jinzd-ai-cli 0.4.83 → 0.4.85

package/dist/{batch-KMEDSLFU.js → batch-YBWWF5BJ.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import {
   ConfigManager
-} from "./chunk-AQDUA2NT.js";
+} from "./chunk-APU36NHI.js";
 import "./chunk-2ZD3YTVM.js";
-import "./chunk-MNL53XPD.js";
+import "./chunk-XEXVG3CQ.js";
 
 // src/cli/batch.ts
 import Anthropic from "@anthropic-ai/sdk";

package/dist/{chunk-HF47VUGH.js → chunk-4GMAVGPX.js}

@@ -6,7 +6,7 @@ import { platform } from "os";
 import chalk from "chalk";
 
 // src/core/constants.ts
-var VERSION = "0.4.83";
+var VERSION = "0.4.85";
 var APP_NAME = "ai-cli";
 var CONFIG_DIR_NAME = ".aicli";
 var CONFIG_FILE_NAME = "config.json";

package/dist/{chunk-SEUAEDAI.js → chunk-6IOQPMMT.js}

@@ -2,7 +2,7 @@
 import {
   schemaToJsonSchema,
   truncateForPersist
-} from "./chunk-H3CIS4XQ.js";
+} from "./chunk-YBL4QDLD.js";
 import {
   AuthError,
   ProviderError,
@@ -18,7 +18,7 @@ import {
   MCP_PROTOCOL_VERSION,
   MCP_TOOL_PREFIX,
   VERSION
-} from "./chunk-MNL53XPD.js";
+} from "./chunk-XEXVG3CQ.js";
 
 // src/providers/claude.ts
 import Anthropic from "@anthropic-ai/sdk";

package/dist/{chunk-AQDUA2NT.js → chunk-APU36NHI.js}

@@ -8,7 +8,7 @@ import {
   CONFIG_FILE_NAME,
   HISTORY_DIR_NAME,
   PLUGINS_DIR_NAME
-} from "./chunk-MNL53XPD.js";
+} from "./chunk-XEXVG3CQ.js";
 
 // src/config/config-manager.ts
 import { readFileSync, writeFileSync, existsSync, mkdirSync } from "fs";

package/dist/{chunk-BXN2BJAI.js → chunk-AX7T3J7G.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   TEST_TIMEOUT
-} from "./chunk-MNL53XPD.js";
+} from "./chunk-XEXVG3CQ.js";
 
 // src/tools/builtin/run-tests.ts
 import { execSync } from "child_process";

package/dist/{chunk-MNL53XPD.js → chunk-XEXVG3CQ.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // src/core/constants.ts
-var VERSION = "0.4.83";
+var VERSION = "0.4.85";
 var APP_NAME = "ai-cli";
 var CONFIG_DIR_NAME = ".aicli";
 var CONFIG_FILE_NAME = "config.json";

package/dist/{chunk-H3CIS4XQ.js → chunk-YBL4QDLD.js}

@@ -19,7 +19,7 @@ import {
 } from "./chunk-6VRJGH25.js";
 import {
   runTestsTool
-} from "./chunk-BXN2BJAI.js";
+} from "./chunk-AX7T3J7G.js";
 import {
   CONFIG_DIR_NAME,
   DEFAULT_MAX_TOOL_OUTPUT_CHARS_CAP,
@@ -27,7 +27,56 @@ import {
   SUBAGENT_ALLOWED_TOOLS,
   SUBAGENT_DEFAULT_MAX_ROUNDS,
   SUBAGENT_MAX_ROUNDS_LIMIT
-} from "./chunk-MNL53XPD.js";
+} from "./chunk-XEXVG3CQ.js";
+
+// src/tools/types.ts
+function isFileWriteTool(name) {
+  return name === "write_file" || name === "edit_file" || name === "notebook_edit";
+}
+function getDangerLevel(toolName, args) {
+  if (toolName.startsWith("mcp__")) return "safe";
+  if (toolName === "bash") {
+    const cmd = String(args["command"] ?? "");
+    if (/\brm\s+[^\n]*(?:-\w*[rRfF]\w*|--recursive|--force)\b/.test(cmd)) return "destructive";
+    if (/\brm\s+\S/.test(cmd)) return "destructive";
+    if (/\brmdir\b|\bformat\b|\bmkfs\b/.test(cmd)) return "destructive";
+    if (/\bRemove-Item\b.*(?:-Recurse|-Force)|\bri\s+.*-(?:Recurse|Force)\b|\brd\s+\/s\b|\brmdir\s+\/s\b/i.test(cmd)) return "destructive";
+    if (/\bdel\s+\S/.test(cmd)) return "destructive";
+    if (/\becho\b.*>>?|\btee\b|\bcp\b|\bmv\b/.test(cmd)) return "write";
+    if (/\bSet-Content\b|\bOut-File\b|\bAdd-Content\b|\bCopy-Item\b|\bMove-Item\b/i.test(cmd)) return "write";
+    return "safe";
+  }
+  if (toolName === "write_file") return "write";
+  if (toolName === "edit_file") return "write";
+  if (toolName === "save_last_response") return "write";
+  if (toolName === "run_interactive") {
+    const exe = String(args["executable"] ?? "").toLowerCase();
+    if (/\b(rm|rmdir|del|format|mkfs|Remove-Item)\b/i.test(exe)) return "destructive";
+    if (/\b(bash|sh|zsh|cmd|powershell|pwsh|python|node|ruby|perl)\b/i.test(exe)) return "write";
+    return "write";
+  }
+  if (toolName === "task_create" || toolName === "task_stop") return "write";
+  if (toolName === "task_list") return "safe";
+  if (toolName === "git_commit") return "write";
+  if (toolName === "git_status" || toolName === "git_diff" || toolName === "git_log") return "safe";
+  if (toolName === "notebook_edit") return "write";
+  if (toolName === "read_file" || toolName === "list_dir" || toolName === "grep_files" || toolName === "glob_files" || toolName === "web_fetch" || toolName === "save_memory" || toolName === "ask_user" || toolName === "write_todos" || toolName === "google_search" || toolName === "spawn_agent" || toolName === "run_tests") return "safe";
+  return "write";
+}
+function schemaToJsonSchema(schema) {
+  const result = {
+    type: schema.type,
+    description: schema.description
+  };
+  if (schema.enum) result["enum"] = schema.enum;
+  if (schema.items) result["items"] = schemaToJsonSchema(schema.items);
+  if (schema.properties) {
+    result["properties"] = Object.fromEntries(
+      Object.entries(schema.properties).map(([k, v]) => [k, schemaToJsonSchema(v)])
+    );
+  }
+  return result;
+}
 
