jinzd-ai-cli 0.4.288 → 0.4.289

package/dist/{batch-YAEXKK2C.js → batch-GVD4CZZQ.js}

@@ -4,12 +4,12 @@ import {
 } from "./chunk-RS7SKYTS.js";
 import {
   ConfigManager
-} from "./chunk-7RC7AN6V.js";
+} from "./chunk-2SQCGJ6H.js";
 import "./chunk-TU3L3PW7.js";
 import {
   atomicWriteFileSync
 } from "./chunk-IW3Q7AE5.js";
-import "./chunk-O4CZPTPU.js";
+import "./chunk-25VQORAZ.js";
 
 // src/cli/batch.ts
 import Anthropic from "@anthropic-ai/sdk";

package/dist/{chunk-O4CZPTPU.js → chunk-25VQORAZ.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // src/core/constants.ts
-var VERSION = "0.4.288";
+var VERSION = "0.4.289";
 var APP_NAME = "ai-cli";
 var CONFIG_DIR_NAME = ".aicli";
 var CONFIG_FILE_NAME = "config.json";

package/dist/{chunk-7RC7AN6V.js → chunk-2SQCGJ6H.js}

@@ -11,7 +11,7 @@ import {
   CONFIG_FILE_NAME,
   HISTORY_DIR_NAME,
   PLUGINS_DIR_NAME
-} from "./chunk-O4CZPTPU.js";
+} from "./chunk-25VQORAZ.js";
 
 // src/config/config-manager.ts
 import { readFileSync, existsSync, mkdirSync } from "fs";

package/dist/{chunk-37WBQV3E.js → chunk-AA6PZRJO.js}

@@ -11,7 +11,7 @@ import {
   searchPersistentMemories,
   touchMemoryReferences,
   updateMemoryEntry
-} from "./chunk-JBNNJ32H.js";
+} from "./chunk-TOH67ARY.js";
 import {
   indexProject
 } from "./chunk-4DEMGCK4.js";
@@ -30,7 +30,7 @@ import {
   runHook,
   runLifecycleHooks,
   runTool
-} from "./chunk-5G6HX57U.js";
+} from "./chunk-QL2QACHI.js";
 import {
   buildTruncatedArgumentsError,
   getDangerLevel,
@@ -50,14 +50,15 @@ import {
 } from "./chunk-4BKXL7SM.js";
 import {
   runTestsTool
-} from "./chunk-6NEEFOVF.js";
+} from "./chunk-BDN6ZCPQ.js";
 import {
   CONFIG_DIR_NAME,
   DEFAULT_MAX_TOOL_OUTPUT_CHARS_CAP,
+  PLAN_MODE_READONLY_TOOLS,
   SUBAGENT_ALLOWED_TOOLS,
   SUBAGENT_DEFAULT_MAX_ROUNDS,
   SUBAGENT_MAX_ROUNDS_LIMIT
-} from "./chunk-O4CZPTPU.js";
+} from "./chunk-25VQORAZ.js";
 
 // src/tools/shell-pool.ts
 import { spawn as spawn2 } from "child_process";
@@ -1633,6 +1634,7 @@ var gateMessages = {
   hookDenied: (toolName, reason) => `[Hook denied] ${reason ?? `PreToolUse blocked ${toolName}`}. Do not retry without asking.`,
   networkDenied: (toolName, reason) => `[Permission denied] Tool ${toolName} is blocked by networkPolicy${reason ? ` (${reason})` : ""}. Do not retry.`,
   profileDenied: (toolName, profileName, reason) => `[Permission denied] Tool ${toolName} is blocked by permission profile "${profileName}"${reason ? ` (${reason})` : ""}. Do not retry.`,
+  planModeDenied: (toolName) => `[Plan Mode] ${toolName} is disabled in read-only Plan Mode. Do not retry it. Use read_file / list_dir / grep_files / glob_files to investigate, and write_todos to present your plan. If the user wants this executed, tell them to type /plan execute first.`,
   autoDenied: (reason) => `[Auto denied] ${reason}. Do not retry without asking.`,
   permissionCancelled: (toolName) => `[User cancelled] The user declined permission for ${toolName}. Do not retry without asking.`,
   operationCancelled: (toolName, level) => `[User cancelled] The user declined the ${level === "destructive" ? "destructive " : ""}${toolName} operation. Do not retry without asking.`
@@ -1645,6 +1647,9 @@ function decideToolGate(call, input) {
   if (input.hookDeny) {
     return { kind: "denied", source: "hook", message: gateMessages.hookDenied(call.name, input.hookDeny.reason) };
   }
+  if (input.planMode && !PLAN_MODE_READONLY_TOOLS.has(call.name)) {
+    return { kind: "denied", source: "plan-mode", message: gateMessages.planModeDenied(call.name) };
+  }
   if (networkPermission?.action === "deny") {
     return { kind: "denied", source: "network", message: gateMessages.networkDenied(call.name, networkPermission.reason) };
   }
@@ -2259,6 +2264,14 @@ var ToolExecutor = class {
   sessionAutoApprove = false;
   /** Session-level Auto Mode: rule-based low-risk auto approval. */
   sessionAutoMode = false;
+  /**
+   * Plan Mode（只读规划模式）。由宿主在每轮开始前同步。
+   *
+   * 必须在**执行层**也知道它：Plan Mode 此前只过滤"给模型看的工具清单"，模型一旦吐出
+   * 白名单外的调用，executor 一无所知照常执行，而 `alwaysYolo` 下 write 级还会被直接
+   * 放行——只读保护形同虚设（审计 P2-01）。
+   */
+  planMode = false;
   /**
    * Logical session key used to scope per-session state in stateful tools
    * (currently only `bash`'s persistent cwd). Web mode sets this per-tab so
@@ -2371,6 +2384,7 @@ var ToolExecutor = class {
       permission,
       networkPermission,
       hookDeny: preDeny ? { reason: preDeny.reason } : void 0,
+      planMode: this.planMode,
       sessionAutoMode: this.sessionAutoMode,
       sessionAutoApprove: this.sessionAutoApprove,
       classify: () => defaultActionClassifier.classify(call, dangerLevel, {

package/dist/{chunk-6NEEFOVF.js → chunk-BDN6ZCPQ.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   TEST_TIMEOUT
-} from "./chunk-O4CZPTPU.js";
+} from "./chunk-25VQORAZ.js";
 
