jinzd-ai-cli 0.4.188 → 0.4.190

package/dist/{chunk-KIGVJVX4.js → chunk-W7UKO3PS.js}

@@ -3,9 +3,12 @@ import {
   embed,
   embedOne
 } from "./chunk-JV5N65KN.js";
+import {
+  atomicWriteFileSync
+} from "./chunk-6BUTA5VW.js";
 
 // src/memory/chat-index.ts
-import fs2 from "fs";
+import fs from "fs";
 import path from "path";
 import os from "os";
 import crypto from "crypto";
@@ -118,41 +121,6 @@ function redactJson(value, options) {
   return { value: redacted, hits: allHits };
 }
 
-// src/core/atomic-write.ts
-import fs from "fs";
-var RETRYABLE_CODES = /* @__PURE__ */ new Set(["EPERM", "EACCES", "EBUSY"]);
-var MAX_RENAME_RETRIES = 10;
-function sleepSync(ms) {
-  const sab = new Int32Array(new SharedArrayBuffer(4));
-  Atomics.wait(sab, 0, 0, ms);
-}
-function atomicWriteFileSync(target, data) {
-  const tmp = `${target}.tmp`;
-  fs.writeFileSync(tmp, data);
-  for (let attempt = 0; ; attempt++) {
-    try {
-      fs.renameSync(tmp, target);
-      return;
-    } catch (err) {
-      const code = err.code;
-      if (attempt < MAX_RENAME_RETRIES && code && RETRYABLE_CODES.has(code)) {
-        sleepSync(5 * (attempt + 1));
-        continue;
-      }
-      try {
-        fs.writeFileSync(target, data);
-        try {
-          fs.unlinkSync(tmp);
-        } catch {
-        }
-        return;
-      } catch {
-        throw err;
-      }
-    }
-  }
-}
-
 // src/memory/chat-index.ts
 var MEMORY_DIR_NAME = "memory-index";
 var CHUNKS_FILE = "chunks.json";
@@ -240,7 +208,7 @@ function writeVectorsFile(chunks, vectors) {
     );
   }
   const dir = memoryIndexDir();
-  fs2.mkdirSync(dir, { recursive: true });
+  fs.mkdirSync(dir, { recursive: true });
   const totalBytes = VEC_HEADER_BYTES + vectors.byteLength;
   const buf = Buffer.alloc(totalBytes);
   buf.writeUInt32LE(VEC_MAGIC, 0);
@@ -252,10 +220,10 @@ function writeVectorsFile(chunks, vectors) {
 }
 function readVectorsFile(expectedCount) {
   const p = vectorsPath();
-  if (!fs2.existsSync(p)) return null;
+  if (!fs.existsSync(p)) return null;
   let buf;
   try {
-    buf = fs2.readFileSync(p);
+    buf = fs.readFileSync(p);
   } catch {
     return null;
   }
@@ -274,14 +242,14 @@ function readVectorsFile(expectedCount) {
 }
 function writeIndexFile(idx) {
   const dir = memoryIndexDir();
-  fs2.mkdirSync(dir, { recursive: true });
+  fs.mkdirSync(dir, { recursive: true });
   atomicWriteFileSync(chunksPath(), JSON.stringify(idx, null, 2));
 }
 function readIndexFile() {
   const p = chunksPath();
-  if (!fs2.existsSync(p)) return null;
+  if (!fs.existsSync(p)) return null;
   try {
-    const raw = fs2.readFileSync(p, "utf-8");
+    const raw = fs.readFileSync(p, "utf-8");
     const data = JSON.parse(raw);
     if (data.version !== 1) return null;
     return data;
@@ -298,24 +266,24 @@ function loadChatIndex() {
 }
 function clearChatIndex() {
   try {
-    if (fs2.existsSync(chunksPath())) fs2.unlinkSync(chunksPath());
+    if (fs.existsSync(chunksPath())) fs.unlinkSync(chunksPath());
   } catch {
   }
   try {
-    if (fs2.existsSync(vectorsPath())) fs2.unlinkSync(vectorsPath());
+    if (fs.existsSync(vectorsPath())) fs.unlinkSync(vectorsPath());
   } catch {
   }
 }
 function listSessionFiles() {
   const dir = historyDir();
-  if (!fs2.existsSync(dir)) return [];
+  if (!fs.existsSync(dir)) return [];
   const out = [];
-  for (const name of fs2.readdirSync(dir)) {
+  for (const name of fs.readdirSync(dir)) {
     if (!name.endsWith(".json")) continue;
     const id = name.replace(/\.json$/, "");
     const p = path.join(dir, name);
     try {
-      const st = fs2.statSync(p);
+      const st = fs.statSync(p);
       out.push({ id, path: p, mtime: st.mtimeMs });
     } catch {
     }
@@ -324,7 +292,7 @@ function listSessionFiles() {
 }
 function readSession(p) {
   try {
-    const data = JSON.parse(fs2.readFileSync(p, "utf-8"));
+    const data = JSON.parse(fs.readFileSync(p, "utf-8"));
     if (!data.id || !Array.isArray(data.messages)) return null;
     return data;
   } catch {
@@ -467,8 +435,8 @@ function getChatIndexStatus() {
     chunksFileSizeBytes: 0
   };
   try {
-    if (fs2.existsSync(vectorsPath())) status.vecFileSizeBytes = fs2.statSync(vectorsPath()).size;
-    if (fs2.existsSync(chunksPath())) status.chunksFileSizeBytes = fs2.statSync(chunksPath()).size;
+    if (fs.existsSync(vectorsPath())) status.vecFileSizeBytes = fs.statSync(vectorsPath()).size;
+    if (fs.existsSync(chunksPath())) status.chunksFileSizeBytes = fs.statSync(chunksPath()).size;
   } catch {
   }
   const idx = readIndexFile();

