jinzd-ai-cli 0.4.205 → 0.4.206

package/README.md

@@ -100,7 +100,7 @@ Use `@filepath` to reference files or images directly in your prompt.
 ### Web UI
 
 ```bash
-aicli web                    # Start on localhost:3456
+aicli web                    # Start on localhost:3000
 aicli web --port 8080        # Custom port
 aicli web --host 0.0.0.0    # LAN access (shows QR-friendly URL)
 ```

package/dist/{batch-RBPABHS7.js → batch-6PORMJWT.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import {
   ConfigManager
-} from "./chunk-TZ7SNVSG.js";
+} from "./chunk-TW47X5AO.js";
 import "./chunk-TZQHYZKT.js";
-import "./chunk-3RET7PL7.js";
+import "./chunk-QNUVZO5X.js";
 import {
   atomicWriteFileSync
 } from "./chunk-IW3Q7AE5.js";

package/dist/{chunk-XIYSFN4U.js → chunk-2WV6AGHM.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   CONFIG_DIR_NAME
-} from "./chunk-3RET7PL7.js";
+} from "./chunk-QNUVZO5X.js";
 import {
   atomicWriteFileSync
 } from "./chunk-IW3Q7AE5.js";

package/dist/{chunk-43H3D2PK.js → chunk-BQIV4ZQT.js}

@@ -6,7 +6,7 @@ import { platform } from "os";
 import chalk from "chalk";
 
 // src/core/constants.ts
-var VERSION = "0.4.205";
+var VERSION = "0.4.206";
 var APP_NAME = "ai-cli";
 var CONFIG_DIR_NAME = ".aicli";
 var CONFIG_FILE_NAME = "config.json";

package/dist/{chunk-JVYH66N2.js → chunk-KJHMRAJU.js}

@@ -2,7 +2,7 @@
 import {
   CONFIG_DIR_NAME,
   VERSION
-} from "./chunk-3RET7PL7.js";
+} from "./chunk-QNUVZO5X.js";
 
 // src/diagnostics/crash-log.ts
 import {

package/dist/{chunk-ZSC4YLEJ.js → chunk-KOU4KX7J.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   truncateForPersist
-} from "./chunk-43MWRT2C.js";
+} from "./chunk-QQYSZMET.js";
 import {
   APP_NAME,
   CONFIG_DIR_NAME,
@@ -11,7 +11,7 @@ import {
   MCP_PROTOCOL_VERSION,
   MCP_TOOL_PREFIX,
   VERSION
-} from "./chunk-3RET7PL7.js";
+} from "./chunk-QNUVZO5X.js";
 
 // src/mcp/client.ts
 import { spawn } from "child_process";

package/dist/{chunk-UZISJ3KZ.js → chunk-QMXC327F.js}

@@ -3,7 +3,7 @@ import {
   detectsHallucinatedFileOp,
   repairToolCallArguments,
   schemaToJsonSchema
-} from "./chunk-SMFRJCXB.js";
+} from "./chunk-XPBEJB27.js";
 import {
   AuthError,
   ProviderError,
@@ -31,8 +31,8 @@ var BaseProvider = class {
    * 将 Message[] 转换为 OpenAI API 格式的消息数组。
    * content 为 string 时直接传递；为 MessageContentPart[] 时保留数组格式（vision 请求）。
    *
-   * 自动跳过 role='tool' 和带 toolCalls 的 assistant 消息——
-   * 这些是 v0.4.60+ 持久化的工具历史，由 _extraMessages 机制单独注入。
+   * 基类只提供降级格式：跳过 role='tool' 和带 toolCalls 的 assistant 消息。
+   * 需要完整工具历史 roundtrip 的 provider 应覆盖消息构造逻辑，例如 OpenAI-compatible provider。
    */
   normalizeMessages(messages) {
     return messages.filter((m) => m.role !== "tool" && !m.toolCalls).map((m) => ({ role: m.role, content: m.content }));

package/dist/{chunk-3RET7PL7.js → chunk-QNUVZO5X.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // src/core/constants.ts
-var VERSION = "0.4.205";
+var VERSION = "0.4.206";
 var APP_NAME = "ai-cli";
 var CONFIG_DIR_NAME = ".aicli";
 var CONFIG_FILE_NAME = "config.json";

package/dist/{chunk-43MWRT2C.js → chunk-QQYSZMET.js}

@@ -5,15 +5,15 @@ import {
 } from "./chunk-T2NL5ZIA.js";
 import {
   runTestsTool
-} from "./chunk-VOV2PWZU.js";
+} from "./chunk-SFCNFX42.js";
 import {
   runTool
-} from "./chunk-XIYSFN4U.js";
+} from "./chunk-2WV6AGHM.js";
 import {
   getDangerLevel,
   isFileWriteTool,
   runLeanAgentLoop
-} from "./chunk-SMFRJCXB.js";
+} from "./chunk-XPBEJB27.js";
 import {
   EnvLoader,
   NetworkError,
@@ -26,7 +26,7 @@ import {
   SUBAGENT_ALLOWED_TOOLS,
   SUBAGENT_DEFAULT_MAX_ROUNDS,
   SUBAGENT_MAX_ROUNDS_LIMIT
-} from "./chunk-3RET7PL7.js";
+} from "./chunk-QNUVZO5X.js";
 import {
   fileCheckpoints
 } from "./chunk-4BKXL7SM.js";
@@ -40,6 +40,9 @@ import {
 import {
   loadIndex
 } from "./chunk-CKH4KQ4E.js";
+import {
+  atomicWriteFileSync
+} from "./chunk-IW3Q7AE5.js";
 
 // src/tools/builtin/bash.ts
 import { spawn } from "child_process";
@@ -1047,7 +1050,7 @@ ${content}`;
 };
 
 // src/tools/builtin/write-file.ts
-import { writeFileSync as writeFileSync2, appendFileSync, mkdirSync } from "fs";
+import { appendFileSync, mkdirSync } from "fs";
 import { dirname as dirname2 } from "path";
 
 // src/tools/executor.ts
@@ -1522,8 +1525,8 @@ var ToolExecutor = class {
   /** confirm() 的取消回调，由 SIGINT handler 调用 */
   cancelConfirmFn = null;
   /**
-   * 会话级 auto-approve：跳过所有 write/destructive 确认（仅当前会话有效）。
-   * 通过 /yolo 命令切换。destructive 操作仍会显示警告但不阻塞。
+   * 会话级 auto-approve：跳过 write 确认（仅当前会话有效）。
+   * destructive 操作仍然必须逐次确认。
    */
   sessionAutoApprove = false;
   /**
@@ -1607,7 +1610,7 @@ var ToolExecutor = class {
         }
       }
     }
-    if (this.sessionAutoApprove && dangerLevel !== "safe") {
+    if (this.sessionAutoApprove && dangerLevel === "write") {
       this.printToolCall(call);
       if (dangerLevel === "write") this.printDiffPreview(call);
       console.log(theme.warning("  \u26A1 Auto-approved (session /yolo mode)"));
@@ -2136,7 +2139,7 @@ Do NOT split a long document into many write_file(append=true) calls. That patte
     if (appendMode) {
       appendFileSync(filePath, content, encoding);
     } else {
-      writeFileSync2(filePath, content, encoding);
+      atomicWriteFileSync(filePath, content);
     }
     const lines = content.split("\n").length;
     const mode = appendMode ? "appended" : "written";
@@ -2152,7 +2155,7 @@ Do NOT split a long document into many write_file(append=true) calls. That patte
 };
 
 // src/tools/builtin/edit-file.ts
-import { readFileSync as readFileSync4, writeFileSync as writeFileSync3, existsSync as existsSync5 } from "fs";
+import { readFileSync as readFileSync4, existsSync as existsSync5 } from "fs";
 
