micro-models-agent 0.39.1 → 0.40.0

package/dist/cli/setup.js

@@ -119,12 +119,14 @@ async function testChat(apiBase, apiKey, model) {
         return false;
     }
 }
-export async function runSetup() {
+export async function runSetup(externalRl) {
     console.log(t("setup.title"));
-    const rl = readline.createInterface({
-        input: process.stdin,
-        output: process.stdout,
-    });
+    const rl = externalRl ||
+        readline.createInterface({
+            input: process.stdin,
+            output: process.stdout,
+        });
+    const ownRl = !externalRl;
     console.log(t("setup.language"));
     const locale = await ask(rl, t("setup.ui_lang"), "en");
     setLocale(locale);
@@ -193,12 +195,20 @@ export async function runSetup() {
     let securityBashBlock = false;
     let securityFlagsBlock = false;
     let securityPathsDeny = true;
-    if (configureSecurity.toLowerCase() === "y" || configureSecurity.toLowerCase() === "yes") {
-        securityBashBlock = (await ask(rl, t("setup.security_bash_block"), "n")).toLowerCase() === "y";
-        securityFlagsBlock = (await ask(rl, t("setup.security_flags_block"), "n")).toLowerCase() === "y";
-        securityPathsDeny = (await ask(rl, t("setup.security_paths_deny"), "Y")).toLowerCase() !== "n";
+    if (configureSecurity.toLowerCase() === "y" ||
+        configureSecurity.toLowerCase() === "yes") {
+        securityBashBlock =
+            (await ask(rl, t("setup.security_bash_block"), "n")).toLowerCase() ===
+                "y";
+        securityFlagsBlock =
+            (await ask(rl, t("setup.security_flags_block"), "n")).toLowerCase() ===
+                "y";
+        securityPathsDeny =
+            (await ask(rl, t("setup.security_paths_deny"), "Y")).toLowerCase() !==
+                "n";
     }
-    rl.close();
+    if (ownRl)
+        rl.close();
     const answers = {
         provider,
         apiBase,
@@ -219,8 +229,18 @@ export async function runSetup() {
         t("setup.summary_value"),
     ], [
         [t("setup.provider_type"), provider, t("setup.model_name"), model],
-        ["API Base URL", apiBase, t("setup.context_window"), String(contextWindow)],
-        [t("setup.api_key"), apiKey || "not-needed", t("setup.max_iters"), String(maxIterations)],
+        [
+            "API Base URL",
+            apiBase,
+            t("setup.context_window"),
+            String(contextWindow),
+        ],
+        [
+            t("setup.api_key"),
+            apiKey || "not-needed",
+            t("setup.max_iters"),
+            String(maxIterations),
+        ],
         [t("setup.ui_lang"), locale, "", ""],
     ], { maxColumns: 4 });
     for (const l of summary)

