nexrall-code 0.5.56 → 0.5.58

package/dist/index.js

@@ -9982,7 +9982,7 @@ var require_client = __commonJS({
     }
     var MAX_TOTAL_ATTEMPTS = (MAX_RETRIES + 1) * (MAX_RETRIES + 1);
     async function streamChat(messages, options, onEvent) {
-      const { model, env: env3, editorContext, nexrallMd, mode, effort, clientType, abortSignal, extraTools, agents, skills, allowRestartAfterRender, canWriteSharedMemory, hasOwnAgentStore } = options;
+      const { model, env: env3, editorContext, nexrallMd, mode, effort, clientType, abortSignal, extraTools, agents, skills, allowRestartAfterRender, canWriteSharedMemory, hasOwnAgentStore, canSpawnSubAgents } = options;
       let turnId = (0, crypto_1.randomUUID)();
       const controller = new AbortController();
       if (abortSignal?.aborted)
@@ -10023,7 +10023,7 @@ var require_client = __commonJS({
           {
             method: "POST",
             headers: authHeaders(),
-            body: JSON.stringify({ messages, model, env: env3, editorContext, nexrallMd, mode, effort, clientType, extraTools, agents, skills, turnId, canWriteSharedMemory, hasOwnAgentStore }),
+            body: JSON.stringify({ messages, model, env: env3, editorContext, nexrallMd, mode, effort, clientType, extraTools, agents, skills, turnId, canWriteSharedMemory, hasOwnAgentStore, canSpawnSubAgents }),
             signal: controller.signal
           }
         ];
@@ -15061,6 +15061,13 @@ var require_agentTypes = __commonJS({
               message: `lists unknown tool name(s): ${unknown.join(", ")}. An allowlist only grants, so these silently do nothing and the agent cannot use them. Tool names are lower_snake_case (read_file, search_files, glob, bash).`
             });
           }
+          if ((tools ?? []).includes("task")) {
+            warnings.push({
+              file: full,
+              agent: name,
+              message: "lists `task`, which cannot be granted: sub-agents are never sent that tool because they cannot spawn further sub-agents. Remove it \u2014 delegation stays with the main agent."
+            });
+          }
           const strayKeys = Object.keys(meta).filter((k) => !KNOWN_META_KEYS.has(k));
           if (strayKeys.length) {
             warnings.push({
@@ -15375,6 +15382,63 @@ var require_rules = __commonJS({
   }
 });
 
+// ../core/dist/permissions/bashClassify.js
+var require_bashClassify = __commonJS({
+  "../core/dist/permissions/bashClassify.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.bashNeedsRepoLock = bashNeedsRepoLock;
+    var MUTATING_BASH_VERBS = /* @__PURE__ */ new Set([
+      "git",
+      "npm",
+      "pnpm",
+      "yarn",
+      "bun",
+      "cargo",
+      "go",
+      "pip",
+      "pip3",
+      "poetry",
+      "uv",
+      "bundle",
+      "composer",
+      "gradle",
+      "mvn",
+      "make",
+      "terraform",
+      "helm",
+      "docker",
+      "vsce",
+      "tsc",
+      "pytest",
+      "dotnet",
+      "swift",
+      "gem"
+    ]);
+    function bashNeedsRepoLock(command) {
+      if (!command)
+        return false;
+      const segments = command.split(/\|\||&&|[;|&\n()]|\$\(/);
+      for (const seg of segments) {
+        for (const tokenRaw of seg.trim().split(/\s+/)) {
+          const token = tokenRaw.replace(/^["']|["']$/g, "");
+          if (!token)
+            continue;
+          if (/^[A-Za-z_][A-Za-z0-9_]*=/.test(token))
+            continue;
+          if (token === "sudo" || token === "time" || token === "nice" || token === "env")
+            continue;