 // src/tools/builtin/run-tests.ts
 import { execSync, spawnSync } from "child_process";

package/dist/{chunk-NJDQCQ7P.js → chunk-BW4H53KI.js}

@@ -16,7 +16,7 @@ import {
   setPreferredAgentName,
   truncateForPersist,
   undoStack
-} from "./chunk-37WBQV3E.js";
+} from "./chunk-AA6PZRJO.js";
 import {
   buildReviewPrompt,
   buildSecurityReviewPrompt
@@ -51,7 +51,7 @@ import {
   touchMemoryReferences,
   updateMemoryApproval,
   updateMemoryEntry
-} from "./chunk-JBNNJ32H.js";
+} from "./chunk-TOH67ARY.js";
 import {
   theme
 } from "./chunk-5C76XDDF.js";
@@ -65,7 +65,7 @@ import {
 import {
   buildDoctorReport,
   formatDoctorReport
-} from "./chunk-C5UAM4X7.js";
+} from "./chunk-VIDUFFHT.js";
 import {
   describePlugin,
   getActivePluginAssets,
@@ -80,7 +80,7 @@ import {
   trustHook,
   trustPlugin,
   untrustHook
-} from "./chunk-5G6HX57U.js";
+} from "./chunk-QL2QACHI.js";
 import {
   isCleanDocumentBody,
   stripOuterCodeFence
@@ -109,7 +109,7 @@ import {
   MCP_TOOL_PREFIX,
   REPO_URL,
   VERSION
-} from "./chunk-O4CZPTPU.js";
+} from "./chunk-25VQORAZ.js";
 
 // src/mcp/client.ts
 import { spawn } from "child_process";
@@ -2393,7 +2393,7 @@ No tools match "${filter}".
           const { join: join6 } = await import("path");
           const { existsSync: existsSync6 } = await import("fs");
           const { getGitRoot } = await import("./git-context-EXOEHQSF.js");
-          const { MCP_PROJECT_CONFIG_NAME } = await import("./constants-T2B3SBMR.js");
+          const { MCP_PROJECT_CONFIG_NAME } = await import("./constants-GBIMYBKD.js");
           const { approveProject, hashMcpFile } = await import("./project-trust-NKYHL3VZ.js");
           const cwd = process.cwd();
           const projectRoot = getGitRoot(cwd) ?? cwd;
@@ -3497,7 +3497,7 @@ function createReviewCommands() {
       usage: "/test [command|filter]",
       async execute(args, ctx) {
         try {
-          const { executeTests } = await import("./run-tests-GGNFI7CL.js");
+          const { executeTests } = await import("./run-tests-CSAB2M4A.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {

package/dist/{chunk-EYA4IXQJ.js → chunk-GXB5EOFI.js}

@@ -12,7 +12,7 @@ import {
   MEMORY_FILE_NAME,
   MEMORY_MAX_CHARS,
   MEMORY_STORE_FILE_NAME
-} from "./chunk-U4NQ2IRE.js";
+} from "./chunk-NWM7CTQQ.js";
 
 // src/memory/persistent-memory.ts
 import { copyFileSync, existsSync, mkdirSync, readFileSync, statSync } from "fs";

package/dist/{chunk-E66SCDTD.js → chunk-I73JWHNT.js}

@@ -1,6 +1,6 @@
 import {
   TEST_TIMEOUT
-} from "./chunk-U4NQ2IRE.js";
+} from "./chunk-NWM7CTQQ.js";
 
 // src/tools/builtin/run-tests.ts
 import { execSync, spawnSync } from "child_process";

package/dist/{chunk-WQ2YQ5YC.js → chunk-NP446QJS.js}

@@ -2,7 +2,7 @@
 import {
   evaluateCiGate,
   normalizeCiThresholds
-} from "./chunk-G5QZS5TN.js";
+} from "./chunk-TKG6BI6G.js";
 import {
   buildReviewPrompt,
   buildSecurityReviewPrompt,
@@ -16,10 +16,10 @@ import {
 } from "./chunk-ALSSNFNK.js";
 import {
   ConfigManager
-} from "./chunk-7RC7AN6V.js";
+} from "./chunk-2SQCGJ6H.js";
 import {
   VERSION
-} from "./chunk-O4CZPTPU.js";
+} from "./chunk-25VQORAZ.js";
 
 // src/cli/ci.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-U4NQ2IRE.js → chunk-NWM7CTQQ.js}

@@ -1,5 +1,5 @@
 // src/core/constants.ts
-var VERSION = "0.4.288";
+var VERSION = "0.4.289";
 var APP_NAME = "ai-cli";
 var CONFIG_DIR_NAME = ".aicli";
 var CONFIG_FILE_NAME = "config.json";

package/dist/{chunk-5G6HX57U.js → chunk-QL2QACHI.js}

@@ -8,7 +8,7 @@ import {
 import {
   CONFIG_DIR_NAME,
   PLUGINS_DIR_NAME
-} from "./chunk-O4CZPTPU.js";
+} from "./chunk-25VQORAZ.js";
 
 // src/diagnostics/tool-stats.ts
 import { mkdirSync } from "fs";

package/dist/{chunk-G5QZS5TN.js → chunk-TKG6BI6G.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   VERSION
-} from "./chunk-O4CZPTPU.js";
+} from "./chunk-25VQORAZ.js";
 
 // src/cli/ci-format.ts
 var DEFAULT_CI_THRESHOLDS = {

package/dist/{chunk-JBNNJ32H.js → chunk-TOH67ARY.js}

@@ -13,7 +13,7 @@ import {
   MEMORY_FILE_NAME,
   MEMORY_MAX_CHARS,
   MEMORY_STORE_FILE_NAME
-} from "./chunk-O4CZPTPU.js";
+} from "./chunk-25VQORAZ.js";
 
 // src/memory/persistent-memory.ts
 import { copyFileSync, existsSync, mkdirSync, readFileSync, statSync } from "fs";

package/dist/{chunk-C5UAM4X7.js → chunk-VIDUFFHT.js}

@@ -8,13 +8,13 @@ import {
   listHooks,
   listInstalledPlugins,
   resetStats
-} from "./chunk-5G6HX57U.js";
+} from "./chunk-QL2QACHI.js";
 import {
   ProviderRegistry
 } from "./chunk-ALSSNFNK.js";
 import {
   ConfigManager
-} from "./chunk-7RC7AN6V.js";
+} from "./chunk-2SQCGJ6H.js";
 import {
   getGitRoot
 } from "./chunk-HOSJZMQS.js";
@@ -26,7 +26,7 @@ import {
   MCP_PROJECT_CONFIG_NAME,
   MEMORY_FILE_NAME,
   VERSION
-} from "./chunk-O4CZPTPU.js";
+} from "./chunk-25VQORAZ.js";
 
