jinzd-ai-cli 0.4.304 → 0.4.306

package/dist/electron-server.js

@@ -1,8 +1,8 @@
 import {
   hasSemanticIndex,
   semanticSearch
-} from "./chunk-7XU4BATV.js";
-import "./chunk-IEQAE3QG.js";
+} from "./chunk-KBDKKHXB.js";
+import "./chunk-OAXLMF3U.js";
 import {
   buildChatIndex,
   clearChatIndex,
@@ -22,10 +22,10 @@ import {
 } from "./chunk-SKET65WZ.js";
 import {
   indexProject
-} from "./chunk-PPIISCFN.js";
+} from "./chunk-UFW4S3RU.js";
 import {
   loadIndex
-} from "./chunk-RWM2GFRC.js";
+} from "./chunk-45UVJXFQ.js";
 import {
   addMemoryEntry,
   backupMemoryStore,
@@ -50,7 +50,7 @@ import {
   touchMemoryReferences,
   updateMemoryApproval,
   updateMemoryEntry
-} from "./chunk-DNGUSTL6.js";
+} from "./chunk-WZWRA7R2.js";
 import {
   DEFAULT_PATTERNS,
   redactJson,
@@ -66,7 +66,7 @@ import {
 } from "./chunk-CGLYJRFA.js";
 import {
   runTestsTool
-} from "./chunk-TBTVV3KK.js";
+} from "./chunk-NLB7JZSO.js";
 import {
   AGENTIC_BEHAVIOR_GUIDELINE,
   APP_NAME,
@@ -84,6 +84,7 @@ import {
   DESCRIPTION,
   DEV_STATE_FILE_NAME,
   HISTORY_DIR_NAME,
+  MAX_GLOB_MATCHES,
   MCP_CALL_TIMEOUT,
   MCP_CONNECT_TIMEOUT,
   MCP_PROJECT_CONFIG_NAME,
@@ -100,12 +101,30 @@ import {
   SUBAGENT_MAX_ROUNDS_LIMIT,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-2GRGLTAK.js";
+} from "./chunk-JDT6UG6R.js";
 
 // src/web/server.ts
 import express from "express";
 import { createServer } from "http";
 import { WebSocketServer } from "ws";
+
+// src/web/chat-limits.ts
+var MAX_CHAT_BYTES = 16 * 1024 * 1024;
+var MAX_IMAGE_BYTES = 10 * 1024 * 1024;
+var MAX_IMAGE_BASE64_CHARS = Math.ceil(MAX_IMAGE_BYTES / 3) * 4;
+var IMAGE_MIMES = /* @__PURE__ */ new Set(["image/png", "image/jpeg", "image/gif", "image/webp", "image/svg+xml"]);
+function imageValidationError(images) {
+  if (images === void 0) return;
+  if (!Array.isArray(images)) return "Images must be an array.";
+  for (const image of images) {
+    if (!image || typeof image.data !== "string" || !IMAGE_MIMES.has(image.mime)) {
+      return "Unsupported image format. Use PNG, JPEG, GIF, WebP or SVG.";
+    }
+    if (image.data.length > MAX_IMAGE_BASE64_CHARS) return "Image too large (maximum 10 MiB before base64 encoding).";
+  }
+}
+
+// src/web/server.ts
 import { join as join28, dirname as dirname11, resolve as resolve12, relative as relative6, sep as sep5, extname as extname3, resolve as resolvePath } from "path";
 import { existsSync as existsSync32, readFileSync as readFileSync25, readdirSync as readdirSync15, statSync as statSync16, realpathSync as realpathSync3, createReadStream } from "fs";
 import { networkInterfaces } from "os";
@@ -7013,7 +7032,7 @@ ${err.message}`;
       if (IMAGE_EXTENSIONS.has(ext)) {
         return `[Image file: ${filePath} (${ext})]
 read_file cannot return image content \u2014 tool results are text-only, so no tool can put an image into your context.
-To have an image looked at, ask the USER to reference it from their input line with @${filePath} (they can use a glob for a batch, e.g. @dir/*.png, up to 20 at a time). A vision-capable model must be active, or the reference is rejected.
+To have an image looked at, ask the USER to reference it from their input line with @${filePath} (they can use a glob for a batch, e.g. @dir/*.png, up to ${MAX_GLOB_MATCHES} at a time). A vision-capable model must be active, or the reference is rejected.
