jinzd-ai-cli 0.4.208 → 0.4.209

package/dist/electron-server.js

@@ -3,7 +3,7 @@ import {
 } from "./chunk-SKET65WZ.js";
 import {
   indexProject
-} from "./chunk-SQB66GP6.js";
+} from "./chunk-BNERFXVO.js";
 import {
   AGENTIC_BEHAVIOR_GUIDELINE,
   APP_NAME,
@@ -36,7 +36,7 @@ import {
   VERSION,
   buildUserIdentityPrompt,
   runTestsTool
-} from "./chunk-QDY72ABW.js";
+} from "./chunk-EYID2AIR.js";
 import {
   hasSemanticIndex,
   semanticSearch
@@ -60,11 +60,11 @@ import express from "express";
 import { createServer } from "http";
 import { WebSocketServer } from "ws";
 import { join as join17, dirname as dirname6, resolve as resolve6, relative as relative3, sep as sep3 } from "path";
-import { existsSync as existsSync23, readFileSync as readFileSync16, readdirSync as readdirSync11, statSync as statSync9, realpathSync } from "fs";
+import { existsSync as existsSync23, readFileSync as readFileSync17, readdirSync as readdirSync11, statSync as statSync9, realpathSync } from "fs";
 import { networkInterfaces } from "os";
 
 // src/config/config-manager.ts
-import { readFileSync, writeFileSync, existsSync, mkdirSync } from "fs";
+import { readFileSync, existsSync, mkdirSync } from "fs";
 import { join } from "path";
 import { homedir } from "os";
 
@@ -503,7 +503,7 @@ ${err}`
   }
   save() {
     mkdirSync(this.configDir, { recursive: true });
-    writeFileSync(this.configPath, JSON.stringify(this.config, null, 2), "utf-8");
+    atomicWriteFileSync(this.configPath, JSON.stringify(this.config, null, 2));
   }
   getApiKey(providerId) {
     const envKey = EnvLoader.getApiKey(providerId);
@@ -4736,7 +4736,7 @@ import { platform as platform2 } from "os";
 import { resolve } from "path";
 
 // src/tools/undo-stack.ts
-import { readFileSync as readFileSync3, writeFileSync as writeFileSync2, unlinkSync as unlinkSync2, rmdirSync, existsSync as existsSync3 } from "fs";
+import { readFileSync as readFileSync3, writeFileSync, unlinkSync as unlinkSync2, rmdirSync, existsSync as existsSync3 } from "fs";
 var MAX_UNDO_DEPTH = 20;
 var UndoStack = class {
   stack = [];
@@ -4819,7 +4819,7 @@ var UndoStack = class {
           return { entry, result: `Deleted newly created file: ${entry.filePath}` };
         }
       } else {
-        writeFileSync2(entry.filePath, entry.previousContent, "utf-8");
+        writeFileSync(entry.filePath, entry.previousContent, "utf-8");
         const lines = entry.previousContent.split("\n").length;
         return {
           entry,
@@ -6864,7 +6864,7 @@ Do NOT split a long document into many write_file(append=true) calls. That patte
     const mode = appendMode ? "appended" : "written";
     void (async () => {
       try {
-        const { updateFile } = await import("./indexer-BMYUUDLH.js");
+        const { updateFile } = await import("./indexer-4WWS3VIL.js");
         await updateFile(process.cwd(), filePath);
       } catch {
       }
@@ -8648,7 +8648,7 @@ Any of these triggers means use save_last_response, NOT write_file:
 };
 
 // src/tools/builtin/save-memory.ts
-import { existsSync as existsSync12, statSync as statSync6, appendFileSync as appendFileSync2, mkdirSync as mkdirSync6 } from "fs";
+import { existsSync as existsSync12, readFileSync as readFileSync9, statSync as statSync6, mkdirSync as mkdirSync6 } from "fs";
 import { join as join7 } from "path";
 import { homedir as homedir5 } from "os";
 function getMemoryFilePath() {
@@ -8685,7 +8685,8 @@ var saveMemoryTool = {
 ## ${timestamp}
 ${content}
 `;
-    appendFileSync2(memoryPath, entry, "utf-8");
+    const previous = existsSync12(memoryPath) ? readFileSync9(memoryPath, "utf-8") : "";
+    atomicWriteFileSync(memoryPath, previous + entry);
     const byteSize = statSync6(memoryPath).size;
     return `Memory saved successfully. File size: ${byteSize} bytes in ${MEMORY_FILE_NAME}`;
   }
@@ -9750,7 +9751,7 @@ ${commitOutput.trim()}`;
 };
 
