micro-models-agent 0.21.0 → 0.22.0

package/dist/main.js

@@ -1888,6 +1888,7 @@ var require_commander = __commonJS((exports) => {
 // src/config/security.ts
 function mergeSecurityConfig(userConfig) {
   return {
+    enabled: userConfig?.enabled ?? DEFAULT_SECURITY_CONFIG.enabled,
     bash: {
       ...DEFAULT_SECURITY_CONFIG.bash,
       ...userConfig?.bash
@@ -1923,7 +1924,9 @@ function mergeSecurityConfig(userConfig) {
 var DEFAULT_SECURITY_CONFIG;
 var init_security = __esm(() => {
   DEFAULT_SECURITY_CONFIG = {
+    enabled: false,
     bash: {
+      enabled: false,
       blacklist: [
         "rm",
         "dd",
@@ -1985,6 +1988,7 @@ var init_security = __esm(() => {
       dangerousOperators: [">", ">>", "2>", "2>>", "`"]
     },
     paths: {
+      enabled: false,
       denied: [
         ".git/",
         "node_modules/",
@@ -2004,6 +2008,7 @@ var init_security = __esm(() => {
       allowed: []
     },
     network: {
+      enabled: false,
       deniedDomains: ["localhost", "127.0.0.1", "::1"],
       allowedDomains: [],
       requestTimeout: 15000,
@@ -2304,7 +2309,6 @@ Command: {command}`,
     "tool.friendly.process_log": "Process output",
     "tool.friendly.process_kill": "Stopping process",
     "plan.no_steps": "No plan steps specified. Provide concrete steps with files and commands.",
-    "plan.bad_steps": "Plan step quality unacceptable. Each step must describe concrete deliverables (files, packages, commands). Minimum 20 chars per step. Errors: {errors}",
     "plan.created": "Plan created: {title} ({steps} steps)",
     "plan.step_done": "Step {n}/{total}: {description} ✓",
     "plan.complete": "Task complete: {summary}",
@@ -2549,16 +2553,15 @@ Available commands:`,
 {content}
 
 Use this knowledge to answer the user's question.`,
-    "exec.stuck": "Stuck on step {stepId}. Current: {description}. No progress for {iterations} iterations.",
-    "exec.stuck_recovery": '[STUCK: {iterations} iterations on step {stepId} — "{description}". You MUST change approach NOW. Concrete actions: (1) Check what this step needs — are dependencies installed? (2) Use plan show to see the plan. (3) If commands fail — create files directly via write_file. (4) After completing the step, call plan update step={stepId} status=done. Do NOT work on other steps until this one is finished.]',
-    "exec.tool_errors": "Tool {tool} failed {count} times. Suggest alternative approach.",
-    "exec.tool_errors_recovery": "[Tool {tool} failed {count} consecutive times. DO NOT use it again. Try a different approach: (1) create files directly via write_file, (2) use a different tool for the same task, (3) if nothing works — explain the problem and skip this step via plan update step=N status=skipped with a note why.]",
-    "exec.repetitive_tool": "[REPETITION: you called {tool} {count} times with identical arguments and result. This is pointless. IMMEDIATELY change approach: create files directly, change arguments, or if it's a process — check its status via process_log.]",
-    "exec.consecutive_failures_recovery": "[{count} CONSECUTIVE TOOLS FAILED. Stop running commands. Here is what to do: (1) Create files directly via write_file instead of terminal commands. (2) Check if dependencies are installed (npm install). (3) Use list_dir to see what's in the project. (4) Do not attempt build/tests until all files are created.]",
-    "exec.task_reminder": "[ORIGINAL TASK: {task}. You MUST work on this task only. Do not create files for other tasks. If you cannot complete it — explain why and request help.]",
-    "exec.plan_warning": '[⚠ PLAN: you are on step {step} — "{description}", but calling {tool} with files outside this step. This is FORBIDDEN — work STRICTLY on the current step. First complete it and call plan update step={step} status=done, only then move to the next.]',
-    "exec.plan_blocked": "[⛔ BLOCKED: {max} consecutive calls outside the current step. You are violating the plan. Return to step {step} and complete it. Other steps are blocked until this one is done.]",
