jinzd-ai-cli 0.4.106 → 0.4.108

package/dist/{batch-PF2EB4BE.js → batch-A6F3UA3N.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import {
   ConfigManager
-} from "./chunk-OSGGBJSW.js";
+} from "./chunk-A26EOV2J.js";
 import "./chunk-2ZD3YTVM.js";
-import "./chunk-ITHFJSJQ.js";
+import "./chunk-DNKI3JIL.js";
 import "./chunk-PDX44BCA.js";
 
 // src/cli/batch.ts

package/dist/{chat-index-7OHUKJY5.js → chat-index-JBF4ZIQI.js}

@@ -6,7 +6,7 @@ import {
   getChatIndexStatus,
   loadChatIndex,
   searchChatMemory
-} from "./chunk-ANYYM4CF.js";
+} from "./chunk-7ZJN4KLV.js";
 import "./chunk-KHYD3WXE.js";
 import "./chunk-PDX44BCA.js";
 export {

package/dist/{chat-index-ADG2GPCC.js → chat-index-MY3DJTV3.js}

@@ -5,7 +5,7 @@ import {
   getChatIndexStatus,
   loadChatIndex,
   searchChatMemory
-} from "./chunk-5S3PIG5O.js";
+} from "./chunk-WJ32NAW3.js";
 import "./chunk-JV5N65KN.js";
 import "./chunk-3RG5ZIWI.js";
 export {

package/dist/{chunk-ANYYM4CF.js → chunk-7ZJN4KLV.js}

@@ -23,6 +23,11 @@ var DEFAULT_PATTERNS = [
   { kind: "db-uri-password", regex: /(\b(?:postgres(?:ql)?|mysql|mongodb(?:\+srv)?|redis|amqp|mssql):\/\/[^:\s]+:)([^@\s]+)(@)/gi },
   // Anthropic API keys
   { kind: "anthropic-key", regex: /(sk-ant-[a-zA-Z0-9_-]{90,})/g },
+  // L6 (v0.4.108): Zhipu / GLM API keys — `<24+ hex/base64-ish>.<32+>`
+  // Two segments separated by a dot, each safely identifiable by length
+  // and char class. Conservative on the lower bound so we don't eat
+  // version strings like `1.0.0` or filenames.
+  { kind: "zhipu-key", regex: /\b([a-zA-Z0-9]{24,}\.[a-zA-Z0-9]{32,})\b/g },
   // OpenAI / generic sk- keys — requires length ≥32 to avoid eating short identifiers
   { kind: "openai-key", regex: /(sk-(?:proj-)?[a-zA-Z0-9_-]{32,})/g },
   // GitHub personal access tokens
@@ -46,18 +51,24 @@ var DEFAULT_PATTERNS = [
   // Private key PEM blocks — catch the header+footer together
   { kind: "private-key", regex: /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g }
 ];
+var MAX_CUSTOM = 32;
+var MAX_PATTERN_LEN = 500;
+var SUSPICIOUS_REDOS = /\([^)]*[+*][^)]*\)\s*[+*{]/;
 function render(placeholder, kind) {
   return placeholder.replace("{kind}", kind);
 }
 function redactString(input, options) {
   if (!options.enabled || !input) return { redacted: input, hits: [] };
   const placeholder = options.placeholder ?? "[REDACTED:{kind}]";
+  const customSrcs = (options.customRegexes ?? []).slice(0, MAX_CUSTOM);
   const patterns = [
     ...options.patterns ?? DEFAULT_PATTERNS,
-    ...(options.customRegexes ?? []).flatMap((src, i) => {
+    ...customSrcs.flatMap((src, i) => {
+      if (typeof src !== "string" || src.length === 0 || src.length > MAX_PATTERN_LEN) return [];
       try {
         const flags = src.match(/^\/.*\/([gimsuy]*)$/)?.[1] ?? "";
         const body = src.replace(/^\/(.*)\/[gimsuy]*$/, "$1");
+        if (SUSPICIOUS_REDOS.test(body)) return [];
         const regex = new RegExp(body, flags.includes("g") ? flags : flags + "g");
         return [{ kind: `custom-${i}`, regex }];
       } catch {

package/dist/{chunk-OSGGBJSW.js → chunk-A26EOV2J.js}

@@ -8,7 +8,7 @@ import {
   CONFIG_FILE_NAME,
   HISTORY_DIR_NAME,
   PLUGINS_DIR_NAME
-} from "./chunk-ITHFJSJQ.js";
+} from "./chunk-DNKI3JIL.js";
 
 // src/config/config-manager.ts
 import { readFileSync, writeFileSync, existsSync, mkdirSync } from "fs";
@@ -268,9 +268,23 @@ ${err}`
   /**
    * 仅修改内存中的配置值，不持久化到磁盘。
    * 用于 CLI 命令行参数覆盖（-p, -m, --no-stream），使其只对当前进程生效。
+   *
+   * M6 fix (v0.4.107)：原版直接赋值不走 Zod，调用点必须自律确保来源可信
+   *   （如 CLI flag、global config）。如果未来谁把外部输入接到这里，类型系统
+   *   不会阻止恶意值偷渡进 config。现在用 partial Zod parse 校验单字段，
+   *   失败时抛 ConfigError。setTransient 永远不接受外部不可信输入——这是
+   *   「调用方信任」契约的硬实现。
    */
   setTransient(key, value) {
-    this.config[key] = value;
+    const draft = { ...this.config, [key]: value };
+    const result = ConfigSchema.safeParse(draft);
+    if (!result.success) {
+      const firstErr = result.error.errors[0];
+      throw new ConfigError(
+        `Invalid transient config value for "${String(key)}": ${firstErr?.message ?? "validation failed"}`
+      );
+    }
+    this.config = result.data;
   }
   isFirstRun() {
     return !existsSync(this.configPath);

package/dist/{chunk-ML7ISZ7A.js → chunk-A3HZY7DA.js}

@@ -5,7 +5,7 @@ import {
 } from "./chunk-3BICTI5M.js";
 import {
   runTestsTool
-} from "./chunk-W7ZG4KRQ.js";
+} from "./chunk-NN2B3UBA.js";
 import {
   EnvLoader,
   NetworkError,
@@ -18,14 +18,14 @@ import {
   SUBAGENT_ALLOWED_TOOLS,
   SUBAGENT_DEFAULT_MAX_ROUNDS,
   SUBAGENT_MAX_ROUNDS_LIMIT
-} from "./chunk-ITHFJSJQ.js";
+} from "./chunk-DNKI3JIL.js";
 import {
   fileCheckpoints
 } from "./chunk-4BKXL7SM.js";
 import {
   loadChatIndex,
   searchChatMemory
-} from "./chunk-ANYYM4CF.js";
+} from "./chunk-7ZJN4KLV.js";
 import {
   indexProject
 } from "./chunk-NHNWUBXB.js";
@@ -667,6 +667,20 @@ function createCell(cellType, content) {
 
