nexrall-code 0.5.55 → 0.5.57

package/dist/index.js

@@ -15375,6 +15375,63 @@ var require_rules = __commonJS({
   }
 });
 
+// ../core/dist/permissions/bashClassify.js
+var require_bashClassify = __commonJS({
+  "../core/dist/permissions/bashClassify.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.bashNeedsRepoLock = bashNeedsRepoLock;
+    var MUTATING_BASH_VERBS = /* @__PURE__ */ new Set([
+      "git",
+      "npm",
+      "pnpm",
+      "yarn",
+      "bun",
+      "cargo",
+      "go",
+      "pip",
+      "pip3",
+      "poetry",
+      "uv",
+      "bundle",
+      "composer",
+      "gradle",
+      "mvn",
+      "make",
+      "terraform",
+      "helm",
+      "docker",
+      "vsce",
+      "tsc",
+      "pytest",
+      "dotnet",
+      "swift",
+      "gem"
+    ]);
+    function bashNeedsRepoLock(command) {
+      if (!command)
+        return false;
+      const segments = command.split(/\|\||&&|[;|&\n()]|\$\(/);
+      for (const seg of segments) {
+        for (const tokenRaw of seg.trim().split(/\s+/)) {
+          const token = tokenRaw.replace(/^["']|["']$/g, "");
+          if (!token)
+            continue;
+          if (/^[A-Za-z_][A-Za-z0-9_]*=/.test(token))
+            continue;
+          if (token === "sudo" || token === "time" || token === "nice" || token === "env")
+            continue;
+          const verb = token.split("/").pop() ?? token;
+          if (MUTATING_BASH_VERBS.has(verb))
+            return true;
+          break;
+        }
+      }
+      return false;
+    }
+  }
+});
+
 // ../core/dist/agent/planMode.js
 var require_planMode = __commonJS({
   "../core/dist/agent/planMode.js"(exports) {
@@ -15897,12 +15954,15 @@ var require_loop = __commonJS({
       };
     }();
     Object.defineProperty(exports, "__esModule", { value: true });
-    exports.VERIFY_CMD_RE = exports.WRITE_TOOL_NAMES = exports.ToolNotAllowedError = exports.AGENT_MEMORY_TOOL_SCHEMA = exports.AGENT_MEMORY_TOOL = exports._stallLimits = void 0;
+    exports.VERIFY_CMD_RE = exports.WRITE_TOOL_NAMES = exports.ToolNotAllowedError = exports.AGENT_MEMORY_TOOL_SCHEMA = exports.AGENT_MEMORY_TOOL = exports._stallLimits = exports.bashNeedsRepoLock = void 0;
     exports.errorRoundSignature = errorRoundSignature;
     exports.executeAgentMemoryWrite = executeAgentMemoryWrite;
     exports.stopReasonNotice = stopReasonNotice;
     exports.resolveMaxIterations = resolveMaxIterations;
+    exports.lockPathsFor = lockPathsFor;
+    exports.resolveMaxConcurrentSubtasks = resolveMaxConcurrentSubtasks;
     exports.createLimiter = createLimiter;
+    exports._resetSubTaskLimiter = _resetSubTaskLimiter;
     exports.resolveSubtaskTimeoutMs = resolveSubtaskTimeoutMs;
     exports.extractSubTaskText = extractSubTaskText;
     exports.capSubTaskText = capSubTaskText;
@@ -15928,6 +15988,10 @@ var require_loop = __commonJS({
     var agentTypes_1 = require_agentTypes();
     var skills_1 = require_skills();
     var rules_1 = require_rules();
+    var bashClassify_1 = require_bashClassify();
+    Object.defineProperty(exports, "bashNeedsRepoLock", { enumerable: true, get: function() {
+      return bashClassify_1.bashNeedsRepoLock;
+    } });
     var planMode_1 = require_planMode();
     var agentRegistry_1 = require_agentRegistry();
     var sandbox_1 = require_sandbox();
@@ -16144,10 +16208,41 @@ ${ctx.repeatError}
           _fileLocks.delete(absPath);
       }
     }
-    var MAX_CONCURRENT_SUBTASKS = (() => {
-      const raw = Number(process.env.NEXRALL_MAX_CONCURRENT_SUBTASKS);
-      return Number.isFinite(raw) && raw > 0 ? Math.floor(raw) : 4;
-    })();
+    async function withFileLocks(absPaths, fn) {
+      const unique = [...new Set(absPaths.filter(Boolean))].sort();
+      if (unique.length === 0)
+        return fn();
+      const [first, ...rest] = unique;
+      return withFileLock(first, () => rest.length ? withFileLocks(rest, fn) : fn());
+    }
