jinzd-ai-cli 0.4.204 → 0.4.206

package/dist/{doctor-cli-KPUULUPS.js → doctor-cli-WKH7T4AW.js}

@@ -2,26 +2,26 @@
 import {
   getConfigDirUsage,
   listRecentCrashes
-} from "./chunk-T5RTPF2Q.js";
+} from "./chunk-KJHMRAJU.js";
 import {
   ProviderRegistry
-} from "./chunk-UZISJ3KZ.js";
+} from "./chunk-QMXC327F.js";
 import {
   getStatsSnapshot,
   getTopFailingTools,
   getTopUsedTools,
   resetStats
-} from "./chunk-JLZ5QA2I.js";
-import "./chunk-SMFRJCXB.js";
+} from "./chunk-2WV6AGHM.js";
+import "./chunk-XPBEJB27.js";
 import {
   ConfigManager
-} from "./chunk-BENRC3OO.js";
+} from "./chunk-TW47X5AO.js";
 import "./chunk-TZQHYZKT.js";
 import {
   DEV_STATE_FILE_NAME,
   MEMORY_FILE_NAME,
   VERSION
-} from "./chunk-SCQOEDVL.js";
+} from "./chunk-QNUVZO5X.js";
 import "./chunk-IW3Q7AE5.js";
 
 // src/diagnostics/doctor-cli.ts

package/dist/electron-server.js

@@ -36,7 +36,7 @@ import {
   VERSION,
   buildUserIdentityPrompt,
   runTestsTool
-} from "./chunk-26YWVRLT.js";
+} from "./chunk-BQIV4ZQT.js";
 import {
   hasSemanticIndex,
   semanticSearch
@@ -623,8 +623,8 @@ var BaseProvider = class {
    * 将 Message[] 转换为 OpenAI API 格式的消息数组。
    * content 为 string 时直接传递；为 MessageContentPart[] 时保留数组格式（vision 请求）。
    *
-   * 自动跳过 role='tool' 和带 toolCalls 的 assistant 消息——
-   * 这些是 v0.4.60+ 持久化的工具历史，由 _extraMessages 机制单独注入。
+   * 基类只提供降级格式：跳过 role='tool' 和带 toolCalls 的 assistant 消息。
+   * 需要完整工具历史 roundtrip 的 provider 应覆盖消息构造逻辑，例如 OpenAI-compatible provider。
    */
   normalizeMessages(messages) {
     return messages.filter((m) => m.role !== "tool" && !m.toolCalls).map((m) => ({ role: m.role, content: m.content }));
@@ -636,7 +636,14 @@ function isFileWriteTool(name) {
   return name === "write_file" || name === "edit_file" || name === "notebook_edit";
 }
 function getDangerLevel(toolName, args) {
-  if (toolName.startsWith("mcp__")) return "safe";
+  if (toolName.startsWith("mcp__")) {
+    const rawName = toolName.split("__").pop() ?? "";
+    const normalized = rawName.toLowerCase().replace(/[^a-z0-9]+/g, "_");
+    if (/^(read|get|list|search|find|query|fetch|status|describe|inspect|show|lookup)(?:_|$)/.test(normalized)) {
+      return "safe";
+    }
+    return "write";
+  }
   if (toolName === "bash") {
     const cmd = String(args["command"] ?? "");
     if (/\brm\s+[^\n]*(?:-\w*[rRfF]\w*|--recursive|--force)\b/.test(cmd)) return "destructive";
@@ -4725,7 +4732,7 @@ var SessionManager = class {
 // src/tools/builtin/bash.ts
 import { spawn } from "child_process";
 import { existsSync as existsSync4, readdirSync as readdirSync2, statSync } from "fs";
-import { platform } from "os";
+import { platform as platform2 } from "os";
 import { resolve } from "path";
 
 // src/tools/undo-stack.ts
@@ -4863,9 +4870,32 @@ function runWithSessionKey(sessionKey, fn) {
   return als.run({ sessionKey: key }, fn);
 }
 