 // src/diagnostics/doctor-report.ts
 import { existsSync as existsSync3, statSync as statSync2 } from "fs";

package/dist/{ci-RO2NLIRH.js → ci-U7X5OWOA.js}

@@ -3,16 +3,16 @@ import {
   CI_COMMENT_MARKER,
   countSeverity,
   runCi
-} from "./chunk-WQ2YQ5YC.js";
-import "./chunk-G5QZS5TN.js";
+} from "./chunk-NP446QJS.js";
+import "./chunk-TKG6BI6G.js";
 import "./chunk-HLWUDRBO.js";
 import "./chunk-6YZEZFX5.js";
 import "./chunk-ALSSNFNK.js";
-import "./chunk-7RC7AN6V.js";
+import "./chunk-2SQCGJ6H.js";
 import "./chunk-TEXT4DAT.js";
 import "./chunk-TU3L3PW7.js";
 import "./chunk-IW3Q7AE5.js";
-import "./chunk-O4CZPTPU.js";
+import "./chunk-25VQORAZ.js";
 export {
   CI_COMMENT_MARKER,
   countSeverity,

package/dist/{ci-format-GBSRK2J4.js → ci-format-PDP5K5LR.js}

@@ -6,8 +6,8 @@ import {
   formatCiResult,
   formatCiSarif,
   normalizeCiThresholds
-} from "./chunk-G5QZS5TN.js";
-import "./chunk-O4CZPTPU.js";
+} from "./chunk-TKG6BI6G.js";
+import "./chunk-25VQORAZ.js";
 export {
   DEFAULT_CI_THRESHOLDS,
   detectCiGateSignals,

package/dist/{constants-T2B3SBMR.js → constants-GBIMYBKD.js}

@@ -38,7 +38,7 @@ import {
   TEST_TIMEOUT,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-O4CZPTPU.js";
+} from "./chunk-25VQORAZ.js";
 export {
   AGENTIC_BEHAVIOR_GUIDELINE,
   APP_NAME,

package/dist/{constants-JQP6BENR.js → constants-MYTDRODA.js}

@@ -37,7 +37,7 @@ import {
   TEST_TIMEOUT,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-U4NQ2IRE.js";
+} from "./chunk-NWM7CTQQ.js";
 export {
   AGENTIC_BEHAVIOR_GUIDELINE,
   APP_NAME,

package/dist/{doctor-cli-CVOE7FAE.js → doctor-cli-64WRAKH3.js}

@@ -2,16 +2,16 @@
 import {
   formatDoctorReport,
   runDoctorCli
-} from "./chunk-C5UAM4X7.js";
-import "./chunk-5G6HX57U.js";
+} from "./chunk-VIDUFFHT.js";
+import "./chunk-QL2QACHI.js";
 import "./chunk-RS7SKYTS.js";
 import "./chunk-ALSSNFNK.js";
-import "./chunk-7RC7AN6V.js";
+import "./chunk-2SQCGJ6H.js";
 import "./chunk-TEXT4DAT.js";
 import "./chunk-TU3L3PW7.js";
 import "./chunk-HOSJZMQS.js";
 import "./chunk-IW3Q7AE5.js";
-import "./chunk-O4CZPTPU.js";
+import "./chunk-25VQORAZ.js";
 export {
   formatDoctorReport,
   runDoctorCli

package/dist/electron-server.js

@@ -50,7 +50,7 @@ import {
   touchMemoryReferences,
   updateMemoryApproval,
   updateMemoryEntry
-} from "./chunk-EYA4IXQJ.js";
+} from "./chunk-GXB5EOFI.js";
 import {
   DEFAULT_PATTERNS,
   redactJson,
@@ -66,7 +66,7 @@ import {
 } from "./chunk-CGLYJRFA.js";
 import {
   runTestsTool
-} from "./chunk-E66SCDTD.js";
+} from "./chunk-I73JWHNT.js";
 import {
   AGENTIC_BEHAVIOR_GUIDELINE,
   APP_NAME,
@@ -100,7 +100,7 @@ import {
   SUBAGENT_MAX_ROUNDS_LIMIT,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-U4NQ2IRE.js";
+} from "./chunk-NWM7CTQQ.js";
 
