jinzd-ai-cli 0.4.226 → 0.4.228

package/dist/electron-server.js

@@ -38,7 +38,7 @@ import {
   VERSION,
   buildUserIdentityPrompt,
   runTestsTool
-} from "./chunk-SHJL3ZEA.js";
+} from "./chunk-LDWTVCE5.js";
 import {
   hasSemanticIndex,
   semanticSearch
@@ -76,22 +76,22 @@ import { homedir } from "os";
 // src/config/schema.ts
 import { z } from "zod";
 var CustomModelSchema = z.object({
-  id: z.string(),
-  displayName: z.string().optional(),
+  id: z.string().max(100),
+  displayName: z.string().max(200).optional(),
   contextWindow: z.number().optional()
 });
 var CustomProviderConfigSchema = z.object({
-  id: z.string(),
+  id: z.string().max(100),
   // 唯一 ID，不能与内置 provider 重名
-  displayName: z.string(),
+  displayName: z.string().max(200),
   // 显示名称
-  apiKey: z.string().optional(),
+  apiKey: z.string().max(4e3).optional(),
   // 可选：直接在此写 key（也可通过 apiKeys 字段或环境变量提供）
-  baseUrl: z.string(),
+  baseUrl: z.string().max(2e3),
   // OpenAI 兼容 API 的 base URL（必填）
-  defaultModel: z.string(),
+  defaultModel: z.string().max(200),
   // 默认使用的模型 ID
-  models: z.array(CustomModelSchema).default([]),
+  models: z.array(CustomModelSchema).max(100).default([]),
   timeout: z.number().optional()
   // 请求超时（ms），覆盖全局默认值
 });
@@ -106,19 +106,19 @@ var ModelParamsSchema = z.object({
 });
 var UserProfileSchema = z.object({
   /** 真实姓名（如 "Jin Zhengdong"） */
-  name: z.string().optional(),
+  name: z.string().max(100).optional(),
   /** 昵称/称呼偏好（如 "东叔"），AI 会以此称呼你 */
-  nickname: z.string().optional(),
+  nickname: z.string().max(100).optional(),
   /** 职业角色（如 "Full-stack developer"、"Data scientist"） */
-  role: z.string().optional(),
+  role: z.string().max(200).optional(),
   /** 个人简介 / 专长描述（1-3 句话） */
-  bio: z.string().optional(),
+  bio: z.string().max(1e4).optional(),
   /** 兴趣领域或技术栈（如 ["TypeScript", "Rust", "AI/ML"]） */
-  interests: z.array(z.string()).default([]),
+  interests: z.array(z.string()).max(100).default([]),
   /** 语言偏好（如 "zh-CN"、"en"），AI 将据此选择交流语言 */
-  locale: z.string().optional(),
+  locale: z.string().max(20).optional(),
   /** 自定义人设补充（自由格式，直接注入 system prompt） */
-  extra: z.string().optional()
+  extra: z.string().max(5e3).optional()
 }).default({});
 var ConfigSchema = z.object({
   version: z.string().default("1.0.0"),
@@ -140,7 +140,7 @@ var ConfigSchema = z.object({
   // HTTP/HTTPS 代理地址（Node.js 不自动使用系统代理，需显式配置）
   // 例：http://127.0.0.1:10809
   // 也可通过环境变量 HTTPS_PROXY / HTTP_PROXY 覆盖
-  proxy: z.string().optional(),
+  proxy: z.string().max(500).optional(),
   // 自定义 Provider 列表（OpenAI 兼容接口，无需改代码）
   customProviders: z.array(CustomProviderConfigSchema).default([]),
   // 按模型 ID 存储的推理参数（key 为模型 ID，如 "deepseek-chat"）
@@ -174,7 +174,7 @@ var ConfigSchema = z.object({
   session: z.object({
     autoSave: z.boolean().default(true),
     maxHistoryDays: z.number().default(30),
-    systemPrompt: z.string().optional()
+    systemPrompt: z.string().max(1e5).optional()
   }).default({}),
   // 项目上下文文件配置
   // 启动时自动读取并注入 system prompt，类似 Claude Code 的 CLAUDE.md / Codex AGENTS.md 机制
@@ -182,14 +182,14 @@ var ConfigSchema = z.object({
   // 设为 false 可禁用此功能；指定字符串时仅加载 cwd 下的该文件
   contextFile: z.union([z.string(), z.literal(false)]).default("auto"),
   context: z.object({
-    projectDocFallbackFilenames: z.array(z.string()).default([]),
+    projectDocFallbackFilenames: z.array(z.string().max(500)).max(20).default([]),
     projectDocMaxBytes: z.number().int().positive().default(32 * 1024),
     showLoadedContextSources: z.boolean().default(false)
   }).default({}),
   // Google Custom Search API 的 Search Engine ID (cx 参数)
   // API Key 通过 apiKeys['google-search'] 或 AICLI_API_KEY_GOOGLESEARCH 环境变量配置
   // CX 也可通过 AICLI_GOOGLE_CX 环境变量覆盖
-  googleSearchEngineId: z.string().optional(),
+  googleSearchEngineId: z.string().max(200).optional(),
   // google_search 工具的安全开关（v0.4.135+）
   // 默认 disabled。这个工具调用 Google Custom Search API，没有原生 daily-spend cap——
   // 业内有多起 key 被盗后产生数万美元账单的真实案例。现在内置 web_search 工具走 Bing/Google
@@ -207,10 +207,10 @@ var ConfigSchema = z.object({
   // 配置格式兼容 Claude Desktop（command + args + env）
   // 示例：{ "filesystem": { "command": "npx", "args": ["-y", "@modelcontextprotocol/server-filesystem", "/path"] } }
   mcpServers: z.record(z.object({
-    command: z.string(),
-    args: z.array(z.string()).default([]),
+    command: z.string().max(500),
+    args: z.array(z.string()).max(100).default([]),