-// src/tools/builtin/bash.ts
+// src/tools/win-shell.ts
+import { platform } from "os";
 var IS_WINDOWS = platform() === "win32";
-var SHELL = IS_WINDOWS ? "powershell.exe" : process.env["SHELL"] ?? "/bin/bash";
+var WIN_UTF8_PREAMBLE = "[Console]::OutputEncoding = [System.Text.Encoding]::UTF8; $OutputEncoding = [System.Text.Encoding]::UTF8; ";
+function shellInvocation(command) {
+  if (IS_WINDOWS) {
+    return {
+      shell: "powershell.exe",
+      args: ["-NoProfile", "-NonInteractive", "-Command", WIN_UTF8_PREAMBLE + command]
+    };
+  }
+  return { shell: process.env["SHELL"] ?? "/bin/bash", args: ["-c", command] };
+}
+function decodeWindowsBuffer(buf) {
+  const utf8 = buf.toString("utf-8");
+  if (!utf8.includes("\uFFFD")) return utf8;
+  try {
+    return new TextDecoder("gbk").decode(buf);
+  } catch {
+    return utf8;
+  }
+}
+
+// src/tools/builtin/bash.ts
+var IS_WINDOWS2 = platform2() === "win32";
+var SHELL = IS_WINDOWS2 ? "powershell.exe" : process.env["SHELL"] ?? "/bin/bash";
 var cwdBySession = /* @__PURE__ */ new Map();
 function getCwd() {
   const key = getCurrentSessionKey();
@@ -4882,7 +4912,7 @@ function setCwd(next) {
 var bashTool = {
   definition: {
     name: "bash",
-    description: IS_WINDOWS ? `Execute commands in PowerShell. Supports mkdir, ls, cat, python, etc.
+    description: IS_WINDOWS2 ? `Execute commands in PowerShell. Supports mkdir, ls, cat, python, etc.
 Important rules:
 1. Each bash call runs in an independent subprocess; cd commands do not persist. To run in a specific directory, use the cwd parameter, or combine commands: e.g. "cd mydir; ls" or "mkdir mydir; cd mydir; New-Item file.txt".
 2. If a command fails (returns an error or non-zero exit code), stop immediately, report the error to the user, and do not retry the same or similar commands.
@@ -4898,7 +4928,7 @@ Important rules:
     parameters: {
       command: {
         type: "string",
-        description: IS_WINDOWS ? `PowerShell command to execute. Combine multiple commands with semicolons, e.g.: "mkdir mydir; Set-Content mydir/file.txt 'content'"` : `${SHELL} command to execute. Combine multiple commands with &&, e.g.: "mkdir -p mydir && echo 'content' > mydir/file.txt"`,
+        description: IS_WINDOWS2 ? `PowerShell command to execute. Combine multiple commands with semicolons, e.g.: "mkdir mydir; Set-Content mydir/file.txt 'content'"` : `${SHELL} command to execute. Combine multiple commands with &&, e.g.: "mkdir -p mydir && echo 'content' > mydir/file.txt"`,
         required: true
       },
       cwd: {
@@ -4950,9 +4980,9 @@ Important rules:
       setCwd(resolved);
     }
     let actualCommand;
-    if (IS_WINDOWS) {
+    if (IS_WINDOWS2) {
       const fixedCommand = fixWindowsDeleteCommand(command);
-      actualCommand = `[Console]::OutputEncoding = [System.Text.Encoding]::UTF8; $OutputEncoding = [System.Text.Encoding]::UTF8; ${fixedCommand}`;
+      actualCommand = WIN_UTF8_PREAMBLE + fixedCommand;
     } else {
       actualCommand = command;
     }
@@ -4996,7 +5026,7 @@ Important rules:
       }
       updateCwdFromCommand(command, effectiveCwd);
       pushBashUndoEntries(beforeSnapshot, parsedTargetsBefore, effectiveCwd);
-      const result = Buffer.isBuffer(stdout) ? IS_WINDOWS ? decodeWindowsBuffer(stdout) : stdout.toString("utf-8") : String(stdout ?? "");
+      const result = Buffer.isBuffer(stdout) ? IS_WINDOWS2 ? decodeWindowsBuffer(stdout) : stdout.toString("utf-8") : String(stdout ?? "");
       return result || "(command completed with no output)";
     } catch (err) {
       pushBashUndoEntries(beforeSnapshot, parsedTargetsBefore, effectiveCwd);
@@ -5021,8 +5051,8 @@ How to recover (pick ONE \u2014 do NOT retry the same command):
           );
         }
         if ("status" in execErr && execErr.status !== void 0) {
-          const stderr = IS_WINDOWS && Buffer.isBuffer(execErr.stderr) ? decodeWindowsBuffer(execErr.stderr).trim() : execErr.stderr?.toString().trim() ?? "";
-          const stdout = IS_WINDOWS && Buffer.isBuffer(execErr.stdout) ? decodeWindowsBuffer(execErr.stdout).trim() : execErr.stdout?.toString().trim() ?? "";
+          const stderr = IS_WINDOWS2 && Buffer.isBuffer(execErr.stderr) ? decodeWindowsBuffer(execErr.stderr).trim() : execErr.stderr?.toString().trim() ?? "";
+          const stdout = IS_WINDOWS2 && Buffer.isBuffer(execErr.stdout) ? decodeWindowsBuffer(execErr.stdout).trim() : execErr.stdout?.toString().trim() ?? "";
           const combined = [stdout, stderr].filter(Boolean).join("\n");
           const hint = buildErrorHint(command, combined);
           throw new ToolError(
@@ -5056,23 +5086,14 @@ function fixWindowsDeleteCommand(command) {
     }
   );
 }
-function decodeWindowsBuffer(buf) {
-  const utf8 = buf.toString("utf-8");
-  if (!utf8.includes("\uFFFD")) return utf8;
-  try {
-    return new TextDecoder("gbk").decode(buf);
-  } catch {
-    return utf8;
-  }
-}
 function buildErrorHint(command, stderr) {
   const hints = [];
-  if (IS_WINDOWS && /\|\|/.test(command) && /(\|\||is not a valid argument|不是此版本中的有效|ParserError|Unexpected token)/i.test(stderr)) {
+  if (IS_WINDOWS2 && /\|\|/.test(command) && /(\|\||is not a valid argument|不是此版本中的有效|ParserError|Unexpected token)/i.test(stderr)) {
     hints.push(
       `Hint: PowerShell parses '||' as a pipeline operator (PS 5.x) or logical-or (PS 7+), it CANNOT be passed inline as SQL string concatenation. Workaround: write the SQL to a local .sql file with write_file, then 'scp' it to the remote host and run 'psql -f /tmp/x.sql'. Do NOT try to escape || or wrap the command differently \u2014 it will not work.`
     );
   }
-  if (IS_WINDOWS && /\bpython3\b/.test(command)) {
+  if (IS_WINDOWS2 && /\bpython3\b/.test(command)) {
     const trivialStderr = stderr.trim().length === 0 || /^[·\s]*exit 1\b/i.test(stderr.trim());
     if (/(not recognized|is not recognized|无法将.*识别)/i.test(stderr) || trivialStderr) {
       hints.push(
@@ -5080,27 +5101,27 @@ function buildErrorHint(command, stderr) {
       );
     }
   }