package/dist/config/config.js

@@ -1,12 +1,12 @@
-import { existsSync, readFileSync, unlinkSync, writeFileSync, mkdirSync } from 'fs';
-import { join, dirname } from 'path';
-import { DEFAULTS } from './defaults';
-import { DEFAULT_SECURITY_CONFIG } from './security';
-import { t } from '../i18n/index';
-import { MigrationDetector } from '../migration/detect';
-import { BackupManager } from '../migration/backup';
-import { validateExpertConfig } from './experts';
-import { ConfigEncryptor } from '../modules/security/encryption';
+import { existsSync, readFileSync, unlinkSync, writeFileSync, mkdirSync, } from "fs";
+import { join, dirname } from "path";
+import { DEFAULTS } from "./defaults";
+import { DEFAULT_SECURITY_CONFIG } from "./security";
+import { t } from "../i18n/index";
+import { MigrationDetector } from "../migration/detect";
+import { BackupManager } from "../migration/backup";
+import { validateExpertConfig } from "./experts";
+import { ConfigEncryptor, } from "../modules/security/encryption";
 /**
  * Restore RegExp instances in dangerousPatterns that were serialized as {}
  * (pre-0.8.0 configs) or as {__regex, source, flags} (new format).
@@ -41,9 +41,12 @@ function deepMerge(target, source) {
     for (const key of Object.keys(source)) {
         const srcVal = source[key];
         const tgtVal = target[key];
-        if (srcVal !== null && srcVal !== undefined &&
-            typeof srcVal === 'object' && !Array.isArray(srcVal) &&
-            typeof tgtVal === 'object' && !Array.isArray(tgtVal)) {
+        if (srcVal !== null &&
+            srcVal !== undefined &&
+            typeof srcVal === "object" &&
+            !Array.isArray(srcVal) &&
+            typeof tgtVal === "object" &&
+            !Array.isArray(tgtVal)) {
             result[key] = deepMerge(tgtVal, srcVal);
         }
         else if (srcVal !== undefined) {
@@ -82,10 +85,12 @@ function regexReviver(_key, value) {
 function loadJSON(path) {
     try {
         if (existsSync(path)) {
-            return JSON.parse(readFileSync(path, 'utf-8'), regexReviver);
+            return JSON.parse(readFileSync(path, "utf-8"), regexReviver);
         }
     }
-    catch { /* ignore malformed files */ }
+    catch {
+        /* ignore malformed files */
+    }
     return null;
 }
 function applyEnvVars(config) {
@@ -103,27 +108,36 @@ function applyEnvVars(config) {
         result.logLevel = env.MMA_LOG_LEVEL;
     if (env.MMA_LOCALE)
         result.locale = env.MMA_LOCALE;
-    if (env.MMA_CONTEXT_WINDOW)
-        result.contextWindow = parseInt(env.MMA_CONTEXT_WINDOW, 10);
-    if (env.MMA_MAX_TOOL_ITERATIONS)
-        result.maxToolIterations = parseInt(env.MMA_MAX_TOOL_ITERATIONS, 10);
-    if (env.MMA_STUCK_THRESHOLD)
-        result.stuckThreshold = parseInt(env.MMA_STUCK_THRESHOLD, 10);
+    if (env.MMA_CONTEXT_WINDOW) {
+        const v = parseInt(env.MMA_CONTEXT_WINDOW, 10);
+        if (!isNaN(v))
+            result.contextWindow = v;
+    }
+    if (env.MMA_MAX_TOOL_ITERATIONS) {
+        const v = parseInt(env.MMA_MAX_TOOL_ITERATIONS, 10);
+        if (!isNaN(v))
+            result.maxToolIterations = v;
+    }
+    if (env.MMA_STUCK_THRESHOLD) {
+        const v = parseInt(env.MMA_STUCK_THRESHOLD, 10);
+        if (!isNaN(v))
+            result.stuckThreshold = v;
+    }
     if (env.MMA_AUTO_PLAN)
-        result.autoPlan = env.MMA_AUTO_PLAN === 'true';
+        result.autoPlan = env.MMA_AUTO_PLAN === "true";
     if (env.MMA_MOE_ENABLED)
-        result.moe = { ...result.moe, enabled: env.MMA_MOE_ENABLED === 'true' };
+        result.moe = { ...result.moe, enabled: env.MMA_MOE_ENABLED === "true" };
     return result;
 }
 export function loadConfig(options) {
-    const globalPath = join(options.configDir, 'config.json');
+    const globalPath = join(options.configDir, "config.json");
     mkdirSync(options.configDir, { recursive: true });
     const detector = new MigrationDetector(options.configDir);
     if (detector.needsMigration()) {
         const backup = new BackupManager(options.configDir);
         backup.backupConfig();
         const summary = backup.getBackupSummary();
-        console.log(t('migration.detected', { summary }));
+        console.log(t("migration.detected", { summary }));
         try {
             unlinkSync(globalPath);
         }
@@ -158,7 +172,7 @@ export function loadConfig(options) {
     }
     catch (e) {
         // If decryption fails, log a warning but continue with the config
-        console.warn(t('config.decryption_warning', { error: e.message }));
+        console.warn(t("config.decryption_warning", { error: e.message }));
     }
     // Update global audit notifier with config (done in bootstrap.ts)
     return config;
@@ -166,7 +180,7 @@ export function loadConfig(options) {
 export function validateConfig(config, allToolTags) {
     const errors = validateExpertConfig(config, allToolTags);
     if (errors.length > 0) {
-        throw new Error(`Config validation failed:\n${errors.join('\n')}`);
+        throw new Error(`Config validation failed:\n${errors.join("\n")}`);
     }
 }
 export function saveConfig(config, configPath) {
@@ -175,12 +189,14 @@ export function saveConfig(config, configPath) {
     // Encrypt sensitive fields before saving
     try {
         const encryptor = new ConfigEncryptor();
-        const encryptedConfig = encryptor.encrypt({ ...config });
-        writeFileSync(configPath, JSON.stringify(encryptedConfig, regexReplacer, 2), 'utf-8');
+        const encryptedConfig = encryptor.encrypt({
+            ...config,
+        });
+        writeFileSync(configPath, JSON.stringify(encryptedConfig, regexReplacer, 2), "utf-8");
     }
     catch (e) {
         // If encryption fails, save without encryption
-        console.warn(t('config.encryption_warning', { error: e.message }));
-        writeFileSync(configPath, JSON.stringify(config, regexReplacer, 2), 'utf-8');
+        console.warn(t("config.encryption_warning", { error: e.message }));
+        writeFileSync(configPath, JSON.stringify(config, regexReplacer, 2), "utf-8");
     }
 }

