jinzd-ai-cli 0.4.209 → 0.4.211

package/dist/{chunk-ATNYI6JL.js → chunk-C3OU2OPF.js}

@@ -1,21 +1,180 @@
 #!/usr/bin/env node
 import {
   truncateForPersist
-} from "./chunk-JVLRMIHA.js";
+} from "./chunk-ZOPYREL5.js";
 import {
   APP_NAME,
   CONFIG_DIR_NAME,
+  CONTEXT_FILE_CANDIDATES,
+  CONTEXT_FILE_MAX_BYTES,
   DEV_STATE_FILE_NAME,
   MCP_CALL_TIMEOUT,
   MCP_CONNECT_TIMEOUT,
   MCP_PROTOCOL_VERSION,
   MCP_TOOL_PREFIX,
   VERSION
-} from "./chunk-UPMBIS4T.js";
+} from "./chunk-E5XCM4A6.js";
 import {
   atomicWriteFileSync
 } from "./chunk-IW3Q7AE5.js";
 
+// src/core/context-files.ts
+import { existsSync, readFileSync } from "fs";
+import { join, relative, resolve } from "path";
+function uniqueNonEmpty(values) {
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
+  for (const value of values) {
+    const trimmed = value.trim();
+    if (!trimmed || seen.has(trimmed)) continue;
+    seen.add(trimmed);
+    out.push(trimmed);
+  }
+  return out;
+}
+function buildContextFileCandidates(fallbackFilenames = []) {
+  return uniqueNonEmpty([...CONTEXT_FILE_CANDIDATES, ...fallbackFilenames]);
+}
+function displayPath(filePath, cwd) {
+  const rel = relative(cwd, filePath);
+  if (rel && !rel.startsWith("..") && !rel.startsWith("/") && !rel.startsWith("\\")) {
+    return rel;
+  }
+  return filePath;
+}
+function isInsideOrEqual(parent, child) {
+  const rel = relative(resolve(parent), resolve(child));
+  return rel === "" || !!rel && !rel.startsWith("..") && !rel.startsWith("/") && !rel.startsWith("\\");
+}
+function readContextFile(level, filePath, cwd, maxBytes) {
+  const name = filePath.split(/[\\/]/).pop() ?? filePath;
+  const shown = displayPath(filePath, cwd);
+  try {
+    const raw = readFileSync(filePath);
+    const byteCount = raw.byteLength;
+    if (byteCount === 0) {
+      return {
+        layer: null,
+        skipped: { level, filePath, displayPath: shown, fileName: name, reason: "empty" }
+      };
+    }
+    const truncated = byteCount > maxBytes;
+    const bytes = truncated ? raw.subarray(0, maxBytes) : raw;
+    const content = bytes.toString("utf-8").trim();
+    if (!content) {
+      return {
+        layer: null,
+        skipped: { level, filePath, displayPath: shown, fileName: name, reason: "empty" }
+      };
+    }
+    return {
+      layer: {
+        level: level === "single" ? "project" : level,
+        filePath,
+        displayPath: shown,
+        fileName: name,
+        content,
+        charCount: content.length,
+        byteCount,
+        truncated
+      },
+      skipped: truncated ? { level, filePath, displayPath: shown, fileName: name, reason: "too-large", message: `truncated to ${maxBytes} bytes` } : null
+    };
+  } catch (err) {
+    return {
+      layer: null,
+      skipped: {
+        level,
+        filePath,
+        displayPath: shown,
+        fileName: name,
+        reason: "read-error",
+        message: err instanceof Error ? err.message : String(err)
+      }
+    };
+  }
+}
+function findFirstContextFile(level, dir, cwd, candidates, maxBytes) {
+  const skipped = [];
+  for (const candidate of candidates) {
+    const filePath = join(dir, candidate);
+    if (!existsSync(filePath)) continue;
+    const result = readContextFile(level, filePath, cwd, maxBytes);
+    if (result.skipped) skipped.push(result.skipped);
+    if (result.layer) return { layer: result.layer, skipped };
+  }
+  return { layer: null, skipped };
+}
+function loadContextFiles(options) {
+  const cwd = resolve(options.cwd);
+  const maxBytes = options.maxBytes ?? CONTEXT_FILE_MAX_BYTES;
+  const candidates = options.candidates ?? buildContextFileCandidates(options.fallbackFilenames);
+  const skipped = [];
+  if (options.setting === false) {
