@4pm/cli 1.5.37 → 1.5.40

package/dist/index.js

@@ -5713,14 +5713,14 @@ var require_react_development = __commonJS({
               var thenableResult = result;
               var wasAwaited = false;
               var thenable = {
-                then: function(resolve9, reject) {
+                then: function(resolve10, reject) {
                   wasAwaited = true;
                   thenableResult.then(function(returnValue2) {
                     popActScope(prevActScopeDepth);
                     if (actScopeDepth === 0) {
-                      recursivelyFlushAsyncActWork(returnValue2, resolve9, reject);
+                      recursivelyFlushAsyncActWork(returnValue2, resolve10, reject);
                     } else {
-                      resolve9(returnValue2);
+                      resolve10(returnValue2);
                     }
                   }, function(error2) {
                     popActScope(prevActScopeDepth);
@@ -5750,20 +5750,20 @@ var require_react_development = __commonJS({
                   ReactCurrentActQueue.current = null;
                 }
                 var _thenable = {
-                  then: function(resolve9, reject) {
+                  then: function(resolve10, reject) {
                     if (ReactCurrentActQueue.current === null) {
                       ReactCurrentActQueue.current = [];
-                      recursivelyFlushAsyncActWork(returnValue, resolve9, reject);
+                      recursivelyFlushAsyncActWork(returnValue, resolve10, reject);
                     } else {
-                      resolve9(returnValue);
+                      resolve10(returnValue);
                     }
                   }
                 };
                 return _thenable;
               } else {
                 var _thenable2 = {
-                  then: function(resolve9, reject) {
-                    resolve9(returnValue);
+                  then: function(resolve10, reject) {
+                    resolve10(returnValue);
                   }
                 };
                 return _thenable2;
@@ -5779,7 +5779,7 @@ var require_react_development = __commonJS({
             actScopeDepth = prevActScopeDepth;
           }
         }
-        function recursivelyFlushAsyncActWork(returnValue, resolve9, reject) {
+        function recursivelyFlushAsyncActWork(returnValue, resolve10, reject) {
           {
             var queue = ReactCurrentActQueue.current;
             if (queue !== null) {
@@ -5788,16 +5788,16 @@ var require_react_development = __commonJS({
                 enqueueTask(function() {
                   if (queue.length === 0) {
                     ReactCurrentActQueue.current = null;
-                    resolve9(returnValue);
+                    resolve10(returnValue);
                   } else {
-                    recursivelyFlushAsyncActWork(returnValue, resolve9, reject);
+                    recursivelyFlushAsyncActWork(returnValue, resolve10, reject);
                   }
                 });
               } catch (error2) {
                 reject(error2);
               }
             } else {
-              resolve9(returnValue);
+              resolve10(returnValue);
             }
           }
         }
@@ -28560,8 +28560,22 @@ function normalizeLocale(value) {
 
 // vendor/@4pm/constants/project-template.ts
 var PROJECT_TEMPLATE = {
-  version: "1.0.1",
+  version: "1.0.2",
   changelog: [
+    {
+      version: "1.0.2",
+      date: "2026-09-16",
+      summary: "AI_DONE.md changed to a Markdown table \u2014 catch-up entry for projects scaffolded before the conversion.",
+      notes: [
+        "AI_DONE.md's Done and Incidents sections are Markdown tables (| Timestamp | ID | Task description | Files | Notes | and | Timestamp | Note |), matching the other autonomous books.",
+        "The conversion itself shipped with the baseline scaffold, but was never recorded as a template version, so the 1.0.1 changelog assumed AI_DONE was already tabular. Projects scaffolded before it still carry the old two-section prose layout even at 1.0.1; this entry lets them detect the drift and convert AI_DONE on the next Update."
+      ],
+      files: [
+        "AI_DONE.md",
+        ".claude/templates/AI_DONE.empty.md",
+        ".claude/templates/AI_DONE.sample.md"
+      ]
+    },
     {
       version: "1.0.1",
       date: "2026-09-13",
@@ -29621,7 +29635,7 @@ async function checkAndUpdate(serverUrl, autoUpdate) {
 // src/core/ws-client.ts
 init_wrapper();
 import { randomUUID as randomUUID2 } from "crypto";
-import { basename as basename6, join as join28 } from "path";
+import { basename as basename7, join as join28 } from "path";
 import { existsSync as existsSync15, mkdirSync as mkdirSync7 } from "fs";
 
