jinzd-ai-cli 0.4.153 → 0.4.155

package/dist/{chunk-RXM76HB7.js → chunk-U5MY24UZ.js}

@@ -1,4 +1,7 @@
 #!/usr/bin/env node
+import {
+  redactString
+} from "./chunk-SLSWPBK3.js";
 import {
   EMBEDDING_DIM,
   embed,
@@ -10,120 +13,6 @@ import fs from "fs";
 import path from "path";
 import os from "os";
 import crypto from "crypto";
-
-// src/security/redactor.ts
-var DEFAULT_PATTERNS = [
-  // password: xxx / password = xxx / password="xxx"
-  // Covers YAML / JSON / shell-ish / env-file forms.
-  { kind: "password", regex: /\b(password|passwd|pwd)\s*[:=]\s*["']?([^\s"',;{}]{4,200})["']?/gi },
-  // PGPASSWORD=xxx (explicit bash env-var form, separate rule because no quotes usually)
-  { kind: "pgpassword-env", regex: /\b(PGPASSWORD)=([^\s"']{4,200})/g },
-  // JDBC/PG/MySQL/Mongo connection strings with inline credentials
-  // postgresql://user:pass@host/db → redact pass
-  { kind: "db-uri-password", regex: /(\b(?:postgres(?:ql)?|mysql|mongodb(?:\+srv)?|redis|amqp|mssql):\/\/[^:\s]+:)([^@\s]+)(@)/gi },
-  // Anthropic API keys
-  { kind: "anthropic-key", regex: /(sk-ant-[a-zA-Z0-9_-]{90,})/g },
-  // L6 (v0.4.108): Zhipu / GLM API keys — `<24+ hex/base64-ish>.<32+>`
-  // Two segments separated by a dot, each safely identifiable by length
-  // and char class. Conservative on the lower bound so we don't eat
-  // version strings like `1.0.0` or filenames.
-  { kind: "zhipu-key", regex: /\b([a-zA-Z0-9]{24,}\.[a-zA-Z0-9]{32,})\b/g },
-  // OpenAI / generic sk- keys — requires length ≥32 to avoid eating short identifiers
-  { kind: "openai-key", regex: /(sk-(?:proj-)?[a-zA-Z0-9_-]{32,})/g },
-  // GitHub personal access tokens
-  { kind: "github-pat", regex: /\b(ghp_[a-zA-Z0-9]{36})\b/g },
-  { kind: "github-oauth", regex: /\b(gho_[a-zA-Z0-9]{36})\b/g },
-  { kind: "github-install", regex: /\b(ghs_[a-zA-Z0-9]{36})\b/g },
-  // Slack tokens
-  { kind: "slack-bot", regex: /\b(xoxb-\d+-\d+-[a-zA-Z0-9]+)\b/g },
-  { kind: "slack-user", regex: /\b(xoxp-\d+-\d+-\d+-[a-zA-Z0-9]+)\b/g },
-  // AWS access key IDs (AKIA...) and secret access keys are context-dependent;
-  // we only catch the ID because secret key alone is indistinguishable from random base64.
-  { kind: "aws-access-key-id", regex: /\b(AKIA[0-9A-Z]{16})\b/g },
-  // Google API keys
-  { kind: "google-api-key", regex: /\b(AIza[0-9A-Za-z_-]{35})\b/g },
-  // Generic "api_key": "..." / "apiKey": "..." / api-key=xxx
-  { kind: "api-key", regex: /\b(api[_-]?key)\s*[:=]\s*["']?([a-zA-Z0-9_\-.]{16,200})["']?/gi },
-  // Generic token: xxx (only when value looks token-shaped; avoids eating human prose)
-  { kind: "token", regex: /\b(token|access[_-]?token|bearer[_-]?token)\s*[:=]\s*["']?([a-zA-Z0-9_\-.]{20,300})["']?/gi },
-  // Bearer <token> in Authorization headers
-  { kind: "bearer", regex: /\b(Authorization:\s*Bearer\s+)([a-zA-Z0-9_\-.=]{20,500})/g },
-  // Private key PEM blocks — catch the header+footer together
