jinzd-ai-cli 0.4.287 → 0.4.288

package/dist/electron-server.js

@@ -50,7 +50,7 @@ import {
   touchMemoryReferences,
   updateMemoryApproval,
   updateMemoryEntry
-} from "./chunk-L625B2XV.js";
+} from "./chunk-EYA4IXQJ.js";
 import {
   DEFAULT_PATTERNS,
   redactJson,
@@ -66,7 +66,7 @@ import {
 } from "./chunk-CGLYJRFA.js";
 import {
   runTestsTool
-} from "./chunk-3BHJKMPQ.js";
+} from "./chunk-E66SCDTD.js";
 import {
   AGENTIC_BEHAVIOR_GUIDELINE,
   APP_NAME,
@@ -100,7 +100,7 @@ import {
   SUBAGENT_MAX_ROUNDS_LIMIT,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-CYUAHF6X.js";
+} from "./chunk-U4NQ2IRE.js";
 
 // src/web/server.ts
 import express from "express";
@@ -7262,6 +7262,63 @@ function runHook(template, vars) {
   }
 }
 
+// src/core/tool-gate.ts
+var gateMessages = {
+  hookDenied: (toolName, reason) => `[Hook denied] ${reason ?? `PreToolUse blocked ${toolName}`}. Do not retry without asking.`,
+  networkDenied: (toolName, reason) => `[Permission denied] Tool ${toolName} is blocked by networkPolicy${reason ? ` (${reason})` : ""}. Do not retry.`,
+  profileDenied: (toolName, profileName, reason) => `[Permission denied] Tool ${toolName} is blocked by permission profile "${profileName}"${reason ? ` (${reason})` : ""}. Do not retry.`,
+  autoDenied: (reason) => `[Auto denied] ${reason}. Do not retry without asking.`,
+  permissionCancelled: (toolName) => `[User cancelled] The user declined permission for ${toolName}. Do not retry without asking.`,
+  operationCancelled: (toolName, level) => `[User cancelled] The user declined the ${level === "destructive" ? "destructive " : ""}${toolName} operation. Do not retry without asking.`
+};
+function needsPermissionRequestHook(input) {
+  return input.networkPermission?.action === "confirm" || input.permission.action === "confirm";
+}
+function decideToolGate(call, input) {
+  const { dangerLevel, permission, networkPermission } = input;
+  if (input.hookDeny) {
+    return { kind: "denied", source: "hook", message: gateMessages.hookDenied(call.name, input.hookDeny.reason) };
+  }
+  if (networkPermission?.action === "deny") {
+    return { kind: "denied", source: "network", message: gateMessages.networkDenied(call.name, networkPermission.reason) };
+  }
+  if (permission.action === "deny") {
+    return {
+      kind: "denied",
+      source: "profile",
+      message: gateMessages.profileDenied(call.name, permission.profileName ?? "default", permission.reason)
+    };
+  }
+  if (permission.action === "auto-approve" && networkPermission?.action !== "confirm") {
+    return { kind: "allow", source: "profile" };
+  }
+  const requiresHardConfirmation = permission.action === "confirm" && permission.hardBoundary === true;
+  if ((networkPermission?.action === "confirm" || requiresHardConfirmation) && dangerLevel === "safe") {
+    return { kind: "confirm", level: "write", source: "permission" };
+  }
+  if (input.sessionAutoMode && networkPermission?.action !== "confirm") {
+    const classification = input.classify();
+    if (classification.decision === "deny") {
+      return {
+        kind: "denied",
+        source: "auto-mode",
+        message: gateMessages.autoDenied(classification.reason),
+        classification
+      };
+    }
+    if (classification.decision === "auto-approve" && !requiresHardConfirmation) {
+      return { kind: "allow", source: "auto-mode" };
+    }
+  }
+  if (input.sessionAutoApprove && dangerLevel === "write" && !requiresHardConfirmation) {
+    return { kind: "allow", source: "yolo" };
+  }
+  if (dangerLevel === "write" || dangerLevel === "destructive") {
+    return { kind: "confirm", level: dangerLevel, source: "danger" };
+  }
+  return { kind: "allow", source: "safe" };
+}
+
 // src/tools/permissions.ts
 import { existsSync as existsSync9, realpathSync } from "fs";
 import { basename as basename2, dirname as dirname3, isAbsolute, resolve as resolve3 } from "path";
@@ -8056,13 +8113,6 @@ var ToolExecutor = class {
       { configDir: this.hookConfigDir, onSummary: (msg) => console.log(theme.dim(`  [hook] ${msg}`)) }
     );
     const preDeny = preToolDecisions.find((d) => d.action === "deny");
-    if (preDeny) {
-      return {
-        callId: call.id,
-        content: `[Hook denied] ${preDeny.reason ?? `PreToolUse blocked ${call.name}`}. Do not retry without asking.`,
-        isError: true
