jinzd-ai-cli 0.4.235 → 0.4.236

package/dist/electron-server.js

@@ -38,7 +38,7 @@ import {
   VERSION,
   buildUserIdentityPrompt,
   runTestsTool
-} from "./chunk-HHYMSEWS.js";
+} from "./chunk-MFWAL5S2.js";
 import {
   hasSemanticIndex,
   semanticSearch
@@ -70,8 +70,8 @@ import {
 import express from "express";
 import { createServer } from "http";
 import { WebSocketServer } from "ws";
-import { join as join28, dirname as dirname12, resolve as resolve13, relative as relative5, sep as sep3 } from "path";
-import { existsSync as existsSync34, readFileSync as readFileSync26, readdirSync as readdirSync17, statSync as statSync15, realpathSync as realpathSync2 } from "fs";
+import { join as join28, dirname as dirname11, resolve as resolve13, relative as relative6, sep as sep4 } from "path";
+import { existsSync as existsSync33, readFileSync as readFileSync25, readdirSync as readdirSync16, statSync as statSync14, realpathSync as realpathSync3 } from "fs";
 import { networkInterfaces } from "os";
 
 // src/config/config-manager.ts
@@ -10146,8 +10146,8 @@ import { join as join14 } from "path";
 import { homedir as homedir6 } from "os";
 
 // src/plugins/plugin-manager.ts
-import { existsSync as existsSync18, mkdirSync as mkdirSync9, readdirSync as readdirSync7, readFileSync as readFileSync13, cpSync, rmSync, statSync as statSync7 } from "fs";
-import { basename as basename6, dirname as dirname8, join as join13, resolve as resolve7 } from "path";
+import { existsSync as existsSync18, mkdirSync as mkdirSync9, readdirSync as readdirSync7, readFileSync as readFileSync13, realpathSync as realpathSync2, cpSync, rmSync, statSync as statSync7 } from "fs";
+import { basename as basename6, dirname as dirname8, join as join13, relative as relative3, resolve as resolve7, sep as sep3 } from "path";
 import { createHash as createHash3 } from "crypto";
 import { z as z2 } from "zod";
 var MANIFEST_RELATIVE = ".aicli-plugin/plugin.json";
@@ -10217,20 +10217,117 @@ function statePath(configDir) {
 }
 function loadState(configDir) {
   const file = statePath(configDir);
-  if (!existsSync18(file)) return { version: 1, plugins: [] };
+  if (!existsSync18(file)) return { version: 2, plugins: [] };
   try {
     const parsed = JSON.parse(readFileSync13(file, "utf-8"));
-    return { version: 1, plugins: Array.isArray(parsed.plugins) ? parsed.plugins : [] };
+    const rawPlugins = Array.isArray(parsed.plugins) ? parsed.plugins : [];
+    return { version: 2, plugins: rawPlugins.map((p) => migrateEntry(p)) };
   } catch {
-    return { version: 1, plugins: [] };
+    return { version: 2, plugins: [] };
   }
 }
+function migrateEntry(entry) {
+  const name = String(entry.name ?? "");
+  const contentHash = typeof entry.contentHash === "string" ? entry.contentHash : void 0;
+  const legacyHash = typeof entry.hash === "string" ? entry.hash : void 0;
+  const trusted = contentHash ? entry.trusted === true : false;
+  return {
+    name,
+    enabled: entry.enabled === true,
+    trusted,
+    contentHash: contentHash ?? legacyHash,
+    installedAt: String(entry.installedAt ?? (/* @__PURE__ */ new Date(0)).toISOString()),
+    trustedAt: trusted && entry.trustedAt ? String(entry.trustedAt) : void 0,
+    enabledAt: entry.enabledAt ? String(entry.enabledAt) : void 0
+  };
+}
 function saveState(configDir, state2) {
   mkdirSync9(pluginRoot(configDir), { recursive: true });
   atomicWriteFileSync(statePath(configDir), JSON.stringify(state2, null, 2));
 }
-function hashPluginManifest(manifestPath) {
