jinzd-ai-cli 0.4.209 → 0.4.211

package/dist/{run-tests-NDS2IEMK.js → run-tests-3MHWUF43.js}

@@ -2,8 +2,8 @@
 import {
   executeTests,
   runTestsTool
-} from "./chunk-EN63JA7N.js";
-import "./chunk-UPMBIS4T.js";
+} from "./chunk-6NS6643Y.js";
+import "./chunk-E5XCM4A6.js";
 export {
   executeTests,
   runTestsTool

package/dist/{run-tests-UAS5NJBM.js → run-tests-PACN4UYX.js}

@@ -1,7 +1,7 @@
 import {
   executeTests,
   runTestsTool
-} from "./chunk-EYID2AIR.js";
+} from "./chunk-ZY2N2N6T.js";
 export {
   executeTests,
   runTestsTool

package/dist/{server-72SAPLPS.js → server-7USZJJAH.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import {
   ToolRegistry
-} from "./chunk-JVLRMIHA.js";
+} from "./chunk-ZOPYREL5.js";
 import "./chunk-T2NL5ZIA.js";
 import "./chunk-BXP6YZ2P.js";
-import "./chunk-EN63JA7N.js";
+import "./chunk-6NS6643Y.js";
 import {
   runTool
-} from "./chunk-STIEOOOL.js";
+} from "./chunk-JBWA73GK.js";
 import {
   getDangerLevel,
   schemaToJsonSchema
@@ -15,7 +15,7 @@ import {
 import "./chunk-TZQHYZKT.js";
 import {
   VERSION
-} from "./chunk-UPMBIS4T.js";
+} from "./chunk-E5XCM4A6.js";
 import "./chunk-4BKXL7SM.js";
 import "./chunk-TB4W4Y4T.js";
 import "./chunk-KHYD3WXE.js";

package/dist/{server-4URLNC7P.js → server-BTSKOPQI.js}

@@ -16,18 +16,28 @@ import {
   McpManager,
   SkillManager,
   autoTrimSessionIfNeeded,
+  buildInitPrompt,
+  loadContextFiles,
   loadDevState,
   persistToolRound,
   readGitDiff,
+  scanDirTree,
+  scanProject,
   setupProxy
-} from "./chunk-ATNYI6JL.js";
+} from "./chunk-C3OU2OPF.js";
+import {
+  buildReviewPrompt,
+  buildSecurityReviewPrompt
+} from "./chunk-HLWUDRBO.js";
 import {
   ToolExecutor,
   ToolRegistry,
   askUserContext,
-  checkPermission,
+  checkNetworkPolicy,
+  checkPermissionWithProfile,
   cleanupRejectedTeeFile,
   estimateTokens,
+  formatPermissionProfileWarning,
   googleSearchContext,
   groupCallsByPhase,
   renderDiff,
@@ -39,10 +49,10 @@ import {
   spawnAgentContext,
   truncateOutput,
   undoStack
-} from "./chunk-JVLRMIHA.js";
+} from "./chunk-ZOPYREL5.js";
 import "./chunk-T2NL5ZIA.js";
 import "./chunk-BXP6YZ2P.js";
-import "./chunk-EN63JA7N.js";
+import "./chunk-6NS6643Y.js";
 import {
   SessionManager,
   getContentText
@@ -56,7 +66,7 @@ import {
 } from "./chunk-QMXC327F.js";
 import {
   runTool
-} from "./chunk-STIEOOOL.js";
+} from "./chunk-JBWA73GK.js";
 import {
   CONTENT_ONLY_STREAM_REMINDER,
   TEE_FINAL_USER_NUDGE,
@@ -75,13 +85,12 @@ import {
 } from "./chunk-XPBEJB27.js";
 import {
   ConfigManager
-} from "./chunk-DUZRQXIP.js";
+} from "./chunk-UOROWTGG.js";
 import "./chunk-TZQHYZKT.js";
 import {
   AGENTIC_BEHAVIOR_GUIDELINE,
   AUTHOR,
   AUTHOR_EMAIL,
-  CONTEXT_FILE_CANDIDATES,
   CUSTOM_COMMANDS_DIR_NAME,
   DEFAULT_MAX_TOKENS,
   DEFAULT_MAX_TOOL_ROUNDS,
@@ -95,7 +104,7 @@ import {
   SKILLS_DIR_NAME,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-UPMBIS4T.js";
+} from "./chunk-E5XCM4A6.js";
 import {
   formatGitContextForPrompt,
   getGitContext,
@@ -121,6 +130,7 @@ import { networkInterfaces } from "os";
 
 // src/web/tool-executor-web.ts
 import { randomUUID } from "crypto";
+import { tmpdir } from "os";
 import { existsSync, readFileSync } from "fs";
 var ToolExecutorWeb = class _ToolExecutorWeb {
   constructor(registry, ws) {
@@ -132,6 +142,11 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
   hookConfig;
   permissionRules = [];
   defaultPermission = "confirm";
+  permissionProfileName = "legacy";
+  permissionProfile;
+  allowedPermissionProfiles = [];
+  workspaceRoot = process.cwd();
+  networkPolicy;
   /** Pending confirm promises keyed by requestId */
   pendingConfirms = /* @__PURE__ */ new Map();
   /** Pending batch confirm promises */
@@ -166,6 +181,11 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
