micro-models-agent 0.21.1 → 0.23.0

package/dist/main.js

@@ -1888,6 +1888,7 @@ var require_commander = __commonJS((exports) => {
 // src/config/security.ts
 function mergeSecurityConfig(userConfig) {
   return {
+    enabled: userConfig?.enabled ?? DEFAULT_SECURITY_CONFIG.enabled,
     bash: {
       ...DEFAULT_SECURITY_CONFIG.bash,
       ...userConfig?.bash
@@ -1923,7 +1924,9 @@ function mergeSecurityConfig(userConfig) {
 var DEFAULT_SECURITY_CONFIG;
 var init_security = __esm(() => {
   DEFAULT_SECURITY_CONFIG = {
+    enabled: false,
     bash: {
+      enabled: false,
       blacklist: [
         "rm",
         "dd",
@@ -1985,6 +1988,7 @@ var init_security = __esm(() => {
       dangerousOperators: [">", ">>", "2>", "2>>", "`"]
     },
     paths: {
+      enabled: false,
       denied: [
         ".git/",
         "node_modules/",
@@ -2004,6 +2008,7 @@ var init_security = __esm(() => {
       allowed: []
     },
     network: {
+      enabled: false,
       deniedDomains: ["localhost", "127.0.0.1", "::1"],
       allowedDomains: [],
       requestTimeout: 15000,
@@ -2016,7 +2021,7 @@ var init_security = __esm(() => {
       maxParallelTasks: 5
     },
     contentScan: {
-      enabled: true,
+      enabled: false,
       dangerousPatterns: [
         /eval\(/,
         /new Function\(/,
@@ -2305,6 +2310,7 @@ Command: {command}`,
     "tool.friendly.process_kill": "Stopping process",
     "plan.no_steps": "No plan steps specified. Provide concrete steps with files and commands.",
     "plan.created": "Plan created: {title} ({steps} steps)",
+    "plan.coverage_warning": "Plan may be missing required files from the task: {missing}. Add steps covering them.",
     "plan.step_done": "Step {n}/{total}: {description} ✓",
     "plan.complete": "Task complete: {summary}",
     "plan.title_steps": 'Plan "{title}" created with {count} steps',
@@ -2548,16 +2554,15 @@ Available commands:`,
 {content}
 
 Use this knowledge to answer the user's question.`,
-    "exec.stuck": "Stuck on step {stepId}. Current: {description}. No progress for {iterations} iterations.",
-    "exec.stuck_recovery": '[STUCK: {iterations} iterations on step {stepId} — "{description}". You MUST change approach NOW. Concrete actions: (1) Check what this step needs — are dependencies installed? (2) Use plan show to see the plan. (3) If commands fail — create files directly via write_file. (4) After completing the step, call plan update step={stepId} status=done. Do NOT work on other steps until this one is finished.]',
-    "exec.tool_errors": "Tool {tool} failed {count} times. Suggest alternative approach.",
-    "exec.tool_errors_recovery": "[Tool {tool} failed {count} consecutive times. DO NOT use it again. Try a different approach: (1) create files directly via write_file, (2) use a different tool for the same task, (3) if nothing works — explain the problem and skip this step via plan update step=N status=skipped with a note why.]",
-    "exec.repetitive_tool": "[REPETITION: you called {tool} {count} times with identical arguments and result. This is pointless. IMMEDIATELY change approach: create files directly, change arguments, or if it's a process — check its status via process_log.]",
-    "exec.consecutive_failures_recovery": "[{count} CONSECUTIVE TOOLS FAILED. Stop running commands. Here is what to do: (1) Create files directly via write_file instead of terminal commands. (2) Check if dependencies are installed (npm install). (3) Use list_dir to see what's in the project. (4) Do not attempt build/tests until all files are created.]",
-    "exec.task_reminder": "[ORIGINAL TASK: {task}. You MUST work on this task only. Do not create files for other tasks. If you cannot complete it — explain why and request help.]",
-    "exec.plan_warning": '[⚠ PLAN: you are on step {step} — "{description}", but calling {tool} with files outside this step. This is FORBIDDEN — work STRICTLY on the current step. First complete it and call plan update step={step} status=done, only then move to the next.]',
-    "exec.plan_blocked": "[⛔ BLOCKED: {max} consecutive calls outside the current step. You are violating the plan. Return to step {step} and complete it. Other steps are blocked until this one is done.]",
-    "exec.off_track": `[⚠ OFF PLAN: step {stepId} is "{description}", but you're using {tool} on a different path. Return to the current step immediately.]`,
+    "exec.stuck": "No progress on step {stepId} ({description}) for {iterations} iterations.",
+    "exec.stuck_recovery": 'Step {stepId} — "{description}" — has had no progress for {iterations} iterations. Try a different approach: review what this step needs, check if dependencies are installed, or create files directly via write_file instead of shell commands. After completing the step call plan update step={stepId} status=done.',
+    "exec.tool_errors": "Tool {tool} failed {count} times. Consider using a different tool.",
+    "exec.tool_errors_recovery": "Tool {tool} has failed {count} times in a row. Try an alternative: create files directly via write_file, use a different command, or if nothing works — skip this step via plan update step=N status=skipped with a note explaining why.",
+    "exec.repetitive_tool": "Called {tool} {count} times with identical arguments and result. Try a different approach — create files directly, change arguments, or check process status via process_log.",
+    "exec.consecutive_failures_recovery": "{count} consecutive tool failures. Create files directly via write_file instead of terminal commands. Check that dependencies are installed (npm install). Do not run build/tests until all files are created.",
+    "exec.plan_warning": 'Current plan step {step} is "{description}", but {tool} is being called for files outside this step. Complete the current step first, then call plan update step={step} status=done before moving to the next step.',
+    "exec.plan_blocked": "{max} consecutive calls outside the current step. Finish step {step} before proceeding — other steps should wait until this one is complete.",
+    "exec.off_track": 'Step {stepId} — "{description}" — but you are using {tool} on a different path. Return to the current step.',
     "exec.step_gate_deps": '[⚠ Step {step} "{description}": dependencies are not installed. First run the install command (npm install, pip install, etc.). Verify the lock file or dependency directory exists.]',
     "exec.step_gate_empty": "[⚠ Step {step}: files exist but appear empty: {files}. Add real code to these files before advancing to the next step.]",
     "exec.step_gate_ok": '[✓] Step {step} completed and verified. MOVING to step {nextStep}: "{nextDesc}". Work ONLY on this step.',
@@ -2566,6 +2571,14 @@ Use this knowledge to answer the user's question.`,
     "exec.audit_fail": "[✗] Task incomplete: {done}/{total} steps done, {files} files missing",
     "exec.audit_fail_typecheck": "[✗] Task incomplete: {done}/{total} steps done, {missing} files missing, typecheck error: {typeError}",
     "exec.audit_incomplete": "[⚠ Final audit incomplete: {summary}. Task is NOT finished — continue working. Remaining steps: {steps}]",
+    "exec.mass_edit_warning": "⚠️ Plan affects {count} files — review the full list before proceeding.",
+    "exec.escalation": `
+
+⚠️ Agent stuck on step {stepId} ({description}). Escalating to user — please provide guidance.`,
+    "exec.hints": `
+[Hints]
+{hints}`,
+    "exec.file_rewrite_warning": "⚠️ File {file} has been rewritten {count} times. Consider a different approach — the current fix strategy is not working.",
     "hall.max_retries_exhausted": "Model returned empty or insufficient responses after multiple retries",
     "hall.short_response": "Response too short or empty",
     "hall.repetitive": "Response too repetitive ({pct}% overlap)",
@@ -2643,7 +2656,12 @@ Use this knowledge to answer the user's question.`,
     "tool.recall.empty": 'Nothing found for "{query}"',
     "tool.recall.no_memory": "Memory is empty",
     "tool.recall.search_results": `{category} results:
-{results}`
+{results}`,
+    "ctx.compactions": "compactions: {count}",
+    "ctx.quality": "quality: {percent}%",
+    "ctx.delta_pos": "ctx +{tokens}",
+    "ctx.delta_neg": "ctx -{tokens} ↓",
+    "ctx.delta_zero": "ctx ±0"
   };
 });
 
@@ -2803,6 +2821,7 @@ var init_ru = __esm(() => {
     "tool.friendly.process_kill": "Остановка процесса",
     "plan.no_steps": "Не указаны шаги плана. Укажите конкретные шаги с файлами и командами.",
     "plan.created": "План создан: {title} ({steps} шагов)",
+    "plan.coverage_warning": "План может не покрывать требуемые файлы из постановки: {missing}. Добавьте шаги, покрывающие их.",
     "plan.step_done": "Шаг {n}/{total}: {description} ✓",
     "plan.complete": "Задача выполнена: {summary}",
     "plan.title_steps": 'План "{title}" создан с {count} шагами',
@@ -3046,16 +3065,15 @@ var init_ru = __esm(() => {
 {content}
 
 Используйте эти знания для ответа на вопрос пользователя.`,
-    "exec.stuck": "Застряли на шаге {stepId}. Текущий: {description}. Нет прогресса {iterations} итераций.",
-    "exec.stuck_recovery": '[ЗАСТРЕВАНИЕ: {iterations} итераций на шаге {stepId} — "{description}". ВЫ ДОЛЖНЫ сменить подход прямо сейчас. Конкретные действия: (1) Проверьте что нужно для этого шага — установлены ли зависимости? (2) Используйте plan show чтобы увидеть план. (3) Если команды не работают — создайте файлы напрямую через write_file. (4) После завершения шага вызовите plan update step={stepId} status=done. НЕ переходите к другим шагам пока этот не завершён.]',
-    "exec.tool_errors": "Инструмент {tool} сбоил {count} раз. Предложите другой подход.",
-    "exec.tool_errors_recovery": "[Инструмент {tool} сбоил {count} раз подряд. НЕ ИСПОЛЬЗУЙТЕ его снова. Используйте другой подход: (1) создайте нужные файлы напрямую через write_file, (2) используйте другой инструмент для той же задачи, (3) если ничего не работает — объясните проблему и переходите к следующему шагу плана через plan update step=N status=skipped с пометкой почему.]",
-    "exec.repetitive_tool": "[ПОВТОРЕНИЕ: вы вызвали {tool} {count} раз с одинаковыми аргументами и результатом. Это бессмысленно. НЕМЕДЛЕННО смените подход: создайте файлы напрямую, измените аргументы или, если это процесс — проверьте его статус через process_log.]",
-    "exec.consecutive_failures_recovery": "[{count} ИНСТРУМЕНТОВ ПОДРЯД УПАЛИ. Хватит пытаться запускать команды. Вот что делать: (1) Создавайте файлы напрямую через write_file вместо команд терминала. (2) Проверьте, установлены ли зависимости (npm install). (3) Используйте list_dir чтобы увидеть что есть в проекте. (4) Не пытайтесь запустить сборку/тесты пока не созданы все файлы.]",
-    "exec.task_reminder": "[ИСХОДНАЯ ЗАДАЧА: {task}. ВЫ ДОЛЖНЫ работать только над этой задачей. Не создавайте файлы для других задач. Если не можете выполнить — объясните почему и запросите помощь.]",
-    "exec.plan_warning": '[⚠ ПЛАН: вы на шаге {step} — "{description}", но вызываете {tool} для файлов вне этого шага. Это ЗАПРЕЩЕНО — работайте СТРОГО над текущим шагом. Сначала завершите его и вызовите plan update step={step} status=done, только потом переходите к следующему.]',
-    "exec.plan_blocked": "[⛔ ЗАБЛОКИРОВАНО: {max} вызова подряд вне текущего шага. Вы нарушаете план. Вернитесь к шагу {step} и завершите его. Другие шаги будут заблокированы пока текущий не выполнен.]",
-    "exec.off_track": '[⚠ ВНЕ ПЛАНА: шаг {stepId} — "{description}", но вы используете {tool} для другого пути. Вернитесь к текущему шагу немедленно.]',
+    "exec.stuck": "Нет прогресса на шаге {stepId} ({description}) — {iterations} итераций.",
+    "exec.stuck_recovery": 'Шаг {stepId} — "{description}" — без прогресса уже {iterations} итераций. Попробуйте другой подход: проверьте что нужно для этого шага, установлены ли зависимости, или создайте файлы напрямую через write_file вместо команд терминала. После завершения шага вызовите plan update step={stepId} status=done.',
+    "exec.tool_errors": "Инструмент {tool} упал {count} раз. Попробуйте другой инструмент.",
+    "exec.tool_errors_recovery": "Инструмент {tool} упал {count} раз подряд. Попробуйте альтернативу: создайте файлы напрямую через write_file, используйте другую команду, или пропустите этот шаг через plan update step=N status=skipped с пометкой почему.",
+    "exec.repetitive_tool": "Инструмент {tool} вызван {count} раз с одинаковыми аргументами и результатом. Попробуйте другой подход — создайте файлы напрямую, измените аргументы или проверьте статус процесса через process_log.",
+    "exec.consecutive_failures_recovery": "{count} инструментов подряд упали. Создавайте файлы напрямую через write_file вместо команд терминала. Проверьте что зависимости установлены (npm install). Не запускайте сборку/тесты пока не созданы все файлы.",
+    "exec.plan_warning": 'Текущий шаг плана {step} — "{description}", но вызывается {tool} для файлов вне этого шага. Завершите текущий шаг, вызовите plan update step={step} status=done, затем переходите к следующему.',
+    "exec.plan_blocked": "{max} вызовов подряд вне текущего шага. Завершите шаг {step} — остальные шаги ждут пока этот не будет выполнен.",
+    "exec.off_track": 'Шаг {stepId} — "{description}", но используется {tool} для другого пути. Вернитесь к текущему шагу.',
     "exec.step_gate_deps": '[⚠ Шаг {step} "{description}": зависимости не установлены. Сначала выполните команду установки (npm install, pip install и т.д.). Проверьте что lock-файл или директория зависимостей существует.]',
     "exec.step_gate_empty": "[⚠ Шаг {step}: файлы существуют, но выглядят пустыми: {files}. Добавьте реальный код в эти файлы перед тем как переходить к следующему шагу.]",
     "exec.step_gate_ok": '[✓] Шаг {step} завершён и проверен. ПЕРЕХОДИМ к шагу {nextStep}: "{nextDesc}". Работайте ТОЛЬКО над этим шагом.',
@@ -3064,6 +3082,14 @@ var init_ru = __esm(() => {
     "exec.audit_fail": "[✗] Задача не выполнена: {done}/{total} шагов, {files} файлов отсутствует",
     "exec.audit_fail_typecheck": "[✗] Задача не выполнена: {done}/{total} шагов, {missing} файлов отсутствует, ошибка typecheck: {typeError}",
     "exec.audit_incomplete": "[⚠ Финальная проверка не пройдена: {summary}. Задача НЕ завершена — продолжайте работу. Оставшиеся шаги: {steps}]",
+    "exec.mass_edit_warning": "⚠️ План затрагивает {count} файлов — проверьте полный список перед продолжением.",
+    "exec.escalation": `
+
+⚠️ Агент застрял на шаге {stepId} ({description}). Эскалация к пользователю — пожалуйста, подскажите как действовать.`,
+    "exec.hints": `
+[Подсказки]
+{hints}`,
+    "exec.file_rewrite_warning": "⚠️ Файл {file} был перезаписан {count} раз. Попробуйте другой подход — текущая стратегия исправлений не работает.",
     "hall.max_retries_exhausted": "Модель вернула пустой или недостаточный ответ после нескольких попыток",
     "hall.short_response": "Слишком короткий или пустой ответ",
     "hall.repetitive": "Слишком повторяющийся ответ ({pct}% совпадение)",
@@ -3141,7 +3167,12 @@ var init_ru = __esm(() => {
     "tool.recall.empty": 'Ничего не найдено по "{query}"',
     "tool.recall.no_memory": "Память пуста",
     "tool.recall.search_results": `Результаты {category}:
-{results}`
+{results}`,
+    "ctx.compactions": "сжатий: {count}",
+    "ctx.quality": "качество: {percent}%",
+    "ctx.delta_pos": "контекст +{tokens}",
+    "ctx.delta_neg": "контекст -{tokens} ↓",
+    "ctx.delta_zero": "контекст ±0"
   };
 });
 
