jinzd-ai-cli 0.4.134 → 0.4.135

package/dist/{batch-ZCBWXMNR.js → batch-NOEJSHCZ.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import {
   ConfigManager
-} from "./chunk-63YPIF2A.js";
+} from "./chunk-UJLTBN7R.js";
 import "./chunk-2ZD3YTVM.js";
-import "./chunk-WKITLEBR.js";
+import "./chunk-PVZE6NWC.js";
 import "./chunk-PDX44BCA.js";
 
 // src/cli/batch.ts

package/dist/{chunk-JER6BUQL.js → chunk-5XL4HXY5.js}

@@ -5,12 +5,12 @@ import {
 } from "./chunk-3BICTI5M.js";
 import {
   runTestsTool
-} from "./chunk-P6CGP7CU.js";
+} from "./chunk-Y2IWJDJA.js";
 import {
   getDangerLevel,
   isFileWriteTool,
   runTool
-} from "./chunk-ZOFXDRJT.js";
+} from "./chunk-P73ARSFY.js";
 import {
   EnvLoader,
   NetworkError,
@@ -23,7 +23,7 @@ import {
   SUBAGENT_ALLOWED_TOOLS,
   SUBAGENT_DEFAULT_MAX_ROUNDS,
   SUBAGENT_MAX_ROUNDS_LIMIT
-} from "./chunk-WKITLEBR.js";
+} from "./chunk-PVZE6NWC.js";
 import {
   fileCheckpoints
 } from "./chunk-4BKXL7SM.js";
@@ -3386,6 +3386,161 @@ var webFetchTool = {
   }
 };
 
+// src/tools/builtin/web-search.ts
+var REQUEST_TIMEOUT_MS = 15e3;
+var MAX_RESULTS = 10;
+var DEFAULT_RESULTS = 5;
+var UA = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36";
+var webSearchTool = {
+  definition: {
+    name: "web_search",
+    description: 'Search the web using Bing or Google by scraping their public result pages. No API key required, no billing risk. Returns structured {title, url, snippet} for each result. Use this for fresh facts, news, or any "what does X say about Y" lookup. Prefer this over google_search (which needs a paid API key).',
+    parameters: {
+      query: {
+        type: "string",
+        description: "The search query string.",
+        required: true
+      },
+      num_results: {
+        type: "number",
+        description: "Number of results to return (1-10, default 5).",
+        required: false
+      },
+      engine: {
+        type: "string",
+        description: "Search engine: 'bing' (default for CN reachability), 'google', or 'auto' (try bing first, fall back to google on empty/error). Default 'auto'.",
+        required: false
+      }
+    },
+    dangerous: false
+  },
+  async execute(args) {
+    const query = String(args["query"] ?? "").trim();
+    if (!query) throw new ToolError("web_search", "query parameter is required");
+    const numResults = Math.min(
+      Math.max(Math.floor(Number(args["num_results"] ?? DEFAULT_RESULTS)), 1),
+      MAX_RESULTS
+    );
+    const engine = String(args["engine"] ?? "auto").toLowerCase();
+    if (!["bing", "google", "auto"].includes(engine)) {
+      throw new ToolError("web_search", `engine must be one of: bing, google, auto (got: ${engine})`);
+    }
+    const order = engine === "auto" ? ["bing", "google"] : engine === "bing" ? ["bing"] : ["google"];
+    const errors = [];
+    for (const eng of order) {
+      try {
+        const results = eng === "bing" ? await searchBing(query, numResults) : await searchGoogle(query, numResults);
+        if (results.length > 0) {
+          return formatResults(query, eng, results);
+        }
+        errors.push(`${eng}: 0 results`);
+      } catch (err) {
+        errors.push(`${eng}: ${err instanceof Error ? err.message : String(err)}`);
+      }
+    }
+    throw new NetworkError(
+      `web_search failed across all engines.
+${errors.map((e) => "  - " + e).join("\n")}
+Tip: a CAPTCHA wall or a result-page redesign can cause this. Try web_fetch with a specific URL, or report at https://github.com/jinzhengdong/ai-cli/issues.`
+    );
+  }
+};
+async function searchBing(query, num) {
+  const url = new URL("https://cn.bing.com/search");
+  url.searchParams.set("q", query);
+  url.searchParams.set("count", String(num));
+  url.searchParams.set("mkt", "zh-CN");
+  const html = await fetchHtml(url.toString());
+  return parseBingResults(html, num);
+}
+function parseBingResults(html, maxResults) {
+  if (/CaptchaRedirect|sysmsg/i.test(html) && !/b_algo/.test(html)) {
+    throw new NetworkError('Bing returned a CAPTCHA / interstitial \u2014 try again later or use engine: "google".');
+  }
+  const results = [];
+  const liRegex = /<li[^>]*class="[^"]*\bb_algo\b[^"]*"[^>]*>([\s\S]*?)<\/li>/gi;
+  let match;
+  while ((match = liRegex.exec(html)) !== null && results.length < maxResults) {
+    const block = match[1];
+    const titleMatch = /<h2[^>]*>[\s\S]*?<a[^>]+href="([^"]+)"[^>]*>([\s\S]*?)<\/a>[\s\S]*?<\/h2>/i.exec(block);
+    if (!titleMatch) continue;
+    const url = decodeHtmlEntities(titleMatch[1]);
+    const title = decodeHtmlEntities(stripTags2(titleMatch[2])).trim();
+    const snippetMatch = /<p[^>]*class="[^"]*b_(lineclamp\d*|paractl|algoSlug)[^"]*"[^>]*>([\s\S]*?)<\/p>/i.exec(block) ?? /<div[^>]*class="[^"]*b_caption[^"]*"[^>]*>[\s\S]*?<p[^>]*>([\s\S]*?)<\/p>/i.exec(block);
+    const snippet = snippetMatch ? decodeHtmlEntities(stripTags2(snippetMatch[snippetMatch.length - 1])).trim() : "";
+    if (!url || !title) continue;
+    results.push({ title, url, snippet });
+  }
+  return results;
+}
+async function searchGoogle(query, num) {
+  const url = new URL("https://www.google.com/search");
+  url.searchParams.set("q", query);
+  url.searchParams.set("num", String(num));
+  url.searchParams.set("hl", "en");
+  const html = await fetchHtml(url.toString());
+  return parseGoogleResults(html, num);
+}
+function parseGoogleResults(html, maxResults) {
+  if (/CaptchaRedirect|\/sorry\/index/i.test(html)) {
+    throw new NetworkError('Google returned a CAPTCHA wall \u2014 try again later or use engine: "bing".');
+  }
+  const results = [];
+  const linkRegex = /<a[^>]+href="\/url\?q=([^&"]+)[^"]*"[^>]*>[\s\S]*?<h3[^>]*>([\s\S]*?)<\/h3>([\s\S]*?)(?=<a[^>]+href="\/url\?q=|<\/body>)/gi;
+  let match;
+  while ((match = linkRegex.exec(html)) !== null && results.length < maxResults) {
+    const rawUrl = decodeHtmlEntities(decodeURIComponent(match[1]));
+    const title = decodeHtmlEntities(stripTags2(match[2])).trim();
+    const tail = match[3] ?? "";
+    if (!rawUrl.startsWith("http")) continue;
+    if (/google\.com\/(images|maps|search|webhp)/i.test(rawUrl)) continue;
+    const snippetMatch = /<span[^>]*>([\s\S]{40,400}?)<\/span>/i.exec(tail);
+    const snippet = snippetMatch ? decodeHtmlEntities(stripTags2(snippetMatch[1])).trim() : "";
+    results.push({ title, url: rawUrl, snippet });
+  }
+  return results;
+}
+async function fetchHtml(url) {
+  const controller2 = new AbortController();
+  const timer = setTimeout(() => controller2.abort(), REQUEST_TIMEOUT_MS);
+  try {
+    const res = await fetch(url, {
+      method: "GET",
+      headers: {
+        "User-Agent": UA,
+        "Accept": "text/html,application/xhtml+xml,application/xml;q=0.9",
+        "Accept-Language": "en-US,en;q=0.9,zh-CN;q=0.8"
+      },
+      signal: controller2.signal
+    });
+    if (!res.ok) {
+      throw new NetworkError(`HTTP ${res.status} ${res.statusText}`, res.status);
+    }
+    return await res.text();
+  } catch (err) {
+    if (err instanceof Error && err.name === "AbortError") {
+      throw new NetworkError(`Request timed out after ${REQUEST_TIMEOUT_MS / 1e3}s.`, void 0, err);
+    }
+    throw err;
+  } finally {
+    clearTimeout(timer);
+  }
+}
+function stripTags2(html) {
+  return html.replace(/<[^>]+>/g, "").replace(/\s+/g, " ");
+}
+function decodeHtmlEntities(s) {
+  return s.replace(/&amp;/g, "&").replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&quot;/g, '"').replace(/&#39;/g, "'").replace(/&#x2F;/g, "/").replace(/&nbsp;/g, " ");
+}
+function formatResults(query, engine, results) {
+  const header = `Search results for "${query}" via ${engine} (${results.length} results):
+`;
+  const body = results.map((r, i) => `${i + 1}. **${r.title}**
+   URL: ${r.url}
+   ${decodeHtmlEntities(r.snippet) || "(no snippet extracted)"}`).join("\n\n");
+  return header + "\n" + body;
+}
+
 // src/tools/builtin/save-last-response.ts
 import { writeFileSync as writeFileSync4, mkdirSync as mkdirSync2 } from "fs";
 import { dirname as dirname3 } from "path";
@@ -3633,14 +3788,14 @@ function renderTodoList(todos) {
 
