jinzd-ai-cli 0.4.300 → 0.4.303

package/dist/electron-server.js

@@ -50,7 +50,7 @@ import {
   touchMemoryReferences,
   updateMemoryApproval,
   updateMemoryEntry
-} from "./chunk-QL5HASTV.js";
+} from "./chunk-PEDN3AWT.js";
 import {
   DEFAULT_PATTERNS,
   redactJson,
@@ -66,7 +66,7 @@ import {
 } from "./chunk-CGLYJRFA.js";
 import {
   runTestsTool
-} from "./chunk-RXK3SNCO.js";
+} from "./chunk-EMLRCVY2.js";
 import {
   AGENTIC_BEHAVIOR_GUIDELINE,
   APP_NAME,
@@ -100,7 +100,7 @@ import {
   SUBAGENT_MAX_ROUNDS_LIMIT,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-KQLKS3ZQ.js";
+} from "./chunk-3GOHR45I.js";
 
 // src/web/server.ts
 import express from "express";
@@ -2468,7 +2468,9 @@ function extractClaimedFilePaths(content) {
   const paths = /* @__PURE__ */ new Set();
   const add = (p) => {
     const trimmed = p.trim().replace(/[，,。、；;:：]+$/, "");
-    if (trimmed && /\.\w{1,6}$/.test(trimmed)) paths.add(trimmed);
+    if (!trimmed || !/\.\w{1,6}$/.test(trimmed)) return;
+    if (trimmed.startsWith("@")) return;
+    paths.add(trimmed);
   };
   let m;
   const backtickRe = /`([^`\n]+?\.\w{1,6})`/g;
@@ -5775,6 +5777,90 @@ function decodeWindowsBuffer(buf) {
     return utf8;
   }
 }
+var GBK_MOJIBAKE_FINGERPRINTS = [
+  "\uFFFD",
+  "\u9215",
+  "\u951B",
+  "\u9983",
+  "\u9241",
+  "\u6D93",
+  "\u935B",
+  "\u9428",
+  "\u7EFE",
+  "\u95AB",
+  "\u9593",
+  "\u95BF",
+  "\u68E3",
+  "\u95B4",
+  "\u5A11",
+  "\u95B8",
+  "\u95BB",
+  "\u7F01",
+  "\u95C1"
+];
+var gbkReverse = null;
+function gbkReverseMap() {
+  if (gbkReverse) return gbkReverse;
+  const map = /* @__PURE__ */ new Map();
+  try {
+    const dec = new TextDecoder("gbk");
+    for (let hi = 129; hi <= 254; hi++) {
+      for (let lo = 64; lo <= 254; lo++) {
+        if (lo === 127) continue;
+        const ch = dec.decode(new Uint8Array([hi, lo]));
+        if (ch.length === 1 && ch !== "\uFFFD" && !map.has(ch)) map.set(ch, [hi, lo]);
+      }
+    }
+  } catch {
+  }
+  gbkReverse = map;
+  return map;
+}
+function decodeRunAsChinese(bytes) {
+  for (let start = 0; start <= 2 && start < bytes.length; start++) {
+    for (let end = 0; end <= 2 && bytes.length - end > start; end++) {
+      const slice = bytes.slice(start, bytes.length - end);
+      if (slice.length < 6) continue;
+      try {
+        const out = new TextDecoder("utf-8", { fatal: true }).decode(new Uint8Array(slice));
+        if (/[一-鿿]/.test(out)) return out;
+      } catch {
+      }
+    }
+  }
+  return null;
+}
+function recoverGbkMojibake(text) {
+  if (!text) return null;
+  const map = gbkReverseMap();
+  if (map.size === 0) return null;
+  let run = [];
+  let best = null;
+  const flush2 = () => {
+    if (run.length >= 4) {
+      const bytes = [];
+      for (const p of run) bytes.push(p[0], p[1]);
+      const out = decodeRunAsChinese(bytes);
+      if (out && (!best || out.length > best.length)) best = out;
+    }
+    run = [];
+  };
+  for (const ch of text) {
+    const pair = ch.codePointAt(0) < 128 ? void 0 : map.get(ch);
+    if (pair) run.push(pair);
+    else flush2();
+  }
+  flush2();
+  return best;
+}
+function looksLikeGbkMojibake(text) {
+  if (recoverGbkMojibake(text) !== null) return true;
+  let hits = 0;
+  for (const ch of GBK_MOJIBAKE_FINGERPRINTS) {
+    if (text.includes(ch) && ++hits >= 2) return true;
+  }
+  return false;
+}
 function killProcessTree(proc) {
   if (proc.killed || proc.exitCode !== null) return;
   if (IS_WINDOWS && proc.pid) {
@@ -6166,7 +6252,7 @@ ${combined || formatFailureFallback(status)}
       }
       pushBashUndoEntries(beforeSnapshot, parsedTargetsBefore, effectiveCwd);
       updateCwdFromCommand(command, effectiveCwd);
-      return stdout || emptyOutputResult(command);
