jinzd-ai-cli 0.4.206 → 0.4.208

package/dist/index.js

@@ -15,7 +15,7 @@ import {
   saveDevState,
   sessionHasMeaningfulContent,
   setupProxy
-} from "./chunk-KOU4KX7J.js";
+} from "./chunk-TD7JEHCR.js";
 import {
   ToolExecutor,
   ToolRegistry,
@@ -35,10 +35,10 @@ import {
   spawnAgentContext,
   theme,
   undoStack
-} from "./chunk-QQYSZMET.js";
+} from "./chunk-2OVMMSGQ.js";
 import "./chunk-T2NL5ZIA.js";
 import "./chunk-BXP6YZ2P.js";
-import "./chunk-SFCNFX42.js";
+import "./chunk-VWYUB22Y.js";
 import {
   SessionManager,
   getContentText
@@ -55,7 +55,7 @@ import {
   getConfigDirUsage,
   listRecentCrashes,
   writeCrashLog
-} from "./chunk-KJHMRAJU.js";
+} from "./chunk-P7JY3SWA.js";
 import {
   ProviderRegistry
 } from "./chunk-QMXC327F.js";
@@ -64,7 +64,7 @@ import {
   getTopFailingTools,
   getTopUsedTools,
   installFlushOnExit
-} from "./chunk-2WV6AGHM.js";
+} from "./chunk-J22B3OSQ.js";
 import {
   CONTENT_ONLY_STREAM_REMINDER,
   TEE_FINAL_USER_NUDGE,
@@ -86,7 +86,7 @@ import {
 } from "./chunk-XPBEJB27.js";
 import {
   ConfigManager
-} from "./chunk-TW47X5AO.js";
+} from "./chunk-TM4MS63K.js";
 import {
   AuthError,
   ProviderError,
@@ -113,7 +113,7 @@ import {
   SKILLS_DIR_NAME,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-QNUVZO5X.js";
+} from "./chunk-KV4GYNEA.js";
 import {
   formatGitContextForPrompt,
   getGitContext,
@@ -144,8 +144,8 @@ import { program } from "commander";
 
 // src/repl/repl.ts
 import * as readline from "readline";
-import { existsSync as existsSync4, readFileSync as readFileSync3, readdirSync as readdirSync3, statSync as statSync3, mkdirSync as mkdirSync4 } from "fs";
-import { join as join4, resolve as resolve2, extname as extname2, dirname as dirname3, basename as basename2 } from "path";
+import { existsSync as existsSync5, readFileSync as readFileSync4, readdirSync as readdirSync3, statSync as statSync4, mkdirSync as mkdirSync4 } from "fs";
+import { join as join5, resolve as resolve2, extname as extname2, dirname as dirname3, basename as basename2 } from "path";
 import chalk4 from "chalk";
 
 // src/session/title-generator.ts
@@ -637,10 +637,10 @@ Error${typeName}: ${lines.join("\n")}
 };
 
 // src/repl/commands/index.ts
-import { writeFileSync, mkdirSync as mkdirSync2, existsSync as existsSync2, readFileSync, readdirSync, statSync as statSync2, appendFileSync } from "fs";
+import { writeFileSync, mkdirSync as mkdirSync2, existsSync as existsSync3, readFileSync as readFileSync2, statSync as statSync3, appendFileSync } from "fs";
 import { execSync as execSync2 } from "child_process";
 import { platform } from "os";
-import { resolve, dirname as dirname2, join as join2, basename } from "path";
+import { resolve, dirname as dirname2, join as join3, basename } from "path";
 import chalk2 from "chalk";
 
 // src/repl/clipboard.ts
@@ -730,12 +730,9 @@ function getClipboardHint() {
   return "";
 }
 