-      };
-    }
     for (const d of preToolDecisions) {
       const warnings = [d.warning, ...d.warnings ?? []].filter(Boolean);
       for (const w of warnings) console.log(theme.warning(`  \u26A0 Hook warning: ${w}`));
@@ -8082,7 +8132,19 @@ var ToolExecutor = class {
       }
     );
     const networkPermission = checkNetworkPolicy(call.name, call.arguments, this.networkPolicy);
-    if (networkPermission?.action === "confirm" || permission.action === "confirm") {
+    const gate = decideToolGate(call, {
+      dangerLevel,
+      permission,
+      networkPermission,
+      hookDeny: preDeny ? { reason: preDeny.reason } : void 0,
+      sessionAutoMode: this.sessionAutoMode,
+      sessionAutoApprove: this.sessionAutoApprove,
+      classify: () => defaultActionClassifier.classify(call, dangerLevel, {
+        workspaceRoot: this.workspaceRoot,
+        tempDirs: [tmpdir()]
+      })
+    });
+    if (needsPermissionRequestHook({ permission, networkPermission })) {
       runLifecycleHooks(
         this.hookConfig,
         "PermissionRequest",
@@ -8090,131 +8152,29 @@ var ToolExecutor = class {
         { configDir: this.hookConfigDir, onSummary: (msg) => console.log(theme.dim("  [hook] " + msg)) }
       );
     }
-    if (networkPermission?.action === "deny") {
-      const reason = networkPermission.reason ? ` (${networkPermission.reason})` : "";
-      return {
-        callId: call.id,
-        content: `[Permission denied] Tool ${call.name} is blocked by networkPolicy${reason}. Do not retry.`,
-        isError: true
-      };
-    }
-    if (permission.action === "deny") {
-      const reason = permission.reason ? ` (${permission.reason})` : "";
-      return {
-        callId: call.id,
-        content: `[Permission denied] Tool ${call.name} is blocked by permission profile "${permission.profileName}"${reason}. Do not retry.`,
-        isError: true
-      };
-    }
-    if (permission.action === "auto-approve" && networkPermission?.action !== "confirm") {
-      if (!toolCallAlreadyPrinted) this.printToolCall(call);
-      try {
-        const rawContent = await runTool(tool, call.arguments, call.name);
-        const content = truncateOutput(rawContent, call.name);
-        const wasTruncated = content !== rawContent;
-        this.printToolResult(call.name, rawContent, false, wasTruncated);
-        runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "ok" });
-        runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "ok" }, { configDir: this.hookConfigDir });
-        return { callId: call.id, content, isError: false };
-      } catch (err) {
-        const message = err instanceof Error ? err.message : err && typeof err === "object" && "message" in err ? String(err.message) : String(err);
-        this.printToolResult(call.name, message, true, false);
-        runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
-        runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "error", error: message }, { configDir: this.hookConfigDir });
-        return { callId: call.id, content: message, isError: true };
-      }
-    }
-    const requiresHardConfirmation = permission.action === "confirm" && permission.hardBoundary === true;
-    if ((networkPermission?.action === "confirm" || requiresHardConfirmation) && dangerLevel === "safe") {
-      this.printToolCall(call);
-      toolCallAlreadyPrinted = true;
-      const confirmed = await this.confirm(call, "write");
-      if (!confirmed) {
-        return {
-          callId: call.id,
-          content: `[User cancelled] The user declined permission for ${call.name}. Do not retry without asking.`,
-          isError: true
-        };
-      }
+    if (gate.kind === "denied") {
+      if (gate.source === "auto-mode") recordRecentlyDeniedAutoAction(call, gate.classification);
+      return { callId: call.id, content: gate.message, isError: true };
     }
-    if (this.sessionAutoMode && networkPermission?.action !== "confirm") {
-      const classification = defaultActionClassifier.classify(call, dangerLevel, {
-        workspaceRoot: this.workspaceRoot,
-        tempDirs: [tmpdir()]
-      });
-      if (classification.decision === "deny") {
-        recordRecentlyDeniedAutoAction(call, classification);
-        return {
-          callId: call.id,
