jinzd-ai-cli 0.4.227 → 0.4.229

package/dist/{batch-W2DJGST7.js → batch-XZHTNJXJ.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import {
   ConfigManager
-} from "./chunk-6LQ6PUNZ.js";
+} from "./chunk-FEVOW3NQ.js";
 import "./chunk-5ULLIOVC.js";
-import "./chunk-CYVVWFFO.js";
+import "./chunk-B3POS7LB.js";
 import {
   atomicWriteFileSync
 } from "./chunk-IW3Q7AE5.js";

package/dist/{chunk-DKJ5EFKA.js → chunk-AEXWMIRE.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   TEST_TIMEOUT
-} from "./chunk-CYVVWFFO.js";
+} from "./chunk-B3POS7LB.js";
 
 // src/tools/builtin/run-tests.ts
 import { execSync, spawnSync } from "child_process";

package/dist/{chunk-NBG2STGM.js → chunk-AXIMNQSY.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   VERSION
-} from "./chunk-CYVVWFFO.js";
+} from "./chunk-B3POS7LB.js";
 
 // src/cli/ci-format.ts
 var DEFAULT_CI_THRESHOLDS = {

package/dist/{chunk-CYVVWFFO.js → chunk-B3POS7LB.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // src/core/constants.ts
-var VERSION = "0.4.227";
+var VERSION = "0.4.229";
 var APP_NAME = "ai-cli";
 var CONFIG_DIR_NAME = ".aicli";
 var CONFIG_FILE_NAME = "config.json";

package/dist/{chunk-APBHCIPD.js → chunk-DMF6UHO6.js}

@@ -14,12 +14,12 @@ import {
   runHook,
   runLifecycleHooks,
   runTool
-} from "./chunk-7X5TVGVY.js";
+} from "./chunk-TEXAIWUJ.js";
 import {
   getDangerLevel,
   isFileWriteTool,
   runLeanAgentLoop
-} from "./chunk-XPBEJB27.js";
+} from "./chunk-ODYTXQ26.js";
 import {
   EnvLoader,
   NetworkError,
@@ -33,7 +33,7 @@ import {
 } from "./chunk-4BKXL7SM.js";
 import {
   runTestsTool
-} from "./chunk-DKJ5EFKA.js";
+} from "./chunk-AEXWMIRE.js";
 import {
   CONFIG_DIR_NAME,
   DEFAULT_MAX_TOOL_OUTPUT_CHARS_CAP,
@@ -43,7 +43,7 @@ import {
   SUBAGENT_ALLOWED_TOOLS,
   SUBAGENT_DEFAULT_MAX_ROUNDS,
   SUBAGENT_MAX_ROUNDS_LIMIT
-} from "./chunk-CYVVWFFO.js";
+} from "./chunk-B3POS7LB.js";
 import {
   loadChatIndex,
   searchChatMemory
@@ -558,14 +558,19 @@ Important rules:
         );
       }
       if (status !== 0 || timedOut) {
-        throw {
-          status,
-          signal: null,
-          code: timedOut ? "ETIMEDOUT" : void 0,
-          stdout: Buffer.from(stdout, "utf-8"),
-          stderr: Buffer.from(stderr, "utf-8"),
-          message: timedOut ? "ETIMEDOUT" : `exit ${status}`
-        };
+        const poolStdout = (stdout ?? "").trim();
+        const poolStderr = (stderr ?? "").trim();
+        const combined = [poolStdout, poolStderr].filter(Boolean).join("\n");
+        const hint = buildErrorHint(command, combined);
+        throw new ToolError(
+          "bash",
+          `Exit code ${status}:
+${combined || `exit ${status}`}
+
+` + (hint ? `${hint}
+
+` : "") + `[Command failed. Report this error to the user. Do not retry with variant commands.]`
+        );
       }
       pushBashUndoEntries(beforeSnapshot, parsedTargetsBefore, effectiveCwd);
       updateCwdFromCommand(command, effectiveCwd);
@@ -2264,7 +2269,7 @@ var ToolExecutor = class {
         runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "ok" }, { configDir: this.hookConfigDir });
         return { callId: call.id, content, isError: false };
       } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
+        const message = err instanceof Error ? err.message : err && typeof err === "object" && "message" in err ? String(err.message) : String(err);
         this.printToolResult(call.name, message, true, false);
         runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
         runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "error", error: message }, { configDir: this.hookConfigDir });
@@ -2309,7 +2314,7 @@ var ToolExecutor = class {
           runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "ok" }, { configDir: this.hookConfigDir });
           return { callId: call.id, content, isError: false };
         } catch (err) {
-          const message = err instanceof Error ? err.message : String(err);
+          const message = err instanceof Error ? err.message : err && typeof err === "object" && "message" in err ? String(err.message) : String(err);
           this.printToolResult(call.name, message, true, false);
           runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
           runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "error", error: message }, { configDir: this.hookConfigDir });
@@ -2330,7 +2335,7 @@ var ToolExecutor = class {
         runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "ok" }, { configDir: this.hookConfigDir });
         return { callId: call.id, content, isError: false };
       } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
+        const message = err instanceof Error ? err.message : err && typeof err === "object" && "message" in err ? String(err.message) : String(err);
         this.printToolResult(call.name, message, true, false);
         runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
         runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "error", error: message }, { configDir: this.hookConfigDir });
@@ -2370,7 +2375,7 @@ var ToolExecutor = class {
       runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "ok" }, { configDir: this.hookConfigDir });
       return { callId: call.id, content, isError: false };
     } catch (err) {
-      const message = err instanceof Error ? err.message : String(err);
+      const message = err instanceof Error ? err.message : err && typeof err === "object" && "message" in err ? String(err.message) : String(err);
       this.printToolResult(call.name, message, true, false);
       runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
       runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "error", error: message }, { configDir: this.hookConfigDir });
@@ -2456,7 +2461,7 @@ var ToolExecutor = class {
           this.printToolResult(call.name, rawContent, false, wasTruncated);
           results[i] = { callId: call.id, content, isError: false };
         } catch (err) {
-          const message = err instanceof Error ? err.message : String(err);
+          const message = err instanceof Error ? err.message : err && typeof err === "object" && "message" in err ? String(err.message) : String(err);
           this.printToolResult(call.name, message, true, false);
           results[i] = { callId: call.id, content: message, isError: true };
         }

