jinzd-ai-cli 0.4.235 → 0.4.236

package/README.md

@@ -7,7 +7,7 @@
 [![npm version](https://img.shields.io/npm/v/jinzd-ai-cli)](https://www.npmjs.com/package/jinzd-ai-cli)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
 [![Node.js](https://img.shields.io/badge/node-%3E%3D20-brightgreen)](https://nodejs.org)
-[![Tests](https://img.shields.io/badge/tests-1393%20passing-brightgreen)]()
+[![Tests](https://img.shields.io/badge/tests-1639%20passing-brightgreen)]()
 [![GitHub Release](https://img.shields.io/github/v/release/jinzhengdong/ai-cli)](https://github.com/jinzhengdong/ai-cli/releases)
 [![CI](https://github.com/jinzhengdong/ai-cli/actions/workflows/ci.yml/badge.svg)](https://github.com/jinzhengdong/ai-cli/actions/workflows/ci.yml)
 
@@ -31,7 +31,7 @@
 - **Conversation Branching** *(v0.4.74+)* — `/branch list/new/switch/delete/rename` inside the REPL, plus a 🌿 "fork here" button on every replay step — explore alternate directions without losing the original thread
 - **Symbol Index** *(v0.4.76+, multi-language since v0.4.143)* — persistent tree-sitter index for TypeScript / JavaScript / TSX / Python / Go / Rust / Java / C/C++ powers three new AI tools: `find_symbol`, `get_outline`, `find_references`. Orders of magnitude faster than grep for definition lookups; background refresh on REPL startup, `/index status|rebuild|clear` to manage
 - **Semantic Code Search** *(v0.4.77+)* — `search_code` tool finds code by meaning, not name. Local sentence embeddings (multilingual MiniLM, 117 MB one-time download) score symbols by cosine similarity against natural-language queries in English or Chinese ("where are users authenticated", "哪里做了速率限制"). No API key, runs on CPU. Manage with `/index semantic-rebuild|semantic-clear`
-- **MCP Server Mode** *(v0.4.84+)* — `aicli mcp-serve` reverses ai-cli into an MCP server (JSON-RPC 2.0 over stdio), exposing its 28 built-in tools (incl. `find_symbol` / `search_code` / `run_tests`) to Claude Desktop / Cursor / any MCP client. Opt-in destructive-tool allow, `--tools` whitelist, `--cwd` override
+- **MCP Server Mode** *(v0.4.84+)* — `aicli mcp-serve` reverses ai-cli into an MCP server (JSON-RPC 2.0 over stdio), exposing its 30 built-in tools (incl. `find_symbol` / `search_code` / `run_tests`) to Claude Desktop / Cursor / any MCP client. Opt-in destructive-tool allow, `--tools` whitelist, `--cwd` override
 - **Session Sensitive-Data Redaction** *(v0.4.88+)* — unified redactor scrubs `password=` / `api_key` / bearer tokens / OpenAI-style keys from every message **before it hits disk**. Query text is redacted too, so secrets never reach embeddings or logs. `/security status` + `/security scan` to audit
 - **Human-like Long-Term Memory** *(v0.4.89+, B4)* — semantic index over every past chat session + `recall_memory` AI tool + `/memory rebuild|refresh|status|recall` commands. AI is prompted to auto-recall when it sees "last time" / "之前" / ambiguous references. Reuses the same MiniLM embedder as semantic code search
 - **Governed Persistent Memory** *(v0.4.217+)* — `save_memory` and `/memory add` write auditable `memory.jsonl` entries with id/scope/source/sensitivity/approval/expiry; low-risk entries auto-approve, sensitive entries stay pending until `/memory approve <id>`, and project-scoped memories only inject inside the same project
@@ -156,7 +156,7 @@ aicli
 
 ## Built-in Tools (Agentic)
 
-AI autonomously invokes these 27 tools during conversations:
+AI autonomously invokes these 30 tools during conversations:
 
 | Tool | Safety | Description |
 |------|--------|-------------|
@@ -225,7 +225,7 @@ AI autonomously invokes these 27 tools during conversations:
 
 **Multi-line input**: Use `\` at end of line for continuation, or paste multi-line content directly (auto-detected and merged).