@@ -4936,12 +4967,33 @@ function isPathInScope(baseDir, targetPath, scope, securityConfig) {
   const baseResolved = resolve(baseDir);
   const targetResolved = resolve(baseDir, normalize(targetPath));
   if (!targetResolved.startsWith(baseResolved)) {
-    return { allowed: false, reason: "Path is outside the base working directory" };
+    return {
+      allowed: false,
+      reason: "Path is outside the base working directory"
+    };
+  }
+  if (!securityConfig?.enabled) {
+    if (scope) {
+      const isReadScope = scope.read_only_files.some((f) => targetResolved.startsWith(resolve(baseDir, f)));
+      const isWriteScope = scope.allowed_files.some((f) => targetResolved.startsWith(resolve(baseDir, f)));
+      if (isWriteScope)
+        return { allowed: true };
+      if (isReadScope)
+        return { allowed: true, reason: "Read-only file" };
+      return {
+        allowed: false,
+        reason: "Path is not within the allowed scope for this sub-agent"
+      };
+    }
+    return { allowed: true };
   }
   if (securityConfig?.denied?.length) {
     for (const pattern of securityConfig.denied) {
       if (matchesGlobPattern(targetResolved, baseDir, pattern)) {
-        return { allowed: false, reason: `Path matches denied pattern: ${pattern}` };
+        return {
+          allowed: false,
+          reason: `Path matches denied pattern: ${pattern}`
+        };
       }
     }
   }
@@ -4954,7 +5006,10 @@ function isPathInScope(baseDir, targetPath, scope, securityConfig) {
       }
     }
     if (!isAllowed) {
-      return { allowed: false, reason: "Path does not match any allowed pattern" };
+      return {
+        allowed: false,
+        reason: "Path does not match any allowed pattern"
+      };
     }
   }
   if (!scope) {
@@ -4975,12 +5030,30 @@ function isPathWritable(baseDir, targetPath, scope, securityConfig) {
   const baseResolved = resolve(baseDir);
   const targetResolved = resolve(baseDir, normalize(targetPath));
   if (!targetResolved.startsWith(baseResolved)) {
-    return { allowed: false, reason: "Path is outside the base working directory" };
+    return {
+      allowed: false,
+      reason: "Path is outside the base working directory"
+    };
+  }
+  if (!securityConfig?.enabled) {
+    if (scope) {
+      const isWriteScope = scope.allowed_files.some((f) => targetResolved.startsWith(resolve(baseDir, f)));
+      if (isWriteScope)
+        return { allowed: true };
+      return {
+        allowed: false,
+        reason: "Path is not within the allowed scope for this sub-agent"
+      };
+    }
+    return { allowed: true };
   }
   if (securityConfig?.denied?.length) {
     for (const pattern of securityConfig.denied) {
       if (matchesGlobPattern(targetResolved, baseDir, pattern)) {
-        return { allowed: false, reason: `Path matches denied pattern: ${pattern}` };
+        return {
+          allowed: false,
+          reason: `Path matches denied pattern: ${pattern}`
+        };
       }
     }
   }
@@ -4993,7 +5066,10 @@ function isPathWritable(baseDir, targetPath, scope, securityConfig) {
       }
     }
     if (!isAllowed) {
-      return { allowed: false, reason: "Path does not match any allowed pattern" };
+      return {
+        allowed: false,
+        reason: "Path does not match any allowed pattern"
+      };
     }
   }
   if (!scope) {
@@ -6417,9 +6493,15 @@ function containsOperator(command, op) {
   return new RegExp(escaped).test(command);
 }
 function isCommandAllowed(command, securityConfig) {
-  let config = securityConfig || DEFAULT_BASH_CONFIG;
+  if (!securityConfig?.enabled) {
+    return { allowed: true, sanitizedCommand: command };
+  }
+  let config = securityConfig;
   if (!config.blacklist || !Array.isArray(config.blacklist)) {
-    config = FALLBACK_BASH_CONFIG;
+    config = {
+      ...FALLBACK_BASH_CONFIG,
+      enabled: config.enabled ?? FALLBACK_BASH_CONFIG.enabled
+    };
   }
   const trimmedCommand = command.trim();
   if (!trimmedCommand) {
@@ -6508,7 +6590,21 @@ var FALLBACK_BASH_CONFIG, DEFAULT_BASH_CONFIG;
 var init_command_validator = __esm(() => {
   init_security();
   FALLBACK_BASH_CONFIG = {
-    blacklist: ["rm", "dd", "chmod", "wget", "curl", "scp", "ssh", "nc", "netcat", "powershell", "pwsh", "cmd"],
+    enabled: false,
+    blacklist: [
+      "rm",
+      "dd",
+      "chmod",
+      "wget",
+      "curl",
+      "scp",
+      "ssh",
+      "nc",
+      "netcat",
+      "powershell",
+      "pwsh",
+      "cmd"
+    ],
     whitelist: [],
     blockDangerousFlags: false,
     dangerousFlags: ["--force", "-rf", "--no-preserve-root"],
@@ -8729,7 +8825,133 @@ var init_agent_moe = __esm(() => {
   init_verifier();
 });
 
+// src/modules/memory/search.ts
+import { readFileSync as readFileSync9, existsSync as existsSync18 } from "fs";
+import { join as join8 } from "path";
+
+class MemorySearch {
+  memoryDir;
+  constructor(memoryDir) {
+    this.memoryDir = memoryDir;
+  }
+  query(query) {
+    const results = [];
+    const lowerQuery = query.toLowerCase();
+    for (const name of MEMORY_FILES) {
+      const path = join8(this.memoryDir, `${name}.md`);
+      if (!existsSync18(path))
+        continue;
+      const content = readFileSync9(path, "utf-8");
+      const lines = content.split(`
+`);
+      for (const line of lines) {
+        if (line.toLowerCase().includes(lowerQuery)) {
+          results.push({ file: name, match: line.trim() });
+        }
+      }
+    }
+    const prefsPath = join8(this.memoryDir, "preferences.json");
+    if (existsSync18(prefsPath)) {
+      try {
+        const prefs = JSON.parse(readFileSync9(prefsPath, "utf-8"));
+        for (const [key, value] of Object.entries(prefs)) {
+          const searchStr = `${key}=${value}`;
+          if (searchStr.toLowerCase().includes(lowerQuery)) {
+            results.push({ file: "preferences", match: `${key} = ${value}` });
+          }
+        }
+      } catch {}
+    }
+    return results;
+  }
+}
+var MEMORY_FILES;
+var init_search = __esm(() => {
+  MEMORY_FILES = ["conventions", "decisions", "errors", "facts"];
+});
+
+// src/modules/memory/store.ts
+import { readFileSync as readFileSync10, writeFileSync as writeFileSync8, appendFileSync as appendFileSync4, existsSync as existsSync19, mkdirSync as mkdirSync10 } from "fs";
+import { join as join9 } from "path";
+
+class MemoryStore {
+  memoryDir;
+  constructor(memoryDir) {
+    this.memoryDir = memoryDir;
+    this.ensureDir();
+    for (const name of MEMORY_FILES2) {
+      const path = join9(this.memoryDir, `${name}.md`);
+      if (!existsSync19(path)) {
+        writeFileSync8(path, `# ${name.charAt(0).toUpperCase() + name.slice(1)}
+
+`, "utf-8");
+      }
+    }
+  }
+  ensureDir() {
+    if (!existsSync19(this.memoryDir)) {
+      mkdirSync10(this.memoryDir, { recursive: true });
+    }
+  }
+  read(name) {
+    const path = join9(this.memoryDir, `${name}.md`);
+    if (!existsSync19(path))
+      return "";
+    return readFileSync10(path, "utf-8");
+  }
+  append(name, entry) {
+    const path = join9(this.memoryDir, `${name}.md`);
+    const timestamp = new Date().toISOString().replace("T", " ").slice(0, 19);
+    const formatted = `- **${timestamp}** — ${entry}
+`;
+    appendFileSync4(path, formatted, "utf-8");
+  }
+  search(query) {
+    const searchModule = new MemorySearch(this.memoryDir);
+    return searchModule.query(query);
+  }
+  prefsPath() {
+    return join9(this.memoryDir, "preferences.json");
+  }
+  getPreferences() {
+    const path = this.prefsPath();
+    if (!existsSync19(path))
+      return {};
+    try {
+      return JSON.parse(readFileSync10(path, "utf-8"));
+    } catch {
+      return {};
+    }
+  }
+  setPreference(key, value) {
+    const prefs = this.getPreferences();
+    prefs[key] = value;
+    writeFileSync8(this.prefsPath(), JSON.stringify(prefs, null, 2), "utf-8");
+  }
+  deletePreference(key) {
+    const prefs = this.getPreferences();
+    if (!(key in prefs))
+      return false;
+    delete prefs[key];
+    writeFileSync8(this.prefsPath(), JSON.stringify(prefs, null, 2), "utf-8");
+    return true;
+  }
+  appendRule(category, pattern, cause, solution) {
+    const entry = `**pattern:** ${pattern}
+  **cause:** ${cause}
+  **solution:** ${solution}`;
+    this.append(category, entry);
+  }
+}
+var MEMORY_FILES2;
+var init_store = __esm(() => {
+  init_search();
+  MEMORY_FILES2 = ["conventions", "decisions", "errors", "facts"];
+});
+
 // src/core/agent.ts
+import { join as join10 } from "path";
+
 class Agent {
   deps;
   systemPromptAdded = false;
@@ -8797,7 +9019,8 @@ ${t("tool.truncated", { tokens: Math.ceil(removedChars / 2) })}`;
       pluginManager,
       contextManager,
       logger,
-      sessionManager
+      sessionManager,
+      baseDir
     } = this.deps;
     const slog = new SessionLogger(sessionManager);
     if (sessionManager && !sessionManager.getActive()) {
@@ -8839,7 +9062,8 @@ ${t("tool.truncated", { tokens: Math.ceil(removedChars / 2) })}`;
       contextManager,
       hallucinationDetector,
       logger,
-      sessionManager
+      sessionManager,
+      baseDir
     } = this.deps;
     const slog = new SessionLogger(sessionManager);
     let iteration = 0;
@@ -8851,6 +9075,8 @@ ${t("tool.truncated", { tokens: Math.ceil(removedChars / 2) })}`;
     const MAX_HALLUCINATION_RETRIES = 3;
     let consecutiveToolFailures = 0;
     const MAX_CONSECUTIVE_TOOL_FAILURES = 5;
+    let auditRetries = 0;
+    const MAX_AUDIT_RETRIES = 3;
     while (iteration < config.maxToolIterations && !this.shutdownRequested) {
       iteration++;
       pluginManager.runOnBeforeThink({
@@ -8987,6 +9213,7 @@ ${t("tool.truncated", { tokens: Math.ceil(removedChars / 2) })}`;
           pluginManager.runOnToolStart({ iteration, logger }, { id: call.id, name: call.name, arguments: call.arguments });
           onTool?.({ type: "start", tool: call.name, args: call.arguments });
           slog.logToolCall(call, iteration);
+          const tokensBeforeTool = contextManager.getEstimatedTokens();
           const result = await toolExecutor.execute(call);
           const duration = Date.now() - startTime;
           if (!result.success)
@@ -9006,12 +9233,14 @@ ${t("tool.truncated", { tokens: Math.ceil(removedChars / 2) })}`;
 ` + result.diff + `
 `);
           }
+          const tokensAfterTool = contextManager.getEstimatedTokens();
           onTool?.({
             type: "end",
             tool: call.name,
             args: call.arguments,
             duration,
-            error: !result.success
+            error: !result.success,
+            ctxDelta: tokensAfterTool - tokensBeforeTool
           });
           const currentTokens2 = contextManager.getEstimatedTokens();
           const budget3 = contextManager.getBudget();
@@ -9020,7 +9249,9 @@ ${t("tool.truncated", { tokens: Math.ceil(removedChars / 2) })}`;
             role: "tool",
             content: truncatedOutput,
             name: call.name,
-            tool_call_id: call.id
+            tool_call_id: call.id,
+            success: result.success,
+            arguments: call.arguments
           });
           summaries.push(`[Tool: ${call.name} (${JSON.stringify(call.arguments)}) → ${truncatedOutput.slice(0, 200)}]`);
           if (config.session.autoSave) {
@@ -9048,6 +9279,14 @@ ${t("tool.truncated", { tokens: Math.ceil(removedChars / 2) })}`;
             content: `<system-summary>${recoveryMsg}
 ${taskReminder}</system-summary>`
           });
+          if (sessionManager) {
+            const activeSession = sessionManager.getActiveMeta();
+            if (activeSession) {
+              const memDir = join10(baseDir, ".mma", "memory");
+              const memStore = new MemoryStore(memDir);
+              memStore.appendRule("errors", `${consecutiveToolFailures} consecutive tool failures`, "Multiple tools failing suggests environment or configuration issue", "Check dependencies, verify file paths, try write_file directly instead of shell commands");
+            }
+          }
         }
         contextManager.addMessage({
           role: "user",
@@ -9061,8 +9300,11 @@ ${taskReminder}</system-summary>`
         const filled = Math.round(ctxPct / 100 * barLen);
         const ctxBar = pc.green("█".repeat(filled)) + pc.dim("░".repeat(barLen - filled));
         const pctColor = ctxPct >= 75 ? pc.yellow : pc.dim;
+        const compCount = contextManager.getCompactionCount();
+        const quality = contextManager.getQuality();
+        const qualityColor = quality >= 70 ? pc.green : quality >= 40 ? pc.yellow : pc.red;
         onMeta?.(`
-  ${ctxBar}  ${pctColor(`${ctxPct}%`)}  ${pc.dim(`ctx: ${ctxTokens}/${ctxBudget.history}`)}
+  ${ctxBar}  ${pctColor(`${ctxPct}%`)}  ${pc.dim(`ctx: ${ctxTokens}/${ctxBudget.history}`)}  ${pc.dim(`compactions: ${compCount}`)}  ${qualityColor(`quality: ${quality}%`)}
 `);
         continue;
       }
@@ -9136,7 +9378,9 @@ ${taskReminder}</system-summary>`
               })}</system-summary>`
             });
             slog.logAudit(audit.summary, iteration);
-            if (iteration >= config.maxToolIterations - 1) {
+            auditRetries++;
+            if (auditRetries >= MAX_AUDIT_RETRIES || iteration >= config.maxToolIterations - 1) {
+              logger.warn(`Final audit still incomplete after ${auditRetries} retries — finishing anyway`);
               break;
             }
             continue;
@@ -9157,7 +9401,9 @@ ${taskReminder}</system-summary>`
         contextLimit: budget.history,
         promptTokens: apiPromptTokens,
         completionTokens: apiCompletionTokens,
-        totalTokens: apiPromptTokens + apiCompletionTokens
+        totalTokens: apiPromptTokens + apiCompletionTokens,
+        compactionCount: contextManager.getCompactionCount(),
+        contextQuality: contextManager.getQuality()
       };
     }
     return {
@@ -9168,7 +9414,9 @@ ${taskReminder}</system-summary>`
       contextLimit: budget.history,
       promptTokens: apiPromptTokens,
       completionTokens: apiCompletionTokens,
-      totalTokens: apiPromptTokens + apiCompletionTokens
+      totalTokens: apiPromptTokens + apiCompletionTokens,
+      compactionCount: contextManager.getCompactionCount(),
+      contextQuality: contextManager.getQuality()
     };
   }
   clearContext() {
@@ -9212,14 +9460,56 @@ var init_agent = __esm(() => {
   init_prompt_builder();
   init_processes();
   init_agent_moe();
+  init_store();
 });
 
