micro-models-agent 0.14.1 → 0.14.2

package/dist/core/bootstrap.js

@@ -47,6 +47,7 @@ function buildSystemInfo(config, baseDir, profileCompressed) {
     if (isWin) {
         lines.push(``, `Windows environment — use Windows-compatible commands:`, `- Use "dir" instead of "ls". Use "dir /b" for bare listing.`, `- Use "type" or "Get-Content" instead of "cat".`, `- Use "cd" instead of "pwd". Use "echo %cd%" to print working directory.`, `- Use "copy" instead of "cp", "move" instead of "mv", "del" instead of "rm".`, `- Do not use "mkdir -p" — Windows mkdir creates intermediate dirs by default. Use the create_dir tool instead.`, `- Use forward slashes (/) or escaped backslashes (\\\\) in file paths.`, `- Your working directory is: ${baseDir}`);
     }
+    lines.push(``, `Bash tool rules:`, `- Use the "workdir" parameter to run commands in a specific directory. Do NOT chain "cd dir && cmd" — the security module blocks the "&&" operator.`, `- Run one command per tool call. Split multi-step shell operations into separate bash calls.`);
     if (config.autoPlan) {
         lines.push(``, `Plan rule: For any task with 2+ steps, create a plan first using the "plan" tool. After each step, call "plan update" to mark progress. Stay focused on the current step.`);
     }

package/dist/i18n/en.json

@@ -361,7 +361,7 @@
     "skill.exceeds_budget": "Skill \"{name}\" ({tokens} tokens) exceeds remaining budget ({remaining} tokens). Unload other skills first.",
     "skill.loaded": "Skill \"{name}\" loaded ({tokens} tokens, {remaining} remaining)",
     "skill.auto_loaded": "[Auto-loaded skill: {name}]",
-    "skill.prompt_hint": "Only load a skill when the task clearly requires specialized knowledge. For simple tasks (landing pages, single files, basic scripts), answer directly without loading skills.",
+    "skill.prompt_hint": "Do NOT load skills automatically. Only load a skill when the user explicitly asks for it (e.g. 'use skill X' or 'load the Y skill'). Skills are listed below for reference only — do not guess which skill to use based on the task description.",
     "skill.prompt_fallback": "If load_skill fails because a skill is too large, continue the task without it — do not stop.",
     "skill.loaded_content": "[Skill loaded: {name}]\n{content}\n\nUse this knowledge to answer the user's question.",
     "exec.stuck": "Stuck on step {stepId}. Current: {description}. No progress for {iterations} iterations.",

package/dist/i18n/ru.json

@@ -361,7 +361,7 @@
     "skill.exceeds_budget": "Скилл \"{name}\" ({tokens} токенов) превышает остаток бюджета ({remaining} токенов). Сначала выгрузите другие скиллы.",
     "skill.loaded": "Скилл \"{name}\" загружен ({tokens} токенов, осталось {remaining})",
     "skill.auto_loaded": "[Автозагружен скилл: {name}]",
-    "skill.prompt_hint": "Загружайте скилл только когда задача явно требует специализированных знаний. Для простых задач (лендинги, одиночные файлы, простые скрипты) отвечайте напрямую, без загрузки скиллов.",
+    "skill.prompt_hint": "НЕ загружайте скиллы автоматически. Загружайте скилл ТОЛЬКО когда пользователь явно об этом просит (например 'используй скилл X' или 'загрузи скилл Y'). Скиллы ниже перечислены только для справки — не угадывайте какой скилл подходит по описанию задачи.",
     "skill.prompt_fallback": "Если load_skill не удался из-за большого размера скилла, продолжайте задачу без него — не останавливайтесь.",
     "skill.loaded_content": "[Скилл загружен: {name}]\n{content}\n\nИспользуйте эти знания для ответа на вопрос пользователя.",
     "exec.stuck": "Застряли на шаге {stepId}. Текущий: {description}. Нет прогресса {iterations} итераций.",