 // src/web/server.ts
 import express from "express";
@@ -7267,6 +7267,7 @@ var gateMessages = {
   hookDenied: (toolName, reason) => `[Hook denied] ${reason ?? `PreToolUse blocked ${toolName}`}. Do not retry without asking.`,
   networkDenied: (toolName, reason) => `[Permission denied] Tool ${toolName} is blocked by networkPolicy${reason ? ` (${reason})` : ""}. Do not retry.`,
   profileDenied: (toolName, profileName, reason) => `[Permission denied] Tool ${toolName} is blocked by permission profile "${profileName}"${reason ? ` (${reason})` : ""}. Do not retry.`,
+  planModeDenied: (toolName) => `[Plan Mode] ${toolName} is disabled in read-only Plan Mode. Do not retry it. Use read_file / list_dir / grep_files / glob_files to investigate, and write_todos to present your plan. If the user wants this executed, tell them to type /plan execute first.`,
   autoDenied: (reason) => `[Auto denied] ${reason}. Do not retry without asking.`,
   permissionCancelled: (toolName) => `[User cancelled] The user declined permission for ${toolName}. Do not retry without asking.`,
   operationCancelled: (toolName, level) => `[User cancelled] The user declined the ${level === "destructive" ? "destructive " : ""}${toolName} operation. Do not retry without asking.`
@@ -7279,6 +7280,9 @@ function decideToolGate(call, input) {
   if (input.hookDeny) {
     return { kind: "denied", source: "hook", message: gateMessages.hookDenied(call.name, input.hookDeny.reason) };
   }
+  if (input.planMode && !PLAN_MODE_READONLY_TOOLS.has(call.name)) {
+    return { kind: "denied", source: "plan-mode", message: gateMessages.planModeDenied(call.name) };
+  }
   if (networkPermission?.action === "deny") {
     return { kind: "denied", source: "network", message: gateMessages.networkDenied(call.name, networkPermission.reason) };
   }
@@ -8025,6 +8029,14 @@ var ToolExecutor = class {
   sessionAutoApprove = false;
   /** Session-level Auto Mode: rule-based low-risk auto approval. */
   sessionAutoMode = false;
+  /**
+   * Plan Mode（只读规划模式）。由宿主在每轮开始前同步。
+   *
+   * 必须在**执行层**也知道它：Plan Mode 此前只过滤"给模型看的工具清单"，模型一旦吐出
+   * 白名单外的调用，executor 一无所知照常执行，而 `alwaysYolo` 下 write 级还会被直接
+   * 放行——只读保护形同虚设（审计 P2-01）。
+   */
+  planMode = false;
   /**
    * Logical session key used to scope per-session state in stateful tools
    * (currently only `bash`'s persistent cwd). Web mode sets this per-tab so
@@ -8137,6 +8149,7 @@ var ToolExecutor = class {
       permission,
       networkPermission,
       hookDeny: preDeny ? { reason: preDeny.reason } : void 0,
+      planMode: this.planMode,
       sessionAutoMode: this.sessionAutoMode,
       sessionAutoApprove: this.sessionAutoApprove,
       classify: () => defaultActionClassifier.classify(call, dangerLevel, {
@@ -13803,6 +13816,14 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
   sessionAutoApprove = false;
   /** Session-level Auto Mode: rule-based low-risk auto approval. */
   sessionAutoMode = false;
+  /**
+   * Plan Mode（只读规划模式）。由宿主在每轮开始前同步。
+   *
+   * 必须在**执行层**也知道它：Plan Mode 此前只过滤"给模型看的工具清单"，模型一旦吐出
+   * 白名单外的调用，executor 一无所知照常执行，而 `alwaysYolo` 下 write 级还会被直接
+   * 放行——只读保护形同虚设（审计 P2-01）。
+   */
+  planMode = false;
   /** Track tool start times for duration calculation */
   toolStartTimes = /* @__PURE__ */ new Map();
   /**
@@ -14032,6 +14053,7 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
       permission,
       networkPermission,
       hookDeny: preDeny ? { reason: preDeny.reason } : void 0,
+      planMode: this.planMode,
       sessionAutoMode: this.sessionAutoMode,
       sessionAutoApprove: this.sessionAutoApprove,
       classify: () => defaultActionClassifier.classify(call, dangerLevel, {
@@ -16879,7 +16901,7 @@ Cache:  write=${cacheCreate} read=${cacheRead}` : "";
 Cost:   ${formatCost(cost)}` : "";
   let memoryLine = "";
   try {
-    const { countPendingMemories: countPendingMemories2 } = await import("./persistent-memory-LFE3YHZO.js");
+    const { countPendingMemories: countPendingMemories2 } = await import("./persistent-memory-7PPH6QES.js");
     const pending = countPendingMemories2(ctx.config.getConfigDir());
     if (pending > 0) memoryLine = `
 Memory: \u26A0 ${pending} pending approval \u2014 see the Memory panel or /memory`;
@@ -17862,7 +17884,7 @@ async function handleTest(args, ctx) {
       const isCommand = argStr.includes(" ") || /^(mvn|gradle|npm|pytest|cargo|go)\b/.test(argStr);
       testArgs = isCommand ? { command: argStr } : { filter: argStr };
     }
-    const runTests = ctx.runTests ?? (await import("./run-tests-R3JB4UEI.js")).executeTests;
+    const runTests = ctx.runTests ?? (await import("./run-tests-PPTDYVS7.js")).executeTests;
     const report = await runTests(testArgs);
     ctx.send({ type: "info", message: report });
   } catch (err) {
@@ -18252,7 +18274,7 @@ async function handleMemory(args, ctx) {
   }
   if (intent.kind === "status") {
     const { getChatIndexStatus: getChatIndexStatus2 } = await import("./chat-index-DGUOUUQW.js");
-    const { listMemoryEntries: listMemoryEntries2, isMemoryExpired: isMemoryExpired2, formatMemoryForPrompt: formatMemoryForPrompt2 } = await import("./persistent-memory-LFE3YHZO.js");
+    const { listMemoryEntries: listMemoryEntries2, isMemoryExpired: isMemoryExpired2, formatMemoryForPrompt: formatMemoryForPrompt2 } = await import("./persistent-memory-7PPH6QES.js");
     const memories = listMemoryEntries2(configDir, { includeExpired: true, includeRejected: true });
     const injected = formatMemoryForPrompt2(configDir, process.cwd(), ctx.config.get("memory")?.maxChars);
     const view = buildMemoryStatusView({
@@ -18275,7 +18297,7 @@ async function handleMemory(args, ctx) {
     return;
   }
   if (intent.kind === "recall") {
-    const { searchPersistentMemories: searchPersistentMemories2, touchMemoryReferences: touchMemoryReferences2 } = await import("./persistent-memory-LFE3YHZO.js");
+    const { searchPersistentMemories: searchPersistentMemories2, touchMemoryReferences: touchMemoryReferences2 } = await import("./persistent-memory-7PPH6QES.js");
     const { searchChatMemory: searchChatMemory2 } = await import("./chat-index-DGUOUUQW.js");
     const persistentHits = searchPersistentMemories2(configDir, intent.query, process.cwd(), 3);
     if (persistentHits.length > 0) {
@@ -18396,7 +18418,7 @@ async function handleMemory(args, ctx) {
     ctx.handleMemoryManage(intent.action, args[1], intent.action === "expire" ? args[2] : void 0);
   } else if (intent.kind === "export") {
     if (args[1] === "md") {
-      const { exportMemoryEntries: exportMemoryEntries2 } = await import("./persistent-memory-LFE3YHZO.js");
+      const { exportMemoryEntries: exportMemoryEntries2 } = await import("./persistent-memory-7PPH6QES.js");
       ctx.send({
         type: "export_data",
         format: "md",
@@ -19401,7 +19423,7 @@ No tools match "${filter}".
           const { join: join29 } = await import("path");
           const { existsSync: existsSync33 } = await import("fs");
           const { getGitRoot: getGitRoot2 } = await import("./git-context-VNCA2GU7.js");
-          const { MCP_PROJECT_CONFIG_NAME: MCP_PROJECT_CONFIG_NAME2 } = await import("./constants-JQP6BENR.js");
+          const { MCP_PROJECT_CONFIG_NAME: MCP_PROJECT_CONFIG_NAME2 } = await import("./constants-MYTDRODA.js");
           const { approveProject, hashMcpFile } = await import("./project-trust-MUG325AW.js");
           const cwd = process.cwd();
           const projectRoot = getGitRoot2(cwd) ?? cwd;
@@ -20316,7 +20338,7 @@ function createReviewCommands() {
       usage: "/test [command|filter]",
       async execute(args, ctx) {
         try {
-          const { executeTests } = await import("./run-tests-R3JB4UEI.js");
+          const { executeTests } = await import("./run-tests-PPTDYVS7.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {
@@ -22813,7 +22835,7 @@ var SessionHandler = class {
         ...simpleReasoning ? { reasoningContent: simpleReasoning } : {}
       });
     } catch (err) {
-      if (err.name === "AbortError") {
+      if (isAbortError(err)) {
         this.send({ type: "info", message: "[interrupted]" });
       } else {
         throw err;
@@ -22830,7 +22852,7 @@ var SessionHandler = class {
     const autoPauseIntervalRaw = this.config.get("autoPauseInterval");
     const autoPauseInterval = typeof autoPauseIntervalRaw === "number" ? autoPauseIntervalRaw : 50;
     const { stable: toolStable, volatile: toolVolatile } = this.buildSystemPrompt();
-    const roundBudgetHint = buildRoundBudgetHint({ maxToolRounds, autoPauseInterval });
+    const roundBudgetHint = buildRoundBudgetHint({ maxToolRounds, autoPauseInterval, planMode: this.planMode });
     const systemPrompt = toolStable + TOOL_CALL_REMINDER + roundBudgetHint + (mcpBudgetNote ? `
 