     this.hookConfig = opts.hookConfig;
     if (opts.permissionRules) this.permissionRules = opts.permissionRules;
     if (opts.defaultPermission) this.defaultPermission = opts.defaultPermission;
+    if (opts.permissionProfileName) this.permissionProfileName = opts.permissionProfileName;
+    if (opts.permissionProfile) this.permissionProfile = opts.permissionProfile;
+    if (opts.allowedPermissionProfiles) this.allowedPermissionProfiles = opts.allowedPermissionProfiles;
+    if (opts.workspaceRoot) this.workspaceRoot = opts.workspaceRoot;
+    if (opts.networkPolicy) this.networkPolicy = opts.networkPolicy;
   }
   /** Clear M7 timeout timer for a requestId */
   clearPendingTimer(requestId) {
@@ -214,6 +234,7 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
   }
   sendToolCallStart(call) {
     const dangerLevel = getDangerLevel(call.name, call.arguments);
+    let toolCallStarted = false;
     const startTime = Date.now();
     this.toolStartTimes.set(call.id, startTime);
     const msg = {
@@ -322,30 +343,66 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
       return { callId: call.id, content: `Unknown tool: ${call.name}`, isError: true };
     }
     const dangerLevel = getDangerLevel(call.name, call.arguments);
+    let toolCallStarted = false;
     runHook(this.hookConfig?.preToolExecution, {
       tool: call.name,
       dangerLevel,
       args: JSON.stringify(call.arguments).slice(0, 200)
     });
-    if (this.permissionRules.length > 0) {
-      const action = checkPermission(call.name, call.arguments, dangerLevel, this.permissionRules, this.defaultPermission);
-      if (action === "deny") {
-        return { callId: call.id, content: `[Permission denied] Tool ${call.name} is blocked by permission rules. Do not retry.`, isError: true };
+    const permission = checkPermissionWithProfile(
+      call.name,
+      call.arguments,
+      dangerLevel,
+      this.permissionRules,
+      this.defaultPermission,
+      {
+        profileName: this.permissionProfileName,
+        profile: this.permissionProfile,
+        allowedProfiles: this.allowedPermissionProfiles,
+        workspaceRoot: this.workspaceRoot,
+        tempDirs: [tmpdir()]
       }
-      if (action === "auto-approve") {
-        this.sendToolCallStart(call);
-        try {
-          const rawContent = await runTool(tool, call.arguments, call.name);
-          const content = truncateOutput(rawContent, call.name);
-          this.sendToolCallResult(call, rawContent, false);
-          runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "ok" });
-          return { callId: call.id, content, isError: false };
-        } catch (err) {
-          const message = err instanceof Error ? err.message : String(err);
-          this.sendToolCallResult(call, message, true);
-          runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
-          return { callId: call.id, content: message, isError: true };
-        }
+    );
+    const networkPermission = checkNetworkPolicy(call.name, call.arguments, this.networkPolicy);
+    if (networkPermission?.action === "deny") {
+      const reason = networkPermission.reason ? ` (${networkPermission.reason})` : "";
+      return {
+        callId: call.id,
+        content: `[Permission denied] Tool ${call.name} is blocked by networkPolicy${reason}. Do not retry.`,
+        isError: true
+      };
+    }
+    if (permission.action === "deny") {
+      const reason = permission.reason ? ` (${permission.reason})` : "";
+      return {
+        callId: call.id,
+        content: `[Permission denied] Tool ${call.name} is blocked by permission profile "${permission.profileName}"${reason}. Do not retry.`,
+        isError: true
+      };
+    }
