jinzd-ai-cli 0.4.222 → 0.4.224

package/dist/{task-orchestrator-4GOBFXPN.js → task-orchestrator-FIR5MCND.js}

@@ -3,14 +3,14 @@ import {
   ToolRegistry,
   googleSearchContext,
   truncateOutput
-} from "./chunk-5EE4GRGG.js";
+} from "./chunk-4RQPCOEE.js";
 import "./chunk-K3CF65QH.js";
 import "./chunk-UUSRWSSX.js";
 import "./chunk-CKH4KQ4E.js";
 import "./chunk-BXP6YZ2P.js";
 import {
   runTool
-} from "./chunk-SISFAT6W.js";
+} from "./chunk-A2AVDSXJ.js";
 import {
   getDangerLevel,
   runLeanAgentLoop
@@ -18,13 +18,13 @@ import {
 import "./chunk-5ULLIOVC.js";
 import "./chunk-HOSJZMQS.js";
 import "./chunk-4BKXL7SM.js";
-import "./chunk-S6L5R6SS.js";
+import "./chunk-JU7OI4BN.js";
 import {
   SUBAGENT_ALLOWED_TOOLS
-} from "./chunk-NNWWMGYK.js";
-import "./chunk-TB4W4Y4T.js";
+} from "./chunk-QJUAQKH2.js";
+import "./chunk-NVUCDUXE.js";
 import "./chunk-KHYD3WXE.js";
-import "./chunk-SLSWPBK3.js";
+import "./chunk-B5TYJO7V.js";
 import {
   atomicWriteFileSync
 } from "./chunk-IW3Q7AE5.js";
@@ -187,6 +187,14 @@ var TaskToolExecutor = class {
 
 // src/hub/task-orchestrator.ts
 var TASK_STATE_FILE = ".aicli-task.json";
+function asToolCapable(p) {
+  if (typeof p.chatWithTools !== "function") {
+    throw new Error(
+      `Provider '${p.info?.id ?? "unknown"}' does not support tool calls. Hub task orchestration requires a tool-capable provider (e.g. claude, openai, deepseek).`
+    );
+  }
+  return p;
+}
 var TaskOrchestrator = class {
   constructor(config, providers, configManager) {
     this.config = config;
@@ -226,7 +234,7 @@ var TaskOrchestrator = class {
     }
     if (!plan) {
       this.renderPhaseHeader("PLAN", "Architect is decomposing the goal into tasks...");
-      plan = await this.generatePlan(goal, provider);
+      plan = await this.generatePlan(goal, asToolCapable(provider));
       if (!plan || plan.tasks.length === 0) {
         console.log(chalk.red("  \u2717 Failed to generate a task plan."));
         return;
@@ -240,9 +248,9 @@ var TaskOrchestrator = class {
       }
     }
     this.renderPhaseHeader("EXECUTE", "Agents are executing tasks...");
-    await this.executePlan(plan, provider);
+    await this.executePlan(plan, asToolCapable(provider));
     this.renderPhaseHeader("REVIEW", "Generating project summary...");
-    await this.generateReview(plan, provider);
+    await this.generateReview(plan, asToolCapable(provider));
     const allDone = plan.tasks.every((t) => t.status === "done");
     if (allDone) {
       this.deleteState();

package/dist/{usage-JXT2YVA6.js → usage-3MXPFFBU.js}

@@ -8,9 +8,9 @@ import {
 } from "./chunk-E44DTERW.js";
 import {
   ConfigManager
-} from "./chunk-UWUTLIOH.js";
+} from "./chunk-35OPVVEK.js";
 import "./chunk-5ULLIOVC.js";
-import "./chunk-NNWWMGYK.js";
+import "./chunk-QJUAQKH2.js";
 import "./chunk-IW3Q7AE5.js";
 
 // src/cli/usage.ts

package/dist/web/client/app.js

@@ -7,7 +7,7 @@
  * global lexical environment and are read/reassigned here as free variables.
  */
 