 // src/tools/builtin/bash.ts
 import { execSync } from "child_process";
@@ -383,7 +432,7 @@ function updateCwdFromCommand(command, baseCwd) {
 
 // src/tools/builtin/read-file.ts
 import { readFileSync as readFileSync2, existsSync as existsSync3, statSync as statSync2, readdirSync as readdirSync2 } from "fs";
-import { execSync as execSync2 } from "child_process";
+import { execFileSync } from "child_process";
 import { extname, resolve as resolve2, basename, sep, dirname } from "path";
 import { homedir } from "os";
 
@@ -584,7 +633,7 @@ function findSimilarFiles(filePath) {
 }
 function tryExtractPdfText(absPath) {
   try {
-    const output = execSync2(`pdftotext "${absPath}" -`, {
+    const output = execFileSync("pdftotext", [absPath, "-"], {
       timeout: 15e3,
       encoding: "utf-8",
       stdio: ["pipe", "pipe", "pipe"]
@@ -593,8 +642,8 @@ function tryExtractPdfText(absPath) {
   } catch {
   }
   try {
-    const pyScript = `import sys; exec("try:\\n from pdfminer.high_level import extract_text\\n print(extract_text(sys.argv[1]))\\nexcept: pass")`;
-    const output = execSync2(`python -c "${pyScript}" "${absPath}"`, {
+    const pyScript = 'import sys; exec("try:\\n from pdfminer.high_level import extract_text\\n print(extract_text(sys.argv[1]))\\nexcept: pass")';
+    const output = execFileSync("python", ["-c", pyScript, absPath], {
       timeout: 15e3,
       encoding: "utf-8",
       stdio: ["pipe", "pipe", "pipe"],
@@ -760,55 +809,6 @@ function rlInternal(rl) {
   return rl;
 }
 
