jinzd-ai-cli 0.4.205 → 0.4.207

package/dist/electron-server.js

@@ -36,7 +36,7 @@ import {
   VERSION,
   buildUserIdentityPrompt,
   runTestsTool
-} from "./chunk-43H3D2PK.js";
+} from "./chunk-BQIV4ZQT.js";
 import {
   hasSemanticIndex,
   semanticSearch
@@ -623,8 +623,8 @@ var BaseProvider = class {
    * 将 Message[] 转换为 OpenAI API 格式的消息数组。
    * content 为 string 时直接传递；为 MessageContentPart[] 时保留数组格式（vision 请求）。
    *
-   * 自动跳过 role='tool' 和带 toolCalls 的 assistant 消息——
-   * 这些是 v0.4.60+ 持久化的工具历史，由 _extraMessages 机制单独注入。
+   * 基类只提供降级格式：跳过 role='tool' 和带 toolCalls 的 assistant 消息。
+   * 需要完整工具历史 roundtrip 的 provider 应覆盖消息构造逻辑，例如 OpenAI-compatible provider。
    */
   normalizeMessages(messages) {
     return messages.filter((m) => m.role !== "tool" && !m.toolCalls).map((m) => ({ role: m.role, content: m.content }));
@@ -636,7 +636,14 @@ function isFileWriteTool(name) {
   return name === "write_file" || name === "edit_file" || name === "notebook_edit";
 }
 function getDangerLevel(toolName, args) {
-  if (toolName.startsWith("mcp__")) return "safe";
+  if (toolName.startsWith("mcp__")) {
+    const rawName = toolName.split("__").pop() ?? "";
+    const normalized = rawName.toLowerCase().replace(/[^a-z0-9]+/g, "_");
+    if (/^(read|get|list|search|find|query|fetch|status|describe|inspect|show|lookup)(?:_|$)/.test(normalized)) {
+      return "safe";
+    }
+    return "write";
+  }
   if (toolName === "bash") {
     const cmd = String(args["command"] ?? "");
     if (/\brm\s+[^\n]*(?:-\w*[rRfF]\w*|--recursive|--force)\b/.test(cmd)) return "destructive";
@@ -5714,7 +5721,7 @@ ${content}`;
 };
 
 // src/tools/builtin/write-file.ts
-import { writeFileSync as writeFileSync3, appendFileSync, mkdirSync as mkdirSync4 } from "fs";
+import { appendFileSync, mkdirSync as mkdirSync4 } from "fs";
 import { dirname as dirname3 } from "path";
 
 // src/tools/executor.ts
@@ -6237,8 +6244,8 @@ var ToolExecutor = class {
   /** confirm() 的取消回调，由 SIGINT handler 调用 */
   cancelConfirmFn = null;
   /**
-   * 会话级 auto-approve：跳过所有 write/destructive 确认（仅当前会话有效）。
-   * 通过 /yolo 命令切换。destructive 操作仍会显示警告但不阻塞。
+   * 会话级 auto-approve：跳过 write 确认（仅当前会话有效）。
+   * destructive 操作仍然必须逐次确认。
    */
   sessionAutoApprove = false;
   /**
@@ -6322,7 +6329,7 @@ var ToolExecutor = class {
         }
       }
     }
-    if (this.sessionAutoApprove && dangerLevel !== "safe") {
+    if (this.sessionAutoApprove && dangerLevel === "write") {
       this.printToolCall(call);
       if (dangerLevel === "write") this.printDiffPreview(call);
       console.log(theme.warning("  \u26A1 Auto-approved (session /yolo mode)"));
@@ -6851,7 +6858,7 @@ Do NOT split a long document into many write_file(append=true) calls. That patte
     if (appendMode) {
       appendFileSync(filePath, content, encoding);
     } else {
-      writeFileSync3(filePath, content, encoding);
+      atomicWriteFileSync(filePath, content);
     }
     const lines = content.split("\n").length;
     const mode = appendMode ? "appended" : "written";
@@ -6867,7 +6874,7 @@ Do NOT split a long document into many write_file(append=true) calls. That patte
 };
 
