@4pm/cli 1.30.0 → 1.31.0

package/dist/index.js

@@ -28569,6 +28569,344 @@ async function fetchCliVersion(serverUrl, version) {
   }
 }
 
+// vendor/@4pm/constants/error-codes.ts
+var ErrorCode = {
+  // Common
+  VALIDATION_FAILED: "VALIDATION_FAILED",
+  UNAUTHORIZED: "UNAUTHORIZED",
+  FORBIDDEN: "FORBIDDEN",
+  IP_NOT_ALLOWED: "IP_NOT_ALLOWED",
+  // A user's IP allowlist entry falls outside the org allowlist (ADR-0044).
+  IP_OUTSIDE_ORG_ALLOWLIST: "IP_OUTSIDE_ORG_ALLOWLIST",
+  // An allowlist entry falls outside its parent tier: a team/project outside the
+  // org, or a user outside the union of their teams'/projects' allowlists (ADR-0050).
+  IP_OUTSIDE_PARENT_ALLOWLIST: "IP_OUTSIDE_PARENT_ALLOWLIST",
+  NOT_FOUND: "NOT_FOUND",
+  CONFLICT: "CONFLICT",
+  RATE_LIMITED: "RATE_LIMITED",
+  FEATURE_NOT_AVAILABLE: "FEATURE_NOT_AVAILABLE",
+  // Request body exceeded the HTTP gateway's JSON size limit (see HTTP_JSON_BODY_LIMIT_BYTES).
+  PAYLOAD_TOO_LARGE: "PAYLOAD_TOO_LARGE",
+  INTERNAL_ERROR: "INTERNAL_ERROR",
+  // auth
+  INVALID_CREDENTIALS: "INVALID_CREDENTIALS",
+  EMAIL_NOT_VERIFIED: "EMAIL_NOT_VERIFIED",
+  ACCOUNT_LOCKED: "ACCOUNT_LOCKED",
+  TOKEN_INVALID: "TOKEN_INVALID",
+  TOKEN_EXPIRED: "TOKEN_EXPIRED",
+  TOKEN_USED: "TOKEN_USED",
+  TOKEN_REVOKED: "TOKEN_REVOKED",
+  /** The session is idle-locked (ADR-0204) — re-authenticate to continue (HTTP 423). */
+  SESSION_LOCKED: "SESSION_LOCKED",
+  PASSWORD_POLICY_VIOLATION: "PASSWORD_POLICY_VIOLATION",
+  PASSWORD_CONFIRM_MISMATCH: "PASSWORD_CONFIRM_MISMATCH",
+  PASSWORD_CURRENT_INVALID: "PASSWORD_CURRENT_INVALID",
+  IDENTITY_REQUIRED: "IDENTITY_REQUIRED",
+  MFA_CODE_INVALID: "MFA_CODE_INVALID",
+  MFA_CODE_EXPIRED: "MFA_CODE_EXPIRED",
+  // org · user · team · project
+  USER_NOT_FOUND: "USER_NOT_FOUND",
+  TEAM_NOT_FOUND: "TEAM_NOT_FOUND",
+  PROJECT_NOT_FOUND: "PROJECT_NOT_FOUND",
+  ORG_NOT_FOUND: "ORG_NOT_FOUND",
+  // org login alias (ADR-0111): alias already used by another org, or a reserved word
+  ORG_ALIAS_TAKEN: "ORG_ALIAS_TAKEN",
+  // org template files (ADR-0113)
+  TEMPLATE_NOT_FOUND: "TEMPLATE_NOT_FOUND",
+  TEMPLATE_QUOTA_EXCEEDED: "TEMPLATE_QUOTA_EXCEEDED",
+  TEMPLATE_FILE_TOO_LARGE: "TEMPLATE_FILE_TOO_LARGE",
+  // skill/subagent marketplace (ADR-0185)
+  MARKET_PACKAGE_NOT_FOUND: "MARKET_PACKAGE_NOT_FOUND",
+  MARKET_VERSION_NOT_FOUND: "MARKET_VERSION_NOT_FOUND",
+  MARKET_PACKAGE_EXISTS: "MARKET_PACKAGE_EXISTS",
+  MARKET_VERSION_EXISTS: "MARKET_VERSION_EXISTS",
+  MARKET_INVALID_PACKAGE: "MARKET_INVALID_PACKAGE",
+  MARKET_SCOPE_FORBIDDEN: "MARKET_SCOPE_FORBIDDEN",
+  MARKET_SCOPE_UNSUPPORTED: "MARKET_SCOPE_UNSUPPORTED",
+  MARKET_VERSION_NOT_APPROVED: "MARKET_VERSION_NOT_APPROVED",
+  MARKET_NOT_MODERATABLE: "MARKET_NOT_MODERATABLE",
+  MARKET_UNAVAILABLE: "MARKET_UNAVAILABLE",
+  MARKET_REVIEW_NOT_ELIGIBLE: "MARKET_REVIEW_NOT_ELIGIBLE",
+  MARKET_PAYMENT_REQUIRED: "MARKET_PAYMENT_REQUIRED",
+  MARKET_ORDER_NOT_FOUND: "MARKET_ORDER_NOT_FOUND",
+  MARKET_ALREADY_PURCHASED: "MARKET_ALREADY_PURCHASED",
+  KNOWLEDGE_POST_NOT_FOUND: "KNOWLEDGE_POST_NOT_FOUND",
+  KNOWLEDGE_SCOPE_FORBIDDEN: "KNOWLEDGE_SCOPE_FORBIDDEN",
+  // 4rum post / Messenger message missing or not visible — also a cursor anchor (ADR-0341/0361)
+  POST_NOT_FOUND: "POST_NOT_FOUND",
+  MESSAGE_NOT_FOUND: "MESSAGE_NOT_FOUND",
+  PACKAGE_ALREADY_INSTALLED: "PACKAGE_ALREADY_INSTALLED",
+  // org total hosted storage cap (ADR-0122/0365) — blocks text writes, uploads, memo/book writes and new AI runs
+  STORAGE_QUOTA_EXCEEDED: "STORAGE_QUOTA_EXCEEDED",
+  // Self-managed storage clear (ADR-0365): typed org-name confirmation mismatch; a kind the service
+  // cannot clear; a clear already running for the org.
