jinzd-ai-cli 0.4.211 → 0.4.213

package/dist/{server-BTSKOPQI.js → server-U4I7RI42.js}

@@ -24,7 +24,7 @@ import {
   scanDirTree,
   scanProject,
   setupProxy
-} from "./chunk-C3OU2OPF.js";
+} from "./chunk-FGUKBIYO.js";
 import {
   buildReviewPrompt,
   buildSecurityReviewPrompt
@@ -36,12 +36,18 @@ import {
   checkNetworkPolicy,
   checkPermissionWithProfile,
   cleanupRejectedTeeFile,
+  clearRecentlyDeniedAutoActions,
+  defaultActionClassifier,
   estimateTokens,
   formatPermissionProfileWarning,
+  getPendingHookTrust,
+  getRecentlyDeniedAutoActions,
   googleSearchContext,
   groupCallsByPhase,
+  recordRecentlyDeniedAutoAction,
   renderDiff,
   runHook,
+  runLifecycleHooks,
   runSafePhases,
   runWithSessionKey,
   setContextWindow,
@@ -49,10 +55,10 @@ import {
   spawnAgentContext,
   truncateOutput,
   undoStack
-} from "./chunk-ZOPYREL5.js";
+} from "./chunk-THNECAAY.js";
 import "./chunk-T2NL5ZIA.js";
 import "./chunk-BXP6YZ2P.js";
-import "./chunk-6NS6643Y.js";
+import "./chunk-UDMU4FUF.js";
 import {
   SessionManager,
   getContentText
@@ -66,7 +72,7 @@ import {
 } from "./chunk-QMXC327F.js";
 import {
   runTool
-} from "./chunk-JBWA73GK.js";
+} from "./chunk-7NTFMLJJ.js";
 import {
   CONTENT_ONLY_STREAM_REMINDER,
   TEE_FINAL_USER_NUDGE,
@@ -85,7 +91,7 @@ import {
 } from "./chunk-XPBEJB27.js";
 import {
   ConfigManager
-} from "./chunk-UOROWTGG.js";
+} from "./chunk-MRGWPCFQ.js";
 import "./chunk-TZQHYZKT.js";
 import {
   AGENTIC_BEHAVIOR_GUIDELINE,
@@ -104,7 +110,7 @@ import {
   SKILLS_DIR_NAME,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-E5XCM4A6.js";
+} from "./chunk-IWLVH32D.js";
 import {
   formatGitContextForPrompt,
   getGitContext,
@@ -113,7 +119,9 @@ import {
 import "./chunk-4BKXL7SM.js";
 import "./chunk-TB4W4Y4T.js";
 import "./chunk-KHYD3WXE.js";
-import "./chunk-SLSWPBK3.js";
+import {
+  scanString
+} from "./chunk-SLSWPBK3.js";
 import "./chunk-K3CF65QH.js";
 import "./chunk-CKH4KQ4E.js";
 import {
@@ -147,6 +155,7 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
   allowedPermissionProfiles = [];
   workspaceRoot = process.cwd();
   networkPolicy;
+  hookConfigDir = process.cwd();
   /** Pending confirm promises keyed by requestId */
   pendingConfirms = /* @__PURE__ */ new Map();
   /** Pending batch confirm promises */
@@ -159,6 +168,8 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
   confirming = false;
   /** Session-level auto-approve toggle (/yolo command) */
   sessionAutoApprove = false;
+  /** Session-level Auto Mode: rule-based low-risk auto approval. */
+  sessionAutoMode = false;
   /** Track tool start times for duration calculation */
   toolStartTimes = /* @__PURE__ */ new Map();
   /**
@@ -186,6 +197,7 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
     if (opts.allowedPermissionProfiles) this.allowedPermissionProfiles = opts.allowedPermissionProfiles;
     if (opts.workspaceRoot) this.workspaceRoot = opts.workspaceRoot;
     if (opts.networkPolicy) this.networkPolicy = opts.networkPolicy;
+    if (opts.hookConfigDir) this.hookConfigDir = opts.hookConfigDir;
   }
   /** Clear M7 timeout timer for a requestId */
   clearPendingTimer(requestId) {
@@ -234,7 +246,6 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
   }
   sendToolCallStart(call) {
     const dangerLevel = getDangerLevel(call.name, call.arguments);
-    let toolCallStarted = false;
     const startTime = Date.now();
     this.toolStartTimes.set(call.id, startTime);
     const msg = {
@@ -349,6 +360,26 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
       dangerLevel,
       args: JSON.stringify(call.arguments).slice(0, 200)
     });
+    const preToolDecisions = runLifecycleHooks(
+      this.hookConfig,
+      "PreToolUse",
+      { tool: call.name, dangerLevel, args: call.arguments },
+      { configDir: this.hookConfigDir, onSummary: (message) => this.send({ type: "info", message: `[hook] ${message}` }) }
+    );
+    const preDeny = preToolDecisions.find((d) => d.action === "deny");
+    if (preDeny) {
+      const result = {
+        callId: call.id,
+        content: `[Hook denied] ${preDeny.reason ?? `PreToolUse blocked ${call.name}`}. Do not retry without asking.`,
+        isError: true
+      };
+      this.sendToolCallResult(call, result.content, true);
+      return result;
+    }
+    for (const d of preToolDecisions) {