-// src/tools/types.ts
-function isFileWriteTool(name) {
-  return name === "write_file" || name === "edit_file" || name === "notebook_edit";
-}
-function getDangerLevel(toolName, args) {
-  if (toolName.startsWith("mcp__")) return "safe";
-  if (toolName === "bash") {
-    const cmd = String(args["command"] ?? "");
-    if (/\brm\s+[^\n]*(?:-\w*[rRfF]\w*|--recursive|--force)\b/.test(cmd)) return "destructive";
-    if (/\brm\s+\S/.test(cmd)) return "destructive";
-    if (/\brmdir\b|\bformat\b|\bmkfs\b/.test(cmd)) return "destructive";
-    if (/\bRemove-Item\b.*(?:-Recurse|-Force)|\bri\s+.*-(?:Recurse|Force)\b|\brd\s+\/s\b|\brmdir\s+\/s\b/i.test(cmd)) return "destructive";
-    if (/\bdel\s+\S/.test(cmd)) return "destructive";
-    if (/\becho\b.*>>?|\btee\b|\bcp\b|\bmv\b/.test(cmd)) return "write";
-    if (/\bSet-Content\b|\bOut-File\b|\bAdd-Content\b|\bCopy-Item\b|\bMove-Item\b/i.test(cmd)) return "write";
-    return "safe";
-  }
-  if (toolName === "write_file") return "write";
-  if (toolName === "edit_file") return "write";
-  if (toolName === "save_last_response") return "write";
-  if (toolName === "run_interactive") {
-    const exe = String(args["executable"] ?? "").toLowerCase();
-    if (/\b(rm|rmdir|del|format|mkfs|Remove-Item)\b/i.test(exe)) return "destructive";
-    if (/\b(bash|sh|zsh|cmd|powershell|pwsh|python|node|ruby|perl)\b/i.test(exe)) return "write";
-    return "write";
-  }
-  if (toolName === "task_create" || toolName === "task_stop") return "write";
-  if (toolName === "task_list") return "safe";
-  if (toolName === "git_commit") return "write";
-  if (toolName === "git_status" || toolName === "git_diff" || toolName === "git_log") return "safe";
-  if (toolName === "notebook_edit") return "write";
-  if (toolName === "read_file" || toolName === "list_dir" || toolName === "grep_files" || toolName === "glob_files" || toolName === "web_fetch" || toolName === "save_memory" || toolName === "ask_user" || toolName === "write_todos" || toolName === "google_search" || toolName === "spawn_agent" || toolName === "run_tests") return "safe";
-  return "write";
-}
-function schemaToJsonSchema(schema) {
-  const result = {
-    type: schema.type,
-    description: schema.description
-  };
-  if (schema.enum) result["enum"] = schema.enum;
-  if (schema.items) result["items"] = schemaToJsonSchema(schema.items);
-  if (schema.properties) {
-    result["properties"] = Object.fromEntries(
-      Object.entries(schema.properties).map(([k, v]) => [k, schemaToJsonSchema(v)])
-    );
-  }
-  return result;
-}
-
 // src/tools/executor-phases.ts
 function groupCallsByPhase(calls) {
   const safeParallel = [];
@@ -1008,7 +1008,7 @@ function simpleDiff(oldLines, newLines) {
 }
 
 // src/tools/hooks.ts
-import { execSync as execSync3 } from "child_process";
+import { execSync as execSync2 } from "child_process";
 function shellEscape(value) {
   return "'" + value.replace(/'/g, "'\\''") + "'";
 }
@@ -1020,7 +1020,7 @@ function runHook(template, vars) {
   cmd = cmd.replace(/\{args\}/g, shellEscape(vars.args ?? ""));
   cmd = cmd.replace(/\{status\}/g, shellEscape(vars.status ?? ""));
   try {
-    execSync3(cmd, {
+    execSync2(cmd, {
       timeout: 5e3,
       stdio: ["pipe", "pipe", "pipe"],
       encoding: "utf-8"
@@ -3922,7 +3922,7 @@ var taskStopTool = {
 };
 
 // src/tools/builtin/git-tools.ts
-import { execSync as execSync4 } from "child_process";
+import { execFileSync as execFileSync2 } from "child_process";
 import { existsSync as existsSync10 } from "fs";
 import { join as join5 } from "path";
 function assertGitRepo(cwd) {
@@ -3938,7 +3938,7 @@ function assertGitRepo(cwd) {
 }
 function runGit(args, cwd, maxBuffer = 10 * 1024 * 1024) {
   try {
-    const output = execSync4(`git ${args.map((a) => /\s/.test(a) ? `"${a.replace(/"/g, '\\"')}"` : a).join(" ")}`, {
+    const output = execFileSync2("git", args, {
       cwd,
       encoding: "utf-8",
       maxBuffer,

package/dist/electron-server.js

@@ -36,7 +36,7 @@ import {
   VERSION,
   buildUserIdentityPrompt,
   runTestsTool
-} from "./chunk-HF47VUGH.js";
+} from "./chunk-4GMAVGPX.js";
 import {
   hasSemanticIndex,
   semanticSearch
@@ -3581,7 +3581,7 @@ function updateCwdFromCommand(command, baseCwd) {
 
 // src/tools/builtin/read-file.ts
 import { readFileSync as readFileSync4, existsSync as existsSync5, statSync as statSync2, readdirSync as readdirSync3 } from "fs";
-import { execSync as execSync2 } from "child_process";
+import { execFileSync } from "child_process";
 import { extname, resolve as resolve2, basename, sep, dirname } from "path";
 import { homedir as homedir2 } from "os";
 
