
@@ -7093,7 +7093,7 @@ program.command("hub [topic]").description("Start multi-agent hub (discuss / bra
     }),
     config.get("customProviders")
   );
-  const { startHub } = await import("./hub-5VFGLTHY.js");
+  const { startHub } = await import("./hub-GBL3BURO.js");
   await startHub(
     {
       topic: topic ?? "",

package/dist/{run-tests-VQ3YZB75.js → run-tests-3JWA5IJ2.js}

@@ -2,8 +2,8 @@
 import {
   executeTests,
   runTestsTool
-} from "./chunk-LVX667WL.js";
-import "./chunk-LX5FXZVP.js";
+} from "./chunk-7JPMYNVW.js";
+import "./chunk-76UBRJUT.js";
 import "./chunk-PDX44BCA.js";
 export {
   executeTests,

package/dist/{run-tests-IMVI43CZ.js → run-tests-GMO7E3UK.js}

@@ -1,7 +1,7 @@
 import {
   executeTests,
   runTestsTool
-} from "./chunk-VOF6OTZB.js";
+} from "./chunk-PXTMQ4TC.js";
 import "./chunk-3RG5ZIWI.js";
 export {
   executeTests,

package/dist/{server-XDBIWNRW.js → server-2BKTE6Z4.js}

@@ -3,14 +3,14 @@ import {
   ToolRegistry,
   getDangerLevel,
   schemaToJsonSchema
-} from "./chunk-RFKT3T5S.js";
+} from "./chunk-QJ42A4GF.js";
 import "./chunk-3BICTI5M.js";
 import "./chunk-2DXY7UGF.js";
-import "./chunk-LVX667WL.js";
+import "./chunk-7JPMYNVW.js";
 import "./chunk-2ZD3YTVM.js";
 import {
   VERSION
-} from "./chunk-LX5FXZVP.js";
+} from "./chunk-76UBRJUT.js";
 import "./chunk-4BKXL7SM.js";
 import "./chunk-ANYYM4CF.js";
 import "./chunk-KHYD3WXE.js";

package/dist/{server-ZVY3CKTJ.js → server-RTABJZZZ.js}

@@ -18,10 +18,10 @@ import {
   loadDevState,
   persistToolRound,
   setupProxy
-} from "./chunk-F7XJ67XB.js";
+} from "./chunk-YMFTF57T.js";
 import {
   ConfigManager
-} from "./chunk-B6NUQVYK.js";
+} from "./chunk-7J2GXVS5.js";
 import {
   ToolExecutor,
   ToolRegistry,
@@ -39,10 +39,10 @@ import {
   spawnAgentContext,
   truncateOutput,
   undoStack
-} from "./chunk-RFKT3T5S.js";
+} from "./chunk-QJ42A4GF.js";
 import "./chunk-3BICTI5M.js";
 import "./chunk-2DXY7UGF.js";
-import "./chunk-LVX667WL.js";
+import "./chunk-7JPMYNVW.js";
 import "./chunk-2ZD3YTVM.js";
 import {
   AGENTIC_BEHAVIOR_GUIDELINE,
@@ -62,7 +62,7 @@ import {
   SKILLS_DIR_NAME,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-LX5FXZVP.js";
+} from "./chunk-76UBRJUT.js";
 import {
   formatGitContextForPrompt,
   getGitContext,
@@ -2383,7 +2383,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
       case "test": {
         this.send({ type: "info", message: "\u{1F9EA} Running tests..." });
         try {
-          const { executeTests } = await import("./run-tests-VQ3YZB75.js");
+          const { executeTests } = await import("./run-tests-3JWA5IJ2.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {
@@ -3524,7 +3524,25 @@ async function startWebServer(options = {}) {
     const token = authManager.login(username, password);
     console.log(`   \u2713 User registered via API: ${username}${firstRun ? " (first-run)" : ""}`);
     res.cookie("aicli_token", token, { httpOnly: true, sameSite: "strict", maxAge: 7 * 24 * 3600 * 1e3 });
-    res.json({ success: true, token, username });
+    res.json({ success: true, username });
+  });
+  app.post("/api/auth/login", (req, res) => {
+    const { username, password } = req.body ?? {};
+    if (!username || !password) {
+      res.status(400).json({ error: "Username and password required" });
+      return;
+    }
+    const token = authManager.login(username, password);
+    if (!token) {
+      res.status(401).json({ error: "Invalid username or password" });
+      return;
+    }
+    res.cookie("aicli_token", token, { httpOnly: true, sameSite: "strict", maxAge: 7 * 24 * 3600 * 1e3 });
+    res.json({ success: true, username });
+  });
+  app.post("/api/auth/logout", (_req, res) => {
+    res.clearCookie("aicli_token", { httpOnly: true, sameSite: "strict" });
+    res.json({ success: true });
   });
   app.get("/api/files", requireAuth, (req, res) => {
     const cwd = process.cwd();
@@ -3765,7 +3783,7 @@ async function startWebServer(options = {}) {
             handlers.set(tabId, handler);
             clearPreAuthTimer();
             console.log(`   \u2713 User registered & connected: ${username} (tab: ${tabId.slice(0, 12)})`);
-            ws.send(JSON.stringify({ type: "auth_result", success: true, token: newToken, username, setCookie: true }));
+            ws.send(JSON.stringify({ type: "auth_result", success: true, token: newToken, username }));
             return;
           }
           if (action === "token") {
@@ -3796,7 +3814,7 @@ async function startWebServer(options = {}) {
             handlers.set(tabId, handler);
             clearPreAuthTimer();
             console.log(`   \u2713 User logged in: ${username} (tab: ${tabId.slice(0, 12)})`);
-            ws.send(JSON.stringify({ type: "auth_result", success: true, token: loginToken, username, setCookie: true }));
+            ws.send(JSON.stringify({ type: "auth_result", success: true, token: loginToken, username }));
             return;
           }
           ws.send(JSON.stringify({ type: "auth_result", success: false, error: "Unknown auth action" }));