+      const warnings = [d.warning, ...d.warnings ?? []].filter(Boolean);
+      for (const warning of warnings) this.send({ type: "info", message: `[hook] ${warning}` });
+    }
     const permission = checkPermissionWithProfile(
       call.name,
       call.arguments,
@@ -364,6 +395,14 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
       }
     );
     const networkPermission = checkNetworkPolicy(call.name, call.arguments, this.networkPolicy);
+    if (networkPermission?.action === "confirm" || permission.action === "confirm") {
+      runLifecycleHooks(
+        this.hookConfig,
+        "PermissionRequest",
+        { tool: call.name, dangerLevel, args: call.arguments, reason: networkPermission?.reason ?? permission.reason },
+        { configDir: this.hookConfigDir, onSummary: (message) => this.send({ type: "info", message: "[hook] " + message }) }
+      );
+    }
     if (networkPermission?.action === "deny") {
       const reason = networkPermission.reason ? ` (${networkPermission.reason})` : "";
       return {
@@ -387,11 +426,13 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
         const content = truncateOutput(rawContent, call.name);
         this.sendToolCallResult(call, rawContent, false);
         runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "ok" });
+        runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "ok" }, { configDir: this.hookConfigDir });
         return { callId: call.id, content, isError: false };
       } catch (err) {
         const message = err instanceof Error ? err.message : String(err);
         this.sendToolCallResult(call, message, true);
         runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
+        runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "error", error: message }, { configDir: this.hookConfigDir });
         return { callId: call.id, content: message, isError: true };
       }
     }
@@ -406,17 +447,48 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
       }
     }
     this.sendToolCallStart(call);
+    if (this.sessionAutoMode && networkPermission?.action !== "confirm") {
+      const classification = defaultActionClassifier.classify(call, dangerLevel, {
+        workspaceRoot: this.workspaceRoot,
+        tempDirs: [tmpdir()]
+      });
+      if (classification.decision === "deny") {
+        recordRecentlyDeniedAutoAction(call, classification);
+        const rejectionMsg = `[Auto denied] ${classification.reason}. Do not retry without asking.`;
+        this.sendToolCallResult(call, rejectionMsg, true);
+        return { callId: call.id, content: rejectionMsg, isError: true };
+      }
+      if (classification.decision === "auto-approve") {
+        this.send({ type: "info", message: `\u26A1 Auto-approved (/auto: ${classification.ruleId})` });
+        try {
+          const rawContent = await runTool(tool, call.arguments, call.name);
+          const content = truncateOutput(rawContent, call.name);
+          this.sendToolCallResult(call, rawContent, false);
+          runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "ok" });
+          runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "ok" }, { configDir: this.hookConfigDir });
+          return { callId: call.id, content, isError: false };
+        } catch (err) {
+          const message = err instanceof Error ? err.message : String(err);
+          this.sendToolCallResult(call, message, true);
+          runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
+          runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "error", error: message }, { configDir: this.hookConfigDir });
+          return { callId: call.id, content: message, isError: true };
+        }
+      }
+    }
     if (this.sessionAutoApprove && dangerLevel === "write") {
       try {
         const rawContent = await runTool(tool, call.arguments, call.name);
         const content = truncateOutput(rawContent, call.name);
         this.sendToolCallResult(call, rawContent, false);
         runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "ok" });
+        runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "ok" }, { configDir: this.hookConfigDir });
         return { callId: call.id, content, isError: false };
       } catch (err) {
         const message = err instanceof Error ? err.message : String(err);
