jinzd-ai-cli 0.4.23 → 0.4.25

package/dist/{chunk-PDVX5QJA.js → chunk-5GZQLJAY.js}

@@ -1,4 +1,7 @@
 #!/usr/bin/env node
+import {
+  fileCheckpoints
+} from "./chunk-4BKXL7SM.js";
 import {
   CONFIG_DIR_NAME,
   MEMORY_FILE_NAME,
@@ -6,7 +9,7 @@ import {
   SUBAGENT_DEFAULT_MAX_ROUNDS,
   SUBAGENT_MAX_ROUNDS_LIMIT,
   runTestsTool
-} from "./chunk-UA4BVWKV.js";
+} from "./chunk-AHH5I2U6.js";
 
 // src/tools/builtin/bash.ts
 import { execSync } from "child_process";
@@ -586,37 +589,849 @@ Cannot extract text from this PDF, but found alternative text versions:
 ` + textAlts.map((p) => `  \u2192 ${basename(p)}`).join("\n") + `
 Please use read_file to read the above files.`;
       }
-      return `[PDF file: ${filePath}]
-Cannot extract text from this PDF (requires pdftotext or pdfminer.six).
-Suggestion: read existing text versions (.md / .txt) in the project, or install extraction tools via bash and retry.`;
-    }
-    if (BINARY_EXTENSIONS.has(ext)) {
-      return `[Binary file: ${filePath} (${ext})]
-This is a binary file and cannot be read as text. If there is a text version (.md / .txt) in the project, please read that instead.`;
-    }
-    const { readFile: readFile2 } = await import("fs/promises");
-    const buf = size > 1048576 ? await readFile2(normalizedPath) : readFileSync2(normalizedPath);
-    if (encoding === "base64") {
-      return `[File: ${filePath} | base64]
-
-${buf.toString("base64")}`;
+      return `[PDF file: ${filePath}]
+Cannot extract text from this PDF (requires pdftotext or pdfminer.six).
+Suggestion: read existing text versions (.md / .txt) in the project, or install extraction tools via bash and retry.`;
+    }
+    if (BINARY_EXTENSIONS.has(ext)) {
+      return `[Binary file: ${filePath} (${ext})]
+This is a binary file and cannot be read as text. If there is a text version (.md / .txt) in the project, please read that instead.`;
+    }
+    const { readFile: readFile2 } = await import("fs/promises");
+    const buf = size > 1048576 ? await readFile2(normalizedPath) : readFileSync2(normalizedPath);
+    if (encoding === "base64") {
+      return `[File: ${filePath} | base64]
+
+${buf.toString("base64")}`;
+    }
+    if (isBinaryBuffer(buf)) {
+      return `[Binary file: ${filePath}]
+This file contains binary data and cannot be read as text.
+If needed, use the bash tool to run an appropriate conversion program.`;
+    }
+    const content = buf.toString(encoding);
+    const lines = content.split("\n").length;
+    return `${sensitiveWarning}[File: ${filePath} | ${lines} lines]
+
+${content}`;
+  }
+};
+
+// src/tools/builtin/write-file.ts
+import { writeFileSync as writeFileSync2, appendFileSync, mkdirSync } from "fs";
+import { dirname as dirname2 } from "path";
+
+// src/tools/executor.ts
+import chalk3 from "chalk";
+import { existsSync as existsSync4, readFileSync as readFileSync3 } from "fs";
+
+// src/tools/types.ts
+function isFileWriteTool(name) {
+  return name === "write_file" || name === "edit_file";
+}
+function getDangerLevel(toolName, args) {
+  if (toolName.startsWith("mcp__")) return "safe";
+  if (toolName === "bash") {
+    const cmd = String(args["command"] ?? "");
+    if (/\brm\s+[^\n]*(?:-\w*[rRfF]\w*|--recursive|--force)\b/.test(cmd)) return "destructive";
+    if (/\brm\s+\S/.test(cmd)) return "destructive";
+    if (/\brmdir\b|\bformat\b|\bmkfs\b/.test(cmd)) return "destructive";
+    if (/\bRemove-Item\b.*(?:-Recurse|-Force)|\bri\s+.*-(?:Recurse|Force)\b|\brd\s+\/s\b|\brmdir\s+\/s\b/i.test(cmd)) return "destructive";
+    if (/\bdel\s+\S/.test(cmd)) return "destructive";
+    if (/\becho\b.*>>?|\btee\b|\bcp\b|\bmv\b/.test(cmd)) return "write";
+    if (/\bSet-Content\b|\bOut-File\b|\bAdd-Content\b|\bCopy-Item\b|\bMove-Item\b/i.test(cmd)) return "write";
+    return "safe";
+  }
+  if (toolName === "write_file") return "write";
+  if (toolName === "edit_file") return "write";
+  if (toolName === "save_last_response") return "write";
+  if (toolName === "run_interactive") {
+    const exe = String(args["executable"] ?? "").toLowerCase();
+    if (/\b(rm|rmdir|del|format|mkfs|Remove-Item)\b/i.test(exe)) return "destructive";
+    if (/\b(bash|sh|zsh|cmd|powershell|pwsh|python|node|ruby|perl)\b/i.test(exe)) return "write";
+    return "write";
+  }
+  if (toolName === "task_create" || toolName === "task_stop") return "write";
+  if (toolName === "task_list") return "safe";
+  if (toolName === "read_file" || toolName === "list_dir" || toolName === "grep_files" || toolName === "glob_files" || toolName === "web_fetch" || toolName === "save_memory" || toolName === "ask_user" || toolName === "write_todos" || toolName === "google_search" || toolName === "spawn_agent" || toolName === "run_tests") return "safe";
+  return "write";
+}
+function schemaToJsonSchema(schema) {
+  const result = {
+    type: schema.type,
+    description: schema.description
+  };
+  if (schema.enum) result["enum"] = schema.enum;
+  if (schema.items) result["items"] = schemaToJsonSchema(schema.items);
+  if (schema.properties) {
+    result["properties"] = Object.fromEntries(
+      Object.entries(schema.properties).map(([k, v]) => [k, schemaToJsonSchema(v)])
+    );
+  }
+  return result;
+}
+
+// src/tools/diff-utils.ts
+import chalk from "chalk";
+function renderDiff(oldText, newText, opts = {}) {
+  const contextLines = opts.contextLines ?? 3;
+  const maxLines = opts.maxLines ?? 120;
+  const filePath = opts.filePath ?? "";
+  const oldLines = oldText.split("\n");
+  const newLines = newText.split("\n");
+  const hunks = computeHunks(oldLines, newLines, contextLines);
+  if (hunks.length === 0) {
+    return chalk.dim("  (no changes)");
+  }
+  const output = [];
+  if (filePath) {
+    output.push(chalk.bold.white(`--- ${filePath} (before)`));
+    output.push(chalk.bold.white(`+++ ${filePath} (after)`));
+  }
+  let totalDisplayed = 0;
+  for (const hunk of hunks) {
+    if (totalDisplayed >= maxLines) {
+      output.push(chalk.dim(`  ... (diff truncated, too many changes)`));
+      break;
+    }
+    output.push(
+      chalk.cyan(
+        `@@ -${hunk.oldStart + 1},${hunk.oldCount} +${hunk.newStart + 1},${hunk.newCount} @@`
+      )
+    );
+    for (const line of hunk.lines) {
+      if (totalDisplayed >= maxLines) break;
+      totalDisplayed++;
+      if (line.type === "context") {
+        output.push(chalk.dim(`  ${line.text}`));
+      } else if (line.type === "remove") {
+        output.push(chalk.red(`- ${line.text}`));
+      } else {
+        output.push(chalk.green(`+ ${line.text}`));
+      }
+    }
+  }
+  return output.join("\n");
+}
+function computeHunks(oldLines, newLines, contextLines) {