 
-Type `/help` in the REPL to see all 40 commands.
+Type `/help` in the REPL to see all 48 commands.
 
 ## CLI Parameters
 
@@ -512,7 +512,7 @@ The Web UI (`aicli web`) provides a full-featured browser interface:
 ## Testing
 
 ```bash
-npm test              # Offline regression suite: 79 files, 1393 passed, 1 skipped
+npm test              # Offline regression suite: 91 files, 1639 passed, 2 skipped
 npm run test:providers # Real-provider smoke tests (network/API-key dependent)
 npm run test:e2e-web  # Playwright browser smoke; may need browser-process permission in sandboxes
 npm run test:watch    # Watch mode

package/dist/{batch-Y7MHXVR7.js → batch-HZI7QAE7.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import {
   ConfigManager
-} from "./chunk-BFTTW5LS.js";
+} from "./chunk-VBAW4ZPY.js";
 import "./chunk-5ULLIOVC.js";
-import "./chunk-GDXKFWFL.js";
+import "./chunk-CGQARJMP.js";
 import {
   atomicWriteFileSync
 } from "./chunk-IW3Q7AE5.js";

package/dist/{chunk-Q5GVANMH.js → chunk-7VAE3I3D.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   TEST_TIMEOUT
-} from "./chunk-GDXKFWFL.js";
+} from "./chunk-CGQARJMP.js";
 
 // src/tools/builtin/run-tests.ts
 import { execSync, spawnSync } from "child_process";

package/dist/{chunk-GDXKFWFL.js → chunk-CGQARJMP.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // src/core/constants.ts
-var VERSION = "0.4.235";
+var VERSION = "0.4.236";
 var APP_NAME = "ai-cli";
 var CONFIG_DIR_NAME = ".aicli";
 var CONFIG_FILE_NAME = "config.json";

package/dist/{chunk-HHYMSEWS.js → chunk-MFWAL5S2.js}

@@ -6,7 +6,7 @@ import { platform } from "os";
 import chalk from "chalk";
 
 // src/core/constants.ts
-var VERSION = "0.4.235";
+var VERSION = "0.4.236";
 var APP_NAME = "ai-cli";
 var CONFIG_DIR_NAME = ".aicli";
 var CONFIG_FILE_NAME = "config.json";

package/dist/{chunk-CDOQNIVV.js → chunk-O4QYY6SF.js}

@@ -2,7 +2,7 @@
 import {
   evaluateCiGate,
   normalizeCiThresholds
-} from "./chunk-WXFQ6LYN.js";
+} from "./chunk-SCFGLRB3.js";
 import {
   buildReviewPrompt,
   buildSecurityReviewPrompt,
@@ -13,10 +13,10 @@ import {
 } from "./chunk-QYQI7ZWK.js";
 import {
   ConfigManager
-} from "./chunk-BFTTW5LS.js";
+} from "./chunk-VBAW4ZPY.js";
 import {
   VERSION
-} from "./chunk-GDXKFWFL.js";
+} from "./chunk-CGQARJMP.js";
 
 // src/cli/ci.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-7D5EJBHO.js → chunk-QDP3NUPX.js}

@@ -11,10 +11,10 @@ import {
   listHooks,
   listInstalledPlugins,
   resetStats
-} from "./chunk-GFDRC2JZ.js";
+} from "./chunk-T6EIBUKW.js";
 import {
   ConfigManager
-} from "./chunk-BFTTW5LS.js";
+} from "./chunk-VBAW4ZPY.js";
 import {
   getGitRoot
 } from "./chunk-HOSJZMQS.js";
@@ -26,7 +26,7 @@ import {
   MCP_PROJECT_CONFIG_NAME,
   MEMORY_FILE_NAME,
   VERSION
-} from "./chunk-GDXKFWFL.js";
+} from "./chunk-CGQARJMP.js";
 
 // src/diagnostics/doctor-report.ts
 import { existsSync as existsSync3, statSync as statSync2 } from "fs";

package/dist/{chunk-FYJGVFXL.js → chunk-SBSWH2EG.js}

@@ -14,7 +14,7 @@ import {
   runHook,
   runLifecycleHooks,
   runTool
-} from "./chunk-GFDRC2JZ.js";
+} from "./chunk-T6EIBUKW.js";
 import {
   getDangerLevel,