+          const verb = token.split("/").pop() ?? token;
+          if (MUTATING_BASH_VERBS.has(verb))
+            return true;
+          break;
+        }
+      }
+      return false;
+    }
+  }
+});
+
 // ../core/dist/agent/planMode.js
 var require_planMode = __commonJS({
   "../core/dist/agent/planMode.js"(exports) {
@@ -15897,16 +15961,16 @@ var require_loop = __commonJS({
       };
     }();
     Object.defineProperty(exports, "__esModule", { value: true });
-    exports.VERIFY_CMD_RE = exports.WRITE_TOOL_NAMES = exports.ToolNotAllowedError = exports.AGENT_MEMORY_TOOL_SCHEMA = exports.AGENT_MEMORY_TOOL = exports._stallLimits = void 0;
+    exports.VERIFY_CMD_RE = exports.WRITE_TOOL_NAMES = exports.ToolNotAllowedError = exports.NO_NESTED_SUBAGENTS_MSG = exports.AGENT_MEMORY_TOOL_SCHEMA = exports.AGENT_MEMORY_TOOL = exports._stallLimits = exports.bashNeedsRepoLock = void 0;
     exports.errorRoundSignature = errorRoundSignature;
     exports.executeAgentMemoryWrite = executeAgentMemoryWrite;
     exports.stopReasonNotice = stopReasonNotice;
     exports.resolveMaxIterations = resolveMaxIterations;
-    exports.bashNeedsRepoLock = bashNeedsRepoLock;
     exports.lockPathsFor = lockPathsFor;
     exports.resolveMaxConcurrentSubtasks = resolveMaxConcurrentSubtasks;
     exports.createLimiter = createLimiter;
     exports._resetSubTaskLimiter = _resetSubTaskLimiter;
+    exports.canSpawnSubAgents = canSpawnSubAgents;
     exports.resolveSubtaskTimeoutMs = resolveSubtaskTimeoutMs;
     exports.extractSubTaskText = extractSubTaskText;
     exports.capSubTaskText = capSubTaskText;
@@ -15932,6 +15996,10 @@ var require_loop = __commonJS({
     var agentTypes_1 = require_agentTypes();
     var skills_1 = require_skills();
     var rules_1 = require_rules();
+    var bashClassify_1 = require_bashClassify();
+    Object.defineProperty(exports, "bashNeedsRepoLock", { enumerable: true, get: function() {
+      return bashClassify_1.bashNeedsRepoLock;
+    } });
     var planMode_1 = require_planMode();
     var agentRegistry_1 = require_agentRegistry();
     var sandbox_1 = require_sandbox();
@@ -16165,54 +16233,6 @@ ${ctx.repeatError}
       "notebook_edit"
     ]);
     var REPO_STATE_LOCK = "\0repo-state";
-    var MUTATING_BASH_VERBS = /* @__PURE__ */ new Set([
-      "git",
-      "npm",
-      "pnpm",
-      "yarn",
-      "bun",
-      "cargo",
-      "go",
-      "pip",
-      "pip3",
-      "poetry",
-      "uv",
-      "bundle",
-      "composer",
-      "gradle",
-      "mvn",
-      "make",
-      "terraform",
-      "helm",
-      "docker",
-      "vsce",
-      "tsc",
-      "pytest",
-      "dotnet",
-      "swift",
-      "gem"
-    ]);
-    function bashNeedsRepoLock(command) {
-      if (!command)
-        return false;
-      const segments = command.split(/\|\||&&|[;|&\n()]|\$\(/);
-      for (const seg of segments) {
-        for (const tokenRaw of seg.trim().split(/\s+/)) {
-          const token = tokenRaw.replace(/^["']|["']$/g, "");
-          if (!token)
-            continue;
-          if (/^[A-Za-z_][A-Za-z0-9_]*=/.test(token))
-            continue;
-          if (token === "sudo" || token === "time" || token === "nice" || token === "env")
-            continue;
-          const verb = token.split("/").pop() ?? token;
-          if (MUTATING_BASH_VERBS.has(verb))
-            return true;
-          break;
-        }
-      }
-      return false;
-    }
     function lockPathsFor(name, input, workDir) {
       if (!WRITE_TOOLS.has(name))
         return [];