+  STORAGE_CLEAR_CONFIRM_MISMATCH: "STORAGE_CLEAR_CONFIRM_MISMATCH",
+  STORAGE_CLEAR_KIND_INVALID: "STORAGE_CLEAR_KIND_INVALID",
+  STORAGE_CLEAR_RUNNING: "STORAGE_CLEAR_RUNNING",
+  // project lifecycle (ADR-0092): invalid transition / operation on a paused|closed project
+  PROJECT_STATE_INVALID: "PROJECT_STATE_INVALID",
+  PROJECT_NOT_ACTIVE: "PROJECT_NOT_ACTIVE",
+  // user pause (ADR-0093): user is paused (blocks login/API/token/WS) / invalid pause transition
+  USER_PAUSED: "USER_PAUSED",
+  USER_STATE_INVALID: "USER_STATE_INVALID",
+  // org pause (ADR-0094 admin-0013): whole org paused ⇒ blocks all its users' login/API/token
+  ORG_PAUSED: "ORG_PAUSED",
+  // project-membership pause (ADR-0093): invalid membership pause transition
+  MEMBER_STATE_INVALID: "MEMBER_STATE_INVALID",
+  // soft-delete restore (ADR-0109): restore a record that is not currently deleted
+  PROJECT_NOT_DELETED: "PROJECT_NOT_DELETED",
+  TEAM_NOT_DELETED: "TEAM_NOT_DELETED",
+  USER_NOT_DELETED: "USER_NOT_DELETED",
+  USERNAME_TAKEN: "USERNAME_TAKEN",
+  EMAIL_TAKEN: "EMAIL_TAKEN",
+  // email omitted while the org disallows sub-accounts without email (ADR-0039)
+  EMAIL_REQUIRED: "EMAIL_REQUIRED",
+  // contact-change (self email/phone) verification (ADR-0046)
+  // email and phone cannot be changed in the same request
+  CONTACT_CHANGE_BOTH: "CONTACT_CHANGE_BOTH",
+  // a contact-change is already pending — resolve it before editing again
+  CONTACT_CHANGE_PENDING: "CONTACT_CHANGE_PENDING",
+  // the verifying channel is missing (e.g. no phone on file to OTP an email change)
+  CONTACT_CHANGE_CHANNEL_MISSING: "CONTACT_CHANGE_CHANNEL_MISSING",
+  // the submitted OTP / link token is invalid or expired
+  CONTACT_CHANGE_INVALID: "CONTACT_CHANGE_INVALID",
+  // self email/phone must go through the contact-change flow (not a direct update)
+  CONTACT_CHANGE_REQUIRED: "CONTACT_CHANGE_REQUIRED",
+  ROLE_EXCLUSIVE: "ROLE_EXCLUSIVE",
+  ROOT_IMMUTABLE: "ROOT_IMMUTABLE",
+  // ADMIN role is reserved for the org root; it cannot be granted to sub-accounts
+  ADMIN_ROLE_RESERVED: "ADMIN_ROLE_RESERVED",
+  // a PM may only assign roles below PM (never PM/ADMIN/MACHINE) — anti-escalation (ADR-0051)
+  USER_ROLE_ASSIGN_FORBIDDEN: "USER_ROLE_ASSIGN_FORBIDDEN",
+  // an ADMIN account manages the org only — it cannot be attached to teams/projects
+  ADMIN_NOT_ASSIGNABLE: "ADMIN_NOT_ASSIGNABLE",
+  // a MACHINE account is a worker — it cannot be a project manager (ADR-0041)
+  MACHINE_NOT_MANAGER: "MACHINE_NOT_MANAGER",
+  // a MACHINE account may be a member of at most one project (ADR-0041)
+  MACHINE_ALREADY_IN_PROJECT: "MACHINE_ALREADY_IN_PROJECT",
+  // a MACHINE account is a worker, not a human member — it cannot join a team (ADR-0041)
+  MACHINE_NOT_TEAM_MEMBER: "MACHINE_NOT_TEAM_MEMBER",
+  ALREADY_ATTACHED: "ALREADY_ATTACHED",
+  NOT_ATTACHED: "NOT_ATTACHED",
+  SELF_DELETE_FORBIDDEN: "SELF_DELETE_FORBIDDEN",
+  SELF_SET_PASSWORD_FORBIDDEN: "SELF_SET_PASSWORD_FORBIDDEN",
+  AVATAR_INVALID_TYPE: "AVATAR_INVALID_TYPE",
+  AVATAR_TOO_LARGE: "AVATAR_TOO_LARGE",
+  // permission
+  PERMISSION_CODE_INVALID: "PERMISSION_CODE_INVALID",
+  SUBJECT_INVALID: "SUBJECT_INVALID",
+  // machine
+  HASHCODE_INVALID: "HASHCODE_INVALID",