package/dist/{chunk-Q7SB3R25.js → chunk-X4J2DZB5.js}

@@ -8,7 +8,7 @@ import {
   CONFIG_FILE_NAME,
   HISTORY_DIR_NAME,
   PLUGINS_DIR_NAME
-} from "./chunk-UK6E2563.js";
+} from "./chunk-4KMDKDAK.js";
 
 // src/config/config-manager.ts
 import { readFileSync, writeFileSync, existsSync, mkdirSync } from "fs";

package/dist/{chunk-A3I5WP5L.js → chunk-YUBD7T2R.js}

@@ -3,9 +3,12 @@ import {
   computeCost,
   formatCost
 } from "./chunk-V37XOYOE.js";
+import {
+  atomicWriteFileSync
+} from "./chunk-IW3Q7AE5.js";
 
 // src/core/cost-tracker.ts
-import { existsSync, readFileSync, writeFileSync, renameSync } from "fs";
+import { existsSync, readFileSync } from "fs";
 import { join } from "path";
 var CostTracker = class {
   filePath;
@@ -45,9 +48,7 @@ var CostTracker = class {
       // shallow copy — records are plain data
     };
     try {
-      const tmp = this.filePath + ".tmp";
-      writeFileSync(tmp, JSON.stringify(snapshot, null, 2), "utf-8");
-      renameSync(tmp, this.filePath);
+      atomicWriteFileSync(this.filePath, JSON.stringify(snapshot, null, 2));
       this.dirty = false;
     } catch (err) {
       console.error("[cost-tracker] Failed to persist cost history:", err);

package/dist/{chunk-ODAAPNSL.js → chunk-ZN5IEPSS.js}

@@ -6,7 +6,7 @@ import { platform } from "os";
 import chalk from "chalk";
 
 // src/core/constants.ts
-var VERSION = "0.4.188";
+var VERSION = "0.4.190";
 var APP_NAME = "ai-cli";
 var CONFIG_DIR_NAME = ".aicli";
 var CONFIG_FILE_NAME = "config.json";

package/dist/{ci-42ZBP2SY.js → ci-X24WFUDF.js}

@@ -10,12 +10,11 @@ import {
 import "./chunk-HIU2SH4V.js";
 import {
   ConfigManager
-} from "./chunk-Q7SB3R25.js";
+} from "./chunk-X4J2DZB5.js";
 import "./chunk-TZQHYZKT.js";
 import {
   VERSION
-} from "./chunk-UK6E2563.js";
-import "./chunk-PDX44BCA.js";
+} from "./chunk-4KMDKDAK.js";
 
