jinzd-ai-cli 0.4.307 → 0.4.309

package/dist/chunk-FVXNEZEW.js

@@ -0,0 +1,161 @@
+import {
+  getExecutionConfigDir,
+  scopedState
+} from "./chunk-QMFMST2T.js";
+
+// src/security/file-access.ts
+import { existsSync, realpathSync, openSync, readSync, closeSync, statSync } from "fs";
+import { basename, dirname, resolve, join } from "path";
+import { homedir } from "os";
+function canonicalPath(value) {
+  let cursor = resolve(value);
+  const missing = [];
+  while (!existsSync(cursor)) {
+    const parent = dirname(cursor);
+    if (parent === cursor) throw new Error("Cannot resolve path");
+    missing.unshift(basename(cursor));
+    cursor = parent;
+  }
+  return resolve(realpathSync(cursor), ...missing);
+}
+function isCredentialVault(value) {
+  const normalize = (p) => process.platform === "win32" ? p.toLowerCase() : p;
+  const target = normalize(canonicalPath(value));
+  const hostRoot = normalize(canonicalPath(join(homedir(), ".aicli")));
+  if (basename(target) === "config.json" && normalize(dirname(dirname(dirname(target)))) === hostRoot && basename(dirname(dirname(target))) === "users") return true;
+  return [getExecutionConfigDir(), join(homedir(), ".aicli")].some((root) => ["config.json", "users.json"].some((file) => {
+    const vault = canonicalPath(join(root, file));
+    if (target === normalize(vault)) return true;
+    try {
+      const a = statSync(target), b = statSync(vault);
+      return a.ino !== 0 && a.dev === b.dev && a.ino === b.ino;
+    } catch {
+      return false;
+    }
+  }));
+}
+function assertReadablePath(value) {
+  if (isCredentialVault(value)) throw new Error("[Refused] Credential vault files cannot be read by tools. Use aicli config or an external editor.");
+}
+var MAX_SNAPSHOT_BYTES = 2 * 1024 * 1024;
+var MAX_SNAPSHOT_TOTAL_BYTES = 16 * 1024 * 1024;
+function readSnapshot(value) {
+  const fd = openSync(value, "r");
+  try {
+    const buffer = Buffer.alloc(MAX_SNAPSHOT_BYTES + 1);
+    let bytes = 0;
+    while (bytes < buffer.length) {
+      const n = readSync(fd, buffer, bytes, buffer.length - bytes, null);
+      if (!n) break;
+      bytes += n;
+    }
+    if (bytes > MAX_SNAPSHOT_BYTES) throw new Error("File exceeds 2 MiB snapshot limit; edit refused because a complete undo snapshot cannot be kept.");
+    return buffer.subarray(0, bytes).toString("utf8");
+  } finally {
+    closeSync(fd);
+  }
+}
+
+// src/tools/file-checkpoint.ts
+import { existsSync as existsSync2, writeFileSync, unlinkSync } from "fs";
+var MAX_SNAPSHOTS = 200;
+var FileCheckpointStore = class {
+  stateKey = /* @__PURE__ */ Symbol("snapshots");
+  get snapshots() {
+    return scopedState(this.stateKey, () => ({ items: [] })).items;
+  }
+  set snapshots(items) {
+    scopedState(this.stateKey, () => ({ items: [] })).items = items;
+  }
+  /**
+   * 在文件写入前调用，保存当前文件内容。
+   * 同一 messageIndex 下同一文件只记录首次快照。
+   */
+  snapshot(filePath, messageIndex) {
+    const exists = this.snapshots.some(
+      (s) => s.filePath === filePath && s.messageIndex === messageIndex
+    );
+    if (exists) return;
+    let content = null;
+    if (existsSync2(filePath)) {
+      content = readSnapshot(filePath);
+    }
+    this.snapshots.push({
+      filePath,
+      content,
+      messageIndex,
+      timestamp: Date.now()
+    });
+    while (this.snapshots.length > MAX_SNAPSHOTS || this.snapshots.reduce((n, e) => n + Buffer.byteLength(e.content ?? ""), 0) > MAX_SNAPSHOT_TOTAL_BYTES) {
+      this.snapshots.shift();
+    }
+  }
+  /**
+   * 恢复所有在指定消息索引之后被修改的文件到该索引时的状态。
+   * @returns 恢复和删除的文件数量
+   */
+  restoreToMessageIndex(targetIndex) {
+    const modifiedAfter = this.snapshots.filter((s) => s.messageIndex > targetIndex);
+    const uniqueFiles = [...new Set(modifiedAfter.map((s) => s.filePath))];
+    let restored = 0;
+    let deleted = 0;
+    const files = [];
+    for (const filePath of uniqueFiles) {
+      const beforeSnapshots = this.snapshots.filter((s) => s.filePath === filePath && s.messageIndex <= targetIndex).sort((a, b) => b.messageIndex - a.messageIndex);
+      const restoreTo = beforeSnapshots[0];
+      try {
+        if (restoreTo) {
+          if (restoreTo.content === null) {
+            if (existsSync2(filePath)) {
+              unlinkSync(filePath);
+              deleted++;
+              files.push(filePath);
+            }
+          } else {
+            writeFileSync(filePath, restoreTo.content, "utf-8");
+            restored++;
+            files.push(filePath);
+          }
+        } else {
+          const earliest = this.snapshots.filter((s) => s.filePath === filePath).sort((a, b) => a.messageIndex - b.messageIndex)[0];
+          if (earliest && earliest.content === null) {
+            if (existsSync2(filePath)) {
+              unlinkSync(filePath);
+              deleted++;
+              files.push(filePath);
+            }
+          } else if (earliest) {
+            writeFileSync(filePath, earliest.content, "utf-8");
+            restored++;
+            files.push(filePath);
+          }
+        }
+      } catch {
+      }
+    }
+    this.snapshots = this.snapshots.filter((s) => s.messageIndex <= targetIndex);
+    return { restored, deleted, files };
+  }
+  /** 获取所有快照（供调试/显示） */
+  getSnapshots() {
+    return this.snapshots;
+  }
+  /** 获取有快照的消息索引列表（去重排序） */
+  getMessageIndices() {
+    return [...new Set(this.snapshots.map((s) => s.messageIndex))].sort((a, b) => a - b);
+  }
+  /** 清空所有快照（新会话/清除时调用） */
+  clear() {
+    this.snapshots = [];
+  }
+};
+var fileCheckpoints = new FileCheckpointStore();
+
+export {
+  canonicalPath,
+  isCredentialVault,
+  assertReadablePath,
+  MAX_SNAPSHOT_TOTAL_BYTES,
+  readSnapshot,
+  fileCheckpoints
+};