 ${mcpBudgetNote}` : "");
@@ -23133,7 +23155,7 @@ ${summaryContent}`,
         this.send({ type: "info", message: "[interrupted]" });
       }
     } catch (err) {
-      if (err.name === "AbortError") {
+      if (isAbortError(err)) {
         this.send({ type: "info", message: "[interrupted]" });
       } else {
         throw err;
@@ -23746,6 +23768,7 @@ Backup saved: ${result.backupPath}` : "";
     };
   }
   getFilteredToolDefs() {
+    this.toolExecutor.planMode = this.planMode;
     if (this.planMode) {
       return {
         toolDefs: this.toolRegistry.getDefinitions().filter((t) => PLAN_MODE_READONLY_TOOLS.has(t.name)),

package/dist/{hub-LFWL5PGH.js → hub-FSITPTD5.js}

@@ -158,7 +158,7 @@ ${content}`);
   }
 }
 async function runTaskMode(config, providers, configManager, topic) {
-  const { TaskOrchestrator } = await import("./task-orchestrator-6HH3KQUQ.js");
+  const { TaskOrchestrator } = await import("./task-orchestrator-HA4JE4TF.js");
   const orchestrator = new TaskOrchestrator(config, providers, configManager);
   let interrupted = false;
   const onSigint = () => {

package/dist/index.js

@@ -24,7 +24,7 @@ import {
   setupProxy,
   snapshotFile,
   stripRoutingTags
-} from "./chunk-NJDQCQ7P.js";
+} from "./chunk-BW4H53KI.js";
 import {
   CostTracker,
   getPricing,
@@ -49,7 +49,7 @@ import {
   setMaxOutputCap,
   spawnAgentContext,
   undoStack
-} from "./chunk-37WBQV3E.js";
+} from "./chunk-AA6PZRJO.js";
 import "./chunk-HLWUDRBO.js";
 import {
   NO_THINKING,
@@ -62,7 +62,7 @@ import {
   countPendingMemories,
   detectStaleLegacyMarkdownEdit,
   formatMemoryForPrompt
-} from "./chunk-JBNNJ32H.js";
+} from "./chunk-TOH67ARY.js";
 import "./chunk-4DEMGCK4.js";
 import "./chunk-UUSRWSSX.js";
 import "./chunk-CKH4KQ4E.js";
@@ -83,14 +83,14 @@ import {
 import {
   loadContextFiles,
   writeCrashLog
-} from "./chunk-C5UAM4X7.js";
+} from "./chunk-VIDUFFHT.js";
 import {
   getActivePluginAssets,
   getPendingHookTrust,
   installFlushOnExit,
   mergePluginHooks,
   runLifecycleHooks
-} from "./chunk-5G6HX57U.js";
+} from "./chunk-QL2QACHI.js";
 import "./chunk-RS7SKYTS.js";
 import {
   ProviderRegistry,
@@ -98,7 +98,7 @@ import {
 } from "./chunk-ALSSNFNK.js";
 import {
   ConfigManager
-} from "./chunk-7RC7AN6V.js";
+} from "./chunk-2SQCGJ6H.js";
 import {
   CONTENT_ONLY_STREAM_REMINDER,
   TEE_FINAL_USER_NUDGE,
@@ -132,7 +132,7 @@ import {
 } from "./chunk-IW3Q7AE5.js";
 import "./chunk-XNFIYS7G.js";
 import "./chunk-4BKXL7SM.js";
-import "./chunk-6NEEFOVF.js";
+import "./chunk-BDN6ZCPQ.js";
 import {
   AGENTIC_BEHAVIOR_GUIDELINE,
   AUTHOR,
@@ -149,7 +149,7 @@ import {
   SKILLS_DIR_NAME,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-O4CZPTPU.js";
+} from "./chunk-25VQORAZ.js";
 