 // src/tools/builtin/patch-apply.ts
 function parseUnifiedDiff(patch) {
@@ -2551,7 +2554,7 @@ Note: Path can be absolute or relative to cwd.`,
       if (res.ok && res.appliedCount > 0 && res.content !== void 0) {
         undoStack.push(filePath, `edit_file (patch ${res.appliedCount}/${hunks.length}): ${filePath}`);
         fileCheckpoints.snapshot(filePath, ToolExecutor.currentMessageIndex);
-        writeFileSync3(filePath, res.content, encoding);
+        atomicWriteFileSync(filePath, res.content);
       }
       return lines.join("\n");
     }
@@ -2585,7 +2588,7 @@ Note: Path can be absolute or relative to cwd.`,
       if (writeChanges) {
         undoStack.push(filePath, `edit_file (batch ${appliedCount}/${edits.length}): ${filePath}`);
         fileCheckpoints.snapshot(filePath, ToolExecutor.currentMessageIndex);
-        writeFileSync3(filePath, working, encoding);
+        atomicWriteFileSync(filePath, working);
       }
       const lines = [];
       if (anyFailed && stopOnError) {
@@ -2623,7 +2626,7 @@ Please read the file first and use exact text.`;
       const label = res.info?.mode === "ignore_whitespace" ? "edit_file (ws-replace)" : res.info?.mode === "replace_all" ? "edit_file (replace_all)" : "edit_file (replace)";
       undoStack.push(filePath, `${label}: ${filePath}`);
       fileCheckpoints.snapshot(filePath, ToolExecutor.currentMessageIndex);
-      writeFileSync3(filePath, res.content, encoding);
+      atomicWriteFileSync(filePath, res.content);
       if (res.info?.mode === "replace_all") {
         return `Successfully edited ${filePath}${modeLabel}
   Replaced: ${res.info.replacedCount} occurrence(s) of ${truncatePreview(oldStr)}
@@ -2647,7 +2650,7 @@ Please read the file first and use exact text.`;
       undoStack.push(filePath, `edit_file (insert): ${filePath}`);
       fileCheckpoints.snapshot(filePath, ToolExecutor.currentMessageIndex);
       lines.splice(afterLine, 0, content);
-      writeFileSync3(filePath, lines.join("\n"), encoding);
+      atomicWriteFileSync(filePath, lines.join("\n"));
       return `Successfully inserted ${content.split("\n").length} line(s) after line ${afterLine} in ${filePath}`;
     }
     if (args["delete_from_line"] !== void 0) {
@@ -2663,7 +2666,7 @@ Please read the file first and use exact text.`;
       undoStack.push(filePath, `edit_file (delete): ${filePath}`);
       fileCheckpoints.snapshot(filePath, ToolExecutor.currentMessageIndex);
       const deleted = lines.splice(fromLine - 1, toLine - fromLine + 1);
-      writeFileSync3(filePath, lines.join("\n"), encoding);
+      atomicWriteFileSync(filePath, lines.join("\n"));
       return `Successfully deleted lines ${fromLine}-${toLine} (${deleted.length} lines) from ${filePath}`;
     }
     throw new ToolError(
@@ -3868,7 +3871,7 @@ ${preamble}`;
 }
 
 // src/tools/builtin/save-last-response.ts
-import { writeFileSync as writeFileSync4, mkdirSync as mkdirSync2, unlinkSync as unlinkSync2, rmdirSync as rmdirSync2 } from "fs";
+import { mkdirSync as mkdirSync2, unlinkSync as unlinkSync2, rmdirSync as rmdirSync2 } from "fs";
 import { dirname as dirname3 } from "path";
 var lastResponseStore = { content: "" };
 function cleanupRejectedTeeFile(filePath) {
@@ -3919,7 +3922,7 @@ Any of these triggers means use save_last_response, NOT write_file:
     }
     undoStack.push(filePath, `save_last_response: ${filePath}`);
     mkdirSync2(dirname3(filePath), { recursive: true });
-    writeFileSync4(filePath, content, "utf-8");
+    atomicWriteFileSync(filePath, content);
     const lines = content.split("\n").length;
     return `File saved: ${filePath} (${lines} lines, ${content.length} bytes)`;
   }

package/dist/{chunk-VOV2PWZU.js → chunk-SFCNFX42.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   TEST_TIMEOUT
-} from "./chunk-3RET7PL7.js";
+} from "./chunk-QNUVZO5X.js";
 
 // src/tools/builtin/run-tests.ts
 import { execSync, spawnSync } from "child_process";

package/dist/{chunk-TZ7SNVSG.js → chunk-TW47X5AO.js}

@@ -8,7 +8,7 @@ import {
   CONFIG_FILE_NAME,
   HISTORY_DIR_NAME,
   PLUGINS_DIR_NAME
-} from "./chunk-3RET7PL7.js";
+} from "./chunk-QNUVZO5X.js";
 
 // src/config/config-manager.ts
 import { readFileSync, writeFileSync, existsSync, mkdirSync } from "fs";

package/dist/{chunk-SMFRJCXB.js → chunk-XPBEJB27.js}

@@ -5,7 +5,14 @@ function isFileWriteTool(name) {
   return name === "write_file" || name === "edit_file" || name === "notebook_edit";
 }
 function getDangerLevel(toolName, args) {
-  if (toolName.startsWith("mcp__")) return "safe";
+  if (toolName.startsWith("mcp__")) {
+    const rawName = toolName.split("__").pop() ?? "";
+    const normalized = rawName.toLowerCase().replace(/[^a-z0-9]+/g, "_");
+    if (/^(read|get|list|search|find|query|fetch|status|describe|inspect|show|lookup)(?:_|$)/.test(normalized)) {
+      return "safe";
+    }
+    return "write";
+  }
   if (toolName === "bash") {
     const cmd = String(args["command"] ?? "");
     if (/\brm\s+[^\n]*(?:-\w*[rRfF]\w*|--recursive|--force)\b/.test(cmd)) return "destructive";

package/dist/{ci-ABE74AXH.js → ci-AYMV66P3.js}

@@ -6,18 +6,18 @@ import {
 } from "./chunk-HLWUDRBO.js";
 import {
   ProviderRegistry
-} from "./chunk-UZISJ3KZ.js";
-import "./chunk-SMFRJCXB.js";
+} from "./chunk-QMXC327F.js";
+import "./chunk-XPBEJB27.js";
 import {
   ConfigManager
-} from "./chunk-TZ7SNVSG.js";
+} from "./chunk-TW47X5AO.js";
 import "./chunk-TZQHYZKT.js";
 import {
   VERSION
-} from "./chunk-3RET7PL7.js";
+} from "./chunk-QNUVZO5X.js";
 