-// src/repl/commands/index.ts
-function fmtCtx(tokens) {
-  if (tokens >= 1e6) return `${Math.round(tokens / 1e5) / 10}M`;
-  if (tokens >= 1e3) return `${Math.round(tokens / 1024)}K`;
-  return `${tokens}`;
-}
+// src/repl/commands/project-init.ts
+import { existsSync as existsSync2, readFileSync, readdirSync, statSync as statSync2 } from "fs";
+import { join as join2 } from "path";
 var SCAN_SKIP_DIRS = /* @__PURE__ */ new Set([
   "node_modules",
   ".git",
@@ -793,7 +790,7 @@ function scanDirTree(dir, maxDepth = 2, maxEntries = 80) {
       const name = sorted[i];
       const fullPath = join2(d, name);
       const isLast = i === sorted.length - 1;
-      const connector = isLast ? "\u2514\u2500\u2500 " : "\u251C\u2500\u2500 ";
+      const connector = isLast ? "+-- " : "|-- ";
       let isDir;
       try {
         isDir = statSync2(fullPath).isDirectory();
@@ -803,7 +800,7 @@ function scanDirTree(dir, maxDepth = 2, maxEntries = 80) {
       lines.push(prefix + connector + name + (isDir ? "/" : ""));
       count++;
       if (isDir) {
-        walk(fullPath, prefix + (isLast ? "    " : "\u2502   "), depth + 1);
+        walk(fullPath, prefix + (isLast ? "    " : "|   "), depth + 1);
       }
     }
   };
@@ -847,9 +844,9 @@ function scanProject(cwd) {
     try {
       const pkg = JSON.parse(readFileSync(join2(cwd, "package.json"), "utf-8"));
       const scripts = pkg.scripts ?? {};
-      info.buildCommand = scripts.build ? `npm run build` : void 0;
-      info.testCommand = scripts.test ? `npm test` : void 0;
-      info.devCommand = scripts.dev ? `npm run dev` : void 0;
+      info.buildCommand = scripts.build ? "npm run build" : void 0;
+      info.testCommand = scripts.test ? "npm test" : void 0;
+      info.devCommand = scripts.dev ? "npm run dev" : void 0;
       const allDeps = { ...pkg.dependencies, ...pkg.devDependencies };
       if (allDeps["react"]) info.framework = "React";
       else if (allDeps["vue"]) info.framework = "Vue";
@@ -891,10 +888,8 @@ function scanProject(cwd) {
 }
 function buildInitPrompt(info, cwd) {
   const parts = [
-    `Please generate an AICLI.md context file (Markdown format) for the following project. This file will be injected into the AI conversation's system prompt to help the AI understand the project structure and coding conventions.`,
-    `
-## Project Info
-`,
+    "Please generate an AICLI.md context file (Markdown format) for the following project. This file will be injected into the AI conversation system prompt to help the AI understand the project structure and coding conventions.",
+    "\n## Project Info\n",
     `- Working directory: ${cwd}`,
     `- Type: ${info.type}`,
     `- Language: ${info.language}`
@@ -923,6 +918,13 @@ Please generate a structured Markdown file containing:
 Output the Markdown content directly, do not wrap the entire file in a code block. Keep it concise, within 200 lines.`);
   return parts.join("\n");
 }
+
+// src/repl/commands/index.ts
+function fmtCtx(tokens) {
+  if (tokens >= 1e6) return `${Math.round(tokens / 1e5) / 10}M`;
+  if (tokens >= 1e3) return `${Math.round(tokens / 1024)}K`;
+  return `${tokens}`;
+}
 function copyToClipboard(text) {
   const plat = platform();
   if (plat === "win32") {
@@ -1827,16 +1829,16 @@ No tools match "${filter}".
       usage: "/mcp [reconnect [serverId] | trust-project]",
       async execute(args, ctx) {
         if (args[0] === "trust-project") {
-          const { join: join5 } = await import("path");
-          const { existsSync: existsSync5 } = await import("fs");
+          const { join: join6 } = await import("path");
+          const { existsSync: existsSync6 } = await import("fs");
           const { getGitRoot: getGitRoot2 } = await import("./git-context-EXOEHQSF.js");
-          const { MCP_PROJECT_CONFIG_NAME: MCP_PROJECT_CONFIG_NAME2 } = await import("./constants-NHGTSHKT.js");
+          const { MCP_PROJECT_CONFIG_NAME: MCP_PROJECT_CONFIG_NAME2 } = await import("./constants-SZTQNN7K.js");
           const { approveProject, hashMcpFile } = await import("./project-trust-NKYHL3VZ.js");
           const cwd = process.cwd();
           const projectRoot = getGitRoot2(cwd) ?? cwd;
-          const mcpPath = join5(projectRoot, MCP_PROJECT_CONFIG_NAME2);
+          const mcpPath = join6(projectRoot, MCP_PROJECT_CONFIG_NAME2);
           console.log();
-          if (!existsSync5(mcpPath)) {
+          if (!existsSync6(mcpPath)) {
             console.log(theme.dim(`  No .mcp.json in ${projectRoot}.`));
             console.log();
             return;
@@ -2169,9 +2171,9 @@ No tools match "${filter}".
       usage: "/init [--force]",
       async execute(args, ctx) {
         const cwd = process.cwd();
-        const targetPath = join2(cwd, "AICLI.md");
+        const targetPath = join3(cwd, "AICLI.md");
         const force = args.includes("--force");