 // src/cli/ci.ts
 import { execFileSync, execSync } from "child_process";
@@ -76,7 +75,7 @@ function countSeverity(md) {
 async function runOnePrompt(registry, providerId, modelId, prompt) {
   const provider = registry.get(providerId);
   const resp = await provider.chat({
-    messages: [{ role: "user", content: prompt }],
+    messages: [{ role: "user", content: prompt, timestamp: /* @__PURE__ */ new Date() }],
     model: modelId,
     stream: false,
     temperature: 0.3,
@@ -150,9 +149,16 @@ async function runCi(opts) {
   const { diff: trimmedDiff, truncated } = truncateDiff(diff, maxDiff);
   const gitCtx = buildGitContextStr(opts);
   const config = new ConfigManager();
-  await config.load();
-  const registry = new ProviderRegistry(config);
-  await registry.initialize();
+  const registry = new ProviderRegistry();
+  await registry.initialize(
+    (id) => config.getApiKey(id),
+    (id) => ({
+      baseUrl: config.get("customBaseUrls")[id],
+      timeout: config.get("timeouts")[id],
+      proxy: config.get("proxy")
+    }),
+    config.get("customProviders")
+  );
   const providerId = opts.provider ?? config.getDefaultProvider();
   if (!registry.has(providerId)) {
     return {

package/dist/{constants-NCWVAAI7.js → constants-4QBBHLU4.js}

@@ -36,8 +36,7 @@ import {
   TEST_TIMEOUT,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-UK6E2563.js";
-import "./chunk-PDX44BCA.js";
+} from "./chunk-4KMDKDAK.js";
 export {
   AGENTIC_BEHAVIOR_GUIDELINE,
   APP_NAME,

package/dist/{doctor-cli-R3SWTL5Z.js → doctor-cli-EUOCY7VN.js}

@@ -2,7 +2,7 @@
 import {
   getConfigDirUsage,
   listRecentCrashes
-} from "./chunk-MUQZOUV5.js";
+} from "./chunk-UVW3WLSV.js";
 import {
   ProviderRegistry
 } from "./chunk-IQ7JE43O.js";
@@ -11,18 +11,18 @@ import {
   getTopFailingTools,
   getTopUsedTools,
   resetStats
-} from "./chunk-DFQSQQEU.js";
+} from "./chunk-KHS7RSGR.js";
 import "./chunk-HIU2SH4V.js";
 import {
   ConfigManager
-} from "./chunk-Q7SB3R25.js";
+} from "./chunk-X4J2DZB5.js";
 import "./chunk-TZQHYZKT.js";
 import {
   DEV_STATE_FILE_NAME,
   MEMORY_FILE_NAME,
   VERSION
-} from "./chunk-UK6E2563.js";
-import "./chunk-PDX44BCA.js";
+} from "./chunk-4KMDKDAK.js";
+import "./chunk-IW3Q7AE5.js";
 
 // src/diagnostics/doctor-cli.ts
 import { existsSync, statSync } from "fs";

package/dist/electron-server.js

@@ -3,7 +3,7 @@ import {
 } from "./chunk-SKET65WZ.js";
 import {
   indexProject
-} from "./chunk-SEFOKYYP.js";
+} from "./chunk-SQB66GP6.js";
 import {
   AGENTIC_BEHAVIOR_GUIDELINE,
   APP_NAME,
@@ -36,22 +36,24 @@ import {
   VERSION,
   buildUserIdentityPrompt,
   runTestsTool
-} from "./chunk-ODAAPNSL.js";
+} from "./chunk-ZN5IEPSS.js";
 import {
   hasSemanticIndex,
   semanticSearch
-} from "./chunk-YKVFZLSI.js";
+} from "./chunk-AEAYUKSY.js";
 import {
   loadIndex
-} from "./chunk-DQ2OHJNF.js";
-import "./chunk-D6U75FHP.js";
+} from "./chunk-RWM2GFRC.js";
+import "./chunk-IEQAE3QG.js";
 import {
   loadChatIndex,
   redactJson,
   searchChatMemory
-} from "./chunk-KIGVJVX4.js";
+} from "./chunk-W7UKO3PS.js";
 import "./chunk-JV5N65KN.js";
-import "./chunk-3RG5ZIWI.js";
+import {
+  atomicWriteFileSync
+} from "./chunk-6BUTA5VW.js";
 
