jinzd-ai-cli 0.4.227 → 0.4.229

package/dist/{doctor-cli-LA4AF6DK.js → doctor-cli-3VNTECP2.js}

@@ -2,14 +2,14 @@
 import {
   formatDoctorReport,
   runDoctorCli
-} from "./chunk-WJJIP34H.js";
-import "./chunk-PUBCJF7E.js";
-import "./chunk-7X5TVGVY.js";
-import "./chunk-XPBEJB27.js";
-import "./chunk-6LQ6PUNZ.js";
+} from "./chunk-QFOJ4GXC.js";
+import "./chunk-EEQHP4GK.js";
+import "./chunk-TEXAIWUJ.js";
+import "./chunk-ODYTXQ26.js";
+import "./chunk-FEVOW3NQ.js";
 import "./chunk-5ULLIOVC.js";
 import "./chunk-HOSJZMQS.js";
-import "./chunk-CYVVWFFO.js";
+import "./chunk-B3POS7LB.js";
 import "./chunk-IW3Q7AE5.js";
 export {
   formatDoctorReport,

package/dist/electron-server.js

@@ -38,7 +38,7 @@ import {
   VERSION,
   buildUserIdentityPrompt,
   runTestsTool
-} from "./chunk-YK5DDJNH.js";
+} from "./chunk-QCGKCNBX.js";
 import {
   hasSemanticIndex,
   semanticSearch
@@ -76,22 +76,22 @@ import { homedir } from "os";
 // src/config/schema.ts
 import { z } from "zod";
 var CustomModelSchema = z.object({
-  id: z.string(),
-  displayName: z.string().optional(),
+  id: z.string().max(100),
+  displayName: z.string().max(200).optional(),
   contextWindow: z.number().optional()
 });
 var CustomProviderConfigSchema = z.object({
-  id: z.string(),
+  id: z.string().max(100),
   // 唯一 ID，不能与内置 provider 重名
-  displayName: z.string(),
+  displayName: z.string().max(200),
   // 显示名称
-  apiKey: z.string().optional(),
+  apiKey: z.string().max(4e3).optional(),
   // 可选：直接在此写 key（也可通过 apiKeys 字段或环境变量提供）
-  baseUrl: z.string(),
+  baseUrl: z.string().max(2e3),
   // OpenAI 兼容 API 的 base URL（必填）
-  defaultModel: z.string(),
+  defaultModel: z.string().max(200),
   // 默认使用的模型 ID
-  models: z.array(CustomModelSchema).default([]),
+  models: z.array(CustomModelSchema).max(100).default([]),
   timeout: z.number().optional()
   // 请求超时（ms），覆盖全局默认值
 });
@@ -106,19 +106,19 @@ var ModelParamsSchema = z.object({
 });
 var UserProfileSchema = z.object({
   /** 真实姓名（如 "Jin Zhengdong"） */
-  name: z.string().optional(),
+  name: z.string().max(100).optional(),
   /** 昵称/称呼偏好（如 "东叔"），AI 会以此称呼你 */
-  nickname: z.string().optional(),
+  nickname: z.string().max(100).optional(),
   /** 职业角色（如 "Full-stack developer"、"Data scientist"） */
-  role: z.string().optional(),
+  role: z.string().max(200).optional(),
   /** 个人简介 / 专长描述（1-3 句话） */
-  bio: z.string().optional(),
+  bio: z.string().max(1e4).optional(),
   /** 兴趣领域或技术栈（如 ["TypeScript", "Rust", "AI/ML"]） */
-  interests: z.array(z.string()).default([]),
+  interests: z.array(z.string()).max(100).default([]),
   /** 语言偏好（如 "zh-CN"、"en"），AI 将据此选择交流语言 */
-  locale: z.string().optional(),
+  locale: z.string().max(20).optional(),
   /** 自定义人设补充（自由格式，直接注入 system prompt） */
-  extra: z.string().optional()
+  extra: z.string().max(5e3).optional()
 }).default({});
 var ConfigSchema = z.object({
   version: z.string().default("1.0.0"),
@@ -140,7 +140,7 @@ var ConfigSchema = z.object({
   // HTTP/HTTPS 代理地址（Node.js 不自动使用系统代理，需显式配置）
   // 例：http://127.0.0.1:10809
   // 也可通过环境变量 HTTPS_PROXY / HTTP_PROXY 覆盖
-  proxy: z.string().optional(),
+  proxy: z.string().max(500).optional(),
   // 自定义 Provider 列表（OpenAI 兼容接口，无需改代码）
   customProviders: z.array(CustomProviderConfigSchema).default([]),
   // 按模型 ID 存储的推理参数（key 为模型 ID，如 "deepseek-chat"）
@@ -174,7 +174,7 @@ var ConfigSchema = z.object({
   session: z.object({
     autoSave: z.boolean().default(true),
     maxHistoryDays: z.number().default(30),
-    systemPrompt: z.string().optional()
+    systemPrompt: z.string().max(1e5).optional()
   }).default({}),
   // 项目上下文文件配置
   // 启动时自动读取并注入 system prompt，类似 Claude Code 的 CLAUDE.md / Codex AGENTS.md 机制
@@ -182,14 +182,14 @@ var ConfigSchema = z.object({
   // 设为 false 可禁用此功能；指定字符串时仅加载 cwd 下的该文件
   contextFile: z.union([z.string(), z.literal(false)]).default("auto"),
   context: z.object({
-    projectDocFallbackFilenames: z.array(z.string()).default([]),
+    projectDocFallbackFilenames: z.array(z.string().max(500)).max(20).default([]),
     projectDocMaxBytes: z.number().int().positive().default(32 * 1024),
     showLoadedContextSources: z.boolean().default(false)
   }).default({}),
   // Google Custom Search API 的 Search Engine ID (cx 参数)
   // API Key 通过 apiKeys['google-search'] 或 AICLI_API_KEY_GOOGLESEARCH 环境变量配置
   // CX 也可通过 AICLI_GOOGLE_CX 环境变量覆盖
-  googleSearchEngineId: z.string().optional(),
+  googleSearchEngineId: z.string().max(200).optional(),
   // google_search 工具的安全开关（v0.4.135+）
   // 默认 disabled。这个工具调用 Google Custom Search API，没有原生 daily-spend cap——
   // 业内有多起 key 被盗后产生数万美元账单的真实案例。现在内置 web_search 工具走 Bing/Google
@@ -207,10 +207,10 @@ var ConfigSchema = z.object({
   // 配置格式兼容 Claude Desktop（command + args + env）
   // 示例：{ "filesystem": { "command": "npx", "args": ["-y", "@modelcontextprotocol/server-filesystem", "/path"] } }
   mcpServers: z.record(z.object({
-    command: z.string(),