-    "exec.off_track": `[⚠ OFF PLAN: step {stepId} is "{description}", but you're using {tool} on a different path. Return to the current step immediately.]`,
+    "exec.stuck": "No progress on step {stepId} ({description}) for {iterations} iterations.",
+    "exec.stuck_recovery": 'Step {stepId} — "{description}" — has had no progress for {iterations} iterations. Try a different approach: review what this step needs, check if dependencies are installed, or create files directly via write_file instead of shell commands. After completing the step call plan update step={stepId} status=done.',
+    "exec.tool_errors": "Tool {tool} failed {count} times. Consider using a different tool.",
+    "exec.tool_errors_recovery": "Tool {tool} has failed {count} times in a row. Try an alternative: create files directly via write_file, use a different command, or if nothing works — skip this step via plan update step=N status=skipped with a note explaining why.",
+    "exec.repetitive_tool": "Called {tool} {count} times with identical arguments and result. Try a different approach — create files directly, change arguments, or check process status via process_log.",
+    "exec.consecutive_failures_recovery": "{count} consecutive tool failures. Create files directly via write_file instead of terminal commands. Check that dependencies are installed (npm install). Do not run build/tests until all files are created.",
+    "exec.plan_warning": 'Current plan step {step} is "{description}", but {tool} is being called for files outside this step. Complete the current step first, then call plan update step={step} status=done before moving to the next step.',
+    "exec.plan_blocked": "{max} consecutive calls outside the current step. Finish step {step} before proceeding — other steps should wait until this one is complete.",
+    "exec.off_track": 'Step {stepId} — "{description}" — but you are using {tool} on a different path. Return to the current step.',
     "exec.step_gate_deps": '[⚠ Step {step} "{description}": dependencies are not installed. First run the install command (npm install, pip install, etc.). Verify the lock file or dependency directory exists.]',
     "exec.step_gate_empty": "[⚠ Step {step}: files exist but appear empty: {files}. Add real code to these files before advancing to the next step.]",
     "exec.step_gate_ok": '[✓] Step {step} completed and verified. MOVING to step {nextStep}: "{nextDesc}". Work ONLY on this step.',
@@ -2803,7 +2806,6 @@ var init_ru = __esm(() => {
     "tool.friendly.process_log": "Вывод процесса",
     "tool.friendly.process_kill": "Остановка процесса",
     "plan.no_steps": "Не указаны шаги плана. Укажите конкретные шаги с файлами и командами.",
-    "plan.bad_steps": "Качество шагов плана неприемлемо. Каждый шаг должен описывать конкретные deliverables (файлы, пакеты, команды). Минимум 20 символов на шаг. Ошибки: {errors}",
     "plan.created": "План создан: {title} ({steps} шагов)",
     "plan.step_done": "Шаг {n}/{total}: {description} ✓",
     "plan.complete": "Задача выполнена: {summary}",
@@ -3048,16 +3050,15 @@ var init_ru = __esm(() => {
 {content}
 
 Используйте эти знания для ответа на вопрос пользователя.`,
-    "exec.stuck": "Застряли на шаге {stepId}. Текущий: {description}. Нет прогресса {iterations} итераций.",
-    "exec.stuck_recovery": '[ЗАСТРЕВАНИЕ: {iterations} итераций на шаге {stepId} — "{description}". ВЫ ДОЛЖНЫ сменить подход прямо сейчас. Конкретные действия: (1) Проверьте что нужно для этого шага — установлены ли зависимости? (2) Используйте plan show чтобы увидеть план. (3) Если команды не работают — создайте файлы напрямую через write_file. (4) После завершения шага вызовите plan update step={stepId} status=done. НЕ переходите к другим шагам пока этот не завершён.]',
-    "exec.tool_errors": "Инструмент {tool} сбоил {count} раз. Предложите другой подход.",
-    "exec.tool_errors_recovery": "[Инструмент {tool} сбоил {count} раз подряд. НЕ ИСПОЛЬЗУЙТЕ его снова. Используйте другой подход: (1) создайте нужные файлы напрямую через write_file, (2) используйте другой инструмент для той же задачи, (3) если ничего не работает — объясните проблему и переходите к следующему шагу плана через plan update step=N status=skipped с пометкой почему.]",