 // src/tools/builtin/google-search.ts
 var GOOGLE_SEARCH_API = "https://www.googleapis.com/customsearch/v1";
-var REQUEST_TIMEOUT_MS = 15e3;
-var MAX_RESULTS = 10;
-var DEFAULT_RESULTS = 5;
+var REQUEST_TIMEOUT_MS2 = 15e3;
+var MAX_RESULTS2 = 10;
+var DEFAULT_RESULTS2 = 5;
 var googleSearchContext = {};
 var googleSearchTool = {
   definition: {
     name: "google_search",
-    description: "Search the web using Google Custom Search API. Returns titles, URLs, and descriptions of search results. Use this to look up current information, verify facts, find documentation, or research topics that require up-to-date web data.",
+    description: "\u26A0\uFE0F NOT RECOMMENDED \u2014 uses Google Custom Search API which requires a paid API key. API keys have leaked in the wild causing tens of thousands of USD in unauthorized charges. PREFER `web_search` (keyless Bing/Google scraping, zero billing risk). This tool is disabled by default; user must set config.googleSearch.enabled=true to use it.",
     parameters: {
       query: {
         type: "string",
@@ -3658,9 +3813,16 @@ var googleSearchTool = {
   async execute(args) {
     const query = String(args["query"] ?? "").trim();
     if (!query) throw new ToolError("google_search", "query parameter is required");
+    const enabledFlag = googleSearchContext.configManager?.get("googleSearch")?.enabled ?? false;
+    if (!enabledFlag) {
+      throw new ToolError(
+        "google_search",
+        '\u{1F6AB} google_search is disabled by default (v0.4.135+).\n\nWHY: Google Custom Search has no native daily-spend cap. Keys leak (search GitHub for "AIza" \u2014 thousands of public exposures), bots scrape them within hours, and the GCP bill lands days later. Multiple engineers have lost $10k+ USD this way.\n\nRECOMMENDED: use `web_search` instead \u2014 same use case, scrapes Bing/Google public pages, zero API key, zero billing risk.\n\nIF YOU INSIST: edit ~/.aicli/config.json and set `googleSearch.enabled = true`. ALSO go to GCP Console \u2192 Custom Search API \u2192 Quotas and set a hard daily request cap (e.g. 100/day) \u2014 that is the only real damage cap.'
+      );
+    }
     const numResults = Math.min(
-      Math.max(Math.floor(Number(args["num_results"] ?? DEFAULT_RESULTS)), 1),
-      MAX_RESULTS
+      Math.max(Math.floor(Number(args["num_results"] ?? DEFAULT_RESULTS2)), 1),
+      MAX_RESULTS2
     );
     const { apiKey, cx } = resolveConfig();
     const url = new URL(GOOGLE_SEARCH_API);
@@ -3669,7 +3831,7 @@ var googleSearchTool = {
     url.searchParams.set("q", query);
     url.searchParams.set("num", String(numResults));
     const controller2 = new AbortController();
-    const timeout = setTimeout(() => controller2.abort(), REQUEST_TIMEOUT_MS);
+    const timeout = setTimeout(() => controller2.abort(), REQUEST_TIMEOUT_MS2);
     try {
       const response = await fetch(url.toString(), {
         method: "GET",
@@ -3697,10 +3859,10 @@ ${errorBody.slice(0, 500)}`,
         );
       }
       const data = await response.json();
-      return formatResults(query, data, numResults);
+      return formatResults2(query, data, numResults);
     } catch (err) {
       if (err instanceof Error && err.name === "AbortError") {
-        throw new NetworkError(`Google Search request timed out (${REQUEST_TIMEOUT_MS / 1e3}s). Please check your network or proxy configuration.`, void 0, err);
+        throw new NetworkError(`Google Search request timed out (${REQUEST_TIMEOUT_MS2 / 1e3}s). Please check your network or proxy configuration.`, void 0, err);
       }
       throw err;
     } finally {
@@ -3732,7 +3894,7 @@ function resolveConfig() {
   }
   return { apiKey, cx };
 }
-function formatResults(query, data, _requested) {
+function formatResults2(query, data, _requested) {
   const items = data.items ?? [];
   if (items.length === 0) {
     const info2 = data.searchInformation;
@@ -5015,6 +5177,7 @@ var ToolRegistry = class {
     this.register(globFilesTool);
     this.register(runInteractiveTool);
     this.register(webFetchTool);
+    this.register(webSearchTool);
     this.register(saveLastResponseTool);
     this.register(saveMemoryTool);
     this.register(askUserTool);