@@ -16345,6 +16365,12 @@ ${ctx.repeatError}
       }
     }
     var MAX_TASK_DEPTH = 1;
+    exports.NO_NESTED_SUBAGENTS_MSG = "Sub-agents cannot spawn further sub-agents \u2014 this is a structural limit, not a permission, so no other agent type and no approval can lift it. Do this work directly with the tools you have, or report back so the main agent can delegate it.";
+    function canSpawnSubAgents(depth, allowedTools) {
+      if (depth >= MAX_TASK_DEPTH)
+        return false;
+      return allowedTools ? allowedTools.has("task") : true;
+    }
     var _subTaskCounter = 0;
     var DEFAULT_SUBTASK_TIMEOUT_MS = 10 * 60 * 1e3;
     function resolveSubtaskTimeoutMs(settingsRaw) {
@@ -16473,7 +16499,7 @@ ${body}`);
         return { error: "task tool requires a non-empty prompt" };
       const depth = options._depth ?? 0;
       if (depth >= MAX_TASK_DEPTH) {
-        return { error: "Sub-agents cannot spawn further sub-agents. Do this work directly, or report back so the main agent can delegate it." };
+        return { error: exports.NO_NESTED_SUBAGENTS_MSG };
       }
       const resumeId = typeof input.resume_agent_id === "string" ? input.resume_agent_id.trim() : "";
       const resumed = resumeId ? (0, agentRegistry_1.getAgent)(resumeId) : void 0;
@@ -16524,6 +16550,9 @@ ${inheritedMd}` : "") : options.nexrallMd;
         if (req.tool === exports.AGENT_MEMORY_TOOL && !(agent && memoryScope)) {
           throw new ToolNotAllowedError(`\`${exports.AGENT_MEMORY_TOOL}\` is only available to a sub-agent whose definition declares a \`memory:\` scope (project, user or local). Report anything worth remembering in your final message instead \u2014 the main agent decides what to persist.`);
         }
+        if (req.tool === "task") {
+          throw new ToolNotAllowedError(exports.NO_NESTED_SUBAGENTS_MSG);
+        }
         if (allowed && !allowed.has(req.tool)) {
           throw new ToolNotAllowedError(`The "${agent.name}" sub-agent is not allowed to use \`${req.tool}\` \u2014 it is not in that agent's tool allowlist. This is a restriction of the agent definition, NOT a user decision: do not ask for approval, use one of the tools you do have, or report back that the task needs a different agent.`);
         }
@@ -17058,7 +17087,8 @@ Continue the work from here.` }] });
       const agentScope = options._agentScope ?? "root";
       const settings = (0, rules_1.loadSettings)(options.workDir);
       const agentTypes = (0, agentTypes_1.loadAgentTypes)(options.workDir).filter((t2) => (0, rules_1.evaluatePermission)(settings.permissions, "task", { subagent_type: t2.name }, options.workDir) !== "deny");
-      const agentsCatalogue = depth === 0 ? (0, agentTypes_1.summariseAgents)(agentTypes) : "";
+      const maySpawn = canSpawnSubAgents(depth, options._allowedTools);
+      const agentsCatalogue = maySpawn ? (0, agentTypes_1.summariseAgents)(agentTypes) : "";
       const skillsCatalogue = (0, skills_1.summariseSkills)((0, skills_1.loadSkills)(options.workDir));
       const planAwareNexrallMd = options.planMode ? planMode_1.PLAN_MODE_INSTRUCTIONS + (options.nexrallMd ? `
 
@@ -17208,6 +17238,9 @@ ${options.nexrallMd}` : "") : options.nexrallMd;
               canWriteSharedMemory: options._allowedTools ? options._allowedTools.has("memory_write") : true,
               // no allowlist = main agent = may write
               hasOwnAgentStore: !!options._agentMemory,
+              // Withholds the `task` schema and its instructions when this run cannot
+              // delegate — see canSpawnSubAgents.
