jinzd-ai-cli 0.4.276 → 0.4.277

package/dist/electron-server.js

@@ -13,7 +13,7 @@ import {
 } from "./chunk-SKET65WZ.js";
 import {
   indexProject
-} from "./chunk-QCG6UU2S.js";
+} from "./chunk-PPIISCFN.js";
 import {
   addMemoryEntry,
   backupMemoryStore,
@@ -40,14 +40,14 @@ import {
   touchMemoryReferences,
   updateMemoryApproval,
   updateMemoryEntry
-} from "./chunk-4NH4Q7QK.js";
+} from "./chunk-7YYUITED.js";
 import {
   redactJson,
   scanString
 } from "./chunk-FSC6KEWU.js";
 import {
   runTestsTool
-} from "./chunk-ATD2Y3PB.js";
+} from "./chunk-BYNNKJUC.js";
 import {
   AGENTIC_BEHAVIOR_GUIDELINE,
   APP_NAME,
@@ -80,7 +80,7 @@ import {
   SUBAGENT_MAX_ROUNDS_LIMIT,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-UNL7NR55.js";
+} from "./chunk-Z752LDYF.js";
 import {
   hasSemanticIndex,
   semanticSearch
@@ -1155,7 +1155,8 @@ var BaseProvider = class {
     return this.reliableContentOnlyTee;
   }
   /**
-   * 该 provider 是否支持 `reasoning_effort` 档位（low/high/max）。目前只有 DeepSeek V4。
+   * 该 provider 是否支持 `reasoning_effort` 档位（low/high/max）。目前是 DeepSeek V4
+   * 与智谱 GLM-5 系列（v0.4.276 接入 GLM-5.3 时补上——它关不掉思考，档位是唯一的成本闸门）。
    *
    * 2026-08-14 审计 P2-03：提示符标签此前无条件渲染成 `[THINK:high]`，于是 Claude
    * （用 thinkingBudget 计 token 预算）和 GLM（根本没有 effort 概念）也显示一个
@@ -2136,6 +2137,16 @@ Node.js does not automatically use system proxies. Try one of the following:
 // src/providers/openai-compatible.ts
 import OpenAI from "openai";
 