-  return createHash3("sha256").update(readFileSync13(manifestPath)).digest("hex");
+function normalizeForHash(buf) {
+  const str = buf.toString("utf-8").replaceAll("\r\n", "\n");
+  return Buffer.from(str, "utf-8");
+}
+function extractCommandPaths(command, pluginDir) {
+  const resolvedDir = resolve7(pluginDir);
+  const refs = [];
+  for (const m of command.matchAll(/\$PLUGIN_DIR[\\/]([^"'\s]+)/g)) {
+    refs.push(m[1]);
+  }
+  for (const m of command.matchAll(/\$\{pluginDir\}[\\/]([^"'\s}]+)/g)) {
+    refs.push(m[1]);
+  }
+  for (const m of command.matchAll(/(?<=["'\s])(\.?[.\\/][^"'\s]+)/g)) {
+    refs.push(m[0]);
+  }
+  const seen = /* @__PURE__ */ new Set();
+  const valid = [];
+  for (const ref of refs) {
+    if (seen.has(ref)) continue;
+    seen.add(ref);
+    try {
+      const abs = resolve7(resolvedDir, ref);
+      if (!abs.startsWith(resolvedDir + sep3)) continue;
+      if (existsSync18(abs)) {
+        const real = realpathSync2(abs);
+        if (!real.startsWith(resolvedDir + sep3)) continue;
+        valid.push(relative3(resolvedDir, real));
+      }
+    } catch {
+    }
+  }
+  return valid;
+}
+function hashPluginContent(pluginDir, manifest) {
+  const resolvedDir = resolve7(pluginDir);
+  const assetRels = /* @__PURE__ */ new Set(
+    [...manifest.skills, ...manifest.commands, ...manifest.agents]
+  );
+  for (const raw of Object.values(manifest.hooks?.events ?? {})) {
+    const items = Array.isArray(raw) ? raw : [raw];
+    for (const item of items) {
+      const cmd = typeof item === "string" ? item : item.command;
+      if (cmd) {
+        for (const p of extractCommandPaths(cmd, pluginDir)) assetRels.add(p);
+      }
+    }
+  }
+  for (const server of Object.values(manifest.mcpServers ?? {})) {
+    for (const p of extractCommandPaths(server.command, pluginDir)) assetRels.add(p);
+    for (const arg of server.args ?? []) {
+      for (const p of extractCommandPaths(arg, pluginDir)) assetRels.add(p);
+    }
+  }
+  const sorted = [...assetRels].sort();
+  const hasher = createHash3("sha256");
+  const manifestPath = join13(resolvedDir, MANIFEST_RELATIVE);
+  hasher.update(normalizeForHash(readFileSync13(manifestPath)));
+  for (const rel of sorted) {
+    const abs = resolve7(resolvedDir, rel);
+    if (!abs.startsWith(resolvedDir + sep3)) {
+      throw new Error(`plugin asset escapes plugin dir: ${rel}`);
+    }
+    let realPath;
+    try {
+      realPath = realpathSync2(abs);
+    } catch {
+      continue;
+    }
+    try {
+      if (statSync7(realPath).isDirectory()) continue;
+    } catch {
+      continue;
+    }
+    if (!realPath.startsWith(resolvedDir + sep3)) {
+      throw new Error(`plugin asset symlink escapes plugin dir: ${rel} \u2192 ${realPath}`);
+    }
+    hasher.update(normalizeForHash(readFileSync13(abs)));
+  }
+  return hasher.digest("hex");
+}
+function effectiveHash(entry) {
+  return entry.contentHash ?? entry.hash ?? "";
 }
 function readPluginManifest(manifestPath) {
   return PluginManifestSchema.parse(JSON.parse(readFileSync13(manifestPath, "utf-8")));
@@ -10251,19 +10348,19 @@ function installPlugin(configDir, inputPath) {
   if (existsSync18(targetDir)) rmSync(targetDir, { recursive: true, force: true });
   cpSync(sourceDir, targetDir, { recursive: true });
   const manifestPath = pluginManifestPath(targetDir);
-  const hash = hashPluginManifest(manifestPath);
+  const contentHash = hashPluginContent(targetDir, manifest);
   const state2 = loadState(configDir);