package/dist/{chunk-PUBCJF7E.js → chunk-EEQHP4GK.js}

@@ -3,7 +3,7 @@ import {
   detectsHallucinatedFileOp,
   repairToolCallArguments,
   schemaToJsonSchema
-} from "./chunk-XPBEJB27.js";
+} from "./chunk-ODYTXQ26.js";
 import {
   AuthError,
   ProviderError,
@@ -2250,18 +2250,32 @@ var ProviderRegistry = class {
   configDir;
   async initialize(getApiKey, getOptions, customProviderConfigs, configDir) {
     this.configDir = configDir;
-    for (const ProviderClass of BUILT_IN_PROVIDERS) {
+    const initTasks = BUILT_IN_PROVIDERS.map(async (ProviderClass) => {
       const provider = new ProviderClass();
       const apiKey = getApiKey(provider.info.id);
       if (apiKey || !provider.info.requiresApiKey) {
         const options = getOptions?.(provider.info.id) ?? {};
+        const pInit = provider.initialize(apiKey ?? "", options);
+        return { provider, pInit, requiresApiKey: !!provider.info.requiresApiKey };
+      }
+      return null;
+    });
+    const settled = await Promise.allSettled(
+      initTasks.map(async (task) => {
+        const result = await task;
+        if (!result) return;
+        const { provider, pInit, requiresApiKey } = result;
         try {
-          await provider.initialize(apiKey ?? "", options);
+          await pInit;
           this.providers.set(provider.info.id, provider);
         } catch (err) {
-          if (provider.info.requiresApiKey) throw err;
+          if (requiresApiKey) throw err;
         }
-      }
+      })
+    );
+    const keyErrors = settled.filter((r) => r.status === "rejected").map((r) => r.reason);
+    if (keyErrors.length > 0) {
+      throw keyErrors[0];
     }
     this.customConfigs = customProviderConfigs ?? [];
     for (const cfg of this.customConfigs) {