-  if (IS_WINDOWS && /^\s*ssh\b/.test(command) && /\\"/.test(command) && /(syntax error|ERROR:|ParserError|unexpected|parser|意外的|语法|不是此版本|所在位置\s+行)/i.test(stderr)) {
+  if (IS_WINDOWS2 && /^\s*ssh\b/.test(command) && /\\"/.test(command) && /(syntax error|ERROR:|ParserError|unexpected|parser|意外的|语法|不是此版本|所在位置\s+行)/i.test(stderr)) {
     hints.push(
       `Hint: SSH + nested quotes ("...\\"...\\"") is fragile across PS \u2192 ssh \u2192 remote-shell \u2192 psql layers. Use the file-based flow: (1) write_file locally to a .sql file, (2) 'scp x.sql root@host:/tmp/', (3) 'ssh root@host "sudo -u postgres psql -d <db> -f /tmp/x.sql"'. Or for remote-only SQL: 'ssh host "cat > /tmp/x.sql << \\'SQLEOF\\'\\n...\\nSQLEOF"' then run psql -f. Avoid inline psql -c with embedded quotes.`
     );
   }
-  if (IS_WINDOWS && /\bmkdir\b/.test(command) && /\s-p\b/.test(command) && /(已存在|already exists|ItemExistsUnauthorizedAccessError|exists)/i.test(stderr)) {
+  if (IS_WINDOWS2 && /\bmkdir\b/.test(command) && /\s-p\b/.test(command) && /(已存在|already exists|ItemExistsUnauthorizedAccessError|exists)/i.test(stderr)) {
     hints.push(
       `Hint: PowerShell's mkdir does not support the '-p' flag. When the directory already exists it exits with code 1. Use instead: New-Item -ItemType Directory -Force -Path <dir> ('-Force' silently succeeds even if the directory already exists, mimicking 'mkdir -p').`
     );
   }
-  if (IS_WINDOWS && /Remove-Item/i.test(command) && /cannot find path|no such file|exit 1/i.test(stderr || command)) {
+  if (IS_WINDOWS2 && /Remove-Item/i.test(command) && /cannot find path|no such file|exit 1/i.test(stderr || command)) {
     hints.push(
       `Hint: On Windows, "Remove-Item ... -ErrorAction SilentlyContinue" still makes the powershell process exit 1 when no files match (even though the error is silenced). Use Test-Path as a guard: @('tmp_a.sql','tmp_b.sql','tmp_c.csv') | Where-Object { Test-Path $_ } | Remove-Item -Force \u2014 Test-Path returns a bool without raising, so missing paths are filtered out and exit code is 0.`
     );
   }
-  if (IS_WINDOWS && /-(?:EA|ErrorAction)\s+(?:SilentlyContinue|Ignore)\b/i.test(command) && /\b(Get-ChildItem|Get-Item|Get-Content|gci|gi|gc|dir|ls)\b/i.test(command) && !/Remove-Item/i.test(command) && !/Test-Path/i.test(command) && /cannot find path|no such file|does not exist|exit 1|不存在|找不到/i.test(stderr || command)) {
+  if (IS_WINDOWS2 && /-(?:EA|ErrorAction)\s+(?:SilentlyContinue|Ignore)\b/i.test(command) && /\b(Get-ChildItem|Get-Item|Get-Content|gci|gi|gc|dir|ls)\b/i.test(command) && !/Remove-Item/i.test(command) && !/Test-Path/i.test(command) && /cannot find path|no such file|does not exist|exit 1|不存在|找不到/i.test(stderr || command)) {
     hints.push(
       `Hint: On Windows, "-ErrorAction SilentlyContinue" silences the error MESSAGE but does NOT change the exit code \u2014 the process still exits 1 when the path doesn't exist (because powershell.exe -NonInteractive flips the exit code on any non-terminating error, silenced or not). If you're just probing for existence, use Test-Path instead \u2014 it returns $true/$false without raising: \`if (Test-Path ./mydir) { Get-ChildItem ./mydir }\` or unconditionally use \`New-Item -ItemType Directory -Force -Path ./mydir\` which is idempotent. Don't retry the same -ErrorAction SilentlyContinue probe expecting a different result.`
     );
   }
-  if (IS_WINDOWS && /\bWrite-(?:Content|File)\b/i.test(command) && /(not recognized|无法将.*识别|不是.*cmdlet|CommandNotFoundException)/i.test(stderr)) {
+  if (IS_WINDOWS2 && /\bWrite-(?:Content|File)\b/i.test(command) && /(not recognized|无法将.*识别|不是.*cmdlet|CommandNotFoundException)/i.test(stderr)) {
     hints.push(
       `Hint: 'Write-Content' / 'Write-File' are NOT PowerShell cmdlets (common LLM hallucination). To write a file, prefer the built-in 'write_file' tool \u2014 it handles encoding/escaping cleanly and supports diff preview. If you must stay in bash: use 'Set-Content -Path <file> -Value <string> -Encoding utf8' (overwrites) or 'Add-Content' (appends) or 'Out-File -FilePath <file> -Encoding utf8'.`
     );
@@ -5121,6 +5142,18 @@ function detectBlockingCommand(command) {
   if (logcat && !/(?:^|\s)-(?:d|t|c|g)\b/.test(logcat[1] ?? "")) {
     return blockingMessage("adb logcat", "stream device logs");
   }
+  if (/\bStart-Process\b/i.test(command) && /\b(?:emulator|qemu[\w-]*)(?:\.exe)?\b/i.test(command)) {
+    return `This launches a long-running emulator/qemu process via Start-Process, which DETACHES a GUI child that aicli cannot track or stop with task_stop \u2014 and in practice that child often dies together with this bash call, leaving nothing running.
+
+Use the 'task_create' tool instead so the process is tracked and stoppable:
+  task_create(command: "<sdk>\\emulator\\emulator.exe -avd <name> -no-boot-anim", description: "launch emulator")
+
+Then poll readiness with SHORT bash calls (these DO exit):
+  adb devices                              # is the device listed?
+  adb shell getprop sys.boot_completed     # prints "1" once fully booted
+
+[Do NOT launch long-running GUI processes via Start-Process in bash \u2014 use task_create.]`;
+  }
   return null;
 }
 function blockingMessage(example, what) {
@@ -5200,7 +5233,7 @@ function pushBashUndoEntries(beforeSnapshot, parsedTargetsBefore, cwd) {
 }
 function runShell(command, opts) {
   return new Promise((resolvePromise) => {
-    const shellArgs = IS_WINDOWS ? ["-NoProfile", "-NonInteractive", "-Command", command] : ["-c", command];
+    const shellArgs = IS_WINDOWS2 ? ["-NoProfile", "-NonInteractive", "-Command", command] : ["-c", command];
     const child = spawn(SHELL, shellArgs, {
       cwd: opts.cwd,
       env: opts.env,
@@ -5263,7 +5296,7 @@ function runShell(command, opts) {
 }
 function killChild(child) {
   if (child.killed || child.exitCode !== null) return;
-  if (IS_WINDOWS && child.pid) {
+  if (IS_WINDOWS2 && child.pid) {
     try {
       spawn("taskkill", ["/PID", String(child.pid), "/T", "/F"], {
         windowsHide: true,
@@ -5688,7 +5721,7 @@ ${content}`;
 };
 