 Do NOT claim you inspected this image \u2014 you have not seen it.`;
       }
       return `[Binary file: ${filePath} (${ext})]
@@ -7816,26 +7835,11 @@ function checkNetworkPolicy(toolName, args, policy) {
 // src/tools/truncate.ts
 var DEFAULT_MAX_TOOL_OUTPUT_CHARS = 12e3;
 var activeCap = DEFAULT_MAX_TOOL_OUTPUT_CHARS_CAP;
-function setMaxOutputCap(cap) {
-  if (!cap || cap <= 0) {
-    activeCap = DEFAULT_MAX_TOOL_OUTPUT_CHARS_CAP;
-  } else {
-    activeCap = Math.max(DEFAULT_MAX_TOOL_OUTPUT_CHARS, cap);
-  }
-  if (lastContextWindow > 0) {
-    activeMaxChars = getMaxOutputChars(lastContextWindow);
-  }
-}
-function getMaxOutputChars(contextWindow) {
+function getMaxOutputChars(contextWindow, cap = activeCap) {
   if (!contextWindow || contextWindow <= 0) return DEFAULT_MAX_TOOL_OUTPUT_CHARS;
-  return Math.max(DEFAULT_MAX_TOOL_OUTPUT_CHARS, Math.min(Math.floor(contextWindow / 4), activeCap));
+  return Math.max(DEFAULT_MAX_TOOL_OUTPUT_CHARS, Math.min(Math.floor(contextWindow / 4), cap > 0 ? cap : DEFAULT_MAX_TOOL_OUTPUT_CHARS_CAP));
 }
 var activeMaxChars = DEFAULT_MAX_TOOL_OUTPUT_CHARS;
-var lastContextWindow = 0;
-function setContextWindow(contextWindow) {
-  lastContextWindow = contextWindow;
-  activeMaxChars = getMaxOutputChars(contextWindow);
-}
 function getActiveMaxChars() {
   return activeMaxChars;
 }
@@ -8204,7 +8208,7 @@ var RuleBasedActionClassifier = class {
 var defaultActionClassifier = new RuleBasedActionClassifier();
 
 // src/tools/executor.ts
-var PS_ERROR_RECORD_HEAD = /^(?:[\w.\-]+\s:\s)?(?:At line:\d+ char:\s*\d+|所在位置\s+行:\d+\s+字符:\s*\d+)\s*$/;
+var PS_ERROR_RECORD_HEAD = /^(?:[\w.\-]+\s:\s)?(?:At (?:line:\d+|\S+:\d+) char:\s*\d+|所在位置\s+(?:行|\S+):\d+\s+字符:\s*\d+)\s*$/;
 var ERROR_SIGNATURE = new RegExp(
   [
     // Python / .NET / Java: "OSError: …", "pkg.SomeException: …"
@@ -8220,11 +8224,22 @@ var ERROR_SIGNATURE = new RegExp(
   "i"
 );
 var PY_TRACEBACK_FRAME = /^\s*File ".*", line \d+/;
+function isPreviewNoise(line) {
+  const t = line.trim();
+  return /^(?:\[[^\]]+\]\s*)?Exit code \d+:$/.test(t) || // `formatFailureHeader()` 在拿不到退出码时打的那句 —— 与 "Exit code N:" 同类噪声。
+  // 不过滤的话它会占掉第一个展示位：2026-09-05 实战里 `export_slides.ps1 | Select-Object
+  // -First 3` 提前掐断管道被 PowerShell 报成失败，预览成了
+  // 「Command failed before exit code could be determined: · …\slide-02.png」——
+  // 两段都没用，而真正有信息的 `EXPORTED 25 slide(s)` 就在第二行、从没上屏。
+  /^(?:\[[^\]]+\]\s*)?Command failed before exit code could be determined:$/.test(t) || /^Traceback \(most recent call last\):$/.test(t) || line.startsWith("[Command failed") || line.startsWith("\u{1F4A1} ") || t === "";
+}
 function buildErrorPreview(content) {
   const raw = content.split("\n").map((l) => l.replace(/\r+$/, ""));
   const undecorated = [];
+  const decorationNeighbours = [];
   for (let i = 0; i < raw.length; i++) {
     if (PS_ERROR_RECORD_HEAD.test(raw[i])) {
+      if (undecorated.length > 0) decorationNeighbours.push(undecorated[undecorated.length - 1]);
       i++;
       while (i < raw.length && /^\s*\+ /.test(raw[i])) i++;
       i--;
@@ -8232,14 +8247,7 @@ function buildErrorPreview(content) {
     }
     undecorated.push(raw[i]);
   }
-  const meaningful = undecorated.filter(
-    (l) => !/^(?:\[[^\]]+\]\s*)?Exit code \d+:$/.test(l.trim()) && // `formatFailureHeader()` 在拿不到退出码时打的那句 —— 与 "Exit code N:" 同类噪声。
-    // 不过滤的话它会占掉第一个展示位：2026-09-05 实战里 `export_slides.ps1 | Select-Object
-    // -First 3` 提前掐断管道被 PowerShell 报成失败，预览成了
-    // 「Command failed before exit code could be determined: · …\slide-02.png」——
-    // 两段都没用，而真正有信息的 `EXPORTED 25 slide(s)` 就在第二行、从没上屏。
-    !/^(?:\[[^\]]+\]\s*)?Command failed before exit code could be determined:$/.test(l.trim()) && !/^Traceback \(most recent call last\):$/.test(l.trim()) && !l.startsWith("[Command failed") && !l.startsWith("\u{1F4A1} ") && l.trim() !== ""
-  );
+  const meaningful = undecorated.filter((l) => !isPreviewNoise(l));
   let primary = -1;
   for (let i = meaningful.length - 1; i >= 0; i--) {
     if (ERROR_SIGNATURE.test(meaningful[i])) {
@@ -8258,7 +8266,12 @@ function buildErrorPreview(content) {
     }
     previewLines = frame !== null ? [frame, meaningful[primary]] : [meaningful[primary]];
   } else {
-    previewLines = meaningful.length > 2 ? [meaningful[0], meaningful[meaningful.length - 1]] : meaningful.slice(0, 2);
+    const neighbour = decorationNeighbours.find((l) => !isPreviewNoise(l));
+    if (neighbour !== void 0) {
+      previewLines = [neighbour];
+    } else {
+      previewLines = meaningful.length > 2 ? [meaningful[0], meaningful[meaningful.length - 1]] : meaningful.slice(0, 2);
+    }
   }
   const preview = previewLines.map((l) => l.length > 160 ? l.slice(0, 160) + "\u2026" : l).join(" \xB7 ") || content.slice(0, 120);
   return preview.slice(0, 240);
@@ -8965,7 +8978,7 @@ Do NOT split a long document into many write_file(append=true) calls. That patte
     const mode = appendMode ? "appended" : "written";
     void (async () => {
       try {
-        const { updateFile } = await import("./indexer-RBEKMFT4.js");
