jinzd-ai-cli 0.4.287 → 0.4.288

package/dist/{persistent-memory-3N2XQKJK.js → persistent-memory-LFE3YHZO.js}

@@ -27,11 +27,11 @@ import {
   touchMemoryReferences,
   updateMemoryApproval,
   updateMemoryEntry
-} from "./chunk-L625B2XV.js";
+} from "./chunk-EYA4IXQJ.js";
 import "./chunk-FSC6KEWU.js";
 import "./chunk-6BUTA5VW.js";
 import "./chunk-CGLYJRFA.js";
-import "./chunk-CYUAHF6X.js";
+import "./chunk-U4NQ2IRE.js";
 export {
   addMemoryEntry,
   backupMemoryStore,

package/dist/{pr-L7Y3XHGL.js → pr-3QAG7XO7.js}

@@ -2,8 +2,8 @@
 import {
   countSeverity,
   runCi
-} from "./chunk-RZVGR3KD.js";
-import "./chunk-3Y5BCGD2.js";
+} from "./chunk-WQ2YQ5YC.js";
+import "./chunk-G5QZS5TN.js";
 import {
   buildReviewPrompt,
   buildSecurityReviewPrompt,
@@ -17,13 +17,13 @@ import {
 } from "./chunk-ALSSNFNK.js";
 import {
   ConfigManager
-} from "./chunk-5F7BGV72.js";
+} from "./chunk-7RC7AN6V.js";
 import "./chunk-TEXT4DAT.js";
 import "./chunk-TU3L3PW7.js";
 import "./chunk-IW3Q7AE5.js";
 import {
   VERSION
-} from "./chunk-UDFK5Q52.js";
+} from "./chunk-O4CZPTPU.js";
 
 // src/cli/pr.ts
 import { execFileSync } from "child_process";

package/dist/{run-tests-WC644BHH.js → run-tests-GGNFI7CL.js}

@@ -2,8 +2,8 @@
 import {
   executeTests,
   runTestsTool
-} from "./chunk-L7RAEUUN.js";
-import "./chunk-UDFK5Q52.js";
+} from "./chunk-6NEEFOVF.js";
+import "./chunk-O4CZPTPU.js";
 export {
   executeTests,
   runTestsTool

package/dist/{run-tests-3ZOMRFIX.js → run-tests-R3JB4UEI.js}

@@ -1,8 +1,8 @@
 import {
   executeTests,
   runTestsTool
-} from "./chunk-3BHJKMPQ.js";
-import "./chunk-CYUAHF6X.js";
+} from "./chunk-E66SCDTD.js";
+import "./chunk-U4NQ2IRE.js";
 export {
   executeTests,
   runTestsTool