 // src/tools/builtin/edit-file.ts
-import { readFileSync as readFileSync7, writeFileSync as writeFileSync4, existsSync as existsSync8 } from "fs";
+import { readFileSync as readFileSync7, existsSync as existsSync8 } from "fs";
 
 // src/tools/builtin/patch-apply.ts
 function parseUnifiedDiff(patch) {
@@ -7266,7 +7273,7 @@ Note: Path can be absolute or relative to cwd.`,
       if (res.ok && res.appliedCount > 0 && res.content !== void 0) {
         undoStack.push(filePath, `edit_file (patch ${res.appliedCount}/${hunks.length}): ${filePath}`);
         fileCheckpoints.snapshot(filePath, ToolExecutor.currentMessageIndex);
-        writeFileSync4(filePath, res.content, encoding);
+        atomicWriteFileSync(filePath, res.content);
       }
       return lines.join("\n");
     }
@@ -7300,7 +7307,7 @@ Note: Path can be absolute or relative to cwd.`,
       if (writeChanges) {
         undoStack.push(filePath, `edit_file (batch ${appliedCount}/${edits.length}): ${filePath}`);
         fileCheckpoints.snapshot(filePath, ToolExecutor.currentMessageIndex);
-        writeFileSync4(filePath, working, encoding);
+        atomicWriteFileSync(filePath, working);
       }
       const lines = [];
       if (anyFailed && stopOnError) {
@@ -7338,7 +7345,7 @@ Please read the file first and use exact text.`;
       const label = res.info?.mode === "ignore_whitespace" ? "edit_file (ws-replace)" : res.info?.mode === "replace_all" ? "edit_file (replace_all)" : "edit_file (replace)";
       undoStack.push(filePath, `${label}: ${filePath}`);
       fileCheckpoints.snapshot(filePath, ToolExecutor.currentMessageIndex);
-      writeFileSync4(filePath, res.content, encoding);
+      atomicWriteFileSync(filePath, res.content);
       if (res.info?.mode === "replace_all") {
         return `Successfully edited ${filePath}${modeLabel}
   Replaced: ${res.info.replacedCount} occurrence(s) of ${truncatePreview(oldStr)}
@@ -7362,7 +7369,7 @@ Please read the file first and use exact text.`;
       undoStack.push(filePath, `edit_file (insert): ${filePath}`);
       fileCheckpoints.snapshot(filePath, ToolExecutor.currentMessageIndex);
       lines.splice(afterLine, 0, content);
-      writeFileSync4(filePath, lines.join("\n"), encoding);
+      atomicWriteFileSync(filePath, lines.join("\n"));
       return `Successfully inserted ${content.split("\n").length} line(s) after line ${afterLine} in ${filePath}`;
     }
     if (args["delete_from_line"] !== void 0) {
@@ -7378,7 +7385,7 @@ Please read the file first and use exact text.`;
       undoStack.push(filePath, `edit_file (delete): ${filePath}`);
       fileCheckpoints.snapshot(filePath, ToolExecutor.currentMessageIndex);
       const deleted = lines.splice(fromLine - 1, toLine - fromLine + 1);
-      writeFileSync4(filePath, lines.join("\n"), encoding);
+      atomicWriteFileSync(filePath, lines.join("\n"));
       return `Successfully deleted lines ${fromLine}-${toLine} (${deleted.length} lines) from ${filePath}`;
     }
     throw new ToolError(
@@ -8583,7 +8590,7 @@ ${preamble}`;
 }
 