 // src/modules/context/manager.ts
+function summarizeArgs(args) {
+  if (!args)
+    return "";
+  if (typeof args === "string")
+    return args.slice(0, 80);
+  try {
+    const keys = Object.keys(args);
+    return keys.slice(0, 3).join(", ");
+  } catch {
+    return String(args).slice(0, 80);
+  }
+}
+function truncate(s, max) {
+  if (s.length <= max)
+    return s;
+  return s.slice(0, max - 3) + "...";
+}
+function extractTriedAndFailed(messages) {
+  const failures = new Map;
+  for (const msg of messages) {
+    if (msg.role === "tool" && msg.name && msg.success === false) {
+      const key = `${msg.name}:${summarizeArgs(msg.arguments)}`;
+      const existing = failures.get(key);
+      const errorText = truncate(typeof msg.content === "string" ? msg.content : getMessageText(msg.content), 100);
+      if (existing) {
+        existing.count++;
+      } else {
+        failures.set(key, {
+          tool: msg.name,
+          args: summarizeArgs(msg.arguments),
+          error: errorText,
+          count: 1
+        });
+      }
+    }
+  }
+  return Array.from(failures.values()).filter((f) => f.count >= 2);
+}
+
 class ContextManager {
   contextWindow;
   messages = [];
   compactedBlock = null;
   iterationsSinceCompaction = 0;
+  compactionCount = 0;
+  peakTokens = 0;
   budget;
   compactionThreshold;
   fileFacts = [];
@@ -9250,6 +9540,17 @@ class ContextManager {
   getBudget() {
     return { ...this.budget };
   }
+  getCompactionCount() {
+    return this.compactionCount;
+  }
+  getIterationsSinceCompaction() {
+    return this.iterationsSinceCompaction;
+  }
+  getQuality() {
+    const freshness = 1 - this.iterationsSinceCompaction / COMPACTION_INTERVAL;
+    const depth = 1 / (1 + this.compactionCount);
+    return Math.round(freshness * depth * 100);
+  }
   addMessage(msg) {
     if (msg.role === "user" && this.pendingImageParts.length > 0) {
       const textPart = {
@@ -9264,6 +9565,9 @@ class ContextManager {
     }
     this.messages.push(msg);
     this.iterationsSinceCompaction++;
+    const tokens = this.getEstimatedTokens();
+    if (tokens > this.peakTokens)
+      this.peakTokens = tokens;
   }
   addPendingImage(part) {
     this.pendingImageParts.push(part);
@@ -9330,6 +9634,7 @@ class ContextManager {
   compact() {
     if (this.messages.length <= KEEP_LAST_N * 2)
       return;
+    this.compactionCount++;
     const cutoff = this.messages.length - KEEP_LAST_N * 2;
     const oldTurns = this.messages.slice(0, cutoff);
     const recentTurns = this.messages.slice(cutoff);
@@ -9345,6 +9650,13 @@ class ContextManager {
     if (this.errorFacts.length > 0) {
       parts.push(`[Errors: ${this.errorFacts.slice(-3).join("; ")}]`);
     }
+    const triedAndFailed = extractTriedAndFailed(this.messages);
+    if (triedAndFailed.length > 0) {
+      const lines = triedAndFailed.map((t2) => `- ${t2.tool}(${t2.args}): ${t2.error} (failed ${t2.count}x)`);
+      parts.push(`[Already tried & failed — do NOT repeat:]
+${lines.join(`
+`)}`);
+    }
     this.compactedBlock = parts.join(" ");
     const summary = {
       role: "user",
@@ -9413,6 +9725,8 @@ class ContextManager {
     this.messages = [];
     this.compactedBlock = null;
     this.iterationsSinceCompaction = 0;
+    this.compactionCount = 0;
+    this.peakTokens = 0;
   }
   getEstimatedTokens() {
     return this.messages.reduce((sum, m) => sum + this.estimateMessageTokens(m), 0);
@@ -9868,7 +10182,7 @@ Partial output: ${result.text}`
 
 // src/modules/security/network-validator.ts
 function isUrlAllowed(url, securityConfig) {
-  if (!securityConfig) {
+  if (!securityConfig?.enabled) {
     return { allowed: true };
   }
   try {
@@ -10931,7 +11245,7 @@ ${JSON.stringify(result, null, 2)}`
 
 // src/tools/search-history.ts
 import * as fs from "fs";
-import { join as join8 } from "path";
+import { join as join11 } from "path";
 import { homedir as homedir5 } from "os";
 function searchFile(filePath, query, maxResults, results) {
   if (!fs.existsSync(filePath))
@@ -10969,7 +11283,7 @@ var init_search_history = __esm(() => {
       const query = String(args.query || "").toLowerCase();
       const maxResults = Number(args.maxResults) || 5;
       const sessionId = args.sessionId ? String(args.sessionId) : null;
-      const sessionDir = join8(homedir5(), ".mma", "sessions");
+      const sessionDir = join11(homedir5(), ".mma", "sessions");
       const results = [];
       try {
         if (!fs.existsSync(sessionDir)) {
@@ -10981,7 +11295,7 @@ var init_search_history = __esm(() => {
             continue;
           if (sessionId && entry.name !== sessionId)
             continue;
-          const historyFile = join8(sessionDir, entry.name, "history.jsonl");
+          const historyFile = join11(sessionDir, entry.name, "history.jsonl");
           searchFile(historyFile, query, maxResults, results);
           if (results.length >= maxResults)
             break;
@@ -10998,127 +11312,9 @@ var init_search_history = __esm(() => {
   };
 });
 
-// src/modules/memory/search.ts
-import { readFileSync as readFileSync10, existsSync as existsSync19 } from "fs";
-import { join as join9 } from "path";
-
-class MemorySearch {
-  memoryDir;
-  constructor(memoryDir) {
-    this.memoryDir = memoryDir;
-  }
-  query(query) {
-    const results = [];
-    const lowerQuery = query.toLowerCase();
-    for (const name of MEMORY_FILES) {
-      const path = join9(this.memoryDir, `${name}.md`);
-      if (!existsSync19(path))
-        continue;
-      const content = readFileSync10(path, "utf-8");
-      const lines = content.split(`
-`);
-      for (const line of lines) {
-        if (line.toLowerCase().includes(lowerQuery)) {
-          results.push({ file: name, match: line.trim() });
-        }
-      }
-    }
-    const prefsPath = join9(this.memoryDir, "preferences.json");
-    if (existsSync19(prefsPath)) {
-      try {
-        const prefs = JSON.parse(readFileSync10(prefsPath, "utf-8"));
-        for (const [key, value] of Object.entries(prefs)) {
-          const searchStr = `${key}=${value}`;
-          if (searchStr.toLowerCase().includes(lowerQuery)) {
-            results.push({ file: "preferences", match: `${key} = ${value}` });
-          }
-        }
-      } catch {}
-    }
-    return results;
-  }
-}
-var MEMORY_FILES;
-var init_search = __esm(() => {
-  MEMORY_FILES = ["conventions", "decisions", "errors", "facts"];
-});
-
-// src/modules/memory/store.ts
-import { readFileSync as readFileSync11, writeFileSync as writeFileSync8, appendFileSync as appendFileSync4, existsSync as existsSync20, mkdirSync as mkdirSync10 } from "fs";
-import { join as join10 } from "path";
-
-class MemoryStore {
-  memoryDir;
-  constructor(memoryDir) {
-    this.memoryDir = memoryDir;
-    this.ensureDir();
-    for (const name of MEMORY_FILES2) {
-      const path = join10(this.memoryDir, `${name}.md`);
-      if (!existsSync20(path)) {
-        writeFileSync8(path, `# ${name.charAt(0).toUpperCase() + name.slice(1)}
-
-`, "utf-8");
-      }
-    }
-  }
-  ensureDir() {
-    if (!existsSync20(this.memoryDir)) {
-      mkdirSync10(this.memoryDir, { recursive: true });
-    }
-  }
-  read(name) {
-    const path = join10(this.memoryDir, `${name}.md`);
-    if (!existsSync20(path))
-      return "";
-    return readFileSync11(path, "utf-8");
-  }
-  append(name, entry) {
-    const path = join10(this.memoryDir, `${name}.md`);
-    const timestamp = new Date().toISOString().replace("T", " ").slice(0, 19);
-    const formatted = `- **${timestamp}** — ${entry}
-`;
-    appendFileSync4(path, formatted, "utf-8");
-  }
-  search(query) {
-    const searchModule = new MemorySearch(this.memoryDir);
-    return searchModule.query(query);
-  }
-  prefsPath() {
-    return join10(this.memoryDir, "preferences.json");
-  }
-  getPreferences() {
-    const path = this.prefsPath();
-    if (!existsSync20(path))
-      return {};
-    try {
-      return JSON.parse(readFileSync11(path, "utf-8"));
-    } catch {
-      return {};
-    }
-  }
-  setPreference(key, value) {
-    const prefs = this.getPreferences();
-    prefs[key] = value;
-    writeFileSync8(this.prefsPath(), JSON.stringify(prefs, null, 2), "utf-8");
-  }
-  deletePreference(key) {
-    const prefs = this.getPreferences();
-    if (!(key in prefs))
-      return false;
-    delete prefs[key];
-    writeFileSync8(this.prefsPath(), JSON.stringify(prefs, null, 2), "utf-8");
-    return true;
-  }
-}
-var MEMORY_FILES2;
-var init_store = __esm(() => {
-  init_search();
-  MEMORY_FILES2 = ["conventions", "decisions", "errors", "facts"];
-});
-
 // src/tools/remember.ts
 import { homedir as homedir6 } from "os";
-import { join as join11 } from "path";
+import { join as join12 } from "path";
 var CATEGORIES, rememberTool;
 var init_remember = __esm(() => {
   init_i18n();
@@ -11156,7 +11352,7 @@ var init_remember = __esm(() => {
       if (!CATEGORIES.includes(category)) {
         return { success: false, output: t("tool.invalid_params") };
       }
-      const memoryDir = join11(homedir6(), ".mma", "memory");
+      const memoryDir = join12(homedir6(), ".mma", "memory");
       const store = new MemoryStore(memoryDir);
       try {
         if (category === "preferences") {
@@ -11189,7 +11385,7 @@ var init_remember = __esm(() => {
 