 // vendor/@4pm/utils/helpers.ts
@@ -33978,6 +33992,16 @@ var fsMutateRequestSchema = external_exports.object({
   from: external_exports.string().max(1024).optional(),
   to: external_exports.string().max(1024).optional()
 });
+var FS_TRANSFER_MAX_BYTES = 10 * 1024 * 1024;
+var FS_TRANSFER_MAX_BASE64 = Math.ceil(FS_TRANSFER_MAX_BYTES * 4 / 3) + 16;
+var fsUploadRequestSchema = external_exports.object({
+  /** Destination path relative to the physic-project root; a `..` escaping the root is rejected on the cli. */
+  path: external_exports.string().min(1).max(1024),
+  /** File bytes, base64-encoded (capped to the transfer limit). */
+  contentBase64: external_exports.string().min(1).max(FS_TRANSFER_MAX_BASE64),
+  /** Optional MIME type from the browser (informational). */
+  contentType: external_exports.string().max(255).optional()
+});
 var taskApproveRequestSchema = external_exports.object({
   taskId: external_exports.string().min(1).max(64),
   approved: external_exports.boolean()
@@ -34578,6 +34602,12 @@ var WsChannels = {
   // server → cli (reply): create/rename/move/delete a file or folder in the project tree,
   // each op path-clamped to the physic root (machine-0059, ADR-0260, `project.files_write`).
   FS_MUTATE: "fs.mutate",
+  // server → cli (reply): move file bytes between browser and worker as base64, root-clamped +
+  // size-capped (machine-0061/0062, ADR-0278). `fs.upload` writes an uploaded/pasted file into the
+  // tree (`project.files_write`); `fs.download` reads a file's raw bytes for the browser to save
+  // (`project.read`). Binary transfer the text-only fs.read/fs.write can't carry.
+  FS_UPLOAD: "fs.upload",
+  FS_DOWNLOAD: "fs.download",
   GIT_DIFF: "git.diff",
   GIT_ENV: "git.env",
   // server → cli (reply): read/write the paired profile's config.json (machine-0025/0026,
@@ -34890,8 +34920,8 @@ function resolveInstallTimeoutMs(sec) {
   return sec && sec > 0 ? sec * 1e3 : TOOL_INSTALL_TIMEOUT_DEFAULT_MS;
 }
 function sleep(ms) {
-  return new Promise((resolve9) => {
-    const t2 = setTimeout(resolve9, ms);
+  return new Promise((resolve10) => {
+    const t2 = setTimeout(resolve10, ms);
     t2.unref?.();
   });
 }
@@ -34913,14 +34943,14 @@ function classifyToolFailure(code, out) {
   return { reason: "other", retryable: false };
 }
 function run(cmd, args, onLine, timeoutMs = 18e4) {
-  return new Promise((resolve9) => {
+  return new Promise((resolve10) => {
     let out = "";
     let buf = "";
     let child = null;
     const done = (code) => {
       clearTimeout(timer);
       if (onLine && buf.trim()) onLine(buf.trim());
-      resolve9({ code, out });
+      resolve10({ code, out });
     };
     const timer = setTimeout(() => {
       child?.kill();
@@ -35624,16 +35654,16 @@ async function fetchUsage(token) {
   }
 }
 function runUsageCli(dir2, aiCli2) {
-  return new Promise((resolve9) => {
+  return new Promise((resolve10) => {
     let out = "";
     let child = null;
     const finish = () => {
       clearTimeout(timer);
-      resolve9(out);
+      resolve10(out);
     };
     const timer = setTimeout(() => {
       child?.kill();
-      resolve9(out);
+      resolve10(out);
     }, 3e4);
     timer.unref?.();
     try {
@@ -36194,7 +36224,7 @@ function parseModeratedAnswer(text) {
   return { body: text.trim() };
 }
 function runClaudeOnce(cmd, profile, prompt, extraEnv, imageDir) {
-  return new Promise((resolve9, reject) => {
+  return new Promise((resolve10, reject) => {
     const isClaude = cmd.includes("claude");
     const args = [
       "-p",
@@ -36227,7 +36257,7 @@ function runClaudeOnce(cmd, profile, prompt, extraEnv, imageDir) {
     child.on("close", (code) => {
       clearTimeout(timer);
       out += parser.flush();
-      resolve9({ code: code ?? -1, out, err, usage: parser.usage() });
+      resolve10({ code: code ?? -1, out, err, usage: parser.usage() });
     });
     child.stdin.write(prompt);
     child.stdin.end();
@@ -36361,10 +36391,10 @@ async function crontabList() {
   }
 }
 async function crontabSet(content) {
-  return new Promise((resolve9) => {
+  return new Promise((resolve10) => {
     const child = spawn5("crontab", ["-"], { stdio: ["pipe", "ignore", "ignore"] });
-    child.on("error", () => resolve9(false));
-    child.on("close", (code) => resolve9(code === 0));
+    child.on("error", () => resolve10(false));
+    child.on("close", (code) => resolve10(code === 0));
     child.stdin.end(content.endsWith("\n") ? content : content + "\n");
   });
 }
@@ -36488,14 +36518,14 @@ function detectContainerized() {
   }
 }
 function canReach(host, port) {
-  return new Promise((resolve9) => {
+  return new Promise((resolve10) => {
     const socket = connect({ host, port });
     let done = false;
     const finish = (ok) => {
       if (done) return;
       done = true;
       socket.destroy();
-      resolve9(ok);
+      resolve10(ok);
     };
     socket.setTimeout(PROBE_TIMEOUT_MS);
     socket.once("connect", () => finish(true));
@@ -36667,7 +36697,7 @@ async function runCommand(dispatch, emit, opts) {
   });
   child.stdout?.on("data", (data) => batcher.push(data.toString("utf8")));
   child.stderr?.on("data", (data) => batcher.push(data.toString("utf8")));
-  await new Promise((resolve9) => {
+  await new Promise((resolve10) => {
     child.on("close", (exitCode) => {
       clearTimers();
       batcher.flush();
@@ -36680,7 +36710,7 @@ async function runCommand(dispatch, emit, opts) {
         // server settles the command as failed and the web surfaces the note instead of spinning.
         exitCode: timedOut ? 124 : exitCode ?? -1
       });
-      resolve9();
+      resolve10();
     });
     child.on("error", (err) => {
       clearTimers();
@@ -36692,7 +36722,7 @@ async function runCommand(dispatch, emit, opts) {
         done: true,
         exitCode: -1
       });
-      resolve9();
+      resolve10();
     });
   });
 }
@@ -36714,15 +36744,15 @@ function isOutOfCredits(text) {
   );
 }
 function runAttempt(commandId, cmd, args, stdin, cwd2, env3, onChunk, timeoutMs) {
-  return new Promise((resolve9) => {
+  return new Promise((resolve10) => {
     runCommand(
       { commandId, cmd, args, path: cwd2, env: env3 },
       (out) => {
         if (out.chunk) onChunk(out.chunk);
-        if (out.done) resolve9(out.exitCode ?? -1);
+        if (out.done) resolve10(out.exitCode ?? -1);
       },
       { stdin, ...timeoutMs > 0 ? { timeoutMs } : {} }
-    ).catch(() => resolve9(-1));
+    ).catch(() => resolve10(-1));
   });
 }
 async function runAiFailover(plan, commandId, cwd2, handlers, timeoutMs = 0) {
@@ -37220,7 +37250,7 @@ function buildPrompt2(input) {
   ].join("\n");
 }
 function runOnce(cmd, profile, prompt, cwd2, extraEnv) {
-  return new Promise((resolve9, reject) => {
+  return new Promise((resolve10, reject) => {
     const args = ["-p", ...profile?.model ? ["--model", profile.model] : []];
     const env3 = {
       ...process.env,
@@ -37243,7 +37273,7 @@ function runOnce(cmd, profile, prompt, cwd2, extraEnv) {
     });
     child.on("close", (code) => {
       clearTimeout(timer);
-      resolve9({ code: code ?? -1, out, err });
+      resolve10({ code: code ?? -1, out, err });
     });
     child.stdin.write(prompt);
     child.stdin.end();
@@ -37930,6 +37960,79 @@ async function mutateFs(root, req) {
   }
 }
 