+    var WRITE_TOOLS = /* @__PURE__ */ new Set([
+      "write_file",
+      "edit_file",
+      "multi_edit",
+      "delete_file",
+      "move_file",
+      "copy_file",
+      "notebook_edit"
+    ]);
+    var REPO_STATE_LOCK = "\0repo-state";
+    function lockPathsFor(name, input, workDir) {
+      if (!WRITE_TOOLS.has(name))
+        return [];
+      const raw = [input.path, input.source, input.destination, input.dest].filter((p) => typeof p === "string" && p.length > 0);
+      const abs = raw.map((p) => workDir ? path6.resolve(workDir, p) : p);
+      return abs.length ? abs : [name];
+    }
+    var DEFAULT_MAX_CONCURRENT_SUBTASKS = 4;
+    function resolveMaxConcurrentSubtasks(settingsRaw = {}) {
+      const clamp = (n) => Math.min(Math.floor(n), 16);
+      const fromEnv = Number(process.env.NEXRALL_MAX_CONCURRENT_SUBTASKS);
+      if (Number.isFinite(fromEnv) && fromEnv > 0)
+        return clamp(fromEnv);
+      const fromSettings = Number(settingsRaw.maxConcurrentSubtasks);
+      if (Number.isFinite(fromSettings) && fromSettings > 0)
+        return clamp(fromSettings);
+      return DEFAULT_MAX_CONCURRENT_SUBTASKS;
+    }
     function createLimiter(max) {
       let active = 0;
       const queue = [];
@@ -16166,7 +16261,20 @@ ${ctx.repeatError}
         }
       };
     }
-    var _subTaskLimit = createLimiter(MAX_CONCURRENT_SUBTASKS);
+    var _subTaskLimitInstance = null;
+    var _subTaskLimitMax = 0;
+    var _inFlightSubTasks = 0;
+    function subTaskLimiter(workDir) {
+      if (!_subTaskLimitInstance) {
+        _subTaskLimitMax = resolveMaxConcurrentSubtasks(workDir ? (0, rules_1.loadSettings)(workDir).raw : {});
+        _subTaskLimitInstance = createLimiter(_subTaskLimitMax);
+      }
+      return { run: _subTaskLimitInstance, max: _subTaskLimitMax };
+    }
+    function _resetSubTaskLimiter() {
+      _subTaskLimitInstance = null;
+      _subTaskLimitMax = 0;
+    }
     function humanDescription(name, input) {
       switch (name) {
         case "read_file":
@@ -17255,7 +17363,20 @@ ${options.nexrallMd}` : "") : options.nexrallMd;
             if (!permitted) {
               result = { error: deniedReason ?? "Permission denied by user" };
             } else if (name === "task") {
-              result = depth === 0 ? await _subTaskLimit(() => runSubTask(input, options, agentTypes)) : await runSubTask(input, options, agentTypes);
+              if (depth === 0) {
+                const { run: limitRun, max: limitMax } = subTaskLimiter(options.workDir);
+                if (_inFlightSubTasks >= limitMax) {
+                  (options.onNotice ?? options.onText)(`\u23F3 Queued: ${limitMax} sub-agents are already running, so this one starts when a slot frees up (raise "maxConcurrentSubtasks" in .nexrall/settings.json to widen it).`);
+                }
+                _inFlightSubTasks++;
+                try {
+                  result = await limitRun(() => runSubTask(input, options, agentTypes));
+                } finally {
+                  _inFlightSubTasks--;
+                }
+              } else {
+                result = await runSubTask(input, options, agentTypes);
+              }
             } else {
               const pre = runToolHooks(hooks.PreToolUse, "PreToolUse", name, input, options.workDir);
               if (pre.block) {
@@ -17275,15 +17396,10 @@ ${options.nexrallMd}` : "") : options.nexrallMd;
                     result = { output: mcpOutput ?? "" };
                   } else {
                     options.checkpointManager?.recordBeforeMutation(name, input);
-                    const WRITE_TOOLS = /* @__PURE__ */ new Set(["write_file", "edit_file", "multi_edit", "delete_file", "move_file", "copy_file", "notebook_edit"]);
                     const onStream = options.onToolStreamChunk ? (chunk) => options.onToolStreamChunk(name, chunk) : void 0;
-                    if (WRITE_TOOLS.has(name)) {
