jinzd-ai-cli 0.4.107 → 0.4.109

package/README.md

@@ -422,6 +422,12 @@ npm run test:watch    # Watch mode
 
 ## Documentation
 
+- [`docs/USAGE.md`](docs/USAGE.md) — Complete reference manual (commands, tools, config)
+- [`docs/TUTORIAL.md`](docs/TUTORIAL.md) — Hands-on tutorial, zero to fluent in an hour
+- [`docs/ADVANCED.md`](docs/ADVANCED.md) — Architecture and internals (for developers)
+- [`docs/RECIPES.md`](docs/RECIPES.md) — Practical recipes by scenario
+- [`docs/SECURITY.md`](docs/SECURITY.md) — **Security model, deployment checklist, audit history.** Read before exposing `aicli web` to a network.
+- [`CHANGELOG.md`](CHANGELOG.md) — Per-version change log
 - [Chinese README](README.zh-CN.md) — 中文说明文档
 
 ## License

package/README.zh-CN.md

@@ -184,6 +184,8 @@ AI 在对话中可自主调用 28 个工具：
 - [`docs/USAGE.zh-CN.md`](docs/USAGE.zh-CN.md) — 完整参考手册（所有命令、工具、配置）
 - [`docs/ADVANCED.zh-CN.md`](docs/ADVANCED.zh-CN.md) — 架构与内部原理（开发者向）
 - [`docs/RECIPES.zh-CN.md`](docs/RECIPES.zh-CN.md) — 实战配方（按场景查）
+- [`docs/SECURITY.zh-CN.md`](docs/SECURITY.zh-CN.md) — **安全模型、部署清单、审计历史。** 把 `aicli web` 暴露到网络前请先读。
+- [`CHANGELOG.md`](CHANGELOG.md) — 每个版本的更新记录
 
 ## 主要 REPL 命令
 

package/dist/{batch-QNHPXV6U.js → batch-BFOFTLFS.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import {
   ConfigManager
-} from "./chunk-7J2GXVS5.js";
+} from "./chunk-JLHY6AOZ.js";
 import "./chunk-2ZD3YTVM.js";
-import "./chunk-76UBRJUT.js";
+import "./chunk-LZR3DYW3.js";
 import "./chunk-PDX44BCA.js";
 
 // src/cli/batch.ts

package/dist/{chat-index-7OHUKJY5.js → chat-index-JBF4ZIQI.js}

@@ -6,7 +6,7 @@ import {
   getChatIndexStatus,
   loadChatIndex,
   searchChatMemory
-} from "./chunk-ANYYM4CF.js";
+} from "./chunk-7ZJN4KLV.js";
 import "./chunk-KHYD3WXE.js";
 import "./chunk-PDX44BCA.js";
 export {

package/dist/{chat-index-ADG2GPCC.js → chat-index-MY3DJTV3.js}

@@ -5,7 +5,7 @@ import {
   getChatIndexStatus,
   loadChatIndex,
   searchChatMemory
-} from "./chunk-5S3PIG5O.js";
+} from "./chunk-WJ32NAW3.js";
 import "./chunk-JV5N65KN.js";
 import "./chunk-3RG5ZIWI.js";
 export {

package/dist/{chunk-YMFTF57T.js → chunk-3UJIJBKB.js}

@@ -2,7 +2,7 @@
 import {
   schemaToJsonSchema,
   truncateForPersist
-} from "./chunk-QJ42A4GF.js";
+} from "./chunk-N62X6OKJ.js";
 import {
   AuthError,
   ProviderError,
@@ -18,10 +18,10 @@ import {
   MCP_PROTOCOL_VERSION,
   MCP_TOOL_PREFIX,
   VERSION
-} from "./chunk-76UBRJUT.js";
+} from "./chunk-LZR3DYW3.js";
 import {
   redactJson
-} from "./chunk-ANYYM4CF.js";
+} from "./chunk-7ZJN4KLV.js";
 