+// src/core/fs-transfer.ts
+import { mkdir as mkdir4, readFile as readFile4, stat as stat2, writeFile as writeFile4 } from "fs/promises";
+import { basename as basename4, dirname as dirname5, extname, resolve as resolve5, sep as sep5 } from "path";
+function resolveInRoot3(root, relPath) {
+  if (!root) return null;
+  const base = resolve5(root);
+  const target = resolve5(base, relPath || ".");
+  return target === base || target.startsWith(base + sep5) ? target : null;
+}
+var MIME_BY_EXT = {
+  ".png": "image/png",
+  ".jpg": "image/jpeg",
+  ".jpeg": "image/jpeg",
+  ".gif": "image/gif",
+  ".webp": "image/webp",
+  ".svg": "image/svg+xml",
+  ".bmp": "image/bmp",
+  ".ico": "image/x-icon",
+  ".pdf": "application/pdf",
+  ".zip": "application/zip",
+  ".json": "application/json",
+  ".txt": "text/plain",
+  ".md": "text/markdown",
+  ".csv": "text/csv",
+  ".html": "text/html",
+  ".xml": "application/xml"
+};
+function guessMime(path) {
+  return MIME_BY_EXT[extname(path).toLowerCase()] ?? "application/octet-stream";
+}
+async function uploadBinaryFile(root, relPath, contentBase64) {
+  const target = resolveInRoot3(root, relPath);
+  if (!target) {
+    return { ok: false, path: relPath, bytes: 0, error: "path escapes the project root" };
+  }
+  let buf;
+  try {
+    buf = Buffer.from(contentBase64, "base64");
+  } catch {
+    return { ok: false, path: target, bytes: 0, error: "invalid base64 payload" };
+  }
+  if (buf.byteLength > FS_TRANSFER_MAX_BYTES) {
+    return { ok: false, path: target, bytes: 0, error: `file too large (max ${FS_TRANSFER_MAX_BYTES} bytes)` };
+  }
+  try {
+    await mkdir4(dirname5(target), { recursive: true });
+    await writeFile4(target, buf);
+    return { ok: true, path: target, bytes: buf.byteLength };
+  } catch (err) {
+    return { ok: false, path: target, bytes: 0, error: err instanceof Error ? err.message : String(err) };
+  }
+}
+async function downloadBinaryFile(root, relPath) {
+  const target = resolveInRoot3(root, relPath);
+  if (!target) return { error: "path escapes the project root" };
+  try {
+    const info = await stat2(target);
+    if (!info.isFile()) return { error: "not a file" };
+    if (info.size > FS_TRANSFER_MAX_BYTES) {
+      return { error: `file too large (max ${FS_TRANSFER_MAX_BYTES} bytes)` };
+    }
+    const buf = await readFile4(target);
+    return {
+      contentBase64: buf.toString("base64"),
+      contentType: guessMime(target),
+      name: basename4(target),
+      size: buf.byteLength
+    };
+  } catch (err) {
+    return { error: err instanceof Error ? err.message : String(err) };
+  }
+}
+
 // src/core/ws-client/handlers/fs.ts
 function handleFsChannels(ctx, message, payload) {
   switch (message.channel) {
@@ -37957,24 +38060,38 @@ function handleFsChannels(ctx, message, payload) {
       );
       return true;
     }
+    case WsChannels.FS_UPLOAD: {
+      const req = payload;
+      void uploadBinaryFile(ctx.physicRoot, req.path, req.contentBase64).then(
+        (reply) => ctx.send(WsChannels.FS_UPLOAD, reply, message.id)
+      );
+      return true;
+    }
+    case WsChannels.FS_DOWNLOAD: {
+      const req = payload;
+      void downloadBinaryFile(ctx.physicRoot, req.path).then(
+        (reply) => ctx.send(WsChannels.FS_DOWNLOAD, reply, message.id)
+      );
+      return true;
+    }
     default:
       return false;
   }
 }
 
 // src/core/git-diff.ts
-import { readFile as readFile4 } from "fs/promises";
+import { readFile as readFile5 } from "fs/promises";
 import { execFile as execFile4 } from "child_process";
-import { basename as basename4, dirname as dirname5, resolve as resolve5 } from "path";
+import { basename as basename5, dirname as dirname6, resolve as resolve6 } from "path";
 import { promisify as promisify4 } from "util";
 var run4 = promisify4(execFile4);
 async function gitDiff(path) {
-  const target = resolve5(path);
-  const dir2 = dirname5(target);
-  const base = basename4(target);
+  const target = resolve6(path);
+  const dir2 = dirname6(target);
+  const base = basename5(target);
   let newContent = "";
   try {
-    newContent = await readFile4(target, "utf8");
+    newContent = await readFile5(target, "utf8");
   } catch {
   }
   let oldContent = "";
@@ -38023,7 +38140,7 @@ ${stderr}`;
 