@@ -3782,7 +3782,7 @@ function findSimilarFiles(filePath) {
 }
 function tryExtractPdfText(absPath) {
   try {
-    const output = execSync2(`pdftotext "${absPath}" -`, {
+    const output = execFileSync("pdftotext", [absPath, "-"], {
       timeout: 15e3,
       encoding: "utf-8",
       stdio: ["pipe", "pipe", "pipe"]
@@ -3791,8 +3791,8 @@ function tryExtractPdfText(absPath) {
   } catch {
   }
   try {
-    const pyScript = `import sys; exec("try:\\n from pdfminer.high_level import extract_text\\n print(extract_text(sys.argv[1]))\\nexcept: pass")`;
-    const output = execSync2(`python -c "${pyScript}" "${absPath}"`, {
+    const pyScript = 'import sys; exec("try:\\n from pdfminer.high_level import extract_text\\n print(extract_text(sys.argv[1]))\\nexcept: pass")';
+    const output = execFileSync("python", ["-c", pyScript, absPath], {
       timeout: 15e3,
       encoding: "utf-8",
       stdio: ["pipe", "pipe", "pipe"],
@@ -4157,7 +4157,7 @@ function simpleDiff(oldLines, newLines) {
 }
 
 // src/tools/hooks.ts
-import { execSync as execSync3 } from "child_process";
+import { execSync as execSync2 } from "child_process";
 function shellEscape(value) {
   return "'" + value.replace(/'/g, "'\\''") + "'";
 }
@@ -4169,7 +4169,7 @@ function runHook(template, vars) {
   cmd = cmd.replace(/\{args\}/g, shellEscape(vars.args ?? ""));
   cmd = cmd.replace(/\{status\}/g, shellEscape(vars.status ?? ""));
   try {
-    execSync3(cmd, {
+    execSync2(cmd, {
       timeout: 5e3,
       stdio: ["pipe", "pipe", "pipe"],
       encoding: "utf-8"
@@ -7032,7 +7032,7 @@ var taskStopTool = {
 };
 
 // src/tools/builtin/git-tools.ts
-import { execSync as execSync4 } from "child_process";
+import { execFileSync as execFileSync2 } from "child_process";
 import { existsSync as existsSync12 } from "fs";
 import { join as join7 } from "path";
 function assertGitRepo(cwd) {
@@ -7048,7 +7048,7 @@ function assertGitRepo(cwd) {
 }
 function runGit(args, cwd, maxBuffer = 10 * 1024 * 1024) {
   try {
-    const output = execSync4(`git ${args.map((a) => /\s/.test(a) ? `"${a.replace(/"/g, '\\"')}"` : a).join(" ")}`, {
+    const output = execFileSync2("git", args, {
       cwd,
       encoding: "utf-8",
       maxBuffer,
@@ -9221,15 +9221,15 @@ function autoTrimSessionIfNeeded(session, sizeLimit = SESSION_SIZE_LIMIT) {
 // src/web/session-handler.ts
 import { existsSync as existsSync20, readFileSync as readFileSync13, appendFileSync as appendFileSync3, writeFileSync as writeFileSync8, mkdirSync as mkdirSync9, readdirSync as readdirSync9, statSync as statSync8 } from "fs";
 import { join as join13, resolve as resolve4 } from "path";
-import { execSync as execSync6 } from "child_process";
+import { execSync as execSync4 } from "child_process";
 
 // src/tools/git-context.ts
-import { execSync as execSync5 } from "child_process";
+import { execSync as execSync3 } from "child_process";
 import { existsSync as existsSync19 } from "fs";
 import { join as join12 } from "path";
 function runGit2(cmd, cwd) {
   try {
-    return execSync5(`git ${cmd}`, {
+    return execSync3(`git ${cmd}`, {
       cwd,
       encoding: "utf-8",
       stdio: ["pipe", "pipe", "pipe"],
@@ -10953,7 +10953,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
         let diff;
         try {
           const cmd = staged ? "git diff --staged" : "git diff";
-          diff = execSync6(cmd, { encoding: "utf-8", timeout: 1e4 }).trim();
+          diff = execSync4(cmd, { encoding: "utf-8", timeout: 1e4 }).trim();
         } catch {
           this.send({ type: "error", message: "Failed to run git diff." });
           break;
@@ -10992,7 +10992,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
         let secDiff;
         try {
           const cmd = secStaged ? "git diff --staged" : "git diff";
-          secDiff = execSync6(cmd, { encoding: "utf-8", timeout: 1e4 }).trim();
+          secDiff = execSync4(cmd, { encoding: "utf-8", timeout: 1e4 }).trim();
         } catch {
           this.send({ type: "error", message: "Failed to run git diff." });
           break;
@@ -11070,7 +11070,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
       case "test": {
         this.send({ type: "info", message: "\u{1F9EA} Running tests..." });
         try {
-          const { executeTests } = await import("./run-tests-P2OZOWXA.js");
+          const { executeTests } = await import("./run-tests-PIISCS6B.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {

package/dist/{hub-DZMTUFKU.js → hub-RCX7G5T6.js}

@@ -385,7 +385,7 @@ ${content}`);
   }
 }
 async function runTaskMode(config, providers, configManager, topic) {
-  const { TaskOrchestrator } = await import("./task-orchestrator-TT5F2OBH.js");
+  const { TaskOrchestrator } = await import("./task-orchestrator-H73NIC6T.js");
   const orchestrator = new TaskOrchestrator(config, providers, configManager);
   let interrupted = false;
   const onSigint = () => {