+// src/providers/openai-extensions.ts
+function toSdkParams(params) {
+  return params;
+}
+function readReasoningContent(message) {
+  if (!message || typeof message !== "object") return void 0;
+  const value = message.reasoning_content;
+  return typeof value === "string" ? value : void 0;
+}
+
 // src/tools/hallucination.ts
 var HALLUCINATION_PATTERNS = [
   /文件路径[：:]\s*`?[^\s`]+\.\w{1,5}/,
@@ -3377,7 +3388,7 @@ var OpenAICompatibleProvider = class extends BaseProvider {
         continue;
       }
       if (m.role === "assistant" && m.toolCalls && m.toolCalls.length > 0) {
-        const assistantMsg = {
+        msgs.push({
           role: "assistant",
           content: typeof m.content === "string" && m.content ? m.content : null,
           tool_calls: m.toolCalls.map((tc) => ({
@@ -3386,15 +3397,22 @@ var OpenAICompatibleProvider = class extends BaseProvider {
             function: { name: tc.name, arguments: JSON.stringify(tc.arguments) }
           })),
           reasoning_content: m.reasoningContent ?? ""
-        };
-        msgs.push(assistantMsg);
+        });
         continue;
       }
-      const base = { role: m.role, content: m.content };
       if (m.role === "assistant") {
-        base.reasoning_content = m.reasoningContent ?? "";
+        msgs.push({
+          role: "assistant",
+          content: typeof m.content === "string" ? m.content : "",
+          reasoning_content: m.reasoningContent ?? ""
+        });
+        continue;
       }
-      msgs.push(base);
+      if (m.role === "system") {
+        msgs.push({ role: "system", content: typeof m.content === "string" ? m.content : "" });
+        continue;
+      }
+      msgs.push({ role: "user", content: m.content });
     }
     const systemContent = [request.systemPrompt, request.systemPromptVolatile].filter(Boolean).join("\n\n---\n\n");
     if (systemContent) {
@@ -3423,12 +3441,13 @@ var OpenAICompatibleProvider = class extends BaseProvider {
    */
   async chat(request) {
     try {
-      const response = await this.client.chat.completions.create({
+      const params = {
         model: request.model,
         messages: this.buildMessages(request),
         ...this.buildChatRequestParams(request),
         stream: false
-      }, {
+      };
+      const response = await this.client.chat.completions.create(toSdkParams(params), {
         timeout: request.timeout ?? this.defaultTimeout,
         signal: request.signal
       });
@@ -3436,7 +3455,7 @@ var OpenAICompatibleProvider = class extends BaseProvider {
       if (!firstChoice) {
         return { content: "", model: response.model, usage: void 0 };
       }
-      const reasoningContent = firstChoice.message.reasoning_content;
+      const reasoningContent = readReasoningContent(firstChoice.message);
       return {
         content: firstChoice.message.content ?? "",
         model: response.model,
@@ -3449,14 +3468,15 @@ var OpenAICompatibleProvider = class extends BaseProvider {
   }
   async *chatStream(request) {
     try {
-      const stream = await this.client.chat.completions.create({
+      const params = {
         model: request.model,
         messages: this.buildMessages(request),
         ...this.buildChatRequestParams(request),
         stream: true,
         // 请求末尾 usage chunk，供 token 统计使用
         stream_options: { include_usage: true }
-      }, {
+      };
+      const stream = await this.client.chat.completions.create(toSdkParams(params), {
         timeout: request.timeout ?? this.defaultTimeout,
         signal: request.signal
       });
@@ -3526,14 +3546,15 @@ var OpenAICompatibleProvider = class extends BaseProvider {
       const baseMessages = this.buildMessages(request);
       const extraMessages = request._extraMessages ?? [];
       const allMessages = [...baseMessages, ...extraMessages];
-      const response = await this.client.chat.completions.create({
+      const params = {
         model: request.model,
         messages: allMessages,
         tools: openaiTools,
         tool_choice: "auto",
         ...this.buildChatRequestParams(request),
         stream: false
-      }, {
+      };
+      const response = await this.client.chat.completions.create(toSdkParams(params), {
         timeout: request.timeout ?? this.defaultTimeout,
         // 非流式路径同样必须收 signal，否则 Ctrl+C 期间整个请求不可中断（见 chat() 上方注释）
         signal: request.signal
@@ -3546,7 +3567,7 @@ var OpenAICompatibleProvider = class extends BaseProvider {
       const finishReason = firstChoice.finish_reason;
       const usage = toUsage(response.usage);
       const hasToolCalls = !!(message.tool_calls && message.tool_calls.length > 0);
-      const reasoningContent = message.reasoning_content;
+      const reasoningContent = readReasoningContent(message);
       if (message.tool_calls && message.tool_calls.length > 0) {
         const toolCalls = message.tool_calls.map((tc) => {
           const parsed = parseToolCallArguments(
@@ -3625,7 +3646,7 @@ var OpenAICompatibleProvider = class extends BaseProvider {
     const extraMessages = request._extraMessages ?? [];
     const allMessages = [...baseMessages, ...extraMessages];
     try {
-      const stream = await this.client.chat.completions.create({
+      const params = {
         model: request.model,
         messages: allMessages,
         tools: openaiTools,
@@ -3633,7 +3654,8 @@ var OpenAICompatibleProvider = class extends BaseProvider {
         ...this.buildChatRequestParams(request),
         stream: true,
         stream_options: { include_usage: true }
-      }, {
+      };
+      const stream = await this.client.chat.completions.create(toSdkParams(params), {
         timeout: request.timeout ?? this.defaultTimeout,
         signal: request.signal
       });
@@ -3751,9 +3773,11 @@ var OpenAICompatibleProvider = class extends BaseProvider {
           name: tc.name,
           arguments: JSON.stringify(tc.arguments)
         }
-      }))
+      })),
+      // DeepSeek V4 thinking 模式严格校验：assistant 消息必须包含 reasoning_content
+      // 字段（即使为空字符串也必须存在，否则 API 返回 400）
+      reasoning_content: reasoningContent ?? ""
     };
-    assistantMsg.reasoning_content = reasoningContent ?? "";
     const resultMsgs = results.map((r) => ({
       role: "tool",
       tool_call_id: r.callId,
@@ -3966,7 +3990,7 @@ var ZhipuProvider = class extends OpenAICompatibleProvider {
   buildChatRequestParams(request) {
     const params = super.buildChatRequestParams(request);
     if (request.thinkingEffort && REASONING_EFFORT_MODELS.test(request.model)) {
-      params["reasoning_effort"] = request.thinkingEffort;
+      params.reasoning_effort = request.thinkingEffort;
     }
     return params;
   }
@@ -8525,7 +8549,7 @@ Do NOT split a long document into many write_file(append=true) calls. That patte
     const mode = appendMode ? "appended" : "written";
     void (async () => {
       try {
-        const { updateFile } = await import("./indexer-M2LJGTY2.js");
+        const { updateFile } = await import("./indexer-RBEKMFT4.js");
         await updateFile(process.cwd(), filePath);
       } catch {
       }
@@ -10733,6 +10757,13 @@ function formatResults2(query, data, _requested) {
   return header + "\n" + results.join("\n\n");
 }
 