+              canSpawnSubAgents: maySpawn,
               agents: agentsCatalogue || void 0,
               skills: skillsCatalogue || void 0,
               // Only allow a post-render restart when the caller actually implements the
@@ -17386,7 +17419,7 @@ ${options.nexrallMd}` : "") : options.nexrallMd;
                     options.checkpointManager?.recordBeforeMutation(name, input);
                     const onStream = options.onToolStreamChunk ? (chunk) => options.onToolStreamChunk(name, chunk) : void 0;
                     const run = () => (0, executor_1.executeTool)(name, input, options.abortSignal, sandboxCfg, options.workDir, agentScope, onStream);
-                    const locks = name === "bash" ? bashNeedsRepoLock(String(input.command ?? "")) ? [REPO_STATE_LOCK] : [] : lockPathsFor(name, input, options.workDir);
+                    const locks = name === "bash" ? (0, bashClassify_1.bashNeedsRepoLock)(String(input.command ?? "")) ? [REPO_STATE_LOCK] : [] : lockPathsFor(name, input, options.workDir);
                     result = locks.length ? await withFileLocks(locks, run) : await run();
                   }
                 } catch (err) {
@@ -18616,6 +18649,95 @@ var require_manager2 = __commonJS({
   }
 });
 
+// ../core/dist/permissions/modePolicy.js
+var require_modePolicy = __commonJS({
+  "../core/dist/permissions/modePolicy.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.BASH_TOOLS = exports.FILE_MUTATE_TOOLS = exports.FILE_WRITE_TOOLS = exports.READ_ONLY_TOOLS = void 0;
+    exports.isReadOnlyBash = isReadOnlyBash;
+    exports.decide = decide;
+    exports.describeMode = describeMode2;
+    exports.parseMode = parseMode2;
+    var bashClassify_1 = require_bashClassify();
+    exports.READ_ONLY_TOOLS = /* @__PURE__ */ new Set([
+      "read_file",
+      "list_directory",
+      "search_files",
+      "glob",
+      "grep",
+      "fetch_url",
+      "web_search",
+      "bash_output",
+      "kill_shell",
+      "todo_read",
+      "todo_write",
+      "memory_read",
+      "use_skill",
+      "notebook_read",
+      "get_diagnostics",
+      "go_to_definition",
+      "find_references",
+      "get_symbols",
+      "get_workspace_symbols",
+      "get_hover"
+    ]);
+    exports.FILE_WRITE_TOOLS = /* @__PURE__ */ new Set([
+      "write_file",
+      "create_file",
+      "edit_file",
+      "multi_edit",
+      "notebook_edit"
+    ]);
+    exports.FILE_MUTATE_TOOLS = /* @__PURE__ */ new Set([
+      "delete_file",
+      "move_file",
+      "copy_file"
+    ]);
+    exports.BASH_TOOLS = /* @__PURE__ */ new Set(["bash", "run_command", "execute_command"]);
+    function isReadOnlyBash(command) {
+      return !(0, bashClassify_1.bashNeedsRepoLock)(command);
+    }
+    function decide(req) {
+      const { tool, mode } = req;
+      const command = String(req.input.command ?? req.input.cmd ?? "");
+      if (exports.READ_ONLY_TOOLS.has(tool))
+        return "allow";
+      if (exports.BASH_TOOLS.has(tool) && isReadOnlyBash(command) && !req.destructive)
+        return "allow";
+      if (req.destructive)
+        return "confirm";
+      if (mode === "plan")
+        return "deny";
+      if (req.bypass)
+        return "allow";
+      if (exports.FILE_WRITE_TOOLS.has(tool) || exports.FILE_MUTATE_TOOLS.has(tool)) {
+        return mode === "ask" ? "ask" : "allow";
+      }
+      if (exports.BASH_TOOLS.has(tool)) {
+        return mode === "auto" ? "allow" : "ask";
+      }
+      return "ask";
+    }
+    function describeMode2(mode) {
+      switch (mode) {
+        case "plan":
+          return "plan \u2014 read-only, produces a plan for approval";
+        case "ask":
+          return "ask \u2014 approves reads; asks before edits and commands";
+        case "edit":
+          return "edit \u2014 edits files freely; asks before shell commands";
+        case "auto":
+          return "auto \u2014 edits and runs commands; still confirms irreversible actions";
+      }
+    }
+    function parseMode2(raw) {
+      const s2 = String(raw ?? "").trim().toLowerCase();