package/dist/{chunk-6LQ6PUNZ.js → chunk-FEVOW3NQ.js}

@@ -8,7 +8,7 @@ import {
   CONFIG_FILE_NAME,
   HISTORY_DIR_NAME,
   PLUGINS_DIR_NAME
-} from "./chunk-CYVVWFFO.js";
+} from "./chunk-B3POS7LB.js";
 import {
   atomicWriteFileSync
 } from "./chunk-IW3Q7AE5.js";
@@ -21,22 +21,22 @@ import { homedir } from "os";
 // src/config/schema.ts
 import { z } from "zod";
 var CustomModelSchema = z.object({
-  id: z.string(),
-  displayName: z.string().optional(),
+  id: z.string().max(100),
+  displayName: z.string().max(200).optional(),
   contextWindow: z.number().optional()
 });
 var CustomProviderConfigSchema = z.object({
-  id: z.string(),
+  id: z.string().max(100),
   // 唯一 ID，不能与内置 provider 重名
-  displayName: z.string(),
+  displayName: z.string().max(200),
   // 显示名称
-  apiKey: z.string().optional(),
+  apiKey: z.string().max(4e3).optional(),
   // 可选：直接在此写 key（也可通过 apiKeys 字段或环境变量提供）
-  baseUrl: z.string(),
+  baseUrl: z.string().max(2e3),
   // OpenAI 兼容 API 的 base URL（必填）
-  defaultModel: z.string(),
+  defaultModel: z.string().max(200),
   // 默认使用的模型 ID
-  models: z.array(CustomModelSchema).default([]),
+  models: z.array(CustomModelSchema).max(100).default([]),
   timeout: z.number().optional()
   // 请求超时（ms），覆盖全局默认值
 });
@@ -51,19 +51,19 @@ var ModelParamsSchema = z.object({
 });
 var UserProfileSchema = z.object({
   /** 真实姓名（如 "Jin Zhengdong"） */
-  name: z.string().optional(),
+  name: z.string().max(100).optional(),
   /** 昵称/称呼偏好（如 "东叔"），AI 会以此称呼你 */
-  nickname: z.string().optional(),
+  nickname: z.string().max(100).optional(),
   /** 职业角色（如 "Full-stack developer"、"Data scientist"） */
-  role: z.string().optional(),
+  role: z.string().max(200).optional(),
   /** 个人简介 / 专长描述（1-3 句话） */
-  bio: z.string().optional(),
+  bio: z.string().max(1e4).optional(),
   /** 兴趣领域或技术栈（如 ["TypeScript", "Rust", "AI/ML"]） */
-  interests: z.array(z.string()).default([]),
+  interests: z.array(z.string()).max(100).default([]),
   /** 语言偏好（如 "zh-CN"、"en"），AI 将据此选择交流语言 */
-  locale: z.string().optional(),
+  locale: z.string().max(20).optional(),
   /** 自定义人设补充（自由格式，直接注入 system prompt） */
-  extra: z.string().optional()
+  extra: z.string().max(5e3).optional()
 }).default({});
 var ConfigSchema = z.object({
   version: z.string().default("1.0.0"),
@@ -85,7 +85,7 @@ var ConfigSchema = z.object({
   // HTTP/HTTPS 代理地址（Node.js 不自动使用系统代理，需显式配置）
   // 例：http://127.0.0.1:10809
   // 也可通过环境变量 HTTPS_PROXY / HTTP_PROXY 覆盖
-  proxy: z.string().optional(),
+  proxy: z.string().max(500).optional(),
   // 自定义 Provider 列表（OpenAI 兼容接口，无需改代码）
   customProviders: z.array(CustomProviderConfigSchema).default([]),
   // 按模型 ID 存储的推理参数（key 为模型 ID，如 "deepseek-chat"）
@@ -119,7 +119,7 @@ var ConfigSchema = z.object({
   session: z.object({
     autoSave: z.boolean().default(true),
     maxHistoryDays: z.number().default(30),
-    systemPrompt: z.string().optional()
+    systemPrompt: z.string().max(1e5).optional()
   }).default({}),
   // 项目上下文文件配置
   // 启动时自动读取并注入 system prompt，类似 Claude Code 的 CLAUDE.md / Codex AGENTS.md 机制
@@ -127,14 +127,14 @@ var ConfigSchema = z.object({
   // 设为 false 可禁用此功能；指定字符串时仅加载 cwd 下的该文件
   contextFile: z.union([z.string(), z.literal(false)]).default("auto"),
   context: z.object({
-    projectDocFallbackFilenames: z.array(z.string()).default([]),
+    projectDocFallbackFilenames: z.array(z.string().max(500)).max(20).default([]),
     projectDocMaxBytes: z.number().int().positive().default(32 * 1024),
     showLoadedContextSources: z.boolean().default(false)
   }).default({}),
   // Google Custom Search API 的 Search Engine ID (cx 参数)
   // API Key 通过 apiKeys['google-search'] 或 AICLI_API_KEY_GOOGLESEARCH 环境变量配置
   // CX 也可通过 AICLI_GOOGLE_CX 环境变量覆盖
-  googleSearchEngineId: z.string().optional(),
+  googleSearchEngineId: z.string().max(200).optional(),
   // google_search 工具的安全开关（v0.4.135+）
   // 默认 disabled。这个工具调用 Google Custom Search API，没有原生 daily-spend cap——
   // 业内有多起 key 被盗后产生数万美元账单的真实案例。现在内置 web_search 工具走 Bing/Google
@@ -152,10 +152,10 @@ var ConfigSchema = z.object({
