jinzd-ai-cli 0.4.334 → 0.4.338

package/dist/{batch-6UJGEEVB.js → batch-N4DOEUEW.js}

@@ -4,12 +4,12 @@ import {
 } from "./chunk-RS7SKYTS.js";
 import {
   ConfigManager
-} from "./chunk-DPUZ22D7.js";
+} from "./chunk-KGHVSYGI.js";
 import "./chunk-TU3L3PW7.js";
 import {
   atomicWriteFileSync
 } from "./chunk-BMLQPSHP.js";
-import "./chunk-FHHBPCCZ.js";
+import "./chunk-NRFAGZVJ.js";
 
 // src/cli/batch.ts
 import Anthropic from "@anthropic-ai/sdk";

package/dist/{chunk-W4P2KJZN.js → chunk-7BOHS5IX.js}

@@ -4,6 +4,77 @@
 function isFileWriteTool(name) {
   return name === "write_file" || name === "edit_file" || name === "notebook_edit";
 }
+var READ_ONLY_CMDLETS = new Set([
+  "Get-ChildItem",
+  "gci",
+  "Get-Content",
+  "gc",
+  "Get-Item",
+  "gi",
+  "Get-ItemProperty",
+  "gp",
+  "Get-ItemPropertyValue",
+  "Get-Location",
+  "gl",
+  "Test-Path",
+  "Resolve-Path",
+  "Split-Path",
+  "Join-Path",
+  "Get-Command",
+  "gcm",
+  "Get-Service",
+  "gsv",
+  "Get-Process",
+  "gps",
+  "Get-Date",
+  "Get-Alias",
+  "Get-Module",
+  "Get-PSDrive",
+  "Get-Acl",
+  "Get-FileHash",
+  "Get-CimInstance",
+  "Get-NetTCPConnection",
+  "Get-NetIPAddress",
+  "Get-WinEvent",
+  "Get-ComputerInfo",
+  "Get-Culture",
+  "Get-ExecutionPolicy",
+  "Get-Unique",
+  "Select-Object",
+  "select",
+  "Where-Object",
+  "Sort-Object",
+  "Measure-Object",
+  "Group-Object",
+  "Compare-Object",
+  "Select-String",
+  "sls",
+  "Format-Table",
+  "ft",
+  "Format-List",
+  "fl",
+  "Format-Wide",
+  "Out-String",
+  "Write-Output",
+  "Write-Host",
+  // Waiting is harmless on its own; chained segments still have to pass this list (v0.4.338).
+  "Start-Sleep",
+  // ls is read-only both as the PowerShell alias and as the Unix binary; models pair it with
+  // Start-Sleep to poll an output folder (2026-11-05 lecture-video run).
+  "ls",
+  "ConvertTo-Json",
+  "ConvertFrom-Json",
+  "ConvertTo-Csv",
+  "ConvertFrom-Csv"
+].map((name) => name.toLowerCase()));
+function isReadOnlyCmdletChain(cmd) {
+  const normalized = cmd.trim().replace(/\s2>\s*\$null\b/gi, " ").replace(/\s2>&1\b/g, " ").replace(/\$(?:env:\w+|null|true|false)\b/gi, "X");
+  if (!normalized || /[&`$<>\n\r(){}]|::/.test(normalized)) return false;
+  return normalized.split(/[;|]/).every((segment) => {
+    const name = segment.trim().split(/\s+/)[0].toLowerCase();
+    return READ_ONLY_CMDLETS.has(name);
+  });
+}
 function getDangerLevel(toolName, args) {
   if (toolName.startsWith("mcp__")) {
     const rawName = toolName.split("__").pop() ?? "";
@@ -33,6 +104,7 @@ function getDangerLevel(toolName, args) {
     if (/\b(python3?|node|deno|bun|perl|ruby|php|bash|sh|zsh|pwsh|powershell)(\.exe)?\b[^\n]*?\s-(?:Command|EncodedCommand|c|e|p|r)\b/i.test(cmd)) return "write";
     if (/\bcmd(\.exe)?\s+\/[ck]\b/i.test(cmd)) return "write";
     if (!/[;&|`$<>\n\r(){}]/.test(cmd) && (/^(?:pwd|ls|cat|head|tail|wc|Get-ChildItem|Get-Location|Get-Content)(?:\s+[\w ./\\:*?=,@'"-]+)?\s*$/i.test(cmd.trim()) || /^echo(?:\s+[\w .,'"-]+)?\s*$/.test(cmd.trim()) || /^(?:node|python3?)\s+(?:-v|--version)\s*$/.test(cmd.trim()) || /^git\s+(?:status|log)(?:\s+(?:--short|--porcelain|--oneline|-\d+))*\s*$/.test(cmd.trim()))) return "safe";
+    if (isReadOnlyCmdletChain(cmd)) return "safe";
     return "write";
   }
   if (toolName === "run_tests") return "write";