+      return s2 === "plan" || s2 === "ask" || s2 === "edit" || s2 === "auto" ? s2 : "ask";
+    }
+  }
+});
+
 // ../core/dist/permissions/destructive.js
 var require_destructive = __commonJS({
   "../core/dist/permissions/destructive.js"(exports) {
@@ -19378,6 +19500,8 @@ var require_dist2 = __commonJS({
     __exportStar(require_planMode(), exports);
     __exportStar(require_agentRegistry(), exports);
     __exportStar(require_rules(), exports);
+    __exportStar(require_modePolicy(), exports);
+    __exportStar(require_bashClassify(), exports);
     __exportStar(require_destructive(), exports);
     __exportStar(require_plugins(), exports);
     __exportStar(require_installer(), exports);
@@ -53703,7 +53827,7 @@ var chalkStderr = createChalk({ level: stderrColor ? stderrColor.level : 0 });
 var source_default = chalk;
 
 // src/index.ts
-var import_code_core5 = __toESM(require_dist2(), 1);
+var import_code_core6 = __toESM(require_dist2(), 1);
 
 // src/commands/auth.ts
 import * as readline from "readline";
@@ -54790,14 +54914,14 @@ var import_code_core2 = __toESM(require_dist2(), 1);
 var autoApproved = /* @__PURE__ */ new Set();
 var _rules = { allow: [], ask: [], deny: [] };
 var _workDir = process.cwd();
-var _mode = "auto";
+var _mode = "ask";
 function initPermissions(workDir) {
   _workDir = workDir;
   _rules = (0, import_code_core2.loadSettings)(workDir).permissions;
   return _rules;
 }
 function setMode(mode) {
-  _mode = mode || "auto";
+  _mode = (0, import_code_core2.parseMode)(mode);
 }
 function setAutoApprove(category) {
   autoApproved.add(category);
@@ -54864,31 +54988,18 @@ async function requestPermission(req) {
   }
   if (decision === "allow")
     return true;
-  const readOnlyTools = [
-    "read_file",
-    "list_directory",
-    "search_files",
-    "fetch_url",
-    "glob",
-    "bash_output",
-    "kill_shell",
-    "todo_read",
-    "todo_write",
-    "memory_read",
-    "memory_write",
-    "use_skill",
-    "notebook_read",
-    "get_diagnostics",
-    "go_to_definition",
-    "find_references",
-    "get_symbols",
-    "get_workspace_symbols",
-    "get_hover",
-    "open_in_browser"
-  ];
-  if (readOnlyTools.includes(tool))
+  const verdict = (0, import_code_core2.decide)({
+    tool,
+    input,
+    mode: _mode,
+    bypass: isAutoApproved("all"),
+    // The destructive case was already handled above with the strong confirm flow
+    // (type "yes", no "approve all"), so it must not be re-triggered here.
+    destructive: false
+  });
+  if (verdict === "allow")
     return true;
-  if (_mode === "plan") {
+  if (verdict === "deny") {
     console.error(source_default.yellow(`  \u2298 Plan mode \u2014 refused ${tool} (read-only until you switch mode).`));
     return false;
   }
@@ -55038,6 +55149,9 @@ async function requestPermission(req) {
   return answer === "y" || answer === "yes";
 }
 
+// src/commands/chat.ts
+var import_code_core4 = __toESM(require_dist2(), 1);
+
 // src/commands/sessions.ts
 import * as fs3 from "fs";
 import * as path from "path";
@@ -64461,7 +64575,7 @@ var InkReadlineAdapter = class extends EventEmitter3 {
 };
 
 // src/commands/chat.ts
-var CLI_VERSION = "0.5.56";
+var CLI_VERSION = "0.5.58";
 var MODEL_LABELS = {
   turbo: "Nexrall Turbo",
   pro: "Nexrall Pro",
@@ -65524,11 +65638,15 @@ ${dirList}`;
         case "/mode": {
           const modeArg = arg.toLowerCase();
           if (!modeArg) {
-            console.log(source_default.dim(`  Current: ${source_default.cyan(agentMode)}  Options: ask \xB7 edit \xB7 plan \xB7 auto`));
+            console.log(source_default.dim(`  Current: ${source_default.cyan(agentMode)}`));
+            for (const m2 of ["ask", "edit", "auto", "plan"]) {
+              const marker = m2 === agentMode ? source_default.cyan("\u276F") : " ";
+              console.log(`  ${marker} ${source_default.bold(m2.padEnd(5))} ${source_default.dim((0, import_code_core4.describeMode)(m2).replace(`${m2} \u2014 `, ""))}`);
+            }
           } else if (["ask", "edit", "plan", "auto"].includes(modeArg)) {
             agentMode = modeArg;
             updateFooter();