+  HASHCODE_EXPIRED: "HASHCODE_EXPIRED",
+  LINK_REVOKED: "LINK_REVOKED",
+  LINK_NOT_FOUND: "LINK_NOT_FOUND",
+  WORKER_OFFLINE: "WORKER_OFFLINE",
+  // command-0001 pick:"idle" (ADR-0171) — no idle cli in the project's pool
+  ALL_CLIS_BUSY: "ALL_CLIS_BUSY",
+  // worker pools (ADR-0284)
+  WORKER_POOL_NOT_FOUND: "WORKER_POOL_NOT_FOUND",
+  WORKER_POOL_NAME_TAKEN: "WORKER_POOL_NAME_TAKEN",
+  WORKER_POOL_ATTACHED: "WORKER_POOL_ATTACHED",
+  WORKER_POOL_ALREADY_ATTACHED: "WORKER_POOL_ALREADY_ATTACHED",
+  MACHINE_ALREADY_IN_POOL: "MACHINE_ALREADY_IN_POOL",
+  NOT_MACHINE_USER: "NOT_MACHINE_USER",
+  // worker · physic project
+  WORKER_NOT_FOUND: "WORKER_NOT_FOUND",
+  PHYSIC_PROJECT_NOT_FOUND: "PHYSIC_PROJECT_NOT_FOUND",
+  PHYSIC_PATH_OCCUPIED: "PHYSIC_PATH_OCCUPIED",
+  AUTONOMOUS_CONFLICT: "AUTONOMOUS_CONFLICT",
+  // A disruptive worker op (repo (re)provision / CLI update) was refused because the target
+  // worker's autonomous mode is armed (installed && !paused) — stop it first (ADR-0317).
+  AUTONOMOUS_ACTIVE: "AUTONOMOUS_ACTIVE",
+  // Separation of duties (ADR-0320): a non-ADMIN tried to approve a row they wrote — the writer can't
+  // be the approver of their own row (ADMIN may self-approve).
+  APPROVAL_SELF: "APPROVAL_SELF",
+  CLI_VERSION_UNSUPPORTED: "CLI_VERSION_UNSUPPORTED",
+  // Admin cli version policy rejected (ADR-0363) — meta.reason: minAboveLatest | latestNotBlockable |
+  // deadlinePast | invalidVersion.
+  CLI_VERSION_POLICY_INVALID: "CLI_VERSION_POLICY_INVALID",
+  ORCHESTRATOR_OFFLINE: "ORCHESTRATOR_OFFLINE",
+  WS_TOKEN_INVALID: "WS_TOKEN_INVALID",
+  // A newer cli session for the same link took over ⇒ the older one stops (ADR-0047).
+  SESSION_REPLACED: "SESSION_REPLACED",
+  PATH_INVALID: "PATH_INVALID",
+  // project create/add
+  SPEC_INVALID: "SPEC_INVALID",
+  PATH_OCCUPIED: "PATH_OCCUPIED",
+  GIT_ENV_MISSING: "GIT_ENV_MISSING",
+  CLAUDE_CLI_MISSING: "CLAUDE_CLI_MISSING",
+  SCAFFOLD_FAILED: "SCAFFOLD_FAILED",
+  GIT_OPERATION_FAILED: "GIT_OPERATION_FAILED",
+  AI_INIT_FAILED: "AI_INIT_FAILED",
+  // AI spec-assist (suggest/review/compose) run failed on the worker cli (ADR-0100).
+  AI_ASSIST_FAILED: "AI_ASSIST_FAILED",
+  // Client-side guard (ADR-0255): the built AI prompt is longer than AI_PROMPT_MAX_LEN, so the
+  // web blocks the dispatch and shows an actionable "spec too large" message instead of letting
+  // the server reject it as a confusing VALIDATION_FAILED.
+  AI_PROMPT_TOO_LARGE: "AI_PROMPT_TOO_LARGE",
+  REPO_NOT_FOUND: "REPO_NOT_FOUND",
+  // invitation
+  INVITATION_TOKEN_INVALID: "INVITATION_TOKEN_INVALID",
+  INVITATION_ALREADY_ACCEPTED: "INVITATION_ALREADY_ACCEPTED",
+  INVITATION_ROLE_FORBIDDEN: "INVITATION_ROLE_FORBIDDEN",
+  // notification
+  NOTIFICATION_NOT_FOUND: "NOTIFICATION_NOT_FOUND",
+  // sso (ADR-0024)
+  SSO_IDENTITY_NOT_LINKED: "SSO_IDENTITY_NOT_LINKED",
+  SSO_PROVIDER_INVALID: "SSO_PROVIDER_INVALID",
+  // Cannot unlink the last remaining login method (SSO-only user, ADR-0161)
+  SSO_LAST_LOGIN_METHOD: "SSO_LAST_LOGIN_METHOD",
+  PASSWORD_NOT_SET: "PASSWORD_NOT_SET",
+  // command · memo
+  COMMAND_NOT_FOUND: "COMMAND_NOT_FOUND",
+  // Stop requested for a command that already settled (done/failed/cancelled — ADR-0362).