+  const edits = diffLines(oldLines, newLines);
+  if (edits.every((e) => e.type === "context")) return [];
+  const hunks = [];
+  let i = 0;
+  while (i < edits.length) {
+    if (edits[i].type === "context") {
+      i++;
+      continue;
+    }
+    const start = Math.max(0, i - contextLines);
+    let end = i;
+    while (end < edits.length) {
+      if (edits[end].type !== "context") {
+        end++;
+      } else {
+        let hasMoreChange = false;
+        for (let j = end + 1; j < Math.min(edits.length, end + contextLines * 2 + 1); j++) {
+          if (edits[j].type !== "context") {
+            hasMoreChange = true;
+            break;
+          }
+        }
+        if (hasMoreChange) {
+          end++;
+        } else {
+          break;
+        }
+      }
+    }
+    end = Math.min(edits.length, end + contextLines);
+    const hunkEdits = edits.slice(start, end);
+    let oldStart = 0;
+    let newStart = 0;
+    for (let k = 0; k < start; k++) {
+      if (edits[k].type !== "add") oldStart++;
+      if (edits[k].type !== "remove") newStart++;
+    }
+    let oldCount = 0;
+    let newCount = 0;
+    for (const e of hunkEdits) {
+      if (e.type !== "add") oldCount++;
+      if (e.type !== "remove") newCount++;
+    }
+    hunks.push({
+      oldStart,
+      oldCount,
+      newStart,
+      newCount,
+      lines: hunkEdits.map((e) => ({ type: e.type, text: e.text }))
+    });
+    i = end;
+  }
+  return hunks;
+}
+function diffLines(oldLines, newLines) {
+  const n = oldLines.length;
+  const m = newLines.length;
+  if (n * m > 25e4) {
+    return simpleDiff(oldLines, newLines);
+  }
+  const dp = Array.from({ length: n + 1 }, () => new Array(m + 1).fill(0));
+  for (let i2 = 1; i2 <= n; i2++) {
+    for (let j2 = 1; j2 <= m; j2++) {
+      if (oldLines[i2 - 1] === newLines[j2 - 1]) {
+        dp[i2][j2] = dp[i2 - 1][j2 - 1] + 1;
+      } else {
+        dp[i2][j2] = Math.max(dp[i2 - 1][j2], dp[i2][j2 - 1]);
+      }
+    }
+  }
+  const result = [];
+  let i = n;
+  let j = m;
+  while (i > 0 || j > 0) {
+    if (i > 0 && j > 0 && oldLines[i - 1] === newLines[j - 1]) {
+      result.unshift({ type: "context", text: oldLines[i - 1] });
+      i--;
+      j--;
+    } else if (j > 0 && (i === 0 || dp[i][j - 1] >= dp[i - 1][j])) {
+      result.unshift({ type: "add", text: newLines[j - 1] });
+      j--;
+    } else {
+      result.unshift({ type: "remove", text: oldLines[i - 1] });
+      i--;
+    }
+  }
+  return result;
+}
+function simpleDiff(oldLines, newLines) {
+  const result = [];
+  const maxLen = Math.max(oldLines.length, newLines.length);
+  for (let i = 0; i < maxLen; i++) {
+    const o = oldLines[i];
+    const n = newLines[i];
+    if (o !== void 0 && n !== void 0) {
+      if (o === n) {
+        result.push({ type: "context", text: o });
+      } else {
+        result.push({ type: "remove", text: o });
+        result.push({ type: "add", text: n });
+      }
+    } else if (o !== void 0) {
+      result.push({ type: "remove", text: o });
+    } else if (n !== void 0) {
+      result.push({ type: "add", text: n });
+    }
+  }
+  return result;
+}
+
+// src/tools/hooks.ts
+import { execSync as execSync3 } from "child_process";
+function shellEscape(value) {
+  return "'" + value.replace(/'/g, "'\\''") + "'";
+}
+function runHook(template, vars) {
+  if (!template) return;
+  let cmd = template;
+  cmd = cmd.replace(/\{tool\}/g, shellEscape(vars.tool));
+  cmd = cmd.replace(/\{dangerLevel\}/g, shellEscape(vars.dangerLevel ?? ""));
+  cmd = cmd.replace(/\{args\}/g, shellEscape(vars.args ?? ""));
+  cmd = cmd.replace(/\{status\}/g, shellEscape(vars.status ?? ""));
+  try {
+    execSync3(cmd, {
+      timeout: 5e3,
+      stdio: ["pipe", "pipe", "pipe"],
+      encoding: "utf-8"
+    });
+  } catch {
+    process.stderr.write(`\u26A0 Hook failed: ${cmd.slice(0, 100)}
+`);
+  }
+}
+
+// src/tools/permissions.ts
+function checkPermission(toolName, args, dangerLevel, rules, defaultAction = "confirm") {
+  for (const rule of rules) {
+    if (rule.tool !== "*" && rule.tool !== toolName) continue;
+    if (rule.when) {
+      if (rule.when.dangerLevel && rule.when.dangerLevel !== dangerLevel) continue;
+      if (rule.when.pathPattern) {
+        const path = String(args["path"] ?? args["command"] ?? "");
+        if (!path.includes(rule.when.pathPattern)) continue;
+      }
+    }
+    return rule.action;
+  }
+  return defaultAction;
+}
+
+// src/tools/truncate.ts
+var DEFAULT_MAX_TOOL_OUTPUT_CHARS = 12e3;
+function getMaxOutputChars(contextWindow) {
+  if (!contextWindow || contextWindow <= 0) return DEFAULT_MAX_TOOL_OUTPUT_CHARS;
+  return Math.max(DEFAULT_MAX_TOOL_OUTPUT_CHARS, Math.min(Math.floor(contextWindow / 4), 12e4));
+}
+var activeMaxChars = DEFAULT_MAX_TOOL_OUTPUT_CHARS;
+function setContextWindow(contextWindow) {
+  activeMaxChars = getMaxOutputChars(contextWindow);
+}
+function getActiveMaxChars() {
+  return activeMaxChars;
+}
+function truncateOutput(content, toolName, maxChars) {
+  const limit = maxChars ?? activeMaxChars;
+  if (content.length <= limit) return content;
+  const keepHead = Math.floor(limit * 0.7);
+  const keepTail = Math.floor(limit * 0.2);
+  const omitted = content.length - keepHead - keepTail;
+  const lines = content.split("\n").length;
+  const head = content.slice(0, keepHead);
+  const tail = content.slice(content.length - keepTail);
+  return head + `
+
+... [Output truncated: ${content.length} chars / ${lines} lines total, ${omitted} chars omitted. Use read_file to view full content in segments` + (toolName === "bash" ? ", or narrow the command scope" : "") + `] ...
+
+` + tail;
+}
+
+// src/repl/theme.ts
+import chalk2 from "chalk";
+var DARK_THEME = {
+  prompt: chalk2.green,
+  info: chalk2.cyan,
+  warning: chalk2.yellow,
+  error: chalk2.red,
+  success: chalk2.green,
+  dim: chalk2.dim,
+  accent: chalk2.cyan,
+  toolCall: chalk2.yellow,
+  toolResult: chalk2.green,
+  heading: chalk2.bold.cyan
+};
+var LIGHT_THEME = {
+  prompt: chalk2.blue,
+  info: chalk2.blueBright,
+  warning: chalk2.yellow,
+  error: chalk2.red,
+  success: chalk2.green,
+  dim: chalk2.gray,
+  accent: chalk2.blueBright,
+  toolCall: chalk2.magenta,
+  toolResult: chalk2.green,
+  heading: chalk2.bold.blue
+};
+function resolveColor(name) {
+  if (name.startsWith("#")) return chalk2.hex(name);
+  const parts = name.split(".");
+  let result = chalk2;
+  for (const part of parts) {
+    const obj = result;
+    if (obj && typeof obj[part] !== "undefined") {
+      result = obj[part];
+    }
+  }
+  if (typeof result !== "function") {
+    process.stderr.write(`[theme] Warning: unrecognized color "${name}", using default.