+    return { layers: [], mergedContent: "", skipped, totalChars: 0, totalBytes: 0, maxBytes, candidates };
+  }
+  if (options.setting && options.setting !== "auto") {
+    const filePath = resolve(cwd, String(options.setting));
+    if (!isInsideOrEqual(cwd, filePath)) {
+      skipped.push({
+        level: "single",
+        filePath,
+        displayPath: filePath,
+        fileName: String(options.setting),
+        reason: "outside-cwd"
+      });
+      return { layers: [], mergedContent: "", skipped, totalChars: 0, totalBytes: 0, maxBytes, candidates };
+    }
+    if (!existsSync(filePath)) {
+      skipped.push({
+        level: "single",
+        filePath,
+        displayPath: displayPath(filePath, cwd),
+        fileName: String(options.setting),
+        reason: "missing"
+      });
+      return { layers: [], mergedContent: "", skipped, totalChars: 0, totalBytes: 0, maxBytes, candidates };
+    }
+    const result = readContextFile("single", filePath, cwd, maxBytes);
+    if (result.skipped) skipped.push(result.skipped);
+    const layers2 = result.layer ? [result.layer] : [];
+    const mergedContent2 = layers2.map((l) => l.content).join("\n\n---\n\n");
+    return {
+      layers: layers2,
+      mergedContent: mergedContent2,
+      skipped,
+      totalChars: layers2.reduce((sum, l) => sum + l.charCount, 0),
+      totalBytes: layers2.reduce((sum, l) => sum + l.byteCount, 0),
+      maxBytes,
+      candidates
+    };
+  }
+  const layers = [];
+  for (const [level, dir] of [
+    ["global", options.configDir],
+    ["project", options.projectRoot]
+  ]) {
+    const result = findFirstContextFile(level, dir, cwd, candidates, maxBytes);
+    skipped.push(...result.skipped);
+    if (result.layer) layers.push(result.layer);
+  }
+  if (resolve(options.cwd) !== resolve(options.projectRoot)) {
+    const result = findFirstContextFile("local", options.cwd, cwd, candidates, maxBytes);
+    skipped.push(...result.skipped);
+    if (result.layer) layers.push(result.layer);
+  }
+  const mergedContent = layers.map((l) => l.content).join("\n\n---\n\n");
+  return {
+    layers,
+    mergedContent,
+    skipped,
+    totalChars: layers.reduce((sum, l) => sum + l.charCount, 0),
+    totalBytes: layers.reduce((sum, l) => sum + l.byteCount, 0),
+    maxBytes,
+    candidates
+  };
+}
+
 // src/mcp/client.ts
 import { spawn } from "child_process";
 var McpClient = class {
@@ -151,7 +310,7 @@ var McpClient = class {
   // 内部方法：JSON-RPC 通信
   // ══════════════════════════════════════════════════════════════════
   sendRequest(method, params) {
-    return new Promise((resolve, reject) => {
+    return new Promise((resolve2, reject) => {
       if (!this.process?.stdin?.writable) {
         return reject(new Error(`MCP server [${this.serverId}] stdin not writable`));
       }
@@ -175,7 +334,7 @@ var McpClient = class {
       this.pendingRequests.set(id, {
         resolve: (result) => {
           cleanup();
-          resolve(result);
+          resolve2(result);
         },
         reject: (error) => {
           cleanup();
@@ -252,13 +411,13 @@ var McpClient = class {
   }
   /** Promise 超时包装 */
   withTimeout(promise, ms, label) {
-    return new Promise((resolve, reject) => {
+    return new Promise((resolve2, reject) => {
       const timer = setTimeout(() => {
         reject(new Error(`MCP [${this.serverId}] ${label} timed out after ${ms}ms`));
       }, ms);
       promise.then((val) => {
         clearTimeout(timer);
-        resolve(val);
+        resolve2(val);
       }).catch((err) => {
         clearTimeout(timer);
         reject(err);
@@ -535,11 +694,11 @@ var McpManager = class {
 };
 
 // src/skills/manager.ts
-import { existsSync, readdirSync, mkdirSync, statSync } from "fs";
-import { join } from "path";