   const previous = state2.plugins.find((p) => p.name === manifest.name);
   const next = {
     name: manifest.name,
     enabled: previous?.enabled ?? false,
     trusted: false,
-    hash,
+    contentHash,
     installedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
   state2.plugins = [...state2.plugins.filter((p) => p.name !== manifest.name), next];
   saveState(configDir, state2);
-  return { name: manifest.name, dir: targetDir, manifestPath, manifest, hash, enabled: next.enabled, trusted: false, valid: true };
+  return { name: manifest.name, dir: targetDir, manifestPath, manifest, hash: contentHash, enabled: next.enabled, trusted: false, valid: true };
 }
 function setPluginEnabled(configDir, name, enabled) {
   const plugin = getInstalledPlugin(configDir, name);
@@ -10273,10 +10370,10 @@ function setPluginEnabled(configDir, name, enabled) {
     name: plugin.name,
     enabled: false,
     trusted: false,
-    hash: plugin.hash,
+    contentHash: plugin.hash,
     installedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
-  const next = { ...current, enabled, hash: plugin.hash, enabledAt: enabled ? (/* @__PURE__ */ new Date()).toISOString() : current.enabledAt };
+  const next = { ...current, enabled, contentHash: plugin.hash, enabledAt: enabled ? (/* @__PURE__ */ new Date()).toISOString() : current.enabledAt };
   state2.plugins = [...state2.plugins.filter((p) => p.name !== plugin.name), next];
   saveState(configDir, state2);
   return next;
@@ -10289,10 +10386,10 @@ function trustPlugin(configDir, name) {
     name: plugin.name,
     enabled: false,
     trusted: false,
-    hash: plugin.hash,
+    contentHash: plugin.hash,
     installedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
-  const next = { ...current, trusted: true, hash: plugin.hash, trustedAt: (/* @__PURE__ */ new Date()).toISOString() };
+  const next = { ...current, trusted: true, contentHash: plugin.hash, trustedAt: (/* @__PURE__ */ new Date()).toISOString() };
   state2.plugins = [...state2.plugins.filter((p) => p.name !== plugin.name), next];
   saveState(configDir, state2);
   return next;
@@ -10320,15 +10417,15 @@ function listInstalledPlugins(configDir) {
     if (!existsSync18(manifestPath)) continue;
     try {
       const manifest = readPluginManifest(manifestPath);
-      const hash = hashPluginManifest(manifestPath);
+      const contentHash = hashPluginContent(dir, manifest);
       const st = state2.plugins.find((p) => p.name === manifest.name);
-      const trusted = st?.trusted === true && st.hash === hash;
+      const trusted = st?.trusted === true && effectiveHash(st) === contentHash;
       out.push({
         name: manifest.name,
         dir,
         manifestPath,
         manifest,
-        hash,
+        hash: contentHash,
         enabled: st?.enabled === true,
         trusted,
         valid: true
@@ -13607,7 +13704,7 @@ function autoTrimSessionIfNeeded(session, sizeLimit = SESSION_SIZE_LIMIT) {
 
 // src/core/context-files.ts
 import { existsSync as existsSync26, readFileSync as readFileSync19 } from "fs";
-import { join as join19, relative as relative3, resolve as resolve9 } from "path";
+import { join as join19, relative as relative4, resolve as resolve9 } from "path";
 function uniqueNonEmpty(values) {
   const seen = /* @__PURE__ */ new Set();
   const out = [];
@@ -13623,14 +13720,14 @@ function buildContextFileCandidates(fallbackFilenames = []) {
   return uniqueNonEmpty([...CONTEXT_FILE_CANDIDATES, ...fallbackFilenames]);