-            console.log(source_default.green(`  Mode \u2192 ${source_default.bold(modeArg)}`));
+            console.log(source_default.green(`  Mode \u2192 ${source_default.bold(modeArg)}`) + source_default.dim(`  ${(0, import_code_core4.describeMode)(modeArg).replace(`${modeArg} \u2014 `, "")}`));
           } else {
             console.log(source_default.red(`  Unknown: ${modeArg}`));
           }
@@ -65818,7 +65936,7 @@ ${caption}` : `[Attached: ${rel}]`;
 
 // src/commands/plugin.ts
 var import_prompts = __toESM(require_prompts3(), 1);
-var import_code_core4 = __toESM(require_dist2(), 1);
+var import_code_core5 = __toESM(require_dist2(), 1);
 function describeInspection(i2, name, ctx) {
   console.log();
   console.log(source_default.bold(`  Plugin: ${name}`) + (i2.meta.version ? source_default.dim(`  v${i2.meta.version}`) : ""));
@@ -65894,14 +66012,14 @@ async function pluginInstallCommand(spec, opts) {
     let registryName;
     const isShortName = /^[\w.-]+$/.test(spec.trim()) && !spec.includes("/");
     if (isShortName) {
-      const alias = (0, import_code_core4.resolveSourceAlias)(spec.trim(), process.cwd(), { includeProject: true });
+      const alias = (0, import_code_core5.resolveSourceAlias)(spec.trim(), process.cwd(), { includeProject: true });
       if (alias) {
         source2 = alias.spec;
         console.log(source_default.dim(`  Source: ${alias.name} (${alias.tier}) \u2190 ${alias.spec}`));
       }
     }
     if (isShortName && source2 === spec) {
-      const entry = await (0, import_code_core4.getRegistryPlugin)(spec.trim()).catch(() => null);
+      const entry = await (0, import_code_core5.getRegistryPlugin)(spec.trim()).catch(() => null);
       if (entry) {
         source2 = entry.source;
         registryName = entry.name;
@@ -65916,7 +66034,7 @@ async function pluginInstallCommand(spec, opts) {
         return;
       }
     }
-    const res = await (0, import_code_core4.installPlugin)(source2, {
+    const res = await (0, import_code_core5.installPlugin)(source2, {
       scope,
       workDir: process.cwd(),
       name: opts.name ?? registryName,
@@ -65924,7 +66042,7 @@ async function pluginInstallCommand(spec, opts) {
       confirm: (i2, name, ctx) => confirmInstall(i2, name, opts.yes === true, ctx)
     });
     if (registryName)
-      (0, import_code_core4.reportInstall)(registryName);
+      (0, import_code_core5.reportInstall)(registryName);
     console.log();
     console.log(source_default.green(`  \u2713 Installed "${res.name}" (${res.scope}) \u2192 ${res.dir}`) + (res.sha ? source_default.dim(`  @ ${res.sha.slice(0, 7)}`) : ""));
     if (res.inspection.commands.length) {
@@ -65938,7 +66056,7 @@ async function pluginInstallCommand(spec, opts) {
 }
 function pluginRemoveCommand(name, opts) {
   try {
-    const dir = (0, import_code_core4.removePlugin)(name, {
+    const dir = (0, import_code_core5.removePlugin)(name, {
       scope: opts.project ? "project" : void 0,
       // no flag → search both scopes
       workDir: process.cwd()
@@ -65951,14 +66069,14 @@ function pluginRemoveCommand(name, opts) {
 }
 async function pluginUpdateCommand(name, opts) {
   const workDir = process.cwd();
-  const targets = name ? [name] : (0, import_code_core4.loadPlugins)(workDir).filter((p) => (0, import_code_core4.readReceipt)(p.dir)?.kind === "github").map((p) => p.name);
+  const targets = name ? [name] : (0, import_code_core5.loadPlugins)(workDir).filter((p) => (0, import_code_core5.readReceipt)(p.dir)?.kind === "github").map((p) => p.name);
   if (!targets.length) {
     console.log(source_default.dim("  No updatable plugins (only GitHub-installed plugins with receipts can update)."));
     return;
   }
   for (const t2 of targets) {
     try {
-      const res = await (0, import_code_core4.updatePlugin)(t2, {
+      const res = await (0, import_code_core5.updatePlugin)(t2, {
         workDir,
         confirm: (i2, n, ctx) => confirmInstall(i2, n, opts.yes === true, ctx)
       });
@@ -65975,7 +66093,7 @@ function badgeFor(p) {
 }
 async function pluginSearchCommand(query) {
   try {
-    const results = await (0, import_code_core4.searchRegistry)(query);