         this.sendToolCallResult(call, message, true);
         runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
+        runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "error", error: message }, { configDir: this.hookConfigDir });
         return { callId: call.id, content: message, isError: true };
       }
     }
@@ -434,11 +506,13 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
       const content = truncateOutput(rawContent, call.name);
       this.sendToolCallResult(call, rawContent, false);
       runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "ok" });
+      runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "ok" }, { configDir: this.hookConfigDir });
       return { callId: call.id, content, isError: false };
     } catch (err) {
       const message = err instanceof Error ? err.message : String(err);
       this.sendToolCallResult(call, message, true);
       runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
+      runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "error", error: message }, { configDir: this.hookConfigDir });
       return { callId: call.id, content: message, isError: true };
     }
   }
@@ -681,6 +755,7 @@ var SessionHandler = class {
     const permissionProfiles = this.config.get("permissionProfiles") ?? {};
     this.toolExecutor.setConfig({
       hookConfig: hooks,
+      hookConfigDir: this.config.getConfigDir(),
       permissionRules,
       defaultPermission,
       permissionProfileName,
@@ -693,6 +768,11 @@ var SessionHandler = class {
     if (permissionProfileWarning) {
       this.send({ type: "info", message: permissionProfileWarning });
     }
+    const pendingHooks = getPendingHookTrust(hooks, this.config.getConfigDir());
+    if (pendingHooks.length > 0) {
+      this.send({ type: "info", message: `${pendingHooks.length} project hook(s) require trust. Use /hooks list and /hooks trust <id>.` });
+    }
+    runLifecycleHooks(hooks, "SessionStart", { source: "web" }, { configDir: this.config.getConfigDir() });
     this.sendStatus();
     askUserContext.rl = null;
     askUserContext.prompting = false;
@@ -801,6 +881,7 @@ var SessionHandler = class {
     }
   }
   onDisconnect() {
+    runLifecycleHooks(this.config.get("hooks") ?? void 0, "Stop", { sessionId: this.sessions.current?.id }, { configDir: this.config.getConfigDir() });
     this.toolExecutor.cancelAll();
     if (this.abortController) this.abortController.abort();
     for (const resolve3 of this.pendingAskUser.values()) resolve3(null);
@@ -978,6 +1059,26 @@ var SessionHandler = class {
     try {
       this.ensureSession();
       const session = this.sessions.current;
+      const promptDecisions = runLifecycleHooks(
+        this.config.get("hooks") ?? void 0,
+        "UserPromptSubmit",
+        { sessionId: session.id, prompt: content },
+        { configDir: this.config.getConfigDir(), onSummary: (message) => this.send({ type: "info", message: "[hook] " + message }) }
+      );
+      const promptDeny = promptDecisions.find((d) => d.action === "deny");
+      if (promptDeny) {
+        this.send({ type: "error", message: "Prompt blocked by hook: " + (promptDeny.reason ?? "UserPromptSubmit denied") });
+        return;
+      }
+      for (const d of promptDecisions) {
+        const warnings = [d.warning, ...d.warnings ?? []].filter(Boolean);
+        for (const warning of warnings) this.send({ type: "info", message: "[hook] " + warning });
+      }
+      const secretHits = scanString(content, { customRegexes: [] });
+      if (secretHits.length > 0) {
+        const kinds = [...new Set(secretHits.map((h) => h.kind))].join(", ");
+        this.send({ type: "info", message: "Possible secret in prompt (" + kinds + ")." });
+      }
       const ALLOWED_IMAGE_MIMES = /* @__PURE__ */ new Set(["image/png", "image/jpeg", "image/gif", "image/webp", "image/svg+xml"]);
       const MAX_IMAGE_SIZE = 10 * 1024 * 1024;
       let msgContent;
@@ -1915,6 +2016,47 @@ ${activated.meta.description || ""}` });
         break;
       }
       // ── /yolo ──────────────────────────────────────────────────────
+      case "auto": {
+        const sub = args[0]?.toLowerCase() ?? "status";
+        if (sub === "on") {
+          this.toolExecutor.sessionAutoMode = true;