 // src/tools/builtin/notebook-edit.ts
-import { readFileSync as readFileSync9, existsSync as existsSync14 } from "fs";
+import { readFileSync as readFileSync10, existsSync as existsSync14 } from "fs";
 import { writeFile } from "fs/promises";
 import { resolve as resolve4, extname as extname2 } from "path";
 var notebookEditTool = {
@@ -9808,7 +9809,7 @@ var notebookEditTool = {
     if (!existsSync14(absPath)) {
       throw new ToolError("notebook_edit", `Notebook not found: ${filePath}`);
     }
-    const raw = readFileSync9(absPath, "utf-8");
+    const raw = readFileSync10(absPath, "utf-8");
     const nb = parseNotebook(raw);
     const cellIdx0 = cellIndexRaw - 1;
     undoStack.push(absPath, `notebook_edit (${action}): ${filePath}`);
@@ -10968,7 +10969,7 @@ import { existsSync as existsSync16, readdirSync as readdirSync8, mkdirSync as m
 import { join as join10 } from "path";
 
 // src/skills/types.ts
-import { readFileSync as readFileSync10 } from "fs";
+import { readFileSync as readFileSync11 } from "fs";
 import { basename as basename5 } from "path";
 function parseSimpleYaml(yaml) {
   const result = {};
@@ -10990,7 +10991,7 @@ function parseYamlArray(value) {
 function parseSkillFile(filePath) {
   let raw;
   try {
-    raw = readFileSync10(filePath, "utf-8");
+    raw = readFileSync11(filePath, "utf-8");
   } catch {
     return null;
   }
@@ -11119,7 +11120,7 @@ var SkillManager = class {
 
 // src/web/tool-executor-web.ts
 import { randomUUID as randomUUID2 } from "crypto";
-import { existsSync as existsSync17, readFileSync as readFileSync11 } from "fs";
+import { existsSync as existsSync17, readFileSync as readFileSync12 } from "fs";
 var ToolExecutorWeb = class _ToolExecutorWeb {
   constructor(registry, ws) {
     this.registry = registry;
@@ -11246,7 +11247,7 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
       const newContent = String(call.arguments["content"] ?? "");
       if (filePath && existsSync17(filePath)) {
         try {
-          const old = readFileSync11(filePath, "utf-8");
+          const old = readFileSync12(filePath, "utf-8");
           return renderDiff(old, newContent, { filePath });
         } catch {
         }
@@ -11447,11 +11448,11 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
 };
 
 // src/core/system-prompt-builder.ts
-import { existsSync as existsSync19, readFileSync as readFileSync13 } from "fs";
+import { existsSync as existsSync19, readFileSync as readFileSync14 } from "fs";
 import { join as join12 } from "path";
 
 // src/repl/dev-state.ts
-import { existsSync as existsSync18, readFileSync as readFileSync12, writeFileSync as writeFileSync3, unlinkSync as unlinkSync4, mkdirSync as mkdirSync9 } from "fs";
+import { existsSync as existsSync18, readFileSync as readFileSync13, unlinkSync as unlinkSync4, mkdirSync as mkdirSync9 } from "fs";
 import { join as join11 } from "path";
 import { homedir as homedir6 } from "os";
 function getDevStatePath() {
@@ -11460,7 +11461,7 @@ function getDevStatePath() {
 function loadDevState() {
   const path3 = getDevStatePath();
   if (!existsSync18(path3)) return null;
-  const content = readFileSync12(path3, "utf-8").trim();
+  const content = readFileSync13(path3, "utf-8").trim();
   return content || null;
 }
 
@@ -11520,7 +11521,7 @@ ${ctx.activeSkill.content}`);
 function loadMemoryContent(configDir) {
   const memoryPath = join12(configDir, MEMORY_FILE_NAME);
   if (!existsSync19(memoryPath)) return null;
-  let content = readFileSync13(memoryPath, "utf-8").trim();
+  let content = readFileSync14(memoryPath, "utf-8").trim();
   if (!content) return null;
   if (content.length > MEMORY_MAX_CHARS) {
     content = content.slice(-MEMORY_MAX_CHARS);
@@ -11729,9 +11730,8 @@ function autoTrimSessionIfNeeded(session, sizeLimit = SESSION_SIZE_LIMIT) {
 }
 