   isFileWriteTool,
@@ -33,7 +33,7 @@ import {
 } from "./chunk-4BKXL7SM.js";
 import {
   runTestsTool
-} from "./chunk-Q5GVANMH.js";
+} from "./chunk-7VAE3I3D.js";
 import {
   CONFIG_DIR_NAME,
   DEFAULT_MAX_TOOL_OUTPUT_CHARS_CAP,
@@ -43,7 +43,7 @@ import {
   SUBAGENT_ALLOWED_TOOLS,
   SUBAGENT_DEFAULT_MAX_ROUNDS,
   SUBAGENT_MAX_ROUNDS_LIMIT
-} from "./chunk-GDXKFWFL.js";
+} from "./chunk-CGQARJMP.js";
 import {
   loadChatIndex,
   searchChatMemory
@@ -7005,10 +7005,6 @@ export {
   initTheme,
   theme,
   undoStack,
-  recordRecentlyDeniedAutoAction,
-  getRecentlyDeniedAutoActions,
-  clearRecentlyDeniedAutoActions,
-  defaultActionClassifier,
   renderDiff,
   memoryStorePath,
   memoryMarkdownPath,
@@ -7020,6 +7016,10 @@ export {
   expireMemoryEntry,
   exportMemoryEntries,
   formatMemoryForPrompt,
+  recordRecentlyDeniedAutoAction,
+  getRecentlyDeniedAutoActions,
+  clearRecentlyDeniedAutoActions,
+  defaultActionClassifier,
   isInterrupted,
   requestInterrupt,
   resetInterrupt,

package/dist/{chunk-WXFQ6LYN.js → chunk-SCFGLRB3.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   VERSION
-} from "./chunk-GDXKFWFL.js";
+} from "./chunk-CGQARJMP.js";
 
 // src/cli/ci-format.ts
 var DEFAULT_CI_THRESHOLDS = {

package/dist/{chunk-GFDRC2JZ.js → chunk-T6EIBUKW.js}

@@ -2,7 +2,7 @@
 import {
   CONFIG_DIR_NAME,
   PLUGINS_DIR_NAME
-} from "./chunk-GDXKFWFL.js";
+} from "./chunk-CGQARJMP.js";
 import {
   atomicWriteFileSync
 } from "./chunk-IW3Q7AE5.js";
@@ -121,8 +121,8 @@ function installFlushOnExit() {
 }
 
 // src/plugins/plugin-manager.ts
-import { existsSync as existsSync2, mkdirSync as mkdirSync2, readdirSync, readFileSync as readFileSync2, cpSync, rmSync, statSync } from "fs";
-import { basename, dirname as dirname2, join as join2, resolve } from "path";
+import { existsSync as existsSync2, mkdirSync as mkdirSync2, readdirSync, readFileSync as readFileSync2, realpathSync, cpSync, rmSync, statSync } from "fs";
+import { basename, dirname as dirname2, join as join2, relative, resolve, sep } from "path";
 import { createHash } from "crypto";
 import { z } from "zod";
 var MANIFEST_RELATIVE = ".aicli-plugin/plugin.json";
@@ -192,20 +192,117 @@ function statePath(configDir) {
 }
 function loadState(configDir) {
   const file = statePath(configDir);
-  if (!existsSync2(file)) return { version: 1, plugins: [] };
+  if (!existsSync2(file)) return { version: 2, plugins: [] };
   try {
     const parsed = JSON.parse(readFileSync2(file, "utf-8"));
-    return { version: 1, plugins: Array.isArray(parsed.plugins) ? parsed.plugins : [] };
+    const rawPlugins = Array.isArray(parsed.plugins) ? parsed.plugins : [];
+    return { version: 2, plugins: rawPlugins.map((p) => migrateEntry(p)) };
   } catch {
-    return { version: 1, plugins: [] };
+    return { version: 2, plugins: [] };
   }
 }
+function migrateEntry(entry) {
+  const name = String(entry.name ?? "");
+  const contentHash = typeof entry.contentHash === "string" ? entry.contentHash : void 0;
+  const legacyHash = typeof entry.hash === "string" ? entry.hash : void 0;
+  const trusted = contentHash ? entry.trusted === true : false;
+  return {
+    name,