+  COMMAND_ALREADY_FINISHED: "COMMAND_ALREADY_FINISHED",
+  COMMAND_DISPATCH_LIMITED: "COMMAND_DISPATCH_LIMITED",
+  QUOTA_EXCEEDED: "QUOTA_EXCEEDED",
+  // A single prompt's estimated tokens exceed project `settings.tokens.perPromptTokenLimit` (ADR-0081).
+  PROMPT_TOKEN_LIMIT_EXCEEDED: "PROMPT_TOKEN_LIMIT_EXCEEDED",
+  // An outbound cli evaluated the input as NG (secret/path/repo/environment) — ADR-0082.
+  OUTBOUND_REVIEW_REJECTED: "OUTBOUND_REVIEW_REJECTED",
+  // No outbound cli available (offline/busy/out-of-token) while review is on — ADR-0082.
+  OUTBOUND_REVIEW_UNAVAILABLE: "OUTBOUND_REVIEW_UNAVAILABLE",
+  // A saved outbound rule regex fails to compile or is ReDoS-unsafe (ADR-0087).
+  OUTBOUND_RULE_INVALID: "OUTBOUND_RULE_INVALID",
+  // Console image attachment blocked because the project has `outboundReview.blockImages` (ADR-0257).
+  IMAGE_UPLOAD_BLOCKED: "IMAGE_UPLOAD_BLOCKED",
+  MEMO_TOO_LONG: "MEMO_TOO_LONG",
+  // plan entitlements (ADR-0105) — resource caps + feature gates per plan tier
+  PLAN_USER_LIMIT: "PLAN_USER_LIMIT",
+  PLAN_PROJECT_LIMIT: "PLAN_PROJECT_LIMIT",
+  // Plan memo-item cap reached (`maxMemoItems` — ADR-0365).
+  PLAN_MEMO_LIMIT: "PLAN_MEMO_LIMIT",
+  // An autonomous book reached its monthly `autonomousRequestsPerMonth` cap (ADR-0365).
+  AUTONOMOUS_BOOK_CAP_REACHED: "AUTONOMOUS_BOOK_CAP_REACHED",
+  PLAN_FEATURE_UNAVAILABLE: "PLAN_FEATURE_UNAVAILABLE",
+  // deployment license ceiling (ADR-0135) — a self-host license bounds orgs/seats/projects/
+  // storage across the whole deployment, above the per-org plan caps
+  LICENSE_LIMIT_EXCEEDED: "LICENSE_LIMIT_EXCEEDED",
+  // billing add-ons & rented machine-users (ADR-0123/0126) — payment-server · admin-server
+  // buying an add-on without an active paid plan (ADR-0123)
+  ADDON_REQUIRES_PLAN: "ADDON_REQUIRES_PLAN",
+  // renting a machine-user with no free pool slot (ADR-0126) — the org may be waitlisted
+  NO_HOSTED_SLOT_AVAILABLE: "NO_HOSTED_SLOT_AVAILABLE",
+  // admin changing a rented hosted slot without forceRelease (ADR-0126)
+  SLOT_RENTED: "SLOT_RENTED",
+  // re-renting a machine whose rental is already `releasing` — too late to undo (ADR-0210)
+  RENTED_MACHINE_RELEASING: "RENTED_MACHINE_RELEASING",
+  // credit wallet & coupons (ADR-0118/0119/0120) — served by payment-server
+  CREDIT_INSUFFICIENT: "CREDIT_INSUFFICIENT",
+  COUPON_NOT_FOUND: "COUPON_NOT_FOUND",
+  COUPON_EXPIRED: "COUPON_EXPIRED",
+  COUPON_DISABLED: "COUPON_DISABLED",
+  COUPON_EXHAUSTED: "COUPON_EXHAUSTED",
+  COUPON_ALREADY_REDEEMED: "COUPON_ALREADY_REDEEMED",
+  // payment-server catalog completion (ADR-0207) — credit/addon/plan errors that previously
+  // threw raw strings or literals duplicated inside payment-server; now first-class codes.