 // src/tools/recall.ts
 import { homedir as homedir7 } from "os";
-import { join as join12 } from "path";
+import { join as join13 } from "path";
 function formatAll(store) {
   const parts = [];
   const prefs = store.getPreferences();
@@ -11272,7 +11468,7 @@ var init_recall = __esm(() => {
     handler: async (_ctx, args) => {
       const query = args.query ? String(args.query) : "";
       const category = args.category ? String(args.category) : "";
-      const memoryDir = join12(homedir7(), ".mma", "memory");
+      const memoryDir = join13(homedir7(), ".mma", "memory");
       const store = new MemoryStore(memoryDir);
       try {
         if (!query && !category) {
@@ -11468,15 +11664,15 @@ function buildIndexInjectionScript() {
 
 // src/modules/browser/cookie-store.ts
 import { readFile, writeFile, mkdir } from "fs/promises";
-import { join as join13 } from "path";
+import { join as join14 } from "path";
 
 class CookieStore {
   filePath;
   constructor(cookieDir) {
-    this.filePath = join13(cookieDir, "cookies.json");
+    this.filePath = join14(cookieDir, "cookies.json");
   }
   async save(cookies) {
-    await mkdir(join13(this.filePath, ".."), { recursive: true });
+    await mkdir(join14(this.filePath, ".."), { recursive: true });
     await writeFile(this.filePath, JSON.stringify(cookies, null, 2), "utf-8");
   }
   async load() {
@@ -11796,10 +11992,10 @@ var init_types = __esm(() => {
 });
 
 // src/tools/browser.ts
-import { join as join14 } from "path";
+import { join as join15 } from "path";
 function getSession(ctx) {
   if (!session) {
-    const cookieDir = join14(ctx.baseDir, ".mma", "browser");
+    const cookieDir = join15(ctx.baseDir, ".mma", "browser");
     session = new BrowserSession({
       ...DEFAULT_BROWSER_CONFIG,
       headless: ctx.config.browser?.headless ?? true,
@@ -11929,8 +12125,8 @@ async function readClipboardFallback() {
   const { platform: platform4 } = await import("os");
   const { execSync: execSync3 } = await import("child_process");
   const { readFileSync: readFileSync13, unlinkSync: unlinkSync3 } = await import("fs");
-  const { join: join15 } = await import("path");
-  const tmpPath = join15(process.env.TEMP || process.env.TMP || "/tmp", `mma-clip-${Date.now()}.png`);
+  const { join: join16 } = await import("path");
+  const tmpPath = join16(process.env.TEMP || process.env.TMP || "/tmp", `mma-clip-${Date.now()}.png`);
   try {
     if (platform4() === "linux") {
       execSync3(`xclip -selection clipboard -t image/png -o > "${tmpPath}" 2>/dev/null`, { timeout: 5000 });
@@ -12208,7 +12404,7 @@ class ModuleRegistry {
 
 // src/modules/plugins/loader.ts
 import { readdirSync as readdirSync5, existsSync as existsSync22, statSync as statSync4 } from "fs";
-import { join as join15 } from "path";
+import { join as join16 } from "path";
 
 class PluginLoader {
   loadFromDir(dirPath, pluginManager, logger) {
@@ -12216,7 +12412,7 @@ class PluginLoader {
       return;
     const entries = readdirSync5(dirPath);
     for (const entry of entries) {
-      const fullPath = join15(dirPath, entry);
+      const fullPath = join16(dirPath, entry);
       if (!statSync4(fullPath).isFile())
         continue;
       if (!entry.endsWith(".ts") && !entry.endsWith(".js"))
@@ -12241,7 +12437,7 @@ var init_loader = __esm(() => {
 // src/modules/plugins/builtin/lint-on-write.ts
 import { execSync as execSync3 } from "child_process";
 import { existsSync as existsSync23, readFileSync as readFileSync13 } from "fs";
-import { resolve as resolve12, extname as extname4, join as join16 } from "path";
+import { resolve as resolve12, extname as extname4, join as join17 } from "path";
 
 class LintOnWritePlugin {
   name = "lint-on-write";
@@ -12303,7 +12499,7 @@ class LintOnWritePlugin {
   }
   async runProjectLint(ctx, result) {
     try {
-      const packageJsonPath = join16(ctx.baseDir, "package.json");
+      const packageJsonPath = join17(ctx.baseDir, "package.json");
       if (!existsSync23(packageJsonPath)) {
         return;
       }
@@ -12323,7 +12519,7 @@ class LintOnWritePlugin {
     }
   }
   async runProjectTypeCheck(ctx, result) {
-    const tsconfigPath = join16(ctx.baseDir, "tsconfig.json");
+    const tsconfigPath = join17(ctx.baseDir, "tsconfig.json");
     if (!existsSync23(tsconfigPath)) {
       return;
     }
@@ -12512,6 +12708,11 @@ class StuckDetector {
   repetitionThreshold = 3;
   consecutiveFailures = 0;
   lastFailedTool = "";
+  lastErrorOutput = "";
+  escalationCount = 0;
+  escalationThreshold = 3;
+  fileRewriteCount = new Map;
+  fileRewriteThreshold = 3;
   constructor(threshold = 8, errorThreshold = 3) {
     this.threshold = threshold;
     this.errorThreshold = errorThreshold;
@@ -12531,14 +12732,26 @@ class StuckDetector {
       this.recentToolCalls.shift();
     }
   }
-  recordToolError(toolName) {
+  recordToolError(toolName, output) {
     this.toolErrors.set(toolName, (this.toolErrors.get(toolName) || 0) + 1);
     this.consecutiveFailures++;
     this.lastFailedTool = toolName;
+    if (output)
+      this.lastErrorOutput = output;
+  }
+  getLastErrorOutput() {
+    return this.lastErrorOutput;
+  }
+  getLastFailedTool() {
+    return this.lastFailedTool;
+  }
+  getIterationsOnCurrentStep() {
+    return this.iterationsOnCurrentStep;
   }
   recordToolSuccess() {
     this.consecutiveFailures = 0;
     this.lastFailedTool = "";
+    this.escalationCount = 0;
   }
   setCurrentStep(stepId, description) {
     if (stepId !== this.currentStepId) {
@@ -12576,6 +12789,117 @@ class StuckDetector {
   getConsecutiveFailuresCount() {
     return this.consecutiveFailures;
   }
+  recordEscalation() {
+    this.escalationCount++;
+  }
+  shouldEscalate() {
+    return this.escalationCount >= this.escalationThreshold;
+  }
+  resetEscalation() {
+    this.escalationCount = 0;
+  }
+  getEscalationCount() {
+    return this.escalationCount;
+  }
+  getHints() {
+    const hints = [];
+    const desc = this.currentStepDescription.toLowerCase();
+    if (desc.includes("install") || desc.includes("npm") || desc.includes("pip")) {
+      hints.push("Check if a lock file exists (package-lock.json, poetry.lock). If missing, run the install command first.");
+    }
+    if (desc.includes("test") || desc.includes("spec")) {
+      hints.push("Make sure the source files exist and have real code before running tests.");
+    }
+    if (desc.includes("build") || desc.includes("compile")) {
+      hints.push("Check that all dependencies are installed and source files are not empty.");
+    }
+    if (desc.includes("deploy") || desc.includes("publish")) {
+      hints.push("Verify credentials and network access before deploying.");
+    }
+    if (this.hasRepetitiveToolCalls()) {
+      hints.push("You are calling the same tool repeatedly with the same arguments. Try a different approach.");
+    }
+    if (this.hasConsecutiveFailures()) {
+      hints.push("Multiple different tools are failing. Check if the environment is set up correctly.");
+    }
+    return hints;
+  }
+  getActionableHints() {
+    const hints = [];
+    const error = this.lastErrorOutput;
+    if (!error)
+      return hints;
+    if (/Cannot read properties of undefined|is not a function|is not a constructor/i.test(error)) {
+      if (/node_modules/.test(error)) {
+        hints.push("A dependency is incompatible with your Node.js version. Check if there is an alternative package or use a different runtime.");
+      }
+    }
+    if (/TS1005|TS1003|TS1109|TS1128|TS1434/i.test(error)) {
+      hints.push("TypeScript syntax error. Read the error message carefully — it tells you the exact line and column. Fix the syntax before retrying.");
+    }
+    if (/TS2322|TS2345|TS2769|TS7006|TS7016/i.test(error)) {
+      hints.push("TypeScript type mismatch. Check the type signature of the function/API you are using. If a package lacks type declarations, install @types/<package> or use skipLibCheck.");
+    }
+    if (/Cannot find module|Module not found|ERR_MODULE_NOT_FOUND/i.test(error)) {
+      hints.push("Module not found. Run npm install or check if the import path is correct.");
+    }
+    if (/EACCES|EPERM|permission denied/i.test(error)) {
+      hints.push("Permission denied. Check file permissions or run with appropriate privileges.");
+    }
+    if (/ECONNREFUSED|ETIMEDOUT|ENOTFOUND|fetch failed/i.test(error)) {
+      hints.push("Network error. Check if the server is running and accessible.");
+    }
+    if (/is not recognized|command not found|not found in path/i.test(error)) {
+      hints.push("Command not found. Check if the tool is installed and in PATH.");
+    }
+    if (this.hasExcessiveRewrites()) {
+      const file = this.getExcessiveRewriteFile();
+      hints.push(`File ${file} has been rewritten ${this.getFileRewriteCount(file)} times without success. Stop rewriting and try a fundamentally different approach.`);
+    }
+    return hints;
+  }
+  getToolAlternative() {
+    const tool = this.lastFailedTool;
+    const error = this.lastErrorOutput;
+    if (!tool)
+      return null;
+    if (/Cannot read properties of undefined|is not a function|TypeError|ReferenceError/i.test(error)) {
+      const alternatives = {
+        "ts-node": "tsx",
+        jest: "vitest",
+        mocha: "vitest",
+        webpack: "vite",
+        rollup: "vite",
+        parcel: "vite",
+        babel: "tsc",
+        eslint: "biome",
+        prettier: "biome"
+      };
+      for (const [failed, alt] of Object.entries(alternatives)) {
+        if (tool.includes(failed) || error.includes(failed)) {
+          return alt;
+        }
+      }
+    }
+    return null;
+  }
+  recordFileRewrite(filePath) {
+    const count = (this.fileRewriteCount.get(filePath) || 0) + 1;
+    this.fileRewriteCount.set(filePath, count);
+  }
+  getFileRewriteCount(filePath) {
+    return this.fileRewriteCount.get(filePath) || 0;
+  }
+  hasExcessiveRewrites() {
+    return Array.from(this.fileRewriteCount.values()).some((c) => c >= this.fileRewriteThreshold);
+  }
+  getExcessiveRewriteFile() {
+    for (const [file, count] of this.fileRewriteCount) {
+      if (count >= this.fileRewriteThreshold)
+        return file;
+    }
+    return null;
+  }
   getRepetitiveToolMessage() {
     if (!this.hasRepetitiveToolCalls())
       return "";
@@ -12654,7 +12978,7 @@ var init_stuck_detector = __esm(() => {
 // src/modules/execution/auditor.ts
 import { execSync as execSync4 } from "child_process";
 import { existsSync as existsSync24 } from "fs";
-import { resolve as resolve13, join as join17 } from "path";
+import { resolve as resolve13, join as join18 } from "path";
 
 class Auditor {
   baseDir;
@@ -12662,7 +12986,7 @@ class Auditor {
     this.baseDir = baseDir;
   }
   async audit(plan) {
-    const allStepText = plan.steps.map((s) => s.description).join(" ");
+    const allStepText = plan.steps.map((s) => s.description.replace(/\([^)]*\)/g, " ")).join(" ");
     const fileMatches = allStepText.match(/\b[\w./-]+\.[a-z]+/gi) || [];
     const uniqueFiles = [...new Set(fileMatches)];
     const missingFiles = [];
@@ -12678,6 +13002,10 @@ class Auditor {
     const doneSteps = plan.steps.filter((s) => s.status === "done").length;
     const totalSteps = plan.steps.length;
     const typeCheckError = await this.runProjectTypeCheck();
+    let massEditWarning = null;
+    if (uniqueFiles.length > MASS_EDIT_THRESHOLD) {
+      massEditWarning = t("exec.mass_edit_warning", { count: String(uniqueFiles.length) });
+    }
     const passed = missingFiles.length === 0 && !typeCheckError;
     let summary;
     if (passed) {
@@ -12696,11 +13024,12 @@ class Auditor {
       createdFiles: existingFiles,
       modifiedFiles: [],
       summary,
-      typeCheckError
+      typeCheckError,
+      massEditWarning
     };
   }
   async runProjectTypeCheck() {
-    const tsconfigPath = join17(this.baseDir, "tsconfig.json");
+    const tsconfigPath = join18(this.baseDir, "tsconfig.json");
     if (!existsSync24(tsconfigPath)) {
       return null;
     }
@@ -12721,22 +13050,23 @@ class Auditor {
     }
   }
 }
+var MASS_EDIT_THRESHOLD = 10;
 var init_auditor = __esm(() => {
   init_i18n();
 });
 
 // src/modules/execution/plan-persister.ts
 import { readFileSync as readFileSync14, writeFileSync as writeFileSync9, mkdirSync as mkdirSync11, existsSync as existsSync25 } from "fs";
-import { join as join18 } from "path";
+import { join as join19 } from "path";
 
 class PlanPersister {
   filePath;
   constructor(baseDir) {
-    const mmaDir = join18(baseDir, ".mma");
+    const mmaDir = join19(baseDir, ".mma");
     if (!existsSync25(mmaDir)) {
       mkdirSync11(mmaDir, { recursive: true });
     }
-    this.filePath = join18(mmaDir, "plan.json");
+    this.filePath = join19(mmaDir, "plan.json");
   }
   save(plan) {
     const file = {
@@ -12774,6 +13104,92 @@ class PlanPersister {
 }
 var init_plan_persister = () => {};
 
