jinzd-ai-cli 0.4.209 → 0.4.211

package/dist/electron-server.js

@@ -12,6 +12,7 @@ import {
   CONFIG_DIR_NAME,
   CONFIG_FILE_NAME,
   CONTEXT_FILE_CANDIDATES,
+  CONTEXT_FILE_MAX_BYTES,
   CUSTOM_COMMANDS_DIR_NAME,
   DEFAULT_MAX_TOKENS,
   DEFAULT_MAX_TOOL_OUTPUT_CHARS_CAP,
@@ -36,7 +37,7 @@ import {
   VERSION,
   buildUserIdentityPrompt,
   runTestsTool
-} from "./chunk-EYID2AIR.js";
+} from "./chunk-ZY2N2N6T.js";
 import {
   hasSemanticIndex,
   semanticSearch
@@ -59,8 +60,8 @@ import {
 import express from "express";
 import { createServer } from "http";
 import { WebSocketServer } from "ws";
-import { join as join17, dirname as dirname6, resolve as resolve6, relative as relative3, sep as sep3 } from "path";
-import { existsSync as existsSync23, readFileSync as readFileSync17, readdirSync as readdirSync11, statSync as statSync9, realpathSync } from "fs";
+import { join as join19, dirname as dirname6, resolve as resolve8, relative as relative4, sep as sep3 } from "path";
+import { existsSync as existsSync25, readFileSync as readFileSync19, readdirSync as readdirSync12, statSync as statSync10, realpathSync } from "fs";
 import { networkInterfaces } from "os";
 
 // src/config/config-manager.ts
@@ -172,10 +173,15 @@ var ConfigSchema = z.object({
     systemPrompt: z.string().optional()
   }).default({}),
   // 项目上下文文件配置
-  // 启动时自动读取并注入 system prompt，类似 Claude Code 的 CLAUDE.md 机制
-  // 默认按顺序查找：AICLI.md → CLAUDE.md → .aicli/context.md
-  // 设为 false 可禁用此功能
+  // 启动时自动读取并注入 system prompt，类似 Claude Code 的 CLAUDE.md / Codex AGENTS.md 机制
+  // 默认按顺序查找：AICLI.override.md → AGENTS.override.md → AICLI.md → CLAUDE.md → AGENTS.md
+  // 设为 false 可禁用此功能；指定字符串时仅加载 cwd 下的该文件
   contextFile: z.union([z.string(), z.literal(false)]).default("auto"),
+  context: z.object({
+    projectDocFallbackFilenames: z.array(z.string()).default([]),
+    projectDocMaxBytes: z.number().int().positive().default(32 * 1024),
+    showLoadedContextSources: z.boolean().default(false)
+  }).default({}),
   // Google Custom Search API 的 Search Engine ID (cx 参数)
   // API Key 通过 apiKeys['google-search'] 或 AICLI_API_KEY_GOOGLESEARCH 环境变量配置
   // CX 也可通过 AICLI_GOOGLE_CX 环境变量覆盖
@@ -207,7 +213,41 @@ var ConfigSchema = z.object({
     preToolExecution: z.string().optional(),
     postToolExecution: z.string().optional()
   }).optional(),
-  // 工具权限规则（按顺序匹配第一个生效）
+  // 网络访问治理（v0.4.211+）：默认关闭以保持兼容；开启后统一治理 web/search/MCP/shell 网络出口。
+  networkPolicy: z.object({
+    enabled: z.boolean().default(false),
+    defaultAction: z.enum(["allow", "confirm", "deny"]).default("confirm"),
+    allowDomains: z.array(z.string()).default([]),
+    denyDomains: z.array(z.string()).default([]),
+    allowPorts: z.array(z.number().int().min(1).max(65535)).default([]),
+    denyPorts: z.array(z.number().int().min(1).max(65535)).default([]),
+    allowPrivateNetwork: z.boolean().default(false),
+    tools: z.object({
+      web_fetch: z.enum(["allow", "confirm", "deny"]).optional(),
+      web_search: z.enum(["allow", "confirm", "deny"]).optional(),
+      google_search: z.enum(["allow", "confirm", "deny"]).optional(),
+      shell: z.enum(["allow", "confirm", "deny"]).optional(),
+      mcp: z.enum(["allow", "confirm", "deny"]).optional()
+    }).default({})
+  }).default({ enabled: false, defaultAction: "confirm", allowDomains: [], denyDomains: [], allowPorts: [], denyPorts: [], allowPrivateNetwork: false, tools: {} }),
+  // 权限 Profile（v0.4.211+）：legacy 保持旧行为；其余 profile 提供更清晰的安全边界。
+  defaultPermissionProfile: z.enum(["legacy", "read-only", "workspace-write", "danger-full-access"]).default("legacy"),
+  allowedPermissionProfiles: z.array(z.string()).default(["legacy", "read-only", "workspace-write", "danger-full-access"]),
+  permissionProfiles: z.record(z.object({
+    extends: z.enum(["legacy", "read-only", "workspace-write", "danger-full-access"]).optional(),
+    defaultAction: z.enum(["auto-approve", "deny", "confirm"]).optional(),
+    workspaceRoots: z.array(z.string()).optional(),
+    allowTemp: z.boolean().optional(),
+    rules: z.array(z.object({
+      tool: z.string(),
+      action: z.enum(["auto-approve", "deny", "confirm"]),
+      when: z.object({
+        dangerLevel: z.enum(["safe", "write", "destructive"]).optional(),
+        pathPattern: z.string().optional()
+      }).optional()
+    })).optional()
+  })).default({}),
+  // 工具权限规则（按顺序匹配第一个生效；作为当前权限 Profile 内的细粒度规则）
   permissionRules: z.array(z.object({
     tool: z.string(),
     action: z.enum(["auto-approve", "deny", "confirm"]),
@@ -216,7 +256,7 @@ var ConfigSchema = z.object({
       pathPattern: z.string().optional()
     }).optional()
   })).default([]),
-  // 无规则匹配时的默认权限动作
+  // 无规则匹配时的默认权限动作（legacy profile 兼容旧行为）
   defaultPermission: z.enum(["auto-approve", "deny", "confirm"]).default("confirm"),
   // 自动上下文压缩开关
   // 当对话估算 token 数超过模型 contextWindow 的 80% 时，自动触发 compact 压缩旧消息
@@ -5727,6 +5767,7 @@ import { dirname as dirname3 } from "path";
 // src/tools/executor.ts
 import chalk3 from "chalk";
 import { existsSync as existsSync7, readFileSync as readFileSync6 } from "fs";
+import { tmpdir } from "os";
 
 // src/core/readline-internal.ts
 function rlInternal(rl) {
@@ -5961,6 +6002,7 @@ function runHook(template, vars) {
 }
 
 // src/tools/permissions.ts
+import { isAbsolute, resolve as resolve3 } from "path";
 function checkPermission(toolName, args, dangerLevel, rules, defaultAction = "confirm") {
   for (const rule of rules) {
     if (rule.tool !== "*" && rule.tool !== toolName) continue;
@@ -5981,6 +6023,225 @@ function checkPermission(toolName, args, dangerLevel, rules, defaultAction = "co
   }
   return defaultAction;
 }
+var BUILTIN_PROFILE_NAMES = /* @__PURE__ */ new Set(["legacy", "read-only", "workspace-write", "danger-full-access"]);
+var READ_ONLY_TOOLS = /* @__PURE__ */ new Set([
+  "read_file",
+  "list_dir",
+  "grep_files",
+  "glob_files",
+  "find_symbol",
+  "get_outline",
+  "find_references",
+  "search_code",
+  "git_status",
+  "git_diff",
+  "git_log",
+  "task_list",
+  "web_fetch",
+  "web_search",
+  "google_search",
+  "ask_user",
+  "write_todos",
+  "recall_memory"
+]);
+function normalizePathForPermission(value) {
+  return value.replace(/\\/g, "/").replace(/\/+$/, "").toLowerCase();
+}
+function isInsidePath(root, target) {
+  const absoluteTarget = isAbsolute(target) ? target : resolve3(root, target);
+  const r = normalizePathForPermission(resolve3(root));
+  const t = normalizePathForPermission(absoluteTarget);
+  return t === r || t.startsWith(`${r}/`);
+}
+function extractPathArg(toolName, args) {
+  const raw = args["path"] ?? args["filePath"] ?? args["notebook_path"];
+  if (typeof raw === "string" && raw.trim()) return raw.trim();
+  if (toolName === "save_last_response") {
+    const output = args["outputPath"] ?? args["file"] ?? args["path"];
+    if (typeof output === "string" && output.trim()) return output.trim();
+  }
+  return null;
+}
+function isExplicitFileWriteTool(toolName) {
+  return toolName === "write_file" || toolName === "edit_file" || toolName === "notebook_edit" || toolName === "save_last_response";
+}
+function resolveProfileName(ctx) {
+  const requested = ctx?.profileName ?? "legacy";
+  if (ctx?.allowedProfiles && ctx.allowedProfiles.length > 0 && !ctx.allowedProfiles.includes(requested)) {
+    return "legacy";
+  }
+  if (BUILTIN_PROFILE_NAMES.has(requested)) return requested;
+  const ext = ctx?.profile?.extends;
+  return ext && BUILTIN_PROFILE_NAMES.has(ext) ? ext : "legacy";
+}
+function getProfileRules(ctx) {
+  return ctx?.profile?.rules ?? [];
+}
+function getProfileDefaultAction(name, ctx) {
+  if (ctx?.profile?.defaultAction) return ctx.profile.defaultAction;
+  if (name === "danger-full-access") return "auto-approve";
+  return "confirm";
+}
+function getWorkspaceRoots(ctx) {
+  const roots = [ctx?.workspaceRoot, ...ctx?.profile?.workspaceRoots ?? []].filter((v) => typeof v === "string" && v.trim().length > 0);
+  return roots;
+}
+function getAllowedWriteRoots(ctx) {
+  const roots = [...getWorkspaceRoots(ctx)];
+  const allowTemp = ctx?.profile?.allowTemp !== false;
+  if (allowTemp) roots.push(...ctx?.tempDirs ?? []);
+  return roots.filter((v) => v.trim().length > 0);
+}
+function profileHardDecision(profileName, toolName, args, dangerLevel, ctx) {
+  if (profileName === "legacy") return null;
+  if (profileName === "read-only") {
+    const mcpReadOnly = toolName.startsWith("mcp__") && dangerLevel === "safe";
+    if (dangerLevel !== "safe" || !READ_ONLY_TOOLS.has(toolName) && !mcpReadOnly) {
+      return { action: "deny", reason: "blocked by read-only permission profile", profileName };
+    }
+    return null;
+  }
+  if (profileName === "workspace-write") {
+    if (dangerLevel === "destructive") return { action: "confirm", reason: "destructive tools always require confirmation", profileName };
+    if (dangerLevel === "write" && isExplicitFileWriteTool(toolName)) {
+      const target = extractPathArg(toolName, args);
+      if (!target) return { action: "confirm", reason: "file write target is not explicit", profileName };
+      const allowedRoots = getAllowedWriteRoots(ctx);
+      if (allowedRoots.length === 0 || !allowedRoots.some((root) => isInsidePath(root, target))) {
+        return { action: "deny", reason: "file write target is outside workspace/temp roots", profileName };
+      }
+    }
+    return null;
+  }
+  if (profileName === "danger-full-access") {
+    if (dangerLevel === "destructive") return { action: "confirm", reason: "destructive tools still require confirmation", profileName };
+    return null;
+  }
+  return null;
+}
+function checkPermissionWithProfile(toolName, args, dangerLevel, rules, defaultAction = "confirm", profileContext) {
+  const profileName = resolveProfileName(profileContext);
+  const hard = profileHardDecision(profileName, toolName, args, dangerLevel, profileContext);
+  if (hard?.action === "deny") return hard;
+  const combinedRules = [...getProfileRules(profileContext), ...rules];
+  const profileDefault = profileName === "legacy" ? defaultAction : getProfileDefaultAction(profileName, profileContext);
+  const action = checkPermission(toolName, args, dangerLevel, combinedRules, profileDefault);
+  if (hard?.action === "confirm" && action === "auto-approve") return hard;
+  return { action, profileName };
+}
+function formatPermissionProfileWarning(profileName) {
+  if (profileName === "danger-full-access") {
+    return "\u26A0 danger-full-access permission profile is active. Write tools may auto-run; destructive tools still require confirmation.";
+  }
+  if (profileName === "read-only") return "Read-only permission profile is active. Write and destructive tools are blocked.";
+  if (profileName === "workspace-write") return "Workspace-write permission profile is active. Writes outside workspace/temp roots are blocked.";
+  return null;
+}
+var NETWORK_TOOL_HOSTS = {
+  web_search: ["cn.bing.com", "www.google.com"],
+  google_search: ["www.googleapis.com"]
+};
+var NETWORK_TOOL_PORTS = {
+  web_search: [443],
+  google_search: [443]
+};
+function networkActionToPermission(action) {
+  if (action === "allow") return null;
+  return action;
+}
+function domainMatches(pattern, host) {
+  const p = pattern.trim().toLowerCase().replace(/^\*\./, "");
+  const h = host.trim().toLowerCase().replace(/:\d+$/, "");
+  return h === p || h.endsWith(`.${p}`);
+}
+function isPrivateNetworkHost(host) {
+  const h = host.toLowerCase().replace(/^\[|\]$/g, "");
+  if (h === "" || h === "localhost") return true;
+  if (/^(127|10)\./.test(h)) return true;
+  if (/^192\.168\./.test(h)) return true;
+  if (/^172\.(1[6-9]|2\d|3[0-1])\./.test(h)) return true;
+  if (/^169\.254\./.test(h)) return true;
+  if (h === "::1" || h === "::") return true;
+  if (/^f[cd][0-9a-f]*:/i.test(h) || /^fe[89ab][0-9a-f]*:/i.test(h)) return true;
+  return false;
+}
+function extractNetworkHosts(toolName, args) {
+  if (toolName === "web_fetch") {
+    const raw = String(args["url"] ?? "").trim();
+    try {
+      return raw ? [new URL(raw).hostname] : [];
+    } catch {
+      return [];
+    }
+  }
+  return NETWORK_TOOL_HOSTS[toolName] ?? [];
+}
+function extractNetworkPorts(toolName, args) {
+  if (toolName === "web_fetch") {
+    const raw = String(args["url"] ?? "").trim();
+    try {
+      if (!raw) return [];
+      const url = new URL(raw);
+      if (url.port) return [Number(url.port)];
+      return [url.protocol === "http:" ? 80 : 443];
+    } catch {
+      return [];
+    }
+  }
+  return NETWORK_TOOL_PORTS[toolName] ?? [];
+}
+function isShellNetworkCommand(command) {
+  return /\b(curl|wget|aria2c|Invoke-WebRequest|Invoke-RestMethod|iwr|irm|ssh|scp|sftp|ftp|telnet|nc|ncat|netcat)\b/i.test(command) || /\b(git\s+(clone|fetch|pull|push)|npm\s+(install|publish|view)|pnpm\s+(add|install)|yarn\s+(add|install)|pip\s+install|python\s+-m\s+pip\s+install)\b/i.test(command);
+}
+function networkToolAction(toolName, policy) {
+  if (toolName === "web_fetch") return policy.tools?.web_fetch ?? policy.defaultAction ?? "confirm";
+  if (toolName === "web_search") return policy.tools?.web_search ?? policy.defaultAction ?? "confirm";
+  if (toolName === "google_search") return policy.tools?.google_search ?? policy.defaultAction ?? "confirm";
+  if (toolName.startsWith("mcp__")) return policy.tools?.mcp ?? policy.defaultAction ?? "confirm";
+  return null;
+}
+function checkNetworkPolicy(toolName, args, policy) {
+  if (!policy?.enabled) return null;
+  let action = networkToolAction(toolName, policy);
+  let reason = "network access requires confirmation";
+  if (toolName === "bash") {
+    const command = String(args["command"] ?? "");
+    if (!isShellNetworkCommand(command)) return null;
+    action = policy.tools?.shell ?? policy.defaultAction ?? "confirm";
+    reason = "shell command may access the network";
+  }
+  if (!action) return null;
+  const hosts = extractNetworkHosts(toolName, args);
+  for (const host of hosts) {
+    if (policy.denyDomains?.some((pattern) => domainMatches(pattern, host))) {
+      return { action: "deny", reason: `network host "${host}" is denied by networkPolicy`, profileName: "networkPolicy" };
+    }
+    if (!policy.allowPrivateNetwork && isPrivateNetworkHost(host)) {
+      return { action: "deny", reason: `network host "${host}" is private/internal`, profileName: "networkPolicy" };
+    }
+  }
+  if (hosts.length > 0 && policy.allowDomains && policy.allowDomains.length > 0) {
+    const allAllowed = hosts.every((host) => policy.allowDomains.some((pattern) => domainMatches(pattern, host)));
+    if (!allAllowed) {
+      return { action: "deny", reason: `network host is not in networkPolicy.allowDomains`, profileName: "networkPolicy" };
+    }
+  }
+  const ports = extractNetworkPorts(toolName, args);
+  for (const port of ports) {
+    if (policy.denyPorts?.includes(port)) {
+      return { action: "deny", reason: `network port ${port} is denied by networkPolicy`, profileName: "networkPolicy" };
+    }
+  }
+  if (ports.length > 0 && policy.allowPorts && policy.allowPorts.length > 0) {
+    const allPortsAllowed = ports.every((port) => policy.allowPorts.includes(port));
+    if (!allPortsAllowed) {
+      return { action: "deny", reason: `network port is not in networkPolicy.allowPorts`, profileName: "networkPolicy" };
+    }
+  }
+  const permissionAction = networkActionToPermission(action);
+  if (!permissionAction) return null;
+  return { action: permissionAction, reason, profileName: "networkPolicy" };
+}
 