 // src/index.ts
 import { program } from "commander";
@@ -3028,6 +3028,7 @@ Session '${this.resumeSessionId}' not found.
     let toolDefs;
     let mcpBudgetNote = null;
     const usedMcpToolNames = /* @__PURE__ */ new Set();
+    this.toolExecutor.planMode = this.planMode;
     if (this.planMode) {
       toolDefs = this.toolRegistry.getDefinitions().filter((t) => PLAN_MODE_READONLY_TOOLS.has(t.name));
     } else {
@@ -3990,7 +3991,7 @@ program.command("web").description("Start Web UI server with browser-based chat
     console.error("Error: Invalid port number. Must be between 1 and 65535.");
     process.exit(1);
   }
-  const { startWebServer } = await import("./server-I6DXVJRO.js");
+  const { startWebServer } = await import("./server-6B2JFKRN.js");
   await startWebServer({ port, host: options.host });
 });
 program.command("user [action] [username]").description("Manage Web UI users (list | create <name> | delete <name> | reset-password <name> | logout-all <name> | migrate <name>)").action(async (action, username) => {
@@ -4157,11 +4158,11 @@ program.command("sessions").description("List recent conversation sessions").opt
   console.log(footer + "\n");
 });
 program.command("usage").description("Show token + cost usage grouped by provider/model (cross-session)").option("--days <n>", "Only the last N days (inclusive of today)").option("--month <ym>", "Only a specific month, format YYYY-MM (e.g. 2026-06)").option("--json", "Output as JSON (for scripting)").action(async (options) => {
-  const { runUsageCli } = await import("./usage-UB4ZT5PE.js");
+  const { runUsageCli } = await import("./usage-HX6MPQT2.js");
   await runUsageCli(options);
 });
 program.command("doctor").description("Health check: API keys, config, MCP, recent crashes, tool usage, disk usage").option("--json", "Output as JSON (for scripting)").option("--reset-stats", "Reset accumulated tool usage statistics").action(async (options) => {
-  const { runDoctorCli } = await import("./doctor-cli-CVOE7FAE.js");
+  const { runDoctorCli } = await import("./doctor-cli-64WRAKH3.js");
   const argv = process.argv.slice(2);
   await runDoctorCli({
     json: !!options.json || argv.includes("--json"),
@@ -4170,7 +4171,7 @@ program.command("doctor").description("Health check: API keys, config, MCP, rece
 });
 program.command("batch <action> [arg] [arg2]").description("Anthropic Message Batches: submit | list | status <id> | results <id> [out] | cancel <id>").option("--dry-run", "Parse and validate input without submitting (submit only)").action(async (action, arg, arg2, options) => {
   try {
-    const batch = await import("./batch-YAEXKK2C.js");
+    const batch = await import("./batch-GVD4CZZQ.js");
     switch (action) {
       case "submit":
         if (!arg) {
@@ -4213,7 +4214,7 @@ program.command("batch <action> [arg] [arg2]").description("Anthropic Message Ba
   }
 });
 program.command("mcp-serve").description("Start an MCP server over STDIO, exposing aicli's built-in tools to Claude Desktop / Cursor / other MCP clients").option("--allow-destructive", "Allow bash / run_interactive / task_create (always destructive in MCP mode)").option("--allow-outside-cwd", "Allow tool path arguments to escape the sandbox root \u2014 disabled by default").option("--tools <list>", "Comma-separated whitelist of tools to expose (default: all eligible tools)").option("--cwd <path>", "Working directory AND sandbox root (default: current directory)").action(async (options) => {
-  const { startMcpServer } = await import("./server-THHSJRNI.js");
+  const { startMcpServer } = await import("./server-O54U4OOB.js");
   await startMcpServer({
     allowDestructive: !!options.allowDestructive,
     allowOutsideCwd: !!options.allowOutsideCwd,
@@ -4226,7 +4227,7 @@ program.command("pr <action> [target]").description("PR review helpers: review |
     console.error(`Unknown pr action: ${action}. Use review | security-review | summarize.`);
     process.exit(1);
   }
-  const { runPrCli } = await import("./pr-3QAG7XO7.js");
+  const { runPrCli } = await import("./pr-T7VURNFJ.js");
   const result = await runPrCli({
     action,
     target,
@@ -4246,8 +4247,8 @@ program.command("pr <action> [target]").description("PR review helpers: review |
   process.exit(result.exitCode);
 });
 program.command("ci").description("Headless PR review (code + security) \u2014 reads git/gh diff, optionally posts to PR. Designed for GitHub Actions.").option("--pr <num>", "PR number or URL; diff fetched via gh pr diff <value>", (v) => /^#?\d+$/.test(v) ? parseInt(v.replace(/^#/, ""), 10) : v).option("--base <ref>", "Base ref for git diff <ref>...HEAD (ignored when --pr set)").option("--post", "Post review as a PR comment (requires gh CLI + GH_TOKEN, needs --pr)").option("--no-update", "Always create a new comment instead of updating the previous aicli review").option("--skip-code", "Skip the code review section").option("--skip-security", "Skip the security review section").option("--detailed", "Use the detailed code-review prompt").option("--max-diff <n>", "Max diff chars sent to the model (default 30000)", (v) => parseInt(v, 10)).option("--provider <id>", "Override provider (default: config.defaultProvider)").option("--model <id>", "Override model").option("--dry-run", "Print result to stdout instead of posting (overrides --post)").option("--json", "Output a structured JSON report").option("--markdown", "Output Markdown report (default)").option("--sarif", "Output SARIF 2.1.0 for code scanning artifacts").option("--fail-on-security-high", "Fail when the security review contains HIGH/CRITICAL findings (default)").option("--no-fail-on-security-high", "Do not fail on security HIGH/CRITICAL findings").option("--fail-on-test-failure", "Fail when the report mentions test failures (default)").option("--no-fail-on-test-failure", "Do not fail on test failure findings").option("--fail-on-lint-failure", "Fail when the report mentions lint/typecheck failures (default)").option("--no-fail-on-lint-failure", "Do not fail on lint/typecheck failure findings").action(async (options) => {
-  const { runCi } = await import("./ci-RO2NLIRH.js");
-  const { formatCiResult } = await import("./ci-format-GBSRK2J4.js");
+  const { runCi } = await import("./ci-U7X5OWOA.js");
+  const { formatCiResult } = await import("./ci-format-PDP5K5LR.js");
   const formats = [options.json, options.markdown, options.sarif].filter(Boolean).length;
   if (formats > 1) {
     console.error("Choose only one output format: --json, --markdown, or --sarif.");
@@ -4405,7 +4406,7 @@ program.command("hub [topic]").description("Start multi-agent hub (discuss / bra
     config.get("customProviders"),
     config.getConfigDir()
   );
-  const { startHub } = await import("./hub-LFWL5PGH.js");
+  const { startHub } = await import("./hub-FSITPTD5.js");
   await startHub(
     {
       topic: topic ?? "",

package/dist/{persistent-memory-4UR27ACM.js → persistent-memory-7GPL7NSO.js}

@@ -28,11 +28,11 @@ import {
   touchMemoryReferences,
   updateMemoryApproval,
   updateMemoryEntry
-} from "./chunk-JBNNJ32H.js";
+} from "./chunk-TOH67ARY.js";
 import "./chunk-3FEZSLGI.js";
 import "./chunk-HOSJZMQS.js";
 import "./chunk-IW3Q7AE5.js";
-import "./chunk-O4CZPTPU.js";
+import "./chunk-25VQORAZ.js";
 export {
   addMemoryEntry,
   backupMemoryStore,

package/dist/{persistent-memory-LFE3YHZO.js → persistent-memory-7PPH6QES.js}

@@ -27,11 +27,11 @@ import {
   touchMemoryReferences,
   updateMemoryApproval,
   updateMemoryEntry
-} from "./chunk-EYA4IXQJ.js";
+} from "./chunk-GXB5EOFI.js";
 import "./chunk-FSC6KEWU.js";
 import "./chunk-6BUTA5VW.js";
 import "./chunk-CGLYJRFA.js";
-import "./chunk-U4NQ2IRE.js";
+import "./chunk-NWM7CTQQ.js";
 export {
   addMemoryEntry,
   backupMemoryStore,

package/dist/{pr-3QAG7XO7.js → pr-T7VURNFJ.js}

@@ -2,8 +2,8 @@
 import {
   countSeverity,
   runCi
-} from "./chunk-WQ2YQ5YC.js";
-import "./chunk-G5QZS5TN.js";
+} from "./chunk-NP446QJS.js";
+import "./chunk-TKG6BI6G.js";
 import {
   buildReviewPrompt,
   buildSecurityReviewPrompt,
@@ -17,13 +17,13 @@ import {
 } from "./chunk-ALSSNFNK.js";
 import {
   ConfigManager
-} from "./chunk-7RC7AN6V.js";
+} from "./chunk-2SQCGJ6H.js";
 import "./chunk-TEXT4DAT.js";
 import "./chunk-TU3L3PW7.js";
 import "./chunk-IW3Q7AE5.js";
 import {
   VERSION
-} from "./chunk-O4CZPTPU.js";
+} from "./chunk-25VQORAZ.js";
 