     env: z.record(z.string()).optional(),
-    timeout: z.number().default(3e4)
+    timeout: z.number().int().min(100).max(3e5).default(3e4)
   })).default({}),
   // Hooks 生命周期（v0.4.212+）：兼容旧 pre/post 字符串，同时支持 events.<EventName> 结构化 JSON hook。
   hooks: z.object({
@@ -244,8 +244,8 @@ var ConfigSchema = z.object({
   networkPolicy: z.object({
     enabled: z.boolean().default(false),
     defaultAction: z.enum(["allow", "confirm", "deny"]).default("confirm"),
-    allowDomains: z.array(z.string()).default([]),
-    denyDomains: z.array(z.string()).default([]),
+    allowDomains: z.array(z.string().max(500)).max(100).default([]),
+    denyDomains: z.array(z.string().max(500)).max(100).default([]),
     allowPorts: z.array(z.number().int().min(1).max(65535)).default([]),
     denyPorts: z.array(z.number().int().min(1).max(65535)).default([]),
     allowPrivateNetwork: z.boolean().default(false),
@@ -259,7 +259,7 @@ var ConfigSchema = z.object({
   }).default({ enabled: false, defaultAction: "confirm", allowDomains: [], denyDomains: [], allowPorts: [], denyPorts: [], allowPrivateNetwork: false, tools: {} }),
   // 权限 Profile（v0.4.211+）：legacy 保持旧行为；其余 profile 提供更清晰的安全边界。
   defaultPermissionProfile: z.enum(["legacy", "read-only", "workspace-write", "danger-full-access"]).default("legacy"),
-  allowedPermissionProfiles: z.array(z.string()).default(["legacy", "read-only", "workspace-write", "danger-full-access"]),
+  allowedPermissionProfiles: z.array(z.string().max(50)).max(20).default(["legacy", "read-only", "workspace-write", "danger-full-access"]),
   permissionProfiles: z.record(z.object({
     extends: z.enum(["legacy", "read-only", "workspace-write", "danger-full-access"]).optional(),
     defaultAction: z.enum(["auto-approve", "deny", "confirm"]).optional(),
@@ -276,7 +276,7 @@ var ConfigSchema = z.object({
   })).default({}),
   // 工具权限规则（按顺序匹配第一个生效；作为当前权限 Profile 内的细粒度规则）
   permissionRules: z.array(z.object({
-    tool: z.string(),
+    tool: z.string().max(100),
     action: z.enum(["auto-approve", "deny", "confirm"]),
     when: z.object({
       dangerLevel: z.enum(["safe", "write", "destructive"]).optional(),
@@ -334,7 +334,7 @@ var ConfigSchema = z.object({
     redactOnSave: z.boolean().default(true),
     redactOnSend: z.boolean().default(false),
     mode: z.enum(["default", "strict", "off"]).default("default"),
-    customPatterns: z.array(z.string()).default([])
+    customPatterns: z.array(z.string().max(200)).max(50).default([])
   }).default({}),
   // 智能模型路由（v0.4.68+）
   // 按用户每轮输入的内容/标签/长度动态选择模型，在同一 provider 内切换，
@@ -346,13 +346,13 @@ var ConfigSchema = z.object({
     enabled: z.boolean().default(false),
     rules: z.array(z.object({
       match: z.object({
-        contains: z.array(z.string()).optional(),
+        contains: z.array(z.string().max(200)).max(50).optional(),
         maxLength: z.number().int().positive().optional(),
         minLength: z.number().int().positive().optional(),
         tag: z.string().optional()
       }),
       model: z.string(),
-      name: z.string().optional()
+      name: z.string().max(100).optional()
     })).default([]),
     fallback: z.string().optional()
   }).default({ enabled: false, rules: [] }),
@@ -372,7 +372,7 @@ var ConfigSchema = z.object({
     maxBackoffMs: z.number().int().positive().default(8e3),
     /** 兜底 provider 链，每个 entry 仅尝试 1 次。model 省略则使用 provider 的 defaultModel。 */
     chain: z.array(z.object({
-      provider: z.string(),
+      provider: z.string().max(100),
       model: z.string().optional()
     })).default([])
   }).default({ enabled: false, retries: 2, initialBackoffMs: 500, maxBackoffMs: 8e3, chain: [] })
@@ -1692,7 +1692,44 @@ var HALLUCINATION_PATTERNS = [
   // “以下是图片的内容：”“以下是修改后的内容：”这类描述/对话。
   /以下是[^\n。.！!？?]*?(?:教案|试卷|讲义|课件|课程|文件|文档|脚本|配置|程序|报告|表格|清单)[^\n。.！!？?]{0,8}(?:内容)?[：:]/
 ];
+var QUICK_WRITE_KEYWORDS = [
+  // 中文写入动作
+  "\u5DF2\u4FDD\u5B58",
+  "\u5DF2\u5199\u5165",
+  "\u5DF2\u521B\u5EFA",
+  "\u5DF2\u751F\u6210",
+  "\u751F\u6210\u5B8C\u6210",
+  "\u4FDD\u5B58",
+  "\u5199\u5165",
+  "\u521B\u5EFA",
+  "\u751F\u6210",
+  // 中文文档名
+  "\u6587\u4EF6",
+  "\u6559\u6848",
+  "\u8BD5\u5377",
+  "\u8BB2\u4E49",
+  "\u8BFE\u4EF6",
+  "\u6587\u6863",
+  "\u811A\u672C",
+  "\u914D\u7F6E",
+  "\u7A0B\u5E8F",
+  "\u62A5\u544A",
+  "\u8868\u683C",
+  "\u6E05\u5355",
+  "\u7B14\u8BB0",
+  // 英文写入动作
+  "saved",