-        if (existsSync2(targetPath) && !force) {
+        if (existsSync3(targetPath) && !force) {
           ctx.renderer.printInfo(`AICLI.md already exists at ${targetPath}`);
           ctx.renderer.printInfo("Use /init --force to overwrite, or edit it manually.");
           return;
@@ -2891,7 +2893,7 @@ ${hint}` : "")
       usage: "/test [command|filter]",
       async execute(args, ctx) {
         try {
-          const { executeTests } = await import("./run-tests-5F2OBWIK.js");
+          const { executeTests } = await import("./run-tests-D5SNUBYX.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {
@@ -3049,7 +3051,7 @@ ${hint}` : "")
       description: "Persistent memory (memory.md) + chat memory recall index (v0.4.89+)",
       usage: "/memory [show|add <text>|clear|path|rebuild|refresh|status|recall <query>|index-clear]",
       async execute(args, ctx) {
-        const memoryFile = join2(ctx.config.getConfigDir(), MEMORY_FILE_NAME);
+        const memoryFile = join3(ctx.config.getConfigDir(), MEMORY_FILE_NAME);
         const sub = args[0] ?? "show";
         if (sub === "rebuild" || sub === "refresh") {
           const full = sub === "rebuild";
@@ -3133,11 +3135,11 @@ ${hint}` : "")
           return;
         }
         if (sub === "show" || sub === "view") {
-          if (!existsSync2(memoryFile)) {
+          if (!existsSync3(memoryFile)) {
             ctx.renderer.printInfo("Memory is empty (memory.md not found)");
             return;
           }
-          const content = readFileSync(memoryFile, "utf-8").trim();
+          const content = readFileSync2(memoryFile, "utf-8").trim();
           if (!content) {
             ctx.renderer.printInfo("Memory is empty");
             return;
@@ -3168,7 +3170,7 @@ ${text}
             ctx.renderer.renderError(`Failed to write memory: ${err instanceof Error ? err.message : String(err)}`);
           }
         } else if (sub === "clear") {
-          if (!existsSync2(memoryFile)) {
+          if (!existsSync3(memoryFile)) {
             ctx.renderer.printInfo("Memory is already empty");
             return;
           }
@@ -3204,20 +3206,20 @@ ${text}
         console.log(theme.heading("Config Files:"));
         console.log(`  Dir:        ${theme.accent(configDir)}`);
         const checkFile = (label, filePath) => {
-          const exists = existsSync2(filePath);
+          const exists = existsSync3(filePath);
           const icon = exists ? theme.success("\u2713") : theme.dim("\u2013");
           let extra = "";
           if (exists) {
             try {
-              extra = theme.dim(` (${statSync2(filePath).size} bytes)`);
+              extra = theme.dim(` (${statSync3(filePath).size} bytes)`);
             } catch {
             }
           }
           console.log(`  ${icon}  ${label.padEnd(14)} ${exists ? filePath : theme.dim("(not found)")}${extra}`);
         };
-        checkFile("config.json", join2(configDir, "config.json"));
-        checkFile("memory.md", join2(configDir, MEMORY_FILE_NAME));
-        checkFile("dev-state.md", join2(configDir, "dev-state.md"));
+        checkFile("config.json", join3(configDir, "config.json"));
+        checkFile("memory.md", join3(configDir, MEMORY_FILE_NAME));
+        checkFile("dev-state.md", join3(configDir, "dev-state.md"));
         console.log();
         const mcpManager = ctx.getMcpManager();
         if (mcpManager) {
@@ -3381,9 +3383,9 @@ ${text}
         let newFiles = 0;
         let modifiedFiles = 0;
         for (const [filePath, { earliest }] of fileMap) {
-          const currentContent = existsSync2(filePath) ? (() => {
+          const currentContent = existsSync3(filePath) ? (() => {
             try {
-              return readFileSync(filePath, "utf-8");
+              return readFileSync2(filePath, "utf-8");
             } catch {
               return null;
             }
@@ -3509,12 +3511,12 @@ Summary: ${fileMap.size} file(s) \u2014 ${newFiles} new, ${modifiedFiles} modifi
           if (scanAll) {
             const metas = ctx.sessions.listSessions();
             console.log(theme.info(`  Scanning ${metas.length} session(s)\u2026`));
-            const { readFileSync: readFileSync4 } = await import("fs");
-            const { join: join5 } = await import("path");
+            const { readFileSync: readFileSync5 } = await import("fs");
+            const { join: join6 } = await import("path");
             const historyDir = ctx.config.getHistoryDir();
             for (const m of metas) {
               try {
-                const content = readFileSync4(join5(historyDir, `${m.id}.json`), "utf-8");
+                const content = readFileSync5(join6(historyDir, `${m.id}.json`), "utf-8");
                 const hits2 = scanString(content, opts);
                 if (hits2.length) {
                   filesWithHits++;
@@ -4199,13 +4201,13 @@ Managing ${displayName} API Key`);
 };
 
