@4pm/cli 1.5.22 → 1.5.26

package/dist/index.js

@@ -33013,6 +33013,15 @@ var dispatchCommandRequestSchema = external_exports.object({
    * agent run (the Console tab + Git merge, which legitimately use tools).
    */
   aiOneShot: external_exports.boolean().optional(),
+  /**
+   * Read-only agent AI mode (ADR-0265): the prompt is a task that must **read + inspect the repo
+   * but write nothing** (the project-template "Analyze impact"). Unlike `aiOneShot` it keeps the
+   * read/search tools (`Read`/`Glob`/`Grep`/`Bash`) and runs multi-turn, but the cli blocks the
+   * write/orchestration tools and runs claude under `--permission-mode plan` (codex `--sandbox
+   * read-only`) so it can diff files without editing them. Only meaningful with `ai:true`;
+   * **mutually exclusive with `aiOneShot`** (a run is one-shot | read-only | full-agent).
+   */
+  aiReadOnly: external_exports.boolean().optional(),
   /**
    * Per-run AI execution overrides (ADR-0261): model/thinking/temperature chosen in the web
    * "AI settings" modal (per-user localStorage), layered over the profile default by the cli.
@@ -33027,6 +33036,13 @@ var dispatchCommandRequestSchema = external_exports.object({
       message: "Provide exactly one of machineLinkId or pick."
     });
   }
+  if (v.aiOneShot && v.aiReadOnly) {
+    ctx.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      path: ["aiReadOnly"],
+      message: "aiOneShot and aiReadOnly are mutually exclusive."
+    });
+  }
   if (!v.ai && v.command.length > COMMAND_MAX_LEN) {
     ctx.addIssue({
       code: external_exports.ZodIssueCode.too_big,
@@ -33318,16 +33334,6 @@ var MEMO_MAX_LENGTH = 65536;
 var putMemoRequestSchema = external_exports.object({
   content: external_exports.string().max(MEMO_MAX_LENGTH)
 });
-var MEMO_ITEM_MAX_LENGTH = 2e3;
-var createMemoItemSchema = external_exports.object({
-  content: external_exports.string().trim().min(1).max(MEMO_ITEM_MAX_LENGTH)
-});
-var updateMemoItemSchema = external_exports.object({
-  content: external_exports.string().trim().min(1).max(MEMO_ITEM_MAX_LENGTH).optional(),
-  done: external_exports.boolean().optional()
-}).refine((v) => v.content !== void 0 || v.done !== void 0, {
-  message: "content or done required"
-});
 var HTTP_JSON_BODY_LIMIT_BYTES = 2 * 1048576;
 var putSpecDraftRequestSchema = external_exports.object({
   spec: external_exports.record(external_exports.unknown()),
@@ -34839,9 +34845,57 @@ var ONE_SHOT_DISALLOWED_CLAUDE_TOOLS = [
   "SendMessage",
   "PushNotification"
 ].join(",");
+var ONE_SHOT_MAX_TURNS = 4;
 function oneShotArgs(cmd) {
   if (!cmd.includes("claude")) return [];
-  return ["--max-turns=1", "--disallowedTools", ONE_SHOT_DISALLOWED_CLAUDE_TOOLS, "--permission-mode", "default"];
+  return [
+    `--max-turns=${ONE_SHOT_MAX_TURNS}`,
+    "--disallowedTools",
+    ONE_SHOT_DISALLOWED_CLAUDE_TOOLS,
+    "--permission-mode",
+    "default"
+  ];
+}
+var READ_ONLY_DISALLOWED_CLAUDE_TOOLS = [
+  "Edit",
+  "Write",
+  "NotebookEdit",
+  "Task",
+  "SlashCommand",
+  "Skill",
+  "WebSearch",
+  "WebFetch",
+  "TaskCreate",
+  "TaskGet",
+  "TaskList",
+  "TaskOutput",
+  "TaskStop",
+  "TaskUpdate",
+  "Monitor",
+  "DesignSync",
+  "CronCreate",
+  "CronDelete",
+  "CronList",
+  "EnterWorktree",
+  "ExitWorktree",
+  "RemoteTrigger",
+  "ScheduleWakeup",
+  "SendMessage",
+  "PushNotification"
+].join(",");
+var READ_ONLY_MAX_TURNS = 40;
+function readOnlyArgs(cmd) {
+  if (cmd.includes("claude")) {
+    return [
+      `--max-turns=${READ_ONLY_MAX_TURNS}`,
+      "--disallowedTools",
+      READ_ONLY_DISALLOWED_CLAUDE_TOOLS,
+      "--permission-mode",
+      "plan"
+    ];
+  }
+  if (cmd.includes("codex")) return ["--sandbox", "read-only"];
+  return [];
 }
 function requiredArgs(cmd) {
   if (cmd.includes("claude")) return REQUIRED_AI_ARGS.claude;
@@ -34916,21 +34970,19 @@ function overrideEnv(cmd, o) {
   const budget = THINKING_TOKENS[o.thinking];
   return budget ? { MAX_THINKING_TOKENS: String(budget) } : {};
 }
-function buildRunArgs(profile, cmd, resumeId, oneShot = false, override) {
+function buildRunArgs(profile, cmd, resumeId, oneShot = false, override, readOnly = false) {
   const extras = profile.args ?? [];
   const model = override?.model?.trim() || profile.model?.trim();
   const modelArgs = model ? ["--model", model] : [];
