jinzd-ai-cli 0.4.210 → 0.4.212

package/dist/{server-E5D54DIZ.js → server-VNCN7AY5.js}

@@ -24,7 +24,7 @@ import {
   scanDirTree,
   scanProject,
   setupProxy
-} from "./chunk-7JWT3KXO.js";
+} from "./chunk-HW2ALWQJ.js";
 import {
   buildReviewPrompt,
   buildSecurityReviewPrompt
@@ -33,13 +33,17 @@ import {
   ToolExecutor,
   ToolRegistry,
   askUserContext,
-  checkPermission,
+  checkNetworkPolicy,
+  checkPermissionWithProfile,
   cleanupRejectedTeeFile,
   estimateTokens,
+  formatPermissionProfileWarning,
+  getPendingHookTrust,
   googleSearchContext,
   groupCallsByPhase,
   renderDiff,
   runHook,
+  runLifecycleHooks,
   runSafePhases,
   runWithSessionKey,
   setContextWindow,
@@ -47,10 +51,10 @@ import {
   spawnAgentContext,
   truncateOutput,
   undoStack
-} from "./chunk-NEPFADHX.js";
+} from "./chunk-N5LB3PPL.js";
 import "./chunk-T2NL5ZIA.js";
 import "./chunk-BXP6YZ2P.js";
-import "./chunk-E2ZWWE6Q.js";
+import "./chunk-HX6N6QEY.js";
 import {
   SessionManager,
   getContentText
@@ -64,7 +68,7 @@ import {
 } from "./chunk-QMXC327F.js";
 import {
   runTool
-} from "./chunk-DJ35G5VO.js";
+} from "./chunk-IFZX26K7.js";
 import {
   CONTENT_ONLY_STREAM_REMINDER,
   TEE_FINAL_USER_NUDGE,
@@ -83,7 +87,7 @@ import {
 } from "./chunk-XPBEJB27.js";
 import {
   ConfigManager
-} from "./chunk-P6MTFCXB.js";
+} from "./chunk-NYCBOVNF.js";
 import "./chunk-TZQHYZKT.js";
 import {
   AGENTIC_BEHAVIOR_GUIDELINE,
@@ -102,7 +106,7 @@ import {
   SKILLS_DIR_NAME,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-GRJNQJA5.js";
+} from "./chunk-GBBVCZ4W.js";
 import {
   formatGitContextForPrompt,
   getGitContext,
@@ -111,7 +115,9 @@ import {
 import "./chunk-4BKXL7SM.js";
 import "./chunk-TB4W4Y4T.js";
 import "./chunk-KHYD3WXE.js";
-import "./chunk-SLSWPBK3.js";
+import {
+  scanString
+} from "./chunk-SLSWPBK3.js";
 import "./chunk-K3CF65QH.js";
 import "./chunk-CKH4KQ4E.js";
 import {
@@ -128,6 +134,7 @@ import { networkInterfaces } from "os";
 