 }
 function displayPath(filePath, cwd) {
-  const rel = relative3(cwd, filePath);
+  const rel = relative4(cwd, filePath);
   if (rel && !rel.startsWith("..") && !rel.startsWith("/") && !rel.startsWith("\\")) {
     return rel;
   }
   return filePath;
 }
 function isInsideOrEqual(parent, child) {
-  const rel = relative3(resolve9(parent), resolve9(child));
+  const rel = relative4(resolve9(parent), resolve9(child));
   return rel === "" || !!rel && !rel.startsWith("..") && !rel.startsWith("/") && !rel.startsWith("\\");
 }
 function readContextFile(level, filePath, cwd, maxBytes) {
@@ -13763,8 +13860,8 @@ function loadContextFiles(options) {
 }
 
 // src/web/session-handler.ts
-import { mkdirSync as mkdirSync16, createWriteStream as createWriteStream3 } from "fs";
-import { join as join26, dirname as dirname11 } from "path";
+import { mkdirSync as mkdirSync15, createWriteStream as createWriteStream2 } from "fs";
+import { join as join26, dirname as dirname10 } from "path";
 
 // src/repl/commands/project-init.ts
 import { existsSync as existsSync27, readFileSync as readFileSync20, readdirSync as readdirSync11, statSync as statSync9 } from "fs";
@@ -15889,7 +15986,7 @@ async function handleSecurityReview(args, ctx) {
 async function handleTest(args, ctx) {
   ctx.send({ type: "info", message: "\u{1F9EA} Running tests..." });
   try {
-    const { executeTests } = await import("./run-tests-YSRET52H.js");
+    const { executeTests } = await import("./run-tests-DI6WEYHX.js");
     const argStr = args.join(" ").trim();
     let testArgs = {};
     if (argStr) {
@@ -17217,7 +17314,7 @@ Try: /compact to reduce context, /clear to reset, or switch to a larger-context
           this.send({ type: "response_done", content, usage });
           if (pendingTeeSave && isCleanDocumentBody(content)) {
             try {
-              mkdirSync16(dirname11(pendingTeeSave), { recursive: true });
+              mkdirSync15(dirname10(pendingTeeSave), { recursive: true });
               const bodyToSave = stripOuterCodeFence(content);
               atomicWriteFileSync(pendingTeeSave, bodyToSave);
               undoStack.push(pendingTeeSave, `save_last_response (deferred): ${pendingTeeSave}`);
@@ -17393,8 +17490,8 @@ ${summaryContent}`,
     let isError = false;
     let summary;
     try {
-      mkdirSync16(dirname11(saveToFile), { recursive: true });
-      fileStream = createWriteStream3(saveToFile);
+      mkdirSync15(dirname10(saveToFile), { recursive: true });
+      fileStream = createWriteStream2(saveToFile);
       const teeSystemPrompt = stripToolCallReminder(systemPrompt ?? "") + CONTENT_ONLY_STREAM_REMINDER;
       const teeExtraMessages = extraMessages.length > 0 ? [...extraMessages, { role: "user", content: TEE_FINAL_USER_NUDGE }] : [{ role: "user", content: TEE_FINAL_USER_NUDGE }];
       const chatRequest = {
@@ -17968,8 +18065,8 @@ async function setupProxy(configProxy) {
 }
 
 // src/web/auth.ts
-import { existsSync as existsSync33, readFileSync as readFileSync25, writeFileSync as writeFileSync6, mkdirSync as mkdirSync17, readdirSync as readdirSync16, copyFileSync } from "fs";
-import { isAbsolute as isAbsolute3, join as join27, relative as relative4 } from "path";
+import { existsSync as existsSync32, readFileSync as readFileSync24, writeFileSync as writeFileSync5, mkdirSync as mkdirSync16, readdirSync as readdirSync15, copyFileSync } from "fs";
+import { isAbsolute as isAbsolute3, join as join27, relative as relative5 } from "path";