 // src/tools/builtin/read-file.ts
 var MAX_FILE_BYTES = 10 * 1024 * 1024;
+function getHardRefusal(normalizedPath) {
+  const home2 = homedir();
+  const p = normalizedPath.toLowerCase();
+  const base = basename(normalizedPath).toLowerCase();
+  if (normalizedPath.startsWith(home2) && p.includes(".aicli") && base === "config.json") {
+    return `[Refused] Reading ${normalizedPath} is blocked because it contains all of your provider API keys.
+If you genuinely need to inspect or edit it, open it manually outside ai-cli (e.g. via your editor).
+For programmatic access, use \`aicli config\` or \`aicli config get <key>\` which never expose raw keys.`;
+  }
+  if (normalizedPath.startsWith(home2) && p.includes(".aicli") && base === "users.json") {
+    return `[Refused] Reading ${normalizedPath} is blocked because it contains password hashes and the token-signing secret.`;
+  }
+  return null;
+}
 function getSensitiveWarning(normalizedPath) {
   const home2 = homedir();
   const p = normalizedPath.toLowerCase();
@@ -819,6 +833,8 @@ var readFileTool = {
     const limitLines = typeof rawLimit === "number" && Number.isFinite(rawLimit) && rawLimit > 0 ? Math.floor(rawLimit) : void 0;
     if (!filePath) throw new ToolError("read_file", "path is required");
     const normalizedPath = resolve2(filePath);
+    const refusal = getHardRefusal(normalizedPath);
+    if (refusal) return refusal;
     if (!existsSync3(normalizedPath)) {
       const suggestions = findSimilarFiles(filePath);
       if (suggestions.length > 0) {
@@ -1136,21 +1152,26 @@ function simpleDiff(oldLines, newLines) {
 
 // src/tools/hooks.ts
 import { execSync } from "child_process";
-function shellEscape(value) {
-  return "'" + value.replace(/'/g, "'\\''") + "'";
+function rewriteTemplate(template, isWindows) {
+  const ref = (name) => isWindows ? `%${name}%` : `$${name}`;
+  return template.replace(/\{tool\}/g, ref("AICLI_HOOK_TOOL")).replace(/\{dangerLevel\}/g, ref("AICLI_HOOK_DANGER_LEVEL")).replace(/\{args\}/g, ref("AICLI_HOOK_ARGS")).replace(/\{status\}/g, ref("AICLI_HOOK_STATUS"));
 }
 function runHook(template, vars) {
   if (!template) return;
-  let cmd = template;
-  cmd = cmd.replace(/\{tool\}/g, shellEscape(vars.tool));
-  cmd = cmd.replace(/\{dangerLevel\}/g, shellEscape(vars.dangerLevel ?? ""));
-  cmd = cmd.replace(/\{args\}/g, shellEscape(vars.args ?? ""));
-  cmd = cmd.replace(/\{status\}/g, shellEscape(vars.status ?? ""));
+  const isWindows = process.platform === "win32";
+  const cmd = rewriteTemplate(template, isWindows);
   try {
     execSync(cmd, {
       timeout: 5e3,
       stdio: ["pipe", "pipe", "pipe"],
-      encoding: "utf-8"
+      encoding: "utf-8",
+      env: {
+        ...process.env,
+        AICLI_HOOK_TOOL: vars.tool,
+        AICLI_HOOK_DANGER_LEVEL: vars.dangerLevel ?? "",
+        AICLI_HOOK_ARGS: vars.args ?? "",
+        AICLI_HOOK_STATUS: vars.status ?? ""
+      }
     });
   } catch {
     process.stderr.write(`\u26A0 Hook failed: ${cmd.slice(0, 100)}

package/dist/{chunk-ITHFJSJQ.js → chunk-DNKI3JIL.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // src/core/constants.ts
-var VERSION = "0.4.106";
+var VERSION = "0.4.108";
 var APP_NAME = "ai-cli";
 var CONFIG_DIR_NAME = ".aicli";
 var CONFIG_FILE_NAME = "config.json";

package/dist/{chunk-RSZ75E2W.js → chunk-IKX4D6C7.js}

@@ -2,7 +2,7 @@
 import {
   schemaToJsonSchema,
   truncateForPersist
-} from "./chunk-ML7ISZ7A.js";
+} from "./chunk-A3HZY7DA.js";
 import {
   AuthError,
   ProviderError,
@@ -18,10 +18,10 @@ import {
   MCP_PROTOCOL_VERSION,
   MCP_TOOL_PREFIX,
   VERSION
-} from "./chunk-ITHFJSJQ.js";
+} from "./chunk-DNKI3JIL.js";
 import {
   redactJson
-} from "./chunk-ANYYM4CF.js";
+} from "./chunk-7ZJN4KLV.js";
 
 // src/providers/claude.ts
 import Anthropic from "@anthropic-ai/sdk";

package/dist/{chunk-W7ZG4KRQ.js → chunk-NN2B3UBA.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   TEST_TIMEOUT
-} from "./chunk-ITHFJSJQ.js";
+} from "./chunk-DNKI3JIL.js";
 