 // src/providers/claude.ts
 import Anthropic from "@anthropic-ai/sdk";

package/dist/{chunk-ANYYM4CF.js → chunk-7ZJN4KLV.js}

@@ -23,6 +23,11 @@ var DEFAULT_PATTERNS = [
   { kind: "db-uri-password", regex: /(\b(?:postgres(?:ql)?|mysql|mongodb(?:\+srv)?|redis|amqp|mssql):\/\/[^:\s]+:)([^@\s]+)(@)/gi },
   // Anthropic API keys
   { kind: "anthropic-key", regex: /(sk-ant-[a-zA-Z0-9_-]{90,})/g },
+  // L6 (v0.4.108): Zhipu / GLM API keys — `<24+ hex/base64-ish>.<32+>`
+  // Two segments separated by a dot, each safely identifiable by length
+  // and char class. Conservative on the lower bound so we don't eat
+  // version strings like `1.0.0` or filenames.
+  { kind: "zhipu-key", regex: /\b([a-zA-Z0-9]{24,}\.[a-zA-Z0-9]{32,})\b/g },
   // OpenAI / generic sk- keys — requires length ≥32 to avoid eating short identifiers
   { kind: "openai-key", regex: /(sk-(?:proj-)?[a-zA-Z0-9_-]{32,})/g },
   // GitHub personal access tokens
@@ -46,18 +51,24 @@ var DEFAULT_PATTERNS = [
   // Private key PEM blocks — catch the header+footer together
   { kind: "private-key", regex: /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g }
 ];
+var MAX_CUSTOM = 32;
+var MAX_PATTERN_LEN = 500;
+var SUSPICIOUS_REDOS = /\([^)]*[+*][^)]*\)\s*[+*{]/;
 function render(placeholder, kind) {
   return placeholder.replace("{kind}", kind);
 }
 function redactString(input, options) {
   if (!options.enabled || !input) return { redacted: input, hits: [] };
   const placeholder = options.placeholder ?? "[REDACTED:{kind}]";
+  const customSrcs = (options.customRegexes ?? []).slice(0, MAX_CUSTOM);
   const patterns = [
     ...options.patterns ?? DEFAULT_PATTERNS,
-    ...(options.customRegexes ?? []).flatMap((src, i) => {
+    ...customSrcs.flatMap((src, i) => {
+      if (typeof src !== "string" || src.length === 0 || src.length > MAX_PATTERN_LEN) return [];
       try {
         const flags = src.match(/^\/.*\/([gimsuy]*)$/)?.[1] ?? "";
         const body = src.replace(/^\/(.*)\/[gimsuy]*$/, "$1");
+        if (SUSPICIOUS_REDOS.test(body)) return [];
         const regex = new RegExp(body, flags.includes("g") ? flags : flags + "g");
         return [{ kind: `custom-${i}`, regex }];
       } catch {

package/dist/{chunk-7JPMYNVW.js → chunk-CUQ4HXHA.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   TEST_TIMEOUT
-} from "./chunk-76UBRJUT.js";
+} from "./chunk-LZR3DYW3.js";
 
 // src/tools/builtin/run-tests.ts
 import { execSync, spawnSync } from "child_process";

package/dist/{chunk-7J2GXVS5.js → chunk-JLHY6AOZ.js}

@@ -8,7 +8,7 @@ import {
   CONFIG_FILE_NAME,
   HISTORY_DIR_NAME,
   PLUGINS_DIR_NAME
-} from "./chunk-76UBRJUT.js";
+} from "./chunk-LZR3DYW3.js";
 
 // src/config/config-manager.ts
 import { readFileSync, writeFileSync, existsSync, mkdirSync } from "fs";

package/dist/{chunk-76UBRJUT.js → chunk-LZR3DYW3.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // src/core/constants.ts
-var VERSION = "0.4.107";
+var VERSION = "0.4.109";
 var APP_NAME = "ai-cli";
 var CONFIG_DIR_NAME = ".aicli";
 var CONFIG_FILE_NAME = "config.json";