-          content: `[Auto denied] ${classification.reason}. Do not retry without asking.`,
-          isError: true
-        };
-      }
-      if (classification.decision === "auto-approve" && !requiresHardConfirmation) {
+    if (gate.kind === "confirm") {
+      if (gate.source === "danger" && gate.level === "write") {
         this.printToolCall(call);
-        if (dangerLevel === "write") this.printDiffPreview(call);
-        console.log(theme.warning(`  \u26A1 Auto-approved (/auto: ${classification.ruleId})`));
-        try {
-          const rawContent = await runTool(tool, call.arguments, call.name);
-          const content = truncateOutput(rawContent, call.name);
-          const wasTruncated = content !== rawContent;
-          this.printToolResult(call.name, rawContent, false, wasTruncated);
-          runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "ok" });
-          runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "ok" }, { configDir: this.hookConfigDir });
-          return { callId: call.id, content, isError: false };
-        } catch (err) {
-          const message = err instanceof Error ? err.message : err && typeof err === "object" && "message" in err ? String(err.message) : String(err);
-          this.printToolResult(call.name, message, true, false);
-          runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
-          runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "error", error: message }, { configDir: this.hookConfigDir });
-          return { callId: call.id, content: message, isError: true };
-        }
-      }
-    }
-    if (this.sessionAutoApprove && dangerLevel === "write" && !requiresHardConfirmation) {
-      this.printToolCall(call);
-      if (dangerLevel === "write") this.printDiffPreview(call);
-      console.log(theme.warning("  \u26A1 Auto-approved (session /yolo mode)"));
-      try {
-        const rawContent = await runTool(tool, call.arguments, call.name);
-        const content = truncateOutput(rawContent, call.name);
-        const wasTruncated = content !== rawContent;
-        this.printToolResult(call.name, rawContent, false, wasTruncated);
-        runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "ok" });
-        runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "ok" }, { configDir: this.hookConfigDir });
-        return { callId: call.id, content, isError: false };
-      } catch (err) {
-        const message = err instanceof Error ? err.message : err && typeof err === "object" && "message" in err ? String(err.message) : String(err);
-        this.printToolResult(call.name, message, true, false);
-        runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
-        runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "error", error: message }, { configDir: this.hookConfigDir });
-        return { callId: call.id, content: message, isError: true };
-      }
-    }
-    if (dangerLevel === "write") {
-      this.printToolCall(call);
-      this.printDiffPreview(call);
-      const confirmed = await this.confirm(call, dangerLevel);
-      if (!confirmed) {
-        return {
-          callId: call.id,
-          content: `[User cancelled] The user declined the ${call.name} operation. Do not retry without asking.`,
-          isError: true
-        };
+        this.printDiffPreview(call);
+        toolCallAlreadyPrinted = true;
+      } else if (gate.source === "permission") {
+        this.printToolCall(call);
+        toolCallAlreadyPrinted = true;
       }
-    } else if (dangerLevel === "destructive") {
-      const confirmed = await this.confirm(call, dangerLevel);
+      const confirmed = await this.confirm(call, gate.level);
       if (!confirmed) {
         return {
           callId: call.id,
-          content: `[User cancelled] The user declined the destructive ${call.name} operation. Do not retry without asking.`,
+          content: gate.source === "permission" ? gateMessages.permissionCancelled(call.name) : gateMessages.operationCancelled(call.name, gate.level),
           isError: true
         };
       }
-      this.printToolCall(call);
-    } else {
-      this.printToolCall(call);
     }
+    if (!toolCallAlreadyPrinted) this.printToolCall(call);
     try {
       const rawContent = await runTool(tool, call.arguments, call.name);
       const content = truncateOutput(rawContent, call.name);