-  { kind: "private-key", regex: /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g }
-];
-var MAX_CUSTOM = 32;
-var MAX_PATTERN_LEN = 500;
-var SUSPICIOUS_REDOS = /\([^)]*[+*][^)]*\)\s*[+*{]/;
-function render(placeholder, kind) {
-  return placeholder.replace("{kind}", kind);
-}
-function redactString(input, options) {
-  if (!options.enabled || !input) return { redacted: input, hits: [] };
-  const placeholder = options.placeholder ?? "[REDACTED:{kind}]";
-  const customSrcs = (options.customRegexes ?? []).slice(0, MAX_CUSTOM);
-  const patterns = [
-    ...options.patterns ?? DEFAULT_PATTERNS,
-    ...customSrcs.flatMap((src, i) => {
-      if (typeof src !== "string" || src.length === 0 || src.length > MAX_PATTERN_LEN) return [];
-      try {
-        const flags = src.match(/^\/.*\/([gimsuy]*)$/)?.[1] ?? "";
-        const body = src.replace(/^\/(.*)\/[gimsuy]*$/, "$1");
-        if (SUSPICIOUS_REDOS.test(body)) return [];
-        const regex = new RegExp(body, flags.includes("g") ? flags : flags + "g");
-        return [{ kind: `custom-${i}`, regex }];
-      } catch {
-        return [];
-      }
-    })
-  ];
-  let redacted = input;
-  const hits = [];
-  for (const { kind, regex } of patterns) {
-    const rx = new RegExp(regex.source, regex.flags);
-    const captureCount = new RegExp(rx.source + "|").exec("").length - 1;
-    redacted = redacted.replace(rx, (...args) => {
-      const match = args[0];
-      const g1 = captureCount >= 1 ? args[1] : void 0;
-      const g2 = captureCount >= 2 ? args[2] : void 0;
-      const offset = args[1 + captureCount];
-      if (captureCount >= 2 && typeof g2 === "string") {
-        hits.push({ kind, start: offset + (g1?.length ?? 0), length: g2.length, secret: g2 });
-        return `${g1}${render(placeholder, kind)}`;
-      }
-      hits.push({ kind, start: offset, length: match.length, secret: g1 ?? match });
-      return render(placeholder, kind);
-    });
-  }
-  return { redacted, hits };
-}
-function redactJson(value, options) {
-  if (!options.enabled) return { value, hits: [] };
-  const allHits = [];
-  function walk(v) {
-    if (typeof v === "string") {
-      const r = redactString(v, options);
-      allHits.push(...r.hits);
-      return r.redacted;
-    }
-    if (Array.isArray(v)) return v.map(walk);
-    if (v && typeof v === "object") {
-      const out = {};
-      for (const [k, vv] of Object.entries(v)) {
-        out[k] = walk(vv);
-      }
-      return out;
-    }
-    return v;
-  }
-  const redacted = walk(value);
-  return { value: redacted, hits: allHits };
-}
-function scanString(input, options) {
-  const { hits } = redactString(input, { ...options, enabled: true });
-  return hits;
-}
-
-// src/memory/chat-index.ts
 var MEMORY_DIR_NAME = "memory-index";
 var CHUNKS_FILE = "chunks.json";
 var VECTORS_FILE = "vectors.vec";
@@ -458,9 +347,6 @@ function getChatIndexStatus() {
 }
 