   const resumeArgs = resumeId && cmd.includes("claude") ? ["--resume", resumeId] : [];
-  const turns = profile.maxTurns;
-  const perProfileTurns = !oneShot && cmd.includes("claude") && typeof turns === "number" && turns > 0 ? [`--max-turns=${Math.floor(turns)}`] : [];
-  const oneShotExtra = oneShot ? oneShotArgs(cmd) : perProfileTurns;
+  const modeExtra = oneShot ? oneShotArgs(cmd) : readOnly ? readOnlyArgs(cmd) : [];
   return [
     ...requiredArgs(cmd),
     ...resumeArgs,
     ...extras,
     ...modelArgs,
     ...overrideArgs(cmd, override),
-    ...oneShotExtra
+    ...modeExtra
   ];
 }
 function claudeHomeDirs(config) {
@@ -34970,10 +35022,10 @@ function resolveClaudeProfiles(config, workingDir) {
   if (idx > 0) profiles.unshift(profiles.splice(idx, 1)[0]);
   return profiles;
 }
-function planAiRun(prompt, config, hint = {}, resume = /* @__PURE__ */ new Map(), oneShot = false, override) {
-  return isUnifiedConfig(config) ? planUnifiedRun(prompt, config, hint.credential ?? null, resume, oneShot, override) : planLegacyRun(prompt, config, hint.dir ?? null, resume, oneShot, override);
+function planAiRun(prompt, config, hint = {}, resume = /* @__PURE__ */ new Map(), oneShot = false, override, readOnly = false) {
+  return isUnifiedConfig(config) ? planUnifiedRun(prompt, config, hint.credential ?? null, resume, oneShot, override, readOnly) : planLegacyRun(prompt, config, hint.dir ?? null, resume, oneShot, override, readOnly);
 }
-function planUnifiedRun(prompt, config, workingCredential, resume, oneShot, override) {
+function planUnifiedRun(prompt, config, workingCredential, resume, oneShot, override, readOnly = false) {
   const baseEnv = config.aiEnv ?? {};
   const active = activeProvider(config);
   const usable = config.aiProfiles.filter(isUsableCredential);
@@ -34982,7 +35034,7 @@ function planUnifiedRun(prompt, config, workingCredential, resume, oneShot, over
     return {
       cmd: active,
       attempts: [
-        { cmd: active, label: "default", dir: null, key: null, args: buildRunArgs({ profile: "" }, active, void 0, oneShot, override), stdin: prompt, env: { ...baseEnv, ...overrideEnv(active, override) } }
+        { cmd: active, label: "default", dir: null, key: null, args: buildRunArgs({ profile: "" }, active, void 0, oneShot, override, readOnly), stdin: prompt, env: { ...baseEnv, ...overrideEnv(active, override) } }
       ]
     };
   }
@@ -35000,20 +35052,20 @@ function planUnifiedRun(prompt, config, workingCredential, resume, oneShot, over
     label: cred.label?.trim() || profileDisplayLabel(dir2),
     dir: dir2,
     key,
-    args: buildRunArgs(cred, cmd, resume.get(key), oneShot, override),
+    args: buildRunArgs(cred, cmd, resume.get(key), oneShot, override, readOnly),
     stdin: prompt,
     env: envVar ? { ...baseEnv, [envVar]: dir2, ...overrideEnv(cmd, override) } : { ...baseEnv, ...overrideEnv(cmd, override) }
   }));
   return { cmd: attempts[0]?.cmd ?? DEFAULT_AI_CLI, attempts };
 }
-function planLegacyRun(prompt, config, workingDir, resume, oneShot, override) {
+function planLegacyRun(prompt, config, workingDir, resume, oneShot, override, readOnly = false) {
   const cmd = config.aiCli || DEFAULT_AI_CLI;
   const baseEnv = config.aiEnv ?? {};
   const envVar = profileEnvVar(cmd);
   const defaultPlan = {
     cmd,
     attempts: [
-      { cmd, label: "default", dir: null, key: null, args: buildRunArgs({ profile: "" }, cmd, void 0, oneShot, override), stdin: prompt, env: { ...baseEnv, ...overrideEnv(cmd, override) } }
+      { cmd, label: "default", dir: null, key: null, args: buildRunArgs({ profile: "" }, cmd, void 0, oneShot, override, readOnly), stdin: prompt, env: { ...baseEnv, ...overrideEnv(cmd, override) } }
     ]
   };
   if (!envVar) return defaultPlan;
@@ -35030,7 +35082,7 @@ function planLegacyRun(prompt, config, workingDir, resume, oneShot, override) {
       label: profileDisplayLabel(dir2),
       dir: dir2,
       key,
-      args: buildRunArgs(profile, cmd, resume.get(key), oneShot, override),
+      args: buildRunArgs(profile, cmd, resume.get(key), oneShot, override, readOnly),
       stdin: prompt,
       env: { ...baseEnv, [envVar]: dir2, ...overrideEnv(cmd, override) }
     };
@@ -37922,7 +37974,9 @@ function toDtoEntry(e) {
     level: e.level,
     resultKind: e.resultKind,
     // Processing time on a terminal `exit` entry (ADR-0249) — the web renders it inline.