package/dist/{chunk-SZQ2C3HH.js → chunk-ATOF545W.js}

@@ -1,5 +1,5 @@
 // src/core/constants.ts
-var VERSION = "0.4.334";
+var VERSION = "0.4.338";
 var APP_NAME = "ai-cli";
 var CONFIG_DIR_NAME = ".aicli";
 var CONFIG_FILE_NAME = "config.json";

package/dist/{chunk-7GGWVBHG.js → chunk-DCWBDSMO.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-QMFMST2T.js";
 import {
   TEST_TIMEOUT
-} from "./chunk-SZQ2C3HH.js";
+} from "./chunk-ATOF545W.js";
 
 // src/tools/builtin/run-tests.ts
 import { spawn as spawn2 } from "child_process";
@@ -20,7 +20,7 @@ import { platform } from "os";
 import { existsSync } from "fs";
 import { spawn } from "child_process";
 var IS_WINDOWS = platform() === "win32";
-var WIN_UTF8_PREAMBLE = "[Console]::OutputEncoding = [System.Text.Encoding]::UTF8; $OutputEncoding = [System.Text.Encoding]::UTF8; ";
+var WIN_UTF8_PREAMBLE = "[Console]::OutputEncoding = [System.Text.Encoding]::UTF8; $OutputEncoding = [System.Text.Encoding]::UTF8; $PSDefaultParameterValues['Get-Content:Encoding'] = 'UTF8'; ";
 function posixShell() {
   if (existsSync("/bin/bash")) return "/bin/bash";
   return process.env["SHELL"] ?? "/bin/sh";

package/dist/{chunk-RQOOEXDU.js → chunk-DOO4QAGJ.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   TEST_TIMEOUT
-} from "./chunk-FHHBPCCZ.js";
+} from "./chunk-NRFAGZVJ.js";
 import {
   getExecutionConfigDir,
   getExecutionSignal
@@ -35,7 +35,7 @@ import { platform } from "os";
 import { existsSync } from "fs";
 import { spawn } from "child_process";
 var IS_WINDOWS = platform() === "win32";
-var WIN_UTF8_PREAMBLE = "[Console]::OutputEncoding = [System.Text.Encoding]::UTF8; $OutputEncoding = [System.Text.Encoding]::UTF8; ";
+var WIN_UTF8_PREAMBLE = "[Console]::OutputEncoding = [System.Text.Encoding]::UTF8; $OutputEncoding = [System.Text.Encoding]::UTF8; $PSDefaultParameterValues['Get-Content:Encoding'] = 'UTF8'; ";
 function posixShell() {
   if (existsSync("/bin/bash")) return "/bin/bash";
   return process.env["SHELL"] ?? "/bin/sh";