+    if (permission.action === "auto-approve" && networkPermission?.action !== "confirm") {
+      this.sendToolCallStart(call);
+      try {
+        const rawContent = await runTool(tool, call.arguments, call.name);
+        const content = truncateOutput(rawContent, call.name);
+        this.sendToolCallResult(call, rawContent, false);
+        runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "ok" });
+        return { callId: call.id, content, isError: false };
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        this.sendToolCallResult(call, message, true);
+        runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
+        return { callId: call.id, content: message, isError: true };
+      }
+    }
+    if (networkPermission?.action === "confirm" && dangerLevel === "safe") {
+      this.sendToolCallStart(call);
+      toolCallStarted = true;
+      const confirmed = await this.confirm(call, "write");
+      if (!confirmed) {
+        const rejectionMsg = `[User cancelled] The user declined network access for ${call.name}. Do not retry without asking.`;
+        this.sendToolCallResult(call, rejectionMsg, true);
+        return { callId: call.id, content: rejectionMsg, isError: true };
       }
     }
     this.sendToolCallStart(call);
@@ -404,6 +461,9 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
     return results;
   }
   async executeBatchFileWrites(items) {
+    if (this.permissionProfileName !== "legacy" || this.permissionRules.length > 0) {
+      return Promise.all(items.map(({ call }) => this.execute(call)));
+    }
     const calls = items.map((i) => i.call);
     const decision = this.sessionAutoApprove ? "all" : await this.batchConfirm(calls);
     const results = new Array(calls.length);
@@ -536,7 +596,7 @@ function lastAssistantText(messages) {
   }
   return void 0;
 }
-var SessionHandler = class _SessionHandler {
+var SessionHandler = class {
   ws;
   config;
   providers;
@@ -573,6 +633,7 @@ var SessionHandler = class _SessionHandler {
   pendingAutoPause = /* @__PURE__ */ new Map();
   /** Active system prompt from context files */
   activeSystemPrompt;
+  contextLoadResult = null;
   /** Directories added via /add-dir */
   addedDirs = /* @__PURE__ */ new Set();
   /** Track MCP tool names used across this session (for MCP budget prioritization) */
@@ -616,7 +677,22 @@ var SessionHandler = class _SessionHandler {
     const hooks = this.config.get("hooks");
     const permissionRules = this.config.get("permissionRules");
     const defaultPermission = this.config.get("defaultPermission");
-    this.toolExecutor.setConfig({ hookConfig: hooks, permissionRules, defaultPermission });
+    const permissionProfileName = this.config.get("defaultPermissionProfile") ?? "legacy";
+    const permissionProfiles = this.config.get("permissionProfiles") ?? {};
+    this.toolExecutor.setConfig({
+      hookConfig: hooks,
+      permissionRules,
+      defaultPermission,
+      permissionProfileName,
+      permissionProfile: permissionProfiles[permissionProfileName],
+      allowedPermissionProfiles: this.config.get("allowedPermissionProfiles") ?? [],
+      workspaceRoot: process.cwd(),
+      networkPolicy: this.config.get("networkPolicy")
+    });
+    const permissionProfileWarning = formatPermissionProfileWarning(permissionProfileName);
+    if (permissionProfileWarning) {
+      this.send({ type: "info", message: permissionProfileWarning });
+    }
     this.sendStatus();
     askUserContext.rl = null;
     askUserContext.prompting = false;
@@ -651,6 +727,7 @@ var SessionHandler = class _SessionHandler {
       messageCount: this.sessions.current?.messages.length ?? 0,
       planMode: this.planMode,
       thinkingMode: this.runtimeThinking ?? false,
+      permissionProfile: this.config.get("defaultPermissionProfile") ?? "legacy",