 // src/web/server.ts
 import express from "express";
@@ -3765,7 +3767,7 @@ var ProviderRegistry = class {
 };
 
 // src/session/session-manager.ts
-import { readFileSync as readFileSync2, writeFileSync as writeFileSync2, existsSync as existsSync2, mkdirSync as mkdirSync2, readdirSync, unlinkSync, renameSync, openSync, readSync, closeSync } from "fs";
+import { readFileSync as readFileSync2, existsSync as existsSync2, mkdirSync as mkdirSync2, readdirSync, unlinkSync, openSync, readSync, closeSync } from "fs";
 import { join as join2 } from "path";
 import { v4 as uuidv4 } from "uuid";
 
@@ -4351,9 +4353,7 @@ var SessionManager = class {
     const opts = this.redactOptionsForSave();
     const { value: payload, hits } = redactJson(raw, opts);
     this.lastRedactionHits = hits.length;
-    const tmpPath = filePath + ".tmp";
-    writeFileSync2(tmpPath, JSON.stringify(payload, null, 2), "utf-8");
-    renameSync(tmpPath, filePath);
+    atomicWriteFileSync(filePath, JSON.stringify(payload, null, 2));
   }
   loadSession(id) {
     const filePath = join2(this.historyDir, `${id}.json`);
@@ -4541,7 +4541,7 @@ import { platform } from "os";
 import { resolve } from "path";
 
 // src/tools/undo-stack.ts
-import { readFileSync as readFileSync3, writeFileSync as writeFileSync3, unlinkSync as unlinkSync2, rmdirSync, existsSync as existsSync3 } from "fs";
+import { readFileSync as readFileSync3, writeFileSync as writeFileSync2, unlinkSync as unlinkSync2, rmdirSync, existsSync as existsSync3 } from "fs";
 var MAX_UNDO_DEPTH = 20;
 var UndoStack = class {
   stack = [];
@@ -4624,7 +4624,7 @@ var UndoStack = class {
           return { entry, result: `Deleted newly created file: ${entry.filePath}` };
         }
       } else {
-        writeFileSync3(entry.filePath, entry.previousContent, "utf-8");
+        writeFileSync2(entry.filePath, entry.previousContent, "utf-8");
         const lines = entry.previousContent.split("\n").length;
         return {
           entry,
@@ -5474,7 +5474,7 @@ ${content}`;
 };
 
 // src/tools/builtin/write-file.ts
-import { writeFileSync as writeFileSync5, appendFileSync, mkdirSync as mkdirSync4 } from "fs";
+import { writeFileSync as writeFileSync3, appendFileSync, mkdirSync as mkdirSync4 } from "fs";
 import { dirname as dirname3 } from "path";
 
 // src/tools/executor.ts
@@ -5876,7 +5876,7 @@ var theme = new Proxy(DARK_THEME, {
 });
 
 // src/diagnostics/tool-stats.ts
-import { existsSync as existsSync6, readFileSync as readFileSync5, writeFileSync as writeFileSync4, mkdirSync as mkdirSync3, renameSync as renameSync2 } from "fs";
+import { existsSync as existsSync6, readFileSync as readFileSync5, mkdirSync as mkdirSync3 } from "fs";
 import { join as join3, dirname as dirname2 } from "path";
 import { homedir as homedir3 } from "os";
 var STATS_FILE_NAME = "tool-stats.json";
@@ -5955,9 +5955,7 @@ function flush() {
   const path3 = statsFilePath();
   try {
     mkdirSync3(dirname2(path3), { recursive: true });
-    const tmp = path3 + ".tmp";
-    writeFileSync4(tmp, JSON.stringify(state, null, 2), "utf-8");
-    renameSync2(tmp, path3);
+    atomicWriteFileSync(path3, JSON.stringify(state, null, 2));
     dirty = false;
     pendingWrites = 0;
   } catch {
@@ -6613,13 +6611,13 @@ Do NOT split a long document into many write_file(append=true) calls. That patte
     if (appendMode) {
       appendFileSync(filePath, content, encoding);
     } else {
-      writeFileSync5(filePath, content, encoding);
+      writeFileSync3(filePath, content, encoding);
     }
     const lines = content.split("\n").length;
     const mode = appendMode ? "appended" : "written";
     void (async () => {
       try {
-        const { updateFile } = await import("./indexer-ISSNIFQY.js");
+        const { updateFile } = await import("./indexer-BMYUUDLH.js");
         await updateFile(process.cwd(), filePath);
       } catch {
       }
@@ -6629,7 +6627,7 @@ Do NOT split a long document into many write_file(append=true) calls. That patte
 };
 