+`);
+    return chalk2;
+  }
+  return result;
+}
+function buildCustomTheme(base, overrides) {
+  if (!overrides) return base;
+  const result = { ...base };
+  for (const [key, colorName] of Object.entries(overrides)) {
+    if (key in result && colorName) {
+      result[key] = resolveColor(colorName);
+    }
+  }
+  return result;
+}
+var _currentTheme = DARK_THEME;
+function initTheme(themeId = "dark", customColors) {
+  switch (themeId) {
+    case "light":
+      _currentTheme = LIGHT_THEME;
+      break;
+    case "custom":
+      _currentTheme = buildCustomTheme(DARK_THEME, customColors);
+      break;
+    default:
+      _currentTheme = DARK_THEME;
+  }
+}
+var theme = new Proxy(DARK_THEME, {
+  get(_target, prop) {
+    return _currentTheme[prop];
+  }
+});
+
+// src/tools/executor.ts
+var ToolExecutor = class {
+  constructor(registry) {
+    this.registry = registry;
+  }
+  /** 当前 session 消息索引，由 repl.ts / session-handler.ts 在每轮工具执行前设置 */
+  static currentMessageIndex = 0;
+  round = 0;
+  totalRounds = 0;
+  /** readline 接口引用，由 repl.ts 注入，用于 confirm() 读取用户输入 */
+  rl = null;
+  /**
+   * confirm() 进行中标志。
+   * repl.ts 的主循环 line handler 在此为 true 时忽略输入，
+   * 防止用户输入 "y"+Enter 被同时触发 once('line') 和主循环 on('line')。
+   */
+  confirming = false;
+  /** 在 confirm 期间用户输入的 slash 命令，由 repl.ts 主循环消费 */
+  pendingSlashCommand = null;
+  /** confirm() 的取消回调，由 SIGINT handler 调用 */
+  cancelConfirmFn = null;
+  /**
+   * 会话级 auto-approve：跳过所有 write/destructive 确认（仅当前会话有效）。
+   * 通过 /yolo 命令切换。destructive 操作仍会显示警告但不阻塞。
+   */
+  sessionAutoApprove = false;
+  /**
+   * 由外部（repl.ts SIGINT handler）调用，将当前 confirm() 等待视为用户按 N 取消。
+   * 若当前没有 confirm() 进行中，无操作。
+   */
+  cancelConfirm() {
+    if (this.cancelConfirmFn) {
+      this.cancelConfirmFn();
+    }
+  }
+  setRoundInfo(current, total) {
+    this.round = current;
+    this.totalRounds = total;
+  }
+  /**
+   * 注入 readline 接口，供 confirm() 使用。
+   * 必须在 start() 之前调用，rl 初始化后立即注入。
+   */
+  setReadline(rl) {
+    this.rl = rl;
+  }
+  /** 钩子配置（可选） */
+  hookConfig;
+  /** 权限规则（可选） */
+  permissionRules = [];
+  defaultPermission = "confirm";
+  /** 注入 hooks 和 permission rules 配置 */
+  setConfig(opts) {
+    this.hookConfig = opts.hookConfig;
+    if (opts.permissionRules) this.permissionRules = opts.permissionRules;
+    if (opts.defaultPermission) this.defaultPermission = opts.defaultPermission;
+  }
+  async execute(call) {
+    const tool = this.registry.get(call.name);
+    if (!tool) {
+      return {
+        callId: call.id,
+        content: `Unknown tool: ${call.name}`,
+        isError: true
+      };
+    }
+    const dangerLevel = getDangerLevel(call.name, call.arguments);
+    runHook(this.hookConfig?.preToolExecution, {
+      tool: call.name,
+      dangerLevel,
+      args: JSON.stringify(call.arguments).slice(0, 200)
+    });
+    if (this.permissionRules.length > 0) {
+      const action = checkPermission(call.name, call.arguments, dangerLevel, this.permissionRules, this.defaultPermission);
+      if (action === "deny") {
+        return { callId: call.id, content: `[Permission denied] Tool ${call.name} is blocked by permission rules. Do not retry.`, isError: true };
+      }
+      if (action === "auto-approve") {
+        this.printToolCall(call);
+        try {
+          const rawContent = await tool.execute(call.arguments);
+          const content = truncateOutput(rawContent, call.name);
+          const wasTruncated = content !== rawContent;
+          this.printToolResult(call.name, rawContent, false, wasTruncated);
+          runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "ok" });
+          return { callId: call.id, content, isError: false };
+        } catch (err) {
+          const message = err instanceof Error ? err.message : String(err);
+          this.printToolResult(call.name, message, true, false);
+          runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
+          return { callId: call.id, content: message, isError: true };
+        }
+      }
+    }
+    if (this.sessionAutoApprove && dangerLevel !== "safe") {
+      this.printToolCall(call);
+      if (dangerLevel === "write") this.printDiffPreview(call);
+      console.log(theme.warning("  \u26A1 Auto-approved (session /yolo mode)"));
+      try {
+        const rawContent = await tool.execute(call.arguments);
+        const content = truncateOutput(rawContent, call.name);
+        const wasTruncated = content !== rawContent;
+        this.printToolResult(call.name, rawContent, false, wasTruncated);
+        runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "ok" });
+        return { callId: call.id, content, isError: false };
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        this.printToolResult(call.name, message, true, false);
+        runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
+        return { callId: call.id, content: message, isError: true };
+      }
+    }
+    if (dangerLevel === "write") {
+      this.printToolCall(call);
+      this.printDiffPreview(call);
+      const confirmed = await this.confirm(call, dangerLevel);
+      if (!confirmed) {
+        return {
+          callId: call.id,
+          content: `[User cancelled] The user declined the ${call.name} operation. Do not retry without asking.`,
+          isError: true
+        };
+      }
+    } else if (dangerLevel === "destructive") {
+      const confirmed = await this.confirm(call, dangerLevel);
+      if (!confirmed) {
+        return {
+          callId: call.id,
+          content: `[User cancelled] The user declined the destructive ${call.name} operation. Do not retry without asking.`,
+          isError: true
+        };
+      }
+      this.printToolCall(call);
+    } else {
+      this.printToolCall(call);
+    }
+    try {
+      const rawContent = await tool.execute(call.arguments);
+      const content = truncateOutput(rawContent, call.name);
+      const wasTruncated = content !== rawContent;
+      this.printToolResult(call.name, rawContent, false, wasTruncated);
+      runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "ok" });
+      return { callId: call.id, content, isError: false };
+    } catch (err) {
+      const message = err instanceof Error ? err.message : String(err);
+      this.printToolResult(call.name, message, true, false);
+      runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
+      return { callId: call.id, content: message, isError: true };
+    }
+  }
+  async executeAll(calls) {