 // src/core/git-ssh-key.ts
 import { execFile as execFile6 } from "child_process";
-import { readFile as readFile5, rm as rm2, mkdir as mkdir4 } from "fs/promises";
+import { readFile as readFile6, rm as rm2, mkdir as mkdir5 } from "fs/promises";
 import { join as join17 } from "path";
 import { promisify as promisify6 } from "util";
 var run6 = promisify6(execFile6);
@@ -38034,7 +38151,7 @@ function keyPaths(profileDir2) {
 }
 async function readPublicKey(pub) {
   try {
-    return (await readFile5(pub, "utf8")).trim();
+    return (await readFile6(pub, "utf8")).trim();
   } catch {
     return null;
   }
@@ -38056,7 +38173,7 @@ async function configureGit(key) {
 }
 async function generate(profileDir2) {
   const { dir: dir2, key, pub } = keyPaths(profileDir2);
-  await mkdir4(dir2, { recursive: true });
+  await mkdir5(dir2, { recursive: true });
   await rm2(key, { force: true });
   await rm2(pub, { force: true });
   await run6("ssh-keygen", ["-t", "ed25519", "-f", key, "-N", "", "-C", "4pm-deploy-key"], {
@@ -38092,16 +38209,16 @@ async function manageSshKey(op, profileDir2) {
 // src/core/git-history.ts
 import { readdir as readdir3 } from "fs/promises";
 import { execFile as execFile7 } from "child_process";
-import { resolve as resolve6, sep as sep5 } from "path";
+import { resolve as resolve7, sep as sep6 } from "path";
 import { promisify as promisify7 } from "util";
 var run7 = promisify7(execFile7);
 var FS = "";
 var RS = "";
 function resolveRepo(root, repo) {
   if (!root) return null;
-  const base = resolve6(root);
-  const requested = resolve6(base, repo && repo.trim() ? repo : ".");
-  return requested === base || requested.startsWith(base + sep5) ? requested : base;
+  const base = resolve7(root);
+  const requested = resolve7(base, repo && repo.trim() ? repo : ".");
+  return requested === base || requested.startsWith(base + sep6) ? requested : base;
 }
 async function git(cwd2, args) {
   try {
@@ -38117,13 +38234,13 @@ async function git(cwd2, args) {
 }
 async function gitRepos(root) {
   if (!root) return { repos: [] };
-  const base = resolve6(root);
+  const base = resolve7(root);
   const found = /* @__PURE__ */ new Set();
   const repos = [];
   const add = async (dir2) => {
     const inside = await git(dir2, ["rev-parse", "--show-toplevel"]);
     const top = inside.trim();
-    if (!top || found.has(top) || !(top === base || top.startsWith(base + sep5))) return;
+    if (!top || found.has(top) || !(top === base || top.startsWith(base + sep6))) return;
     found.add(top);
     const subdir = top === base ? "" : top.slice(base.length + 1);
     const remote = (await git(top, ["remote", "get-url", "origin"])).trim();
@@ -38134,13 +38251,13 @@ async function gitRepos(root) {
     const lvl1 = await readdir3(base, { withFileTypes: true });
     for (const d of lvl1) {
       if (!d.isDirectory() || d.name === ".git" || d.name === "node_modules") continue;
-      const p1 = resolve6(base, d.name);
+      const p1 = resolve7(base, d.name);
       await add(p1);
       try {
         const lvl2 = await readdir3(p1, { withFileTypes: true });
         for (const d2 of lvl2) {
           if (!d2.isDirectory() || d2.name === ".git" || d2.name === "node_modules") continue;
-          await add(resolve6(p1, d2.name));
+          await add(resolve7(p1, d2.name));
         }
       } catch {
       }
@@ -38443,10 +38560,10 @@ import { mkdirSync as mkdirSync6, rmSync as rmSync6 } from "fs";
 import { join as join20 } from "path";
 
 // src/core/scaffold.ts
-import { cp, mkdir as mkdir5, writeFile as writeFile4 } from "fs/promises";
+import { cp, mkdir as mkdir6, writeFile as writeFile5 } from "fs/promises";
 import { existsSync as existsSync12 } from "fs";
 import { execFile as execFile9 } from "child_process";
-import { dirname as dirname6, join as join19, resolve as resolve7 } from "path";
+import { dirname as dirname7, join as join19, resolve as resolve8 } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
 import { promisify as promisify9 } from "util";
 var run9 = promisify9(execFile9);
@@ -38481,16 +38598,16 @@ async function provisionRepos(target, repos, emit, opts = {}) {
       await run9("git", ["clone", repo.url, dir2], { timeout: 12e4 });
     } else {
       emit("git", `Initializing sub-repo ${subDirName(repo)}\u2026`);
-      await mkdir5(dir2, { recursive: true });
+      await mkdir6(dir2, { recursive: true });
       await run9("git", ["init"], { cwd: dir2, timeout: 2e4 });
     }
   }
 }
 function sampleDir() {
   if (process.env.SCAFFOLD_SAMPLE_DIR) return process.env.SCAFFOLD_SAMPLE_DIR;
-  const here = dirname6(fileURLToPath3(import.meta.url));
-  const bundled = resolve7(here, "project-sample");
-  for (const candidate of [bundled, resolve7(here, "../project-sample"), resolve7(here, "../../project-sample")]) {
+  const here = dirname7(fileURLToPath3(import.meta.url));
+  const bundled = resolve8(here, "project-sample");
+  for (const candidate of [bundled, resolve8(here, "../project-sample"), resolve8(here, "../../project-sample")]) {
     if (existsSync12(candidate)) return candidate;
   }
   return bundled;
@@ -38502,14 +38619,14 @@ async function scaffoldProject(payload, profileDir2, onProgress) {
     onProgress?.({ projectId: payload.projectId, step, message });
   };
   try {
-    const root = process.env.SCAFFOLD_ROOT ? resolve7(process.env.SCAFFOLD_ROOT) : resolve7(profileDir2);
+    const root = process.env.SCAFFOLD_ROOT ? resolve8(process.env.SCAFFOLD_ROOT) : resolve8(profileDir2);
     const target = join19(root, payload.projectName);
-    await mkdir5(target, { recursive: true });
+    await mkdir6(target, { recursive: true });
     emit("copy", "Copying the sample template\u2026");
     await cp(sampleDir(), target, { recursive: true, force: false, errorOnExist: false });
     if (payload.spec) {
       emit("spec", "Writing project.spec.json\u2026");
-      await writeFile4(
+      await writeFile5(
         join19(target, "project.spec.json"),
         JSON.stringify(payload.spec, null, 2),
         "utf8"
@@ -38528,15 +38645,15 @@ async function scaffoldProject(payload, profileDir2, onProgress) {
 }
 async function writeTemplateMarker(target) {
   const dir2 = join19(target, ".4pm");
-  await mkdir5(dir2, { recursive: true });
+  await mkdir6(dir2, { recursive: true });
   const marker = { templateVersion: PROJECT_TEMPLATE.version, scaffoldedAt: (/* @__PURE__ */ new Date()).toISOString() };
-  await writeFile4(join19(dir2, ".4pm.json"), JSON.stringify(marker, null, 2) + "\n", "utf8");
+  await writeFile5(join19(dir2, ".4pm.json"), JSON.stringify(marker, null, 2) + "\n", "utf8");
 }
 async function aiInit(target, spec, emit) {
   emit("ai-init", "AI init: subagents, README, CLAUDE.md\u2026");
   const subagents = Array.isArray(spec.subagents) ? spec.subagents : [];
   if (subagents.length > 0) {
-    await mkdir5(join19(target, ".claude", "agents"), { recursive: true });
+    await mkdir6(join19(target, ".claude", "agents"), { recursive: true });
     for (const sa of subagents) {
       const name = (sa.name || "").trim().replace(/[^\w.-]+/g, "-").replace(/^-+|-+$/g, "");
       if (!name) continue;
@@ -38546,7 +38663,7 @@ name: ${name}
 