package/dist/{chunk-XMHVHS2X.js → chunk-DRCN44SZ.js}

@@ -8,13 +8,13 @@ import {
   listHooks,
   listInstalledPlugins,
   resetStats
-} from "./chunk-EOYIIGBJ.js";
+} from "./chunk-NJREBH6A.js";
 import {
   ProviderRegistry
-} from "./chunk-27RTBMY7.js";
+} from "./chunk-TTLLXFJC.js";
 import {
   ConfigManager
-} from "./chunk-DPUZ22D7.js";
+} from "./chunk-KGHVSYGI.js";
 import {
   getGitRoot
 } from "./chunk-HOSJZMQS.js";
@@ -26,7 +26,7 @@ import {
   MCP_PROJECT_CONFIG_NAME,
   MEMORY_FILE_NAME,
   VERSION
-} from "./chunk-FHHBPCCZ.js";
+} from "./chunk-NRFAGZVJ.js";
 
 // src/diagnostics/doctor-report.ts
 import { existsSync as existsSync3, statSync as statSync2 } from "fs";

package/dist/{chunk-YTAYWGS4.js → chunk-JUYK4OML.js}

@@ -12,7 +12,7 @@ import {
   MEMORY_FILE_NAME,
   MEMORY_MAX_CHARS,
   MEMORY_STORE_FILE_NAME
-} from "./chunk-SZQ2C3HH.js";
+} from "./chunk-ATOF545W.js";
 
 // src/memory/persistent-memory.ts
 import { copyFileSync, existsSync, mkdirSync, readFileSync, statSync } from "fs";

package/dist/{chunk-DPUZ22D7.js → chunk-KGHVSYGI.js}

@@ -11,7 +11,7 @@ import {
   CONFIG_FILE_NAME,
   HISTORY_DIR_NAME,
   PLUGINS_DIR_NAME
-} from "./chunk-FHHBPCCZ.js";
+} from "./chunk-NRFAGZVJ.js";
 