 export {
-  DEFAULT_PATTERNS,
-  redactJson,
-  scanString,
   chunkSession,
   loadChatIndex,
   clearChatIndex,

package/dist/{ci-UEEUSELV.js → ci-34ZQH43L.js}

@@ -9,12 +9,12 @@ import {
 } from "./chunk-AIZOARZY.js";
 import {
   ConfigManager
-} from "./chunk-UWW3EWER.js";
+} from "./chunk-IBBYW6PM.js";
 import "./chunk-NXXNLLSG.js";
 import "./chunk-2ZD3YTVM.js";
 import {
   VERSION
-} from "./chunk-D62BVFP7.js";
+} from "./chunk-B3LFGPU2.js";
 import "./chunk-PDX44BCA.js";
 
 // src/cli/ci.ts

package/dist/{constants-43EVHE2E.js → constants-DQ5VJOGS.js}

@@ -36,7 +36,7 @@ import {
   TEST_TIMEOUT,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-D62BVFP7.js";
+} from "./chunk-B3LFGPU2.js";
 import "./chunk-PDX44BCA.js";
 export {
   AGENTIC_BEHAVIOR_GUIDELINE,

package/dist/{doctor-cli-ZT674MCQ.js → doctor-cli-TSCI4ORL.js}

@@ -2,26 +2,26 @@
 import {
   getConfigDirUsage,
   listRecentCrashes
-} from "./chunk-TURORFH2.js";
+} from "./chunk-D6GJTJQH.js";
 import {
   ProviderRegistry
 } from "./chunk-AIZOARZY.js";
 import {
   ConfigManager
-} from "./chunk-UWW3EWER.js";
+} from "./chunk-IBBYW6PM.js";
 import {
   getStatsSnapshot,
   getTopFailingTools,
   getTopUsedTools,
   resetStats
-} from "./chunk-EYJQJZJ6.js";
+} from "./chunk-NFRTSL3N.js";
 import "./chunk-NXXNLLSG.js";
 import "./chunk-2ZD3YTVM.js";
 import {
   DEV_STATE_FILE_NAME,
   MEMORY_FILE_NAME,
   VERSION
-} from "./chunk-D62BVFP7.js";
+} from "./chunk-B3LFGPU2.js";
 import "./chunk-PDX44BCA.js";
 
 // src/diagnostics/doctor-cli.ts

package/dist/electron-server.js

@@ -36,7 +36,7 @@ import {
   VERSION,
   buildUserIdentityPrompt,
   runTestsTool
-} from "./chunk-LJPB4ZER.js";
+} from "./chunk-JXSWY54M.js";
 import {
   hasSemanticIndex,
   semanticSearch
@@ -12715,7 +12715,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
       case "test": {
         this.send({ type: "info", message: "\u{1F9EA} Running tests..." });
         try {
-          const { executeTests } = await import("./run-tests-DCT5LWBB.js");
+          const { executeTests } = await import("./run-tests-5CJRMOMI.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {

package/dist/{hub-MDQNJOMV.js → hub-ZILVZWI2.js}

@@ -2,9 +2,10 @@
 import {
   HubAgent,
   assignRoleColors,
+  isConverged,
   renderHubBanner,
   renderHubEvent
-} from "./chunk-M4GJOBWN.js";
+} from "./chunk-O6MLS5QO.js";
 import "./chunk-PDX44BCA.js";
 