+// src/modules/execution/plan-coverage.ts
+function extractFilePaths(text) {
+  if (!text)
+    return [];
+  const seen = new Set;
+  const result = [];
+  for (const m of text.matchAll(FILE_PATH_RE)) {
+    let p = m[0];
+    p = p.replace(/[.,;:)\]>]+$/g, "");
+    const ext = p.split(".").pop()?.toLowerCase() ?? "";
+    if (!p || IGNORED_EXT.has(ext))
+      continue;
+    const key = p.toLowerCase();
+    if (seen.has(key))
+      continue;
+    seen.add(key);
+    result.push(p);
+  }
+  return result;
+}
+function basename2(p) {
+  const parts = p.split(/[/\\]/);
+  return parts[parts.length - 1] ?? p;
+}
+function checkPlanCoverage(taskText, stepDescriptions) {
+  const taskPaths = extractFilePaths(taskText);
+  if (taskPaths.length === 0)
+    return { missing: [] };
+  const stepText = stepDescriptions.map((s) => s.toLowerCase()).join(`
+`);
+  const missing = taskPaths.filter((p) => {
+    const lower = p.toLowerCase();
+    const base = basename2(lower);
+    return !stepText.includes(lower) && !stepText.includes(base);
+  });
+  return { missing };
+}
+var FILE_PATH_RE, IGNORED_EXT;
+var init_plan_coverage = __esm(() => {
+  FILE_PATH_RE = /\b[\w./\\-]+\.[a-z]+\b/gi;
+  IGNORED_EXT = new Set([
+    "tsx",
+    "jsx",
+    "json5",
+    "mdx",
+    "yml",
+    "yaml",
+    "toml",
+    "lock",
+    "svg",
+    "png",
+    "jpg",
+    "jpeg",
+    "gif",
+    "webp",
+    "ico",
+    "css",
+    "scss",
+    "less",
+    "html",
+    "jsx"
+  ]);
+});
+
+// src/modules/skills/error-skill-map.ts
+function suggestSkill(errorOutput) {
+  for (const { pattern, skill } of ERROR_SKILL_MAP) {
+    if (pattern.test(errorOutput))
+      return skill;
+  }
+  return null;
+}
+var ERROR_SKILL_MAP;
+var init_error_skill_map = __esm(() => {
+  ERROR_SKILL_MAP = [
+    { pattern: /TS\d{4}:/i, skill: "typescript-expert" },
+    { pattern: /Cannot find name|No overload matches/i, skill: "typescript-type-expert" },
+    { pattern: /ts-node|tsx.*error/i, skill: "typescript-expert" },
+    { pattern: /Module not found|Cannot resolve module/i, skill: "typescript-expert" },
+    { pattern: /ECONNREFUSED|ETIMEDOUT|fetch failed/i, skill: "devops-expert" },
+    { pattern: /permission denied|EACCES/i, skill: "linux-server-expert" },
+    { pattern: /docker|container/i, skill: "docker-expert" },
+    { pattern: /jest|vitest|test.*fail/i, skill: "vitest-testing-expert" }
+  ];
+});
+
 // src/modules/execution/module.ts
 import { existsSync as existsSync26, readFileSync as readFileSync15 } from "fs";
 import { resolve as resolve14 } from "path";
@@ -12850,13 +13266,13 @@ class ExecutionModule {
         name: "plan",
         description: `Create, update, show, or abort a multi-step plan. Use "create" at the start of complex tasks. Use "update" after completing each step to track progress. Use "show" to re-print the current plan checklist.
 
-IMPORTANT — each step MUST be detailed and concrete (≥50 chars):
+Write CONCRETE steps with exact file paths and commands:
 - Specify WHICH files to create with exact paths (e.g. "create src/components/Header.tsx with navigation and logo")
-- Specify WHICH packages to install with exact versions (e.g. "run npm install react@18.3 react-dom@18.3")
+- Specify WHICH packages to install (e.g. "run npm install react react-dom")
 - Specify WHICH CLI commands to run with exact arguments
-- Must contain at least one file extension (.ts, .tsx, .json, etc.) OR a command verb (install, create, build, run, add, init)
-- BAD: "Настройка проекта и установка зависимостей" (too vague, no files, no versions)
-- GOOD: "Создать package.json с зависимостями react@18.3 и vite@5.4, затем выполнить npm install в корне проекта"`,
+- Each step should include at least one file extension (.ts, .tsx, .json, etc.) or a command verb (install, create, build, run, add, init)
+- Good: "Создать src/components/Header.tsx с навигацией и логотипом"
+- Bad: "Настройка проекта" (too vague — what exactly needs to be configured?)`,
         parameters: {
           type: "object",
           properties: {
@@ -12883,10 +13299,25 @@ IMPORTANT — each step MUST be detailed and concrete (≥50 chars):
             const plan = PlanCreator.createPlan(title, steps, this.baseDir);
             this.setPlan(plan);
             const display = PlanCreator.toPromptBlock(plan, 0);
+            let output = t("plan.created", { title, steps: String(steps.length) });
+            let displayOut = display;
+            const taskText = this.getTaskText(_ctx);
+            if (taskText) {
+              const { missing } = checkPlanCoverage(taskText, steps);
+              if (missing.length > 0) {
+                const warn = t("plan.coverage_warning", {
+                  missing: missing.join(", ")
+                });
+                output += `
+⚠️ ${warn}`;
+                displayOut = `${display}
+⚠️ ${warn}`;
+              }
+            }
             return {
               success: true,
-              output: t("plan.created", { title, steps: String(steps.length) }),
-              display
+              output,
+              display: displayOut
             };
           }
           if (action === "show") {
@@ -13032,12 +13463,47 @@ Sub-tasks: ${note}`
           if (currentIter - this.lastRecoveryIteration >= STUCK_RECOVERY_COOLDOWN) {
             const recovery = this.stuckDetector.getRecoveryMessage();
             if (recovery && ctx.contextManager) {
+              const lastError = this.stuckDetector.getLastErrorOutput();
+              const suggestedSkill = suggestSkill(lastError);
+              const skillHint = suggestedSkill ? `
+Consider loading the "${suggestedSkill}" skill for expert guidance on this error.` : "";
+              const actionableHints = this.stuckDetector.getActionableHints();
+              const actionableHintStr = actionableHints.length > 0 ? `
+${t("exec.hints", { hints: actionableHints.map((h) => `- ${h}`).join(`
+`) })}` : "";
+              const alternative = this.stuckDetector.getToolAlternative();
+              const altHint = alternative ? `
+Tool "${this.stuckDetector.getLastFailedTool()}" is failing. Try "${alternative}" instead.` : "";
+              ctx.contextManager.addMessage({
+                role: "user",
+                content: `<system-summary>${recovery}${skillHint}${actionableHintStr}${altHint}</system-summary>`
+              });
+            }
+            const hints = this.stuckDetector.getHints();
+            if (hints.length > 0 && ctx.contextManager) {
+              const hintMsg = t("exec.hints", { hints: hints.map((h) => `- ${h}`).join(`
+`) });
               ctx.contextManager.addMessage({
                 role: "user",
-                content: `<system-summary>${recovery}</system-summary>`
+                content: `<system-summary>${hintMsg}</system-summary>`
               });
             }
+            this.stuckDetector.recordEscalation();
             this.lastRecoveryIteration = currentIter;
+            if (this.stuckDetector.shouldEscalate() && ctx.onMeta) {
+              const escalation = t("exec.escalation", {
+                stepId: String(this.tracker?.getCurrentStep()?.id ?? "?"),
+                description: this.tracker?.getCurrentStep()?.description ?? ""
+              });
+              ctx.onMeta(escalation);
+            }
+            if (this.stuckDetector.getIterationsOnCurrentStep() >= FORCE_SKIP_THRESHOLD && ctx.contextManager) {
+              const step2 = this.tracker?.getCurrentStep();
+              ctx.contextManager.addMessage({
+                role: "user",
+                content: `<system-summary>CRITICAL: You have been stuck on step ${step2?.id ?? "?"} ("${step2?.description ?? ""}") for ${this.stuckDetector.getIterationsOnCurrentStep()} iterations. You MUST stop trying the same approach. Options: 1) Skip this step via plan update step=${step2?.id ?? "?"} status=skipped with a note explaining why. 2) Mark the step as done if the code runs correctly, even if there are type errors. 3) Try a completely different approach. Do NOT continue with the current approach.</system-summary>`
+              });
+            }
           }
         }
       },
@@ -13070,11 +13536,44 @@ Sub-tasks: ${note}`
       },
       onAfterTool: (ctx, call, result) => {
         if (!result.success) {
-          this.stuckDetector.recordToolError(call.name);
+          this.stuckDetector.recordToolError(call.name, result.output);
+          const actionableHints = this.stuckDetector.getActionableHints();
+          const alternative = this.stuckDetector.getToolAlternative();
+          if ((actionableHints.length > 0 || alternative) && ctx.contextManager) {
+            const parts = [...actionableHints];
+            if (alternative) {
+              parts.push(`Tool "${call.name}" crashed. Try "${alternative}" instead.`);
+            }
+            ctx.contextManager.addMessage({
+              role: "user",
+              content: `<system-summary>${t("exec.hints", { hints: parts.map((h) => `- ${h}`).join(`
+`) })}</system-summary>`
+            });
+          }
         } else {
           this.stuckDetector.recordToolSuccess();
+          if (call.name === "bash" && result.success && ctx.contextManager) {
+            const cmd = String(call.arguments?.command ?? "");
+            if (/node|tsx|ts-node|python|npm\s+(start|test|run)/.test(cmd)) {
+              ctx.contextManager.addMessage({
+                role: "user",
+                content: `<system-summary>The command "${cmd}" completed successfully. If this was testing your code, mark the current step as done via plan update step=N status=done.</system-summary>`
+              });
+            }
+          }
         }
-        if (this.tracker && result.success && (call.name === "write_file" || call.name === "edit_file")) {
+        if (result.success && (call.name === "write_file" || call.name === "edit_file")) {
+          const filePath = call.arguments?.path;
+          if (filePath) {
+            this.stuckDetector.recordFileRewrite(filePath);
+            if (this.stuckDetector.hasExcessiveRewrites()) {
+              const file = this.stuckDetector.getExcessiveRewriteFile();
+              const count = this.stuckDetector.getFileRewriteCount(file);
+              if (ctx.onMeta) {
+                ctx.onMeta(t("exec.file_rewrite_warning", { file, count: String(count) }));
+              }
+            }
+          }
           this.advancePlanIfStepComplete(ctx.contextManager);
         }
       }
@@ -13185,8 +13684,18 @@ Sub-tasks: ${note}`
       });
     }
   }
+  getTaskText(ctx) {
+    const manager = ctx?.contextManager;
+    if (!manager)
+      return "";
+    const history = manager.getActiveHistory();
+    const firstUser = history.find((m) => m.role === "user");
+    if (!firstUser)
+      return "";
+    return getMessageText(firstUser.content).trim();
+  }
 }
-var STUCK_RECOVERY_COOLDOWN = 5, MAX_PLAN_WARNINGS_BEFORE_BLOCK = 3;
+var STUCK_RECOVERY_COOLDOWN = 5, MAX_PLAN_WARNINGS_BEFORE_BLOCK = 3, FORCE_SKIP_THRESHOLD = 15;
 var init_module = __esm(() => {
   init_i18n();
   init_tracker();
@@ -13194,11 +13703,13 @@ var init_module = __esm(() => {
   init_stuck_detector();
   init_auditor();
   init_plan_persister();
+  init_plan_coverage();
+  init_error_skill_map();
 });
 
 // src/modules/security/session-encryption.ts
 import { readFileSync as readFileSync16, writeFileSync as writeFileSync10, existsSync as existsSync27, readdirSync as readdirSync6, unlinkSync as unlinkSync3 } from "fs";
-import { join as join19 } from "path";
+import { join as join20 } from "path";
 import { homedir as homedir8 } from "os";
 
 class SessionFileEncryptor {
@@ -13207,7 +13718,7 @@ class SessionFileEncryptor {
   constructor(config) {
     this.config = { ...DEFAULT_SESSION_ENCRYPTION, ...config };
     this.encryptor = new ConfigEncryptor({
-      keyPath: config?.keyPath || join19(homedir8(), ".mma", ".session-encryption-key")
+      keyPath: config?.keyPath || join20(homedir8(), ".mma", ".session-encryption-key")
     });
   }
   isEnabled() {
@@ -13279,7 +13790,7 @@ class SessionFileEncryptor {
       return;
     const files = readdirSync6(sessionDir);
     for (const file of files) {
-      const filePath = join19(sessionDir, file);
+      const filePath = join20(sessionDir, file);
       if (existsSync27(filePath) && !file.endsWith(".enc")) {
         try {
           const content = readFileSync16(filePath, "utf8");
@@ -13296,7 +13807,7 @@ class SessionFileEncryptor {
     const files = readdirSync6(sessionDir);
     for (const file of files) {
       if (file.endsWith(".enc")) {
-        const encFilePath = join19(sessionDir, file);
+        const encFilePath = join20(sessionDir, file);
         const decFilePath = encFilePath.slice(0, -4);
         try {
           const content = readFileSync16(encFilePath, "utf8");
@@ -13329,7 +13840,7 @@ import {
   writeFileSync as writeFileSync11,
   appendFileSync as appendFileSync5
 } from "fs";
-import { join as join20 } from "path";
+import { join as join21 } from "path";
 import { gzipSync } from "zlib";
 
 class SessionStore {
@@ -13355,16 +13866,16 @@ class SessionStore {
     mkdirSync12(this.baseDir, { recursive: true });
   }
   sessionDir(id) {
-    return join20(this.baseDir, id);
+    return join21(this.baseDir, id);
   }
   metaPath(id) {
-    return join20(this.sessionDir(id), "meta.json");
+    return join21(this.sessionDir(id), "meta.json");
   }
   historyPath(id) {
-    return join20(this.sessionDir(id), "history.jsonl");
+    return join21(this.sessionDir(id), "history.jsonl");
   }
   sessionLogPath(id) {
-    return join20(this.sessionDir(id), "session.jsonl");
+    return join21(this.sessionDir(id), "session.jsonl");
   }
   sessionExists(id) {
     return existsSync28(this.metaPath(id));
@@ -13487,7 +13998,7 @@ class SessionStore {
         if (existsSync28(historyPath)) {
           const content = readFileSync17(historyPath, "utf-8");
           const compressed = gzipSync(content);
-          const gzPath = join20(this.baseDir, `${session2.id}.jsonl.gz`);
+          const gzPath = join21(this.baseDir, `${session2.id}.jsonl.gz`);
           writeFileSync11(gzPath, compressed);
           rmSync(historyPath);
         }
@@ -13695,7 +14206,7 @@ class ProfileCompressor {
 