-    "exec.repetitive_tool": "[ПОВТОРЕНИЕ: вы вызвали {tool} {count} раз с одинаковыми аргументами и результатом. Это бессмысленно. НЕМЕДЛЕННО смените подход: создайте файлы напрямую, измените аргументы или, если это процесс — проверьте его статус через process_log.]",
-    "exec.consecutive_failures_recovery": "[{count} ИНСТРУМЕНТОВ ПОДРЯД УПАЛИ. Хватит пытаться запускать команды. Вот что делать: (1) Создавайте файлы напрямую через write_file вместо команд терминала. (2) Проверьте, установлены ли зависимости (npm install). (3) Используйте list_dir чтобы увидеть что есть в проекте. (4) Не пытайтесь запустить сборку/тесты пока не созданы все файлы.]",
-    "exec.task_reminder": "[ИСХОДНАЯ ЗАДАЧА: {task}. ВЫ ДОЛЖНЫ работать только над этой задачей. Не создавайте файлы для других задач. Если не можете выполнить — объясните почему и запросите помощь.]",
-    "exec.plan_warning": '[⚠ ПЛАН: вы на шаге {step} — "{description}", но вызываете {tool} для файлов вне этого шага. Это ЗАПРЕЩЕНО — работайте СТРОГО над текущим шагом. Сначала завершите его и вызовите plan update step={step} status=done, только потом переходите к следующему.]',
-    "exec.plan_blocked": "[⛔ ЗАБЛОКИРОВАНО: {max} вызова подряд вне текущего шага. Вы нарушаете план. Вернитесь к шагу {step} и завершите его. Другие шаги будут заблокированы пока текущий не выполнен.]",
-    "exec.off_track": '[⚠ ВНЕ ПЛАНА: шаг {stepId} — "{description}", но вы используете {tool} для другого пути. Вернитесь к текущему шагу немедленно.]',
+    "exec.stuck": "Нет прогресса на шаге {stepId} ({description}) — {iterations} итераций.",
+    "exec.stuck_recovery": 'Шаг {stepId} — "{description}" — без прогресса уже {iterations} итераций. Попробуйте другой подход: проверьте что нужно для этого шага, установлены ли зависимости, или создайте файлы напрямую через write_file вместо команд терминала. После завершения шага вызовите plan update step={stepId} status=done.',
+    "exec.tool_errors": "Инструмент {tool} упал {count} раз. Попробуйте другой инструмент.",
+    "exec.tool_errors_recovery": "Инструмент {tool} упал {count} раз подряд. Попробуйте альтернативу: создайте файлы напрямую через write_file, используйте другую команду, или пропустите этот шаг через plan update step=N status=skipped с пометкой почему.",
+    "exec.repetitive_tool": "Инструмент {tool} вызван {count} раз с одинаковыми аргументами и результатом. Попробуйте другой подход — создайте файлы напрямую, измените аргументы или проверьте статус процесса через process_log.",
+    "exec.consecutive_failures_recovery": "{count} инструментов подряд упали. Создавайте файлы напрямую через write_file вместо команд терминала. Проверьте что зависимости установлены (npm install). Не запускайте сборку/тесты пока не созданы все файлы.",
+    "exec.plan_warning": 'Текущий шаг плана {step} — "{description}", но вызывается {tool} для файлов вне этого шага. Завершите текущий шаг, вызовите plan update step={step} status=done, затем переходите к следующему.',
+    "exec.plan_blocked": "{max} вызовов подряд вне текущего шага. Завершите шаг {step} — остальные шаги ждут пока этот не будет выполнен.",
+    "exec.off_track": 'Шаг {stepId} — "{description}", но используется {tool} для другого пути. Вернитесь к текущему шагу.',
     "exec.step_gate_deps": '[⚠ Шаг {step} "{description}": зависимости не установлены. Сначала выполните команду установки (npm install, pip install и т.д.). Проверьте что lock-файл или директория зависимостей существует.]',
     "exec.step_gate_empty": "[⚠ Шаг {step}: файлы существуют, но выглядят пустыми: {files}. Добавьте реальный код в эти файлы перед тем как переходить к следующему шагу.]",
     "exec.step_gate_ok": '[✓] Шаг {step} завершён и проверен. ПЕРЕХОДИМ к шагу {nextStep}: "{nextDesc}". Работайте ТОЛЬКО над этим шагом.',
@@ -4938,12 +4939,33 @@ function isPathInScope(baseDir, targetPath, scope, securityConfig) {
   const baseResolved = resolve(baseDir);
   const targetResolved = resolve(baseDir, normalize(targetPath));
   if (!targetResolved.startsWith(baseResolved)) {