package/dist/config/defaults.js

@@ -1,4 +1,5 @@
 import { DEFAULT_SECURITY_CONFIG } from "./security";
+import { DEFAULT_LSP_CONFIG } from "../modules/lsp/config";
 export const DEFAULTS = {
     version: "2.0.0",
     model: "qwen3.5-9b",
@@ -49,7 +50,7 @@ export const DEFAULTS = {
         maxDelay: 30000,
     },
     maxToolIterations: 1000,
-    stuckThreshold: 8,
+    stuckThreshold: 6,
     autoPlan: true,
     showReasoning: false,
     logLevel: "info",
@@ -69,6 +70,10 @@ export const DEFAULTS = {
     },
     ui: {
         spinner: true,
+        toolStyle: "inline",
+        toolComments: true,
+        showContextStats: false,
+        showCompaction: true,
     },
     mcpServers: {
         context7: {
@@ -88,4 +93,8 @@ export const DEFAULTS = {
         isolatePlugins: true,
         isolateTempFiles: true,
     },
+    skills: {
+        budget: 0.15,
+    },
+    lsp: DEFAULT_LSP_CONFIG,
 };

package/dist/config/security.js

@@ -3,7 +3,9 @@
  * These settings provide a balance between security and usability.
  */
 export const DEFAULT_SECURITY_CONFIG = {
+    enabled: false,
     bash: {
+        enabled: false,
         // Commands that are always blocked (dangerous)
         blacklist: [
             "rm",
@@ -74,6 +76,7 @@ export const DEFAULT_SECURITY_CONFIG = {
         dangerousOperators: [">", ">>", "2>", "2>>", "`"],
     },
     paths: {
+        enabled: false,
         // Glob patterns for paths that are always denied
         denied: [
             ".git/",
@@ -95,6 +98,7 @@ export const DEFAULT_SECURITY_CONFIG = {
         allowed: [],
     },
     network: {
+        enabled: false,
         // Domains that are always denied
         deniedDomains: ["localhost", "127.0.0.1", "::1"],
         // If allowedDomains is non-empty, only these domains are allowed
@@ -115,7 +119,7 @@ export const DEFAULT_SECURITY_CONFIG = {
     },
     // Content scanning settings
     contentScan: {
-        enabled: true,
+        enabled: false,
         // Patterns that are considered dangerous in file content
         dangerousPatterns: [
             /eval\(/,
@@ -142,12 +146,12 @@ export const DEFAULT_SECURITY_CONFIG = {
     // Audit notification settings
     auditNotifier: {
         enabled: false,
-        minSeverity: 'medium',
+        minSeverity: "medium",
         eventTypes: [
-            'security_block',
-            'bash_command',
-            'file_operation',
-            'network_request',
+            "security_block",
+            "bash_command",
+            "file_operation",
+            "network_request",
         ],
         maxRetries: 3,
         webhookTimeout: 5000,
@@ -159,6 +163,7 @@ export const DEFAULT_SECURITY_CONFIG = {
  */
 export function mergeSecurityConfig(userConfig) {
     return {
+        enabled: userConfig?.enabled ?? DEFAULT_SECURITY_CONFIG.enabled,
         bash: {
             ...DEFAULT_SECURITY_CONFIG.bash,
             ...userConfig?.bash,
@@ -171,8 +176,10 @@ export function mergeSecurityConfig(userConfig) {
             ...DEFAULT_SECURITY_CONFIG.network,
             ...userConfig?.network,
         },
-        maxRecursionDepth: userConfig?.maxRecursionDepth ?? DEFAULT_SECURITY_CONFIG.maxRecursionDepth,
-        maxFileOperations: userConfig?.maxFileOperations ?? DEFAULT_SECURITY_CONFIG.maxFileOperations,
+        maxRecursionDepth: userConfig?.maxRecursionDepth ??
+            DEFAULT_SECURITY_CONFIG.maxRecursionDepth,
+        maxFileOperations: userConfig?.maxFileOperations ??
+            DEFAULT_SECURITY_CONFIG.maxFileOperations,
         rateLimits: {
             ...DEFAULT_SECURITY_CONFIG.rateLimits,
             ...userConfig?.rateLimits,

package/dist/core/agent-moe.js

@@ -64,18 +64,30 @@ export async function runWithMoE(deps, input, fallback, opts = {}) {
     ];
     const verification = await verifier.verifyMoEManifest(plan, config, knownTags);
     onPhase?.("thinking");
-    const verifyResult = await orchestrator.verifyAndMerge({
-        plan,
-        results: planResults.results.map((r) => ({
-            subtaskId: r.subtaskId,
-            success: r.success,
-            summary: r.summary,
-            result: r.result,
-            error: r.error,
-        })),
-        verifierErrors: verification.errors,
-        verifierWarnings: verification.warnings,
-    });
+    let verifyResult;
+    try {
+        verifyResult = await orchestrator.verifyAndMerge({
+            plan,
+            results: planResults.results.map((r) => ({
+                subtaskId: r.subtaskId,
+                success: r.success,
+                summary: r.summary,
+                result: r.result,
+                error: r.error,
+            })),
+            verifierErrors: verification.errors,
+            verifierWarnings: verification.warnings,
+        });
+    }
+    catch (err) {
+        onPhase?.("done");
+        return {
+            success: false,
+            text: `MoE verifyAndMerge crashed: ${err.message}`,
+            error: err.message,
+            iterationCount: 0,
+        };
+    }
     onPhase?.("done");
     const outputLines = [`## MoE Execution Results\n`];
     for (const r of planResults.results) {