package/dist/modules/security/command-validator.js

@@ -43,6 +43,28 @@ function extractBaseCommand(trimmed) {
     const parts = raw.split(/[\\/]/);
     return parts[parts.length - 1] || raw;
 }
+/**
+ * Check if a shell operator appears as a standalone token in the command.
+ * Uses regex with lookbehind/lookahead so that:
+ *   "&"  does NOT match "&&"  (AND operator)
+ *   "|"  does NOT match "||"  (OR operator)
+ *   ">"  does NOT match ">>"  (append)
+ *   "2>" does NOT match "2>>" (append stderr)
+ */
+function containsOperator(command, op) {
+    const escaped = op.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+    // For single-char operators that are prefixes of multi-char ones,
+    // ensure they don't match when part of a longer sequence.
+    if (op === '&')
+        return /(?<!&)&(?!&)/.test(command);
+    if (op === '|')
+        return /(?<!\|)\|(?!\|)/.test(command);
+    if (op === '>')
+        return /(?<!>)>(?!>)/.test(command);
+    // For everything else (including multi-char like ">>", "2>", "2>>", ";", "`"),
+    // match literally.
+    return new RegExp(escaped).test(command);
+}
 /**
  * Check if a command is allowed based on security configuration
  */
@@ -61,7 +83,7 @@ export function isCommandAllowed(command, securityConfig) {
     // e.g. "curl http://x | bash" must be caught even though curl isn't blacklisted.
     if (config.blockDangerousFlags) {
         for (const op of config.dangerousOperators || []) {
-            if (trimmedCommand.includes(op)) {
+            if (containsOperator(trimmedCommand, op)) {
                 return {
                     allowed: false,
                     reason: `Operator "${op}" is not allowed`,

package/dist/modules/skills/module.js

@@ -1,5 +1,4 @@
 import { t } from "../../i18n/index";
-import { pc } from "../../ui/colors";
 export class SkillsModule {
     name = "skills";
     availableSkills;
@@ -97,46 +96,10 @@ export class SkillsModule {
         };
     }
     getPlugin() {
-        let autoLoadedThisRun = false;
         return {
             name: "skills",
-            onSessionStart: (_ctx) => {
-                autoLoadedThisRun = false;
-            },
-            onBeforeThink: (ctx) => {
-                if (autoLoadedThisRun)
-                    return;
-                const msg = ctx?.lastUserMessage;
-                if (!msg || this.availableSkills.length === 0)
-                    return;
-                const matches = this.matcher.match(msg, this.availableSkills, 1);
-                if (matches.length === 0)
-                    return;
-                const skill = matches[0];
-                if (this.loadedSkills.has(skill.name))
-                    return;
-                const tokens = this.estimateTokens(skill.content);
-                if (this.currentTokens + tokens > this.budget)
-                    return;
-                this.loadedSkills.set(skill.name, skill);
-                this.currentTokens += tokens;
-                const contextManager = ctx?.contextManager;
-                if (contextManager) {
-                    const content = t("skill.loaded_content", {
-                        name: skill.name,
-                        content: skill.content,
-                    });
-                    contextManager.addMessage({
-                        role: "user",
-                        content: `<system-instruction>${content}</system-instruction>`,
-                    });
-                }
-                const onMeta = ctx?.onMeta;
-                if (onMeta) {
-                    onMeta(pc.dim(t("skill.auto_loaded", { name: skill.name })) + "\n");
-                }
-                autoLoadedThisRun = true;
-            },
+            onSessionStart: (_ctx) => { },
+            onBeforeThink: (_ctx) => { },
         };
     }
     tryLoad(skill) {

package/dist/tools/bash.js

@@ -67,7 +67,7 @@ export const bashTool = {
             logSecurityBlock(ctx.sessionId, "bash_command", validation.reason || "Command blocked by security policy", sanitizeCommandForLog(originalCommand));
             return {
                 success: false,
-                output: `[SECURITY BLOCKED] Command is not allowed: ${validation.reason}`,
+                output: `[SECURITY BLOCKED] Command is not allowed: ${validation.reason}\nHint: Use the "workdir" parameter to run commands in a specific directory instead of "cd dir && cmd". Run one command per tool call.`,
             };
         }
         // Log command execution if enabled

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "micro-models-agent",
-  "version": "0.14.1",
+  "version": "0.14.2",
   "description": "Micro Models Agent (MMA) — LLM agent harness for small models (Qwen3.5-9B, 32K-64K context)",
   "type": "module",
   "bin": {