jinzd-ai-cli 0.4.212 → 0.4.214

package/dist/electron-server.js

@@ -37,7 +37,7 @@ import {
   VERSION,
   buildUserIdentityPrompt,
   runTestsTool
-} from "./chunk-KE4B3NOQ.js";
+} from "./chunk-JOJA35RK.js";
 import {
   hasSemanticIndex,
   semanticSearch
@@ -61,8 +61,8 @@ import {
 import express from "express";
 import { createServer } from "http";
 import { WebSocketServer } from "ws";
-import { join as join20, dirname as dirname6, resolve as resolve8, relative as relative4, sep as sep3 } from "path";
-import { existsSync as existsSync26, readFileSync as readFileSync20, readdirSync as readdirSync12, statSync as statSync10, realpathSync } from "fs";
+import { join as join22, dirname as dirname6, resolve as resolve9, relative as relative4, sep as sep3 } from "path";
+import { existsSync as existsSync28, readFileSync as readFileSync22, readdirSync as readdirSync13, statSync as statSync10, realpathSync } from "fs";
 import { networkInterfaces } from "os";
 
 // src/config/config-manager.ts
@@ -5790,7 +5790,7 @@ import { dirname as dirname3 } from "path";
 
 // src/tools/executor.ts
 import chalk3 from "chalk";
-import { existsSync as existsSync8, readFileSync as readFileSync7 } from "fs";
+import { existsSync as existsSync9, readFileSync as readFileSync8 } from "fs";
 import { tmpdir } from "os";
 
 // src/core/readline-internal.ts
@@ -6627,6 +6627,157 @@ function flush() {
   }
 }
 
+// src/tools/action-classifier.ts
+import { existsSync as existsSync8, readFileSync as readFileSync7 } from "fs";
+import { isAbsolute as isAbsolute2, join as join5, resolve as resolve4 } from "path";
+var RECENT_DENIED_LIMIT = 50;
+var recentlyDenied = [];
+function recordRecentlyDeniedAutoAction(call, classification) {
+  recentlyDenied.unshift({
+    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+    tool: call.name,
+    reason: classification.reason,
+    ruleId: classification.ruleId,
+    argsPreview: JSON.stringify(call.arguments).slice(0, 240)
+  });
+  recentlyDenied.splice(RECENT_DENIED_LIMIT);
+}
+function getRecentlyDeniedAutoActions() {
+  return [...recentlyDenied];
+}
+function clearRecentlyDeniedAutoActions() {
+  recentlyDenied.splice(0, recentlyDenied.length);
+}
+function normalizePath(value) {
+  return value.replace(/\\/g, "/").replace(/\/+$/, "").toLowerCase();
+}
+function isInside(root, target) {
+  const absoluteRoot = resolve4(root);
+  const absoluteTarget = isAbsolute2(target) ? target : resolve4(root, target);
+  const base = normalizePath(absoluteRoot);
+  const t = normalizePath(absoluteTarget);
+  return t === base || t.startsWith(base + "/");
+}
+function getPathArg(call) {
+  const raw = call.arguments.path ?? call.arguments.filePath ?? call.arguments.outputPath ?? call.arguments.file;
+  return typeof raw === "string" && raw.trim() ? raw.trim() : null;
+}
+function splitShellWords(command) {
+  const out = [];
+  const re = /"([^"]*)"|'([^']*)'|([^\s]+)/g;
+  let m;
+  while (m = re.exec(command)) out.push(m[1] ?? m[2] ?? m[3] ?? "");
+  return out.filter(Boolean);
+}
+function readPackageManifest(root) {
+  const p = join5(root, "package.json");
+  if (!existsSync8(p)) return null;
+  try {
+    return JSON.parse(readFileSync7(p, "utf-8"));
+  } catch {
+    return null;
+  }
+}
+function manifestHasDependency(root, name) {
+  const manifest = readPackageManifest(root);
+  if (!manifest) return false;
+  for (const key of ["dependencies", "devDependencies", "peerDependencies", "optionalDependencies"]) {
+    const deps = manifest[key];
+    if (deps && typeof deps === "object" && Object.prototype.hasOwnProperty.call(deps, name)) return true;
+  }
+  return false;
+}
+function lockfileMentions(root, name) {
+  for (const file of ["package-lock.json", "pnpm-lock.yaml", "yarn.lock"]) {
+    const p = join5(root, file);
+    if (!existsSync8(p)) continue;
+    try {
+      if (readFileSync7(p, "utf-8").includes(name)) return true;
+    } catch {
+    }
+  }
+  return false;
+}
+function getInstallPackages(command) {
+  const words = splitShellWords(command);
+  const cmd = words[0]?.toLowerCase();
+  const sub = words[1]?.toLowerCase();
+  if (!cmd || !sub) return [];
+  const isInstall = cmd === "npm" && (sub === "install" || sub === "i" || sub === "add") || (cmd === "pnpm" || cmd === "yarn") && (sub === "add" || sub === "install");
+  if (!isInstall) return [];
+  return words.slice(2).filter((w) => !w.startsWith("-")).filter((w) => w !== "." && w !== "./").map((w) => w.replace(/^@([^/]+)\/([^@]+)(?:@.+)?$/, "@$1/$2").replace(/^([^@]+)@.+$/, "$1"));
+}
+function isPlainGitPush(command) {
+  if (!/^\s*git\s+push\b/i.test(command)) return false;
+  if (/--force|-f\b|\+[^\s]+/i.test(command)) return false;
+  return !/[;&|`$<>\n\r]/.test(command);
+}
+function hasSecretExfiltrationShape(command) {
+  return /(?:\.env|config\.json|id_rsa|id_ed25519|AWS_SECRET|AICLI_API_KEY|OPENAI_API_KEY|ANTHROPIC_API_KEY)/i.test(command) && /\b(curl|wget|scp|rsync|nc|netcat|Invoke-WebRequest|Invoke-RestMethod)\b/i.test(command);
+}
+var RuleBasedActionClassifier = class {
+  classify(call, dangerLevel, ctx) {
+    if (call.name === "bash") return this.classifyShell(call, dangerLevel, ctx);
+    if (call.name === "web_fetch" || call.name === "web_search" || call.name === "google_search") {
+      return { decision: "auto-approve", reason: "read-only HTTP tool", ruleId: "auto.readonly-http", confidence: "high" };
+    }
+    if (dangerLevel === "safe") {
+      return { decision: "auto-approve", reason: "safe read-only tool", ruleId: "auto.safe-tool", confidence: "high" };
+    }
+    if (dangerLevel === "write") {
+      const p = getPathArg(call);
+      if (p && (isInside(ctx.workspaceRoot, p) || (ctx.tempDirs ?? []).some((root) => isInside(root, p)))) {
+        return { decision: "auto-approve", reason: "explicit write inside workspace/temp roots", ruleId: "auto.workspace-write", confidence: "high" };
+      }
+      return { decision: "confirm", reason: "write action is not proven low-risk", ruleId: "auto.write-confirm", confidence: "medium" };
+    }
+    return { decision: "confirm", reason: "destructive actions require confirmation", ruleId: "auto.destructive-confirm", confidence: "high" };
+  }
+  classifyShell(call, dangerLevel, ctx) {
+    const command = String(call.arguments.command ?? "");
+    if (/\bcurl\b[^\n|;&]*\|\s*(?:sudo\s+)?(?:bash|sh|zsh)\b/i.test(command)) {
+      return { decision: "deny", reason: "curl pipe shell execution is blocked in auto mode", ruleId: "deny.curl-pipe-shell", confidence: "high" };
+    }
+    if (/\bgit\s+push\b/i.test(command) && /--force|-f\b|\+[^\s]+/i.test(command)) {
+      return { decision: "deny", reason: "force push is blocked in auto mode", ruleId: "deny.force-push", confidence: "high" };
+    }
+    if (hasSecretExfiltrationShape(command)) {
+      return { decision: "deny", reason: "possible secret exfiltration is blocked in auto mode", ruleId: "deny.secret-exfiltration", confidence: "high" };
+    }
+    if (/\b(terraform|tofu)\s+destroy\b|\bkubectl\s+delete\b|\bcdk\s+destroy\b/i.test(command)) {
+      return { decision: "confirm", reason: "infrastructure destroy requires confirmation", ruleId: "confirm.iac-destroy", confidence: "high" };
+    }
+    if (/\b(prisma|sequelize|knex|typeorm)\b[^\n]*\b(migrate|migration)\b|\bdb:migrate\b/i.test(command)) {
+      return { decision: "confirm", reason: "database migration requires confirmation", ruleId: "confirm.database-migration", confidence: "high" };
+    }
+    if (/\b(vercel|netlify|flyctl|railway|wrangler|serverless|firebase)\b[^\n]*\bdeploy\b|\bdeploy\b[^\n]*\b(prod|production)\b/i.test(command)) {
+      return { decision: "confirm", reason: "production deployment requires confirmation", ruleId: "confirm.production-deploy", confidence: "high" };
+    }
+    if (/\b(iam|policy|token|secret|api[-_]?key|credential|permission|role)\b/i.test(command)) {
+      return { decision: "confirm", reason: "credential or permission change requires confirmation", ruleId: "confirm.credentials-permissions", confidence: "medium" };
+    }
+    if (/\b(npx|pnpm\s+dlx|yarn\s+dlx)\s+(claude|codex|aider|cursor-agent|gemini)\b/i.test(command)) {
+      return { decision: "confirm", reason: "third-party agent loop requires confirmation", ruleId: "confirm.third-party-agent", confidence: "high" };
+    }
+    if (isPlainGitPush(command)) {
+      return { decision: "auto-approve", reason: "plain git push without force", ruleId: "auto.git-push", confidence: "high" };
+    }
+    const pkgs = getInstallPackages(command);
+    if (pkgs.length > 0) {
+      const allDeclared = pkgs.every((p) => manifestHasDependency(ctx.workspaceRoot, p) || lockfileMentions(ctx.workspaceRoot, p));
+      return allDeclared ? { decision: "auto-approve", reason: "installing dependencies already declared in manifest/lockfile", ruleId: "auto.declared-dependency-install", confidence: "medium" } : { decision: "confirm", reason: "dependency install includes undeclared packages", ruleId: "confirm.undeclared-dependency-install", confidence: "medium" };
+    }
+    if (/\b(curl|wget|Invoke-WebRequest|Invoke-RestMethod)\b/i.test(command) && !/[>|;&`$]/.test(command)) {
+      return { decision: "auto-approve", reason: "read-only HTTP shell command", ruleId: "auto.readonly-http-shell", confidence: "medium" };
+    }
+    if (dangerLevel === "safe") {
+      return { decision: "auto-approve", reason: "safe shell action", ruleId: "auto.safe-shell", confidence: "medium" };
+    }
+    return { decision: "confirm", reason: "shell action is not proven low-risk", ruleId: "confirm.shell-default", confidence: "medium" };
+  }
+};
+var defaultActionClassifier = new RuleBasedActionClassifier();
+
 // src/tools/executor.ts
 function buildErrorPreview(content) {
   const meaningful = content.split("\n").filter(
@@ -6666,6 +6817,8 @@ var ToolExecutor = class {
    * destructive 操作仍然必须逐次确认。
    */
   sessionAutoApprove = false;
+  /** Session-level Auto Mode: rule-based low-risk auto approval. */
+  sessionAutoMode = false;
   /**
    * Logical session key used to scope per-session state in stateful tools
    * (currently only `bash`'s persistent cwd). Web mode sets this per-tab so
@@ -6825,6 +6978,40 @@ var ToolExecutor = class {
         };
       }
     }
+    if (this.sessionAutoMode && networkPermission?.action !== "confirm") {
+      const classification = defaultActionClassifier.classify(call, dangerLevel, {
+        workspaceRoot: this.workspaceRoot,
+        tempDirs: [tmpdir()]
+      });
+      if (classification.decision === "deny") {
+        recordRecentlyDeniedAutoAction(call, classification);
+        return {
+          callId: call.id,
+          content: `[Auto denied] ${classification.reason}. Do not retry without asking.`,
+          isError: true
+        };
+      }
+      if (classification.decision === "auto-approve") {
+        this.printToolCall(call);
+        if (dangerLevel === "write") this.printDiffPreview(call);
+        console.log(theme.warning(`  \u26A1 Auto-approved (/auto: ${classification.ruleId})`));
+        try {
+          const rawContent = await runTool(tool, call.arguments, call.name);
+          const content = truncateOutput(rawContent, call.name);
+          const wasTruncated = content !== rawContent;
+          this.printToolResult(call.name, rawContent, false, wasTruncated);
+          runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "ok" });
+          runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "ok" }, { configDir: this.hookConfigDir });
+          return { callId: call.id, content, isError: false };
+        } catch (err) {
+          const message = err instanceof Error ? err.message : String(err);
+          this.printToolResult(call.name, message, true, false);
+          runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
+          runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "error", error: message }, { configDir: this.hookConfigDir });
+          return { callId: call.id, content: message, isError: true };
+        }
+      }
+    }
     if (this.sessionAutoApprove && dangerLevel === "write") {
       this.printToolCall(call);
       if (dangerLevel === "write") this.printDiffPreview(call);
@@ -6992,7 +7179,7 @@ var ToolExecutor = class {
     rl.resume();
     process.stdout.write(prompt);
     this.confirming = true;
-    return new Promise((resolve9) => {
+    return new Promise((resolve10) => {
       let completed = false;
       const cleanup = (result) => {
         if (completed) return;
@@ -7002,7 +7189,7 @@ var ToolExecutor = class {
         rl.pause();
         rlAny.output = savedOutput;
         this.confirming = false;
-        resolve9(result);
+        resolve10(result);
       };
       const onLine = (line) => {
         const trimmed = line.trim();
@@ -7069,10 +7256,10 @@ var ToolExecutor = class {
       const filePath = String(call.arguments["path"] ?? "");
       const newContent = String(call.arguments["content"] ?? "");
       if (!filePath) return;
-      if (existsSync8(filePath)) {
+      if (existsSync9(filePath)) {
         let oldContent;
         try {
-          oldContent = readFileSync7(filePath, "utf-8");
+          oldContent = readFileSync8(filePath, "utf-8");
         } catch {
           return;
         }
@@ -7095,7 +7282,7 @@ var ToolExecutor = class {
       }
     } else if (call.name === "edit_file") {
       const filePath = String(call.arguments["path"] ?? "");
-      if (!filePath || !existsSync8(filePath)) return;
+      if (!filePath || !existsSync9(filePath)) return;
       const oldStr = call.arguments["old_str"];
       const newStr = call.arguments["new_str"];
       if (oldStr !== void 0) {
@@ -7122,7 +7309,7 @@ var ToolExecutor = class {
         const to = Number(call.arguments["delete_to_line"] ?? from);
         let fileContent;
         try {
-          fileContent = readFileSync7(filePath, "utf-8");
+          fileContent = readFileSync8(filePath, "utf-8");
         } catch {
           return;
         }
@@ -7176,7 +7363,7 @@ var ToolExecutor = class {
     rl.resume();
     process.stdout.write(color("Proceed? [y/N] (type y + Enter to confirm) "));
     this.confirming = true;
-    return new Promise((resolve9) => {
+    return new Promise((resolve10) => {
       let completed = false;
       const cleanup = (answer) => {
         if (completed) return;
@@ -7186,7 +7373,7 @@ var ToolExecutor = class {
         rl.pause();
         rlAny.output = savedOutput;
         this.confirming = false;
-        resolve9(answer === "y");
+        resolve10(answer === "y");
       };
       const onLine = (line) => {
         const trimmed = line.trim();
@@ -7214,11 +7401,11 @@ var ToolExecutor = class {
 };
 