-                      const targetPath = typeof input.path === "string" ? input.path : typeof input.source === "string" ? input.source : "";
-                      const absTarget = targetPath && options.workDir ? path6.resolve(options.workDir, targetPath) : targetPath;
-                      result = await withFileLock(absTarget || name, () => (0, executor_1.executeTool)(name, input, options.abortSignal, sandboxCfg, options.workDir, agentScope, onStream));
-                    } else {
-                      result = await (0, executor_1.executeTool)(name, input, options.abortSignal, sandboxCfg, options.workDir, agentScope, onStream);
-                    }
+                    const run = () => (0, executor_1.executeTool)(name, input, options.abortSignal, sandboxCfg, options.workDir, agentScope, onStream);
+                    const locks = name === "bash" ? (0, bashClassify_1.bashNeedsRepoLock)(String(input.command ?? "")) ? [REPO_STATE_LOCK] : [] : lockPathsFor(name, input, options.workDir);
+                    result = locks.length ? await withFileLocks(locks, run) : await run();
                   }
                 } catch (err) {
                   result = { error: `Tool execution failed: ${err.message}` };
@@ -18512,6 +18628,95 @@ var require_manager2 = __commonJS({
   }
 });
 
+// ../core/dist/permissions/modePolicy.js
+var require_modePolicy = __commonJS({
+  "../core/dist/permissions/modePolicy.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.BASH_TOOLS = exports.FILE_MUTATE_TOOLS = exports.FILE_WRITE_TOOLS = exports.READ_ONLY_TOOLS = void 0;
+    exports.isReadOnlyBash = isReadOnlyBash;
+    exports.decide = decide;
+    exports.describeMode = describeMode2;
+    exports.parseMode = parseMode2;
+    var bashClassify_1 = require_bashClassify();
+    exports.READ_ONLY_TOOLS = /* @__PURE__ */ new Set([
+      "read_file",
+      "list_directory",
+      "search_files",
+      "glob",
+      "grep",
+      "fetch_url",
+      "web_search",
+      "bash_output",
+      "kill_shell",
+      "todo_read",
+      "todo_write",
+      "memory_read",
+      "use_skill",
+      "notebook_read",
+      "get_diagnostics",
+      "go_to_definition",
+      "find_references",
+      "get_symbols",
+      "get_workspace_symbols",
+      "get_hover"
+    ]);
+    exports.FILE_WRITE_TOOLS = /* @__PURE__ */ new Set([
+      "write_file",
+      "create_file",
+      "edit_file",
+      "multi_edit",
+      "notebook_edit"
+    ]);
+    exports.FILE_MUTATE_TOOLS = /* @__PURE__ */ new Set([
+      "delete_file",
+      "move_file",
+      "copy_file"
+    ]);
+    exports.BASH_TOOLS = /* @__PURE__ */ new Set(["bash", "run_command", "execute_command"]);
+    function isReadOnlyBash(command) {
+      return !(0, bashClassify_1.bashNeedsRepoLock)(command);
+    }
+    function decide(req) {
+      const { tool, mode } = req;
+      const command = String(req.input.command ?? req.input.cmd ?? "");
+      if (exports.READ_ONLY_TOOLS.has(tool))
+        return "allow";
+      if (exports.BASH_TOOLS.has(tool) && isReadOnlyBash(command) && !req.destructive)
+        return "allow";
+      if (req.destructive)
+        return "confirm";
+      if (mode === "plan")
+        return "deny";
+      if (req.bypass)
+        return "allow";
+      if (exports.FILE_WRITE_TOOLS.has(tool) || exports.FILE_MUTATE_TOOLS.has(tool)) {
+        return mode === "ask" ? "ask" : "allow";
+      }
+      if (exports.BASH_TOOLS.has(tool)) {
+        return mode === "auto" ? "allow" : "ask";
+      }
+      return "ask";
+    }
+    function describeMode2(mode) {
+      switch (mode) {
+        case "plan":
+          return "plan \u2014 read-only, produces a plan for approval";
+        case "ask":
+          return "ask \u2014 approves reads; asks before edits and commands";
+        case "edit":
+          return "edit \u2014 edits files freely; asks before shell commands";
+        case "auto":