+          this.send({ type: "info", message: "\u26A1 Auto Mode ON \u2014 low-risk actions may auto-run; high-risk actions still confirm or deny. Auto Mode is session-scoped." });
+        } else if (sub === "off") {
+          this.toolExecutor.sessionAutoMode = false;
+          this.send({ type: "info", message: "Auto Mode disabled." });
+        } else if (sub === "status") {
+          this.send({ type: "info", message: `Auto Mode: ${this.toolExecutor.sessionAutoMode ? "on" : "off"}
+Scope: current session only
+Denied: /permissions recently-denied` });
+        } else {
+          this.send({ type: "error", message: "Usage: /auto [on|off|status]" });
+        }
+        this.sendStatus();
+        break;
+      }
+      case "permissions": {
+        const sub = args[0]?.toLowerCase() ?? "recently-denied";
+        if (sub === "recently-denied") {
+          const rows = getRecentlyDeniedAutoActions();
+          if (rows.length === 0) {
+            this.send({ type: "info", message: "No recently denied Auto Mode actions." });
+          } else {
+            const lines = [`Recently denied Auto Mode actions (${rows.length})`, ""];
+            for (const r of rows.slice(0, 20)) {
+              lines.push(`- ${r.timestamp} ${r.tool} ${r.ruleId}`);
+              lines.push(`  ${r.reason}`);
+              lines.push(`  ${r.argsPreview}`);
+            }
+            this.send({ type: "info", message: lines.join("\n") });
+          }
+        } else if (sub === "clear-denied") {
+          clearRecentlyDeniedAutoActions();
+          this.send({ type: "info", message: "Cleared recently denied Auto Mode actions." });
+        } else {
+          this.send({ type: "error", message: "Usage: /permissions recently-denied|clear-denied" });
+        }
+        break;
+      }
       case "yolo": {
         const sub = args[0]?.toLowerCase();
         if (sub === "off") {
@@ -2533,7 +2675,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
       case "test": {
         this.send({ type: "info", message: "\u{1F9EA} Running tests..." });
         try {
-          const { executeTests } = await import("./run-tests-3MHWUF43.js");
+          const { executeTests } = await import("./run-tests-DSOJBJWA.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {
@@ -2883,6 +3025,21 @@ Add .md files to create commands.` });
       this.send({ type: "info", message: "Not enough messages to compact." });
       return;
     }
+    const preDecisions = runLifecycleHooks(
+      this.config.get("hooks") ?? void 0,
+      "PreCompact",
+      { sessionId: session.id, messageCount: session.messages.length, instruction },
+      { configDir: this.config.getConfigDir(), onSummary: (message) => this.send({ type: "info", message: "[hook] " + message }) }
+    );
+    const preDeny = preDecisions.find((d) => d.action === "deny");
+    if (preDeny) {
+      this.send({ type: "error", message: "Compact blocked by hook: " + (preDeny.reason ?? "PreCompact denied") });
+      return;
+    }
+    for (const d of preDecisions) {
+      const warnings = [d.warning, ...d.warnings ?? []].filter(Boolean);
+      for (const warning of warnings) this.send({ type: "info", message: "[hook] " + warning });
+    }
     const provider = this.providers.get(this.currentProvider);
     if (!provider) return;
     this.send({ type: "info", message: "Compacting conversation..." });
@@ -2902,7 +3059,15 @@ Add .md files to create commands.` });
       });
       const summaryMsg = { role: "user", content: "[Conversation summary]", timestamp: /* @__PURE__ */ new Date() };
       const ackMsg = { role: "assistant", content: response.content, timestamp: /* @__PURE__ */ new Date() };
-      session.compact(summaryMsg, ackMsg, keepLast);
+      const beforeCount = session.messages.length;
+      const removedCount = session.compact(summaryMsg, ackMsg, keepLast);
+      const afterCount = session.messages.length;
+      runLifecycleHooks(
+        this.config.get("hooks") ?? void 0,
+        "PostCompact",
+        { sessionId: session.id, beforeCount, afterCount, removedCount, keepLast, instruction },
+        { configDir: this.config.getConfigDir(), onSummary: (message) => this.send({ type: "info", message: "[hook] " + message }) }
+      );
       this.send({ type: "info", message: `Compacted: removed ${toSummarize.length} messages, kept last ${keepLast}.` });
       this.sendStatus();
     } catch (err) {