 // src/tools/builtin/run-tests.ts
 import { execSync, spawnSync } from "child_process";

package/dist/{chunk-5S3PIG5O.js → chunk-WJ32NAW3.js}

@@ -22,6 +22,11 @@ var DEFAULT_PATTERNS = [
   { kind: "db-uri-password", regex: /(\b(?:postgres(?:ql)?|mysql|mongodb(?:\+srv)?|redis|amqp|mssql):\/\/[^:\s]+:)([^@\s]+)(@)/gi },
   // Anthropic API keys
   { kind: "anthropic-key", regex: /(sk-ant-[a-zA-Z0-9_-]{90,})/g },
+  // L6 (v0.4.108): Zhipu / GLM API keys — `<24+ hex/base64-ish>.<32+>`
+  // Two segments separated by a dot, each safely identifiable by length
+  // and char class. Conservative on the lower bound so we don't eat
+  // version strings like `1.0.0` or filenames.
+  { kind: "zhipu-key", regex: /\b([a-zA-Z0-9]{24,}\.[a-zA-Z0-9]{32,})\b/g },
   // OpenAI / generic sk- keys — requires length ≥32 to avoid eating short identifiers
   { kind: "openai-key", regex: /(sk-(?:proj-)?[a-zA-Z0-9_-]{32,})/g },
   // GitHub personal access tokens
@@ -45,18 +50,24 @@ var DEFAULT_PATTERNS = [
   // Private key PEM blocks — catch the header+footer together
   { kind: "private-key", regex: /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g }
 ];
+var MAX_CUSTOM = 32;
+var MAX_PATTERN_LEN = 500;
+var SUSPICIOUS_REDOS = /\([^)]*[+*][^)]*\)\s*[+*{]/;
 function render(placeholder, kind) {
   return placeholder.replace("{kind}", kind);
 }
 function redactString(input, options) {
   if (!options.enabled || !input) return { redacted: input, hits: [] };
   const placeholder = options.placeholder ?? "[REDACTED:{kind}]";
+  const customSrcs = (options.customRegexes ?? []).slice(0, MAX_CUSTOM);
   const patterns = [
     ...options.patterns ?? DEFAULT_PATTERNS,
-    ...(options.customRegexes ?? []).flatMap((src, i) => {
+    ...customSrcs.flatMap((src, i) => {
+      if (typeof src !== "string" || src.length === 0 || src.length > MAX_PATTERN_LEN) return [];
       try {
         const flags = src.match(/^\/.*\/([gimsuy]*)$/)?.[1] ?? "";
         const body = src.replace(/^\/(.*)\/[gimsuy]*$/, "$1");
+        if (SUSPICIOUS_REDOS.test(body)) return [];
         const regex = new RegExp(body, flags.includes("g") ? flags : flags + "g");
         return [{ kind: `custom-${i}`, regex }];
       } catch {

package/dist/{chunk-RD4RCKIB.js → chunk-XWJTZWS7.js}

@@ -6,7 +6,7 @@ import { platform } from "os";
 import chalk from "chalk";
 
 // src/core/constants.ts
-var VERSION = "0.4.106";
+var VERSION = "0.4.108";
 var APP_NAME = "ai-cli";
 var CONFIG_DIR_NAME = ".aicli";
 var CONFIG_FILE_NAME = "config.json";

package/dist/{constants-FVJPGHS7.js → constants-QZWMYEMB.js}

@@ -36,7 +36,7 @@ import {
   TEST_TIMEOUT,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-ITHFJSJQ.js";
+} from "./chunk-DNKI3JIL.js";
 import "./chunk-PDX44BCA.js";
 export {
   AGENTIC_BEHAVIOR_GUIDELINE,

package/dist/electron-server.js

@@ -36,7 +36,7 @@ import {
   VERSION,
   buildUserIdentityPrompt,
   runTestsTool
-} from "./chunk-RD4RCKIB.js";
+} from "./chunk-XWJTZWS7.js";
 import {
   hasSemanticIndex,
   semanticSearch
@@ -49,7 +49,7 @@ import {
   loadChatIndex,
   redactJson,
   searchChatMemory
-} from "./chunk-5S3PIG5O.js";
+} from "./chunk-WJ32NAW3.js";
 import "./chunk-JV5N65KN.js";
 import "./chunk-3RG5ZIWI.js";
 
@@ -421,9 +421,23 @@ ${err}`
   /**
    * 仅修改内存中的配置值，不持久化到磁盘。
    * 用于 CLI 命令行参数覆盖（-p, -m, --no-stream），使其只对当前进程生效。
+   *
+   * M6 fix (v0.4.107)：原版直接赋值不走 Zod，调用点必须自律确保来源可信
+   *   （如 CLI flag、global config）。如果未来谁把外部输入接到这里，类型系统
+   *   不会阻止恶意值偷渡进 config。现在用 partial Zod parse 校验单字段，
+   *   失败时抛 ConfigError。setTransient 永远不接受外部不可信输入——这是
+   *   「调用方信任」契约的硬实现。
    */
   setTransient(key, value) {
-    this.config[key] = value;
+    const draft = { ...this.config, [key]: value };
+    const result = ConfigSchema.safeParse(draft);
+    if (!result.success) {
+      const firstErr = result.error.errors[0];
+      throw new ConfigError(
+        `Invalid transient config value for "${String(key)}": ${firstErr?.message ?? "validation failed"}`
+      );
+    }
+    this.config = result.data;
   }
   isFirstRun() {
     return !existsSync(this.configPath);
@@ -4059,6 +4073,20 @@ function createCell(cellType, content) {
 