-    args: z.array(z.string()).default([]),
+    command: z.string().max(500),
+    args: z.array(z.string()).max(100).default([]),
     env: z.record(z.string()).optional(),
-    timeout: z.number().default(3e4)
+    timeout: z.number().int().min(100).max(3e5).default(3e4)
   })).default({}),
   // Hooks 生命周期（v0.4.212+）：兼容旧 pre/post 字符串，同时支持 events.<EventName> 结构化 JSON hook。
   hooks: z.object({
@@ -244,8 +244,8 @@ var ConfigSchema = z.object({
   networkPolicy: z.object({
     enabled: z.boolean().default(false),
     defaultAction: z.enum(["allow", "confirm", "deny"]).default("confirm"),
-    allowDomains: z.array(z.string()).default([]),
-    denyDomains: z.array(z.string()).default([]),
+    allowDomains: z.array(z.string().max(500)).max(100).default([]),
+    denyDomains: z.array(z.string().max(500)).max(100).default([]),
     allowPorts: z.array(z.number().int().min(1).max(65535)).default([]),
     denyPorts: z.array(z.number().int().min(1).max(65535)).default([]),
     allowPrivateNetwork: z.boolean().default(false),
@@ -259,7 +259,7 @@ var ConfigSchema = z.object({
   }).default({ enabled: false, defaultAction: "confirm", allowDomains: [], denyDomains: [], allowPorts: [], denyPorts: [], allowPrivateNetwork: false, tools: {} }),
   // 权限 Profile（v0.4.211+）：legacy 保持旧行为；其余 profile 提供更清晰的安全边界。
   defaultPermissionProfile: z.enum(["legacy", "read-only", "workspace-write", "danger-full-access"]).default("legacy"),
-  allowedPermissionProfiles: z.array(z.string()).default(["legacy", "read-only", "workspace-write", "danger-full-access"]),
+  allowedPermissionProfiles: z.array(z.string().max(50)).max(20).default(["legacy", "read-only", "workspace-write", "danger-full-access"]),
   permissionProfiles: z.record(z.object({
     extends: z.enum(["legacy", "read-only", "workspace-write", "danger-full-access"]).optional(),
     defaultAction: z.enum(["auto-approve", "deny", "confirm"]).optional(),
@@ -276,7 +276,7 @@ var ConfigSchema = z.object({
   })).default({}),
   // 工具权限规则（按顺序匹配第一个生效；作为当前权限 Profile 内的细粒度规则）
   permissionRules: z.array(z.object({
-    tool: z.string(),
+    tool: z.string().max(100),
     action: z.enum(["auto-approve", "deny", "confirm"]),
     when: z.object({
       dangerLevel: z.enum(["safe", "write", "destructive"]).optional(),
@@ -334,7 +334,7 @@ var ConfigSchema = z.object({
     redactOnSave: z.boolean().default(true),
     redactOnSend: z.boolean().default(false),
     mode: z.enum(["default", "strict", "off"]).default("default"),
-    customPatterns: z.array(z.string()).default([])
+    customPatterns: z.array(z.string().max(200)).max(50).default([])
   }).default({}),
   // 智能模型路由（v0.4.68+）
   // 按用户每轮输入的内容/标签/长度动态选择模型，在同一 provider 内切换，
@@ -346,13 +346,13 @@ var ConfigSchema = z.object({
     enabled: z.boolean().default(false),
     rules: z.array(z.object({
       match: z.object({
-        contains: z.array(z.string()).optional(),
+        contains: z.array(z.string().max(200)).max(50).optional(),
         maxLength: z.number().int().positive().optional(),
         minLength: z.number().int().positive().optional(),
         tag: z.string().optional()
       }),
       model: z.string(),
-      name: z.string().optional()
+      name: z.string().max(100).optional()
     })).default([]),
     fallback: z.string().optional()
   }).default({ enabled: false, rules: [] }),
@@ -372,7 +372,7 @@ var ConfigSchema = z.object({
     maxBackoffMs: z.number().int().positive().default(8e3),
     /** 兜底 provider 链，每个 entry 仅尝试 1 次。model 省略则使用 provider 的 defaultModel。 */
     chain: z.array(z.object({
-      provider: z.string(),
+      provider: z.string().max(100),
       model: z.string().optional()
     })).default([])
   }).default({ enabled: false, retries: 2, initialBackoffMs: 500, maxBackoffMs: 8e3, chain: [] })
@@ -1692,7 +1692,44 @@ var HALLUCINATION_PATTERNS = [
   // “以下是图片的内容：”“以下是修改后的内容：”这类描述/对话。
   /以下是[^\n。.！!？?]*?(?:教案|试卷|讲义|课件|课程|文件|文档|脚本|配置|程序|报告|表格|清单)[^\n。.！!？?]{0,8}(?:内容)?[：:]/
 ];
+var QUICK_WRITE_KEYWORDS = [
+  // 中文写入动作
+  "\u5DF2\u4FDD\u5B58",
+  "\u5DF2\u5199\u5165",
+  "\u5DF2\u521B\u5EFA",
+  "\u5DF2\u751F\u6210",
+  "\u751F\u6210\u5B8C\u6210",
+  "\u4FDD\u5B58",
+  "\u5199\u5165",
+  "\u521B\u5EFA",
+  "\u751F\u6210",
+  // 中文文档名
+  "\u6587\u4EF6",
+  "\u6559\u6848",
+  "\u8BD5\u5377",
+  "\u8BB2\u4E49",
+  "\u8BFE\u4EF6",
+  "\u6587\u6863",
+  "\u811A\u672C",
+  "\u914D\u7F6E",
+  "\u7A0B\u5E8F",
+  "\u62A5\u544A",
+  "\u8868\u683C",
+  "\u6E05\u5355",
+  "\u7B14\u8BB0",
+  // 英文写入动作
+  "saved",
+  "written",
+  "created",
+  "File",
+  "file",
+  // emoji 勾选标记
+  "\u2705"
+];
 function detectsHallucinatedFileOp(content) {
+  if (!QUICK_WRITE_KEYWORDS.some((kw) => content.includes(kw))) {
+    return false;
+  }
   return HALLUCINATION_PATTERNS.some((pattern) => pattern.test(content));
 }
 function hadPreviousWriteToolCalls(extraMessages) {
@@ -3966,18 +4003,32 @@ var ProviderRegistry = class {