+    const safeCalls = [];
+    const fileWriteCalls = [];
+    const otherCalls = [];
+    for (let i = 0; i < calls.length; i++) {
+      const call = calls[i];
+      const level = getDangerLevel(call.name, call.arguments);
+      if (level === "safe") {
+        safeCalls.push({ idx: i, call });
+      } else if (isFileWriteTool(call.name) && level === "write") {
+        fileWriteCalls.push({ idx: i, call });
+      } else {
+        otherCalls.push({ idx: i, call });
+      }
+    }
+    const results = new Array(calls.length);
+    await Promise.all(
+      safeCalls.map(async ({ idx, call }) => {
+        results[idx] = await this.execute(call);
+      })
+    );
+    if (fileWriteCalls.length === 1) {
+      const { idx, call } = fileWriteCalls[0];
+      results[idx] = await this.execute(call);
+    } else if (fileWriteCalls.length >= 2) {
+      const batchResults = await this.executeBatchFileWrites(fileWriteCalls.map((f) => f.call));
+      for (let i = 0; i < fileWriteCalls.length; i++) {
+        results[fileWriteCalls[i].idx] = batchResults[i];
+      }
+    }
+    for (const { idx, call } of otherCalls) {
+      results[idx] = await this.execute(call);
+    }
+    return results;
+  }
+  /**
+   * 批量文件写入：展示所有文件的编号列表 + diff 预览，
+   * 然后让用户 approve all / reject all / 选择性 approve。
+   */
+  async executeBatchFileWrites(calls) {
+    console.log();
+    console.log(theme.heading(`\u270E Batch file writes (${calls.length} files):`));
+    console.log(theme.dim("\u2500".repeat(50)));
+    for (let i = 0; i < calls.length; i++) {
+      const call = calls[i];
+      const filePath = String(call.arguments["path"] ?? "");
+      console.log(theme.warning(`  [${i + 1}] `) + chalk3.white(call.name) + theme.dim(": ") + theme.accent(filePath));
+      this.printDiffPreview(call);
+    }
+    console.log(theme.dim("\u2500".repeat(50)));
+    const decision = this.sessionAutoApprove ? "all" : await this.batchConfirm(calls.length);
+    if (this.sessionAutoApprove) {
+      console.log(theme.warning("  \u26A1 All auto-approved (session /yolo mode)"));
+    }
+    const results = [];
+    for (let i = 0; i < calls.length; i++) {
+      const call = calls[i];
+      const approved = decision === "all" || decision !== "none" && decision.has(i + 1);
+      if (approved) {
+        const tool = this.registry.get(call.name);
+        if (!tool) {
+          results.push({ callId: call.id, content: `Unknown tool: ${call.name}`, isError: true });
+          continue;
+        }
+        try {
+          const rawContent = await tool.execute(call.arguments);
+          const content = truncateOutput(rawContent, call.name);
+          const wasTruncated = content !== rawContent;
+          this.printToolResult(call.name, rawContent, false, wasTruncated);
+          results.push({ callId: call.id, content, isError: false });
+        } catch (err) {
+          const message = err instanceof Error ? err.message : String(err);
+          this.printToolResult(call.name, message, true, false);
+          results.push({ callId: call.id, content: message, isError: true });
+        }
+      } else {
+        console.log(theme.dim(`  [${i + 1}] `) + theme.dim("rejected"));
+        results.push({ callId: call.id, content: `[User rejected] The user rejected this ${call.name} operation. Do not retry without asking.`, isError: true });
+      }
+    }
+    return results;
+  }
+  /**
+   * 批量确认：让用户选择 approve all / reject all / 指定编号。
+   * 返回 'all' | 'none' | Set<number>（1-based 编号）
+   */
+  batchConfirm(count) {
+    const prompt = theme.warning(`  [a]pprove all  [r]eject all  [1,${count > 1 ? count : "2"},..] approve specific: `);
+    if (!this.rl) {
+      process.stdout.write(theme.warning("No readline: auto-rejected.\n"));
+      return Promise.resolve("none");
+    }
+    const rl = this.rl;
+    const rlAny = rl;
+    const savedOutput = rlAny.output;
+    rlAny.output = process.stdout;
+    rl.resume();
+    process.stdout.write(prompt);
+    this.confirming = true;
+    return new Promise((resolve4) => {
+      let completed = false;
+      const cleanup = (result) => {
+        if (completed) return;
+        completed = true;
+        rl.removeListener("line", onLine);
+        this.cancelConfirmFn = null;
+        rl.pause();
+        rlAny.output = savedOutput;
+        this.confirming = false;
+        resolve4(result);
+      };
+      const onLine = (line) => {
+        const trimmed = line.trim();
+        if (trimmed.startsWith("/")) {
+          this.pendingSlashCommand = trimmed;
+          process.stdout.write(theme.dim(`
+(command "${trimmed}" queued, will execute after current operation)
+`));
+          cleanup("none");
+          return;
+        }
+        const input = trimmed.toLowerCase();
+        if (input === "a" || input === "all" || input === "y") {
+          cleanup("all");
+        } else if (input === "r" || input === "reject" || input === "n" || input === "") {
+          cleanup("none");
+        } else {
+          const nums = input.split(/[,\s]+/).map(Number).filter((n) => !isNaN(n) && n >= 1 && n <= count);
+          if (nums.length > 0) {
+            cleanup(new Set(nums));
+          } else {
+            cleanup("none");
+          }
+        }
+      };
+      this.cancelConfirmFn = () => {
+        process.stdout.write(theme.dim("\n(cancelled)\n"));
+        cleanup("none");
+      };
+      try {
+        rl.once("line", onLine);
+      } catch {
+        cleanup("none");
+      }
+    });
+  }
+  printToolCall(call) {
+    const dangerLevel = getDangerLevel(call.name, call.arguments);
+    console.log();
+    const icon = dangerLevel === "write" ? theme.toolCall("\u270E Tool: ") : theme.heading(theme.accent("\u2699 Tool: "));
+    const roundBadge = this.totalRounds > 0 ? theme.dim(` [${this.round}/${this.totalRounds}]`) : "";
+    console.log(icon + chalk3.white(call.name) + roundBadge);
+    for (const [key, val] of Object.entries(call.arguments)) {
+      let valStr;
+      if (Array.isArray(val)) {
+        const json = JSON.stringify(val);
+        valStr = json.length > 160 ? json.slice(0, 160) + "..." : json;
+      } else if (typeof val === "string" && val.length > 120) {
+        valStr = val.slice(0, 120) + "...";
+      } else {
+        valStr = String(val);
+      }
+      console.log(theme.dim(`  ${key}: `) + chalk3.white(valStr));
     }
-    if (isBinaryBuffer(buf)) {
-      return `[Binary file: ${filePath}]
-This file contains binary data and cannot be read as text.