 // src/tools/builtin/save-last-response.ts
-import { writeFileSync as writeFileSync5, mkdirSync as mkdirSync5, unlinkSync as unlinkSync3, rmdirSync as rmdirSync2 } from "fs";
+import { mkdirSync as mkdirSync5, unlinkSync as unlinkSync3, rmdirSync as rmdirSync2 } from "fs";
 import { dirname as dirname4 } from "path";
 var lastResponseStore = { content: "" };
 function cleanupRejectedTeeFile(filePath) {
@@ -8634,7 +8641,7 @@ Any of these triggers means use save_last_response, NOT write_file:
     }
     undoStack.push(filePath, `save_last_response: ${filePath}`);
     mkdirSync5(dirname4(filePath), { recursive: true });
-    writeFileSync5(filePath, content, "utf-8");
+    atomicWriteFileSync(filePath, content);
     const lines = content.split("\n").length;
     return `File saved: ${filePath} (${lines} lines, ${content.length} bytes)`;
   }
@@ -11340,7 +11347,7 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
       }
     }
     this.sendToolCallStart(call);
-    if (this.sessionAutoApprove && (dangerLevel === "write" || dangerLevel === "destructive")) {
+    if (this.sessionAutoApprove && dangerLevel === "write") {
       try {
         const rawContent = await runTool(tool, call.arguments, call.name);
         const content = truncateOutput(rawContent, call.name);
@@ -11444,7 +11451,7 @@ import { existsSync as existsSync19, readFileSync as readFileSync13 } from "fs";
 import { join as join12 } from "path";
 
 // src/repl/dev-state.ts
-import { existsSync as existsSync18, readFileSync as readFileSync12, writeFileSync as writeFileSync6, unlinkSync as unlinkSync4, mkdirSync as mkdirSync9 } from "fs";
+import { existsSync as existsSync18, readFileSync as readFileSync12, writeFileSync as writeFileSync3, unlinkSync as unlinkSync4, mkdirSync as mkdirSync9 } from "fs";
 import { join as join11 } from "path";
 import { homedir as homedir6 } from "os";
 function getDevStatePath() {
@@ -11722,7 +11729,7 @@ function autoTrimSessionIfNeeded(session, sizeLimit = SESSION_SIZE_LIMIT) {
 }
 
 // src/web/session-handler.ts
-import { existsSync as existsSync21, readFileSync as readFileSync14, appendFileSync as appendFileSync3, writeFileSync as writeFileSync7, mkdirSync as mkdirSync10, readdirSync as readdirSync9, statSync as statSync8, createWriteStream } from "fs";
+import { existsSync as existsSync21, readFileSync as readFileSync14, appendFileSync as appendFileSync3, writeFileSync as writeFileSync4, mkdirSync as mkdirSync10, readdirSync as readdirSync9, statSync as statSync8, createWriteStream } from "fs";
 import { join as join15, resolve as resolve5, dirname as dirname5 } from "path";
 import { execSync as execSync3 } from "child_process";
 