package/dist/{chunk-QJ42A4GF.js → chunk-N62X6OKJ.js}

@@ -5,7 +5,7 @@ import {
 } from "./chunk-3BICTI5M.js";
 import {
   runTestsTool
-} from "./chunk-7JPMYNVW.js";
+} from "./chunk-CUQ4HXHA.js";
 import {
   EnvLoader,
   NetworkError,
@@ -18,14 +18,14 @@ import {
   SUBAGENT_ALLOWED_TOOLS,
   SUBAGENT_DEFAULT_MAX_ROUNDS,
   SUBAGENT_MAX_ROUNDS_LIMIT
-} from "./chunk-76UBRJUT.js";
+} from "./chunk-LZR3DYW3.js";
 import {
   fileCheckpoints
 } from "./chunk-4BKXL7SM.js";
 import {
   loadChatIndex,
   searchChatMemory
-} from "./chunk-ANYYM4CF.js";
+} from "./chunk-7ZJN4KLV.js";
 import {
   indexProject
 } from "./chunk-NHNWUBXB.js";
@@ -667,6 +667,20 @@ function createCell(cellType, content) {
 
 // src/tools/builtin/read-file.ts
 var MAX_FILE_BYTES = 10 * 1024 * 1024;
+function getHardRefusal(normalizedPath) {
+  const home2 = homedir();
+  const p = normalizedPath.toLowerCase();
+  const base = basename(normalizedPath).toLowerCase();
+  if (normalizedPath.startsWith(home2) && p.includes(".aicli") && base === "config.json") {
+    return `[Refused] Reading ${normalizedPath} is blocked because it contains all of your provider API keys.
+If you genuinely need to inspect or edit it, open it manually outside ai-cli (e.g. via your editor).
+For programmatic access, use \`aicli config\` or \`aicli config get <key>\` which never expose raw keys.`;
+  }
+  if (normalizedPath.startsWith(home2) && p.includes(".aicli") && base === "users.json") {
+    return `[Refused] Reading ${normalizedPath} is blocked because it contains password hashes and the token-signing secret.`;
+  }
+  return null;
+}
 function getSensitiveWarning(normalizedPath) {
   const home2 = homedir();
   const p = normalizedPath.toLowerCase();
@@ -819,6 +833,8 @@ var readFileTool = {
     const limitLines = typeof rawLimit === "number" && Number.isFinite(rawLimit) && rawLimit > 0 ? Math.floor(rawLimit) : void 0;
     if (!filePath) throw new ToolError("read_file", "path is required");
     const normalizedPath = resolve2(filePath);
+    const refusal = getHardRefusal(normalizedPath);
+    if (refusal) return refusal;
     if (!existsSync3(normalizedPath)) {
       const suggestions = findSimilarFiles(filePath);
       if (suggestions.length > 0) {

package/dist/{chunk-PXTMQ4TC.js → chunk-OKRTYLB6.js}

@@ -6,7 +6,7 @@ import { platform } from "os";
 import chalk from "chalk";
 
 // src/core/constants.ts
-var VERSION = "0.4.107";
+var VERSION = "0.4.109";
 var APP_NAME = "ai-cli";
 var CONFIG_DIR_NAME = ".aicli";
 var CONFIG_FILE_NAME = "config.json";