   configDir;
   async initialize(getApiKey, getOptions, customProviderConfigs, configDir) {
     this.configDir = configDir;
-    for (const ProviderClass of BUILT_IN_PROVIDERS) {
+    const initTasks = BUILT_IN_PROVIDERS.map(async (ProviderClass) => {
       const provider = new ProviderClass();
       const apiKey = getApiKey(provider.info.id);
       if (apiKey || !provider.info.requiresApiKey) {
         const options = getOptions?.(provider.info.id) ?? {};
+        const pInit = provider.initialize(apiKey ?? "", options);
+        return { provider, pInit, requiresApiKey: !!provider.info.requiresApiKey };
+      }
+      return null;
+    });
+    const settled = await Promise.allSettled(
+      initTasks.map(async (task) => {
+        const result = await task;
+        if (!result) return;
+        const { provider, pInit, requiresApiKey } = result;
         try {
-          await provider.initialize(apiKey ?? "", options);
+          await pInit;
           this.providers.set(provider.info.id, provider);
         } catch (err) {
-          if (provider.info.requiresApiKey) throw err;
+          if (requiresApiKey) throw err;
         }
-      }
+      })
+    );
+    const keyErrors = settled.filter((r) => r.status === "rejected").map((r) => r.reason);
+    if (keyErrors.length > 0) {
+      throw keyErrors[0];
     }
     this.customConfigs = customProviderConfigs ?? [];
     for (const cfg of this.customConfigs) {
@@ -5331,14 +5382,19 @@ Important rules:
         );
       }
       if (status !== 0 || timedOut) {
-        throw {
-          status,
-          signal: null,
-          code: timedOut ? "ETIMEDOUT" : void 0,
-          stdout: Buffer.from(stdout, "utf-8"),
-          stderr: Buffer.from(stderr, "utf-8"),
-          message: timedOut ? "ETIMEDOUT" : `exit ${status}`
-        };
+        const poolStdout = (stdout ?? "").trim();
+        const poolStderr = (stderr ?? "").trim();
+        const combined = [poolStdout, poolStderr].filter(Boolean).join("\n");
+        const hint = buildErrorHint(command, combined);
+        throw new ToolError(
+          "bash",
+          `Exit code ${status}:
+${combined || `exit ${status}`}
+
+` + (hint ? `${hint}
+
+` : "") + `[Command failed. Report this error to the user. Do not retry with variant commands.]`
+        );
       }
       pushBashUndoEntries(beforeSnapshot, parsedTargetsBefore, effectiveCwd);
       updateCwdFromCommand(command, effectiveCwd);
@@ -7262,7 +7318,7 @@ var ToolExecutor = class {
         runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "ok" }, { configDir: this.hookConfigDir });
         return { callId: call.id, content, isError: false };
       } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
+        const message = err instanceof Error ? err.message : err && typeof err === "object" && "message" in err ? String(err.message) : String(err);
         this.printToolResult(call.name, message, true, false);
         runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
         runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "error", error: message }, { configDir: this.hookConfigDir });
@@ -7307,7 +7363,7 @@ var ToolExecutor = class {
           runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "ok" }, { configDir: this.hookConfigDir });
           return { callId: call.id, content, isError: false };
         } catch (err) {
-          const message = err instanceof Error ? err.message : String(err);
+          const message = err instanceof Error ? err.message : err && typeof err === "object" && "message" in err ? String(err.message) : String(err);
           this.printToolResult(call.name, message, true, false);
           runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
           runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "error", error: message }, { configDir: this.hookConfigDir });
@@ -7328,7 +7384,7 @@ var ToolExecutor = class {
         runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "ok" }, { configDir: this.hookConfigDir });
         return { callId: call.id, content, isError: false };
       } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
+        const message = err instanceof Error ? err.message : err && typeof err === "object" && "message" in err ? String(err.message) : String(err);
         this.printToolResult(call.name, message, true, false);
         runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
         runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "error", error: message }, { configDir: this.hookConfigDir });
@@ -7368,7 +7424,7 @@ var ToolExecutor = class {
       runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "ok" }, { configDir: this.hookConfigDir });
       return { callId: call.id, content, isError: false };
     } catch (err) {
-      const message = err instanceof Error ? err.message : String(err);