 // src/web/session-handler.ts
-import { existsSync as existsSync21, readFileSync as readFileSync14, appendFileSync as appendFileSync3, writeFileSync as writeFileSync4, mkdirSync as mkdirSync10, readdirSync as readdirSync9, statSync as statSync8, createWriteStream } from "fs";
+import { existsSync as existsSync21, readFileSync as readFileSync15, writeFileSync as writeFileSync2, mkdirSync as mkdirSync10, readdirSync as readdirSync9, statSync as statSync8, createWriteStream } from "fs";
 import { join as join15, resolve as resolve5, dirname as dirname5 } from "path";
-import { execSync as execSync3 } from "child_process";
 
 // src/tools/git-context.ts
 import { execSync as execSync2 } from "child_process";
@@ -11823,6 +11823,17 @@ function formatGitContextForPrompt(ctx) {
   return lines.join("\n");
 }
 
+// src/core/git-diff.ts
+import { execFileSync as execFileSync3 } from "child_process";
+function readGitDiff(options = {}) {
+  const args = ["diff"];
+  if (options.staged) args.push("--staged");
+  return execFileSync3("git", args, {
+    encoding: "utf-8",
+    timeout: options.timeoutMs ?? 1e4
+  }).trim();
+}
+
 // src/hub/convergence.ts
 function convergenceThreshold(total) {
   if (total <= 0) return Infinity;
@@ -13855,7 +13866,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
         for (const [filePath, { earliest }] of fileMap) {
           const currentContent = existsSync21(filePath) ? (() => {
             try {
-              return readFileSync14(filePath, "utf-8");
+              return readFileSync15(filePath, "utf-8");
             } catch {
               return null;
             }
@@ -14136,7 +14147,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
         const sub = (args[0] ?? "status").toLowerCase();
         const root = process.cwd();
         const { loadIndex: loadIndex2, clearIndex } = await import("./store-VO37H6LS.js");
-        const { indexProject: indexProject2 } = await import("./indexer-BMYUUDLH.js");
+        const { indexProject: indexProject2 } = await import("./indexer-4WWS3VIL.js");
         const { loadVectorStore, clearVectorStore } = await import("./vector-store-JBAE6PS4.js");
         if (sub === "status") {
           const idx = loadIndex2(root);
@@ -14255,8 +14266,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
         const detailed = args.includes("--detailed");
         let diff;
         try {
-          const cmd = staged ? "git diff --staged" : "git diff";
-          diff = execSync3(cmd, { encoding: "utf-8", timeout: 1e4 }).trim();
+          diff = readGitDiff({ staged });
         } catch {
           this.send({ type: "error", message: "Failed to run git diff." });
           break;
@@ -14294,8 +14304,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
         const secStaged = args.includes("--staged");
         let secDiff;
         try {
-          const cmd = secStaged ? "git diff --staged" : "git diff";
-          secDiff = execSync3(cmd, { encoding: "utf-8", timeout: 1e4 }).trim();
+          secDiff = readGitDiff({ staged: secStaged });
         } catch {
           this.send({ type: "error", message: "Failed to run git diff." });
           break;
@@ -14373,7 +14382,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
       case "test": {