package/dist/{server-XWURZCAF.js → server-I6DXVJRO.js}

@@ -81,7 +81,7 @@ import {
   skillHistoryNote,
   snapshotFile,
   stripRoutingTags
-} from "./chunk-HNUT4STJ.js";
+} from "./chunk-NJDQCQ7P.js";
 import {
   CNY_PER_USD,
   CostTracker,
@@ -100,9 +100,11 @@ import {
   cleanupRejectedTeeFile,
   clearBashSession,
   clearRecentlyDeniedAutoActions,
+  decideToolGate,
   defaultActionClassifier,
   estimateTokens,
   formatPermissionProfileWarning,
+  gateMessages,
   getPreferredAgentName,
   getRecentlyDeniedAutoActions,
   googleSearchContext,
@@ -110,6 +112,7 @@ import {
   isToolCapableProvider,
   listAgentConfigs,
   listAgentRuns,
+  needsPermissionRequestHook,
   recordRecentlyDeniedAutoAction,
   renderDiff,
   requestAgentStop,
@@ -123,7 +126,7 @@ import {
   spawnAgentContext,
   truncateOutput,
   undoStack
-} from "./chunk-AXSWLNCU.js";
+} from "./chunk-37WBQV3E.js";
 import {
   buildReviewPrompt,
   buildSecurityReviewPrompt
@@ -150,7 +153,7 @@ import {
   restoreMemoryEntries,
   updateMemoryApproval,
   updateMemoryEntry
-} from "./chunk-ERDFOXYK.js";
+} from "./chunk-JBNNJ32H.js";
 import "./chunk-4DEMGCK4.js";
 import "./chunk-UUSRWSSX.js";
 import "./chunk-CKH4KQ4E.js";
@@ -169,7 +172,7 @@ import {
   buildDoctorReport,
   formatDoctorReport,
   loadContextFiles
-} from "./chunk-EU6NMK7G.js";
+} from "./chunk-C5UAM4X7.js";
 import {
   describePlugin,
   getActivePluginAssets,
@@ -184,14 +187,14 @@ import {
   runTool,
   setPluginEnabled,
   trustPlugin
-} from "./chunk-HEUB5PV6.js";
+} from "./chunk-5G6HX57U.js";
 import "./chunk-RS7SKYTS.js";
 import {
   ProviderRegistry
 } from "./chunk-ALSSNFNK.js";
 import {
   ConfigManager
-} from "./chunk-5F7BGV72.js";
+} from "./chunk-7RC7AN6V.js";
 import {
   CONTENT_ONLY_STREAM_REMINDER,
   TEE_FINAL_USER_NUDGE,
@@ -221,7 +224,7 @@ import {
   maskConfigSecrets
 } from "./chunk-XNFIYS7G.js";
 import "./chunk-4BKXL7SM.js";
-import "./chunk-L7RAEUUN.js";
+import "./chunk-6NEEFOVF.js";
 import {
   AGENTIC_BEHAVIOR_GUIDELINE,
   AUTHOR,
@@ -237,7 +240,7 @@ import {
   SKILLS_DIR_NAME,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-UDFK5Q52.js";
+} from "./chunk-O4CZPTPU.js";
 