 import { createHmac, randomBytes, timingSafeEqual, pbkdf2Sync } from "crypto";
 var USERS_FILE = "users.json";
 var TOKEN_EXPIRY_HOURS = 24;
@@ -18015,7 +18112,7 @@ var AuthManager = class {
     const passwordHash = this.hashPassword(password, salt);
     const dataDir = join27(USERS_DIR, username);
     const fullDataDir = join27(this.baseDir, dataDir);
-    mkdirSync17(join27(fullDataDir, "history"), { recursive: true });
+    mkdirSync16(join27(fullDataDir, "history"), { recursive: true });
     const user = {
       username,
       passwordHash,
@@ -18167,25 +18264,25 @@ var AuthManager = class {
     if (err) return err;
     const userDir = this.getUserDataDir(username);
     const globalConfig = join27(this.baseDir, "config.json");
-    if (existsSync33(globalConfig)) {
+    if (existsSync32(globalConfig)) {
       try {
-        const content = readFileSync25(globalConfig, "utf-8");
-        writeFileSync6(join27(userDir, "config.json"), content, "utf-8");
+        const content = readFileSync24(globalConfig, "utf-8");
+        writeFileSync5(join27(userDir, "config.json"), content, "utf-8");
       } catch {
       }
     }
     const globalMemory = join27(this.baseDir, "memory.md");
-    if (existsSync33(globalMemory)) {
+    if (existsSync32(globalMemory)) {
       try {
-        const content = readFileSync25(globalMemory, "utf-8");
-        writeFileSync6(join27(userDir, "memory.md"), content, "utf-8");
+        const content = readFileSync24(globalMemory, "utf-8");
+        writeFileSync5(join27(userDir, "memory.md"), content, "utf-8");
       } catch {
       }
     }
     const globalHistory = join27(this.baseDir, "history");
-    if (existsSync33(globalHistory)) {
+    if (existsSync32(globalHistory)) {
       try {
-        const files = readdirSync16(globalHistory).filter((f) => f.endsWith(".json"));
+        const files = readdirSync15(globalHistory).filter((f) => f.endsWith(".json"));
         const userHistory = join27(userDir, "history");
         for (const f of files) {
           try {
@@ -18200,9 +18297,9 @@ var AuthManager = class {
   }
   // ── Private methods ────────────────────────────────────────────
   loadOrCreate() {
-    if (existsSync33(this.usersFile)) {
+    if (existsSync32(this.usersFile)) {
       try {
-        const parsed = JSON.parse(readFileSync25(this.usersFile, "utf-8"));
+        const parsed = JSON.parse(readFileSync24(this.usersFile, "utf-8"));
         if (!this.isValidUsersDB(parsed)) {
           throw new Error("database structure is invalid");
         }
@@ -18236,7 +18333,7 @@ var AuthManager = class {
       if (typeof record.username !== "string" || !/^[a-z0-9_-]{2,32}$/.test(record.username) || usernames.has(record.username) || typeof record.passwordHash !== "string" || record.passwordHash.length === 0 || typeof record.salt !== "string" || record.salt.length === 0 || typeof record.createdAt !== "string" || typeof record.dataDir !== "string" || record.dataDir.length === 0 || isAbsolute3(record.dataDir)) {
         return false;
       }
-      const dataDirFromBase = relative4(this.baseDir, join27(this.baseDir, record.dataDir));
+      const dataDirFromBase = relative5(this.baseDir, join27(this.baseDir, record.dataDir));
       if (dataDirFromBase.startsWith("..") || isAbsolute3(dataDirFromBase)) return false;
       if (record.hashVersion !== void 0 && record.hashVersion !== 1 && record.hashVersion !== 2) return false;
       if (record.tokensRevokedBefore !== void 0 && !Number.isFinite(record.tokensRevokedBefore)) return false;