 // src/tools/sensitive-paths.ts
-import { resolve as resolve4, sep as sep2, basename as basename2 } from "path";
+import { resolve as resolve5, sep as sep2, basename as basename2 } from "path";
 import { homedir as homedir4 } from "os";
 var home = homedir4();
 function norm(p) {
-  const abs = resolve4(p);
+  const abs = resolve5(p);
   return process.platform === "win32" ? abs.toLowerCase() : abs;
 }
 function homeRel(p) {
@@ -7377,7 +7564,7 @@ Do NOT split a long document into many write_file(append=true) calls. That patte
 };
 
 // src/tools/builtin/edit-file.ts
-import { readFileSync as readFileSync8, existsSync as existsSync9 } from "fs";
+import { readFileSync as readFileSync9, existsSync as existsSync10 } from "fs";
 
 // src/tools/builtin/patch-apply.ts
 function parseUnifiedDiff(patch) {
@@ -7738,7 +7925,7 @@ Note: Path can be absolute or relative to cwd.`,
     const filePath = String(args["path"] ?? "");
     const encoding = args["encoding"] ?? "utf-8";
     if (!filePath) throw new ToolError("edit_file", "path is required");
-    if (!existsSync9(filePath)) throw new ToolError("edit_file", `File not found: ${filePath}`);
+    if (!existsSync10(filePath)) throw new ToolError("edit_file", `File not found: ${filePath}`);
     const verdict = classifyWritePath(filePath);
     if (verdict.sensitive && subAgentGuard.active) {
       throw new ToolError(
@@ -7746,7 +7933,7 @@ Note: Path can be absolute or relative to cwd.`,
         `Refused: sub-agents cannot edit sensitive paths \u2014 ${verdict.reason}. If this is genuinely needed, ask the parent agent to perform the edit so the user can approve it.`
       );
     }
-    const original = readFileSync8(filePath, encoding);
+    const original = readFileSync9(filePath, encoding);
     if (args["patch"] !== void 0) {
       const patchText = String(args["patch"] ?? "");
       const stopOnError = args["stop_on_error"] !== false;
@@ -7904,8 +8091,8 @@ function truncatePreview(str, maxLen = 80) {
 }
 
 // src/tools/builtin/list-dir.ts
-import { readdirSync as readdirSync4, statSync as statSync3, existsSync as existsSync10 } from "fs";
-import { join as join5, basename as basename3 } from "path";
+import { readdirSync as readdirSync4, statSync as statSync3, existsSync as existsSync11 } from "fs";
+import { join as join6, basename as basename3 } from "path";
 var listDirTool = {
   definition: {
     name: "list_dir",
@@ -7927,7 +8114,7 @@ var listDirTool = {
   async execute(args) {
     const dirPath = String(args["path"] ?? process.cwd());
     const recursive = Boolean(args["recursive"] ?? false);
-    if (!existsSync10(dirPath)) {
+    if (!existsSync11(dirPath)) {
       const targetName = basename3(dirPath).toLowerCase();
       const cwd = process.cwd();
       const suggestions = [];
@@ -7985,11 +8172,11 @@ function listRecursive(basePath, indent, recursive, lines) {
     if (entry.isDirectory()) {
       lines.push(`${indent}\u{1F4C1} ${entry.name}/`);
       if (recursive) {
-        listRecursive(join5(basePath, entry.name), indent + "  ", true, lines);
+        listRecursive(join6(basePath, entry.name), indent + "  ", true, lines);
       }
     } else {
       try {
-        const stat = statSync3(join5(basePath, entry.name));
+        const stat = statSync3(join6(basePath, entry.name));
         const size = formatSize(stat.size);
         lines.push(`${indent}\u{1F4C4} ${entry.name}  (${size})`);
       } catch {
@@ -8005,9 +8192,9 @@ function formatSize(bytes) {
 }
 
 // src/tools/builtin/grep-files.ts
-import { readdirSync as readdirSync5, readFileSync as readFileSync9, statSync as statSync4, existsSync as existsSync11 } from "fs";
+import { readdirSync as readdirSync5, readFileSync as readFileSync10, statSync as statSync4, existsSync as existsSync12 } from "fs";
 import { readFile } from "fs/promises";
-import { join as join6, relative } from "path";
+import { join as join7, relative } from "path";
 var grepFilesTool = {
   definition: {
     name: "grep_files",
@@ -8058,7 +8245,7 @@ Supports regex. Automatically skips node_modules, dist, .git directories.`,
     const contextLines = Math.max(0, Number(args["context_lines"] ?? 0));
     const maxResults = Math.max(1, Number(args["max_results"] ?? 50));
     if (!pattern) throw new ToolError("grep_files", "pattern is required");
-    if (!existsSync11(rootPath)) throw new ToolError("grep_files", `Path not found: ${rootPath}`);
+    if (!existsSync12(rootPath)) throw new ToolError("grep_files", `Path not found: ${rootPath}`);
     const MAX_PATTERN_LENGTH = 1e3;
     if (pattern.length > MAX_PATTERN_LENGTH) {
       throw new ToolError("grep_files", `Pattern too long (${pattern.length} chars, max ${MAX_PATTERN_LENGTH}). Use a shorter pattern.`);
@@ -8152,11 +8339,11 @@ function collectFilePaths(rootPath, filePattern, maxFiles) {
       if (paths.length >= maxFiles) return;
       if (entry.isDirectory()) {
         if (SKIP_DIRS.has(entry.name) || entry.name.startsWith(".")) continue;
-        walk(join6(dirPath, entry.name));
+        walk(join7(dirPath, entry.name));
       } else if (entry.isFile()) {
         if (isBinary(entry.name)) continue;
         if (filePattern && !matchesFilePattern(entry.name, filePattern)) continue;
-        const fullPath = join6(dirPath, entry.name);
+        const fullPath = join7(dirPath, entry.name);
         try {
           if (statSync4(fullPath).size > 1e6) continue;
         } catch {
@@ -8211,7 +8398,7 @@ function searchInFile(fullPath, displayPath2, regex, contextLines, maxResults, r
   }
   let content;
   try {
-    content = readFileSync9(fullPath, "utf-8");
+    content = readFileSync10(fullPath, "utf-8");
   } catch {
     return;
   }
@@ -8242,8 +8429,8 @@ function searchInFile(fullPath, displayPath2, regex, contextLines, maxResults, r
 }
 
 // src/tools/builtin/glob-files.ts
-import { readdirSync as readdirSync6, statSync as statSync5, existsSync as existsSync12 } from "fs";
-import { join as join7, relative as relative2, basename as basename4 } from "path";
+import { readdirSync as readdirSync6, statSync as statSync5, existsSync as existsSync13 } from "fs";
+import { join as join8, relative as relative2, basename as basename4 } from "path";
 var globFilesTool = {
   definition: {
     name: "glob_files",
@@ -8276,7 +8463,7 @@ Results sorted by most recent modification time. Automatically skips node_module
     const rootPath = String(args["path"] ?? process.cwd());
     const maxResults = Math.max(1, Number(args["max_results"] ?? 100));
     if (!pattern) throw new ToolError("glob_files", "pattern is required");
-    if (!existsSync12(rootPath)) throw new ToolError("glob_files", `Path not found: ${rootPath}`);
+    if (!existsSync13(rootPath)) throw new ToolError("glob_files", `Path not found: ${rootPath}`);
     const regex = globToRegex(pattern);
     const matches = [];
     collectMatchingFiles(rootPath, rootPath, regex, matches, maxResults);
@@ -8353,7 +8540,7 @@ function collectMatchingFiles(dirPath, rootPath, regex, results, maxResults) {
   }
   for (const entry of entries) {
     if (results.length >= maxResults) break;
-    const fullPath = join7(dirPath, entry.name);
+    const fullPath = join8(dirPath, entry.name);
     if (entry.isDirectory()) {
       if (SKIP_DIRS2.has(entry.name) || entry.name.startsWith(".")) continue;
       collectMatchingFiles(fullPath, rootPath, regex, results, maxResults);
@@ -8435,7 +8622,7 @@ var runInteractiveTool = {
       PYTHONDONTWRITEBYTECODE: "1"
     };
     const prefixWarnings = [argsTypeWarning, stdinTypeWarning].filter(Boolean).join("");
-    return new Promise((resolve9) => {
+    return new Promise((resolve10) => {
       const child = spawn2(executable, cmdArgs.map(String), {
         cwd: process.cwd(),
         env,
@@ -8468,22 +8655,22 @@ var runInteractiveTool = {
       setTimeout(writeNextLine, 400);
       const timer = setTimeout(() => {
         child.kill();
-        resolve9(`${prefixWarnings}[Timeout after ${timeout}ms]
+        resolve10(`${prefixWarnings}[Timeout after ${timeout}ms]
 ${buildOutput(stdout, stderr)}`);
       }, timeout);
       child.on("close", (code) => {
         clearTimeout(timer);
         const output = buildOutput(stdout, stderr);
         if (code !== 0 && code !== null) {
-          resolve9(`${prefixWarnings}Exit code ${code}:
+          resolve10(`${prefixWarnings}Exit code ${code}:
 ${output}`);
         } else {
-          resolve9(`${prefixWarnings}${output || "(no output)"}`);
+          resolve10(`${prefixWarnings}${output || "(no output)"}`);
         }
       });
       child.on("error", (err) => {
         clearTimeout(timer);
-        resolve9(
+        resolve10(
           `${prefixWarnings}Failed to start process "${executable}": ${err.message}
 Hint: On Windows, use the full path to the executable, e.g.:
   C:\\Users\\Jinzd\\anaconda3\\envs\\python312\\python.exe`
@@ -9151,11 +9338,11 @@ Any of these triggers means use save_last_response, NOT write_file:
 };
 
 // src/tools/builtin/save-memory.ts
-import { existsSync as existsSync13, readFileSync as readFileSync10, statSync as statSync6, mkdirSync as mkdirSync7 } from "fs";
-import { join as join8 } from "path";
+import { existsSync as existsSync14, readFileSync as readFileSync11, statSync as statSync6, mkdirSync as mkdirSync7 } from "fs";
+import { join as join9 } from "path";
 import { homedir as homedir5 } from "os";
 function getMemoryFilePath() {
-  return join8(homedir5(), CONFIG_DIR_NAME, MEMORY_FILE_NAME);
+  return join9(homedir5(), CONFIG_DIR_NAME, MEMORY_FILE_NAME);
 }
 function formatTimestamp() {
   const now = /* @__PURE__ */ new Date();
@@ -9179,8 +9366,8 @@ var saveMemoryTool = {
     const content = String(args["content"] ?? "").trim();
     if (!content) throw new ToolError("save_memory", "content is required");
     const memoryPath = getMemoryFilePath();
-    const configDir = join8(homedir5(), CONFIG_DIR_NAME);
-    if (!existsSync13(configDir)) {
+    const configDir = join9(homedir5(), CONFIG_DIR_NAME);
+    if (!existsSync14(configDir)) {
       mkdirSync7(configDir, { recursive: true });
     }
     const timestamp = formatTimestamp();
@@ -9188,7 +9375,7 @@ var saveMemoryTool = {
 ## ${timestamp}
 ${content}
 `;
-    const previous = existsSync13(memoryPath) ? readFileSync10(memoryPath, "utf-8") : "";
+    const previous = existsSync14(memoryPath) ? readFileSync11(memoryPath, "utf-8") : "";
     atomicWriteFileSync(memoryPath, previous + entry);
     const byteSize = statSync6(memoryPath).size;
     return `Memory saved successfully. File size: ${byteSize} bytes in ${MEMORY_FILE_NAME}`;
@@ -9235,7 +9422,7 @@ function promptUser(rl, question) {
   console.log();
   console.log(chalk4.cyan("\u2753 ") + chalk4.bold(question));
   process.stdout.write(chalk4.cyan("> "));
-  return new Promise((resolve9) => {
+  return new Promise((resolve10) => {
     let completed = false;
     const cleanup = (answer) => {
       if (completed) return;
@@ -9245,7 +9432,7 @@ function promptUser(rl, question) {
       rl.pause();
       rlAny.output = savedOutput;
       askUserContext.prompting = false;
-      resolve9(answer);
+      resolve10(answer);
     };
     const onLine = (line) => {
       cleanup(line);
@@ -9476,6 +9663,218 @@ function formatResults2(query, data, _requested) {
   return header + "\n" + results.join("\n\n");
 }
 