-    return { allowed: false, reason: "Path is outside the base working directory" };
+    return {
+      allowed: false,
+      reason: "Path is outside the base working directory"
+    };
+  }
+  if (!securityConfig?.enabled) {
+    if (scope) {
+      const isReadScope = scope.read_only_files.some((f) => targetResolved.startsWith(resolve(baseDir, f)));
+      const isWriteScope = scope.allowed_files.some((f) => targetResolved.startsWith(resolve(baseDir, f)));
+      if (isWriteScope)
+        return { allowed: true };
+      if (isReadScope)
+        return { allowed: true, reason: "Read-only file" };
+      return {
+        allowed: false,
+        reason: "Path is not within the allowed scope for this sub-agent"
+      };
+    }
+    return { allowed: true };
   }
   if (securityConfig?.denied?.length) {
     for (const pattern of securityConfig.denied) {
       if (matchesGlobPattern(targetResolved, baseDir, pattern)) {
-        return { allowed: false, reason: `Path matches denied pattern: ${pattern}` };
+        return {
+          allowed: false,
+          reason: `Path matches denied pattern: ${pattern}`
+        };
       }
     }
   }
@@ -4956,7 +4978,10 @@ function isPathInScope(baseDir, targetPath, scope, securityConfig) {
       }
     }
     if (!isAllowed) {
-      return { allowed: false, reason: "Path does not match any allowed pattern" };
+      return {
+        allowed: false,
+        reason: "Path does not match any allowed pattern"
+      };
     }
   }
   if (!scope) {
@@ -4977,12 +5002,30 @@ function isPathWritable(baseDir, targetPath, scope, securityConfig) {
   const baseResolved = resolve(baseDir);
   const targetResolved = resolve(baseDir, normalize(targetPath));
   if (!targetResolved.startsWith(baseResolved)) {
-    return { allowed: false, reason: "Path is outside the base working directory" };
+    return {
+      allowed: false,
+      reason: "Path is outside the base working directory"
+    };
+  }
+  if (!securityConfig?.enabled) {
+    if (scope) {
+      const isWriteScope = scope.allowed_files.some((f) => targetResolved.startsWith(resolve(baseDir, f)));
+      if (isWriteScope)
+        return { allowed: true };
+      return {
+        allowed: false,
+        reason: "Path is not within the allowed scope for this sub-agent"
+      };
+    }
+    return { allowed: true };
   }
   if (securityConfig?.denied?.length) {
     for (const pattern of securityConfig.denied) {
       if (matchesGlobPattern(targetResolved, baseDir, pattern)) {
-        return { allowed: false, reason: `Path matches denied pattern: ${pattern}` };
+        return {
+          allowed: false,
+          reason: `Path matches denied pattern: ${pattern}`
+        };
       }
     }
   }
@@ -4995,7 +5038,10 @@ function isPathWritable(baseDir, targetPath, scope, securityConfig) {
       }
     }
     if (!isAllowed) {
-      return { allowed: false, reason: "Path does not match any allowed pattern" };
+      return {
+        allowed: false,
+        reason: "Path does not match any allowed pattern"
+      };
     }
   }
   if (!scope) {
@@ -6419,9 +6465,15 @@ function containsOperator(command, op) {
   return new RegExp(escaped).test(command);
 }
 function isCommandAllowed(command, securityConfig) {
-  let config = securityConfig || DEFAULT_BASH_CONFIG;
+  if (!securityConfig?.enabled) {
+    return { allowed: true, sanitizedCommand: command };
+  }
+  let config = securityConfig;
   if (!config.blacklist || !Array.isArray(config.blacklist)) {
-    config = FALLBACK_BASH_CONFIG;
+    config = {
+      ...FALLBACK_BASH_CONFIG,
+      enabled: config.enabled ?? FALLBACK_BASH_CONFIG.enabled
+    };
   }
   const trimmedCommand = command.trim();
   if (!trimmedCommand) {
@@ -6510,7 +6562,21 @@ var FALLBACK_BASH_CONFIG, DEFAULT_BASH_CONFIG;
 var init_command_validator = __esm(() => {
   init_security();
   FALLBACK_BASH_CONFIG = {
-    blacklist: ["rm", "dd", "chmod", "wget", "curl", "scp", "ssh", "nc", "netcat", "powershell", "pwsh", "cmd"],
+    enabled: false,
+    blacklist: [
+      "rm",
+      "dd",
+      "chmod",
+      "wget",
+      "curl",
+      "scp",
+      "ssh",