package/dist/{chunk-CQZMVPOW.js → chunk-BS6JUZPS.js}

@@ -2,7 +2,7 @@
 import {
   CONFIG_DIR_NAME,
   VERSION
-} from "./chunk-WKITLEBR.js";
+} from "./chunk-PVZE6NWC.js";
 
 // src/diagnostics/crash-log.ts
 import {

package/dist/{chunk-BQL6IYCI.js → chunk-NCZWD2KK.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   schemaToJsonSchema
-} from "./chunk-ZOFXDRJT.js";
+} from "./chunk-P73ARSFY.js";
 import {
   AuthError,
   ProviderError,

package/dist/{chunk-4SSCJXAA.js → chunk-OMB3XLCV.js}

@@ -6,7 +6,7 @@ import { platform } from "os";
 import chalk from "chalk";
 
 // src/core/constants.ts
-var VERSION = "0.4.134";
+var VERSION = "0.4.135";
 var APP_NAME = "ai-cli";
 var CONFIG_DIR_NAME = ".aicli";
 var CONFIG_FILE_NAME = "config.json";

package/dist/{chunk-ZOFXDRJT.js → chunk-P73ARSFY.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   CONFIG_DIR_NAME
-} from "./chunk-WKITLEBR.js";
+} from "./chunk-PVZE6NWC.js";
 
 // src/diagnostics/tool-stats.ts
 import { existsSync, readFileSync, writeFileSync, mkdirSync, renameSync } from "fs";

package/dist/{chunk-WKITLEBR.js → chunk-PVZE6NWC.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // src/core/constants.ts
-var VERSION = "0.4.134";
+var VERSION = "0.4.135";
 var APP_NAME = "ai-cli";
 var CONFIG_DIR_NAME = ".aicli";
 var CONFIG_FILE_NAME = "config.json";

package/dist/{chunk-2QPEE3AY.js → chunk-SUJFSZ6U.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   truncateForPersist
-} from "./chunk-JER6BUQL.js";
+} from "./chunk-5XL4HXY5.js";
 import {
   APP_NAME,
   CONFIG_DIR_NAME,
@@ -11,7 +11,7 @@ import {
   MCP_PROTOCOL_VERSION,
   MCP_TOOL_PREFIX,
   VERSION
-} from "./chunk-WKITLEBR.js";
+} from "./chunk-PVZE6NWC.js";
 import {
   redactJson
 } from "./chunk-7ZJN4KLV.js";

package/dist/{chunk-63YPIF2A.js → chunk-UJLTBN7R.js}

@@ -8,7 +8,7 @@ import {
   CONFIG_FILE_NAME,
   HISTORY_DIR_NAME,
   PLUGINS_DIR_NAME
-} from "./chunk-WKITLEBR.js";
+} from "./chunk-PVZE6NWC.js";
 
 // src/config/config-manager.ts
 import { readFileSync, writeFileSync, existsSync, mkdirSync } from "fs";
@@ -127,6 +127,18 @@ var ConfigSchema = z.object({
   // API Key 通过 apiKeys['google-search'] 或 AICLI_API_KEY_GOOGLESEARCH 环境变量配置
   // CX 也可通过 AICLI_GOOGLE_CX 环境变量覆盖
   googleSearchEngineId: z.string().optional(),
+  // google_search 工具的安全开关（v0.4.135+）
+  // 默认 disabled。这个工具调用 Google Custom Search API，没有原生 daily-spend cap——
+  // 业内有多起 key 被盗后产生数万美元账单的真实案例。现在内置 web_search 工具走 Bing/Google
+  // 公开搜索页 scraping，零 key 零账单，是大多数场景下的默认选择。
+  // 仍想用 API 版？把 enabled 设为 true，并务必到 GCP Console 把 Custom Search Quota 设硬上限。
+  googleSearch: z.object({
+    enabled: z.boolean().default(false)
+  }).default({ enabled: false }),
+  // MCP (Model Context Protocol) 全局开关（v0.4.135+）
+  // false 时启动跳过 connectAll()，所有 MCP 服务器都不连，节省冷启动时间 + 工具定义 token。
+  // 对应你的 skills（whitelist 不依赖 MCP 工具时）完全不受影响。
+  mcpEnabled: z.boolean().default(true),
   // MCP (Model Context Protocol) 服务器配置
   // 声明外部 MCP 服务器，启动时自动连接、发现工具并注册
   // 配置格式兼容 Claude Desktop（command + args + env）

package/dist/{chunk-P6CGP7CU.js → chunk-Y2IWJDJA.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   TEST_TIMEOUT
-} from "./chunk-WKITLEBR.js";
+} from "./chunk-PVZE6NWC.js";
 