+      const message = err instanceof Error ? err.message : err && typeof err === "object" && "message" in err ? String(err.message) : String(err);
       this.printToolResult(call.name, message, true, false);
       runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
       runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "error", error: message }, { configDir: this.hookConfigDir });
@@ -7454,7 +7510,7 @@ var ToolExecutor = class {
           this.printToolResult(call.name, rawContent, false, wasTruncated);
           results[i] = { callId: call.id, content, isError: false };
         } catch (err) {
-          const message = err instanceof Error ? err.message : String(err);
+          const message = err instanceof Error ? err.message : err && typeof err === "object" && "message" in err ? String(err.message) : String(err);
           this.printToolResult(call.name, message, true, false);
           results[i] = { callId: call.id, content: message, isError: true };
         }
@@ -13309,7 +13365,7 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
         runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "ok" }, { configDir: this.hookConfigDir });
         return { callId: call.id, content, isError: false };
       } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
+        const message = err instanceof Error ? err.message : err && typeof err === "object" && "message" in err ? String(err.message) : String(err);
         this.sendToolCallResult(call, message, true);
         runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
         runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "error", error: message }, { configDir: this.hookConfigDir });
@@ -13348,7 +13404,7 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
           runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "ok" }, { configDir: this.hookConfigDir });
           return { callId: call.id, content, isError: false };
         } catch (err) {
-          const message = err instanceof Error ? err.message : String(err);
+          const message = err instanceof Error ? err.message : err && typeof err === "object" && "message" in err ? String(err.message) : String(err);
           this.sendToolCallResult(call, message, true);
           runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
           runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "error", error: message }, { configDir: this.hookConfigDir });
@@ -13365,7 +13421,7 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
         runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "ok" }, { configDir: this.hookConfigDir });
         return { callId: call.id, content, isError: false };
       } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
+        const message = err instanceof Error ? err.message : err && typeof err === "object" && "message" in err ? String(err.message) : String(err);
         this.sendToolCallResult(call, message, true);
         runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
         runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "error", error: message }, { configDir: this.hookConfigDir });
@@ -13389,7 +13445,7 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
       runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "ok" }, { configDir: this.hookConfigDir });
       return { callId: call.id, content, isError: false };
     } catch (err) {
-      const message = err instanceof Error ? err.message : String(err);
+      const message = err instanceof Error ? err.message : err && typeof err === "object" && "message" in err ? String(err.message) : String(err);
       this.sendToolCallResult(call, message, true);
       runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
       runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "error", error: message }, { configDir: this.hookConfigDir });
@@ -13452,7 +13508,7 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
           this.sendToolCallResult(call, rawContent, false);
           results[i] = { callId: call.id, content, isError: false };
         } catch (err) {
-          const message = err instanceof Error ? err.message : String(err);
+          const message = err instanceof Error ? err.message : err && typeof err === "object" && "message" in err ? String(err.message) : String(err);
           this.sendToolCallResult(call, message, true);
           results[i] = { callId: call.id, content: message, isError: true };
         }
@@ -16017,7 +16073,7 @@ async function handleSecurityReview(args, ctx) {
 async function handleTest(args, ctx) {
   ctx.send({ type: "info", message: "\u{1F9EA} Running tests..." });
   try {
-    const { executeTests } = await import("./run-tests-DGV6D4L3.js");
+    const { executeTests } = await import("./run-tests-QVXDTJ3O.js");
     const argStr = args.join(" ").trim();
     let testArgs = {};
     if (argStr) {