 // src/repl/custom-commands.ts
-import { existsSync as existsSync3, readFileSync as readFileSync2, readdirSync as readdirSync2, mkdirSync as mkdirSync3 } from "fs";
-import { join as join3, extname } from "path";
+import { existsSync as existsSync4, readFileSync as readFileSync3, readdirSync as readdirSync2, mkdirSync as mkdirSync3 } from "fs";
+import { join as join4, extname } from "path";
 import { execSync as execSync3 } from "child_process";
 function parseCommandFile(filePath) {
   let content;
   try {
-    content = readFileSync2(filePath, "utf-8");
+    content = readFileSync3(filePath, "utf-8");
   } catch {
     return null;
   }
@@ -4229,7 +4231,7 @@ function expandTemplate(template, args) {
   result = result.replace(/\{\{input\}\}/g, args.join(" "));
   result = result.replace(/\{\{file:([^}]+)\}\}/g, (_m, p) => {
     try {
-      return readFileSync2(p.trim(), "utf-8");
+      return readFileSync3(p.trim(), "utf-8");
     } catch {
       return `[Error: cannot read ${p.trim()}]`;
     }
@@ -4254,14 +4256,14 @@ var CustomCommandManager = class {
   commands = /* @__PURE__ */ new Map();
   loadCommands() {
     this.commands.clear();
-    if (!existsSync3(this.commandsDir)) {
+    if (!existsSync4(this.commandsDir)) {
       mkdirSync3(this.commandsDir, { recursive: true });
       return 0;
     }
     let count = 0;
     for (const file of readdirSync2(this.commandsDir)) {
       if (extname(file) !== ".md") continue;
-      const cmd = parseCommandFile(join3(this.commandsDir, file));
+      const cmd = parseCommandFile(join4(this.commandsDir, file));
       if (cmd) {
         this.commands.set(cmd.meta.name, cmd);
         count++;
@@ -4566,17 +4568,17 @@ function parseAtReferences(input2, cwd) {
     const absPath = resolve2(cwd, rawPath);
     const ext = extname2(rawPath).toLowerCase();
     const mime = IMAGE_MIME[ext];
-    if (!existsSync4(absPath)) {
+    if (!existsSync5(absPath)) {
       refs.push({ path: rawPath, type: "notfound" });
       continue;
     }
     if (mime) {
-      const fileSize = statSync3(absPath).size;
+      const fileSize = statSync4(absPath).size;
       if (fileSize > MAX_IMAGE_BYTES) {
         refs.push({ path: rawPath, type: "toolarge" });
         continue;
       }
-      const data = readFileSync3(absPath).toString("base64");
+      const data = readFileSync4(absPath).toString("base64");
       imageParts.push({
         type: "image_url",
         image_url: { url: `data:${mime};base64,${data}` }
@@ -4584,7 +4586,7 @@ function parseAtReferences(input2, cwd) {
       refs.push({ path: rawPath, type: "image" });
       textBody = textBody.replace(match[0], "").trim();
     } else {
-      const content = readFileSync3(absPath, "utf-8");
+      const content = readFileSync4(absPath, "utf-8");
       const inlined = `
 