+// src/agents/agent-config.ts
+import { existsSync as existsSync15, readdirSync as readdirSync7, readFileSync as readFileSync12 } from "fs";
+import { join as join10 } from "path";
+import { homedir as homedir6 } from "os";
+var READ_ONLY_TOOLS2 = /* @__PURE__ */ new Set([
+  "read_file",
+  "list_dir",
+  "grep_files",
+  "glob_files",
+  "web_fetch",
+  "google_search",
+  "write_todos",
+  "find_symbol",
+  "get_outline",
+  "find_references",
+  "search_code"
+]);
+var BUILTIN_AGENTS = [
+  {
+    name: "explorer",
+    description: "Read-only code exploration and evidence gathering.",
+    permissionProfile: "read-only",
+    allowedTools: [...READ_ONLY_TOOLS2],
+    maxToolRounds: 10,
+    contextPolicy: "task-only",
+    system: "Act as a read-only explorer. Inspect code, collect evidence, and do not modify files.",
+    source: "builtin"
+  },
+  {
+    name: "worker",
+    description: "Implementation and focused fixes within sub-agent safety limits.",
+    permissionProfile: "workspace-write",
+    maxToolRounds: 15,
+    contextPolicy: "task-only",
+    system: "Act as a focused implementation worker. Keep edits scoped and report changed files.",
+    source: "builtin"
+  },
+  {
+    name: "reviewer",
+    description: "Code review focused on bugs, regressions, and missing tests.",
+    permissionProfile: "read-only",
+    allowedTools: [...READ_ONLY_TOOLS2],
+    maxToolRounds: 12,
+    contextPolicy: "task-only",
+    system: "Act as a code reviewer. Lead with concrete findings, file evidence, and residual risks.",
+    source: "builtin"
+  },
+  {
+    name: "security",
+    description: "Security audit with read-only evidence collection.",
+    permissionProfile: "read-only",
+    allowedTools: [...READ_ONLY_TOOLS2],
+    maxToolRounds: 12,
+    contextPolicy: "task-only",
+    system: "Act as a security reviewer. Look for trust-boundary, injection, filesystem, network, and secret-handling issues.",
+    source: "builtin"
+  },
+  {
+    name: "tester",
+    description: "Test planning and regression analysis without direct shell execution.",
+    permissionProfile: "read-only",
+    allowedTools: [...READ_ONLY_TOOLS2],
+    maxToolRounds: 12,
+    contextPolicy: "task-only",
+    system: "Act as a tester. Inspect tests, identify coverage gaps, and propose precise regression checks.",
+    source: "builtin"
+  }
+];
+function normalizeName(name) {
+  return name.trim().toLowerCase();
+}
+function isStringArray(value) {
+  return Array.isArray(value) && value.every((item) => typeof item === "string");
+}
+function parseAgentConfig(raw, source, path3) {
+  if (!raw || typeof raw !== "object") return null;
+  const obj = raw;
+  if (typeof obj.name !== "string" || obj.name.trim() === "") return null;
+  const cfg = {
+    name: obj.name.trim(),
+    source,
+    path: path3
+  };
+  if (typeof obj.description === "string") cfg.description = obj.description;
+  if (typeof obj.provider === "string") cfg.provider = obj.provider;
+  if (typeof obj.model === "string") cfg.model = obj.model;
+  if (typeof obj.system === "string") cfg.system = obj.system;
+  if (typeof obj.instructions === "string") cfg.instructions = obj.instructions;
+  if (typeof obj.systemInstructions === "string") cfg.systemInstructions = obj.systemInstructions;
+  if (isStringArray(obj.allowedTools)) cfg.allowedTools = obj.allowedTools;
+  if (isStringArray(obj.blockedTools)) cfg.blockedTools = obj.blockedTools;
+  if (typeof obj.permissionProfile === "string") cfg.permissionProfile = obj.permissionProfile;
+  if (typeof obj.maxToolRounds === "number" && Number.isFinite(obj.maxToolRounds)) cfg.maxToolRounds = obj.maxToolRounds;
+  if (typeof obj.contextPolicy === "string") cfg.contextPolicy = obj.contextPolicy;
+  return cfg;
+}
+function loadAgentDir(dir, source) {
+  if (!existsSync15(dir)) return [];
+  const out = [];
+  for (const file of readdirSync7(dir)) {
+    if (!file.endsWith(".json")) continue;
+    const path3 = join10(dir, file);
+    try {
+      const parsed = JSON.parse(readFileSync12(path3, "utf-8"));
+      const cfg = parseAgentConfig(parsed, source, path3);
+      if (cfg) out.push(cfg);
+    } catch {
+    }
+  }
+  return out;
+}
+function getAgentDirs(configDir, cwd = process.cwd()) {
+  return {
+    user: join10(configDir ?? join10(homedir6(), CONFIG_DIR_NAME), "agents"),
+    project: join10(cwd, CONFIG_DIR_NAME, "agents")
+  };
+}
+function listAgentConfigs(configDir, cwd = process.cwd()) {
+  const dirs = getAgentDirs(configDir, cwd);
+  const byName = /* @__PURE__ */ new Map();
+  for (const cfg of BUILTIN_AGENTS) byName.set(normalizeName(cfg.name), { ...cfg });
+  for (const cfg of loadAgentDir(dirs.user, "user")) byName.set(normalizeName(cfg.name), cfg);
+  for (const cfg of loadAgentDir(dirs.project, "project")) byName.set(normalizeName(cfg.name), cfg);
+  return [...byName.values()].sort((a, b) => a.name.localeCompare(b.name));
+}
+function resolveAgentConfig(name, configDir, cwd = process.cwd()) {
+  const target = normalizeName(name);
+  return listAgentConfigs(configDir, cwd).find((cfg) => normalizeName(cfg.name) === target);
+}
+function getAgentInstructions(agent) {
+  return agent.system ?? agent.systemInstructions ?? agent.instructions;
+}
+function getEffectiveAgentTools(agent) {
+  let allowed = new Set(SUBAGENT_ALLOWED_TOOLS);
+  if (agent.permissionProfile === "read-only") {
+    allowed = new Set([...allowed].filter((name) => READ_ONLY_TOOLS2.has(name)));
+  }
+  if (agent.allowedTools && agent.allowedTools.length > 0) {
+    const requested = new Set(agent.allowedTools);
+    allowed = new Set([...allowed].filter((name) => requested.has(name)));
+  }
+  if (agent.blockedTools && agent.blockedTools.length > 0) {
+    for (const name of agent.blockedTools) allowed.delete(name);
+  }
+  return allowed;
+}
+function getEffectiveMaxRounds(requestedMaxRounds, agent) {
+  const agentMax = agent.maxToolRounds && agent.maxToolRounds > 0 ? Math.round(agent.maxToolRounds) : SUBAGENT_MAX_ROUNDS_LIMIT;
+  return Math.min(requestedMaxRounds, agentMax, SUBAGENT_MAX_ROUNDS_LIMIT);
+}
+
+// src/agents/agent-runtime.ts
+var nextId = 1;
+var preferredAgentName = "worker";
+var runs = [];
+var MAX_RUNS = 50;
+function nowIso() {
+  return (/* @__PURE__ */ new Date()).toISOString();
+}
+function startAgentRun(input) {
+  const run = {
+    id: `agent-${nextId++}`,
+    agentName: input.agentName,
+    task: input.task,
+    status: "running",
+    startedAt: nowIso(),
+    toolNames: [],
+    agentIndex: input.agentIndex,
+    stopRequested: false
+  };
+  runs.unshift(run);
+  if (runs.length > MAX_RUNS) runs.splice(MAX_RUNS);
+  return run;
+}
+function recordAgentTool(runId, toolName) {
+  const run = runs.find((r) => r.id === runId);
+  if (!run) return;
+  if (!run.toolNames.includes(toolName)) run.toolNames.push(toolName);
+}
+function finishAgentRun(runId, status, summary, error) {
+  const run = runs.find((r) => r.id === runId);
+  if (!run) return;
+  run.status = status;
+  run.finishedAt = nowIso();
+  if (summary) run.summary = summary;
+  if (error) run.error = error;
+}
+function listAgentRuns() {
+  return runs.map((run) => ({ ...run, toolNames: [...run.toolNames] }));
+}
+function requestAgentStop(idOrAll) {
+  const target = idOrAll.trim().toLowerCase();
+  let count = 0;
+  for (const run of runs) {
+    if (run.status !== "running") continue;
+    if (target === "all" || run.id.toLowerCase() === target) {
+      run.stopRequested = true;
+      count++;
+    }
+  }
+  return count;
+}
+function isAgentStopRequested(runId) {
+  return runs.find((r) => r.id === runId)?.stopRequested ?? false;
+}
+function setPreferredAgentName(name) {
+  preferredAgentName = name.trim() || "worker";
+}
+function getPreferredAgentName() {
+  return preferredAgentName;
+}
+
 // src/tools/builtin/spawn-agent.ts
 var spawnAgentContext = {
   provider: null,
@@ -9490,18 +9889,27 @@ function agentPrefix(agentIndex) {
   return theme.dim(`  \u2503${agentIndex} `);
 }
 var SubAgentExecutor = class {
-  constructor(registry, agentIndex = null) {
+  constructor(registry, agentIndex = null, runId) {
     this.registry = registry;
+    this.runId = runId;
     this.prefix = agentPrefix(agentIndex);
   }
   round = 0;
   totalRounds = 0;
   prefix = PREFIX;
+  toolNames = [];
   setRoundInfo(current, total) {
     this.round = current;
     this.totalRounds = total;
   }
   async execute(call) {
+    if (this.runId && isAgentStopRequested(this.runId)) {
+      return {
+        callId: call.id,
+        content: "Sub-agent stop requested.",
+        isError: true
+      };
+    }
     const tool = this.registry.get(call.name);
     if (!tool) {
       return {
@@ -9522,6 +9930,8 @@ var SubAgentExecutor = class {
       };
     }
     this.printToolCall(call, dangerLevel);
+    if (!this.toolNames.includes(call.name)) this.toolNames.push(call.name);
+    if (this.runId) recordAgentTool(this.runId, call.name);
     try {
       const rawContent = await runTool(tool, call.arguments, call.name);
       const content = truncateOutput(rawContent, call.name);
@@ -9541,7 +9951,6 @@ var SubAgentExecutor = class {
     }
     return results;
   }
-  // ── 带前缀的终端输出 ──
   printPrefixed(text) {
     for (const line of text.split("\n")) {
       console.log(this.prefix + line);
@@ -9582,7 +9991,7 @@ var SubAgentExecutor = class {
     }
   }
 };
-function buildSubAgentSystemPrompt(task, parentSystemPrompt) {
+function buildSubAgentSystemPrompt(task, agent, parentSystemPrompt) {
   const parts = [];
   if (parentSystemPrompt) {
     parts.push(parentSystemPrompt);
@@ -9590,6 +9999,8 @@ function buildSubAgentSystemPrompt(task, parentSystemPrompt) {
   parts.push(
     `# Sub-Agent Mode
 
+**Agent Role**: ${agent.name}${agent.description ? ` \u2014 ${agent.description}` : ""}
+
 You are a focused sub-agent delegated by the main agent to complete a specific task.
 