 // src/tools/truncate.ts
 var DEFAULT_MAX_TOOL_OUTPUT_CHARS = 12e3;
@@ -6283,11 +6544,21 @@ var ToolExecutor = class {
   /** 权限规则（可选） */
   permissionRules = [];
   defaultPermission = "confirm";
+  permissionProfileName = "legacy";
+  permissionProfile;
+  allowedPermissionProfiles = [];
+  workspaceRoot = process.cwd();
+  networkPolicy;
   /** 注入 hooks 和 permission rules 配置 */
   setConfig(opts) {
     this.hookConfig = opts.hookConfig;
     if (opts.permissionRules) this.permissionRules = opts.permissionRules;
     if (opts.defaultPermission) this.defaultPermission = opts.defaultPermission;
+    if (opts.permissionProfileName) this.permissionProfileName = opts.permissionProfileName;
+    if (opts.permissionProfile) this.permissionProfile = opts.permissionProfile;
+    if (opts.allowedPermissionProfiles) this.allowedPermissionProfiles = opts.allowedPermissionProfiles;
+    if (opts.workspaceRoot) this.workspaceRoot = opts.workspaceRoot;
+    if (opts.networkPolicy) this.networkPolicy = opts.networkPolicy;
   }
   async execute(call) {
     return runWithSessionKey(this.sessionKey, () => this.executeInner(call));
@@ -6302,31 +6573,69 @@ var ToolExecutor = class {
       };
     }
     const dangerLevel = getDangerLevel(call.name, call.arguments);
+    let toolCallAlreadyPrinted = false;
     runHook(this.hookConfig?.preToolExecution, {
       tool: call.name,
       dangerLevel,
       args: JSON.stringify(call.arguments).slice(0, 200)
     });
-    if (this.permissionRules.length > 0) {
-      const action = checkPermission(call.name, call.arguments, dangerLevel, this.permissionRules, this.defaultPermission);
-      if (action === "deny") {
-        return { callId: call.id, content: `[Permission denied] Tool ${call.name} is blocked by permission rules. Do not retry.`, isError: true };
+    const permission = checkPermissionWithProfile(
+      call.name,
+      call.arguments,
+      dangerLevel,
+      this.permissionRules,
+      this.defaultPermission,
+      {
+        profileName: this.permissionProfileName,
+        profile: this.permissionProfile,
+        allowedProfiles: this.allowedPermissionProfiles,
+        workspaceRoot: this.workspaceRoot,
+        tempDirs: [tmpdir()]
       }
-      if (action === "auto-approve") {
-        this.printToolCall(call);
-        try {
-          const rawContent = await runTool(tool, call.arguments, call.name);
-          const content = truncateOutput(rawContent, call.name);
-          const wasTruncated = content !== rawContent;
-          this.printToolResult(call.name, rawContent, false, wasTruncated);
-          runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "ok" });
-          return { callId: call.id, content, isError: false };
-        } catch (err) {
-          const message = err instanceof Error ? err.message : String(err);
-          this.printToolResult(call.name, message, true, false);
-          runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
-          return { callId: call.id, content: message, isError: true };
-        }
+    );
+    const networkPermission = checkNetworkPolicy(call.name, call.arguments, this.networkPolicy);
+    if (networkPermission?.action === "deny") {
+      const reason = networkPermission.reason ? ` (${networkPermission.reason})` : "";
+      return {
+        callId: call.id,
+        content: `[Permission denied] Tool ${call.name} is blocked by networkPolicy${reason}. Do not retry.`,
+        isError: true
+      };
+    }
+    if (permission.action === "deny") {
+      const reason = permission.reason ? ` (${permission.reason})` : "";
+      return {
+        callId: call.id,
+        content: `[Permission denied] Tool ${call.name} is blocked by permission profile "${permission.profileName}"${reason}. Do not retry.`,
+        isError: true
+      };
+    }
+    if (permission.action === "auto-approve" && networkPermission?.action !== "confirm") {
+      this.printToolCall(call);
+      try {
+        const rawContent = await runTool(tool, call.arguments, call.name);
+        const content = truncateOutput(rawContent, call.name);
+        const wasTruncated = content !== rawContent;
+        this.printToolResult(call.name, rawContent, false, wasTruncated);
+        runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "ok" });
+        return { callId: call.id, content, isError: false };
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        this.printToolResult(call.name, message, true, false);
+        runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
+        return { callId: call.id, content: message, isError: true };
+      }
+    }
+    if (networkPermission?.action === "confirm" && dangerLevel === "safe") {
+      this.printToolCall(call);
+      toolCallAlreadyPrinted = true;
+      const confirmed = await this.confirm(call, "write");
+      if (!confirmed) {
+        return {
+          callId: call.id,
+          content: `[User cancelled] The user declined network access for ${call.name}. Do not retry without asking.`,
+          isError: true
+        };
       }
     }
     if (this.sessionAutoApprove && dangerLevel === "write") {
@@ -6416,6 +6725,9 @@ var ToolExecutor = class {
    * 然后让用户 approve all / reject all / 选择性 approve。
    */
   async executeBatchFileWrites(calls) {
+    if (this.permissionProfileName !== "legacy" || this.permissionRules.length > 0) {
+      return Promise.all(calls.map((call) => this.execute(call)));
+    }
     console.log();
     console.log(theme.heading(`\u270E Batch file writes (${calls.length} files):`));
     console.log(theme.dim("\u2500".repeat(50)));
@@ -6489,7 +6801,7 @@ var ToolExecutor = class {
     rl.resume();
     process.stdout.write(prompt);
     this.confirming = true;
-    return new Promise((resolve7) => {
+    return new Promise((resolve9) => {
       let completed = false;
       const cleanup = (result) => {
         if (completed) return;
@@ -6499,7 +6811,7 @@ var ToolExecutor = class {
         rl.pause();
         rlAny.output = savedOutput;
         this.confirming = false;
-        resolve7(result);
+        resolve9(result);
       };
       const onLine = (line) => {
         const trimmed = line.trim();
@@ -6673,7 +6985,7 @@ var ToolExecutor = class {
     rl.resume();
     process.stdout.write(color("Proceed? [y/N] (type y + Enter to confirm) "));
     this.confirming = true;
-    return new Promise((resolve7) => {
+    return new Promise((resolve9) => {
       let completed = false;
       const cleanup = (answer) => {
         if (completed) return;
@@ -6683,7 +6995,7 @@ var ToolExecutor = class {
         rl.pause();
         rlAny.output = savedOutput;
         this.confirming = false;
-        resolve7(answer === "y");
+        resolve9(answer === "y");
       };
       const onLine = (line) => {
         const trimmed = line.trim();
@@ -6711,11 +7023,11 @@ var ToolExecutor = class {
 };
 
