jinzd-ai-cli 0.4.234 → 0.4.236

package/dist/{chunk-TAXIG7HH.js → chunk-SCFGLRB3.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   VERSION
-} from "./chunk-3KTSJ2EL.js";
+} from "./chunk-CGQARJMP.js";
 
 // src/cli/ci-format.ts
 var DEFAULT_CI_THRESHOLDS = {

package/dist/{chunk-II6RZRTF.js → chunk-T6EIBUKW.js}

@@ -2,7 +2,7 @@
 import {
   CONFIG_DIR_NAME,
   PLUGINS_DIR_NAME
-} from "./chunk-3KTSJ2EL.js";
+} from "./chunk-CGQARJMP.js";
 import {
   atomicWriteFileSync
 } from "./chunk-IW3Q7AE5.js";
@@ -121,8 +121,8 @@ function installFlushOnExit() {
 }
 
 // src/plugins/plugin-manager.ts
-import { existsSync as existsSync2, mkdirSync as mkdirSync2, readdirSync, readFileSync as readFileSync2, cpSync, rmSync, statSync } from "fs";
-import { basename, dirname as dirname2, join as join2, resolve } from "path";
+import { existsSync as existsSync2, mkdirSync as mkdirSync2, readdirSync, readFileSync as readFileSync2, realpathSync, cpSync, rmSync, statSync } from "fs";
+import { basename, dirname as dirname2, join as join2, relative, resolve, sep } from "path";
 import { createHash } from "crypto";
 import { z } from "zod";
 var MANIFEST_RELATIVE = ".aicli-plugin/plugin.json";
@@ -192,20 +192,117 @@ function statePath(configDir) {
 }
 function loadState(configDir) {
   const file = statePath(configDir);
-  if (!existsSync2(file)) return { version: 1, plugins: [] };
+  if (!existsSync2(file)) return { version: 2, plugins: [] };
   try {
     const parsed = JSON.parse(readFileSync2(file, "utf-8"));
-    return { version: 1, plugins: Array.isArray(parsed.plugins) ? parsed.plugins : [] };
+    const rawPlugins = Array.isArray(parsed.plugins) ? parsed.plugins : [];
+    return { version: 2, plugins: rawPlugins.map((p) => migrateEntry(p)) };
   } catch {
-    return { version: 1, plugins: [] };
+    return { version: 2, plugins: [] };
   }
 }
+function migrateEntry(entry) {
+  const name = String(entry.name ?? "");
+  const contentHash = typeof entry.contentHash === "string" ? entry.contentHash : void 0;
+  const legacyHash = typeof entry.hash === "string" ? entry.hash : void 0;
+  const trusted = contentHash ? entry.trusted === true : false;
+  return {
+    name,
+    enabled: entry.enabled === true,
+    trusted,
+    contentHash: contentHash ?? legacyHash,
+    installedAt: String(entry.installedAt ?? (/* @__PURE__ */ new Date(0)).toISOString()),
+    trustedAt: trusted && entry.trustedAt ? String(entry.trustedAt) : void 0,
+    enabledAt: entry.enabledAt ? String(entry.enabledAt) : void 0
+  };
+}
 function saveState(configDir, state2) {
   mkdirSync2(pluginRoot(configDir), { recursive: true });
   atomicWriteFileSync(statePath(configDir), JSON.stringify(state2, null, 2));
 }
-function hashPluginManifest(manifestPath) {
-  return createHash("sha256").update(readFileSync2(manifestPath)).digest("hex");
+function normalizeForHash(buf) {
+  const str = buf.toString("utf-8").replaceAll("\r\n", "\n");
+  return Buffer.from(str, "utf-8");
+}
+function extractCommandPaths(command, pluginDir) {
+  const resolvedDir = resolve(pluginDir);
+  const refs = [];
+  for (const m of command.matchAll(/\$PLUGIN_DIR[\\/]([^"'\s]+)/g)) {
+    refs.push(m[1]);
+  }
+  for (const m of command.matchAll(/\$\{pluginDir\}[\\/]([^"'\s}]+)/g)) {
+    refs.push(m[1]);
+  }
+  for (const m of command.matchAll(/(?<=["'\s])(\.?[.\\/][^"'\s]+)/g)) {
+    refs.push(m[0]);
+  }
+  const seen = /* @__PURE__ */ new Set();
+  const valid = [];
+  for (const ref of refs) {
+    if (seen.has(ref)) continue;
+    seen.add(ref);
+    try {
+      const abs = resolve(resolvedDir, ref);
+      if (!abs.startsWith(resolvedDir + sep)) continue;
+      if (existsSync2(abs)) {
+        const real = realpathSync(abs);
+        if (!real.startsWith(resolvedDir + sep)) continue;
+        valid.push(relative(resolvedDir, real));
+      }
+    } catch {
+    }
+  }
+  return valid;
+}
+function hashPluginContent(pluginDir, manifest) {
+  const resolvedDir = resolve(pluginDir);
+  const assetRels = /* @__PURE__ */ new Set(
+    [...manifest.skills, ...manifest.commands, ...manifest.agents]
+  );
+  for (const raw of Object.values(manifest.hooks?.events ?? {})) {
+    const items = Array.isArray(raw) ? raw : [raw];
+    for (const item of items) {
+      const cmd = typeof item === "string" ? item : item.command;
+      if (cmd) {
+        for (const p of extractCommandPaths(cmd, pluginDir)) assetRels.add(p);
+      }
+    }
+  }
+  for (const server of Object.values(manifest.mcpServers ?? {})) {