+    enabled: entry.enabled === true,
+    trusted,
+    contentHash: contentHash ?? legacyHash,
+    installedAt: String(entry.installedAt ?? (/* @__PURE__ */ new Date(0)).toISOString()),
+    trustedAt: trusted && entry.trustedAt ? String(entry.trustedAt) : void 0,
+    enabledAt: entry.enabledAt ? String(entry.enabledAt) : void 0
+  };
+}
 function saveState(configDir, state2) {
   mkdirSync2(pluginRoot(configDir), { recursive: true });
   atomicWriteFileSync(statePath(configDir), JSON.stringify(state2, null, 2));
 }
-function hashPluginManifest(manifestPath) {
-  return createHash("sha256").update(readFileSync2(manifestPath)).digest("hex");
+function normalizeForHash(buf) {
+  const str = buf.toString("utf-8").replaceAll("\r\n", "\n");
+  return Buffer.from(str, "utf-8");
+}
+function extractCommandPaths(command, pluginDir) {
+  const resolvedDir = resolve(pluginDir);
+  const refs = [];
+  for (const m of command.matchAll(/\$PLUGIN_DIR[\\/]([^"'\s]+)/g)) {
+    refs.push(m[1]);
+  }
+  for (const m of command.matchAll(/\$\{pluginDir\}[\\/]([^"'\s}]+)/g)) {
+    refs.push(m[1]);
+  }
+  for (const m of command.matchAll(/(?<=["'\s])(\.?[.\\/][^"'\s]+)/g)) {
+    refs.push(m[0]);
+  }
+  const seen = /* @__PURE__ */ new Set();
+  const valid = [];
+  for (const ref of refs) {
+    if (seen.has(ref)) continue;
+    seen.add(ref);
+    try {
+      const abs = resolve(resolvedDir, ref);
+      if (!abs.startsWith(resolvedDir + sep)) continue;
+      if (existsSync2(abs)) {
+        const real = realpathSync(abs);
+        if (!real.startsWith(resolvedDir + sep)) continue;
+        valid.push(relative(resolvedDir, real));
+      }
+    } catch {
+    }
+  }
+  return valid;
+}
+function hashPluginContent(pluginDir, manifest) {
+  const resolvedDir = resolve(pluginDir);
+  const assetRels = /* @__PURE__ */ new Set(
+    [...manifest.skills, ...manifest.commands, ...manifest.agents]
+  );
+  for (const raw of Object.values(manifest.hooks?.events ?? {})) {
+    const items = Array.isArray(raw) ? raw : [raw];
+    for (const item of items) {
+      const cmd = typeof item === "string" ? item : item.command;
+      if (cmd) {
+        for (const p of extractCommandPaths(cmd, pluginDir)) assetRels.add(p);
+      }
+    }
+  }
+  for (const server of Object.values(manifest.mcpServers ?? {})) {
+    for (const p of extractCommandPaths(server.command, pluginDir)) assetRels.add(p);
+    for (const arg of server.args ?? []) {
+      for (const p of extractCommandPaths(arg, pluginDir)) assetRels.add(p);
+    }
+  }
+  const sorted = [...assetRels].sort();
+  const hasher = createHash("sha256");
+  const manifestPath = join2(resolvedDir, MANIFEST_RELATIVE);
+  hasher.update(normalizeForHash(readFileSync2(manifestPath)));
+  for (const rel of sorted) {
+    const abs = resolve(resolvedDir, rel);
+    if (!abs.startsWith(resolvedDir + sep)) {
+      throw new Error(`plugin asset escapes plugin dir: ${rel}`);
+    }
+    let realPath;
+    try {
+      realPath = realpathSync(abs);
+    } catch {
+      continue;
+    }
+    try {
+      if (statSync(realPath).isDirectory()) continue;
+    } catch {
+      continue;
+    }
+    if (!realPath.startsWith(resolvedDir + sep)) {