+          return "auto \u2014 edits and runs commands; still confirms irreversible actions";
+      }
+    }
+    function parseMode2(raw) {
+      const s2 = String(raw ?? "").trim().toLowerCase();
+      return s2 === "plan" || s2 === "ask" || s2 === "edit" || s2 === "auto" ? s2 : "ask";
+    }
+  }
+});
+
 // ../core/dist/permissions/destructive.js
 var require_destructive = __commonJS({
   "../core/dist/permissions/destructive.js"(exports) {
@@ -19274,6 +19479,8 @@ var require_dist2 = __commonJS({
     __exportStar(require_planMode(), exports);
     __exportStar(require_agentRegistry(), exports);
     __exportStar(require_rules(), exports);
+    __exportStar(require_modePolicy(), exports);
+    __exportStar(require_bashClassify(), exports);
     __exportStar(require_destructive(), exports);
     __exportStar(require_plugins(), exports);
     __exportStar(require_installer(), exports);
@@ -53599,7 +53806,7 @@ var chalkStderr = createChalk({ level: stderrColor ? stderrColor.level : 0 });
 var source_default = chalk;
 
 // src/index.ts
-var import_code_core5 = __toESM(require_dist2(), 1);
+var import_code_core6 = __toESM(require_dist2(), 1);
 
 // src/commands/auth.ts
 import * as readline from "readline";
@@ -54686,14 +54893,14 @@ var import_code_core2 = __toESM(require_dist2(), 1);
 var autoApproved = /* @__PURE__ */ new Set();
 var _rules = { allow: [], ask: [], deny: [] };
 var _workDir = process.cwd();
-var _mode = "auto";
+var _mode = "ask";
 function initPermissions(workDir) {
   _workDir = workDir;
   _rules = (0, import_code_core2.loadSettings)(workDir).permissions;
   return _rules;
 }
 function setMode(mode) {
-  _mode = mode || "auto";
+  _mode = (0, import_code_core2.parseMode)(mode);
 }
 function setAutoApprove(category) {
   autoApproved.add(category);
@@ -54708,22 +54915,30 @@ var _replInterface = null;
 function setReadlineInterface(rl) {
   _replInterface = rl;
 }
+var _promptChain = Promise.resolve();
+function serialisePrompt(fn) {
+  const next = _promptChain.then(fn, fn);
+  _promptChain = next.catch(() => void 0);
+  return next;
+}
 function askUser(question) {
-  if (_replInterface) {
-    const rl = _replInterface;
+  return serialisePrompt(() => {
+    if (_replInterface) {
+      const rl = _replInterface;
+      return new Promise((resolve3) => {
+        rl.question(question, (answer) => resolve3(answer.trim()));
+      });
+    }
     return new Promise((resolve3) => {
-      rl.question(question, (answer) => resolve3(answer.trim()));
-    });
-  }
-  return new Promise((resolve3) => {
-    const rl = readline2.createInterface({
-      input: process.stdin,
-      output: process.stderr,
-      terminal: true
-    });
-    rl.question(question, (answer) => {
-      rl.close();
-      resolve3(answer.trim());
+      const rl = readline2.createInterface({
+        input: process.stdin,
+        output: process.stderr,
+        terminal: true
+      });
+      rl.question(question, (answer) => {
+        rl.close();
+        resolve3(answer.trim());
+      });
     });
   });
 }
@@ -54752,31 +54967,18 @@ async function requestPermission(req) {
   }
   if (decision === "allow")
     return true;
-  const readOnlyTools = [
-    "read_file",
-    "list_directory",
-    "search_files",
-    "fetch_url",
-    "glob",
-    "bash_output",
-    "kill_shell",
-    "todo_read",
-    "todo_write",
-    "memory_read",
-    "memory_write",
-    "use_skill",
-    "notebook_read",
-    "get_diagnostics",
-    "go_to_definition",
-    "find_references",
-    "get_symbols",
-    "get_workspace_symbols",
-    "get_hover",
-    "open_in_browser"
-  ];
-  if (readOnlyTools.includes(tool))
+  const verdict = (0, import_code_core2.decide)({
+    tool,
+    input,
+    mode: _mode,
+    bypass: isAutoApproved("all"),
+    // The destructive case was already handled above with the strong confirm flow
+    // (type "yes", no "approve all"), so it must not be re-triggered here.