 // src/config/config-manager.ts
 import { readFileSync, existsSync, mkdirSync } from "fs";
@@ -66,32 +66,36 @@ var UserProfileSchema = z.object({
   locale: z.string().max(20).optional(),
   /** 自定义人设补充（自由格式，直接注入 system prompt） */
   extra: z.string().max(5e3).optional()
-}).default({});
+}).prefault({});
 var ConfigSchema = z.object({
   version: z.string().default("1.0.0"),
   // 用户身份档案 — 跨 Provider 的 "灵魂"
   userProfile: UserProfileSchema,
   defaultProvider: z.string().default("claude"),
   // 每个 provider 的默认模型（key 为 provider ID）
-  defaultModels: z.record(z.string()).default({}),
+  defaultModels: z.record(z.string(), z.string()).default({}),
   // API Keys：放宽为任意 record，支持自定义 provider ID
-  apiKeys: z.record(z.string()).default({}),
-  customBaseUrls: z.record(z.string()).default({}),
+  apiKeys: z.record(z.string(), z.string()).default({}),
+  customBaseUrls: z.record(z.string(), z.string()).default({}),
   // Per-provider timeout in ms (e.g. { deepseek: 60000 })
   // ⚠️  Timeout 优先级说明（L5）：
   //   1. modelParams[modelId].timeout  — 最高优先级，精确到具体模型（如 deepseek-reasoner 需要更长超时）
   //   2. timeouts[providerId]          — Provider 级默认，覆盖内置默认值
   //   3. 内置 Provider 的硬编码默认值  — 最低兜底（如 OpenAI 兼容系列默认 60000ms）
   //   实现位置：src/providers/registry.ts initialize()，将 timeouts[id] 注入 provider
-  timeouts: z.record(z.number()).default({}),
+  timeouts: z.record(z.string(), z.number()).default({}),
   // HTTP/HTTPS 代理地址（Node.js 不自动使用系统代理，需显式配置）
   // 例：http://127.0.0.1:10809
   // 也可通过环境变量 HTTPS_PROXY / HTTP_PROXY 覆盖
   proxy: z.string().max(500).optional(),
+  // 不走代理的 API 主机（后缀匹配，如 "deepseek.com" 也覆盖 api.deepseek.com；"*" = 全部直连）。
+  // 不填 = 内置国内模型清单（DeepSeek/智谱/Kimi/Qwen/MiniMax 直连，见 core/proxy.ts）；
+  // 填 [] = 所有 Provider 都走代理（公司网络只能经代理出网时用）。
+  noProxy: z.array(z.string().max(200)).max(100).optional(),
   // 自定义 Provider 列表（OpenAI 兼容接口，无需改代码）
   customProviders: z.array(CustomProviderConfigSchema).default([]),
   // 按模型 ID 存储的推理参数（key 为模型 ID，如 "deepseek-chat"）
-  modelParams: z.record(ModelParamsSchema).default({}),
+  modelParams: z.record(z.string(), ModelParamsSchema).default({}),
   ui: z.object({
     streaming: z.boolean().default(true),
     markdownRendering: z.boolean().default(true),
@@ -125,12 +129,12 @@ var ConfigSchema = z.object({
       toolResult: z.string().optional(),
       heading: z.string().optional()
     }).optional()
-  }).default({}),
+  }).prefault({}),
   session: z.object({
     autoSave: z.boolean().default(true),
     maxHistoryDays: z.number().default(30),
     systemPrompt: z.string().max(1e5).optional()
-  }).default({}),
+  }).prefault({}),
   // 项目上下文文件配置
   // 启动时自动读取并注入 system prompt，类似 Claude Code 的 CLAUDE.md / Codex AGENTS.md 机制
   // 默认按顺序查找：AICLI.override.md → AGENTS.override.md → AICLI.md → CLAUDE.md → AGENTS.md
@@ -140,13 +144,13 @@ var ConfigSchema = z.object({
     projectDocFallbackFilenames: z.array(z.string().max(500)).max(20).default([]),
     projectDocMaxBytes: z.number().int().positive().default(32 * 1024),
     showLoadedContextSources: z.boolean().default(false)
-  }).default({}),
+  }).prefault({}),
   // 持久记忆注入配置（MEM-005）
   // maxChars: 注入 system prompt 的字符预算，超出丢最老条目并显式标注截断。
   // 注意 CJK ≈ 1 字符/token——中文记忆的 token 开销约等于字符数。
   memory: z.object({
     maxChars: z.number().int().positive().max(2e5).default(1e4)
-  }).default({}),
+  }).prefault({}),
   // Google Custom Search API 的 Search Engine ID (cx 参数)
   // API Key 通过 apiKeys['google-search'] 或 AICLI_API_KEY_GOOGLESEARCH 环境变量配置
   // CX 也可通过 AICLI_GOOGLE_CX 环境变量覆盖
@@ -158,7 +162,7 @@ var ConfigSchema = z.object({
   // 仍想用 API 版？把 enabled 设为 true，并务必到 GCP Console 把 Custom Search Quota 设硬上限。
   googleSearch: z.object({
     enabled: z.boolean().default(false)