 // src/tools/sensitive-paths.ts
-import { resolve as resolve3, sep as sep2, basename as basename2 } from "path";
+import { resolve as resolve4, sep as sep2, basename as basename2 } from "path";
 import { homedir as homedir4 } from "os";
 var home = homedir4();
 function norm(p) {
-  const abs = resolve3(p);
+  const abs = resolve4(p);
   return process.platform === "win32" ? abs.toLowerCase() : abs;
 }
 function homeRel(p) {
@@ -7666,7 +7978,7 @@ function collectFilePaths(rootPath, filePattern, maxFiles) {
   walk(rootPath);
   return paths;
 }
-async function searchInFileAsync(fullPath, displayPath, regex, contextLines, maxResults) {
+async function searchInFileAsync(fullPath, displayPath2, regex, contextLines, maxResults) {
   let content;
   try {
     content = await readFile(fullPath, "utf-8");
@@ -7680,7 +7992,7 @@ async function searchInFileAsync(fullPath, displayPath, regex, contextLines, max
     regex.lastIndex = 0;
     if (regex.test(lines[i])) {
       const match = {
-        file: displayPath.replace(/\\/g, "/"),
+        file: displayPath2.replace(/\\/g, "/"),
         lineNumber: i + 1,
         lineText: lines[i]
       };
@@ -7699,7 +8011,7 @@ async function searchInFileAsync(fullPath, displayPath, regex, contextLines, max
   }
   return results;
 }
-function searchInFile(fullPath, displayPath, regex, contextLines, maxResults, results) {
+function searchInFile(fullPath, displayPath2, regex, contextLines, maxResults, results) {
   try {
     const stat = statSync4(fullPath);
     if (stat.size > 1e6) return;
@@ -7719,7 +8031,7 @@ function searchInFile(fullPath, displayPath, regex, contextLines, maxResults, re
     regex.lastIndex = 0;
     if (regex.test(lines[i])) {
       const result = {
-        file: displayPath,
+        file: displayPath2,
         lineNumber: i + 1,
         lineText: lines[i].trimEnd()
       };
@@ -7932,7 +8244,7 @@ var runInteractiveTool = {
       PYTHONDONTWRITEBYTECODE: "1"
     };
     const prefixWarnings = [argsTypeWarning, stdinTypeWarning].filter(Boolean).join("");
-    return new Promise((resolve7) => {
+    return new Promise((resolve9) => {
       const child = spawn2(executable, cmdArgs.map(String), {
         cwd: process.cwd(),
         env,
@@ -7965,22 +8277,22 @@ var runInteractiveTool = {
       setTimeout(writeNextLine, 400);
       const timer = setTimeout(() => {
         child.kill();
-        resolve7(`${prefixWarnings}[Timeout after ${timeout}ms]
+        resolve9(`${prefixWarnings}[Timeout after ${timeout}ms]
 ${buildOutput(stdout, stderr)}`);
       }, timeout);
       child.on("close", (code) => {
         clearTimeout(timer);
         const output = buildOutput(stdout, stderr);
         if (code !== 0 && code !== null) {
-          resolve7(`${prefixWarnings}Exit code ${code}:
+          resolve9(`${prefixWarnings}Exit code ${code}:
 ${output}`);
         } else {
-          resolve7(`${prefixWarnings}${output || "(no output)"}`);
+          resolve9(`${prefixWarnings}${output || "(no output)"}`);
         }
       });
       child.on("error", (err) => {
         clearTimeout(timer);
-        resolve7(
+        resolve9(
           `${prefixWarnings}Failed to start process "${executable}": ${err.message}
 Hint: On Windows, use the full path to the executable, e.g.:
   C:\\Users\\Jinzd\\anaconda3\\envs\\python312\\python.exe`
@@ -8732,7 +9044,7 @@ function promptUser(rl, question) {
   console.log();
   console.log(chalk4.cyan("\u2753 ") + chalk4.bold(question));
   process.stdout.write(chalk4.cyan("> "));
-  return new Promise((resolve7) => {
+  return new Promise((resolve9) => {
     let completed = false;
     const cleanup = (answer) => {
       if (completed) return;
@@ -8742,7 +9054,7 @@ function promptUser(rl, question) {
       rl.pause();
       rlAny.output = savedOutput;
       askUserContext.prompting = false;
-      resolve7(answer);
+      resolve9(answer);
     };
     const onLine = (line) => {
       cleanup(line);
@@ -9753,7 +10065,7 @@ ${commitOutput.trim()}`;
 // src/tools/builtin/notebook-edit.ts
 import { readFileSync as readFileSync10, existsSync as existsSync14 } from "fs";
 import { writeFile } from "fs/promises";
-import { resolve as resolve4, extname as extname2 } from "path";
+import { resolve as resolve5, extname as extname2 } from "path";
 var notebookEditTool = {
   definition: {
     name: "notebook_edit",
@@ -9802,7 +10114,7 @@ var notebookEditTool = {
     if (!Number.isInteger(cellIndexRaw) || cellIndexRaw < 1) {
       throw new ToolError("notebook_edit", "cell_index must be a positive integer (1-based)");
     }
-    const absPath = resolve4(filePath);
+    const absPath = resolve5(filePath);
     if (extname2(absPath).toLowerCase() !== ".ipynb") {
       throw new ToolError("notebook_edit", "path must point to a .ipynb file");
     }
@@ -10581,7 +10893,7 @@ var McpClient = class {
   // 内部方法：JSON-RPC 通信
   // ══════════════════════════════════════════════════════════════════
   sendRequest(method, params) {
-    return new Promise((resolve7, reject) => {
+    return new Promise((resolve9, reject) => {
       if (!this.process?.stdin?.writable) {
         return reject(new Error(`MCP server [${this.serverId}] stdin not writable`));
       }
@@ -10605,7 +10917,7 @@ var McpClient = class {
       this.pendingRequests.set(id, {
         resolve: (result) => {
           cleanup();
-          resolve7(result);
+          resolve9(result);
         },
         reject: (error) => {
           cleanup();
@@ -10682,13 +10994,13 @@ var McpClient = class {
   }
   /** Promise 超时包装 */
   withTimeout(promise, ms, label) {
-    return new Promise((resolve7, reject) => {
+    return new Promise((resolve9, reject) => {
       const timer = setTimeout(() => {
         reject(new Error(`MCP [${this.serverId}] ${label} timed out after ${ms}ms`));
       }, ms);
       promise.then((val) => {
         clearTimeout(timer);
-        resolve7(val);
+        resolve9(val);
       }).catch((err) => {
         clearTimeout(timer);
         reject(err);
@@ -11120,6 +11432,7 @@ var SkillManager = class {
 
 // src/web/tool-executor-web.ts
 import { randomUUID as randomUUID2 } from "crypto";
+import { tmpdir as tmpdir2 } from "os";
 import { existsSync as existsSync17, readFileSync as readFileSync12 } from "fs";
 var ToolExecutorWeb = class _ToolExecutorWeb {
   constructor(registry, ws) {
@@ -11131,6 +11444,11 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
   hookConfig;
   permissionRules = [];
   defaultPermission = "confirm";
+  permissionProfileName = "legacy";
+  permissionProfile;
+  allowedPermissionProfiles = [];
+  workspaceRoot = process.cwd();
+  networkPolicy;
   /** Pending confirm promises keyed by requestId */
   pendingConfirms = /* @__PURE__ */ new Map();
   /** Pending batch confirm promises */
@@ -11165,6 +11483,11 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
     this.hookConfig = opts.hookConfig;
     if (opts.permissionRules) this.permissionRules = opts.permissionRules;
     if (opts.defaultPermission) this.defaultPermission = opts.defaultPermission;
+    if (opts.permissionProfileName) this.permissionProfileName = opts.permissionProfileName;
+    if (opts.permissionProfile) this.permissionProfile = opts.permissionProfile;
+    if (opts.allowedPermissionProfiles) this.allowedPermissionProfiles = opts.allowedPermissionProfiles;
+    if (opts.workspaceRoot) this.workspaceRoot = opts.workspaceRoot;
+    if (opts.networkPolicy) this.networkPolicy = opts.networkPolicy;
   }
   /** Clear M7 timeout timer for a requestId */
   clearPendingTimer(requestId) {
@@ -11176,33 +11499,33 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
   }
   /** Resolve a pending confirm from client response */
   resolveConfirm(requestId, approved) {
-    const resolve7 = this.pendingConfirms.get(requestId);
-    if (resolve7) {
+    const resolve9 = this.pendingConfirms.get(requestId);
+    if (resolve9) {
       this.clearPendingTimer(requestId);
       this.pendingConfirms.delete(requestId);
       this.confirming = false;
-      resolve7(approved);
+      resolve9(approved);
     }
   }
   /** Resolve a pending batch confirm from client response */
   resolveBatchConfirm(requestId, decision) {
-    const resolve7 = this.pendingBatchConfirms.get(requestId);
-    if (resolve7) {
+    const resolve9 = this.pendingBatchConfirms.get(requestId);
+    if (resolve9) {
       this.clearPendingTimer(requestId);
       this.pendingBatchConfirms.delete(requestId);
       this.confirming = false;
       if (decision === "all" || decision === "none") {
-        resolve7(decision);
+        resolve9(decision);
       } else {
-        resolve7(new Set(decision));
+        resolve9(new Set(decision));
       }
     }
   }
   /** Cancel all pending confirms (e.g., on disconnect) */
   cancelAll() {
-    for (const resolve7 of this.pendingConfirms.values()) resolve7(false);
+    for (const resolve9 of this.pendingConfirms.values()) resolve9(false);
     this.pendingConfirms.clear();
-    for (const resolve7 of this.pendingBatchConfirms.values()) resolve7("none");
+    for (const resolve9 of this.pendingBatchConfirms.values()) resolve9("none");
     this.pendingBatchConfirms.clear();
     this.confirming = false;
   }
@@ -11213,6 +11536,7 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
   }
   sendToolCallStart(call) {
     const dangerLevel = getDangerLevel(call.name, call.arguments);
+    let toolCallStarted = false;
     const startTime = Date.now();
     this.toolStartTimes.set(call.id, startTime);
     const msg = {
@@ -11278,8 +11602,8 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
       diff: this.getDiffPreview(call)
     };
     this.send(msg);
-    return new Promise((resolve7) => {
-      this.pendingConfirms.set(requestId, resolve7);
+    return new Promise((resolve9) => {
+      this.pendingConfirms.set(requestId, resolve9);
       this.pendingTimers.set(requestId, setTimeout(() => {
         if (this.pendingConfirms.has(requestId)) {
           this.resolveConfirm(requestId, false);
@@ -11303,8 +11627,8 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
       files
     };
     this.send(msg);
-    return new Promise((resolve7) => {
-      this.pendingBatchConfirms.set(requestId, resolve7);
+    return new Promise((resolve9) => {
+      this.pendingBatchConfirms.set(requestId, resolve9);
       this.pendingTimers.set(requestId, setTimeout(() => {
         if (this.pendingBatchConfirms.has(requestId)) {
           this.resolveBatchConfirm(requestId, "none");
@@ -11321,30 +11645,66 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
       return { callId: call.id, content: `Unknown tool: ${call.name}`, isError: true };
     }
     const dangerLevel = getDangerLevel(call.name, call.arguments);
+    let toolCallStarted = false;
     runHook(this.hookConfig?.preToolExecution, {
       tool: call.name,
       dangerLevel,
       args: JSON.stringify(call.arguments).slice(0, 200)
     });
-    if (this.permissionRules.length > 0) {
-      const action = checkPermission(call.name, call.arguments, dangerLevel, this.permissionRules, this.defaultPermission);
-      if (action === "deny") {
-        return { callId: call.id, content: `[Permission denied] Tool ${call.name} is blocked by permission rules. Do not retry.`, isError: true };
+    const permission = checkPermissionWithProfile(
+      call.name,
+      call.arguments,
+      dangerLevel,
+      this.permissionRules,
+      this.defaultPermission,
+      {
+        profileName: this.permissionProfileName,
+        profile: this.permissionProfile,
+        allowedProfiles: this.allowedPermissionProfiles,
+        workspaceRoot: this.workspaceRoot,
+        tempDirs: [tmpdir2()]
       }
-      if (action === "auto-approve") {
-        this.sendToolCallStart(call);
-        try {
-          const rawContent = await runTool(tool, call.arguments, call.name);
-          const content = truncateOutput(rawContent, call.name);
-          this.sendToolCallResult(call, rawContent, false);
-          runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "ok" });
-          return { callId: call.id, content, isError: false };
-        } catch (err) {
-          const message = err instanceof Error ? err.message : String(err);
-          this.sendToolCallResult(call, message, true);
-          runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
-          return { callId: call.id, content: message, isError: true };
-        }
+    );
+    const networkPermission = checkNetworkPolicy(call.name, call.arguments, this.networkPolicy);
+    if (networkPermission?.action === "deny") {
+      const reason = networkPermission.reason ? ` (${networkPermission.reason})` : "";
+      return {
+        callId: call.id,
+        content: `[Permission denied] Tool ${call.name} is blocked by networkPolicy${reason}. Do not retry.`,
+        isError: true
+      };
+    }
+    if (permission.action === "deny") {
+      const reason = permission.reason ? ` (${permission.reason})` : "";
+      return {
+        callId: call.id,
+        content: `[Permission denied] Tool ${call.name} is blocked by permission profile "${permission.profileName}"${reason}. Do not retry.`,
+        isError: true
+      };
+    }
+    if (permission.action === "auto-approve" && networkPermission?.action !== "confirm") {
+      this.sendToolCallStart(call);
+      try {
+        const rawContent = await runTool(tool, call.arguments, call.name);
+        const content = truncateOutput(rawContent, call.name);
+        this.sendToolCallResult(call, rawContent, false);
+        runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "ok" });
+        return { callId: call.id, content, isError: false };
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        this.sendToolCallResult(call, message, true);
+        runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
+        return { callId: call.id, content: message, isError: true };
+      }
+    }
+    if (networkPermission?.action === "confirm" && dangerLevel === "safe") {
+      this.sendToolCallStart(call);
+      toolCallStarted = true;
+      const confirmed = await this.confirm(call, "write");
+      if (!confirmed) {
+        const rejectionMsg = `[User cancelled] The user declined network access for ${call.name}. Do not retry without asking.`;
+        this.sendToolCallResult(call, rejectionMsg, true);
+        return { callId: call.id, content: rejectionMsg, isError: true };
       }
     }
     this.sendToolCallStart(call);
@@ -11403,6 +11763,9 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
     return results;
   }
   async executeBatchFileWrites(items) {
+    if (this.permissionProfileName !== "legacy" || this.permissionRules.length > 0) {
+      return Promise.all(items.map(({ call }) => this.execute(call)));
+    }
     const calls = items.map((i) => i.call);
     const decision = this.sessionAutoApprove ? "all" : await this.batchConfirm(calls);
     const results = new Array(calls.length);
@@ -11729,14 +12092,171 @@ function autoTrimSessionIfNeeded(session, sizeLimit = SESSION_SIZE_LIMIT) {
   return committedSize < originalSize;
 }
 