package/dist/index.js

@@ -30,10 +30,10 @@ import {
   saveDevState,
   sessionHasMeaningfulContent,
   setupProxy
-} from "./chunk-SEUAEDAI.js";
+} from "./chunk-6IOQPMMT.js";
 import {
   ConfigManager
-} from "./chunk-AQDUA2NT.js";
+} from "./chunk-APU36NHI.js";
 import {
   ToolExecutor,
   ToolRegistry,
@@ -49,7 +49,7 @@ import {
   spawnAgentContext,
   theme,
   undoStack
-} from "./chunk-H3CIS4XQ.js";
+} from "./chunk-YBL4QDLD.js";
 import "./chunk-2ZD3YTVM.js";
 import {
   fileCheckpoints
@@ -58,7 +58,7 @@ import "./chunk-NHNWUBXB.js";
 import "./chunk-CQQQFNND.js";
 import "./chunk-6VRJGH25.js";
 import "./chunk-PFYAAX2S.js";
-import "./chunk-BXN2BJAI.js";
+import "./chunk-AX7T3J7G.js";
 import {
   AGENTIC_BEHAVIOR_GUIDELINE,
   AUTHOR,
@@ -80,7 +80,7 @@ import {
   SKILLS_DIR_NAME,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-MNL53XPD.js";
+} from "./chunk-XEXVG3CQ.js";
 
 // src/index.ts
 import { program } from "commander";
@@ -2592,7 +2592,7 @@ ${hint}` : "")
       usage: "/test [command|filter]",
       async execute(args, ctx) {
         try {
-          const { executeTests } = await import("./run-tests-6ABISSWK.js");
+          const { executeTests } = await import("./run-tests-KWVQL2PO.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {
@@ -6485,7 +6485,7 @@ program.command("web").description("Start Web UI server with browser-based chat
     console.error("Error: Invalid port number. Must be between 1 and 65535.");
     process.exit(1);
   }
-  const { startWebServer } = await import("./server-J2G6B6LP.js");
+  const { startWebServer } = await import("./server-WNL7UU5Q.js");
   await startWebServer({ port, host: options.host });
 });
 program.command("user [action] [username]").description("Manage Web UI users (list | create <name> | delete <name> | reset-password <name> | migrate <name>)").action(async (action, username) => {
@@ -6608,7 +6608,7 @@ program.command("sessions").description("List recent conversation sessions").act
 });
 program.command("batch <action> [arg] [arg2]").description("Anthropic Message Batches: submit | list | status <id> | results <id> [out] | cancel <id>").option("--dry-run", "Parse and validate input without submitting (submit only)").action(async (action, arg, arg2, options) => {
   try {
-    const batch = await import("./batch-KMEDSLFU.js");
+    const batch = await import("./batch-YBWWF5BJ.js");
     switch (action) {
       case "submit":
         if (!arg) {
@@ -6650,6 +6650,15 @@ program.command("batch <action> [arg] [arg2]").description("Anthropic Message Ba
     process.exit(1);
   }
 });
+program.command("mcp-serve").description("Start an MCP server over STDIO, exposing aicli's built-in tools to Claude Desktop / Cursor / other MCP clients").option("--allow-destructive", "Allow bash / run_interactive / task_create (always destructive in MCP mode)").option("--allow-outside-cwd", "Allow tool path arguments to escape the sandbox root \u2014 disabled by default").option("--tools <list>", "Comma-separated whitelist of tools to expose (default: all eligible tools)").option("--cwd <path>", "Working directory AND sandbox root (default: current directory)").action(async (options) => {
+  const { startMcpServer } = await import("./server-GAKP7VZ7.js");
+  await startMcpServer({
+    allowDestructive: !!options.allowDestructive,
+    allowOutsideCwd: !!options.allowOutsideCwd,
+    tools: options.tools ? options.tools.split(",").map((s) => s.trim()).filter(Boolean) : void 0,
+    cwd: options.cwd
+  });
+});
 program.command("help").description("Show a comprehensive guide to all aicli features and commands").action(() => {
   const B = "\x1B[1m";
   const D = "\x1B[2m";
@@ -6676,6 +6685,7 @@ program.command("help").description("Show a comprehensive guide to all aicli fea
     `    ${G}aicli sessions${R}                 List recent conversation sessions`,
     `    ${G}aicli user <action>${R}            User management (list/create/delete)`,
     `    ${G}aicli batch <action>${R}           Anthropic Batches API (50% off, 24h): submit/list/status/results/cancel`,
+    `    ${G}aicli mcp-serve${R}               MCP server over STDIO (expose tools to Claude Desktop / Cursor)`,
     "",
     `${B}${C}  \u25A0 STARTUP OPTIONS${R}`,
     `    ${Y}--provider <name>${R}              Set AI provider`,
@@ -6768,7 +6778,7 @@ program.command("hub [topic]").description("Start multi-agent hub (discuss / bra
     }),
     config.get("customProviders")
   );
-  const { startHub } = await import("./hub-DZMTUFKU.js");
+  const { startHub } = await import("./hub-RCX7G5T6.js");
   await startHub(
     {
       topic: topic ?? "",