+  "written",
+  "created",
+  "File",
+  "file",
+  // emoji 勾选标记
+  "\u2705"
+];
 function detectsHallucinatedFileOp(content) {
+  if (!QUICK_WRITE_KEYWORDS.some((kw) => content.includes(kw))) {
+    return false;
+  }
   return HALLUCINATION_PATTERNS.some((pattern) => pattern.test(content));
 }
 function hadPreviousWriteToolCalls(extraMessages) {
@@ -3966,18 +4003,32 @@ var ProviderRegistry = class {
   configDir;
   async initialize(getApiKey, getOptions, customProviderConfigs, configDir) {
     this.configDir = configDir;
-    for (const ProviderClass of BUILT_IN_PROVIDERS) {
+    const initTasks = BUILT_IN_PROVIDERS.map(async (ProviderClass) => {
       const provider = new ProviderClass();
       const apiKey = getApiKey(provider.info.id);
       if (apiKey || !provider.info.requiresApiKey) {
         const options = getOptions?.(provider.info.id) ?? {};
+        const pInit = provider.initialize(apiKey ?? "", options);
+        return { provider, pInit, requiresApiKey: !!provider.info.requiresApiKey };
+      }
+      return null;
+    });
+    const settled = await Promise.allSettled(
+      initTasks.map(async (task) => {
+        const result = await task;
+        if (!result) return;
+        const { provider, pInit, requiresApiKey } = result;
         try {
-          await provider.initialize(apiKey ?? "", options);
+          await pInit;
           this.providers.set(provider.info.id, provider);
         } catch (err) {
-          if (provider.info.requiresApiKey) throw err;
+          if (requiresApiKey) throw err;
         }
-      }
+      })
+    );
+    const keyErrors = settled.filter((r) => r.status === "rejected").map((r) => r.reason);
+    if (keyErrors.length > 0) {
+      throw keyErrors[0];
     }
     this.customConfigs = customProviderConfigs ?? [];
     for (const cfg of this.customConfigs) {
@@ -5958,7 +6009,7 @@ var readFileTool = {
     dangerous: false
   },
   async execute(args) {
-    const filePath = String(args["path"] ?? "");
+    const filePath = String(args["path"] ?? args["file"] ?? "");
     const encoding = args["encoding"] ?? "utf-8";
     const rawOffset = args["offset"];
     const rawLimit = args["limit"];
@@ -7833,7 +7884,7 @@ Do NOT split a long document into many write_file(append=true) calls. That patte
     // executor 会将 write_file 标记为 'write' 级别
   },
   async execute(args) {
-    const filePath = String(args["path"] ?? "");
+    const filePath = String(args["path"] ?? args["file"] ?? "");
     const content = String(args["content"] ?? "");
     const encoding = args["encoding"] ?? "utf-8";
     const appendMode = String(args["append"] ?? "false").toLowerCase() === "true";
@@ -8225,7 +8276,7 @@ Note: Path can be absolute or relative to cwd.`,
     // executor 中 edit_file 按 write 级别处理
   },
   async execute(args) {
-    const filePath = String(args["path"] ?? "");
+    const filePath = String(args["path"] ?? args["file"] ?? "");
     const encoding = args["encoding"] ?? "utf-8";
     if (!filePath) throw new ToolError("edit_file", "path is required");
     if (!existsSync11(filePath)) throw new ToolError("edit_file", `File not found: ${filePath}`);
@@ -9626,7 +9677,7 @@ Any of these triggers means use save_last_response, NOT write_file:
     // getDangerLevel 中标记为 write
   },
   async execute(args) {
-    const filePath = String(args["path"] ?? "");
+    const filePath = String(args["path"] ?? args["file"] ?? "");
     if (!filePath) throw new ToolError("save_last_response", "path is required");
     const content = lastResponseStore.content;
     if (!content) {
@@ -11687,7 +11738,7 @@ var notebookEditTool = {
     dangerous: false
   },
   async execute(args) {
-    const filePath = String(args["path"] ?? "");
+    const filePath = String(args["path"] ?? args["file"] ?? "");
     const action = String(args["action"] ?? "");
     const cellIndexRaw = Number(args["cell_index"]);
     const content = args["content"] != null ? String(args["content"]) : "";
@@ -16017,7 +16068,7 @@ async function handleSecurityReview(args, ctx) {
 async function handleTest(args, ctx) {
   ctx.send({ type: "info", message: "\u{1F9EA} Running tests..." });
   try {
-    const { executeTests } = await import("./run-tests-NQWCJSZX.js");
+    const { executeTests } = await import("./run-tests-7SGHDDHL.js");
     const argStr = args.join(" ").trim();
     let testArgs = {};
     if (argStr) {