+// src/core/context-files.ts
+import { existsSync as existsSync20, readFileSync as readFileSync15 } from "fs";
+import { join as join13, relative as relative3, resolve as resolve6 } from "path";
+function uniqueNonEmpty(values) {
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
+  for (const value of values) {
+    const trimmed = value.trim();
+    if (!trimmed || seen.has(trimmed)) continue;
+    seen.add(trimmed);
+    out.push(trimmed);
+  }
+  return out;
+}
+function buildContextFileCandidates(fallbackFilenames = []) {
+  return uniqueNonEmpty([...CONTEXT_FILE_CANDIDATES, ...fallbackFilenames]);
+}
+function displayPath(filePath, cwd) {
+  const rel = relative3(cwd, filePath);
+  if (rel && !rel.startsWith("..") && !rel.startsWith("/") && !rel.startsWith("\\")) {
+    return rel;
+  }
+  return filePath;
+}
+function isInsideOrEqual(parent, child) {
+  const rel = relative3(resolve6(parent), resolve6(child));
+  return rel === "" || !!rel && !rel.startsWith("..") && !rel.startsWith("/") && !rel.startsWith("\\");
+}
+function readContextFile(level, filePath, cwd, maxBytes) {
+  const name = filePath.split(/[\\/]/).pop() ?? filePath;
+  const shown = displayPath(filePath, cwd);
+  try {
+    const raw = readFileSync15(filePath);
+    const byteCount = raw.byteLength;
+    if (byteCount === 0) {
+      return {
+        layer: null,
+        skipped: { level, filePath, displayPath: shown, fileName: name, reason: "empty" }
+      };
+    }
+    const truncated = byteCount > maxBytes;
+    const bytes = truncated ? raw.subarray(0, maxBytes) : raw;
+    const content = bytes.toString("utf-8").trim();
+    if (!content) {
+      return {
+        layer: null,
+        skipped: { level, filePath, displayPath: shown, fileName: name, reason: "empty" }
+      };
+    }
+    return {
+      layer: {
+        level: level === "single" ? "project" : level,
+        filePath,
+        displayPath: shown,
+        fileName: name,
+        content,
+        charCount: content.length,
+        byteCount,
+        truncated
+      },
+      skipped: truncated ? { level, filePath, displayPath: shown, fileName: name, reason: "too-large", message: `truncated to ${maxBytes} bytes` } : null
+    };
+  } catch (err) {
+    return {
+      layer: null,
+      skipped: {
+        level,
+        filePath,
+        displayPath: shown,
+        fileName: name,
+        reason: "read-error",
+        message: err instanceof Error ? err.message : String(err)
+      }
+    };
+  }
+}
+function findFirstContextFile(level, dir, cwd, candidates, maxBytes) {
+  const skipped = [];
+  for (const candidate of candidates) {
+    const filePath = join13(dir, candidate);
+    if (!existsSync20(filePath)) continue;
+    const result = readContextFile(level, filePath, cwd, maxBytes);
+    if (result.skipped) skipped.push(result.skipped);
+    if (result.layer) return { layer: result.layer, skipped };
+  }
+  return { layer: null, skipped };
+}
+function loadContextFiles(options) {
+  const cwd = resolve6(options.cwd);
+  const maxBytes = options.maxBytes ?? CONTEXT_FILE_MAX_BYTES;
+  const candidates = options.candidates ?? buildContextFileCandidates(options.fallbackFilenames);
+  const skipped = [];
+  if (options.setting === false) {
+    return { layers: [], mergedContent: "", skipped, totalChars: 0, totalBytes: 0, maxBytes, candidates };
+  }
+  if (options.setting && options.setting !== "auto") {
+    const filePath = resolve6(cwd, String(options.setting));
+    if (!isInsideOrEqual(cwd, filePath)) {
+      skipped.push({
+        level: "single",
+        filePath,
+        displayPath: filePath,
+        fileName: String(options.setting),
+        reason: "outside-cwd"
+      });
+      return { layers: [], mergedContent: "", skipped, totalChars: 0, totalBytes: 0, maxBytes, candidates };
+    }
+    if (!existsSync20(filePath)) {
+      skipped.push({
+        level: "single",
+        filePath,
+        displayPath: displayPath(filePath, cwd),
+        fileName: String(options.setting),
+        reason: "missing"
+      });
+      return { layers: [], mergedContent: "", skipped, totalChars: 0, totalBytes: 0, maxBytes, candidates };
+    }
+    const result = readContextFile("single", filePath, cwd, maxBytes);
+    if (result.skipped) skipped.push(result.skipped);
+    const layers2 = result.layer ? [result.layer] : [];
+    const mergedContent2 = layers2.map((l) => l.content).join("\n\n---\n\n");
+    return {
+      layers: layers2,
+      mergedContent: mergedContent2,
+      skipped,
+      totalChars: layers2.reduce((sum, l) => sum + l.charCount, 0),
+      totalBytes: layers2.reduce((sum, l) => sum + l.byteCount, 0),
+      maxBytes,
+      candidates
+    };
+  }
+  const layers = [];
+  for (const [level, dir] of [
+    ["global", options.configDir],
+    ["project", options.projectRoot]
+  ]) {
+    const result = findFirstContextFile(level, dir, cwd, candidates, maxBytes);
+    skipped.push(...result.skipped);
+    if (result.layer) layers.push(result.layer);
+  }
+  if (resolve6(options.cwd) !== resolve6(options.projectRoot)) {
+    const result = findFirstContextFile("local", options.cwd, cwd, candidates, maxBytes);
+    skipped.push(...result.skipped);
+    if (result.layer) layers.push(result.layer);
+  }
+  const mergedContent = layers.map((l) => l.content).join("\n\n---\n\n");
+  return {
+    layers,
+    mergedContent,
+    skipped,
+    totalChars: layers.reduce((sum, l) => sum + l.charCount, 0),
+    totalBytes: layers.reduce((sum, l) => sum + l.byteCount, 0),
+    maxBytes,
+    candidates
+  };
+}
+
 // src/web/session-handler.ts
-import { existsSync as existsSync21, readFileSync as readFileSync15, writeFileSync as writeFileSync2, mkdirSync as mkdirSync10, readdirSync as readdirSync9, statSync as statSync8, createWriteStream } from "fs";
-import { join as join15, resolve as resolve5, dirname as dirname5 } from "path";
+import { existsSync as existsSync23, readFileSync as readFileSync17, writeFileSync as writeFileSync2, mkdirSync as mkdirSync10, readdirSync as readdirSync10, statSync as statSync9, createWriteStream } from "fs";
+import { join as join17, resolve as resolve7, dirname as dirname5 } from "path";
 
 // src/tools/git-context.ts
 import { execSync as execSync2 } from "child_process";
-import { existsSync as existsSync20 } from "fs";
-import { join as join13 } from "path";
+import { existsSync as existsSync21 } from "fs";
+import { join as join14 } from "path";
 function runGit2(cmd, cwd) {
   try {
     return execSync2(`git ${cmd}`, {
@@ -11753,7 +12273,7 @@ function getGitRoot(cwd = process.cwd()) {
   return runGit2("rev-parse --show-toplevel", cwd);
 }
 function getGitContext(cwd = process.cwd()) {
-  if (!existsSync20(join13(cwd, ".git"))) {
+  if (!existsSync21(join14(cwd, ".git"))) {
     const result = runGit2("rev-parse --git-dir", cwd);
     if (!result) return null;
   }
@@ -11823,6 +12343,253 @@ function formatGitContextForPrompt(ctx) {
   return lines.join("\n");
 }
 