 // src/web/tool-executor-web.ts
 import { randomUUID } from "crypto";
+import { tmpdir } from "os";
 import { existsSync, readFileSync } from "fs";
 var ToolExecutorWeb = class _ToolExecutorWeb {
   constructor(registry, ws) {
@@ -139,6 +146,12 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
   hookConfig;
   permissionRules = [];
   defaultPermission = "confirm";
+  permissionProfileName = "legacy";
+  permissionProfile;
+  allowedPermissionProfiles = [];
+  workspaceRoot = process.cwd();
+  networkPolicy;
+  hookConfigDir = process.cwd();
   /** Pending confirm promises keyed by requestId */
   pendingConfirms = /* @__PURE__ */ new Map();
   /** Pending batch confirm promises */
@@ -173,6 +186,12 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
     this.hookConfig = opts.hookConfig;
     if (opts.permissionRules) this.permissionRules = opts.permissionRules;
     if (opts.defaultPermission) this.defaultPermission = opts.defaultPermission;
+    if (opts.permissionProfileName) this.permissionProfileName = opts.permissionProfileName;
+    if (opts.permissionProfile) this.permissionProfile = opts.permissionProfile;
+    if (opts.allowedPermissionProfiles) this.allowedPermissionProfiles = opts.allowedPermissionProfiles;
+    if (opts.workspaceRoot) this.workspaceRoot = opts.workspaceRoot;
+    if (opts.networkPolicy) this.networkPolicy = opts.networkPolicy;
+    if (opts.hookConfigDir) this.hookConfigDir = opts.hookConfigDir;
   }
   /** Clear M7 timeout timer for a requestId */
   clearPendingTimer(requestId) {
@@ -329,30 +348,96 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
       return { callId: call.id, content: `Unknown tool: ${call.name}`, isError: true };
     }
     const dangerLevel = getDangerLevel(call.name, call.arguments);
+    let toolCallStarted = false;
     runHook(this.hookConfig?.preToolExecution, {
       tool: call.name,
       dangerLevel,
       args: JSON.stringify(call.arguments).slice(0, 200)
     });
-    if (this.permissionRules.length > 0) {
-      const action = checkPermission(call.name, call.arguments, dangerLevel, this.permissionRules, this.defaultPermission);
-      if (action === "deny") {
-        return { callId: call.id, content: `[Permission denied] Tool ${call.name} is blocked by permission rules. Do not retry.`, isError: true };
+    const preToolDecisions = runLifecycleHooks(
+      this.hookConfig,
+      "PreToolUse",
+      { tool: call.name, dangerLevel, args: call.arguments },
+      { configDir: this.hookConfigDir, onSummary: (message) => this.send({ type: "info", message: `[hook] ${message}` }) }
+    );
+    const preDeny = preToolDecisions.find((d) => d.action === "deny");
+    if (preDeny) {
+      const result = {
+        callId: call.id,
+        content: `[Hook denied] ${preDeny.reason ?? `PreToolUse blocked ${call.name}`}. Do not retry without asking.`,
+        isError: true
+      };
+      this.sendToolCallResult(call, result.content, true);
+      return result;
+    }
+    for (const d of preToolDecisions) {
+      const warnings = [d.warning, ...d.warnings ?? []].filter(Boolean);
+      for (const warning of warnings) this.send({ type: "info", message: `[hook] ${warning}` });
+    }
+    const permission = checkPermissionWithProfile(
+      call.name,
+      call.arguments,
+      dangerLevel,
+      this.permissionRules,
+      this.defaultPermission,
+      {
+        profileName: this.permissionProfileName,
+        profile: this.permissionProfile,
+        allowedProfiles: this.allowedPermissionProfiles,
+        workspaceRoot: this.workspaceRoot,
+        tempDirs: [tmpdir()]
       }
-      if (action === "auto-approve") {
-        this.sendToolCallStart(call);
-        try {
-          const rawContent = await runTool(tool, call.arguments, call.name);
-          const content = truncateOutput(rawContent, call.name);
-          this.sendToolCallResult(call, rawContent, false);
-          runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "ok" });
-          return { callId: call.id, content, isError: false };
-        } catch (err) {
-          const message = err instanceof Error ? err.message : String(err);
-          this.sendToolCallResult(call, message, true);
-          runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
-          return { callId: call.id, content: message, isError: true };
-        }
+    );
+    const networkPermission = checkNetworkPolicy(call.name, call.arguments, this.networkPolicy);
+    if (networkPermission?.action === "confirm" || permission.action === "confirm") {
+      runLifecycleHooks(
+        this.hookConfig,
+        "PermissionRequest",
+        { tool: call.name, dangerLevel, args: call.arguments, reason: networkPermission?.reason ?? permission.reason },
+        { configDir: this.hookConfigDir, onSummary: (message) => this.send({ type: "info", message: "[hook] " + message }) }
+      );
+    }
+    if (networkPermission?.action === "deny") {
+      const reason = networkPermission.reason ? ` (${networkPermission.reason})` : "";
+      return {
+        callId: call.id,
+        content: `[Permission denied] Tool ${call.name} is blocked by networkPolicy${reason}. Do not retry.`,
+        isError: true