+    for (const p of extractCommandPaths(server.command, pluginDir)) assetRels.add(p);
+    for (const arg of server.args ?? []) {
+      for (const p of extractCommandPaths(arg, pluginDir)) assetRels.add(p);
+    }
+  }
+  const sorted = [...assetRels].sort();
+  const hasher = createHash("sha256");
+  const manifestPath = join2(resolvedDir, MANIFEST_RELATIVE);
+  hasher.update(normalizeForHash(readFileSync2(manifestPath)));
+  for (const rel of sorted) {
+    const abs = resolve(resolvedDir, rel);
+    if (!abs.startsWith(resolvedDir + sep)) {
+      throw new Error(`plugin asset escapes plugin dir: ${rel}`);
+    }
+    let realPath;
+    try {
+      realPath = realpathSync(abs);
+    } catch {
+      continue;
+    }
+    try {
+      if (statSync(realPath).isDirectory()) continue;
+    } catch {
+      continue;
+    }
+    if (!realPath.startsWith(resolvedDir + sep)) {
+      throw new Error(`plugin asset symlink escapes plugin dir: ${rel} \u2192 ${realPath}`);
+    }
+    hasher.update(normalizeForHash(readFileSync2(abs)));
+  }
+  return hasher.digest("hex");
+}
+function effectiveHash(entry) {
+  return entry.contentHash ?? entry.hash ?? "";
 }
 function readPluginManifest(manifestPath) {
   return PluginManifestSchema.parse(JSON.parse(readFileSync2(manifestPath, "utf-8")));
@@ -226,19 +323,19 @@ function installPlugin(configDir, inputPath) {
   if (existsSync2(targetDir)) rmSync(targetDir, { recursive: true, force: true });
   cpSync(sourceDir, targetDir, { recursive: true });
   const manifestPath = pluginManifestPath(targetDir);
-  const hash = hashPluginManifest(manifestPath);
+  const contentHash = hashPluginContent(targetDir, manifest);
   const state2 = loadState(configDir);
   const previous = state2.plugins.find((p) => p.name === manifest.name);
   const next = {
     name: manifest.name,
     enabled: previous?.enabled ?? false,
     trusted: false,
-    hash,
+    contentHash,
     installedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
   state2.plugins = [...state2.plugins.filter((p) => p.name !== manifest.name), next];
   saveState(configDir, state2);
-  return { name: manifest.name, dir: targetDir, manifestPath, manifest, hash, enabled: next.enabled, trusted: false, valid: true };
+  return { name: manifest.name, dir: targetDir, manifestPath, manifest, hash: contentHash, enabled: next.enabled, trusted: false, valid: true };
 }
 function setPluginEnabled(configDir, name, enabled) {
   const plugin = getInstalledPlugin(configDir, name);
@@ -248,10 +345,10 @@ function setPluginEnabled(configDir, name, enabled) {
     name: plugin.name,
     enabled: false,
     trusted: false,
-    hash: plugin.hash,
+    contentHash: plugin.hash,
     installedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
-  const next = { ...current, enabled, hash: plugin.hash, enabledAt: enabled ? (/* @__PURE__ */ new Date()).toISOString() : current.enabledAt };
+  const next = { ...current, enabled, contentHash: plugin.hash, enabledAt: enabled ? (/* @__PURE__ */ new Date()).toISOString() : current.enabledAt };
   state2.plugins = [...state2.plugins.filter((p) => p.name !== plugin.name), next];
   saveState(configDir, state2);
   return next;
@@ -264,10 +361,10 @@ function trustPlugin(configDir, name) {
     name: plugin.name,
     enabled: false,
     trusted: false,
-    hash: plugin.hash,
+    contentHash: plugin.hash,
     installedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
-  const next = { ...current, trusted: true, hash: plugin.hash, trustedAt: (/* @__PURE__ */ new Date()).toISOString() };
+  const next = { ...current, trusted: true, contentHash: plugin.hash, trustedAt: (/* @__PURE__ */ new Date()).toISOString() };
   state2.plugins = [...state2.plugins.filter((p) => p.name !== plugin.name), next];
   saveState(configDir, state2);
   return next;
@@ -295,15 +392,15 @@ function listInstalledPlugins(configDir) {
     if (!existsSync2(manifestPath)) continue;
     try {
       const manifest = readPluginManifest(manifestPath);
-      const hash = hashPluginManifest(manifestPath);
+      const contentHash = hashPluginContent(dir, manifest);
       const st = state2.plugins.find((p) => p.name === manifest.name);
-      const trusted = st?.trusted === true && st.hash === hash;
+      const trusted = st?.trusted === true && effectiveHash(st) === contentHash;
       out.push({
         name: manifest.name,
         dir,
         manifestPath,
         manifest,
-        hash,
+        hash: contentHash,
         enabled: st?.enabled === true,
         trusted,
         valid: true