+        const { updateFile } = await import("./indexer-FPKY7LCT.js");
         await updateFile(process.cwd(), filePath);
       } catch {
       }
@@ -14096,6 +14109,27 @@ function suggestSkillName(names, input) {
 // src/web/tool-executor-web.ts
 import { randomUUID as randomUUID2 } from "crypto";
 import { tmpdir as tmpdir2 } from "os";
+
+// src/web/socket-send.ts
+var MAX_PENDING_OUTPUT_BYTES = 16 * 1024 * 1024;
+var stalled = /* @__PURE__ */ new WeakSet();
+function sendSocketMessage(ws, message) {
+  if (ws.readyState !== ws.OPEN || stalled.has(ws)) return false;
+  const data = JSON.stringify(message);
+  if ((ws.bufferedAmount || 0) + Buffer.byteLength(data) > MAX_PENDING_OUTPUT_BYTES) {
+    stalled.add(ws);
+    ws.close(1013, "Output backlog exceeded; reconnect to reload session");
+    const timer = setTimeout(() => {
+      if (ws.readyState !== ws.CLOSED) ws.terminate();
+    }, 1e3);
+    timer.unref();
+    return false;
+  }
+  ws.send(data);
+  return true;
+}
+
+// src/web/tool-executor-web.ts
 import { existsSync as existsSync22, readFileSync as readFileSync17 } from "fs";
 var ToolExecutorWeb = class _ToolExecutorWeb {
   constructor(registry, ws) {
@@ -14125,6 +14159,7 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
   // 5 minutes
   /** Publicly readable by SessionHandler to check if confirm is active */
   confirming = false;
+  maxOutputChars = DEFAULT_MAX_TOOL_OUTPUT_CHARS;
   /** Session-level auto-approve toggle (/yolo command) */
   sessionAutoApprove = false;
   /** Session-level Auto Mode: rule-based low-risk auto approval. */
@@ -14207,9 +14242,7 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
     this.confirming = false;
   }
   send(msg) {
-    if (this.ws.readyState === this.ws.OPEN) {
-      this.ws.send(JSON.stringify(msg));
-    }
+    sendSocketMessage(this.ws, msg);
   }
   sendToolCallStart(call) {
     const dangerLevel = getDangerLevel(call.name, call.arguments);
@@ -14402,7 +14435,7 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
     if (!toolCallStarted) this.sendToolCallStart(call);
     try {
       const rawContent = await runTool(tool, call.arguments, call.name);
-      const content = truncateOutput(rawContent, call.name);
+      const content = truncateOutput(rawContent, call.name, this.maxOutputChars);
       this.sendToolCallResult(call, rawContent, false);
       runHook(this.hookConfig?.postToolExecution, { tool: call.name, status: "ok" });
       runLifecycleHooks(this.hookConfig, "PostToolUse", { tool: call.name, status: "ok" }, { configDir: this.hookConfigDir });
@@ -14467,7 +14500,7 @@ var ToolExecutorWeb = class _ToolExecutorWeb {
         }
         try {
           const rawContent = await runTool(tool, call.arguments, call.name);
-          const content = truncateOutput(rawContent, call.name);
+          const content = truncateOutput(rawContent, call.name, this.maxOutputChars);
           this.sendToolCallResult(call, rawContent, false);
           results[i] = { callId: call.id, content, isError: false };
         } catch (err) {
@@ -15416,6 +15449,7 @@ var HubAgent = class {
       model: this.modelId,
       systemPrompt,
       stream: false,
+      signal: opts?.signal,
       temperature: 0.7,
       maxTokens: 4096,
       ...this.thinking ?? {}
@@ -15450,15 +15484,21 @@ var HubAgent = class {
       model: this.modelId,
       systemPrompt,
       stream: true,
+      signal: opts?.signal,
       temperature: 0.7,
       maxTokens: 4096,
       ...this.thinking ?? {}
     });
-    for await (const chunk of stream) {
-      if (chunk.delta) {
-        raw += chunk.delta;
-        onToken?.(chunk.delta);
+    try {
+      for await (const chunk of stream) {
+        if (chunk.delta) {
+          raw += chunk.delta;
+          onToken?.(chunk.delta);
+        }
+        if (opts?.signal?.aborted) break;
       }
+    } catch (error) {
+      if (!opts?.signal?.aborted) throw error;
     }
     const { content, passed, converged } = parseTurn(raw);
     return {
@@ -15473,7 +15513,7 @@ var HubAgent = class {
   /**
    * Generate a summary of the entire discussion from this agent's perspective.
    */
-  async summarize(topic, history) {
+  async summarize(topic, history, signal) {
     const provider = this.providers.get(this.providerId);
     if (!provider) {
       throw new Error(`Provider "${this.providerId}" not available`);
@@ -15490,6 +15530,7 @@ var HubAgent = class {
       model: this.modelId,
       stream: false,
       temperature: 0.3,
+      signal,
       maxTokens: 4096,
       ...this.thinking ?? {}
     });
@@ -15583,6 +15624,8 @@ var DiscussionOrchestrator = class {
   agents = [];
   state;
   aborted = false;
+  controller = new AbortController();
+  cancelReview;
   humanSteer;
   voteConverge;
   /** Callback for rendering events */
@@ -15622,6 +15665,8 @@ var DiscussionOrchestrator = class {
   /** Signal the orchestrator to stop after current turn */
   abort() {
     this.aborted = true;
+    this.controller.abort();
+    this.cancelReview?.();
   }
   /**
    * Run the full discussion on a given topic.