+// src/core/tool-capable-provider.ts
+function isToolCapableProvider(provider) {
+  if (!provider) return false;
+  const candidate = provider;
+  return typeof candidate.chatWithTools === "function" && typeof candidate.buildToolResultMessages === "function";
+}
+
 // src/agents/agent-config.ts
 import { existsSync as existsSync18, readdirSync as readdirSync8, readFileSync as readFileSync15 } from "fs";
 import { join as join13 } from "path";
@@ -11544,7 +11575,8 @@ async function runSubAgent(task, maxRounds, agentIndex, ctx, agent) {
   if (!ctx.provider) {
     throw new ToolError("spawn_agent", "provider not initialized (context not injected)");
   }
-  const providerFromConfig = agent.provider && ctx.providers?.has(agent.provider) ? ctx.providers.get(agent.provider) : void 0;
+  const configured = agent.provider && ctx.providers?.has(agent.provider) ? ctx.providers.get(agent.provider) : void 0;
+  const providerFromConfig = isToolCapableProvider(configured) ? configured : void 0;
   const provider = providerFromConfig ?? ctx.provider;
   const model = agent.model ?? (providerFromConfig?.info?.defaultModel ?? ctx.model);
   const run = startAgentRun({
@@ -16143,7 +16175,7 @@ Cache:  write=${cacheCreate} read=${cacheRead}` : "";
 Cost:   ${formatCost(cost)}` : "";
   let memoryLine = "";
   try {
-    const { countPendingMemories: countPendingMemories2 } = await import("./persistent-memory-CI544RLT.js");
+    const { countPendingMemories: countPendingMemories2 } = await import("./persistent-memory-ZFR5GI7D.js");
     const pending = countPendingMemories2(ctx.config.getConfigDir());
     if (pending > 0) memoryLine = `
 Memory: \u26A0 ${pending} pending approval \u2014 see the Memory panel or /memory`;
@@ -16956,7 +16988,7 @@ async function handleTest(args, ctx) {
       const isCommand = argStr.includes(" ") || /^(mvn|gradle|npm|pytest|cargo|go)\b/.test(argStr);
       testArgs = isCommand ? { command: argStr } : { filter: argStr };
     }
-    const runTests = ctx.runTests ?? (await import("./run-tests-72VNZXNT.js")).executeTests;
+    const runTests = ctx.runTests ?? (await import("./run-tests-USV7IJ7X.js")).executeTests;
     const report = await runTests(testArgs);
     ctx.send({ type: "info", message: report });
   } catch (err) {
@@ -17134,7 +17166,7 @@ async function handleIndex(args, ctx) {
   const sub = (args[0] ?? "status").toLowerCase();
   const root = process.cwd();
   const { loadIndex: loadIndex2, clearIndex } = await import("./store-VO37H6LS.js");
-  const { indexProject: indexProject2 } = await import("./indexer-M2LJGTY2.js");
+  const { indexProject: indexProject2 } = await import("./indexer-RBEKMFT4.js");
   const { loadVectorStore, clearVectorStore } = await import("./vector-store-JBAE6PS4.js");
   if (sub === "status") {
     const idx = loadIndex2(root);
@@ -17292,7 +17324,7 @@ async function handleMemory(args, ctx) {
     ctx.handleMemoryManage(sub, args[1], sub === "expire" ? args[2] : void 0);
   } else if (sub === "export") {
     if (args[1] === "md") {
-      const { exportMemoryEntries: exportMemoryEntries2 } = await import("./persistent-memory-CI544RLT.js");
+      const { exportMemoryEntries: exportMemoryEntries2 } = await import("./persistent-memory-ZFR5GI7D.js");
       ctx.send({
         type: "export_data",
         format: "md",
@@ -18052,9 +18084,19 @@ var SessionHandler = class {
     }
     runLifecycleHooks(hooks, "SessionStart", { source: "web" }, { configDir: this.config.getConfigDir() });
     this.sendStatus();
-    askUserContext.rl = null;
+    askUserContext.rl = void 0;
     askUserContext.prompting = false;
   }
+  /**
+   * P3-03：本方法与 `WebCommandContext` 列出的其余 36 个成员一并由 private 放开为
+   * public——它们本就经由 ctx 门面暴露给每一个 web 命令 handler，`private` 只是名义上的。
+   *
+   * `web-command-context.ts` 的文件注释明明白白写着「`ctx: WebCommandContext = this`
+   * 这个赋值保证 handler 只能碰到这些成员」，而 `handleCommand` 实际写的是
+   * `this as unknown as WebCommandContext`——那道保证被这一次 cast 整个绕过了，
+   * 唯一拦着真赋值的就是这些名义上的 private。去掉 cast 之后，SessionHandler 与门面
+   * 接口之间的任何漂移（少一个成员、签名改了）都会当场编译失败，而不是等到运行时。
+   */
   send(msg) {
     if (this.ws.readyState === this.ws.OPEN) {
       this.ws.send(JSON.stringify(msg));
@@ -18423,10 +18465,10 @@ var SessionHandler = class {
         this.processing = false;
         return;
       }
-      const hasToolSupport = typeof provider.chatWithTools === "function";
-      const { toolDefs, mcpBudgetNote } = hasToolSupport ? this.getFilteredToolDefs() : { toolDefs: [], mcpBudgetNote: null };
-      if (hasToolSupport && toolDefs.length > 0) {
-        await this.handleChatWithTools(provider, session.messages, toolDefs, mcpBudgetNote, routingDecision.model);
+      const toolCapable = isToolCapableProvider(provider) ? provider : null;
+      const { toolDefs, mcpBudgetNote } = toolCapable ? this.getFilteredToolDefs() : { toolDefs: [], mcpBudgetNote: null };
+      if (toolCapable && toolDefs.length > 0) {
+        await this.handleChatWithTools(toolCapable, session.messages, toolDefs, mcpBudgetNote, routingDecision.model);
       } else {
         await this.handleChatSimple(provider, session.messages, routingDecision.model);
       }