package/dist/{hub-AWY3NZUF.js → hub-AAYGBUDA.js}

@@ -3,7 +3,7 @@ import {
   assignRoleColors,
   renderHubBanner,
   renderHubEvent
-} from "./chunk-2X2DOHA6.js";
+} from "./chunk-NR5U6LVG.js";
 import {
   DiscussionOrchestrator,
   getPreset,
@@ -154,7 +154,7 @@ ${content}`);
   }
 }
 async function runTaskMode(config, providers, configManager, topic) {
-  const { TaskOrchestrator } = await import("./task-orchestrator-CODR7HC6.js");
+  const { TaskOrchestrator } = await import("./task-orchestrator-T2LUS5ZQ.js");
   const orchestrator = new TaskOrchestrator(config, providers, configManager);
   let interrupted = false;
   const onSigint = () => {
@@ -190,7 +190,7 @@ async function runTaskMode(config, providers, configManager, topic) {
   }
 }
 async function runDistributedDiscussion(config, providers, topic, port) {
-  const { HubServer } = await import("./hub-server-XX36DX7O.js");
+  const { HubServer } = await import("./hub-server-XA7HTVLD.js");
   const hub = new HubServer(config, providers, port);
   let interrupted = false;
   const onSigint = () => {

package/dist/{hub-server-XX36DX7O.js → hub-server-XA7HTVLD.js}

@@ -10,7 +10,7 @@ import {
   renderRoundHeader,
   renderSummary,
   renderUserInterrupt
-} from "./chunk-2X2DOHA6.js";
+} from "./chunk-NR5U6LVG.js";
 import {
   HubAgent
 } from "./chunk-3ARPAVNV.js";