 // src/tools/builtin/edit-file.ts
-import { readFileSync as readFileSync7, writeFileSync as writeFileSync6, existsSync as existsSync8 } from "fs";
+import { readFileSync as readFileSync7, writeFileSync as writeFileSync4, existsSync as existsSync8 } from "fs";
 
 // src/tools/builtin/patch-apply.ts
 function parseUnifiedDiff(patch) {
@@ -7028,7 +7026,7 @@ Note: Path can be absolute or relative to cwd.`,
       if (res.ok && res.appliedCount > 0 && res.content !== void 0) {
         undoStack.push(filePath, `edit_file (patch ${res.appliedCount}/${hunks.length}): ${filePath}`);
         fileCheckpoints.snapshot(filePath, ToolExecutor.currentMessageIndex);
-        writeFileSync6(filePath, res.content, encoding);
+        writeFileSync4(filePath, res.content, encoding);
       }
       return lines.join("\n");
     }
@@ -7062,7 +7060,7 @@ Note: Path can be absolute or relative to cwd.`,
       if (writeChanges) {
         undoStack.push(filePath, `edit_file (batch ${appliedCount}/${edits.length}): ${filePath}`);
         fileCheckpoints.snapshot(filePath, ToolExecutor.currentMessageIndex);
-        writeFileSync6(filePath, working, encoding);
+        writeFileSync4(filePath, working, encoding);
       }
       const lines = [];
       if (anyFailed && stopOnError) {
@@ -7100,7 +7098,7 @@ Please read the file first and use exact text.`;
       const label = res.info?.mode === "ignore_whitespace" ? "edit_file (ws-replace)" : res.info?.mode === "replace_all" ? "edit_file (replace_all)" : "edit_file (replace)";
       undoStack.push(filePath, `${label}: ${filePath}`);
       fileCheckpoints.snapshot(filePath, ToolExecutor.currentMessageIndex);
-      writeFileSync6(filePath, res.content, encoding);
+      writeFileSync4(filePath, res.content, encoding);
       if (res.info?.mode === "replace_all") {
         return `Successfully edited ${filePath}${modeLabel}
   Replaced: ${res.info.replacedCount} occurrence(s) of ${truncatePreview(oldStr)}
@@ -7124,7 +7122,7 @@ Please read the file first and use exact text.`;
       undoStack.push(filePath, `edit_file (insert): ${filePath}`);
       fileCheckpoints.snapshot(filePath, ToolExecutor.currentMessageIndex);
       lines.splice(afterLine, 0, content);
-      writeFileSync6(filePath, lines.join("\n"), encoding);
+      writeFileSync4(filePath, lines.join("\n"), encoding);
       return `Successfully inserted ${content.split("\n").length} line(s) after line ${afterLine} in ${filePath}`;
     }
     if (args["delete_from_line"] !== void 0) {
@@ -7140,7 +7138,7 @@ Please read the file first and use exact text.`;
       undoStack.push(filePath, `edit_file (delete): ${filePath}`);
       fileCheckpoints.snapshot(filePath, ToolExecutor.currentMessageIndex);
       const deleted = lines.splice(fromLine - 1, toLine - fromLine + 1);
-      writeFileSync6(filePath, lines.join("\n"), encoding);
+      writeFileSync4(filePath, lines.join("\n"), encoding);
       return `Successfully deleted lines ${fromLine}-${toLine} (${deleted.length} lines) from ${filePath}`;
     }
     throw new ToolError(
@@ -7985,6 +7983,8 @@ var webFetchTool = {
           redirect: "manual",
           // 手动控制重定向
           dispatcher
+          // dual undici-types：`dispatcher` 字段在 undici 与 @types/node 内置的
+          // undici-types 两份 RequestInit 间判不兼容，localized 转换。
         });
         if (r.status >= 300 && r.status < 400) {
           if (hop >= MAX_REDIRECTS) {
@@ -8329,7 +8329,7 @@ ${preamble}`;
 }
 