package/dist/{hub-MAJE7GB7.js → hub-LIH5JEI7.js}

@@ -3,7 +3,7 @@ import {
   assignRoleColors,
   renderHubBanner,
   renderHubEvent
-} from "./chunk-2X2DOHA6.js";
+} from "./chunk-NR5U6LVG.js";
 import {
   DiscussionOrchestrator,
   getPreset,
@@ -154,7 +154,7 @@ ${content}`);
   }
 }
 async function runTaskMode(config, providers, configManager, topic) {
-  const { TaskOrchestrator } = await import("./task-orchestrator-YSHHXWNT.js");
+  const { TaskOrchestrator } = await import("./task-orchestrator-FA4KOVD2.js");
   const orchestrator = new TaskOrchestrator(config, providers, configManager);
   let interrupted = false;
   const onSigint = () => {
@@ -190,7 +190,7 @@ async function runTaskMode(config, providers, configManager, topic) {
   }
 }
 async function runDistributedDiscussion(config, providers, topic, port) {
-  const { HubServer } = await import("./hub-server-XX36DX7O.js");
+  const { HubServer } = await import("./hub-server-XA7HTVLD.js");
   const hub = new HubServer(config, providers, port);
   let interrupted = false;
   const onSigint = () => {

package/dist/{hub-server-XX36DX7O.js → hub-server-XA7HTVLD.js}

@@ -10,7 +10,7 @@ import {
   renderRoundHeader,
   renderSummary,
   renderUserInterrupt
-} from "./chunk-2X2DOHA6.js";
+} from "./chunk-NR5U6LVG.js";
 import {
   HubAgent
 } from "./chunk-3ARPAVNV.js";