 // src/cli/ci.ts
-import { execFileSync, execSync } from "child_process";
+import { execFileSync } from "child_process";
 var CI_COMMENT_MARKER = "<!-- aicli-ci-review -->";
 function fetchDiff(opts) {
   if (opts.diffOverride != null) return opts.diffOverride;
@@ -34,7 +34,8 @@ function fetchDiff(opts) {
   }
   if (opts.base) {
     try {
-      return execSync(`git diff ${shellQuote(opts.base)}...HEAD`, {
+      validateGitRef(opts.base);
+      return execFileSync("git", ["diff", `${opts.base}...HEAD`], {
         encoding: "utf-8",
         maxBuffer: 50 * 1024 * 1024,
         timeout: 3e4
@@ -45,18 +46,17 @@ function fetchDiff(opts) {
   }
   throw new Error("aicli ci: must supply --pr <num> or --base <ref> to determine the diff source");
 }
-function shellQuote(ref) {
+function validateGitRef(ref) {
   if (!/^[A-Za-z0-9._/\-]+$/.test(ref)) {
     throw new Error(`unsafe ref: ${ref}`);
   }
-  return ref;
 }
 function buildGitContextStr(opts) {
   const parts = [];
   if (opts.pr != null) parts.push(`PR: #${opts.pr}`);
   if (opts.base) parts.push(`Base: ${opts.base}`);
   try {
-    const branch = execSync("git rev-parse --abbrev-ref HEAD", { encoding: "utf-8", timeout: 5e3 }).trim();
+    const branch = execFileSync("git", ["rev-parse", "--abbrev-ref", "HEAD"], { encoding: "utf-8", timeout: 5e3 }).trim();
     if (branch) parts.push(`Branch: ${branch}`);
   } catch {
   }

package/dist/{constants-GMQMJRIO.js → constants-NHGTSHKT.js}

@@ -36,7 +36,7 @@ import {
   TEST_TIMEOUT,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-3RET7PL7.js";
+} from "./chunk-QNUVZO5X.js";
 export {
   AGENTIC_BEHAVIOR_GUIDELINE,
   APP_NAME,

package/dist/{doctor-cli-M5PPO3L3.js → doctor-cli-WKH7T4AW.js}

@@ -2,26 +2,26 @@
 import {
   getConfigDirUsage,
   listRecentCrashes
-} from "./chunk-JVYH66N2.js";
+} from "./chunk-KJHMRAJU.js";
 import {
   ProviderRegistry
-} from "./chunk-UZISJ3KZ.js";
+} from "./chunk-QMXC327F.js";
 import {
   getStatsSnapshot,
   getTopFailingTools,
   getTopUsedTools,
   resetStats
-} from "./chunk-XIYSFN4U.js";
-import "./chunk-SMFRJCXB.js";
+} from "./chunk-2WV6AGHM.js";
+import "./chunk-XPBEJB27.js";
 import {
   ConfigManager
-} from "./chunk-TZ7SNVSG.js";
+} from "./chunk-TW47X5AO.js";
 import "./chunk-TZQHYZKT.js";
 import {
   DEV_STATE_FILE_NAME,
   MEMORY_FILE_NAME,
   VERSION
-} from "./chunk-3RET7PL7.js";
+} from "./chunk-QNUVZO5X.js";
 import "./chunk-IW3Q7AE5.js";
 
 // src/diagnostics/doctor-cli.ts

package/dist/electron-server.js

@@ -36,7 +36,7 @@ import {
   VERSION,
   buildUserIdentityPrompt,
   runTestsTool
-} from "./chunk-43H3D2PK.js";
+} from "./chunk-BQIV4ZQT.js";
 import {
   hasSemanticIndex,
   semanticSearch
@@ -623,8 +623,8 @@ var BaseProvider = class {
    * 将 Message[] 转换为 OpenAI API 格式的消息数组。
    * content 为 string 时直接传递；为 MessageContentPart[] 时保留数组格式（vision 请求）。
    *
-   * 自动跳过 role='tool' 和带 toolCalls 的 assistant 消息——
-   * 这些是 v0.4.60+ 持久化的工具历史，由 _extraMessages 机制单独注入。
+   * 基类只提供降级格式：跳过 role='tool' 和带 toolCalls 的 assistant 消息。
+   * 需要完整工具历史 roundtrip 的 provider 应覆盖消息构造逻辑，例如 OpenAI-compatible provider。
    */
   normalizeMessages(messages) {
     return messages.filter((m) => m.role !== "tool" && !m.toolCalls).map((m) => ({ role: m.role, content: m.content }));
@@ -636,7 +636,14 @@ function isFileWriteTool(name) {
   return name === "write_file" || name === "edit_file" || name === "notebook_edit";
 }
 function getDangerLevel(toolName, args) {
-  if (toolName.startsWith("mcp__")) return "safe";
+  if (toolName.startsWith("mcp__")) {
+    const rawName = toolName.split("__").pop() ?? "";
+    const normalized = rawName.toLowerCase().replace(/[^a-z0-9]+/g, "_");
+    if (/^(read|get|list|search|find|query|fetch|status|describe|inspect|show|lookup)(?:_|$)/.test(normalized)) {
+      return "safe";
+    }
+    return "write";
+  }
   if (toolName === "bash") {
     const cmd = String(args["command"] ?? "");
     if (/\brm\s+[^\n]*(?:-\w*[rRfF]\w*|--recursive|--force)\b/.test(cmd)) return "destructive";
@@ -5714,7 +5721,7 @@ ${content}`;
 };
 
 // src/tools/builtin/write-file.ts
-import { writeFileSync as writeFileSync3, appendFileSync, mkdirSync as mkdirSync4 } from "fs";
+import { appendFileSync, mkdirSync as mkdirSync4 } from "fs";
 import { dirname as dirname3 } from "path";
 
 // src/tools/executor.ts
@@ -6237,8 +6244,8 @@ var ToolExecutor = class {
   /** confirm() 的取消回调，由 SIGINT handler 调用 */
   cancelConfirmFn = null;
   /**
-   * 会话级 auto-approve：跳过所有 write/destructive 确认（仅当前会话有效）。
-   * 通过 /yolo 命令切换。destructive 操作仍会显示警告但不阻塞。
+   * 会话级 auto-approve：跳过 write 确认（仅当前会话有效）。
+   * destructive 操作仍然必须逐次确认。
    */
   sessionAutoApprove = false;
   /**
@@ -6322,7 +6329,7 @@ var ToolExecutor = class {
         }
       }
     }
-    if (this.sessionAutoApprove && dangerLevel !== "safe") {
+    if (this.sessionAutoApprove && dangerLevel === "write") {
       this.printToolCall(call);
       if (dangerLevel === "write") this.printDiffPreview(call);
       console.log(theme.warning("  \u26A1 Auto-approved (session /yolo mode)"));
@@ -6851,7 +6858,7 @@ Do NOT split a long document into many write_file(append=true) calls. That patte
     if (appendMode) {
       appendFileSync(filePath, content, encoding);
     } else {
-      writeFileSync3(filePath, content, encoding);
+      atomicWriteFileSync(filePath, content);
     }
     const lines = content.split("\n").length;
     const mode = appendMode ? "appended" : "written";
@@ -6867,7 +6874,7 @@ Do NOT split a long document into many write_file(append=true) calls. That patte
 };
 
 // src/tools/builtin/edit-file.ts
-import { readFileSync as readFileSync7, writeFileSync as writeFileSync4, existsSync as existsSync8 } from "fs";
+import { readFileSync as readFileSync7, existsSync as existsSync8 } from "fs";
 