 // src/cli/pr.ts
 import { execFileSync } from "child_process";

package/dist/{run-tests-GGNFI7CL.js → run-tests-CSAB2M4A.js}

@@ -2,8 +2,8 @@
 import {
   executeTests,
   runTestsTool
-} from "./chunk-6NEEFOVF.js";
-import "./chunk-O4CZPTPU.js";
+} from "./chunk-BDN6ZCPQ.js";
+import "./chunk-25VQORAZ.js";
 export {
   executeTests,
   runTestsTool

package/dist/{run-tests-R3JB4UEI.js → run-tests-PPTDYVS7.js}

@@ -1,8 +1,8 @@
 import {
   executeTests,
   runTestsTool
-} from "./chunk-E66SCDTD.js";
-import "./chunk-U4NQ2IRE.js";
+} from "./chunk-I73JWHNT.js";
+import "./chunk-NWM7CTQQ.js";
 export {
   executeTests,
   runTestsTool

package/dist/{server-I6DXVJRO.js → server-6B2JFKRN.js}

@@ -81,7 +81,7 @@ import {
   skillHistoryNote,
   snapshotFile,
   stripRoutingTags
-} from "./chunk-NJDQCQ7P.js";
+} from "./chunk-BW4H53KI.js";
 import {
   CNY_PER_USD,
   CostTracker,
@@ -126,7 +126,7 @@ import {
   spawnAgentContext,
   truncateOutput,
   undoStack
-} from "./chunk-37WBQV3E.js";
+} from "./chunk-AA6PZRJO.js";
 import {
   buildReviewPrompt,
   buildSecurityReviewPrompt
@@ -153,7 +153,7 @@ import {
   restoreMemoryEntries,
   updateMemoryApproval,
   updateMemoryEntry
-} from "./chunk-JBNNJ32H.js";
+} from "./chunk-TOH67ARY.js";
 import "./chunk-4DEMGCK4.js";
 import "./chunk-UUSRWSSX.js";
 import "./chunk-CKH4KQ4E.js";
@@ -172,7 +172,7 @@ import {
   buildDoctorReport,
   formatDoctorReport,
   loadContextFiles
-} from "./chunk-C5UAM4X7.js";
+} from "./chunk-VIDUFFHT.js";
 import {
   describePlugin,
   getActivePluginAssets,
@@ -187,14 +187,14 @@ import {
   runTool,
   setPluginEnabled,
   trustPlugin
-} from "./chunk-5G6HX57U.js";
+} from "./chunk-QL2QACHI.js";
 import "./chunk-RS7SKYTS.js";
 import {
   ProviderRegistry
 } from "./chunk-ALSSNFNK.js";
 import {
   ConfigManager
-} from "./chunk-7RC7AN6V.js";
+} from "./chunk-2SQCGJ6H.js";
 import {
   CONTENT_ONLY_STREAM_REMINDER,
   TEE_FINAL_USER_NUDGE,
@@ -206,6 +206,7 @@ import {
   evaluateTeeContent,
   freshPriorContent,
   getDangerLevel,
+  isAbortError,
   runAgentLoop,
   stripToolCallReminder,
   teeStreamErrorSummary
@@ -224,7 +225,7 @@ import {
   maskConfigSecrets
 } from "./chunk-XNFIYS7G.js";
 import "./chunk-4BKXL7SM.js";
-import "./chunk-6NEEFOVF.js";
+import "./chunk-BDN6ZCPQ.js";
 import {
   AGENTIC_BEHAVIOR_GUIDELINE,
   AUTHOR,
@@ -240,7 +241,7 @@ import {
   SKILLS_DIR_NAME,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-O4CZPTPU.js";
+} from "./chunk-25VQORAZ.js";
 
 // src/web/server.ts
 import express from "express";
@@ -286,6 +287,14 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
   sessionAutoApprove = false;
   /** Session-level Auto Mode: rule-based low-risk auto approval. */
   sessionAutoMode = false;
+  /**
+   * Plan Mode（只读规划模式）。由宿主在每轮开始前同步。
+   *
+   * 必须在**执行层**也知道它：Plan Mode 此前只过滤"给模型看的工具清单"，模型一旦吐出
+   * 白名单外的调用，executor 一无所知照常执行，而 `alwaysYolo` 下 write 级还会被直接
+   * 放行——只读保护形同虚设（审计 P2-01）。
+   */
+  planMode = false;
   /** Track tool start times for duration calculation */
   toolStartTimes = /* @__PURE__ */ new Map();
   /**
@@ -515,6 +524,7 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
       permission,
       networkPermission,
       hookDeny: preDeny ? { reason: preDeny.reason } : void 0,
+      planMode: this.planMode,
       sessionAutoMode: this.sessionAutoMode,
       sessionAutoApprove: this.sessionAutoApprove,
       classify: () => defaultActionClassifier.classify(call, dangerLevel, {
@@ -920,7 +930,7 @@ Cache:  write=${cacheCreate} read=${cacheRead}` : "";
 Cost:   ${formatCost(cost)}` : "";
   let memoryLine = "";
   try {
-    const { countPendingMemories: countPendingMemories2 } = await import("./persistent-memory-4UR27ACM.js");
+    const { countPendingMemories: countPendingMemories2 } = await import("./persistent-memory-7GPL7NSO.js");
     const pending = countPendingMemories2(ctx.config.getConfigDir());
     if (pending > 0) memoryLine = `
 Memory: \u26A0 ${pending} pending approval \u2014 see the Memory panel or /memory`;
@@ -1844,7 +1854,7 @@ async function handleTest(args, ctx) {
       const isCommand = argStr.includes(" ") || /^(mvn|gradle|npm|pytest|cargo|go)\b/.test(argStr);
       testArgs = isCommand ? { command: argStr } : { filter: argStr };
     }
-    const runTests = ctx.runTests ?? (await import("./run-tests-GGNFI7CL.js")).executeTests;
+    const runTests = ctx.runTests ?? (await import("./run-tests-CSAB2M4A.js")).executeTests;
     const report = await runTests(testArgs);
     ctx.send({ type: "info", message: report });
   } catch (err) {
@@ -2119,7 +2129,7 @@ async function handleMemory(args, ctx) {
   }
   if (intent.kind === "status") {
     const { getChatIndexStatus } = await import("./chat-index-2D5GK2DB.js");
-    const { listMemoryEntries: listMemoryEntries2, isMemoryExpired: isMemoryExpired2, formatMemoryForPrompt: formatMemoryForPrompt2 } = await import("./persistent-memory-4UR27ACM.js");
+    const { listMemoryEntries: listMemoryEntries2, isMemoryExpired: isMemoryExpired2, formatMemoryForPrompt: formatMemoryForPrompt2 } = await import("./persistent-memory-7GPL7NSO.js");
     const memories = listMemoryEntries2(configDir, { includeExpired: true, includeRejected: true });
     const injected = formatMemoryForPrompt2(configDir, process.cwd(), ctx.config.get("memory")?.maxChars);
     const view = buildMemoryStatusView({
@@ -2142,7 +2152,7 @@ async function handleMemory(args, ctx) {
     return;
   }
   if (intent.kind === "recall") {
-    const { searchPersistentMemories, touchMemoryReferences } = await import("./persistent-memory-4UR27ACM.js");
+    const { searchPersistentMemories, touchMemoryReferences } = await import("./persistent-memory-7GPL7NSO.js");
     const { searchChatMemory } = await import("./chat-index-2D5GK2DB.js");
     const persistentHits = searchPersistentMemories(configDir, intent.query, process.cwd(), 3);
     if (persistentHits.length > 0) {
@@ -2263,7 +2273,7 @@ async function handleMemory(args, ctx) {
     ctx.handleMemoryManage(intent.action, args[1], intent.action === "expire" ? args[2] : void 0);
   } else if (intent.kind === "export") {
     if (args[1] === "md") {
-      const { exportMemoryEntries: exportMemoryEntries2 } = await import("./persistent-memory-4UR27ACM.js");
+      const { exportMemoryEntries: exportMemoryEntries2 } = await import("./persistent-memory-7GPL7NSO.js");
       ctx.send({
         type: "export_data",
         format: "md",
@@ -3269,7 +3279,7 @@ var SessionHandler = class {
         ...simpleReasoning ? { reasoningContent: simpleReasoning } : {}
       });
     } catch (err) {
-      if (err.name === "AbortError") {
+      if (isAbortError(err)) {
         this.send({ type: "info", message: "[interrupted]" });
       } else {
         throw err;
@@ -3286,7 +3296,7 @@ var SessionHandler = class {
     const autoPauseIntervalRaw = this.config.get("autoPauseInterval");
     const autoPauseInterval = typeof autoPauseIntervalRaw === "number" ? autoPauseIntervalRaw : 50;
     const { stable: toolStable, volatile: toolVolatile } = this.buildSystemPrompt();
-    const roundBudgetHint = buildRoundBudgetHint({ maxToolRounds, autoPauseInterval });
+    const roundBudgetHint = buildRoundBudgetHint({ maxToolRounds, autoPauseInterval, planMode: this.planMode });
     const systemPrompt = toolStable + TOOL_CALL_REMINDER + roundBudgetHint + (mcpBudgetNote ? `
 