+    destructive: false
+  });
+  if (verdict === "allow")
     return true;
-  if (_mode === "plan") {
+  if (verdict === "deny") {
     console.error(source_default.yellow(`  \u2298 Plan mode \u2014 refused ${tool} (read-only until you switch mode).`));
     return false;
   }
@@ -54926,6 +55128,9 @@ async function requestPermission(req) {
   return answer === "y" || answer === "yes";
 }
 
+// src/commands/chat.ts
+var import_code_core4 = __toESM(require_dist2(), 1);
+
 // src/commands/sessions.ts
 import * as fs3 from "fs";
 import * as path from "path";
@@ -64349,7 +64554,7 @@ var InkReadlineAdapter = class extends EventEmitter3 {
 };
 
 // src/commands/chat.ts
-var CLI_VERSION = "0.5.55";
+var CLI_VERSION = "0.5.57";
 var MODEL_LABELS = {
   turbo: "Nexrall Turbo",
   pro: "Nexrall Pro",
@@ -65412,11 +65617,15 @@ ${dirList}`;
         case "/mode": {
           const modeArg = arg.toLowerCase();
           if (!modeArg) {
-            console.log(source_default.dim(`  Current: ${source_default.cyan(agentMode)}  Options: ask \xB7 edit \xB7 plan \xB7 auto`));
+            console.log(source_default.dim(`  Current: ${source_default.cyan(agentMode)}`));
+            for (const m2 of ["ask", "edit", "auto", "plan"]) {
+              const marker = m2 === agentMode ? source_default.cyan("\u276F") : " ";
+              console.log(`  ${marker} ${source_default.bold(m2.padEnd(5))} ${source_default.dim((0, import_code_core4.describeMode)(m2).replace(`${m2} \u2014 `, ""))}`);
+            }
           } else if (["ask", "edit", "plan", "auto"].includes(modeArg)) {
             agentMode = modeArg;
             updateFooter();
-            console.log(source_default.green(`  Mode \u2192 ${source_default.bold(modeArg)}`));
+            console.log(source_default.green(`  Mode \u2192 ${source_default.bold(modeArg)}`) + source_default.dim(`  ${(0, import_code_core4.describeMode)(modeArg).replace(`${modeArg} \u2014 `, "")}`));
           } else {
             console.log(source_default.red(`  Unknown: ${modeArg}`));
           }
@@ -65706,7 +65915,7 @@ ${caption}` : `[Attached: ${rel}]`;
 
 // src/commands/plugin.ts
 var import_prompts = __toESM(require_prompts3(), 1);
-var import_code_core4 = __toESM(require_dist2(), 1);
+var import_code_core5 = __toESM(require_dist2(), 1);
 function describeInspection(i2, name, ctx) {
   console.log();
   console.log(source_default.bold(`  Plugin: ${name}`) + (i2.meta.version ? source_default.dim(`  v${i2.meta.version}`) : ""));
@@ -65782,14 +65991,14 @@ async function pluginInstallCommand(spec, opts) {
     let registryName;
     const isShortName = /^[\w.-]+$/.test(spec.trim()) && !spec.includes("/");
     if (isShortName) {
-      const alias = (0, import_code_core4.resolveSourceAlias)(spec.trim(), process.cwd(), { includeProject: true });
+      const alias = (0, import_code_core5.resolveSourceAlias)(spec.trim(), process.cwd(), { includeProject: true });
       if (alias) {
         source2 = alias.spec;
         console.log(source_default.dim(`  Source: ${alias.name} (${alias.tier}) \u2190 ${alias.spec}`));
       }
     }
     if (isShortName && source2 === spec) {
-      const entry = await (0, import_code_core4.getRegistryPlugin)(spec.trim()).catch(() => null);
+      const entry = await (0, import_code_core5.getRegistryPlugin)(spec.trim()).catch(() => null);
       if (entry) {
         source2 = entry.source;
         registryName = entry.name;
@@ -65804,7 +66013,7 @@ async function pluginInstallCommand(spec, opts) {