 // src/tools/builtin/patch-apply.ts
 function parseUnifiedDiff(patch) {
@@ -7266,7 +7273,7 @@ Note: Path can be absolute or relative to cwd.`,
       if (res.ok && res.appliedCount > 0 && res.content !== void 0) {
         undoStack.push(filePath, `edit_file (patch ${res.appliedCount}/${hunks.length}): ${filePath}`);
         fileCheckpoints.snapshot(filePath, ToolExecutor.currentMessageIndex);
-        writeFileSync4(filePath, res.content, encoding);
+        atomicWriteFileSync(filePath, res.content);
       }
       return lines.join("\n");
     }
@@ -7300,7 +7307,7 @@ Note: Path can be absolute or relative to cwd.`,
       if (writeChanges) {
         undoStack.push(filePath, `edit_file (batch ${appliedCount}/${edits.length}): ${filePath}`);
         fileCheckpoints.snapshot(filePath, ToolExecutor.currentMessageIndex);
-        writeFileSync4(filePath, working, encoding);
+        atomicWriteFileSync(filePath, working);
       }
       const lines = [];
       if (anyFailed && stopOnError) {
@@ -7338,7 +7345,7 @@ Please read the file first and use exact text.`;
       const label = res.info?.mode === "ignore_whitespace" ? "edit_file (ws-replace)" : res.info?.mode === "replace_all" ? "edit_file (replace_all)" : "edit_file (replace)";
       undoStack.push(filePath, `${label}: ${filePath}`);
       fileCheckpoints.snapshot(filePath, ToolExecutor.currentMessageIndex);
-      writeFileSync4(filePath, res.content, encoding);
+      atomicWriteFileSync(filePath, res.content);
       if (res.info?.mode === "replace_all") {
         return `Successfully edited ${filePath}${modeLabel}
   Replaced: ${res.info.replacedCount} occurrence(s) of ${truncatePreview(oldStr)}
@@ -7362,7 +7369,7 @@ Please read the file first and use exact text.`;
       undoStack.push(filePath, `edit_file (insert): ${filePath}`);
       fileCheckpoints.snapshot(filePath, ToolExecutor.currentMessageIndex);
       lines.splice(afterLine, 0, content);
-      writeFileSync4(filePath, lines.join("\n"), encoding);
+      atomicWriteFileSync(filePath, lines.join("\n"));
       return `Successfully inserted ${content.split("\n").length} line(s) after line ${afterLine} in ${filePath}`;
     }
     if (args["delete_from_line"] !== void 0) {
@@ -7378,7 +7385,7 @@ Please read the file first and use exact text.`;
       undoStack.push(filePath, `edit_file (delete): ${filePath}`);
       fileCheckpoints.snapshot(filePath, ToolExecutor.currentMessageIndex);
       const deleted = lines.splice(fromLine - 1, toLine - fromLine + 1);
-      writeFileSync4(filePath, lines.join("\n"), encoding);
+      atomicWriteFileSync(filePath, lines.join("\n"));
       return `Successfully deleted lines ${fromLine}-${toLine} (${deleted.length} lines) from ${filePath}`;
     }
     throw new ToolError(
@@ -8583,7 +8590,7 @@ ${preamble}`;
 }
 
 // src/tools/builtin/save-last-response.ts
-import { writeFileSync as writeFileSync5, mkdirSync as mkdirSync5, unlinkSync as unlinkSync3, rmdirSync as rmdirSync2 } from "fs";
+import { mkdirSync as mkdirSync5, unlinkSync as unlinkSync3, rmdirSync as rmdirSync2 } from "fs";
 import { dirname as dirname4 } from "path";
 var lastResponseStore = { content: "" };
 function cleanupRejectedTeeFile(filePath) {
@@ -8634,7 +8641,7 @@ Any of these triggers means use save_last_response, NOT write_file:
     }
     undoStack.push(filePath, `save_last_response: ${filePath}`);
     mkdirSync5(dirname4(filePath), { recursive: true });
-    writeFileSync5(filePath, content, "utf-8");
+    atomicWriteFileSync(filePath, content);
     const lines = content.split("\n").length;
     return `File saved: ${filePath} (${lines} lines, ${content.length} bytes)`;
   }
@@ -11340,7 +11347,7 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
       }
     }
     this.sendToolCallStart(call);
-    if (this.sessionAutoApprove && (dangerLevel === "write" || dangerLevel === "destructive")) {
+    if (this.sessionAutoApprove && dangerLevel === "write") {
       try {
         const rawContent = await runTool(tool, call.arguments, call.name);
         const content = truncateOutput(rawContent, call.name);
@@ -11444,7 +11451,7 @@ import { existsSync as existsSync19, readFileSync as readFileSync13 } from "fs";
 import { join as join12 } from "path";
 
 // src/repl/dev-state.ts
-import { existsSync as existsSync18, readFileSync as readFileSync12, writeFileSync as writeFileSync6, unlinkSync as unlinkSync4, mkdirSync as mkdirSync9 } from "fs";
+import { existsSync as existsSync18, readFileSync as readFileSync12, writeFileSync as writeFileSync3, unlinkSync as unlinkSync4, mkdirSync as mkdirSync9 } from "fs";
 import { join as join11 } from "path";
 import { homedir as homedir6 } from "os";
 function getDevStatePath() {
@@ -11722,7 +11729,7 @@ function autoTrimSessionIfNeeded(session, sizeLimit = SESSION_SIZE_LIMIT) {
 }
 
 // src/web/session-handler.ts
-import { existsSync as existsSync21, readFileSync as readFileSync14, appendFileSync as appendFileSync3, writeFileSync as writeFileSync7, mkdirSync as mkdirSync10, readdirSync as readdirSync9, statSync as statSync8, createWriteStream } from "fs";
+import { existsSync as existsSync21, readFileSync as readFileSync14, appendFileSync as appendFileSync3, writeFileSync as writeFileSync4, mkdirSync as mkdirSync10, readdirSync as readdirSync9, statSync as statSync8, createWriteStream } from "fs";
 import { join as join15, resolve as resolve5, dirname as dirname5 } from "path";
 import { execSync as execSync3 } from "child_process";
 
@@ -13086,7 +13093,7 @@ Try: /compact to reduce context, /clear to reset, or switch to a larger-context
             try {
               mkdirSync10(dirname5(pendingTeeSave), { recursive: true });
               const bodyToSave = stripOuterCodeFence(content);
-              writeFileSync7(pendingTeeSave, bodyToSave, "utf-8");
+              atomicWriteFileSync(pendingTeeSave, bodyToSave);
               undoStack.push(pendingTeeSave, `save_last_response (deferred): ${pendingTeeSave}`);
               const lines = bodyToSave.split("\n").length;
               this.send({ type: "info", message: `\u2705 Saved (from reply): ${pendingTeeSave} (${lines} lines, ${bodyToSave.length} chars)` });
@@ -13261,7 +13268,7 @@ ${summaryContent}`,
     let summary;
     try {
       mkdirSync10(dirname5(saveToFile), { recursive: true });
-      fileStream = createWriteStream(saveToFile, { encoding: "utf-8" });
+      fileStream = createWriteStream(saveToFile);
       const teeSystemPrompt = stripToolCallReminder(systemPrompt ?? "") + CONTENT_ONLY_STREAM_REMINDER;
       const teeExtraMessages = extraMessages.length > 0 ? [...extraMessages, { role: "user", content: TEE_FINAL_USER_NUDGE }] : [{ role: "user", content: TEE_FINAL_USER_NUDGE }];
       const chatRequest = {
@@ -13301,7 +13308,7 @@ ${summaryContent}`,
         fullContent = "";
       } else {
         if (verdict.kind === "salvaged" || verdict.kind === "fallback") {
-          writeFileSync7(saveToFile, verdict.content, "utf-8");
+          atomicWriteFileSync(saveToFile, verdict.content);
           fullContent = verdict.content;
         }
         summary = verdict.summary;
@@ -13753,7 +13760,7 @@ ${activated.meta.description || ""}` });
           this.send({ type: "info", message: "\u{1F512} Auto-approve disabled \u2014 confirmations restored for this session." });
         } else {
           this.toolExecutor.sessionAutoApprove = true;
-          this.send({ type: "info", message: "\u26A1 YOLO mode ON \u2014 all write/destructive tools auto-approved for this session.\nUse /yolo off to re-enable confirmations." });
+          this.send({ type: "info", message: "\u26A1 YOLO mode ON \u2014 write tools auto-approved; destructive tools still require confirmation.\nUse /yolo off to re-enable write confirmations." });
         }
         break;
       }
@@ -14366,7 +14373,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
       case "test": {
         this.send({ type: "info", message: "\u{1F9EA} Running tests..." });
         try {
-          const { executeTests } = await import("./run-tests-FGRWBNVF.js");
+          const { executeTests } = await import("./run-tests-NBCA4KEG.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {
@@ -14395,7 +14402,7 @@ Use /init --force to overwrite.` });
           const projectInfo = this.scanProject(cwd);
           const prompt = this.buildInitPrompt(projectInfo, cwd);
           const content = await this.chatOnce(prompt, { temperature: 0.3, maxTokens: 4096 });
-          writeFileSync7(targetPath, content, "utf-8");
+          writeFileSync4(targetPath, content, "utf-8");
           this.send({ type: "info", message: `\u2713 Generated: ${targetPath} (${content.length} chars)
 Use /context reload to load it.` });
         } catch (err) {
@@ -14874,7 +14881,7 @@ Add .md files to create commands.` });
     const configDir = this.config.getConfigDir();
     const memPath = join15(configDir, MEMORY_FILE_NAME);
     try {
-      writeFileSync7(memPath, "", "utf-8");
+      writeFileSync4(memPath, "", "utf-8");
       this.send({ type: "info", message: "\u{1F5D1}\uFE0F Persistent memory cleared." });
     } catch (err) {
       this.send({ type: "error", message: `Failed to clear memory: ${err.message}` });
@@ -15350,7 +15357,7 @@ async function setupProxy(configProxy) {
 }
 