+    const results = await (0, import_code_core5.searchRegistry)(query);
     if (!results.length) {
       console.log(source_default.dim(query ? `  No plugins matching "${query}".` : "  Registry is empty."));
       return;
@@ -65998,7 +66116,7 @@ async function pluginSearchCommand(query) {
 }
 async function pluginInfoCommand(name) {
   try {
-    const p = await (0, import_code_core4.getRegistryPlugin)(name);
+    const p = await (0, import_code_core5.getRegistryPlugin)(name);
     if (!p) {
       console.error(source_default.red(`  \u2717 "${name}" not found in the registry.`));
       process.exitCode = 1;
@@ -66034,7 +66152,7 @@ async function pluginInfoCommand(name) {
   }
 }
 function pluginListCommand() {
-  const plugins = (0, import_code_core4.loadPlugins)(process.cwd());
+  const plugins = (0, import_code_core5.loadPlugins)(process.cwd());
   if (!plugins.length) {
     console.log(source_default.dim("  No plugins installed."));
     console.log(source_default.dim("  Install one:  nex plugin install owner/repo"));
@@ -66043,10 +66161,10 @@ function pluginListCommand() {
   console.log();
   console.log(source_default.bold("  Installed plugins:"));
   for (const p of plugins) {
-    const receipt = (0, import_code_core4.readReceipt)(p.dir);
+    const receipt = (0, import_code_core5.readReceipt)(p.dir);
     const src = receipt ? source_default.dim(`  \u2190 ${receipt.source}`) : source_default.dim("  (manual)");
     const at = receipt?.sha ? source_default.dim(` @ ${receipt.sha.slice(0, 7)}`) : "";
-    const insp = (0, import_code_core4.inspectPluginDir)(p.dir);
+    const insp = (0, import_code_core5.inspectPluginDir)(p.dir);
     const runs = insp.hasHooks || insp.hasMcp ? source_default.yellow(`  \u26A0 ${[insp.hasHooks && "hooks", insp.hasMcp && "mcp"].filter(Boolean).join("+")}`) : "";
     console.log(
       "  " + source_default.cyan(p.name.padEnd(24)) + source_default.dim(`${(p.version ?? "").padEnd(10)}${p.scope.padEnd(9)}`) + src + at + runs
@@ -66056,8 +66174,8 @@ function pluginListCommand() {
 }
 function pluginSourceListCommand() {
   const workDir = process.cwd();
-  const sources = (0, import_code_core4.loadDeclaredSources)(workDir, { includeProject: true });
-  const patterns = (0, import_code_core4.allowedSourcePatterns)();
+  const sources = (0, import_code_core5.loadDeclaredSources)(workDir, { includeProject: true });
+  const patterns = (0, import_code_core5.allowedSourcePatterns)();
   if (patterns) {
     console.log();
     console.log(source_default.bold("  Organisation policy: ") + source_default.dim(`installs restricted to ${patterns.join(", ")}`));
@@ -66072,7 +66190,7 @@ function pluginSourceListCommand() {
   console.log(source_default.bold("  Declared plugin sources:"));
   for (const s2 of sources) {
     const tier = s2.tier === "project" ? source_default.yellow(s2.tier.padEnd(9)) : source_default.dim(s2.tier.padEnd(9));
-    const blocked = !(0, import_code_core4.isSourceAllowed)(s2.spec, patterns) ? source_default.red("  \u2717 blocked by policy") : "";
+    const blocked = !(0, import_code_core5.isSourceAllowed)(s2.spec, patterns) ? source_default.red("  \u2717 blocked by policy") : "";
     console.log("  " + source_default.cyan(s2.name.padEnd(20)) + tier + source_default.white(s2.spec) + blocked);
   }
   console.log();
@@ -66082,17 +66200,17 @@ function pluginSourceListCommand() {
 }
 function pluginSourceAddCommand(name, spec, opts) {
   try {
-    (0, import_code_core4.parsePluginSource)(spec);
-    const patterns = (0, import_code_core4.allowedSourcePatterns)();
-    if (patterns && !(0, import_code_core4.isSourceAllowed)(spec, patterns)) {
+    (0, import_code_core5.parsePluginSource)(spec);
+    const patterns = (0, import_code_core5.allowedSourcePatterns)();
+    if (patterns && !(0, import_code_core5.isSourceAllowed)(spec, patterns)) {
       console.error(source_default.red(`  \u2717 "${spec}" is not permitted by your organisation's policy.`));
       console.error(source_default.dim(`    Allowed: ${patterns.join(", ")}`));
       process.exitCode = 1;
       return;