 [File: ${rawPath}]
@@ -4809,12 +4811,12 @@ var Repl = class {
       const filtered = entries.filter((e) => !SKIP_DIRS_SET.has(e));
       for (let i = 0; i < filtered.length && entryCount < MAX_TREE_ENTRIES; i++) {
         const name = filtered[i];
-        const fullPath = join4(dir, name);
+        const fullPath = join5(dir, name);
         const isLast = i === filtered.length - 1;
         const connector = isLast ? "\u2514\u2500\u2500 " : "\u251C\u2500\u2500 ";
         let isDir;
         try {
-          isDir = statSync3(fullPath).isDirectory();
+          isDir = statSync4(fullPath).isDirectory();
         } catch {
           continue;
         }
@@ -4843,10 +4845,10 @@ ${treeLines.join("\n")}`
       for (const name of entries) {
         if (totalChars >= MAX_TOTAL_CHARS) break;
         if (SKIP_DIRS_SET.has(name)) continue;
-        const fullPath = join4(dir, name);
+        const fullPath = join5(dir, name);
         let st;
         try {
-          st = statSync3(fullPath);
+          st = statSync4(fullPath);
         } catch {
           continue;
         }
@@ -4858,7 +4860,7 @@ ${treeLines.join("\n")}`
           if (!TEXT_EXTS.has(ext) && !isSpecial) continue;
           if (st.size > MAX_FILE_CHARS * 3) continue;
           try {
-            let content = readFileSync3(fullPath, "utf-8");
+            let content = readFileSync4(fullPath, "utf-8");
             if (content.length > MAX_FILE_CHARS) {
               content = content.slice(0, MAX_FILE_CHARS) + `
 ... (truncated, ${content.length} chars total)`;
@@ -4888,12 +4890,12 @@ ${content}
    */
   addExtraContextDir(dirPath) {
     const absPath = resolve2(dirPath);
-    if (!existsSync4(absPath)) {
+    if (!existsSync5(absPath)) {
       return { success: false, charCount: 0, added: false, error: `Directory not found: ${dirPath}` };
     }
     let isDir;
     try {
-      isDir = statSync3(absPath).isDirectory();
+      isDir = statSync4(absPath).isDirectory();
     } catch {
       return { success: false, charCount: 0, added: false, error: `Cannot access: ${dirPath}` };
     }
@@ -4922,9 +4924,9 @@ ${content}
    */
   findContextFile(dir, candidates = CONTEXT_FILE_CANDIDATES) {
     for (const candidate of candidates) {
-      const fullPath = join4(dir, candidate);
-      if (existsSync4(fullPath)) {
-        const content = readFileSync3(fullPath, "utf-8").trim();
+      const fullPath = join5(dir, candidate);
+      if (existsSync5(fullPath)) {
+        const content = readFileSync4(fullPath, "utf-8").trim();
         if (content) return { filePath: fullPath, content };
       }
     }
@@ -4952,10 +4954,10 @@ ${content}
     const cwd = process.cwd();
     const gitRoot = getGitRoot(cwd);
     const projectRoot = gitRoot ?? cwd;
-    const mcpPath = join4(projectRoot, MCP_PROJECT_CONFIG_NAME);
-    if (!existsSync4(mcpPath)) return null;
+    const mcpPath = join5(projectRoot, MCP_PROJECT_CONFIG_NAME);
+    if (!existsSync5(mcpPath)) return null;
     try {
-      const raw = JSON.parse(readFileSync3(mcpPath, "utf-8"));
+      const raw = JSON.parse(readFileSync4(mcpPath, "utf-8"));
       const servers = raw?.mcpServers;
       if (!servers || typeof servers !== "object") {
         process.stderr.write(
@@ -5001,8 +5003,8 @@ ${content}
         );
         return { layers: [], mergedContent: "" };
       }
-      if (existsSync4(fullPath)) {
-        const content = readFileSync3(fullPath, "utf-8").trim();
+      if (existsSync5(fullPath)) {
+        const content = readFileSync4(fullPath, "utf-8").trim();
         if (content) {
           const layer = {
             level: "project",
@@ -5059,9 +5061,9 @@ ${content}