@@ -14048,15 +14008,6 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
       { configDir: this.hookConfigDir, onSummary: (message) => this.send({ type: "info", message: `[hook] ${message}` }) }
     );
     const preDeny = preToolDecisions.find((d) => d.action === "deny");
-    if (preDeny) {
-      const result = {
-        callId: call.id,
-        content: `[Hook denied] ${preDeny.reason ?? `PreToolUse blocked ${call.name}`}. Do not retry without asking.`,
-        isError: true
-      };
-      this.sendToolCallResult(call, result.content, true);
-      return result;
-    }
     for (const d of preToolDecisions) {
       const warnings = [d.warning, ...d.warnings ?? []].filter(Boolean);
       for (const warning of warnings) this.send({ type: "info", message: `[hook] ${warning}` });
@@ -14076,7 +14027,19 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
       }
     );
     const networkPermission = checkNetworkPolicy(call.name, call.arguments, this.networkPolicy);
-    if (networkPermission?.action === "confirm" || permission.action === "confirm") {
+    const gate = decideToolGate(call, {
+      dangerLevel,
+      permission,
+      networkPermission,
+      hookDeny: preDeny ? { reason: preDeny.reason } : void 0,
+      sessionAutoMode: this.sessionAutoMode,
+      sessionAutoApprove: this.sessionAutoApprove,
+      classify: () => defaultActionClassifier.classify(call, dangerLevel, {
+        workspaceRoot: this.workspaceRoot,
+        tempDirs: [tmpdir2()]
+      })
+    });
+    if (needsPermissionRequestHook({ permission, networkPermission })) {
       runLifecycleHooks(
         this.hookConfig,
         "PermissionRequest",
@@ -14084,105 +14047,24 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
         { configDir: this.hookConfigDir, onSummary: (message) => this.send({ type: "info", message: "[hook] " + message }) }
       );
     }
-    if (networkPermission?.action === "deny") {
-      const reason = networkPermission.reason ? ` (${networkPermission.reason})` : "";
-      return {
-        callId: call.id,
-        content: `[Permission denied] Tool ${call.name} is blocked by networkPolicy${reason}. Do not retry.`,
-        isError: true
-      };
+    if (gate.kind === "denied") {
+      if (gate.source === "auto-mode") recordRecentlyDeniedAutoAction(call, gate.classification);
+      this.sendToolCallResult(call, gate.message, true);
+      return { callId: call.id, content: gate.message, isError: true };
     }
-    if (permission.action === "deny") {
-      const reason = permission.reason ? ` (${permission.reason})` : "";
-      return {
-        callId: call.id,
-        content: `[Permission denied] Tool ${call.name} is blocked by permission profile "${permission.profileName}"${reason}. Do not retry.`,
-        isError: true
-      };
-    }
-    if (permission.action === "auto-approve" && networkPermission?.action !== "confirm") {
-      this.sendToolCallStart(call);
-      try {
-        const rawContent = await runTool(tool, call.arguments, call.name);
-        const content = truncateOutput(rawContent, call.name);
-        this.sendToolCallResult(call, rawContent, false);
-        runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "ok" });
-        runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "ok" }, { configDir: this.hookConfigDir });
-        return { callId: call.id, content, isError: false };
-      } catch (err) {
-        const message = err instanceof Error ? err.message : err && typeof err === "object" && "message" in err ? String(err.message) : String(err);
-        this.sendToolCallResult(call, message, true);
-        runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
-        runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "error", error: message }, { configDir: this.hookConfigDir });
-        return { callId: call.id, content: message, isError: true };
-      }
-    }
-    const requiresHardConfirmation = permission.action === "confirm" && permission.hardBoundary === true;
-    if ((networkPermission?.action === "confirm" || requiresHardConfirmation) && dangerLevel === "safe") {
-      this.sendToolCallStart(call);
-      toolCallStarted = true;
-      const confirmed = await this.confirm(call, "write");
-      if (!confirmed) {
-        const rejectionMsg = `[User cancelled] The user declined permission for ${call.name}. Do not retry without asking.`;