package/dist/{hub-Z73RLNJI.js → hub-NEWIFMQ3.js}

@@ -158,7 +158,7 @@ ${content}`);
   }
 }
 async function runTaskMode(config, providers, configManager, topic) {
-  const { TaskOrchestrator } = await import("./task-orchestrator-DJN36HP5.js");
+  const { TaskOrchestrator } = await import("./task-orchestrator-G2MQDNGQ.js");
   const orchestrator = new TaskOrchestrator(config, providers, configManager);
   let interrupted = false;
   const onSigint = () => {

package/dist/index.js

@@ -28,7 +28,7 @@ import {
   setupProxy,
   snapshotFile,
   stripRoutingTags
-} from "./chunk-MCKUGWOY.js";
+} from "./chunk-HJVKCOAG.js";
 import {
   CostTracker,
   computeCost,
@@ -48,6 +48,7 @@ import {
   getRecentlyDeniedAutoActions,
   googleSearchContext,
   isInterrupted,
+  isToolCapableProvider,
   lastResponseStore,
   renderDiff,
   requestInterrupt,
@@ -57,7 +58,7 @@ import {
   setMaxOutputCap,
   spawnAgentContext,
   undoStack
-} from "./chunk-NXNXWM6H.js";
+} from "./chunk-KIGKL3PZ.js";
 import {
   buildReviewPrompt,
   buildSecurityReviewPrompt
@@ -98,8 +99,8 @@ import {
   touchMemoryReferences,
   updateMemoryApproval,
   updateMemoryEntry
-} from "./chunk-KWSGSSWN.js";
-import "./chunk-GLSR2NR3.js";
+} from "./chunk-7BO5H2QI.js";
+import "./chunk-4DEMGCK4.js";
 import "./chunk-UUSRWSSX.js";
 import "./chunk-CKH4KQ4E.js";
 import "./chunk-BXP6YZ2P.js";
@@ -122,7 +123,7 @@ import {
   formatDoctorReport,
   loadContextFiles,
   writeCrashLog
-} from "./chunk-WYDP2WEQ.js";
+} from "./chunk-7IPMONKZ.js";
 import {
   describePlugin,
   getActivePluginAssets,
@@ -139,14 +140,14 @@ import {
   trustHook,
   trustPlugin,
   untrustHook
-} from "./chunk-AOISQVXS.js";
+} from "./chunk-UWQCTTP4.js";
 import {
   ProviderRegistry,
   listBuiltInProviderMetadata
-} from "./chunk-4KTK2OYU.js";
+} from "./chunk-UGY5SVNX.js";
 import {
   ConfigManager
-} from "./chunk-VF7DMSKF.js";
+} from "./chunk-OCOGYIRY.js";
 import {
   CONTENT_ONLY_STREAM_REMINDER,
   TEE_FINAL_USER_NUDGE,
@@ -184,7 +185,7 @@ import {
 import {
   fileCheckpoints
 } from "./chunk-4BKXL7SM.js";
-import "./chunk-OMBKLWLJ.js";
+import "./chunk-3VFOXEIL.js";
 import {
   AGENTIC_BEHAVIOR_GUIDELINE,
   AUTHOR,
@@ -202,7 +203,7 @@ import {
   SKILLS_DIR_NAME,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-FLDYAXJR.js";
+} from "./chunk-ZP3RCZKM.js";
 