    * 超过 MEMORY_MAX_CHARS 时只取末尾最新部分。
    */
   loadMemoryContent() {
-    const memoryPath = join4(this.config.getConfigDir(), MEMORY_FILE_NAME);
-    if (!existsSync4(memoryPath)) return null;
-    let content = readFileSync3(memoryPath, "utf-8").trim();
+    const memoryPath = join5(this.config.getConfigDir(), MEMORY_FILE_NAME);
+    if (!existsSync5(memoryPath)) return null;
+    let content = readFileSync4(memoryPath, "utf-8").trim();
     if (!content) return null;
     if (content.length > MEMORY_MAX_CHARS) {
       content = content.slice(-MEMORY_MAX_CHARS);
@@ -5449,14 +5451,14 @@ Session '${this.resumeSessionId}' not found.
       process.stdout.write(theme.dim(`  \u{1F50C} Plugins loaded: ${pluginCount} tool(s) from plugins/
 `));
     }
-    const skillsDir = join4(this.config.getConfigDir(), SKILLS_DIR_NAME);
+    const skillsDir = join5(this.config.getConfigDir(), SKILLS_DIR_NAME);
     this.skillManager = new SkillManager(skillsDir, this.config.get("ui").skillSizeWarn);
     const skillCount = this.skillManager.loadSkills();
     if (skillCount > 0) {
       process.stdout.write(theme.dim(`  \u{1F3AF} Skills: ${skillCount} available (use /skill to manage)
 `));
     }
-    const commandsDir = join4(this.config.getConfigDir(), CUSTOM_COMMANDS_DIR_NAME);
+    const commandsDir = join5(this.config.getConfigDir(), CUSTOM_COMMANDS_DIR_NAME);
     this.customCommandManager = new CustomCommandManager(commandsDir);
     const customCmdCount = this.customCommandManager.loadCommands();
     if (customCmdCount > 0) {
@@ -6092,15 +6094,15 @@ Session '${this.resumeSessionId}' not found.
       const dir = normalized.includes("/") ? dirname3(normalized) : ".";
       const prefix = normalized.includes("/") ? basename2(normalized) : normalized;
       const absDir = resolve2(process.cwd(), dir);
-      if (!existsSync4(absDir)) return [];
+      if (!existsSync5(absDir)) return [];
       const entries = readdirSync3(absDir);
       const results = [];
       for (const entry of entries) {
         if (entry.startsWith(".")) continue;
         if (!entry.toLowerCase().startsWith(prefix.toLowerCase())) continue;
         try {
-          const fullPath = join4(absDir, entry);
-          const stat = statSync3(fullPath);
+          const fullPath = join5(absDir, entry);
+          const stat = statSync4(fullPath);
           const rel = dir === "." ? entry : `${dir}/${entry}`;
           results.push(stat.isDirectory() ? `${rel}/` : rel);
         } catch {
@@ -7269,7 +7271,7 @@ program.command("web").description("Start Web UI server with browser-based chat
     console.error("Error: Invalid port number. Must be between 1 and 65535.");
     process.exit(1);
   }
-  const { startWebServer } = await import("./server-LDPQ3DLK.js");
+  const { startWebServer } = await import("./server-4EFTRFTN.js");
   await startWebServer({ port, host: options.host });
 });
 program.command("user [action] [username]").description("Manage Web UI users (list | create <name> | delete <name> | reset-password <name> | logout-all <name> | migrate <name>)").action(async (action, username) => {
@@ -7436,16 +7438,16 @@ program.command("sessions").description("List recent conversation sessions").opt
   console.log(footer + "\n");
 });
 program.command("usage").description("Show token + cost usage grouped by provider/model (cross-session)").option("--days <n>", "Only the last N days (inclusive of today)").option("--month <ym>", "Only a specific month, format YYYY-MM (e.g. 2026-06)").option("--json", "Output as JSON (for scripting)").action(async (options) => {
-  const { runUsageCli } = await import("./usage-SZWZFX3T.js");
