jinzd-ai-cli 0.4.212 → 0.4.213

package/dist/{hub-JWSV4MKC.js → hub-ZRADBR76.js}

@@ -154,7 +154,7 @@ ${content}`);
   }
 }
 async function runTaskMode(config, providers, configManager, topic) {
-  const { TaskOrchestrator } = await import("./task-orchestrator-AL2E642M.js");
+  const { TaskOrchestrator } = await import("./task-orchestrator-RUXWRMQV.js");
   const orchestrator = new TaskOrchestrator(config, providers, configManager);
   let interrupted = false;
   const onSigint = () => {

package/dist/index.js

@@ -15,7 +15,7 @@ import {
   scanProject,
   sessionHasMeaningfulContent,
   setupProxy
-} from "./chunk-HW2ALWQJ.js";
+} from "./chunk-FGUKBIYO.js";
 import {
   buildReviewPrompt,
   buildSecurityReviewPrompt
@@ -25,9 +25,11 @@ import {
   ToolRegistry,
   askUserContext,
   cleanupRejectedTeeFile,
+  clearRecentlyDeniedAutoActions,
   estimateTokens,
   formatPermissionProfileWarning,
   getPendingHookTrust,
+  getRecentlyDeniedAutoActions,
   googleSearchContext,
   initTheme,
   isInterrupted,
@@ -45,10 +47,10 @@ import {
   trustHook,
   undoStack,
   untrustHook
-} from "./chunk-N5LB3PPL.js";
+} from "./chunk-THNECAAY.js";
 import "./chunk-T2NL5ZIA.js";
 import "./chunk-BXP6YZ2P.js";
-import "./chunk-HX6N6QEY.js";
+import "./chunk-UDMU4FUF.js";
 import {
   SessionManager,
   getContentText
@@ -65,7 +67,7 @@ import {
   getConfigDirUsage,
   listRecentCrashes,
   writeCrashLog
-} from "./chunk-LU6FBJQ5.js";
+} from "./chunk-G3PW3AOB.js";
 import {
   ProviderRegistry
 } from "./chunk-QMXC327F.js";
@@ -74,7 +76,7 @@ import {
   getTopFailingTools,
   getTopUsedTools,
   installFlushOnExit
-} from "./chunk-IFZX26K7.js";
+} from "./chunk-7NTFMLJJ.js";
 import {
   CONTENT_ONLY_STREAM_REMINDER,
   TEE_FINAL_USER_NUDGE,
@@ -96,7 +98,7 @@ import {
 } from "./chunk-XPBEJB27.js";
 import {
   ConfigManager
-} from "./chunk-NYCBOVNF.js";
+} from "./chunk-MRGWPCFQ.js";
 import {
   AuthError,
   ProviderError,
@@ -122,7 +124,7 @@ import {
   SKILLS_DIR_NAME,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-GBBVCZ4W.js";
+} from "./chunk-IWLVH32D.js";
 import {
   formatGitContextForPrompt,
   getGitContext,
@@ -879,7 +881,9 @@ function createDefaultCommands() {
               ["/route [on|off|show|test <msg>]", "Smart model routing rules"],
               ["/think [on|off|status]", "Toggle Extended Thinking (deep reasoning)"],
               ["/plan [execute|exit|status]", "Enter/manage Plan Mode (read-only)"],
-              ["/yolo [on|off]", "Toggle session auto-approve (skip confirmations)"]
+              ["/auto [on|off|status]", "Rule-based low-risk auto approval"],
+              ["/permissions recently-denied|clear-denied", "Inspect permission and Auto Mode decisions"],
+              ["/yolo [on|off]", "Toggle write auto-approve (destructive still confirms)"]
             ]
           },
           {
@@ -1362,6 +1366,7 @@ No commands match "${filter}".
         console.log(`  Ctx Win  : ${ctxStr}`);
         console.log("  PermProf : " + (ctx.config.get("defaultPermissionProfile") ?? "legacy"));
         console.log("  Network  : " + (ctx.config.get("networkPolicy")?.enabled ?? false ? "on" : "off"));
+        console.log("  AutoMode : " + (ctx.getToolExecutor().sessionAutoMode ? "on" : "off"));
         console.log("  Hooks    : " + getPendingHookTrust(ctx.config.get("hooks") ?? void 0, ctx.config.getConfigDir()).length + " pending trust");
         console.log(`  Messages : ${session?.messages.length ?? 0}`);
         console.log(`  Session  : ${session?.id.slice(0, 8) ?? "none"}`);
@@ -1656,7 +1661,7 @@ No tools match "${filter}".
           const { join: join5 } = await import("path");
           const { existsSync: existsSync5 } = await import("fs");
           const { getGitRoot: getGitRoot2 } = await import("./git-context-EXOEHQSF.js");
-          const { MCP_PROJECT_CONFIG_NAME: MCP_PROJECT_CONFIG_NAME2 } = await import("./constants-KDWG4KR4.js");
+          const { MCP_PROJECT_CONFIG_NAME: MCP_PROJECT_CONFIG_NAME2 } = await import("./constants-CAUBTSFW.js");
           const { approveProject, hashMcpFile } = await import("./project-trust-NKYHL3VZ.js");
           const cwd = process.cwd();
           const projectRoot = getGitRoot2(cwd) ?? cwd;
@@ -2715,7 +2720,7 @@ ${hint}` : "")
       usage: "/test [command|filter]",
       async execute(args, ctx) {
         try {