 **Your Task**:
@@ -9603,13 +10014,19 @@ ${task}
 5. Destructive operations (rm -rf etc.) will be automatically blocked
 6. Be efficient, minimize unnecessary tool call rounds`
   );
+  const agentInstructions = getAgentInstructions(agent);
+  if (agentInstructions) {
+    parts.push(`# Agent Instructions
+
+${agentInstructions}`);
+  }
   return parts.join("\n\n---\n\n");
 }
-function printSubAgentHeader(task, maxRounds, agentIndex = null) {
+function printSubAgentHeader(task, maxRounds, agentName, agentIndex = null) {
   const prefix = agentPrefix(agentIndex);
   console.log();
   console.log(theme.dim("  \u250F\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501"));
-  const label = agentIndex !== null ? `\u{1F916} Sub-Agent #${agentIndex} Spawned` : "\u{1F916} Sub-Agent Spawned";
+  const label = agentIndex !== null ? `\u{1F916} Sub-Agent #${agentIndex} Spawned (${agentName})` : `\u{1F916} Sub-Agent Spawned (${agentName})`;
   console.log(prefix + theme.toolCall(label));
   console.log(
     prefix + theme.dim("Task: ") + (task.slice(0, 120) + (task.length > 120 ? "..." : ""))
@@ -9632,58 +10049,110 @@ function printSubAgentFooter(usage, agentIndex = null) {
   console.log(theme.dim("  \u2517\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501"));
   console.log();
 }
-async function runSubAgent(task, maxRounds, agentIndex, ctx) {
+function summarizeContent(content) {
+  const flat = content.replace(/\s+/g, " ").trim();
+  return flat.length > 500 ? flat.slice(0, 497) + "..." : flat;
+}
+function extractEvidence(content, toolNames) {
+  const evidence = /* @__PURE__ */ new Set();
+  if (toolNames.length > 0) evidence.add(`Tools: ${toolNames.join(", ")}`);
+  const matches = content.match(/(?:[\w.-]+[\\/])+[\w.-]+\.(?:ts|tsx|js|jsx|json|md|css|html|py|go|rs|yml|yaml)/g) ?? [];
+  for (const match of matches.slice(0, 8)) evidence.add(match);
+  return [...evidence].slice(0, 10);
+}
+function formatAgentResult(input) {
+  const lines = [input.title, "", `**Agent**: ${input.agentName}`];
+  if (input.task) lines.push(`**Task**: ${input.task}`);
+  lines.push("", "### Summary", input.summary || "(no summary)", "", "### Key Evidence");
+  if (input.evidence.length > 0) {
+    for (const item of input.evidence) lines.push(`- ${item}`);
+  } else {
+    lines.push("- No structured evidence extracted.");
+  }
+  lines.push("", "### Tools Used");
+  lines.push(input.toolNames.length > 0 ? input.toolNames.join(", ") : "No tools used.");
+  lines.push("", "### Full Result", input.content, "");
+  lines.push(`*Tokens: ${input.usage.inputTokens} in / ${input.usage.outputTokens} out*`);
+  return lines;
+}
+async function runSubAgent(task, maxRounds, agentIndex, ctx, agent) {
   if (!ctx.provider) {
     throw new ToolError("spawn_agent", "provider not initialized (context not injected)");
   }
+  const providerFromConfig = agent.provider && ctx.providers?.has(agent.provider) ? ctx.providers.get(agent.provider) : void 0;
+  const provider = providerFromConfig ?? ctx.provider;
+  const model = agent.model ?? (providerFromConfig?.info?.defaultModel ?? ctx.model);
+  const run = startAgentRun({
+    agentName: agent.name,
+    task,
+    agentIndex: agentIndex ?? void 0
+  });
+  const effectiveTools = getEffectiveAgentTools(agent);
   const subRegistry = new ToolRegistry();
   for (const tool of subRegistry.listAll()) {
-    if (!SUBAGENT_ALLOWED_TOOLS.has(tool.definition.name)) {
+    if (!SUBAGENT_ALLOWED_TOOLS.has(tool.definition.name) || !effectiveTools.has(tool.definition.name)) {
       subRegistry.unregister(tool.definition.name);
     }
   }
-  const subExecutor = new SubAgentExecutor(subRegistry, agentIndex);
+  const subExecutor = new SubAgentExecutor(subRegistry, agentIndex, run.id);
   const subMessages = [
     { role: "user", content: task, timestamp: /* @__PURE__ */ new Date() }
   ];
-  const subSystemPrompt = buildSubAgentSystemPrompt(task, ctx.systemPrompt);
+  const subSystemPrompt = buildSubAgentSystemPrompt(task, agent, ctx.systemPrompt);
   const toolDefs = subRegistry.getDefinitions();
-  printSubAgentHeader(task, maxRounds, agentIndex);
-  const loop = await runLeanAgentLoop({
-    provider: ctx.provider,
-    messages: subMessages,
-    model: ctx.model,
-    maxRounds,
-    chatParams: {
-      temperature: ctx.modelParams.temperature,
-      maxTokens: ctx.modelParams.maxTokens,
-      timeout: ctx.modelParams.timeout,
-      thinking: ctx.modelParams.thinking
-    },
-    executeTools: (calls) => subExecutor.executeAll(calls),
-    systemPromptForRound: () => subSystemPrompt,
-    toolDefsForRound: () => toolDefs,
-    onRoundStart: (round) => {
-      subExecutor.setRoundInfo(round + 1, maxRounds);
-      if (ctx.configManager) {
-        googleSearchContext.configManager = ctx.configManager;
-      }
-    },
-    onRoundsExhausted: () => `(Sub-agent reached maximum rounds (${maxRounds}) without producing a final response)`,
-    onError: (errMsg) => {
-      process.stderr.write(`
+  printSubAgentHeader(task, maxRounds, agent.name, agentIndex);
+  try {
+    const loop = await runLeanAgentLoop({
+      provider,
+      messages: subMessages,
+      model,
+      maxRounds,
+      chatParams: {
+        temperature: ctx.modelParams.temperature,
+        maxTokens: ctx.modelParams.maxTokens,
+        timeout: ctx.modelParams.timeout,
+        thinking: ctx.modelParams.thinking
+      },
+      executeTools: (calls) => subExecutor.executeAll(calls),
+      systemPromptForRound: () => subSystemPrompt,
+      toolDefsForRound: () => toolDefs,
+      onRoundStart: (round) => {
+        subExecutor.setRoundInfo(round + 1, maxRounds);
+        if (ctx.configManager) {
+          googleSearchContext.configManager = ctx.configManager;
+        }
+      },
+      onRoundsExhausted: () => `(Sub-agent reached maximum rounds (${maxRounds}) without producing a final response)`,
+      onError: (errMsg) => {
+        process.stderr.write(`
 [spawn_agent] Error in sub-agent loop: ${errMsg}
 `);
-      return `(Sub-agent error: ${errMsg})`;
-    }
-  });
-  printSubAgentFooter(loop.usage, agentIndex);
-  return { content: loop.content, usage: loop.usage };
+        return `(Sub-agent error: ${errMsg})`;
+      }
+    });
+    printSubAgentFooter(loop.usage, agentIndex);
+    const summary = summarizeContent(loop.content);
+    const evidence = extractEvidence(loop.content, subExecutor.toolNames);
+    const stopped = isAgentStopRequested(run.id);
+    finishAgentRun(run.id, stopped ? "stopped" : "ok", summary);
+    return {
+      content: loop.content,
+      usage: loop.usage,
+      toolNames: subExecutor.toolNames,
+      summary,
+      evidence,
+      agentName: agent.name
+    };
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    finishAgentRun(run.id, "error", void 0, message);
+    throw err;
+  }
 }
 var spawnAgentTool = {
   definition: {
     name: "spawn_agent",
-    description: "Delegate subtask(s) to independent sub-agent(s). Each sub-agent has its own conversation context and agentic tool-call loop, with access to bash, file read/write, edit, search, etc., but cannot interact with the user or spawn more sub-agents. Suitable for independently completable subtasks like: refactoring a module, writing tests, researching a technical approach, or implementing a specific feature. Pass `task` for a single sub-agent, or `tasks` (array) to run multiple sub-agents IN PARALLEL. Parallel mode is ideal for independent research/analysis tasks \u2014 network-bound API calls overlap while the main thread stays responsive. Returns a summary of each sub-agent result.",
+    description: "Delegate subtask(s) to independent named agents. Each sub-agent has its own conversation context and agentic tool-call loop, inherits the parent safety boundary, and can only narrow the sub-agent tool whitelist. Pass `agent` to select a built-in or configured role. Built-ins: explorer, worker, reviewer, security, tester. Pass `task` for a single sub-agent, or `tasks` (array) to run multiple sub-agents IN PARALLEL. Returns summary, key evidence, and tools used for each sub-agent result.",
     parameters: {
       task: {
         type: "string",
@@ -9701,7 +10170,12 @@ var spawnAgentTool = {
       },
       max_rounds: {
         type: "number",
-        description: "Max tool-call rounds per sub-agent (1-15, default 10). Applied to each sub-agent in parallel mode.",
+        description: "Max tool-call rounds per sub-agent (1-30, default 15). Agent config can only reduce this value.",
+        required: false
+      },
+      agent: {
+        type: "string",
+        description: "Agent role name from built-ins or ~/.aicli/agents / .aicli/agents JSON configs. Built-ins: explorer, worker, reviewer, security, tester.",
         required: false
       }
     },
@@ -9721,10 +10195,17 @@ var spawnAgentTool = {
       Math.max(Math.round(rawMaxRounds), 1),
       SUBAGENT_MAX_ROUNDS_LIMIT
     );
+    const requestedAgentName = typeof args["agent"] === "string" && args["agent"].trim() ? args["agent"].trim() : getPreferredAgentName();
     const ctx = spawnAgentContext;
     if (!ctx.provider) {
       throw new ToolError("spawn_agent", "provider not initialized (context not injected)");
     }
+    const agent = resolveAgentConfig(requestedAgentName, ctx.configManager?.getConfigDir());
+    if (!agent) {
+      const available = listAgentConfigs(ctx.configManager?.getConfigDir()).map((cfg) => cfg.name).join(", ");
+      throw new ToolError("spawn_agent", `unknown agent "${requestedAgentName}". Available agents: ${available}`);
+    }
+    const effectiveMaxRounds = getEffectiveMaxRounds(maxRounds, agent);
     const hookConfig = ctx.configManager?.get("hooks") ?? void 0;
     const hookConfigDir = ctx.configManager?.getConfigDir() ?? process.cwd();
     const taskCount = singleTask ? 1 : tasksArr.length;
@@ -9732,7 +10213,8 @@ var spawnAgentTool = {
       task: singleTask || void 0,
       tasks: tasksArr.length > 0 ? tasksArr : void 0,
       taskCount,
-      maxRounds
+      maxRounds: effectiveMaxRounds,
+      agent: agent.name
     };
     const startDecisions = runLifecycleHooks(hookConfig, "SubagentStart", hookPayload, hookConfigDir);
     const startDeny = startDecisions.find((d) => d.action === "deny");
@@ -9744,32 +10226,37 @@ var spawnAgentTool = {
     subAgentGuard.active = true;
     try {
       if (singleTask) {
-        const { content, usage } = await runSubAgent(singleTask, maxRounds, null, ctx);
+        const result = await runSubAgent(singleTask, effectiveMaxRounds, null, ctx, agent);
         subagentStatus = "ok";
-        return [
-          "## Sub-Agent Result",
-          "",
-          content,
-          "",
-          "---",
-          `Token usage: ${usage.inputTokens} input, ${usage.outputTokens} output`
-        ].join("\n");
+        return formatAgentResult({
+          title: "## Sub-Agent Result",
+          content: result.content,
+          usage: result.usage,
+          toolNames: result.toolNames,
+          summary: result.summary,
+          evidence: result.evidence,
+          agentName: result.agentName
+        }).join("\n");
       }
       console.log();
-      console.log(theme.toolCall(`\u{1F916} Spawning ${tasksArr.length} sub-agents in parallel...`));
+      console.log(theme.toolCall(`\u{1F916} Spawning ${tasksArr.length} sub-agents in parallel as ${agent.name}...`));
       const results = await Promise.all(
-        tasksArr.map((t, i) => runSubAgent(t, maxRounds, i + 1, ctx))
+        tasksArr.map((t, i) => runSubAgent(t, effectiveMaxRounds, i + 1, ctx, agent))
       );
       const totalIn = results.reduce((s, r) => s + r.usage.inputTokens, 0);
       const totalOut = results.reduce((s, r) => s + r.usage.outputTokens, 0);
       const lines = [`## Parallel Sub-Agent Results (${results.length} agents)`, ""];
       results.forEach((r, i) => {
-        lines.push(`### Sub-Agent #${i + 1}`);
-        lines.push(`**Task**: ${tasksArr[i].slice(0, 200)}${tasksArr[i].length > 200 ? "..." : ""}`);
-        lines.push("");
-        lines.push(r.content);
-        lines.push("");
-        lines.push(`*Tokens: ${r.usage.inputTokens} in / ${r.usage.outputTokens} out*`);
+        lines.push(...formatAgentResult({
+          title: `### Sub-Agent #${i + 1}`,
+          task: `${tasksArr[i].slice(0, 200)}${tasksArr[i].length > 200 ? "..." : ""}`,
+          content: r.content,
+          usage: r.usage,
+          toolNames: r.toolNames,
+          summary: r.summary,
+          evidence: r.evidence,
+          agentName: r.agentName
+        }));
         lines.push("");
       });
       lines.push("---");
@@ -10000,14 +10487,14 @@ var taskStopTool = {
 
 // src/tools/builtin/git-tools.ts
 import { execFileSync as execFileSync2 } from "child_process";
-import { existsSync as existsSync14 } from "fs";
-import { join as join9 } from "path";
+import { existsSync as existsSync16 } from "fs";
+import { join as join11 } from "path";
 function assertGitRepo(cwd) {
   let dir = cwd;
   const root = dir.split(/[\\/]/)[0] + (dir.includes("\\") ? "\\" : "/");
   while (dir && dir !== root) {
-    if (existsSync14(join9(dir, ".git"))) return;
-    const parent = join9(dir, "..");
+    if (existsSync16(join11(dir, ".git"))) return;
+    const parent = join11(dir, "..");
     if (parent === dir) break;
     dir = parent;
   }
@@ -10272,9 +10759,9 @@ ${commitOutput.trim()}`;
 };
 
 // src/tools/builtin/notebook-edit.ts
-import { readFileSync as readFileSync11, existsSync as existsSync15 } from "fs";
+import { readFileSync as readFileSync13, existsSync as existsSync17 } from "fs";
 import { writeFile } from "fs/promises";
-import { resolve as resolve5, extname as extname2 } from "path";
+import { resolve as resolve6, extname as extname2 } from "path";
 var notebookEditTool = {
   definition: {
     name: "notebook_edit",
@@ -10323,14 +10810,14 @@ var notebookEditTool = {
     if (!Number.isInteger(cellIndexRaw) || cellIndexRaw < 1) {
       throw new ToolError("notebook_edit", "cell_index must be a positive integer (1-based)");
     }
-    const absPath = resolve5(filePath);
+    const absPath = resolve6(filePath);
     if (extname2(absPath).toLowerCase() !== ".ipynb") {
       throw new ToolError("notebook_edit", "path must point to a .ipynb file");
     }
-    if (!existsSync15(absPath)) {
+    if (!existsSync17(absPath)) {
       throw new ToolError("notebook_edit", `Notebook not found: ${filePath}`);
     }
-    const raw = readFileSync11(absPath, "utf-8");
+    const raw = readFileSync13(absPath, "utf-8");
     const nb = parseNotebook(raw);
     const cellIdx0 = cellIndexRaw - 1;
     undoStack.push(absPath, `notebook_edit (${action}): ${filePath}`);
@@ -10747,8 +11234,8 @@ function estimateToolDefinitionTokens(def) {
 