+// src/cli/review-prompts.ts
+function buildReviewPrompt(diff, gitContextStr, detailed) {
+  const level = detailed ? "Please perform a detailed in-depth review covering: security, performance, maintainability, error handling, naming conventions, and code duplication." : "Please perform a concise code review focusing on bugs, security issues, and key improvement suggestions.";
+  return `# Code Review Request
+
+${level}
+
+## Git Status
+${gitContextStr}
+
+## Code Changes (diff)
+\`\`\`diff
+${diff}
+\`\`\`
+
+## Output Format
+Please structure your review as follows:
+1. **Overall Assessment**: One-sentence summary of the change quality
+2. **Issues** (if any): Each issue with [Severity] file:line \u2014 description + suggested fix
+3. **Improvement Suggestions** (if any): Non-critical but recommended optimizations
+4. **Highlights** (if any): Good practices worth acknowledging
+
+Severity levels: \u{1F534} Critical / \u{1F7E1} Warning / \u{1F535} Info`;
+}
+function buildSecurityReviewPrompt(diff, gitContextStr) {
+  return `# Security Vulnerability Review
+
+Analyze the following code changes **exclusively for security vulnerabilities**.
+
+## Categories to check:
+1. **Injection** \u2014 SQL, command, path traversal, XSS, template injection
+2. **Authentication & Authorization** \u2014 hardcoded credentials, missing auth checks, privilege escalation
+3. **Secrets & Sensitive Data** \u2014 API keys, tokens, passwords in code, logging sensitive data
+4. **Input Validation** \u2014 missing validation, unsafe deserialization, buffer issues
+5. **Cryptography** \u2014 weak algorithms, improper random, hardcoded IVs/salts
+6. **Dependencies** \u2014 known vulnerable packages, unsafe dynamic imports
+7. **File System** \u2014 path traversal, unsafe file permissions, symlink attacks
+8. **Network** \u2014 SSRF, insecure protocols, missing TLS validation
+
+## Git Status
+${gitContextStr}
+
+## Code Changes (diff)
+\`\`\`diff
+${diff}
+\`\`\`
+
+## Output Format
+For each finding:
+- **Severity**: \u{1F534} CRITICAL / \u{1F7E0} HIGH / \u{1F7E1} MEDIUM / \u{1F535} LOW / \u2139\uFE0F INFO
+- **Category**: (from list above)
+- **File & location**: file:line
+- **Description**: what the vulnerability is and how it could be exploited
+- **Recommended fix**: specific code change to resolve
+
+If no security issues found, state "\u2705 No security vulnerabilities detected" with a brief explanation of what was checked.`;
+}
+
+// src/repl/commands/project-init.ts
+import { existsSync as existsSync22, readFileSync as readFileSync16, readdirSync as readdirSync9, statSync as statSync8 } from "fs";
+import { join as join15 } from "path";
+var SCAN_SKIP_DIRS = /* @__PURE__ */ new Set([
+  "node_modules",
+  ".git",
+  "dist",
+  "build",
+  "out",
+  "target",
+  ".next",
+  ".nuxt",
+  "__pycache__",
+  ".venv",
+  "venv",
+  ".tox",
+  ".mypy_cache",
+  ".pytest_cache",
+  ".gradle",
+  ".idea",
+  ".vscode",
+  ".vs",
+  "coverage",
+  ".cache",
+  ".parcel-cache",
+  "dist-cjs",
+  "release",
+  ".output",
+  ".turbo",
+  "vendor"
+]);
+function scanDirTree(dir, maxDepth = 2, maxEntries = 80) {
+  const lines = [];
+  let count = 0;
+  const walk = (d, prefix, depth) => {
+    if (depth > maxDepth || count >= maxEntries) return;
+    let entries;
+    try {
+      entries = readdirSync9(d);
+    } catch {
+      return;
+    }
+    const filtered = entries.filter((e) => !e.startsWith(".") && !SCAN_SKIP_DIRS.has(e));
+    const sorted = filtered.sort((a, b) => {
+      let aIsDir = false, bIsDir = false;
+      try {
+        aIsDir = statSync8(join15(d, a)).isDirectory();
+      } catch {
+      }
+      try {
+        bIsDir = statSync8(join15(d, b)).isDirectory();
+      } catch {
+      }
+      if (aIsDir !== bIsDir) return aIsDir ? -1 : 1;
+      return a.localeCompare(b);
+    });
+    for (let i = 0; i < sorted.length && count < maxEntries; i++) {
+      const name = sorted[i];
+      const fullPath = join15(d, name);
+      const isLast = i === sorted.length - 1;
+      const connector = isLast ? "+-- " : "|-- ";
+      let isDir;
+      try {
+        isDir = statSync8(fullPath).isDirectory();
+      } catch {
+        continue;
+      }
+      lines.push(prefix + connector + name + (isDir ? "/" : ""));
+      count++;
+      if (isDir) {
+        walk(fullPath, prefix + (isLast ? "    " : "|   "), depth + 1);
+      }
+    }
+  };
+  walk(dir, "", 0);
+  if (count >= maxEntries) lines.push("... (truncated)");
+  return lines.join("\n");
+}
+function scanProject(cwd) {
+  const info = {
+    type: "unknown",
+    language: "unknown",
+    configFiles: [],
+    directoryStructure: ""
+  };
+  const check = (file) => existsSync22(join15(cwd, file));
+  const configCandidates = [
+    "package.json",
+    "tsconfig.json",
+    "Cargo.toml",
+    "pyproject.toml",
+    "setup.py",
+    "requirements.txt",
+    "go.mod",
+    "pom.xml",
+    "build.gradle",
+    "build.gradle.kts",
+    "CMakeLists.txt",
+    "Makefile",
+    ".csproj",
+    ".sln",
+    "composer.json",
+    "Gemfile",
+    "mix.exs",
+    "deno.json",
+    "bun.lockb"
+  ];
+  info.configFiles = configCandidates.filter(check);
+  if (check("package.json")) {
+    info.type = "node";
+    info.language = check("tsconfig.json") ? "TypeScript" : "JavaScript";
+    try {
+      const pkg = JSON.parse(readFileSync16(join15(cwd, "package.json"), "utf-8"));
+      const scripts = pkg.scripts ?? {};
+      info.buildCommand = scripts.build ? "npm run build" : void 0;
+      info.testCommand = scripts.test ? "npm test" : void 0;
+      info.devCommand = scripts.dev ? "npm run dev" : void 0;
+      const allDeps = { ...pkg.dependencies, ...pkg.devDependencies };
+      if (allDeps["react"]) info.framework = "React";
+      else if (allDeps["vue"]) info.framework = "Vue";
+      else if (allDeps["@angular/core"]) info.framework = "Angular";
+      else if (allDeps["next"]) info.framework = "Next.js";
+      else if (allDeps["nuxt"]) info.framework = "Nuxt";
+      else if (allDeps["express"]) info.framework = "Express";
+      else if (allDeps["fastify"]) info.framework = "Fastify";
+      else if (allDeps["svelte"]) info.framework = "Svelte";
+    } catch {
+    }
+  } else if (check("Cargo.toml")) {
+    info.type = "rust";
+    info.language = "Rust";
+    info.buildCommand = "cargo build";
+    info.testCommand = "cargo test";
+  } else if (check("pyproject.toml") || check("setup.py") || check("requirements.txt")) {
+    info.type = "python";
+    info.language = "Python";
+    info.testCommand = check("pytest.ini") || check("pyproject.toml") ? "pytest" : "python -m unittest";
+  } else if (check("go.mod")) {
+    info.type = "go";
+    info.language = "Go";
+    info.buildCommand = "go build ./...";
+    info.testCommand = "go test ./...";
+  } else if (check("pom.xml")) {
+    info.type = "java";
+    info.language = "Java";
+    info.buildCommand = "mvn package";
+    info.testCommand = "mvn test";
+  } else if (check("build.gradle") || check("build.gradle.kts")) {
+    info.type = "java";
+    info.language = "Java/Kotlin";
+    info.buildCommand = "./gradlew build";
+    info.testCommand = "./gradlew test";
+  }
+  info.directoryStructure = scanDirTree(cwd);
+  return info;
+}
+function buildInitPrompt(info, cwd) {
+  const parts = [
+    "Please generate an AICLI.md context file (Markdown format) for the following project. This file will be injected into the AI conversation system prompt to help the AI understand the project structure and coding conventions.",
+    "\n## Project Info\n",
+    `- Working directory: ${cwd}`,
+    `- Type: ${info.type}`,
+    `- Language: ${info.language}`
+  ];
+  if (info.framework) parts.push(`- Framework: ${info.framework}`);
+  if (info.buildCommand) parts.push(`- Build command: ${info.buildCommand}`);
+  if (info.testCommand) parts.push(`- Test command: ${info.testCommand}`);
+  if (info.devCommand) parts.push(`- Dev command: ${info.devCommand}`);
+  parts.push(`
+## Detected Config Files
+${info.configFiles.map((f) => `- ${f}`).join("\n")}`);
+  parts.push(`
+## Directory Structure
+\`\`\`
+${info.directoryStructure}
+\`\`\``);
+  parts.push(`
+## Requirements
+Please generate a structured Markdown file containing:
+1. Project overview (one-sentence summary)
+2. Tech stack
+3. Project structure description (based on the directory structure above)
+4. Common commands (build, test, dev, etc.)
+5. Code style and conventions (inferred from config files)
+
+Output the Markdown content directly, do not wrap the entire file in a code block. Keep it concise, within 200 lines.`);
+  return parts.join("\n");
+}
+
 // src/core/git-diff.ts
 import { execFileSync as execFileSync3 } from "child_process";
 function readGitDiff(options = {}) {
@@ -12406,7 +13173,7 @@ function resolveRoleProviders(roles, lookup, defaultProvider, defaultModel, avai
 }
 
 // src/hub/persist.ts
-import { join as join14 } from "path";
+import { join as join16 } from "path";
 function discussionToMessages(state2) {
   const out = [];
   const t0 = state2.messages[0]?.timestamp ?? /* @__PURE__ */ new Date();
@@ -12444,7 +13211,7 @@ async function persistDiscussion(state2, config, defaultProvider, defaultModel)
   session.title = `[Hub] ${state2.topic.slice(0, 48)}`.replace(/\n/g, " ");
   session.titleAiGenerated = true;
   await sm.save();
-  return { id: session.id, path: join14(config.getHistoryDir(), `${session.id}.json`) };
+  return { id: session.id, path: join16(config.getHistoryDir(), `${session.id}.json`) };
 }
 
