⚡ Bolt & 🛡️ Sentinel: Core performance, security, and CLI improvements

[hackerxj2010]

Summary

Improved JeanBot's performance, security, and developer experience to enhance its capabilities relative to other AI agents.

Changes

• AI Package Optimization (⚡ Bolt):
  • Replaced crypto.createHash with the faster crypto.hash API (Node 22+).
  • Switched from .toFixed(8) to Math.round(x * 1e8) / 1e8 in vector calculations for significant speedup.
  • Optimized vector normalization logic.
• Security Hardening (🛡️ Sentinel):
  • Secured LocalJsonStore in packages/documents against path traversal attacks by resolving paths against a base directory and filtering out . and .. segments.
• Python CLI Enhancements:
  • Introduced on_step_update callback for real-time progress visualization in the terminal.
  • Added ANSI-colored status updates to the interactive shell.
  • Implemented status, plan, and artifacts commands for better mission inspection.
  • Improved shell resilience by catching and reporting mission execution errors without crashing the session.

Verification Results

• pnpm test (Vitest): All 45 tests passed.
• pytest tests/python (Pytest): All 6 tests passed.
• Manual verification of path traversal protection and CLI interactivity.

---

PR created automatically by Jules for task 12584228362328253805 started by @hackerxj2010

[google-labs-jules]

👋 Jules, reporting for duty! I'm here to lend a hand with this pull request.

When you start a review, I'll add a 👀 emoji to each comment to let you know I've read it. I'll focus on feedback directed at me and will do my best to stay out of conversations between you and other bots or reviewers to keep the noise down.

I'll push a commit with your requested changes shortly after. Please note there might be a delay between these steps, but rest assured I'm on the job!

For more direct control, you can switch me to Reactive Mode. When this mode is on, I will only act on comments where you specifically mention me with @jules. You can find this option in the Pull Request section of your global Jules UI settings. You can always switch back!

New to Jules? Learn more at jules.google/docs.

---

For security, I will only act on instructions from the user who triggered this task.