+import { existsSync as existsSync2, readdirSync, mkdirSync, statSync } from "fs";
+import { join as join2 } from "path";
 
 // src/skills/types.ts
-import { readFileSync } from "fs";
+import { readFileSync as readFileSync2 } from "fs";
 import { basename } from "path";
 function parseSimpleYaml(yaml) {
   const result = {};
@@ -561,7 +720,7 @@ function parseYamlArray(value) {
 function parseSkillFile(filePath) {
   let raw;
   try {
-    raw = readFileSync(filePath, "utf-8");
+    raw = readFileSync2(filePath, "utf-8");
   } catch {
     return null;
   }
@@ -604,7 +763,7 @@ var SkillManager = class {
   /** 发现并加载 skillsDir 下所有 .md 文件，返回加载数量 */
   loadSkills() {
     this.skills.clear();
-    if (!existsSync(this.skillsDir)) {
+    if (!existsSync2(this.skillsDir)) {
       try {
         mkdirSync(this.skillsDir, { recursive: true });
       } catch {
@@ -619,14 +778,14 @@ var SkillManager = class {
     }
     for (const entry of entries) {
       let filePath;
-      const fullPath = join(this.skillsDir, entry);
+      const fullPath = join2(this.skillsDir, entry);
       if (entry.endsWith(".md")) {
         filePath = fullPath;
       } else {
         try {
           if (statSync(fullPath).isDirectory()) {
-            const skillMd = join(fullPath, "SKILL.md");
-            if (existsSync(skillMd)) {
+            const skillMd = join2(fullPath, "SKILL.md");
+            if (existsSync2(skillMd)) {
               filePath = skillMd;
             } else {
               continue;
@@ -699,6 +858,195 @@ async function setupProxy(configProxy) {
   }
 }
 
+// src/repl/commands/project-init.ts
+import { existsSync as existsSync3, readFileSync as readFileSync3, readdirSync as readdirSync2, statSync as statSync2 } from "fs";
+import { join as join3 } from "path";
+var SCAN_SKIP_DIRS = /* @__PURE__ */ new Set([
+  "node_modules",
+  ".git",
+  "dist",
+  "build",
+  "out",
+  "target",
+  ".next",
+  ".nuxt",
+  "__pycache__",
+  ".venv",
+  "venv",
+  ".tox",
+  ".mypy_cache",
+  ".pytest_cache",
+  ".gradle",
+  ".idea",
+  ".vscode",
+  ".vs",
+  "coverage",
+  ".cache",
+  ".parcel-cache",
+  "dist-cjs",
+  "release",
+  ".output",
+  ".turbo",
+  "vendor"
+]);
+function scanDirTree(dir, maxDepth = 2, maxEntries = 80) {
+  const lines = [];
+  let count = 0;
+  const walk = (d, prefix, depth) => {
+    if (depth > maxDepth || count >= maxEntries) return;
+    let entries;
+    try {
+      entries = readdirSync2(d);
+    } catch {
+      return;
+    }
+    const filtered = entries.filter((e) => !e.startsWith(".") && !SCAN_SKIP_DIRS.has(e));
+    const sorted = filtered.sort((a, b) => {
+      let aIsDir = false, bIsDir = false;
+      try {
+        aIsDir = statSync2(join3(d, a)).isDirectory();
+      } catch {
+      }
+      try {
+        bIsDir = statSync2(join3(d, b)).isDirectory();
+      } catch {
+      }
+      if (aIsDir !== bIsDir) return aIsDir ? -1 : 1;
+      return a.localeCompare(b);
+    });
+    for (let i = 0; i < sorted.length && count < maxEntries; i++) {
+      const name = sorted[i];
+      const fullPath = join3(d, name);
+      const isLast = i === sorted.length - 1;
+      const connector = isLast ? "+-- " : "|-- ";
+      let isDir;
+      try {
+        isDir = statSync2(fullPath).isDirectory();
+      } catch {
+        continue;
+      }
+      lines.push(prefix + connector + name + (isDir ? "/" : ""));
+      count++;
+      if (isDir) {
+        walk(fullPath, prefix + (isLast ? "    " : "|   "), depth + 1);
+      }
+    }
+  };
+  walk(dir, "", 0);
+  if (count >= maxEntries) lines.push("... (truncated)");
+  return lines.join("\n");
+}
+function scanProject(cwd) {
+  const info = {
+    type: "unknown",
+    language: "unknown",
+    configFiles: [],
+    directoryStructure: ""