 // src/tools/builtin/write-file.ts
-import { writeFileSync as writeFileSync3, appendFileSync, mkdirSync as mkdirSync4 } from "fs";
+import { appendFileSync, mkdirSync as mkdirSync4 } from "fs";
 import { dirname as dirname3 } from "path";
 
 // src/tools/executor.ts
@@ -6211,8 +6244,8 @@ var ToolExecutor = class {
   /** confirm() 的取消回调，由 SIGINT handler 调用 */
   cancelConfirmFn = null;
   /**
-   * 会话级 auto-approve：跳过所有 write/destructive 确认（仅当前会话有效）。
-   * 通过 /yolo 命令切换。destructive 操作仍会显示警告但不阻塞。
+   * 会话级 auto-approve：跳过 write 确认（仅当前会话有效）。
+   * destructive 操作仍然必须逐次确认。
    */
   sessionAutoApprove = false;
   /**
@@ -6296,7 +6329,7 @@ var ToolExecutor = class {
         }
       }
     }
-    if (this.sessionAutoApprove && dangerLevel !== "safe") {
+    if (this.sessionAutoApprove && dangerLevel === "write") {
       this.printToolCall(call);
       if (dangerLevel === "write") this.printDiffPreview(call);
       console.log(theme.warning("  \u26A1 Auto-approved (session /yolo mode)"));
@@ -6825,7 +6858,7 @@ Do NOT split a long document into many write_file(append=true) calls. That patte
     if (appendMode) {
       appendFileSync(filePath, content, encoding);
     } else {
-      writeFileSync3(filePath, content, encoding);
+      atomicWriteFileSync(filePath, content);
     }
     const lines = content.split("\n").length;
     const mode = appendMode ? "appended" : "written";
@@ -6841,7 +6874,7 @@ Do NOT split a long document into many write_file(append=true) calls. That patte
 };
 
 // src/tools/builtin/edit-file.ts
-import { readFileSync as readFileSync7, writeFileSync as writeFileSync4, existsSync as existsSync8 } from "fs";
+import { readFileSync as readFileSync7, existsSync as existsSync8 } from "fs";
 