 // src/tools/builtin/run-tests.ts
 import { execSync, spawnSync } from "child_process";

package/dist/{constants-7VLZQ2ZS.js → constants-7LFVO52M.js}

@@ -36,7 +36,7 @@ import {
   TEST_TIMEOUT,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-WKITLEBR.js";
+} from "./chunk-PVZE6NWC.js";
 import "./chunk-PDX44BCA.js";
 export {
   AGENTIC_BEHAVIOR_GUIDELINE,

package/dist/{doctor-cli-FCJ4W3ZH.js → doctor-cli-4FQM4BHM.js}

@@ -2,25 +2,25 @@
 import {
   getConfigDirUsage,
   listRecentCrashes
-} from "./chunk-CQZMVPOW.js";
+} from "./chunk-BS6JUZPS.js";
 import {
   ProviderRegistry
-} from "./chunk-BQL6IYCI.js";
+} from "./chunk-NCZWD2KK.js";
 import {
   ConfigManager
-} from "./chunk-63YPIF2A.js";
+} from "./chunk-UJLTBN7R.js";
 import {
   getStatsSnapshot,
   getTopFailingTools,
   getTopUsedTools,
   resetStats
-} from "./chunk-ZOFXDRJT.js";
+} from "./chunk-P73ARSFY.js";
 import "./chunk-2ZD3YTVM.js";
 import {
   DEV_STATE_FILE_NAME,
   MEMORY_FILE_NAME,
   VERSION
-} from "./chunk-WKITLEBR.js";
+} from "./chunk-PVZE6NWC.js";
 import "./chunk-PDX44BCA.js";
 
 // src/diagnostics/doctor-cli.ts

package/dist/electron-server.js

@@ -36,7 +36,7 @@ import {
   VERSION,
   buildUserIdentityPrompt,
   runTestsTool
-} from "./chunk-4SSCJXAA.js";
+} from "./chunk-OMB3XLCV.js";
 import {
   hasSemanticIndex,
   semanticSearch
@@ -178,6 +178,18 @@ var ConfigSchema = z.object({
   // API Key 通过 apiKeys['google-search'] 或 AICLI_API_KEY_GOOGLESEARCH 环境变量配置
   // CX 也可通过 AICLI_GOOGLE_CX 环境变量覆盖
   googleSearchEngineId: z.string().optional(),
+  // google_search 工具的安全开关（v0.4.135+）
+  // 默认 disabled。这个工具调用 Google Custom Search API，没有原生 daily-spend cap——
+  // 业内有多起 key 被盗后产生数万美元账单的真实案例。现在内置 web_search 工具走 Bing/Google
+  // 公开搜索页 scraping，零 key 零账单，是大多数场景下的默认选择。
+  // 仍想用 API 版？把 enabled 设为 true，并务必到 GCP Console 把 Custom Search Quota 设硬上限。
+  googleSearch: z.object({
+    enabled: z.boolean().default(false)
+  }).default({ enabled: false }),
+  // MCP (Model Context Protocol) 全局开关（v0.4.135+）
+  // false 时启动跳过 connectAll()，所有 MCP 服务器都不连，节省冷启动时间 + 工具定义 token。
+  // 对应你的 skills（whitelist 不依赖 MCP 工具时）完全不受影响。
+  mcpEnabled: z.boolean().default(true),
   // MCP (Model Context Protocol) 服务器配置
   // 声明外部 MCP 服务器，启动时自动连接、发现工具并注册
   // 配置格式兼容 Claude Desktop（command + args + env）
@@ -7070,6 +7082,161 @@ var webFetchTool = {
   }
 };
 