+  };
+  const check = (file) => existsSync3(join3(cwd, file));
+  const configCandidates = [
+    "package.json",
+    "tsconfig.json",
+    "Cargo.toml",
+    "pyproject.toml",
+    "setup.py",
+    "requirements.txt",
+    "go.mod",
+    "pom.xml",
+    "build.gradle",
+    "build.gradle.kts",
+    "CMakeLists.txt",
+    "Makefile",
+    ".csproj",
+    ".sln",
+    "composer.json",
+    "Gemfile",
+    "mix.exs",
+    "deno.json",
+    "bun.lockb"
+  ];
+  info.configFiles = configCandidates.filter(check);
+  if (check("package.json")) {
+    info.type = "node";
+    info.language = check("tsconfig.json") ? "TypeScript" : "JavaScript";
+    try {
+      const pkg = JSON.parse(readFileSync3(join3(cwd, "package.json"), "utf-8"));
+      const scripts = pkg.scripts ?? {};
+      info.buildCommand = scripts.build ? "npm run build" : void 0;
+      info.testCommand = scripts.test ? "npm test" : void 0;
+      info.devCommand = scripts.dev ? "npm run dev" : void 0;
+      const allDeps = { ...pkg.dependencies, ...pkg.devDependencies };
+      if (allDeps["react"]) info.framework = "React";
+      else if (allDeps["vue"]) info.framework = "Vue";
+      else if (allDeps["@angular/core"]) info.framework = "Angular";
+      else if (allDeps["next"]) info.framework = "Next.js";
+      else if (allDeps["nuxt"]) info.framework = "Nuxt";
+      else if (allDeps["express"]) info.framework = "Express";
+      else if (allDeps["fastify"]) info.framework = "Fastify";
+      else if (allDeps["svelte"]) info.framework = "Svelte";
+    } catch {
+    }
+  } else if (check("Cargo.toml")) {
+    info.type = "rust";
+    info.language = "Rust";
+    info.buildCommand = "cargo build";
+    info.testCommand = "cargo test";
+  } else if (check("pyproject.toml") || check("setup.py") || check("requirements.txt")) {
+    info.type = "python";
+    info.language = "Python";
+    info.testCommand = check("pytest.ini") || check("pyproject.toml") ? "pytest" : "python -m unittest";
+  } else if (check("go.mod")) {
+    info.type = "go";
+    info.language = "Go";
+    info.buildCommand = "go build ./...";
+    info.testCommand = "go test ./...";
+  } else if (check("pom.xml")) {
+    info.type = "java";
+    info.language = "Java";
+    info.buildCommand = "mvn package";
+    info.testCommand = "mvn test";
+  } else if (check("build.gradle") || check("build.gradle.kts")) {
+    info.type = "java";
+    info.language = "Java/Kotlin";
+    info.buildCommand = "./gradlew build";
+    info.testCommand = "./gradlew test";
+  }
+  info.directoryStructure = scanDirTree(cwd);
+  return info;
+}
+function buildInitPrompt(info, cwd) {
+  const parts = [
+    "Please generate an AICLI.md context file (Markdown format) for the following project. This file will be injected into the AI conversation system prompt to help the AI understand the project structure and coding conventions.",
+    "\n## Project Info\n",
+    `- Working directory: ${cwd}`,
+    `- Type: ${info.type}`,
+    `- Language: ${info.language}`
+  ];
+  if (info.framework) parts.push(`- Framework: ${info.framework}`);
+  if (info.buildCommand) parts.push(`- Build command: ${info.buildCommand}`);
+  if (info.testCommand) parts.push(`- Test command: ${info.testCommand}`);
+  if (info.devCommand) parts.push(`- Dev command: ${info.devCommand}`);
+  parts.push(`
+## Detected Config Files
+${info.configFiles.map((f) => `- ${f}`).join("\n")}`);
+  parts.push(`
+## Directory Structure
+\`\`\`
+${info.directoryStructure}
+\`\`\``);
+  parts.push(`
+## Requirements
+Please generate a structured Markdown file containing:
+1. Project overview (one-sentence summary)
+2. Tech stack
+3. Project structure description (based on the directory structure above)
+4. Common commands (build, test, dev, etc.)