 // src/index.ts
 import { program } from "commander";
@@ -1408,7 +1409,7 @@ No tools match "${filter}".
           const { join: join6 } = await import("path");
           const { existsSync: existsSync6 } = await import("fs");
           const { getGitRoot: getGitRoot2 } = await import("./git-context-EXOEHQSF.js");
-          const { MCP_PROJECT_CONFIG_NAME: MCP_PROJECT_CONFIG_NAME2 } = await import("./constants-WO7ERENL.js");
+          const { MCP_PROJECT_CONFIG_NAME: MCP_PROJECT_CONFIG_NAME2 } = await import("./constants-N3CHKZJY.js");
           const { approveProject, hashMcpFile } = await import("./project-trust-NKYHL3VZ.js");
           const cwd = process.cwd();
           const projectRoot = getGitRoot2(cwd) ?? cwd;
@@ -2328,7 +2329,7 @@ function createReviewCommands() {
       usage: "/test [command|filter]",
       async execute(args, ctx) {
         try {
-          const { executeTests } = await import("./run-tests-JJ3KOY5E.js");
+          const { executeTests } = await import("./run-tests-76M6AC3G.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {
@@ -2590,7 +2591,7 @@ function createMemoryCommands() {
         const sub = (args[0] ?? "status").toLowerCase();
         const root = process.cwd();
         const { loadIndex, clearIndex } = await import("./store-MWNHVGJT.js");
-        const { indexProject } = await import("./indexer-VZETNE4H.js");
+        const { indexProject } = await import("./indexer-TNDWGFRI.js");
         const { loadVectorStore, clearVectorStore } = await import("./vector-store-BBDXB5IQ.js");
         if (sub === "status") {
           const idx = loadIndex(root);
@@ -4765,7 +4766,7 @@ function removePreviousGrapheme(line, cursor) {
   };
 }
 function installUnicodeBackspaceRepair(input, rl, shouldHandle = () => true) {
-  const editable = rl;
+  const editable = rlInternal(rl);
   let previous = { line: editable.line, cursor: editable.cursor };
   const onKeypress = (_character, key) => {
     const current = { line: editable.line, cursor: editable.cursor };
@@ -5543,8 +5544,7 @@ ${ctxLine}` : "")
   showPrompt() {
     this.firstPromptShown = true;
     this.refreshPrompt();
-    const rlInternal2 = this.rl;
-    rlInternal2.prevRows = 0;
+    rlInternal(this.rl).prevRows = 0;
     this.rl.prompt();
   }
   async start() {
@@ -5690,7 +5690,7 @@ Session '${this.resumeSessionId}' not found.
     }
     void (async () => {
       try {
-        const { indexProject } = await import("./indexer-VZETNE4H.js");
+        const { indexProject } = await import("./indexer-TNDWGFRI.js");
         const { loadIndex } = await import("./store-MWNHVGJT.js");
         const root = process.cwd();
         const existed = loadIndex(root);
@@ -5884,10 +5884,10 @@ Session '${this.resumeSessionId}' not found.
           processing = false;
           if (this.running) {
             rlAny.output = savedOutput;
-            const rlInternal2 = this.rl;
-            rlInternal2.line = "";
-            rlInternal2.cursor = 0;
-            rlInternal2.paused = false;
+            const internal = rlInternal(this.rl);
+            internal.line = "";
+            internal.cursor = 0;
+            internal.paused = false;
             process.stdin.resume();
             this.showPrompt();
           } else {
@@ -6012,8 +6012,7 @@ Session '${this.resumeSessionId}' not found.
     const t0 = Date.now();
     try {
       const provider = this.providers.get(this.currentProvider);
-      const supportsTools = "chatWithTools" in provider;
-      if (supportsTools) {
+      if (isToolCapableProvider(provider)) {
         await this.handleChatWithTools(
           provider,
           session.messages,
@@ -6675,11 +6674,10 @@ ${mcpBudgetNote}` : "");
                 this.providers,
                 fallbackOpts,
                 (p, m) => {
-                  const tc = p;
-                  if (typeof tc.chatWithToolsStream !== "function") {
+                  if (typeof p.chatWithToolsStream !== "function") {
                     throw new Error(`provider ${p.info.id} does not support streaming tool calls`);
                   }
-                  return tc.chatWithToolsStream({ ...chatRequest, model: m, signal: streamAc.signal }, toolDefs);
+                  return p.chatWithToolsStream({ ...chatRequest, model: m, signal: streamAc.signal }, toolDefs);