+// src/tools/builtin/web-search.ts
+var REQUEST_TIMEOUT_MS = 15e3;
+var MAX_RESULTS = 10;
+var DEFAULT_RESULTS = 5;
+var UA = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36";
+var webSearchTool = {
+  definition: {
+    name: "web_search",
+    description: 'Search the web using Bing or Google by scraping their public result pages. No API key required, no billing risk. Returns structured {title, url, snippet} for each result. Use this for fresh facts, news, or any "what does X say about Y" lookup. Prefer this over google_search (which needs a paid API key).',
+    parameters: {
+      query: {
+        type: "string",
+        description: "The search query string.",
+        required: true
+      },
+      num_results: {
+        type: "number",
+        description: "Number of results to return (1-10, default 5).",
+        required: false
+      },
+      engine: {
+        type: "string",
+        description: "Search engine: 'bing' (default for CN reachability), 'google', or 'auto' (try bing first, fall back to google on empty/error). Default 'auto'.",
+        required: false
+      }
+    },
+    dangerous: false
+  },
+  async execute(args) {
+    const query = String(args["query"] ?? "").trim();
+    if (!query) throw new ToolError("web_search", "query parameter is required");
+    const numResults = Math.min(
+      Math.max(Math.floor(Number(args["num_results"] ?? DEFAULT_RESULTS)), 1),
+      MAX_RESULTS
+    );
+    const engine = String(args["engine"] ?? "auto").toLowerCase();
+    if (!["bing", "google", "auto"].includes(engine)) {
+      throw new ToolError("web_search", `engine must be one of: bing, google, auto (got: ${engine})`);
+    }
+    const order = engine === "auto" ? ["bing", "google"] : engine === "bing" ? ["bing"] : ["google"];
+    const errors = [];
+    for (const eng of order) {
+      try {
+        const results = eng === "bing" ? await searchBing(query, numResults) : await searchGoogle(query, numResults);
+        if (results.length > 0) {
+          return formatResults(query, eng, results);
+        }
+        errors.push(`${eng}: 0 results`);
+      } catch (err) {
+        errors.push(`${eng}: ${err instanceof Error ? err.message : String(err)}`);
+      }
+    }
+    throw new NetworkError(
+      `web_search failed across all engines.
+${errors.map((e) => "  - " + e).join("\n")}
+Tip: a CAPTCHA wall or a result-page redesign can cause this. Try web_fetch with a specific URL, or report at https://github.com/jinzhengdong/ai-cli/issues.`
+    );
+  }
+};
+async function searchBing(query, num) {
+  const url = new URL("https://cn.bing.com/search");
+  url.searchParams.set("q", query);
+  url.searchParams.set("count", String(num));
+  url.searchParams.set("mkt", "zh-CN");
+  const html = await fetchHtml(url.toString());
+  return parseBingResults(html, num);
+}
+function parseBingResults(html, maxResults) {
+  if (/CaptchaRedirect|sysmsg/i.test(html) && !/b_algo/.test(html)) {
+    throw new NetworkError('Bing returned a CAPTCHA / interstitial \u2014 try again later or use engine: "google".');
+  }
+  const results = [];
+  const liRegex = /<li[^>]*class="[^"]*\bb_algo\b[^"]*"[^>]*>([\s\S]*?)<\/li>/gi;
+  let match;
+  while ((match = liRegex.exec(html)) !== null && results.length < maxResults) {
+    const block = match[1];
+    const titleMatch = /<h2[^>]*>[\s\S]*?<a[^>]+href="([^"]+)"[^>]*>([\s\S]*?)<\/a>[\s\S]*?<\/h2>/i.exec(block);
+    if (!titleMatch) continue;
+    const url = decodeHtmlEntities(titleMatch[1]);
+    const title = decodeHtmlEntities(stripTags2(titleMatch[2])).trim();
+    const snippetMatch = /<p[^>]*class="[^"]*b_(lineclamp\d*|paractl|algoSlug)[^"]*"[^>]*>([\s\S]*?)<\/p>/i.exec(block) ?? /<div[^>]*class="[^"]*b_caption[^"]*"[^>]*>[\s\S]*?<p[^>]*>([\s\S]*?)<\/p>/i.exec(block);
+    const snippet = snippetMatch ? decodeHtmlEntities(stripTags2(snippetMatch[snippetMatch.length - 1])).trim() : "";
+    if (!url || !title) continue;
+    results.push({ title, url, snippet });
+  }
+  return results;
+}
+async function searchGoogle(query, num) {
+  const url = new URL("https://www.google.com/search");
+  url.searchParams.set("q", query);
+  url.searchParams.set("num", String(num));
+  url.searchParams.set("hl", "en");
+  const html = await fetchHtml(url.toString());
+  return parseGoogleResults(html, num);
+}
+function parseGoogleResults(html, maxResults) {
+  if (/CaptchaRedirect|\/sorry\/index/i.test(html)) {
+    throw new NetworkError('Google returned a CAPTCHA wall \u2014 try again later or use engine: "bing".');
+  }
+  const results = [];
+  const linkRegex = /<a[^>]+href="\/url\?q=([^&"]+)[^"]*"[^>]*>[\s\S]*?<h3[^>]*>([\s\S]*?)<\/h3>([\s\S]*?)(?=<a[^>]+href="\/url\?q=|<\/body>)/gi;
+  let match;
+  while ((match = linkRegex.exec(html)) !== null && results.length < maxResults) {
+    const rawUrl = decodeHtmlEntities(decodeURIComponent(match[1]));
+    const title = decodeHtmlEntities(stripTags2(match[2])).trim();
+    const tail = match[3] ?? "";
+    if (!rawUrl.startsWith("http")) continue;
+    if (/google\.com\/(images|maps|search|webhp)/i.test(rawUrl)) continue;
+    const snippetMatch = /<span[^>]*>([\s\S]{40,400}?)<\/span>/i.exec(tail);
+    const snippet = snippetMatch ? decodeHtmlEntities(stripTags2(snippetMatch[1])).trim() : "";
+    results.push({ title, url: rawUrl, snippet });
+  }
+  return results;
+}
+async function fetchHtml(url) {
+  const controller2 = new AbortController();
+  const timer = setTimeout(() => controller2.abort(), REQUEST_TIMEOUT_MS);
+  try {
+    const res = await fetch(url, {
+      method: "GET",
+      headers: {
+        "User-Agent": UA,
+        "Accept": "text/html,application/xhtml+xml,application/xml;q=0.9",
+        "Accept-Language": "en-US,en;q=0.9,zh-CN;q=0.8"
+      },
+      signal: controller2.signal
+    });
+    if (!res.ok) {
+      throw new NetworkError(`HTTP ${res.status} ${res.statusText}`, res.status);
+    }
+    return await res.text();
+  } catch (err) {
+    if (err instanceof Error && err.name === "AbortError") {
+      throw new NetworkError(`Request timed out after ${REQUEST_TIMEOUT_MS / 1e3}s.`, void 0, err);
+    }
+    throw err;
+  } finally {
+    clearTimeout(timer);
+  }
+}
+function stripTags2(html) {
+  return html.replace(/<[^>]+>/g, "").replace(/\s+/g, " ");
+}
+function decodeHtmlEntities(s) {
+  return s.replace(/&amp;/g, "&").replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&quot;/g, '"').replace(/&#39;/g, "'").replace(/&#x2F;/g, "/").replace(/&nbsp;/g, " ");
+}
+function formatResults(query, engine, results) {
+  const header = `Search results for "${query}" via ${engine} (${results.length} results):
+`;
+  const body = results.map((r, i) => `${i + 1}. **${r.title}**
+   URL: ${r.url}
+   ${decodeHtmlEntities(r.snippet) || "(no snippet extracted)"}`).join("\n\n");
+  return header + "\n" + body;
+}
+
 // src/tools/builtin/save-last-response.ts
 import { writeFileSync as writeFileSync7, mkdirSync as mkdirSync5 } from "fs";
 import { dirname as dirname4 } from "path";
@@ -7317,14 +7484,14 @@ function renderTodoList(todos) {
 