package/dist/index.js

@@ -14,7 +14,7 @@ import {
   scanProject,
   sessionHasMeaningfulContent,
   setupProxy
-} from "./chunk-XN24Y4OZ.js";
+} from "./chunk-VSEXYCEE.js";
 import {
   buildReviewPrompt,
   buildSecurityReviewPrompt
@@ -52,7 +52,7 @@ import {
   theme,
   undoStack,
   updateMemoryApproval
-} from "./chunk-GOMPGWWO.js";
+} from "./chunk-MQVC7FJH.js";
 import "./chunk-K3CF65QH.js";
 import "./chunk-UUSRWSSX.js";
 import "./chunk-CKH4KQ4E.js";
@@ -63,7 +63,7 @@ import {
 } from "./chunk-QYQCCIBT.js";
 import {
   CostTracker
-} from "./chunk-CITDVXXM.js";
+} from "./chunk-YVMACMXW.js";
 import {
   computeCost,
   formatCost,
@@ -74,10 +74,10 @@ import {
   formatDoctorReport,
   loadContextFiles,
   writeCrashLog
-} from "./chunk-HZC6JFPM.js";
+} from "./chunk-4GF47FW3.js";
 import {
   ProviderRegistry
-} from "./chunk-PUBCJF7E.js";
+} from "./chunk-EEQHP4GK.js";
 import {
   describePlugin,
   getActivePluginAssets,
@@ -94,7 +94,7 @@ import {
   trustHook,
   trustPlugin,
   untrustHook
-} from "./chunk-D5A2K4AO.js";
+} from "./chunk-ACO2RJY3.js";
 import {
   CONTENT_ONLY_STREAM_REMINDER,
   TEE_FINAL_USER_NUDGE,
@@ -113,10 +113,10 @@ import {
   stripOuterCodeFence,
   stripToolCallReminder,
   teeStreamErrorSummary
-} from "./chunk-XPBEJB27.js";
+} from "./chunk-ODYTXQ26.js";
 import {
   ConfigManager
-} from "./chunk-NQYNIK4C.js";
+} from "./chunk-JGQ3TULW.js";
 import {
   AuthError,
   ProviderError,
@@ -130,7 +130,7 @@ import {
 import {
   fileCheckpoints
 } from "./chunk-4BKXL7SM.js";
-import "./chunk-PEUYYZQU.js";
+import "./chunk-NI34BUBR.js";
 import {
   AGENTIC_BEHAVIOR_GUIDELINE,
   AUTHOR,
@@ -149,7 +149,7 @@ import {
   SKILLS_DIR_NAME,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-QNIFXUKV.js";
+} from "./chunk-JZNKM3RV.js";
 import {
   buildChatIndex,
   clearChatIndex,
@@ -279,7 +279,8 @@ var ABOUT_TOOL_DESCRIPTIONS = {
   get_outline: "Enumerate all top-level declarations in one source file",
   find_references: "Search indexed files for references to a symbol name",
   search_code: "Semantic (meaning-based) code search via local embeddings",
-  recall_memory: 'Semantic recall over past chat sessions ("remember when\u2026")'
+  recall_memory: 'Semantic recall over past chat sessions ("remember when\u2026")',
+  stream_to_file: "Stream large content (>5KB) directly to disk (avoids output truncation)"
 };
 var ABOUT_FEATURES = [
   "Agentic loop: up to 200 tool-call rounds (configurable), final answer streamed",
@@ -427,15 +428,15 @@ var Renderer = class {
     const feat = (s) => theme.dim("    \u2726 ") + chalk.white(s);
     console.log();
     console.log(
-      theme.heading("  \u{1F916} ai-cli") + theme.dim(`  v${VERSION}`) + theme.dim("  \u2014  Cross-platform agentic AI assistant (REPL \xB7 Web \xB7 Desktop, 9 providers)")
+      theme.heading("  \u{1F916} ai-cli") + theme.dim(`  v${VERSION}`) + theme.dim("  \u2014  Cross-platform agentic AI assistant (REPL \xB7 Web \xB7 Desktop, 10 providers)")
     );
     console.log(HR);
     console.log(label("Desc") + chalk.white(DESCRIPTION));
     console.log(label("Author") + theme.warning(AUTHOR) + theme.dim("  <" + AUTHOR_EMAIL + ">"));
     console.log(HR);
-    console.log(theme.dim("  Supported Providers (9):"));
+    console.log(theme.dim("  Supported Providers (10):"));
     console.log(theme.dim("    OpenAI \xB7 DeepSeek \xB7 Kimi (Moonshot) \xB7 Claude (Anthropic) \xB7 MiniMax (\u6D77\u87BA)"));
-    console.log(theme.dim("    Gemini (Google) \xB7 Zhipu (GLM) \xB7 OpenRouter \xB7 Ollama (Local, no API key)"));
+    console.log(theme.dim("    Gemini (Google) \xB7 Zhipu (GLM) \xB7 Qwen (\u901A\u4E49\u5343\u95EE) \xB7 OpenRouter \xB7 Ollama (Local, no API key)"));
     console.log(HR);
     const mcpToolCount = mcpInfo?.tools ?? 0;
     const toolTotal = builtinTools.length + pluginCount + mcpToolCount;
@@ -1049,7 +1050,7 @@ function createMiscCommands() {
               ["/tools", "List all AI tools available"],
               ["/plugins", "Show plugin directory and loaded plugins"],