                 }
               );
               const streamResult = await this.consumeToolStream(streamGen, spinner);
@@ -6707,10 +6705,12 @@ ${mcpBudgetNote}` : "");
               effectiveModel,
               this.providers,
               fallbackOpts,
-              (p, m) => p.chatWithTools(
-                { ...chatRequest, model: m, signal },
-                toolDefs
-              )
+              (p, m) => {
+                if (!isToolCapableProvider(p)) {
+                  throw new Error(`provider ${p.info.id} does not support tool calls`);
+                }
+                return p.chatWithTools({ ...chatRequest, model: m, signal }, toolDefs);
+              }
             ),
             // 中断：以 host-stop 正常收尾，不为一次主动取消喷 provider 报错
             () => ({ toolCalls: [], content: "", stopLoop: true })
@@ -7278,9 +7278,9 @@ Tip: You can continue the conversation by asking the AI to proceed.`
       select: (prompt, items, initialIndex) => {
         this.selecting = true;
         return selectFromList(prompt, items, initialIndex).finally(() => {
-          const rlInternal2 = this.rl;
-          rlInternal2.line = "";
-          rlInternal2.cursor = 0;
+          const internal = rlInternal(this.rl);
+          internal.line = "";
+          internal.cursor = 0;
           process.stdin.pause();
           setImmediate(() => {
             this.selecting = false;
@@ -7400,9 +7400,8 @@ Tip: You can continue the conversation by asking the AI to proceed.`
         if (!session) return;
         session.addMessage({ role: "user", content: message, timestamp: /* @__PURE__ */ new Date() });
         const provider = this.providers.get(this.currentProvider);
-        const toolCapable = provider;
-        if (typeof toolCapable.chatWithTools === "function") {
-          await this.handleChatWithTools(toolCapable, session.messages);
+        if (isToolCapableProvider(provider)) {
+          await this.handleChatWithTools(provider, session.messages);
         } else {
           await this.handleChatSimple(provider, session.messages);
         }
@@ -7560,7 +7559,7 @@ program.command("web").description("Start Web UI server with browser-based chat
     console.error("Error: Invalid port number. Must be between 1 and 65535.");
     process.exit(1);
   }
-  const { startWebServer } = await import("./server-JMXC2N3F.js");
+  const { startWebServer } = await import("./server-C523CIGN.js");
   await startWebServer({ port, host: options.host });
 });
 program.command("user [action] [username]").description("Manage Web UI users (list | create <name> | delete <name> | reset-password <name> | logout-all <name> | migrate <name>)").action(async (action, username) => {
@@ -7727,11 +7726,11 @@ program.command("sessions").description("List recent conversation sessions").opt
   console.log(footer + "\n");
 });
 program.command("usage").description("Show token + cost usage grouped by provider/model (cross-session)").option("--days <n>", "Only the last N days (inclusive of today)").option("--month <ym>", "Only a specific month, format YYYY-MM (e.g. 2026-06)").option("--json", "Output as JSON (for scripting)").action(async (options) => {
-  const { runUsageCli } = await import("./usage-HXJVDETY.js");
+  const { runUsageCli } = await import("./usage-EFHXXMYX.js");
   await runUsageCli(options);
 });
 program.command("doctor").description("Health check: API keys, config, MCP, recent crashes, tool usage, disk usage").option("--json", "Output as JSON (for scripting)").option("--reset-stats", "Reset accumulated tool usage statistics").action(async (options) => {
-  const { runDoctorCli } = await import("./doctor-cli-BGGILTHE.js");
+  const { runDoctorCli } = await import("./doctor-cli-Z3TGHTSX.js");
   const argv = process.argv.slice(2);
   await runDoctorCli({
     json: !!options.json || argv.includes("--json"),
@@ -7740,7 +7739,7 @@ program.command("doctor").description("Health check: API keys, config, MCP, rece
 });
 program.command("batch <action> [arg] [arg2]").description("Anthropic Message Batches: submit | list | status <id> | results <id> [out] | cancel <id>").option("--dry-run", "Parse and validate input without submitting (submit only)").action(async (action, arg, arg2, options) => {