 ${(sa.description || "").trim()}
 `;
-      await writeFile4(join19(target, ".claude", "agents", `${name}.md`), body, "utf8");
+      await writeFile5(join19(target, ".claude", "agents", `${name}.md`), body, "utf8");
     }
   }
   const specJson = JSON.stringify(spec);
@@ -38564,7 +38681,7 @@ ${specJson}`
 async function generateFile(path, prompt) {
   try {
     const text = await aiGenerate(prompt);
-    if (text.trim()) await writeFile4(path, text.trim() + "\n", "utf8");
+    if (text.trim()) await writeFile5(path, text.trim() + "\n", "utf8");
   } catch {
   }
 }
@@ -38575,9 +38692,9 @@ async function addProject(payload, profileDir2, onProgress) {
     onProgress?.({ projectId: payload.projectId, step, message });
   };
   try {
-    const root = process.env.SCAFFOLD_ROOT ? resolve7(process.env.SCAFFOLD_ROOT) : resolve7(profileDir2);
+    const root = process.env.SCAFFOLD_ROOT ? resolve8(process.env.SCAFFOLD_ROOT) : resolve8(profileDir2);
     const target = join19(root, payload.projectName);
-    await mkdir5(target, { recursive: true });
+    await mkdir6(target, { recursive: true });
     const repos = payload.repos ?? [];
     if (repos.length > 0) await provisionRepos(target, repos, emit, { clonePrimary: true });
     onProgress?.({ projectId: payload.projectId, step: "done", message: "Project added.", done: true });
@@ -38672,7 +38789,7 @@ Extra focus from the author: ${req.prompt}` : "";
   ].join("\n");
 }
 function runOnce2(cmd, profile, prompt, cwd2, extraEnv) {
-  return new Promise((resolve9, reject) => {
+  return new Promise((resolve10, reject) => {
     const args = ["-p", ...profile?.model ? ["--model", profile.model] : []];
     const env3 = {
       ...process.env,
@@ -38695,7 +38812,7 @@ function runOnce2(cmd, profile, prompt, cwd2, extraEnv) {
     });
     child.on("close", (code) => {
       clearTimeout(timer);
-      resolve9({ code: code ?? -1, out, err });
+      resolve10({ code: code ?? -1, out, err });
     });
     child.stdin.write(prompt);
     child.stdin.end();
@@ -38874,7 +38991,7 @@ function handleToolsChannels(ctx, message, payload) {
 }
 
 // src/core/agents.ts
-import { readFile as readFile6, writeFile as writeFile5, mkdir as mkdir6, readdir as readdir4, rm as rm3 } from "fs/promises";
+import { readFile as readFile7, writeFile as writeFile6, mkdir as mkdir7, readdir as readdir4, rm as rm3 } from "fs/promises";
 import { join as join21 } from "path";
 var AGENTS_REL = ".claude/agents";
 var SKILLS_REL = ".claude/skills";
@@ -38884,7 +39001,7 @@ function safeName(name) {
 }
 async function readText2(path, fallback = "") {
   try {
-    return await readFile6(path, "utf8");
+    return await readFile7(path, "utf8");
   } catch {
     return fallback;
   }
@@ -38943,8 +39060,8 @@ async function writeAgent(root, req) {
     }
     if (req.content === void 0) return { ok: false, error: "content is required" };
     const path = itemPath(root, req.kind, n);
-    await mkdir6(join21(path, ".."), { recursive: true });
-    await writeFile5(path, req.content, "utf8");
+    await mkdir7(join21(path, ".."), { recursive: true });
+    await writeFile6(path, req.content, "utf8");
     return { ok: true };
   } catch (err) {
     return { ok: false, error: err instanceof Error ? err.message : String(err) };
@@ -38952,21 +39069,21 @@ async function writeAgent(root, req) {
 }
 
 // src/core/secrets.ts
-import { readFile as readFile7, writeFile as writeFile6 } from "fs/promises";
+import { readFile as readFile8, writeFile as writeFile7 } from "fs/promises";
 import { join as join22 } from "path";
 var SECURITY_REL = "AI_SECURITY.md";
 var PLACEHOLDER_REL = "AI_PLACEHOLDER.md";
 var SECRETS_REL = "project.secrets.json";
 async function readText3(path, fallback = "") {
   try {
-    return await readFile7(path, "utf8");
+    return await readFile8(path, "utf8");
   } catch {
     return fallback;
   }
 }
 async function readSecretsObject(root) {
   try {
-    const v = JSON.parse(await readFile7(join22(root, SECRETS_REL), "utf8"));
+    const v = JSON.parse(await readFile8(join22(root, SECRETS_REL), "utf8"));
     return v && typeof v === "object" ? v : {};
   } catch {
     return {};
@@ -38999,14 +39116,14 @@ async function readSecrets(root) {
 async function writeSecrets(root, req) {
   try {
     if (req.kind === "security") {
-      await writeFile6(join22(root, SECURITY_REL), req.content, "utf8");
+      await writeFile7(join22(root, SECURITY_REL), req.content, "utf8");
     } else if (req.kind === "placeholder") {
-      await writeFile6(join22(root, PLACEHOLDER_REL), req.content, "utf8");
+      await writeFile7(join22(root, PLACEHOLDER_REL), req.content, "utf8");
     } else {
       const secrets = await readSecretsObject(root);
       if (req.kind === "secret") secrets[req.key] = req.value;
       else delete secrets[req.key];
-      await writeFile6(join22(root, SECRETS_REL), JSON.stringify(secrets, null, 2) + "\n", "utf8");
+      await writeFile7(join22(root, SECRETS_REL), JSON.stringify(secrets, null, 2) + "\n", "utf8");
     }
     return { ok: true };
   } catch (err) {
@@ -39015,8 +39132,8 @@ async function writeSecrets(root, req) {
 }
 