+  const { runUsageCli } = await import("./usage-Q24E5636.js");
   await runUsageCli(options);
 });
 program.command("doctor").description("Health check: API keys, config, MCP, recent crashes, tool usage, disk usage").option("--json", "Output as JSON (for scripting)").option("--reset-stats", "Reset accumulated tool usage statistics").action(async (options) => {
-  const { runDoctorCli } = await import("./doctor-cli-WKH7T4AW.js");
+  const { runDoctorCli } = await import("./doctor-cli-I2Y2YR4V.js");
   await runDoctorCli({ json: !!options.json, resetStats: !!options.resetStats });
 });
 program.command("batch <action> [arg] [arg2]").description("Anthropic Message Batches: submit | list | status <id> | results <id> [out] | cancel <id>").option("--dry-run", "Parse and validate input without submitting (submit only)").action(async (action, arg, arg2, options) => {
   try {
-    const batch = await import("./batch-6PORMJWT.js");
+    const batch = await import("./batch-3T44NFLG.js");
     switch (action) {
       case "submit":
         if (!arg) {
@@ -7488,7 +7490,7 @@ program.command("batch <action> [arg] [arg2]").description("Anthropic Message Ba
   }
 });
 program.command("mcp-serve").description("Start an MCP server over STDIO, exposing aicli's built-in tools to Claude Desktop / Cursor / other MCP clients").option("--allow-destructive", "Allow bash / run_interactive / task_create (always destructive in MCP mode)").option("--allow-outside-cwd", "Allow tool path arguments to escape the sandbox root \u2014 disabled by default").option("--tools <list>", "Comma-separated whitelist of tools to expose (default: all eligible tools)").option("--cwd <path>", "Working directory AND sandbox root (default: current directory)").action(async (options) => {
-  const { startMcpServer } = await import("./server-37EXC4EB.js");
+  const { startMcpServer } = await import("./server-PVKLPRUP.js");
   await startMcpServer({
     allowDestructive: !!options.allowDestructive,
     allowOutsideCwd: !!options.allowOutsideCwd,
@@ -7497,7 +7499,7 @@ program.command("mcp-serve").description("Start an MCP server over STDIO, exposi
   });
 });
 program.command("ci").description("Headless PR review (code + security) \u2014 reads git/gh diff, optionally posts to PR. Designed for GitHub Actions.").option("--pr <num>", "PR number; diff fetched via `gh pr diff <num>`", (v) => parseInt(v, 10)).option("--base <ref>", "Base ref for `git diff <ref>...HEAD` (ignored when --pr set)").option("--post", "Post review as a PR comment (requires gh CLI + GH_TOKEN, needs --pr)").option("--no-update", "Always create a new comment instead of updating the previous aicli review").option("--skip-code", "Skip the code review section").option("--skip-security", "Skip the security review section").option("--detailed", "Use the detailed code-review prompt").option("--max-diff <n>", "Max diff chars sent to the model (default 30000)", (v) => parseInt(v, 10)).option("--provider <id>", "Override provider (default: config.defaultProvider)").option("--model <id>", "Override model").option("--dry-run", "Print result to stdout instead of posting (overrides --post)").action(async (options) => {
-  const { runCi } = await import("./ci-AYMV66P3.js");
+  const { runCi } = await import("./ci-6QWBVRJX.js");
   const result = await runCi({
     pr: options.pr,
     base: options.base,
@@ -7643,7 +7645,7 @@ program.command("hub [topic]").description("Start multi-agent hub (discuss / bra
     }),
     config.get("customProviders")
   );
-  const { startHub } = await import("./hub-6R3M3NTC.js");
+  const { startHub } = await import("./hub-XVPFBODB.js");
   await startHub(
     {
       topic: topic ?? "",