@@ -18248,7 +18345,7 @@ var AuthManager = class {
     this.saveDB(this.db);
   }
   saveDB(db) {
-    mkdirSync17(this.baseDir, { recursive: true });
+    mkdirSync16(this.baseDir, { recursive: true });
     atomicWriteFileSync(this.usersFile, JSON.stringify(db, null, 2));
   }
   /** Legacy hash — kept only for migrating old users (v0.2.x) */
@@ -18280,7 +18377,7 @@ function getModuleDir() {
     if (typeof import.meta?.url === "string") {
       const url = new URL(import.meta.url);
       const filePath = url.pathname.replace(/^\/([A-Z]:)/i, "$1");
-      return dirname12(filePath);
+      return dirname11(filePath);
     }
   } catch {
   }
@@ -18353,7 +18450,7 @@ async function startWebServer(options = {}) {
   }
   let skillManager = null;
   const skillsDir = join28(config.getConfigDir(), SKILLS_DIR_NAME);
-  if (existsSync34(skillsDir)) {
+  if (existsSync33(skillsDir)) {
     skillManager = new SkillManager(skillsDir, config.get("ui").skillSizeWarn);
     skillManager.loadSkills(pluginAssets.skillDirs);
     const count = skillManager.listSkills().length;
@@ -18425,13 +18522,13 @@ async function startWebServer(options = {}) {
   };
   const moduleDir = getModuleDir();
   let clientDir = join28(moduleDir, "web", "client");
-  if (!existsSync34(clientDir)) {
+  if (!existsSync33(clientDir)) {
     clientDir = join28(moduleDir, "client");
   }
-  if (!existsSync34(clientDir)) {
+  if (!existsSync33(clientDir)) {
     clientDir = join28(moduleDir, "..", "..", "src", "web", "client");
   }
-  if (!existsSync34(clientDir)) {
+  if (!existsSync33(clientDir)) {
     clientDir = join28(process.cwd(), "src", "web", "client");
   }
   console.log(`   Static files: ${clientDir}`);
@@ -18504,9 +18601,9 @@ async function startWebServer(options = {}) {
     const prefix = req.query.prefix || "";
     const targetDir = join28(cwd, prefix);
     try {
-      const canonicalTarget = realpathSync2(resolve13(targetDir));
-      const canonicalCwd = realpathSync2(resolve13(cwd));
-      if (!canonicalTarget.startsWith(canonicalCwd + sep3) && canonicalTarget !== canonicalCwd) {
+      const canonicalTarget = realpathSync3(resolve13(targetDir));
+      const canonicalCwd = realpathSync3(resolve13(cwd));
+      if (!canonicalTarget.startsWith(canonicalCwd + sep4) && canonicalTarget !== canonicalCwd) {
         res.json({ files: [] });
         return;
       }
@@ -18516,10 +18613,10 @@ async function startWebServer(options = {}) {
     }
     try {
       const SKIP = /* @__PURE__ */ new Set(["node_modules", ".git", "dist", "dist-cjs", "release", "__pycache__", ".next", ".nuxt", "coverage", ".cache"]);
-      const entries = readdirSync17(targetDir, { withFileTypes: true });
+      const entries = readdirSync16(targetDir, { withFileTypes: true });
       const files = entries.filter((e) => !SKIP.has(e.name) && !e.name.startsWith(".")).slice(0, 50).map((e) => ({
         name: e.name,
-        path: relative5(cwd, join28(targetDir, e.name)).replace(/\\/g, "/"),
+        path: relative6(cwd, join28(targetDir, e.name)).replace(/\\/g, "/"),
         isDir: e.isDirectory()
       }));
       res.json({ files });
@@ -18560,14 +18657,14 @@ async function startWebServer(options = {}) {
       const authUser = req._authUser;
       const histDir = authUser ? getUserShared(authUser).config.getHistoryDir() : config.getHistoryDir();
       const filePath = join28(histDir, `${id}.json`);
-      if (!existsSync34(filePath)) {
+      if (!existsSync33(filePath)) {