   // 配置格式兼容 Claude Desktop（command + args + env）
   // 示例：{ "filesystem": { "command": "npx", "args": ["-y", "@modelcontextprotocol/server-filesystem", "/path"] } }
   mcpServers: z.record(z.object({
-    command: z.string(),
-    args: z.array(z.string()).default([]),
+    command: z.string().max(500),
+    args: z.array(z.string()).max(100).default([]),
     env: z.record(z.string()).optional(),
-    timeout: z.number().default(3e4)
+    timeout: z.number().int().min(100).max(3e5).default(3e4)
   })).default({}),
   // Hooks 生命周期（v0.4.212+）：兼容旧 pre/post 字符串，同时支持 events.<EventName> 结构化 JSON hook。
   hooks: z.object({
@@ -189,8 +189,8 @@ var ConfigSchema = z.object({
   networkPolicy: z.object({
     enabled: z.boolean().default(false),
     defaultAction: z.enum(["allow", "confirm", "deny"]).default("confirm"),
-    allowDomains: z.array(z.string()).default([]),
-    denyDomains: z.array(z.string()).default([]),
+    allowDomains: z.array(z.string().max(500)).max(100).default([]),
+    denyDomains: z.array(z.string().max(500)).max(100).default([]),
     allowPorts: z.array(z.number().int().min(1).max(65535)).default([]),
     denyPorts: z.array(z.number().int().min(1).max(65535)).default([]),
     allowPrivateNetwork: z.boolean().default(false),
@@ -204,7 +204,7 @@ var ConfigSchema = z.object({
   }).default({ enabled: false, defaultAction: "confirm", allowDomains: [], denyDomains: [], allowPorts: [], denyPorts: [], allowPrivateNetwork: false, tools: {} }),
   // 权限 Profile（v0.4.211+）：legacy 保持旧行为；其余 profile 提供更清晰的安全边界。
   defaultPermissionProfile: z.enum(["legacy", "read-only", "workspace-write", "danger-full-access"]).default("legacy"),
-  allowedPermissionProfiles: z.array(z.string()).default(["legacy", "read-only", "workspace-write", "danger-full-access"]),
+  allowedPermissionProfiles: z.array(z.string().max(50)).max(20).default(["legacy", "read-only", "workspace-write", "danger-full-access"]),
   permissionProfiles: z.record(z.object({
     extends: z.enum(["legacy", "read-only", "workspace-write", "danger-full-access"]).optional(),
     defaultAction: z.enum(["auto-approve", "deny", "confirm"]).optional(),
@@ -221,7 +221,7 @@ var ConfigSchema = z.object({
   })).default({}),
   // 工具权限规则（按顺序匹配第一个生效；作为当前权限 Profile 内的细粒度规则）
   permissionRules: z.array(z.object({
-    tool: z.string(),
+    tool: z.string().max(100),
     action: z.enum(["auto-approve", "deny", "confirm"]),
     when: z.object({
       dangerLevel: z.enum(["safe", "write", "destructive"]).optional(),
@@ -279,7 +279,7 @@ var ConfigSchema = z.object({
     redactOnSave: z.boolean().default(true),
     redactOnSend: z.boolean().default(false),
     mode: z.enum(["default", "strict", "off"]).default("default"),
-    customPatterns: z.array(z.string()).default([])
+    customPatterns: z.array(z.string().max(200)).max(50).default([])
   }).default({}),
   // 智能模型路由（v0.4.68+）
   // 按用户每轮输入的内容/标签/长度动态选择模型，在同一 provider 内切换，
@@ -291,13 +291,13 @@ var ConfigSchema = z.object({
     enabled: z.boolean().default(false),
     rules: z.array(z.object({
       match: z.object({
-        contains: z.array(z.string()).optional(),
+        contains: z.array(z.string().max(200)).max(50).optional(),
         maxLength: z.number().int().positive().optional(),
         minLength: z.number().int().positive().optional(),
         tag: z.string().optional()
       }),
       model: z.string(),
-      name: z.string().optional()
+      name: z.string().max(100).optional()
     })).default([]),
     fallback: z.string().optional()
   }).default({ enabled: false, rules: [] }),
@@ -317,7 +317,7 @@ var ConfigSchema = z.object({
     maxBackoffMs: z.number().int().positive().default(8e3),
     /** 兜底 provider 链，每个 entry 仅尝试 1 次。model 省略则使用 provider 的 defaultModel。 */
     chain: z.array(z.object({
-      provider: z.string(),
+      provider: z.string().max(100),
       model: z.string().optional()
     })).default([])
   }).default({ enabled: false, retries: 2, initialBackoffMs: 500, maxBackoffMs: 8e3, chain: [] })