         return;
       }
     }
-    const res = await (0, import_code_core4.installPlugin)(source2, {
+    const res = await (0, import_code_core5.installPlugin)(source2, {
       scope,
       workDir: process.cwd(),
       name: opts.name ?? registryName,
@@ -65812,7 +66021,7 @@ async function pluginInstallCommand(spec, opts) {
       confirm: (i2, name, ctx) => confirmInstall(i2, name, opts.yes === true, ctx)
     });
     if (registryName)
-      (0, import_code_core4.reportInstall)(registryName);
+      (0, import_code_core5.reportInstall)(registryName);
     console.log();
     console.log(source_default.green(`  \u2713 Installed "${res.name}" (${res.scope}) \u2192 ${res.dir}`) + (res.sha ? source_default.dim(`  @ ${res.sha.slice(0, 7)}`) : ""));
     if (res.inspection.commands.length) {
@@ -65826,7 +66035,7 @@ async function pluginInstallCommand(spec, opts) {
 }
 function pluginRemoveCommand(name, opts) {
   try {
-    const dir = (0, import_code_core4.removePlugin)(name, {
+    const dir = (0, import_code_core5.removePlugin)(name, {
       scope: opts.project ? "project" : void 0,
       // no flag → search both scopes
       workDir: process.cwd()
@@ -65839,14 +66048,14 @@ function pluginRemoveCommand(name, opts) {
 }
 async function pluginUpdateCommand(name, opts) {
   const workDir = process.cwd();
-  const targets = name ? [name] : (0, import_code_core4.loadPlugins)(workDir).filter((p) => (0, import_code_core4.readReceipt)(p.dir)?.kind === "github").map((p) => p.name);
+  const targets = name ? [name] : (0, import_code_core5.loadPlugins)(workDir).filter((p) => (0, import_code_core5.readReceipt)(p.dir)?.kind === "github").map((p) => p.name);
   if (!targets.length) {
     console.log(source_default.dim("  No updatable plugins (only GitHub-installed plugins with receipts can update)."));
     return;
   }
   for (const t2 of targets) {
     try {
-      const res = await (0, import_code_core4.updatePlugin)(t2, {
+      const res = await (0, import_code_core5.updatePlugin)(t2, {
         workDir,
         confirm: (i2, n, ctx) => confirmInstall(i2, n, opts.yes === true, ctx)
       });
@@ -65863,7 +66072,7 @@ function badgeFor(p) {
 }
 async function pluginSearchCommand(query) {
   try {
-    const results = await (0, import_code_core4.searchRegistry)(query);
+    const results = await (0, import_code_core5.searchRegistry)(query);
     if (!results.length) {
       console.log(source_default.dim(query ? `  No plugins matching "${query}".` : "  Registry is empty."));
       return;
@@ -65886,7 +66095,7 @@ async function pluginSearchCommand(query) {
 }
 async function pluginInfoCommand(name) {
   try {
-    const p = await (0, import_code_core4.getRegistryPlugin)(name);
+    const p = await (0, import_code_core5.getRegistryPlugin)(name);
     if (!p) {
       console.error(source_default.red(`  \u2717 "${name}" not found in the registry.`));
       process.exitCode = 1;
@@ -65922,7 +66131,7 @@ async function pluginInfoCommand(name) {
   }
 }
 function pluginListCommand() {
-  const plugins = (0, import_code_core4.loadPlugins)(process.cwd());
+  const plugins = (0, import_code_core5.loadPlugins)(process.cwd());
   if (!plugins.length) {
     console.log(source_default.dim("  No plugins installed."));
     console.log(source_default.dim("  Install one:  nex plugin install owner/repo"));
@@ -65931,10 +66140,10 @@ function pluginListCommand() {
   console.log();
   console.log(source_default.bold("  Installed plugins:"));
   for (const p of plugins) {
