@4pm/cli 1.4.6 → 1.4.12

package/dist/index.js

@@ -34992,6 +34992,20 @@ function buildPrompt(docs, question, askerRole) {
     roleNote,
     "Answer concisely in the user's language; reference the relevant doc heading/path when useful.",
     "",
+    // Structured output for inline moderation (ADR-0237): the same run also classifies the question.
+    "Return ONLY a single JSON object (no markdown fences, no prose around it) with these keys:",
+    '  "onTopic": boolean   \u2014 false if the question is NOT about how to use the 4PM product,',
+    '  "sensitive": boolean \u2014 true if the question is inappropriate / abusive OR asks how to hack,',
+    "                         bypass security, gain unauthorized access, take over or steal another",
+    "                         user's/org's account or data, obtain credentials, or any malicious intent,",
+    '  "reason": string     \u2014 a short reason when onTopic is false or sensitive is true, else "",',
+    `  "answer": string     \u2014 your reply to the user, in markdown (in the user's language).`,
+    "Refusal policy (ADR-0237): if the question is off-topic (onTopic false) OR sensitive, DO NOT",
+    `answer it. Set "answer" to this EXACT same polite refusal for BOTH cases (in the user's`,
+    'language, do not reveal which category or hint at the reason): "Sorry, I can only help with',
+    'questions about how to use 4PM. For anything else, please contact human support." Only answer',
+    "normally when onTopic is true AND sensitive is false.",
+    "",
     "===== DOCUMENTATION =====",
     docs,
     "",
@@ -34999,6 +35013,23 @@ function buildPrompt(docs, question, askerRole) {
     question
   ].join("\n");
 }
+function parseModeratedAnswer(text) {
+  const start = text.indexOf("{");
+  const end = text.lastIndexOf("}");
+  if (start !== -1 && end > start) {
+    try {
+      const obj = JSON.parse(text.slice(start, end + 1));
+      if (typeof obj.answer === "string" && obj.answer.trim()) {
+        const onTopic = obj.onTopic !== false;
+        const sensitive = obj.sensitive === true;
+        const reason = typeof obj.reason === "string" ? obj.reason : "";
+        return { body: obj.answer.trim(), moderation: { onTopic, sensitive, reason } };
+      }
+    } catch {
+    }
+  }
+  return { body: text.trim() };
+}
 function runClaudeOnce(cmd, profile, prompt, extraEnv) {
   return new Promise((resolve8, reject) => {
     const isClaude = cmd.includes("claude");
@@ -35058,9 +35089,12 @@ async function runSupportAnswer(req, ai, profileDir2) {
       ai
     );
     if (!text) return { body: "", error: "empty answer" };
-    const u = usage.tokens > 0 ? usage : { ...NO_USAGE, tokens: estimateTokens(text) };
+    const { body, moderation } = parseModeratedAnswer(text);
+    if (!body) return { body: "", error: "empty answer" };
+    const u = usage.tokens > 0 ? usage : { ...NO_USAGE, tokens: estimateTokens(body) };
     return {
-      body: text,
+      body,
+      ...moderation ? { moderation } : {},
       tokens: u.tokens,
       ...usage.tokens > 0 ? {
         tokensBreakdown: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@4pm/cli",
-  "version": "1.4.6",
+  "version": "1.4.12",
   "private": false,
   "description": "4PM CLI — drives Claude/Codex CLIs on AI worker machines (Node + TypeScript)",
   "license": "LicenseRef-4PM-Source-Available",