@@ -13086,7 +13093,7 @@ Try: /compact to reduce context, /clear to reset, or switch to a larger-context
             try {
               mkdirSync10(dirname5(pendingTeeSave), { recursive: true });
               const bodyToSave = stripOuterCodeFence(content);
-              writeFileSync7(pendingTeeSave, bodyToSave, "utf-8");
+              atomicWriteFileSync(pendingTeeSave, bodyToSave);
               undoStack.push(pendingTeeSave, `save_last_response (deferred): ${pendingTeeSave}`);
               const lines = bodyToSave.split("\n").length;
               this.send({ type: "info", message: `\u2705 Saved (from reply): ${pendingTeeSave} (${lines} lines, ${bodyToSave.length} chars)` });
@@ -13261,7 +13268,7 @@ ${summaryContent}`,
     let summary;
     try {
       mkdirSync10(dirname5(saveToFile), { recursive: true });
-      fileStream = createWriteStream(saveToFile, { encoding: "utf-8" });
+      fileStream = createWriteStream(saveToFile);
       const teeSystemPrompt = stripToolCallReminder(systemPrompt ?? "") + CONTENT_ONLY_STREAM_REMINDER;
       const teeExtraMessages = extraMessages.length > 0 ? [...extraMessages, { role: "user", content: TEE_FINAL_USER_NUDGE }] : [{ role: "user", content: TEE_FINAL_USER_NUDGE }];
       const chatRequest = {
@@ -13301,7 +13308,7 @@ ${summaryContent}`,
         fullContent = "";
       } else {
         if (verdict.kind === "salvaged" || verdict.kind === "fallback") {
-          writeFileSync7(saveToFile, verdict.content, "utf-8");
+          atomicWriteFileSync(saveToFile, verdict.content);
           fullContent = verdict.content;
         }
         summary = verdict.summary;
@@ -13753,7 +13760,7 @@ ${activated.meta.description || ""}` });
           this.send({ type: "info", message: "\u{1F512} Auto-approve disabled \u2014 confirmations restored for this session." });
         } else {
           this.toolExecutor.sessionAutoApprove = true;
-          this.send({ type: "info", message: "\u26A1 YOLO mode ON \u2014 all write/destructive tools auto-approved for this session.\nUse /yolo off to re-enable confirmations." });
+          this.send({ type: "info", message: "\u26A1 YOLO mode ON \u2014 write tools auto-approved; destructive tools still require confirmation.\nUse /yolo off to re-enable write confirmations." });
         }
         break;
       }
@@ -14366,7 +14373,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
       case "test": {
         this.send({ type: "info", message: "\u{1F9EA} Running tests..." });
         try {
-          const { executeTests } = await import("./run-tests-FGRWBNVF.js");
+          const { executeTests } = await import("./run-tests-NBCA4KEG.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {
@@ -14395,7 +14402,7 @@ Use /init --force to overwrite.` });
           const projectInfo = this.scanProject(cwd);
           const prompt = this.buildInitPrompt(projectInfo, cwd);
           const content = await this.chatOnce(prompt, { temperature: 0.3, maxTokens: 4096 });
-          writeFileSync7(targetPath, content, "utf-8");
+          writeFileSync4(targetPath, content, "utf-8");
           this.send({ type: "info", message: `\u2713 Generated: ${targetPath} (${content.length} chars)
 Use /context reload to load it.` });
         } catch (err) {
@@ -14874,7 +14881,7 @@ Add .md files to create commands.` });
     const configDir = this.config.getConfigDir();
     const memPath = join15(configDir, MEMORY_FILE_NAME);
     try {
-      writeFileSync7(memPath, "", "utf-8");
+      writeFileSync4(memPath, "", "utf-8");
       this.send({ type: "info", message: "\u{1F5D1}\uFE0F Persistent memory cleared." });
     } catch (err) {
       this.send({ type: "error", message: `Failed to clear memory: ${err.message}` });
@@ -15350,7 +15357,7 @@ async function setupProxy(configProxy) {
 }
 