 // src/hub/discuss.ts
@@ -12,12 +13,22 @@ var DiscussionOrchestrator = class {
   agents = [];
   state;
   aborted = false;
+  humanSteer;
+  voteConverge;
   /** Callback for rendering events */
   onEvent;
+  /**
+   * P2: human-in-the-loop. When `config.humanSteer` is on, the orchestrator
+   * awaits this between rounds so a person can inject guidance or stop. The
+   * CLI layer supplies the actual prompt; the orchestrator stays UI-agnostic.
+   */
+  onRoundReview;
   constructor(config, providers) {
     this.agents = config.roles.map(
       (role) => new HubAgent(role, providers, config.defaultProvider, config.defaultModel, config.context)
     );
+    this.humanSteer = config.humanSteer ?? false;
+    this.voteConverge = config.voteConverge ?? false;
     this.state = {
       topic: "",
       messages: [],
@@ -30,6 +41,10 @@ var DiscussionOrchestrator = class {
   getAgents() {
     return this.agents;
   }
+  /** Current discussion state (used to persist even after an error). */
+  getState() {
+    return this.state;
+  }
   /** Signal the orchestrator to stop after current turn */
   abort() {
     this.aborted = true;
@@ -52,6 +67,7 @@ var DiscussionOrchestrator = class {
         this.state.round = round;
         this.emit({ type: "round_start", round, maxRounds: this.state.maxRounds });
         let allPassed = true;
+        let convergedCount = 0;
         for (const agent of this.agents) {
           if (this.aborted) break;
           this.emit({ type: "agent_speaking", roleId: agent.role.id, roleName: agent.role.name });
@@ -61,9 +77,11 @@ var DiscussionOrchestrator = class {
               this.state.messages,
               round,
               this.state.maxRounds,
-              (token) => this.emit({ type: "agent_token", roleId: agent.role.id, token })
+              (token) => this.emit({ type: "agent_token", roleId: agent.role.id, token }),
+              { voteConverge: this.voteConverge }
             );
             this.state.messages.push(message);
+            if (message.converged) convergedCount++;
             if (message.passed) {
               this.emit({ type: "agent_passed", roleId: agent.role.id });
               this.emit({ type: "agent_spoke", roleId: agent.role.id, message });
@@ -87,8 +105,33 @@ var DiscussionOrchestrator = class {
           this.emit({ type: "discussion_end", reason: "consensus" });
           break;
         }
+        if (this.voteConverge && convergedCount > 0) {
+          this.emit({ type: "converge_vote", converged: convergedCount, total: this.agents.length });
+          if (isConverged(convergedCount, this.agents.length)) {
+            this.emit({ type: "discussion_end", reason: "vote_converged" });
+            break;
+          }
+        }
         if (round === this.state.maxRounds) {
           this.emit({ type: "discussion_end", reason: "max_rounds", maxRounds: this.state.maxRounds });
+          break;
+        }
+        if (this.humanSteer && this.onRoundReview && !this.aborted) {
+          const steer = await this.onRoundReview({ round, maxRounds: this.state.maxRounds, state: this.state });
+          if (steer.action === "stop") {
+            this.emit({ type: "discussion_end", reason: "human_stop" });
+            break;
+          }
+          const guidance = steer.message?.trim();
+          if (guidance) {
+            this.state.messages.push({
+              speaker: "human",
+              speakerName: "\u4E3B\u6301\u4EBA (You)",
+              content: guidance,
+              timestamp: /* @__PURE__ */ new Date()
+            });
+            this.emit({ type: "human_steer", message: guidance });
+          }
         }
       }
     } catch (err) {
@@ -431,20 +474,33 @@ ${content}`);
     enableTools: mode === "task",
     maxToolRoundsPerTurn: mode === "task" ? options.taskRounds ?? 30 : void 0,
     context,
-    contextFiles: contextFileNames.length > 0 ? contextFileNames : void 0
+    contextFiles: contextFileNames.length > 0 ? contextFileNames : void 0,
+    humanSteer: options.steer === true,
+    voteConverge: options.vote === true
   };
   if (mode === "discuss") {
     if (options.distributed) {
       await runDistributedDiscussion(config, providers, options.topic, options.port ?? 9527);
     } else {
-      await runDiscussion(config, providers, options.topic);
+      const state = await runDiscussion(config, providers, options.topic);
+      if (options.save !== false && state.messages.length > 0) {
+        try {
+          const { persistDiscussion } = await import("./persist-3EBOLHFZ.js");
+          const { path } = await persistDiscussion(state, configManager, defaultProvider, defaultModel);
+          console.log(chalk.dim(`
+  \u{1F4BE} Saved to history \u2014 open it in the Web UI and hit \u{1F3AC} to replay.
+     ${path}`));
+        } catch (err) {
+          console.error(chalk.yellow(`  \u26A0 Could not save discussion: ${err.message}`));
+        }
+      }
     }
   } else if (mode === "task") {
     await runTaskMode(config, providers, configManager, options.topic);
   }
 }
 async function runTaskMode(config, providers, configManager, topic) {
-  const { TaskOrchestrator } = await import("./task-orchestrator-BGQBNKAI.js");
+  const { TaskOrchestrator } = await import("./task-orchestrator-AXSS7ROD.js");
   const orchestrator = new TaskOrchestrator(config, providers, configManager);
   let interrupted = false;
   const onSigint = () => {
@@ -480,7 +536,7 @@ async function runTaskMode(config, providers, configManager, topic) {
   }
 }
 async function runDistributedDiscussion(config, providers, topic, port) {
-  const { HubServer } = await import("./hub-server-VPXCBWLA.js");
+  const { HubServer } = await import("./hub-server-OH7AYQIW.js");
   const hub = new HubServer(config, providers, port);
   let interrupted = false;
   const onSigint = () => {
@@ -506,6 +562,23 @@ async function runDiscussion(config, providers, topic) {
   assignRoleColors(config.roles);
   const orchestrator = new DiscussionOrchestrator(config, providers);
   orchestrator.onEvent = renderHubEvent;
+  if (config.humanSteer) {
+    const { createInterface } = await import("readline");
+    orchestrator.onRoundReview = async ({ round, maxRounds }) => {
+      const rl = createInterface({ input: process.stdin, output: process.stdout });
+      const answer = await new Promise((resolve) => {
+        rl.question(
+          chalk.cyan(`
+  \u{1F9ED} Round ${round}/${maxRounds} done. Steer next round? `) + chalk.dim("[Enter=continue \xB7 type guidance \xB7 /stop=end] "),
+          resolve
+        );
+      });
+      rl.close();
+      const t = answer.trim();
+      if (t === "/stop" || t.toLowerCase() === "stop") return { action: "stop" };
+      return { action: "continue", message: t || void 0 };
+    };
+  }
   let interrupted = false;
   const onSigint = () => {
     if (interrupted) {
@@ -518,10 +591,11 @@ async function runDiscussion(config, providers, topic) {
   process.on("SIGINT", onSigint);
   renderHubBanner(topic, config.roles, config.maxRounds ?? 10, config.contextFiles);
   try {
-    await orchestrator.run(topic);
+    return await orchestrator.run(topic);
   } catch (err) {
     console.error(`
   \u2717 Hub error: ${err.message}`);
+    return orchestrator.getState();
   } finally {
     process.removeListener("SIGINT", onSigint);
   }