+      return annotateSuccessOutput(command, stdout) || emptyOutputResult(command, stderr ?? "");
     }
     try {
       const { stdout, stderr, status, signal, timedOut, aborted } = await runShell(
@@ -6203,7 +6289,10 @@ ${combined || formatFailureFallback(status)}
       updateCwdFromCommand(command, effectiveCwd);
       pushBashUndoEntries(beforeSnapshot, parsedTargetsBefore, effectiveCwd);
       const result = Buffer.isBuffer(stdout) ? IS_WINDOWS3 ? decodeWindowsBuffer(stdout) : stdout.toString("utf-8") : String(stdout ?? "");
-      return result || emptyOutputResult(command);
+      return annotateSuccessOutput(command, result) || emptyOutputResult(
+        command,
+        Buffer.isBuffer(stderr) ? IS_WINDOWS3 ? decodeWindowsBuffer(stderr) : stderr.toString("utf-8") : String(stderr ?? "")
+      );
     } catch (err) {
       pushBashUndoEntries(beforeSnapshot, parsedTargetsBefore, effectiveCwd);
       if (err && typeof err === "object") {
@@ -6304,10 +6393,26 @@ var BACKSLASH_QUOTE_SILENT_WARNING = `
 
 \u26A0 WARNING: this command contains \\" inside a double-quoted string, but PowerShell does NOT treat \\ as an escape \u2014 that quote CLOSED the string and the command was split into fragments. It exited 0 with no output because the outer program (e.g. ssh) still ran, but it very likely did NOT run what you intended. Do NOT assume this succeeded.
 Fix: write the payload to a local file with the 'write_file' tool, then 'scp' it over and run 'ssh host "psql -d <db> -f /tmp/x.sql"' (single level of quoting). Inside PowerShell strings, escape a quote with \`" or "" \u2014 never \\".`;
-function emptyOutputResult(command) {
+function emptyOutputResult(command, stderr = "") {
   const base = "(command completed with no output)";
+  const err = stderr.trim();
+  if (err) {
+    return `${base}, but stderr was not empty:
+${err}`;
+  }
   return detectPowerShellBackslashQuote(command) ? base + BACKSLASH_QUOTE_SILENT_WARNING : base;
 }
+var PS_TEXT_READ_CMDLET = /\b(?:Get-Content|gc|cat|type|Select-String|sls|Import-Csv)\b/i;
+function annotateSuccessOutput(command, stdout) {
+  if (!IS_WINDOWS3 || !PS_TEXT_READ_CMDLET.test(command)) return stdout;
+  if (!looksLikeGbkMojibake(stdout)) return stdout;
+  const recovered = recoverGbkMojibake(stdout);
+  return stdout + `
+
+\u26A0 WARNING: this output is mojibake (UTF-8 text decoded as GBK). PowerShell's Get-Content / Select-String read BOM-less UTF-8 files using the system code page, so the content was corrupted BEFORE it reached you \u2014 what you see above is NOT what the file says. Do NOT rely on it, and do not quote it back to the user.
+` + (recovered ? `Recovered fragment (proof, not the whole file): ${recovered}
+` : "") + `Fix: use the 'read_file' tool instead (it decodes UTF-8 correctly). If you must stay in PowerShell, pass -Encoding utf8.`;
+}
 function buildErrorHint(command, stderr) {
   const hints = [];
   if (IS_WINDOWS3 && /\|\|/.test(command) && /(\|\||is not a valid argument|不是此版本中的有效|ParserError|Unexpected token)/i.test(stderr)) {
@@ -6720,6 +6825,16 @@ var BINARY_EXTENSIONS = /* @__PURE__ */ new Set([
   ".class",
   ".pyc"
 ]);
+var IMAGE_EXTENSIONS = /* @__PURE__ */ new Set([
+  ".png",
+  ".jpg",
+  ".jpeg",
+  ".gif",
+  ".bmp",
+  ".ico",
+  ".webp",
+  ".tiff"
+]);
 function isBinaryBuffer(buf) {
   const sample = buf.subarray(0, 512);
   let nullCount = 0;
@@ -6890,6 +7005,12 @@ ${err.message}`;
       }
     }
     if (BINARY_EXTENSIONS.has(ext)) {
+      if (IMAGE_EXTENSIONS.has(ext)) {
+        return `[Image file: ${filePath} (${ext})]
+read_file cannot return image content \u2014 tool results are text-only, so no tool can put an image into your context.