       tokenUsage: { ...this.sessionTokenUsage },
       costUsd,
       providers: providerList,
@@ -1697,7 +1774,7 @@ Tokens: in=${this.sessionTokenUsage.inputTokens} out=${this.sessionTokenUsage.ou
             "  /plan [enter|exit]   \u2014 Toggle read-only planning mode",
             "  /session new|list|load|delete <id> \u2014 Session management",
             "  /system [prompt|clear] \u2014 Set/view/reset system prompt",
-            "  /context [reload]    \u2014 Show/reload context layers",
+            "  /context [status|reload] \u2014 Show/reload context layers",
             "  /status              \u2014 Show session info & token usage",
             "  /cost                \u2014 Show cumulative token usage",
             "  /config [show|get|set] \u2014 View/modify configuration",
@@ -2357,7 +2434,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
           diff = head + "\n\n... [diff truncated, " + diff.length + " chars total] ...\n\n" + tail;
           truncated = true;
         }
-        const reviewPrompt = this.buildReviewPrompt(diff, formatGitContextForPrompt(gitCtx), detailed);
+        const reviewPrompt = buildReviewPrompt(diff, formatGitContextForPrompt(gitCtx), detailed);
         this.send({ type: "info", message: "\u{1F50D} Analyzing changes..." });
         try {
           const review = await this.chatOnce(reviewPrompt, { temperature: 0.3, maxTokens: 8192 });
@@ -2395,7 +2472,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
           secDiff = head + "\n\n... [diff truncated, " + secDiff.length + " chars total] ...\n\n" + tail;
           secTruncated = true;
         }
-        const secPrompt = this.buildSecurityReviewPrompt(secDiff, formatGitContextForPrompt(gitCtx));
+        const secPrompt = buildSecurityReviewPrompt(secDiff, formatGitContextForPrompt(gitCtx));
         this.send({ type: "info", message: "\u{1F512} Scanning for security vulnerabilities..." });
         try {
           const secReview = await this.chatOnce(secPrompt, { temperature: 0.2, maxTokens: 8192 });
@@ -2456,7 +2533,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
       case "test": {
         this.send({ type: "info", message: "\u{1F9EA} Running tests..." });
         try {
-          const { executeTests } = await import("./run-tests-NDS2IEMK.js");
+          const { executeTests } = await import("./run-tests-3MHWUF43.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {
@@ -2482,8 +2559,8 @@ Use /init --force to overwrite.` });
         }
         this.send({ type: "info", message: "\u{1F4DD} Scanning project structure..." });
         try {
-          const projectInfo = this.scanProject(cwd);
-          const prompt = this.buildInitPrompt(projectInfo, cwd);
+          const projectInfo = scanProject(cwd);
+          const prompt = buildInitPrompt(projectInfo, cwd);
           const content = await this.chatOnce(prompt, { temperature: 0.3, maxTokens: 4096 });
           writeFileSync(targetPath, content, "utf-8");
           this.send({ type: "info", message: `\u2713 Generated: ${targetPath} (${content.length} chars)
@@ -2620,29 +2697,24 @@ ${this.config.toFormattedJSON()}
           this.send({ type: "info", message: this.activeSystemPrompt ? `\u2713 Context reloaded (${this.activeSystemPrompt.length} chars).` : "\u2713 No context files found." });
           break;
         }
-        const configDir = this.config.getConfigDir();
-        const cwd = process.cwd();
-        const gitRoot = getGitRoot(cwd);
-        const projectRoot = gitRoot ?? cwd;
+        const result = this.contextLoadResult;
         const layers = ["\u{1F4DA} **Context Layers:**", ""];
-        const checkLayer = (label, dir) => {
-          for (const name2 of CONTEXT_FILE_CANDIDATES) {