-          const { executeTests } = await import("./run-tests-H4Q2PRX6.js");
+          const { executeTests } = await import("./run-tests-DSOJBJWA.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {
@@ -3378,6 +3383,7 @@ Summary: ${fileMap.size} file(s) \u2014 ${newFiles} new, ${modifiedFiles} modifi
           console.log(`    mode         : ${security.mode}`);
           console.log("    profile      : " + (ctx.config.get("defaultPermissionProfile") ?? "legacy"));
           console.log("    network      : " + (ctx.config.get("networkPolicy")?.enabled ?? false ? "on" : "off"));
+          console.log("    autoMode     : " + (ctx.getToolExecutor().sessionAutoMode ? "on" : "off"));
           console.log("    hooks        : " + getPendingHookTrust(ctx.config.get("hooks") ?? void 0, ctx.config.getConfigDir()).length + " pending trust");
           console.log(`    patterns     : ${DEFAULT_PATTERNS.length} built-in + ${security.customPatterns?.length ?? 0} custom`);
           console.log(`    last save    : ${ctx.sessions.lastRedactionHits} hit(s) redacted`);
@@ -3450,9 +3456,64 @@ Summary: ${fileMap.size} file(s) \u2014 ${newFiles} new, ${modifiedFiles} modifi
         console.log();
       }
     },
+    {
+      name: "auto",
+      description: "Toggle rule-based Auto Mode for low-risk actions",
+      usage: "/auto [on|off|status]",
+      execute(args, ctx) {
+        const sub = args[0]?.toLowerCase() ?? "status";
+        const executor = ctx.getToolExecutor();
+        if (sub === "on") {
+          executor.sessionAutoMode = true;
+          console.log(theme.warning("  \u26A1 Auto Mode ON \u2014 low-risk actions may auto-run; high-risk actions still confirm or deny."));
+          console.log(theme.dim("  Auto Mode is session-scoped and is not enabled by project config."));
+        } else if (sub === "off") {
+          executor.sessionAutoMode = false;
+          console.log(theme.info("  Auto Mode disabled."));
+        } else if (sub === "status") {
+          console.log(`  Auto Mode : ${executor.sessionAutoMode ? theme.warning("on") : theme.dim("off")}`);
+          console.log(theme.dim("  Scope     : current session only"));
+          console.log(theme.dim("  Denied    : /permissions recently-denied"));
+        } else {
+          console.log(theme.warning("  Usage: /auto [on|off|status]"));
+        }
+        console.log();
+      }
+    },
+    {
+      name: "permissions",
+      description: "Inspect permission and Auto Mode decisions",
+      usage: "/permissions recently-denied|clear-denied",
+      execute(args) {
+        const sub = args[0]?.toLowerCase() ?? "recently-denied";
+        if (sub === "recently-denied") {
+          const rows = getRecentlyDeniedAutoActions();
+          if (rows.length === 0) {
+            console.log(theme.success("  No recently denied Auto Mode actions."));
+          } else {
+            console.log(theme.warning(`  Recently denied Auto Mode actions (${rows.length})`));
+            for (const r of rows.slice(0, 20)) {
+              console.log(`  - ${r.timestamp} ${theme.error(r.tool)} ${theme.dim(r.ruleId)}`);
+              console.log(`    ${r.reason}`);
+              console.log(theme.dim(`    ${r.argsPreview}`));
+            }
+          }
+          console.log();
+          return;
+        }
+        if (sub === "clear-denied") {
+          clearRecentlyDeniedAutoActions();
+          console.log(theme.info("  Cleared recently denied Auto Mode actions."));
+          console.log();
+          return;
+        }
+        console.log(theme.warning("  Usage: /permissions recently-denied|clear-denied"));
+        console.log();
+      }
+    },
     {
       name: "yolo",
-      description: "Toggle session auto-approve (skip all confirmations)",
+      description: "Toggle session auto-approve for write tools (/yolo)",
       usage: "/yolo [on|off]",
       execute(args, ctx) {
         const sub = args[0]?.toLowerCase();
@@ -7145,7 +7206,7 @@ program.command("web").description("Start Web UI server with browser-based chat
     console.error("Error: Invalid port number. Must be between 1 and 65535.");
     process.exit(1);
   }
-  const { startWebServer } = await import("./server-VNCN7AY5.js");
+  const { startWebServer } = await import("./server-U4I7RI42.js");
   await startWebServer({ port, host: options.host });
 });