   try {
-    const batch = await import("./batch-F7SKIBI3.js");
+    const batch = await import("./batch-2I5TPZA2.js");
     switch (action) {
       case "submit":
         if (!arg) {
@@ -7783,7 +7782,7 @@ program.command("batch <action> [arg] [arg2]").description("Anthropic Message Ba
   }
 });
 program.command("mcp-serve").description("Start an MCP server over STDIO, exposing aicli's built-in tools to Claude Desktop / Cursor / other MCP clients").option("--allow-destructive", "Allow bash / run_interactive / task_create (always destructive in MCP mode)").option("--allow-outside-cwd", "Allow tool path arguments to escape the sandbox root \u2014 disabled by default").option("--tools <list>", "Comma-separated whitelist of tools to expose (default: all eligible tools)").option("--cwd <path>", "Working directory AND sandbox root (default: current directory)").action(async (options) => {
-  const { startMcpServer } = await import("./server-QJHCJDA7.js");
+  const { startMcpServer } = await import("./server-R7D5RR36.js");
   await startMcpServer({
     allowDestructive: !!options.allowDestructive,
     allowOutsideCwd: !!options.allowOutsideCwd,
@@ -7796,7 +7795,7 @@ program.command("pr <action> [target]").description("PR review helpers: review |
     console.error(`Unknown pr action: ${action}. Use review | security-review | summarize.`);
     process.exit(1);
   }
-  const { runPrCli } = await import("./pr-24REDMGV.js");
+  const { runPrCli } = await import("./pr-ZUGSWQ5R.js");
   const result = await runPrCli({
     action,
     target,
@@ -7816,8 +7815,8 @@ program.command("pr <action> [target]").description("PR review helpers: review |
   process.exit(result.exitCode);
 });
 program.command("ci").description("Headless PR review (code + security) \u2014 reads git/gh diff, optionally posts to PR. Designed for GitHub Actions.").option("--pr <num>", "PR number or URL; diff fetched via gh pr diff <value>", (v) => /^#?\d+$/.test(v) ? parseInt(v.replace(/^#/, ""), 10) : v).option("--base <ref>", "Base ref for git diff <ref>...HEAD (ignored when --pr set)").option("--post", "Post review as a PR comment (requires gh CLI + GH_TOKEN, needs --pr)").option("--no-update", "Always create a new comment instead of updating the previous aicli review").option("--skip-code", "Skip the code review section").option("--skip-security", "Skip the security review section").option("--detailed", "Use the detailed code-review prompt").option("--max-diff <n>", "Max diff chars sent to the model (default 30000)", (v) => parseInt(v, 10)).option("--provider <id>", "Override provider (default: config.defaultProvider)").option("--model <id>", "Override model").option("--dry-run", "Print result to stdout instead of posting (overrides --post)").option("--json", "Output a structured JSON report").option("--markdown", "Output Markdown report (default)").option("--sarif", "Output SARIF 2.1.0 for code scanning artifacts").option("--fail-on-security-high", "Fail when the security review contains HIGH/CRITICAL findings (default)").option("--no-fail-on-security-high", "Do not fail on security HIGH/CRITICAL findings").option("--fail-on-test-failure", "Fail when the report mentions test failures (default)").option("--no-fail-on-test-failure", "Do not fail on test failure findings").option("--fail-on-lint-failure", "Fail when the report mentions lint/typecheck failures (default)").option("--no-fail-on-lint-failure", "Do not fail on lint/typecheck failure findings").action(async (options) => {
-  const { runCi } = await import("./ci-VURFRMWQ.js");
-  const { formatCiResult } = await import("./ci-format-AFJJIURF.js");
+  const { runCi } = await import("./ci-JFC45LIS.js");
+  const { formatCiResult } = await import("./ci-format-P3LIZHUR.js");
   const formats = [options.json, options.markdown, options.sarif].filter(Boolean).length;
   if (formats > 1) {
     console.error("Choose only one output format: --json, --markdown, or --sarif.");
@@ -7975,7 +7974,7 @@ program.command("hub [topic]").description("Start multi-agent hub (discuss / bra
     config.get("customProviders"),
     config.getConfigDir()
   );
-  const { startHub } = await import("./hub-Z73RLNJI.js");
+  const { startHub } = await import("./hub-NEWIFMQ3.js");
   await startHub(
     {
       topic: topic ?? "",