         this.send({ type: "info", message: "\u{1F9EA} Running tests..." });
         try {
-          const { executeTests } = await import("./run-tests-HZ2CRCTZ.js");
+          const { executeTests } = await import("./run-tests-UAS5NJBM.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {
@@ -14402,7 +14411,7 @@ Use /init --force to overwrite.` });
           const projectInfo = this.scanProject(cwd);
           const prompt = this.buildInitPrompt(projectInfo, cwd);
           const content = await this.chatOnce(prompt, { temperature: 0.3, maxTokens: 4096 });
-          writeFileSync4(targetPath, content, "utf-8");
+          writeFileSync2(targetPath, content, "utf-8");
           this.send({ type: "info", message: `\u2713 Generated: ${targetPath} (${content.length} chars)
 Use /context reload to load it.` });
         } catch (err) {
@@ -14851,7 +14860,7 @@ Add .md files to create commands.` });
     let content = "";
     try {
       if (existsSync21(memPath)) {
-        content = readFileSync14(memPath, "utf-8");
+        content = readFileSync15(memPath, "utf-8");
       }
     } catch (err) {
       process.stderr.write(`[web] Failed to read memory file: ${err instanceof Error ? err.message : err}
@@ -14869,9 +14878,11 @@ Add .md files to create commands.` });
     try {
       mkdirSync10(configDir, { recursive: true });
       const timestamp = (/* @__PURE__ */ new Date()).toISOString().slice(0, 19).replace("T", " ");
-      appendFileSync3(memPath, `
+      const previous = existsSync21(memPath) ? readFileSync15(memPath, "utf-8") : "";
+      const entry = `
 - [${timestamp}] ${text}
-`, "utf-8");
+`;
+      atomicWriteFileSync(memPath, previous + entry);
       this.send({ type: "info", message: `\u{1F4DD} Memory entry added: "${text}"` });
     } catch (err) {
       this.send({ type: "error", message: `Failed to write memory: ${err.message}` });
@@ -14881,7 +14892,7 @@ Add .md files to create commands.` });
     const configDir = this.config.getConfigDir();
     const memPath = join15(configDir, MEMORY_FILE_NAME);
     try {
-      writeFileSync4(memPath, "", "utf-8");
+      atomicWriteFileSync(memPath, "");
       this.send({ type: "info", message: "\u{1F5D1}\uFE0F Persistent memory cleared." });
     } catch (err) {
       this.send({ type: "error", message: `Failed to clear memory: ${err.message}` });
@@ -15091,7 +15102,7 @@ Add .md files to create commands.` });
       const fullPath = join15(dir, name);
       try {
         if (existsSync21(fullPath)) {
-          const content = readFileSync14(fullPath, "utf-8").trim();
+          const content = readFileSync15(fullPath, "utf-8").trim();
           if (content) return content;
         }
       } catch {
@@ -15207,7 +15218,7 @@ Add .md files to create commands.` });
       info.type = "node";
       info.language = check("tsconfig.json") ? "TypeScript" : "JavaScript";
       try {
-        const pkg = JSON.parse(readFileSync14(join15(cwd, "package.json"), "utf-8"));
+        const pkg = JSON.parse(readFileSync15(join15(cwd, "package.json"), "utf-8"));
         const scripts = pkg.scripts ?? {};
         info.buildCommand = scripts.build ? "npm run build" : void 0;
         info.testCommand = scripts.test ? "npm test" : void 0;
@@ -15357,7 +15368,7 @@ async function setupProxy(configProxy) {
 }
 