               ["/plugin [list|install|enable|disable|inspect|trust]", "Manage package plugins"],
-              ["/mcp [reconnect [id]]", "MCP servers / reconnect disconnected"],
+              ["/mcp [reconnect [serverId]|trust-project]", "Show MCP server connections and tools"],
               ["/skill [name|off|list]", "Manage agent skills (reusable prompt packs)"],
               ["/context", "Show or reload hierarchical context layers"],
               ["/add-dir [path|remove]", "Add/remove a directory from AI context"],
@@ -1833,7 +1834,7 @@ No tools match "${filter}".
           const { join: join7 } = await import("path");
           const { existsSync: existsSync6 } = await import("fs");
           const { getGitRoot: getGitRoot2 } = await import("./git-context-EXOEHQSF.js");
-          const { MCP_PROJECT_CONFIG_NAME: MCP_PROJECT_CONFIG_NAME2 } = await import("./constants-LX5P32PH.js");
+          const { MCP_PROJECT_CONFIG_NAME: MCP_PROJECT_CONFIG_NAME2 } = await import("./constants-F2LRIWV2.js");
           const { approveProject, hashMcpFile } = await import("./project-trust-NKYHL3VZ.js");
           const cwd = process.cwd();
           const projectRoot = getGitRoot2(cwd) ?? cwd;
@@ -2812,7 +2813,7 @@ function createReviewCommands() {
       usage: "/test [command|filter]",
       async execute(args, ctx) {
         try {
-          const { executeTests } = await import("./run-tests-FKBEUFKX.js");
+          const { executeTests } = await import("./run-tests-5QHWA4MF.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {
@@ -7757,7 +7758,7 @@ program.command("web").description("Start Web UI server with browser-based chat
     console.error("Error: Invalid port number. Must be between 1 and 65535.");
     process.exit(1);
   }
-  const { startWebServer } = await import("./server-Y7YXAYF3.js");
+  const { startWebServer } = await import("./server-O2YK3VWK.js");
   await startWebServer({ port, host: options.host });
 });
 program.command("user [action] [username]").description("Manage Web UI users (list | create <name> | delete <name> | reset-password <name> | logout-all <name> | migrate <name>)").action(async (action, username) => {
@@ -7924,11 +7925,11 @@ program.command("sessions").description("List recent conversation sessions").opt
   console.log(footer + "\n");
 });
 program.command("usage").description("Show token + cost usage grouped by provider/model (cross-session)").option("--days <n>", "Only the last N days (inclusive of today)").option("--month <ym>", "Only a specific month, format YYYY-MM (e.g. 2026-06)").option("--json", "Output as JSON (for scripting)").action(async (options) => {
-  const { runUsageCli } = await import("./usage-6H5AIUZM.js");
+  const { runUsageCli } = await import("./usage-AIHU5PIY.js");
   await runUsageCli(options);
 });
 program.command("doctor").description("Health check: API keys, config, MCP, recent crashes, tool usage, disk usage").option("--json", "Output as JSON (for scripting)").option("--reset-stats", "Reset accumulated tool usage statistics").action(async (options) => {
-  const { runDoctorCli } = await import("./doctor-cli-6KSSI65N.js");
+  const { runDoctorCli } = await import("./doctor-cli-R3AH5CLF.js");
   const argv = process.argv.slice(2);
   await runDoctorCli({
     json: !!options.json || argv.includes("--json"),
@@ -7937,7 +7938,7 @@ program.command("doctor").description("Health check: API keys, config, MCP, rece
 });
 program.command("batch <action> [arg] [arg2]").description("Anthropic Message Batches: submit | list | status <id> | results <id> [out] | cancel <id>").option("--dry-run", "Parse and validate input without submitting (submit only)").action(async (action, arg, arg2, options) => {
   try {
-    const batch = await import("./batch-IJ6X3SWP.js");
+    const batch = await import("./batch-K6IRL6TU.js");
     switch (action) {
       case "submit":
         if (!arg) {
@@ -7980,7 +7981,7 @@ program.command("batch <action> [arg] [arg2]").description("Anthropic Message Ba