 // src/tools/builtin/google-search.ts
 var GOOGLE_SEARCH_API = "https://www.googleapis.com/customsearch/v1";
-var REQUEST_TIMEOUT_MS = 15e3;
-var MAX_RESULTS = 10;
-var DEFAULT_RESULTS = 5;
+var REQUEST_TIMEOUT_MS2 = 15e3;
+var MAX_RESULTS2 = 10;
+var DEFAULT_RESULTS2 = 5;
 var googleSearchContext = {};
 var googleSearchTool = {
   definition: {
     name: "google_search",
-    description: "Search the web using Google Custom Search API. Returns titles, URLs, and descriptions of search results. Use this to look up current information, verify facts, find documentation, or research topics that require up-to-date web data.",
+    description: "\u26A0\uFE0F NOT RECOMMENDED \u2014 uses Google Custom Search API which requires a paid API key. API keys have leaked in the wild causing tens of thousands of USD in unauthorized charges. PREFER `web_search` (keyless Bing/Google scraping, zero billing risk). This tool is disabled by default; user must set config.googleSearch.enabled=true to use it.",
     parameters: {
       query: {
         type: "string",
@@ -7342,9 +7509,16 @@ var googleSearchTool = {
   async execute(args) {
     const query = String(args["query"] ?? "").trim();
     if (!query) throw new ToolError("google_search", "query parameter is required");
+    const enabledFlag = googleSearchContext.configManager?.get("googleSearch")?.enabled ?? false;
+    if (!enabledFlag) {
+      throw new ToolError(
+        "google_search",
+        '\u{1F6AB} google_search is disabled by default (v0.4.135+).\n\nWHY: Google Custom Search has no native daily-spend cap. Keys leak (search GitHub for "AIza" \u2014 thousands of public exposures), bots scrape them within hours, and the GCP bill lands days later. Multiple engineers have lost $10k+ USD this way.\n\nRECOMMENDED: use `web_search` instead \u2014 same use case, scrapes Bing/Google public pages, zero API key, zero billing risk.\n\nIF YOU INSIST: edit ~/.aicli/config.json and set `googleSearch.enabled = true`. ALSO go to GCP Console \u2192 Custom Search API \u2192 Quotas and set a hard daily request cap (e.g. 100/day) \u2014 that is the only real damage cap.'
+      );
+    }
     const numResults = Math.min(
-      Math.max(Math.floor(Number(args["num_results"] ?? DEFAULT_RESULTS)), 1),
-      MAX_RESULTS
+      Math.max(Math.floor(Number(args["num_results"] ?? DEFAULT_RESULTS2)), 1),
+      MAX_RESULTS2
     );
     const { apiKey, cx } = resolveConfig();
     const url = new URL(GOOGLE_SEARCH_API);
@@ -7353,7 +7527,7 @@ var googleSearchTool = {
     url.searchParams.set("q", query);
     url.searchParams.set("num", String(numResults));
     const controller2 = new AbortController();
-    const timeout = setTimeout(() => controller2.abort(), REQUEST_TIMEOUT_MS);
+    const timeout = setTimeout(() => controller2.abort(), REQUEST_TIMEOUT_MS2);
     try {
       const response = await fetch(url.toString(), {
         method: "GET",
@@ -7381,10 +7555,10 @@ ${errorBody.slice(0, 500)}`,
         );
       }
       const data = await response.json();
-      return formatResults(query, data, numResults);
+      return formatResults2(query, data, numResults);
     } catch (err) {
       if (err instanceof Error && err.name === "AbortError") {
-        throw new NetworkError(`Google Search request timed out (${REQUEST_TIMEOUT_MS / 1e3}s). Please check your network or proxy configuration.`, void 0, err);
+        throw new NetworkError(`Google Search request timed out (${REQUEST_TIMEOUT_MS2 / 1e3}s). Please check your network or proxy configuration.`, void 0, err);
       }
       throw err;
     } finally {
@@ -7416,7 +7590,7 @@ function resolveConfig() {
   }
   return { apiKey, cx };
 }
-function formatResults(query, data, _requested) {
+function formatResults2(query, data, _requested) {
   const items = data.items ?? [];
   if (items.length === 0) {
     const info2 = data.searchInformation;
@@ -8699,6 +8873,7 @@ var ToolRegistry = class {
     this.register(globFilesTool);
     this.register(runInteractiveTool);
     this.register(webFetchTool);
+    this.register(webSearchTool);
     this.register(saveLastResponseTool);
     this.register(saveMemoryTool);
     this.register(askUserTool);
@@ -12219,7 +12394,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
       case "test": {
         this.send({ type: "info", message: "\u{1F9EA} Running tests..." });
         try {
-          const { executeTests } = await import("./run-tests-CL7X7D4R.js");
+          const { executeTests } = await import("./run-tests-P436Z5DF.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {

package/dist/{hub-6LOXFNGG.js → hub-JJF5BNY4.js}

@@ -386,7 +386,7 @@ ${content}`);
   }
 }
 async function runTaskMode(config, providers, configManager, topic) {
-  const { TaskOrchestrator } = await import("./task-orchestrator-HL2GAAGA.js");
+  const { TaskOrchestrator } = await import("./task-orchestrator-WTBUOVNZ.js");
   const orchestrator = new TaskOrchestrator(config, providers, configManager);
   let interrupted = false;
   const onSigint = () => {