 // src/tools/registry.ts
 import { pathToFileURL } from "url";
-import { existsSync as existsSync16, mkdirSync as mkdirSync8, readdirSync as readdirSync7 } from "fs";
-import { join as join10 } from "path";
+import { existsSync as existsSync18, mkdirSync as mkdirSync8, readdirSync as readdirSync8 } from "fs";
+import { join as join12 } from "path";
 var ToolRegistry = class {
   tools = /* @__PURE__ */ new Map();
   pluginToolNames = /* @__PURE__ */ new Set();
@@ -10909,7 +11396,7 @@ var ToolRegistry = class {
    * Returns the number of successfully loaded plugins.
    */
   async loadPlugins(pluginsDir, allowPlugins = false) {
-    if (!existsSync16(pluginsDir)) {
+    if (!existsSync18(pluginsDir)) {
       try {
         mkdirSync8(pluginsDir, { recursive: true });
       } catch {
@@ -10918,7 +11405,7 @@ var ToolRegistry = class {
     }
     let files;
     try {
-      files = readdirSync7(pluginsDir).filter((f) => f.endsWith(".js"));
+      files = readdirSync8(pluginsDir).filter((f) => f.endsWith(".js"));
     } catch {
       return 0;
     }
@@ -10935,12 +11422,12 @@ var ToolRegistry = class {
     process.stderr.write(
       `
 [plugins] \u26A0 Loading ${files.length} plugin(s) with FULL system privileges:
-` + files.map((f) => `  + ${join10(pluginsDir, f)}`).join("\n") + "\n\n"
+` + files.map((f) => `  + ${join12(pluginsDir, f)}`).join("\n") + "\n\n"
     );
     let loaded = 0;
     for (const file of files) {
       try {
-        const fileUrl = pathToFileURL(join10(pluginsDir, file)).href;
+        const fileUrl = pathToFileURL(join12(pluginsDir, file)).href;
         const mod = await import(fileUrl);
         const tool = mod.tool ?? mod.default?.tool ?? mod.default;
         if (!tool || typeof tool.execute !== "function" || !tool.definition?.name) {
@@ -11102,7 +11589,7 @@ var McpClient = class {
   // 内部方法：JSON-RPC 通信
   // ══════════════════════════════════════════════════════════════════
   sendRequest(method, params) {
-    return new Promise((resolve9, reject) => {
+    return new Promise((resolve10, reject) => {
       if (!this.process?.stdin?.writable) {
         return reject(new Error(`MCP server [${this.serverId}] stdin not writable`));
       }
@@ -11126,7 +11613,7 @@ var McpClient = class {
       this.pendingRequests.set(id, {
         resolve: (result) => {
           cleanup();
-          resolve9(result);
+          resolve10(result);
         },
         reject: (error) => {
           cleanup();
@@ -11203,13 +11690,13 @@ var McpClient = class {
   }
   /** Promise 超时包装 */
   withTimeout(promise, ms, label) {
-    return new Promise((resolve9, reject) => {
+    return new Promise((resolve10, reject) => {
       const timer = setTimeout(() => {
         reject(new Error(`MCP [${this.serverId}] ${label} timed out after ${ms}ms`));
       }, ms);
       promise.then((val) => {
         clearTimeout(timer);
-        resolve9(val);
+        resolve10(val);
       }).catch((err) => {
         clearTimeout(timer);
         reject(err);
@@ -11486,11 +11973,11 @@ var McpManager = class {
 };
 
 // src/skills/manager.ts
-import { existsSync as existsSync17, readdirSync as readdirSync8, mkdirSync as mkdirSync9, statSync as statSync7 } from "fs";
-import { join as join11 } from "path";
+import { existsSync as existsSync19, readdirSync as readdirSync9, mkdirSync as mkdirSync9, statSync as statSync7 } from "fs";
+import { join as join13 } from "path";
 
 // src/skills/types.ts
-import { readFileSync as readFileSync12 } from "fs";
+import { readFileSync as readFileSync14 } from "fs";
 import { basename as basename5 } from "path";
 function parseSimpleYaml(yaml) {
   const result = {};
@@ -11512,7 +11999,7 @@ function parseYamlArray(value) {
 function parseSkillFile(filePath) {
   let raw;
   try {
-    raw = readFileSync12(filePath, "utf-8");
+    raw = readFileSync14(filePath, "utf-8");
   } catch {
     return null;
   }
@@ -11555,7 +12042,7 @@ var SkillManager = class {
   /** 发现并加载 skillsDir 下所有 .md 文件，返回加载数量 */
   loadSkills() {
     this.skills.clear();
-    if (!existsSync17(this.skillsDir)) {
+    if (!existsSync19(this.skillsDir)) {
       try {
         mkdirSync9(this.skillsDir, { recursive: true });
       } catch {
@@ -11564,20 +12051,20 @@ var SkillManager = class {
     }
     let entries;
     try {
-      entries = readdirSync8(this.skillsDir);
+      entries = readdirSync9(this.skillsDir);
     } catch {
       return 0;
     }
     for (const entry of entries) {
       let filePath;
-      const fullPath = join11(this.skillsDir, entry);
+      const fullPath = join13(this.skillsDir, entry);
       if (entry.endsWith(".md")) {
         filePath = fullPath;
       } else {
         try {
           if (statSync7(fullPath).isDirectory()) {
-            const skillMd = join11(fullPath, "SKILL.md");
-            if (existsSync17(skillMd)) {
+            const skillMd = join13(fullPath, "SKILL.md");
+            if (existsSync19(skillMd)) {
               filePath = skillMd;
             } else {
               continue;
@@ -11642,7 +12129,7 @@ var SkillManager = class {
 // src/web/tool-executor-web.ts
 import { randomUUID as randomUUID2 } from "crypto";
 import { tmpdir as tmpdir2 } from "os";
-import { existsSync as existsSync18, readFileSync as readFileSync13 } from "fs";
+import { existsSync as existsSync20, readFileSync as readFileSync15 } from "fs";
 var ToolExecutorWeb = class _ToolExecutorWeb {
   constructor(registry, ws) {
     this.registry = registry;
@@ -11671,6 +12158,8 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
   confirming = false;
   /** Session-level auto-approve toggle (/yolo command) */
   sessionAutoApprove = false;
+  /** Session-level Auto Mode: rule-based low-risk auto approval. */
+  sessionAutoMode = false;
   /** Track tool start times for duration calculation */
   toolStartTimes = /* @__PURE__ */ new Map();
   /**
@@ -11710,33 +12199,33 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
   }
   /** Resolve a pending confirm from client response */
   resolveConfirm(requestId, approved) {
-    const resolve9 = this.pendingConfirms.get(requestId);
-    if (resolve9) {
+    const resolve10 = this.pendingConfirms.get(requestId);
+    if (resolve10) {
       this.clearPendingTimer(requestId);
       this.pendingConfirms.delete(requestId);
       this.confirming = false;
-      resolve9(approved);
+      resolve10(approved);
     }
   }
   /** Resolve a pending batch confirm from client response */
   resolveBatchConfirm(requestId, decision) {
-    const resolve9 = this.pendingBatchConfirms.get(requestId);
-    if (resolve9) {
+    const resolve10 = this.pendingBatchConfirms.get(requestId);
+    if (resolve10) {
       this.clearPendingTimer(requestId);
       this.pendingBatchConfirms.delete(requestId);
       this.confirming = false;
       if (decision === "all" || decision === "none") {
-        resolve9(decision);
+        resolve10(decision);
       } else {
-        resolve9(new Set(decision));
+        resolve10(new Set(decision));
       }
     }
   }
   /** Cancel all pending confirms (e.g., on disconnect) */
   cancelAll() {
-    for (const resolve9 of this.pendingConfirms.values()) resolve9(false);
+    for (const resolve10 of this.pendingConfirms.values()) resolve10(false);
     this.pendingConfirms.clear();
-    for (const resolve9 of this.pendingBatchConfirms.values()) resolve9("none");
+    for (const resolve10 of this.pendingBatchConfirms.values()) resolve10("none");
     this.pendingBatchConfirms.clear();
     this.confirming = false;
   }
@@ -11779,9 +12268,9 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
     if (call.name === "write_file") {
       const filePath = String(call.arguments["path"] ?? "");
       const newContent = String(call.arguments["content"] ?? "");
-      if (filePath && existsSync18(filePath)) {
+      if (filePath && existsSync20(filePath)) {
         try {
-          const old = readFileSync13(filePath, "utf-8");
+          const old = readFileSync15(filePath, "utf-8");
           return renderDiff(old, newContent, { filePath });
         } catch {
         }
@@ -11812,8 +12301,8 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
       diff: this.getDiffPreview(call)
     };
     this.send(msg);
-    return new Promise((resolve9) => {
-      this.pendingConfirms.set(requestId, resolve9);
+    return new Promise((resolve10) => {
+      this.pendingConfirms.set(requestId, resolve10);
       this.pendingTimers.set(requestId, setTimeout(() => {
         if (this.pendingConfirms.has(requestId)) {
           this.resolveConfirm(requestId, false);
@@ -11837,8 +12326,8 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
       files
     };
     this.send(msg);
-    return new Promise((resolve9) => {
-      this.pendingBatchConfirms.set(requestId, resolve9);
+    return new Promise((resolve10) => {
+      this.pendingBatchConfirms.set(requestId, resolve10);
       this.pendingTimers.set(requestId, setTimeout(() => {
         if (this.pendingBatchConfirms.has(requestId)) {
           this.resolveBatchConfirm(requestId, "none");
@@ -11948,6 +12437,35 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
       }
     }
     this.sendToolCallStart(call);
+    if (this.sessionAutoMode && networkPermission?.action !== "confirm") {
+      const classification = defaultActionClassifier.classify(call, dangerLevel, {
+        workspaceRoot: this.workspaceRoot,
+        tempDirs: [tmpdir2()]
+      });
+      if (classification.decision === "deny") {
+        recordRecentlyDeniedAutoAction(call, classification);
+        const rejectionMsg = `[Auto denied] ${classification.reason}. Do not retry without asking.`;
+        this.sendToolCallResult(call, rejectionMsg, true);
+        return { callId: call.id, content: rejectionMsg, isError: true };
+      }
+      if (classification.decision === "auto-approve") {
+        this.send({ type: "info", message: `\u26A1 Auto-approved (/auto: ${classification.ruleId})` });
+        try {
+          const rawContent = await runTool(tool, call.arguments, call.name);
+          const content = truncateOutput(rawContent, call.name);
+          this.sendToolCallResult(call, rawContent, false);
+          runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "ok" });
+          runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "ok" }, { configDir: this.hookConfigDir });
+          return { callId: call.id, content, isError: false };
+        } catch (err) {
+          const message = err instanceof Error ? err.message : String(err);
+          this.sendToolCallResult(call, message, true);
+          runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
+          runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "error", error: message }, { configDir: this.hookConfigDir });
+          return { callId: call.id, content: message, isError: true };
+        }
+      }
+    }
     if (this.sessionAutoApprove && dangerLevel === "write") {
       try {
         const rawContent = await runTool(tool, call.arguments, call.name);
@@ -12055,20 +12573,20 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
 };
 
 // src/core/system-prompt-builder.ts
-import { existsSync as existsSync20, readFileSync as readFileSync15 } from "fs";
-import { join as join13 } from "path";
+import { existsSync as existsSync22, readFileSync as readFileSync17 } from "fs";
+import { join as join15 } from "path";
 
 // src/repl/dev-state.ts
-import { existsSync as existsSync19, readFileSync as readFileSync14, unlinkSync as unlinkSync4, mkdirSync as mkdirSync10 } from "fs";
-import { join as join12 } from "path";
-import { homedir as homedir6 } from "os";
+import { existsSync as existsSync21, readFileSync as readFileSync16, unlinkSync as unlinkSync4, mkdirSync as mkdirSync10 } from "fs";
+import { join as join14 } from "path";
+import { homedir as homedir7 } from "os";
 function getDevStatePath() {
-  return join12(homedir6(), CONFIG_DIR_NAME, DEV_STATE_FILE_NAME);
+  return join14(homedir7(), CONFIG_DIR_NAME, DEV_STATE_FILE_NAME);
 }
 function loadDevState() {
   const path3 = getDevStatePath();
-  if (!existsSync19(path3)) return null;
-  const content = readFileSync14(path3, "utf-8").trim();
+  if (!existsSync21(path3)) return null;
+  const content = readFileSync16(path3, "utf-8").trim();
   return content || null;
 }
 
@@ -12126,9 +12644,9 @@ ${ctx.activeSkill.content}`);
   return { stable: stableParts.join("\n\n---\n\n"), volatile };
 }
 function loadMemoryContent(configDir) {
-  const memoryPath = join13(configDir, MEMORY_FILE_NAME);
-  if (!existsSync20(memoryPath)) return null;
-  let content = readFileSync15(memoryPath, "utf-8").trim();
+  const memoryPath = join15(configDir, MEMORY_FILE_NAME);
+  if (!existsSync22(memoryPath)) return null;
+  let content = readFileSync17(memoryPath, "utf-8").trim();
   if (!content) return null;
   if (content.length > MEMORY_MAX_CHARS) {
     content = content.slice(-MEMORY_MAX_CHARS);
@@ -12337,8 +12855,8 @@ function autoTrimSessionIfNeeded(session, sizeLimit = SESSION_SIZE_LIMIT) {
 }
 