 // src/web/server.ts
 import express from "express";
@@ -488,15 +491,6 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
       { configDir: this.hookConfigDir, onSummary: (message) => this.send({ type: "info", message: `[hook] ${message}` }) }
     );
     const preDeny = preToolDecisions.find((d) => d.action === "deny");
-    if (preDeny) {
-      const result = {
-        callId: call.id,
-        content: `[Hook denied] ${preDeny.reason ?? `PreToolUse blocked ${call.name}`}. Do not retry without asking.`,
-        isError: true
-      };
-      this.sendToolCallResult(call, result.content, true);
-      return result;
-    }
     for (const d of preToolDecisions) {
       const warnings = [d.warning, ...d.warnings ?? []].filter(Boolean);
       for (const warning of warnings) this.send({ type: "info", message: `[hook] ${warning}` });
@@ -516,7 +510,19 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
       }
     );
     const networkPermission = checkNetworkPolicy(call.name, call.arguments, this.networkPolicy);
-    if (networkPermission?.action === "confirm" || permission.action === "confirm") {
+    const gate = decideToolGate(call, {
+      dangerLevel,
+      permission,
+      networkPermission,
+      hookDeny: preDeny ? { reason: preDeny.reason } : void 0,
+      sessionAutoMode: this.sessionAutoMode,
+      sessionAutoApprove: this.sessionAutoApprove,
+      classify: () => defaultActionClassifier.classify(call, dangerLevel, {
+        workspaceRoot: this.workspaceRoot,
+        tempDirs: [tmpdir()]
+      })
+    });
+    if (needsPermissionRequestHook({ permission, networkPermission })) {
       runLifecycleHooks(
         this.hookConfig,
         "PermissionRequest",
@@ -524,105 +530,24 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
         { configDir: this.hookConfigDir, onSummary: (message) => this.send({ type: "info", message: "[hook] " + message }) }
       );
     }
-    if (networkPermission?.action === "deny") {
-      const reason = networkPermission.reason ? ` (${networkPermission.reason})` : "";
-      return {
-        callId: call.id,
-        content: `[Permission denied] Tool ${call.name} is blocked by networkPolicy${reason}. Do not retry.`,
-        isError: true
-      };
+    if (gate.kind === "denied") {
+      if (gate.source === "auto-mode") recordRecentlyDeniedAutoAction(call, gate.classification);
+      this.sendToolCallResult(call, gate.message, true);
+      return { callId: call.id, content: gate.message, isError: true };
     }
-    if (permission.action === "deny") {
-      const reason = permission.reason ? ` (${permission.reason})` : "";
-      return {
-        callId: call.id,
-        content: `[Permission denied] Tool ${call.name} is blocked by permission profile "${permission.profileName}"${reason}. Do not retry.`,
-        isError: true
-      };
-    }
-    if (permission.action === "auto-approve" && networkPermission?.action !== "confirm") {
-      this.sendToolCallStart(call);
-      try {
-        const rawContent = await runTool(tool, call.arguments, call.name);
-        const content = truncateOutput(rawContent, call.name);
-        this.sendToolCallResult(call, rawContent, false);
-        runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "ok" });
-        runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "ok" }, { configDir: this.hookConfigDir });
-        return { callId: call.id, content, isError: false };
-      } catch (err) {
-        const message = err instanceof Error ? err.message : err && typeof err === "object" && "message" in err ? String(err.message) : String(err);
-        this.sendToolCallResult(call, message, true);
-        runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
-        runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "error", error: message }, { configDir: this.hookConfigDir });
-        return { callId: call.id, content: message, isError: true };
+    if (gate.kind === "confirm") {
+      if (!toolCallStarted) {
+        this.sendToolCallStart(call);
+        toolCallStarted = true;
       }
-    }
-    const requiresHardConfirmation = permission.action === "confirm" && permission.hardBoundary === true;
-    if ((networkPermission?.action === "confirm" || requiresHardConfirmation) && dangerLevel === "safe") {
-      this.sendToolCallStart(call);
-      toolCallStarted = true;
-      const confirmed = await this.confirm(call, "write");
+      const confirmed = await this.confirm(call, gate.level);
       if (!confirmed) {
-        const rejectionMsg = `[User cancelled] The user declined permission for ${call.name}. Do not retry without asking.`;
+        const rejectionMsg = gate.source === "permission" ? gateMessages.permissionCancelled(call.name) : gateMessages.operationCancelled(call.name, gate.level);
         this.sendToolCallResult(call, rejectionMsg, true);
         return { callId: call.id, content: rejectionMsg, isError: true };
       }
     }
     if (!toolCallStarted) this.sendToolCallStart(call);
-    if (this.sessionAutoMode && networkPermission?.action !== "confirm") {
-      const classification = defaultActionClassifier.classify(call, dangerLevel, {
-        workspaceRoot: this.workspaceRoot,
-        tempDirs: [tmpdir()]
-      });
-      if (classification.decision === "deny") {
-        recordRecentlyDeniedAutoAction(call, classification);
-        const rejectionMsg = `[Auto denied] ${classification.reason}. Do not retry without asking.`;
-        this.sendToolCallResult(call, rejectionMsg, true);
-        return { callId: call.id, content: rejectionMsg, isError: true };
-      }
-      if (classification.decision === "auto-approve" && !requiresHardConfirmation) {
-        this.send({ type: "info", message: `\u26A1 Auto-approved (/auto: ${classification.ruleId})` });
-        try {
-          const rawContent = await runTool(tool, call.arguments, call.name);
-          const content = truncateOutput(rawContent, call.name);
-          this.sendToolCallResult(call, rawContent, false);
-          runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "ok" });
-          runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "ok" }, { configDir: this.hookConfigDir });
-          return { callId: call.id, content, isError: false };
-        } catch (err) {
-          const message = err instanceof Error ? err.message : err && typeof err === "object" && "message" in err ? String(err.message) : String(err);
-          this.sendToolCallResult(call, message, true);
-          runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
-          runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "error", error: message }, { configDir: this.hookConfigDir });
-          return { callId: call.id, content: message, isError: true };
-        }
-      }
-    }
-    if (this.sessionAutoApprove && dangerLevel === "write" && !requiresHardConfirmation) {
-      try {
-        const rawContent = await runTool(tool, call.arguments, call.name);
-        const content = truncateOutput(rawContent, call.name);
-        this.sendToolCallResult(call, rawContent, false);
-        runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "ok" });
-        runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "ok" }, { configDir: this.hookConfigDir });
-        return { callId: call.id, content, isError: false };
-      } catch (err) {
-        const message = err instanceof Error ? err.message : err && typeof err === "object" && "message" in err ? String(err.message) : String(err);
-        this.sendToolCallResult(call, message, true);
-        runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "error" });
-        runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "error", error: message }, { configDir: this.hookConfigDir });
-        return { callId: call.id, content: message, isError: true };
-      }
-    }
-    if (dangerLevel === "write" || dangerLevel === "destructive") {
-      const confirmed = await this.confirm(call, dangerLevel);
-      if (!confirmed) {
-        const label = dangerLevel === "destructive" ? "destructive " : "";
-        const rejectionMsg = `[User cancelled] The user declined the ${label}${call.name} operation. Do not retry without asking.`;
-        this.sendToolCallResult(call, rejectionMsg, true);
-        return { callId: call.id, content: rejectionMsg, isError: true };
-      }
-    }
     try {
       const rawContent = await runTool(tool, call.arguments, call.name);
       const content = truncateOutput(rawContent, call.name);
@@ -995,7 +920,7 @@ Cache:  write=${cacheCreate} read=${cacheRead}` : "";
 Cost:   ${formatCost(cost)}` : "";
   let memoryLine = "";
   try {
-    const { countPendingMemories: countPendingMemories2 } = await import("./persistent-memory-46JSUEYV.js");
+    const { countPendingMemories: countPendingMemories2 } = await import("./persistent-memory-4UR27ACM.js");
     const pending = countPendingMemories2(ctx.config.getConfigDir());
     if (pending > 0) memoryLine = `
 Memory: \u26A0 ${pending} pending approval \u2014 see the Memory panel or /memory`;
@@ -1919,7 +1844,7 @@ async function handleTest(args, ctx) {
       const isCommand = argStr.includes(" ") || /^(mvn|gradle|npm|pytest|cargo|go)\b/.test(argStr);
       testArgs = isCommand ? { command: argStr } : { filter: argStr };
     }
-    const runTests = ctx.runTests ?? (await import("./run-tests-WC644BHH.js")).executeTests;
+    const runTests = ctx.runTests ?? (await import("./run-tests-GGNFI7CL.js")).executeTests;
     const report = await runTests(testArgs);
     ctx.send({ type: "info", message: report });
   } catch (err) {
@@ -2194,7 +2119,7 @@ async function handleMemory(args, ctx) {
   }
   if (intent.kind === "status") {
     const { getChatIndexStatus } = await import("./chat-index-2D5GK2DB.js");
-    const { listMemoryEntries: listMemoryEntries2, isMemoryExpired: isMemoryExpired2, formatMemoryForPrompt: formatMemoryForPrompt2 } = await import("./persistent-memory-46JSUEYV.js");
+    const { listMemoryEntries: listMemoryEntries2, isMemoryExpired: isMemoryExpired2, formatMemoryForPrompt: formatMemoryForPrompt2 } = await import("./persistent-memory-4UR27ACM.js");
     const memories = listMemoryEntries2(configDir, { includeExpired: true, includeRejected: true });
     const injected = formatMemoryForPrompt2(configDir, process.cwd(), ctx.config.get("memory")?.maxChars);
     const view = buildMemoryStatusView({
@@ -2217,7 +2142,7 @@ async function handleMemory(args, ctx) {
     return;
   }
   if (intent.kind === "recall") {
-    const { searchPersistentMemories, touchMemoryReferences } = await import("./persistent-memory-46JSUEYV.js");
+    const { searchPersistentMemories, touchMemoryReferences } = await import("./persistent-memory-4UR27ACM.js");
     const { searchChatMemory } = await import("./chat-index-2D5GK2DB.js");
     const persistentHits = searchPersistentMemories(configDir, intent.query, process.cwd(), 3);
     if (persistentHits.length > 0) {
@@ -2338,7 +2263,7 @@ async function handleMemory(args, ctx) {
     ctx.handleMemoryManage(intent.action, args[1], intent.action === "expire" ? args[2] : void 0);
   } else if (intent.kind === "export") {
     if (args[1] === "md") {
-      const { exportMemoryEntries: exportMemoryEntries2 } = await import("./persistent-memory-46JSUEYV.js");
+      const { exportMemoryEntries: exportMemoryEntries2 } = await import("./persistent-memory-4UR27ACM.js");
       ctx.send({
         type: "export_data",
         format: "md",