-        this.sendToolCallResult(call, rejectionMsg, true);
-        return { callId: call.id, content: rejectionMsg, isError: true };
-      }
-    }
-    if (!toolCallStarted) this.sendToolCallStart(call);
-    if (this.sessionAutoMode && networkPermission?.action !== "confirm") {
-      const classification = defaultActionClassifier.classify(call, dangerLevel, {
-        workspaceRoot: this.workspaceRoot,
-        tempDirs: [tmpdir2()]
-      });
-      if (classification.decision === "deny") {
-        recordRecentlyDeniedAutoAction(call, classification);
-        const rejectionMsg = `[Auto denied] ${classification.reason}. Do not retry without asking.`;
-        this.sendToolCallResult(call, rejectionMsg, true);
-        return { callId: call.id, content: rejectionMsg, isError: true };
+    if (gate.kind === "confirm") {
+      if (!toolCallStarted) {
+        this.sendToolCallStart(call);
+        toolCallStarted = true;
       }
-      if (classification.decision === "auto-approve" && !requiresHardConfirmation) {
-        this.send({ type: "info", message: `\u26A1 Auto-approved (/auto: ${classification.ruleId})` });
-        try {
-          const rawContent = await runTool(tool, call.arguments, call.name);
-          const content = truncateOutput(rawContent, call.name);
-          this.sendToolCallResult(call, rawContent, false);
-          runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "ok" });
-          runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "ok" }, { configDir: this.hookConfigDir });
-          return { callId: call.id, content, isError: false };
-        } catch (err) {
-          const message = err instanceof Error ? err.message : err && typeof err === "object" && "message" in err ? String(err.message) : String(err);
-          this.sendToolCallResult(call, message, true);
-          runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
-          runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "error", error: message }, { configDir: this.hookConfigDir });
-          return { callId: call.id, content: message, isError: true };
-        }
-      }
-    }
-    if (this.sessionAutoApprove && dangerLevel === "write" && !requiresHardConfirmation) {
-      try {
-        const rawContent = await runTool(tool, call.arguments, call.name);
-        const content = truncateOutput(rawContent, call.name);
-        this.sendToolCallResult(call, rawContent, false);
-        runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "ok" });
-        runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "ok" }, { configDir: this.hookConfigDir });
-        return { callId: call.id, content, isError: false };
-      } catch (err) {
-        const message = err instanceof Error ? err.message : err && typeof err === "object" && "message" in err ? String(err.message) : String(err);
-        this.sendToolCallResult(call, message, true);
-        runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
-        runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "error", error: message }, { configDir: this.hookConfigDir });
-        return { callId: call.id, content: message, isError: true };
-      }
-    }
-    if (dangerLevel === "write" || dangerLevel === "destructive") {
-      const confirmed = await this.confirm(call, dangerLevel);
+      const confirmed = await this.confirm(call, gate.level);
       if (!confirmed) {
-        const label = dangerLevel === "destructive" ? "destructive " : "";
-        const rejectionMsg = `[User cancelled] The user declined the ${label}${call.name} operation. Do not retry without asking.`;
+        const rejectionMsg = gate.source === "permission" ? gateMessages.permissionCancelled(call.name) : gateMessages.operationCancelled(call.name, gate.level);
         this.sendToolCallResult(call, rejectionMsg, true);
         return { callId: call.id, content: rejectionMsg, isError: true };
       }
     }
+    if (!toolCallStarted) this.sendToolCallStart(call);
     try {
       const rawContent = await runTool(tool, call.arguments, call.name);
       const content = truncateOutput(rawContent, call.name);
@@ -16997,7 +16879,7 @@ Cache:  write=${cacheCreate} read=${cacheRead}` : "";
 Cost:   ${formatCost(cost)}` : "";
   let memoryLine = "";
   try {