package/dist/{chunk-5S3PIG5O.js → chunk-WJ32NAW3.js}

@@ -22,6 +22,11 @@ var DEFAULT_PATTERNS = [
   { kind: "db-uri-password", regex: /(\b(?:postgres(?:ql)?|mysql|mongodb(?:\+srv)?|redis|amqp|mssql):\/\/[^:\s]+:)([^@\s]+)(@)/gi },
   // Anthropic API keys
   { kind: "anthropic-key", regex: /(sk-ant-[a-zA-Z0-9_-]{90,})/g },
+  // L6 (v0.4.108): Zhipu / GLM API keys — `<24+ hex/base64-ish>.<32+>`
+  // Two segments separated by a dot, each safely identifiable by length
+  // and char class. Conservative on the lower bound so we don't eat
+  // version strings like `1.0.0` or filenames.
+  { kind: "zhipu-key", regex: /\b([a-zA-Z0-9]{24,}\.[a-zA-Z0-9]{32,})\b/g },
   // OpenAI / generic sk- keys — requires length ≥32 to avoid eating short identifiers
   { kind: "openai-key", regex: /(sk-(?:proj-)?[a-zA-Z0-9_-]{32,})/g },
   // GitHub personal access tokens
@@ -45,18 +50,24 @@ var DEFAULT_PATTERNS = [
   // Private key PEM blocks — catch the header+footer together
   { kind: "private-key", regex: /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g }
 ];
+var MAX_CUSTOM = 32;
+var MAX_PATTERN_LEN = 500;
+var SUSPICIOUS_REDOS = /\([^)]*[+*][^)]*\)\s*[+*{]/;
 function render(placeholder, kind) {
   return placeholder.replace("{kind}", kind);
 }
 function redactString(input, options) {
   if (!options.enabled || !input) return { redacted: input, hits: [] };
   const placeholder = options.placeholder ?? "[REDACTED:{kind}]";
+  const customSrcs = (options.customRegexes ?? []).slice(0, MAX_CUSTOM);
   const patterns = [
     ...options.patterns ?? DEFAULT_PATTERNS,
-    ...(options.customRegexes ?? []).flatMap((src, i) => {
+    ...customSrcs.flatMap((src, i) => {
+      if (typeof src !== "string" || src.length === 0 || src.length > MAX_PATTERN_LEN) return [];
       try {
         const flags = src.match(/^\/.*\/([gimsuy]*)$/)?.[1] ?? "";
         const body = src.replace(/^\/(.*)\/[gimsuy]*$/, "$1");
+        if (SUSPICIOUS_REDOS.test(body)) return [];
         const regex = new RegExp(body, flags.includes("g") ? flags : flags + "g");
         return [{ kind: `custom-${i}`, regex }];
       } catch {

package/dist/{constants-G7IWRPVI.js → constants-K52FVIX5.js}

@@ -36,7 +36,7 @@ import {
   TEST_TIMEOUT,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-76UBRJUT.js";
+} from "./chunk-LZR3DYW3.js";
 import "./chunk-PDX44BCA.js";
 export {
   AGENTIC_BEHAVIOR_GUIDELINE,

package/dist/electron-server.js

@@ -36,7 +36,7 @@ import {
   VERSION,
   buildUserIdentityPrompt,
   runTestsTool
-} from "./chunk-PXTMQ4TC.js";
+} from "./chunk-OKRTYLB6.js";
 import {
   hasSemanticIndex,
   semanticSearch
@@ -49,7 +49,7 @@ import {
   loadChatIndex,
   redactJson,
   searchChatMemory
-} from "./chunk-5S3PIG5O.js";
+} from "./chunk-WJ32NAW3.js";
 import "./chunk-JV5N65KN.js";
 import "./chunk-3RG5ZIWI.js";
 