+  // credit mutation validation (credit.service)
+  INVALID_AMOUNT: "INVALID_AMOUNT",
+  INVALID_DELTA: "INVALID_DELTA",
+  TOPUP_NOT_FOUND: "TOPUP_NOT_FOUND",
+  // storage add-on SKU management (addon.service — admin-0031/0032)
+  STORAGE_SKU_INVALID: "STORAGE_SKU_INVALID",
+  STORAGE_SKU_NOT_FOUND: "STORAGE_SKU_NOT_FOUND",
+  STORAGE_SIZE_INVALID: "STORAGE_SIZE_INVALID",
+  ADDON_CODE_EXISTS: "ADDON_CODE_EXISTS",
+  ADDON_PRICE_INVALID: "ADDON_PRICE_INVALID",
+  ADDON_PRODUCT_UNKNOWN: "ADDON_PRODUCT_UNKNOWN",
+  ADDON_QUANTITY_INVALID: "ADDON_QUANTITY_INVALID",
+  ADDON_NOT_FOUND: "ADDON_NOT_FOUND",
+  // plan / subscription lifecycle (billing.service — ADR-0163/0142)
+  PLAN_CODE_REQUIRED: "PLAN_CODE_REQUIRED",
+  PLAN_UNCHANGED: "PLAN_UNCHANGED",
+  PLAN_CHANGE_INVALID: "PLAN_CHANGE_INVALID",
+  NO_ACTIVE_SUBSCRIPTION: "NO_ACTIVE_SUBSCRIPTION",
+  NO_PROVIDER_SUBSCRIPTION: "NO_PROVIDER_SUBSCRIPTION",
+  ENTERPRISE_PLAN_NOT_ASSIGNABLE: "ENTERPRISE_PLAN_NOT_ASSIGNABLE",
+  PAYMENT_FAILED: "PAYMENT_FAILED",
+  // support tickets (ADR-0167) + AI help agent (ADR-0168)
+  SUPPORT_TICKET_NOT_FOUND: "SUPPORT_TICKET_NOT_FOUND",
+  // managed legal documents (ADR-0350): unknown/disabled document; accepting a version that is not current
+  LEGAL_DOCUMENT_NOT_FOUND: "LEGAL_DOCUMENT_NOT_FOUND",
+  LEGAL_VERSION_OUTDATED: "LEGAL_VERSION_OUTDATED",
+  SUPPORT_TICKET_CLOSED: "SUPPORT_TICKET_CLOSED",
+  // public (guest) support create (ADR-0279): the self-hosted captcha answer was wrong/expired.
+  CAPTCHA_INVALID: "CAPTCHA_INVALID",
+  HELP_POOL_UNAVAILABLE: "HELP_POOL_UNAVAILABLE",
+  // AI Help daily cap reached (ADR-0286): the asker (or their org) exceeded the per-day question
+  // cap; meta carries { scope, limit, used, resetAt }. Thrown before any dispatch (0 token cost).
+  HELP_RATE_LIMITED: "HELP_RATE_LIMITED",
+  // AI Help admin moderation (ADR-0237): the user/org is blocked from the channel, or the whole
+  // AI support service is toggled off platform-wide.
+  HELP_BLOCKED: "HELP_BLOCKED",
+  HELP_DISABLED: "HELP_DISABLED",
+  // Project GitHub-App git-auth (ADR-0356): method set without a credential; a rejected credential
+  // (App ID / PEM / host / CA); an ssh repo URL under the App method; the primary repo's host differs
+  // from the credential host; the server has no SECRETS_ENC_KEY to store/read secrets.
+  GIT_CREDENTIAL_MISSING: "GIT_CREDENTIAL_MISSING",
+  GIT_CREDENTIAL_INVALID: "GIT_CREDENTIAL_INVALID",
+  GIT_AUTH_REQUIRES_HTTPS: "GIT_AUTH_REQUIRES_HTTPS",
+  GIT_HOST_MISMATCH: "GIT_HOST_MISMATCH",
+  SECRETS_KEY_NOT_CONFIGURED: "SECRETS_KEY_NOT_CONFIGURED",
+  // Org announcements (ADR-0367): a target outside the sender's PM/TL scope; targets resolving to
+  // nobody; the org's daily recipient cap (`announcementDailyRecipients`); unknown history row /
+  // draft; the per-user draft cap.
+  ANNOUNCEMENT_TARGET_FORBIDDEN: "ANNOUNCEMENT_TARGET_FORBIDDEN",
+  ANNOUNCEMENT_NO_RECIPIENTS: "ANNOUNCEMENT_NO_RECIPIENTS",
+  ANNOUNCEMENT_DAILY_LIMIT: "ANNOUNCEMENT_DAILY_LIMIT",
+  ANNOUNCEMENT_NOT_FOUND: "ANNOUNCEMENT_NOT_FOUND",
+  ANNOUNCEMENT_DRAFT_NOT_FOUND: "ANNOUNCEMENT_DRAFT_NOT_FOUND",
+  ANNOUNCEMENT_DRAFT_LIMIT: "ANNOUNCEMENT_DRAFT_LIMIT",
+  // Worker-cli operation failures surfaced to the web/admin so they localize via `errors.*`
+  // (see CLI_ERROR_CODE_MAP below): filesystem guards, RAG, agent/content validation, support
+  // answer, FAQ compose, git host, autonomous base push.