+      "nc",
+      "netcat",
+      "powershell",
+      "pwsh",
+      "cmd"
+    ],
     whitelist: [],
     blockDangerousFlags: false,
     dangerousFlags: ["--force", "-rf", "--no-preserve-root"],
@@ -9870,7 +9936,7 @@ Partial output: ${result.text}`
 
 // src/modules/security/network-validator.ts
 function isUrlAllowed(url, securityConfig) {
-  if (!securityConfig) {
+  if (!securityConfig?.enabled) {
     return { allowed: true };
   }
   try {
@@ -12428,16 +12494,6 @@ class PlanCreator {
       baseDir
     };
   }
-  static validateSteps(steps) {
-    const errors = [];
-    for (let i = 0;i < steps.length; i++) {
-      const s = steps[i].trim();
-      if (s.length < MIN_STEP_DESC_LENGTH) {
-        errors.push(`Step ${i + 1} too short (${s.length} chars). Describe WHAT files to create, WHICH packages to install, WHICH commands to run. Minimum ${MIN_STEP_DESC_LENGTH} chars.`);
-      }
-    }
-    return { valid: errors.length === 0, errors };
-  }
   static toPromptBlock(plan, currentStepIndex) {
     const date = plan.createdAt.slice(0, 10);
     const lines = [
@@ -12455,7 +12511,6 @@ class PlanCreator {
 `);
   }
 }
-var MIN_STEP_DESC_LENGTH = 20;
 
 // src/modules/execution/tracker.ts
 class PlanTracker {
@@ -12863,13 +12918,13 @@ class ExecutionModule {
         name: "plan",
         description: `Create, update, show, or abort a multi-step plan. Use "create" at the start of complex tasks. Use "update" after completing each step to track progress. Use "show" to re-print the current plan checklist.
 
-IMPORTANT — each step MUST be detailed and concrete:
-- Specify WHICH files to create (filenames with paths, e.g. "create src/components/Header.tsx...")
+Write CONCRETE steps with exact file paths and commands:
+- Specify WHICH files to create with exact paths (e.g. "create src/components/Header.tsx with navigation and logo")
 - Specify WHICH packages to install (e.g. "run npm install react react-dom")
-- Specify WHICH commands to run with exact arguments
-- Minimum 20 characters per step description
-- BAD: "Настройка проекта"
-- GOOD: "Создать package.json с зависимостями react@18, vite@5, установить их через npm install"`,
+- Specify WHICH CLI commands to run with exact arguments
+- Each step should include at least one file extension (.ts, .tsx, .json, etc.) or a command verb (install, create, build, run, add, init)
+- Good: "Создать src/components/Header.tsx с навигацией и логотипом"
+- Bad: "Настройка проекта" (too vague — what exactly needs to be configured?)`,
         parameters: {
           type: "object",
           properties: {
@@ -12893,15 +12948,6 @@ IMPORTANT — each step MUST be detailed and concrete:
             if (steps.length === 0) {
               return { success: false, output: t("plan.no_steps") };
             }
-            const validation = PlanCreator.validateSteps(steps);
-            if (!validation.valid) {
-              return {
-                success: false,
-                output: t("plan.bad_steps", {
-                  errors: validation.errors.join("; ")
-                })
-              };
-            }
             const plan = PlanCreator.createPlan(title, steps, this.baseDir);
             this.setPlan(plan);
             const display = PlanCreator.toPromptBlock(plan, 0);
@@ -14633,21 +14679,20 @@ function buildSystemInfo(config, baseDir, profileCompressed) {
     `Date: ${now}`,
     `Workspace: ${baseDir}`,
     `${profileCompressed}`,
-    `Reply in the user's language. Use tools for filesystem, bash, web access.`,
-    `Use tools when needed. Explain briefly what you're doing if it's not obvious.`,
-    `Answer the user's question directly. Only take action when the user explicitly asks you to change, create, or fix something.`,
-    `If a tool call fails, report the error and ask the user how to proceed.`,
+    `Reply in the user's language. Use tools for: read/write/edit/delete files, search (glob/grep), shell commands (bash), web access (web_search, web_fetch), subagents, browser, MCP.`,
+    `Use tools when needed — explain briefly what you're doing if it's not obvious.`,