@@ -4073,6 +4073,20 @@ function createCell(cellType, content) {
 
 // src/tools/builtin/read-file.ts
 var MAX_FILE_BYTES = 10 * 1024 * 1024;
+function getHardRefusal(normalizedPath) {
+  const home2 = homedir2();
+  const p = normalizedPath.toLowerCase();
+  const base = basename(normalizedPath).toLowerCase();
+  if (normalizedPath.startsWith(home2) && p.includes(".aicli") && base === "config.json") {
+    return `[Refused] Reading ${normalizedPath} is blocked because it contains all of your provider API keys.
+If you genuinely need to inspect or edit it, open it manually outside ai-cli (e.g. via your editor).
+For programmatic access, use \`aicli config\` or \`aicli config get <key>\` which never expose raw keys.`;
+  }
+  if (normalizedPath.startsWith(home2) && p.includes(".aicli") && base === "users.json") {
+    return `[Refused] Reading ${normalizedPath} is blocked because it contains password hashes and the token-signing secret.`;
+  }
+  return null;
+}
 function getSensitiveWarning(normalizedPath) {
   const home2 = homedir2();
   const p = normalizedPath.toLowerCase();
@@ -4225,6 +4239,8 @@ var readFileTool = {
     const limitLines = typeof rawLimit === "number" && Number.isFinite(rawLimit) && rawLimit > 0 ? Math.floor(rawLimit) : void 0;
     if (!filePath) throw new ToolError("read_file", "path is required");
     const normalizedPath = resolve2(filePath);
+    const refusal = getHardRefusal(normalizedPath);
+    if (refusal) return refusal;
     if (!existsSync5(normalizedPath)) {
       const suggestions = findSimilarFiles(filePath);
       if (suggestions.length > 0) {
@@ -11773,7 +11789,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
       case "test": {
         this.send({ type: "info", message: "\u{1F9EA} Running tests..." });
         try {
-          const { executeTests } = await import("./run-tests-GMO7E3UK.js");
+          const { executeTests } = await import("./run-tests-TTP4QJVN.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {
@@ -12297,7 +12313,7 @@ Add .md files to create commands.` });
       return;
     }
     try {
-      const { searchChatMemory: searchChatMemory2, loadChatIndex: loadChatIndex2 } = await import("./chat-index-ADG2GPCC.js");
+      const { searchChatMemory: searchChatMemory2, loadChatIndex: loadChatIndex2 } = await import("./chat-index-MY3DJTV3.js");
       const loaded = loadChatIndex2();
       if (!loaded || loaded.idx.chunks.length === 0) {
         this.send({ type: "memory_hits", query: q, hits: [], indexMissing: true });
@@ -12333,7 +12349,7 @@ Add .md files to create commands.` });
   }
   async handleMemoryStatus() {
     try {
-      const { getChatIndexStatus } = await import("./chat-index-ADG2GPCC.js");
+      const { getChatIndexStatus } = await import("./chat-index-MY3DJTV3.js");
       const s = getChatIndexStatus();
       this.send({
         type: "memory_status",
@@ -12358,7 +12374,7 @@ Add .md files to create commands.` });
         type: "info",
         message: full ? "\u{1F9E0} Rebuilding chat memory index (this may take a while on first run \u2014 ~117 MB embedder)." : "\u{1F9E0} Refreshing chat memory index (incremental)\u2026"
       });
-      const { buildChatIndex } = await import("./chat-index-ADG2GPCC.js");
+      const { buildChatIndex } = await import("./chat-index-MY3DJTV3.js");
       const stats = await buildChatIndex({
         full,
         onProgress: (p) => {
@@ -13539,10 +13555,14 @@ function parseCookie(cookie) {
 }
 async function openBrowser(url) {
   try {
-    const { exec } = await import("child_process");
-    const cmd = process.platform === "win32" ? `start ${url}` : process.platform === "darwin" ? `open ${url}` : `xdg-open ${url}`;
-    exec(cmd, () => {
-    });
+    const { spawn: spawn5 } = await import("child_process");
+    if (process.platform === "win32") {
+      spawn5("cmd", ["/c", "start", '""', url], { detached: true, stdio: "ignore" }).unref();
+    } else if (process.platform === "darwin") {
+      spawn5("open", [url], { detached: true, stdio: "ignore" }).unref();
+    } else {
+      spawn5("xdg-open", [url], { detached: true, stdio: "ignore" }).unref();
+    }
   } catch {
   }
 }

package/dist/{hub-GBL3BURO.js → hub-4XJ5ZTM4.js}

@@ -386,7 +386,7 @@ ${content}`);
   }
 }
 async function runTaskMode(config, providers, configManager, topic) {
-  const { TaskOrchestrator } = await import("./task-orchestrator-FAQWRMJH.js");
+  const { TaskOrchestrator } = await import("./task-orchestrator-XSNTJYNR.js");
   const orchestrator = new TaskOrchestrator(config, providers, configManager);
   let interrupted = false;
   const onSigint = () => {