package/dist/{hub-server-VPXCBWLA.js → hub-server-OH7AYQIW.js}

@@ -11,7 +11,7 @@ import {
   renderRoundHeader,
   renderSummary,
   renderUserInterrupt
-} from "./chunk-M4GJOBWN.js";
+} from "./chunk-O6MLS5QO.js";
 import "./chunk-PDX44BCA.js";
 
 // src/hub/hub-server.ts

package/dist/index.js

@@ -6,13 +6,11 @@ import {
 import {
   McpManager,
   SNAPSHOT_PROMPT,
-  SessionManager,
   SkillManager,
   autoTrimSessionIfNeeded,
   clearDevState,
   computeCost,
   formatCost,
-  getContentText,
   getPricing,
   loadDevState,
   parseSimpleYaml,
@@ -20,12 +18,16 @@ import {
   saveDevState,
   sessionHasMeaningfulContent,
   setupProxy
-} from "./chunk-EIIMBVXN.js";
+} from "./chunk-CIZQZ7CC.js";
+import {
+  SessionManager,
+  getContentText
+} from "./chunk-TOTEUETI.js";
 import {
   getConfigDirUsage,
   listRecentCrashes,
   writeCrashLog
-} from "./chunk-TURORFH2.js";
+} from "./chunk-D6GJTJQH.js";
 import {
   CONTENT_ONLY_STREAM_REMINDER,
   HALLUCINATION_CORRECTION_MESSAGE,
@@ -46,7 +48,7 @@ import {
 } from "./chunk-AIZOARZY.js";
 import {
   ConfigManager
-} from "./chunk-UWW3EWER.js";
+} from "./chunk-IBBYW6PM.js";
 import {
   ToolExecutor,
   ToolRegistry,
@@ -65,16 +67,16 @@ import {
   spawnAgentContext,
   theme,
   undoStack
-} from "./chunk-OP3I24WL.js";
+} from "./chunk-E5ICQT3P.js";
 import "./chunk-HDSKW7Q3.js";
 import "./chunk-ZWVIDFGY.js";
-import "./chunk-OT2HLGSO.js";
+import "./chunk-JOJRBV2K.js";
 import {
   getStatsSnapshot,
   getTopFailingTools,
   getTopUsedTools,
   installFlushOnExit
-} from "./chunk-EYJQJZJ6.js";
+} from "./chunk-NFRTSL3N.js";
 import "./chunk-NXXNLLSG.js";
 import {
   AuthError,
@@ -102,7 +104,7 @@ import {
   SKILLS_DIR_NAME,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-D62BVFP7.js";
+} from "./chunk-B3LFGPU2.js";
 import {
   formatGitContextForPrompt,
   getGitContext,
@@ -112,13 +114,15 @@ import {
   fileCheckpoints
 } from "./chunk-4BKXL7SM.js";
 import {
-  DEFAULT_PATTERNS,
   buildChatIndex,
   clearChatIndex,
   getChatIndexStatus,
-  scanString,
   searchChatMemory
-} from "./chunk-RXM76HB7.js";
+} from "./chunk-U5MY24UZ.js";
+import {
+  DEFAULT_PATTERNS,
+  scanString
+} from "./chunk-SLSWPBK3.js";
 import "./chunk-KHYD3WXE.js";
 import "./chunk-VNNYHW6N.js";
 import "./chunk-OVWE4E46.js";
@@ -1769,7 +1773,7 @@ No tools match "${filter}".
           const { join: join6 } = await import("path");
           const { existsSync: existsSync6 } = await import("fs");
           const { getGitRoot: getGitRoot2 } = await import("./git-context-7KIP4X2V.js");
-          const { MCP_PROJECT_CONFIG_NAME: MCP_PROJECT_CONFIG_NAME2 } = await import("./constants-43EVHE2E.js");
+          const { MCP_PROJECT_CONFIG_NAME: MCP_PROJECT_CONFIG_NAME2 } = await import("./constants-DQ5VJOGS.js");
           const { approveProject, hashMcpFile } = await import("./project-trust-IFM7FXEV.js");
           const cwd = process.cwd();
           const projectRoot = getGitRoot2(cwd) ?? cwd;
@@ -2830,7 +2834,7 @@ ${hint}` : "")
       usage: "/test [command|filter]",
       async execute(args, ctx) {
         try {
-          const { executeTests } = await import("./run-tests-EYZ2JZ4X.js");
+          const { executeTests } = await import("./run-tests-5KWCHBQS.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {
@@ -5560,7 +5564,7 @@ Session '${this.resumeSessionId}' not found.
     })();
     void (async () => {
       try {
-        const { getChatIndexStatus: getChatIndexStatus2, buildChatIndex: buildChatIndex2 } = await import("./chat-index-LUQWWLKO.js");
+        const { getChatIndexStatus: getChatIndexStatus2, buildChatIndex: buildChatIndex2 } = await import("./chat-index-IF4EINLQ.js");
         const initial = getChatIndexStatus2();
         this.chatMemoryStatus = {
           exists: initial.exists,
@@ -7530,7 +7534,7 @@ program.command("web").description("Start Web UI server with browser-based chat
     console.error("Error: Invalid port number. Must be between 1 and 65535.");
     process.exit(1);
   }
-  const { startWebServer } = await import("./server-OIYBFKS2.js");
+  const { startWebServer } = await import("./server-35OQV62B.js");