+To have an image looked at, ask the USER to reference it from their input line with @${filePath} (they can use a glob for a batch, e.g. @dir/*.png, up to 20 at a time). A vision-capable model must be active, or the reference is rejected.
+Do NOT claim you inspected this image \u2014 you have not seen it.`;
+      }
       return `[Binary file: ${filePath} (${ext})]
 This is a binary file and cannot be read as text. If there is a text version (.md / .txt) in the project, please read that instead.`;
     }
@@ -8078,7 +8199,7 @@ var RuleBasedActionClassifier = class {
 var defaultActionClassifier = new RuleBasedActionClassifier();
 
 // src/tools/executor.ts
-var PS_ERROR_RECORD_HEAD = /^(?:At line:\d+ char:\d+|所在位置\s+行:\d+\s+字符:\d+)\s*$/;
+var PS_ERROR_RECORD_HEAD = /^(?:[\w.\-]+\s:\s)?(?:At line:\d+ char:\s*\d+|所在位置\s+行:\d+\s+字符:\s*\d+)\s*$/;
 var ERROR_SIGNATURE = new RegExp(
   [
     // Python / .NET / Java: "OSError: …", "pkg.SomeException: …"
@@ -8095,7 +8216,7 @@ var ERROR_SIGNATURE = new RegExp(
 );
 var PY_TRACEBACK_FRAME = /^\s*File ".*", line \d+/;
 function buildErrorPreview(content) {
-  const raw = content.split("\n");
+  const raw = content.split("\n").map((l) => l.replace(/\r+$/, ""));
   const undecorated = [];
   for (let i = 0; i < raw.length; i++) {
     if (PS_ERROR_RECORD_HEAD.test(raw[i])) {
@@ -17077,7 +17198,7 @@ Cache:  write=${cacheCreate} read=${cacheRead}` : "";
 Cost:   ${formatCost(cost)}` : "";
   let memoryLine = "";
   try {
-    const { countPendingMemories: countPendingMemories2 } = await import("./persistent-memory-2AWOTKKK.js");
+    const { countPendingMemories: countPendingMemories2 } = await import("./persistent-memory-NLXNNWOW.js");
     const pending = countPendingMemories2(ctx.config.getConfigDir());
     if (pending > 0) memoryLine = `
 Memory: \u26A0 ${pending} pending approval \u2014 see the Memory panel or /memory`;
@@ -18060,7 +18181,7 @@ async function handleTest(args, ctx) {
       const isCommand = argStr.includes(" ") || /^(mvn|gradle|npm|pytest|cargo|go)\b/.test(argStr);
       testArgs = isCommand ? { command: argStr } : { filter: argStr };
     }
-    const runTests = ctx.runTests ?? (await import("./run-tests-3JIOK2H4.js")).executeTests;
+    const runTests = ctx.runTests ?? (await import("./run-tests-RYUB6PVF.js")).executeTests;
     const report = await runTests(testArgs);
     ctx.send({ type: "info", message: report });
   } catch (err) {
@@ -18450,7 +18571,7 @@ async function handleMemory(args, ctx) {
   }
   if (intent.kind === "status") {
     const { getChatIndexStatus: getChatIndexStatus2 } = await import("./chat-index-DGUOUUQW.js");
-    const { listMemoryEntries: listMemoryEntries2, isMemoryExpired: isMemoryExpired2, formatMemoryForPrompt: formatMemoryForPrompt2 } = await import("./persistent-memory-2AWOTKKK.js");
+    const { listMemoryEntries: listMemoryEntries2, isMemoryExpired: isMemoryExpired2, formatMemoryForPrompt: formatMemoryForPrompt2 } = await import("./persistent-memory-NLXNNWOW.js");
     const memories = listMemoryEntries2(configDir, { includeExpired: true, includeRejected: true });
     const injected = formatMemoryForPrompt2(configDir, process.cwd(), ctx.config.get("memory")?.maxChars);
     const view = buildMemoryStatusView({
@@ -18473,7 +18594,7 @@ async function handleMemory(args, ctx) {
     return;
   }
   if (intent.kind === "recall") {
-    const { searchPersistentMemories: searchPersistentMemories2, touchMemoryReferences: touchMemoryReferences2 } = await import("./persistent-memory-2AWOTKKK.js");
+    const { searchPersistentMemories: searchPersistentMemories2, touchMemoryReferences: touchMemoryReferences2 } = await import("./persistent-memory-NLXNNWOW.js");
     const { searchChatMemory: searchChatMemory2 } = await import("./chat-index-DGUOUUQW.js");
     const persistentHits = searchPersistentMemories2(configDir, intent.query, process.cwd(), 3);
     if (persistentHits.length > 0) {
@@ -18594,7 +18715,7 @@ async function handleMemory(args, ctx) {
     ctx.handleMemoryManage(intent.action, args[1], intent.action === "expire" ? args[2] : void 0);
   } else if (intent.kind === "export") {
     if (args[1] === "md") {
-      const { exportMemoryEntries: exportMemoryEntries2 } = await import("./persistent-memory-2AWOTKKK.js");
+      const { exportMemoryEntries: exportMemoryEntries2 } = await import("./persistent-memory-NLXNNWOW.js");
       ctx.send({
         type: "export_data",
         format: "md",
@@ -19599,7 +19720,7 @@ No tools match "${filter}".