-import { escapeHtml, formatToolArgs, formatDuration } from './util.js';
+import { escapeHtml, formatToolArgs, formatDuration, sanitizeHtml } from './util.js';
 
 // ── State ──────────────────────────────────────────────────────────
 // All cross-cutting mutable state now lives in state.js (P0-4 Phase 1),
@@ -775,7 +775,8 @@ export function addErrorMessage(text) {
 
 function renderMarkdown(el, text) {
   try {
-    el.innerHTML = marked.parse(text);
+    // P1-SEC-01: sanitize AI-generated HTML before innerHTML insertion
+    el.innerHTML = sanitizeHtml(marked.parse(text));
     // Add copy buttons to code blocks
     el.querySelectorAll('pre code').forEach(block => {
       const pre = block.parentElement;

package/dist/web/client/util.js

@@ -43,3 +43,45 @@ export function formatToolArgs(args) {
     return `<span class="font-semibold">${escapeHtml(k)}</span>: ${escapeHtml(val)}`;
   }).join('<br>');
 }
+
+/**
+ * Sanitize AI-generated HTML for safe innerHTML insertion (P1-SEC-01).
+ *
+ * Strips dangerous constructs that CSP cannot fully cover:
+ *   - <script>, <form>, <base>, <link> (whitelist-removed entirely)
+ *   - on* event handler attributes (onclick, onerror, onload…)
+ *   - javascript:/data: links (rewritten to #blocked)
+ *
+ * This is defense-in-depth — CSP `script-src 'self'` already blocks inline
+ * scripts. But <a href="javascript:alert(1)"> clickjacking and <form action="…">
+ * hijack are not stopped by script-src alone, so we strip them at the HTML level.
+ *
+ * @param {string} html - Raw HTML from marked.parse (AI-generated Markdown)
+ * @returns {string} Sanitized HTML safe for innerHTML
+ */
+export function sanitizeHtml(html) {
+  // 1) Strip entire dangerous tags (with their contents)
+  let safe = html.replace(/<script\b[^>]*>[\s\S]*?<\/script\s*>/gi, '');
+  safe = safe.replace(/<form\b[^>]*>[\s\S]*?<\/form\s*>/gi, '');
+  safe = safe.replace(/<base\b[^>]*\/?>/gi, '');
+  safe = safe.replace(/<link\b[^>]*\/?>/gi, '');
+  safe = safe.replace(/<meta\b[^>]*\/?>/gi, '');
+  safe = safe.replace(/<object\b[^>]*>[\s\S]*?<\/object\s*>/gi, '');
+  safe = safe.replace(/<embed\b[^>]*\/?>/gi, '');
+
+  // 2) Strip all on* event handler attributes (onclick, onerror, onload…)
+  safe = safe.replace(/\s+on\w+\s*=\s*(['"])(?:(?!\1).)*\1/gi, '');
+
+  // 3) Rewrite javascript:/data: protocol links to inert placeholders
+  safe = safe.replace(/\bhref\s*=\s*(['"])\s*javascript\s*:/gi, "href=$1#blocked-js:");
+  safe = safe.replace(/\bhref\s*=\s*(['"])\s*data\s*:/gi, "href=$1#blocked-data:");
+  safe = safe.replace(/\bsrc\s*=\s*(['"])\s*javascript\s*:/gi, "src=$1#blocked-js:");
+  safe = safe.replace(/\bsrc\s*=\s*(['"])\s*data\s*:/gi, (m, q) => {
+    // Allow data:image/ and data:text/ for legitimate inline images/blobs
+    const lower = m.toLowerCase();
+    if (lower.includes("data:image/") || lower.includes("data:text/")) return m;
+    return `src=${q}#blocked-data:`;
+  });
+
+  return safe;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jinzd-ai-cli",
-  "version": "0.4.222",
+  "version": "0.4.224",
   "description": "Cross-platform REPL-style AI CLI with multi-provider support",
   "type": "module",
   "main": "./dist/index.js",