   await startWebServer({ port, host: options.host });
 });
 program.command("user [action] [username]").description("Manage Web UI users (list | create <name> | delete <name> | reset-password <name> | logout-all <name> | migrate <name>)").action(async (action, username) => {
@@ -7697,12 +7701,12 @@ program.command("sessions").description("List recent conversation sessions").opt
   console.log(footer + "\n");
 });
 program.command("doctor").description("Health check: API keys, config, MCP, recent crashes, tool usage, disk usage").option("--json", "Output as JSON (for scripting)").option("--reset-stats", "Reset accumulated tool usage statistics").action(async (options) => {
-  const { runDoctorCli } = await import("./doctor-cli-ZT674MCQ.js");
+  const { runDoctorCli } = await import("./doctor-cli-TSCI4ORL.js");
   await runDoctorCli({ json: !!options.json, resetStats: !!options.resetStats });
 });
 program.command("batch <action> [arg] [arg2]").description("Anthropic Message Batches: submit | list | status <id> | results <id> [out] | cancel <id>").option("--dry-run", "Parse and validate input without submitting (submit only)").action(async (action, arg, arg2, options) => {
   try {
-    const batch = await import("./batch-DBRN4MCC.js");
+    const batch = await import("./batch-LS3IJVBK.js");
     switch (action) {
       case "submit":
         if (!arg) {
@@ -7745,7 +7749,7 @@ program.command("batch <action> [arg] [arg2]").description("Anthropic Message Ba
   }
 });
 program.command("mcp-serve").description("Start an MCP server over STDIO, exposing aicli's built-in tools to Claude Desktop / Cursor / other MCP clients").option("--allow-destructive", "Allow bash / run_interactive / task_create (always destructive in MCP mode)").option("--allow-outside-cwd", "Allow tool path arguments to escape the sandbox root \u2014 disabled by default").option("--tools <list>", "Comma-separated whitelist of tools to expose (default: all eligible tools)").option("--cwd <path>", "Working directory AND sandbox root (default: current directory)").action(async (options) => {
-  const { startMcpServer } = await import("./server-MQWFO2GJ.js");
+  const { startMcpServer } = await import("./server-DVIP7NLW.js");
   await startMcpServer({
     allowDestructive: !!options.allowDestructive,
     allowOutsideCwd: !!options.allowOutsideCwd,
@@ -7754,7 +7758,7 @@ program.command("mcp-serve").description("Start an MCP server over STDIO, exposi
   });
 });
 program.command("ci").description("Headless PR review (code + security) \u2014 reads git/gh diff, optionally posts to PR. Designed for GitHub Actions.").option("--pr <num>", "PR number; diff fetched via `gh pr diff <num>`", (v) => parseInt(v, 10)).option("--base <ref>", "Base ref for `git diff <ref>...HEAD` (ignored when --pr set)").option("--post", "Post review as a PR comment (requires gh CLI + GH_TOKEN, needs --pr)").option("--no-update", "Always create a new comment instead of updating the previous aicli review").option("--skip-code", "Skip the code review section").option("--skip-security", "Skip the security review section").option("--detailed", "Use the detailed code-review prompt").option("--max-diff <n>", "Max diff chars sent to the model (default 30000)", (v) => parseInt(v, 10)).option("--provider <id>", "Override provider (default: config.defaultProvider)").option("--model <id>", "Override model").option("--dry-run", "Print result to stdout instead of posting (overrides --post)").action(async (options) => {
-  const { runCi } = await import("./ci-UEEUSELV.js");
+  const { runCi } = await import("./ci-34ZQH43L.js");
   const result = await runCi({
     pr: options.pr,
     base: options.base,
@@ -7828,6 +7832,9 @@ program.command("help").description("Show a comprehensive guide to all aicli fea
     `    ${Y}--preset <name>${R}                Role preset (tech-review/brainstorm/code-review/debate)`,
     `    ${Y}--roles <file>${R}                 Custom roles JSON file`,
     `    ${Y}--mix [providers]${R}              Mixed multi-model: spread providers across roles (e.g. claude,openai,deepseek)`,
+    `    ${Y}--steer${R}                        Human-in-the-loop: steer/stop between rounds`,