           const { join: join29 } = await import("path");
           const { existsSync: existsSync33 } = await import("fs");
           const { getGitRoot: getGitRoot2 } = await import("./git-context-VNCA2GU7.js");
-          const { MCP_PROJECT_CONFIG_NAME: MCP_PROJECT_CONFIG_NAME2 } = await import("./constants-3VGUBD6L.js");
+          const { MCP_PROJECT_CONFIG_NAME: MCP_PROJECT_CONFIG_NAME2 } = await import("./constants-A6VKRPMA.js");
           const { approveProject, hashMcpFile } = await import("./project-trust-MUG325AW.js");
           const cwd = process.cwd();
           const projectRoot = getGitRoot2(cwd) ?? cwd;
@@ -20518,7 +20639,7 @@ function createReviewCommands() {
       usage: "/test [command|filter]",
       async execute(args, ctx) {
         try {
-          const { executeTests } = await import("./run-tests-3JIOK2H4.js");
+          const { executeTests } = await import("./run-tests-RYUB6PVF.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {

package/dist/{hub-ARZNS7IH.js → hub-NLULKDKU.js}

@@ -158,7 +158,7 @@ ${content}`);
   }
 }
 async function runTaskMode(config, providers, configManager, topic) {
-  const { TaskOrchestrator } = await import("./task-orchestrator-ZNLQD2SM.js");
+  const { TaskOrchestrator } = await import("./task-orchestrator-QAQFB7DG.js");
   const orchestrator = new TaskOrchestrator(config, providers, configManager);
   let interrupted = false;
   const onSigint = () => {

package/dist/index.js

@@ -24,7 +24,7 @@ import {
   setupProxy,
   snapshotFile,
   stripRoutingTags
-} from "./chunk-ZBFNKCH4.js";
+} from "./chunk-ZMCZMR4R.js";
 import {
   CostTracker,
   getPricing,
@@ -38,6 +38,7 @@ import {
   cleanupRejectedTeeFile,
   estimateTokens,
   formatPermissionProfileWarning,
+  globToRegex,
   googleSearchContext,
   isInterrupted,
   isToolCapableProvider,
@@ -49,7 +50,7 @@ import {
   setMaxOutputCap,
   spawnAgentContext,
   undoStack
-} from "./chunk-4CEF4ROO.js";
+} from "./chunk-WCJR5HCF.js";
 import "./chunk-HLWUDRBO.js";
 import {
   NO_THINKING,
@@ -62,7 +63,7 @@ import {
   countPendingMemories,
   detectStaleLegacyMarkdownEdit,
   formatMemoryForPrompt
-} from "./chunk-NJ2E3ZYE.js";
+} from "./chunk-DHQCJC2B.js";
 import "./chunk-4DEMGCK4.js";
 import "./chunk-UUSRWSSX.js";
 import "./chunk-CKH4KQ4E.js";
@@ -83,22 +84,22 @@ import {
 import {
   loadContextFiles,
   writeCrashLog
-} from "./chunk-YFCGMH2R.js";
+} from "./chunk-6ZRLM3NG.js";
 import {
   getActivePluginAssets,
   getPendingHookTrust,
   installFlushOnExit,
   mergePluginHooks,
   runLifecycleHooks
-} from "./chunk-LNGH6PEC.js";
+} from "./chunk-Q24BN6WF.js";
 import "./chunk-RS7SKYTS.js";
 import {
   ProviderRegistry,
   listBuiltInProviderMetadata
-} from "./chunk-FBOVBL7P.js";
+} from "./chunk-VXEF2SWG.js";
 import {
   ConfigManager
-} from "./chunk-RPI74YNP.js";
+} from "./chunk-XEKMGE2G.js";
 import {
   CONTENT_ONLY_STREAM_REMINDER,
   TEE_FINAL_USER_NUDGE,
@@ -116,7 +117,7 @@ import {
   runAgentLoop,
   stripToolCallReminder,
   teeStreamErrorSummary
-} from "./chunk-Y56UGZPX.js";
+} from "./chunk-MI4SFZGX.js";
 import {
   AuthError,
   ProviderError,
@@ -132,7 +133,7 @@ import {
 } from "./chunk-IW3Q7AE5.js";
 import "./chunk-XNFIYS7G.js";
 import "./chunk-4BKXL7SM.js";
-import "./chunk-MZCMJC3K.js";
+import "./chunk-ORDEOJXX.js";
 import {
   AGENTIC_BEHAVIOR_GUIDELINE,
   AUTHOR,
@@ -149,15 +150,15 @@ import {
