micro-models-agent 0.49.0 → 0.49.1

package/dist/main.js

@@ -22205,6 +22205,31 @@ function buildSystemInfo(config, baseDir, profileCompressed) {
     lines.push(`Plan rule (MANDATORY): any task creating files, installing packages, or requiring multiple actions MUST create a plan with the "plan" tool BEFORE starting. Each step = a concrete deliverable.`);
   }
   lines.push(`Runtime verification: when a bug is described in terms of runtime behavior (what happens when the app runs), reproduce it — run the app / build / browser tool — and confirm the fix against actual runtime output before calling "plan update step=N status=done". Check existing servers first with process_list/process_log: a stale dev server started BEFORE your change still runs the old pipeline and keeps failing even after the files on disk are fixed. Restart or kill it (process_kill) and verify the exact endpoint/port the user reported — a fresh server on a new port does NOT prove the user's error is gone.`);
+  const sec = config.security;
+  if (sec?.enabled) {
+    const secLines = [`SECURITY RESTRICTIONS (enforced — blocked calls return "[SECURITY BLOCKED]", do not retry them):`];
+    if (sec.bash?.enabled && sec.bash.blacklist.length > 0) {
+      const cmds = sec.bash.blacklist.slice(0, 15).join(", ");
+      secLines.push(`Forbidden bash commands: ${cmds}${sec.bash.blacklist.length > 15 ? ", …" : ""}.`);
+      if (sec.bash.whitelist.length > 0) {
+        secLines.push(`Only whitelisted bash commands are allowed: ${sec.bash.whitelist.slice(0, 15).join(", ")}.`);
+      }
+      if (sec.bash.blockDangerousFlags) {
+        secLines.push(`Pipes/redirects/chaining (| > >> ; &&) in bash are blocked — one plain command per call.`);
+      }
+    }
+    if (sec.paths?.enabled && sec.paths.denied.length > 0) {
+      const paths = sec.paths.denied.slice(0, 10).join(", ");
+      secLines.push(`Denied paths (read/write): ${paths}${sec.paths.denied.length > 10 ? ", …" : ""}.`);
+    }
+    if (sec.network?.enabled && sec.network.deniedDomains.length > 0) {
+      const domains = sec.network.deniedDomains.slice(0, 10).join(", ");
+      secLines.push(`Denied network domains: ${domains}${sec.network.deniedDomains.length > 10 ? ", …" : ""}.`);
+    }
+    if (secLines.length > 1) {
+      lines.push(...secLines);
+    }
+  }
   const hasMCP = config.mcpServers && Object.values(config.mcpServers).some((s) => s.enabled !== false);
   if (hasMCP) {
     lines.push(`MCP servers are available — use the named MCP tools (prefixed mcp__) to query external services.`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "micro-models-agent",
-  "version": "0.49.0",
+  "version": "0.49.1",
   "description": "Micro Models Agent (MMA) — LLM agent harness for small models (Qwen3.5-9B, 32K-64K context)",
   "type": "module",
   "bin": {