@4pm/cli 1.5.22 → 1.5.25

package/dist/index.js

@@ -33013,6 +33013,15 @@ var dispatchCommandRequestSchema = external_exports.object({
    * agent run (the Console tab + Git merge, which legitimately use tools).
    */
   aiOneShot: external_exports.boolean().optional(),
+  /**
+   * Read-only agent AI mode (ADR-0265): the prompt is a task that must **read + inspect the repo
+   * but write nothing** (the project-template "Analyze impact"). Unlike `aiOneShot` it keeps the
+   * read/search tools (`Read`/`Glob`/`Grep`/`Bash`) and runs multi-turn, but the cli blocks the
+   * write/orchestration tools and runs claude under `--permission-mode plan` (codex `--sandbox
+   * read-only`) so it can diff files without editing them. Only meaningful with `ai:true`;
+   * **mutually exclusive with `aiOneShot`** (a run is one-shot | read-only | full-agent).
+   */
+  aiReadOnly: external_exports.boolean().optional(),
   /**
    * Per-run AI execution overrides (ADR-0261): model/thinking/temperature chosen in the web
    * "AI settings" modal (per-user localStorage), layered over the profile default by the cli.
@@ -33027,6 +33036,13 @@ var dispatchCommandRequestSchema = external_exports.object({
       message: "Provide exactly one of machineLinkId or pick."
     });
   }
+  if (v.aiOneShot && v.aiReadOnly) {
+    ctx.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      path: ["aiReadOnly"],
+      message: "aiOneShot and aiReadOnly are mutually exclusive."
+    });
+  }
   if (!v.ai && v.command.length > COMMAND_MAX_LEN) {
     ctx.addIssue({
       code: external_exports.ZodIssueCode.too_big,
@@ -33318,16 +33334,6 @@ var MEMO_MAX_LENGTH = 65536;
 var putMemoRequestSchema = external_exports.object({
   content: external_exports.string().max(MEMO_MAX_LENGTH)
 });
-var MEMO_ITEM_MAX_LENGTH = 2e3;
-var createMemoItemSchema = external_exports.object({
-  content: external_exports.string().trim().min(1).max(MEMO_ITEM_MAX_LENGTH)
-});
-var updateMemoItemSchema = external_exports.object({
-  content: external_exports.string().trim().min(1).max(MEMO_ITEM_MAX_LENGTH).optional(),
-  done: external_exports.boolean().optional()
-}).refine((v) => v.content !== void 0 || v.done !== void 0, {
-  message: "content or done required"
-});
 var HTTP_JSON_BODY_LIMIT_BYTES = 2 * 1048576;
 var putSpecDraftRequestSchema = external_exports.object({
   spec: external_exports.record(external_exports.unknown()),
@@ -34843,6 +34849,48 @@ function oneShotArgs(cmd) {
   if (!cmd.includes("claude")) return [];
   return ["--max-turns=1", "--disallowedTools", ONE_SHOT_DISALLOWED_CLAUDE_TOOLS, "--permission-mode", "default"];
 }
+var READ_ONLY_DISALLOWED_CLAUDE_TOOLS = [
+  "Edit",
+  "Write",
+  "NotebookEdit",
+  "Task",
+  "SlashCommand",
+  "Skill",
+  "WebSearch",
+  "WebFetch",
+  "TaskCreate",
+  "TaskGet",
+  "TaskList",
+  "TaskOutput",
+  "TaskStop",
+  "TaskUpdate",
+  "Monitor",
+  "DesignSync",
+  "CronCreate",
+  "CronDelete",
+  "CronList",
+  "EnterWorktree",
+  "ExitWorktree",
+  "RemoteTrigger",
+  "ScheduleWakeup",
+  "SendMessage",
+  "PushNotification"
+].join(",");
+var READ_ONLY_MAX_TURNS = 40;
+function readOnlyArgs(cmd, profileMaxTurns) {
+  if (cmd.includes("claude")) {
+    const turns = typeof profileMaxTurns === "number" && profileMaxTurns > 0 ? Math.floor(profileMaxTurns) : READ_ONLY_MAX_TURNS;
+    return [
+      `--max-turns=${turns}`,
+      "--disallowedTools",
+      READ_ONLY_DISALLOWED_CLAUDE_TOOLS,
+      "--permission-mode",
+      "plan"
+    ];
+  }
+  if (cmd.includes("codex")) return ["--sandbox", "read-only"];
+  return [];
+}
 function requiredArgs(cmd) {
   if (cmd.includes("claude")) return REQUIRED_AI_ARGS.claude;
   if (cmd.includes("codex")) return REQUIRED_AI_ARGS.codex;