-            const fullPath = join2(dir, name2);
-            if (existsSync3(fullPath)) {
-              try {
-                const size = statSync(fullPath).size;
-                layers.push(`  \u2713 ${label}: ${fullPath} (${size} bytes)`);
-                return;
-              } catch {
-              }
-            }
+        if (result && result.layers.length > 0) {
+          const labels = { global: "Global ", project: "Project", local: "Local  " };
+          for (const layer of result.layers) {
+            layers.push(`  \u2713 ${labels[layer.level] ?? layer.level}: ${layer.displayPath} (${layer.charCount} chars${layer.truncated ? ", truncated" : ""})`);
+          }
+          layers.push(`  Total: ${result.totalChars} chars (${result.layers.length} layer${result.layers.length > 1 ? "s" : ""})`);
+        } else {
+          layers.push("  No context files loaded.");
+          layers.push("  Search order per layer: AICLI.override.md \u2192 AGENTS.override.md \u2192 AICLI.md \u2192 CLAUDE.md \u2192 AGENTS.md");
+        }
+        if (result && result.skipped.length > 0) {
+          layers.push("");
+          layers.push("Skipped:");
+          for (const skipped of result.skipped.slice(0, 5)) {
+            layers.push(`  - ${skipped.displayPath}: ${skipped.reason}${skipped.message ? ` (${skipped.message})` : ""}`);
           }
-          layers.push(`  \u2013  ${label}: (none)`);
-        };
-        checkLayer("Global", configDir);
-        checkLayer("Project", projectRoot);
-        if (resolve(cwd) !== resolve(projectRoot)) {
-          checkLayer("Subdir", cwd);
         }
         layers.push("");
         layers.push(`Total prompt length: ${this.activeSystemPrompt?.length ?? 0} chars`);
@@ -3129,7 +3201,7 @@ Add .md files to create commands.` });
         dirContext += `
 [Directory: ${dir}]
 `;
-        dirContext += this.scanDirTree(dir, 2, 40) + "\n";
+        dirContext += scanDirTree(dir, 2, 40) + "\n";
         totalLen = dirContext.length;
       }
       stable += dirContext;
@@ -3168,265 +3240,21 @@ Add .md files to create commands.` });
     }
     return { toolDefs: this.toolRegistry.getDefinitions(), mcpBudgetNote: null };
   }
-  /**
-   * Find first matching context file in a directory.
-   */
-  findContextFile(dir) {
-    for (const name of CONTEXT_FILE_CANDIDATES) {
-      const fullPath = join2(dir, name);
-      try {
-        if (existsSync3(fullPath)) {
-          const content = readFileSync3(fullPath, "utf-8").trim();
-          if (content) return content;
-        }
-      } catch {
-      }
-    }
-    return null;
-  }
-  /**
-   * Load hierarchical context files (same as CLI):
-   *   1. Global:  ~/.aicli/AICLI.md or CLAUDE.md
-   *   2. Project: <git-root>/AICLI.md or CLAUDE.md
-   *   3. Subdir:  <cwd>/AICLI.md or CLAUDE.md (only if cwd ≠ project root)
-   */
-  // ── /init helpers ─────────────────────────────────────────────────
-  static SCAN_SKIP_DIRS = /* @__PURE__ */ new Set([
-    "node_modules",
-    ".git",
-    "dist",
-    "build",
-    "out",
-    "target",
-    ".next",
-    ".nuxt",
-    "__pycache__",
-    ".venv",
-    "venv",
-    ".tox",
-    ".mypy_cache",
-    ".pytest_cache",
-    ".gradle",
-    ".idea",
-    ".vscode",
-    ".vs",
-    "coverage",
-    ".cache",
-    ".parcel-cache",
-    "dist-cjs",
-    "release",
-    ".output",
-    ".turbo",
-    "vendor"
-  ]);
-  scanDirTree(dir, maxDepth = 2, maxEntries = 80) {
-    const lines = [];
-    let count = 0;
-    const walk = (d, prefix, depth) => {
-      if (depth > maxDepth || count >= maxEntries) return;
-      let entries;
-      try {
-        entries = readdirSync(d);
-      } catch {
-        return;
-      }
-      const filtered = entries.filter((e) => !e.startsWith(".") && !_SessionHandler.SCAN_SKIP_DIRS.has(e));