   }
 });
 program.command("mcp-serve").description("Start an MCP server over STDIO, exposing aicli's built-in tools to Claude Desktop / Cursor / other MCP clients").option("--allow-destructive", "Allow bash / run_interactive / task_create (always destructive in MCP mode)").option("--allow-outside-cwd", "Allow tool path arguments to escape the sandbox root \u2014 disabled by default").option("--tools <list>", "Comma-separated whitelist of tools to expose (default: all eligible tools)").option("--cwd <path>", "Working directory AND sandbox root (default: current directory)").action(async (options) => {
-  const { startMcpServer } = await import("./server-I2RRWW7W.js");
+  const { startMcpServer } = await import("./server-E5XTQG7W.js");
   await startMcpServer({
     allowDestructive: !!options.allowDestructive,
     allowOutsideCwd: !!options.allowOutsideCwd,
@@ -7993,7 +7994,7 @@ program.command("pr <action> [target]").description("PR review helpers: review |
     console.error(`Unknown pr action: ${action}. Use review | security-review | summarize.`);
     process.exit(1);
   }
-  const { runPrCli } = await import("./pr-IO56XB47.js");
+  const { runPrCli } = await import("./pr-HX6V63FO.js");
   const result = await runPrCli({
     action,
     target,
@@ -8013,8 +8014,8 @@ program.command("pr <action> [target]").description("PR review helpers: review |
   process.exit(result.exitCode);
 });
 program.command("ci").description("Headless PR review (code + security) \u2014 reads git/gh diff, optionally posts to PR. Designed for GitHub Actions.").option("--pr <num>", "PR number or URL; diff fetched via gh pr diff <value>", (v) => /^#?\d+$/.test(v) ? parseInt(v.replace(/^#/, ""), 10) : v).option("--base <ref>", "Base ref for git diff <ref>...HEAD (ignored when --pr set)").option("--post", "Post review as a PR comment (requires gh CLI + GH_TOKEN, needs --pr)").option("--no-update", "Always create a new comment instead of updating the previous aicli review").option("--skip-code", "Skip the code review section").option("--skip-security", "Skip the security review section").option("--detailed", "Use the detailed code-review prompt").option("--max-diff <n>", "Max diff chars sent to the model (default 30000)", (v) => parseInt(v, 10)).option("--provider <id>", "Override provider (default: config.defaultProvider)").option("--model <id>", "Override model").option("--dry-run", "Print result to stdout instead of posting (overrides --post)").option("--json", "Output a structured JSON report").option("--markdown", "Output Markdown report (default)").option("--sarif", "Output SARIF 2.1.0 for code scanning artifacts").option("--fail-on-security-high", "Fail when the security review contains HIGH/CRITICAL findings (default)").option("--no-fail-on-security-high", "Do not fail on security HIGH/CRITICAL findings").option("--fail-on-test-failure", "Fail when the report mentions test failures (default)").option("--no-fail-on-test-failure", "Do not fail on test failure findings").option("--fail-on-lint-failure", "Fail when the report mentions lint/typecheck failures (default)").option("--no-fail-on-lint-failure", "Do not fail on lint/typecheck failure findings").action(async (options) => {
-  const { runCi } = await import("./ci-7SRQSN7E.js");
-  const { formatCiResult } = await import("./ci-format-FM52GDQG.js");
+  const { runCi } = await import("./ci-D35MUGEH.js");
+  const { formatCiResult } = await import("./ci-format-EQ4HGHXR.js");
   const formats = [options.json, options.markdown, options.sarif].filter(Boolean).length;
   if (formats > 1) {
     console.error("Choose only one output format: --json, --markdown, or --sarif.");
@@ -8172,7 +8173,7 @@ program.command("hub [topic]").description("Start multi-agent hub (discuss / bra
     config.get("customProviders"),
     config.getConfigDir()
   );
-  const { startHub } = await import("./hub-AWY3NZUF.js");
+  const { startHub } = await import("./hub-AAYGBUDA.js");
   await startHub(
     {
       topic: topic ?? "",

