jinzd-ai-cli 0.4.317 → 0.4.319

package/dist/{chunk-LZJHXSR3.js → chunk-YHMQMP2I.js}

@@ -11,7 +11,7 @@ import {
   searchPersistentMemories,
   touchMemoryReferences,
   updateMemoryEntry
-} from "./chunk-S73DO2G5.js";
+} from "./chunk-PGQ5OV3P.js";
 import {
   indexProject
 } from "./chunk-RWRZVQCB.js";
@@ -30,13 +30,13 @@ import {
   runHook,
   runLifecycleHooks,
   runTool
-} from "./chunk-HDHVWGDA.js";
+} from "./chunk-662ZJPJE.js";
 import {
   buildTruncatedArgumentsError,
   getDangerLevel,
   isFileWriteTool,
   runLeanAgentLoop
-} from "./chunk-6VBW3L57.js";
+} from "./chunk-GVAAGBHX.js";
 import {
   EnvLoader,
   NetworkError,
@@ -60,10 +60,11 @@ import {
   decodeWindowsBuffer,
   killProcessTree,
   looksLikeGbkMojibake,
+  posixShell,
   recoverGbkMojibake,
   runTestsTool,
   shellInvocation
-} from "./chunk-27RIJK3U.js";
+} from "./chunk-Y3SEC5EC.js";
 import {
   CONFIG_DIR_NAME,
   DEFAULT_MAX_TOOL_OUTPUT_CHARS_CAP,
@@ -72,7 +73,7 @@ import {
   SUBAGENT_ALLOWED_TOOLS,
   SUBAGENT_DEFAULT_MAX_ROUNDS,
   SUBAGENT_MAX_ROUNDS_LIMIT
-} from "./chunk-X4GNEJNN.js";
+} from "./chunk-A7YZLLWN.js";
 import {
   getCurrentSessionKey,
   getExecutionConfigDir,
@@ -84,7 +85,7 @@ import {
 import { spawn } from "child_process";
 import { platform } from "os";
 var IS_WINDOWS2 = platform() === "win32";
-var SHELL = IS_WINDOWS2 ? "powershell.exe" : process.env["SHELL"] ?? "/bin/bash";
+var SHELL = IS_WINDOWS2 ? "powershell.exe" : posixShell();
 var pool = /* @__PURE__ */ new Map();
 var IDLE_EVICT_MS = 5 * 6e4;
 var evictionTimer = null;
@@ -93,7 +94,11 @@ function spawnShell(cwd) {
   const proc = spawn(SHELL, shellArgs, {
     cwd,
     windowsHide: true,
-    stdio: ["pipe", "pipe", "pipe"]
+    stdio: ["pipe", "pipe", "pipe"],
+    // POSIX: own process group, so a timeout / Ctrl+C can kill the whole tree
+    // (killProcessTree with processGroup=true). Without it only the shell host
+    // died and grandchildren were orphaned (2026-10-07 audit A-01).
+    detached: !IS_WINDOWS2
   });
   proc.on("exit", () => {
     for (const [key, entry] of pool) {
@@ -120,13 +125,17 @@ function startEvictionTimer() {
     }
   }, 6e4).unref();
 }
+function stderrMarker(id) {
+  return `AICLI_MARKER_ERR:${id}`;
+}
 function buildWrappedCommand(command, id, isWindows) {
   const markerStart = `AICLI_MARKER_START:${id}`;
   const markerEnd = `AICLI_MARKER_END:${id}`;
   if (!isWindows) {
+    const quoted = `'${command.replace(/'/g, `'\\''`)}'`;
     return `echo "${markerStart}"
-${command}
-echo "${markerEnd}:$?"`;
+eval ${quoted} </dev/null
+__aicli_rc=$?; echo "${stderrMarker(id)}" >&2; echo "${markerEnd}:$__aicli_rc"`;
   }
   const b64 = Buffer.from(command, "utf-8").toString("base64");
   const decoded = `[System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String('${b64}'))`;
@@ -158,32 +167,46 @@ async function execInPool(sessionKey, command, timeout, cwd, abortSignal) {
     const markerStartPattern = `AICLI_MARKER_START:${id}`;
     const markerEndPattern = `AICLI_MARKER_END:${id}`;
     const proc = entry.proc;
+    const errMarker = stderrMarker(id);
+    const cleanStderr = (s) => {
+      const i = s.indexOf(errMarker);
+      return i < 0 ? s : s.slice(0, i);
+    };
+    const checkDone = () => {
+      if (resolved) return;
+      const parsed = extractPoolOutput(stdout, markerStartPattern, markerEndPattern);
+      if (parsed.exitCode === null) return;
+      if (!IS_WINDOWS2 && !stderr.includes(errMarker)) return;
+      stdout = parsed.output;
+      stderr = cleanStderr(stderr);
+      resolved = true;
+      cleanup();
+      resolve7({ stdout, stderr, exitCode: parsed.exitCode, timedOut, aborted });
+    };
     const onData = (chunk) => {
       stdout += IS_WINDOWS2 ? decodeWindowsBuffer(chunk) : chunk.toString("utf-8");
-      if (!resolved && stdout.includes(markerEndPattern)) {
-        const endLine = stdout.split("\n").find((l) => l.includes(markerEndPattern));
-        const exitCode = endLine ? parseEndMarker(endLine) : null;
-        stdout = stripMarkerOutput(stdout, markerStartPattern, markerEndPattern);
-        resolved = true;
-        cleanup();
-        resolve7({ stdout, stderr, exitCode, timedOut, aborted });
-      }
+      checkDone();
     };
     const onErr = (chunk) => {