 program.command("user [action] [username]").description("Manage Web UI users (list | create <name> | delete <name> | reset-password <name> | logout-all <name> | migrate <name>)").action(async (action, username) => {
@@ -7312,16 +7373,16 @@ program.command("sessions").description("List recent conversation sessions").opt
   console.log(footer + "\n");
 });
 program.command("usage").description("Show token + cost usage grouped by provider/model (cross-session)").option("--days <n>", "Only the last N days (inclusive of today)").option("--month <ym>", "Only a specific month, format YYYY-MM (e.g. 2026-06)").option("--json", "Output as JSON (for scripting)").action(async (options) => {
-  const { runUsageCli } = await import("./usage-LB6REWPO.js");
+  const { runUsageCli } = await import("./usage-2P6TIBTN.js");
   await runUsageCli(options);
 });
 program.command("doctor").description("Health check: API keys, config, MCP, recent crashes, tool usage, disk usage").option("--json", "Output as JSON (for scripting)").option("--reset-stats", "Reset accumulated tool usage statistics").action(async (options) => {
-  const { runDoctorCli } = await import("./doctor-cli-TJTWIW7U.js");
+  const { runDoctorCli } = await import("./doctor-cli-5Z5UWYW6.js");
   await runDoctorCli({ json: !!options.json, resetStats: !!options.resetStats });
 });
 program.command("batch <action> [arg] [arg2]").description("Anthropic Message Batches: submit | list | status <id> | results <id> [out] | cancel <id>").option("--dry-run", "Parse and validate input without submitting (submit only)").action(async (action, arg, arg2, options) => {
   try {
-    const batch = await import("./batch-WIKFEOAZ.js");
+    const batch = await import("./batch-PKY63TME.js");
     switch (action) {
       case "submit":
         if (!arg) {
@@ -7364,7 +7425,7 @@ program.command("batch <action> [arg] [arg2]").description("Anthropic Message Ba
   }
 });
 program.command("mcp-serve").description("Start an MCP server over STDIO, exposing aicli's built-in tools to Claude Desktop / Cursor / other MCP clients").option("--allow-destructive", "Allow bash / run_interactive / task_create (always destructive in MCP mode)").option("--allow-outside-cwd", "Allow tool path arguments to escape the sandbox root \u2014 disabled by default").option("--tools <list>", "Comma-separated whitelist of tools to expose (default: all eligible tools)").option("--cwd <path>", "Working directory AND sandbox root (default: current directory)").action(async (options) => {
-  const { startMcpServer } = await import("./server-OFKGDRYI.js");
+  const { startMcpServer } = await import("./server-PWBWHVYB.js");
   await startMcpServer({
     allowDestructive: !!options.allowDestructive,
     allowOutsideCwd: !!options.allowOutsideCwd,
@@ -7373,7 +7434,7 @@ program.command("mcp-serve").description("Start an MCP server over STDIO, exposi
   });
 });
 program.command("ci").description("Headless PR review (code + security) \u2014 reads git/gh diff, optionally posts to PR. Designed for GitHub Actions.").option("--pr <num>", "PR number; diff fetched via `gh pr diff <num>`", (v) => parseInt(v, 10)).option("--base <ref>", "Base ref for `git diff <ref>...HEAD` (ignored when --pr set)").option("--post", "Post review as a PR comment (requires gh CLI + GH_TOKEN, needs --pr)").option("--no-update", "Always create a new comment instead of updating the previous aicli review").option("--skip-code", "Skip the code review section").option("--skip-security", "Skip the security review section").option("--detailed", "Use the detailed code-review prompt").option("--max-diff <n>", "Max diff chars sent to the model (default 30000)", (v) => parseInt(v, 10)).option("--provider <id>", "Override provider (default: config.defaultProvider)").option("--model <id>", "Override model").option("--dry-run", "Print result to stdout instead of posting (overrides --post)").action(async (options) => {
-  const { runCi } = await import("./ci-X3LNUFZV.js");
+  const { runCi } = await import("./ci-HBZ6CIW5.js");
   const result = await runCi({
     pr: options.pr,
     base: options.base,
@@ -7519,7 +7580,7 @@ program.command("hub [topic]").description("Start multi-agent hub (discuss / bra
     }),
     config.get("customProviders")
   );
-  const { startHub } = await import("./hub-JWSV4MKC.js");
+  const { startHub } = await import("./hub-ZRADBR76.js");
   await startHub(
     {
       topic: topic ?? "",