 // src/core/context-files.ts
-import { existsSync as existsSync21, readFileSync as readFileSync16 } from "fs";
-import { join as join14, relative as relative3, resolve as resolve6 } from "path";
+import { existsSync as existsSync23, readFileSync as readFileSync18 } from "fs";
+import { join as join16, relative as relative3, resolve as resolve7 } from "path";
 function uniqueNonEmpty(values) {
   const seen = /* @__PURE__ */ new Set();
   const out = [];
@@ -12361,14 +12879,14 @@ function displayPath(filePath, cwd) {
   return filePath;
 }
 function isInsideOrEqual(parent, child) {
-  const rel = relative3(resolve6(parent), resolve6(child));
+  const rel = relative3(resolve7(parent), resolve7(child));
   return rel === "" || !!rel && !rel.startsWith("..") && !rel.startsWith("/") && !rel.startsWith("\\");
 }
 function readContextFile(level, filePath, cwd, maxBytes) {
   const name = filePath.split(/[\\/]/).pop() ?? filePath;
   const shown = displayPath(filePath, cwd);
   try {
-    const raw = readFileSync16(filePath);
+    const raw = readFileSync18(filePath);
     const byteCount = raw.byteLength;
     if (byteCount === 0) {
       return {
@@ -12415,8 +12933,8 @@ function readContextFile(level, filePath, cwd, maxBytes) {
 function findFirstContextFile(level, dir, cwd, candidates, maxBytes) {
   const skipped = [];
   for (const candidate of candidates) {
-    const filePath = join14(dir, candidate);
-    if (!existsSync21(filePath)) continue;
+    const filePath = join16(dir, candidate);
+    if (!existsSync23(filePath)) continue;
     const result = readContextFile(level, filePath, cwd, maxBytes);
     if (result.skipped) skipped.push(result.skipped);
     if (result.layer) return { layer: result.layer, skipped };
@@ -12424,7 +12942,7 @@ function findFirstContextFile(level, dir, cwd, candidates, maxBytes) {
   return { layer: null, skipped };
 }
 function loadContextFiles(options) {
-  const cwd = resolve6(options.cwd);
+  const cwd = resolve7(options.cwd);
   const maxBytes = options.maxBytes ?? CONTEXT_FILE_MAX_BYTES;
   const candidates = options.candidates ?? buildContextFileCandidates(options.fallbackFilenames);
   const skipped = [];
@@ -12432,7 +12950,7 @@ function loadContextFiles(options) {
     return { layers: [], mergedContent: "", skipped, totalChars: 0, totalBytes: 0, maxBytes, candidates };
   }
   if (options.setting && options.setting !== "auto") {
-    const filePath = resolve6(cwd, String(options.setting));
+    const filePath = resolve7(cwd, String(options.setting));
     if (!isInsideOrEqual(cwd, filePath)) {
       skipped.push({
         level: "single",
@@ -12443,7 +12961,7 @@ function loadContextFiles(options) {
       });
       return { layers: [], mergedContent: "", skipped, totalChars: 0, totalBytes: 0, maxBytes, candidates };
     }
-    if (!existsSync21(filePath)) {
+    if (!existsSync23(filePath)) {
       skipped.push({
         level: "single",
         filePath,
@@ -12476,7 +12994,7 @@ function loadContextFiles(options) {
     skipped.push(...result.skipped);
     if (result.layer) layers.push(result.layer);
   }
-  if (resolve6(options.cwd) !== resolve6(options.projectRoot)) {
+  if (resolve7(options.cwd) !== resolve7(options.projectRoot)) {
     const result = findFirstContextFile("local", options.cwd, cwd, candidates, maxBytes);
     skipped.push(...result.skipped);
     if (result.layer) layers.push(result.layer);
@@ -12494,13 +13012,13 @@ function loadContextFiles(options) {
 }
 
 // src/web/session-handler.ts
-import { existsSync as existsSync24, readFileSync as readFileSync18, writeFileSync as writeFileSync2, mkdirSync as mkdirSync11, readdirSync as readdirSync10, statSync as statSync9, createWriteStream } from "fs";
-import { join as join18, resolve as resolve7, dirname as dirname5 } from "path";
+import { existsSync as existsSync26, readFileSync as readFileSync20, writeFileSync as writeFileSync2, mkdirSync as mkdirSync11, readdirSync as readdirSync11, statSync as statSync9, createWriteStream } from "fs";
+import { join as join20, resolve as resolve8, dirname as dirname5 } from "path";
 
 // src/tools/git-context.ts
 import { execSync as execSync2 } from "child_process";
-import { existsSync as existsSync22 } from "fs";
-import { join as join15 } from "path";
+import { existsSync as existsSync24 } from "fs";
+import { join as join17 } from "path";
 function runGit2(cmd, cwd) {
   try {
     return execSync2(`git ${cmd}`, {
@@ -12517,7 +13035,7 @@ function getGitRoot(cwd = process.cwd()) {
   return runGit2("rev-parse --show-toplevel", cwd);
 }
 function getGitContext(cwd = process.cwd()) {
-  if (!existsSync22(join15(cwd, ".git"))) {
+  if (!existsSync24(join17(cwd, ".git"))) {
     const result = runGit2("rev-parse --git-dir", cwd);
     if (!result) return null;
   }
@@ -12646,8 +13164,8 @@ If no security issues found, state "\u2705 No security vulnerabilities detected"
 }
 
 // src/repl/commands/project-init.ts
-import { existsSync as existsSync23, readFileSync as readFileSync17, readdirSync as readdirSync9, statSync as statSync8 } from "fs";
-import { join as join16 } from "path";
+import { existsSync as existsSync25, readFileSync as readFileSync19, readdirSync as readdirSync10, statSync as statSync8 } from "fs";
+import { join as join18 } from "path";
 var SCAN_SKIP_DIRS = /* @__PURE__ */ new Set([
   "node_modules",
   ".git",
@@ -12683,7 +13201,7 @@ function scanDirTree(dir, maxDepth = 2, maxEntries = 80) {
     if (depth > maxDepth || count >= maxEntries) return;
     let entries;
     try {
-      entries = readdirSync9(d);
+      entries = readdirSync10(d);
     } catch {
       return;
     }
@@ -12691,11 +13209,11 @@ function scanDirTree(dir, maxDepth = 2, maxEntries = 80) {
     const sorted = filtered.sort((a, b) => {
       let aIsDir = false, bIsDir = false;
       try {
-        aIsDir = statSync8(join16(d, a)).isDirectory();
+        aIsDir = statSync8(join18(d, a)).isDirectory();
       } catch {
       }
       try {
-        bIsDir = statSync8(join16(d, b)).isDirectory();
+        bIsDir = statSync8(join18(d, b)).isDirectory();
       } catch {
       }
       if (aIsDir !== bIsDir) return aIsDir ? -1 : 1;
@@ -12703,7 +13221,7 @@ function scanDirTree(dir, maxDepth = 2, maxEntries = 80) {
     });
     for (let i = 0; i < sorted.length && count < maxEntries; i++) {
       const name = sorted[i];
-      const fullPath = join16(d, name);
+      const fullPath = join18(d, name);
       const isLast = i === sorted.length - 1;
       const connector = isLast ? "+-- " : "|-- ";
       let isDir;
@@ -12730,7 +13248,7 @@ function scanProject(cwd) {
     configFiles: [],
     directoryStructure: ""
   };
-  const check = (file) => existsSync23(join16(cwd, file));
+  const check = (file) => existsSync25(join18(cwd, file));
   const configCandidates = [
     "package.json",
     "tsconfig.json",
@@ -12757,7 +13275,7 @@ function scanProject(cwd) {
     info.type = "node";
     info.language = check("tsconfig.json") ? "TypeScript" : "JavaScript";
     try {
-      const pkg = JSON.parse(readFileSync17(join16(cwd, "package.json"), "utf-8"));
+      const pkg = JSON.parse(readFileSync19(join18(cwd, "package.json"), "utf-8"));
       const scripts = pkg.scripts ?? {};
       info.buildCommand = scripts.build ? "npm run build" : void 0;
       info.testCommand = scripts.test ? "npm test" : void 0;
@@ -13417,7 +13935,7 @@ function resolveRoleProviders(roles, lookup, defaultProvider, defaultModel, avai
 }
 
 // src/hub/persist.ts
-import { join as join17 } from "path";
+import { join as join19 } from "path";
 function discussionToMessages(state2) {
   const out = [];
   const t0 = state2.messages[0]?.timestamp ?? /* @__PURE__ */ new Date();
@@ -13455,7 +13973,7 @@ async function persistDiscussion(state2, config, defaultProvider, defaultModel)
   session.title = `[Hub] ${state2.topic.slice(0, 48)}`.replace(/\n/g, " ");
   session.titleAiGenerated = true;
   await sm.save();
-  return { id: session.id, path: join17(config.getHistoryDir(), `${session.id}.json`) };
+  return { id: session.id, path: join19(config.getHistoryDir(), `${session.id}.json`) };
 }
 