       stderr += IS_WINDOWS2 ? decodeWindowsBuffer(chunk) : chunk.toString("utf-8");
+      checkDone();
     };
     const finishPoolFailure = (message, exitCode = null) => {
       if (resolved) return;
       resolved = true;
-      stdout = stripMarkerOutput(stdout, markerStartPattern, markerEndPattern);
+      stdout = extractPoolOutput(stdout, markerStartPattern, markerEndPattern).output;
+      stderr = cleanStderr(stderr);
       stderr += `${stderr ? "\n" : ""}[pool terminated] ${message}`;
       cleanup();
       pool.delete(sessionKey);
-      resolve7({ stdout, stderr, exitCode: exitCode === 0 ? null : exitCode, timedOut, aborted });
+      resolve7({ stdout, stderr, exitCode, timedOut, aborted });
     };
     const onClose = (code, signal) => {
       const detail = signal ? `signal ${signal}` : `exit code ${code ?? "unknown"}`;
-      finishPoolFailure(`Shell exited before the completion marker (${detail}).`, code);
+      finishPoolFailure(
+        `The shell exited before the command finished (${detail}) \u2014 typically an explicit \`exit\`/\`exec\`, or \`set -e\` aborting on a failing command. Shell state (variables, options, functions) was reset; the next command runs in a fresh shell in the same directory.`,
+        signal ? null : code
+      );
     };
     const onStdinError = (err) => {
       finishPoolFailure(`Shell stdin failed: ${err.message}`);
@@ -196,10 +219,11 @@ async function execInPool(sessionKey, command, timeout, cwd, abortSignal) {
       if (resolved) return;
       timedOut = true;
       resolved = true;
-      stdout = stripMarkerOutput(stdout, markerStartPattern, markerEndPattern);
+      stdout = extractPoolOutput(stdout, markerStartPattern, markerEndPattern).output;
+      stderr = cleanStderr(stderr);
       cleanup();
       resolve7({ stdout, stderr, exitCode: null, timedOut, aborted });
-      killProcessTree(proc);
+      killProcessTree(proc, true);
       pool.delete(sessionKey);
     }, timeout);
     const onAbort = () => {
@@ -207,9 +231,10 @@ async function execInPool(sessionKey, command, timeout, cwd, abortSignal) {
       aborted = true;
       resolved = true;
       cleanup();
-      stdout = stripMarkerOutput(stdout, markerStartPattern, markerEndPattern);
+      stdout = extractPoolOutput(stdout, markerStartPattern, markerEndPattern).output;
+      stderr = cleanStderr(stderr);
       resolve7({ stdout, stderr, exitCode: null, timedOut, aborted });
-      killProcessTree(proc);
+      killProcessTree(proc, true);
       pool.delete(sessionKey);
     };
     if (abortSignal?.aborted) {
@@ -241,36 +266,18 @@ async function execInPool(sessionKey, command, timeout, cwd, abortSignal) {
     }
   });
 }
-function parseEndMarker(line) {
-  const idx = line.lastIndexOf(":");
-  if (idx < 0) return null;
-  const code = line.slice(idx + 1).trim();
-  return /^\d+$/.test(code) ? Number(code) : null;
+function extractPoolOutput(stdout, startMarker, endMarker) {
+  const startMatch = new RegExp(`${escapeRegExp(startMarker)}\\r?\\n`).exec(stdout);
+  const bodyStart = startMatch ? startMatch.index + startMatch[0].length : 0;
+  const endMatch = new RegExp(`${escapeRegExp(endMarker)}:(\\d+)\\r?\\n`).exec(stdout.slice(bodyStart));
+  const body = endMatch ? stdout.slice(bodyStart, bodyStart + endMatch.index) : stdout.slice(bodyStart);
+  return {
+    output: body.trim(),
+    exitCode: endMatch ? Number(endMatch[1]) : null
+  };
 }
-function stripMarkerOutput(stdout, startMarker, endMarker) {
-  const lines = stdout.split("\n");
-  let capturing = false;
-  const out = [];
-  for (const line of lines) {
-    if (line.includes(startMarker)) {
-      capturing = true;
-      continue;
-    }
-    if (line.includes(endMarker)) {
-      capturing = false;
-      continue;
-    }
-    if (capturing) {
-      out.push(line);
-    }
-  }
-  if (!stdout.includes(endMarker) && out.length === 0) {
-    const startIdx = stdout.indexOf(startMarker);
-    if (startIdx >= 0) {
-      return stdout.slice(startIdx + startMarker.length).trimStart();
-    }
-  }
-  return out.join("\n").trim();
+function escapeRegExp(s) {
+  return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
 function cleanupPoolSession(sessionKey) {
   const entry = pool.get(sessionKey);
@@ -427,7 +434,7 @@ var undoStack = new UndoStack();
 