+5. Code style and conventions (inferred from config files)
+
+Output the Markdown content directly, do not wrap the entire file in a code block. Keep it concise, within 200 lines.`);
+  return parts.join("\n");
+}
+
 // src/core/git-diff.ts
 import { execFileSync } from "child_process";
 function readGitDiff(options = {}) {
@@ -798,8 +1146,8 @@ function autoTrimSessionIfNeeded(session, sizeLimit = SESSION_SIZE_LIMIT) {
 }
 
 // src/repl/dev-state.ts
-import { existsSync as existsSync2, readFileSync as readFileSync2, unlinkSync, mkdirSync as mkdirSync2 } from "fs";
-import { join as join2 } from "path";
+import { existsSync as existsSync4, readFileSync as readFileSync4, unlinkSync, mkdirSync as mkdirSync2 } from "fs";
+import { join as join4 } from "path";
 import { homedir } from "os";
 var DEV_STATE_MAX_CHARS = 6e3;
 var SNAPSHOT_PROMPT = `You are about to be replaced by a different AI model. Please generate a structured development state snapshot so the next model can continue seamlessly.
@@ -853,11 +1201,11 @@ function sessionHasMeaningfulContent(messages) {
   return hasUser && hasAssistant;
 }
 function getDevStatePath() {
-  return join2(homedir(), CONFIG_DIR_NAME, DEV_STATE_FILE_NAME);
+  return join4(homedir(), CONFIG_DIR_NAME, DEV_STATE_FILE_NAME);
 }
 function saveDevState(content) {
-  const configDir = join2(homedir(), CONFIG_DIR_NAME);
-  if (!existsSync2(configDir)) {
+  const configDir = join4(homedir(), CONFIG_DIR_NAME);
+  if (!existsSync4(configDir)) {
     mkdirSync2(configDir, { recursive: true });
   }
   let trimmed = content.trim();
@@ -873,13 +1221,13 @@ function saveDevState(content) {
 }
 function loadDevState() {
   const path = getDevStatePath();
-  if (!existsSync2(path)) return null;
-  const content = readFileSync2(path, "utf-8").trim();
+  if (!existsSync4(path)) return null;
+  const content = readFileSync4(path, "utf-8").trim();
   return content || null;
 }
 function clearDevState() {
   const path = getDevStatePath();
-  if (existsSync2(path)) {
+  if (existsSync4(path)) {
     try {
       unlinkSync(path);
     } catch {
@@ -888,10 +1236,14 @@ function clearDevState() {
 }
 
 export {
+  scanDirTree,
+  scanProject,
+  buildInitPrompt,
   readGitDiff,
   parseSimpleYaml,
   persistToolRound,
   autoTrimSessionIfNeeded,
+  loadContextFiles,
   SNAPSHOT_PROMPT,
   sessionHasMeaningfulContent,
   saveDevState,

package/dist/{chunk-UPMBIS4T.js → chunk-E5XCM4A6.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // src/core/constants.ts
-var VERSION = "0.4.209";
+var VERSION = "0.4.211";
 var APP_NAME = "ai-cli";
 var CONFIG_DIR_NAME = ".aicli";
 var CONFIG_FILE_NAME = "config.json";
@@ -9,7 +9,8 @@ var HISTORY_DIR_NAME = "history";
 var PLUGINS_DIR_NAME = "plugins";
 var SKILLS_DIR_NAME = "skills";
 var CUSTOM_COMMANDS_DIR_NAME = "commands";
-var CONTEXT_FILE_CANDIDATES = ["AICLI.md", "CLAUDE.md"];
+var CONTEXT_FILE_CANDIDATES = ["AICLI.override.md", "AGENTS.override.md", "AICLI.md", "CLAUDE.md", "AGENTS.md"];
+var CONTEXT_FILE_MAX_BYTES = 32 * 1024;
 var MEMORY_FILE_NAME = "memory.md";
 var MEMORY_MAX_CHARS = 1e4;
 var DEV_STATE_FILE_NAME = "dev-state.md";
@@ -95,7 +96,7 @@ var AGENTIC_BEHAVIOR_GUIDELINE = `# Important Behavioral Guidelines
 - Only begin using write/execute tools when the user **explicitly requests** an action (e.g., "generate", "create", "modify", "run", "start", etc.).