package/dist/{run-tests-6ABISSWK.js → run-tests-KWVQL2PO.js}

@@ -2,8 +2,8 @@
 import {
   executeTests,
   runTestsTool
-} from "./chunk-BXN2BJAI.js";
-import "./chunk-MNL53XPD.js";
+} from "./chunk-AX7T3J7G.js";
+import "./chunk-XEXVG3CQ.js";
 export {
   executeTests,
   runTestsTool

package/dist/{run-tests-P2OZOWXA.js → run-tests-PIISCS6B.js}

@@ -1,7 +1,7 @@
 import {
   executeTests,
   runTestsTool
-} from "./chunk-HF47VUGH.js";
+} from "./chunk-4GMAVGPX.js";
 export {
   executeTests,
   runTestsTool

package/dist/server-GAKP7VZ7.js

@@ -0,0 +1,283 @@
+#!/usr/bin/env node
+import {
+  ToolRegistry,
+  getDangerLevel,
+  schemaToJsonSchema
+} from "./chunk-YBL4QDLD.js";
+import "./chunk-2ZD3YTVM.js";
+import "./chunk-4BKXL7SM.js";
+import "./chunk-NHNWUBXB.js";
+import "./chunk-CQQQFNND.js";
+import "./chunk-6VRJGH25.js";
+import "./chunk-PFYAAX2S.js";
+import "./chunk-AX7T3J7G.js";
+import {
+  VERSION
+} from "./chunk-XEXVG3CQ.js";
+
+// src/mcp/server.ts
+import { createInterface } from "readline";
+import { resolve } from "path";
+import { realpathSync } from "fs";
+var STDIN_TOOLS = /* @__PURE__ */ new Set(["ask_user", "spawn_agent"]);
+var MCP_ALWAYS_DESTRUCTIVE = /* @__PURE__ */ new Set([
+  "bash",
+  "run_interactive",
+  "task_create"
+]);
+var TOOL_PATH_ARGS = {
+  read_file: ["path"],
+  write_file: ["path"],
+  edit_file: ["path"],
+  list_dir: ["path"],
+  grep_files: ["path"],
+  glob_files: ["path"],
+  notebook_edit: ["path"],
+  save_last_response: ["path"],
+  git_status: ["path"],
+  git_diff: ["path", "file"],
+  git_log: ["path", "file"],
+  git_commit: ["path", "files"],
+  find_symbol: ["path"],
+  get_outline: ["file", "path"],
+  find_references: ["path"],
+  search_code: ["path"],
+  bash: ["cwd"],
+  run_interactive: ["cwd"]
+};
+var McpServer = class {
+  registry;
+  opts;
+  initialized = false;
+  sandboxRoot;
+  eligibleNames;
+  constructor(registry, opts = {}) {
+    this.registry = registry;
+    this.opts = opts;
+    this.sandboxRoot = this.resolveSandboxRoot(opts.cwd);
+    this.eligibleNames = this.computeEligibleNames();
+  }
+  resolveSandboxRoot(cwd) {
+    const base = cwd ? resolve(cwd) : process.cwd();
+    try {
+      return realpathSync(base);
+    } catch {
+      return base;
+    }
+  }
+  computeEligibleNames() {
+    const names = /* @__PURE__ */ new Set();
+    const whitelist = this.opts.tools && this.opts.tools.length > 0 ? new Set(this.opts.tools) : null;
+    for (const tool of this.registry.listAll()) {
+      const name = tool.definition.name;
+      if (STDIN_TOOLS.has(name)) continue;
+      if (whitelist && !whitelist.has(name)) continue;
+      names.add(name);
+    }
+    return names;
+  }
+  async start() {
+    if (this.opts.cwd) {
+      try {
+        process.chdir(this.opts.cwd);
+      } catch {
+      }
+    }
+    const rl = createInterface({ input: process.stdin, crlfDelay: Infinity });
+    rl.on("line", async (line) => {
+      const trimmed = line.trim();
+      if (!trimmed) return;
+      let msg;
+      try {
+        msg = JSON.parse(trimmed);
+      } catch {
+        this.sendError(null, -32700, "Parse error");
+        return;
+      }
+      await this.dispatch(msg);
+    });
+    rl.on("close", () => process.exit(0));
+    process.stdin.resume();
+    this.log(`aicli MCP server v${VERSION} started. sandboxRoot=${this.sandboxRoot}`);
+    if (this.opts.allowDestructive) this.log("WARNING: --allow-destructive enabled");
+    if (this.opts.allowOutsideCwd) this.log("WARNING: --allow-outside-cwd enabled");
+  }
+  // ── dispatcher ─────────────────────────────────────────────────────────────
+  async dispatch(msg) {
+    const id = "id" in msg ? msg["id"] : void 0;
+    const method = msg["method"];
+    const params = msg["params"] ?? {};
+    if (id === void 0) {
+      if (method === "notifications/initialized") this.initialized = true;
+      return;
+    }
+    if (!method) {
+      this.sendError(id, -32600, "Invalid request: missing method");
+      return;
+    }
+    try {
+      switch (method) {
+        case "initialize":
+          this.handleInitialize(id, params);
+          break;
+        case "tools/list":
+          if (!this.initialized) {
+            this.sendError(id, -32002, "Server not initialized");
+            break;
+          }
+          this.handleToolsList(id);
+          break;
+        case "tools/call":
+          if (!this.initialized) {
+            this.sendError(id, -32002, "Server not initialized");
+            break;
+          }
+          await this.handleToolCall(id, params);
+          break;
+        case "ping":
+          this.sendResult(id, {});
+          break;
+        default:
+          this.sendError(id, -32601, `Method not found: ${method}`);
+      }
+    } catch (err) {
+      const emsg = err instanceof Error ? err.message : String(err);