 // src/tools/builtin/patch-apply.ts
 function parseUnifiedDiff(patch) {
@@ -7240,7 +7273,7 @@ Note: Path can be absolute or relative to cwd.`,
       if (res.ok && res.appliedCount > 0 && res.content !== void 0) {
         undoStack.push(filePath, `edit_file (patch ${res.appliedCount}/${hunks.length}): ${filePath}`);
         fileCheckpoints.snapshot(filePath, ToolExecutor.currentMessageIndex);
-        writeFileSync4(filePath, res.content, encoding);
+        atomicWriteFileSync(filePath, res.content);
       }
       return lines.join("\n");
     }
@@ -7274,7 +7307,7 @@ Note: Path can be absolute or relative to cwd.`,
       if (writeChanges) {
         undoStack.push(filePath, `edit_file (batch ${appliedCount}/${edits.length}): ${filePath}`);
         fileCheckpoints.snapshot(filePath, ToolExecutor.currentMessageIndex);
-        writeFileSync4(filePath, working, encoding);
+        atomicWriteFileSync(filePath, working);
       }
       const lines = [];
       if (anyFailed && stopOnError) {
@@ -7312,7 +7345,7 @@ Please read the file first and use exact text.`;
       const label = res.info?.mode === "ignore_whitespace" ? "edit_file (ws-replace)" : res.info?.mode === "replace_all" ? "edit_file (replace_all)" : "edit_file (replace)";
       undoStack.push(filePath, `${label}: ${filePath}`);
       fileCheckpoints.snapshot(filePath, ToolExecutor.currentMessageIndex);
-      writeFileSync4(filePath, res.content, encoding);
+      atomicWriteFileSync(filePath, res.content);
       if (res.info?.mode === "replace_all") {
         return `Successfully edited ${filePath}${modeLabel}
   Replaced: ${res.info.replacedCount} occurrence(s) of ${truncatePreview(oldStr)}
@@ -7336,7 +7369,7 @@ Please read the file first and use exact text.`;
       undoStack.push(filePath, `edit_file (insert): ${filePath}`);
       fileCheckpoints.snapshot(filePath, ToolExecutor.currentMessageIndex);
       lines.splice(afterLine, 0, content);
-      writeFileSync4(filePath, lines.join("\n"), encoding);
+      atomicWriteFileSync(filePath, lines.join("\n"));
       return `Successfully inserted ${content.split("\n").length} line(s) after line ${afterLine} in ${filePath}`;
     }
     if (args["delete_from_line"] !== void 0) {
@@ -7352,7 +7385,7 @@ Please read the file first and use exact text.`;
       undoStack.push(filePath, `edit_file (delete): ${filePath}`);
       fileCheckpoints.snapshot(filePath, ToolExecutor.currentMessageIndex);
       const deleted = lines.splice(fromLine - 1, toLine - fromLine + 1);
-      writeFileSync4(filePath, lines.join("\n"), encoding);
+      atomicWriteFileSync(filePath, lines.join("\n"));
       return `Successfully deleted lines ${fromLine}-${toLine} (${deleted.length} lines) from ${filePath}`;
     }
     throw new ToolError(
@@ -7837,8 +7870,8 @@ function collectMatchingFiles(dirPath, rootPath, regex, results, maxResults) {
 
 // src/tools/builtin/run-interactive.ts
 import { spawn as spawn2 } from "child_process";
-import { platform as platform2 } from "os";
-var IS_WINDOWS2 = platform2() === "win32";
+import { platform as platform3 } from "os";
+var IS_WINDOWS3 = platform3() === "win32";
 var runInteractiveTool = {
   definition: {
     name: "run_interactive",
@@ -7918,7 +7951,7 @@ var runInteractiveTool = {
       let lineIdx = 0;
       const writeNextLine = () => {
         if (lineIdx < stdinLines.length && !child.stdin.destroyed) {
-          const line = stdinLines[lineIdx++] + (IS_WINDOWS2 ? "\r\n" : "\n");
+          const line = stdinLines[lineIdx++] + (IS_WINDOWS3 ? "\r\n" : "\n");
           const canContinue = child.stdin.write(line);
           if (canContinue) {
             setTimeout(writeNextLine, 150);
@@ -8557,7 +8590,7 @@ ${preamble}`;
 }
 