+  WORKER_PATH_ESCAPES_ROOT: "WORKER_PATH_ESCAPES_ROOT",
+  WORKER_NO_PROJECT: "WORKER_NO_PROJECT",
+  WORKER_PATH_EXISTS: "WORKER_PATH_EXISTS",
+  WORKER_ROOT_PROTECTED: "WORKER_ROOT_PROTECTED",
+  WORKER_NOT_A_FILE: "WORKER_NOT_A_FILE",
+  WORKER_INVALID_PAYLOAD: "WORKER_INVALID_PAYLOAD",
+  WORKER_INVALID_NAME: "WORKER_INVALID_NAME",
+  WORKER_CONTENT_REQUIRED: "WORKER_CONTENT_REQUIRED",
+  RAG_PYTHON_MISSING: "RAG_PYTHON_MISSING",
+  RAG_NOT_INSTALLED: "RAG_NOT_INSTALLED",
+  RAG_NO_INDEX: "RAG_NO_INDEX",
+  RAG_INVALID_MODEL: "RAG_INVALID_MODEL",
+  SUPPORT_KB_EMPTY: "SUPPORT_KB_EMPTY",
+  SUPPORT_EMPTY_ANSWER: "SUPPORT_EMPTY_ANSWER",
+  FAQ_NO_WRITE_TOKEN: "FAQ_NO_WRITE_TOKEN",
+  GIT_UNKNOWN_HOST: "GIT_UNKNOWN_HOST",
+  AUTONOMOUS_BASE_PUSH_FAILED: "AUTONOMOUS_BASE_PUSH_FAILED"
+};
+var CLI_ERROR_CODE_MAP = {
+  "path escapes the project root": { code: ErrorCode.WORKER_PATH_ESCAPES_ROOT, status: 422 },
+  "no project served": { code: ErrorCode.WORKER_NO_PROJECT, status: 409 },
+  "no project": { code: ErrorCode.WORKER_NO_PROJECT, status: 409 },
+  "This worker has no project folder.": { code: ErrorCode.WORKER_NO_PROJECT, status: 409 },
+  "already exists": { code: ErrorCode.WORKER_PATH_EXISTS, status: 409 },
+  "destination already exists": { code: ErrorCode.WORKER_PATH_EXISTS, status: 409 },
+  "cannot move the project root": { code: ErrorCode.WORKER_ROOT_PROTECTED, status: 422 },
+  "cannot delete the project root": { code: ErrorCode.WORKER_ROOT_PROTECTED, status: 422 },
+  "not a file": { code: ErrorCode.WORKER_NOT_A_FILE, status: 422 },
+  "invalid base64 payload": { code: ErrorCode.WORKER_INVALID_PAYLOAD, status: 422 },
+  "invalid name": { code: ErrorCode.WORKER_INVALID_NAME, status: 422 },
+  "content is required": { code: ErrorCode.WORKER_CONTENT_REQUIRED, status: 422 },
+  "invalid slug": { code: ErrorCode.MARKET_INVALID_PACKAGE, status: 422 },
+  "artifact not found": { code: ErrorCode.MARKET_PACKAGE_NOT_FOUND, status: 404 },
+  "not installed": { code: ErrorCode.MARKET_PACKAGE_NOT_FOUND, status: 404 },
+  "python3 not found": { code: ErrorCode.RAG_PYTHON_MISSING, status: 422 },
+  "python3 not found on the worker": { code: ErrorCode.RAG_PYTHON_MISSING, status: 422 },
+  "RAG is not installed": { code: ErrorCode.RAG_NOT_INSTALLED, status: 409 },
+  "no index \u2014 reindex first": { code: ErrorCode.RAG_NO_INDEX, status: 409 },
+  "invalid model name": { code: ErrorCode.RAG_INVALID_MODEL, status: 422 },
+  "KB repo has no documentation": { code: ErrorCode.SUPPORT_KB_EMPTY, status: 422 },
+  "empty answer": { code: ErrorCode.SUPPORT_EMPTY_ANSWER, status: 422 },
+  "no write token": { code: ErrorCode.FAQ_NO_WRITE_TOKEN, status: 422 },
+  "Unknown git host \u2014 no pull request opened.": { code: ErrorCode.GIT_UNKNOWN_HOST, status: 422 },
+  "could not push the change to the base branch (retry)": { code: ErrorCode.AUTONOMOUS_BASE_PUSH_FAILED, status: 422 },
+  "self-approval blocked": { code: ErrorCode.APPROVAL_SELF, status: 409 }
+};
+
 // vendor/@4pm/constants/preferences.ts
 var Locale = {
   VI: "vi",
@@ -28930,7 +29268,11 @@ var en_default = {
   "autoRun.failed": "Autonomous cycle failed to dispatch: {note}",
   "autoRun.noDaemon": 'No running daemon for profile "{profile}" \u2014 start it first: 4pm start --profile {profile}',
   "autoRun.timeout": "Autonomous cycle exceeded the time limit \u2014 aborting.",
-  "autoRun.authFailed": "Control-channel authentication failed \u2014 the daemon rejected the token."