package/dist/{task-orchestrator-OV4O25MX.js → task-orchestrator-RUXWRMQV.js}

@@ -3,13 +3,13 @@ import {
   ToolRegistry,
   googleSearchContext,
   truncateOutput
-} from "./chunk-ZOPYREL5.js";
+} from "./chunk-THNECAAY.js";
 import "./chunk-T2NL5ZIA.js";
 import "./chunk-BXP6YZ2P.js";
-import "./chunk-6NS6643Y.js";
+import "./chunk-UDMU4FUF.js";
 import {
   runTool
-} from "./chunk-JBWA73GK.js";
+} from "./chunk-7NTFMLJJ.js";
 import {
   getDangerLevel,
   runLeanAgentLoop
@@ -17,7 +17,7 @@ import {
 import "./chunk-TZQHYZKT.js";
 import {
   SUBAGENT_ALLOWED_TOOLS
-} from "./chunk-E5XCM4A6.js";
+} from "./chunk-IWLVH32D.js";
 import "./chunk-4BKXL7SM.js";
 import "./chunk-TB4W4Y4T.js";
 import "./chunk-KHYD3WXE.js";

package/dist/{usage-T2P6FTE7.js → usage-2P6TIBTN.js}

@@ -8,9 +8,9 @@ import {
 } from "./chunk-E44DTERW.js";
 import {
   ConfigManager
-} from "./chunk-UOROWTGG.js";
+} from "./chunk-MRGWPCFQ.js";
 import "./chunk-TZQHYZKT.js";
-import "./chunk-E5XCM4A6.js";
+import "./chunk-IWLVH32D.js";
 import "./chunk-IW3Q7AE5.js";
 
 // src/cli/usage.ts

package/dist/web/client/app.js

@@ -548,7 +548,7 @@ function handleStatus(msg) {
     // Active tab: full UI reflection
     btnThink.classList.toggle('btn-active-toggle', msg.thinkingMode);
     btnPlan.classList.toggle('btn-active-toggle', msg.planMode);
-    statusSession.textContent = '📋 ' + (msg.sessionId?.slice(0, 8) || '—') + ' (' + msg.messageCount + ' msgs) · ' + (msg.permissionProfile || 'legacy') + (msg.networkPolicyEnabled ? ' · net:on' : '');
+    statusSession.textContent = '📋 ' + (msg.sessionId?.slice(0, 8) || '—') + ' (' + msg.messageCount + ' msgs) · ' + (msg.permissionProfile || 'legacy') + (msg.networkPolicyEnabled ? ' · net:on' : '') + (msg.autoMode ? ' · auto:on' : '') + (msg.pendingHookTrustCount ? ' · hooks:' + msg.pendingHookTrustCount : '');
     if (msg.tokenUsage) {
       const u = msg.tokenUsage;
       const cacheRead = u.cacheReadTokens || 0;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jinzd-ai-cli",
-  "version": "0.4.211",
+  "version": "0.4.213",
   "description": "Cross-platform REPL-style AI CLI with multi-provider support",
   "type": "module",
   "main": "./dist/index.js",