@@ -15632,6 +15677,7 @@ var DiscussionOrchestrator = class {
     this.state.round = 0;
     this.state.finished = false;
     this.aborted = false;
+    this.controller = new AbortController();
     try {
       for (let round = 1; round <= this.state.maxRounds; round++) {
         if (this.aborted) {
@@ -15652,7 +15698,7 @@ var DiscussionOrchestrator = class {
               round,
               this.state.maxRounds,
               (token) => this.emit({ type: "agent_token", roleId: agent.role.id, token }),
-              { voteConverge: this.voteConverge }
+              { voteConverge: this.voteConverge, signal: this.controller.signal }
             );
             this.state.messages.push(message);
             if (message.converged) convergedCount++;
@@ -15664,6 +15710,7 @@ var DiscussionOrchestrator = class {
               this.emit({ type: "agent_spoke", roleId: agent.role.id, message });
             }
           } catch (err) {
+            if (this.aborted) break;
             const errMsg = err instanceof Error ? err.message : String(err);
             this.emit({ type: "error", roleId: agent.role.id, message: errMsg });
             this.state.messages.push({
@@ -15675,6 +15722,10 @@ var DiscussionOrchestrator = class {
           }
         }
         this.emit({ type: "round_end", round });
+        if (this.aborted) {
+          this.emit({ type: "discussion_end", reason: "user_interrupt" });
+          break;
+        }
         if (allPassed && round > 1) {
           this.emit({ type: "discussion_end", reason: "consensus" });
           break;
@@ -15691,7 +15742,18 @@ var DiscussionOrchestrator = class {
           break;
         }
         if (this.humanSteer && this.onRoundReview && !this.aborted) {
-          const steer = await this.onRoundReview({ round, maxRounds: this.state.maxRounds, state: this.state });
+          const stopped = new Promise((resolve13) => {
+            this.cancelReview = () => resolve13({ action: "stop" });
+          });
+          let steer;
+          try {
+            steer = await Promise.race([
+              this.onRoundReview({ round, maxRounds: this.state.maxRounds, state: this.state }),
+              stopped
+            ]);
+          } finally {
+            this.cancelReview = void 0;
+          }
           if (steer.action === "stop") {
             this.emit({ type: "discussion_end", reason: "human_stop" });
             break;
@@ -15712,7 +15774,7 @@ var DiscussionOrchestrator = class {
       const errMsg = err instanceof Error ? err.message : String(err);
       this.emit({ type: "error", message: errMsg });
     }
-    await this.generateSummary();
+    if (!this.aborted) await this.generateSummary();
     this.state.finished = true;
     return this.state;
   }
@@ -15730,7 +15792,7 @@ var DiscussionOrchestrator = class {
       return;
     }
     try {
-      this.state.summary = await summarizer.summarize(this.state.topic, this.state.messages);
+      this.state.summary = await summarizer.summarize(this.state.topic, this.state.messages, this.controller.signal);
       this.emit({ type: "summary", content: this.state.summary });
     } catch (err) {
       const errMsg = err instanceof Error ? err.message : String(err);
@@ -16206,11 +16268,11 @@ function routeDecisionRows(message, currentModel, decision) {
 }
 
 // src/web/commands/provider-commands.ts
-function syncSessionProvider(ctx) {
+async function syncSessionProvider(ctx) {
   const session = ctx.sessions.current;
   if (!session) return;
   session.updateProvider(ctx.currentProvider, ctx.currentModel);
-  ctx.saveIfNeeded();
+  await ctx.saveIfNeeded();
 }
 async function handleProvider(args, ctx) {
   const id = args[0];
@@ -16253,7 +16315,7 @@ async function handleProvider(args, ctx) {
   ctx.currentProvider = outcome.providerId;
   ctx.currentModel = outcome.model;
   ctx.updateContextWindow();
-  syncSessionProvider(ctx);
+  await syncSessionProvider(ctx);
   ctx.send({ type: "info", message: outcome.message });
   ctx.sendStatus();
 }
@@ -16307,7 +16369,7 @@ async function handleModel(args, ctx) {
   }
   ctx.currentModel = outcome.model;
   ctx.updateContextWindow();
-  syncSessionProvider(ctx);
+  await syncSessionProvider(ctx);
   ctx.send({
     type: "info",
     message: outcome.warning ? `${outcome.message} \u2014 ${outcome.warning}` : outcome.message
@@ -17192,7 +17254,7 @@ async function handleClear(_args, ctx) {
   const prior = ctx.sessions.current;
   const priorId = prior?.id ?? null;
   const priorCount = prior?.messages.length ?? 0;
-  ctx.saveIfNeeded();
+  await ctx.saveIfNeeded();
   const created = ctx.sessions.createSession(ctx.currentProvider, ctx.currentModel);
   ctx.unsavedSessions.set(created.id, created);
   ctx.resetWebSessionUsage();
@@ -17214,7 +17276,7 @@ Cache:  write=${cacheCreate} read=${cacheRead}` : "";
 Cost:   ${formatCost(cost)}` : "";
   let memoryLine = "";
   try {
-    const { countPendingMemories: countPendingMemories2 } = await import("./persistent-memory-A7RPDLR7.js");
+    const { countPendingMemories: countPendingMemories2 } = await import("./persistent-memory-XZISXRWT.js");
     const pending = countPendingMemories2(ctx.config.getConfigDir());
     if (pending > 0) memoryLine = `
 Memory: \u26A0 ${pending} pending approval \u2014 see the Memory panel or /memory`;
@@ -17230,8 +17292,13 @@ Tokens: in=${ctx.sessionTokenUsage.inputTokens} out=${ctx.sessionTokenUsage.outp