 // src/web/auth.ts
-import { existsSync as existsSync22, readFileSync as readFileSync15, writeFileSync as writeFileSync5, mkdirSync as mkdirSync11, readdirSync as readdirSync10, copyFileSync } from "fs";
+import { existsSync as existsSync22, readFileSync as readFileSync16, writeFileSync as writeFileSync3, mkdirSync as mkdirSync11, readdirSync as readdirSync10, copyFileSync } from "fs";
 import { join as join16 } from "path";
 import { createHmac, randomBytes, timingSafeEqual, pbkdf2Sync } from "crypto";
 var USERS_FILE = "users.json";
@@ -15558,16 +15569,16 @@ var AuthManager = class {
     const globalConfig = join16(this.baseDir, "config.json");
     if (existsSync22(globalConfig)) {
       try {
-        const content = readFileSync15(globalConfig, "utf-8");
-        writeFileSync5(join16(userDir, "config.json"), content, "utf-8");
+        const content = readFileSync16(globalConfig, "utf-8");
+        writeFileSync3(join16(userDir, "config.json"), content, "utf-8");
       } catch {
       }
     }
     const globalMemory = join16(this.baseDir, "memory.md");
     if (existsSync22(globalMemory)) {
       try {
-        const content = readFileSync15(globalMemory, "utf-8");
-        writeFileSync5(join16(userDir, "memory.md"), content, "utf-8");
+        const content = readFileSync16(globalMemory, "utf-8");
+        writeFileSync3(join16(userDir, "memory.md"), content, "utf-8");
       } catch {
       }
     }
@@ -15591,7 +15602,7 @@ var AuthManager = class {
   loadOrCreate() {
     if (existsSync22(this.usersFile)) {
       try {
-        return JSON.parse(readFileSync15(this.usersFile, "utf-8"));
+        return JSON.parse(readFileSync16(this.usersFile, "utf-8"));
       } catch {
       }
     }
@@ -15791,6 +15802,7 @@ async function startWebServer(options = {}) {
     clientDir = join17(process.cwd(), "src", "web", "client");
   }
   console.log(`   Static files: ${clientDir}`);
+  app.use("/vendor", express.static(join17(clientDir, "vendor"), { maxAge: "1y", immutable: true }));
   app.use(express.static(clientDir));
   app.get("/api/status", (_req, res) => {
     res.json({
@@ -15833,7 +15845,7 @@ async function startWebServer(options = {}) {
     }
     const token = authManager.login(username, password);
     console.log(`   \u2713 User registered via API: ${username}${firstRun ? " (first-run)" : ""}`);
-    res.cookie("aicli_token", token, { httpOnly: true, sameSite: "strict", maxAge: TOKEN_EXPIRY_MS });
+    res.cookie("aicli_token", token, authCookieOptions(req));
     res.json({ success: true, username });
   });
   app.post("/api/auth/login", (req, res) => {
@@ -15847,11 +15859,11 @@ async function startWebServer(options = {}) {
       res.status(401).json({ error: "Invalid username or password" });
       return;
     }
-    res.cookie("aicli_token", token, { httpOnly: true, sameSite: "strict", maxAge: TOKEN_EXPIRY_MS });
+    res.cookie("aicli_token", token, authCookieOptions(req));
     res.json({ success: true, username });
   });
-  app.post("/api/auth/logout", (_req, res) => {
-    res.clearCookie("aicli_token", { httpOnly: true, sameSite: "strict" });
+  app.post("/api/auth/logout", (req, res) => {
+    res.clearCookie("aicli_token", clearAuthCookieOptions(req));
     res.json({ success: true });
   });
   app.get("/api/files", requireAuth, (req, res) => {
@@ -15926,7 +15938,7 @@ async function startWebServer(options = {}) {
         res.status(404).json({ error: "Session not found" });
         return;
       }
-      const data = JSON.parse(readFileSync16(filePath, "utf-8"));
+      const data = JSON.parse(readFileSync17(filePath, "utf-8"));
       res.json({ session: data });
     } catch (err) {
       res.status(500).json({ error: err instanceof Error ? err.message : String(err) });
@@ -15957,7 +15969,7 @@ async function startWebServer(options = {}) {
         res.json({ error: `File too large (${(stat.size / 1024).toFixed(0)} KB, max 512 KB)` });
         return;
       }
-      const content = readFileSync16(fullPath, "utf-8");
+      const content = readFileSync17(fullPath, "utf-8");
       res.json({ content, size: stat.size });
     } catch {
       res.json({ error: "Cannot read file" });
@@ -16222,12 +16234,33 @@ function loadProjectMcpConfig() {
   const configPath = join17(projectRoot, MCP_PROJECT_CONFIG_NAME);
   if (!existsSync23(configPath)) return null;
   try {
-    const raw = JSON.parse(readFileSync16(configPath, "utf-8"));
+    const raw = JSON.parse(readFileSync17(configPath, "utf-8"));
     return raw.mcpServers ?? raw;
   } catch {
     return null;
   }
 }
+function isHttpsRequest(req) {
+  if (req.secure) return true;
+  const forwardedProto = req.headers["x-forwarded-proto"];
+  const proto = Array.isArray(forwardedProto) ? forwardedProto[0] : forwardedProto;
+  return proto?.split(",")[0]?.trim().toLowerCase() === "https";
+}
+function authCookieOptions(req) {
+  return {
+    httpOnly: true,
+    sameSite: "strict",
+    maxAge: TOKEN_EXPIRY_MS,
+    secure: isHttpsRequest(req)
+  };
+}
+function clearAuthCookieOptions(req) {
+  return {
+    httpOnly: true,
+    sameSite: "strict",
+    secure: isHttpsRequest(req)
+  };
+}
 function parseCookie(cookie) {
   const result = {};
   for (const part of cookie.split(";")) {