-If needed, use the bash tool to run an appropriate conversion program.`;
+  }
+  /**
+   * 对 write_file / edit_file 在执行前展示 diff 预览。
+   * - write_file：比较旧文件内容与新内容
+   * - edit_file (replace)：比较旧字符串与新字符串
+   * - edit_file (insert/delete)：显示操作摘要，不做 diff（变化明确）
+   */
+  printDiffPreview(call) {
+    if (call.name === "write_file") {
+      const filePath = String(call.arguments["path"] ?? "");
+      const newContent = String(call.arguments["content"] ?? "");
+      if (!filePath) return;
+      if (existsSync4(filePath)) {
+        let oldContent;
+        try {
+          oldContent = readFileSync3(filePath, "utf-8");
+        } catch {
+          return;
+        }
+        if (oldContent === newContent) {
+          console.log(theme.dim("  (file content unchanged)"));
+          return;
+        }
+        const diff = renderDiff(oldContent, newContent, { filePath, contextLines: 3 });
+        console.log(theme.dim("  \u2500\u2500 diff preview \u2500\u2500"));
+        console.log(diff);
+        console.log();
+      } else {
+        const lines = newContent.split("\n");
+        const preview = lines.slice(0, 20).map((l) => theme.success(`+ ${l}`)).join("\n");
+        const more = lines.length > 20 ? theme.dim(`
+  ... (+${lines.length - 20} more lines)`) : "";
+        console.log(theme.dim("  \u2500\u2500 new file preview \u2500\u2500"));
+        console.log(preview + more);
+        console.log();
+      }
+    } else if (call.name === "edit_file") {
+      const filePath = String(call.arguments["path"] ?? "");
+      if (!filePath || !existsSync4(filePath)) return;
+      const oldStr = call.arguments["old_str"];
+      const newStr = call.arguments["new_str"];
+      if (oldStr !== void 0) {
+        const diff = renderDiff(
+          String(oldStr),
+          String(newStr ?? ""),
+          { filePath, contextLines: 2 }
+        );
+        console.log(theme.dim("  \u2500\u2500 diff preview \u2500\u2500"));
+        console.log(diff);
+        console.log();
+      } else if (call.arguments["insert_after_line"] !== void 0) {
+        const line = Number(call.arguments["insert_after_line"]);
+        const insertContent = String(call.arguments["insert_content"] ?? "");
+        const insertLines = insertContent.split("\n");
+        const preview = insertLines.slice(0, 5).map((l) => theme.success(`+ ${l}`)).join("\n");
+        const more = insertLines.length > 5 ? theme.dim(`
+  ... (+${insertLines.length - 5} more lines)`) : "";
+        console.log(theme.dim(`  \u2500\u2500 insert after line ${line} \u2500\u2500`));
+        console.log(preview + more);
+        console.log();
+      } else if (call.arguments["delete_from_line"] !== void 0) {
+        const from = Number(call.arguments["delete_from_line"]);
+        const to = Number(call.arguments["delete_to_line"] ?? from);
+        let fileContent;
+        try {
+          fileContent = readFileSync3(filePath, "utf-8");
+        } catch {
+          return;
+        }
+        const fileLines = fileContent.split("\n");
+        const deleted = fileLines.slice(from - 1, to);
+        const preview = deleted.slice(0, 5).map((l) => theme.error(`- ${l}`)).join("\n");
+        const more = deleted.length > 5 ? theme.dim(`
+  ... (-${deleted.length - 5} more lines)`) : "";
+        console.log(theme.dim(`  \u2500\u2500 delete lines ${from}\u2013${to} \u2500\u2500`));
+        console.log(preview + more);
+        console.log();
+      }
     }
-    const content = buf.toString(encoding);
-    const lines = content.split("\n").length;
-    return `${sensitiveWarning}[File: ${filePath} | ${lines} lines]
-
-${content}`;
+  }
+  printToolResult(name, content, isError, wasTruncated) {
+    if (isError) {
+      console.log(theme.error(`\u26A0 ${name} error: `) + theme.dim(content.slice(0, 300)));
+    } else {
+      const lines = content.split("\n");
+      const maxLines = name === "run_interactive" ? 40 : 8;
+      const preview = lines.slice(0, maxLines).join("\n");
+      const moreLines = lines.length > maxLines ? theme.dim(`
+  ... (${lines.length - maxLines} more lines)`) : "";
+      const truncatedNote = wasTruncated ? theme.warning(`
+  \u26A1 Output truncated to ${getActiveMaxChars()} chars before sending to AI`) : "";
+      console.log(theme.toolResult("\u2713 Result: ") + theme.dim(preview) + moreLines + truncatedNote);
+    }
+    console.log();
+  }
+  confirm(call, level) {
+    const color = level === "destructive" ? theme.error : theme.warning;
+    const label = level === "destructive" ? "\u26A0 DESTRUCTIVE" : "\u270E Write";
+    console.log();
+    console.log(color(`${label} operation: `) + theme.heading(call.name));
+    for (const [key, val] of Object.entries(call.arguments)) {
+      const valStr = typeof val === "string" && val.length > 200 ? val.slice(0, 200) + "..." : String(val);
+      console.log(theme.dim(`  ${key}: `) + valStr);
+    }
+    if (!this.rl) {
+      process.stdout.write(theme.warning("No readline: auto-rejected.\n"));
+      return Promise.resolve(false);
+    }
+    const rl = this.rl;
+    const rlAny = rl;
+    const savedOutput = rlAny.output;
+    rlAny.output = process.stdout;
+    rl.resume();
+    process.stdout.write(color("Proceed? [y/N] (type y + Enter to confirm) "));
+    this.confirming = true;
+    return new Promise((resolve4) => {
+      let completed = false;
+      const cleanup = (answer) => {
+        if (completed) return;
+        completed = true;
+        rl.removeListener("line", onLine);
+        this.cancelConfirmFn = null;
+        rl.pause();
+        rlAny.output = savedOutput;
+        this.confirming = false;
+        resolve4(answer === "y");
+      };
+      const onLine = (line) => {
+        const trimmed = line.trim();
+        if (trimmed.startsWith("/")) {
+          this.pendingSlashCommand = trimmed;
+          process.stdout.write(theme.dim(`
+(command "${trimmed}" queued, will execute after current operation)
+`));
+          cleanup("n");
+          return;
+        }
+        cleanup(trimmed.toLowerCase());
+      };
+      this.cancelConfirmFn = () => {
+        process.stdout.write(theme.dim("\n(cancelled)\n"));
+        cleanup("n");
+      };
+      try {
+        rl.once("line", onLine);
+      } catch {
+        cleanup("n");
+      }
+    });
   }
 };
 
 // src/tools/builtin/write-file.ts
-import { writeFileSync as writeFileSync2, appendFileSync, mkdirSync } from "fs";
-import { dirname as dirname2 } from "path";
 var writeFileTool = {
   definition: {
     name: "write_file",
@@ -654,6 +1469,7 @@ Important: For long content (over 500 lines or 3000 chars), you MUST split into
     const appendMode = String(args["append"] ?? "false").toLowerCase() === "true";
     if (!filePath) throw new ToolError("write_file", "path is required");
     undoStack.push(filePath, `write_file${appendMode ? " (append)" : ""}: ${filePath}`);
+    fileCheckpoints.snapshot(filePath, ToolExecutor.currentMessageIndex);
     mkdirSync(dirname2(filePath), { recursive: true });
     if (appendMode) {
       appendFileSync(filePath, content, encoding);
@@ -667,7 +1483,7 @@ Important: For long content (over 500 lines or 3000 chars), you MUST split into
 };
 
 // src/tools/builtin/edit-file.ts
-import { readFileSync as readFileSync3, writeFileSync as writeFileSync3, existsSync as existsSync4 } from "fs";
+import { readFileSync as readFileSync4, writeFileSync as writeFileSync3, existsSync as existsSync5 } from "fs";