-    const receipt = (0, import_code_core4.readReceipt)(p.dir);
+    const receipt = (0, import_code_core5.readReceipt)(p.dir);
     const src = receipt ? source_default.dim(`  \u2190 ${receipt.source}`) : source_default.dim("  (manual)");
     const at = receipt?.sha ? source_default.dim(` @ ${receipt.sha.slice(0, 7)}`) : "";
-    const insp = (0, import_code_core4.inspectPluginDir)(p.dir);
+    const insp = (0, import_code_core5.inspectPluginDir)(p.dir);
     const runs = insp.hasHooks || insp.hasMcp ? source_default.yellow(`  \u26A0 ${[insp.hasHooks && "hooks", insp.hasMcp && "mcp"].filter(Boolean).join("+")}`) : "";
     console.log(
       "  " + source_default.cyan(p.name.padEnd(24)) + source_default.dim(`${(p.version ?? "").padEnd(10)}${p.scope.padEnd(9)}`) + src + at + runs
@@ -65944,8 +66153,8 @@ function pluginListCommand() {
 }
 function pluginSourceListCommand() {
   const workDir = process.cwd();
-  const sources = (0, import_code_core4.loadDeclaredSources)(workDir, { includeProject: true });
-  const patterns = (0, import_code_core4.allowedSourcePatterns)();
+  const sources = (0, import_code_core5.loadDeclaredSources)(workDir, { includeProject: true });
+  const patterns = (0, import_code_core5.allowedSourcePatterns)();
   if (patterns) {
     console.log();
     console.log(source_default.bold("  Organisation policy: ") + source_default.dim(`installs restricted to ${patterns.join(", ")}`));
@@ -65960,7 +66169,7 @@ function pluginSourceListCommand() {
   console.log(source_default.bold("  Declared plugin sources:"));
   for (const s2 of sources) {
     const tier = s2.tier === "project" ? source_default.yellow(s2.tier.padEnd(9)) : source_default.dim(s2.tier.padEnd(9));
-    const blocked = !(0, import_code_core4.isSourceAllowed)(s2.spec, patterns) ? source_default.red("  \u2717 blocked by policy") : "";
+    const blocked = !(0, import_code_core5.isSourceAllowed)(s2.spec, patterns) ? source_default.red("  \u2717 blocked by policy") : "";
     console.log("  " + source_default.cyan(s2.name.padEnd(20)) + tier + source_default.white(s2.spec) + blocked);
   }
   console.log();
@@ -65970,17 +66179,17 @@ function pluginSourceListCommand() {
 }
 function pluginSourceAddCommand(name, spec, opts) {
   try {
-    (0, import_code_core4.parsePluginSource)(spec);
-    const patterns = (0, import_code_core4.allowedSourcePatterns)();
-    if (patterns && !(0, import_code_core4.isSourceAllowed)(spec, patterns)) {
+    (0, import_code_core5.parsePluginSource)(spec);
+    const patterns = (0, import_code_core5.allowedSourcePatterns)();
+    if (patterns && !(0, import_code_core5.isSourceAllowed)(spec, patterns)) {
       console.error(source_default.red(`  \u2717 "${spec}" is not permitted by your organisation's policy.`));
       console.error(source_default.dim(`    Allowed: ${patterns.join(", ")}`));
       process.exitCode = 1;
       return;
     }
     const scope = opts.project ? "project" : "user";
-    const file = (0, import_code_core4.sourcesFileFor)(scope, process.cwd());
-    (0, import_code_core4.writeDeclaredSource)(file, name, spec);
+    const file = (0, import_code_core5.sourcesFileFor)(scope, process.cwd());
+    (0, import_code_core5.writeDeclaredSource)(file, name, spec);
     console.log();
     console.log(source_default.green(`  \u2713 Declared "${name}" \u2192 ${spec}`) + source_default.dim(`  (${scope})`));
     console.log(source_default.dim(`    ${file}`));
@@ -65994,13 +66203,13 @@ function pluginSourceAddCommand(name, spec, opts) {