 // src/web/session-handler.ts
@@ -13615,7 +14133,19 @@ var SessionHandler = class {
       costUsd,
       providers: providerList,
       branches,
-      activeBranchId: sess?.activeBranchId ?? "main"
+      activeBranchId: sess?.activeBranchId ?? "main",
+      agents: listAgentRuns().slice(0, 20).map((run) => ({
+        id: run.id,
+        agentName: run.agentName,
+        task: run.task,
+        status: run.status,
+        startedAt: run.startedAt,
+        finishedAt: run.finishedAt,
+        summary: run.summary,
+        error: run.error,
+        toolNames: run.toolNames,
+        agentIndex: run.agentIndex
+      }))
     });
   }
   async handleMessage(raw) {
@@ -13639,10 +14169,10 @@ var SessionHandler = class {
         return;
       }
       case "ask_user_response": {
-        const resolve9 = this.pendingAskUser.get(msg.requestId);
-        if (resolve9) {
+        const resolve10 = this.pendingAskUser.get(msg.requestId);
+        if (resolve10) {
           this.pendingAskUser.delete(msg.requestId);
-          resolve9(msg.answer);
+          resolve10(msg.answer);
         }
         return;
       }
@@ -13653,10 +14183,10 @@ var SessionHandler = class {
       case "memory_rebuild":
         return this.handleMemoryRebuild(Boolean(msg.full));
       case "auto_pause_response": {
-        const resolve9 = this.pendingAutoPause.get(msg.requestId);
-        if (resolve9) {
+        const resolve10 = this.pendingAutoPause.get(msg.requestId);
+        if (resolve10) {
           this.pendingAutoPause.delete(msg.requestId);
-          resolve9({ action: msg.action, message: msg.message });
+          resolve10({ action: msg.action, message: msg.message });
         }
         return;
       }
@@ -13671,10 +14201,10 @@ var SessionHandler = class {
         this.hubOrchestrator?.abort();
         return;
       case "hub_steer": {
-        const resolve9 = this.pendingHubReview.get(msg.requestId);
-        if (resolve9) {
+        const resolve10 = this.pendingHubReview.get(msg.requestId);
+        if (resolve10) {
           this.pendingHubReview.delete(msg.requestId);
-          resolve9({ action: msg.action, message: msg.message });
+          resolve10({ action: msg.action, message: msg.message });
         }
         return;
       }
@@ -13687,9 +14217,9 @@ var SessionHandler = class {
     runLifecycleHooks(this.config.get("hooks") ?? void 0, "Stop", { sessionId: this.sessions.current?.id }, { configDir: this.config.getConfigDir() });
     this.toolExecutor.cancelAll();
     if (this.abortController) this.abortController.abort();
-    for (const resolve9 of this.pendingAskUser.values()) resolve9(null);
+    for (const resolve10 of this.pendingAskUser.values()) resolve10(null);
     this.pendingAskUser.clear();
-    for (const resolve9 of this.pendingAutoPause.values()) resolve9({ action: "stop" });
+    for (const resolve10 of this.pendingAutoPause.values()) resolve10({ action: "stop" });
     this.pendingAutoPause.clear();
     this.saveIfNeeded();
   }
@@ -13823,9 +14353,9 @@ var SessionHandler = class {
     this.hubOrchestrator = orchestrator;
     orchestrator.onEvent = (event) => this.send({ type: "hub_event", event });
     if (config.humanSteer) {
-      orchestrator.onRoundReview = ({ round, maxRounds }) => new Promise((resolve9) => {
+      orchestrator.onRoundReview = ({ round, maxRounds }) => new Promise((resolve10) => {
         const requestId = `hubrev_${Date.now()}_${Math.random().toString(36).slice(2, 8)}`;
-        this.pendingHubReview.set(requestId, resolve9);
+        this.pendingHubReview.set(requestId, resolve10);
         this.send({ type: "hub_review", requestId, round, maxRounds });
       });
     }
@@ -14092,6 +14622,7 @@ Details: ${errMsg.split("\n")[0]}
 ${systemPromptVolatile}` : systemPrompt;
           spawnAgentContext.modelParams = modelParams;
           spawnAgentContext.configManager = this.config;
+          spawnAgentContext.providers = this.providers;
           ToolExecutor.currentMessageIndex = this.sessions.current?.messages.length ?? 0;
           return this.toolExecutor.executeAll(toolCalls);
         },
@@ -14182,8 +14713,8 @@ Try: /compact to reduce context, /clear to reset, or switch to a larger-context
         onMcpToolUsed: (name) => this.usedMcpToolNames.add(name),
         requestAutoPause: async ({ effectiveRound, maxToolRounds: totalRounds, toolSummary }) => {
           const requestId = `pause_${Date.now()}_${Math.random().toString(36).slice(2, 8)}`;
-          const pauseResp = await new Promise((resolve9) => {
-            this.pendingAutoPause.set(requestId, resolve9);
+          const pauseResp = await new Promise((resolve10) => {
+            this.pendingAutoPause.set(requestId, resolve10);
             this.send({
               type: "auto_pause_request",
               requestId,
@@ -14362,8 +14893,8 @@ ${summaryContent}`,
         }
         if (chunk.done) break;
       }
-      await new Promise((resolve9, reject) => {
-        fileStream.end((err) => err ? reject(err) : resolve9());
+      await new Promise((resolve10, reject) => {
+        fileStream.end((err) => err ? reject(err) : resolve10());
       });
       const verdict = evaluateTeeContent(fullContent, saveToFile, priorContent);
       if (verdict.kind === "reject") {
@@ -14389,7 +14920,7 @@ ${summaryContent}`,
     } catch (err) {
       if (fileStream) {
         try {
-          await new Promise((resolve9) => fileStream.end(() => resolve9()));
+          await new Promise((resolve10) => fileStream.end(() => resolve10()));
         } catch {
         }
       }
@@ -14686,6 +15217,7 @@ Tokens: in=${this.sessionTokenUsage.inputTokens} out=${this.sessionTokenUsage.ou
             "  /export [md|json]    \u2014 Export conversation",
             "  /skill [name|off|list|reload] \u2014 Manage agent skills",
             "  /memory [show|add|clear] \u2014 Persistent memory management",
+            "  /agent list|switch|stop|summary \u2014 Manage named sub-agents",
             "  /yolo [on|off]       \u2014 Toggle auto-approve (skip confirmations)",
             "  /search <keyword>    \u2014 Search across all session histories",
             "  /undo [list|<n>]     \u2014 Undo file operations",
@@ -14818,7 +15350,108 @@ ${activated.meta.description || ""}` });
         }
         break;
       }
+      case "agent": {
+        const sub = args[0]?.toLowerCase() ?? "summary";
+        if (sub === "list") {
+          const agents = listAgentConfigs(this.config.getConfigDir());
+          const lines = [`Agents (${agents.length})`, ""];
+          for (const agent of agents) {
+            const active = agent.name === getPreferredAgentName() ? " *" : "  ";
+            const model = [agent.provider, agent.model].filter(Boolean).join("/") || "inherit";
+            lines.push(`${active} ${agent.name} [${agent.source ?? "builtin"}] \u2014 ${agent.description ?? ""}`);
+            lines.push(`    model: ${model} \xB7 permission: ${agent.permissionProfile ?? "workspace-write"} \xB7 maxRounds: ${agent.maxToolRounds ?? "inherit"}`);
+          }
+          lines.push("", "Config dirs: ~/.aicli/agents/ and .aicli/agents/");
+          this.send({ type: "info", message: lines.join("\n") });
+          break;
+        }
+        if (sub === "switch") {
+          const name2 = args[1];
+          if (!name2) {
+            this.send({ type: "error", message: "Usage: /agent switch <name>" });
+            break;
+          }
+          const agent = resolveAgentConfig(name2, this.config.getConfigDir());
+          if (!agent) {
+            const available = listAgentConfigs(this.config.getConfigDir()).map((a) => a.name).join(", ");
+            this.send({ type: "error", message: `Unknown agent: ${name2}
+Available: ${available}` });
+            break;
+          }
+          setPreferredAgentName(agent.name);
+          this.send({ type: "info", message: `Preferred spawn_agent role: ${agent.name}` });
+          this.sendStatus();
+          break;
+        }
+        if (sub === "stop") {
+          const target = args[1] ?? "all";
+          const count = requestAgentStop(target);
+          this.send({ type: "info", message: count > 0 ? `Stop requested for ${count} running agent(s).` : "No matching running agents." });
+          this.sendStatus();
+          break;
+        }
+        if (sub === "summary") {
+          const runs2 = listAgentRuns();
+          if (runs2.length === 0) {
+            this.send({ type: "info", message: "No sub-agent runs yet." });
+            break;
+          }
+          const lines = [`Recent agent runs (${runs2.length})`, ""];
+          for (const run of runs2.slice(0, 20)) {
+            lines.push(`${run.id} ${run.status} ${run.agentName} ${run.startedAt}`);
+            lines.push(`  task: ${run.task.slice(0, 120)}${run.task.length > 120 ? "..." : ""}`);
+            if (run.toolNames.length > 0) lines.push(`  tools: ${run.toolNames.join(", ")}`);
+            if (run.summary) lines.push(`  summary: ${run.summary.slice(0, 180)}${run.summary.length > 180 ? "..." : ""}`);
+            if (run.error) lines.push(`  error: ${run.error}`);
+          }
+          this.send({ type: "info", message: lines.join("\n") });
+          break;
+        }
+        this.send({ type: "error", message: "Usage: /agent list|switch <name>|stop <id|all>|summary" });
+        break;
+      }
       // ── /yolo ──────────────────────────────────────────────────────
+      case "auto": {
+        const sub = args[0]?.toLowerCase() ?? "status";
+        if (sub === "on") {
+          this.toolExecutor.sessionAutoMode = true;
+          this.send({ type: "info", message: "\u26A1 Auto Mode ON \u2014 low-risk actions may auto-run; high-risk actions still confirm or deny. Auto Mode is session-scoped." });
+        } else if (sub === "off") {
+          this.toolExecutor.sessionAutoMode = false;
+          this.send({ type: "info", message: "Auto Mode disabled." });
+        } else if (sub === "status") {
+          this.send({ type: "info", message: `Auto Mode: ${this.toolExecutor.sessionAutoMode ? "on" : "off"}
+Scope: current session only
+Denied: /permissions recently-denied` });
+        } else {
+          this.send({ type: "error", message: "Usage: /auto [on|off|status]" });
+        }
+        this.sendStatus();
+        break;
+      }
+      case "permissions": {
+        const sub = args[0]?.toLowerCase() ?? "recently-denied";
+        if (sub === "recently-denied") {
+          const rows = getRecentlyDeniedAutoActions();
+          if (rows.length === 0) {
+            this.send({ type: "info", message: "No recently denied Auto Mode actions." });
+          } else {
+            const lines = [`Recently denied Auto Mode actions (${rows.length})`, ""];
+            for (const r of rows.slice(0, 20)) {
+              lines.push(`- ${r.timestamp} ${r.tool} ${r.ruleId}`);
+              lines.push(`  ${r.reason}`);
+              lines.push(`  ${r.argsPreview}`);
+            }
+            this.send({ type: "info", message: lines.join("\n") });
+          }
+        } else if (sub === "clear-denied") {
+          clearRecentlyDeniedAutoActions();
+          this.send({ type: "info", message: "Cleared recently denied Auto Mode actions." });
+        } else {
+          this.send({ type: "error", message: "Usage: /permissions recently-denied|clear-denied" });
+        }
+        break;
+      }
       case "yolo": {
         const sub = args[0]?.toLowerCase();
         if (sub === "off") {
@@ -14919,9 +15552,9 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
         let modifiedFiles = 0;
         const diffLines2 = [];
         for (const [filePath, { earliest }] of fileMap) {
-          const currentContent = existsSync24(filePath) ? (() => {
+          const currentContent = existsSync26(filePath) ? (() => {
             try {
-              return readFileSync18(filePath, "utf-8");
+              return readFileSync20(filePath, "utf-8");
             } catch {
               return null;
             }
@@ -15022,7 +15655,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
           break;
         }
         const sub = args[0]?.toLowerCase();
-        const resolve9 = (ref) => {
+        const resolve10 = (ref) => {
           const r = session.resolveBranchRef(ref);
           if (r.ok) return r.id;
           if (r.reason === "ambiguous") {
@@ -15076,7 +15709,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
             this.send({ type: "error", message: "Usage: /branch switch <id|title>" });
             break;
           }
-          const id = resolve9(ref);
+          const id = resolve10(ref);
           if (!id) break;
           const ok = session.switchBranch(id);
           if (ok) {
@@ -15096,7 +15729,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
             this.send({ type: "error", message: "Usage: /branch delete <id|title>" });
             break;
           }
-          const id = resolve9(ref);
+          const id = resolve10(ref);
           if (!id) break;
           const ok = session.deleteBranch(id);
           if (ok) {
@@ -15115,7 +15748,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
             this.send({ type: "error", message: "Usage: /branch rename <id|title> <new title>" });
             break;
           }
-          const id = resolve9(ref);
+          const id = resolve10(ref);
           if (!id) break;
           const ok = session.renameBranch(id, title);
           if (ok) {
@@ -15133,7 +15766,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
             this.send({ type: "error", message: "Usage: /branch diff <id|title>" });
             break;
           }
-          const id = resolve9(ref);
+          const id = resolve10(ref);
           if (!id) break;
           const d = session.diffBranches(id);
           if (!d) {
@@ -15175,7 +15808,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
             this.send({ type: "error", message: "Usage: /branch cherry-pick <source-id|title> <msg-index>" });
             break;
           }
-          const id = resolve9(ref);
+          const id = resolve10(ref);
           if (!id) break;
           const idx = parseInt(idxStr, 10);
           if (Number.isNaN(idx)) {
@@ -15437,7 +16070,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
       case "test": {
         this.send({ type: "info", message: "\u{1F9EA} Running tests..." });
         try {
-          const { executeTests } = await import("./run-tests-D7YBY4XB.js");
+          const { executeTests } = await import("./run-tests-R6FL6CQ3.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {
@@ -15454,9 +16087,9 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
       // ── /init ───────────────────────────────────────────────────────
       case "init": {
         const cwd = process.cwd();
-        const targetPath = join18(cwd, "AICLI.md");
+        const targetPath = join20(cwd, "AICLI.md");
         const force = args.includes("--force");
-        if (existsSync24(targetPath) && !force) {
+        if (existsSync26(targetPath) && !force) {
           this.send({ type: "info", message: `AICLI.md already exists at ${targetPath}
 Use /init --force to overwrite.` });
           break;
@@ -15489,7 +16122,7 @@ Use /context reload to load it.` });
         lines.push("**Config Files:**");
         lines.push(`  Dir: ${configDir}`);
         const checkFile = (label, filePath) => {
-          const exists = existsSync24(filePath);
+          const exists = existsSync26(filePath);
           let extra = "";
           if (exists) {
             try {
@@ -15499,9 +16132,9 @@ Use /context reload to load it.` });
           }
           lines.push(`  ${exists ? "\u2713" : "\u2013"}  ${label.padEnd(14)} ${exists ? filePath + extra : "(not found)"}`);
         };
-        checkFile("config.json", join18(configDir, "config.json"));
-        checkFile("memory.md", join18(configDir, MEMORY_FILE_NAME));
-        checkFile("dev-state.md", join18(configDir, "dev-state.md"));
+        checkFile("config.json", join20(configDir, "config.json"));
+        checkFile("memory.md", join20(configDir, MEMORY_FILE_NAME));
+        checkFile("dev-state.md", join20(configDir, "dev-state.md"));
         lines.push("");
         if (this.mcpManager) {
           lines.push("**MCP Servers:**");
@@ -15688,8 +16321,8 @@ Use /add-dir remove to clear.` : "No directories added.\nUsage: /add-dir <path>
           this.send({ type: "info", message: "\u2713 All added directories removed from context." });
           break;
         }
-        const dirPath = resolve7(sub);
-        if (!existsSync24(dirPath)) {
+        const dirPath = resolve8(sub);
+        if (!existsSync26(dirPath)) {
           this.send({ type: "error", message: `Directory not found: ${dirPath}` });
           break;
         }
@@ -15705,14 +16338,14 @@ It will be included in AI context for subsequent messages.` });
       // ── /commands ───────────────────────────────────────────────────
       case "commands": {
         const configDir = this.config.getConfigDir();
-        const commandsDir = join18(configDir, CUSTOM_COMMANDS_DIR_NAME);
-        if (!existsSync24(commandsDir)) {
+        const commandsDir = join20(configDir, CUSTOM_COMMANDS_DIR_NAME);
+        if (!existsSync26(commandsDir)) {
           this.send({ type: "info", message: `No custom commands directory.
 Create: ${commandsDir}/ with .md files.` });
           break;
         }
         try {
-          const files = readdirSync10(commandsDir).filter((f) => f.endsWith(".md"));
+          const files = readdirSync11(commandsDir).filter((f) => f.endsWith(".md"));
           if (files.length === 0) {
             this.send({ type: "info", message: `No custom commands found in ${commandsDir}
 Add .md files to create commands.` });
@@ -15732,7 +16365,7 @@ Add .md files to create commands.` });
       // ── /plugins ────────────────────────────────────────────────────
       case "plugins": {
         const configDir = this.config.getConfigDir();
-        const pluginsDir = join18(configDir, PLUGINS_DIR_NAME);
+        const pluginsDir = join20(configDir, PLUGINS_DIR_NAME);
         const pluginTools = this.toolRegistry.listPluginTools();
         const lines = [`\u{1F50C} **Plugins:**`, `Dir: ${pluginsDir}`, ""];
         if (pluginTools.length === 0) {
@@ -15929,11 +16562,11 @@ Add .md files to create commands.` });
   }
   memoryShow() {
     const configDir = this.config.getConfigDir();
-    const memPath = join18(configDir, MEMORY_FILE_NAME);
+    const memPath = join20(configDir, MEMORY_FILE_NAME);
     let content = "";
     try {
-      if (existsSync24(memPath)) {
-        content = readFileSync18(memPath, "utf-8");
+      if (existsSync26(memPath)) {
+        content = readFileSync20(memPath, "utf-8");
       }
     } catch (err) {
       process.stderr.write(`[web] Failed to read memory file: ${err instanceof Error ? err.message : err}
@@ -15947,11 +16580,11 @@ Add .md files to create commands.` });
   }
   memoryAdd(text) {
     const configDir = this.config.getConfigDir();
-    const memPath = join18(configDir, MEMORY_FILE_NAME);
+    const memPath = join20(configDir, MEMORY_FILE_NAME);
     try {
       mkdirSync11(configDir, { recursive: true });
       const timestamp = (/* @__PURE__ */ new Date()).toISOString().slice(0, 19).replace("T", " ");
-      const previous = existsSync24(memPath) ? readFileSync18(memPath, "utf-8") : "";
+      const previous = existsSync26(memPath) ? readFileSync20(memPath, "utf-8") : "";
       const entry = `
 - [${timestamp}] ${text}
 `;
@@ -15963,7 +16596,7 @@ Add .md files to create commands.` });
   }
   memoryClear() {
     const configDir = this.config.getConfigDir();
-    const memPath = join18(configDir, MEMORY_FILE_NAME);
+    const memPath = join20(configDir, MEMORY_FILE_NAME);
     try {
       atomicWriteFileSync(memPath, "");
       this.send({ type: "info", message: "\u{1F5D1}\uFE0F Persistent memory cleared." });
@@ -16197,8 +16830,8 @@ async function setupProxy(configProxy) {
 }
 