+      };
+    }
+    if (permission.action === "deny") {
+      const reason = permission.reason ? ` (${permission.reason})` : "";
+      return {
+        callId: call.id,
+        content: `[Permission denied] Tool ${call.name} is blocked by permission profile "${permission.profileName}"${reason}. Do not retry.`,
+        isError: true
+      };
+    }
+    if (permission.action === "auto-approve" && networkPermission?.action !== "confirm") {
+      this.sendToolCallStart(call);
+      try {
+        const rawContent = await runTool(tool, call.arguments, call.name);
+        const content = truncateOutput(rawContent, call.name);
+        this.sendToolCallResult(call, rawContent, false);
+        runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "ok" });
+        runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "ok" }, { configDir: this.hookConfigDir });
+        return { callId: call.id, content, isError: false };
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        this.sendToolCallResult(call, message, true);
+        runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
+        runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "error", error: message }, { configDir: this.hookConfigDir });
+        return { callId: call.id, content: message, isError: true };
+      }
+    }
+    if (networkPermission?.action === "confirm" && dangerLevel === "safe") {
+      this.sendToolCallStart(call);
+      toolCallStarted = true;
+      const confirmed = await this.confirm(call, "write");
+      if (!confirmed) {
+        const rejectionMsg = `[User cancelled] The user declined network access for ${call.name}. Do not retry without asking.`;
+        this.sendToolCallResult(call, rejectionMsg, true);
+        return { callId: call.id, content: rejectionMsg, isError: true };
       }
     }
     this.sendToolCallStart(call);
@@ -362,11 +447,13 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
         const content = truncateOutput(rawContent, call.name);
         this.sendToolCallResult(call, rawContent, false);
         runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "ok" });
+        runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "ok" }, { configDir: this.hookConfigDir });
         return { callId: call.id, content, isError: false };
       } catch (err) {
         const message = err instanceof Error ? err.message : String(err);
         this.sendToolCallResult(call, message, true);
         runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
+        runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "error", error: message }, { configDir: this.hookConfigDir });
         return { callId: call.id, content: message, isError: true };
       }
     }
@@ -384,11 +471,13 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
       const content = truncateOutput(rawContent, call.name);
       this.sendToolCallResult(call, rawContent, false);
       runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "ok" });
+      runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "ok" }, { configDir: this.hookConfigDir });
       return { callId: call.id, content, isError: false };
     } catch (err) {
       const message = err instanceof Error ? err.message : String(err);
       this.sendToolCallResult(call, message, true);
       runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
+      runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "error", error: message }, { configDir: this.hookConfigDir });
       return { callId: call.id, content: message, isError: true };
     }
   }
@@ -411,6 +500,9 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
     return results;
   }
   async executeBatchFileWrites(items) {
+    if (this.permissionProfileName !== "legacy" || this.permissionRules.length > 0) {
+      return Promise.all(items.map(({ call }) => this.execute(call)));
+    }
     const calls = items.map((i) => i.call);
     const decision = this.sessionAutoApprove ? "all" : await this.batchConfirm(calls);
     const results = new Array(calls.length);
@@ -624,7 +716,28 @@ var SessionHandler = class {
     const hooks = this.config.get("hooks");
     const permissionRules = this.config.get("permissionRules");
     const defaultPermission = this.config.get("defaultPermission");
-    this.toolExecutor.setConfig({ hookConfig: hooks, permissionRules, defaultPermission });
+    const permissionProfileName = this.config.get("defaultPermissionProfile") ?? "legacy";
+    const permissionProfiles = this.config.get("permissionProfiles") ?? {};
+    this.toolExecutor.setConfig({
+      hookConfig: hooks,
+      hookConfigDir: this.config.getConfigDir(),
+      permissionRules,
+      defaultPermission,
+      permissionProfileName,
+      permissionProfile: permissionProfiles[permissionProfileName],
+      allowedPermissionProfiles: this.config.get("allowedPermissionProfiles") ?? [],
+      workspaceRoot: process.cwd(),
+      networkPolicy: this.config.get("networkPolicy")
+    });
+    const permissionProfileWarning = formatPermissionProfileWarning(permissionProfileName);
+    if (permissionProfileWarning) {
+      this.send({ type: "info", message: permissionProfileWarning });