 function similarityScore(a, b) {
   if (a === b) return 1;
   if (a.length < 2 || b.length < 2) return 0;
@@ -793,8 +1609,8 @@ Note: Path can be absolute or relative to the current working directory.`,
     const filePath = String(args["path"] ?? "");
     const encoding = args["encoding"] ?? "utf-8";
     if (!filePath) throw new ToolError("edit_file", "path is required");
-    if (!existsSync4(filePath)) throw new ToolError("edit_file", `File not found: ${filePath}`);
-    const original = readFileSync3(filePath, encoding);
+    if (!existsSync5(filePath)) throw new ToolError("edit_file", `File not found: ${filePath}`);
+    const original = readFileSync4(filePath, encoding);
     if (args["old_str"] !== void 0) {
       const oldStr = String(args["old_str"]);
       const newStr = String(args["new_str"] ?? "");
@@ -818,6 +1634,7 @@ Please read the file first and use exact text.`;
           return `ERROR: old_str matches multiple locations with whitespace-tolerant matching. Please include more surrounding context to make it unique.`;
         }
         undoStack.push(filePath, `edit_file (ws-replace): ${filePath}`);
+        fileCheckpoints.snapshot(filePath, ToolExecutor.currentMessageIndex);
         const before = fileLines.slice(0, matchStart);
         const after = fileLines.slice(matchStart + searchLines.length);
         const updated2 = [...before, newStr, ...after].join("\n");
@@ -839,6 +1656,7 @@ ${similar.join("\n")}` : "";
 Please read the file first and use exact text.`;
         }
         undoStack.push(filePath, `edit_file (replace_all): ${filePath}`);
+        fileCheckpoints.snapshot(filePath, ToolExecutor.currentMessageIndex);
         const updated2 = original.split(oldStr).join(newStr);
         writeFileSync3(filePath, updated2, encoding);
         return `Successfully edited ${filePath} (replace_all)
@@ -862,6 +1680,7 @@ Tip: You can also try ignore_whitespace: true to match ignoring indentation diff
         return `ERROR: old_str appears multiple times in file (at least at positions ${firstIndex} and ${secondIndex}). Please include more surrounding context to make it unique.`;
       }
       undoStack.push(filePath, `edit_file (replace): ${filePath}`);
+      fileCheckpoints.snapshot(filePath, ToolExecutor.currentMessageIndex);
       const updated = original.slice(0, firstIndex) + newStr + original.slice(firstIndex + oldStr.length);
       writeFileSync3(filePath, updated, encoding);
       const oldLines = oldStr.split("\n").length;
@@ -881,6 +1700,7 @@ Tip: You can also try ignore_whitespace: true to match ignoring indentation diff
         throw new ToolError("edit_file", `insert_after_line ${afterLine} is out of range (file has ${lines.length} lines)`);
       }
       undoStack.push(filePath, `edit_file (insert): ${filePath}`);
+      fileCheckpoints.snapshot(filePath, ToolExecutor.currentMessageIndex);
       lines.splice(afterLine, 0, content);
       writeFileSync3(filePath, lines.join("\n"), encoding);
       return `Successfully inserted ${content.split("\n").length} line(s) after line ${afterLine} in ${filePath}`;
@@ -896,6 +1716,7 @@ Tip: You can also try ignore_whitespace: true to match ignoring indentation diff
         );
       }
       undoStack.push(filePath, `edit_file (delete): ${filePath}`);
+      fileCheckpoints.snapshot(filePath, ToolExecutor.currentMessageIndex);
       const deleted = lines.splice(fromLine - 1, toLine - fromLine + 1);
       writeFileSync3(filePath, lines.join("\n"), encoding);
       return `Successfully deleted lines ${fromLine}-${toLine} (${deleted.length} lines) from ${filePath}`;
@@ -913,7 +1734,7 @@ function truncatePreview(str, maxLen = 80) {
 }
 
 // src/tools/builtin/list-dir.ts
-import { readdirSync as readdirSync3, statSync as statSync3, existsSync as existsSync5 } from "fs";
+import { readdirSync as readdirSync3, statSync as statSync3, existsSync as existsSync6 } from "fs";
 import { join, basename as basename2 } from "path";
 var listDirTool = {
   definition: {
@@ -936,7 +1757,7 @@ var listDirTool = {
   async execute(args) {
     const dirPath = String(args["path"] ?? process.cwd());
     const recursive = Boolean(args["recursive"] ?? false);
-    if (!existsSync5(dirPath)) {
+    if (!existsSync6(dirPath)) {
       const targetName = basename2(dirPath).toLowerCase();
       const cwd = process.cwd();
       const suggestions = [];
@@ -1014,7 +1835,7 @@ function formatSize(bytes) {
 }
 
 // src/tools/builtin/grep-files.ts
-import { readdirSync as readdirSync4, readFileSync as readFileSync4, statSync as statSync4, existsSync as existsSync6 } from "fs";
+import { readdirSync as readdirSync4, readFileSync as readFileSync5, statSync as statSync4, existsSync as existsSync7 } from "fs";
 import { readFile } from "fs/promises";
 import { join as join2, relative } from "path";
 var grepFilesTool = {
@@ -1067,7 +1888,7 @@ Supports regex. Automatically skips node_modules, dist, .git directories.`,
     const contextLines = Math.max(0, Number(args["context_lines"] ?? 0));
     const maxResults = Math.max(1, Number(args["max_results"] ?? 50));
     if (!pattern) throw new ToolError("grep_files", "pattern is required");
-    if (!existsSync6(rootPath)) throw new ToolError("grep_files", `Path not found: ${rootPath}`);
+    if (!existsSync7(rootPath)) throw new ToolError("grep_files", `Path not found: ${rootPath}`);
     const MAX_PATTERN_LENGTH = 1e3;
     if (pattern.length > MAX_PATTERN_LENGTH) {
       throw new ToolError("grep_files", `Pattern too long (${pattern.length} chars, max ${MAX_PATTERN_LENGTH}). Use a shorter pattern.`);
@@ -1220,7 +2041,7 @@ function searchInFile(fullPath, displayPath, regex, contextLines, maxResults, re
   }
   let content;
   try {
-    content = readFileSync4(fullPath, "utf-8");
+    content = readFileSync5(fullPath, "utf-8");
   } catch {
     return;
   }
@@ -1251,7 +2072,7 @@ function searchInFile(fullPath, displayPath, regex, contextLines, maxResults, re
 }
 
 // src/tools/builtin/glob-files.ts
-import { readdirSync as readdirSync5, statSync as statSync5, existsSync as existsSync7 } from "fs";
+import { readdirSync as readdirSync5, statSync as statSync5, existsSync as existsSync8 } from "fs";
 import { join as join3, relative as relative2, basename as basename3 } from "path";
 var globFilesTool = {
   definition: {
@@ -1285,7 +2106,7 @@ Results sorted by most recent modification time. Automatically skips node_module
     const rootPath = String(args["path"] ?? process.cwd());
     const maxResults = Math.max(1, Number(args["max_results"] ?? 100));
     if (!pattern) throw new ToolError("glob_files", "pattern is required");
-    if (!existsSync7(rootPath)) throw new ToolError("glob_files", `Path not found: ${rootPath}`);
+    if (!existsSync8(rootPath)) throw new ToolError("glob_files", `Path not found: ${rootPath}`);
     const regex = globToRegex(pattern);
     const matches = [];
     collectMatchingFiles(rootPath, rootPath, regex, matches, maxResults);
@@ -1754,7 +2575,7 @@ var saveLastResponseTool = {
 };
 
 // src/tools/builtin/save-memory.ts
-import { existsSync as existsSync8, statSync as statSync6, appendFileSync as appendFileSync2, mkdirSync as mkdirSync3 } from "fs";
+import { existsSync as existsSync9, statSync as statSync6, appendFileSync as appendFileSync2, mkdirSync as mkdirSync3 } from "fs";
 import { join as join4 } from "path";
 import { homedir as homedir2 } from "os";