 // src/web/auth.ts
-import { existsSync as existsSync25, readFileSync as readFileSync19, writeFileSync as writeFileSync3, mkdirSync as mkdirSync12, readdirSync as readdirSync11, copyFileSync } from "fs";
-import { join as join19 } from "path";
+import { existsSync as existsSync27, readFileSync as readFileSync21, writeFileSync as writeFileSync3, mkdirSync as mkdirSync12, readdirSync as readdirSync12, copyFileSync } from "fs";
+import { join as join21 } from "path";
 import { createHmac, randomBytes, timingSafeEqual, pbkdf2Sync } from "crypto";
 var USERS_FILE = "users.json";
 var TOKEN_EXPIRY_HOURS = 24;
@@ -16213,7 +16846,7 @@ var AuthManager = class {
   db;
   constructor(baseDir) {
     this.baseDir = baseDir;
-    this.usersFile = join19(baseDir, USERS_FILE);
+    this.usersFile = join21(baseDir, USERS_FILE);
     this.db = this.loadOrCreate();
   }
   // ── Public API ─────────────────────────────────────────────────
@@ -16242,9 +16875,9 @@ var AuthManager = class {
     }
     const salt = randomBytes(16).toString("hex");
     const passwordHash = this.hashPassword(password, salt);
-    const dataDir = join19(USERS_DIR, username);
-    const fullDataDir = join19(this.baseDir, dataDir);
-    mkdirSync12(join19(fullDataDir, "history"), { recursive: true });
+    const dataDir = join21(USERS_DIR, username);
+    const fullDataDir = join21(this.baseDir, dataDir);
+    mkdirSync12(join21(fullDataDir, "history"), { recursive: true });
     const user = {
       username,
       passwordHash,
@@ -16359,7 +16992,7 @@ var AuthManager = class {
   getUserDataDir(username) {
     const user = this.db.users.find((u) => u.username === username);
     if (!user) throw new Error(`User not found: ${username}`);
-    return join19(this.baseDir, user.dataDir);
+    return join21(this.baseDir, user.dataDir);
   }
   /** List all usernames */
   listUsers() {
@@ -16395,30 +17028,30 @@ var AuthManager = class {
     const err = this.register(username, password);
     if (err) return err;
     const userDir = this.getUserDataDir(username);
-    const globalConfig = join19(this.baseDir, "config.json");
-    if (existsSync25(globalConfig)) {
+    const globalConfig = join21(this.baseDir, "config.json");
+    if (existsSync27(globalConfig)) {
       try {
-        const content = readFileSync19(globalConfig, "utf-8");
-        writeFileSync3(join19(userDir, "config.json"), content, "utf-8");
+        const content = readFileSync21(globalConfig, "utf-8");
+        writeFileSync3(join21(userDir, "config.json"), content, "utf-8");
       } catch {
       }
     }
-    const globalMemory = join19(this.baseDir, "memory.md");
-    if (existsSync25(globalMemory)) {
+    const globalMemory = join21(this.baseDir, "memory.md");
+    if (existsSync27(globalMemory)) {
       try {
-        const content = readFileSync19(globalMemory, "utf-8");
-        writeFileSync3(join19(userDir, "memory.md"), content, "utf-8");
+        const content = readFileSync21(globalMemory, "utf-8");
+        writeFileSync3(join21(userDir, "memory.md"), content, "utf-8");
       } catch {
       }
     }
-    const globalHistory = join19(this.baseDir, "history");
-    if (existsSync25(globalHistory)) {
+    const globalHistory = join21(this.baseDir, "history");
+    if (existsSync27(globalHistory)) {
       try {
-        const files = readdirSync11(globalHistory).filter((f) => f.endsWith(".json"));
-        const userHistory = join19(userDir, "history");
+        const files = readdirSync12(globalHistory).filter((f) => f.endsWith(".json"));
+        const userHistory = join21(userDir, "history");
         for (const f of files) {
           try {
-            copyFileSync(join19(globalHistory, f), join19(userHistory, f));
+            copyFileSync(join21(globalHistory, f), join21(userHistory, f));
           } catch {
           }
         }
@@ -16429,9 +17062,9 @@ var AuthManager = class {
   }
   // ── Private methods ────────────────────────────────────────────
   loadOrCreate() {
-    if (existsSync25(this.usersFile)) {
+    if (existsSync27(this.usersFile)) {
       try {
-        return JSON.parse(readFileSync19(this.usersFile, "utf-8"));
+        return JSON.parse(readFileSync21(this.usersFile, "utf-8"));
       } catch {
       }
     }
@@ -16483,7 +17116,7 @@ function getModuleDir() {
     }
   } catch {
   }
-  return resolve8(".");
+  return resolve9(".");
 }
 async function startWebServer(options = {}) {
   const port = options.port ?? 3e3;
@@ -16548,8 +17181,8 @@ async function startWebServer(options = {}) {
     }
   }
   let skillManager = null;
-  const skillsDir = join20(config.getConfigDir(), SKILLS_DIR_NAME);
-  if (existsSync26(skillsDir)) {
+  const skillsDir = join22(config.getConfigDir(), SKILLS_DIR_NAME);
+  if (existsSync28(skillsDir)) {
     skillManager = new SkillManager(skillsDir, config.get("ui").skillSizeWarn);
     skillManager.loadSkills();
     const count = skillManager.listSkills().length;
@@ -16620,18 +17253,18 @@ async function startWebServer(options = {}) {
     next();
   };
   const moduleDir = getModuleDir();
-  let clientDir = join20(moduleDir, "web", "client");
-  if (!existsSync26(clientDir)) {
-    clientDir = join20(moduleDir, "client");
+  let clientDir = join22(moduleDir, "web", "client");
+  if (!existsSync28(clientDir)) {
+    clientDir = join22(moduleDir, "client");
   }
-  if (!existsSync26(clientDir)) {
-    clientDir = join20(moduleDir, "..", "..", "src", "web", "client");
+  if (!existsSync28(clientDir)) {
+    clientDir = join22(moduleDir, "..", "..", "src", "web", "client");
   }
-  if (!existsSync26(clientDir)) {
-    clientDir = join20(process.cwd(), "src", "web", "client");
+  if (!existsSync28(clientDir)) {
+    clientDir = join22(process.cwd(), "src", "web", "client");
   }
   console.log(`   Static files: ${clientDir}`);
-  app.use("/vendor", express.static(join20(clientDir, "vendor"), { maxAge: "1y", immutable: true }));
+  app.use("/vendor", express.static(join22(clientDir, "vendor"), { maxAge: "1y", immutable: true }));
   app.use(express.static(clientDir));
   app.get("/api/status", (_req, res) => {
     res.json({
@@ -16698,10 +17331,10 @@ async function startWebServer(options = {}) {
   app.get("/api/files", requireAuth, (req, res) => {
     const cwd = process.cwd();
     const prefix = req.query.prefix || "";
-    const targetDir = join20(cwd, prefix);
+    const targetDir = join22(cwd, prefix);
     try {
-      const canonicalTarget = realpathSync(resolve8(targetDir));
-      const canonicalCwd = realpathSync(resolve8(cwd));
+      const canonicalTarget = realpathSync(resolve9(targetDir));
+      const canonicalCwd = realpathSync(resolve9(cwd));
       if (!canonicalTarget.startsWith(canonicalCwd + sep3) && canonicalTarget !== canonicalCwd) {
         res.json({ files: [] });
         return;
@@ -16712,10 +17345,10 @@ async function startWebServer(options = {}) {
     }
     try {
       const SKIP = /* @__PURE__ */ new Set(["node_modules", ".git", "dist", "dist-cjs", "release", "__pycache__", ".next", ".nuxt", "coverage", ".cache"]);
-      const entries = readdirSync12(targetDir, { withFileTypes: true });
+      const entries = readdirSync13(targetDir, { withFileTypes: true });
       const files = entries.filter((e) => !SKIP.has(e.name) && !e.name.startsWith(".")).slice(0, 50).map((e) => ({
         name: e.name,
-        path: relative4(cwd, join20(targetDir, e.name)).replace(/\\/g, "/"),
+        path: relative4(cwd, join22(targetDir, e.name)).replace(/\\/g, "/"),
         isDir: e.isDirectory()
       }));
       res.json({ files });
@@ -16751,8 +17384,8 @@ async function startWebServer(options = {}) {
     try {
       const authUser = req._authUser;
       const histDir = authUser ? getUserShared(authUser).config.getHistoryDir() : config.getHistoryDir();
-      const filePath = join20(histDir, `${id}.json`);
-      if (!existsSync26(filePath)) {
+      const filePath = join22(histDir, `${id}.json`);
+      if (!existsSync28(filePath)) {
         res.status(404).json({ error: "Session not found" });
         return;
       }
@@ -16767,7 +17400,7 @@ async function startWebServer(options = {}) {
         res.status(404).json({ error: "Session not found" });
         return;
       }
-      const data = JSON.parse(readFileSync20(filePath, "utf-8"));
+      const data = JSON.parse(readFileSync22(filePath, "utf-8"));
       res.json({ session: data });
     } catch (err) {
       res.status(500).json({ error: err instanceof Error ? err.message : String(err) });
@@ -16780,10 +17413,10 @@ async function startWebServer(options = {}) {
       return;
     }
     const cwd = process.cwd();
-    const fullPath = resolve8(join20(cwd, filePath));
+    const fullPath = resolve9(join22(cwd, filePath));
     try {
       const canonicalFull = realpathSync(fullPath);
-      const canonicalCwd = realpathSync(resolve8(cwd));
+      const canonicalCwd = realpathSync(resolve9(cwd));
       if (!canonicalFull.startsWith(canonicalCwd + sep3) && canonicalFull !== canonicalCwd) {
         res.json({ error: "Access denied" });
         return;
@@ -16798,7 +17431,7 @@ async function startWebServer(options = {}) {
         res.json({ error: `File too large (${(stat.size / 1024).toFixed(0)} KB, max 512 KB)` });
         return;
       }
-      const content = readFileSync20(fullPath, "utf-8");
+      const content = readFileSync22(fullPath, "utf-8");
       res.json({ content, size: stat.size });
     } catch {
       res.json({ error: "Cannot read file" });
@@ -17002,7 +17635,7 @@ async function startWebServer(options = {}) {
   });
   const MAX_PORT_ATTEMPTS = 10;
   let actualPort = port;
-  const result = await new Promise((resolve9, reject) => {
+  const result = await new Promise((resolve10, reject) => {
     const tryListen = (attempt) => {
       server.once("error", (err) => {
         if (err.code === "EADDRINUSE" && attempt < MAX_PORT_ATTEMPTS) {
@@ -17033,7 +17666,7 @@ async function startWebServer(options = {}) {
         }
         console.log(`   Press Ctrl+C to stop
 `);
-        resolve9({ port: actualPort, host, url });
+        resolve10({ port: actualPort, host, url });
       });
     };
     tryListen(1);
@@ -17053,17 +17686,17 @@ function resolveProjectMcpPath() {
   const cwd = process.cwd();
   const gitRoot = getGitRoot(cwd);
   const projectRoot = gitRoot ?? cwd;
-  const configPath = join20(projectRoot, MCP_PROJECT_CONFIG_NAME);
-  return existsSync26(configPath) ? configPath : null;
+  const configPath = join22(projectRoot, MCP_PROJECT_CONFIG_NAME);
+  return existsSync28(configPath) ? configPath : null;
 }
 function loadProjectMcpConfig() {
   const cwd = process.cwd();
   const gitRoot = getGitRoot(cwd);
   const projectRoot = gitRoot ?? cwd;
-  const configPath = join20(projectRoot, MCP_PROJECT_CONFIG_NAME);
-  if (!existsSync26(configPath)) return null;
+  const configPath = join22(projectRoot, MCP_PROJECT_CONFIG_NAME);
+  if (!existsSync28(configPath)) return null;
   try {
-    const raw = JSON.parse(readFileSync20(configPath, "utf-8"));
+    const raw = JSON.parse(readFileSync22(configPath, "utf-8"));
     return raw.mcpServers ?? raw;
   } catch {
     return null;