package/dist/{task-orchestrator-UEZOFXQX.js → task-orchestrator-FAQWRMJH.js}

@@ -4,14 +4,14 @@ import {
   getDangerLevel,
   googleSearchContext,
   truncateOutput
-} from "./chunk-RFKT3T5S.js";
+} from "./chunk-QJ42A4GF.js";
 import "./chunk-3BICTI5M.js";
 import "./chunk-2DXY7UGF.js";
-import "./chunk-LVX667WL.js";
+import "./chunk-7JPMYNVW.js";
 import "./chunk-2ZD3YTVM.js";
 import {
   SUBAGENT_ALLOWED_TOOLS
-} from "./chunk-LX5FXZVP.js";
+} from "./chunk-76UBRJUT.js";
 import "./chunk-4BKXL7SM.js";
 import "./chunk-ANYYM4CF.js";
 import "./chunk-KHYD3WXE.js";

package/dist/web/client/app.js

@@ -8,7 +8,13 @@
 let ws = null;
 let connected = false;
 let processing = false;
-let authToken = localStorage.getItem('aicli-auth-token') || '';
+// M4 fix (v0.4.107): the auth token now lives only in an httpOnly cookie.
+// `authToken` remains as a legacy variable so existing call sites compile,
+// but it should always be empty — the cookie is what authenticates the WS
+// upgrade and HTTP requests via `credentials: 'same-origin'`.
+let authToken = '';
+// Clear any legacy localStorage token from an older client.
+try { localStorage.removeItem('aicli-auth-token'); } catch {}
 let authUsername = localStorage.getItem('aicli-auth-user') || '';
 let authMode = 'login'; // 'login' or 'register'
 let currentAssistantEl = null;
@@ -2718,11 +2724,15 @@ function toggleAuthMode() {
   updateAuthForm();
 }
 
-function handleAuth(event) {
+// M4 fix (v0.4.107): auth now goes through HTTP /api/auth/{login,register}
+// so the server can set an httpOnly cookie. The WS upgrade automatically
+// forwards the cookie. Token is no longer in JSON / localStorage / JS-cookie.
+async function handleAuth(event) {
   event.preventDefault();
   const username = document.getElementById('auth-username').value.trim();
   const password = document.getElementById('auth-password').value;
   const errorEl = document.getElementById('auth-error');
+  const submitBtn = document.getElementById('auth-submit');
 
   if (!username || !password) {
     errorEl.textContent = 'Please enter username and password';
@@ -2731,32 +2741,57 @@ function handleAuth(event) {
   }
 
   errorEl.classList.add('hidden');
-  document.getElementById('auth-submit').disabled = true;
+  submitBtn.disabled = true;
 