-    const { countPendingMemories: countPendingMemories2 } = await import("./persistent-memory-3N2XQKJK.js");
+    const { countPendingMemories: countPendingMemories2 } = await import("./persistent-memory-LFE3YHZO.js");
     const pending = countPendingMemories2(ctx.config.getConfigDir());
     if (pending > 0) memoryLine = `
 Memory: \u26A0 ${pending} pending approval \u2014 see the Memory panel or /memory`;
@@ -17980,7 +17862,7 @@ async function handleTest(args, ctx) {
       const isCommand = argStr.includes(" ") || /^(mvn|gradle|npm|pytest|cargo|go)\b/.test(argStr);
       testArgs = isCommand ? { command: argStr } : { filter: argStr };
     }
-    const runTests = ctx.runTests ?? (await import("./run-tests-3ZOMRFIX.js")).executeTests;
+    const runTests = ctx.runTests ?? (await import("./run-tests-R3JB4UEI.js")).executeTests;
     const report = await runTests(testArgs);
     ctx.send({ type: "info", message: report });
   } catch (err) {
@@ -18370,7 +18252,7 @@ async function handleMemory(args, ctx) {
   }
   if (intent.kind === "status") {
     const { getChatIndexStatus: getChatIndexStatus2 } = await import("./chat-index-DGUOUUQW.js");
-    const { listMemoryEntries: listMemoryEntries2, isMemoryExpired: isMemoryExpired2, formatMemoryForPrompt: formatMemoryForPrompt2 } = await import("./persistent-memory-3N2XQKJK.js");
+    const { listMemoryEntries: listMemoryEntries2, isMemoryExpired: isMemoryExpired2, formatMemoryForPrompt: formatMemoryForPrompt2 } = await import("./persistent-memory-LFE3YHZO.js");
     const memories = listMemoryEntries2(configDir, { includeExpired: true, includeRejected: true });
     const injected = formatMemoryForPrompt2(configDir, process.cwd(), ctx.config.get("memory")?.maxChars);
     const view = buildMemoryStatusView({
@@ -18393,7 +18275,7 @@ async function handleMemory(args, ctx) {
     return;
   }
   if (intent.kind === "recall") {
-    const { searchPersistentMemories: searchPersistentMemories2, touchMemoryReferences: touchMemoryReferences2 } = await import("./persistent-memory-3N2XQKJK.js");
+    const { searchPersistentMemories: searchPersistentMemories2, touchMemoryReferences: touchMemoryReferences2 } = await import("./persistent-memory-LFE3YHZO.js");
     const { searchChatMemory: searchChatMemory2 } = await import("./chat-index-DGUOUUQW.js");
     const persistentHits = searchPersistentMemories2(configDir, intent.query, process.cwd(), 3);
     if (persistentHits.length > 0) {
@@ -18514,7 +18396,7 @@ async function handleMemory(args, ctx) {
     ctx.handleMemoryManage(intent.action, args[1], intent.action === "expire" ? args[2] : void 0);
   } else if (intent.kind === "export") {
     if (args[1] === "md") {
-      const { exportMemoryEntries: exportMemoryEntries2 } = await import("./persistent-memory-3N2XQKJK.js");
+      const { exportMemoryEntries: exportMemoryEntries2 } = await import("./persistent-memory-LFE3YHZO.js");
       ctx.send({
         type: "export_data",
         format: "md",
@@ -19519,7 +19401,7 @@ No tools match "${filter}".
           const { join: join29 } = await import("path");
           const { existsSync: existsSync33 } = await import("fs");
           const { getGitRoot: getGitRoot2 } = await import("./git-context-VNCA2GU7.js");
-          const { MCP_PROJECT_CONFIG_NAME: MCP_PROJECT_CONFIG_NAME2 } = await import("./constants-SRRV3K5Y.js");
+          const { MCP_PROJECT_CONFIG_NAME: MCP_PROJECT_CONFIG_NAME2 } = await import("./constants-JQP6BENR.js");
           const { approveProject, hashMcpFile } = await import("./project-trust-MUG325AW.js");
           const cwd = process.cwd();
           const projectRoot = getGitRoot2(cwd) ?? cwd;
@@ -20434,7 +20316,7 @@ function createReviewCommands() {
       usage: "/test [command|filter]",
       async execute(args, ctx) {
         try {
-          const { executeTests } = await import("./run-tests-3ZOMRFIX.js");
+          const { executeTests } = await import("./run-tests-R3JB4UEI.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {

package/dist/{hub-Y62P5MIA.js → hub-LFWL5PGH.js}

@@ -158,7 +158,7 @@ ${content}`);
   }
 }
 async function runTaskMode(config, providers, configManager, topic) {
-  const { TaskOrchestrator } = await import("./task-orchestrator-6TVKJYKC.js");
+  const { TaskOrchestrator } = await import("./task-orchestrator-6HH3KQUQ.js");
   const orchestrator = new TaskOrchestrator(config, providers, configManager);