+      this.sendError(id, -32603, `Internal error: ${emsg}`);
+    }
+  }
+  // ── handlers ───────────────────────────────────────────────────────────────
+  handleInitialize(id, _params) {
+    this.initialized = true;
+    this.sendResult(id, {
+      protocolVersion: "2024-11-05",
+      capabilities: { tools: {} },
+      serverInfo: { name: "aicli", version: VERSION }
+    });
+  }
+  handleToolsList(id) {
+    const tools = [...this.eligibleNames].map((n) => this.registry.get(n)).filter((t) => !!t);
+    const list = tools.map((tool) => {
+      const params = tool.definition.parameters;
+      const properties = {};
+      const required = [];
+      for (const [key, schema] of Object.entries(params)) {
+        properties[key] = schemaToJsonSchema(schema);
+        if (schema.required) required.push(key);
+      }
+      return {
+        name: tool.definition.name,
+        description: tool.definition.description,
+        inputSchema: {
+          type: "object",
+          properties,
+          ...required.length > 0 ? { required } : {}
+        }
+      };
+    });
+    this.sendResult(id, { tools: list });
+  }
+  async handleToolCall(id, params) {
+    const name = params["name"];
+    const args = params["arguments"] ?? {};
+    if (!name) {
+      this.sendError(id, -32602, "Missing required param: name");
+      return;
+    }
+    if (!this.eligibleNames.has(name)) {
+      this.sendError(id, -32602, `Tool not exposed: ${name}`);
+      return;
+    }
+    const tool = this.registry.get(name);
+    if (!tool) {
+      this.sendError(id, -32602, `Unknown tool: ${name}`);
+      return;
+    }
+    const forcedDestructive = MCP_ALWAYS_DESTRUCTIVE.has(name);
+    const level = forcedDestructive ? "destructive" : getDangerLevel(name, args);
+    if (level === "destructive" && !this.opts.allowDestructive) {
+      this.sendResult(id, {
+        content: [{ type: "text", text: `Tool '${name}' requires --allow-destructive in MCP mode.` }],
+        isError: true
+      });
+      return;
+    }
+    const pathErr = this.validatePathArgs(name, args);
+    if (pathErr) {
+      this.sendResult(id, {
+        content: [{ type: "text", text: pathErr }],
+        isError: true
+      });
+      return;
+    }
+    try {
+      const output = await tool.execute(args);
+      this.sendResult(id, {
+        content: [{ type: "text", text: output }]
+      });
+    } catch (err) {
+      const text = err instanceof Error ? err.message : String(err);
+      this.sendResult(id, {
+        content: [{ type: "text", text }],
+        isError: true
+      });
+    }
+  }
+  /**
+   * Validate that every known path-bearing argument of `toolName` resolves
+   * inside the sandbox root. Returns an error message on violation, else undef.
+   *
+   * We do NOT realpath() per-call: write_file targets may not exist yet, and
+   * realpath on every call is a syscall per arg. The root itself is realpath'd
+   * once at construction, which stops the "sandbox root is a symlink pointing
+   * elsewhere" class of attack. Symlinks inside the tree are allowed.
+   */
+  validatePathArgs(toolName, args) {
+    if (this.opts.allowOutsideCwd) return void 0;
+    const keys = TOOL_PATH_ARGS[toolName];
+    if (!keys) return void 0;
+    for (const key of keys) {
+      const value = args[key];
+      if (value === void 0 || value === null) continue;
+      const list = Array.isArray(value) ? value : [value];
+      for (const entry of list) {
+        if (typeof entry !== "string" || entry.length === 0) continue;
+        const abs = resolve(this.sandboxRoot, entry);
+        if (!this.isInsideSandbox(abs)) {
+          return `Path '${entry}' escapes sandbox root '${this.sandboxRoot}'. Pass --allow-outside-cwd to permit.`;
+        }
+      }
+    }
+    return void 0;
+  }
+  isInsideSandbox(abs) {
+    const norm = process.platform === "win32" ? abs.toLowerCase() : abs;
+    const root = process.platform === "win32" ? this.sandboxRoot.toLowerCase() : this.sandboxRoot;
+    if (norm === root) return true;
+    const sep = process.platform === "win32" ? "\\" : "/";
+    return norm.startsWith(root + sep);
+  }
+  // ── transport ──────────────────────────────────────────────────────────────
+  sendResult(id, result) {
+    this.write({ jsonrpc: "2.0", id, result });
+  }
+  sendError(id, code, message) {
+    this.write({ jsonrpc: "2.0", id, error: { code, message } });
+  }
+  write(obj) {
+    process.stdout.write(JSON.stringify(obj) + "\n");
+  }
+  /** MCP servers must use stderr for diagnostics so stdout stays JSON-RPC clean. */
+  log(msg) {
+    process.stderr.write(`[aicli-mcp] ${msg}
+`);
+  }
+};
+async function startMcpServer(opts) {
+  const registry = new ToolRegistry();
+  const server = new McpServer(registry, opts);
+  await server.start();
+}
+export {
+  McpServer,
+  startMcpServer
+};