 // src/tools/builtin/read-file.ts
 var MAX_FILE_BYTES = 10 * 1024 * 1024;
+function getHardRefusal(normalizedPath) {
+  const home2 = homedir2();
+  const p = normalizedPath.toLowerCase();
+  const base = basename(normalizedPath).toLowerCase();
+  if (normalizedPath.startsWith(home2) && p.includes(".aicli") && base === "config.json") {
+    return `[Refused] Reading ${normalizedPath} is blocked because it contains all of your provider API keys.
+If you genuinely need to inspect or edit it, open it manually outside ai-cli (e.g. via your editor).
+For programmatic access, use \`aicli config\` or \`aicli config get <key>\` which never expose raw keys.`;
+  }
+  if (normalizedPath.startsWith(home2) && p.includes(".aicli") && base === "users.json") {
+    return `[Refused] Reading ${normalizedPath} is blocked because it contains password hashes and the token-signing secret.`;
+  }
+  return null;
+}
 function getSensitiveWarning(normalizedPath) {
   const home2 = homedir2();
   const p = normalizedPath.toLowerCase();
@@ -4211,6 +4239,8 @@ var readFileTool = {
     const limitLines = typeof rawLimit === "number" && Number.isFinite(rawLimit) && rawLimit > 0 ? Math.floor(rawLimit) : void 0;
     if (!filePath) throw new ToolError("read_file", "path is required");
     const normalizedPath = resolve2(filePath);
+    const refusal = getHardRefusal(normalizedPath);
+    if (refusal) return refusal;
     if (!existsSync5(normalizedPath)) {
       const suggestions = findSimilarFiles(filePath);
       if (suggestions.length > 0) {
@@ -4528,21 +4558,26 @@ function simpleDiff(oldLines, newLines) {
 
 // src/tools/hooks.ts
 import { execSync } from "child_process";
-function shellEscape(value) {
-  return "'" + value.replace(/'/g, "'\\''") + "'";
+function rewriteTemplate(template, isWindows) {
+  const ref = (name) => isWindows ? `%${name}%` : `$${name}`;
+  return template.replace(/\{tool\}/g, ref("AICLI_HOOK_TOOL")).replace(/\{dangerLevel\}/g, ref("AICLI_HOOK_DANGER_LEVEL")).replace(/\{args\}/g, ref("AICLI_HOOK_ARGS")).replace(/\{status\}/g, ref("AICLI_HOOK_STATUS"));
 }
 function runHook(template, vars) {
   if (!template) return;
-  let cmd = template;
-  cmd = cmd.replace(/\{tool\}/g, shellEscape(vars.tool));
-  cmd = cmd.replace(/\{dangerLevel\}/g, shellEscape(vars.dangerLevel ?? ""));
-  cmd = cmd.replace(/\{args\}/g, shellEscape(vars.args ?? ""));
-  cmd = cmd.replace(/\{status\}/g, shellEscape(vars.status ?? ""));
+  const isWindows = process.platform === "win32";
+  const cmd = rewriteTemplate(template, isWindows);
   try {
     execSync(cmd, {
       timeout: 5e3,
       stdio: ["pipe", "pipe", "pipe"],
-      encoding: "utf-8"
+      encoding: "utf-8",
+      env: {
+        ...process.env,
+        AICLI_HOOK_TOOL: vars.tool,
+        AICLI_HOOK_DANGER_LEVEL: vars.dangerLevel ?? "",
+        AICLI_HOOK_ARGS: vars.args ?? "",
+        AICLI_HOOK_STATUS: vars.status ?? ""
+      }
     });
   } catch {
     process.stderr.write(`\u26A0 Hook failed: ${cmd.slice(0, 100)}
@@ -11754,7 +11789,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
       case "test": {
         this.send({ type: "info", message: "\u{1F9EA} Running tests..." });
         try {
-          const { executeTests } = await import("./run-tests-6FVJND6Q.js");
+          const { executeTests } = await import("./run-tests-VBJ5H3XR.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {
@@ -12278,7 +12313,7 @@ Add .md files to create commands.` });
       return;
     }
     try {
-      const { searchChatMemory: searchChatMemory2, loadChatIndex: loadChatIndex2 } = await import("./chat-index-ADG2GPCC.js");
+      const { searchChatMemory: searchChatMemory2, loadChatIndex: loadChatIndex2 } = await import("./chat-index-MY3DJTV3.js");
       const loaded = loadChatIndex2();
       if (!loaded || loaded.idx.chunks.length === 0) {
         this.send({ type: "memory_hits", query: q, hits: [], indexMissing: true });
@@ -12314,7 +12349,7 @@ Add .md files to create commands.` });
   }
   async handleMemoryStatus() {
     try {
-      const { getChatIndexStatus } = await import("./chat-index-ADG2GPCC.js");
+      const { getChatIndexStatus } = await import("./chat-index-MY3DJTV3.js");
       const s = getChatIndexStatus();
       this.send({
         type: "memory_status",
@@ -12339,7 +12374,7 @@ Add .md files to create commands.` });
         type: "info",
         message: full ? "\u{1F9E0} Rebuilding chat memory index (this may take a while on first run \u2014 ~117 MB embedder)." : "\u{1F9E0} Refreshing chat memory index (incremental)\u2026"
       });
-      const { buildChatIndex } = await import("./chat-index-ADG2GPCC.js");
+      const { buildChatIndex } = await import("./chat-index-MY3DJTV3.js");
       const stats = await buildChatIndex({
         full,
         onProgress: (p) => {
@@ -13117,7 +13152,25 @@ async function startWebServer(options = {}) {
     const token = authManager.login(username, password);
     console.log(`   \u2713 User registered via API: ${username}${firstRun ? " (first-run)" : ""}`);
     res.cookie("aicli_token", token, { httpOnly: true, sameSite: "strict", maxAge: 7 * 24 * 3600 * 1e3 });
-    res.json({ success: true, token, username });
+    res.json({ success: true, username });
+  });
+  app.post("/api/auth/login", (req, res) => {
+    const { username, password } = req.body ?? {};
+    if (!username || !password) {
+      res.status(400).json({ error: "Username and password required" });
+      return;
+    }
+    const token = authManager.login(username, password);
+    if (!token) {
+      res.status(401).json({ error: "Invalid username or password" });
+      return;
+    }
+    res.cookie("aicli_token", token, { httpOnly: true, sameSite: "strict", maxAge: 7 * 24 * 3600 * 1e3 });
+    res.json({ success: true, username });
+  });
+  app.post("/api/auth/logout", (_req, res) => {
+    res.clearCookie("aicli_token", { httpOnly: true, sameSite: "strict" });
+    res.json({ success: true });
   });
   app.get("/api/files", requireAuth, (req, res) => {
     const cwd = process.cwd();
@@ -13358,7 +13411,7 @@ async function startWebServer(options = {}) {
             handlers.set(tabId, handler);
             clearPreAuthTimer();
             console.log(`   \u2713 User registered & connected: ${username} (tab: ${tabId.slice(0, 12)})`);
-            ws.send(JSON.stringify({ type: "auth_result", success: true, token: newToken, username, setCookie: true }));
+            ws.send(JSON.stringify({ type: "auth_result", success: true, token: newToken, username }));
             return;
           }
           if (action === "token") {
@@ -13389,7 +13442,7 @@ async function startWebServer(options = {}) {
             handlers.set(tabId, handler);
             clearPreAuthTimer();
             console.log(`   \u2713 User logged in: ${username} (tab: ${tabId.slice(0, 12)})`);
-            ws.send(JSON.stringify({ type: "auth_result", success: true, token: loginToken, username, setCookie: true }));
+            ws.send(JSON.stringify({ type: "auth_result", success: true, token: loginToken, username }));
             return;
           }
           ws.send(JSON.stringify({ type: "auth_result", success: false, error: "Unknown auth action" }));
@@ -13502,10 +13555,14 @@ function parseCookie(cookie) {
 }
 async function openBrowser(url) {
   try {
-    const { exec } = await import("child_process");
-    const cmd = process.platform === "win32" ? `start ${url}` : process.platform === "darwin" ? `open ${url}` : `xdg-open ${url}`;
-    exec(cmd, () => {
-    });
+    const { spawn: spawn5 } = await import("child_process");
+    if (process.platform === "win32") {
+      spawn5("cmd", ["/c", "start", '""', url], { detached: true, stdio: "ignore" }).unref();
+    } else if (process.platform === "darwin") {
+      spawn5("open", [url], { detached: true, stdio: "ignore" }).unref();
+    } else {
+      spawn5("xdg-open", [url], { detached: true, stdio: "ignore" }).unref();
+    }
   } catch {
   }
 }