+    `    ${Y}--vote${R}                         Convergence voting: 2/3 [CONVERGED] majority ends early`,
+    `    ${Y}--no-save${R}                      Don't persist discussion to history (saved + replayable by default)`,
     `    ${Y}-c, --context <file>${R}           Inject context doc (repeatable: -c a.md -c b.md)`,
     `    ${Y}--task${R}                         Task mode: agents plan & write code with tools`,
     `    ${Y}--distributed${R}                  Distributed mode (WebSocket, multi-process)`,
@@ -7885,7 +7892,7 @@ program.command("help").description("Show a comprehensive guide to all aicli fea
   ];
   console.log(lines.join("\n"));
 });
-program.command("hub [topic]").description("Start multi-agent hub (discuss / brainstorm with multiple AI roles)").option("--preset <name>", "Use a built-in role preset (default: tech-review)").option("--roles <file>", "Load roles from a JSON file").option("--provider <name>", "Override default AI provider").option("-m, --model <name>", "Override default model").option("--mix [providers]", "Mixed multi-model: spread configured providers across roles (or --mix claude,openai,deepseek)").option("--max-rounds <n>", "Max discussion rounds (default: 10)").option("--presets", "List available role presets").option("--task", "Task mode: plan \u2192 approve \uFFFD\uFFFD execute with tools (agents write code)").option("--task-rounds <n>", "Max tool-call rounds per task (default: 30)").option("-c, --context <file>", "Inject context document (repeatable: -c a.md -c b.md)", (val, prev) => prev.concat(val), []).option("--distributed", "Start WebSocket server so remote aicli instances can join as agents").option("--port <n>", "WebSocket port for distributed mode (default: 9527)", "9527").action(async (topic, options) => {
+program.command("hub [topic]").description("Start multi-agent hub (discuss / brainstorm with multiple AI roles)").option("--preset <name>", "Use a built-in role preset (default: tech-review)").option("--roles <file>", "Load roles from a JSON file").option("--provider <name>", "Override default AI provider").option("-m, --model <name>", "Override default model").option("--mix [providers]", "Mixed multi-model: spread configured providers across roles (or --mix claude,openai,deepseek)").option("--steer", "Human-in-the-loop: pause between rounds to inject guidance or stop (discuss mode)").option("--vote", "Convergence voting: agents may [CONVERGED]; 2/3 majority ends early (discuss mode)").option("--no-save", "Do not persist the discussion to ~/.aicli/history (discuss mode saves by default)").option("--max-rounds <n>", "Max discussion rounds (default: 10)").option("--presets", "List available role presets").option("--task", "Task mode: plan \u2192 approve \uFFFD\uFFFD execute with tools (agents write code)").option("--task-rounds <n>", "Max tool-call rounds per task (default: 30)").option("-c, --context <file>", "Inject context document (repeatable: -c a.md -c b.md)", (val, prev) => prev.concat(val), []).option("--distributed", "Start WebSocket server so remote aicli instances can join as agents").option("--port <n>", "WebSocket port for distributed mode (default: 9527)", "9527").action(async (topic, options) => {
   const config = new ConfigManager();
   const registry = new ProviderRegistry();
   await registry.initialize(
@@ -7896,7 +7903,7 @@ program.command("hub [topic]").description("Start multi-agent hub (discuss / bra
     }),
     config.get("customProviders")
   );
-  const { startHub } = await import("./hub-MDQNJOMV.js");
+  const { startHub } = await import("./hub-ZILVZWI2.js");
   await startHub(
     {
       topic: topic ?? "",
@@ -7905,6 +7912,9 @@ program.command("hub [topic]").description("Start multi-agent hub (discuss / bra
       provider: options.provider,
       model: options.model,
       mix: options.mix,
+      steer: options.steer === true,
+      vote: options.vote === true,
+      save: options.save !== false,
       mode: options.task === true ? "task" : void 0,
       maxRounds: options.maxRounds ? parseInt(options.maxRounds, 10) : void 0,
       listPresets: options.presets === true,