package/dist/{chunk-AHL6KOGM.js → chunk-HXINWG37.js}

@@ -8,12 +8,12 @@ import {
 } from "./chunk-HOSJZMQS.js";
 import {
   atomicWriteFileSync
-} from "./chunk-IW3Q7AE5.js";
+} from "./chunk-BMLQPSHP.js";
 import {
   MEMORY_FILE_NAME,
   MEMORY_MAX_CHARS,
   MEMORY_STORE_FILE_NAME
-} from "./chunk-VAV2IJ3R.js";
+} from "./chunk-3CNPJLVI.js";
 
 // src/memory/persistent-memory.ts
 import { copyFileSync, existsSync, mkdirSync, readFileSync, statSync } from "fs";

package/dist/{chunk-3CKJOTVM.js → chunk-IW6Q66WS.js}

@@ -2,7 +2,7 @@
 import {
   evaluateCiGate,
   normalizeCiThresholds
-} from "./chunk-3TBXHLSC.js";
+} from "./chunk-K4F7QEGW.js";
 import {
   buildReviewPrompt,
   buildSecurityReviewPrompt,
@@ -13,13 +13,13 @@ import {
 } from "./chunk-6YZEZFX5.js";
 import {
   ProviderRegistry
-} from "./chunk-VXEF2SWG.js";
+} from "./chunk-EHMMBIZT.js";
 import {
   ConfigManager
-} from "./chunk-AQF6IXSR.js";
+} from "./chunk-RBCKX2FZ.js";
 import {
   VERSION
-} from "./chunk-VAV2IJ3R.js";
+} from "./chunk-3CNPJLVI.js";
 