+    `If a tool call fails, analyze the error and correct the call — try up to 2 times with different approaches before asking the user for help.`,
     ``,
-    `Design principles — apply them automatically without naming them:`,
-    `- Do not add code, files, or abstractions that are not needed right now (YAGNI — You Ain't Gonna Need It). If something is not required by the current task, omit it.`,
-    `- Prefer simple, straightforward solutions over clever or complex ones (KISS — Keep It Simple, Stupid). Flat code beats nested, minimal config beats flexible, explicit beats generic.`,
-    `- Do not duplicate code, logic, or configuration (DRY — Don't Repeat Yourself). Extract shared logic into a single place, reuse existing utilities and patterns before writing new ones.`
+    `Design principles:`,
+    `- YAGNI: Do not add code, files, or abstractions not needed right now.`,
+    `- KISS: Prefer simple, straightforward solutions over clever or complex ones.`,
+    `- DRY: Do not duplicate code, logic, or configuration — reuse existing utilities and patterns.`
   ];
   if (isWin) {
     lines.push(``, `Windows environment — use Windows-compatible commands:`, `- Use "dir" instead of "ls". Use "dir /b" for bare listing.`, `- Use "type" or "Get-Content" instead of "cat".`, `- Use "cd" instead of "pwd". Use "echo %cd%" to print working directory.`, `- Use "copy" instead of "cp", "move" instead of "mv", "del" instead of "rm".`, `- Do not use "mkdir -p" — Windows mkdir creates intermediate dirs by default. Use the create_dir tool instead.`, `- Use forward slashes (/) or escaped backslashes (\\\\) in file paths.`, `- Your working directory is: ${baseDir}`);
   }
-  lines.push(``, `Bash tool rules:`, `- Use the "workdir" parameter to run commands in a specific directory. Do NOT chain "cd dir && cmd" — the security module blocks the "&&" operator.`, `- Run one command per tool call. Split multi-step shell operations into separate bash calls.`, `- Background processes (dev servers, watchers, long-running npm install): use the "background: true" parameter or the tool will auto-detect and background them. Check output with process_log.`);
-  lines.push(``, `=== DEVELOPMENT RULES — follow these strictly ===`, ``, `1. DEPENDENCIES FIRST: Before writing any source code, ALWAYS install project dependencies (e.g., "npm install", "pip install -r requirements.txt", "cargo build", "go mod tidy"). Verify the package manager's lock file or dependency directory exists. Never write code that imports/uses packages that aren't installed yet.`, `2. TOOLKIT/FWK FIRST: If the task specifies a framework or UI library, initialize and configure it BEFORE writing application code. Run its project init command first, then add components/modules. Never write your own version of what the framework already provides.`, `3. ONE STEP AT A TIME: Follow the plan sequentially. Complete step N before starting step N+1. When a step is done: verify the deliverables exist and have real content (not empty), then call "plan update step=N status=done". Do not redo completed work.`, `4. VERIFY YOUR WORK: After creating/modifying files, verify they exist on disk. After installing dependencies, verify the package manager completed successfully. After any command, check its output for errors. Don't assume operations succeeded.`, `5. NO PREMATURE WORK: Do not create files for future steps. Do not add imports/references to packages or modules that haven't been installed yet. Do not reference files or components that don't exist yet. Build incrementally — one layer at a time.`, `6. WHEN STUCK: If a command fails 2+ times, STOP and try a different approach. Write files directly instead of using commands. Ask the user for help. Never repeat the same failing command more than twice.`, ``, `=== PLAN QUALITY RULES — your plan MUST follow these ===`, ``, `- Each step must describe CONCRETE deliverables: exact filenames with paths, exact packages to install, exact CLI commands to run.`, `- A step like "Настройка проекта" or "Setup the project" is USELESS and will be REJECTED.`, `- A step like "Создать src/components/Header.tsx с хедером навигации, подключить в App.tsx" is GOOD.`, `- Include file extensions (.tsx, .css, .json) and directory paths. Never write vague steps.`, `- The plan must cover EVERYTHING needed: init → deps → framework setup → code → verification.`, `- Number of steps: 5-8 for a typical task. Too few means you're being vague. Too many means you're over-splitting.`);