 // src/web/auth.ts
-import { existsSync as existsSync22, readFileSync as readFileSync15, writeFileSync as writeFileSync8, mkdirSync as mkdirSync11, readdirSync as readdirSync10, copyFileSync } from "fs";
+import { existsSync as existsSync22, readFileSync as readFileSync15, writeFileSync as writeFileSync5, mkdirSync as mkdirSync11, readdirSync as readdirSync10, copyFileSync } from "fs";
 import { join as join16 } from "path";
 import { createHmac, randomBytes, timingSafeEqual, pbkdf2Sync } from "crypto";
 var USERS_FILE = "users.json";
@@ -15552,7 +15559,7 @@ var AuthManager = class {
     if (existsSync22(globalConfig)) {
       try {
         const content = readFileSync15(globalConfig, "utf-8");
-        writeFileSync8(join16(userDir, "config.json"), content, "utf-8");
+        writeFileSync5(join16(userDir, "config.json"), content, "utf-8");
       } catch {
       }
     }
@@ -15560,7 +15567,7 @@ var AuthManager = class {
     if (existsSync22(globalMemory)) {
       try {
         const content = readFileSync15(globalMemory, "utf-8");
-        writeFileSync8(join16(userDir, "memory.md"), content, "utf-8");
+        writeFileSync5(join16(userDir, "memory.md"), content, "utf-8");
       } catch {
       }
     }
@@ -16089,7 +16096,7 @@ async function startWebServer(options = {}) {
             handlers.set(tabId, handler);
             clearPreAuthTimer();
             console.log(`   \u2713 User registered & connected: ${username} (tab: ${tabId.slice(0, 12)})`);
-            ws.send(JSON.stringify({ type: "auth_result", success: true, token: newToken, username }));
+            ws.send(JSON.stringify({ type: "auth_result", success: true, username }));
             return;
           }
           if (action === "token") {
@@ -16105,7 +16112,7 @@ async function startWebServer(options = {}) {
             handlers.set(tabId, handler);
             clearPreAuthTimer();
             console.log(`   \u2713 Token auth: ${verifiedUser} (tab: ${tabId.slice(0, 12)})`);
-            ws.send(JSON.stringify({ type: "auth_result", success: true, token: clientToken, username: verifiedUser }));
+            ws.send(JSON.stringify({ type: "auth_result", success: true, username: verifiedUser }));
             return;
           }
           if (action === "login") {
@@ -16120,7 +16127,7 @@ async function startWebServer(options = {}) {
             handlers.set(tabId, handler);
             clearPreAuthTimer();
             console.log(`   \u2713 User logged in: ${username} (tab: ${tabId.slice(0, 12)})`);
-            ws.send(JSON.stringify({ type: "auth_result", success: true, token: loginToken, username }));
+            ws.send(JSON.stringify({ type: "auth_result", success: true, username }));
             return;
           }
           ws.send(JSON.stringify({ type: "auth_result", success: false, error: "Unknown auth action" }));
@@ -16146,9 +16153,10 @@ async function startWebServer(options = {}) {
     });
     ws.on("close", () => {
       clearPreAuthTimer();
-      console.log(`   \u2717 Tab disconnected: ${tabId.slice(0, 12)} (total: ${handlers.size - 1})`);
+      const wasTracked = handlers.has(tabId);
       if (handler) handler.onDisconnect();
-      handlers.delete(tabId);
+      if (wasTracked) handlers.delete(tabId);
+      console.log(`   \u2717 Tab disconnected: ${tabId.slice(0, 12)} (total: ${handlers.size})`);
     });
     ws.on("error", (err) => {
       console.error(`   WebSocket error: ${err.message}`);

package/dist/{hub-NCU5JNCK.js → hub-6R3M3NTC.js}

@@ -154,7 +154,7 @@ ${content}`);
   }
 }
 async function runTaskMode(config, providers, configManager, topic) {
-  const { TaskOrchestrator } = await import("./task-orchestrator-LJP5XZSC.js");
+  const { TaskOrchestrator } = await import("./task-orchestrator-2DTDVCMR.js");
   const orchestrator = new TaskOrchestrator(config, providers, configManager);
   let interrupted = false;
   const onSigint = () => {

package/dist/index.js

@@ -15,7 +15,7 @@ import {
   saveDevState,
   sessionHasMeaningfulContent,
   setupProxy
-} from "./chunk-ZSC4YLEJ.js";
+} from "./chunk-KOU4KX7J.js";
 import {
   ToolExecutor,
   ToolRegistry,
@@ -35,10 +35,10 @@ import {
   spawnAgentContext,
   theme,
   undoStack
-} from "./chunk-43MWRT2C.js";
+} from "./chunk-QQYSZMET.js";
 import "./chunk-T2NL5ZIA.js";
 import "./chunk-BXP6YZ2P.js";
-import "./chunk-VOV2PWZU.js";
+import "./chunk-SFCNFX42.js";
 import {
   SessionManager,
   getContentText
@@ -55,16 +55,16 @@ import {
   getConfigDirUsage,
   listRecentCrashes,
   writeCrashLog
-} from "./chunk-JVYH66N2.js";
+} from "./chunk-KJHMRAJU.js";
 import {
   ProviderRegistry
-} from "./chunk-UZISJ3KZ.js";
+} from "./chunk-QMXC327F.js";
 import {
   getStatsSnapshot,
   getTopFailingTools,
   getTopUsedTools,
   installFlushOnExit
-} from "./chunk-XIYSFN4U.js";
+} from "./chunk-2WV6AGHM.js";
 import {
   CONTENT_ONLY_STREAM_REMINDER,
   TEE_FINAL_USER_NUDGE,
@@ -83,10 +83,10 @@ import {
   stripOuterCodeFence,
   stripToolCallReminder,
   teeStreamErrorSummary
-} from "./chunk-SMFRJCXB.js";
+} from "./chunk-XPBEJB27.js";
 import {
   ConfigManager
-} from "./chunk-TZ7SNVSG.js";
+} from "./chunk-TW47X5AO.js";
 import {
   AuthError,
   ProviderError,
@@ -113,7 +113,7 @@ import {
   SKILLS_DIR_NAME,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-3RET7PL7.js";
+} from "./chunk-QNUVZO5X.js";
 import {
   formatGitContextForPrompt,
   getGitContext,
@@ -135,14 +135,16 @@ import {
 } from "./chunk-SLSWPBK3.js";
 import "./chunk-O6UFCEUZ.js";
 import "./chunk-CKH4KQ4E.js";
-import "./chunk-IW3Q7AE5.js";
+import {
+  atomicWriteFileSync
+} from "./chunk-IW3Q7AE5.js";
 