 // src/cli/ci.ts
 import { execFileSync } from "child_process";

package/dist/chunk-JJFJWD35.js

@@ -0,0 +1,162 @@
+#!/usr/bin/env node
+import {
+  getExecutionConfigDir,
+  scopedState
+} from "./chunk-SXIJLSVF.js";
+
+// src/security/file-access.ts
+import { existsSync, realpathSync, openSync, readSync, closeSync, statSync } from "fs";
+import { basename, dirname, resolve, join } from "path";
+import { homedir } from "os";
+function canonicalPath(value) {
+  let cursor = resolve(value);
+  const missing = [];
+  while (!existsSync(cursor)) {
+    const parent = dirname(cursor);
+    if (parent === cursor) throw new Error("Cannot resolve path");
+    missing.unshift(basename(cursor));
+    cursor = parent;
+  }
+  return resolve(realpathSync(cursor), ...missing);
+}
+function isCredentialVault(value) {
+  const normalize = (p) => process.platform === "win32" ? p.toLowerCase() : p;
+  const target = normalize(canonicalPath(value));
+  const hostRoot = normalize(canonicalPath(join(homedir(), ".aicli")));
+  if (basename(target) === "config.json" && normalize(dirname(dirname(dirname(target)))) === hostRoot && basename(dirname(dirname(target))) === "users") return true;
+  return [getExecutionConfigDir(), join(homedir(), ".aicli")].some((root) => ["config.json", "users.json"].some((file) => {
+    const vault = canonicalPath(join(root, file));
+    if (target === normalize(vault)) return true;
+    try {
+      const a = statSync(target), b = statSync(vault);
+      return a.ino !== 0 && a.dev === b.dev && a.ino === b.ino;
+    } catch {
+      return false;
+    }
+  }));
+}
+function assertReadablePath(value) {
+  if (isCredentialVault(value)) throw new Error("[Refused] Credential vault files cannot be read by tools. Use aicli config or an external editor.");
+}
+var MAX_SNAPSHOT_BYTES = 2 * 1024 * 1024;
+var MAX_SNAPSHOT_TOTAL_BYTES = 16 * 1024 * 1024;
+function readSnapshot(value) {
+  const fd = openSync(value, "r");
+  try {
+    const buffer = Buffer.alloc(MAX_SNAPSHOT_BYTES + 1);
+    let bytes = 0;
+    while (bytes < buffer.length) {
+      const n = readSync(fd, buffer, bytes, buffer.length - bytes, null);
+      if (!n) break;
+      bytes += n;
+    }
+    if (bytes > MAX_SNAPSHOT_BYTES) throw new Error("File exceeds 2 MiB snapshot limit; edit refused because a complete undo snapshot cannot be kept.");
+    return buffer.subarray(0, bytes).toString("utf8");
+  } finally {
+    closeSync(fd);
+  }
+}
+
+// src/tools/file-checkpoint.ts
+import { existsSync as existsSync2, writeFileSync, unlinkSync } from "fs";
+var MAX_SNAPSHOTS = 200;
+var FileCheckpointStore = class {
+  stateKey = /* @__PURE__ */ Symbol("snapshots");
+  get snapshots() {
+    return scopedState(this.stateKey, () => ({ items: [] })).items;
+  }
+  set snapshots(items) {
+    scopedState(this.stateKey, () => ({ items: [] })).items = items;
+  }
+  /**