 // src/tools/builtin/bash.ts
 var IS_WINDOWS3 = platform2() === "win32";
-var SHELL2 = IS_WINDOWS3 ? "powershell.exe" : process.env["SHELL"] ?? "/bin/bash";
+var SHELL2 = IS_WINDOWS3 ? "powershell.exe" : posixShell();
 var cwdBySession = /* @__PURE__ */ new Map();
 function getCwd() {
   const key = getCurrentSessionKey();
@@ -556,7 +563,8 @@ Important rules:
       }
       if (timedOut) {
         pushBashUndoEntries(beforeSnapshot, parsedTargetsBefore, effectiveCwd);
-        throw new ToolError("bash", formatTimeoutMessage(timeout, MAX_TIMEOUT, command));
+        throw new ToolError("bash", formatTimeoutMessage(timeout, MAX_TIMEOUT, command, `${stdout}
+${stderr}`));
       }
       if (status !== 0 || timedOut) {
         const poolStdout = (stdout ?? "").trim();
@@ -575,7 +583,12 @@ ${combined || formatFailureFallback(status)}
       }
       pushBashUndoEntries(beforeSnapshot, parsedTargetsBefore, effectiveCwd);
       updateCwdFromCommand(command, effectiveCwd);
-      return annotateSuccessOutput(command, stdout) || emptyOutputResult(command, stderr ?? "");
+      const out = annotateSuccessOutput(command, suppressBinaryOutput(stdout));
+      const poolNote = /\[pool terminated\]/.test(stderr ?? "") ? `
+
+${(stderr ?? "").trim()}` : "";
+      const body = out ? out + poolNote : emptyOutputResult(command, stderr ?? "");
+      return body + backgroundJobNote(command);
     }
     try {
       const { stdout, stderr, status, signal, timedOut, aborted } = await runShell(
@@ -612,17 +625,18 @@ ${combined || formatFailureFallback(status)}
       updateCwdFromCommand(command, effectiveCwd);
       pushBashUndoEntries(beforeSnapshot, parsedTargetsBefore, effectiveCwd);
       const result = Buffer.isBuffer(stdout) ? IS_WINDOWS3 ? decodeWindowsBuffer(stdout) : stdout.toString("utf-8") : String(stdout ?? "");
-      return annotateSuccessOutput(command, result) || emptyOutputResult(
+      return (annotateSuccessOutput(command, suppressBinaryOutput(result)) || emptyOutputResult(
         command,
         Buffer.isBuffer(stderr) ? IS_WINDOWS3 ? decodeWindowsBuffer(stderr) : stderr.toString("utf-8") : String(stderr ?? "")
-      );
+      )) + backgroundJobNote(command);
     } catch (err) {
       pushBashUndoEntries(beforeSnapshot, parsedTargetsBefore, effectiveCwd);
       if (err && typeof err === "object") {
         const execErr = err;
         const isTimeout = execErr.code === "ETIMEDOUT" || execErr.status == null && execErr.signal === "SIGTERM" || /ETIMEDOUT/i.test(execErr.message ?? "");
         if (isTimeout) {
-          throw new ToolError("bash", formatTimeoutMessage(timeout, MAX_TIMEOUT, command));
+          const captured = [execErr.stdout, execErr.stderr].map((b) => Buffer.isBuffer(b) ? IS_WINDOWS3 ? decodeWindowsBuffer(b) : b.toString("utf-8") : String(b ?? "")).join("\n");
+          throw new ToolError("bash", formatTimeoutMessage(timeout, MAX_TIMEOUT, command, captured));
         }
         if ("status" in execErr && execErr.status !== void 0) {
           const stderr = IS_WINDOWS3 && Buffer.isBuffer(execErr.stderr) ? decodeWindowsBuffer(execErr.stderr).trim() : execErr.stderr?.toString().trim() ?? "";
@@ -655,8 +669,15 @@ function looksLikeTestCommand(command) {