package/dist/{chunk-2X2DOHA6.js → chunk-NR5U6LVG.js}

@@ -14,13 +14,31 @@ var ROLE_COLORS = [
   chalk.rgb(148, 103, 189)
   // purple
 ];
+var CHALK_COLOR_NAMES = {
+  red: chalk.red,
+  green: chalk.green,
+  blue: chalk.blue,
+  yellow: chalk.yellow,
+  magenta: chalk.magenta,
+  cyan: chalk.cyan,
+  white: chalk.white,
+  gray: chalk.gray,
+  grey: chalk.grey,
+  black: chalk.black,
+  redBright: chalk.redBright,
+  greenBright: chalk.greenBright,
+  blueBright: chalk.blueBright,
+  yellowBright: chalk.yellowBright,
+  magentaBright: chalk.magentaBright,
+  cyanBright: chalk.cyanBright,
+  whiteBright: chalk.whiteBright
+};
 var colorMap = /* @__PURE__ */ new Map();
 function assignRoleColors(roles) {
   colorMap.clear();
-  const chalkColors = chalk;
   roles.forEach((role, i) => {
-    if (role.color && chalkColors[role.color]) {
-      colorMap.set(role.id, chalkColors[role.color]);
+    if (role.color && CHALK_COLOR_NAMES[role.color]) {
+      colorMap.set(role.id, CHALK_COLOR_NAMES[role.color]);
     } else {
       colorMap.set(role.id, ROLE_COLORS[i % ROLE_COLORS.length]);
     }

package/dist/{chunk-XPBEJB27.js → chunk-ODYTXQ26.js}

@@ -99,7 +99,44 @@ var HALLUCINATION_PATTERNS = [
   // “以下是图片的内容：”“以下是修改后的内容：”这类描述/对话。
   /以下是[^\n。.！!？?]*?(?:教案|试卷|讲义|课件|课程|文件|文档|脚本|配置|程序|报告|表格|清单)[^\n。.！!？?]{0,8}(?:内容)?[：:]/
 ];
+var QUICK_WRITE_KEYWORDS = [
+  // 中文写入动作
+  "\u5DF2\u4FDD\u5B58",
+  "\u5DF2\u5199\u5165",
+  "\u5DF2\u521B\u5EFA",
+  "\u5DF2\u751F\u6210",
+  "\u751F\u6210\u5B8C\u6210",
+  "\u4FDD\u5B58",
+  "\u5199\u5165",
+  "\u521B\u5EFA",
+  "\u751F\u6210",
+  // 中文文档名
+  "\u6587\u4EF6",
+  "\u6559\u6848",
+  "\u8BD5\u5377",
+  "\u8BB2\u4E49",
+  "\u8BFE\u4EF6",
+  "\u6587\u6863",
+  "\u811A\u672C",
+  "\u914D\u7F6E",
+  "\u7A0B\u5E8F",
+  "\u62A5\u544A",
+  "\u8868\u683C",
+  "\u6E05\u5355",
+  "\u7B14\u8BB0",
+  // 英文写入动作
+  "saved",
+  "written",
+  "created",
+  "File",
+  "file",
+  // emoji 勾选标记
+  "\u2705"
+];
 function detectsHallucinatedFileOp(content) {
+  if (!QUICK_WRITE_KEYWORDS.some((kw) => content.includes(kw))) {
+    return false;
+  }
   return HALLUCINATION_PATTERNS.some((pattern) => pattern.test(content));
 }
 function hadPreviousWriteToolCalls(extraMessages) {