package/dist/{run-tests-D7YBY4XB.js → run-tests-7J3PNWVS.js}

@@ -1,7 +1,7 @@
 import {
   executeTests,
   runTestsTool
-} from "./chunk-KE4B3NOQ.js";
+} from "./chunk-J35V3IAH.js";
 export {
   executeTests,
   runTestsTool

package/dist/{run-tests-H4Q2PRX6.js → run-tests-DSOJBJWA.js}

@@ -2,8 +2,8 @@
 import {
   executeTests,
   runTestsTool
-} from "./chunk-HX6N6QEY.js";
-import "./chunk-GBBVCZ4W.js";
+} from "./chunk-UDMU4FUF.js";
+import "./chunk-IWLVH32D.js";
 export {
   executeTests,
   runTestsTool

package/dist/{server-OFKGDRYI.js → server-PWBWHVYB.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import {
   ToolRegistry
-} from "./chunk-N5LB3PPL.js";
+} from "./chunk-THNECAAY.js";
 import "./chunk-T2NL5ZIA.js";
 import "./chunk-BXP6YZ2P.js";
-import "./chunk-HX6N6QEY.js";
+import "./chunk-UDMU4FUF.js";
 import {
   runTool
-} from "./chunk-IFZX26K7.js";
+} from "./chunk-7NTFMLJJ.js";
 import {
   getDangerLevel,
   schemaToJsonSchema
@@ -15,7 +15,7 @@ import {
 import "./chunk-TZQHYZKT.js";
 import {
   VERSION
-} from "./chunk-GBBVCZ4W.js";
+} from "./chunk-IWLVH32D.js";
 import "./chunk-4BKXL7SM.js";
 import "./chunk-TB4W4Y4T.js";
 import "./chunk-KHYD3WXE.js";