     /(?:^|[;&|(\s])(?:go|cargo)\s+test\b/.test(command)
   );
 }
-function formatTimeoutMessage(timeout, maxTimeout, command) {
+var TIMEOUT_CAPTURE_MAX = 2e3;
+function formatTimeoutMessage(timeout, maxTimeout, command, captured) {
   const seconds = Math.round(timeout / 1e3);
+  const tail = (captured ?? "").trim();
+  const capturedSection = tail ? [
+    "Output captured before the timeout (last part \u2014 the cause is often here):",
+    tail.length > TIMEOUT_CAPTURE_MAX ? "\u2026" + tail.slice(-TIMEOUT_CAPTURE_MAX) : tail,
+    ""
+  ] : [];
   const testRunnerHint = command !== void 0 && looksLikeTestCommand(command) ? [
     "This looks like a TEST run. Prefer the 'run_tests' tool instead of running the test runner through bash: it has a 5-minute timeout, auto-detects the framework, and returns a structured summary (no findstr/grep filtering needed).",
     ""
@@ -664,6 +685,7 @@ function formatTimeoutMessage(timeout, maxTimeout, command) {
   return [
     `Command timed out after ${seconds}s.`,
     "",
+    ...capturedSection,
     ...testRunnerHint,
     "The previous command ran for longer than the timeout limit and was killed. This usually means it is scanning a large filesystem tree (recursive Get-ChildItem / find), compressing a big archive, or waiting on a network request.",
     "",
@@ -836,6 +858,19 @@ ${err}`;
   return detectPowerShellBackslashQuote(command) ? base + BACKSLASH_QUOTE_SILENT_WARNING : base;
 }
 var PS_TEXT_READ_CMDLET = /\b(?:Get-Content|gc|cat|type|Select-String|sls|Import-Csv)\b/i;
+function suppressBinaryOutput(stdout) {
+  if (!stdout) return stdout;
+  const sample = stdout.slice(0, 8e3);
+  const replacement = (sample.match(/\uFFFD/g) ?? []).length;
+  if (!sample.includes("\0") && !(sample.length >= 64 && replacement / sample.length > 0.3)) {
+    return stdout;
+  }
+  return `[binary output suppressed: ${Buffer.byteLength(stdout, "utf-8")} bytes. Inspect it with a hex dump limited in size (e.g. \`xxd file | head -20\`), or use \`file\` to identify the type.]`;
+}
+function backgroundJobNote(command) {
+  if (IS_WINDOWS3 || !/(?:^|\s)&(?![&>])/m.test(command)) return "";
+  return "\n\n[Note: this command started a background job (`&`). It is not tracked by aicli \u2014 task_list/task_stop cannot see it and it keeps running after this session. For long-running processes (dev servers, watchers) prefer task_create.]";
+}
 function annotateSuccessOutput(command, stdout) {
   if (!IS_WINDOWS3 || !PS_TEXT_READ_CMDLET.test(command)) return stdout;
   if (!looksLikeGbkMojibake(stdout)) return stdout;
@@ -1013,7 +1048,9 @@ function runShell(command, opts) {
       cwd: opts.cwd,
       env: opts.env,
       windowsHide: true,
-      stdio: ["ignore", "pipe", "pipe"]
+      stdio: ["ignore", "pipe", "pipe"],
+      // POSIX: own process group so killChild can take the whole tree down (A-01).
+      detached: !IS_WINDOWS3
     });
     const stdoutChunks = [];
     const stderrChunks = [];
@@ -1070,7 +1107,7 @@ function runShell(command, opts) {
   });
 }
 function killChild(child) {
-  killProcessTree(child);
+  killProcessTree(child, true);
 }
 function updateCwdFromCommand(command, baseCwd) {
   const cdMatches = [...command.matchAll(/(?:^|[;&|])\s*cd\s+(['"]?)([^\s;&|'"]+)\1/g)];