+      throw new Error(`plugin asset symlink escapes plugin dir: ${rel} \u2192 ${realPath}`);
+    }
+    hasher.update(normalizeForHash(readFileSync2(abs)));
+  }
+  return hasher.digest("hex");
+}
+function effectiveHash(entry) {
+  return entry.contentHash ?? entry.hash ?? "";
 }
 function readPluginManifest(manifestPath) {
   return PluginManifestSchema.parse(JSON.parse(readFileSync2(manifestPath, "utf-8")));
@@ -226,19 +323,19 @@ function installPlugin(configDir, inputPath) {
   if (existsSync2(targetDir)) rmSync(targetDir, { recursive: true, force: true });
   cpSync(sourceDir, targetDir, { recursive: true });
   const manifestPath = pluginManifestPath(targetDir);
-  const hash = hashPluginManifest(manifestPath);
+  const contentHash = hashPluginContent(targetDir, manifest);
   const state2 = loadState(configDir);
   const previous = state2.plugins.find((p) => p.name === manifest.name);
   const next = {
     name: manifest.name,
     enabled: previous?.enabled ?? false,
     trusted: false,
-    hash,
+    contentHash,
     installedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
   state2.plugins = [...state2.plugins.filter((p) => p.name !== manifest.name), next];
   saveState(configDir, state2);
-  return { name: manifest.name, dir: targetDir, manifestPath, manifest, hash, enabled: next.enabled, trusted: false, valid: true };
+  return { name: manifest.name, dir: targetDir, manifestPath, manifest, hash: contentHash, enabled: next.enabled, trusted: false, valid: true };
 }
 function setPluginEnabled(configDir, name, enabled) {
   const plugin = getInstalledPlugin(configDir, name);
@@ -248,10 +345,10 @@ function setPluginEnabled(configDir, name, enabled) {
     name: plugin.name,
     enabled: false,
     trusted: false,
-    hash: plugin.hash,
+    contentHash: plugin.hash,
     installedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
-  const next = { ...current, enabled, hash: plugin.hash, enabledAt: enabled ? (/* @__PURE__ */ new Date()).toISOString() : current.enabledAt };
+  const next = { ...current, enabled, contentHash: plugin.hash, enabledAt: enabled ? (/* @__PURE__ */ new Date()).toISOString() : current.enabledAt };
   state2.plugins = [...state2.plugins.filter((p) => p.name !== plugin.name), next];
   saveState(configDir, state2);
   return next;
@@ -264,10 +361,10 @@ function trustPlugin(configDir, name) {
     name: plugin.name,
     enabled: false,
     trusted: false,
-    hash: plugin.hash,
+    contentHash: plugin.hash,
     installedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
-  const next = { ...current, trusted: true, hash: plugin.hash, trustedAt: (/* @__PURE__ */ new Date()).toISOString() };
+  const next = { ...current, trusted: true, contentHash: plugin.hash, trustedAt: (/* @__PURE__ */ new Date()).toISOString() };
   state2.plugins = [...state2.plugins.filter((p) => p.name !== plugin.name), next];
   saveState(configDir, state2);
   return next;
@@ -295,15 +392,15 @@ function listInstalledPlugins(configDir) {
     if (!existsSync2(manifestPath)) continue;
     try {
       const manifest = readPluginManifest(manifestPath);
-      const hash = hashPluginManifest(manifestPath);