 // src/tools/builtin/save-last-response.ts
-import { writeFileSync as writeFileSync5, mkdirSync as mkdirSync5, unlinkSync as unlinkSync3, rmdirSync as rmdirSync2 } from "fs";
+import { mkdirSync as mkdirSync5, unlinkSync as unlinkSync3, rmdirSync as rmdirSync2 } from "fs";
 import { dirname as dirname4 } from "path";
 var lastResponseStore = { content: "" };
 function cleanupRejectedTeeFile(filePath) {
@@ -8608,7 +8641,7 @@ Any of these triggers means use save_last_response, NOT write_file:
     }
     undoStack.push(filePath, `save_last_response: ${filePath}`);
     mkdirSync5(dirname4(filePath), { recursive: true });
-    writeFileSync5(filePath, content, "utf-8");
+    atomicWriteFileSync(filePath, content);
     const lines = content.split("\n").length;
     return `File saved: ${filePath} (${lines} lines, ${content.length} bytes)`;
   }
@@ -9231,16 +9264,29 @@ var spawnAgentTool = {
 // src/tools/builtin/task-manager.ts
 import { spawn as spawn3 } from "child_process";
 import { randomUUID } from "crypto";
-import { platform as platform3 } from "os";
+import { platform as platform4 } from "os";
 var MAX_OUTPUT_CHARS = 1e4;
+var MAX_OUTPUT_BYTES = 64 * 1024;
 var MAX_TASKS = 20;
 var tasks = /* @__PURE__ */ new Map();
-function appendOutput(task, field, chunk) {
-  task[field] += chunk;
-  if (task[field].length > MAX_OUTPUT_CHARS) {
-    task[field] = "... [truncated] ...\n" + task[field].slice(-MAX_OUTPUT_CHARS);
+function capChunks(chunks) {
+  let total = 0;
+  for (const c of chunks) total += c.length;
+  while (total > MAX_OUTPUT_BYTES && chunks.length > 1) {
+    total -= chunks.shift().length;
   }
 }
+function decodeField(chunks) {
+  const buf = Buffer.concat(chunks);
+  const text = IS_WINDOWS ? decodeWindowsBuffer(buf) : buf.toString("utf-8");
+  return text.length > MAX_OUTPUT_CHARS ? "... [truncated] ...\n" + text.slice(-MAX_OUTPUT_CHARS) : text;
+}
+function appendOutput(task, field, chunk) {
+  const chunks = field === "stdout" ? task._stdoutChunks : task._stderrChunks;
+  chunks.push(chunk);
+  capChunks(chunks);
+  task[field] = decodeField(chunks);
+}
 function createTask(command, description) {
   if (tasks.size >= MAX_TASKS) {
     for (const [id2, t] of tasks) {
@@ -9251,13 +9297,11 @@ function createTask(command, description) {
     }
   }
   const id = randomUUID().slice(0, 8);
-  const isWin = platform3() === "win32";
-  const shell = isWin ? "cmd" : "sh";
-  const shellFlag = isWin ? "/c" : "-c";
-  const proc = spawn3(shell, [shellFlag, command], {
+  const { shell, args } = shellInvocation(command);
+  const proc = spawn3(shell, args, {
     stdio: ["ignore", "pipe", "pipe"],
     detached: false,
-    env: { ...process.env, PYTHONUTF8: "1" }
+    env: { ...process.env, PYTHONUTF8: "1", PYTHONIOENCODING: "utf-8" }
   });
   const task = {
     id,
@@ -9269,10 +9313,12 @@ function createTask(command, description) {
     status: "running",
     exitCode: null,
     stdout: "",
-    stderr: ""
+    stderr: "",
+    _stdoutChunks: [],
+    _stderrChunks: []
   };
-  proc.stdout?.on("data", (chunk) => appendOutput(task, "stdout", chunk.toString("utf-8")));
-  proc.stderr?.on("data", (chunk) => appendOutput(task, "stderr", chunk.toString("utf-8")));
+  proc.stdout?.on("data", (chunk) => appendOutput(task, "stdout", chunk));
+  proc.stderr?.on("data", (chunk) => appendOutput(task, "stderr", chunk));
   proc.on("close", (code) => {
     task.endTime = Date.now();
     task.exitCode = code;
@@ -9288,7 +9334,9 @@ Process error: ${err.message}`;
   return task;
 }
 function listTasks() {
-  return [...tasks.values()].map(({ process: _p, ...rest }) => rest);
+  return [...tasks.values()].map(
+    ({ process: _p, _stdoutChunks: _o, _stderrChunks: _e, ...rest }) => rest
+  );
 }
 function getTaskOutput(id) {
   const task = tasks.get(id);
@@ -9300,7 +9348,7 @@ function stopTask(id) {
   if (!task || task.status !== "running") return false;
   try {
     const proc = task.process;
-    if (platform3() === "win32" && proc.pid) {
+    if (platform4() === "win32" && proc.pid) {
       try {
         spawn3("taskkill", ["/PID", String(proc.pid), "/T", "/F"], {
           windowsHide: true,
@@ -9335,7 +9383,7 @@ function stopTask(id) {
 var taskCreateTool = {
   definition: {
     name: "task_create",
-    description: `Start a command running in the background and return immediately with a task ID (monitor via task_list, stop via task_stop). Use this for ANY long-running or never-exiting command, including: dev servers (npm run dev, metro / react-native start), Android emulator launch (emulator -avd X), device log streaming (adb logcat), file watchers, and builds you want to monitor while continuing other work. Running such commands via 'bash' instead would block until timeout.`,
+    description: `Start a command running in the background and return immediately with a task ID (monitor via task_list, stop via task_stop). Use this for ANY long-running or never-exiting command, including: dev servers (npm run dev, metro / react-native start), Android emulator launch (emulator -avd X), device log streaming (adb logcat), file watchers, and builds you want to monitor while continuing other work. Running such commands via 'bash' instead would block until timeout. The command runs in the SAME shell as the 'bash' tool (PowerShell on Windows, $SHELL on Unix), so a command you verified with 'bash' can be moved here verbatim \u2014 write it in PowerShell syntax on Windows (e.g. & "C:\\path\\app.exe" -flag), NOT cmd.exe syntax.`,
     parameters: {
       command: {
         type: "string",
@@ -11299,7 +11347,7 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
       }
     }
     this.sendToolCallStart(call);
-    if (this.sessionAutoApprove && (dangerLevel === "write" || dangerLevel === "destructive")) {
+    if (this.sessionAutoApprove && dangerLevel === "write") {
       try {
         const rawContent = await runTool(tool, call.arguments, call.name);
         const content = truncateOutput(rawContent, call.name);
@@ -11403,7 +11451,7 @@ import { existsSync as existsSync19, readFileSync as readFileSync13 } from "fs";
 import { join as join12 } from "path";
 