package/dist/{hub-XVPFBODB.js → hub-4ETK4R2J.js}

@@ -154,7 +154,7 @@ ${content}`);
   }
 }
 async function runTaskMode(config, providers, configManager, topic) {
-  const { TaskOrchestrator } = await import("./task-orchestrator-2A5VCFLS.js");
+  const { TaskOrchestrator } = await import("./task-orchestrator-6PZTB35T.js");
   const orchestrator = new TaskOrchestrator(config, providers, configManager);
   let interrupted = false;
   const onSigint = () => {

package/dist/index.js

@@ -12,10 +12,11 @@ import {
   loadDevState,
   parseSimpleYaml,
   persistToolRound,
+  readGitDiff,
   saveDevState,
   sessionHasMeaningfulContent,
   setupProxy
-} from "./chunk-TD7JEHCR.js";
+} from "./chunk-ATNYI6JL.js";
 import {
   ToolExecutor,
   ToolRegistry,
@@ -35,10 +36,10 @@ import {
   spawnAgentContext,
   theme,
   undoStack
-} from "./chunk-2OVMMSGQ.js";
+} from "./chunk-JVLRMIHA.js";
 import "./chunk-T2NL5ZIA.js";
 import "./chunk-BXP6YZ2P.js";
-import "./chunk-VWYUB22Y.js";
+import "./chunk-EN63JA7N.js";
 import {
   SessionManager,
   getContentText
@@ -55,7 +56,7 @@ import {
   getConfigDirUsage,
   listRecentCrashes,
   writeCrashLog
-} from "./chunk-P7JY3SWA.js";
+} from "./chunk-D6M4E7SH.js";
 import {
   ProviderRegistry
 } from "./chunk-QMXC327F.js";
@@ -64,7 +65,7 @@ import {
   getTopFailingTools,
   getTopUsedTools,
   installFlushOnExit
-} from "./chunk-J22B3OSQ.js";
+} from "./chunk-STIEOOOL.js";
 import {
   CONTENT_ONLY_STREAM_REMINDER,
   TEE_FINAL_USER_NUDGE,
@@ -86,7 +87,7 @@ import {
 } from "./chunk-XPBEJB27.js";
 import {
   ConfigManager
-} from "./chunk-TM4MS63K.js";
+} from "./chunk-DUZRQXIP.js";
 import {
   AuthError,
   ProviderError,
@@ -113,7 +114,7 @@ import {
   SKILLS_DIR_NAME,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-KV4GYNEA.js";
+} from "./chunk-UPMBIS4T.js";
 import {
   formatGitContextForPrompt,
   getGitContext,
@@ -133,7 +134,7 @@ import {
   DEFAULT_PATTERNS,
   scanString
 } from "./chunk-SLSWPBK3.js";
-import "./chunk-O6UFCEUZ.js";
+import "./chunk-K3CF65QH.js";
 import "./chunk-CKH4KQ4E.js";
 import {
   atomicWriteFileSync
@@ -637,7 +638,7 @@ Error${typeName}: ${lines.join("\n")}
 };
 