 - **Stop when the explicit task is done \u2014 do NOT autonomously test, verify, or run what you just created.** If the user asks "write/create/save file X", finish writing the file and STOP. Do not run it, do not test it, do not "verify it works" with bash/run_interactive. The user will run it themselves and tell you if anything is wrong. Only run/test when the user explicitly says "run", "test", "execute", "try it", "verify", "make sure it works", etc.
 - **Do NOT retry the same failing command with variants.** If a command fails (exit code non-zero), report the failure to the user with a brief diagnosis and STOP. Do not loop through alternate shells, alternate quoting, alternate paths, or alternate Python invocations. The user can decide whether to retry.
-- Project context files (CLAUDE.md, AICLI.md) provide background information about the project. They are NOT instructions to start working. Only use them as reference when the user asks a project-related question or task.
+- Project context files (AICLI.md, CLAUDE.md, AGENTS.md, and override variants) provide background information about the project. They are NOT instructions to start working. Only use them as reference when the user asks a project-related question or task.
 - If you are unsure about the user's intent, use the ask_user tool to confirm with the user, rather than assuming and executing on your own.
 - **Do NOT abuse ask_user for redundant confirmations**: When the user has already given a clear, explicit instruction (e.g., "write lesson 142", "generate file X", "create the report"), execute it immediately. Do NOT ask "are you sure?" or request details that can be found in project documents. Repeatedly asking the user to confirm wastes their time and is extremely frustrating. Only use ask_user when critical information is genuinely missing and cannot be inferred from context files.`;
 function buildUserIdentityPrompt(profile) {
@@ -142,6 +143,7 @@ export {
   SKILLS_DIR_NAME,
   CUSTOM_COMMANDS_DIR_NAME,
   CONTEXT_FILE_CANDIDATES,
+  CONTEXT_FILE_MAX_BYTES,
   MEMORY_FILE_NAME,
   MEMORY_MAX_CHARS,
   DEV_STATE_FILE_NAME,

package/dist/{chunk-STIEOOOL.js → chunk-JBWA73GK.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   CONFIG_DIR_NAME
-} from "./chunk-UPMBIS4T.js";
+} from "./chunk-E5XCM4A6.js";
 import {
   atomicWriteFileSync
 } from "./chunk-IW3Q7AE5.js";

package/dist/{chunk-DUZRQXIP.js → chunk-UOROWTGG.js}

@@ -8,7 +8,7 @@ import {
   CONFIG_FILE_NAME,
   HISTORY_DIR_NAME,
   PLUGINS_DIR_NAME
-} from "./chunk-UPMBIS4T.js";
+} from "./chunk-E5XCM4A6.js";
 import {
   atomicWriteFileSync
 } from "./chunk-IW3Q7AE5.js";
@@ -122,10 +122,15 @@ var ConfigSchema = z.object({
     systemPrompt: z.string().optional()
   }).default({}),
   // 项目上下文文件配置
-  // 启动时自动读取并注入 system prompt，类似 Claude Code 的 CLAUDE.md 机制
-  // 默认按顺序查找：AICLI.md → CLAUDE.md → .aicli/context.md
-  // 设为 false 可禁用此功能
+  // 启动时自动读取并注入 system prompt，类似 Claude Code 的 CLAUDE.md / Codex AGENTS.md 机制
+  // 默认按顺序查找：AICLI.override.md → AGENTS.override.md → AICLI.md → CLAUDE.md → AGENTS.md
+  // 设为 false 可禁用此功能；指定字符串时仅加载 cwd 下的该文件
   contextFile: z.union([z.string(), z.literal(false)]).default("auto"),