 }
 async function handleSession(args, ctx) {
   const sub = args[0];
+  if (sub === "save") {
+    await ctx.saveIfNeeded();
+    if (!ctx.sessions.current?.dirty) ctx.send({ type: "info", message: "Session saved." });
+    return;
+  }
   if (sub === "new") {
-    ctx.saveIfNeeded();
+    await ctx.saveIfNeeded();
     const created = ctx.sessions.createSession(ctx.currentProvider, ctx.currentModel);
     ctx.unsavedSessions.set(created.id, created);
     ctx.resetWebSessionUsage();
@@ -17242,7 +17309,7 @@ async function handleSession(args, ctx) {
   }
   if (sub === "load" && args[1]) {
     const targetId = args[1];
-    ctx.saveIfNeeded();
+    await ctx.saveIfNeeded();
     const cachedExact = ctx.unsavedSessions.get(targetId);
     const cached = cachedExact ?? [...ctx.unsavedSessions.values()].find((s) => s.id.startsWith(targetId));
     if (cached) {
@@ -18197,7 +18264,7 @@ async function handleTest(args, ctx) {
       const isCommand = argStr.includes(" ") || /^(mvn|gradle|npm|pytest|cargo|go)\b/.test(argStr);
       testArgs = isCommand ? { command: argStr } : { filter: argStr };
     }
-    const runTests = ctx.runTests ?? (await import("./run-tests-MJ3SCW27.js")).executeTests;
+    const runTests = ctx.runTests ?? (await import("./run-tests-UEE3OMLS.js")).executeTests;
     const report = await runTests(testArgs);
     ctx.send({ type: "info", message: report });
   } catch (err) {
@@ -18489,9 +18556,9 @@ async function handleContext(_args, ctx) {
 async function handleIndex(args, ctx) {
   const sub = (args[0] ?? "status").toLowerCase();
   const root = process.cwd();
-  const { loadIndex: loadIndex2, clearIndex } = await import("./store-VO37H6LS.js");
-  const { indexProject: indexProject2 } = await import("./indexer-RBEKMFT4.js");
-  const { loadVectorStore, clearVectorStore } = await import("./vector-store-JBAE6PS4.js");
+  const { loadIndex: loadIndex2, clearIndex } = await import("./store-SIKHCUYJ.js");
+  const { indexProject: indexProject2 } = await import("./indexer-FPKY7LCT.js");
+  const { loadVectorStore, clearVectorStore } = await import("./vector-store-JAXWDZYW.js");
   if (sub === "status") {
     const idx = loadIndex2(root);
     const vec = loadVectorStore(root);
@@ -18514,6 +18581,7 @@ async function handleIndex(args, ctx) {
   } else if (sub === "rebuild") {
     ctx.send({ type: "info", message: `Indexing ${root}\u2026` });
     const { stats } = await indexProject2(root, { force: true });
+    if (stats.incomplete) ctx.send({ type: "info", message: "Partial index: scan limit or unreadable files reached. Unscanned entries were retained." });
     ctx.send({
       type: "info",
       message: `\u2713 Indexed ${stats.filesParsed} files (${stats.symbols} symbols) in ${stats.durationMs}ms`
@@ -18540,7 +18608,7 @@ async function handleIndex(args, ctx) {
       message: `Building semantic index for ${idx.symbolCount} symbols\u2026 (first run downloads ~117 MB model)`
     });
     try {
-      const { rebuildSemanticIndex } = await import("./semantic-VPNKXKKK.js");
+      const { rebuildSemanticIndex } = await import("./semantic-QOBAXEQ4.js");
       const stats = await rebuildSemanticIndex(root);
       const first = stats.modelFirstLoadMs ? ` (model load+first batch ${stats.modelFirstLoadMs}ms)` : "";
       ctx.send({
@@ -18587,7 +18655,7 @@ async function handleMemory(args, ctx) {
   }
   if (intent.kind === "status") {
     const { getChatIndexStatus: getChatIndexStatus2 } = await import("./chat-index-DGUOUUQW.js");
-    const { listMemoryEntries: listMemoryEntries2, isMemoryExpired: isMemoryExpired2, formatMemoryForPrompt: formatMemoryForPrompt2 } = await import("./persistent-memory-A7RPDLR7.js");
+    const { listMemoryEntries: listMemoryEntries2, isMemoryExpired: isMemoryExpired2, formatMemoryForPrompt: formatMemoryForPrompt2 } = await import("./persistent-memory-XZISXRWT.js");
     const memories = listMemoryEntries2(configDir, { includeExpired: true, includeRejected: true });
     const injected = formatMemoryForPrompt2(configDir, process.cwd(), ctx.config.get("memory")?.maxChars);
     const view = buildMemoryStatusView({
@@ -18610,7 +18678,7 @@ async function handleMemory(args, ctx) {
     return;
   }
   if (intent.kind === "recall") {
-    const { searchPersistentMemories: searchPersistentMemories2, touchMemoryReferences: touchMemoryReferences2 } = await import("./persistent-memory-A7RPDLR7.js");
+    const { searchPersistentMemories: searchPersistentMemories2, touchMemoryReferences: touchMemoryReferences2 } = await import("./persistent-memory-XZISXRWT.js");
     const { searchChatMemory: searchChatMemory2 } = await import("./chat-index-DGUOUUQW.js");
     const persistentHits = searchPersistentMemories2(configDir, intent.query, process.cwd(), 3);
     if (persistentHits.length > 0) {
@@ -18731,7 +18799,7 @@ async function handleMemory(args, ctx) {
     ctx.handleMemoryManage(intent.action, args[1], intent.action === "expire" ? args[2] : void 0);
   } else if (intent.kind === "export") {
     if (args[1] === "md") {
-      const { exportMemoryEntries: exportMemoryEntries2 } = await import("./persistent-memory-A7RPDLR7.js");
+      const { exportMemoryEntries: exportMemoryEntries2 } = await import("./persistent-memory-XZISXRWT.js");
       ctx.send({
         type: "export_data",
         format: "md",
@@ -19736,7 +19804,7 @@ No tools match "${filter}".