 function getMemoryFilePath() {
@@ -1783,7 +2604,7 @@ var saveMemoryTool = {
     if (!content) throw new ToolError("save_memory", "content is required");
     const memoryPath = getMemoryFilePath();
     const configDir = join4(homedir2(), CONFIG_DIR_NAME);
-    if (!existsSync8(configDir)) {
+    if (!existsSync9(configDir)) {
       mkdirSync3(configDir, { recursive: true });
     }
     const timestamp = formatTimestamp();
@@ -1798,7 +2619,7 @@ ${content}
 };
 
 // src/tools/builtin/ask-user.ts
-import chalk from "chalk";
+import chalk4 from "chalk";
 var askUserContext = {
   prompting: false
 };
@@ -1835,8 +2656,8 @@ function promptUser(rl, question) {
   rl.resume();
   askUserContext.prompting = true;
   console.log();
-  console.log(chalk.cyan("\u2753 ") + chalk.bold(question));
-  process.stdout.write(chalk.cyan("> "));
+  console.log(chalk4.cyan("\u2753 ") + chalk4.bold(question));
+  process.stdout.write(chalk4.cyan("> "));
   return new Promise((resolve4) => {
     let completed = false;
     const cleanup = (answer) => {
@@ -1853,7 +2674,7 @@ function promptUser(rl, question) {
       cleanup(line);
     };
     askUserContext.cancelFn = () => {
-      process.stdout.write(chalk.gray("\n(cancelled)\n"));
+      process.stdout.write(chalk4.gray("\n(cancelled)\n"));
       cleanup(null);
     };
     rl.once("line", onLine);
@@ -1861,7 +2682,7 @@ function promptUser(rl, question) {
 }
 
 // src/tools/builtin/write-todos.ts
-import chalk2 from "chalk";
+import chalk5 from "chalk";
 var VALID_STATUSES = /* @__PURE__ */ new Set(["pending", "in_progress", "completed"]);
 var currentTodos = [];
 var writeTodosTool = {
@@ -1924,25 +2745,25 @@ function renderTodoList(todos) {
   const total = todos.length;
   console.log();
   console.log(
-    chalk2.bold.cyan("\u{1F4CB} Todo List") + chalk2.dim(` (${completed}/${total} completed)`)
+    chalk5.bold.cyan("\u{1F4CB} Todo List") + chalk5.dim(` (${completed}/${total} completed)`)
   );
-  console.log(chalk2.dim("  " + "\u2500".repeat(40)));
+  console.log(chalk5.dim("  " + "\u2500".repeat(40)));
   for (const todo of todos) {
     let icon;
     let text;
     switch (todo.status) {
       case "completed":
-        icon = chalk2.green("  \u2713 ");
-        text = chalk2.strikethrough.gray(todo.title);
+        icon = chalk5.green("  \u2713 ");
+        text = chalk5.strikethrough.gray(todo.title);
         break;
       case "in_progress":
-        icon = chalk2.yellow("  \u2192 ");
-        text = chalk2.white(todo.title);
+        icon = chalk5.yellow("  \u2192 ");
+        text = chalk5.white(todo.title);
         break;
       case "pending":
       default:
-        icon = chalk2.gray("  \u25CB ");
-        text = chalk2.gray(todo.title);
+        icon = chalk5.gray("  \u25CB ");
+        text = chalk5.gray(todo.title);
         break;
     }
     console.log(icon + text);
@@ -2117,151 +2938,6 @@ function formatResults(query, data, requested) {
   return header + "\n" + results.join("\n\n");
 }
 
-// src/tools/types.ts
-function isFileWriteTool(name) {
-  return name === "write_file" || name === "edit_file";
-}
-function getDangerLevel(toolName, args) {
-  if (toolName.startsWith("mcp__")) return "safe";
-  if (toolName === "bash") {
-    const cmd = String(args["command"] ?? "");
-    if (/\brm\s+[^\n]*(?:-\w*[rRfF]\w*|--recursive|--force)\b/.test(cmd)) return "destructive";
-    if (/\brm\s+\S/.test(cmd)) return "destructive";
-    if (/\brmdir\b|\bformat\b|\bmkfs\b/.test(cmd)) return "destructive";
-    if (/\bRemove-Item\b.*(?:-Recurse|-Force)|\bri\s+.*-(?:Recurse|Force)\b|\brd\s+\/s\b|\brmdir\s+\/s\b/i.test(cmd)) return "destructive";
-    if (/\bdel\s+\S/.test(cmd)) return "destructive";
-    if (/\becho\b.*>>?|\btee\b|\bcp\b|\bmv\b/.test(cmd)) return "write";
-    if (/\bSet-Content\b|\bOut-File\b|\bAdd-Content\b|\bCopy-Item\b|\bMove-Item\b/i.test(cmd)) return "write";
-    return "safe";
-  }
-  if (toolName === "write_file") return "write";
-  if (toolName === "edit_file") return "write";
-  if (toolName === "save_last_response") return "write";
-  if (toolName === "run_interactive") {
-    const exe = String(args["executable"] ?? "").toLowerCase();
-    if (/\b(rm|rmdir|del|format|mkfs|Remove-Item)\b/i.test(exe)) return "destructive";
-    if (/\b(bash|sh|zsh|cmd|powershell|pwsh|python|node|ruby|perl)\b/i.test(exe)) return "write";
-    return "write";
-  }
-  if (toolName === "read_file" || toolName === "list_dir" || toolName === "grep_files" || toolName === "glob_files" || toolName === "web_fetch" || toolName === "save_memory" || toolName === "ask_user" || toolName === "write_todos" || toolName === "google_search" || toolName === "spawn_agent" || toolName === "run_tests") return "safe";
-  return "write";
-}
-function schemaToJsonSchema(schema) {
-  const result = {
-    type: schema.type,
-    description: schema.description
-  };
-  if (schema.enum) result["enum"] = schema.enum;
-  if (schema.items) result["items"] = schemaToJsonSchema(schema.items);
-  if (schema.properties) {
-    result["properties"] = Object.fromEntries(
-      Object.entries(schema.properties).map(([k, v]) => [k, schemaToJsonSchema(v)])
-    );
-  }
-  return result;
-}
-
-// src/tools/truncate.ts
-var DEFAULT_MAX_TOOL_OUTPUT_CHARS = 12e3;
-function getMaxOutputChars(contextWindow) {
-  if (!contextWindow || contextWindow <= 0) return DEFAULT_MAX_TOOL_OUTPUT_CHARS;
-  return Math.max(DEFAULT_MAX_TOOL_OUTPUT_CHARS, Math.min(Math.floor(contextWindow / 4), 12e4));
-}
-var activeMaxChars = DEFAULT_MAX_TOOL_OUTPUT_CHARS;
-function setContextWindow(contextWindow) {
-  activeMaxChars = getMaxOutputChars(contextWindow);
-}
-function getActiveMaxChars() {
-  return activeMaxChars;
-}
-function truncateOutput(content, toolName, maxChars) {
-  const limit = maxChars ?? activeMaxChars;
-  if (content.length <= limit) return content;
-  const keepHead = Math.floor(limit * 0.7);
-  const keepTail = Math.floor(limit * 0.2);
-  const omitted = content.length - keepHead - keepTail;
-  const lines = content.split("\n").length;
-  const head = content.slice(0, keepHead);
-  const tail = content.slice(content.length - keepTail);
-  return head + `
-
-... [Output truncated: ${content.length} chars / ${lines} lines total, ${omitted} chars omitted. Use read_file to view full content in segments` + (toolName === "bash" ? ", or narrow the command scope" : "") + `] ...
-
-` + tail;
-}
-
-// src/repl/theme.ts
-import chalk3 from "chalk";
-var DARK_THEME = {
-  prompt: chalk3.green,
-  info: chalk3.cyan,
-  warning: chalk3.yellow,
-  error: chalk3.red,
-  success: chalk3.green,
-  dim: chalk3.dim,
-  accent: chalk3.cyan,
-  toolCall: chalk3.yellow,
-  toolResult: chalk3.green,
-  heading: chalk3.bold.cyan
-};
-var LIGHT_THEME = {
-  prompt: chalk3.blue,
-  info: chalk3.blueBright,
-  warning: chalk3.yellow,
-  error: chalk3.red,
-  success: chalk3.green,
-  dim: chalk3.gray,
-  accent: chalk3.blueBright,
-  toolCall: chalk3.magenta,
-  toolResult: chalk3.green,
-  heading: chalk3.bold.blue
-};
-function resolveColor(name) {
-  if (name.startsWith("#")) return chalk3.hex(name);
-  const parts = name.split(".");
-  let result = chalk3;
-  for (const part of parts) {
-    const obj = result;
-    if (obj && typeof obj[part] !== "undefined") {
-      result = obj[part];
-    }
-  }
-  if (typeof result !== "function") {
-    process.stderr.write(`[theme] Warning: unrecognized color "${name}", using default.