+  context: z.object({
+    projectDocFallbackFilenames: z.array(z.string()).default([]),
+    projectDocMaxBytes: z.number().int().positive().default(32 * 1024),
+    showLoadedContextSources: z.boolean().default(false)
+  }).default({}),
   // Google Custom Search API 的 Search Engine ID (cx 参数)
   // API Key 通过 apiKeys['google-search'] 或 AICLI_API_KEY_GOOGLESEARCH 环境变量配置
   // CX 也可通过 AICLI_GOOGLE_CX 环境变量覆盖
@@ -157,7 +162,41 @@ var ConfigSchema = z.object({
     preToolExecution: z.string().optional(),
     postToolExecution: z.string().optional()
   }).optional(),
-  // 工具权限规则（按顺序匹配第一个生效）
+  // 网络访问治理（v0.4.211+）：默认关闭以保持兼容；开启后统一治理 web/search/MCP/shell 网络出口。
+  networkPolicy: z.object({
+    enabled: z.boolean().default(false),
+    defaultAction: z.enum(["allow", "confirm", "deny"]).default("confirm"),
+    allowDomains: z.array(z.string()).default([]),
+    denyDomains: z.array(z.string()).default([]),
+    allowPorts: z.array(z.number().int().min(1).max(65535)).default([]),
+    denyPorts: z.array(z.number().int().min(1).max(65535)).default([]),
+    allowPrivateNetwork: z.boolean().default(false),
+    tools: z.object({
+      web_fetch: z.enum(["allow", "confirm", "deny"]).optional(),
+      web_search: z.enum(["allow", "confirm", "deny"]).optional(),
+      google_search: z.enum(["allow", "confirm", "deny"]).optional(),
+      shell: z.enum(["allow", "confirm", "deny"]).optional(),
+      mcp: z.enum(["allow", "confirm", "deny"]).optional()
+    }).default({})
+  }).default({ enabled: false, defaultAction: "confirm", allowDomains: [], denyDomains: [], allowPorts: [], denyPorts: [], allowPrivateNetwork: false, tools: {} }),
+  // 权限 Profile（v0.4.211+）：legacy 保持旧行为；其余 profile 提供更清晰的安全边界。
+  defaultPermissionProfile: z.enum(["legacy", "read-only", "workspace-write", "danger-full-access"]).default("legacy"),
+  allowedPermissionProfiles: z.array(z.string()).default(["legacy", "read-only", "workspace-write", "danger-full-access"]),
+  permissionProfiles: z.record(z.object({
+    extends: z.enum(["legacy", "read-only", "workspace-write", "danger-full-access"]).optional(),
+    defaultAction: z.enum(["auto-approve", "deny", "confirm"]).optional(),
+    workspaceRoots: z.array(z.string()).optional(),
+    allowTemp: z.boolean().optional(),
+    rules: z.array(z.object({
+      tool: z.string(),
+      action: z.enum(["auto-approve", "deny", "confirm"]),
+      when: z.object({
+        dangerLevel: z.enum(["safe", "write", "destructive"]).optional(),
+        pathPattern: z.string().optional()
+      }).optional()
+    })).optional()
+  })).default({}),
+  // 工具权限规则（按顺序匹配第一个生效；作为当前权限 Profile 内的细粒度规则）
   permissionRules: z.array(z.object({
     tool: z.string(),
     action: z.enum(["auto-approve", "deny", "confirm"]),
@@ -166,7 +205,7 @@ var ConfigSchema = z.object({
       pathPattern: z.string().optional()
     }).optional()
   })).default([]),
-  // 无规则匹配时的默认权限动作
+  // 无规则匹配时的默认权限动作（legacy profile 兼容旧行为）
   defaultPermission: z.enum(["auto-approve", "deny", "confirm"]).default("confirm"),
   // 自动上下文压缩开关
   // 当对话估算 token 数超过模型 contextWindow 的 80% 时，自动触发 compact 压缩旧消息