package/dist/{hub-3KDAZUH4.js → hub-3HEMIJTM.js}

@@ -386,7 +386,7 @@ ${content}`);
   }
 }
 async function runTaskMode(config, providers, configManager, topic) {
-  const { TaskOrchestrator } = await import("./task-orchestrator-32DSRTMN.js");
+  const { TaskOrchestrator } = await import("./task-orchestrator-6WIYZPDB.js");
   const orchestrator = new TaskOrchestrator(config, providers, configManager);
   let interrupted = false;
   const onSigint = () => {

package/dist/index.js

@@ -25,10 +25,10 @@ import {
   saveDevState,
   sessionHasMeaningfulContent,
   setupProxy
-} from "./chunk-RSZ75E2W.js";
+} from "./chunk-IKX4D6C7.js";
 import {
   ConfigManager
-} from "./chunk-OSGGBJSW.js";
+} from "./chunk-A26EOV2J.js";
 import {
   ToolExecutor,
   ToolRegistry,
@@ -47,10 +47,10 @@ import {
   spawnAgentContext,
   theme,
   undoStack
-} from "./chunk-ML7ISZ7A.js";
+} from "./chunk-A3HZY7DA.js";
 import "./chunk-3BICTI5M.js";
 import "./chunk-2DXY7UGF.js";
-import "./chunk-W7ZG4KRQ.js";
+import "./chunk-NN2B3UBA.js";
 import "./chunk-2ZD3YTVM.js";
 import {
   AGENTIC_BEHAVIOR_GUIDELINE,
@@ -73,7 +73,7 @@ import {
   SKILLS_DIR_NAME,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-ITHFJSJQ.js";
+} from "./chunk-DNKI3JIL.js";
 import {
   formatGitContextForPrompt,
   getGitContext,
@@ -89,7 +89,7 @@ import {
   getChatIndexStatus,
   scanString,
   searchChatMemory
-} from "./chunk-ANYYM4CF.js";
+} from "./chunk-7ZJN4KLV.js";
 import "./chunk-KHYD3WXE.js";
 import "./chunk-NHNWUBXB.js";
 import "./chunk-6VRJGH25.js";
@@ -1594,7 +1594,7 @@ ${text}
           const { join: join6 } = await import("path");
           const { existsSync: existsSync6 } = await import("fs");
           const { getGitRoot: getGitRoot2 } = await import("./git-context-7KIP4X2V.js");
-          const { MCP_PROJECT_CONFIG_NAME: MCP_PROJECT_CONFIG_NAME2 } = await import("./constants-FVJPGHS7.js");
+          const { MCP_PROJECT_CONFIG_NAME: MCP_PROJECT_CONFIG_NAME2 } = await import("./constants-QZWMYEMB.js");
           const { approveProject, hashMcpFile } = await import("./project-trust-IFM7FXEV.js");
           const cwd = process.cwd();
           const projectRoot = getGitRoot2(cwd) ?? cwd;
@@ -2644,7 +2644,7 @@ ${hint}` : "")
       usage: "/test [command|filter]",
       async execute(args, ctx) {
         try {
-          const { executeTests } = await import("./run-tests-UZGGOXOS.js");
+          const { executeTests } = await import("./run-tests-LWSTPCZY.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {
@@ -5068,7 +5068,7 @@ Session '${this.resumeSessionId}' not found.
     })();
     void (async () => {
       try {
-        const { getChatIndexStatus: getChatIndexStatus2, buildChatIndex: buildChatIndex2 } = await import("./chat-index-7OHUKJY5.js");
+        const { getChatIndexStatus: getChatIndexStatus2, buildChatIndex: buildChatIndex2 } = await import("./chat-index-JBF4ZIQI.js");
         const initial = getChatIndexStatus2();
         this.chatMemoryStatus = {
           exists: initial.exists,
@@ -6800,7 +6800,7 @@ program.command("web").description("Start Web UI server with browser-based chat
     console.error("Error: Invalid port number. Must be between 1 and 65535.");
     process.exit(1);
   }
-  const { startWebServer } = await import("./server-CWDCYN3N.js");
+  const { startWebServer } = await import("./server-6F2JF2JK.js");
   await startWebServer({ port, host: options.host });
 });
 program.command("user [action] [username]").description("Manage Web UI users (list | create <name> | delete <name> | reset-password <name> | migrate <name>)").action(async (action, username) => {
@@ -6923,7 +6923,7 @@ program.command("sessions").description("List recent conversation sessions").act
 });
 program.command("batch <action> [arg] [arg2]").description("Anthropic Message Batches: submit | list | status <id> | results <id> [out] | cancel <id>").option("--dry-run", "Parse and validate input without submitting (submit only)").action(async (action, arg, arg2, options) => {
   try {
-    const batch = await import("./batch-PF2EB4BE.js");
+    const batch = await import("./batch-A6F3UA3N.js");
     switch (action) {
       case "submit":
         if (!arg) {
@@ -6966,7 +6966,7 @@ program.command("batch <action> [arg] [arg2]").description("Anthropic Message Ba
   }
 });
 program.command("mcp-serve").description("Start an MCP server over STDIO, exposing aicli's built-in tools to Claude Desktop / Cursor / other MCP clients").option("--allow-destructive", "Allow bash / run_interactive / task_create (always destructive in MCP mode)").option("--allow-outside-cwd", "Allow tool path arguments to escape the sandbox root \u2014 disabled by default").option("--tools <list>", "Comma-separated whitelist of tools to expose (default: all eligible tools)").option("--cwd <path>", "Working directory AND sandbox root (default: current directory)").action(async (options) => {
-  const { startMcpServer } = await import("./server-5MJQOIZU.js");
+  const { startMcpServer } = await import("./server-DSG3EYRA.js");
   await startMcpServer({
     allowDestructive: !!options.allowDestructive,
     allowOutsideCwd: !!options.allowOutsideCwd,
@@ -7093,7 +7093,7 @@ program.command("hub [topic]").description("Start multi-agent hub (discuss / bra
     }),
     config.get("customProviders")
   );
-  const { startHub } = await import("./hub-3KDAZUH4.js");
+  const { startHub } = await import("./hub-3HEMIJTM.js");
   await startHub(
     {
       topic: topic ?? "",