 // src/repl/dev-state.ts
-import { existsSync as existsSync18, readFileSync as readFileSync12, writeFileSync as writeFileSync6, unlinkSync as unlinkSync4, mkdirSync as mkdirSync9 } from "fs";
+import { existsSync as existsSync18, readFileSync as readFileSync12, writeFileSync as writeFileSync3, unlinkSync as unlinkSync4, mkdirSync as mkdirSync9 } from "fs";
 import { join as join11 } from "path";
 import { homedir as homedir6 } from "os";
 function getDevStatePath() {
@@ -11681,7 +11729,7 @@ function autoTrimSessionIfNeeded(session, sizeLimit = SESSION_SIZE_LIMIT) {
 }
 
 // src/web/session-handler.ts
-import { existsSync as existsSync21, readFileSync as readFileSync14, appendFileSync as appendFileSync3, writeFileSync as writeFileSync7, mkdirSync as mkdirSync10, readdirSync as readdirSync9, statSync as statSync8, createWriteStream } from "fs";
+import { existsSync as existsSync21, readFileSync as readFileSync14, appendFileSync as appendFileSync3, writeFileSync as writeFileSync4, mkdirSync as mkdirSync10, readdirSync as readdirSync9, statSync as statSync8, createWriteStream } from "fs";
 import { join as join15, resolve as resolve5, dirname as dirname5 } from "path";
 import { execSync as execSync3 } from "child_process";
 
@@ -13045,7 +13093,7 @@ Try: /compact to reduce context, /clear to reset, or switch to a larger-context
             try {
               mkdirSync10(dirname5(pendingTeeSave), { recursive: true });
               const bodyToSave = stripOuterCodeFence(content);
-              writeFileSync7(pendingTeeSave, bodyToSave, "utf-8");
+              atomicWriteFileSync(pendingTeeSave, bodyToSave);
               undoStack.push(pendingTeeSave, `save_last_response (deferred): ${pendingTeeSave}`);
               const lines = bodyToSave.split("\n").length;
               this.send({ type: "info", message: `\u2705 Saved (from reply): ${pendingTeeSave} (${lines} lines, ${bodyToSave.length} chars)` });
@@ -13220,7 +13268,7 @@ ${summaryContent}`,
     let summary;
     try {
       mkdirSync10(dirname5(saveToFile), { recursive: true });
-      fileStream = createWriteStream(saveToFile, { encoding: "utf-8" });
+      fileStream = createWriteStream(saveToFile);
       const teeSystemPrompt = stripToolCallReminder(systemPrompt ?? "") + CONTENT_ONLY_STREAM_REMINDER;
       const teeExtraMessages = extraMessages.length > 0 ? [...extraMessages, { role: "user", content: TEE_FINAL_USER_NUDGE }] : [{ role: "user", content: TEE_FINAL_USER_NUDGE }];
       const chatRequest = {
@@ -13260,7 +13308,7 @@ ${summaryContent}`,
         fullContent = "";
       } else {
         if (verdict.kind === "salvaged" || verdict.kind === "fallback") {
-          writeFileSync7(saveToFile, verdict.content, "utf-8");
+          atomicWriteFileSync(saveToFile, verdict.content);
           fullContent = verdict.content;
         }
         summary = verdict.summary;
@@ -13712,7 +13760,7 @@ ${activated.meta.description || ""}` });
           this.send({ type: "info", message: "\u{1F512} Auto-approve disabled \u2014 confirmations restored for this session." });
         } else {
           this.toolExecutor.sessionAutoApprove = true;
-          this.send({ type: "info", message: "\u26A1 YOLO mode ON \u2014 all write/destructive tools auto-approved for this session.\nUse /yolo off to re-enable confirmations." });
+          this.send({ type: "info", message: "\u26A1 YOLO mode ON \u2014 write tools auto-approved; destructive tools still require confirmation.\nUse /yolo off to re-enable write confirmations." });
         }
         break;
       }
@@ -14325,7 +14373,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
       case "test": {
         this.send({ type: "info", message: "\u{1F9EA} Running tests..." });
         try {
-          const { executeTests } = await import("./run-tests-6G2F7OSC.js");
+          const { executeTests } = await import("./run-tests-NBCA4KEG.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {
@@ -14354,7 +14402,7 @@ Use /init --force to overwrite.` });
           const projectInfo = this.scanProject(cwd);
           const prompt = this.buildInitPrompt(projectInfo, cwd);
           const content = await this.chatOnce(prompt, { temperature: 0.3, maxTokens: 4096 });
-          writeFileSync7(targetPath, content, "utf-8");
+          writeFileSync4(targetPath, content, "utf-8");
           this.send({ type: "info", message: `\u2713 Generated: ${targetPath} (${content.length} chars)
 Use /context reload to load it.` });
         } catch (err) {
@@ -14833,7 +14881,7 @@ Add .md files to create commands.` });
     const configDir = this.config.getConfigDir();
     const memPath = join15(configDir, MEMORY_FILE_NAME);
     try {
-      writeFileSync7(memPath, "", "utf-8");
+      writeFileSync4(memPath, "", "utf-8");
       this.send({ type: "info", message: "\u{1F5D1}\uFE0F Persistent memory cleared." });
     } catch (err) {
       this.send({ type: "error", message: `Failed to clear memory: ${err.message}` });
@@ -15309,7 +15357,7 @@ async function setupProxy(configProxy) {
 }
 