package/dist/{chunk-OMFVR2O7.js → chunk-PQLRX7US.js}

@@ -2,7 +2,7 @@
 import {
   evaluateCiGate,
   normalizeCiThresholds
-} from "./chunk-NBG2STGM.js";
+} from "./chunk-AXIMNQSY.js";
 import {
   buildReviewPrompt,
   buildSecurityReviewPrompt,
@@ -10,13 +10,13 @@ import {
 } from "./chunk-HLWUDRBO.js";
 import {
   ProviderRegistry
-} from "./chunk-PUBCJF7E.js";
+} from "./chunk-EEQHP4GK.js";
 import {
   ConfigManager
-} from "./chunk-6LQ6PUNZ.js";
+} from "./chunk-FEVOW3NQ.js";
 import {
   VERSION
-} from "./chunk-CYVVWFFO.js";
+} from "./chunk-B3POS7LB.js";
 
 // src/cli/ci.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-YK5DDJNH.js → chunk-QCGKCNBX.js}

@@ -6,7 +6,7 @@ import { platform } from "os";
 import chalk from "chalk";
 
 // src/core/constants.ts
-var VERSION = "0.4.227";
+var VERSION = "0.4.229";
 var APP_NAME = "ai-cli";
 var CONFIG_DIR_NAME = ".aicli";
 var CONFIG_FILE_NAME = "config.json";

package/dist/{chunk-WJJIP34H.js → chunk-QFOJ4GXC.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   ProviderRegistry
-} from "./chunk-PUBCJF7E.js";
+} from "./chunk-EEQHP4GK.js";
 import {
   getActivePluginAssets,
   getPendingHookTrust,
@@ -11,10 +11,10 @@ import {
   listHooks,
   listInstalledPlugins,
   resetStats
-} from "./chunk-7X5TVGVY.js";
+} from "./chunk-TEXAIWUJ.js";
 import {
   ConfigManager
-} from "./chunk-6LQ6PUNZ.js";
+} from "./chunk-FEVOW3NQ.js";
 import {
   getGitRoot
 } from "./chunk-HOSJZMQS.js";
@@ -26,7 +26,7 @@ import {
   MCP_PROJECT_CONFIG_NAME,
   MEMORY_FILE_NAME,
   VERSION
-} from "./chunk-CYVVWFFO.js";
+} from "./chunk-B3POS7LB.js";
 
 // src/diagnostics/doctor-report.ts
 import { existsSync as existsSync3, statSync as statSync2 } from "fs";

package/dist/{chunk-S4AKNVFK.js → chunk-SJ36SUG7.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   truncateForPersist
-} from "./chunk-APBHCIPD.js";
+} from "./chunk-DMF6UHO6.js";
 import {
   APP_NAME,
   CONFIG_DIR_NAME,
@@ -11,7 +11,7 @@ import {
   MCP_PROTOCOL_VERSION,
   MCP_TOOL_PREFIX,
   VERSION
-} from "./chunk-CYVVWFFO.js";
+} from "./chunk-B3POS7LB.js";
 import {
   atomicWriteFileSync
 } from "./chunk-IW3Q7AE5.js";

package/dist/{chunk-7X5TVGVY.js → chunk-TEXAIWUJ.js}

@@ -2,7 +2,7 @@
 import {
   CONFIG_DIR_NAME,
   PLUGINS_DIR_NAME
-} from "./chunk-CYVVWFFO.js";
+} from "./chunk-B3POS7LB.js";
 import {
   atomicWriteFileSync
 } from "./chunk-IW3Q7AE5.js";