 // src/repl/commands/index.ts
-import { writeFileSync, mkdirSync as mkdirSync2, existsSync as existsSync3, readFileSync as readFileSync2, statSync as statSync3, appendFileSync } from "fs";
+import { writeFileSync, mkdirSync as mkdirSync2, existsSync as existsSync3, readFileSync as readFileSync2, statSync as statSync3 } from "fs";
 import { execSync as execSync2 } from "child_process";
 import { platform } from "os";
 import { resolve, dirname as dirname2, join as join3, basename } from "path";
@@ -1832,7 +1833,7 @@ No tools match "${filter}".
           const { join: join6 } = await import("path");
           const { existsSync: existsSync6 } = await import("fs");
           const { getGitRoot: getGitRoot2 } = await import("./git-context-EXOEHQSF.js");
-          const { MCP_PROJECT_CONFIG_NAME: MCP_PROJECT_CONFIG_NAME2 } = await import("./constants-SZTQNN7K.js");
+          const { MCP_PROJECT_CONFIG_NAME: MCP_PROJECT_CONFIG_NAME2 } = await import("./constants-VTZLKDAG.js");
           const { approveProject, hashMcpFile } = await import("./project-trust-NKYHL3VZ.js");
           const cwd = process.cwd();
           const projectRoot = getGitRoot2(cwd) ?? cwd;
@@ -2416,8 +2417,7 @@ ${hint}` : "")
         const detailed = args.includes("--detailed");
         let diff;
         try {
-          const cmd = staged ? "git diff --staged" : "git diff";
-          diff = execSync2(cmd, { encoding: "utf-8", timeout: 1e4 }).trim();
+          diff = readGitDiff({ staged });
         } catch {
           ctx.renderer.renderError("Failed to run git diff.");
           return;
@@ -2463,8 +2463,7 @@ ${hint}` : "")
         const staged = args.includes("--staged");
         let diff;
         try {
-          const cmd = staged ? "git diff --staged" : "git diff";
-          diff = execSync2(cmd, { encoding: "utf-8", timeout: 1e4 }).trim();
+          diff = readGitDiff({ staged });
         } catch {
           ctx.renderer.renderError("Failed to run git diff.");
           return;
@@ -2767,7 +2766,7 @@ ${hint}` : "")
         const sub = (args[0] ?? "status").toLowerCase();
         const root = process.cwd();
         const { loadIndex, clearIndex } = await import("./store-MWNHVGJT.js");
-        const { indexProject } = await import("./indexer-AKWMYNJI.js");
+        const { indexProject } = await import("./indexer-2AG4G6B5.js");
         const { loadVectorStore, clearVectorStore } = await import("./vector-store-BBDXB5IQ.js");
         if (sub === "status") {
           const idx = loadIndex(root);
@@ -2893,7 +2892,7 @@ ${hint}` : "")
       usage: "/test [command|filter]",
       async execute(args, ctx) {
         try {
-          const { executeTests } = await import("./run-tests-D5SNUBYX.js");
+          const { executeTests } = await import("./run-tests-NDS2IEMK.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {
@@ -3164,7 +3163,8 @@ ${text}
 `;
           try {
             mkdirSync2(dirname2(memoryFile), { recursive: true });
-            appendFileSync(memoryFile, entry, "utf-8");
+            const previous = existsSync3(memoryFile) ? readFileSync2(memoryFile, "utf-8") : "";
+            atomicWriteFileSync(memoryFile, previous + entry);
             ctx.renderer.printSuccess(`Added to memory: "${text.slice(0, 60)}${text.length > 60 ? "\u2026" : ""}"`);
           } catch (err) {
             ctx.renderer.renderError(`Failed to write memory: ${err instanceof Error ? err.message : String(err)}`);
@@ -3175,7 +3175,7 @@ ${text}
             return;
           }
           try {
-            writeFileSync(memoryFile, "", "utf-8");
+            atomicWriteFileSync(memoryFile, "");
             ctx.renderer.printSuccess("Memory cleared (memory.md emptied)");
           } catch (err) {
             ctx.renderer.renderError(`Failed to clear memory: ${err instanceof Error ? err.message : String(err)}`);
@@ -4203,7 +4203,6 @@ Managing ${displayName} API Key`);
 // src/repl/custom-commands.ts
 import { existsSync as existsSync4, readFileSync as readFileSync3, readdirSync as readdirSync2, mkdirSync as mkdirSync3 } from "fs";
 import { join as join4, extname } from "path";
-import { execSync as execSync3 } from "child_process";
 function parseCommandFile(filePath) {
   let content;
   try {
@@ -4238,7 +4237,7 @@ function expandTemplate(template, args) {
   });
   result = result.replace(/\{\{git-diff\}\}/g, () => {
     try {
-      return execSync3("git diff", { encoding: "utf-8", timeout: 1e4 }).trim();
+      return readGitDiff();
     } catch {
       return "[No git diff available]";
     }
@@ -5467,7 +5466,7 @@ Session '${this.resumeSessionId}' not found.
     }
     void (async () => {
       try {
-        const { indexProject } = await import("./indexer-AKWMYNJI.js");
+        const { indexProject } = await import("./indexer-2AG4G6B5.js");
         const { loadIndex } = await import("./store-MWNHVGJT.js");
         const root = process.cwd();
         const existed = loadIndex(root);
@@ -7271,7 +7270,7 @@ program.command("web").description("Start Web UI server with browser-based chat