 // src/tools/builtin/save-last-response.ts
-import { writeFileSync as writeFileSync7, mkdirSync as mkdirSync5 } from "fs";
+import { writeFileSync as writeFileSync5, mkdirSync as mkdirSync5 } from "fs";
 import { dirname as dirname4 } from "path";
 var lastResponseStore = { content: "" };
 var saveLastResponseTool = {
@@ -8370,7 +8370,7 @@ Any of these triggers means use save_last_response, NOT write_file:
     }
     undoStack.push(filePath, `save_last_response: ${filePath}`);
     mkdirSync5(dirname4(filePath), { recursive: true });
-    writeFileSync7(filePath, content, "utf-8");
+    writeFileSync5(filePath, content, "utf-8");
     const lines = content.split("\n").length;
     return `File saved: ${filePath} (${lines} lines, ${content.length} bytes)`;
   }
@@ -11174,7 +11174,7 @@ import { existsSync as existsSync19, readFileSync as readFileSync13 } from "fs";
 import { join as join12 } from "path";
 
 // src/repl/dev-state.ts
-import { existsSync as existsSync18, readFileSync as readFileSync12, writeFileSync as writeFileSync8, unlinkSync as unlinkSync3, mkdirSync as mkdirSync9 } from "fs";
+import { existsSync as existsSync18, readFileSync as readFileSync12, writeFileSync as writeFileSync6, unlinkSync as unlinkSync3, mkdirSync as mkdirSync9 } from "fs";
 import { join as join11 } from "path";
 import { homedir as homedir6 } from "os";
 function getDevStatePath() {
@@ -11448,7 +11448,7 @@ function autoTrimSessionIfNeeded(session, sizeLimit = SESSION_SIZE_LIMIT) {
 }
 
 // src/web/session-handler.ts
-import { existsSync as existsSync21, readFileSync as readFileSync14, appendFileSync as appendFileSync3, writeFileSync as writeFileSync9, mkdirSync as mkdirSync10, readdirSync as readdirSync9, statSync as statSync8, createWriteStream, unlinkSync as unlinkSync4 } from "fs";
+import { existsSync as existsSync21, readFileSync as readFileSync14, appendFileSync as appendFileSync3, writeFileSync as writeFileSync7, mkdirSync as mkdirSync10, readdirSync as readdirSync9, statSync as statSync8, createWriteStream, unlinkSync as unlinkSync4 } from "fs";
 import { join as join15, resolve as resolve5, dirname as dirname5 } from "path";
 import { execSync as execSync3 } from "child_process";
 