package/dist/index.js

@@ -14,7 +14,7 @@ import {
   scanProject,
   sessionHasMeaningfulContent,
   setupProxy
-} from "./chunk-S4AKNVFK.js";
+} from "./chunk-SJ36SUG7.js";
 import {
   buildReviewPrompt,
   buildSecurityReviewPrompt
@@ -52,7 +52,7 @@ import {
   theme,
   undoStack,
   updateMemoryApproval
-} from "./chunk-APBHCIPD.js";
+} from "./chunk-DMF6UHO6.js";
 import "./chunk-K3CF65QH.js";
 import "./chunk-UUSRWSSX.js";
 import "./chunk-CKH4KQ4E.js";
@@ -63,7 +63,7 @@ import {
 } from "./chunk-QYQCCIBT.js";
 import {
   CostTracker
-} from "./chunk-CITDVXXM.js";
+} from "./chunk-YVMACMXW.js";
 import {
   computeCost,
   formatCost,
@@ -74,10 +74,10 @@ import {
   formatDoctorReport,
   loadContextFiles,
   writeCrashLog
-} from "./chunk-WJJIP34H.js";
+} from "./chunk-QFOJ4GXC.js";
 import {
   ProviderRegistry
-} from "./chunk-PUBCJF7E.js";
+} from "./chunk-EEQHP4GK.js";
 import {
   describePlugin,
   getActivePluginAssets,
@@ -94,7 +94,7 @@ import {
   trustHook,
   trustPlugin,
   untrustHook
-} from "./chunk-7X5TVGVY.js";
+} from "./chunk-TEXAIWUJ.js";
 import {
   CONTENT_ONLY_STREAM_REMINDER,
   TEE_FINAL_USER_NUDGE,
@@ -113,10 +113,10 @@ import {
   stripOuterCodeFence,
   stripToolCallReminder,
   teeStreamErrorSummary
-} from "./chunk-XPBEJB27.js";
+} from "./chunk-ODYTXQ26.js";
 import {
   ConfigManager
-} from "./chunk-6LQ6PUNZ.js";
+} from "./chunk-FEVOW3NQ.js";
 import {
   AuthError,
   ProviderError,
@@ -130,7 +130,7 @@ import {
 import {
   fileCheckpoints
 } from "./chunk-4BKXL7SM.js";
-import "./chunk-DKJ5EFKA.js";
+import "./chunk-AEXWMIRE.js";
 import {
   AGENTIC_BEHAVIOR_GUIDELINE,
   AUTHOR,
@@ -149,7 +149,7 @@ import {
   SKILLS_DIR_NAME,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-CYVVWFFO.js";
+} from "./chunk-B3POS7LB.js";
 import {
   buildChatIndex,
   clearChatIndex,
@@ -1834,7 +1834,7 @@ No tools match "${filter}".
           const { join: join7 } = await import("path");
           const { existsSync: existsSync6 } = await import("fs");
           const { getGitRoot: getGitRoot2 } = await import("./git-context-EXOEHQSF.js");
-          const { MCP_PROJECT_CONFIG_NAME: MCP_PROJECT_CONFIG_NAME2 } = await import("./constants-HLNS4O5H.js");
+          const { MCP_PROJECT_CONFIG_NAME: MCP_PROJECT_CONFIG_NAME2 } = await import("./constants-J2MSGNFA.js");
           const { approveProject, hashMcpFile } = await import("./project-trust-NKYHL3VZ.js");
           const cwd = process.cwd();
           const projectRoot = getGitRoot2(cwd) ?? cwd;
@@ -2813,7 +2813,7 @@ function createReviewCommands() {
       usage: "/test [command|filter]",
       async execute(args, ctx) {
         try {
-          const { executeTests } = await import("./run-tests-QFYTNPSV.js");
+          const { executeTests } = await import("./run-tests-WBGQI5V7.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {
@@ -7758,7 +7758,7 @@ program.command("web").description("Start Web UI server with browser-based chat
     console.error("Error: Invalid port number. Must be between 1 and 65535.");
     process.exit(1);
   }
-  const { startWebServer } = await import("./server-ZQYQDQMT.js");
+  const { startWebServer } = await import("./server-LYTXYK6Y.js");
   await startWebServer({ port, host: options.host });
 });
 program.command("user [action] [username]").description("Manage Web UI users (list | create <name> | delete <name> | reset-password <name> | logout-all <name> | migrate <name>)").action(async (action, username) => {
@@ -7925,11 +7925,11 @@ program.command("sessions").description("List recent conversation sessions").opt
   console.log(footer + "\n");
 });
 program.command("usage").description("Show token + cost usage grouped by provider/model (cross-session)").option("--days <n>", "Only the last N days (inclusive of today)").option("--month <ym>", "Only a specific month, format YYYY-MM (e.g. 2026-06)").option("--json", "Output as JSON (for scripting)").action(async (options) => {
-  const { runUsageCli } = await import("./usage-QDSXUKN7.js");
+  const { runUsageCli } = await import("./usage-EHV6YVGH.js");
   await runUsageCli(options);
 });
 program.command("doctor").description("Health check: API keys, config, MCP, recent crashes, tool usage, disk usage").option("--json", "Output as JSON (for scripting)").option("--reset-stats", "Reset accumulated tool usage statistics").action(async (options) => {
-  const { runDoctorCli } = await import("./doctor-cli-LA4AF6DK.js");
+  const { runDoctorCli } = await import("./doctor-cli-3VNTECP2.js");
   const argv = process.argv.slice(2);
   await runDoctorCli({
     json: !!options.json || argv.includes("--json"),