+  "autoRun.authFailed": "Control-channel authentication failed \u2014 the daemon rejected the token.",
+  "autonomous.cronMissing": "Could not install the autonomous cron: this worker has no working `crontab` (cron service). Autonomous scheduling requires cron on the worker machine.",
+  "autonomous.settingsInvalidJson": "The autonomous settings are not valid JSON.",
+  "config.notObject": "config.json must be a JSON object.",
+  "config.invalidJson": "Invalid JSON: {message}"
 };
 
 // src/i18n/messages/vi.json
@@ -29115,7 +29457,11 @@ var vi_default = {
   "autoRun.failed": "Kh\xF4ng \u0111i\u1EC1u ph\u1ED1i \u0111\u01B0\u1EE3c chu k\u1EF3 t\u1EF1 \u0111\u1ED9ng: {note}",
   "autoRun.noDaemon": 'Kh\xF4ng c\xF3 ti\u1EBFn tr\xECnh n\u1EC1n n\xE0o cho h\u1ED3 s\u01A1 "{profile}" \u2014 h\xE3y kh\u1EDFi \u0111\u1ED9ng tr\u01B0\u1EDBc: 4pm start --profile {profile}',
   "autoRun.timeout": "Chu k\u1EF3 t\u1EF1 \u0111\u1ED9ng v\u01B0\u1EE3t qu\xE1 gi\u1EDBi h\u1EA1n th\u1EDDi gian \u2014 \u0111ang h\u1EE7y.",
-  "autoRun.authFailed": "X\xE1c th\u1EF1c k\xEAnh \u0111i\u1EC1u khi\u1EC3n th\u1EA5t b\u1EA1i \u2014 daemon t\u1EEB ch\u1ED1i token."
+  "autoRun.authFailed": "X\xE1c th\u1EF1c k\xEAnh \u0111i\u1EC1u khi\u1EC3n th\u1EA5t b\u1EA1i \u2014 daemon t\u1EEB ch\u1ED1i token.",
+  "autonomous.cronMissing": "Kh\xF4ng c\xE0i \u0111\u01B0\u1EE3c cron t\u1EF1 h\xE0nh: worker n\xE0y kh\xF4ng c\xF3 `crontab` ho\u1EA1t \u0111\u1ED9ng (d\u1ECBch v\u1EE5 cron). L\u1EADp l\u1ECBch t\u1EF1 h\xE0nh c\u1EA7n cron tr\xEAn m\xE1y worker.",
+  "autonomous.settingsInvalidJson": "C\u1EA5u h\xECnh t\u1EF1 h\xE0nh kh\xF4ng ph\u1EA3i JSON h\u1EE3p l\u1EC7.",
+  "config.notObject": "config.json ph\u1EA3i l\xE0 m\u1ED9t \u0111\u1ED1i t\u01B0\u1EE3ng JSON.",
+  "config.invalidJson": "JSON kh\xF4ng h\u1EE3p l\u1EC7: {message}"
 };
 
 // src/i18n/messages/ja.json
@@ -29300,7 +29646,11 @@ var ja_default = {
   "autoRun.failed": "\u81EA\u5F8B\u30B5\u30A4\u30AF\u30EB\u306E\u30C7\u30A3\u30B9\u30D1\u30C3\u30C1\u306B\u5931\u6557\u3057\u307E\u3057\u305F: {note}",
   "autoRun.noDaemon": '\u30D7\u30ED\u30D5\u30A1\u30A4\u30EB "{profile}" \u306E\u30C7\u30FC\u30E2\u30F3\u304C\u5B9F\u884C\u3055\u308C\u3066\u3044\u307E\u305B\u3093 \u2014 \u5148\u306B\u8D77\u52D5\u3057\u3066\u304F\u3060\u3055\u3044: 4pm start --profile {profile}',
   "autoRun.timeout": "\u81EA\u5F8B\u30B5\u30A4\u30AF\u30EB\u304C\u5236\u9650\u6642\u9593\u3092\u8D85\u3048\u307E\u3057\u305F \u2014 \u4E2D\u6B62\u3057\u307E\u3059\u3002",
-  "autoRun.authFailed": "\u30B3\u30F3\u30C8\u30ED\u30FC\u30EB\u30C1\u30E3\u30CD\u30EB\u306E\u8A8D\u8A3C\u306B\u5931\u6557\u3057\u307E\u3057\u305F \u2014 \u30C7\u30FC\u30E2\u30F3\u304C\u30C8\u30FC\u30AF\u30F3\u3092\u62D2\u5426\u3057\u307E\u3057\u305F\u3002"
+  "autoRun.authFailed": "\u30B3\u30F3\u30C8\u30ED\u30FC\u30EB\u30C1\u30E3\u30CD\u30EB\u306E\u8A8D\u8A3C\u306B\u5931\u6557\u3057\u307E\u3057\u305F \u2014 \u30C7\u30FC\u30E2\u30F3\u304C\u30C8\u30FC\u30AF\u30F3\u3092\u62D2\u5426\u3057\u307E\u3057\u305F\u3002",
+  "autonomous.cronMissing": "\u81EA\u5F8B cron \u3092\u30A4\u30F3\u30B9\u30C8\u30FC\u30EB\u3067\u304D\u307E\u305B\u3093\u3067\u3057\u305F: \u3053\u306E\u30EF\u30FC\u30AB\u30FC\u306B\u306F\u52D5\u4F5C\u3059\u308B `crontab`\uFF08cron \u30B5\u30FC\u30D3\u30B9\uFF09\u304C\u3042\u308A\u307E\u305B\u3093\u3002\u81EA\u5F8B\u30B9\u30B1\u30B8\u30E5\u30FC\u30EA\u30F3\u30B0\u306B\u306F\u30EF\u30FC\u30AB\u30FC\u30DE\u30B7\u30F3\u306E cron \u304C\u5FC5\u8981\u3067\u3059\u3002",
+  "autonomous.settingsInvalidJson": "\u81EA\u5F8B\u8A2D\u5B9A\u304C\u6709\u52B9\u306A JSON \u3067\u306F\u3042\u308A\u307E\u305B\u3093\u3002",
+  "config.notObject": "config.json \u306F JSON \u30AA\u30D6\u30B8\u30A7\u30AF\u30C8\u3067\u3042\u308B\u5FC5\u8981\u304C\u3042\u308A\u307E\u3059\u3002",