     }
     const scope = opts.project ? "project" : "user";
-    const file = (0, import_code_core4.sourcesFileFor)(scope, process.cwd());
-    (0, import_code_core4.writeDeclaredSource)(file, name, spec);
+    const file = (0, import_code_core5.sourcesFileFor)(scope, process.cwd());
+    (0, import_code_core5.writeDeclaredSource)(file, name, spec);
     console.log();
     console.log(source_default.green(`  \u2713 Declared "${name}" \u2192 ${spec}`) + source_default.dim(`  (${scope})`));
     console.log(source_default.dim(`    ${file}`));
@@ -66106,13 +66224,13 @@ function pluginSourceAddCommand(name, spec, opts) {
 function pluginSourceRemoveCommand(name, opts) {
   const workDir = process.cwd();
   const scope = opts.project ? "project" : "user";
-  const file = (0, import_code_core4.sourcesFileFor)(scope, workDir);
-  if ((0, import_code_core4.removeDeclaredSource)(file, name)) {
+  const file = (0, import_code_core5.sourcesFileFor)(scope, workDir);
+  if ((0, import_code_core5.removeDeclaredSource)(file, name)) {
     console.log(source_default.green(`  \u2713 Removed source "${name}" (${scope})`));
     console.log(source_default.dim("    Plugins already installed from it are untouched \u2014 remove them with  nex plugin remove <name>"));
     return;
   }
-  const found = (0, import_code_core4.resolveSourceAlias)(name, workDir, { includeProject: true });
+  const found = (0, import_code_core5.resolveSourceAlias)(name, workDir, { includeProject: true });
   if (found) {
     console.error(source_default.red(`  \u2717 "${name}" is declared in the ${found.tier} tier, not ${scope}.`));
     console.error(source_default.dim(`    ${found.file}`));
@@ -66128,7 +66246,7 @@ function pluginSourceRemoveCommand(name, opts) {
 
 // src/index.ts
 var program2 = new Command();
-program2.name("nex").description("Nexrall Code \u2014 AI coding assistant (powered by Nexrall)").version("0.5.56").enablePositionalOptions();
+program2.name("nex").description("Nexrall Code \u2014 AI coding assistant (powered by Nexrall)").version("0.5.58").enablePositionalOptions();
 program2.command("auth").description("Login to your Nexrall account").action(authCommand);
 program2.command("logout").description("Log out of your Nexrall account").action(logoutCommand);
 program2.command("update").description("Update nex to the latest version").option("-c, --check", "Check for updates without installing").option("-y, --yes", "Skip confirmation prompt").action(async (opts) => {
@@ -66200,7 +66318,7 @@ program2.command("sessions").description("List or delete saved chat sessions").o
   console.log();
 });
 program2.option("-p, --pro", "Use Nexrall Pro (Claude Opus, most capable)").option("-t, --turbo", "Use Nexrall Turbo (Claude Sonnet, fast)").option("-u, --ultra", "Use Ultra (Claude Fable 5, most powerful)").option("-y, --yolo", "Auto-approve all tool calls (no permission prompts)").option("-d, --dir <path>", "Set working directory (default: current directory)").option("-m, --model <name>", "Explicit model: turbo | pro | ultra").option("-r, --resume [id]", "Resume last session, or a specific session id").option("--no-banner", "Skip the ASCII banner (useful in scripts/pipes)").option("--output-format <fmt>", "One-shot output format: text | json | stream-json (implies auto-approve)").argument("[prompt...]", "One-shot prompt \u2014 if omitted, starts interactive mode").action(async (promptParts, options) => {
-  if (!(0, import_code_core5.isAuthenticated)()) {
+  if (!(0, import_code_core6.isAuthenticated)()) {
     console.error("Not logged in. Run: nex auth");
     process.exit(1);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nexrall-code",
-  "version": "0.5.56",
+  "version": "0.5.58",
   "description": "Nexrall Code — AI coding assistant for your terminal (headless agent for scripts, CI and automation)",
   "keywords": [
     "ai",
@@ -41,7 +41,7 @@
     "react": "^19.2.8",
     "readline": "^1.3.0",
     "string-width": "^7.2.0",
-    "@nexrall/code-core": "1.4.31"
+    "@nexrall/code-core": "1.4.33"
   },
   "devDependencies": {
     "@aws-sdk/client-s3": "^3.600.0",