 // src/core/agent-tools.ts
-import { readFile as readFile8, writeFile as writeFile7, mkdir as mkdir7 } from "fs/promises";
-import { dirname as dirname7, join as join23 } from "path";
+import { readFile as readFile9, writeFile as writeFile8, mkdir as mkdir8 } from "fs/promises";
+import { dirname as dirname8, join as join23 } from "path";
 var SHARED_REL = ".claude/settings.json";
 var LOCAL_REL = ".claude/settings.local.json";
 var SECRETS_DENY = "Read(./project.secrets.json)";
@@ -39026,7 +39143,7 @@ function fileFor(root, scope) {
 }
 async function readSettingsObject(path) {
   try {
-    const v = JSON.parse(await readFile8(path, "utf8"));
+    const v = JSON.parse(await readFile9(path, "utf8"));
     return v && typeof v === "object" ? v : {};
   } catch {
     return {};
@@ -39049,8 +39166,8 @@ async function writeAgentTools(root, scope, permissions) {
     const next = normalizePermissions(permissions);
     if (scope === "shared" && !next.deny.includes(SECRETS_DENY)) next.deny = [...next.deny, SECRETS_DENY];
     obj.permissions = next;
-    await mkdir7(dirname7(path), { recursive: true });
-    await writeFile7(path, JSON.stringify(obj, null, 2) + "\n", "utf8");
+    await mkdir8(dirname8(path), { recursive: true });
+    await writeFile8(path, JSON.stringify(obj, null, 2) + "\n", "utf8");
     return { ok: true };
   } catch (err) {
     return { ok: false, error: err instanceof Error ? err.message : String(err) };
@@ -39059,8 +39176,8 @@ async function writeAgentTools(root, scope, permissions) {
 
 // src/core/packages.ts
 import { createHash as createHash4 } from "crypto";
-import { readFile as readFile9, writeFile as writeFile8, mkdir as mkdir8, readdir as readdir5, rm as rm4, stat as stat2 } from "fs/promises";
-import { dirname as dirname8, join as join24, relative } from "path";
+import { readFile as readFile10, writeFile as writeFile9, mkdir as mkdir9, readdir as readdir5, rm as rm4, stat as stat3 } from "fs/promises";
+import { dirname as dirname9, join as join24, relative } from "path";
 var AGENTS_REL2 = ".claude/agents";
 var SKILLS_REL2 = ".claude/skills";
 var MANIFEST_REL = ".claude/.4pm-packages.json";
@@ -39069,7 +39186,7 @@ function safeName2(name) {
 }
 async function readMaybe(path) {
   try {
-    return await readFile9(path);
+    return await readFile10(path);
   } catch {
     return null;
   }
@@ -39124,7 +39241,7 @@ async function artifactSha256(root, kind, slug) {
 async function artifactExists(root, kind, slug) {
   const target = kind === "subagent" ? join24(root, AGENTS_REL2, `${slug}.md`) : join24(root, SKILLS_REL2, slug);
   try {
-    await stat2(target);
+    await stat3(target);
     return true;
   } catch {
     return false;
@@ -39141,34 +39258,34 @@ async function readManifest(root) {
 }
 async function writeManifest(root, manifest) {
   const path = join24(root, MANIFEST_REL);
-  await mkdir8(dirname8(path), { recursive: true });
-  await writeFile8(path, JSON.stringify(manifest, null, 2), "utf8");
+  await mkdir9(dirname9(path), { recursive: true });
+  await writeFile9(path, JSON.stringify(manifest, null, 2), "utf8");
 }
 async function writeArtifactFiles(root, kind, slug, files) {
   const byPath = new Map(files.map((f) => [f.path, Buffer.from(f.contentBase64, "base64")]));
   if (kind === "subagent") {
     const agent = byPath.get("agent.md");
     if (agent) {
-      await mkdir8(join24(root, AGENTS_REL2), { recursive: true });
-      await writeFile8(join24(root, AGENTS_REL2, `${slug}.md`), agent);
+      await mkdir9(join24(root, AGENTS_REL2), { recursive: true });
+      await writeFile9(join24(root, AGENTS_REL2, `${slug}.md`), agent);
     }
     const short = byPath.get("short-memory.md");
     if (short) {
-      await mkdir8(join24(root, AGENTS_REL2, "short-memory"), { recursive: true });
-      await writeFile8(join24(root, AGENTS_REL2, "short-memory", `${slug}.md`), short);
+      await mkdir9(join24(root, AGENTS_REL2, "short-memory"), { recursive: true });
+      await writeFile9(join24(root, AGENTS_REL2, "short-memory", `${slug}.md`), short);
     }
     const long = byPath.get("long-memory.md");
     if (long) {
-      await mkdir8(join24(root, AGENTS_REL2, "long-memory"), { recursive: true });
-      await writeFile8(join24(root, AGENTS_REL2, "long-memory", `${slug}.md`), long);
+      await mkdir9(join24(root, AGENTS_REL2, "long-memory"), { recursive: true });
+      await writeFile9(join24(root, AGENTS_REL2, "long-memory", `${slug}.md`), long);
     }
   } else {
     const base = join24(root, SKILLS_REL2, slug);
     for (const [rel, buf] of byPath) {
       if (rel.includes("..") || rel.startsWith("/")) continue;
       const dest = join24(base, rel);
-      await mkdir8(dirname8(dest), { recursive: true });
-      await writeFile8(dest, buf);
+      await mkdir9(dirname9(dest), { recursive: true });
+      await writeFile9(dest, buf);
     }
   }
 }
@@ -39247,8 +39364,8 @@ async function removePackage(root, slug) {
 }
 