package/dist/{pr-IO56XB47.js → pr-HX6V63FO.js}

@@ -2,8 +2,8 @@
 import {
   countSeverity,
   runCi
-} from "./chunk-KDJEFBOS.js";
-import "./chunk-55NPPWBW.js";
+} from "./chunk-32LTIQQN.js";
+import "./chunk-JO2CAKHA.js";
 import {
   buildReviewPrompt,
   buildSecurityReviewPrompt,
@@ -11,15 +11,15 @@ import {
 } from "./chunk-HLWUDRBO.js";
 import {
   ProviderRegistry
-} from "./chunk-PUBCJF7E.js";
-import "./chunk-XPBEJB27.js";
+} from "./chunk-EEQHP4GK.js";
+import "./chunk-ODYTXQ26.js";
 import {
   ConfigManager
-} from "./chunk-NQYNIK4C.js";
+} from "./chunk-JGQ3TULW.js";
 import "./chunk-5ULLIOVC.js";
 import {
   VERSION
-} from "./chunk-QNIFXUKV.js";
+} from "./chunk-JZNKM3RV.js";
 import "./chunk-IW3Q7AE5.js";
 
 // src/cli/pr.ts

package/dist/{run-tests-FKBEUFKX.js → run-tests-5QHWA4MF.js}

@@ -2,8 +2,8 @@
 import {
   executeTests,
   runTestsTool
-} from "./chunk-PEUYYZQU.js";
-import "./chunk-QNIFXUKV.js";
+} from "./chunk-NI34BUBR.js";
+import "./chunk-JZNKM3RV.js";
 export {
   executeTests,
   runTestsTool

package/dist/{run-tests-NQWCJSZX.js → run-tests-7SGHDDHL.js}

@@ -1,7 +1,7 @@
 import {
   executeTests,
   runTestsTool
-} from "./chunk-SHJL3ZEA.js";
+} from "./chunk-LDWTVCE5.js";
 export {
   executeTests,
   runTestsTool

package/dist/{server-I2RRWW7W.js → server-E5XTQG7W.js}

@@ -1,25 +1,25 @@
 #!/usr/bin/env node
 import {
   ToolRegistry
-} from "./chunk-GOMPGWWO.js";
+} from "./chunk-MQVC7FJH.js";
 import "./chunk-K3CF65QH.js";
 import "./chunk-UUSRWSSX.js";
 import "./chunk-CKH4KQ4E.js";
 import "./chunk-BXP6YZ2P.js";
 import {
   runTool
-} from "./chunk-D5A2K4AO.js";
+} from "./chunk-ACO2RJY3.js";
 import {
   getDangerLevel,
   schemaToJsonSchema
-} from "./chunk-XPBEJB27.js";
+} from "./chunk-ODYTXQ26.js";
 import "./chunk-5ULLIOVC.js";
 import "./chunk-HOSJZMQS.js";
 import "./chunk-4BKXL7SM.js";
-import "./chunk-PEUYYZQU.js";
+import "./chunk-NI34BUBR.js";
 import {
   VERSION
-} from "./chunk-QNIFXUKV.js";
+} from "./chunk-JZNKM3RV.js";
 import "./chunk-NVUCDUXE.js";
 import "./chunk-KHYD3WXE.js";
 import "./chunk-B5TYJO7V.js";