-`);
-    return chalk3;
-  }
-  return result;
-}
-function buildCustomTheme(base, overrides) {
-  if (!overrides) return base;
-  const result = { ...base };
-  for (const [key, colorName] of Object.entries(overrides)) {
-    if (key in result && colorName) {
-      result[key] = resolveColor(colorName);
-    }
-  }
-  return result;
-}
-var _currentTheme = DARK_THEME;
-function initTheme(themeId = "dark", customColors) {
-  switch (themeId) {
-    case "light":
-      _currentTheme = LIGHT_THEME;
-      break;
-    case "custom":
-      _currentTheme = buildCustomTheme(DARK_THEME, customColors);
-      break;
-    default:
-      _currentTheme = DARK_THEME;
-  }
-}
-var theme = new Proxy(DARK_THEME, {
-  get(_target, prop) {
-    return _currentTheme[prop];
-  }
-});
-
 // src/tools/builtin/spawn-agent.ts
 var spawnAgentContext = {
   provider: null,
@@ -2516,9 +3192,194 @@ var spawnAgentTool = {
   }
 };
 
+// src/tools/builtin/task-manager.ts
+import { spawn as spawn2 } from "child_process";
+import { randomUUID } from "crypto";
+import { platform as platform3 } from "os";
+var MAX_OUTPUT_CHARS = 1e4;
+var MAX_TASKS = 20;
+var tasks = /* @__PURE__ */ new Map();
+function appendOutput(task, field, chunk) {
+  task[field] += chunk;
+  if (task[field].length > MAX_OUTPUT_CHARS) {
+    task[field] = "... [truncated] ...\n" + task[field].slice(-MAX_OUTPUT_CHARS);
+  }
+}
+function createTask(command, description) {
+  if (tasks.size >= MAX_TASKS) {
+    for (const [id2, t] of tasks) {
+      if (t.status !== "running") {
+        tasks.delete(id2);
+        break;
+      }
+    }
+  }
+  const id = randomUUID().slice(0, 8);
+  const isWin = platform3() === "win32";
+  const shell = isWin ? "cmd" : "sh";
+  const shellFlag = isWin ? "/c" : "-c";
+  const proc = spawn2(shell, [shellFlag, command], {
+    stdio: ["ignore", "pipe", "pipe"],
+    detached: false,
+    env: { ...process.env, PYTHONUTF8: "1" }
+  });
+  const task = {
+    id,
+    command,
+    description,
+    process: proc,
+    startTime: Date.now(),
+    endTime: null,
+    status: "running",
+    exitCode: null,
+    stdout: "",
+    stderr: ""
+  };
+  proc.stdout?.on("data", (chunk) => appendOutput(task, "stdout", chunk.toString("utf-8")));
+  proc.stderr?.on("data", (chunk) => appendOutput(task, "stderr", chunk.toString("utf-8")));
+  proc.on("close", (code) => {
+    task.endTime = Date.now();
+    task.exitCode = code;
+    task.status = code === 0 ? "completed" : "failed";
+  });
+  proc.on("error", (err) => {
+    task.endTime = Date.now();
+    task.status = "failed";
+    task.stderr += `
+Process error: ${err.message}`;
+  });
+  tasks.set(id, task);
+  return task;
+}
+function listTasks() {
+  return [...tasks.values()].map(({ process: _p, ...rest }) => rest);
+}
+function getTaskOutput(id) {
+  const task = tasks.get(id);
+  if (!task) return null;
+  return { stdout: task.stdout, stderr: task.stderr, status: task.status };
+}
+function stopTask(id) {
+  const task = tasks.get(id);
+  if (!task || task.status !== "running") return false;
+  try {
+    task.process.kill("SIGTERM");
+    setTimeout(() => {
+      if (task.status === "running") {
+        try {
+          task.process.kill("SIGKILL");
+        } catch {
+        }
+      }
+    }, 3e3);
+    task.status = "stopped";
+    task.endTime = Date.now();
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+// src/tools/builtin/task-create.ts
+var taskCreateTool = {
+  definition: {
+    name: "task_create",
+    description: `Start a command running in the background. Returns a task ID for monitoring with task_list. Use this to run long-running processes (dev servers, builds, tests) while continuing other work.`,
+    parameters: {
+      command: {
+        type: "string",
+        description: "Shell command to run in the background",
+        required: true
+      },
+      description: {
+        type: "string",
+        description: "Brief description of what this task does",
+        required: true
+      }
+    },
+    dangerous: false
+  },
+  async execute(args) {
+    const command = String(args["command"] ?? "");
+    const description = String(args["description"] ?? command);
+    if (!command) throw new ToolError("task_create", "command is required");
+    const task = createTask(command, description);
+    return `Background task started.
+  ID: ${task.id}
+  Command: ${command}
+  Description: ${description}
+Use task_list to check status, task_stop to terminate.`;
+  }
+};
+
+// src/tools/builtin/task-list.ts
+var taskListTool = {
+  definition: {
+    name: "task_list",
+    description: `List all background tasks with their status. Provide an ID to get detailed output for a specific task.`,
+    parameters: {
+      id: {
+        type: "string",
+        description: "Optional: specific task ID to get detailed stdout/stderr output",
+        required: false
+      }
+    },
+    dangerous: false
+  },
+  async execute(args) {
+    const id = args["id"] ? String(args["id"]) : void 0;
+    if (id) {
+      const output = getTaskOutput(id);
+      if (!output) return `Task not found: ${id}`;
+      const parts = [`Task ${id} (${output.status})`];
+      if (output.stdout) parts.push(`
+\u2500\u2500 stdout \u2500\u2500
+${output.stdout}`);
+      if (output.stderr) parts.push(`
+\u2500\u2500 stderr \u2500\u2500
+${output.stderr}`);
+      if (!output.stdout && !output.stderr) parts.push("\n(no output yet)");
+      return parts.join("");
+    }
+    const all = listTasks();
+    if (all.length === 0) return "No background tasks.";
+    const lines = [`Background tasks (${all.length}):
+`];
+    for (const t of all) {
+      const elapsed = ((t.endTime ?? Date.now()) - t.startTime) / 1e3;
+      const status = t.status === "running" ? "\u{1F7E2} running" : t.status === "completed" ? "\u2705 completed" : t.status === "stopped" ? "\u23F9 stopped" : "\u274C failed";
+      lines.push(`  [${t.id}] ${status} (${elapsed.toFixed(1)}s) \u2014 ${t.description}`);
+      if (t.exitCode !== null) lines.push(`         exit code: ${t.exitCode}`);
+    }
+    return lines.join("\n");
+  }
+};
+
+// src/tools/builtin/task-stop.ts
+var taskStopTool = {
+  definition: {
+    name: "task_stop",
+    description: `Stop a running background task by its ID. Use task_list to find the ID.`,
+    parameters: {
+      id: {
+        type: "string",
+        description: "Task ID to stop",
+        required: true
+      }
+    },
+    dangerous: false
+  },
+  async execute(args) {
+    const id = String(args["id"] ?? "");
+    if (!id) throw new ToolError("task_stop", "id is required");
+    const success = stopTask(id);
+    return success ? `Task ${id} stopped.` : `Task ${id} not found or already completed.`;
+  }
+};
+
 // src/tools/registry.ts
 import { pathToFileURL } from "url";
-import { existsSync as existsSync9, mkdirSync as mkdirSync4, readdirSync as readdirSync6 } from "fs";
+import { existsSync as existsSync10, mkdirSync as mkdirSync4, readdirSync as readdirSync6 } from "fs";
 import { join as join5 } from "path";
 var ToolRegistry = class {
   tools = /* @__PURE__ */ new Map();
@@ -2541,6 +3402,9 @@ var ToolRegistry = class {
     this.register(googleSearchTool);
     this.register(spawnAgentTool);
     this.register(runTestsTool);
+    this.register(taskCreateTool);
+    this.register(taskListTool);
+    this.register(taskStopTool);
   }
   register(tool) {
     this.tools.set(tool.definition.name, tool);
@@ -2592,7 +3456,7 @@ var ToolRegistry = class {
    * Returns the number of successfully loaded plugins.
    */
   async loadPlugins(pluginsDir, allowPlugins = false) {
-    if (!existsSync9(pluginsDir)) {
+    if (!existsSync10(pluginsDir)) {
       try {
         mkdirSync4(pluginsDir, { recursive: true });
       } catch {
@@ -2663,12 +3527,15 @@ export {
   initTheme,
   theme,
   undoStack,
+  renderDiff,
+  runHook,
+  checkPermission,
+  setContextWindow,
+  truncateOutput,
+  ToolExecutor,
   lastResponseStore,
   askUserContext,
   googleSearchContext,
-  setContextWindow,
-  getActiveMaxChars,
-  truncateOutput,
   spawnAgentContext,
   ToolRegistry
 };