     console.error("Error: Invalid port number. Must be between 1 and 65535.");
     process.exit(1);
   }
-  const { startWebServer } = await import("./server-4EFTRFTN.js");
+  const { startWebServer } = await import("./server-4URLNC7P.js");
   await startWebServer({ port, host: options.host });
 });
 program.command("user [action] [username]").description("Manage Web UI users (list | create <name> | delete <name> | reset-password <name> | logout-all <name> | migrate <name>)").action(async (action, username) => {
@@ -7438,16 +7437,16 @@ program.command("sessions").description("List recent conversation sessions").opt
   console.log(footer + "\n");
 });
 program.command("usage").description("Show token + cost usage grouped by provider/model (cross-session)").option("--days <n>", "Only the last N days (inclusive of today)").option("--month <ym>", "Only a specific month, format YYYY-MM (e.g. 2026-06)").option("--json", "Output as JSON (for scripting)").action(async (options) => {
-  const { runUsageCli } = await import("./usage-Q24E5636.js");
+  const { runUsageCli } = await import("./usage-ZNCKGF6U.js");
   await runUsageCli(options);
 });
 program.command("doctor").description("Health check: API keys, config, MCP, recent crashes, tool usage, disk usage").option("--json", "Output as JSON (for scripting)").option("--reset-stats", "Reset accumulated tool usage statistics").action(async (options) => {
-  const { runDoctorCli } = await import("./doctor-cli-I2Y2YR4V.js");
+  const { runDoctorCli } = await import("./doctor-cli-IU6FSVLF.js");
   await runDoctorCli({ json: !!options.json, resetStats: !!options.resetStats });
 });
 program.command("batch <action> [arg] [arg2]").description("Anthropic Message Batches: submit | list | status <id> | results <id> [out] | cancel <id>").option("--dry-run", "Parse and validate input without submitting (submit only)").action(async (action, arg, arg2, options) => {
   try {
-    const batch = await import("./batch-3T44NFLG.js");
+    const batch = await import("./batch-45WLJUVP.js");
     switch (action) {
       case "submit":
         if (!arg) {
@@ -7490,7 +7489,7 @@ program.command("batch <action> [arg] [arg2]").description("Anthropic Message Ba
   }
 });
 program.command("mcp-serve").description("Start an MCP server over STDIO, exposing aicli's built-in tools to Claude Desktop / Cursor / other MCP clients").option("--allow-destructive", "Allow bash / run_interactive / task_create (always destructive in MCP mode)").option("--allow-outside-cwd", "Allow tool path arguments to escape the sandbox root \u2014 disabled by default").option("--tools <list>", "Comma-separated whitelist of tools to expose (default: all eligible tools)").option("--cwd <path>", "Working directory AND sandbox root (default: current directory)").action(async (options) => {
-  const { startMcpServer } = await import("./server-PVKLPRUP.js");
+  const { startMcpServer } = await import("./server-72SAPLPS.js");
   await startMcpServer({
     allowDestructive: !!options.allowDestructive,
     allowOutsideCwd: !!options.allowOutsideCwd,
@@ -7499,7 +7498,7 @@ program.command("mcp-serve").description("Start an MCP server over STDIO, exposi
   });
 });
 program.command("ci").description("Headless PR review (code + security) \u2014 reads git/gh diff, optionally posts to PR. Designed for GitHub Actions.").option("--pr <num>", "PR number; diff fetched via `gh pr diff <num>`", (v) => parseInt(v, 10)).option("--base <ref>", "Base ref for `git diff <ref>...HEAD` (ignored when --pr set)").option("--post", "Post review as a PR comment (requires gh CLI + GH_TOKEN, needs --pr)").option("--no-update", "Always create a new comment instead of updating the previous aicli review").option("--skip-code", "Skip the code review section").option("--skip-security", "Skip the security review section").option("--detailed", "Use the detailed code-review prompt").option("--max-diff <n>", "Max diff chars sent to the model (default 30000)", (v) => parseInt(v, 10)).option("--provider <id>", "Override provider (default: config.defaultProvider)").option("--model <id>", "Override model").option("--dry-run", "Print result to stdout instead of posting (overrides --post)").action(async (options) => {
-  const { runCi } = await import("./ci-6QWBVRJX.js");
+  const { runCi } = await import("./ci-PUE3MQ7J.js");
   const result = await runCi({
     pr: options.pr,
     base: options.base,
@@ -7645,7 +7644,7 @@ program.command("hub [topic]").description("Start multi-agent hub (discuss / bra
     }),
     config.get("customProviders")
   );
-  const { startHub } = await import("./hub-XVPFBODB.js");
+  const { startHub } = await import("./hub-4ETK4R2J.js");
   await startHub(
     {
       topic: topic ?? "",

package/dist/{indexer-AKWMYNJI.js → indexer-2AG4G6B5.js}

@@ -2,7 +2,7 @@
 import {
   indexProject,
   updateFile
-} from "./chunk-O6UFCEUZ.js";
+} from "./chunk-K3CF65QH.js";
 import "./chunk-CKH4KQ4E.js";
 import "./chunk-IW3Q7AE5.js";
 export {