@@ -12984,9 +12984,9 @@ This fresh stream has NO tools. Produce ONLY the document body: start with a mar
         this.send({
           type: "tool_call_result",
           callId: call.id,
-          result: summary,
-          isError: true,
-          endTime: Date.now()
+          toolName: call.name,
+          content: summary,
+          isError: true
         });
         return { content: "", summary, isError: true };
       }
@@ -12994,7 +12994,7 @@ This fresh stream has NO tools. Produce ONLY the document body: start with a mar
       if (pseudoMatch) {
         const cleaned = stripPseudoToolCalls(fullContent);
         if (looksLikeDocumentBody(cleaned)) {
-          writeFileSync9(saveToFile, cleaned, "utf-8");
+          writeFileSync7(saveToFile, cleaned, "utf-8");
           fullContent = cleaned;
           const lines = cleaned.split("\n").length;
           const bytes = Buffer.byteLength(cleaned, "utf-8");
@@ -13838,9 +13838,9 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
       case "index": {
         const sub = (args[0] ?? "status").toLowerCase();
         const root = process.cwd();
-        const { loadIndex: loadIndex2, clearIndex } = await import("./store-A3TZM6PS.js");
-        const { indexProject: indexProject2 } = await import("./indexer-ISSNIFQY.js");
-        const { loadVectorStore, clearVectorStore } = await import("./vector-store-PLDSXF3V.js");
+        const { loadIndex: loadIndex2, clearIndex } = await import("./store-VO37H6LS.js");
+        const { indexProject: indexProject2 } = await import("./indexer-BMYUUDLH.js");
+        const { loadVectorStore, clearVectorStore } = await import("./vector-store-JBAE6PS4.js");
         if (sub === "status") {
           const idx = loadIndex2(root);
           const vec = loadVectorStore(root);
@@ -13889,7 +13889,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
             message: `Building semantic index for ${idx.symbolCount} symbols\u2026 (first run downloads ~117 MB model)`
           });
           try {
-            const { rebuildSemanticIndex } = await import("./semantic-GJJWTI3A.js");
+            const { rebuildSemanticIndex } = await import("./semantic-FF6DDJI6.js");
             const stats = await rebuildSemanticIndex(root);
             const first = stats.modelFirstLoadMs ? ` (model load+first batch ${stats.modelFirstLoadMs}ms)` : "";
             this.send({
@@ -14037,7 +14037,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
         if (rewindSub === "list" || !rewindSub) {
           const lines = [`Conversation messages (${session.messages.length} total):
 `];
-          const cpIndices = (await import("./file-checkpoint-UHSMHCRU.js")).fileCheckpoints.getMessageIndices();
+          const cpIndices = (await import("./file-checkpoint-CGH6OJVI.js")).fileCheckpoints.getMessageIndices();
           for (let i = 0; i < session.messages.length; i++) {
             const m = session.messages[i];
             const text = getContentText(m.content).replace(/\n/g, " ").slice(0, 60);
@@ -14053,7 +14053,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
           this.send({ type: "error", message: `Invalid message number: ${rewindSub}. Range: 1-${session.messages.length}` });
           break;
         }
-        const { fileCheckpoints: fc } = await import("./file-checkpoint-UHSMHCRU.js");
+        const { fileCheckpoints: fc } = await import("./file-checkpoint-CGH6OJVI.js");
         const rewindRemoved = session.messages.length - rewindN;
         const rewindResult = fc.restoreToMessageIndex(rewindN);
         session.messages = session.messages.slice(0, rewindN);
@@ -14076,7 +14076,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
       case "test": {
         this.send({ type: "info", message: "\u{1F9EA} Running tests..." });
         try {
-          const { executeTests } = await import("./run-tests-IJYP6BMT.js");
+          const { executeTests } = await import("./run-tests-OTZE5CEN.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {
@@ -14105,7 +14105,7 @@ Use /init --force to overwrite.` });
           const projectInfo = this.scanProject(cwd);
           const prompt = this.buildInitPrompt(projectInfo, cwd);
           const content = await this.chatOnce(prompt, { temperature: 0.3, maxTokens: 4096 });
-          writeFileSync9(targetPath, content, "utf-8");
+          writeFileSync7(targetPath, content, "utf-8");
           this.send({ type: "info", message: `\u2713 Generated: ${targetPath} (${content.length} chars)
 Use /context reload to load it.` });
         } catch (err) {
@@ -14584,7 +14584,7 @@ Add .md files to create commands.` });
     const configDir = this.config.getConfigDir();
     const memPath = join15(configDir, MEMORY_FILE_NAME);
     try {
-      writeFileSync9(memPath, "", "utf-8");
+      writeFileSync7(memPath, "", "utf-8");
       this.send({ type: "info", message: "\u{1F5D1}\uFE0F Persistent memory cleared." });
     } catch (err) {
       this.send({ type: "error", message: `Failed to clear memory: ${err.message}` });
@@ -14600,7 +14600,7 @@ Add .md files to create commands.` });
       return;
     }
     try {
-      const { searchChatMemory: searchChatMemory2, loadChatIndex: loadChatIndex2 } = await import("./chat-index-WDMVP7BN.js");
+      const { searchChatMemory: searchChatMemory2, loadChatIndex: loadChatIndex2 } = await import("./chat-index-UBCWHBLR.js");
       const loaded = loadChatIndex2();
       if (!loaded || loaded.idx.chunks.length === 0) {
         this.send({ type: "memory_hits", query: q, hits: [], indexMissing: true });
@@ -14636,7 +14636,7 @@ Add .md files to create commands.` });
   }
   async handleMemoryStatus() {
     try {
-      const { getChatIndexStatus } = await import("./chat-index-WDMVP7BN.js");
+      const { getChatIndexStatus } = await import("./chat-index-UBCWHBLR.js");
       const s = getChatIndexStatus();
       this.send({
         type: "memory_status",
@@ -14661,7 +14661,7 @@ Add .md files to create commands.` });
         type: "info",
         message: full ? "\u{1F9E0} Rebuilding chat memory index (this may take a while on first run \u2014 ~117 MB embedder)." : "\u{1F9E0} Refreshing chat memory index (incremental)\u2026"
       });
-      const { buildChatIndex } = await import("./chat-index-WDMVP7BN.js");
+      const { buildChatIndex } = await import("./chat-index-UBCWHBLR.js");
       const stats = await buildChatIndex({
         full,
         onProgress: (p) => {
@@ -15060,7 +15060,7 @@ async function setupProxy(configProxy) {
 }
 