package/dist/index.js

@@ -16,12 +16,12 @@ import {
   saveDevState,
   sessionHasMeaningfulContent,
   setupProxy
-} from "./chunk-2QPEE3AY.js";
+} from "./chunk-SUJFSZ6U.js";
 import {
   getConfigDirUsage,
   listRecentCrashes,
   writeCrashLog
-} from "./chunk-CQZMVPOW.js";
+} from "./chunk-BS6JUZPS.js";
 import {
   CONTENT_ONLY_STREAM_REMINDER,
   HALLUCINATION_CORRECTION_MESSAGE,
@@ -39,10 +39,10 @@ import {
   looksLikeDocumentBody,
   stripPseudoToolCalls,
   stripToolCallReminder
-} from "./chunk-BQL6IYCI.js";
+} from "./chunk-NCZWD2KK.js";
 import {
   ConfigManager
-} from "./chunk-63YPIF2A.js";
+} from "./chunk-UJLTBN7R.js";
 import {
   ToolExecutor,
   ToolRegistry,
@@ -61,16 +61,16 @@ import {
   spawnAgentContext,
   theme,
   undoStack
-} from "./chunk-JER6BUQL.js";
+} from "./chunk-5XL4HXY5.js";
 import "./chunk-3BICTI5M.js";
 import "./chunk-2DXY7UGF.js";
-import "./chunk-P6CGP7CU.js";
+import "./chunk-Y2IWJDJA.js";
 import {
   getStatsSnapshot,
   getTopFailingTools,
   getTopUsedTools,
   installFlushOnExit
-} from "./chunk-ZOFXDRJT.js";
+} from "./chunk-P73ARSFY.js";
 import "./chunk-2ZD3YTVM.js";
 import {
   AGENTIC_BEHAVIOR_GUIDELINE,
@@ -93,7 +93,7 @@ import {
   SKILLS_DIR_NAME,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-WKITLEBR.js";
+} from "./chunk-PVZE6NWC.js";
 import {
   formatGitContextForPrompt,
   getGitContext,
@@ -1812,7 +1812,7 @@ No tools match "${filter}".
           const { join: join6 } = await import("path");
           const { existsSync: existsSync6 } = await import("fs");
           const { getGitRoot: getGitRoot2 } = await import("./git-context-7KIP4X2V.js");
-          const { MCP_PROJECT_CONFIG_NAME: MCP_PROJECT_CONFIG_NAME2 } = await import("./constants-7VLZQ2ZS.js");
+          const { MCP_PROJECT_CONFIG_NAME: MCP_PROJECT_CONFIG_NAME2 } = await import("./constants-7LFVO52M.js");
           const { approveProject, hashMcpFile } = await import("./project-trust-IFM7FXEV.js");
           const cwd = process.cwd();
           const projectRoot = getGitRoot2(cwd) ?? cwd;
@@ -2873,7 +2873,7 @@ ${hint}` : "")
       usage: "/test [command|filter]",
       async execute(args, ctx) {
         try {
-          const { executeTests } = await import("./run-tests-I6RJ35P6.js");
+          const { executeTests } = await import("./run-tests-7VI5TCNL.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {
@@ -5429,8 +5429,12 @@ Session '${this.resumeSessionId}' not found.
       } catch {
       }
     })();
-    const globalMcpServers = this.config.get("mcpServers") ?? {};
-    const projectMcpResult = this.loadProjectMcpConfig();
+    const mcpEnabled = this.config.get("mcpEnabled") !== false;
+    const globalMcpServers = mcpEnabled ? this.config.get("mcpServers") ?? {} : {};
+    const projectMcpResult = mcpEnabled ? this.loadProjectMcpConfig() : null;
+    if (!mcpEnabled) {
+      process.stdout.write(theme.dim("  \u{1F50C} MCP: disabled (config.mcpEnabled=false)\n"));
+    }
     let projectMcpServers = {};
     if (projectMcpResult) {
       const { checkTrust } = await import("./project-trust-IFM7FXEV.js");
@@ -7323,7 +7327,7 @@ program.command("web").description("Start Web UI server with browser-based chat
     console.error("Error: Invalid port number. Must be between 1 and 65535.");
     process.exit(1);
   }
-  const { startWebServer } = await import("./server-HIJQRAOG.js");
+  const { startWebServer } = await import("./server-ELFHR6KD.js");
   await startWebServer({ port, host: options.host });
 });
 program.command("user [action] [username]").description("Manage Web UI users (list | create <name> | delete <name> | reset-password <name> | logout-all <name> | migrate <name>)").action(async (action, username) => {
@@ -7490,12 +7494,12 @@ program.command("sessions").description("List recent conversation sessions").opt
   console.log(footer + "\n");
 });
 program.command("doctor").description("Health check: API keys, config, MCP, recent crashes, tool usage, disk usage").option("--json", "Output as JSON (for scripting)").option("--reset-stats", "Reset accumulated tool usage statistics").action(async (options) => {
-  const { runDoctorCli } = await import("./doctor-cli-FCJ4W3ZH.js");
+  const { runDoctorCli } = await import("./doctor-cli-4FQM4BHM.js");
   await runDoctorCli({ json: !!options.json, resetStats: !!options.resetStats });
 });
 program.command("batch <action> [arg] [arg2]").description("Anthropic Message Batches: submit | list | status <id> | results <id> [out] | cancel <id>").option("--dry-run", "Parse and validate input without submitting (submit only)").action(async (action, arg, arg2, options) => {
   try {
-    const batch = await import("./batch-ZCBWXMNR.js");
+    const batch = await import("./batch-NOEJSHCZ.js");
     switch (action) {
       case "submit":
         if (!arg) {
@@ -7538,7 +7542,7 @@ program.command("batch <action> [arg] [arg2]").description("Anthropic Message Ba
   }
 });
 program.command("mcp-serve").description("Start an MCP server over STDIO, exposing aicli's built-in tools to Claude Desktop / Cursor / other MCP clients").option("--allow-destructive", "Allow bash / run_interactive / task_create (always destructive in MCP mode)").option("--allow-outside-cwd", "Allow tool path arguments to escape the sandbox root \u2014 disabled by default").option("--tools <list>", "Comma-separated whitelist of tools to expose (default: all eligible tools)").option("--cwd <path>", "Working directory AND sandbox root (default: current directory)").action(async (options) => {
-  const { startMcpServer } = await import("./server-432AF6JW.js");
+  const { startMcpServer } = await import("./server-33SKWAUV.js");
   await startMcpServer({
     allowDestructive: !!options.allowDestructive,
     allowOutsideCwd: !!options.allowOutsideCwd,
@@ -7665,7 +7669,7 @@ program.command("hub [topic]").description("Start multi-agent hub (discuss / bra
     }),
     config.get("customProviders")
   );
-  const { startHub } = await import("./hub-6LOXFNGG.js");
+  const { startHub } = await import("./hub-JJF5BNY4.js");
   await startHub(
     {
       topic: topic ?? "",