package/dist/{ci-ED4EZGRM.js → ci-HAPWBC37.js}

@@ -3,16 +3,16 @@ import {
   CI_COMMENT_MARKER,
   countSeverity,
   runCi
-} from "./chunk-VUZCU6BH.js";
-import "./chunk-HD7KVZLR.js";
+} from "./chunk-SZBSTSG4.js";
+import "./chunk-OQZIP4LU.js";
 import "./chunk-HLWUDRBO.js";
 import "./chunk-6YZEZFX5.js";
-import "./chunk-2Z7SOAPR.js";
-import "./chunk-VZBBSBSN.js";
-import "./chunk-6VBW3L57.js";
+import "./chunk-N2MHUA4B.js";
+import "./chunk-KEOMNFBH.js";
+import "./chunk-GVAAGBHX.js";
 import "./chunk-TU3L3PW7.js";
 import "./chunk-BMLQPSHP.js";
-import "./chunk-X4GNEJNN.js";
+import "./chunk-A7YZLLWN.js";
 export {
   CI_COMMENT_MARKER,
   countSeverity,

package/dist/{ci-format-2ORFD7KF.js → ci-format-NGWP4GTQ.js}

@@ -6,8 +6,8 @@ import {
   formatCiResult,
   formatCiSarif,
   normalizeCiThresholds
-} from "./chunk-HD7KVZLR.js";
-import "./chunk-X4GNEJNN.js";
+} from "./chunk-OQZIP4LU.js";
+import "./chunk-A7YZLLWN.js";
 export {
   DEFAULT_CI_THRESHOLDS,
   detectCiGateSignals,

package/dist/{constants-N3AHLPRZ.js → constants-CPHZLOCQ.js}

@@ -38,7 +38,7 @@ import {
   TEST_TIMEOUT,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-DOWBL4OI.js";
+} from "./chunk-DCQDFQDW.js";
 export {
   AGENTIC_BEHAVIOR_GUIDELINE,
   APP_NAME,

package/dist/{constants-QX6K72OV.js → constants-GSUK6ILC.js}

@@ -39,7 +39,7 @@ import {
   TEST_TIMEOUT,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-X4GNEJNN.js";
+} from "./chunk-A7YZLLWN.js";
 export {
   AGENTIC_BEHAVIOR_GUIDELINE,
   APP_NAME,

package/dist/{doctor-cli-J6NQF6HS.js → doctor-cli-L6AK2GJ7.js}

@@ -2,16 +2,16 @@
 import {
   formatDoctorReport,
   runDoctorCli
-} from "./chunk-DPWHBIK2.js";
-import "./chunk-HDHVWGDA.js";
+} from "./chunk-D6BLSFYD.js";
+import "./chunk-662ZJPJE.js";
 import "./chunk-RS7SKYTS.js";
-import "./chunk-2Z7SOAPR.js";
-import "./chunk-VZBBSBSN.js";
-import "./chunk-6VBW3L57.js";
+import "./chunk-N2MHUA4B.js";
+import "./chunk-KEOMNFBH.js";
+import "./chunk-GVAAGBHX.js";
 import "./chunk-TU3L3PW7.js";
 import "./chunk-HOSJZMQS.js";
 import "./chunk-BMLQPSHP.js";
-import "./chunk-X4GNEJNN.js";
+import "./chunk-A7YZLLWN.js";
 export {
   formatDoctorReport,
   runDoctorCli