package/dist/index.js

@@ -25,10 +25,10 @@ import {
   saveDevState,
   sessionHasMeaningfulContent,
   setupProxy
-} from "./chunk-YMFTF57T.js";
+} from "./chunk-3UJIJBKB.js";
 import {
   ConfigManager
-} from "./chunk-7J2GXVS5.js";
+} from "./chunk-JLHY6AOZ.js";
 import {
   ToolExecutor,
   ToolRegistry,
@@ -47,10 +47,10 @@ import {
   spawnAgentContext,
   theme,
   undoStack
-} from "./chunk-QJ42A4GF.js";
+} from "./chunk-N62X6OKJ.js";
 import "./chunk-3BICTI5M.js";
 import "./chunk-2DXY7UGF.js";
-import "./chunk-7JPMYNVW.js";
+import "./chunk-CUQ4HXHA.js";
 import "./chunk-2ZD3YTVM.js";
 import {
   AGENTIC_BEHAVIOR_GUIDELINE,
@@ -73,7 +73,7 @@ import {
   SKILLS_DIR_NAME,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-76UBRJUT.js";
+} from "./chunk-LZR3DYW3.js";
 import {
   formatGitContextForPrompt,
   getGitContext,
@@ -89,7 +89,7 @@ import {
   getChatIndexStatus,
   scanString,
   searchChatMemory
-} from "./chunk-ANYYM4CF.js";
+} from "./chunk-7ZJN4KLV.js";
 import "./chunk-KHYD3WXE.js";
 import "./chunk-NHNWUBXB.js";
 import "./chunk-6VRJGH25.js";
@@ -1594,7 +1594,7 @@ ${text}
           const { join: join6 } = await import("path");
           const { existsSync: existsSync6 } = await import("fs");
           const { getGitRoot: getGitRoot2 } = await import("./git-context-7KIP4X2V.js");
-          const { MCP_PROJECT_CONFIG_NAME: MCP_PROJECT_CONFIG_NAME2 } = await import("./constants-G7IWRPVI.js");
+          const { MCP_PROJECT_CONFIG_NAME: MCP_PROJECT_CONFIG_NAME2 } = await import("./constants-K52FVIX5.js");
           const { approveProject, hashMcpFile } = await import("./project-trust-IFM7FXEV.js");
           const cwd = process.cwd();
           const projectRoot = getGitRoot2(cwd) ?? cwd;
@@ -2644,7 +2644,7 @@ ${hint}` : "")
       usage: "/test [command|filter]",
       async execute(args, ctx) {
         try {
-          const { executeTests } = await import("./run-tests-3JWA5IJ2.js");
+          const { executeTests } = await import("./run-tests-ZBDJYOB2.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {
@@ -5068,7 +5068,7 @@ Session '${this.resumeSessionId}' not found.
     })();
     void (async () => {
       try {
-        const { getChatIndexStatus: getChatIndexStatus2, buildChatIndex: buildChatIndex2 } = await import("./chat-index-7OHUKJY5.js");
+        const { getChatIndexStatus: getChatIndexStatus2, buildChatIndex: buildChatIndex2 } = await import("./chat-index-JBF4ZIQI.js");
         const initial = getChatIndexStatus2();
         this.chatMemoryStatus = {
           exists: initial.exists,
@@ -6800,7 +6800,7 @@ program.command("web").description("Start Web UI server with browser-based chat
     console.error("Error: Invalid port number. Must be between 1 and 65535.");
     process.exit(1);
   }
-  const { startWebServer } = await import("./server-RTABJZZZ.js");
+  const { startWebServer } = await import("./server-VDMQC43J.js");
   await startWebServer({ port, host: options.host });
 });
 program.command("user [action] [username]").description("Manage Web UI users (list | create <name> | delete <name> | reset-password <name> | migrate <name>)").action(async (action, username) => {
@@ -6923,7 +6923,7 @@ program.command("sessions").description("List recent conversation sessions").act
 });
 program.command("batch <action> [arg] [arg2]").description("Anthropic Message Batches: submit | list | status <id> | results <id> [out] | cancel <id>").option("--dry-run", "Parse and validate input without submitting (submit only)").action(async (action, arg, arg2, options) => {
   try {
-    const batch = await import("./batch-QNHPXV6U.js");
+    const batch = await import("./batch-BFOFTLFS.js");
     switch (action) {
       case "submit":
         if (!arg) {
@@ -6966,7 +6966,7 @@ program.command("batch <action> [arg] [arg2]").description("Anthropic Message Ba
   }
 });
 program.command("mcp-serve").description("Start an MCP server over STDIO, exposing aicli's built-in tools to Claude Desktop / Cursor / other MCP clients").option("--allow-destructive", "Allow bash / run_interactive / task_create (always destructive in MCP mode)").option("--allow-outside-cwd", "Allow tool path arguments to escape the sandbox root \u2014 disabled by default").option("--tools <list>", "Comma-separated whitelist of tools to expose (default: all eligible tools)").option("--cwd <path>", "Working directory AND sandbox root (default: current directory)").action(async (options) => {
-  const { startMcpServer } = await import("./server-2BKTE6Z4.js");
+  const { startMcpServer } = await import("./server-LEPDI3OL.js");
   await startMcpServer({
     allowDestructive: !!options.allowDestructive,
     allowOutsideCwd: !!options.allowOutsideCwd,
@@ -7093,7 +7093,7 @@ program.command("hub [topic]").description("Start multi-agent hub (discuss / bra
     }),
     config.get("customProviders")
   );
-  const { startHub } = await import("./hub-GBL3BURO.js");
+  const { startHub } = await import("./hub-4XJ5ZTM4.js");
   await startHub(
     {
       topic: topic ?? "",