 // src/modules/user-profile/profile.ts
 import { readFileSync as readFileSync18, writeFileSync as writeFileSync12, existsSync as existsSync29, mkdirSync as mkdirSync13 } from "fs";
-import { join as join21 } from "path";
+import { join as join22 } from "path";
 import { homedir as homedir9, hostname, platform as platform4, type } from "os";
 import { env } from "process";
 
@@ -13722,10 +14233,10 @@ class UserProfile {
     if (!existsSync29(this.profileDir)) {
       mkdirSync13(this.profileDir, { recursive: true });
     }
-    writeFileSync12(join21(this.profileDir, "profile.json"), JSON.stringify({ ...this.info, preferences: this.preferences }, null, 2), "utf-8");
+    writeFileSync12(join22(this.profileDir, "profile.json"), JSON.stringify({ ...this.info, preferences: this.preferences }, null, 2), "utf-8");
   }
   load() {
-    const path = join21(this.profileDir, "profile.json");
+    const path = join22(this.profileDir, "profile.json");
     if (!existsSync29(path))
       return null;
     try {
@@ -13765,7 +14276,7 @@ var init_profile = () => {};
 
 // src/modules/skills/loader.ts
 import { readdirSync as readdirSync8, readFileSync as readFileSync19, existsSync as existsSync30, statSync as statSync5 } from "fs";
-import { join as join22 } from "path";
+import { join as join23 } from "path";
 
 class SkillsLoader {
   loadFromDir(dirPath) {
@@ -13778,7 +14289,7 @@ class SkillsLoader {
   scanDir(dirPath, skills) {
     const entries = readdirSync8(dirPath);
     for (const entry of entries) {
-      const fullPath = join22(dirPath, entry);
+      const fullPath = join23(dirPath, entry);
       const stat = statSync5(fullPath);
       if (stat.isDirectory()) {
         this.scanDir(fullPath, skills);
@@ -14059,7 +14570,7 @@ var init_browser2 = __esm(() => {
 
 // src/modules/indexer/walker.ts
 import { readdirSync as readdirSync9, readFileSync as readFileSync20, statSync as statSync6, existsSync as existsSync31, watch } from "fs";
-import { join as join23, relative, extname as extname5 } from "path";
+import { join as join24, relative, extname as extname5 } from "path";
 
 class Indexer {
   baseDir;
@@ -14097,7 +14608,7 @@ class Indexer {
       for (const entry of entries) {
         if (count >= this.MAX_FILES)
           return;
-        const fullPath = join23(dir, entry);
+        const fullPath = join24(dir, entry);
         const relPath = relative(this.baseDir, fullPath);
         const stat = statSync6(fullPath);
         if (stat.isDirectory()) {
@@ -14161,13 +14672,13 @@ var init_walker = __esm(() => {
 
 // src/modules/indexer/cache.ts
 import { readFileSync as readFileSync21, writeFileSync as writeFileSync13, existsSync as existsSync32, mkdirSync as mkdirSync14, rmSync as rmSync2 } from "fs";
-import { join as join24 } from "path";
+import { join as join25 } from "path";
 
 class IndexCache {
   cachePath;
   cache = null;
   constructor(cacheDir) {
-    this.cachePath = join24(cacheDir, "index-cache.json");
+    this.cachePath = join25(cacheDir, "index-cache.json");
   }
   load() {
     if (this.cache)
@@ -14183,7 +14694,7 @@ class IndexCache {
   }
   save(result) {
     this.cache = result;
-    const dir = join24(this.cachePath, "..");
+    const dir = join25(this.cachePath, "..");
     if (!existsSync32(dir))
       mkdirSync14(dir, { recursive: true });
     writeFileSync13(this.cachePath, JSON.stringify(result), "utf-8");
@@ -14548,13 +15059,13 @@ var init_mcp = __esm(() => {
 
 // src/modules/memory/module.ts
 import { homedir as homedir10 } from "os";
-import { join as join25 } from "path";
+import { join as join26 } from "path";
 
 class MemoryModule {
   name = "memory";
   store;
   constructor(memoryDir) {
-    const dir = memoryDir || join25(homedir10(), ".mma", "memory");
+    const dir = memoryDir || join26(homedir10(), ".mma", "memory");
     this.store = new MemoryStore(dir);
   }
   getSystemPromptBlock() {
@@ -14601,7 +15112,7 @@ __export(exports_bootstrap, {
   bootstrap: () => bootstrap
 });
 import { homedir as homedir11 } from "os";
-import { join as join26, resolve as resolve15 } from "path";
+import { join as join27, resolve as resolve15 } from "path";
 import { existsSync as existsSync33, readFileSync as readFileSync22, writeFileSync as writeFileSync14 } from "fs";
 function buildSystemInfo(config, baseDir, profileCompressed) {
   const now = new Date().toISOString().replace("T", " ").slice(0, 19);
@@ -14611,21 +15122,20 @@ function buildSystemInfo(config, baseDir, profileCompressed) {
     `Date: ${now}`,
     `Workspace: ${baseDir}`,
     `${profileCompressed}`,
-    `Reply in the user's language. Use tools for filesystem, bash, web access.`,
-    `Use tools when needed. Explain briefly what you're doing if it's not obvious.`,
-    `Answer the user's question directly. Only take action when the user explicitly asks you to change, create, or fix something.`,
-    `If a tool call fails, report the error and ask the user how to proceed.`,
+    `Reply in the user's language. Use tools for: read/write/edit/delete files, search (glob/grep), shell commands (bash), web access (web_search, web_fetch), subagents, browser, MCP.`,
+    `Use tools when needed — explain briefly what you're doing if it's not obvious.`,
+    `If a tool call fails, analyze the error and correct the call — try up to 2 times with different approaches before asking the user for help.`,
     ``,
-    `Design principles — apply them automatically without naming them:`,
-    `- Do not add code, files, or abstractions that are not needed right now (YAGNI — You Ain't Gonna Need It). If something is not required by the current task, omit it.`,
-    `- Prefer simple, straightforward solutions over clever or complex ones (KISS — Keep It Simple, Stupid). Flat code beats nested, minimal config beats flexible, explicit beats generic.`,
-    `- Do not duplicate code, logic, or configuration (DRY — Don't Repeat Yourself). Extract shared logic into a single place, reuse existing utilities and patterns before writing new ones.`
+    `Design principles:`,
+    `- YAGNI: Do not add code, files, or abstractions not needed right now.`,
+    `- KISS: Prefer simple, straightforward solutions over clever or complex ones.`,
+    `- DRY: Do not duplicate code, logic, or configuration — reuse existing utilities and patterns.`
   ];
   if (isWin) {
     lines.push(``, `Windows environment — use Windows-compatible commands:`, `- Use "dir" instead of "ls". Use "dir /b" for bare listing.`, `- Use "type" or "Get-Content" instead of "cat".`, `- Use "cd" instead of "pwd". Use "echo %cd%" to print working directory.`, `- Use "copy" instead of "cp", "move" instead of "mv", "del" instead of "rm".`, `- Do not use "mkdir -p" — Windows mkdir creates intermediate dirs by default. Use the create_dir tool instead.`, `- Use forward slashes (/) or escaped backslashes (\\\\) in file paths.`, `- Your working directory is: ${baseDir}`);
   }
-  lines.push(``, `Bash tool rules:`, `- Use the "workdir" parameter to run commands in a specific directory. Do NOT chain "cd dir && cmd" — the security module blocks the "&&" operator.`, `- Run one command per tool call. Split multi-step shell operations into separate bash calls.`, `- Background processes (dev servers, watchers, long-running npm install): use the "background: true" parameter or the tool will auto-detect and background them. Check output with process_log.`);
-  lines.push(``, `=== DEVELOPMENT RULES — follow these strictly ===`, ``, `1. DEPENDENCIES FIRST: Before writing any source code, ALWAYS install project dependencies (e.g., "npm install", "pip install -r requirements.txt", "cargo build", "go mod tidy"). Verify the package manager's lock file or dependency directory exists. Never write code that imports/uses packages that aren't installed yet.`, `2. TOOLKIT/FWK FIRST: If the task specifies a framework or UI library, initialize and configure it BEFORE writing application code. Run its project init command first, then add components/modules. Never write your own version of what the framework already provides.`, `3. ONE STEP AT A TIME: Follow the plan sequentially. Complete step N before starting step N+1. When a step is done: verify the deliverables exist and have real content (not empty), then call "plan update step=N status=done". Do not redo completed work.`, `4. VERIFY YOUR WORK: After creating/modifying files, verify they exist on disk. After installing dependencies, verify the package manager completed successfully. After any command, check its output for errors. Don't assume operations succeeded.`, `5. NO PREMATURE WORK: Do not create files for future steps. Do not add imports/references to packages or modules that haven't been installed yet. Do not reference files or components that don't exist yet. Build incrementally — one layer at a time.`, `6. WHEN STUCK: If a command fails 2+ times, STOP and try a different approach. Write files directly instead of using commands. Ask the user for help. Never repeat the same failing command more than twice.`, ``, `=== PLAN QUALITY RULES — your plan MUST follow these ===`, ``, `- Each step must describe CONCRETE deliverables: exact filenames with paths, exact packages to install, exact CLI commands to run. Steps shorter than 50 characters or without file paths/commands are REJECTED.`, `- A step like "Настройка проекта" or "Setup the project" is USELESS and will be REJECTED.`, `- A step like "Создать src/components/Header.tsx с навигацией и логотипом, добавить в src/App.tsx импорт <Header />" is GOOD.`, `- Include file extensions (.tsx, .css, .json) and directory paths. Every step must mention at least one file or command.`, `- The plan must cover EVERYTHING needed: init → deps → framework setup → code → verification.`, `- Number of steps: 5-8 for a typical task. Too few means you're being vague. Too many means you're over-splitting.`);
+  lines.push(``, `Bash tool rules:`, `- Use the "workdir" parameter to run commands in a specific directory. Prefer workdir over "cd dir && cmd" chaining.`, `- Run one command per tool call. Split multi-step shell operations into separate bash calls.`, `- Background processes (dev servers, watchers, long-running npm install): use the "background: true" parameter or the tool will auto-detect and background them. Check output with process_log.`);
+  lines.push(``, `=== DEVELOPMENT RULES — follow these strictly ===`, ``, `1. DEPENDENCIES FIRST: Before writing any source code, ALWAYS install project dependencies (e.g., "npm install", "pip install -r requirements.txt", "cargo build", "go mod tidy"). Verify the package manager's lock file or dependency directory exists. Never write code that imports/uses packages that aren't installed yet.`, `2. TOOLKIT/FWK FIRST: If the task specifies a framework or UI library, initialize and configure it BEFORE writing application code. Run its project init command first, then add components/modules. Never write your own version of what the framework already provides.`, `3. ONE STEP AT A TIME: Follow the plan sequentially. Complete step N before starting step N+1. When a step is done: verify the deliverables exist and have real content (not empty), then call "plan update step=N status=done". Do not redo completed work.`, `4. VERIFY YOUR WORK: After creating/modifying files, verify they exist on disk. After installing dependencies, verify the package manager completed successfully. After any command, check its output for errors. Don't assume operations succeeded.`, `5. NO PREMATURE WORK: Do not create files for future steps. Do not add imports/references to packages or modules that haven't been installed yet. Do not reference files or components that don't exist yet. Build incrementally — one layer at a time.`, `6. WHEN STUCK: If a command fails 2+ times, STOP and try a different approach. Write files directly instead of using commands. Ask the user for help. Never repeat the same failing command more than twice.`, ``, `=== PLAN QUALITY RULES — your plan MUST follow these ===`, ``, `- Each step must describe CONCRETE deliverables: exact filenames with paths, exact packages to install, exact CLI commands to run. Avoid vague steps — be specific.`, `- A step like "Настройка проекта" or "Setup the project" is too vague — describe what exactly needs to be configured or set up.`, `- A step like "Создать src/components/Header.tsx с навигацией и логотипом, добавить в src/App.tsx импорт <Header />" is GOOD.`, `- Include file extensions (.tsx, .css, .json) and directory paths. Every step must mention at least one file or command.`, `- The plan must cover EVERYTHING needed: init → deps → framework setup → code → verification.`, `- Number of steps: 5-8 for a typical task. Too few means you're being vague. Too many means you're over-splitting.`);
   if (config.autoPlan) {
     lines.push(``, `Plan rule (MANDATORY): For ANY task that requires creating files, installing packages, or multiple actions — you MUST create a plan using the "plan" tool BEFORE starting work. Each step must describe a concrete deliverable (specific files to create, packages to install, commands to run). Do not combine unrelated work into one step.`);
   }
@@ -14637,8 +15147,8 @@ function buildSystemInfo(config, baseDir, profileCompressed) {
 `);
 }
 async function bootstrap(configDir, projectDir, noAgentsMd, exitOnComplete) {
-  const dir = configDir || join26(homedir11(), ".mma");
-  const projectConfigPath = projectDir ? join26(projectDir, ".mmrc") : join26(process.cwd(), ".mmrc");
+  const dir = configDir || join27(homedir11(), ".mma");
+  const projectConfigPath = projectDir ? join27(projectDir, ".mmrc") : join27(process.cwd(), ".mmrc");
   const config = loadConfig({ configDir: dir, projectConfigPath });
   setLocale(config.locale);
   try {
@@ -14648,7 +15158,7 @@ async function bootstrap(configDir, projectDir, noAgentsMd, exitOnComplete) {
     }
   } catch {}
   const logger = new Logger(config.logLevel);
-  logger.setLogDir(join26(dir, "logs"));
+  logger.setLogDir(join27(dir, "logs"));
   logger.debug("MMA bootstrap", {
     version: config.version,
     model: config.model
@@ -14670,7 +15180,7 @@ async function bootstrap(configDir, projectDir, noAgentsMd, exitOnComplete) {
       logger.info(`Model ${config.model} loaded in ${loadResult.loadTime}s`);
     }
   }
-  const profile = new UserProfile(join26(dir));
+  const profile = new UserProfile(join27(dir));
   profile.load() || profile.collect();
   profile.save();
   const llmProvider = new OpenAICompatProvider({
@@ -14682,7 +15192,7 @@ async function bootstrap(configDir, projectDir, noAgentsMd, exitOnComplete) {
     rateLimits: config.security?.rateLimits
   });
   const baseDir = projectDir ? resolve15(projectDir) : process.cwd();
-  const projectMapCacheDir = join26(baseDir, ".mma");
+  const projectMapCacheDir = join27(baseDir, ".mma");
   const indexerModule = new IndexerModule({
     baseDir,
     cacheDir: projectMapCacheDir
@@ -14693,9 +15203,9 @@ async function bootstrap(configDir, projectDir, noAgentsMd, exitOnComplete) {
     logger.warn(`Project indexing failed: ${err.message}`);
   }
   const skillsLoader = new SkillsLoader;
-  const builtinDir = join26(import.meta.dirname, "skills", "builtin");
-  const globalDir = join26(homedir11(), ".agents", "skills");
-  const projectSkillsDir = join26(baseDir, ".mma", "skills");
+  const builtinDir = join27(import.meta.dirname, "skills", "builtin");
+  const globalDir = join27(homedir11(), ".agents", "skills");
+  const projectSkillsDir = join27(baseDir, ".mma", "skills");
   const availableSkills = skillsLoader.loadFromAllSources(builtinDir, globalDir, projectSkillsDir);
   const skillsMatcher = new SkillsMatcher;
   const skillsBudget = Math.floor(config.contextWindow * 0.1);
@@ -14709,11 +15219,11 @@ async function bootstrap(configDir, projectDir, noAgentsMd, exitOnComplete) {
     essential: true,
     estimatedTokens: 250
   };
-  const agentsMdGlobal = join26(dir, "AGENTS.md");
+  const agentsMdGlobal = join27(dir, "AGENTS.md");
   if (!existsSync33(agentsMdGlobal)) {
     writeFileSync14(agentsMdGlobal, "", "utf-8");
   }
-  const sessionDir = join26(dir, "sessions");
+  const sessionDir = join27(dir, "sessions");
   const sessionStore = new SessionStore(sessionDir);
   sessionStore.init();
   const sessionManager = new SessionManager(sessionStore, {
@@ -14767,7 +15277,7 @@ async function bootstrap(configDir, projectDir, noAgentsMd, exitOnComplete) {
   const mcpModule = new MCPModule(config);
   await mcpModule.initialize();
   moduleRegistry.register(mcpModule);
-  const memoryModule = new MemoryModule(join26(dir, "memory"));
+  const memoryModule = new MemoryModule(join27(dir, "memory"));
   moduleRegistry.register(memoryModule);
   if (config.browser.enabled) {
     const browserModule = new BrowserModule;
@@ -14810,8 +15320,8 @@ async function bootstrap(configDir, projectDir, noAgentsMd, exitOnComplete) {
   pluginManager.register(plugin);
   pluginManager.register(plugin2);
   const pluginLoader = new PluginLoader;
-  const globalPluginsDir = join26(homedir11(), ".mma", "plugins");
-  const projectPluginsDir = join26(dir, ".mma", "plugins");
+  const globalPluginsDir = join27(homedir11(), ".mma", "plugins");
+  const projectPluginsDir = join27(dir, ".mma", "plugins");
   pluginLoader.loadFromDir(globalPluginsDir, pluginManager, logger);
   pluginLoader.loadFromDir(projectPluginsDir, pluginManager, logger);
   contextManager.onCompact = (summary) => {
@@ -14829,9 +15339,9 @@ async function bootstrap(configDir, projectDir, noAgentsMd, exitOnComplete) {
   const skipAgentsMd = noAgentsMd === true;
   if (!skipAgentsMd) {
     const agentsMdCandidates = [
-      join26(baseDir, "AGENTS.md"),
-      join26(baseDir, ".mma", "AGENTS.md"),
-      join26(dir, "AGENTS.md")
+      join27(baseDir, "AGENTS.md"),
+      join27(baseDir, ".mma", "AGENTS.md"),
+      join27(dir, "AGENTS.md")
     ];
     for (const p of agentsMdCandidates) {
       if (existsSync33(p)) {
@@ -15158,7 +15668,7 @@ function pad(text, width, align) {
   }
   return text + " ".repeat(gap);
 }
-function truncate(text, width) {
+function truncate2(text, width) {
   if (stringWidth(text) <= width)
     return text;
   let acc = "";
@@ -15244,7 +15754,7 @@ function formatTable(tableLines, opts = {}) {
     const cells = [];
     for (let c = 0;c < columnCount; c++) {
       const raw = row[c] ?? "";
-      const cell = truncate(raw, widths[c]);
+      const cell = truncate2(raw, widths[c]);
       const a = isHeader && align[c] === undefined ? "center" : align[c] ?? "left";
       cells.push(pad(cell, widths[c], a));
     }
@@ -15668,14 +16178,14 @@ async function runSetup() {
 