           const { join: join29 } = await import("path");
           const { existsSync: existsSync33 } = await import("fs");
           const { getGitRoot: getGitRoot2 } = await import("./git-context-VNCA2GU7.js");
-          const { MCP_PROJECT_CONFIG_NAME: MCP_PROJECT_CONFIG_NAME2 } = await import("./constants-JDPKWZJP.js");
+          const { MCP_PROJECT_CONFIG_NAME: MCP_PROJECT_CONFIG_NAME2 } = await import("./constants-AXBD2EEB.js");
           const { approveProject, hashMcpFile } = await import("./project-trust-MUG325AW.js");
           const cwd = process.cwd();
           const projectRoot = getGitRoot2(cwd) ?? cwd;
@@ -20655,7 +20723,7 @@ function createReviewCommands() {
       usage: "/test [command|filter]",
       async execute(args, ctx) {
         try {
-          const { executeTests } = await import("./run-tests-MJ3SCW27.js");
+          const { executeTests } = await import("./run-tests-UEE3OMLS.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {
@@ -20906,9 +20974,9 @@ function createMemoryCommands() {
       async execute(args, ctx) {
         const sub = (args[0] ?? "status").toLowerCase();
         const root = process.cwd();
-        const { loadIndex: loadIndex2, clearIndex } = await import("./store-VO37H6LS.js");
-        const { indexProject: indexProject2 } = await import("./indexer-RBEKMFT4.js");
-        const { loadVectorStore, clearVectorStore } = await import("./vector-store-JBAE6PS4.js");
+        const { loadIndex: loadIndex2, clearIndex } = await import("./store-SIKHCUYJ.js");
+        const { indexProject: indexProject2 } = await import("./indexer-FPKY7LCT.js");
+        const { loadVectorStore, clearVectorStore } = await import("./vector-store-JAXWDZYW.js");
         if (sub === "status") {
           const idx = loadIndex2(root);
           const vec = loadVectorStore(root);
@@ -20939,6 +21007,7 @@ function createMemoryCommands() {
             }
           });
           process.stdout.write("\r\x1B[K");
+          if (stats.incomplete) console.log(theme.dim("  Partial index: scan limit or unreadable files reached; unscanned entries retained."));
           console.log(theme.success(
             `  \u2713 Indexed ${stats.filesParsed} files (${stats.symbols} symbols) in ${stats.durationMs}ms`
           ));
@@ -20967,7 +21036,7 @@ function createMemoryCommands() {
           }
           console.log(theme.dim(`  Building semantic index for ${idx.symbolCount} symbols\u2026`));
           console.log(theme.dim("  (First run downloads ~117 MB embedding model to ~/.aicli/models/)"));
-          const { rebuildSemanticIndex } = await import("./semantic-VPNKXKKK.js");
+          const { rebuildSemanticIndex } = await import("./semantic-QOBAXEQ4.js");
           try {
             const stats = await rebuildSemanticIndex(root, {
               onProgress: (done, total) => {
@@ -22566,7 +22635,7 @@ var webCommandHandlers = {
   search: handleSearch,
   undo: handleUndo
 };
-var SessionHandler = class {
+var SessionHandler = class _SessionHandler {
   ws;
   config;
   costTracker;
@@ -22617,6 +22686,7 @@ var SessionHandler = class {
   abortController = null;
   userInterjection = null;
   processing = false;
+  disconnected = false;
   /** P4: active hub discussion orchestrator (web room), if any. */
   hubOrchestrator = null;
   /** P4b: pending between-rounds human-steer prompts (requestId → resolver). */
@@ -22643,9 +22713,13 @@ var SessionHandler = class {
    * 会话一旦保存到磁盘（有消息后），会从此 Map 中移除。
    */
   unsavedSessions = /* @__PURE__ */ new Map();
+  // Failed saves survive a socket reconnect, scoped to the owning config directory.
+  static recovery = /* @__PURE__ */ new Map();
+  static acceptedChats = /* @__PURE__ */ new Map();
   constructor(ws, shared) {
     this.ws = ws;
     this.config = shared.config;
+    this.unsavedSessions = new Map(_SessionHandler.recovery.get(this.config.getConfigDir()));
     this.costTracker = shared.costTracker;
     this.providers = shared.providers;
     this.sessions = shared.sessions;
@@ -22713,9 +22787,7 @@ var SessionHandler = class {
    * 接口之间的任何漂移（少一个成员、签名改了）都会当场编译失败，而不是等到运行时。
    */
   send(msg) {
-    if (this.ws.readyState === this.ws.OPEN) {
-      this.ws.send(JSON.stringify(msg));
-    }
+    sendSocketMessage(this.ws, msg);
   }
   sendStatus() {
     const providerList = this.providers.listAvailable().map((p) => ({
@@ -22769,6 +22841,7 @@ var SessionHandler = class {
     });
   }
   async handleMessage(raw) {
+    if (this.disconnected) return;
     let msg;
     try {
       msg = JSON.parse(raw);
@@ -22777,8 +22850,33 @@ var SessionHandler = class {
       return;
     }
     switch (msg.type) {
-      case "chat":
+      case "chat": {
+        if (msg.messageId) {
+          if (typeof msg.messageId !== "string" || msg.messageId.length > 200) throw new Error("Invalid message ID");
+          const scope = this.config.getConfigDir();
+          const accepted = _SessionHandler.acceptedChats.get(scope) ?? /* @__PURE__ */ new Map();
+          const prior = accepted.get(msg.messageId);
+          if (prior) {
+            this.send({ type: "chat_ack", messageId: msg.messageId, accepted: true, duplicate: true, sessionId: prior });
+            return;
+          }
+          if (this.processing || typeof msg.content !== "string") {
+            this.send({ type: "chat_ack", messageId: msg.messageId, accepted: false, error: "A request is already running, or the message is invalid. Your draft was kept." });
+            return;
+          }
+          const imageError = imageValidationError(msg.images);
+          if (imageError) {
+            this.send({ type: "chat_ack", messageId: msg.messageId, accepted: false, error: imageError });
+            return;
+          }
+          this.ensureSession();
+          accepted.set(msg.messageId, this.sessions.current.id);