+  lines.push(``, `Bash tool rules:`, `- Use the "workdir" parameter to run commands in a specific directory. Prefer workdir over "cd dir && cmd" chaining.`, `- Run one command per tool call. Split multi-step shell operations into separate bash calls.`, `- Background processes (dev servers, watchers, long-running npm install): use the "background: true" parameter or the tool will auto-detect and background them. Check output with process_log.`);
+  lines.push(``, `=== DEVELOPMENT RULES — follow these strictly ===`, ``, `1. DEPENDENCIES FIRST: Before writing any source code, ALWAYS install project dependencies (e.g., "npm install", "pip install -r requirements.txt", "cargo build", "go mod tidy"). Verify the package manager's lock file or dependency directory exists. Never write code that imports/uses packages that aren't installed yet.`, `2. TOOLKIT/FWK FIRST: If the task specifies a framework or UI library, initialize and configure it BEFORE writing application code. Run its project init command first, then add components/modules. Never write your own version of what the framework already provides.`, `3. ONE STEP AT A TIME: Follow the plan sequentially. Complete step N before starting step N+1. When a step is done: verify the deliverables exist and have real content (not empty), then call "plan update step=N status=done". Do not redo completed work.`, `4. VERIFY YOUR WORK: After creating/modifying files, verify they exist on disk. After installing dependencies, verify the package manager completed successfully. After any command, check its output for errors. Don't assume operations succeeded.`, `5. NO PREMATURE WORK: Do not create files for future steps. Do not add imports/references to packages or modules that haven't been installed yet. Do not reference files or components that don't exist yet. Build incrementally — one layer at a time.`, `6. WHEN STUCK: If a command fails 2+ times, STOP and try a different approach. Write files directly instead of using commands. Ask the user for help. Never repeat the same failing command more than twice.`, ``, `=== PLAN QUALITY RULES — your plan MUST follow these ===`, ``, `- Each step must describe CONCRETE deliverables: exact filenames with paths, exact packages to install, exact CLI commands to run. Avoid vague steps — be specific.`, `- A step like "Настройка проекта" or "Setup the project" is too vague — describe what exactly needs to be configured or set up.`, `- A step like "Создать src/components/Header.tsx с навигацией и логотипом, добавить в src/App.tsx импорт <Header />" is GOOD.`, `- Include file extensions (.tsx, .css, .json) and directory paths. Every step must mention at least one file or command.`, `- The plan must cover EVERYTHING needed: init → deps → framework setup → code → verification.`, `- Number of steps: 5-8 for a typical task. Too few means you're being vague. Too many means you're over-splitting.`);
   if (config.autoPlan) {
     lines.push(``, `Plan rule (MANDATORY): For ANY task that requires creating files, installing packages, or multiple actions — you MUST create a plan using the "plan" tool BEFORE starting work. Each step must describe a concrete deliverable (specific files to create, packages to install, commands to run). Do not combine unrelated work into one step.`);
   }
@@ -15708,7 +15753,9 @@ var STRICT_POLICY = {
   preset: "strict",
   recommendedFor: ["production", "sensitive-data", "multi-user", "enterprise"],
   config: {
+    enabled: true,
     bash: {
+      enabled: true,
       blacklist: [
         "rm",
         "dd",
@@ -15767,10 +15814,22 @@ var STRICT_POLICY = {
         "-R",
         "--no-clobber"
       ],
-      dangerousOperators: [">", ">>", "2>", "2>>", "|", "&&", "||", ";", "&", "`"],