 // src/index.ts
 import { program } from "commander";
 
 // src/repl/repl.ts
 import * as readline from "readline";
-import { existsSync as existsSync4, readFileSync as readFileSync3, readdirSync as readdirSync3, statSync as statSync3, writeFileSync as writeFileSync2, mkdirSync as mkdirSync4 } from "fs";
+import { existsSync as existsSync4, readFileSync as readFileSync3, readdirSync as readdirSync3, statSync as statSync3, mkdirSync as mkdirSync4 } from "fs";
 import { join as join4, resolve as resolve2, extname as extname2, dirname as dirname3, basename as basename2 } from "path";
 import chalk4 from "chalk";
 
@@ -1828,7 +1830,7 @@ No tools match "${filter}".
           const { join: join5 } = await import("path");
           const { existsSync: existsSync5 } = await import("fs");
           const { getGitRoot: getGitRoot2 } = await import("./git-context-EXOEHQSF.js");
-          const { MCP_PROJECT_CONFIG_NAME: MCP_PROJECT_CONFIG_NAME2 } = await import("./constants-GMQMJRIO.js");
+          const { MCP_PROJECT_CONFIG_NAME: MCP_PROJECT_CONFIG_NAME2 } = await import("./constants-NHGTSHKT.js");
           const { approveProject, hashMcpFile } = await import("./project-trust-NKYHL3VZ.js");
           const cwd = process.cwd();
           const projectRoot = getGitRoot2(cwd) ?? cwd;
@@ -2889,7 +2891,7 @@ ${hint}` : "")
       usage: "/test [command|filter]",
       async execute(args, ctx) {
         try {
-          const { executeTests } = await import("./run-tests-ZFAEFEYK.js");
+          const { executeTests } = await import("./run-tests-5F2OBWIK.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {
@@ -3567,7 +3569,7 @@ Summary: ${fileMap.size} file(s) \u2014 ${newFiles} new, ${modifiedFiles} modifi
           console.log(theme.info("  \u{1F512} Auto-approve disabled \u2014 confirmations restored for this session."));
         } else {
           executor.sessionAutoApprove = true;
-          console.log(theme.warning("  \u26A1 YOLO mode ON \u2014 all write/destructive tools auto-approved for this session."));
+          console.log(theme.warning("  \u26A1 YOLO mode ON \u2014 write tools auto-approved; destructive tools still require confirmation."));
           console.log(theme.dim("  Use /yolo off to re-enable confirmations."));
         }
         console.log();
@@ -4047,11 +4049,11 @@ Managing ${displayName} API Key`);
     console.log("  alwaysYolo: " + (current ? theme.warning("ON") : theme.dim("off")));
     console.log(
       theme.dim(
-        "  When ON, REPL starts with sessionAutoApprove enabled \u2014 all write/destructive\n  tools (edit_file, bash, etc.) run without confirmation prompts. Only enable this\n  if you fully trust the working directory you run aicli in.\n"
+        "  When ON, REPL starts with sessionAutoApprove enabled \u2014 write\n  tools (write_file/edit_file, etc.) run without confirmation prompts. Destructive tools still require confirmation. Only enable this\n  if you fully trust the working directory you run aicli in.\n"
       )
     );
     const next = await confirm({
-      message: current ? "Keep alwaysYolo enabled?" : "Enable alwaysYolo (skip ALL write/destructive confirmations)?",
+      message: current ? "Keep alwaysYolo enabled?" : "Enable alwaysYolo (skip write confirmations; destructive still confirms)?",
       default: current
     });
     if (next === current) {
@@ -5391,7 +5393,7 @@ Session '${this.resumeSessionId}' not found.
     this.renderer.printWelcome(this.currentProvider, this.currentModel, welcomeModelInfo?.contextWindow, profileNickname);
     if (this.toolExecutor.sessionAutoApprove && this.config.get("alwaysYolo") === true) {
       process.stdout.write(
-        theme.warning("  \u26A1 YOLO mode ON (alwaysYolo=true in config) \u2014 all write/destructive tools auto-approved.\n")
+        theme.warning("  \u26A1 YOLO mode ON (alwaysYolo=true in config) \u2014 write tools auto-approved; destructive tools still require confirmation.\n")
       );
     }
     const cfgOutputCap = this.config.get("maxToolOutputChars");
@@ -6642,7 +6644,7 @@ ${decision.displayMessage}
             try {
               mkdirSync4(dirname3(pendingTeeSave), { recursive: true });
               const bodyToSave = stripOuterCodeFence(content);
-              writeFileSync2(pendingTeeSave, bodyToSave, "utf-8");
+              atomicWriteFileSync(pendingTeeSave, bodyToSave);
               undoStack.push(pendingTeeSave, `save_last_response (deferred): ${pendingTeeSave}`);
               const lines = bodyToSave.split("\n").length;
               process.stdout.write(theme.success(
@@ -6911,7 +6913,7 @@ Tip: You can continue the conversation by asking the AI to proceed.`
             }
             if (verdict.kind === "salvaged" || verdict.kind === "fallback") {
               try {
-                writeFileSync2(saveToFile, verdict.content, "utf-8");
+                atomicWriteFileSync(saveToFile, verdict.content);
                 const banner = verdict.kind === "fallback" ? `
   \u26A0 Fallback save: fresh stream had no usable body (matched: ${verdict.matched})
   ${saveToFile} now holds the response you previously saw (${verdict.content.length} chars).
@@ -7267,7 +7269,7 @@ program.command("web").description("Start Web UI server with browser-based chat
     console.error("Error: Invalid port number. Must be between 1 and 65535.");
     process.exit(1);
   }
-  const { startWebServer } = await import("./server-ML6ZL3J5.js");
+  const { startWebServer } = await import("./server-LDPQ3DLK.js");
   await startWebServer({ port, host: options.host });
 });
 program.command("user [action] [username]").description("Manage Web UI users (list | create <name> | delete <name> | reset-password <name> | logout-all <name> | migrate <name>)").action(async (action, username) => {
@@ -7434,16 +7436,16 @@ program.command("sessions").description("List recent conversation sessions").opt
   console.log(footer + "\n");
 });
 program.command("usage").description("Show token + cost usage grouped by provider/model (cross-session)").option("--days <n>", "Only the last N days (inclusive of today)").option("--month <ym>", "Only a specific month, format YYYY-MM (e.g. 2026-06)").option("--json", "Output as JSON (for scripting)").action(async (options) => {
-  const { runUsageCli } = await import("./usage-YX2235W5.js");
+  const { runUsageCli } = await import("./usage-SZWZFX3T.js");
   await runUsageCli(options);
 });
 program.command("doctor").description("Health check: API keys, config, MCP, recent crashes, tool usage, disk usage").option("--json", "Output as JSON (for scripting)").option("--reset-stats", "Reset accumulated tool usage statistics").action(async (options) => {
-  const { runDoctorCli } = await import("./doctor-cli-M5PPO3L3.js");
+  const { runDoctorCli } = await import("./doctor-cli-WKH7T4AW.js");
   await runDoctorCli({ json: !!options.json, resetStats: !!options.resetStats });
 });
 program.command("batch <action> [arg] [arg2]").description("Anthropic Message Batches: submit | list | status <id> | results <id> [out] | cancel <id>").option("--dry-run", "Parse and validate input without submitting (submit only)").action(async (action, arg, arg2, options) => {
   try {
-    const batch = await import("./batch-RBPABHS7.js");
+    const batch = await import("./batch-6PORMJWT.js");
     switch (action) {
       case "submit":
         if (!arg) {
@@ -7486,7 +7488,7 @@ program.command("batch <action> [arg] [arg2]").description("Anthropic Message Ba
   }
 });
 program.command("mcp-serve").description("Start an MCP server over STDIO, exposing aicli's built-in tools to Claude Desktop / Cursor / other MCP clients").option("--allow-destructive", "Allow bash / run_interactive / task_create (always destructive in MCP mode)").option("--allow-outside-cwd", "Allow tool path arguments to escape the sandbox root \u2014 disabled by default").option("--tools <list>", "Comma-separated whitelist of tools to expose (default: all eligible tools)").option("--cwd <path>", "Working directory AND sandbox root (default: current directory)").action(async (options) => {
-  const { startMcpServer } = await import("./server-RKP7JRRE.js");
+  const { startMcpServer } = await import("./server-37EXC4EB.js");
   await startMcpServer({
     allowDestructive: !!options.allowDestructive,
     allowOutsideCwd: !!options.allowOutsideCwd,
@@ -7495,7 +7497,7 @@ program.command("mcp-serve").description("Start an MCP server over STDIO, exposi
   });
 });
 program.command("ci").description("Headless PR review (code + security) \u2014 reads git/gh diff, optionally posts to PR. Designed for GitHub Actions.").option("--pr <num>", "PR number; diff fetched via `gh pr diff <num>`", (v) => parseInt(v, 10)).option("--base <ref>", "Base ref for `git diff <ref>...HEAD` (ignored when --pr set)").option("--post", "Post review as a PR comment (requires gh CLI + GH_TOKEN, needs --pr)").option("--no-update", "Always create a new comment instead of updating the previous aicli review").option("--skip-code", "Skip the code review section").option("--skip-security", "Skip the security review section").option("--detailed", "Use the detailed code-review prompt").option("--max-diff <n>", "Max diff chars sent to the model (default 30000)", (v) => parseInt(v, 10)).option("--provider <id>", "Override provider (default: config.defaultProvider)").option("--model <id>", "Override model").option("--dry-run", "Print result to stdout instead of posting (overrides --post)").action(async (options) => {
-  const { runCi } = await import("./ci-ABE74AXH.js");
+  const { runCi } = await import("./ci-AYMV66P3.js");
   const result = await runCi({
     pr: options.pr,
     base: options.base,
@@ -7593,7 +7595,7 @@ program.command("help").description("Show a comprehensive guide to all aicli fea
     `    ${M}/checkpoint${R} ${M}/fork${R}               Save/restore/fork session state`,
     `    ${M}/branch${R}                        List/create/switch/delete conversation branches (B2)`,
     `    ${M}/undo${R}                          Undo file operations`,
-    `    ${M}/yolo${R}                          Skip all tool confirmations`,
+    `    ${M}/yolo${R}                          Skip write confirmations`,
     `    ${M}/mcp${R}                           Manage MCP server connections`,
     `    ${M}/skill${R}                         Manage agent skills`,
     `    ${M}/memory${R}                        View/edit persistent memory`,
@@ -7641,7 +7643,7 @@ program.command("hub [topic]").description("Start multi-agent hub (discuss / bra
     }),
     config.get("customProviders")
   );
-  const { startHub } = await import("./hub-NCU5JNCK.js");
+  const { startHub } = await import("./hub-6R3M3NTC.js");
   await startHub(
     {
       topic: topic ?? "",