package/dist/{server-VNCN7AY5.js → server-U4I7RI42.js}

@@ -24,7 +24,7 @@ import {
   scanDirTree,
   scanProject,
   setupProxy
-} from "./chunk-HW2ALWQJ.js";
+} from "./chunk-FGUKBIYO.js";
 import {
   buildReviewPrompt,
   buildSecurityReviewPrompt
@@ -36,11 +36,15 @@ import {
   checkNetworkPolicy,
   checkPermissionWithProfile,
   cleanupRejectedTeeFile,
+  clearRecentlyDeniedAutoActions,
+  defaultActionClassifier,
   estimateTokens,
   formatPermissionProfileWarning,
   getPendingHookTrust,
+  getRecentlyDeniedAutoActions,
   googleSearchContext,
   groupCallsByPhase,
+  recordRecentlyDeniedAutoAction,
   renderDiff,
   runHook,
   runLifecycleHooks,
@@ -51,10 +55,10 @@ import {
   spawnAgentContext,
   truncateOutput,
   undoStack
-} from "./chunk-N5LB3PPL.js";
+} from "./chunk-THNECAAY.js";
 import "./chunk-T2NL5ZIA.js";
 import "./chunk-BXP6YZ2P.js";
-import "./chunk-HX6N6QEY.js";
+import "./chunk-UDMU4FUF.js";
 import {
   SessionManager,
   getContentText
@@ -68,7 +72,7 @@ import {
 } from "./chunk-QMXC327F.js";
 import {
   runTool
-} from "./chunk-IFZX26K7.js";
+} from "./chunk-7NTFMLJJ.js";
 import {
   CONTENT_ONLY_STREAM_REMINDER,
   TEE_FINAL_USER_NUDGE,
@@ -87,7 +91,7 @@ import {
 } from "./chunk-XPBEJB27.js";
 import {
   ConfigManager
-} from "./chunk-NYCBOVNF.js";
+} from "./chunk-MRGWPCFQ.js";
 import "./chunk-TZQHYZKT.js";
 import {
   AGENTIC_BEHAVIOR_GUIDELINE,
@@ -106,7 +110,7 @@ import {
   SKILLS_DIR_NAME,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-GBBVCZ4W.js";
+} from "./chunk-IWLVH32D.js";
 import {
   formatGitContextForPrompt,
   getGitContext,
@@ -164,6 +168,8 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
   confirming = false;
   /** Session-level auto-approve toggle (/yolo command) */
   sessionAutoApprove = false;
+  /** Session-level Auto Mode: rule-based low-risk auto approval. */
+  sessionAutoMode = false;
   /** Track tool start times for duration calculation */
   toolStartTimes = /* @__PURE__ */ new Map();
   /**
@@ -441,6 +447,35 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
       }
     }
     this.sendToolCallStart(call);
+    if (this.sessionAutoMode && networkPermission?.action !== "confirm") {
+      const classification = defaultActionClassifier.classify(call, dangerLevel, {
+        workspaceRoot: this.workspaceRoot,
+        tempDirs: [tmpdir()]
+      });
+      if (classification.decision === "deny") {
+        recordRecentlyDeniedAutoAction(call, classification);
+        const rejectionMsg = `[Auto denied] ${classification.reason}. Do not retry without asking.`;
+        this.sendToolCallResult(call, rejectionMsg, true);
+        return { callId: call.id, content: rejectionMsg, isError: true };
+      }
+      if (classification.decision === "auto-approve") {
+        this.send({ type: "info", message: `\u26A1 Auto-approved (/auto: ${classification.ruleId})` });
+        try {
+          const rawContent = await runTool(tool, call.arguments, call.name);
+          const content = truncateOutput(rawContent, call.name);
+          this.sendToolCallResult(call, rawContent, false);
+          runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "ok" });
+          runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "ok" }, { configDir: this.hookConfigDir });
+          return { callId: call.id, content, isError: false };
+        } catch (err) {
+          const message = err instanceof Error ? err.message : String(err);
+          this.sendToolCallResult(call, message, true);
+          runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
+          runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "error", error: message }, { configDir: this.hookConfigDir });
+          return { callId: call.id, content: message, isError: true };
+        }
+      }
+    }
     if (this.sessionAutoApprove && dangerLevel === "write") {
       try {
         const rawContent = await runTool(tool, call.arguments, call.name);
@@ -1981,6 +2016,47 @@ ${activated.meta.description || ""}` });
         break;
       }
       // ── /yolo ──────────────────────────────────────────────────────
+      case "auto": {
+        const sub = args[0]?.toLowerCase() ?? "status";
+        if (sub === "on") {
+          this.toolExecutor.sessionAutoMode = true;
+          this.send({ type: "info", message: "\u26A1 Auto Mode ON \u2014 low-risk actions may auto-run; high-risk actions still confirm or deny. Auto Mode is session-scoped." });
+        } else if (sub === "off") {
+          this.toolExecutor.sessionAutoMode = false;
+          this.send({ type: "info", message: "Auto Mode disabled." });
+        } else if (sub === "status") {
+          this.send({ type: "info", message: `Auto Mode: ${this.toolExecutor.sessionAutoMode ? "on" : "off"}
+Scope: current session only
+Denied: /permissions recently-denied` });
+        } else {
+          this.send({ type: "error", message: "Usage: /auto [on|off|status]" });
+        }
+        this.sendStatus();
+        break;
+      }
+      case "permissions": {
+        const sub = args[0]?.toLowerCase() ?? "recently-denied";
+        if (sub === "recently-denied") {
+          const rows = getRecentlyDeniedAutoActions();
+          if (rows.length === 0) {
+            this.send({ type: "info", message: "No recently denied Auto Mode actions." });
+          } else {
+            const lines = [`Recently denied Auto Mode actions (${rows.length})`, ""];
+            for (const r of rows.slice(0, 20)) {
+              lines.push(`- ${r.timestamp} ${r.tool} ${r.ruleId}`);
+              lines.push(`  ${r.reason}`);
+              lines.push(`  ${r.argsPreview}`);
+            }
+            this.send({ type: "info", message: lines.join("\n") });
+          }
+        } else if (sub === "clear-denied") {
+          clearRecentlyDeniedAutoActions();
+          this.send({ type: "info", message: "Cleared recently denied Auto Mode actions." });
+        } else {
+          this.send({ type: "error", message: "Usage: /permissions recently-denied|clear-denied" });
+        }
+        break;
+      }
       case "yolo": {
         const sub = args[0]?.toLowerCase();
         if (sub === "off") {
@@ -2599,7 +2675,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
       case "test": {
         this.send({ type: "info", message: "\u{1F9EA} Running tests..." });
         try {
-          const { executeTests } = await import("./run-tests-H4Q2PRX6.js");
+          const { executeTests } = await import("./run-tests-DSOJBJWA.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {

package/dist/{task-orchestrator-AL2E642M.js → task-orchestrator-RUXWRMQV.js}

@@ -3,13 +3,13 @@ import {
   ToolRegistry,
   googleSearchContext,
   truncateOutput
-} from "./chunk-N5LB3PPL.js";
+} from "./chunk-THNECAAY.js";
 import "./chunk-T2NL5ZIA.js";
 import "./chunk-BXP6YZ2P.js";
-import "./chunk-HX6N6QEY.js";
+import "./chunk-UDMU4FUF.js";
 import {
   runTool
-} from "./chunk-IFZX26K7.js";
+} from "./chunk-7NTFMLJJ.js";
 import {
   getDangerLevel,
   runLeanAgentLoop
@@ -17,7 +17,7 @@ import {
 import "./chunk-TZQHYZKT.js";
 import {
   SUBAGENT_ALLOWED_TOOLS
-} from "./chunk-GBBVCZ4W.js";
+} from "./chunk-IWLVH32D.js";
 import "./chunk-4BKXL7SM.js";
 import "./chunk-TB4W4Y4T.js";
 import "./chunk-KHYD3WXE.js";

package/dist/{usage-LB6REWPO.js → usage-2P6TIBTN.js}

@@ -8,9 +8,9 @@ import {
 } from "./chunk-E44DTERW.js";
 import {
   ConfigManager
-} from "./chunk-NYCBOVNF.js";
+} from "./chunk-MRGWPCFQ.js";
 import "./chunk-TZQHYZKT.js";
-import "./chunk-GBBVCZ4W.js";
+import "./chunk-IWLVH32D.js";
 import "./chunk-IW3Q7AE5.js";
 
 // src/cli/usage.ts

package/dist/web/client/app.js

@@ -548,7 +548,7 @@ function handleStatus(msg) {
     // Active tab: full UI reflection
     btnThink.classList.toggle('btn-active-toggle', msg.thinkingMode);
     btnPlan.classList.toggle('btn-active-toggle', msg.planMode);
-    statusSession.textContent = '📋 ' + (msg.sessionId?.slice(0, 8) || '—') + ' (' + msg.messageCount + ' msgs) · ' + (msg.permissionProfile || 'legacy') + (msg.networkPolicyEnabled ? ' · net:on' : '') + (msg.pendingHookTrustCount ? ' · hooks:' + msg.pendingHookTrustCount : '');
+    statusSession.textContent = '📋 ' + (msg.sessionId?.slice(0, 8) || '—') + ' (' + msg.messageCount + ' msgs) · ' + (msg.permissionProfile || 'legacy') + (msg.networkPolicyEnabled ? ' · net:on' : '') + (msg.autoMode ? ' · auto:on' : '') + (msg.pendingHookTrustCount ? ' · hooks:' + msg.pendingHookTrustCount : '');
     if (msg.tokenUsage) {
       const u = msg.tokenUsage;
       const cacheRead = u.cacheReadTokens || 0;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jinzd-ai-cli",
-  "version": "0.4.212",
+  "version": "0.4.213",
   "description": "Cross-platform REPL-style AI CLI with multi-provider support",
   "type": "module",
   "main": "./dist/index.js",