package/dist/{server-J2G6B6LP.js → server-WNL7UU5Q.js}

@@ -20,10 +20,10 @@ import {
   persistToolRound,
   rebuildExtraMessages,
   setupProxy
-} from "./chunk-SEUAEDAI.js";
+} from "./chunk-6IOQPMMT.js";
 import {
   ConfigManager
-} from "./chunk-AQDUA2NT.js";
+} from "./chunk-APU36NHI.js";
 import {
   ToolExecutor,
   ToolRegistry,
@@ -41,14 +41,14 @@ import {
   spawnAgentContext,
   truncateOutput,
   undoStack
-} from "./chunk-H3CIS4XQ.js";
+} from "./chunk-YBL4QDLD.js";
 import "./chunk-2ZD3YTVM.js";
 import "./chunk-4BKXL7SM.js";
 import "./chunk-NHNWUBXB.js";
 import "./chunk-CQQQFNND.js";
 import "./chunk-6VRJGH25.js";
 import "./chunk-PFYAAX2S.js";
-import "./chunk-BXN2BJAI.js";
+import "./chunk-AX7T3J7G.js";
 import {
   AGENTIC_BEHAVIOR_GUIDELINE,
   AUTHOR,
@@ -67,7 +67,7 @@ import {
   SKILLS_DIR_NAME,
   VERSION,
   buildUserIdentityPrompt
-} from "./chunk-MNL53XPD.js";
+} from "./chunk-XEXVG3CQ.js";
 import {
   AuthManager
 } from "./chunk-BYNY5JPB.js";
@@ -2229,7 +2229,7 @@ ${undoResults.map((r) => `  \u2022 ${r}`).join("\n")}` });
       case "test": {
         this.send({ type: "info", message: "\u{1F9EA} Running tests..." });
         try {
-          const { executeTests } = await import("./run-tests-6ABISSWK.js");
+          const { executeTests } = await import("./run-tests-KWVQL2PO.js");
           const argStr = args.join(" ").trim();
           let testArgs = {};
           if (argStr) {

package/dist/{task-orchestrator-TT5F2OBH.js → task-orchestrator-H73NIC6T.js}

@@ -4,17 +4,17 @@ import {
   getDangerLevel,
   googleSearchContext,
   truncateOutput
-} from "./chunk-H3CIS4XQ.js";
+} from "./chunk-YBL4QDLD.js";
 import "./chunk-2ZD3YTVM.js";
 import "./chunk-4BKXL7SM.js";
 import "./chunk-NHNWUBXB.js";
 import "./chunk-CQQQFNND.js";
 import "./chunk-6VRJGH25.js";
 import "./chunk-PFYAAX2S.js";
-import "./chunk-BXN2BJAI.js";
+import "./chunk-AX7T3J7G.js";
 import {
   SUBAGENT_ALLOWED_TOOLS
-} from "./chunk-MNL53XPD.js";
+} from "./chunk-XEXVG3CQ.js";
 
 // src/hub/task-orchestrator.ts
 import { createInterface } from "readline";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jinzd-ai-cli",
-  "version": "0.4.83",
+  "version": "0.4.85",
   "description": "Cross-platform REPL-style AI CLI with multi-provider support",
   "type": "module",
   "main": "./dist/index.js",