package/dist/{run-tests-ZFAEFEYK.js → run-tests-5F2OBWIK.js}

@@ -2,8 +2,8 @@
 import {
   executeTests,
   runTestsTool
-} from "./chunk-VOV2PWZU.js";
-import "./chunk-3RET7PL7.js";
+} from "./chunk-SFCNFX42.js";
+import "./chunk-QNUVZO5X.js";
 export {
   executeTests,
   runTestsTool

package/dist/{run-tests-FGRWBNVF.js → run-tests-NBCA4KEG.js}

@@ -1,7 +1,7 @@
 import {
   executeTests,
   runTestsTool
-} from "./chunk-43H3D2PK.js";
+} from "./chunk-BQIV4ZQT.js";
 export {
   executeTests,
   runTestsTool

package/dist/{server-RKP7JRRE.js → server-37EXC4EB.js}

@@ -1,21 +1,21 @@
 #!/usr/bin/env node
 import {
   ToolRegistry
-} from "./chunk-43MWRT2C.js";
+} from "./chunk-QQYSZMET.js";
 import "./chunk-T2NL5ZIA.js";
 import "./chunk-BXP6YZ2P.js";
-import "./chunk-VOV2PWZU.js";
+import "./chunk-SFCNFX42.js";
 import {
   runTool
-} from "./chunk-XIYSFN4U.js";
+} from "./chunk-2WV6AGHM.js";
 import {
   getDangerLevel,
   schemaToJsonSchema
-} from "./chunk-SMFRJCXB.js";
+} from "./chunk-XPBEJB27.js";
 import "./chunk-TZQHYZKT.js";
 import {
   VERSION
-} from "./chunk-3RET7PL7.js";
+} from "./chunk-QNUVZO5X.js";
 import "./chunk-4BKXL7SM.js";
 import "./chunk-TB4W4Y4T.js";
 import "./chunk-KHYD3WXE.js";

package/dist/{server-ML6ZL3J5.js → server-LDPQ3DLK.js}

@@ -19,7 +19,7 @@ import {
   loadDevState,
   persistToolRound,
   setupProxy
-} from "./chunk-ZSC4YLEJ.js";
+} from "./chunk-KOU4KX7J.js";
 import {
   ToolExecutor,
   ToolRegistry,
@@ -38,10 +38,10 @@ import {
   spawnAgentContext,
   truncateOutput,
   undoStack
-} from "./chunk-43MWRT2C.js";
+} from "./chunk-QQYSZMET.js";
 import "./chunk-T2NL5ZIA.js";
 import "./chunk-BXP6YZ2P.js";
-import "./chunk-VOV2PWZU.js";
+import "./chunk-SFCNFX42.js";
 import {
   SessionManager,
   getContentText
@@ -52,10 +52,10 @@ import {
 } from "./chunk-E44DTERW.js";
 import {
   ProviderRegistry
-} from "./chunk-UZISJ3KZ.js";
+} from "./chunk-QMXC327F.js";
 import {
   runTool
-} from "./chunk-XIYSFN4U.js";
+} from "./chunk-2WV6AGHM.js";
 import {
   CONTENT_ONLY_STREAM_REMINDER,
   TEE_FINAL_USER_NUDGE,
@@ -71,10 +71,10 @@ import {
   stripOuterCodeFence,
   stripToolCallReminder,
   teeStreamErrorSummary
-} from "./chunk-SMFRJCXB.js";
+} from "./chunk-XPBEJB27.js";
 import {
   ConfigManager
-} from "./chunk-TZ7SNVSG.js";
+} from "./chunk-TW47X5AO.js";
 import "./chunk-TZQHYZKT.js";
 import {
   AGENTIC_BEHAVIOR_GUIDELINE,
@@ -94,7 +94,7 @@ import {
   SKILLS_DIR_NAME,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-3RET7PL7.js";
+} from "./chunk-QNUVZO5X.js";
 import {
   formatGitContextForPrompt,
   getGitContext,
@@ -106,7 +106,9 @@ import "./chunk-KHYD3WXE.js";
 import "./chunk-SLSWPBK3.js";
 import "./chunk-O6UFCEUZ.js";
 import "./chunk-CKH4KQ4E.js";
-import "./chunk-IW3Q7AE5.js";
+import {
+  atomicWriteFileSync
+} from "./chunk-IW3Q7AE5.js";
 