package/dist/persist-3EBOLHFZ.js

@@ -0,0 +1,52 @@
+#!/usr/bin/env node
+import {
+  SessionManager
+} from "./chunk-TOTEUETI.js";
+import "./chunk-SLSWPBK3.js";
+import "./chunk-PDX44BCA.js";
+
+// src/hub/persist.ts
+import { join } from "path";
+function discussionToMessages(state) {
+  const out = [];
+  const t0 = state.messages[0]?.timestamp ?? /* @__PURE__ */ new Date();
+  out.push({ role: "user", content: `\u{1F3DB} Topic: ${state.topic}`, timestamp: t0 });
+  for (const m of state.messages) {
+    if (m.speaker === "system") {
+      out.push({ role: "system", content: m.content, timestamp: m.timestamp });
+      continue;
+    }
+    if (m.speaker === "human") {
+      out.push({ role: "user", content: `\u{1F9ED} ${m.speakerName}: ${m.content}`, timestamp: m.timestamp });
+      continue;
+    }
+    if (m.passed || !m.content.trim()) continue;
+    const tag = m.converged ? " \u2713converged" : "";
+    out.push({
+      role: "assistant",
+      content: `**${m.speakerName}** (${m.speaker})${tag}
+
+${m.content}`,
+      timestamp: m.timestamp
+    });
+  }
+  if (state.summary && state.summary.trim()) {
+    out.push({ role: "assistant", content: `\u{1F4CB} **Summary**
+
+${state.summary}`, timestamp: /* @__PURE__ */ new Date() });
+  }
+  return out;
+}
+async function persistDiscussion(state, config, defaultProvider, defaultModel) {
+  const sm = new SessionManager(config);
+  const session = sm.createSession(defaultProvider, defaultModel);
+  session.messages = discussionToMessages(state);
+  session.title = `[Hub] ${state.topic.slice(0, 48)}`.replace(/\n/g, " ");
+  session.titleAiGenerated = true;
+  await sm.save();
+  return { id: session.id, path: join(config.getHistoryDir(), `${session.id}.json`) };
+}
+export {
+  discussionToMessages,
+  persistDiscussion
+};

package/dist/{run-tests-DCT5LWBB.js → run-tests-5CJRMOMI.js}

@@ -1,7 +1,7 @@
 import {
   executeTests,
   runTestsTool
-} from "./chunk-LJPB4ZER.js";
+} from "./chunk-JXSWY54M.js";
 import "./chunk-3RG5ZIWI.js";
 export {
   executeTests,