@@ -7938,7 +7938,7 @@ program.command("doctor").description("Health check: API keys, config, MCP, rece
 });
 program.command("batch <action> [arg] [arg2]").description("Anthropic Message Batches: submit | list | status <id> | results <id> [out] | cancel <id>").option("--dry-run", "Parse and validate input without submitting (submit only)").action(async (action, arg, arg2, options) => {
   try {
-    const batch = await import("./batch-W2DJGST7.js");
+    const batch = await import("./batch-XZHTNJXJ.js");
     switch (action) {
       case "submit":
         if (!arg) {
@@ -7981,7 +7981,7 @@ program.command("batch <action> [arg] [arg2]").description("Anthropic Message Ba
   }
 });
 program.command("mcp-serve").description("Start an MCP server over STDIO, exposing aicli's built-in tools to Claude Desktop / Cursor / other MCP clients").option("--allow-destructive", "Allow bash / run_interactive / task_create (always destructive in MCP mode)").option("--allow-outside-cwd", "Allow tool path arguments to escape the sandbox root \u2014 disabled by default").option("--tools <list>", "Comma-separated whitelist of tools to expose (default: all eligible tools)").option("--cwd <path>", "Working directory AND sandbox root (default: current directory)").action(async (options) => {
-  const { startMcpServer } = await import("./server-GTIVGJ6S.js");
+  const { startMcpServer } = await import("./server-5RXWIX4I.js");
   await startMcpServer({
     allowDestructive: !!options.allowDestructive,
     allowOutsideCwd: !!options.allowOutsideCwd,
@@ -7994,7 +7994,7 @@ program.command("pr <action> [target]").description("PR review helpers: review |
     console.error(`Unknown pr action: ${action}. Use review | security-review | summarize.`);
     process.exit(1);
   }
-  const { runPrCli } = await import("./pr-CDJFUPZX.js");
+  const { runPrCli } = await import("./pr-HY2QCVUY.js");
   const result = await runPrCli({
     action,
     target,
@@ -8014,8 +8014,8 @@ program.command("pr <action> [target]").description("PR review helpers: review |
   process.exit(result.exitCode);
 });
 program.command("ci").description("Headless PR review (code + security) \u2014 reads git/gh diff, optionally posts to PR. Designed for GitHub Actions.").option("--pr <num>", "PR number or URL; diff fetched via gh pr diff <value>", (v) => /^#?\d+$/.test(v) ? parseInt(v.replace(/^#/, ""), 10) : v).option("--base <ref>", "Base ref for git diff <ref>...HEAD (ignored when --pr set)").option("--post", "Post review as a PR comment (requires gh CLI + GH_TOKEN, needs --pr)").option("--no-update", "Always create a new comment instead of updating the previous aicli review").option("--skip-code", "Skip the code review section").option("--skip-security", "Skip the security review section").option("--detailed", "Use the detailed code-review prompt").option("--max-diff <n>", "Max diff chars sent to the model (default 30000)", (v) => parseInt(v, 10)).option("--provider <id>", "Override provider (default: config.defaultProvider)").option("--model <id>", "Override model").option("--dry-run", "Print result to stdout instead of posting (overrides --post)").option("--json", "Output a structured JSON report").option("--markdown", "Output Markdown report (default)").option("--sarif", "Output SARIF 2.1.0 for code scanning artifacts").option("--fail-on-security-high", "Fail when the security review contains HIGH/CRITICAL findings (default)").option("--no-fail-on-security-high", "Do not fail on security HIGH/CRITICAL findings").option("--fail-on-test-failure", "Fail when the report mentions test failures (default)").option("--no-fail-on-test-failure", "Do not fail on test failure findings").option("--fail-on-lint-failure", "Fail when the report mentions lint/typecheck failures (default)").option("--no-fail-on-lint-failure", "Do not fail on lint/typecheck failure findings").action(async (options) => {
-  const { runCi } = await import("./ci-PEOV2I3Z.js");
-  const { formatCiResult } = await import("./ci-format-4O7SHP4F.js");
+  const { runCi } = await import("./ci-ZCVDKFXY.js");
+  const { formatCiResult } = await import("./ci-format-CKXDFTN3.js");
   const formats = [options.json, options.markdown, options.sarif].filter(Boolean).length;
   if (formats > 1) {
     console.error("Choose only one output format: --json, --markdown, or --sarif.");
@@ -8173,7 +8173,7 @@ program.command("hub [topic]").description("Start multi-agent hub (discuss / bra
     config.get("customProviders"),
     config.getConfigDir()
   );
-  const { startHub } = await import("./hub-MAJE7GB7.js");
+  const { startHub } = await import("./hub-LIH5JEI7.js");
   await startHub(
     {
       topic: topic ?? "",