package/dist/{indexer-M2LJGTY2.js → indexer-RBEKMFT4.js}

@@ -1,7 +1,7 @@
 import {
   indexProject,
   updateFile
-} from "./chunk-QCG6UU2S.js";
+} from "./chunk-PPIISCFN.js";
 import "./chunk-RWM2GFRC.js";
 import "./chunk-6BUTA5VW.js";
 export {

package/dist/{indexer-VZETNE4H.js → indexer-TNDWGFRI.js}

@@ -2,7 +2,7 @@
 import {
   indexProject,
   updateFile
-} from "./chunk-GLSR2NR3.js";
+} from "./chunk-4DEMGCK4.js";
 import "./chunk-CKH4KQ4E.js";
 import "./chunk-IW3Q7AE5.js";
 export {

package/dist/{persistent-memory-5QMARQJF.js → persistent-memory-6Q5FDFJ7.js}

@@ -28,11 +28,11 @@ import {
   touchMemoryReferences,
   updateMemoryApproval,
   updateMemoryEntry
-} from "./chunk-KWSGSSWN.js";
+} from "./chunk-7BO5H2QI.js";
 import "./chunk-3FEZSLGI.js";
 import "./chunk-HOSJZMQS.js";
 import "./chunk-IW3Q7AE5.js";
-import "./chunk-FLDYAXJR.js";
+import "./chunk-ZP3RCZKM.js";
 export {
   addMemoryEntry,
   backupMemoryStore,

package/dist/{persistent-memory-CI544RLT.js → persistent-memory-ZFR5GI7D.js}

@@ -27,9 +27,9 @@ import {
   touchMemoryReferences,
   updateMemoryApproval,
   updateMemoryEntry
-} from "./chunk-4NH4Q7QK.js";
+} from "./chunk-7YYUITED.js";
 import "./chunk-FSC6KEWU.js";
-import "./chunk-UNL7NR55.js";
+import "./chunk-Z752LDYF.js";
 import "./chunk-6BUTA5VW.js";
 export {
   addMemoryEntry,