package/dist/{server-L4QHJT2I.js → server-THHSJRNI.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import {
   ToolRegistry
-} from "./chunk-AXSWLNCU.js";
+} from "./chunk-37WBQV3E.js";
 import "./chunk-GHWZVPUV.js";
-import "./chunk-ERDFOXYK.js";
+import "./chunk-JBNNJ32H.js";
 import "./chunk-4DEMGCK4.js";
 import "./chunk-UUSRWSSX.js";
 import "./chunk-CKH4KQ4E.js";
@@ -14,7 +14,7 @@ import "./chunk-NYNSYLFY.js";
 import "./chunk-3FEZSLGI.js";
 import {
   runTool
-} from "./chunk-HEUB5PV6.js";
+} from "./chunk-5G6HX57U.js";
 import "./chunk-RS7SKYTS.js";
 import {
   getDangerLevel,
@@ -24,10 +24,10 @@ import "./chunk-TU3L3PW7.js";
 import "./chunk-HOSJZMQS.js";
 import "./chunk-IW3Q7AE5.js";
 import "./chunk-4BKXL7SM.js";
-import "./chunk-L7RAEUUN.js";
+import "./chunk-6NEEFOVF.js";
 import {
   VERSION
-} from "./chunk-UDFK5Q52.js";
+} from "./chunk-O4CZPTPU.js";
 