+          while (accepted.size > 1e3) accepted.delete(accepted.keys().next().value);
+          _SessionHandler.acceptedChats.set(scope, accepted);
+          this.send({ type: "chat_ack", messageId: msg.messageId, accepted: true, sessionId: this.sessions.current.id });
+        }
         return this.handleChat(msg.content, msg.images);
+      }
       case "command":
         return this.handleCommand(msg.name, msg.args);
       case "confirm_response":
@@ -22820,7 +22918,7 @@ var SessionHandler = class {
       case "hub_start":
         return this.handleHubStart(msg);
       case "hub_abort":
-        this.hubOrchestrator?.abort();
+        this.cancelHub();
         return;
       case "hub_steer": {
         const resolve13 = this.pendingHubReview.get(msg.requestId);
@@ -22835,7 +22933,10 @@ var SessionHandler = class {
         return;
     }
   }
-  onDisconnect() {
+  onDisconnect(closeSocket = true) {
+    if (this.disconnected) return;
+    this.disconnected = true;
+    if (closeSocket && this.ws.readyState === this.ws.OPEN) this.ws.close(1001, "Connection closed; reconnect to restore session");
     runLifecycleHooks(mergePluginHooks(this.config.get("hooks") ?? void 0, this.config.getConfigDir()), "Stop", { sessionId: this.sessions.current?.id }, { configDir: this.config.getConfigDir() });
     this.toolExecutor.cancelAll();
     if (this.abortController) this.abortController.abort();
@@ -22843,18 +22944,24 @@ var SessionHandler = class {
     this.pendingAskUser.clear();
     for (const resolve13 of this.pendingAutoPause.values()) resolve13({ action: "stop" });
     this.pendingAutoPause.clear();
-    this.saveIfNeeded();
+    this.cancelHub();
+    void this.saveIfNeeded();
     if (this._bashSessionKey) clearBashSession(this._bashSessionKey);
   }
+  cancelHub() {
+    this.hubOrchestrator?.abort();
+    for (const resolve13 of this.pendingHubReview.values()) resolve13({ action: "stop" });
+    this.pendingHubReview.clear();
+  }
   /** 根据当前模型 context window 更新工具输出截断上限 */
   updateContextWindow() {
     try {
       const cfgOutputCap = this.config.get("maxToolOutputChars");
-      if (typeof cfgOutputCap === "number" && cfgOutputCap > 0) setMaxOutputCap(cfgOutputCap);
       const provider = this.providers.get(this.currentProvider);
       const modelInfo = provider?.info.models.find((m) => m.id === this.currentModel);
-      if (modelInfo?.contextWindow) setContextWindow(modelInfo.contextWindow);
+      this.toolExecutor.maxOutputChars = getMaxOutputChars(modelInfo?.contextWindow, cfgOutputCap ?? 0);
     } catch {
+      this.toolExecutor.maxOutputChars = DEFAULT_MAX_TOOL_OUTPUT_CHARS;
     }
   }
   /** 获取当前模型的 context window 大小（0 表示未知）*/
@@ -22906,12 +23013,24 @@ var SessionHandler = class {
     return total;
   }
   /** Save session only if it exists and has messages (never persist empty "Untitled" sessions). */
-  saveIfNeeded() {
-    if (this.sessions.current && this.sessions.current.messages.length > 0) {
-      autoTrimSessionIfNeeded(this.sessions.current);
-      const id = this.sessions.current.id;
-      this.sessions.save();
-      this.unsavedSessions.delete(id);
+  async saveIfNeeded() {
+    const session = this.sessions.current;
+    if (!session?.messages.length) return;
+    const scope = this.config.getConfigDir();
+    try {
+      if (session.dirty) autoTrimSessionIfNeeded(session);
+      await this.sessions.save();
+      if (session.dirty) return;
+      this.unsavedSessions.delete(session.id);
+      _SessionHandler.recovery.get(scope)?.delete(session.id);
+    } catch (err) {
+      this.unsavedSessions.set(session.id, session);
+      const recovered = _SessionHandler.recovery.get(scope) ?? /* @__PURE__ */ new Map();
+      recovered.set(session.id, session);
+      _SessionHandler.recovery.set(scope, recovered);
+      const message = `Session ${session.id} was NOT saved: ${err instanceof Error ? err.message : String(err)}. Content is retained in memory; use /session save to retry. Do not stop the server before saving.`;
+      this.send({ type: "info", message });
+      process.stderr.write(message + "\n");
     }
   }
   /** Lazily create a session if none exists yet (deferred from constructor). */
@@ -23036,20 +23155,15 @@ var SessionHandler = class {
         const kinds = [...new Set(secretHits.map((h) => h.kind))].join(", ");
         this.send({ type: "info", message: "Possible secret in prompt (" + kinds + ")." });
       }
-      const ALLOWED_IMAGE_MIMES = /* @__PURE__ */ new Set(["image/png", "image/jpeg", "image/gif", "image/webp", "image/svg+xml"]);
-      const MAX_IMAGE_SIZE = 10 * 1024 * 1024;
+      const imageError = imageValidationError(images);
+      if (imageError) {
+        this.send({ type: "error", message: imageError });
+        return;
+      }
       let msgContent;
       if (images && images.length > 0) {
         const parts = [];
         for (const img of images) {
-          if (!ALLOWED_IMAGE_MIMES.has(img.mime)) {
-            this.send({ type: "error", message: `Rejected image: unsupported MIME type "${img.mime}"` });
-            return;
-          }
-          if (img.data && img.data.length > MAX_IMAGE_SIZE) {
-            this.send({ type: "error", message: `Rejected image: too large (${(img.data.length / 1024 / 1024).toFixed(1)} MB, max 10 MB)` });
-            return;
-          }
           parts.push({
             type: "image_url",
             image_url: { url: `data:${img.mime};base64,${img.data}` }
@@ -23103,7 +23217,7 @@ var SessionHandler = class {
       this.send({ type: "error", message });
     } finally {
       this.processing = false;
-      this.saveIfNeeded();
+      await this.saveIfNeeded();
       this.sendStatus();
       this.sendSessionList();
     }
@@ -23620,6 +23734,10 @@ ${summaryContent}`,
   }
   // ── Commands ─────────────────────────────────────────────────────