package/dist/{run-tests-GMO7E3UK.js → run-tests-TTP4QJVN.js}

@@ -1,7 +1,7 @@
 import {
   executeTests,
   runTestsTool
-} from "./chunk-PXTMQ4TC.js";
+} from "./chunk-OKRTYLB6.js";
 import "./chunk-3RG5ZIWI.js";
 export {
   executeTests,

package/dist/{run-tests-3JWA5IJ2.js → run-tests-ZBDJYOB2.js}

@@ -2,8 +2,8 @@
 import {
   executeTests,
   runTestsTool
-} from "./chunk-7JPMYNVW.js";
-import "./chunk-76UBRJUT.js";
+} from "./chunk-CUQ4HXHA.js";
+import "./chunk-LZR3DYW3.js";
 import "./chunk-PDX44BCA.js";
 export {
   executeTests,

package/dist/{server-2BKTE6Z4.js → server-LEPDI3OL.js}

@@ -3,16 +3,16 @@ import {
   ToolRegistry,
   getDangerLevel,
   schemaToJsonSchema
-} from "./chunk-QJ42A4GF.js";
+} from "./chunk-N62X6OKJ.js";
 import "./chunk-3BICTI5M.js";
 import "./chunk-2DXY7UGF.js";
-import "./chunk-7JPMYNVW.js";
+import "./chunk-CUQ4HXHA.js";
 import "./chunk-2ZD3YTVM.js";
 import {
   VERSION
-} from "./chunk-76UBRJUT.js";
+} from "./chunk-LZR3DYW3.js";
 import "./chunk-4BKXL7SM.js";
-import "./chunk-ANYYM4CF.js";
+import "./chunk-7ZJN4KLV.js";
 import "./chunk-KHYD3WXE.js";
 import "./chunk-NHNWUBXB.js";
 import "./chunk-6VRJGH25.js";