+      const contentHash = hashPluginContent(dir, manifest);
       const st = state2.plugins.find((p) => p.name === manifest.name);
-      const trusted = st?.trusted === true && st.hash === hash;
+      const trusted = st?.trusted === true && effectiveHash(st) === contentHash;
       out.push({
         name: manifest.name,
         dir,
         manifestPath,
         manifest,
-        hash,
+        hash: contentHash,
         enabled: st?.enabled === true,
         trusted,
         valid: true

package/dist/{chunk-DHNYGJYB.js → chunk-TT7YURG3.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   truncateForPersist
-} from "./chunk-FYJGVFXL.js";
+} from "./chunk-SBSWH2EG.js";
 import {
   APP_NAME,
   CONFIG_DIR_NAME,
@@ -11,7 +11,7 @@ import {
   MCP_PROTOCOL_VERSION,
   MCP_TOOL_PREFIX,
   VERSION
-} from "./chunk-GDXKFWFL.js";
+} from "./chunk-CGQARJMP.js";
 import {
   atomicWriteFileSync
 } from "./chunk-IW3Q7AE5.js";
@@ -1078,10 +1078,10 @@ function readGitDiff(options = {}) {
 }
 
 export {
+  readGitDiff,
   scanDirTree,
   scanProject,
   buildInitPrompt,
-  readGitDiff,
   parseSimpleYaml,
   persistToolRound,
   autoTrimSessionIfNeeded,

package/dist/{chunk-BFTTW5LS.js → chunk-VBAW4ZPY.js}

@@ -8,7 +8,7 @@ import {
   CONFIG_FILE_NAME,
   HISTORY_DIR_NAME,
   PLUGINS_DIR_NAME
-} from "./chunk-GDXKFWFL.js";
+} from "./chunk-CGQARJMP.js";
 import {
   atomicWriteFileSync
 } from "./chunk-IW3Q7AE5.js";

package/dist/{ci-OAFNH3MA.js → ci-FYLCHRN3.js}

@@ -3,14 +3,14 @@ import {
   CI_COMMENT_MARKER,
   countSeverity,
   runCi
-} from "./chunk-CDOQNIVV.js";
-import "./chunk-WXFQ6LYN.js";
+} from "./chunk-O4QYY6SF.js";
+import "./chunk-SCFGLRB3.js";
 import "./chunk-HLWUDRBO.js";
 import "./chunk-QYQI7ZWK.js";
 import "./chunk-O3XSFPYH.js";
-import "./chunk-BFTTW5LS.js";
+import "./chunk-VBAW4ZPY.js";
 import "./chunk-5ULLIOVC.js";
-import "./chunk-GDXKFWFL.js";
+import "./chunk-CGQARJMP.js";
 import "./chunk-IW3Q7AE5.js";
 export {
   CI_COMMENT_MARKER,

package/dist/{ci-format-4LSXJNND.js → ci-format-TH2ZTFKU.js}

@@ -6,8 +6,8 @@ import {
   formatCiResult,
   formatCiSarif,
   normalizeCiThresholds
-} from "./chunk-WXFQ6LYN.js";
-import "./chunk-GDXKFWFL.js";
+} from "./chunk-SCFGLRB3.js";
+import "./chunk-CGQARJMP.js";
 export {
   DEFAULT_CI_THRESHOLDS,
   detectCiGateSignals,

package/dist/{constants-ERIAS7GV.js → constants-BF6YNKRW.js}

@@ -38,7 +38,7 @@ import {
   TEST_TIMEOUT,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-GDXKFWFL.js";
+} from "./chunk-CGQARJMP.js";
 export {
   AGENTIC_BEHAVIOR_GUIDELINE,
   APP_NAME,

package/dist/{doctor-cli-VFSVWZU6.js → doctor-cli-B6GE4BYJ.js}

@@ -2,14 +2,14 @@
 import {
   formatDoctorReport,
   runDoctorCli
-} from "./chunk-7D5EJBHO.js";
+} from "./chunk-QDP3NUPX.js";
 import "./chunk-QYQI7ZWK.js";
-import "./chunk-GFDRC2JZ.js";
+import "./chunk-T6EIBUKW.js";
 import "./chunk-O3XSFPYH.js";
-import "./chunk-BFTTW5LS.js";
+import "./chunk-VBAW4ZPY.js";
 import "./chunk-5ULLIOVC.js";
 import "./chunk-HOSJZMQS.js";
-import "./chunk-GDXKFWFL.js";
+import "./chunk-CGQARJMP.js";
 import "./chunk-IW3Q7AE5.js";
 export {
   formatDoctorReport,