 // src/mcp/server.ts
 import { createInterface } from "readline";

package/dist/{task-orchestrator-6TVKJYKC.js → task-orchestrator-6HH3KQUQ.js}

@@ -4,9 +4,9 @@ import {
   googleSearchContext,
   isToolCapableProvider,
   truncateOutput
-} from "./chunk-AXSWLNCU.js";
+} from "./chunk-37WBQV3E.js";
 import "./chunk-GHWZVPUV.js";
-import "./chunk-ERDFOXYK.js";
+import "./chunk-JBNNJ32H.js";
 import "./chunk-4DEMGCK4.js";
 import "./chunk-UUSRWSSX.js";
 import "./chunk-CKH4KQ4E.js";
@@ -17,7 +17,7 @@ import "./chunk-NYNSYLFY.js";
 import "./chunk-3FEZSLGI.js";
 import {
   runTool
-} from "./chunk-HEUB5PV6.js";
+} from "./chunk-5G6HX57U.js";
 import "./chunk-RS7SKYTS.js";
 import {
   getDangerLevel,
@@ -29,10 +29,10 @@ import {
   atomicWriteFileSync
 } from "./chunk-IW3Q7AE5.js";
 import "./chunk-4BKXL7SM.js";
-import "./chunk-L7RAEUUN.js";
+import "./chunk-6NEEFOVF.js";
 import {
   SUBAGENT_ALLOWED_TOOLS
-} from "./chunk-UDFK5Q52.js";
+} from "./chunk-O4CZPTPU.js";
 
 // src/hub/task-orchestrator.ts
 import { createInterface } from "readline";

package/dist/{usage-L2PSI2KH.js → usage-UB4ZT5PE.js}

@@ -9,10 +9,10 @@ import {
 import "./chunk-RS7SKYTS.js";
 import {
   ConfigManager
-} from "./chunk-5F7BGV72.js";
+} from "./chunk-7RC7AN6V.js";
 import "./chunk-TU3L3PW7.js";
 import "./chunk-IW3Q7AE5.js";
-import "./chunk-UDFK5Q52.js";
+import "./chunk-O4CZPTPU.js";
 
 // src/cli/usage.ts
 function classifyRowCost(row) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jinzd-ai-cli",
-  "version": "0.4.287",
+  "version": "0.4.288",
   "description": "Cross-platform REPL-style AI CLI with multi-provider support",
   "type": "module",
   "main": "./dist/index.js",