-      const sorted = filtered.sort((a, b) => {
-        let aIsDir = false, bIsDir = false;
-        try {
-          aIsDir = statSync(join2(d, a)).isDirectory();
-        } catch {
-        }
-        try {
-          bIsDir = statSync(join2(d, b)).isDirectory();
-        } catch {
-        }
-        if (aIsDir !== bIsDir) return aIsDir ? -1 : 1;
-        return a.localeCompare(b);
-      });
-      for (let i = 0; i < sorted.length && count < maxEntries; i++) {
-        const name = sorted[i];
-        const fullPath = join2(d, name);
-        const isLast = i === sorted.length - 1;
-        let isDir;
-        try {
-          isDir = statSync(fullPath).isDirectory();
-        } catch {
-          continue;
-        }
-        lines.push(prefix + (isLast ? "\u2514\u2500\u2500 " : "\u251C\u2500\u2500 ") + name + (isDir ? "/" : ""));
-        count++;
-        if (isDir) walk(fullPath, prefix + (isLast ? "    " : "\u2502   "), depth + 1);
-      }
-    };
-    walk(dir, "", 0);
-    if (count >= maxEntries) lines.push("... (truncated)");
-    return lines.join("\n");
-  }
-  scanProject(cwd) {
-    const info = { type: "unknown", language: "unknown", configFiles: [], directoryStructure: "" };
-    const check = (file) => existsSync3(join2(cwd, file));
-    const configCandidates = [
-      "package.json",
-      "tsconfig.json",
-      "Cargo.toml",
-      "pyproject.toml",
-      "setup.py",
-      "requirements.txt",
-      "go.mod",
-      "pom.xml",
-      "build.gradle",
-      "build.gradle.kts",
-      "CMakeLists.txt",
-      "Makefile",
-      ".csproj",
-      ".sln",
-      "composer.json",
-      "Gemfile",
-      "mix.exs",
-      "deno.json",
-      "bun.lockb"
-    ];
-    info.configFiles = configCandidates.filter(check);
-    if (check("package.json")) {
-      info.type = "node";
-      info.language = check("tsconfig.json") ? "TypeScript" : "JavaScript";
-      try {
-        const pkg = JSON.parse(readFileSync3(join2(cwd, "package.json"), "utf-8"));
-        const scripts = pkg.scripts ?? {};
-        info.buildCommand = scripts.build ? "npm run build" : void 0;
-        info.testCommand = scripts.test ? "npm test" : void 0;
-        info.devCommand = scripts.dev ? "npm run dev" : void 0;
-        const allDeps = { ...pkg.dependencies, ...pkg.devDependencies };
-        if (allDeps["react"]) info.framework = "React";
-        else if (allDeps["vue"]) info.framework = "Vue";
-        else if (allDeps["@angular/core"]) info.framework = "Angular";
-        else if (allDeps["next"]) info.framework = "Next.js";
-        else if (allDeps["express"]) info.framework = "Express";
-      } catch {
-      }
-    } else if (check("Cargo.toml")) {
-      info.type = "rust";
-      info.language = "Rust";
-      info.buildCommand = "cargo build";
-      info.testCommand = "cargo test";
-    } else if (check("pyproject.toml") || check("setup.py") || check("requirements.txt")) {
-      info.type = "python";
-      info.language = "Python";
-      info.testCommand = "pytest";
-    } else if (check("go.mod")) {
-      info.type = "go";
-      info.language = "Go";
-      info.buildCommand = "go build ./...";
-      info.testCommand = "go test ./...";
-    } else if (check("pom.xml")) {
-      info.type = "java";
-      info.language = "Java";
-      info.buildCommand = "mvn package";
-      info.testCommand = "mvn test";
-    } else if (check("build.gradle") || check("build.gradle.kts")) {
-      info.type = "java";
-      info.language = "Java/Kotlin";
-      info.buildCommand = "./gradlew build";
-      info.testCommand = "./gradlew test";
-    }
-    info.directoryStructure = this.scanDirTree(cwd);
-    return info;
-  }
-  buildInitPrompt(info, cwd) {
-    const parts = [