 // src/web/auth.ts
-import { existsSync as existsSync22, readFileSync as readFileSync15, writeFileSync as writeFileSync8, mkdirSync as mkdirSync11, readdirSync as readdirSync10, copyFileSync } from "fs";
+import { existsSync as existsSync22, readFileSync as readFileSync15, writeFileSync as writeFileSync5, mkdirSync as mkdirSync11, readdirSync as readdirSync10, copyFileSync } from "fs";
 import { join as join16 } from "path";
 import { createHmac, randomBytes, timingSafeEqual, pbkdf2Sync } from "crypto";
 var USERS_FILE = "users.json";
@@ -15511,7 +15559,7 @@ var AuthManager = class {
     if (existsSync22(globalConfig)) {
       try {
         const content = readFileSync15(globalConfig, "utf-8");
-        writeFileSync8(join16(userDir, "config.json"), content, "utf-8");
+        writeFileSync5(join16(userDir, "config.json"), content, "utf-8");
       } catch {
       }
     }
@@ -15519,7 +15567,7 @@ var AuthManager = class {
     if (existsSync22(globalMemory)) {
       try {
         const content = readFileSync15(globalMemory, "utf-8");
-        writeFileSync8(join16(userDir, "memory.md"), content, "utf-8");
+        writeFileSync5(join16(userDir, "memory.md"), content, "utf-8");
       } catch {
       }
     }
@@ -16048,7 +16096,7 @@ async function startWebServer(options = {}) {
             handlers.set(tabId, handler);
             clearPreAuthTimer();
             console.log(`   \u2713 User registered & connected: ${username} (tab: ${tabId.slice(0, 12)})`);
-            ws.send(JSON.stringify({ type: "auth_result", success: true, token: newToken, username }));
+            ws.send(JSON.stringify({ type: "auth_result", success: true, username }));
             return;
           }
           if (action === "token") {
@@ -16064,7 +16112,7 @@ async function startWebServer(options = {}) {
             handlers.set(tabId, handler);
             clearPreAuthTimer();
             console.log(`   \u2713 Token auth: ${verifiedUser} (tab: ${tabId.slice(0, 12)})`);
-            ws.send(JSON.stringify({ type: "auth_result", success: true, token: clientToken, username: verifiedUser }));
+            ws.send(JSON.stringify({ type: "auth_result", success: true, username: verifiedUser }));
             return;
           }
           if (action === "login") {
@@ -16079,7 +16127,7 @@ async function startWebServer(options = {}) {
             handlers.set(tabId, handler);
             clearPreAuthTimer();
             console.log(`   \u2713 User logged in: ${username} (tab: ${tabId.slice(0, 12)})`);
-            ws.send(JSON.stringify({ type: "auth_result", success: true, token: loginToken, username }));
+            ws.send(JSON.stringify({ type: "auth_result", success: true, username }));
             return;
           }
           ws.send(JSON.stringify({ type: "auth_result", success: false, error: "Unknown auth action" }));
@@ -16105,9 +16153,10 @@ async function startWebServer(options = {}) {
     });
     ws.on("close", () => {
       clearPreAuthTimer();
-      console.log(`   \u2717 Tab disconnected: ${tabId.slice(0, 12)} (total: ${handlers.size - 1})`);
+      const wasTracked = handlers.has(tabId);
       if (handler) handler.onDisconnect();
-      handlers.delete(tabId);
+      if (wasTracked) handlers.delete(tabId);
+      console.log(`   \u2717 Tab disconnected: ${tabId.slice(0, 12)} (total: ${handlers.size})`);
     });
     ws.on("error", (err) => {
       console.error(`   WebSocket error: ${err.message}`);

package/dist/{hub-4CDJPNIM.js → hub-6R3M3NTC.js}

@@ -154,7 +154,7 @@ ${content}`);
   }
 }
 async function runTaskMode(config, providers, configManager, topic) {
-  const { TaskOrchestrator } = await import("./task-orchestrator-PKZ2UTOK.js");
+  const { TaskOrchestrator } = await import("./task-orchestrator-2DTDVCMR.js");
   const orchestrator = new TaskOrchestrator(config, providers, configManager);
   let interrupted = false;
   const onSigint = () => {