 // src/web/auth.ts
-import { existsSync as existsSync22, readFileSync as readFileSync15, writeFileSync as writeFileSync8, mkdirSync as mkdirSync11, readdirSync as readdirSync10, copyFileSync } from "fs";
+import { existsSync as existsSync22, readFileSync as readFileSync15, writeFileSync as writeFileSync5, mkdirSync as mkdirSync11, readdirSync as readdirSync10, copyFileSync } from "fs";
 import { join as join16 } from "path";
 import { createHmac, randomBytes, timingSafeEqual, pbkdf2Sync } from "crypto";
 var USERS_FILE = "users.json";
@@ -15552,7 +15559,7 @@ var AuthManager = class {
     if (existsSync22(globalConfig)) {
       try {
         const content = readFileSync15(globalConfig, "utf-8");
-        writeFileSync8(join16(userDir, "config.json"), content, "utf-8");
+        writeFileSync5(join16(userDir, "config.json"), content, "utf-8");
       } catch {
       }
     }
@@ -15560,7 +15567,7 @@ var AuthManager = class {
     if (existsSync22(globalMemory)) {
       try {
         const content = readFileSync15(globalMemory, "utf-8");
-        writeFileSync8(join16(userDir, "memory.md"), content, "utf-8");
+        writeFileSync5(join16(userDir, "memory.md"), content, "utf-8");
       } catch {
       }
     }
@@ -15724,12 +15731,9 @@ async function startWebServer(options = {}) {
       "Content-Security-Policy",
       [
         "default-src 'self'",
-        // v0.4.162: the client UI is driven by inline onclick= handlers and
-        // inline <script> blocks (SW registration, theme init). 'self' alone
-        // silently blocked EVERY button (click → nothing, no JS error, just a
-        // CSP violation in the console). localhost dev/admin tool — the
-        // unsafe-inline XSS surface is acceptable under that threat model.
-        "script-src 'self' 'unsafe-inline'",
+        // Inline event handlers and startup scripts live in app.js, so script
+        // execution stays locked to same-origin files only.
+        "script-src 'self'",
         "style-src 'self' 'unsafe-inline'",
         "img-src 'self' data: blob:",
         "font-src 'self' data:",
@@ -16089,7 +16093,7 @@ async function startWebServer(options = {}) {
             handlers.set(tabId, handler);
             clearPreAuthTimer();
             console.log(`   \u2713 User registered & connected: ${username} (tab: ${tabId.slice(0, 12)})`);
-            ws.send(JSON.stringify({ type: "auth_result", success: true, token: newToken, username }));
+            ws.send(JSON.stringify({ type: "auth_result", success: true, username }));
             return;
           }
           if (action === "token") {
@@ -16105,7 +16109,7 @@ async function startWebServer(options = {}) {
             handlers.set(tabId, handler);
             clearPreAuthTimer();
             console.log(`   \u2713 Token auth: ${verifiedUser} (tab: ${tabId.slice(0, 12)})`);
-            ws.send(JSON.stringify({ type: "auth_result", success: true, token: clientToken, username: verifiedUser }));
+            ws.send(JSON.stringify({ type: "auth_result", success: true, username: verifiedUser }));
             return;
           }
           if (action === "login") {
@@ -16120,7 +16124,7 @@ async function startWebServer(options = {}) {
             handlers.set(tabId, handler);
             clearPreAuthTimer();
             console.log(`   \u2713 User logged in: ${username} (tab: ${tabId.slice(0, 12)})`);
-            ws.send(JSON.stringify({ type: "auth_result", success: true, token: loginToken, username }));
+            ws.send(JSON.stringify({ type: "auth_result", success: true, username }));
             return;
           }
           ws.send(JSON.stringify({ type: "auth_result", success: false, error: "Unknown auth action" }));
@@ -16146,9 +16150,10 @@ async function startWebServer(options = {}) {
     });
     ws.on("close", () => {
       clearPreAuthTimer();
-      console.log(`   \u2717 Tab disconnected: ${tabId.slice(0, 12)} (total: ${handlers.size - 1})`);
+      const wasTracked = handlers.has(tabId);
       if (handler) handler.onDisconnect();
-      handlers.delete(tabId);
+      if (wasTracked) handlers.delete(tabId);
+      console.log(`   \u2717 Tab disconnected: ${tabId.slice(0, 12)} (total: ${handlers.size})`);
     });
     ws.on("error", (err) => {
       console.error(`   WebSocket error: ${err.message}`);

package/dist/{hub-NCU5JNCK.js → hub-6R3M3NTC.js}

@@ -154,7 +154,7 @@ ${content}`);
   }
 }
 async function runTaskMode(config, providers, configManager, topic) {
-  const { TaskOrchestrator } = await import("./task-orchestrator-LJP5XZSC.js");
+  const { TaskOrchestrator } = await import("./task-orchestrator-2DTDVCMR.js");
   const orchestrator = new TaskOrchestrator(config, providers, configManager);
   let interrupted = false;
   const onSigint = () => {