package/dist/{run-tests-UZGGOXOS.js → run-tests-LWSTPCZY.js}

@@ -2,8 +2,8 @@
 import {
   executeTests,
   runTestsTool
-} from "./chunk-W7ZG4KRQ.js";
-import "./chunk-ITHFJSJQ.js";
+} from "./chunk-NN2B3UBA.js";
+import "./chunk-DNKI3JIL.js";
 import "./chunk-PDX44BCA.js";
 export {
   executeTests,

package/dist/{run-tests-6FVJND6Q.js → run-tests-VBJ5H3XR.js}

@@ -1,7 +1,7 @@
 import {
   executeTests,
   runTestsTool
-} from "./chunk-RD4RCKIB.js";
+} from "./chunk-XWJTZWS7.js";
 import "./chunk-3RG5ZIWI.js";
 export {
   executeTests,

package/dist/{server-CWDCYN3N.js → server-6F2JF2JK.js}

@@ -18,10 +18,10 @@ import {
   loadDevState,
   persistToolRound,
   setupProxy
-} from "./chunk-RSZ75E2W.js";
+} from "./chunk-IKX4D6C7.js";
 import {
   ConfigManager
-} from "./chunk-OSGGBJSW.js";
+} from "./chunk-A26EOV2J.js";
 import {
   ToolExecutor,
   ToolRegistry,
@@ -39,10 +39,10 @@ import {
   spawnAgentContext,
   truncateOutput,
   undoStack
-} from "./chunk-ML7ISZ7A.js";
+} from "./chunk-A3HZY7DA.js";
 import "./chunk-3BICTI5M.js";
 import "./chunk-2DXY7UGF.js";
-import "./chunk-W7ZG4KRQ.js";
+import "./chunk-NN2B3UBA.js";
 import "./chunk-2ZD3YTVM.js";
 import {
   AGENTIC_BEHAVIOR_GUIDELINE,
@@ -62,14 +62,14 @@ import {
   SKILLS_DIR_NAME,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-ITHFJSJQ.js";
+} from "./chunk-DNKI3JIL.js";
 import {
   formatGitContextForPrompt,
   getGitContext,
   getGitRoot
 } from "./chunk-HOSJZMQS.js";
 import "./chunk-4BKXL7SM.js";
-import "./chunk-ANYYM4CF.js";
+import "./chunk-7ZJN4KLV.js";
 import "./chunk-KHYD3WXE.js";
 import "./chunk-NHNWUBXB.js";
 import "./chunk-6VRJGH25.js";
@@ -2383,7 +2383,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
       case "test": {
         this.send({ type: "info", message: "\u{1F9EA} Running tests..." });
         try {
-          const { executeTests } = await import("./run-tests-UZGGOXOS.js");
+          const { executeTests } = await import("./run-tests-LWSTPCZY.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {
@@ -2907,7 +2907,7 @@ Add .md files to create commands.` });
       return;
     }
     try {
-      const { searchChatMemory, loadChatIndex } = await import("./chat-index-7OHUKJY5.js");
+      const { searchChatMemory, loadChatIndex } = await import("./chat-index-JBF4ZIQI.js");
       const loaded = loadChatIndex();
       if (!loaded || loaded.idx.chunks.length === 0) {
         this.send({ type: "memory_hits", query: q, hits: [], indexMissing: true });
@@ -2943,7 +2943,7 @@ Add .md files to create commands.` });
   }
   async handleMemoryStatus() {
     try {
-      const { getChatIndexStatus } = await import("./chat-index-7OHUKJY5.js");
+      const { getChatIndexStatus } = await import("./chat-index-JBF4ZIQI.js");
       const s = getChatIndexStatus();
       this.send({
         type: "memory_status",
@@ -2968,7 +2968,7 @@ Add .md files to create commands.` });
         type: "info",
         message: full ? "\u{1F9E0} Rebuilding chat memory index (this may take a while on first run \u2014 ~117 MB embedder)." : "\u{1F9E0} Refreshing chat memory index (incremental)\u2026"
       });
-      const { buildChatIndex } = await import("./chat-index-7OHUKJY5.js");
+      const { buildChatIndex } = await import("./chat-index-JBF4ZIQI.js");
       const stats = await buildChatIndex({
         full,
         onProgress: (p) => {
@@ -3524,7 +3524,25 @@ async function startWebServer(options = {}) {
     const token = authManager.login(username, password);
     console.log(`   \u2713 User registered via API: ${username}${firstRun ? " (first-run)" : ""}`);
     res.cookie("aicli_token", token, { httpOnly: true, sameSite: "strict", maxAge: 7 * 24 * 3600 * 1e3 });
-    res.json({ success: true, token, username });
+    res.json({ success: true, username });
+  });
+  app.post("/api/auth/login", (req, res) => {
+    const { username, password } = req.body ?? {};
+    if (!username || !password) {
+      res.status(400).json({ error: "Username and password required" });
+      return;
+    }
+    const token = authManager.login(username, password);
+    if (!token) {
+      res.status(401).json({ error: "Invalid username or password" });
+      return;
+    }
+    res.cookie("aicli_token", token, { httpOnly: true, sameSite: "strict", maxAge: 7 * 24 * 3600 * 1e3 });