-      "Please generate an AICLI.md context file (Markdown format) for the following project.",
-      "\n## Project Info\n",
-      `- Working directory: ${cwd}`,
-      `- Type: ${info.type}`,
-      `- Language: ${info.language}`
-    ];
-    if (info.framework) parts.push(`- Framework: ${info.framework}`);
-    if (info.buildCommand) parts.push(`- Build command: ${info.buildCommand}`);
-    if (info.testCommand) parts.push(`- Test command: ${info.testCommand}`);
-    if (info.devCommand) parts.push(`- Dev command: ${info.devCommand}`);
-    parts.push(`
-## Detected Config Files
-${info.configFiles.map((f) => `- ${f}`).join("\n")}`);
-    parts.push(`
-## Directory Structure
-\`\`\`
-${info.directoryStructure}
-\`\`\``);
-    parts.push(`
-## Requirements
-Generate a structured Markdown file with: project overview, tech stack, project structure, common commands, code style. Keep it concise, within 200 lines.`);
-    return parts.join("\n");
-  }
-  // ── /review helper ──────────────────────────────────────────────────
-  buildReviewPrompt(diff, gitContextStr, detailed) {
-    const level = detailed ? "Please perform a detailed in-depth review covering: security, performance, maintainability, error handling, naming conventions, and code duplication." : "Please perform a concise code review focusing on bugs, security issues, and key improvement suggestions.";
-    return `# Code Review Request
-
-${level}
-
-## Git Status
-${gitContextStr}
-
-## Code Changes (diff)
-\`\`\`diff
-${diff}
-\`\`\`
-
-## Output Format
-1. **Overall Assessment**: One-sentence summary
-2. **Issues** (if any): [Severity] file:line \u2014 description + fix
-3. **Improvement Suggestions** (if any)
-4. **Highlights** (if any)
-
-Severity: \u{1F534} Critical / \u{1F7E1} Warning / \u{1F535} Info`;
-  }
-  buildSecurityReviewPrompt(diff, gitContextStr) {
-    return `# Security Vulnerability Review
-
-Analyze the following code changes **exclusively for security vulnerabilities**.
-
-## Categories
-1. Injection (SQL, command, path traversal, XSS)
-2. Auth & Authorization (hardcoded creds, missing checks)
-3. Secrets & Sensitive Data (API keys, tokens in code)
-4. Input Validation (missing validation, unsafe deserialization)
-5. Cryptography (weak algorithms, hardcoded IVs)
-6. File System (path traversal, symlink attacks)
-7. Network (SSRF, insecure protocols)
-
-## Git Status
-${gitContextStr}
-
-## Code Changes
-\`\`\`diff
-${diff}
-\`\`\`
-
-## Output Format
-For each finding:
-- **Severity**: \u{1F534} CRITICAL / \u{1F7E0} HIGH / \u{1F7E1} MEDIUM / \u{1F535} LOW
-- **Category** + **File:line**
-- **Description** + exploitation scenario
-- **Recommended fix**
-
-If none found: "\u2705 No security vulnerabilities detected"`;
-  }
   loadContextFiles() {
-    const parts = [];
+    const contextConfig = this.config.get("context");
     const cwd = process.cwd();
-    const configDir = this.config.getConfigDir();
-    const globalCtx = this.findContextFile(configDir);
-    if (globalCtx) parts.push(globalCtx);
     const gitRoot = getGitRoot(cwd);
     const projectRoot = gitRoot ?? cwd;
-    const projectCtx = this.findContextFile(projectRoot);
-    if (projectCtx) parts.push(projectCtx);
-    if (resolve(cwd) !== resolve(projectRoot)) {
-      const localCtx = this.findContextFile(cwd);
-      if (localCtx) parts.push(localCtx);
-    }
-    return parts.length > 0 ? parts.join("\n\n---\n\n") : void 0;
+    const result = loadContextFiles({
+      cwd,
+      configDir: this.config.getConfigDir(),
+      projectRoot,
+      setting: this.config.get("contextFile"),
+      fallbackFilenames: contextConfig.projectDocFallbackFilenames,
+      maxBytes: contextConfig.projectDocMaxBytes
+    });
+    this.contextLoadResult = result;
+    return result.mergedContent || void 0;
   }
 };