package/dist/{server-RTABJZZZ.js → server-VDMQC43J.js}

@@ -18,10 +18,10 @@ import {
   loadDevState,
   persistToolRound,
   setupProxy
-} from "./chunk-YMFTF57T.js";
+} from "./chunk-3UJIJBKB.js";
 import {
   ConfigManager
-} from "./chunk-7J2GXVS5.js";
+} from "./chunk-JLHY6AOZ.js";
 import {
   ToolExecutor,
   ToolRegistry,
@@ -39,10 +39,10 @@ import {
   spawnAgentContext,
   truncateOutput,
   undoStack
-} from "./chunk-QJ42A4GF.js";
+} from "./chunk-N62X6OKJ.js";
 import "./chunk-3BICTI5M.js";
 import "./chunk-2DXY7UGF.js";
-import "./chunk-7JPMYNVW.js";
+import "./chunk-CUQ4HXHA.js";
 import "./chunk-2ZD3YTVM.js";
 import {
   AGENTIC_BEHAVIOR_GUIDELINE,
@@ -62,14 +62,14 @@ import {
   SKILLS_DIR_NAME,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-76UBRJUT.js";
+} from "./chunk-LZR3DYW3.js";
 import {
   formatGitContextForPrompt,
   getGitContext,
   getGitRoot
 } from "./chunk-HOSJZMQS.js";
 import "./chunk-4BKXL7SM.js";
-import "./chunk-ANYYM4CF.js";
+import "./chunk-7ZJN4KLV.js";
 import "./chunk-KHYD3WXE.js";
 import "./chunk-NHNWUBXB.js";
 import "./chunk-6VRJGH25.js";
@@ -2383,7 +2383,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
       case "test": {
         this.send({ type: "info", message: "\u{1F9EA} Running tests..." });
         try {
-          const { executeTests } = await import("./run-tests-3JWA5IJ2.js");
+          const { executeTests } = await import("./run-tests-ZBDJYOB2.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {
@@ -2907,7 +2907,7 @@ Add .md files to create commands.` });
       return;
     }
     try {
-      const { searchChatMemory, loadChatIndex } = await import("./chat-index-7OHUKJY5.js");
+      const { searchChatMemory, loadChatIndex } = await import("./chat-index-JBF4ZIQI.js");
       const loaded = loadChatIndex();
       if (!loaded || loaded.idx.chunks.length === 0) {
         this.send({ type: "memory_hits", query: q, hits: [], indexMissing: true });
@@ -2943,7 +2943,7 @@ Add .md files to create commands.` });
   }
   async handleMemoryStatus() {
     try {
-      const { getChatIndexStatus } = await import("./chat-index-7OHUKJY5.js");
+      const { getChatIndexStatus } = await import("./chat-index-JBF4ZIQI.js");
       const s = getChatIndexStatus();
       this.send({
         type: "memory_status",
@@ -2968,7 +2968,7 @@ Add .md files to create commands.` });
         type: "info",
         message: full ? "\u{1F9E0} Rebuilding chat memory index (this may take a while on first run \u2014 ~117 MB embedder)." : "\u{1F9E0} Refreshing chat memory index (incremental)\u2026"
       });
-      const { buildChatIndex } = await import("./chat-index-7OHUKJY5.js");
+      const { buildChatIndex } = await import("./chat-index-JBF4ZIQI.js");
       const stats = await buildChatIndex({
         full,
         onProgress: (p) => {
@@ -3927,10 +3927,14 @@ function parseCookie(cookie) {
 }
 async function openBrowser(url) {
   try {
-    const { exec } = await import("child_process");
-    const cmd = process.platform === "win32" ? `start ${url}` : process.platform === "darwin" ? `open ${url}` : `xdg-open ${url}`;
-    exec(cmd, () => {
-    });
+    const { spawn } = await import("child_process");
+    if (process.platform === "win32") {
+      spawn("cmd", ["/c", "start", '""', url], { detached: true, stdio: "ignore" }).unref();
+    } else if (process.platform === "darwin") {
+      spawn("open", [url], { detached: true, stdio: "ignore" }).unref();
+    } else {
+      spawn("xdg-open", [url], { detached: true, stdio: "ignore" }).unref();
+    }
   } catch {
   }
 }

package/dist/{task-orchestrator-FAQWRMJH.js → task-orchestrator-XSNTJYNR.js}

@@ -4,16 +4,16 @@ import {
   getDangerLevel,
   googleSearchContext,
   truncateOutput
-} from "./chunk-QJ42A4GF.js";
+} from "./chunk-N62X6OKJ.js";
 import "./chunk-3BICTI5M.js";
 import "./chunk-2DXY7UGF.js";
-import "./chunk-7JPMYNVW.js";
+import "./chunk-CUQ4HXHA.js";
 import "./chunk-2ZD3YTVM.js";
 import {
   SUBAGENT_ALLOWED_TOOLS
-} from "./chunk-76UBRJUT.js";
+} from "./chunk-LZR3DYW3.js";
 import "./chunk-4BKXL7SM.js";
-import "./chunk-ANYYM4CF.js";
+import "./chunk-7ZJN4KLV.js";
 import "./chunk-KHYD3WXE.js";
 import "./chunk-NHNWUBXB.js";
 import "./chunk-6VRJGH25.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jinzd-ai-cli",
-  "version": "0.4.107",
+  "version": "0.4.109",
   "description": "Cross-platform REPL-style AI CLI with multi-provider support",
   "type": "module",
   "main": "./dist/index.js",