   SKILLS_DIR_NAME,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-2MOYOMY5.js";
+} from "./chunk-7WD2TBWY.js";
 
 // src/index.ts
 import { program } from "commander";
 
 // src/repl/repl.ts
 import * as readline from "readline";
-import { existsSync as existsSync3, readFileSync as readFileSync4, readdirSync as readdirSync3, statSync as statSync3, mkdirSync as mkdirSync3 } from "fs";
-import { join as join3, resolve as resolve2, dirname as dirname2, basename } from "path";
+import { existsSync as existsSync3, readFileSync as readFileSync4, readdirSync as readdirSync4, statSync as statSync3, mkdirSync as mkdirSync3 } from "fs";
+import { join as join4, resolve as resolve2, dirname as dirname3, basename as basename2 } from "path";
 import chalk3 from "chalk";
 
 // src/session/title-generator.ts
@@ -1091,8 +1092,8 @@ function getVisionModelHint(model, provider) {
 }
 
 // src/repl/at-references.ts
-import { existsSync as existsSync2, readFileSync as readFileSync3, statSync as statSync2 } from "fs";
-import { extname as extname3, resolve } from "path";
+import { existsSync as existsSync2, readFileSync as readFileSync3, readdirSync as readdirSync3, statSync as statSync2 } from "fs";
+import { basename, dirname as dirname2, extname as extname3, join as join3, resolve } from "path";
 var IMAGE_MIME = {
   ".png": "image/png",
   ".jpg": "image/jpeg",
@@ -1101,6 +1102,22 @@ var IMAGE_MIME = {
   ".webp": "image/webp"
 };
 var MAX_IMAGE_BYTES = 10 * 1024 * 1024;
+var MAX_GLOB_MATCHES = 30;
+function expandGlob(rawPath, cwd) {
+  const pat = basename(rawPath);
+  if (!/[*?]/.test(pat)) return { kind: "notglob" };
+  const dirPart = dirname2(rawPath);
+  const absDir = resolve(cwd, dirPart);
+  let entries;
+  try {
+    entries = readdirSync3(absDir, { withFileTypes: true }).filter((e) => e.isFile()).map((e) => e.name);
+  } catch {
+    return { kind: "nodir", dir: dirPart };
+  }
+  const re = globToRegex(pat);
+  const files = entries.filter((name) => re.test(name)).sort((a, b) => a.localeCompare(b, void 0, { numeric: true, sensitivity: "base" })).map((name) => dirPart === "." ? name : join3(dirPart, name));
+  return { kind: "ok", files };
+}
 var MAX_PATH_SPACE_TOKENS = 8;
 function expandUnquotedPath(input, pathStart, rawPath, cwd) {
   const plain = { raw: rawPath, consumed: rawPath.length };
@@ -1136,37 +1153,58 @@ function parseAtReferences(input, cwd) {
         atPattern.lastIndex = pathStart + expanded.consumed;
       }
     }
-    const absPath = resolve(cwd, rawPath);
-    const ext = extname3(rawPath).toLowerCase();
-    const mime = IMAGE_MIME[ext];
-    if (!existsSync2(absPath)) {
-      refs.push({ path: rawPath, type: "notfound" });
-      continue;
-    }
-    if (mime) {
-      const fileSize = statSync2(absPath).size;
-      if (fileSize > MAX_IMAGE_BYTES) {
-        refs.push({ path: rawPath, type: "toolarge" });
-        continue;
+    const handleOne = (p, replaceIn) => {
+      const absPath = resolve(cwd, p);
+      const ext = extname3(p).toLowerCase();
+      const mime = IMAGE_MIME[ext];
+      if (!existsSync2(absPath)) {
+        refs.push({ path: p, type: "notfound" });
+        return;
       }
-      const data = readFileSync3(absPath).toString("base64");
-      imageParts.push({
-        type: "image_url",
-        image_url: { url: `data:${mime};base64,${data}` }
-      });
-      refs.push({ path: rawPath, type: "image" });
-      textBody = textBody.replace(matchedText, "").trim();
-    } else {