-  send({ type: 'auth', action: authMode, username, password });
+  try {
+    const path = authMode === 'register' ? '/api/auth/register' : '/api/auth/login';
+    const resp = await fetch(path, {
+      method: 'POST',
+      headers: { 'content-type': 'application/json' },
+      credentials: 'same-origin', // ensure Set-Cookie is honored
+      body: JSON.stringify({ username, password }),
+    });
+    const data = await resp.json().catch(() => ({}));
+    if (!resp.ok || !data.success) {
+      errorEl.textContent = data.error || `Authentication failed (HTTP ${resp.status})`;
+      errorEl.classList.remove('hidden');
+      submitBtn.disabled = false;
+      return;
+    }
+    authUsername = data.username;
+    // Cookie is httpOnly — we cannot read it from JS, and that's the point.
+    // Drop any legacy localStorage token (M4 cleanup).
+    localStorage.removeItem('aicli-auth-token');
+    localStorage.setItem('aicli-auth-user', data.username);
+    submitBtn.disabled = false;
+    hideAuthScreen();
+    // Reconnect WS so the upgrade request sends the new cookie.
+    if (ws) ws.close();
+  } catch (err) {
+    errorEl.textContent = (err && err.message) ? err.message : 'Network error';
+    errorEl.classList.remove('hidden');
+    submitBtn.disabled = false;
+  }
 }
 
+// Legacy WS auth_result handler — kept for backwards-compat with clients/
+// flows that still hit the WS auth path. Token field, if present, is ignored.
 function handleAuthResult(msg) {
   const errorEl = document.getElementById('auth-error');
   const submitBtn = document.getElementById('auth-submit');
-  submitBtn.disabled = false;
+  if (submitBtn) submitBtn.disabled = false;
 
   if (msg.success) {
-    authToken = msg.token;
     authUsername = msg.username;
-    localStorage.setItem('aicli-auth-token', msg.token);
+    localStorage.removeItem('aicli-auth-token'); // M4: never store token
     localStorage.setItem('aicli-auth-user', msg.username);
-    // Set cookie for secure WebSocket auth (httpOnly cookie set by server on HTTP login,
-    // but for WS-only login, set a JS cookie as fallback)
-    if (msg.setCookie && msg.token) {
-      document.cookie = `aicli_token=${encodeURIComponent(msg.token)}; path=/; max-age=${7 * 24 * 3600}; SameSite=Strict`;
-    }
     hideAuthScreen();
-    // Request session list now that we're authenticated
     requestSessionList();
   } else {
-    errorEl.textContent = msg.error || 'Authentication failed';
-    errorEl.classList.remove('hidden');
+    if (errorEl) {
+      errorEl.textContent = msg.error || 'Authentication failed';
+      errorEl.classList.remove('hidden');
+    }
   }
 }
 
@@ -2774,14 +2809,16 @@ function updateUserMenu() {
   }
 }
 
-function handleLogout() {
+async function handleLogout() {
+  // M4 fix (v0.4.107): only the server can clear an httpOnly cookie.
+  try {
+    await fetch('/api/auth/logout', { method: 'POST', credentials: 'same-origin' });
+  } catch { /* ignore — close WS anyway */ }
   authToken = '';
   authUsername = '';
-  localStorage.removeItem('aicli-auth-token');
-  document.cookie = 'aicli_token=; path=/; max-age=0'; // Clear auth cookie
+  localStorage.removeItem('aicli-auth-token'); // legacy cleanup
   localStorage.removeItem('aicli-auth-user');
   sessionStorage.removeItem('aicli-active-session');
-  // Reconnect — server will send auth_required
   if (ws) ws.close();
 }
 
@@ -2849,9 +2886,12 @@ function showEnableAuthDialog() {
   const password = prompt('Password (min 4 chars):');
   if (!password) return;
 
+  // M4 fix (v0.4.107): credentials:'same-origin' lets the httpOnly cookie
+  // come back; we no longer touch the token.
   fetch('/api/auth/register', {
     method: 'POST',
     headers: { 'Content-Type': 'application/json' },
+    credentials: 'same-origin',
     body: JSON.stringify({ username, password }),
   })
     .then(r => r.json())
@@ -2860,14 +2900,12 @@ function showEnableAuthDialog() {
         alert('Error: ' + data.error);
         return;
       }
-      // Save token and reconnect with auth
-      authToken = data.token;
       authUsername = data.username;
-      localStorage.setItem('aicli-auth-token', data.token);
+      localStorage.removeItem('aicli-auth-token');
       localStorage.setItem('aicli-auth-user', data.username);
       document.getElementById('btn-enable-auth').classList.add('hidden');
       updateUserMenu();
-      // Reconnect with new token
+      // Reconnect — WS upgrade will pick up the new httpOnly cookie.
       if (ws) ws.close();
       alert('✓ Auth enabled! User "' + data.username + '" created. Other users can register from the login screen.');
     })

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jinzd-ai-cli",
-  "version": "0.4.105",
+  "version": "0.4.107",
   "description": "Cross-platform REPL-style AI CLI with multi-provider support",
   "type": "module",
   "main": "./dist/index.js",