+    res.json({ success: true, username });
+  });
+  app.post("/api/auth/logout", (_req, res) => {
+    res.clearCookie("aicli_token", { httpOnly: true, sameSite: "strict" });
+    res.json({ success: true });
   });
   app.get("/api/files", requireAuth, (req, res) => {
     const cwd = process.cwd();
@@ -3765,7 +3783,7 @@ async function startWebServer(options = {}) {
             handlers.set(tabId, handler);
             clearPreAuthTimer();
             console.log(`   \u2713 User registered & connected: ${username} (tab: ${tabId.slice(0, 12)})`);
-            ws.send(JSON.stringify({ type: "auth_result", success: true, token: newToken, username, setCookie: true }));
+            ws.send(JSON.stringify({ type: "auth_result", success: true, token: newToken, username }));
             return;
           }
           if (action === "token") {
@@ -3796,7 +3814,7 @@ async function startWebServer(options = {}) {
             handlers.set(tabId, handler);
             clearPreAuthTimer();
             console.log(`   \u2713 User logged in: ${username} (tab: ${tabId.slice(0, 12)})`);
-            ws.send(JSON.stringify({ type: "auth_result", success: true, token: loginToken, username, setCookie: true }));
+            ws.send(JSON.stringify({ type: "auth_result", success: true, token: loginToken, username }));
             return;
           }
           ws.send(JSON.stringify({ type: "auth_result", success: false, error: "Unknown auth action" }));
@@ -3909,10 +3927,14 @@ function parseCookie(cookie) {
 }
 async function openBrowser(url) {
   try {
-    const { exec } = await import("child_process");
-    const cmd = process.platform === "win32" ? `start ${url}` : process.platform === "darwin" ? `open ${url}` : `xdg-open ${url}`;
-    exec(cmd, () => {
-    });
+    const { spawn } = await import("child_process");
+    if (process.platform === "win32") {
+      spawn("cmd", ["/c", "start", '""', url], { detached: true, stdio: "ignore" }).unref();
+    } else if (process.platform === "darwin") {
+      spawn("open", [url], { detached: true, stdio: "ignore" }).unref();
+    } else {
+      spawn("xdg-open", [url], { detached: true, stdio: "ignore" }).unref();
+    }
   } catch {
   }
 }

package/dist/{server-5MJQOIZU.js → server-DSG3EYRA.js}

@@ -3,16 +3,16 @@ import {
   ToolRegistry,
   getDangerLevel,
   schemaToJsonSchema
-} from "./chunk-ML7ISZ7A.js";
+} from "./chunk-A3HZY7DA.js";
 import "./chunk-3BICTI5M.js";
 import "./chunk-2DXY7UGF.js";
-import "./chunk-W7ZG4KRQ.js";
+import "./chunk-NN2B3UBA.js";
 import "./chunk-2ZD3YTVM.js";
 import {
   VERSION
-} from "./chunk-ITHFJSJQ.js";
+} from "./chunk-DNKI3JIL.js";
 import "./chunk-4BKXL7SM.js";
-import "./chunk-ANYYM4CF.js";
+import "./chunk-7ZJN4KLV.js";
 import "./chunk-KHYD3WXE.js";
 import "./chunk-NHNWUBXB.js";
 import "./chunk-6VRJGH25.js";

package/dist/{task-orchestrator-32DSRTMN.js → task-orchestrator-6WIYZPDB.js}

@@ -4,16 +4,16 @@ import {
   getDangerLevel,
   googleSearchContext,
   truncateOutput
-} from "./chunk-ML7ISZ7A.js";
+} from "./chunk-A3HZY7DA.js";
 import "./chunk-3BICTI5M.js";
 import "./chunk-2DXY7UGF.js";
-import "./chunk-W7ZG4KRQ.js";
+import "./chunk-NN2B3UBA.js";
 import "./chunk-2ZD3YTVM.js";
 import {
   SUBAGENT_ALLOWED_TOOLS
-} from "./chunk-ITHFJSJQ.js";
+} from "./chunk-DNKI3JIL.js";
 import "./chunk-4BKXL7SM.js";
-import "./chunk-ANYYM4CF.js";
+import "./chunk-7ZJN4KLV.js";
 import "./chunk-KHYD3WXE.js";
 import "./chunk-NHNWUBXB.js";
 import "./chunk-6VRJGH25.js";

package/dist/web/client/app.js

@@ -8,7 +8,13 @@
 let ws = null;
 let connected = false;
 let processing = false;
-let authToken = localStorage.getItem('aicli-auth-token') || '';
+// M4 fix (v0.4.107): the auth token now lives only in an httpOnly cookie.
+// `authToken` remains as a legacy variable so existing call sites compile,
+// but it should always be empty — the cookie is what authenticates the WS
+// upgrade and HTTP requests via `credentials: 'same-origin'`.
+let authToken = '';
+// Clear any legacy localStorage token from an older client.
+try { localStorage.removeItem('aicli-auth-token'); } catch {}
 let authUsername = localStorage.getItem('aicli-auth-user') || '';
 let authMode = 'login'; // 'login' or 'register'
 let currentAssistantEl = null;
@@ -2718,11 +2724,15 @@ function toggleAuthMode() {
   updateAuthForm();
 }
 