-      const content = readFileSync3(absPath, "utf-8");
-      const inlined = `
+      if (mime) {
+        if (statSync2(absPath).size > MAX_IMAGE_BYTES) {
+          refs.push({ path: p, type: "toolarge" });
+          return;
+        }
+        const data = readFileSync3(absPath).toString("base64");
+        imageParts.push({ type: "image_url", image_url: { url: `data:${mime};base64,${data}` } });
+        refs.push({ path: p, type: "image" });
+        if (replaceIn !== null) textBody = textBody.replace(replaceIn, "").trim();
+      } else {
+        const content = readFileSync3(absPath, "utf-8");
+        const inlined = `
 
-[File: ${rawPath}]
+[File: ${p}]
 \`\`\`
 ${content}
 \`\`\``;
-      textBody = textBody.replace(matchedText, inlined);
-      refs.push({ path: rawPath, type: "text" });
+        if (replaceIn !== null) {
+          textBody = textBody.replace(replaceIn, inlined);
+        } else {
+          textBody += inlined;
+        }
+        refs.push({ path: p, type: "text" });
+      }
+    };
+    const globbed = existsSync2(resolve(cwd, rawPath)) ? { kind: "notglob" } : expandGlob(rawPath, cwd);
+    if (globbed.kind === "nodir") {
+      refs.push({ path: rawPath, type: "glob-nodir", dir: globbed.dir });
+      continue;
     }
+    if (globbed.kind === "ok") {
+      if (globbed.files.length === 0) {
+        refs.push({ path: rawPath, type: "glob-empty" });
+        continue;
+      }
+      if (globbed.files.length > MAX_GLOB_MATCHES) {
+        refs.push({ path: rawPath, type: "glob-toomany", matched: globbed.files.length });
+        continue;
+      }
+      textBody = textBody.replace(matchedText, "").trim();
+      for (const p of globbed.files) handleOne(p, null);
+      continue;
+    }
+    handleOne(rawPath, matchedText);
   }
   const parts = [];
   if (textBody.trim()) {
@@ -1631,7 +1669,7 @@ var Repl = class {
     const cwd = process.cwd();
     const gitRoot = getGitRoot(cwd);
     const projectRoot = gitRoot ?? cwd;
-    const mcpPath = join3(projectRoot, MCP_PROJECT_CONFIG_NAME);
+    const mcpPath = join4(projectRoot, MCP_PROJECT_CONFIG_NAME);
     if (!existsSync3(mcpPath)) return null;
     try {
       const raw = JSON.parse(readFileSync4(mcpPath, "utf-8"));
@@ -2106,7 +2144,7 @@ Session '${this.resumeSessionId}' not found.
       process.stdout.write(theme.dim(`  \u{1F50C} Plugins loaded: ${pluginCount} tool(s) from plugins/
 `));
     }
-    const skillsDir = join3(this.config.getConfigDir(), SKILLS_DIR_NAME);
+    const skillsDir = join4(this.config.getConfigDir(), SKILLS_DIR_NAME);
     this.skillManager = new SkillManager(skillsDir, this.config.get("ui").skillSizeWarn);
     const pluginAssets = getActivePluginAssets(this.config.getConfigDir());
     const skillCount = this.skillManager.loadSkills(pluginAssets.skillDirs);
@@ -2114,7 +2152,7 @@ Session '${this.resumeSessionId}' not found.
       process.stdout.write(theme.dim(`  \u{1F3AF} Skills: ${skillCount} available (use /skill to manage)
 `));
     }
-    const commandsDir = join3(this.config.getConfigDir(), CUSTOM_COMMANDS_DIR_NAME);
+    const commandsDir = join4(this.config.getConfigDir(), CUSTOM_COMMANDS_DIR_NAME);
     this.customCommandManager = new CustomCommandManager(commandsDir);
     const customCmdCount = this.customCommandManager.loadCommands(pluginAssets.commandDirs);
     if (customCmdCount > 0) {
@@ -2397,6 +2435,24 @@ Session '${this.resumeSessionId}' not found.