package/dist/{chunk-5VPRZMZB.js → chunk-TT7YURG3.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   truncateForPersist
-} from "./chunk-E5RLXMSU.js";
+} from "./chunk-SBSWH2EG.js";
 import {
   APP_NAME,
   CONFIG_DIR_NAME,
@@ -11,7 +11,7 @@ import {
   MCP_PROTOCOL_VERSION,
   MCP_TOOL_PREFIX,
   VERSION
-} from "./chunk-3KTSJ2EL.js";
+} from "./chunk-CGQARJMP.js";
 import {
   atomicWriteFileSync
 } from "./chunk-IW3Q7AE5.js";
@@ -1078,10 +1078,10 @@ function readGitDiff(options = {}) {
 }
 
 export {
+  readGitDiff,
   scanDirTree,
   scanProject,
   buildInitPrompt,
-  readGitDiff,
   parseSimpleYaml,
   persistToolRound,
   autoTrimSessionIfNeeded,

package/dist/{chunk-L5PNAQ6O.js → chunk-VBAW4ZPY.js}

@@ -8,7 +8,7 @@ import {
   CONFIG_FILE_NAME,
   HISTORY_DIR_NAME,
   PLUGINS_DIR_NAME
-} from "./chunk-3KTSJ2EL.js";
+} from "./chunk-CGQARJMP.js";
 import {
   atomicWriteFileSync
 } from "./chunk-IW3Q7AE5.js";

package/dist/{ci-GJ53GPLA.js → ci-FYLCHRN3.js}

@@ -3,14 +3,14 @@ import {
   CI_COMMENT_MARKER,
   countSeverity,
   runCi
-} from "./chunk-6MJMHHRK.js";
-import "./chunk-TAXIG7HH.js";
+} from "./chunk-O4QYY6SF.js";
+import "./chunk-SCFGLRB3.js";
 import "./chunk-HLWUDRBO.js";
 import "./chunk-QYQI7ZWK.js";
 import "./chunk-O3XSFPYH.js";
-import "./chunk-L5PNAQ6O.js";
+import "./chunk-VBAW4ZPY.js";
 import "./chunk-5ULLIOVC.js";
-import "./chunk-3KTSJ2EL.js";
+import "./chunk-CGQARJMP.js";
 import "./chunk-IW3Q7AE5.js";
 export {
   CI_COMMENT_MARKER,

package/dist/{ci-format-AXE4QCI6.js → ci-format-TH2ZTFKU.js}

@@ -6,8 +6,8 @@ import {
   formatCiResult,
   formatCiSarif,
   normalizeCiThresholds
-} from "./chunk-TAXIG7HH.js";
-import "./chunk-3KTSJ2EL.js";
+} from "./chunk-SCFGLRB3.js";
+import "./chunk-CGQARJMP.js";
 export {
   DEFAULT_CI_THRESHOLDS,
   detectCiGateSignals,

package/dist/{constants-DC4EXFSB.js → constants-BF6YNKRW.js}

@@ -38,7 +38,7 @@ import {
   TEST_TIMEOUT,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-3KTSJ2EL.js";
+} from "./chunk-CGQARJMP.js";
 export {
   AGENTIC_BEHAVIOR_GUIDELINE,
   APP_NAME,

package/dist/{doctor-cli-HKREND6Q.js → doctor-cli-B6GE4BYJ.js}

@@ -2,14 +2,14 @@
 import {
   formatDoctorReport,
   runDoctorCli
-} from "./chunk-5DTEEWYC.js";
+} from "./chunk-QDP3NUPX.js";
 import "./chunk-QYQI7ZWK.js";
-import "./chunk-II6RZRTF.js";
+import "./chunk-T6EIBUKW.js";
 import "./chunk-O3XSFPYH.js";
-import "./chunk-L5PNAQ6O.js";
+import "./chunk-VBAW4ZPY.js";
 import "./chunk-5ULLIOVC.js";
 import "./chunk-HOSJZMQS.js";
-import "./chunk-3KTSJ2EL.js";
+import "./chunk-CGQARJMP.js";
 import "./chunk-IW3Q7AE5.js";
 export {
   formatDoctorReport,