+    }
+    const pendingHooks = getPendingHookTrust(hooks, this.config.getConfigDir());
+    if (pendingHooks.length > 0) {
+      this.send({ type: "info", message: `${pendingHooks.length} project hook(s) require trust. Use /hooks list and /hooks trust <id>.` });
+    }
+    runLifecycleHooks(hooks, "SessionStart", { source: "web" }, { configDir: this.config.getConfigDir() });
     this.sendStatus();
     askUserContext.rl = null;
     askUserContext.prompting = false;
@@ -659,6 +772,7 @@ var SessionHandler = class {
       messageCount: this.sessions.current?.messages.length ?? 0,
       planMode: this.planMode,
       thinkingMode: this.runtimeThinking ?? false,
+      permissionProfile: this.config.get("defaultPermissionProfile") ?? "legacy",
       tokenUsage: { ...this.sessionTokenUsage },
       costUsd,
       providers: providerList,
@@ -732,6 +846,7 @@ var SessionHandler = class {
     }
   }
   onDisconnect() {
+    runLifecycleHooks(this.config.get("hooks") ?? void 0, "Stop", { sessionId: this.sessions.current?.id }, { configDir: this.config.getConfigDir() });
     this.toolExecutor.cancelAll();
     if (this.abortController) this.abortController.abort();
     for (const resolve3 of this.pendingAskUser.values()) resolve3(null);
@@ -909,6 +1024,26 @@ var SessionHandler = class {
     try {
       this.ensureSession();
       const session = this.sessions.current;
+      const promptDecisions = runLifecycleHooks(
+        this.config.get("hooks") ?? void 0,
+        "UserPromptSubmit",
+        { sessionId: session.id, prompt: content },
+        { configDir: this.config.getConfigDir(), onSummary: (message) => this.send({ type: "info", message: "[hook] " + message }) }
+      );
+      const promptDeny = promptDecisions.find((d) => d.action === "deny");
+      if (promptDeny) {
+        this.send({ type: "error", message: "Prompt blocked by hook: " + (promptDeny.reason ?? "UserPromptSubmit denied") });
+        return;
+      }
+      for (const d of promptDecisions) {
+        const warnings = [d.warning, ...d.warnings ?? []].filter(Boolean);
+        for (const warning of warnings) this.send({ type: "info", message: "[hook] " + warning });
+      }
+      const secretHits = scanString(content, { customRegexes: [] });
+      if (secretHits.length > 0) {
+        const kinds = [...new Set(secretHits.map((h) => h.kind))].join(", ");
+        this.send({ type: "info", message: "Possible secret in prompt (" + kinds + ")." });
+      }
       const ALLOWED_IMAGE_MIMES = /* @__PURE__ */ new Set(["image/png", "image/jpeg", "image/gif", "image/webp", "image/svg+xml"]);
       const MAX_IMAGE_SIZE = 10 * 1024 * 1024;
       let msgContent;
@@ -2464,7 +2599,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
       case "test": {
         this.send({ type: "info", message: "\u{1F9EA} Running tests..." });
         try {
-          const { executeTests } = await import("./run-tests-UT7RZ7Y3.js");
+          const { executeTests } = await import("./run-tests-H4Q2PRX6.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {
@@ -2814,6 +2949,21 @@ Add .md files to create commands.` });
       this.send({ type: "info", message: "Not enough messages to compact." });
       return;
     }
+    const preDecisions = runLifecycleHooks(
+      this.config.get("hooks") ?? void 0,
+      "PreCompact",
+      { sessionId: session.id, messageCount: session.messages.length, instruction },
+      { configDir: this.config.getConfigDir(), onSummary: (message) => this.send({ type: "info", message: "[hook] " + message }) }
+    );
+    const preDeny = preDecisions.find((d) => d.action === "deny");
+    if (preDeny) {
+      this.send({ type: "error", message: "Compact blocked by hook: " + (preDeny.reason ?? "PreCompact denied") });
+      return;
+    }
+    for (const d of preDecisions) {
+      const warnings = [d.warning, ...d.warnings ?? []].filter(Boolean);
+      for (const warning of warnings) this.send({ type: "info", message: "[hook] " + warning });
+    }
     const provider = this.providers.get(this.currentProvider);
     if (!provider) return;
     this.send({ type: "info", message: "Compacting conversation..." });
@@ -2833,7 +2983,15 @@ Add .md files to create commands.` });
       });
       const summaryMsg = { role: "user", content: "[Conversation summary]", timestamp: /* @__PURE__ */ new Date() };
       const ackMsg = { role: "assistant", content: response.content, timestamp: /* @__PURE__ */ new Date() };
-      session.compact(summaryMsg, ackMsg, keepLast);
+      const beforeCount = session.messages.length;
+      const removedCount = session.compact(summaryMsg, ackMsg, keepLast);
+      const afterCount = session.messages.length;
+      runLifecycleHooks(
+        this.config.get("hooks") ?? void 0,
+        "PostCompact",
+        { sessionId: session.id, beforeCount, afterCount, removedCount, keepLast, instruction },
+        { configDir: this.config.getConfigDir(), onSummary: (message) => this.send({ type: "info", message: "[hook] " + message }) }
+      );
       this.send({ type: "info", message: `Compacted: removed ${toSummarize.length} messages, kept last ${keepLast}.` });
       this.sendStatus();
     } catch (err) {