       } else if (ref.type === "toolarge") {
         process.stdout.write(theme.warning(`  \u26A0 Image too large (> 10 MB): ${ref.path}
 `));
+      } else if (ref.type === "glob-nodir") {
+        process.stdout.write(
+          theme.warning(`  \u26A0 Directory does not exist: ${ref.dir ?? ""} (from ${ref.path})
+`)
+        );
+      } else if (ref.type === "glob-empty") {
+        process.stdout.write(
+          theme.warning(`  \u26A0 No files match: ${ref.path} (directory exists but nothing matched)
+`)
+        );
+      } else if (ref.type === "glob-toomany") {
+        process.stdout.write(
+          theme.warning(
+            `  \u26A0 ${ref.path} matches ${ref.matched ?? 0} files (max 20 per reference).
+    Narrow the pattern and go in batches, e.g. ${ref.path.replace(/\*/, "0*")} then ${ref.path.replace(/\*/, "1*")}
+`
+          )
+        );
       } else if (ref.type === "image") {
         process.stdout.write(theme.dim(`  \u{1F4CE} Image: ${ref.path}
 `));
@@ -2744,17 +2800,17 @@ Session '${this.resumeSessionId}' not found.
   completeFilePath(partial) {
     try {
       const normalized = partial.replace(/\\/g, "/");
-      const dir = normalized.includes("/") ? dirname2(normalized) : ".";
-      const prefix = normalized.includes("/") ? basename(normalized) : normalized;
+      const dir = normalized.includes("/") ? dirname3(normalized) : ".";
+      const prefix = normalized.includes("/") ? basename2(normalized) : normalized;
       const absDir = resolve2(process.cwd(), dir);
       if (!existsSync3(absDir)) return [];
-      const entries = readdirSync3(absDir);
+      const entries = readdirSync4(absDir);
       const results = [];
       for (const entry of entries) {
         if (entry.startsWith(".")) continue;
         if (!entry.toLowerCase().startsWith(prefix.toLowerCase())) continue;
         try {
-          const fullPath = join3(absDir, entry);
+          const fullPath = join4(absDir, entry);
           const stat = statSync3(fullPath);
           const rel = dir === "." ? entry : `${dir}/${entry}`;
           results.push(stat.isDirectory() ? `${rel}/` : rel);
@@ -3342,7 +3398,7 @@ ${decision.displayMessage}
             });
             if (decision.kind === "save") {
               try {
-                mkdirSync3(dirname2(target), { recursive: true });
+                mkdirSync3(dirname3(target), { recursive: true });
                 atomicWriteFileSync(target, decision.body);
                 undoStack.push(target, `save_last_response (deferred): ${target}`);
                 const lines = decision.body.split("\n").length;
@@ -4005,7 +4061,7 @@ program.command("web").description("Start Web UI server with browser-based chat
     console.error("Error: Invalid port number. Must be between 1 and 65535.");
     process.exit(1);
   }
-  const { startWebServer } = await import("./server-4V3F2WSC.js");
+  const { startWebServer } = await import("./server-QCCH3277.js");
   await startWebServer({ port, host: options.host });
 });
 program.command("user [action] [username]").description("Manage Web UI users (list | create <name> | delete <name> | reset-password <name> | logout-all <name> | migrate <name>)").action(async (action, username) => {
@@ -4172,11 +4228,11 @@ program.command("sessions").description("List recent conversation sessions").opt
   console.log(footer + "\n");
 });
 program.command("usage").description("Show token + cost usage grouped by provider/model (cross-session)").option("--days <n>", "Only the last N days (inclusive of today)").option("--month <ym>", "Only a specific month, format YYYY-MM (e.g. 2026-06)").option("--json", "Output as JSON (for scripting)").action(async (options) => {
-  const { runUsageCli } = await import("./usage-ZS3LZOUI.js");
+  const { runUsageCli } = await import("./usage-PMHXXU2P.js");
   await runUsageCli(options);
 });
 program.command("doctor").description("Health check: API keys, config, MCP, recent crashes, tool usage, disk usage").option("--json", "Output as JSON (for scripting)").option("--reset-stats", "Reset accumulated tool usage statistics").action(async (options) => {
-  const { runDoctorCli } = await import("./doctor-cli-5KEROB3Z.js");
+  const { runDoctorCli } = await import("./doctor-cli-FXBLI3EA.js");
   const argv = process.argv.slice(2);
   await runDoctorCli({
     json: !!options.json || argv.includes("--json"),
@@ -4185,7 +4241,7 @@ program.command("doctor").description("Health check: API keys, config, MCP, rece
 });