+   * 在文件写入前调用，保存当前文件内容。
+   * 同一 messageIndex 下同一文件只记录首次快照。
+   */
+  snapshot(filePath, messageIndex) {
+    const exists = this.snapshots.some(
+      (s) => s.filePath === filePath && s.messageIndex === messageIndex
+    );
+    if (exists) return;
+    let content = null;
+    if (existsSync2(filePath)) {
+      content = readSnapshot(filePath);
+    }
+    this.snapshots.push({
+      filePath,
+      content,
+      messageIndex,
+      timestamp: Date.now()
+    });
+    while (this.snapshots.length > MAX_SNAPSHOTS || this.snapshots.reduce((n, e) => n + Buffer.byteLength(e.content ?? ""), 0) > MAX_SNAPSHOT_TOTAL_BYTES) {
+      this.snapshots.shift();
+    }
+  }
+  /**
+   * 恢复所有在指定消息索引之后被修改的文件到该索引时的状态。
+   * @returns 恢复和删除的文件数量
+   */
+  restoreToMessageIndex(targetIndex) {
+    const modifiedAfter = this.snapshots.filter((s) => s.messageIndex > targetIndex);
+    const uniqueFiles = [...new Set(modifiedAfter.map((s) => s.filePath))];
+    let restored = 0;
+    let deleted = 0;
+    const files = [];
+    for (const filePath of uniqueFiles) {
+      const beforeSnapshots = this.snapshots.filter((s) => s.filePath === filePath && s.messageIndex <= targetIndex).sort((a, b) => b.messageIndex - a.messageIndex);
+      const restoreTo = beforeSnapshots[0];
+      try {
+        if (restoreTo) {
+          if (restoreTo.content === null) {
+            if (existsSync2(filePath)) {
+              unlinkSync(filePath);
+              deleted++;
+              files.push(filePath);
+            }
+          } else {
+            writeFileSync(filePath, restoreTo.content, "utf-8");
+            restored++;
+            files.push(filePath);
+          }
+        } else {
+          const earliest = this.snapshots.filter((s) => s.filePath === filePath).sort((a, b) => a.messageIndex - b.messageIndex)[0];
+          if (earliest && earliest.content === null) {
+            if (existsSync2(filePath)) {
+              unlinkSync(filePath);
+              deleted++;
+              files.push(filePath);
+            }
+          } else if (earliest) {
+            writeFileSync(filePath, earliest.content, "utf-8");
+            restored++;
+            files.push(filePath);
+          }
+        }
+      } catch {
+      }
+    }
+    this.snapshots = this.snapshots.filter((s) => s.messageIndex <= targetIndex);
+    return { restored, deleted, files };
+  }
+  /** 获取所有快照（供调试/显示） */
+  getSnapshots() {
+    return this.snapshots;
+  }
+  /** 获取有快照的消息索引列表（去重排序） */
+  getMessageIndices() {
+    return [...new Set(this.snapshots.map((s) => s.messageIndex))].sort((a, b) => a - b);
+  }
+  /** 清空所有快照（新会话/清除时调用） */
+  clear() {
+    this.snapshots = [];
+  }
+};
+var fileCheckpoints = new FileCheckpointStore();
+
+export {
+  canonicalPath,
+  isCredentialVault,
+  assertReadablePath,
+  MAX_SNAPSHOT_TOTAL_BYTES,
+  readSnapshot,
+  fileCheckpoints
+};