 // src/cli/commands.ts
 init_i18n();
-import { join as join28, dirname as dirname9 } from "path";
+import { join as join29, dirname as dirname9 } from "path";
 import { homedir as homedir13 } from "os";
 import { existsSync as existsSync34, readFileSync as readFileSync23 } from "fs";
 
 // src/cli/security-commands.ts
 init_bootstrap();
 init_config();
-import { join as join27 } from "path";
+import { join as join28 } from "path";
 import { homedir as homedir12 } from "os";
 
 // src/modules/security/security-policies.ts
@@ -15686,7 +16196,9 @@ var STRICT_POLICY = {
   preset: "strict",
   recommendedFor: ["production", "sensitive-data", "multi-user", "enterprise"],
   config: {
+    enabled: true,
     bash: {
+      enabled: true,
       blacklist: [
         "rm",
         "dd",
@@ -15745,10 +16257,22 @@ var STRICT_POLICY = {
         "-R",
         "--no-clobber"
       ],
-      dangerousOperators: [">", ">>", "2>", "2>>", "|", "&&", "||", ";", "&", "`"],
+      dangerousOperators: [
+        ">",
+        ">>",
+        "2>",
+        "2>>",
+        "|",
+        "&&",
+        "||",
+        ";",
+        "&",
+        "`"
+      ],
       logCommands: true
     },
     paths: {
+      enabled: true,
       denied: [
         ".git/",
         "node_modules/",
@@ -15781,6 +16305,7 @@ var STRICT_POLICY = {
       allowed: []
     },
     network: {
+      enabled: true,
       deniedDomains: [
         "localhost",
         "127.0.0.1",
@@ -15852,7 +16377,9 @@ var BALANCED_POLICY = {
   preset: "balanced",
   recommendedFor: ["development", "single-user", "general-use", "testing"],
   config: {
+    enabled: true,
     bash: {
+      enabled: true,
       blacklist: [
         "rm",
         "dd",
@@ -15898,6 +16425,7 @@ var BALANCED_POLICY = {
       logCommands: true
     },
     paths: {
+      enabled: true,
       denied: [
         ".git/",
         "node_modules/",
@@ -15918,6 +16446,7 @@ var BALANCED_POLICY = {
       allowed: []
     },
     network: {
+      enabled: true,
       deniedDomains: [],
       allowedDomains: [],
       requestTimeout: 15000,
@@ -15953,7 +16482,12 @@ var BALANCED_POLICY = {
     auditNotifier: {
       enabled: false,
       minSeverity: "medium",
-      eventTypes: ["security_block", "bash_command", "file_operation", "network_request"],
+      eventTypes: [
+        "security_block",
+        "bash_command",
+        "file_operation",
+        "network_request"
+      ],
       maxRetries: 3
     }
   }
@@ -15964,7 +16498,9 @@ var PERMISSIVE_POLICY = {
   preset: "permissive",
   recommendedFor: ["trusted-environment", "local-dev", "testing", "sandbox"],
   config: {
+    enabled: true,
     bash: {
+      enabled: true,
       blacklist: [
         "rm",
         "dd",
@@ -15984,10 +16520,12 @@ var PERMISSIVE_POLICY = {
       logCommands: true
     },
     paths: {
+      enabled: true,
       denied: [".env", "*.key", "*.pem", "*.crt", "*.p12", "*.pfx"],
       allowed: []
     },
     network: {
+      enabled: true,
       deniedDomains: [],
       allowedDomains: [],
       requestTimeout: 30000,
@@ -16177,7 +16715,7 @@ function createSecurityCommand(program2) {
     }
   });
   securityCmd.command("set-policy").argument("<preset>", t("cli.security.preset")).description(t("cli.security.set_policy")).action(async (preset) => {
-    const configPath = join27(homedir12(), ".mma", "config.json");
+    const configPath = join28(homedir12(), ".mma", "config.json");
     const { config: appConfig } = await bootstrap();
     const validPresets = ["strict", "balanced", "permissive"];
     if (!validPresets.includes(preset)) {
@@ -16192,7 +16730,7 @@ function createSecurityCommand(program2) {
     console.log(t("cli.security.policy_description", { description: policy.description }));
   });
   securityCmd.command("enable-encryption").description(t("cli.security.enable_encryption")).action(async () => {
-    const configPath = join27(homedir12(), ".mma", "config.json");
+    const configPath = join28(homedir12(), ".mma", "config.json");
     const { config: appConfig } = await bootstrap();
     appConfig.security = appConfig.security || {};
     appConfig.security.sessionEncryption = {
@@ -16204,7 +16742,7 @@ function createSecurityCommand(program2) {
     console.log(t("cli.security.encryption_enabled"));
   });
   securityCmd.command("disable-encryption").description(t("cli.security.disable_encryption")).action(async () => {
-    const configPath = join27(homedir12(), ".mma", "config.json");
+    const configPath = join28(homedir12(), ".mma", "config.json");
     const { config: appConfig } = await bootstrap();
     appConfig.security = appConfig.security || {};
     appConfig.security.sessionEncryption = {
@@ -16216,7 +16754,7 @@ function createSecurityCommand(program2) {
     console.log(t("cli.security.encryption_disabled"));
   });
   securityCmd.command("enable-audit").description(t("cli.security.enable_audit")).action(async () => {
-    const configPath = join27(homedir12(), ".mma", "config.json");
+    const configPath = join28(homedir12(), ".mma", "config.json");
     const { config: appConfig } = await bootstrap();
     appConfig.security = appConfig.security || {};
     appConfig.security.auditNotifier = {
@@ -16230,7 +16768,7 @@ function createSecurityCommand(program2) {
     console.log(t("cli.security.audit_enabled"));
   });
   securityCmd.command("disable-audit").description(t("cli.security.disable_audit")).action(async () => {
-    const configPath = join27(homedir12(), ".mma", "config.json");
+    const configPath = join28(homedir12(), ".mma", "config.json");
     const { config: appConfig } = await bootstrap();
     appConfig.security = appConfig.security || {};
     appConfig.security.auditNotifier = {
@@ -16266,8 +16804,8 @@ import { fileURLToPath } from "url";
 function readVersion() {
   const here = dirname9(fileURLToPath(import.meta.url));
   const candidates = [
-    join28(here, "..", "..", "package.json"),
-    join28(here, "..", "package.json")
+    join29(here, "..", "..", "package.json"),
+    join29(here, "..", "package.json")
   ];
   for (const p of candidates) {
     if (existsSync34(p)) {
@@ -16283,7 +16821,7 @@ function createProgram() {
   const program2 = new Command().name("mma").description(t("cli.description")).version(version).option("--no-agents-md", t("cli.no_agents_md")).option("-d, --dir <path>", t("cli.dir")).option("-e, --exit-on-complete", t("cli.exit_on_complete")).option("-j, --json", t("cli.json"));
   program2.command("init").description(t("cli.init")).action(async () => {
     const answers = await runSetup();
-    const configPath = join28(homedir13(), ".mma", "config.json");
+    const configPath = join29(homedir13(), ".mma", "config.json");
     const { config } = await bootstrap();
     config.provider.type = answers.provider;
     config.provider.baseUrl = answers.apiBase;
@@ -16292,12 +16830,43 @@ function createProgram() {
     config.contextWindow = answers.contextWindow;
     config.maxToolIterations = answers.maxToolIterations;
     config.locale = answers.locale;
+    if (config.security) {
+      config.security.enabled = answers.securityBashBlock || answers.securityFlagsBlock || !answers.securityPathsDeny;
+      config.security.bash.enabled = config.security.enabled;
+      config.security.bash.blockDangerousFlags = answers.securityFlagsBlock;
+      if (answers.securityBashBlock) {
+        config.security.bash.blacklist = [
+          ...new Set([
+            ...config.security.bash.blacklist,
+            "rm",
+            "dd",
+            "chmod",
+            "wget",
+            "curl",
+            "scp",
+            "ssh",
+            "nc",
+            "netcat",
+            "sudo",
+            "su",
+            "kill",
+            "pkill",
+            "killall",
+            "shutdown",
+            "reboot"
+          ])
+        ];
+      }
+      if (!answers.securityPathsDeny) {
+        config.security.paths.denied = [];
+      }
+    }
     saveConfig(config, configPath);
     console.log(t("cli.config_saved"));
   });
   const configCmd = program2.command("config").description(t("cli.manage_config"));
   configCmd.command("set").argument("<key>", t("cli.config_key")).argument("<value>", "Config value").description(t("cli.set_value")).action(async (key, value) => {
-    const configPath = join28(homedir13(), ".mma", "config.json");
+    const configPath = join29(homedir13(), ".mma", "config.json");
     const { config } = await bootstrap();
     const keys = key.split(".");
     let obj = config;
@@ -16357,14 +16926,14 @@ function createProgram() {
     console.log(t("cli.model_hint"));
   });
   model.command("use").argument("<name>", "Model name").description(t("cli.set_model")).action(async (name) => {
-    const configPath = join28(homedir13(), ".mma", "config.json");
+    const configPath = join29(homedir13(), ".mma", "config.json");
     const { config } = await bootstrap();
     config.model = name;
     saveConfig(config, configPath);
     console.log(t("cli.model_set", { name }));
   });
   program2.command("context").description(t("cli.manage_context")).argument("<size>", "Context window size in tokens").action(async (size) => {
-    const configPath = join28(homedir13(), ".mma", "config.json");
+    const configPath = join29(homedir13(), ".mma", "config.json");
     const { config } = await bootstrap();
     const contextWindow = parseInt(size, 10);
     if (isNaN(contextWindow) || contextWindow < 1024) {
@@ -16382,7 +16951,7 @@ function createProgram() {
     console.log(t("cli.base_url"), config.provider.baseUrl);
   });
   provider.command("use").argument("<name>", "Provider name").description(t("cli.set_provider")).action(async (name) => {
-    const configPath = join28(homedir13(), ".mma", "config.json");
+    const configPath = join29(homedir13(), ".mma", "config.json");
     const { config } = await bootstrap();
     config.provider.type = name;
     saveConfig(config, configPath);
@@ -16435,7 +17004,7 @@ init_bootstrap();
 init_colors();
 import * as readline2 from "readline";
 import { existsSync as existsSync35, readFileSync as readFileSync24, writeFileSync as writeFileSync15 } from "fs";
-import { join as join29, dirname as dirname10 } from "path";
+import { join as join30, dirname as dirname10 } from "path";
 import { homedir as homedir14 } from "os";
 import { fileURLToPath as fileURLToPath2 } from "url";
 