 program.command("batch <action> [arg] [arg2]").description("Anthropic Message Batches: submit | list | status <id> | results <id> [out] | cancel <id>").option("--dry-run", "Parse and validate input without submitting (submit only)").action(async (action, arg, arg2, options) => {
   try {
-    const batch = await import("./batch-ESHQ5NMB.js");
+    const batch = await import("./batch-PEH5MTMC.js");
     switch (action) {
       case "submit":
         if (!arg) {
@@ -4228,7 +4284,7 @@ program.command("batch <action> [arg] [arg2]").description("Anthropic Message Ba
   }
 });
 program.command("mcp-serve").description("Start an MCP server over STDIO, exposing aicli's built-in tools to Claude Desktop / Cursor / other MCP clients").option("--allow-destructive", "Allow bash / run_interactive / task_create (always destructive in MCP mode)").option("--allow-outside-cwd", "Allow tool path arguments to escape the sandbox root \u2014 disabled by default").option("--tools <list>", "Comma-separated whitelist of tools to expose (default: all eligible tools)").option("--cwd <path>", "Working directory AND sandbox root (default: current directory)").action(async (options) => {
-  const { startMcpServer } = await import("./server-L53NTLYW.js");
+  const { startMcpServer } = await import("./server-UJDYIBVR.js");
   await startMcpServer({
     allowDestructive: !!options.allowDestructive,
     allowOutsideCwd: !!options.allowOutsideCwd,
@@ -4241,7 +4297,7 @@ program.command("pr <action> [target]").description("PR review helpers: review |
     console.error(`Unknown pr action: ${action}. Use review | security-review | summarize.`);
     process.exit(1);
   }
-  const { runPrCli } = await import("./pr-IFMDC3I4.js");
+  const { runPrCli } = await import("./pr-K6Z73QYN.js");
   const result = await runPrCli({
     action,
     target,
@@ -4261,8 +4317,8 @@ program.command("pr <action> [target]").description("PR review helpers: review |
   process.exit(result.exitCode);
 });
 program.command("ci").description("Headless PR review (code + security) \u2014 reads git/gh diff, optionally posts to PR. Designed for GitHub Actions.").option("--pr <num>", "PR number or URL; diff fetched via gh pr diff <value>", (v) => /^#?\d+$/.test(v) ? parseInt(v.replace(/^#/, ""), 10) : v).option("--base <ref>", "Base ref for git diff <ref>...HEAD (ignored when --pr set)").option("--post", "Post review as a PR comment (requires gh CLI + GH_TOKEN, needs --pr)").option("--no-update", "Always create a new comment instead of updating the previous aicli review").option("--skip-code", "Skip the code review section").option("--skip-security", "Skip the security review section").option("--detailed", "Use the detailed code-review prompt").option("--max-diff <n>", "Max diff chars sent to the model (default 30000)", (v) => parseInt(v, 10)).option("--provider <id>", "Override provider (default: config.defaultProvider)").option("--model <id>", "Override model").option("--dry-run", "Print result to stdout instead of posting (overrides --post)").option("--json", "Output a structured JSON report").option("--markdown", "Output Markdown report (default)").option("--sarif", "Output SARIF 2.1.0 for code scanning artifacts").option("--fail-on-security-high", "Fail when the security review contains HIGH/CRITICAL findings (default)").option("--no-fail-on-security-high", "Do not fail on security HIGH/CRITICAL findings").option("--fail-on-test-failure", "Fail when the report mentions test failures (default)").option("--no-fail-on-test-failure", "Do not fail on test failure findings").option("--fail-on-lint-failure", "Fail when the report mentions lint/typecheck failures (default)").option("--no-fail-on-lint-failure", "Do not fail on lint/typecheck failure findings").action(async (options) => {
-  const { runCi } = await import("./ci-5NGCQYUX.js");
-  const { formatCiResult } = await import("./ci-format-EKOB2WRP.js");
+  const { runCi } = await import("./ci-UXULLQMN.js");
+  const { formatCiResult } = await import("./ci-format-23FWBZN6.js");
   const formats = [options.json, options.markdown, options.sarif].filter(Boolean).length;
   if (formats > 1) {
     console.error("Choose only one output format: --json, --markdown, or --sarif.");
@@ -4421,7 +4477,7 @@ program.command("hub [topic]").description("Start multi-agent hub (discuss / bra
     config.get("customProviders"),
     config.getConfigDir()
   );
-  const { startHub } = await import("./hub-ARZNS7IH.js");
+  const { startHub } = await import("./hub-NLULKDKU.js");
   await startHub(
     {
       topic: topic ?? "",