 // src/web/server.ts
 import express from "express";
@@ -346,7 +348,7 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
       }
     }
     this.sendToolCallStart(call);
-    if (this.sessionAutoApprove && (dangerLevel === "write" || dangerLevel === "destructive")) {
+    if (this.sessionAutoApprove && dangerLevel === "write") {
       try {
         const rawContent = await runTool(tool, call.arguments, call.name);
         const content = truncateOutput(rawContent, call.name);
@@ -1176,7 +1178,7 @@ Try: /compact to reduce context, /clear to reset, or switch to a larger-context
             try {
               mkdirSync(dirname(pendingTeeSave), { recursive: true });
               const bodyToSave = stripOuterCodeFence(content);
-              writeFileSync(pendingTeeSave, bodyToSave, "utf-8");
+              atomicWriteFileSync(pendingTeeSave, bodyToSave);
               undoStack.push(pendingTeeSave, `save_last_response (deferred): ${pendingTeeSave}`);
               const lines = bodyToSave.split("\n").length;
               this.send({ type: "info", message: `\u2705 Saved (from reply): ${pendingTeeSave} (${lines} lines, ${bodyToSave.length} chars)` });
@@ -1351,7 +1353,7 @@ ${summaryContent}`,
     let summary;
     try {
       mkdirSync(dirname(saveToFile), { recursive: true });
-      fileStream = createWriteStream(saveToFile, { encoding: "utf-8" });
+      fileStream = createWriteStream(saveToFile);
       const teeSystemPrompt = stripToolCallReminder(systemPrompt ?? "") + CONTENT_ONLY_STREAM_REMINDER;
       const teeExtraMessages = extraMessages.length > 0 ? [...extraMessages, { role: "user", content: TEE_FINAL_USER_NUDGE }] : [{ role: "user", content: TEE_FINAL_USER_NUDGE }];
       const chatRequest = {
@@ -1391,7 +1393,7 @@ ${summaryContent}`,
         fullContent = "";
       } else {
         if (verdict.kind === "salvaged" || verdict.kind === "fallback") {
-          writeFileSync(saveToFile, verdict.content, "utf-8");
+          atomicWriteFileSync(saveToFile, verdict.content);
           fullContent = verdict.content;
         }
         summary = verdict.summary;
@@ -1843,7 +1845,7 @@ ${activated.meta.description || ""}` });
           this.send({ type: "info", message: "\u{1F512} Auto-approve disabled \u2014 confirmations restored for this session." });
         } else {
           this.toolExecutor.sessionAutoApprove = true;
-          this.send({ type: "info", message: "\u26A1 YOLO mode ON \u2014 all write/destructive tools auto-approved for this session.\nUse /yolo off to re-enable confirmations." });
+          this.send({ type: "info", message: "\u26A1 YOLO mode ON \u2014 write tools auto-approved; destructive tools still require confirmation.\nUse /yolo off to re-enable write confirmations." });
         }
         break;
       }
@@ -2456,7 +2458,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
       case "test": {
         this.send({ type: "info", message: "\u{1F9EA} Running tests..." });
         try {
-          const { executeTests } = await import("./run-tests-ZFAEFEYK.js");
+          const { executeTests } = await import("./run-tests-5F2OBWIK.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {
@@ -3891,7 +3893,7 @@ async function startWebServer(options = {}) {
             handlers.set(tabId, handler);
             clearPreAuthTimer();
             console.log(`   \u2713 User registered & connected: ${username} (tab: ${tabId.slice(0, 12)})`);
-            ws.send(JSON.stringify({ type: "auth_result", success: true, token: newToken, username }));
+            ws.send(JSON.stringify({ type: "auth_result", success: true, username }));
             return;
           }
           if (action === "token") {
@@ -3907,7 +3909,7 @@ async function startWebServer(options = {}) {
             handlers.set(tabId, handler);
             clearPreAuthTimer();
             console.log(`   \u2713 Token auth: ${verifiedUser} (tab: ${tabId.slice(0, 12)})`);
-            ws.send(JSON.stringify({ type: "auth_result", success: true, token: clientToken, username: verifiedUser }));
+            ws.send(JSON.stringify({ type: "auth_result", success: true, username: verifiedUser }));
             return;
           }
           if (action === "login") {
@@ -3922,7 +3924,7 @@ async function startWebServer(options = {}) {
             handlers.set(tabId, handler);
             clearPreAuthTimer();
             console.log(`   \u2713 User logged in: ${username} (tab: ${tabId.slice(0, 12)})`);
-            ws.send(JSON.stringify({ type: "auth_result", success: true, token: loginToken, username }));
+            ws.send(JSON.stringify({ type: "auth_result", success: true, username }));
             return;
           }
           ws.send(JSON.stringify({ type: "auth_result", success: false, error: "Unknown auth action" }));
@@ -3948,9 +3950,10 @@ async function startWebServer(options = {}) {
     });
     ws.on("close", () => {
       clearPreAuthTimer();
-      console.log(`   \u2717 Tab disconnected: ${tabId.slice(0, 12)} (total: ${handlers.size - 1})`);
+      const wasTracked = handlers.has(tabId);
       if (handler) handler.onDisconnect();
-      handlers.delete(tabId);
+      if (wasTracked) handlers.delete(tabId);
+      console.log(`   \u2717 Tab disconnected: ${tabId.slice(0, 12)} (total: ${handlers.size})`);
     });
     ws.on("error", (err) => {
       console.error(`   WebSocket error: ${err.message}`);

package/dist/{task-orchestrator-LJP5XZSC.js → task-orchestrator-2DTDVCMR.js}

@@ -3,21 +3,21 @@ import {
   ToolRegistry,
   googleSearchContext,
   truncateOutput
-} from "./chunk-43MWRT2C.js";
+} from "./chunk-QQYSZMET.js";
 import "./chunk-T2NL5ZIA.js";
 import "./chunk-BXP6YZ2P.js";
-import "./chunk-VOV2PWZU.js";
+import "./chunk-SFCNFX42.js";
 import {
   runTool
-} from "./chunk-XIYSFN4U.js";
+} from "./chunk-2WV6AGHM.js";
 import {
   getDangerLevel,
   runLeanAgentLoop
-} from "./chunk-SMFRJCXB.js";
+} from "./chunk-XPBEJB27.js";
 import "./chunk-TZQHYZKT.js";
 import {
   SUBAGENT_ALLOWED_TOOLS
-} from "./chunk-3RET7PL7.js";
+} from "./chunk-QNUVZO5X.js";
 import "./chunk-4BKXL7SM.js";
 import "./chunk-TB4W4Y4T.js";
 import "./chunk-KHYD3WXE.js";

package/dist/{usage-YX2235W5.js → usage-SZWZFX3T.js}

@@ -8,9 +8,9 @@ import {
 } from "./chunk-E44DTERW.js";
 import {
   ConfigManager
-} from "./chunk-TZ7SNVSG.js";
+} from "./chunk-TW47X5AO.js";
 import "./chunk-TZQHYZKT.js";
-import "./chunk-3RET7PL7.js";
+import "./chunk-QNUVZO5X.js";
 import "./chunk-IW3Q7AE5.js";
 
 // src/cli/usage.ts

package/dist/web/client/app.js

@@ -2805,8 +2805,8 @@ async function handleAuth(event) {
   }
 }
 
-// Legacy WS auth_result handler — kept for backwards-compat with clients/
-// flows that still hit the WS auth path. Token field, if present, is ignored.
+// Legacy WS auth_result handler — kept for flows that still hit the WS auth path.
+// The server no longer echoes tokens; auth state is carried by httpOnly cookie.
 function handleAuthResult(msg) {
   const errorEl = document.getElementById('auth-error');
   const submitBtn = document.getElementById('auth-submit');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jinzd-ai-cli",
-  "version": "0.4.205",
+  "version": "0.4.206",
   "description": "Cross-platform REPL-style AI CLI with multi-provider support",
   "type": "module",
   "main": "./dist/index.js",