         res.status(404).json({ error: "Session not found" });
         return;
       }
       try {
-        const canonicalFile = realpathSync2(filePath);
-        const canonicalDir = realpathSync2(histDir);
-        if (!canonicalFile.startsWith(canonicalDir + sep3)) {
+        const canonicalFile = realpathSync3(filePath);
+        const canonicalDir = realpathSync3(histDir);
+        if (!canonicalFile.startsWith(canonicalDir + sep4)) {
           res.status(404).json({ error: "Session not found" });
           return;
         }
@@ -18575,7 +18672,7 @@ async function startWebServer(options = {}) {
         res.status(404).json({ error: "Session not found" });
         return;
       }
-      const data = JSON.parse(readFileSync26(filePath, "utf-8"));
+      const data = JSON.parse(readFileSync25(filePath, "utf-8"));
       res.json({ session: data });
     } catch (err) {
       res.status(500).json({ error: err instanceof Error ? err.message : String(err) });
@@ -18590,9 +18687,9 @@ async function startWebServer(options = {}) {
     const cwd = process.cwd();
     const fullPath = resolve13(join28(cwd, filePath));
     try {
-      const canonicalFull = realpathSync2(fullPath);
-      const canonicalCwd = realpathSync2(resolve13(cwd));
-      if (!canonicalFull.startsWith(canonicalCwd + sep3) && canonicalFull !== canonicalCwd) {
+      const canonicalFull = realpathSync3(fullPath);
+      const canonicalCwd = realpathSync3(resolve13(cwd));
+      if (!canonicalFull.startsWith(canonicalCwd + sep4) && canonicalFull !== canonicalCwd) {
         res.json({ error: "Access denied" });
         return;
       }
@@ -18601,12 +18698,12 @@ async function startWebServer(options = {}) {
       return;
     }
     try {
-      const stat = statSync15(fullPath);
+      const stat = statSync14(fullPath);
       if (stat.size > 512 * 1024) {
         res.json({ error: `File too large (${(stat.size / 1024).toFixed(0)} KB, max 512 KB)` });
         return;
       }
-      const content = readFileSync26(fullPath, "utf-8");
+      const content = readFileSync25(fullPath, "utf-8");
       res.json({ content, size: stat.size });
     } catch {
       res.json({ error: "Cannot read file" });
@@ -18862,16 +18959,16 @@ function resolveProjectMcpPath() {
   const gitRoot = getGitRoot(cwd);
   const projectRoot = gitRoot ?? cwd;
   const configPath = join28(projectRoot, MCP_PROJECT_CONFIG_NAME);
-  return existsSync34(configPath) ? configPath : null;
+  return existsSync33(configPath) ? configPath : null;
 }
 function loadProjectMcpConfig() {
   const cwd = process.cwd();
   const gitRoot = getGitRoot(cwd);
   const projectRoot = gitRoot ?? cwd;
   const configPath = join28(projectRoot, MCP_PROJECT_CONFIG_NAME);
-  if (!existsSync34(configPath)) return null;
+  if (!existsSync33(configPath)) return null;
   try {
-    const raw = JSON.parse(readFileSync26(configPath, "utf-8"));
+    const raw = JSON.parse(readFileSync25(configPath, "utf-8"));
     return raw.mcpServers ?? raw;
   } catch {
     return null;

package/dist/{hub-X4EUYRIN.js → hub-QBQCKEPE.js}

@@ -154,7 +154,7 @@ ${content}`);
   }
 }
 async function runTaskMode(config, providers, configManager, topic) {
-  const { TaskOrchestrator } = await import("./task-orchestrator-QMERCD77.js");
+  const { TaskOrchestrator } = await import("./task-orchestrator-WS724BUX.js");
   const orchestrator = new TaskOrchestrator(config, providers, configManager);
   let interrupted = false;
   const onSigint = () => {