 // src/web/session-handler.ts
@@ -12462,7 +13229,7 @@ function lastAssistantText(messages) {
   }
   return void 0;
 }
-var SessionHandler = class _SessionHandler {
+var SessionHandler = class {
   ws;
   config;
   providers;
@@ -12499,6 +13266,7 @@ var SessionHandler = class _SessionHandler {
   pendingAutoPause = /* @__PURE__ */ new Map();
   /** Active system prompt from context files */
   activeSystemPrompt;
+  contextLoadResult = null;
   /** Directories added via /add-dir */
   addedDirs = /* @__PURE__ */ new Set();
   /** Track MCP tool names used across this session (for MCP budget prioritization) */
@@ -12542,7 +13310,22 @@ var SessionHandler = class _SessionHandler {
     const hooks = this.config.get("hooks");
     const permissionRules = this.config.get("permissionRules");
     const defaultPermission = this.config.get("defaultPermission");
-    this.toolExecutor.setConfig({ hookConfig: hooks, permissionRules, defaultPermission });
+    const permissionProfileName = this.config.get("defaultPermissionProfile") ?? "legacy";
+    const permissionProfiles = this.config.get("permissionProfiles") ?? {};
+    this.toolExecutor.setConfig({
+      hookConfig: hooks,
+      permissionRules,
+      defaultPermission,
+      permissionProfileName,
+      permissionProfile: permissionProfiles[permissionProfileName],
+      allowedPermissionProfiles: this.config.get("allowedPermissionProfiles") ?? [],
+      workspaceRoot: process.cwd(),
+      networkPolicy: this.config.get("networkPolicy")
+    });
+    const permissionProfileWarning = formatPermissionProfileWarning(permissionProfileName);
+    if (permissionProfileWarning) {
+      this.send({ type: "info", message: permissionProfileWarning });
+    }
     this.sendStatus();
     askUserContext.rl = null;
     askUserContext.prompting = false;
@@ -12577,6 +13360,7 @@ var SessionHandler = class _SessionHandler {
       messageCount: this.sessions.current?.messages.length ?? 0,
       planMode: this.planMode,
       thinkingMode: this.runtimeThinking ?? false,
+      permissionProfile: this.config.get("defaultPermissionProfile") ?? "legacy",
       tokenUsage: { ...this.sessionTokenUsage },
       costUsd,
       providers: providerList,
@@ -12605,10 +13389,10 @@ var SessionHandler = class _SessionHandler {
         return;
       }
       case "ask_user_response": {
-        const resolve7 = this.pendingAskUser.get(msg.requestId);
-        if (resolve7) {
+        const resolve9 = this.pendingAskUser.get(msg.requestId);
+        if (resolve9) {
           this.pendingAskUser.delete(msg.requestId);
-          resolve7(msg.answer);
+          resolve9(msg.answer);
         }
         return;
       }
@@ -12619,10 +13403,10 @@ var SessionHandler = class _SessionHandler {
       case "memory_rebuild":
         return this.handleMemoryRebuild(Boolean(msg.full));
       case "auto_pause_response": {
-        const resolve7 = this.pendingAutoPause.get(msg.requestId);
-        if (resolve7) {
+        const resolve9 = this.pendingAutoPause.get(msg.requestId);
+        if (resolve9) {
           this.pendingAutoPause.delete(msg.requestId);
-          resolve7({ action: msg.action, message: msg.message });
+          resolve9({ action: msg.action, message: msg.message });
         }
         return;
       }
@@ -12637,10 +13421,10 @@ var SessionHandler = class _SessionHandler {
         this.hubOrchestrator?.abort();
         return;
       case "hub_steer": {
-        const resolve7 = this.pendingHubReview.get(msg.requestId);
-        if (resolve7) {
+        const resolve9 = this.pendingHubReview.get(msg.requestId);
+        if (resolve9) {
           this.pendingHubReview.delete(msg.requestId);
-          resolve7({ action: msg.action, message: msg.message });
+          resolve9({ action: msg.action, message: msg.message });
         }
         return;
       }
@@ -12652,9 +13436,9 @@ var SessionHandler = class _SessionHandler {
   onDisconnect() {
     this.toolExecutor.cancelAll();
     if (this.abortController) this.abortController.abort();
-    for (const resolve7 of this.pendingAskUser.values()) resolve7(null);
+    for (const resolve9 of this.pendingAskUser.values()) resolve9(null);
     this.pendingAskUser.clear();
-    for (const resolve7 of this.pendingAutoPause.values()) resolve7({ action: "stop" });
+    for (const resolve9 of this.pendingAutoPause.values()) resolve9({ action: "stop" });
     this.pendingAutoPause.clear();
     this.saveIfNeeded();
   }
@@ -12788,9 +13572,9 @@ var SessionHandler = class _SessionHandler {
     this.hubOrchestrator = orchestrator;
     orchestrator.onEvent = (event) => this.send({ type: "hub_event", event });
     if (config.humanSteer) {
-      orchestrator.onRoundReview = ({ round, maxRounds }) => new Promise((resolve7) => {
+      orchestrator.onRoundReview = ({ round, maxRounds }) => new Promise((resolve9) => {
         const requestId = `hubrev_${Date.now()}_${Math.random().toString(36).slice(2, 8)}`;
-        this.pendingHubReview.set(requestId, resolve7);
+        this.pendingHubReview.set(requestId, resolve9);
         this.send({ type: "hub_review", requestId, round, maxRounds });
       });
     }
@@ -13127,8 +13911,8 @@ Try: /compact to reduce context, /clear to reset, or switch to a larger-context
         onMcpToolUsed: (name) => this.usedMcpToolNames.add(name),
         requestAutoPause: async ({ effectiveRound, maxToolRounds: totalRounds, toolSummary }) => {
           const requestId = `pause_${Date.now()}_${Math.random().toString(36).slice(2, 8)}`;
-          const pauseResp = await new Promise((resolve7) => {
-            this.pendingAutoPause.set(requestId, resolve7);
+          const pauseResp = await new Promise((resolve9) => {
+            this.pendingAutoPause.set(requestId, resolve9);
             this.send({
               type: "auto_pause_request",
               requestId,
@@ -13307,8 +14091,8 @@ ${summaryContent}`,
         }
         if (chunk.done) break;
       }
-      await new Promise((resolve7, reject) => {
-        fileStream.end((err) => err ? reject(err) : resolve7());
+      await new Promise((resolve9, reject) => {
+        fileStream.end((err) => err ? reject(err) : resolve9());
       });
       const verdict = evaluateTeeContent(fullContent, saveToFile, priorContent);
       if (verdict.kind === "reject") {
@@ -13334,7 +14118,7 @@ ${summaryContent}`,
     } catch (err) {
       if (fileStream) {
         try {
-          await new Promise((resolve7) => fileStream.end(() => resolve7()));
+          await new Promise((resolve9) => fileStream.end(() => resolve9()));
         } catch {
         }
       }
@@ -13623,7 +14407,7 @@ Tokens: in=${this.sessionTokenUsage.inputTokens} out=${this.sessionTokenUsage.ou
             "  /plan [enter|exit]   \u2014 Toggle read-only planning mode",
             "  /session new|list|load|delete <id> \u2014 Session management",
             "  /system [prompt|clear] \u2014 Set/view/reset system prompt",
-            "  /context [reload]    \u2014 Show/reload context layers",
+            "  /context [status|reload] \u2014 Show/reload context layers",
             "  /status              \u2014 Show session info & token usage",
             "  /cost                \u2014 Show cumulative token usage",
             "  /config [show|get|set] \u2014 View/modify configuration",
@@ -13864,9 +14648,9 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
         let modifiedFiles = 0;
         const diffLines2 = [];
         for (const [filePath, { earliest }] of fileMap) {
-          const currentContent = existsSync21(filePath) ? (() => {
+          const currentContent = existsSync23(filePath) ? (() => {
             try {
-              return readFileSync15(filePath, "utf-8");
+              return readFileSync17(filePath, "utf-8");
             } catch {
               return null;
             }
@@ -13967,7 +14751,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
           break;
         }
         const sub = args[0]?.toLowerCase();
-        const resolve7 = (ref) => {
+        const resolve9 = (ref) => {
           const r = session.resolveBranchRef(ref);
           if (r.ok) return r.id;
           if (r.reason === "ambiguous") {
@@ -14021,7 +14805,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
             this.send({ type: "error", message: "Usage: /branch switch <id|title>" });
             break;
           }
-          const id = resolve7(ref);
+          const id = resolve9(ref);
           if (!id) break;
           const ok = session.switchBranch(id);
           if (ok) {
@@ -14041,7 +14825,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
             this.send({ type: "error", message: "Usage: /branch delete <id|title>" });
             break;
           }
-          const id = resolve7(ref);
+          const id = resolve9(ref);
           if (!id) break;
           const ok = session.deleteBranch(id);
           if (ok) {
@@ -14060,7 +14844,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
             this.send({ type: "error", message: "Usage: /branch rename <id|title> <new title>" });
             break;
           }
-          const id = resolve7(ref);
+          const id = resolve9(ref);
           if (!id) break;
           const ok = session.renameBranch(id, title);
           if (ok) {
@@ -14078,7 +14862,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
             this.send({ type: "error", message: "Usage: /branch diff <id|title>" });
             break;
           }
-          const id = resolve7(ref);
+          const id = resolve9(ref);
           if (!id) break;
           const d = session.diffBranches(id);
           if (!d) {
@@ -14120,7 +14904,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
             this.send({ type: "error", message: "Usage: /branch cherry-pick <source-id|title> <msg-index>" });
             break;
           }
-          const id = resolve7(ref);
+          const id = resolve9(ref);
           if (!id) break;
           const idx = parseInt(idxStr, 10);
           if (Number.isNaN(idx)) {
@@ -14283,7 +15067,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
           diff = head + "\n\n... [diff truncated, " + diff.length + " chars total] ...\n\n" + tail;
           truncated = true;
         }
-        const reviewPrompt = this.buildReviewPrompt(diff, formatGitContextForPrompt(gitCtx), detailed);
+        const reviewPrompt = buildReviewPrompt(diff, formatGitContextForPrompt(gitCtx), detailed);
         this.send({ type: "info", message: "\u{1F50D} Analyzing changes..." });
         try {
           const review = await this.chatOnce(reviewPrompt, { temperature: 0.3, maxTokens: 8192 });
@@ -14321,7 +15105,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
           secDiff = head + "\n\n... [diff truncated, " + secDiff.length + " chars total] ...\n\n" + tail;
           secTruncated = true;
         }
-        const secPrompt = this.buildSecurityReviewPrompt(secDiff, formatGitContextForPrompt(gitCtx));
+        const secPrompt = buildSecurityReviewPrompt(secDiff, formatGitContextForPrompt(gitCtx));
         this.send({ type: "info", message: "\u{1F512} Scanning for security vulnerabilities..." });
         try {
           const secReview = await this.chatOnce(secPrompt, { temperature: 0.2, maxTokens: 8192 });
@@ -14382,7 +15166,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
       case "test": {
         this.send({ type: "info", message: "\u{1F9EA} Running tests..." });
         try {
-          const { executeTests } = await import("./run-tests-UAS5NJBM.js");
+          const { executeTests } = await import("./run-tests-PACN4UYX.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {
@@ -14399,17 +15183,17 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
       // ── /init ───────────────────────────────────────────────────────
       case "init": {
         const cwd = process.cwd();
-        const targetPath = join15(cwd, "AICLI.md");
+        const targetPath = join17(cwd, "AICLI.md");
         const force = args.includes("--force");
-        if (existsSync21(targetPath) && !force) {
+        if (existsSync23(targetPath) && !force) {
           this.send({ type: "info", message: `AICLI.md already exists at ${targetPath}
 Use /init --force to overwrite.` });
           break;
         }
         this.send({ type: "info", message: "\u{1F4DD} Scanning project structure..." });
         try {
-          const projectInfo = this.scanProject(cwd);
-          const prompt = this.buildInitPrompt(projectInfo, cwd);
+          const projectInfo = scanProject(cwd);
+          const prompt = buildInitPrompt(projectInfo, cwd);
           const content = await this.chatOnce(prompt, { temperature: 0.3, maxTokens: 4096 });
           writeFileSync2(targetPath, content, "utf-8");
           this.send({ type: "info", message: `\u2713 Generated: ${targetPath} (${content.length} chars)
@@ -14434,19 +15218,19 @@ Use /context reload to load it.` });
         lines.push("**Config Files:**");
         lines.push(`  Dir: ${configDir}`);
         const checkFile = (label, filePath) => {
-          const exists = existsSync21(filePath);
+          const exists = existsSync23(filePath);
           let extra = "";
           if (exists) {
             try {
-              extra = ` (${statSync8(filePath).size} bytes)`;
+              extra = ` (${statSync9(filePath).size} bytes)`;
             } catch {
             }
           }
           lines.push(`  ${exists ? "\u2713" : "\u2013"}  ${label.padEnd(14)} ${exists ? filePath + extra : "(not found)"}`);
         };
-        checkFile("config.json", join15(configDir, "config.json"));
-        checkFile("memory.md", join15(configDir, MEMORY_FILE_NAME));
-        checkFile("dev-state.md", join15(configDir, "dev-state.md"));
+        checkFile("config.json", join17(configDir, "config.json"));
+        checkFile("memory.md", join17(configDir, MEMORY_FILE_NAME));
+        checkFile("dev-state.md", join17(configDir, "dev-state.md"));
         lines.push("");
         if (this.mcpManager) {
           lines.push("**MCP Servers:**");
@@ -14546,29 +15330,24 @@ ${this.config.toFormattedJSON()}
           this.send({ type: "info", message: this.activeSystemPrompt ? `\u2713 Context reloaded (${this.activeSystemPrompt.length} chars).` : "\u2713 No context files found." });
           break;
         }
-        const configDir = this.config.getConfigDir();
-        const cwd = process.cwd();
-        const gitRoot = getGitRoot(cwd);
-        const projectRoot = gitRoot ?? cwd;
+        const result = this.contextLoadResult;
         const layers = ["\u{1F4DA} **Context Layers:**", ""];
-        const checkLayer = (label, dir) => {
-          for (const name2 of CONTEXT_FILE_CANDIDATES) {
-            const fullPath = join15(dir, name2);
-            if (existsSync21(fullPath)) {
-              try {
-                const size = statSync8(fullPath).size;
-                layers.push(`  \u2713 ${label}: ${fullPath} (${size} bytes)`);