@@ -34916,21 +34964,21 @@ function overrideEnv(cmd, o) {
   const budget = THINKING_TOKENS[o.thinking];
   return budget ? { MAX_THINKING_TOKENS: String(budget) } : {};
 }
-function buildRunArgs(profile, cmd, resumeId, oneShot = false, override) {
+function buildRunArgs(profile, cmd, resumeId, oneShot = false, override, readOnly = false) {
   const extras = profile.args ?? [];
   const model = override?.model?.trim() || profile.model?.trim();
   const modelArgs = model ? ["--model", model] : [];
   const resumeArgs = resumeId && cmd.includes("claude") ? ["--resume", resumeId] : [];
   const turns = profile.maxTurns;
-  const perProfileTurns = !oneShot && cmd.includes("claude") && typeof turns === "number" && turns > 0 ? [`--max-turns=${Math.floor(turns)}`] : [];
-  const oneShotExtra = oneShot ? oneShotArgs(cmd) : perProfileTurns;
+  const perProfileTurns = !oneShot && !readOnly && cmd.includes("claude") && typeof turns === "number" && turns > 0 ? [`--max-turns=${Math.floor(turns)}`] : [];
+  const modeExtra = oneShot ? oneShotArgs(cmd) : readOnly ? readOnlyArgs(cmd, turns) : perProfileTurns;
   return [
     ...requiredArgs(cmd),
     ...resumeArgs,
     ...extras,
     ...modelArgs,
     ...overrideArgs(cmd, override),
-    ...oneShotExtra
+    ...modeExtra
   ];
 }
 function claudeHomeDirs(config) {
@@ -34970,10 +35018,10 @@ function resolveClaudeProfiles(config, workingDir) {
   if (idx > 0) profiles.unshift(profiles.splice(idx, 1)[0]);
   return profiles;
 }
-function planAiRun(prompt, config, hint = {}, resume = /* @__PURE__ */ new Map(), oneShot = false, override) {
-  return isUnifiedConfig(config) ? planUnifiedRun(prompt, config, hint.credential ?? null, resume, oneShot, override) : planLegacyRun(prompt, config, hint.dir ?? null, resume, oneShot, override);
+function planAiRun(prompt, config, hint = {}, resume = /* @__PURE__ */ new Map(), oneShot = false, override, readOnly = false) {
+  return isUnifiedConfig(config) ? planUnifiedRun(prompt, config, hint.credential ?? null, resume, oneShot, override, readOnly) : planLegacyRun(prompt, config, hint.dir ?? null, resume, oneShot, override, readOnly);
 }
-function planUnifiedRun(prompt, config, workingCredential, resume, oneShot, override) {
+function planUnifiedRun(prompt, config, workingCredential, resume, oneShot, override, readOnly = false) {
   const baseEnv = config.aiEnv ?? {};
   const active = activeProvider(config);
   const usable = config.aiProfiles.filter(isUsableCredential);
@@ -34982,7 +35030,7 @@ function planUnifiedRun(prompt, config, workingCredential, resume, oneShot, over
     return {
       cmd: active,
       attempts: [
-        { cmd: active, label: "default", dir: null, key: null, args: buildRunArgs({ profile: "" }, active, void 0, oneShot, override), stdin: prompt, env: { ...baseEnv, ...overrideEnv(active, override) } }
+        { cmd: active, label: "default", dir: null, key: null, args: buildRunArgs({ profile: "" }, active, void 0, oneShot, override, readOnly), stdin: prompt, env: { ...baseEnv, ...overrideEnv(active, override) } }
       ]
     };
   }
@@ -35000,20 +35048,20 @@ function planUnifiedRun(prompt, config, workingCredential, resume, oneShot, over
     label: cred.label?.trim() || profileDisplayLabel(dir2),
     dir: dir2,
     key,
-    args: buildRunArgs(cred, cmd, resume.get(key), oneShot, override),
+    args: buildRunArgs(cred, cmd, resume.get(key), oneShot, override, readOnly),
     stdin: prompt,
     env: envVar ? { ...baseEnv, [envVar]: dir2, ...overrideEnv(cmd, override) } : { ...baseEnv, ...overrideEnv(cmd, override) }
   }));
   return { cmd: attempts[0]?.cmd ?? DEFAULT_AI_CLI, attempts };
 }
-function planLegacyRun(prompt, config, workingDir, resume, oneShot, override) {