 function pluginSourceRemoveCommand(name, opts) {
   const workDir = process.cwd();
   const scope = opts.project ? "project" : "user";
-  const file = (0, import_code_core4.sourcesFileFor)(scope, workDir);
-  if ((0, import_code_core4.removeDeclaredSource)(file, name)) {
+  const file = (0, import_code_core5.sourcesFileFor)(scope, workDir);
+  if ((0, import_code_core5.removeDeclaredSource)(file, name)) {
     console.log(source_default.green(`  \u2713 Removed source "${name}" (${scope})`));
     console.log(source_default.dim("    Plugins already installed from it are untouched \u2014 remove them with  nex plugin remove <name>"));
     return;
   }
-  const found = (0, import_code_core4.resolveSourceAlias)(name, workDir, { includeProject: true });
+  const found = (0, import_code_core5.resolveSourceAlias)(name, workDir, { includeProject: true });
   if (found) {
     console.error(source_default.red(`  \u2717 "${name}" is declared in the ${found.tier} tier, not ${scope}.`));
     console.error(source_default.dim(`    ${found.file}`));
@@ -66016,7 +66225,7 @@ function pluginSourceRemoveCommand(name, opts) {
 
 // src/index.ts
 var program2 = new Command();
-program2.name("nex").description("Nexrall Code \u2014 AI coding assistant (powered by Nexrall)").version("0.5.55").enablePositionalOptions();
+program2.name("nex").description("Nexrall Code \u2014 AI coding assistant (powered by Nexrall)").version("0.5.57").enablePositionalOptions();
 program2.command("auth").description("Login to your Nexrall account").action(authCommand);
 program2.command("logout").description("Log out of your Nexrall account").action(logoutCommand);
 program2.command("update").description("Update nex to the latest version").option("-c, --check", "Check for updates without installing").option("-y, --yes", "Skip confirmation prompt").action(async (opts) => {
@@ -66088,7 +66297,7 @@ program2.command("sessions").description("List or delete saved chat sessions").o
   console.log();
 });
 program2.option("-p, --pro", "Use Nexrall Pro (Claude Opus, most capable)").option("-t, --turbo", "Use Nexrall Turbo (Claude Sonnet, fast)").option("-u, --ultra", "Use Ultra (Claude Fable 5, most powerful)").option("-y, --yolo", "Auto-approve all tool calls (no permission prompts)").option("-d, --dir <path>", "Set working directory (default: current directory)").option("-m, --model <name>", "Explicit model: turbo | pro | ultra").option("-r, --resume [id]", "Resume last session, or a specific session id").option("--no-banner", "Skip the ASCII banner (useful in scripts/pipes)").option("--output-format <fmt>", "One-shot output format: text | json | stream-json (implies auto-approve)").argument("[prompt...]", "One-shot prompt \u2014 if omitted, starts interactive mode").action(async (promptParts, options) => {
-  if (!(0, import_code_core5.isAuthenticated)()) {
+  if (!(0, import_code_core6.isAuthenticated)()) {
     console.error("Not logged in. Run: nex auth");
     process.exit(1);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nexrall-code",
-  "version": "0.5.55",
+  "version": "0.5.57",
   "description": "Nexrall Code — AI coding assistant for your terminal (headless agent for scripts, CI and automation)",
   "keywords": [
     "ai",
@@ -41,7 +41,7 @@
     "react": "^19.2.8",
     "readline": "^1.3.0",
     "string-width": "^7.2.0",
-    "@nexrall/code-core": "1.4.30"
+    "@nexrall/code-core": "1.4.32"
   },
   "devDependencies": {
     "@aws-sdk/client-s3": "^3.600.0",