   async handleCommand(name, args) {
+    if (this.processing && ["session", "clear", "provider", "model", "rewind", "branch", "compact"].includes(name)) {
+      this.send({ type: "info", message: "Stop the current request before changing sessions or conversation settings." });
+      return;
+    }
     const cliOnlyReason = CLI_ONLY_WEB_COMMANDS.get(name);
     if (cliOnlyReason) {
       this.send({
@@ -24566,7 +24684,7 @@ async function startWebServer(options = {}) {
     next();
   });
   const server = createServer(app);
-  const WS_MAX_PAYLOAD = 1 * 1024 * 1024;
+  const WS_MAX_PAYLOAD = MAX_CHAT_BYTES;
   const WS_MSG_RATE_PER_SEC = 30;
   const WS_MSG_BURST = 60;
   const WS_PREAUTH_TIMEOUT_MS = 3e4;
@@ -24639,6 +24757,7 @@ async function startWebServer(options = {}) {
   app.get("/api/status", (_req, res) => {
     res.json({
       version: VERSION,
+      chatLimits: { maxChatBytes: MAX_CHAT_BYTES, maxImageBytes: MAX_IMAGE_BYTES },
       providers: availableProviders.map((p) => ({
         id: p.info.id,
         displayName: p.info.displayName,
@@ -24847,11 +24966,6 @@ async function startWebServer(options = {}) {
     const tabId = params.get("tabId") || `tab-${Date.now()}`;
     const cookies = parseCookie(req.headers.cookie ?? "");
     const token = cookies["aicli_token"] || "";
-    const existing = handlers.get(tabId);
-    if (existing) {
-      existing.onDisconnect();
-      handlers.delete(tabId);
-    }
     let tokens = WS_MSG_BURST;
     let lastRefill = Date.now();
     const takeToken = () => {
@@ -24867,6 +24981,32 @@ async function startWebServer(options = {}) {
     };
     let authenticatedUser = null;
     let handler = null;
+    let handlerKey = "";
+    const attachHandler = (resources) => {
+      if (handler) {
+        handler.onDisconnect(false);
+        if (handlers.get(handlerKey) === handler) handlers.delete(handlerKey);
+      }
+      handlerKey = JSON.stringify([authenticatedUser, tabId]);
+      const existing = handlers.get(handlerKey);
+      existing?.onDisconnect();
+      const attached = new SessionHandler(ws, { ...resources, sessions: new SessionManager(resources.config) });
+      handlers.set(handlerKey, attached);
+      return attached;
+    };
+    let alive = true;
+    ws.on("pong", () => {
+      alive = true;
+    });
+    const heartbeat = setInterval(() => {
+      if (!alive) {
+        ws.terminate();
+        return;
+      }
+      alive = false;
+      if (ws.readyState === ws.OPEN) ws.ping();
+    }, 3e4);
+    heartbeat.unref();
     let preAuthTimer = setTimeout(() => {
       if (!handler && ws.readyState === ws.OPEN) {
         try {
@@ -24887,14 +25027,12 @@ async function startWebServer(options = {}) {
     const authRequired = authManager.isEnabled();
     if (!authRequired) {
       console.log(`   \u2713 Tab connected: ${tabId.slice(0, 12)} (no auth) (total: ${handlers.size + 1})`);
-      handler = new SessionHandler(ws, shared);
-      handlers.set(tabId, handler);
+      handler = attachHandler(shared);
       clearPreAuthTimer();
     } else if (authenticatedUser) {
       console.log(`   \u2713 Tab connected: ${tabId.slice(0, 12)} (user: ${authenticatedUser}) (total: ${handlers.size + 1})`);
       const userShared = getUserShared(authenticatedUser);
-      handler = new SessionHandler(ws, userShared);
-      handlers.set(tabId, handler);
+      handler = attachHandler(userShared);
       clearPreAuthTimer();
     } else {
       console.log(`   \u23F3 Tab waiting auth: ${tabId.slice(0, 12)}`);
@@ -24939,8 +25077,7 @@ async function startWebServer(options = {}) {
             authManager.login(username, password);
             authenticatedUser = username;
             const userShared = getUserShared(username);
-            handler = new SessionHandler(ws, userShared);
-            handlers.set(tabId, handler);
+            handler = attachHandler(userShared);
             clearPreAuthTimer();
             console.log(`   \u2713 User registered & connected: ${username} (tab: ${tabId.slice(0, 12)})`);
             ws.send(JSON.stringify({ type: "auth_result", success: true, username }));
@@ -24955,8 +25092,7 @@ async function startWebServer(options = {}) {
             }
             authenticatedUser = verifiedUser;
             const userShared = getUserShared(verifiedUser);
-            handler = new SessionHandler(ws, userShared);
-            handlers.set(tabId, handler);
+            handler = attachHandler(userShared);
             clearPreAuthTimer();
             console.log(`   \u2713 Token auth: ${verifiedUser} (tab: ${tabId.slice(0, 12)})`);
             ws.send(JSON.stringify({ type: "auth_result", success: true, username: verifiedUser }));
@@ -24970,8 +25106,7 @@ async function startWebServer(options = {}) {
             }
             authenticatedUser = username;
             const userShared = getUserShared(username);
-            handler = new SessionHandler(ws, userShared);
-            handlers.set(tabId, handler);
+            handler = attachHandler(userShared);
             clearPreAuthTimer();
             console.log(`   \u2713 User logged in: ${username} (tab: ${tabId.slice(0, 12)})`);
             ws.send(JSON.stringify({ type: "auth_result", success: true, username }));
@@ -24999,10 +25134,11 @@ async function startWebServer(options = {}) {
       }
     });
     ws.on("close", () => {
+      clearInterval(heartbeat);
       clearPreAuthTimer();
-      const wasTracked = handlers.has(tabId);
+      const wasTracked = handlers.get(handlerKey) === handler;
       if (handler) handler.onDisconnect();
-      if (wasTracked) handlers.delete(tabId);
+      if (wasTracked) handlers.delete(handlerKey);
       console.log(`   \u2717 Tab disconnected: ${tabId.slice(0, 12)} (total: ${handlers.size})`);
     });
     ws.on("error", (err) => {