   let interrupted = false;
   const onSigint = () => {

package/dist/index.js

@@ -24,7 +24,7 @@ import {
   setupProxy,
   snapshotFile,
   stripRoutingTags
-} from "./chunk-HNUT4STJ.js";
+} from "./chunk-NJDQCQ7P.js";
 import {
   CostTracker,
   getPricing,
@@ -49,7 +49,7 @@ import {
   setMaxOutputCap,
   spawnAgentContext,
   undoStack
-} from "./chunk-AXSWLNCU.js";
+} from "./chunk-37WBQV3E.js";
 import "./chunk-HLWUDRBO.js";
 import {
   NO_THINKING,
@@ -62,7 +62,7 @@ import {
   countPendingMemories,
   detectStaleLegacyMarkdownEdit,
   formatMemoryForPrompt
-} from "./chunk-ERDFOXYK.js";
+} from "./chunk-JBNNJ32H.js";
 import "./chunk-4DEMGCK4.js";
 import "./chunk-UUSRWSSX.js";
 import "./chunk-CKH4KQ4E.js";
@@ -83,14 +83,14 @@ import {
 import {
   loadContextFiles,
   writeCrashLog
-} from "./chunk-EU6NMK7G.js";
+} from "./chunk-C5UAM4X7.js";
 import {
   getActivePluginAssets,
   getPendingHookTrust,
   installFlushOnExit,
   mergePluginHooks,
   runLifecycleHooks
-} from "./chunk-HEUB5PV6.js";
+} from "./chunk-5G6HX57U.js";
 import "./chunk-RS7SKYTS.js";
 import {
   ProviderRegistry,
@@ -98,7 +98,7 @@ import {
 } from "./chunk-ALSSNFNK.js";
 import {
   ConfigManager
-} from "./chunk-5F7BGV72.js";
+} from "./chunk-7RC7AN6V.js";
 import {
   CONTENT_ONLY_STREAM_REMINDER,
   TEE_FINAL_USER_NUDGE,
@@ -132,7 +132,7 @@ import {
 } from "./chunk-IW3Q7AE5.js";
 import "./chunk-XNFIYS7G.js";
 import "./chunk-4BKXL7SM.js";
-import "./chunk-L7RAEUUN.js";
+import "./chunk-6NEEFOVF.js";
 import {
   AGENTIC_BEHAVIOR_GUIDELINE,
   AUTHOR,
@@ -149,7 +149,7 @@ import {
   SKILLS_DIR_NAME,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-UDFK5Q52.js";
+} from "./chunk-O4CZPTPU.js";
 
 // src/index.ts
 import { program } from "commander";
@@ -3990,7 +3990,7 @@ program.command("web").description("Start Web UI server with browser-based chat
     console.error("Error: Invalid port number. Must be between 1 and 65535.");
     process.exit(1);
   }
-  const { startWebServer } = await import("./server-XWURZCAF.js");
+  const { startWebServer } = await import("./server-I6DXVJRO.js");
   await startWebServer({ port, host: options.host });
 });
 program.command("user [action] [username]").description("Manage Web UI users (list | create <name> | delete <name> | reset-password <name> | logout-all <name> | migrate <name>)").action(async (action, username) => {
@@ -4157,11 +4157,11 @@ program.command("sessions").description("List recent conversation sessions").opt
   console.log(footer + "\n");
 });
 program.command("usage").description("Show token + cost usage grouped by provider/model (cross-session)").option("--days <n>", "Only the last N days (inclusive of today)").option("--month <ym>", "Only a specific month, format YYYY-MM (e.g. 2026-06)").option("--json", "Output as JSON (for scripting)").action(async (options) => {
-  const { runUsageCli } = await import("./usage-L2PSI2KH.js");
+  const { runUsageCli } = await import("./usage-UB4ZT5PE.js");
   await runUsageCli(options);
 });
 program.command("doctor").description("Health check: API keys, config, MCP, recent crashes, tool usage, disk usage").option("--json", "Output as JSON (for scripting)").option("--reset-stats", "Reset accumulated tool usage statistics").action(async (options) => {
-  const { runDoctorCli } = await import("./doctor-cli-LQYTDJ74.js");
+  const { runDoctorCli } = await import("./doctor-cli-CVOE7FAE.js");
   const argv = process.argv.slice(2);
   await runDoctorCli({
     json: !!options.json || argv.includes("--json"),
@@ -4170,7 +4170,7 @@ program.command("doctor").description("Health check: API keys, config, MCP, rece
 });
 program.command("batch <action> [arg] [arg2]").description("Anthropic Message Batches: submit | list | status <id> | results <id> [out] | cancel <id>").option("--dry-run", "Parse and validate input without submitting (submit only)").action(async (action, arg, arg2, options) => {
   try {
-    const batch = await import("./batch-6OH7D5YU.js");
+    const batch = await import("./batch-YAEXKK2C.js");
     switch (action) {
       case "submit":
         if (!arg) {
@@ -4213,7 +4213,7 @@ program.command("batch <action> [arg] [arg2]").description("Anthropic Message Ba
   }
 });