+      dangerousOperators: [
+        ">",
+        ">>",
+        "2>",
+        "2>>",
+        "|",
+        "&&",
+        "||",
+        ";",
+        "&",
+        "`"
+      ],
       logCommands: true
     },
     paths: {
+      enabled: true,
       denied: [
         ".git/",
         "node_modules/",
@@ -15803,6 +15862,7 @@ var STRICT_POLICY = {
       allowed: []
     },
     network: {
+      enabled: true,
       deniedDomains: [
         "localhost",
         "127.0.0.1",
@@ -15874,7 +15934,9 @@ var BALANCED_POLICY = {
   preset: "balanced",
   recommendedFor: ["development", "single-user", "general-use", "testing"],
   config: {
+    enabled: true,
     bash: {
+      enabled: true,
       blacklist: [
         "rm",
         "dd",
@@ -15920,6 +15982,7 @@ var BALANCED_POLICY = {
       logCommands: true
     },
     paths: {
+      enabled: true,
       denied: [
         ".git/",
         "node_modules/",
@@ -15940,6 +16003,7 @@ var BALANCED_POLICY = {
       allowed: []
     },
     network: {
+      enabled: true,
       deniedDomains: [],
       allowedDomains: [],
       requestTimeout: 15000,
@@ -15975,7 +16039,12 @@ var BALANCED_POLICY = {
     auditNotifier: {
       enabled: false,
       minSeverity: "medium",
-      eventTypes: ["security_block", "bash_command", "file_operation", "network_request"],
+      eventTypes: [
+        "security_block",
+        "bash_command",
+        "file_operation",
+        "network_request"
+      ],
       maxRetries: 3
     }
   }
@@ -15986,7 +16055,9 @@ var PERMISSIVE_POLICY = {
   preset: "permissive",
   recommendedFor: ["trusted-environment", "local-dev", "testing", "sandbox"],
   config: {
+    enabled: true,
     bash: {
+      enabled: true,
       blacklist: [
         "rm",
         "dd",
@@ -16006,10 +16077,12 @@ var PERMISSIVE_POLICY = {
       logCommands: true
     },
     paths: {
+      enabled: true,
       denied: [".env", "*.key", "*.pem", "*.crt", "*.p12", "*.pfx"],
       allowed: []
     },
     network: {
+      enabled: true,
       deniedDomains: [],
       allowedDomains: [],
       requestTimeout: 30000,
@@ -16314,6 +16387,37 @@ function createProgram() {
     config.contextWindow = answers.contextWindow;
     config.maxToolIterations = answers.maxToolIterations;
     config.locale = answers.locale;
+    if (config.security) {
+      config.security.enabled = answers.securityBashBlock || answers.securityFlagsBlock || !answers.securityPathsDeny;
+      config.security.bash.enabled = config.security.enabled;
+      config.security.bash.blockDangerousFlags = answers.securityFlagsBlock;
+      if (answers.securityBashBlock) {
+        config.security.bash.blacklist = [
+          ...new Set([
+            ...config.security.bash.blacklist,
+            "rm",
+            "dd",
+            "chmod",
+            "wget",
+            "curl",
+            "scp",
+            "ssh",
+            "nc",
+            "netcat",
+            "sudo",
+            "su",
+            "kill",
+            "pkill",
+            "killall",
+            "shutdown",
+            "reboot"
+          ])
+        ];
+      }
+      if (!answers.securityPathsDeny) {
+        config.security.paths.denied = [];
+      }
+    }
     saveConfig(config, configPath);
     console.log(t("cli.config_saved"));
   });
@@ -17945,6 +18049,8 @@ async function main() {
       config2.maxToolIterations = answers.maxToolIterations;
       config2.locale = answers.locale;
       if (config2.security) {
+        config2.security.enabled = answers.securityBashBlock || answers.securityFlagsBlock || !answers.securityPathsDeny;
+        config2.security.bash.enabled = config2.security.enabled;
         config2.security.bash.blockDangerousFlags = answers.securityFlagsBlock;
         if (answers.securityBashBlock) {
           config2.security.bash.blacklist = [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "micro-models-agent",
-  "version": "0.21.0",
+  "version": "0.22.0",
   "description": "Micro Models Agent (MMA) — LLM agent harness for small models (Qwen3.5-9B, 32K-64K context)",
   "type": "module",
   "bin": {