+function planLegacyRun(prompt, config, workingDir, resume, oneShot, override, readOnly = false) {
   const cmd = config.aiCli || DEFAULT_AI_CLI;
   const baseEnv = config.aiEnv ?? {};
   const envVar = profileEnvVar(cmd);
   const defaultPlan = {
     cmd,
     attempts: [
-      { cmd, label: "default", dir: null, key: null, args: buildRunArgs({ profile: "" }, cmd, void 0, oneShot, override), stdin: prompt, env: { ...baseEnv, ...overrideEnv(cmd, override) } }
+      { cmd, label: "default", dir: null, key: null, args: buildRunArgs({ profile: "" }, cmd, void 0, oneShot, override, readOnly), stdin: prompt, env: { ...baseEnv, ...overrideEnv(cmd, override) } }
     ]
   };
   if (!envVar) return defaultPlan;
@@ -35030,7 +35078,7 @@ function planLegacyRun(prompt, config, workingDir, resume, oneShot, override) {
       label: profileDisplayLabel(dir2),
       dir: dir2,
       key,
-      args: buildRunArgs(profile, cmd, resume.get(key), oneShot, override),
+      args: buildRunArgs(profile, cmd, resume.get(key), oneShot, override, readOnly),
       stdin: prompt,
       env: { ...baseEnv, [envVar]: dir2, ...overrideEnv(cmd, override) }
     };
@@ -38443,7 +38491,8 @@ var WsClient = class {
               "server",
               dispatch.aiOneShot ?? false,
               dispatch.images,
-              dispatch.aiConfig
+              dispatch.aiConfig,
+              dispatch.aiReadOnly ?? false
             );
           }
           break;
@@ -38940,7 +38989,7 @@ var WsClient = class {
    * exactly like typing the prompt in the cli (tries profiles, meters real tokens) instead
    * of spawning the text as a raw command. Streams output to the transcript AND the server.
    */
-  async runAiPrompt(prompt, commandId, origin, oneShot = false, images, aiConfig) {
+  async runAiPrompt(prompt, commandId, origin, oneShot = false, images, aiConfig, readOnly = false) {
     const config = readProfileConfig(this.context.profileDir);
     const projectTimeoutSec = config.projectAiRunTimeoutSec ?? 0;
     const machineTimeoutSec = config.aiRunTimeoutSec ?? 0;
@@ -39012,7 +39061,7 @@ var WsClient = class {
     const guardedPrompt = this.restrictToFolder && this.physicRoot ? folderScopeGuard(this.physicRoot, aiBodyPrompt) : aiBodyPrompt;
     const hint = unified ? { credential: startCred ?? workingCred } : { dir: startDir ?? workingDir };
     const memCfg = resolveMemoryConfig(config);
-    const firstAttempt = planAiRun(guardedPrompt, config, hint, /* @__PURE__ */ new Map(), oneShot, aiConfig).attempts[0];
+    const firstAttempt = planAiRun(guardedPrompt, config, hint, /* @__PURE__ */ new Map(), oneShot, aiConfig, readOnly).attempts[0];
     const resumeId = memCfg.enabled && firstAttempt?.key && firstAttempt.cmd === "claude" ? this.sessionIdByKey.get(firstAttempt.key) : void 0;
     let effectivePrompt = guardedPrompt;
     let resume = /* @__PURE__ */ new Map();
@@ -39024,7 +39073,7 @@ ${this.aiMemory}
 
 ${guardedPrompt}`;
     }
-    const plan = planAiRun(effectivePrompt, config, hint, resume, oneShot, aiConfig);
+    const plan = planAiRun(effectivePrompt, config, hint, resume, oneShot, aiConfig, readOnly);
     const markerArgs = plan.attempts[0]?.args ?? [];
     const startStamp = formatTimestampInZone(/* @__PURE__ */ new Date(), this.orgTimezone);
     this.bus.push({ source: origin, kind: "aireq", text: `${startStamp} ${plan.cmd} \u2039 ${prompt}` });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@4pm/cli",
-  "version": "1.5.22",
+  "version": "1.5.25",
   "private": false,
   "description": "4PM CLI — drives Claude/Codex CLIs on AI worker machines (Node + TypeScript)",
   "license": "LicenseRef-4PM-Source-Available",