package/dist/{chunk-NYNSYLFY.js → chunk-JL44HGZC.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   atomicWriteFileSync
-} from "./chunk-IW3Q7AE5.js";
+} from "./chunk-BMLQPSHP.js";
 
 // src/session/session-index.ts
 import { existsSync, readFileSync as readFileSync2, readdirSync, statSync } from "fs";

package/dist/{chunk-3TBXHLSC.js → chunk-K4F7QEGW.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   VERSION
-} from "./chunk-VAV2IJ3R.js";
+} from "./chunk-3CNPJLVI.js";
 
 // src/cli/ci-format.ts
 var DEFAULT_CI_THRESHOLDS = {

package/dist/{chunk-NUJTNH76.js → chunk-LBWKMTT3.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   SessionManager
-} from "./chunk-IUVDZVZ4.js";
+} from "./chunk-AXTLYOA7.js";
 
 // src/hub/persist.ts
 import { join } from "path";

package/dist/{chunk-YKJO3SI4.js → chunk-LONB36SP.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-RS7SKYTS.js";
 import {
   atomicWriteFileSync
-} from "./chunk-IW3Q7AE5.js";
+} from "./chunk-BMLQPSHP.js";
 
 // src/core/pricing.ts
 var CNY_PER_USD = 6.9;
@@ -16,15 +16,28 @@ function deepSeekCnyPricing(cacheRead, input, output) {
     output: output / CNY_PER_USD
   };
 }
+var DEEPSEEK_V4_PRO_ROUTED_TO_FLASH_AT = /* @__PURE__ */ new Date("2026-09-14T04:00:00.000Z");
+var DEEPSEEK_V41_FLASH_ROUTING_CONFIRMED_AT = /* @__PURE__ */ new Date("2026-09-11T00:00:00.000Z");
+function isDeepSeekPeakHour(at) {
+  const weekday = at.getUTCDay();
+  if (weekday === 0 || weekday === 6) return false;
+  const hour = at.getUTCHours();
+  return hour >= 1 && hour < 4 || hour >= 6 && hour < 10;
+}
+function deepSeekFlash41Pricing(at) {
+  return isDeepSeekPeakHour(at) ? { cacheRead: 6e-3, input: 0.3, output: 1.2 } : { cacheRead: 3e-3, input: 0.15, output: 0.6 };
+}
 function getDeepSeekV4Pricing(model, at) {
+  if (model.startsWith("deepseek-flash")) return deepSeekFlash41Pricing(at);
   const isPro = model.startsWith("deepseek-v4-pro");
   const isFlash = model.startsWith("deepseek-v4-flash");
   if (!isPro && !isFlash) return null;
+  if (isPro && at >= DEEPSEEK_V4_PRO_ROUTED_TO_FLASH_AT) return deepSeekFlash41Pricing(at);
+  if (isFlash && at >= DEEPSEEK_V41_FLASH_ROUTING_CONFIRMED_AT) return deepSeekFlash41Pricing(at);
   if (at < DEEPSEEK_TIME_PRICING_EFFECTIVE_AT) {
     return isPro ? deepSeekCnyPricing(0.025, 3, 6) : deepSeekCnyPricing(0.02, 1, 2);
   }
-  const beijingHour = (at.getUTCHours() + 8) % 24;
-  const isPeak = beijingHour >= 9 && beijingHour < 12 || beijingHour >= 14 && beijingHour < 18;
+  const isPeak = isDeepSeekPeakHour(at);
   if (isPro) {
     return isPeak ? deepSeekCnyPricing(0.3, 9, 27) : deepSeekCnyPricing(0.15, 4.5, 13.5);
   }

package/dist/{chunk-WQ3OMEC4.js → chunk-M6HLYG33.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   atomicWriteFileSync
-} from "./chunk-IW3Q7AE5.js";
+} from "./chunk-BMLQPSHP.js";
 
 // src/symbols/store.ts
 import fs from "fs";

package/dist/{chunk-I4GQRMFV.js → chunk-M6YV5KSS.js}

@@ -8,12 +8,14 @@ import {
 } from "./chunk-FSC6KEWU.js";
 import {
   atomicWriteFileSync
-} from "./chunk-6BUTA5VW.js";
+} from "./chunk-2XMUCC42.js";
+import {
+  getExecutionConfigDir
+} from "./chunk-QMFMST2T.js";
 
 // src/memory/chat-index.ts
 import fs from "fs";
 import path from "path";
-import os from "os";
 import crypto from "crypto";
 
 // src/session/session-index.ts
@@ -311,7 +313,7 @@ var VEC_MAGIC = 1094929750;
 var VEC_VERSION = 1;
 var VEC_HEADER_BYTES = 16;
 function memoryIndexDir() {
-  return path.join(os.homedir(), ".aicli", MEMORY_DIR_NAME);
+  return path.join(getExecutionConfigDir(), MEMORY_DIR_NAME);
 }
 function chunksPath() {
   return path.join(memoryIndexDir(), CHUNKS_FILE);
@@ -320,7 +322,7 @@ function vectorsPath() {
   return path.join(memoryIndexDir(), VECTORS_FILE);
 }
 function historyDir() {
-  return path.join(os.homedir(), ".aicli", "history");
+  return path.join(getExecutionConfigDir(), "history");
 }
 var MAX_CHUNK_CHARS = 1200;
 var MIN_CHUNK_CHARS = 40;

package/dist/{chunk-KBDKKHXB.js → chunk-O6CGOVD4.js}

@@ -2,7 +2,7 @@ import {
   loadVectorStore,
   saveVectorStore,
   searchVectorStore
-} from "./chunk-OAXLMF3U.js";
+} from "./chunk-3YVNDYOY.js";
 import {
   EMBEDDING_DIM,
   embed,
@@ -11,7 +11,7 @@ import {
 import {
   loadIndex,
   symbolFingerprint
-} from "./chunk-45UVJXFQ.js";
+} from "./chunk-W2UOVGRC.js";
 
 // src/symbols/semantic.ts
 function pathTokens(absFile, root) {