package/dist/{task-orchestrator-BFDSTSOH.js → task-orchestrator-AL2E642M.js}

@@ -3,13 +3,13 @@ import {
   ToolRegistry,
   googleSearchContext,
   truncateOutput
-} from "./chunk-NEPFADHX.js";
+} from "./chunk-N5LB3PPL.js";
 import "./chunk-T2NL5ZIA.js";
 import "./chunk-BXP6YZ2P.js";
-import "./chunk-E2ZWWE6Q.js";
+import "./chunk-HX6N6QEY.js";
 import {
   runTool
-} from "./chunk-DJ35G5VO.js";
+} from "./chunk-IFZX26K7.js";
 import {
   getDangerLevel,
   runLeanAgentLoop
@@ -17,7 +17,7 @@ import {
 import "./chunk-TZQHYZKT.js";
 import {
   SUBAGENT_ALLOWED_TOOLS
-} from "./chunk-GRJNQJA5.js";
+} from "./chunk-GBBVCZ4W.js";
 import "./chunk-4BKXL7SM.js";
 import "./chunk-TB4W4Y4T.js";
 import "./chunk-KHYD3WXE.js";

package/dist/{usage-P4B2RZKL.js → usage-LB6REWPO.js}

@@ -8,9 +8,9 @@ import {
 } from "./chunk-E44DTERW.js";
 import {
   ConfigManager
-} from "./chunk-P6MTFCXB.js";
+} from "./chunk-NYCBOVNF.js";
 import "./chunk-TZQHYZKT.js";
-import "./chunk-GRJNQJA5.js";
+import "./chunk-GBBVCZ4W.js";
 import "./chunk-IW3Q7AE5.js";
 
 // src/cli/usage.ts

package/dist/web/client/app.js

@@ -548,7 +548,7 @@ function handleStatus(msg) {
     // Active tab: full UI reflection
     btnThink.classList.toggle('btn-active-toggle', msg.thinkingMode);
     btnPlan.classList.toggle('btn-active-toggle', msg.planMode);
-    statusSession.textContent = `📋 ${msg.sessionId?.slice(0, 8) || '—'} (${msg.messageCount} msgs)`;
+    statusSession.textContent = '📋 ' + (msg.sessionId?.slice(0, 8) || '—') + ' (' + msg.messageCount + ' msgs) · ' + (msg.permissionProfile || 'legacy') + (msg.networkPolicyEnabled ? ' · net:on' : '') + (msg.pendingHookTrustCount ? ' · hooks:' + msg.pendingHookTrustCount : '');
     if (msg.tokenUsage) {
       const u = msg.tokenUsage;
       const cacheRead = u.cacheReadTokens || 0;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jinzd-ai-cli",
-  "version": "0.4.210",
+  "version": "0.4.212",
   "description": "Cross-platform REPL-style AI CLI with multi-provider support",
   "type": "module",
   "main": "./dist/index.js",