 // src/core/graph.ts
-import { readFile as readFile10, readdir as readdir6 } from "fs/promises";
-import { join as join25, relative as relative2, dirname as dirname9, resolve as resolve8, extname, basename as basename5 } from "path";
+import { readFile as readFile11, readdir as readdir6 } from "fs/promises";
+import { join as join25, relative as relative2, dirname as dirname10, resolve as resolve9, extname as extname2, basename as basename6 } from "path";
 var MAX_FILES = 2e3;
 var MAX_NODES = 3e3;
 var SKIP_DIRS = /* @__PURE__ */ new Set(["node_modules", ".git", "dist", "build", ".next", "out", "coverage", ".turbo"]);
@@ -39284,11 +39401,11 @@ function orphansOf(nodes, edges) {
   return nodes.filter((n) => !hasInbound.has(n.id)).map((n) => n.id);
 }
 async function buildDocs(root) {
-  const files = await walk(root, (p) => extname(p) === ".md");
+  const files = await walk(root, (p) => extname2(p) === ".md");
   const ids = new Set(files.map((f) => relative2(root, f).split("\\").join("/")));
   const nodes = files.map((f) => {
     const rel = relative2(root, f).split("\\").join("/");
-    return { id: rel, label: basename5(rel), kind: "doc", file: rel };
+    return { id: rel, label: basename6(rel), kind: "doc", file: rel };
   });
   const edges = [];
   const seen = /* @__PURE__ */ new Set();
@@ -39296,14 +39413,14 @@ async function buildDocs(root) {
     const rel = relative2(root, f).split("\\").join("/");
     let text = "";
     try {
-      text = await readFile10(f, "utf8");
+      text = await readFile11(f, "utf8");
     } catch {
       continue;
     }
     for (const m of text.matchAll(/\[[^\]]*\]\(([^)]+)\)/g)) {
       const href = (m[1] ?? "").split("#")[0].trim();
       if (!href || !href.endsWith(".md") || href.startsWith("http")) continue;
-      const target = relative2(root, resolve8(dirname9(f), href)).split("\\").join("/");
+      const target = relative2(root, resolve9(dirname10(f), href)).split("\\").join("/");
       if (ids.has(target) && target !== rel) {
         const key = `${rel}->${target}`;
         if (!seen.has(key)) {
@@ -39326,7 +39443,7 @@ var DEF_PATTERNS = [
   // Go
 ];
 async function buildCode(root) {
-  const files = await walk(root, (p) => CODE_EXT.has(extname(p)));
+  const files = await walk(root, (p) => CODE_EXT.has(extname2(p)));
   const nodes = [];
   const nameToIds = /* @__PURE__ */ new Map();
   const fileDefs = /* @__PURE__ */ new Map();
@@ -39335,7 +39452,7 @@ async function buildCode(root) {
     const rel = relative2(root, f).split("\\").join("/");
     let text = "";
     try {
-      text = await readFile10(f, "utf8");
+      text = await readFile11(f, "utf8");
     } catch {
       continue;
     }
@@ -39387,7 +39504,7 @@ async function buildGraph(root, mode) {
 }
 