-  }).default({ enabled: false }),
+  }).prefault({ enabled: false }),
   // MCP (Model Context Protocol) 全局开关（v0.4.135+）
   // false 时启动跳过 connectAll()，所有 MCP 服务器都不连，节省冷启动时间 + 工具定义 token。
   // 对应你的 skills（whitelist 不依赖 MCP 工具时）完全不受影响。
@@ -167,10 +171,10 @@ var ConfigSchema = z.object({
   // 声明外部 MCP 服务器，启动时自动连接、发现工具并注册
   // 配置格式兼容 Claude Desktop（command + args + env）
   // 示例：{ "filesystem": { "command": "npx", "args": ["-y", "@modelcontextprotocol/server-filesystem", "/path"] } }
-  mcpServers: z.record(z.object({
+  mcpServers: z.record(z.string(), z.object({
     command: z.string().max(500),
     args: z.array(z.string()).max(100).default([]),
-    env: z.record(z.string()).optional(),
+    env: z.record(z.string(), z.string()).optional(),
     timeout: z.number().int().min(100).max(3e5).default(3e4)
   })).default({}),
   // Hooks 生命周期（v0.4.212+）：兼容旧 pre/post 字符串，同时支持 events.<EventName> 结构化 JSON hook。
@@ -178,7 +182,7 @@ var ConfigSchema = z.object({
     enabled: z.boolean().default(true),
     preToolExecution: z.string().optional(),
     postToolExecution: z.string().optional(),
-    events: z.record(z.union([
+    events: z.record(z.string(), z.union([
       z.string(),
       z.object({
         command: z.string(),
@@ -216,12 +220,12 @@ var ConfigSchema = z.object({
       google_search: z.enum(["allow", "confirm", "deny"]).optional(),
       shell: z.enum(["allow", "confirm", "deny"]).optional(),
       mcp: z.enum(["allow", "confirm", "deny"]).optional()
-    }).default({})
-  }).default({ enabled: false, defaultAction: "confirm", allowDomains: [], denyDomains: [], allowPorts: [], denyPorts: [], allowPrivateNetwork: false, tools: {} }),
+    }).prefault({})
+  }).prefault({ enabled: false, defaultAction: "confirm", allowDomains: [], denyDomains: [], allowPorts: [], denyPorts: [], allowPrivateNetwork: false, tools: {} }),
   // 权限 Profile（v0.4.211+）：legacy 保持旧行为；其余 profile 提供更清晰的安全边界。
   defaultPermissionProfile: z.enum(["legacy", "read-only", "workspace-write", "danger-full-access"]).default("legacy"),
   allowedPermissionProfiles: z.array(z.string().max(50)).max(20).default(["legacy", "read-only", "workspace-write", "danger-full-access"]),
-  permissionProfiles: z.record(z.object({
+  permissionProfiles: z.record(z.string(), z.object({
     extends: z.enum(["legacy", "read-only", "workspace-write", "danger-full-access"]).optional(),
     defaultAction: z.enum(["auto-approve", "deny", "confirm"]).optional(),
     workspaceRoots: z.array(z.string()).optional(),
@@ -296,7 +300,7 @@ var ConfigSchema = z.object({
     redactOnSend: z.boolean().default(false),
     mode: z.enum(["default", "strict", "off"]).default("default"),
     customPatterns: z.array(z.string().max(200)).max(50).default([])
-  }).default({}),
+  }).prefault({}),
   // 智能模型路由（v0.4.68+）
   // 按用户每轮输入的内容/标签/长度动态选择模型，在同一 provider 内切换，
   // 例：短问题走 haiku（省钱），planning 走 opus（质量）。
@@ -316,7 +320,7 @@ var ConfigSchema = z.object({
       name: z.string().max(100).optional()
     })).default([]),
     fallback: z.string().optional()
-  }).default({ enabled: false, rules: [] }),
+  }).prefault({ enabled: false, rules: [] }),
   // Provider 容错（v0.4.144+）：网络抖动 / 5xx / 429 时，先在当前 provider 上做指数退避重试，
   // 仍失败则按顺序尝试 chain 里的 fallback provider。auth / 400 / 422 等"硬失败"直接跳过同
   // provider 重试，但仍会尝试 chain（不同 key/schema 可能能成功）。
@@ -336,7 +340,7 @@ var ConfigSchema = z.object({
       provider: z.string().max(100),
       model: z.string().optional()
     })).default([])
-  }).default({ enabled: false, retries: 2, initialBackoffMs: 500, maxBackoffMs: 8e3, chain: [] })
+  }).prefault({ enabled: false, retries: 2, initialBackoffMs: 500, maxBackoffMs: 8e3, chain: [] })
 });
 