-    ...e.durationMs != null ? { durationMs: e.durationMs } : {}
+    ...e.durationMs != null ? { durationMs: e.durationMs } : {},
+    // AI-run metadata on an `aireq` marker — powers the web's clickable CLI name → details modal.
+    ...e.aiMeta ? { aiMeta: e.aiMeta } : {}
   };
 }
 var WsClient = class {
@@ -38443,7 +38497,8 @@ var WsClient = class {
               "server",
               dispatch.aiOneShot ?? false,
               dispatch.images,
-              dispatch.aiConfig
+              dispatch.aiConfig,
+              dispatch.aiReadOnly ?? false
             );
           }
           break;
@@ -38940,7 +38995,7 @@ var WsClient = class {
    * exactly like typing the prompt in the cli (tries profiles, meters real tokens) instead
    * of spawning the text as a raw command. Streams output to the transcript AND the server.
    */
-  async runAiPrompt(prompt, commandId, origin, oneShot = false, images, aiConfig) {
+  async runAiPrompt(prompt, commandId, origin, oneShot = false, images, aiConfig, readOnly = false) {
     const config = readProfileConfig(this.context.profileDir);
     const projectTimeoutSec = config.projectAiRunTimeoutSec ?? 0;
     const machineTimeoutSec = config.aiRunTimeoutSec ?? 0;
@@ -39012,7 +39067,7 @@ var WsClient = class {
     const guardedPrompt = this.restrictToFolder && this.physicRoot ? folderScopeGuard(this.physicRoot, aiBodyPrompt) : aiBodyPrompt;
     const hint = unified ? { credential: startCred ?? workingCred } : { dir: startDir ?? workingDir };
     const memCfg = resolveMemoryConfig(config);
-    const firstAttempt = planAiRun(guardedPrompt, config, hint, /* @__PURE__ */ new Map(), oneShot, aiConfig).attempts[0];
+    const firstAttempt = planAiRun(guardedPrompt, config, hint, /* @__PURE__ */ new Map(), oneShot, aiConfig, readOnly).attempts[0];
     const resumeId = memCfg.enabled && firstAttempt?.key && firstAttempt.cmd === "claude" ? this.sessionIdByKey.get(firstAttempt.key) : void 0;
     let effectivePrompt = guardedPrompt;
     let resume = /* @__PURE__ */ new Map();
@@ -39024,10 +39079,17 @@ ${this.aiMemory}
 
 ${guardedPrompt}`;
     }
-    const plan = planAiRun(effectivePrompt, config, hint, resume, oneShot, aiConfig);
+    const plan = planAiRun(effectivePrompt, config, hint, resume, oneShot, aiConfig, readOnly);
     const markerArgs = plan.attempts[0]?.args ?? [];
     const startStamp = formatTimestampInZone(/* @__PURE__ */ new Date(), this.orgTimezone);
-    this.bus.push({ source: origin, kind: "aireq", text: `${startStamp} ${plan.cmd} \u2039 ${prompt}` });
+    this.bus.push({
+      source: origin,
+      kind: "aireq",
+      text: `${startStamp} ${plan.cmd} \u2039 ${prompt}`,
+      // Carry the run's prompt + resolved flags so the web Console's clickable CLI name can open a
+      // details modal (the representative first-attempt argv; failover may run a different profile's).
+      aiMeta: { cmd: plan.cmd, args: markerArgs, prompt }
+    });
     logger.info("command.ai", { commandId, origin, cmd: plan.cmd, profiles: plan.attempts.length });
     if (origin === "local") {
       this.send(WsChannels.COMMAND_ANNOUNCE, {
@@ -39085,7 +39147,7 @@ ${guardedPrompt}`;
 `, log: true });
       },
       onAttemptFail: (label, reason) => {
-        const text = reason === "limit" ? `profile "${label}" hit its session limit \u2014 trying next` : reason === "credits" ? `profile "${label}" is out of usage credits \u2014 trying next` : `profile "${label}" failed to authenticate \u2014 trying next`;
+        const text = reason === "limit" ? `profile "${label}" hit its session limit \u2014 trying next` : reason === "credits" ? `profile "${label}" is out of usage credits \u2014 trying next` : reason === "auth" ? `profile "${label}" failed to authenticate \u2014 trying next` : `profile "${label}" run failed \u2014 trying next`;
         this.bus.push({ source: origin, kind: "log", text, level: "warn" });
         this.send(WsChannels.COMMAND_OUTPUT, { commandId, seq: seq++, chunk: `${text}
 `, log: true });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@4pm/cli",
-  "version": "1.5.22",
+  "version": "1.5.26",
   "private": false,
   "description": "4PM CLI — drives Claude/Codex CLIs on AI worker machines (Node + TypeScript)",
   "license": "LicenseRef-4PM-Source-Available",