-function handleAuth(event) {
+// M4 fix (v0.4.107): auth now goes through HTTP /api/auth/{login,register}
+// so the server can set an httpOnly cookie. The WS upgrade automatically
+// forwards the cookie. Token is no longer in JSON / localStorage / JS-cookie.
+async function handleAuth(event) {
   event.preventDefault();
   const username = document.getElementById('auth-username').value.trim();
   const password = document.getElementById('auth-password').value;
   const errorEl = document.getElementById('auth-error');
+  const submitBtn = document.getElementById('auth-submit');
 
   if (!username || !password) {
     errorEl.textContent = 'Please enter username and password';
@@ -2731,32 +2741,57 @@ function handleAuth(event) {
   }
 
   errorEl.classList.add('hidden');
-  document.getElementById('auth-submit').disabled = true;
+  submitBtn.disabled = true;
 
-  send({ type: 'auth', action: authMode, username, password });
+  try {
+    const path = authMode === 'register' ? '/api/auth/register' : '/api/auth/login';
+    const resp = await fetch(path, {
+      method: 'POST',
+      headers: { 'content-type': 'application/json' },
+      credentials: 'same-origin', // ensure Set-Cookie is honored
+      body: JSON.stringify({ username, password }),
+    });
+    const data = await resp.json().catch(() => ({}));
+    if (!resp.ok || !data.success) {
+      errorEl.textContent = data.error || `Authentication failed (HTTP ${resp.status})`;
+      errorEl.classList.remove('hidden');
+      submitBtn.disabled = false;
+      return;
+    }
+    authUsername = data.username;
+    // Cookie is httpOnly — we cannot read it from JS, and that's the point.
+    // Drop any legacy localStorage token (M4 cleanup).
+    localStorage.removeItem('aicli-auth-token');
+    localStorage.setItem('aicli-auth-user', data.username);
+    submitBtn.disabled = false;
+    hideAuthScreen();
+    // Reconnect WS so the upgrade request sends the new cookie.
+    if (ws) ws.close();
+  } catch (err) {
+    errorEl.textContent = (err && err.message) ? err.message : 'Network error';
+    errorEl.classList.remove('hidden');
+    submitBtn.disabled = false;
+  }
 }
 
+// Legacy WS auth_result handler — kept for backwards-compat with clients/
+// flows that still hit the WS auth path. Token field, if present, is ignored.
 function handleAuthResult(msg) {
   const errorEl = document.getElementById('auth-error');
   const submitBtn = document.getElementById('auth-submit');
-  submitBtn.disabled = false;
+  if (submitBtn) submitBtn.disabled = false;
 
   if (msg.success) {
-    authToken = msg.token;
     authUsername = msg.username;
-    localStorage.setItem('aicli-auth-token', msg.token);
+    localStorage.removeItem('aicli-auth-token'); // M4: never store token
     localStorage.setItem('aicli-auth-user', msg.username);
-    // Set cookie for secure WebSocket auth (httpOnly cookie set by server on HTTP login,
-    // but for WS-only login, set a JS cookie as fallback)
-    if (msg.setCookie && msg.token) {
-      document.cookie = `aicli_token=${encodeURIComponent(msg.token)}; path=/; max-age=${7 * 24 * 3600}; SameSite=Strict`;
-    }
     hideAuthScreen();
-    // Request session list now that we're authenticated
     requestSessionList();
   } else {
-    errorEl.textContent = msg.error || 'Authentication failed';
-    errorEl.classList.remove('hidden');
+    if (errorEl) {
+      errorEl.textContent = msg.error || 'Authentication failed';
+      errorEl.classList.remove('hidden');
+    }
   }
 }
 
@@ -2774,14 +2809,16 @@ function updateUserMenu() {
   }
 }
 
-function handleLogout() {
+async function handleLogout() {
+  // M4 fix (v0.4.107): only the server can clear an httpOnly cookie.
+  try {
+    await fetch('/api/auth/logout', { method: 'POST', credentials: 'same-origin' });
+  } catch { /* ignore — close WS anyway */ }
   authToken = '';
   authUsername = '';
-  localStorage.removeItem('aicli-auth-token');
-  document.cookie = 'aicli_token=; path=/; max-age=0'; // Clear auth cookie
+  localStorage.removeItem('aicli-auth-token'); // legacy cleanup
   localStorage.removeItem('aicli-auth-user');
   sessionStorage.removeItem('aicli-active-session');
-  // Reconnect — server will send auth_required
   if (ws) ws.close();
 }
 
@@ -2849,9 +2886,12 @@ function showEnableAuthDialog() {
   const password = prompt('Password (min 4 chars):');
   if (!password) return;
 
+  // M4 fix (v0.4.107): credentials:'same-origin' lets the httpOnly cookie
+  // come back; we no longer touch the token.
   fetch('/api/auth/register', {
     method: 'POST',
     headers: { 'Content-Type': 'application/json' },
+    credentials: 'same-origin',
     body: JSON.stringify({ username, password }),
   })
     .then(r => r.json())
@@ -2860,14 +2900,12 @@ function showEnableAuthDialog() {
         alert('Error: ' + data.error);
         return;
       }
-      // Save token and reconnect with auth
-      authToken = data.token;
       authUsername = data.username;
-      localStorage.setItem('aicli-auth-token', data.token);
+      localStorage.removeItem('aicli-auth-token');
       localStorage.setItem('aicli-auth-user', data.username);
       document.getElementById('btn-enable-auth').classList.add('hidden');
       updateUserMenu();
-      // Reconnect with new token
+      // Reconnect — WS upgrade will pick up the new httpOnly cookie.
       if (ws) ws.close();
       alert('✓ Auth enabled! User "' + data.username + '" created. Other users can register from the login screen.');
     })

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jinzd-ai-cli",
-  "version": "0.4.106",
+  "version": "0.4.108",
   "description": "Cross-platform REPL-style AI CLI with multi-provider support",
   "type": "module",
   "main": "./dist/index.js",