-                return;
-              } catch {
-              }
-            }
+        if (result && result.layers.length > 0) {
+          const labels = { global: "Global ", project: "Project", local: "Local  " };
+          for (const layer of result.layers) {
+            layers.push(`  \u2713 ${labels[layer.level] ?? layer.level}: ${layer.displayPath} (${layer.charCount} chars${layer.truncated ? ", truncated" : ""})`);
+          }
+          layers.push(`  Total: ${result.totalChars} chars (${result.layers.length} layer${result.layers.length > 1 ? "s" : ""})`);
+        } else {
+          layers.push("  No context files loaded.");
+          layers.push("  Search order per layer: AICLI.override.md \u2192 AGENTS.override.md \u2192 AICLI.md \u2192 CLAUDE.md \u2192 AGENTS.md");
+        }
+        if (result && result.skipped.length > 0) {
+          layers.push("");
+          layers.push("Skipped:");
+          for (const skipped of result.skipped.slice(0, 5)) {
+            layers.push(`  - ${skipped.displayPath}: ${skipped.reason}${skipped.message ? ` (${skipped.message})` : ""}`);
           }
-          layers.push(`  \u2013  ${label}: (none)`);
-        };
-        checkLayer("Global", configDir);
-        checkLayer("Project", projectRoot);
-        if (resolve5(cwd) !== resolve5(projectRoot)) {
-          checkLayer("Subdir", cwd);
         }
         layers.push("");
         layers.push(`Total prompt length: ${this.activeSystemPrompt?.length ?? 0} chars`);
@@ -14638,12 +15417,12 @@ Use /add-dir remove to clear.` : "No directories added.\nUsage: /add-dir <path>
           this.send({ type: "info", message: "\u2713 All added directories removed from context." });
           break;
         }
-        const dirPath = resolve5(sub);
-        if (!existsSync21(dirPath)) {
+        const dirPath = resolve7(sub);
+        if (!existsSync23(dirPath)) {
           this.send({ type: "error", message: `Directory not found: ${dirPath}` });
           break;
         }
-        if (!statSync8(dirPath).isDirectory()) {
+        if (!statSync9(dirPath).isDirectory()) {
           this.send({ type: "error", message: `Not a directory: ${dirPath}` });
           break;
         }
@@ -14655,14 +15434,14 @@ It will be included in AI context for subsequent messages.` });
       // ── /commands ───────────────────────────────────────────────────
       case "commands": {
         const configDir = this.config.getConfigDir();
-        const commandsDir = join15(configDir, CUSTOM_COMMANDS_DIR_NAME);
-        if (!existsSync21(commandsDir)) {
+        const commandsDir = join17(configDir, CUSTOM_COMMANDS_DIR_NAME);
+        if (!existsSync23(commandsDir)) {
           this.send({ type: "info", message: `No custom commands directory.
 Create: ${commandsDir}/ with .md files.` });
           break;
         }
         try {
-          const files = readdirSync9(commandsDir).filter((f) => f.endsWith(".md"));
+          const files = readdirSync10(commandsDir).filter((f) => f.endsWith(".md"));
           if (files.length === 0) {
             this.send({ type: "info", message: `No custom commands found in ${commandsDir}
 Add .md files to create commands.` });
@@ -14682,7 +15461,7 @@ Add .md files to create commands.` });
       // ── /plugins ────────────────────────────────────────────────────
       case "plugins": {
         const configDir = this.config.getConfigDir();
-        const pluginsDir = join15(configDir, PLUGINS_DIR_NAME);
+        const pluginsDir = join17(configDir, PLUGINS_DIR_NAME);
         const pluginTools = this.toolRegistry.listPluginTools();
         const lines = [`\u{1F50C} **Plugins:**`, `Dir: ${pluginsDir}`, ""];
         if (pluginTools.length === 0) {
@@ -14856,11 +15635,11 @@ Add .md files to create commands.` });
   }
   memoryShow() {
     const configDir = this.config.getConfigDir();
-    const memPath = join15(configDir, MEMORY_FILE_NAME);
+    const memPath = join17(configDir, MEMORY_FILE_NAME);
     let content = "";
     try {
-      if (existsSync21(memPath)) {
-        content = readFileSync15(memPath, "utf-8");
+      if (existsSync23(memPath)) {
+        content = readFileSync17(memPath, "utf-8");
       }
     } catch (err) {
       process.stderr.write(`[web] Failed to read memory file: ${err instanceof Error ? err.message : err}
@@ -14874,11 +15653,11 @@ Add .md files to create commands.` });
   }
   memoryAdd(text) {
     const configDir = this.config.getConfigDir();
-    const memPath = join15(configDir, MEMORY_FILE_NAME);
+    const memPath = join17(configDir, MEMORY_FILE_NAME);
     try {
       mkdirSync10(configDir, { recursive: true });
       const timestamp = (/* @__PURE__ */ new Date()).toISOString().slice(0, 19).replace("T", " ");
-      const previous = existsSync21(memPath) ? readFileSync15(memPath, "utf-8") : "";
+      const previous = existsSync23(memPath) ? readFileSync17(memPath, "utf-8") : "";
       const entry = `
 - [${timestamp}] ${text}
 `;
@@ -14890,7 +15669,7 @@ Add .md files to create commands.` });
   }
   memoryClear() {
     const configDir = this.config.getConfigDir();
-    const memPath = join15(configDir, MEMORY_FILE_NAME);
+    const memPath = join17(configDir, MEMORY_FILE_NAME);
     try {
       atomicWriteFileSync(memPath, "");
       this.send({ type: "info", message: "\u{1F5D1}\uFE0F Persistent memory cleared." });
@@ -15055,7 +15834,7 @@ Add .md files to create commands.` });
         dirContext += `
 [Directory: ${dir}]
 `;
-        dirContext += this.scanDirTree(dir, 2, 40) + "\n";
+        dirContext += scanDirTree(dir, 2, 40) + "\n";
         totalLen = dirContext.length;
       }
       stable += dirContext;
@@ -15094,265 +15873,21 @@ Add .md files to create commands.` });
     }
     return { toolDefs: this.toolRegistry.getDefinitions(), mcpBudgetNote: null };
   }
-  /**
-   * Find first matching context file in a directory.
-   */
-  findContextFile(dir) {
-    for (const name of CONTEXT_FILE_CANDIDATES) {
-      const fullPath = join15(dir, name);
-      try {
-        if (existsSync21(fullPath)) {
-          const content = readFileSync15(fullPath, "utf-8").trim();
-          if (content) return content;
-        }
-      } catch {
-      }
-    }
-    return null;
-  }
-  /**
-   * Load hierarchical context files (same as CLI):
-   *   1. Global:  ~/.aicli/AICLI.md or CLAUDE.md
-   *   2. Project: <git-root>/AICLI.md or CLAUDE.md
-   *   3. Subdir:  <cwd>/AICLI.md or CLAUDE.md (only if cwd ≠ project root)
-   */
-  // ── /init helpers ─────────────────────────────────────────────────
-  static SCAN_SKIP_DIRS = /* @__PURE__ */ new Set([
-    "node_modules",
-    ".git",
-    "dist",
-    "build",
-    "out",
-    "target",
-    ".next",
-    ".nuxt",
-    "__pycache__",
-    ".venv",
-    "venv",
-    ".tox",
-    ".mypy_cache",
-    ".pytest_cache",
-    ".gradle",
-    ".idea",
-    ".vscode",
-    ".vs",
-    "coverage",
-    ".cache",
-    ".parcel-cache",
-    "dist-cjs",
-    "release",
-    ".output",
-    ".turbo",
-    "vendor"
-  ]);
-  scanDirTree(dir, maxDepth = 2, maxEntries = 80) {
-    const lines = [];
-    let count = 0;
-    const walk = (d, prefix, depth) => {
-      if (depth > maxDepth || count >= maxEntries) return;
-      let entries;
-      try {
-        entries = readdirSync9(d);
-      } catch {
-        return;
-      }
-      const filtered = entries.filter((e) => !e.startsWith(".") && !_SessionHandler.SCAN_SKIP_DIRS.has(e));
-      const sorted = filtered.sort((a, b) => {
-        let aIsDir = false, bIsDir = false;
-        try {
-          aIsDir = statSync8(join15(d, a)).isDirectory();
-        } catch {
-        }
-        try {
-          bIsDir = statSync8(join15(d, b)).isDirectory();
-        } catch {
-        }
-        if (aIsDir !== bIsDir) return aIsDir ? -1 : 1;
-        return a.localeCompare(b);
-      });
-      for (let i = 0; i < sorted.length && count < maxEntries; i++) {
-        const name = sorted[i];
-        const fullPath = join15(d, name);
-        const isLast = i === sorted.length - 1;
-        let isDir;
-        try {
-          isDir = statSync8(fullPath).isDirectory();
-        } catch {
-          continue;
-        }
-        lines.push(prefix + (isLast ? "\u2514\u2500\u2500 " : "\u251C\u2500\u2500 ") + name + (isDir ? "/" : ""));
-        count++;
-        if (isDir) walk(fullPath, prefix + (isLast ? "    " : "\u2502   "), depth + 1);
-      }
-    };
-    walk(dir, "", 0);
-    if (count >= maxEntries) lines.push("... (truncated)");
-    return lines.join("\n");
-  }
-  scanProject(cwd) {
-    const info = { type: "unknown", language: "unknown", configFiles: [], directoryStructure: "" };
-    const check = (file) => existsSync21(join15(cwd, file));
-    const configCandidates = [
-      "package.json",
-      "tsconfig.json",
-      "Cargo.toml",
-      "pyproject.toml",
-      "setup.py",
-      "requirements.txt",
-      "go.mod",
-      "pom.xml",
-      "build.gradle",
-      "build.gradle.kts",
-      "CMakeLists.txt",
-      "Makefile",
-      ".csproj",
-      ".sln",
-      "composer.json",
-      "Gemfile",
-      "mix.exs",
-      "deno.json",
-      "bun.lockb"
-    ];
-    info.configFiles = configCandidates.filter(check);
-    if (check("package.json")) {
-      info.type = "node";
-      info.language = check("tsconfig.json") ? "TypeScript" : "JavaScript";
-      try {
-        const pkg = JSON.parse(readFileSync15(join15(cwd, "package.json"), "utf-8"));
-        const scripts = pkg.scripts ?? {};
-        info.buildCommand = scripts.build ? "npm run build" : void 0;
-        info.testCommand = scripts.test ? "npm test" : void 0;
-        info.devCommand = scripts.dev ? "npm run dev" : void 0;
-        const allDeps = { ...pkg.dependencies, ...pkg.devDependencies };
-        if (allDeps["react"]) info.framework = "React";
-        else if (allDeps["vue"]) info.framework = "Vue";
-        else if (allDeps["@angular/core"]) info.framework = "Angular";
-        else if (allDeps["next"]) info.framework = "Next.js";
-        else if (allDeps["express"]) info.framework = "Express";
-      } catch {
-      }
-    } else if (check("Cargo.toml")) {
-      info.type = "rust";
-      info.language = "Rust";
-      info.buildCommand = "cargo build";
-      info.testCommand = "cargo test";
-    } else if (check("pyproject.toml") || check("setup.py") || check("requirements.txt")) {
-      info.type = "python";
-      info.language = "Python";
-      info.testCommand = "pytest";
-    } else if (check("go.mod")) {
-      info.type = "go";
-      info.language = "Go";
-      info.buildCommand = "go build ./...";
-      info.testCommand = "go test ./...";
-    } else if (check("pom.xml")) {
-      info.type = "java";
-      info.language = "Java";
-      info.buildCommand = "mvn package";
-      info.testCommand = "mvn test";
-    } else if (check("build.gradle") || check("build.gradle.kts")) {
-      info.type = "java";
-      info.language = "Java/Kotlin";
-      info.buildCommand = "./gradlew build";
-      info.testCommand = "./gradlew test";
-    }
-    info.directoryStructure = this.scanDirTree(cwd);
-    return info;
-  }
-  buildInitPrompt(info, cwd) {
-    const parts = [
-      "Please generate an AICLI.md context file (Markdown format) for the following project.",
-      "\n## Project Info\n",
-      `- Working directory: ${cwd}`,
-      `- Type: ${info.type}`,
-      `- Language: ${info.language}`
-    ];
-    if (info.framework) parts.push(`- Framework: ${info.framework}`);
-    if (info.buildCommand) parts.push(`- Build command: ${info.buildCommand}`);
-    if (info.testCommand) parts.push(`- Test command: ${info.testCommand}`);
-    if (info.devCommand) parts.push(`- Dev command: ${info.devCommand}`);
-    parts.push(`
-## Detected Config Files
-${info.configFiles.map((f) => `- ${f}`).join("\n")}`);
-    parts.push(`
-## Directory Structure
-\`\`\`
-${info.directoryStructure}
-\`\`\``);
-    parts.push(`
-## Requirements
-Generate a structured Markdown file with: project overview, tech stack, project structure, common commands, code style. Keep it concise, within 200 lines.`);
-    return parts.join("\n");
-  }
-  // ── /review helper ──────────────────────────────────────────────────
-  buildReviewPrompt(diff, gitContextStr, detailed) {
-    const level = detailed ? "Please perform a detailed in-depth review covering: security, performance, maintainability, error handling, naming conventions, and code duplication." : "Please perform a concise code review focusing on bugs, security issues, and key improvement suggestions.";
-    return `# Code Review Request
-
-${level}
-
-## Git Status
-${gitContextStr}
-
-## Code Changes (diff)
-\`\`\`diff
-${diff}
-\`\`\`
-
-## Output Format
-1. **Overall Assessment**: One-sentence summary
-2. **Issues** (if any): [Severity] file:line \u2014 description + fix
-3. **Improvement Suggestions** (if any)
-4. **Highlights** (if any)
-
-Severity: \u{1F534} Critical / \u{1F7E1} Warning / \u{1F535} Info`;
-  }
-  buildSecurityReviewPrompt(diff, gitContextStr) {
-    return `# Security Vulnerability Review
-
-Analyze the following code changes **exclusively for security vulnerabilities**.
-
-## Categories
-1. Injection (SQL, command, path traversal, XSS)
-2. Auth & Authorization (hardcoded creds, missing checks)
-3. Secrets & Sensitive Data (API keys, tokens in code)
-4. Input Validation (missing validation, unsafe deserialization)
-5. Cryptography (weak algorithms, hardcoded IVs)
-6. File System (path traversal, symlink attacks)
-7. Network (SSRF, insecure protocols)
-
-## Git Status
-${gitContextStr}
-
-## Code Changes
-\`\`\`diff
-${diff}
-\`\`\`
-
-## Output Format
-For each finding:
-- **Severity**: \u{1F534} CRITICAL / \u{1F7E0} HIGH / \u{1F7E1} MEDIUM / \u{1F535} LOW
-- **Category** + **File:line**
-- **Description** + exploitation scenario
-- **Recommended fix**
-
-If none found: "\u2705 No security vulnerabilities detected"`;
-  }
   loadContextFiles() {
-    const parts = [];
+    const contextConfig = this.config.get("context");
     const cwd = process.cwd();
-    const configDir = this.config.getConfigDir();
-    const globalCtx = this.findContextFile(configDir);
-    if (globalCtx) parts.push(globalCtx);
     const gitRoot = getGitRoot(cwd);
     const projectRoot = gitRoot ?? cwd;
-    const projectCtx = this.findContextFile(projectRoot);
-    if (projectCtx) parts.push(projectCtx);
-    if (resolve5(cwd) !== resolve5(projectRoot)) {
-      const localCtx = this.findContextFile(cwd);
-      if (localCtx) parts.push(localCtx);
-    }
-    return parts.length > 0 ? parts.join("\n\n---\n\n") : void 0;
+    const result = loadContextFiles({
+      cwd,
+      configDir: this.config.getConfigDir(),
+      projectRoot,
+      setting: this.config.get("contextFile"),
+      fallbackFilenames: contextConfig.projectDocFallbackFilenames,
+      maxBytes: contextConfig.projectDocMaxBytes
+    });
+    this.contextLoadResult = result;
+    return result.mergedContent || void 0;
   }
 };
 