 // src/config/config-manager.ts
@@ -503,7 +507,7 @@ ${err}`
     const draft = { ...this.config, [key]: value };
     const result = ConfigSchema.safeParse(draft);
     if (!result.success) {
-      const firstErr = result.error.errors[0];
+      const firstErr = result.error.issues[0];
       throw new ConfigError(
         `Invalid transient config value for "${String(key)}": ${firstErr?.message ?? "validation failed"}`
       );
@@ -555,7 +559,7 @@ ${err}`
     current[keys[keys.length - 1]] = value;
     const result = ConfigSchema.safeParse(draft);
     if (!result.success) {
-      const firstErr = result.error.errors[0];
+      const firstErr = result.error.issues[0];
       throw new ConfigError(`Invalid config value for "${path}": ${firstErr?.message ?? "validation failed"}`);
     }
     this.config = result.data;

package/dist/{chunk-EOYIIGBJ.js → chunk-NJREBH6A.js}

@@ -8,7 +8,7 @@ import {
 import {
   CONFIG_DIR_NAME,
   PLUGINS_DIR_NAME
-} from "./chunk-FHHBPCCZ.js";
+} from "./chunk-NRFAGZVJ.js";
 
 // src/diagnostics/tool-stats.ts
 import { mkdirSync } from "fs";
@@ -164,7 +164,7 @@ var HookEventNameSchema = z.enum([
 var McpServerSchema = z.object({
   command: z.string(),
   args: z.array(z.string()).default([]),
-  env: z.record(z.string()).optional(),
+  env: z.record(z.string(), z.string()).optional(),
   timeout: z.number().default(3e4)
 });
 var PluginManifestSchema = z.object({
@@ -174,10 +174,10 @@ var PluginManifestSchema = z.object({
   skills: z.array(z.string()).default([]),
   hooks: z.object({
     enabled: z.boolean().optional(),
-    events: z.record(HookEventNameSchema, HookCommandSchema).default({})
-  }).default({ events: {} }),
+    events: z.partialRecord(HookEventNameSchema, HookCommandSchema).default({})
+  }).prefault({ events: {} }),
   commands: z.array(z.string()).default([]),
-  mcpServers: z.record(McpServerSchema).default({}),
+  mcpServers: z.record(z.string(), McpServerSchema).default({}),
   agents: z.array(z.string()).default([]),
   permissionHints: z.array(z.string()).default([])
 }).strict();

package/dist/{chunk-FHHBPCCZ.js → chunk-NRFAGZVJ.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // src/core/constants.ts
-var VERSION = "0.4.334";
+var VERSION = "0.4.338";
 var APP_NAME = "ai-cli";
 var CONFIG_DIR_NAME = ".aicli";
 var CONFIG_FILE_NAME = "config.json";

package/dist/{chunk-YVEBRHSV.js → chunk-OXVJZLJM.js}

@@ -2,7 +2,7 @@
 import {
   evaluateCiGate,
   normalizeCiThresholds
-} from "./chunk-KSZEQADY.js";
+} from "./chunk-RIDNF4G2.js";
 import {
   buildReviewPrompt,
   buildSecurityReviewPrompt,
@@ -13,13 +13,13 @@ import {
 } from "./chunk-6YZEZFX5.js";
 import {
   ProviderRegistry
-} from "./chunk-27RTBMY7.js";
+} from "./chunk-TTLLXFJC.js";
 import {
   ConfigManager
-} from "./chunk-DPUZ22D7.js";
+} from "./chunk-KGHVSYGI.js";
 import {
   VERSION
-} from "./chunk-FHHBPCCZ.js";
+} from "./chunk-NRFAGZVJ.js";
 
 // src/cli/ci.ts
 import { execFileSync } from "child_process";
@@ -161,7 +161,8 @@ async function runCi(opts) {
     (id) => ({
       baseUrl: config.get("customBaseUrls")[id],
       timeout: config.get("timeouts")[id],
-      proxy: config.get("proxy")
+      proxy: config.get("proxy"),
+      noProxy: config.get("noProxy")
     }),
     config.get("customProviders"),
     config.getConfigDir()