 // src/core/rag.ts
-import { readFile as readFile11, writeFile as writeFile9, statfs as statfs2, mkdir as mkdir9 } from "fs/promises";
+import { readFile as readFile12, writeFile as writeFile10, statfs as statfs2, mkdir as mkdir10 } from "fs/promises";
 import { existsSync as existsSync13 } from "fs";
 import { execFile as execFile10, spawn as spawn9 } from "child_process";
 import { totalmem as totalmem2, cpus as cpus2 } from "os";
@@ -39412,7 +39529,7 @@ async function detectPython() {
 }
 async function installLog(root) {
   try {
-    const text = await readFile11(join26(root, RAG_REL, "install.log"), "utf8");
+    const text = await readFile12(join26(root, RAG_REL, "install.log"), "utf8");
     return text.split("\n").filter((l) => l.length > 0).slice(-200);
   } catch {
     return [];
@@ -39474,7 +39591,7 @@ async function ragStatus(root) {
   };
   let modelName = "";
   try {
-    modelName = (await readFile11(join26(root, RAG_REL, ".installed"), "utf8")).trim();
+    modelName = (await readFile12(join26(root, RAG_REL, ".installed"), "utf8")).trim();
   } catch {
     modelName = "";
   }
@@ -39494,7 +39611,7 @@ async function ragStatus(root) {
 async function readIndexMeta(root) {
   const indexing = existsSync13(join26(root, RAG_REL, ".indexing"));
   try {
-    const m = JSON.parse(await readFile11(join26(root, RAG_REL, ".index.json"), "utf8"));
+    const m = JSON.parse(await readFile12(join26(root, RAG_REL, ".index.json"), "utf8"));
     return {
       present: true,
       indexing,
@@ -39561,8 +39678,8 @@ if __name__ == "__main__":
     elif cmd == "query": query(sys.argv[2], int(sys.argv[3]) if len(sys.argv) > 3 else 8)
 `;
 async function ensureEngine(root) {
-  await mkdir9(join26(root, RAG_REL), { recursive: true }).catch(() => void 0);
-  await writeFile9(join26(root, RAG_REL, "rag_engine.py"), RAG_ENGINE_PY, "utf8");
+  await mkdir10(join26(root, RAG_REL), { recursive: true }).catch(() => void 0);
+  await writeFile10(join26(root, RAG_REL, "rag_engine.py"), RAG_ENGINE_PY, "utf8");
 }
 async function ragReindex(root) {
   const py = await detectPython();
@@ -39610,7 +39727,7 @@ async function ragInstall(root, model) {
   if (!py.found) return { ok: false, started: false, error: "python3 not found on the worker" };
   if (existsSync13(join26(root, RAG_REL, ".installing"))) return { ok: true, started: true };
   try {
-    await mkdir9(join26(root, RAG_REL), { recursive: true });
+    await mkdir10(join26(root, RAG_REL), { recursive: true });
   } catch {
   }
   const script = `
@@ -40118,14 +40235,14 @@ var WsClient = class {
    */
   awaitConnected(timeoutMs) {
     if (this.sessionKey && this.bus.status === "connected") return Promise.resolve(true);
-    return new Promise((resolve9) => {
+    return new Promise((resolve10) => {
       const waiter = () => {
         clearTimeout(timer);
-        resolve9(true);
+        resolve10(true);
       };
       const timer = setTimeout(() => {
         this.connectWaiters = this.connectWaiters.filter((w) => w !== waiter);
-        resolve9(false);
+        resolve10(false);
       }, timeoutMs);
       this.connectWaiters.push(waiter);
     });
@@ -40152,16 +40269,16 @@ var WsClient = class {
       this.forceReconnect = false;
       return Promise.resolve();
     }
-    return new Promise((resolve9) => {
+    return new Promise((resolve10) => {
       const timer = setTimeout(() => {
         this.wakeReconnect = null;
-        resolve9();
+        resolve10();
       }, ms);
       this.wakeReconnect = () => {
         clearTimeout(timer);
         this.wakeReconnect = null;
         this.forceReconnect = false;
-        resolve9();
+        resolve10();
       };
     });
   }
@@ -40215,7 +40332,7 @@ var WsClient = class {
    * One WS session: token → connect → handshake → handle messages until close.
    */
   connectOnce() {
-    return new Promise((resolve9, reject) => {
+    return new Promise((resolve10, reject) => {
       void (async () => {
         this.sessionEstablished = false;
         this.bus.setStatus("connecting");
@@ -40309,7 +40426,7 @@ var WsClient = class {
           if (code === CLOSE_DRAINING) {
             this.bus.log(t("error.serverDraining"));
           }
-          resolve9();
+          resolve10();
         });
         socket.on("error", (err) => {
           this.clearHeartbeat();
@@ -40435,7 +40552,7 @@ var WsClient = class {
    * Used for quota.check before spawning an AI cli (ADR-0020).
    */
   request(channel, data) {
-    return new Promise((resolve9, reject) => {
+    return new Promise((resolve10, reject) => {
       if (!this.socket || !this.sessionKey) {
         reject(new Error("Not connected to the server."));
         return;
@@ -40455,7 +40572,7 @@ var WsClient = class {
       }, 15e3);
       timer.unref?.();
       this.pending.set(envelope.id, {
-        resolve: (value) => resolve9(value),
+        resolve: (value) => resolve10(value),
         timer
       });
       this.socket.send(JSON.stringify(envelope));
@@ -40581,7 +40698,7 @@ var WsClient = class {
       const working = getWorkingProfile(this.context.profileDir, aiCli2);
       const configured = claudeHomeDirs(config);
       const dirs = working ? [working, ...configured.filter((d) => d !== working)] : configured;
-      const profile = working ? basename6(working) : dirs[0] ? basename6(dirs[0]) : "default";
+      const profile = working ? basename7(working) : dirs[0] ? basename7(dirs[0]) : "default";
       const api = await checkClaudeUsage(dirs, aiCli2);
       const snapshot = api ?? {
         plan: "?",
@@ -46490,8 +46607,8 @@ var Ink = class {
     }
   }
   async waitUntilExit() {
-    this.exitPromise ||= new Promise((resolve9, reject) => {
-      this.resolveExitPromise = resolve9;
+    this.exitPromise ||= new Promise((resolve10, reject) => {
+      this.resolveExitPromise = resolve10;
       this.rejectExitPromise = reject;
     });
     return this.exitPromise;
@@ -47544,7 +47661,7 @@ async function runStart(profileDir2, profileName) {
           logger.error("ws.run.crash", { message: e.message, stack: e.stack });
           if (client.isStopped) return;
           bus.log(t("start.recovered", { message: e.message }), "error");
-          await new Promise((resolve9) => setTimeout(resolve9, 1e3));
+          await new Promise((resolve10) => setTimeout(resolve10, 1e3));
         }
       }
     };
@@ -47590,7 +47707,7 @@ import { join as join33 } from "path";
 // src/core/control-client.ts
 import { connect as connect2 } from "net";
 function connectControl(socketPath, bus) {
-  return new Promise((resolve9, reject) => {
+  return new Promise((resolve10, reject) => {
     const socket = connect2(socketPath);
     socket.setEncoding("utf8");
     let ready = false;
@@ -47637,7 +47754,7 @@ function connectControl(socketPath, bus) {
           bus.setTokens(frame.tokens);
           for (const entry of frame.transcript) bus.pushEntry(entry);
           ready = true;
-          resolve9({ info: frame.info, close });
+          resolve10({ info: frame.info, close });
           break;
         case "transcript":
           bus.pushEntry(frame.entry);
@@ -47717,18 +47834,18 @@ async function runAttach(profileDir2, profileName) {
 // src/commands/ai-login.ts
 import { spawn as spawn11 } from "child_process";
 import { mkdirSync as mkdirSync8 } from "fs";
-import { basename as basename7 } from "path";
+import { basename as basename8 } from "path";
 function runProviderLogin(cmd, envVar, dir2) {
-  return new Promise((resolve9) => {
+  return new Promise((resolve10) => {
     const child = spawn11(cmd, [], {
       stdio: "inherit",
       env: { ...process.env, [envVar]: dir2 }
     });
     child.on("error", (err) => {
       console.error(t("aiLogin.launchFailed", { cmd, message: err.message }));
-      resolve9(1);
+      resolve10(1);
     });
-    child.on("exit", (code) => resolve9(code ?? 0));
+    child.on("exit", (code) => resolve10(code ?? 0));
   });
 }
 async function runAiLogin(profileDir2, profileName, aiFilter) {
@@ -47740,7 +47857,7 @@ async function runAiLogin(profileDir2, profileName, aiFilter) {
     return;
   }
   const selected = aiFilter ? credentials.filter(
-    (c, i) => c.profile === aiFilter || basename7(resolveHomePath(c.profile)) === aiFilter || String(i + 1) === aiFilter
+    (c, i) => c.profile === aiFilter || basename8(resolveHomePath(c.profile)) === aiFilter || String(i + 1) === aiFilter
   ) : credentials;
   if (selected.length === 0) {
     console.log(t("aiLogin.noMatch", { filter: aiFilter ?? "", list: credentials.map((c) => c.profile).join(", ") }));
@@ -47868,10 +47985,10 @@ function Picker({
   ] });
 }
 function selectFromList(items, title) {
-  return new Promise((resolve9) => {
+  return new Promise((resolve10) => {
     let chosen = null;
     const app = render_default(/* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Picker, { items, title, onDone: (v) => chosen = v }));
-    void app.waitUntilExit().then(() => resolve9(chosen));
+    void app.waitUntilExit().then(() => resolve10(chosen));
   });
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@4pm/cli",
-  "version": "1.5.37",
+  "version": "1.5.40",
   "private": false,
   "description": "4PM CLI — drives Claude/Codex CLIs on AI worker machines (Node + TypeScript)",
   "license": "LicenseRef-4PM-Source-Available",