@@ -16751,7 +17320,7 @@ init_i18n();
 function isRichTerminal() {
   return Boolean(process.stdout.isTTY) && !process.env.CI;
 }
-function summarizeArgs(args) {
+function summarizeArgs2(args) {
   const preferred = ["path", "file", "query", "url", "command", "name"];
   for (const key of preferred) {
     const value = args[key];
@@ -16817,7 +17386,7 @@ class Renderer {
   toolStart(tool, args) {
     this.endCard();
     this.spinner.stop();
-    const summary = summarizeArgs(args);
+    const summary = summarizeArgs2(args);
     if (!this.rich) {
       this.out.write(`
 ${pc.dim("⚙")} ${friendlyTool(tool)}${summary ? ` ${pc.dim(summary)}` : ""}
@@ -16827,15 +17396,21 @@ ${pc.dim("⚙")} ${friendlyTool(tool)}${summary ? ` ${pc.dim(summary)}` : ""}
     this.card = { tool, args, body: [], start: Date.now() };
     this.spinner.start(`${pc.dim("⚙")} ${friendlyTool(tool)}${summary ? ` ${pc.dim(summary)}` : ""}`);
   }
-  toolEnd(_tool, duration, error) {
+  toolEnd(_tool, duration, error, ctxDelta) {
     this.spinner.stop();
-    if (!this.rich)
+    if (!this.rich) {
+      if (ctxDelta !== undefined && ctxDelta !== 0) {
+        const deltaStr = ctxDelta > 0 ? pc.green(`+${ctxDelta}`) : pc.yellow(`${ctxDelta} ↓`);
+        this.out.write(`${pc.dim("ctx")} ${deltaStr}
+`);
+      }
       return;
+    }
     if (!this.card)
       return;
     const { tool, args, body } = this.card;
     const lines = [];
-    const summary = summarizeArgs(args);
+    const summary = summarizeArgs2(args);
     if (summary)
       lines.push(pc.dim(summary));
     for (const chunk of body) {
@@ -16846,7 +17421,12 @@ ${pc.dim("⚙")} ${friendlyTool(tool)}${summary ? ` ${pc.dim(summary)}` : ""}
       }
     }
     const marker = error ? pc.red("✗") : pc.green("✓");
-    lines.push(`${marker} ${pc.dim(`${duration}ms`)}`);
+    let footer = `${marker} ${pc.dim(`${duration}ms`)}`;
+    if (ctxDelta !== undefined && ctxDelta !== 0) {
+      const deltaStr = ctxDelta > 0 ? pc.green(`+${ctxDelta}`) : pc.yellow(`${ctxDelta} ↓`);
+      footer += `  ${pc.dim("ctx")} ${deltaStr}`;
+    }
+    lines.push(footer);
     const title = `${marker} ${friendlyTool(tool)}`;
     for (const line of box(lines, { title, width: this.width })) {
       this.out.write(`${line}
@@ -16885,8 +17465,8 @@ init_config();
 function readVersion2() {
   const here = dirname10(fileURLToPath2(import.meta.url));
   const candidates = [
-    join29(here, "..", "..", "package.json"),
-    join29(here, "..", "package.json")
+    join30(here, "..", "..", "package.json"),
+    join30(here, "..", "package.json")
   ];
   for (const p of candidates) {
     if (existsSync35(p)) {
@@ -16919,13 +17499,21 @@ var COMMAND_GROUPS = {
   delete: "session",
   skill: "skill"
 };
-function formatContextBar(used, limit) {
+function formatContextBar(used, limit, compactions, quality) {
   const pct = Math.min(100, Math.round(used / limit * 100));
   const barLen = 20;
   const filled = Math.round(pct / 100 * barLen);
   const bar = pc.green("█".repeat(filled)) + pc.dim("░".repeat(barLen - filled));
   const pctStr = pct >= 75 ? pc.yellow(`${pct}%`) : pc.dim(`${pct}%`);
-  return `  ${bar}  ${pctStr}  ${pc.dim(`(${used} / ${limit} tokens)`)}`;
+  let line = `  ${bar}  ${pctStr}  ${pc.dim(`(${used} / ${limit} tokens)`)}`;
+  if (compactions !== undefined) {
+    line += pc.dim(`  compactions: ${compactions}`);
+  }
+  if (quality !== undefined) {
+    const qColor = quality >= 70 ? pc.green : quality >= 40 ? pc.yellow : pc.red;
+    line += `  ${qColor(`quality: ${quality}%`)}`;
+  }
+  return line;
 }
 
 class Repl {
@@ -16954,10 +17542,10 @@ class Repl {
     this.sessionManager = sessionManager;
     this.skillsModule = skillsModule;
     this.pluginManager = pluginManager;
-    this.configDir = configDir || join29(homedir14(), ".mma");
+    this.configDir = configDir || join30(homedir14(), ".mma");
     this.baseDir = baseDir || process.cwd();
     this.noAgentsMd = noAgentsMd === true;
-    this.historyPath = join29(homedir14(), ".mma", "repl-history");
+    this.historyPath = join30(homedir14(), ".mma", "repl-history");
     this.loadHistory();
     this.registerBuiltinCommands();
     this.registerMmaCommands();
@@ -17143,7 +17731,7 @@ class Repl {
       action: async () => {
         console.log(pc.yellow(t("repl.wizard_running")));
         const answers = await runSetup();
-        const configPath = join29(homedir14(), ".mma", "config.json");
+        const configPath = join30(homedir14(), ".mma", "config.json");
         this.config.provider.type = answers.provider;
         this.config.provider.baseUrl = answers.apiBase;
         this.config.provider.apiKey = answers.apiKey;
@@ -17173,7 +17761,7 @@ class Repl {
             return;
           }
           this.config.provider.type = name;
-          const configPath = join29(homedir14(), ".mma", "config.json");
+          const configPath = join30(homedir14(), ".mma", "config.json");
           saveConfig(this.config, configPath);
           console.log(pc.green(t("repl.provider_set", { name })));
           return;
@@ -17225,7 +17813,7 @@ class Repl {
             return;
           }
           this.config.model = name;
-          const configPath = join29(homedir14(), ".mma", "config.json");
+          const configPath = join30(homedir14(), ".mma", "config.json");
           saveConfig(this.config, configPath);
           console.log(pc.green(t("repl.model_set", { name })));
           return;
@@ -17249,7 +17837,7 @@ class Repl {
           return;
         }
         this.config.contextWindow = size;
-        const configPath = join29(homedir14(), ".mma", "config.json");
+        const configPath = join30(homedir14(), ".mma", "config.json");
         saveConfig(this.config, configPath);
         console.log(pc.green(t("cli.context_set", { size })));
       }
@@ -17267,9 +17855,9 @@ class Repl {
         this.agent.shutdown();
         const { loadConfig: loadConfig2 } = await Promise.resolve().then(() => (init_config(), exports_config));
         const { homedir: homedir15 } = await import("os");
-        const { join: join30 } = await import("path");
-        const configDir = join30(homedir15(), ".mma");
-        const projectConfigPath = join30(process.cwd(), ".mmrc");
+        const { join: join31 } = await import("path");
+        const configDir = join31(homedir15(), ".mma");
+        const projectConfigPath = join31(process.cwd(), ".mmrc");
         const freshConfig = loadConfig2({ configDir, projectConfigPath });
         Object.assign(this.config, freshConfig);
         const { bootstrap: bootstrap2 } = await Promise.resolve().then(() => (init_bootstrap(), exports_bootstrap));
@@ -17679,7 +18267,7 @@ ${t("image.attached", { source: "clipboard", size: `${sizeKb} KB` })}`));
         if (ev.type === "start") {
           renderer.toolStart(ev.tool, ev.args);
         } else {
-          renderer.toolEnd(ev.tool, ev.duration ?? 0, ev.error);
+          renderer.toolEnd(ev.tool, ev.duration ?? 0, ev.error, ev.ctxDelta);
         }
       }, (phase) => {
         if (phase === "thinking") {
@@ -17759,7 +18347,7 @@ ${t("image.attached", { source: "clipboard", size: `${sizeKb} KB` })}`));
   showContextBar(result) {
     if (result.contextUsed !== undefined && result.contextLimit !== undefined && result.contextLimit > 0) {
       console.log();
-      const ctxLine = formatContextBar(result.contextUsed, result.contextLimit);
+      const ctxLine = formatContextBar(result.contextUsed, result.contextLimit, result.compactionCount, result.contextQuality);
       console.log(ctxLine);
       if (result.totalTokens !== undefined && result.totalTokens > 0) {
         const apiLine = pc.dim(`  API: ${result.promptTokens} prompt + ${result.completionTokens} completion = ${result.totalTokens} total`);
@@ -17803,9 +18391,9 @@ ${t("image.attached", { source: "clipboard", size: `${sizeKb} KB` })}`));
       row(t("repl.agents_label"), pc.red(t("repl.disabled")));
     } else {
       const agentsMdCandidates = [
-        join29(this.baseDir, "AGENTS.md"),
-        join29(this.baseDir, ".mma", "AGENTS.md"),
-        join29(this.configDir, "AGENTS.md")
+        join30(this.baseDir, "AGENTS.md"),
+        join30(this.baseDir, ".mma", "AGENTS.md"),
+        join30(this.configDir, "AGENTS.md")
       ];
       const foundAgents = agentsMdCandidates.filter((p) => existsSync35(p));
       if (foundAgents.length > 0) {
@@ -17818,7 +18406,7 @@ ${t("image.attached", { source: "clipboard", size: `${sizeKb} KB` })}`));
     }
     const meta = this.sessionManager?.getActiveMeta();
     if (meta) {
-      const sessionPath = join29(this.configDir, "sessions", meta.id);
+      const sessionPath = join30(this.configDir, "sessions", meta.id);
       row(t("repl.session_label"), `${pc.cyan(meta.name)} ${pc.dim(`(${meta.id.slice(0, 12)})`)}  —  ${meta.messageCount} msgs  ${pc.dim(sessionPath)}`);
     }
     const headerWidth = Math.max(50, Math.min(96, process.stdout.columns || 96));
@@ -17844,7 +18432,7 @@ init_config();
 init_i18n();
 init_colors();
 import { existsSync as existsSync36 } from "fs";
-import { join as join30 } from "path";
+import { join as join31 } from "path";
 import { homedir as homedir15 } from "os";
 async function main() {
   const program2 = createProgram();
@@ -17885,7 +18473,7 @@ async function main() {
       if (ev.type === "start") {
         renderer.toolStart(ev.tool, ev.args);
       } else {
-        renderer.toolEnd(ev.tool, ev.duration ?? 0, ev.error);
+        renderer.toolEnd(ev.tool, ev.duration ?? 0, ev.error, ev.ctxDelta);
       }
     }, (phase) => {
       if (phase === "thinking") {
@@ -17908,7 +18496,7 @@ async function main() {
     }
     agent.shutdown();
   } else {
-    const configPath = join30(homedir15(), ".mma", "config.json");
+    const configPath = join31(homedir15(), ".mma", "config.json");
     if (!existsSync36(configPath)) {
       console.log(pc.yellow(`
   ` + t("cli.first_run") + `
@@ -17923,6 +18511,8 @@ async function main() {
       config2.maxToolIterations = answers.maxToolIterations;
       config2.locale = answers.locale;
       if (config2.security) {
+        config2.security.enabled = answers.securityBashBlock || answers.securityFlagsBlock || !answers.securityPathsDeny;
+        config2.security.bash.enabled = config2.security.enabled;
         config2.security.bash.blockDangerousFlags = answers.securityFlagsBlock;
         if (answers.securityBashBlock) {
           config2.security.bash.blacklist = [