+  "config.invalidJson": "\u7121\u52B9\u306A JSON: {message}"
 };
 
 // src/i18n/messages/zh.json
@@ -29485,7 +29835,11 @@ var zh_default = {
   "autoRun.failed": "\u81EA\u4E3B\u5FAA\u73AF\u8C03\u5EA6\u5931\u8D25\uFF1A{note}",
   "autoRun.noDaemon": "\u914D\u7F6E\u6587\u4EF6 \u201C{profile}\u201D \u6CA1\u6709\u6B63\u5728\u8FD0\u884C\u7684\u5B88\u62A4\u8FDB\u7A0B \u2014 \u8BF7\u5148\u542F\u52A8\uFF1A4pm start --profile {profile}",
   "autoRun.timeout": "\u81EA\u4E3B\u5FAA\u73AF\u8D85\u8FC7\u65F6\u95F4\u9650\u5236 \u2014 \u6B63\u5728\u4E2D\u6B62\u3002",
-  "autoRun.authFailed": "\u63A7\u5236\u901A\u9053\u8BA4\u8BC1\u5931\u8D25 \u2014 \u5B88\u62A4\u8FDB\u7A0B\u62D2\u7EDD\u4E86\u4EE4\u724C\u3002"
+  "autoRun.authFailed": "\u63A7\u5236\u901A\u9053\u8BA4\u8BC1\u5931\u8D25 \u2014 \u5B88\u62A4\u8FDB\u7A0B\u62D2\u7EDD\u4E86\u4EE4\u724C\u3002",
+  "autonomous.cronMissing": "\u65E0\u6CD5\u5B89\u88C5\u81EA\u4E3B cron\uFF1A\u6B64\u5DE5\u4F5C\u673A\u6CA1\u6709\u53EF\u7528\u7684 `crontab`\uFF08cron \u670D\u52A1\uFF09\u3002\u81EA\u4E3B\u8C03\u5EA6\u9700\u8981\u5DE5\u4F5C\u673A\u4E0A\u7684 cron\u3002",
+  "autonomous.settingsInvalidJson": "\u81EA\u4E3B\u8BBE\u7F6E\u4E0D\u662F\u6709\u6548\u7684 JSON\u3002",
+  "config.notObject": "config.json \u5FC5\u987B\u662F JSON \u5BF9\u8C61\u3002",
+  "config.invalidJson": "\u65E0\u6548\u7684 JSON\uFF1A{message}"
 };
 
 // src/i18n/messages/index.ts
@@ -41276,7 +41630,7 @@ async function installCron(root, profileDir2) {
   await chmod(script, 493).catch(() => void 0);
   const kept = (await crontabList()).split("\n").filter((l) => l.trim() && !l.includes(script));
   kept.push(`${cfg.cronSchedule} ${script}`);
-  await crontabSet(kept.join("\n"));
+  return crontabSet(kept.join("\n"));
 }
 async function syncCron(root, profileDir2) {
   if (await cronInstalled(root)) await installCron(root, profileDir2);
@@ -41353,12 +41707,16 @@ async function writeAutonomous(root, profileDir2, req, by) {
   try {
     if (req.kind === "settings") {
       const parsed = parseJson(req.settings);
-      if (!parsed) return { ok: false, error: "settings is not valid JSON" };
+      if (!parsed) return { ok: false, error: t("autonomous.settingsInvalidJson") };
       await writeAutonomousConfig(profileDir2, parsed);
       await syncCron(root, profileDir2);
     } else if (req.kind === "cron") {
-      if (req.action === "install") await installCron(root, profileDir2);
-      else await uninstallCron(root);
+      if (req.action === "install") {
+        const wrote = await installCron(root, profileDir2);
+        if (!wrote || !await cronInstalled(root)) {
+          return { ok: false, error: t("autonomous.cronMissing") };
+        }
+      } else await uninstallCron(root);
     } else {
       const base = (await resolveBases(root).catch(() => null))?.root.base ?? "";
       let res;
@@ -46369,10 +46727,10 @@ function applyConfigText(profileDir2, text) {
   try {
     parsed = JSON.parse(text);
   } catch (err) {
-    return { ok: false, error: `Invalid JSON: ${err.message}` };
+    return { ok: false, error: t("config.invalidJson", { message: err.message }) };
   }
   if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
-    return { ok: false, error: "config.json must be a JSON object." };
+    return { ok: false, error: t("config.notObject") };
   }
   const next = { ...parsed };
   const current2 = readProfileConfig(profileDir2);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@4pm/cli",
-  "version": "1.30.0",
+  "version": "1.31.0",
   "private": false,
   "description": "4PM CLI — drives Claude/Codex CLIs on AI worker machines (Node + TypeScript)",
   "license": "LicenseRef-4PM-Source-Available",