package/dist/{pr-CDJFUPZX.js → pr-HY2QCVUY.js}

@@ -2,8 +2,8 @@
 import {
   countSeverity,
   runCi
-} from "./chunk-OMFVR2O7.js";
-import "./chunk-NBG2STGM.js";
+} from "./chunk-PQLRX7US.js";
+import "./chunk-AXIMNQSY.js";
 import {
   buildReviewPrompt,
   buildSecurityReviewPrompt,
@@ -11,15 +11,15 @@ import {
 } from "./chunk-HLWUDRBO.js";
 import {
   ProviderRegistry
-} from "./chunk-PUBCJF7E.js";
-import "./chunk-XPBEJB27.js";
+} from "./chunk-EEQHP4GK.js";
+import "./chunk-ODYTXQ26.js";
 import {
   ConfigManager
-} from "./chunk-6LQ6PUNZ.js";
+} from "./chunk-FEVOW3NQ.js";
 import "./chunk-5ULLIOVC.js";
 import {
   VERSION
-} from "./chunk-CYVVWFFO.js";
+} from "./chunk-B3POS7LB.js";
 import "./chunk-IW3Q7AE5.js";
 
 // src/cli/pr.ts

package/dist/{run-tests-DGV6D4L3.js → run-tests-QVXDTJ3O.js}

@@ -1,7 +1,7 @@
 import {
   executeTests,
   runTestsTool
-} from "./chunk-YK5DDJNH.js";
+} from "./chunk-QCGKCNBX.js";
 export {
   executeTests,
   runTestsTool