package/dist/{run-tests-5F2OBWIK.js → run-tests-D5SNUBYX.js}

@@ -2,8 +2,8 @@
 import {
   executeTests,
   runTestsTool
-} from "./chunk-SFCNFX42.js";
-import "./chunk-QNUVZO5X.js";
+} from "./chunk-VWYUB22Y.js";
+import "./chunk-KV4GYNEA.js";
 export {
   executeTests,
   runTestsTool

package/dist/{run-tests-NBCA4KEG.js → run-tests-HZ2CRCTZ.js}

@@ -1,7 +1,7 @@
 import {
   executeTests,
   runTestsTool
-} from "./chunk-BQIV4ZQT.js";
+} from "./chunk-QDY72ABW.js";
 export {
   executeTests,
   runTestsTool

package/dist/{server-LDPQ3DLK.js → server-4EFTRFTN.js}

@@ -19,7 +19,7 @@ import {
   loadDevState,
   persistToolRound,
   setupProxy
-} from "./chunk-KOU4KX7J.js";
+} from "./chunk-TD7JEHCR.js";
 import {
   ToolExecutor,
   ToolRegistry,
@@ -38,10 +38,10 @@ import {
   spawnAgentContext,
   truncateOutput,
   undoStack
-} from "./chunk-QQYSZMET.js";
+} from "./chunk-2OVMMSGQ.js";
 import "./chunk-T2NL5ZIA.js";
 import "./chunk-BXP6YZ2P.js";
-import "./chunk-SFCNFX42.js";
+import "./chunk-VWYUB22Y.js";
 import {
   SessionManager,
   getContentText
@@ -55,7 +55,7 @@ import {
 } from "./chunk-QMXC327F.js";
 import {
   runTool
-} from "./chunk-2WV6AGHM.js";
+} from "./chunk-J22B3OSQ.js";
 import {
   CONTENT_ONLY_STREAM_REMINDER,
   TEE_FINAL_USER_NUDGE,
@@ -74,7 +74,7 @@ import {
 } from "./chunk-XPBEJB27.js";
 import {
   ConfigManager
-} from "./chunk-TW47X5AO.js";
+} from "./chunk-TM4MS63K.js";
 import "./chunk-TZQHYZKT.js";
 import {
   AGENTIC_BEHAVIOR_GUIDELINE,
@@ -94,7 +94,7 @@ import {
   SKILLS_DIR_NAME,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-QNUVZO5X.js";
+} from "./chunk-KV4GYNEA.js";
 import {
   formatGitContextForPrompt,
   getGitContext,
@@ -2458,7 +2458,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
       case "test": {
         this.send({ type: "info", message: "\u{1F9EA} Running tests..." });
         try {
-          const { executeTests } = await import("./run-tests-5F2OBWIK.js");
+          const { executeTests } = await import("./run-tests-D5SNUBYX.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {
@@ -3528,12 +3528,9 @@ async function startWebServer(options = {}) {
       "Content-Security-Policy",
       [
         "default-src 'self'",
-        // v0.4.162: the client UI is driven by inline onclick= handlers and
-        // inline <script> blocks (SW registration, theme init). 'self' alone
-        // silently blocked EVERY button (click → nothing, no JS error, just a
-        // CSP violation in the console). localhost dev/admin tool — the
-        // unsafe-inline XSS surface is acceptable under that threat model.
-        "script-src 'self' 'unsafe-inline'",
+        // Inline event handlers and startup scripts live in app.js, so script
+        // execution stays locked to same-origin files only.
+        "script-src 'self'",
         "style-src 'self' 'unsafe-inline'",
         "img-src 'self' data: blob:",
         "font-src 'self' data:",

package/dist/{server-37EXC4EB.js → server-PVKLPRUP.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import {
   ToolRegistry
-} from "./chunk-QQYSZMET.js";
+} from "./chunk-2OVMMSGQ.js";
 import "./chunk-T2NL5ZIA.js";
 import "./chunk-BXP6YZ2P.js";
-import "./chunk-SFCNFX42.js";
+import "./chunk-VWYUB22Y.js";
 import {
   runTool
-} from "./chunk-2WV6AGHM.js";
+} from "./chunk-J22B3OSQ.js";
 import {
   getDangerLevel,
   schemaToJsonSchema
@@ -15,7 +15,7 @@ import {
 import "./chunk-TZQHYZKT.js";
 import {
   VERSION
-} from "./chunk-QNUVZO5X.js";
+} from "./chunk-KV4GYNEA.js";
 import "./chunk-4BKXL7SM.js";
 import "./chunk-TB4W4Y4T.js";
 import "./chunk-KHYD3WXE.js";