@@ -15368,8 +15903,8 @@ async function setupProxy(configProxy) {
 }
 
 // src/web/auth.ts
-import { existsSync as existsSync22, readFileSync as readFileSync16, writeFileSync as writeFileSync3, mkdirSync as mkdirSync11, readdirSync as readdirSync10, copyFileSync } from "fs";
-import { join as join16 } from "path";
+import { existsSync as existsSync24, readFileSync as readFileSync18, writeFileSync as writeFileSync3, mkdirSync as mkdirSync11, readdirSync as readdirSync11, copyFileSync } from "fs";
+import { join as join18 } from "path";
 import { createHmac, randomBytes, timingSafeEqual, pbkdf2Sync } from "crypto";
 var USERS_FILE = "users.json";
 var TOKEN_EXPIRY_HOURS = 24;
@@ -15384,7 +15919,7 @@ var AuthManager = class {
   db;
   constructor(baseDir) {
     this.baseDir = baseDir;
-    this.usersFile = join16(baseDir, USERS_FILE);
+    this.usersFile = join18(baseDir, USERS_FILE);
     this.db = this.loadOrCreate();
   }
   // ── Public API ─────────────────────────────────────────────────
@@ -15413,9 +15948,9 @@ var AuthManager = class {
     }
     const salt = randomBytes(16).toString("hex");
     const passwordHash = this.hashPassword(password, salt);
-    const dataDir = join16(USERS_DIR, username);
-    const fullDataDir = join16(this.baseDir, dataDir);
-    mkdirSync11(join16(fullDataDir, "history"), { recursive: true });
+    const dataDir = join18(USERS_DIR, username);
+    const fullDataDir = join18(this.baseDir, dataDir);
+    mkdirSync11(join18(fullDataDir, "history"), { recursive: true });
     const user = {
       username,
       passwordHash,
@@ -15530,7 +16065,7 @@ var AuthManager = class {
   getUserDataDir(username) {
     const user = this.db.users.find((u) => u.username === username);
     if (!user) throw new Error(`User not found: ${username}`);
-    return join16(this.baseDir, user.dataDir);
+    return join18(this.baseDir, user.dataDir);
   }
   /** List all usernames */
   listUsers() {
@@ -15566,30 +16101,30 @@ var AuthManager = class {
     const err = this.register(username, password);
     if (err) return err;
     const userDir = this.getUserDataDir(username);
-    const globalConfig = join16(this.baseDir, "config.json");
-    if (existsSync22(globalConfig)) {
+    const globalConfig = join18(this.baseDir, "config.json");
+    if (existsSync24(globalConfig)) {
       try {
-        const content = readFileSync16(globalConfig, "utf-8");
-        writeFileSync3(join16(userDir, "config.json"), content, "utf-8");
+        const content = readFileSync18(globalConfig, "utf-8");
+        writeFileSync3(join18(userDir, "config.json"), content, "utf-8");
       } catch {
       }
     }
-    const globalMemory = join16(this.baseDir, "memory.md");
-    if (existsSync22(globalMemory)) {
+    const globalMemory = join18(this.baseDir, "memory.md");
+    if (existsSync24(globalMemory)) {
       try {
-        const content = readFileSync16(globalMemory, "utf-8");
-        writeFileSync3(join16(userDir, "memory.md"), content, "utf-8");
+        const content = readFileSync18(globalMemory, "utf-8");
+        writeFileSync3(join18(userDir, "memory.md"), content, "utf-8");
       } catch {
       }
     }
-    const globalHistory = join16(this.baseDir, "history");
-    if (existsSync22(globalHistory)) {
+    const globalHistory = join18(this.baseDir, "history");
+    if (existsSync24(globalHistory)) {
       try {
-        const files = readdirSync10(globalHistory).filter((f) => f.endsWith(".json"));
-        const userHistory = join16(userDir, "history");
+        const files = readdirSync11(globalHistory).filter((f) => f.endsWith(".json"));
+        const userHistory = join18(userDir, "history");
         for (const f of files) {
           try {
-            copyFileSync(join16(globalHistory, f), join16(userHistory, f));
+            copyFileSync(join18(globalHistory, f), join18(userHistory, f));
           } catch {
           }
         }
@@ -15600,9 +16135,9 @@ var AuthManager = class {
   }
   // ── Private methods ────────────────────────────────────────────
   loadOrCreate() {
-    if (existsSync22(this.usersFile)) {
+    if (existsSync24(this.usersFile)) {
       try {
-        return JSON.parse(readFileSync16(this.usersFile, "utf-8"));
+        return JSON.parse(readFileSync18(this.usersFile, "utf-8"));
       } catch {
       }
     }
@@ -15654,7 +16189,7 @@ function getModuleDir() {
     }
   } catch {
   }
-  return resolve6(".");
+  return resolve8(".");
 }
 async function startWebServer(options = {}) {
   const port = options.port ?? 3e3;
@@ -15719,8 +16254,8 @@ async function startWebServer(options = {}) {
     }
   }
   let skillManager = null;
-  const skillsDir = join17(config.getConfigDir(), SKILLS_DIR_NAME);
-  if (existsSync23(skillsDir)) {
+  const skillsDir = join19(config.getConfigDir(), SKILLS_DIR_NAME);
+  if (existsSync25(skillsDir)) {
     skillManager = new SkillManager(skillsDir, config.get("ui").skillSizeWarn);
     skillManager.loadSkills();
     const count = skillManager.listSkills().length;
@@ -15791,18 +16326,18 @@ async function startWebServer(options = {}) {
     next();
   };
   const moduleDir = getModuleDir();
-  let clientDir = join17(moduleDir, "web", "client");
-  if (!existsSync23(clientDir)) {
-    clientDir = join17(moduleDir, "client");
+  let clientDir = join19(moduleDir, "web", "client");
+  if (!existsSync25(clientDir)) {
+    clientDir = join19(moduleDir, "client");
   }
-  if (!existsSync23(clientDir)) {
-    clientDir = join17(moduleDir, "..", "..", "src", "web", "client");
+  if (!existsSync25(clientDir)) {
+    clientDir = join19(moduleDir, "..", "..", "src", "web", "client");
   }
-  if (!existsSync23(clientDir)) {
-    clientDir = join17(process.cwd(), "src", "web", "client");
+  if (!existsSync25(clientDir)) {
+    clientDir = join19(process.cwd(), "src", "web", "client");
   }
   console.log(`   Static files: ${clientDir}`);
-  app.use("/vendor", express.static(join17(clientDir, "vendor"), { maxAge: "1y", immutable: true }));
+  app.use("/vendor", express.static(join19(clientDir, "vendor"), { maxAge: "1y", immutable: true }));
   app.use(express.static(clientDir));
   app.get("/api/status", (_req, res) => {
     res.json({
@@ -15869,10 +16404,10 @@ async function startWebServer(options = {}) {
   app.get("/api/files", requireAuth, (req, res) => {
     const cwd = process.cwd();
     const prefix = req.query.prefix || "";
-    const targetDir = join17(cwd, prefix);
+    const targetDir = join19(cwd, prefix);
     try {
-      const canonicalTarget = realpathSync(resolve6(targetDir));
-      const canonicalCwd = realpathSync(resolve6(cwd));
+      const canonicalTarget = realpathSync(resolve8(targetDir));
+      const canonicalCwd = realpathSync(resolve8(cwd));
       if (!canonicalTarget.startsWith(canonicalCwd + sep3) && canonicalTarget !== canonicalCwd) {
         res.json({ files: [] });
         return;
@@ -15883,10 +16418,10 @@ async function startWebServer(options = {}) {
     }
     try {
       const SKIP = /* @__PURE__ */ new Set(["node_modules", ".git", "dist", "dist-cjs", "release", "__pycache__", ".next", ".nuxt", "coverage", ".cache"]);
-      const entries = readdirSync11(targetDir, { withFileTypes: true });
+      const entries = readdirSync12(targetDir, { withFileTypes: true });
       const files = entries.filter((e) => !SKIP.has(e.name) && !e.name.startsWith(".")).slice(0, 50).map((e) => ({
         name: e.name,
-        path: relative3(cwd, join17(targetDir, e.name)).replace(/\\/g, "/"),
+        path: relative4(cwd, join19(targetDir, e.name)).replace(/\\/g, "/"),
         isDir: e.isDirectory()
       }));
       res.json({ files });
@@ -15922,8 +16457,8 @@ async function startWebServer(options = {}) {
     try {
       const authUser = req._authUser;
       const histDir = authUser ? getUserShared(authUser).config.getHistoryDir() : config.getHistoryDir();
-      const filePath = join17(histDir, `${id}.json`);
-      if (!existsSync23(filePath)) {
+      const filePath = join19(histDir, `${id}.json`);
+      if (!existsSync25(filePath)) {
         res.status(404).json({ error: "Session not found" });
         return;
       }
@@ -15938,7 +16473,7 @@ async function startWebServer(options = {}) {
         res.status(404).json({ error: "Session not found" });
         return;
       }
-      const data = JSON.parse(readFileSync17(filePath, "utf-8"));
+      const data = JSON.parse(readFileSync19(filePath, "utf-8"));
       res.json({ session: data });
     } catch (err) {
       res.status(500).json({ error: err instanceof Error ? err.message : String(err) });
@@ -15951,10 +16486,10 @@ async function startWebServer(options = {}) {
       return;
     }
     const cwd = process.cwd();
-    const fullPath = resolve6(join17(cwd, filePath));
+    const fullPath = resolve8(join19(cwd, filePath));
     try {
       const canonicalFull = realpathSync(fullPath);
-      const canonicalCwd = realpathSync(resolve6(cwd));
+      const canonicalCwd = realpathSync(resolve8(cwd));
       if (!canonicalFull.startsWith(canonicalCwd + sep3) && canonicalFull !== canonicalCwd) {
         res.json({ error: "Access denied" });
         return;
@@ -15964,12 +16499,12 @@ async function startWebServer(options = {}) {
       return;
     }
     try {
-      const stat = statSync9(fullPath);
+      const stat = statSync10(fullPath);
       if (stat.size > 512 * 1024) {
         res.json({ error: `File too large (${(stat.size / 1024).toFixed(0)} KB, max 512 KB)` });
         return;
       }
-      const content = readFileSync17(fullPath, "utf-8");
+      const content = readFileSync19(fullPath, "utf-8");
       res.json({ content, size: stat.size });
     } catch {
       res.json({ error: "Cannot read file" });
@@ -16173,7 +16708,7 @@ async function startWebServer(options = {}) {
   });
   const MAX_PORT_ATTEMPTS = 10;
   let actualPort = port;
-  const result = await new Promise((resolve7, reject) => {
+  const result = await new Promise((resolve9, reject) => {
     const tryListen = (attempt) => {
       server.once("error", (err) => {
         if (err.code === "EADDRINUSE" && attempt < MAX_PORT_ATTEMPTS) {
@@ -16204,7 +16739,7 @@ async function startWebServer(options = {}) {
         }
         console.log(`   Press Ctrl+C to stop
 `);
-        resolve7({ port: actualPort, host, url });
+        resolve9({ port: actualPort, host, url });
       });
     };
     tryListen(1);
@@ -16224,17 +16759,17 @@ function resolveProjectMcpPath() {
   const cwd = process.cwd();
   const gitRoot = getGitRoot(cwd);
   const projectRoot = gitRoot ?? cwd;
-  const configPath = join17(projectRoot, MCP_PROJECT_CONFIG_NAME);
-  return existsSync23(configPath) ? configPath : null;
+  const configPath = join19(projectRoot, MCP_PROJECT_CONFIG_NAME);
+  return existsSync25(configPath) ? configPath : null;
 }
 function loadProjectMcpConfig() {
   const cwd = process.cwd();
   const gitRoot = getGitRoot(cwd);
   const projectRoot = gitRoot ?? cwd;
-  const configPath = join17(projectRoot, MCP_PROJECT_CONFIG_NAME);
-  if (!existsSync23(configPath)) return null;
+  const configPath = join19(projectRoot, MCP_PROJECT_CONFIG_NAME);
+  if (!existsSync25(configPath)) return null;
   try {
-    const raw = JSON.parse(readFileSync17(configPath, "utf-8"));
+    const raw = JSON.parse(readFileSync19(configPath, "utf-8"));
     return raw.mcpServers ?? raw;
   } catch {
     return null;