package/dist/{chunk-CITDVXXM.js → chunk-YVMACMXW.js}

@@ -10,14 +10,18 @@ import {
 // src/core/cost-tracker.ts
 import { existsSync, readFileSync } from "fs";
 import { join } from "path";
-var CostTracker = class {
+var CostTracker = class _CostTracker {
   filePath;
   records = [];
   dirty = false;
+  /** P2-PERF-04: debounce timer to batch rapid addCost() calls into a single save. */
+  _saveTimer;
   constructor(configDir) {
     this.filePath = join(configDir, "cost-history.json");
     this.load();
   }
+  /** P2-PERF-04: debounce interval (ms) — coalesces multiple rapid addCost calls. */
+  static SAVE_DEBOUNCE_MS = 2e3;
   load() {
     try {
       if (existsSync(this.filePath)) {
@@ -42,6 +46,10 @@ var CostTracker = class {
    */
   save() {
     if (!this.dirty) return;
+    if (this._saveTimer) {
+      clearTimeout(this._saveTimer);
+      this._saveTimer = void 0;
+    }
     const snapshot = {
       version: 1,
       records: [...this.records]
@@ -81,6 +89,15 @@ var CostTracker = class {
     m.cacheReadTokens += usage.cacheReadTokens ?? 0;
     m.calls += 1;
     this.dirty = true;
+    if (!this._saveTimer) {
+      this._saveTimer = setTimeout(() => {
+        this._saveTimer = void 0;
+        this.save();
+      }, _CostTracker.SAVE_DEBOUNCE_MS);
+      if (this._saveTimer && typeof this._saveTimer === "object" && "unref" in this._saveTimer) {
+        this._saveTimer.unref();
+      }
+    }
     if (this.records.length > 90) {
       this.records = this.records.slice(-90);
     }
@@ -222,6 +239,18 @@ var CostTracker = class {
     lines.push(`Last 7 days: ${last7.join("  ")}`);
     return lines.join("\n");
   }
+  /**
+   * P2-PERF-04: flush pending cost records to disk immediately.
+   * Call this before process exit or before reading cost data for display
+   * to ensure the in-memory buffer is reflected on disk.
+   */
+  flush() {
+    if (this._saveTimer) {
+      clearTimeout(this._saveTimer);
+      this._saveTimer = void 0;
+    }
+    this.save();
+  }
 };
 
 export {

package/dist/{ci-PEOV2I3Z.js → ci-ZCVDKFXY.js}

@@ -3,14 +3,14 @@ import {
   CI_COMMENT_MARKER,
   countSeverity,
   runCi
-} from "./chunk-OMFVR2O7.js";
-import "./chunk-NBG2STGM.js";
+} from "./chunk-PQLRX7US.js";
+import "./chunk-AXIMNQSY.js";
 import "./chunk-HLWUDRBO.js";
-import "./chunk-PUBCJF7E.js";
-import "./chunk-XPBEJB27.js";
-import "./chunk-6LQ6PUNZ.js";
+import "./chunk-EEQHP4GK.js";
+import "./chunk-ODYTXQ26.js";
+import "./chunk-FEVOW3NQ.js";
 import "./chunk-5ULLIOVC.js";
-import "./chunk-CYVVWFFO.js";
+import "./chunk-B3POS7LB.js";
 import "./chunk-IW3Q7AE5.js";
 export {
   CI_COMMENT_MARKER,

package/dist/{ci-format-4O7SHP4F.js → ci-format-CKXDFTN3.js}

@@ -6,8 +6,8 @@ import {
   formatCiResult,
   formatCiSarif,
   normalizeCiThresholds
-} from "./chunk-NBG2STGM.js";
-import "./chunk-CYVVWFFO.js";
+} from "./chunk-AXIMNQSY.js";
+import "./chunk-B3POS7LB.js";
 export {
   DEFAULT_CI_THRESHOLDS,
   detectCiGateSignals,

package/dist/{constants-HLNS4O5H.js → constants-J2MSGNFA.js}

@@ -38,7 +38,7 @@ import {
   TEST_TIMEOUT,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-CYVVWFFO.js";
+} from "./chunk-B3POS7LB.js";
 export {
   AGENTIC_BEHAVIOR_GUIDELINE,
   APP_NAME,