 program.command("mcp-serve").description("Start an MCP server over STDIO, exposing aicli's built-in tools to Claude Desktop / Cursor / other MCP clients").option("--allow-destructive", "Allow bash / run_interactive / task_create (always destructive in MCP mode)").option("--allow-outside-cwd", "Allow tool path arguments to escape the sandbox root \u2014 disabled by default").option("--tools <list>", "Comma-separated whitelist of tools to expose (default: all eligible tools)").option("--cwd <path>", "Working directory AND sandbox root (default: current directory)").action(async (options) => {
-  const { startMcpServer } = await import("./server-L4QHJT2I.js");
+  const { startMcpServer } = await import("./server-THHSJRNI.js");
   await startMcpServer({
     allowDestructive: !!options.allowDestructive,
     allowOutsideCwd: !!options.allowOutsideCwd,
@@ -4226,7 +4226,7 @@ program.command("pr <action> [target]").description("PR review helpers: review |
     console.error(`Unknown pr action: ${action}. Use review | security-review | summarize.`);
     process.exit(1);
   }
-  const { runPrCli } = await import("./pr-L7Y3XHGL.js");
+  const { runPrCli } = await import("./pr-3QAG7XO7.js");
   const result = await runPrCli({
     action,
     target,
@@ -4246,8 +4246,8 @@ program.command("pr <action> [target]").description("PR review helpers: review |
   process.exit(result.exitCode);
 });
 program.command("ci").description("Headless PR review (code + security) \u2014 reads git/gh diff, optionally posts to PR. Designed for GitHub Actions.").option("--pr <num>", "PR number or URL; diff fetched via gh pr diff <value>", (v) => /^#?\d+$/.test(v) ? parseInt(v.replace(/^#/, ""), 10) : v).option("--base <ref>", "Base ref for git diff <ref>...HEAD (ignored when --pr set)").option("--post", "Post review as a PR comment (requires gh CLI + GH_TOKEN, needs --pr)").option("--no-update", "Always create a new comment instead of updating the previous aicli review").option("--skip-code", "Skip the code review section").option("--skip-security", "Skip the security review section").option("--detailed", "Use the detailed code-review prompt").option("--max-diff <n>", "Max diff chars sent to the model (default 30000)", (v) => parseInt(v, 10)).option("--provider <id>", "Override provider (default: config.defaultProvider)").option("--model <id>", "Override model").option("--dry-run", "Print result to stdout instead of posting (overrides --post)").option("--json", "Output a structured JSON report").option("--markdown", "Output Markdown report (default)").option("--sarif", "Output SARIF 2.1.0 for code scanning artifacts").option("--fail-on-security-high", "Fail when the security review contains HIGH/CRITICAL findings (default)").option("--no-fail-on-security-high", "Do not fail on security HIGH/CRITICAL findings").option("--fail-on-test-failure", "Fail when the report mentions test failures (default)").option("--no-fail-on-test-failure", "Do not fail on test failure findings").option("--fail-on-lint-failure", "Fail when the report mentions lint/typecheck failures (default)").option("--no-fail-on-lint-failure", "Do not fail on lint/typecheck failure findings").action(async (options) => {
-  const { runCi } = await import("./ci-WXCMI4ND.js");
-  const { formatCiResult } = await import("./ci-format-JXD2BQM6.js");
+  const { runCi } = await import("./ci-RO2NLIRH.js");
+  const { formatCiResult } = await import("./ci-format-GBSRK2J4.js");
   const formats = [options.json, options.markdown, options.sarif].filter(Boolean).length;
   if (formats > 1) {
     console.error("Choose only one output format: --json, --markdown, or --sarif.");
@@ -4405,7 +4405,7 @@ program.command("hub [topic]").description("Start multi-agent hub (discuss / bra
     config.get("customProviders"),
     config.getConfigDir()
   );
-  const { startHub } = await import("./hub-Y62P5MIA.js");
+  const { startHub } = await import("./hub-LFWL5PGH.js");
   await startHub(
     {
       topic: topic ?? "",

package/dist/{persistent-memory-46JSUEYV.js → persistent-memory-4UR27ACM.js}

@@ -28,11 +28,11 @@ import {
   touchMemoryReferences,
   updateMemoryApproval,
   updateMemoryEntry
-} from "./chunk-ERDFOXYK.js";
+} from "./chunk-JBNNJ32H.js";
 import "./chunk-3FEZSLGI.js";
 import "./chunk-HOSJZMQS.js";
 import "./chunk-IW3Q7AE5.js";
-import "./chunk-UDFK5Q52.js";
+import "./chunk-O4CZPTPU.js";
 export {
   addMemoryEntry,
   backupMemoryStore,