package/dist/{run-tests-I6RJ35P6.js → run-tests-7VI5TCNL.js}

@@ -2,8 +2,8 @@
 import {
   executeTests,
   runTestsTool
-} from "./chunk-P6CGP7CU.js";
-import "./chunk-WKITLEBR.js";
+} from "./chunk-Y2IWJDJA.js";
+import "./chunk-PVZE6NWC.js";
 import "./chunk-PDX44BCA.js";
 export {
   executeTests,

package/dist/{run-tests-CL7X7D4R.js → run-tests-P436Z5DF.js}

@@ -1,7 +1,7 @@
 import {
   executeTests,
   runTestsTool
-} from "./chunk-4SSCJXAA.js";
+} from "./chunk-OMB3XLCV.js";
 import "./chunk-3RG5ZIWI.js";
 export {
   executeTests,

package/dist/{server-432AF6JW.js → server-33SKWAUV.js}

@@ -1,19 +1,19 @@
 #!/usr/bin/env node
 import {
   ToolRegistry
-} from "./chunk-JER6BUQL.js";
+} from "./chunk-5XL4HXY5.js";
 import "./chunk-3BICTI5M.js";
 import "./chunk-2DXY7UGF.js";
-import "./chunk-P6CGP7CU.js";
+import "./chunk-Y2IWJDJA.js";
 import {
   getDangerLevel,
   runTool,
   schemaToJsonSchema
-} from "./chunk-ZOFXDRJT.js";
+} from "./chunk-P73ARSFY.js";
 import "./chunk-2ZD3YTVM.js";
 import {
   VERSION
-} from "./chunk-WKITLEBR.js";
+} from "./chunk-PVZE6NWC.js";
 import "./chunk-4BKXL7SM.js";
 import "./chunk-7ZJN4KLV.js";
 import "./chunk-KHYD3WXE.js";

package/dist/{server-HIJQRAOG.js → server-ELFHR6KD.js}

@@ -14,7 +14,7 @@ import {
   loadDevState,
   persistToolRound,
   setupProxy
-} from "./chunk-2QPEE3AY.js";
+} from "./chunk-SUJFSZ6U.js";
 import {
   CONTENT_ONLY_STREAM_REMINDER,
   HALLUCINATION_CORRECTION_MESSAGE,
@@ -28,10 +28,10 @@ import {
   looksLikeDocumentBody,
   stripPseudoToolCalls,
   stripToolCallReminder
-} from "./chunk-BQL6IYCI.js";
+} from "./chunk-NCZWD2KK.js";
 import {
   ConfigManager
-} from "./chunk-63YPIF2A.js";
+} from "./chunk-UJLTBN7R.js";
 import {
   ToolExecutor,
   ToolRegistry,
@@ -49,14 +49,14 @@ import {
   spawnAgentContext,
   truncateOutput,
   undoStack
-} from "./chunk-JER6BUQL.js";
+} from "./chunk-5XL4HXY5.js";
 import "./chunk-3BICTI5M.js";
 import "./chunk-2DXY7UGF.js";
-import "./chunk-P6CGP7CU.js";
+import "./chunk-Y2IWJDJA.js";
 import {
   getDangerLevel,
   runTool
-} from "./chunk-ZOFXDRJT.js";
+} from "./chunk-P73ARSFY.js";
 import "./chunk-2ZD3YTVM.js";
 import {
   AGENTIC_BEHAVIOR_GUIDELINE,
@@ -76,7 +76,7 @@ import {
   SKILLS_DIR_NAME,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-WKITLEBR.js";
+} from "./chunk-PVZE6NWC.js";
 import {
   formatGitContextForPrompt,
   getGitContext,
@@ -2460,7 +2460,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
       case "test": {
         this.send({ type: "info", message: "\u{1F9EA} Running tests..." });
         try {
-          const { executeTests } = await import("./run-tests-I6RJ35P6.js");
+          const { executeTests } = await import("./run-tests-7VI5TCNL.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {

package/dist/{task-orchestrator-HL2GAAGA.js → task-orchestrator-WTBUOVNZ.js}

@@ -3,18 +3,18 @@ import {
   ToolRegistry,
   googleSearchContext,
   truncateOutput
-} from "./chunk-JER6BUQL.js";
+} from "./chunk-5XL4HXY5.js";
 import "./chunk-3BICTI5M.js";
 import "./chunk-2DXY7UGF.js";
-import "./chunk-P6CGP7CU.js";
+import "./chunk-Y2IWJDJA.js";
 import {
   getDangerLevel,
   runTool
-} from "./chunk-ZOFXDRJT.js";
+} from "./chunk-P73ARSFY.js";
 import "./chunk-2ZD3YTVM.js";
 import {
   SUBAGENT_ALLOWED_TOOLS
-} from "./chunk-WKITLEBR.js";
+} from "./chunk-PVZE6NWC.js";
 import "./chunk-4BKXL7SM.js";
 import "./chunk-7ZJN4KLV.js";
 import "./chunk-KHYD3WXE.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jinzd-ai-cli",
-  "version": "0.4.134",
+  "version": "0.4.135",
   "description": "Cross-platform REPL-style AI CLI with multi-provider support",
   "type": "module",
   "main": "./dist/index.js",