 ${mcpBudgetNote}` : "");
@@ -3589,7 +3599,7 @@ ${summaryContent}`,
         this.send({ type: "info", message: "[interrupted]" });
       }
     } catch (err) {
-      if (err.name === "AbortError") {
+      if (isAbortError(err)) {
         this.send({ type: "info", message: "[interrupted]" });
       } else {
         throw err;
@@ -4202,6 +4212,7 @@ Backup saved: ${result.backupPath}` : "";
     };
   }
   getFilteredToolDefs() {
+    this.toolExecutor.planMode = this.planMode;
     if (this.planMode) {
       return {
         toolDefs: this.toolRegistry.getDefinitions().filter((t) => PLAN_MODE_READONLY_TOOLS.has(t.name)),

package/dist/{server-THHSJRNI.js → server-O54U4OOB.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import {
   ToolRegistry
-} from "./chunk-37WBQV3E.js";
+} from "./chunk-AA6PZRJO.js";
 import "./chunk-GHWZVPUV.js";
-import "./chunk-JBNNJ32H.js";
+import "./chunk-TOH67ARY.js";
 import "./chunk-4DEMGCK4.js";
 import "./chunk-UUSRWSSX.js";
 import "./chunk-CKH4KQ4E.js";
@@ -14,7 +14,7 @@ import "./chunk-NYNSYLFY.js";
 import "./chunk-3FEZSLGI.js";
 import {
   runTool
-} from "./chunk-5G6HX57U.js";
+} from "./chunk-QL2QACHI.js";
 import "./chunk-RS7SKYTS.js";
 import {
   getDangerLevel,
@@ -24,10 +24,10 @@ import "./chunk-TU3L3PW7.js";
 import "./chunk-HOSJZMQS.js";
 import "./chunk-IW3Q7AE5.js";
 import "./chunk-4BKXL7SM.js";
-import "./chunk-6NEEFOVF.js";
+import "./chunk-BDN6ZCPQ.js";
 import {
   VERSION
-} from "./chunk-O4CZPTPU.js";
+} from "./chunk-25VQORAZ.js";
 
 // src/mcp/server.ts
 import { createInterface } from "readline";

package/dist/{task-orchestrator-6HH3KQUQ.js → task-orchestrator-HA4JE4TF.js}

@@ -4,9 +4,9 @@ import {
   googleSearchContext,
   isToolCapableProvider,
   truncateOutput
-} from "./chunk-37WBQV3E.js";
+} from "./chunk-AA6PZRJO.js";
 import "./chunk-GHWZVPUV.js";
-import "./chunk-JBNNJ32H.js";
+import "./chunk-TOH67ARY.js";
 import "./chunk-4DEMGCK4.js";
 import "./chunk-UUSRWSSX.js";
 import "./chunk-CKH4KQ4E.js";
@@ -17,7 +17,7 @@ import "./chunk-NYNSYLFY.js";
 import "./chunk-3FEZSLGI.js";
 import {
   runTool
-} from "./chunk-5G6HX57U.js";
+} from "./chunk-QL2QACHI.js";
 import "./chunk-RS7SKYTS.js";
 import {
   getDangerLevel,
@@ -29,10 +29,10 @@ import {
   atomicWriteFileSync
 } from "./chunk-IW3Q7AE5.js";
 import "./chunk-4BKXL7SM.js";
-import "./chunk-6NEEFOVF.js";
+import "./chunk-BDN6ZCPQ.js";
 import {
   SUBAGENT_ALLOWED_TOOLS
-} from "./chunk-O4CZPTPU.js";
+} from "./chunk-25VQORAZ.js";
 
 // src/hub/task-orchestrator.ts
 import { createInterface } from "readline";

package/dist/{usage-UB4ZT5PE.js → usage-HX6MPQT2.js}

@@ -9,10 +9,10 @@ import {
 import "./chunk-RS7SKYTS.js";
 import {
   ConfigManager
-} from "./chunk-7RC7AN6V.js";
+} from "./chunk-2SQCGJ6H.js";
 import "./chunk-TU3L3PW7.js";
 import "./chunk-IW3Q7AE5.js";
-import "./chunk-O4CZPTPU.js";
+import "./chunk-25VQORAZ.js";
 
 // src/cli/usage.ts
 function classifyRowCost(row) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jinzd-ai-cli",
-  "version": "0.4.288",
+  "version": "0.4.289",
   "description": "Cross-platform REPL-style AI CLI with multi-provider support",
   "type": "module",
   "main": "./dist/index.js",