 // src/web/auth.ts
-import { existsSync as existsSync22, readFileSync as readFileSync15, writeFileSync as writeFileSync10, mkdirSync as mkdirSync11, readdirSync as readdirSync10, copyFileSync, renameSync as renameSync3, unlinkSync as unlinkSync5 } from "fs";
+import { existsSync as existsSync22, readFileSync as readFileSync15, writeFileSync as writeFileSync8, mkdirSync as mkdirSync11, readdirSync as readdirSync10, copyFileSync } from "fs";
 import { join as join16 } from "path";
 import { createHmac, randomBytes, timingSafeEqual, pbkdf2Sync } from "crypto";
 var USERS_FILE = "users.json";
@@ -15262,7 +15262,7 @@ var AuthManager = class {
     if (existsSync22(globalConfig)) {
       try {
         const content = readFileSync15(globalConfig, "utf-8");
-        writeFileSync10(join16(userDir, "config.json"), content, "utf-8");
+        writeFileSync8(join16(userDir, "config.json"), content, "utf-8");
       } catch {
       }
     }
@@ -15270,7 +15270,7 @@ var AuthManager = class {
     if (existsSync22(globalMemory)) {
       try {
         const content = readFileSync15(globalMemory, "utf-8");
-        writeFileSync10(join16(userDir, "memory.md"), content, "utf-8");
+        writeFileSync8(join16(userDir, "memory.md"), content, "utf-8");
       } catch {
       }
     }
@@ -15311,17 +15311,7 @@ var AuthManager = class {
   }
   saveDB(db) {
     mkdirSync11(this.baseDir, { recursive: true });
-    const tmp = `${this.usersFile}.tmp`;
-    try {
-      writeFileSync10(tmp, JSON.stringify(db, null, 2), "utf-8");
-      renameSync3(tmp, this.usersFile);
-    } catch (err) {
-      try {
-        unlinkSync5(tmp);
-      } catch {
-      }
-      throw err;
-    }
+    atomicWriteFileSync(this.usersFile, JSON.stringify(db, null, 2));
   }
   /** Legacy hash — kept only for migrating old users (v0.2.x) */
   hashPasswordLegacy(password, salt) {
@@ -15394,7 +15384,7 @@ async function startWebServer(options = {}) {
   const projectMcpResolved = mcpEnabled ? resolveProjectMcpPath() : null;
   let projectMcpServers = {};
   if (projectMcpResolved) {
-    const { checkTrust } = await import("./project-trust-EBGHD7LE.js");
+    const { checkTrust } = await import("./project-trust-MUG325AW.js");
     const verdict = checkTrust(config.getConfigDir(), projectMcpResolved);
     if (verdict.trusted) {
       projectMcpServers = loadProjectMcpConfig() ?? {};
@@ -15618,7 +15608,7 @@ async function startWebServer(options = {}) {
     }
   });
   app.get("/api/sessions/:id/replay", requireAuth, (req, res) => {
-    const id = req.params.id;
+    const id = String(req.params.id);
     if (!/^[a-f0-9-]{36}$/i.test(id)) {
       res.status(400).json({ error: "Invalid session id" });
       return;