@bike4mind/cli 0.13.0 → 0.15.0

package/bin/bike4mind-cli.mjs

@@ -387,6 +387,19 @@ if (isDev) {
 } else {
   // Production: run compiled JavaScript
   try {
+    // Auto-update on launch (consent-first): when a newer version is available
+    // on a writable global prefix, install + re-exec into it BEFORE importing
+    // the code-split app — running an install while dist/index.mjs is loaded
+    // would crash it. On the default 'ask' preference this prompts the user
+    // (Update once / Always / Skip / Never); 'auto' installs silently, 'never'
+    // does nothing. Wrapped so the updater can never block launching the CLI.
+    try {
+      const { maybeAutoUpdateOnLaunch } = await import('../dist/commands/updateCommand.mjs');
+      await maybeAutoUpdateOnLaunch();
+    } catch {
+      // Updater is best-effort — fall through to the current version.
+    }
+
     await import(join(__dirname, '../dist/index.mjs'));
   } catch (error) {
     console.error('Failed to start CLI:', error);

package/dist/{ConfigStore-C3tokQej.mjs → ConfigStore-HRgwfPBk.mjs}

@@ -377,6 +377,7 @@ let ChatModels = /* @__PURE__ */ function(ChatModels) {
 	ChatModels["CLAUDE_4_6_OPUS"] = "claude-opus-4-6";
 	ChatModels["CLAUDE_4_7_OPUS"] = "claude-opus-4-7";
 	ChatModels["CLAUDE_4_8_OPUS"] = "claude-opus-4-8";
+	ChatModels["CLAUDE_FABLE_5"] = "claude-fable-5";
 	ChatModels["JURASSIC2_ULTRA"] = "ai21.j2-ultra-v1";
 	ChatModels["JURASSIC2_MID"] = "ai21.j2-mid-v1";
 	ChatModels["GEMINI_3_5_FLASH"] = "gemini-3.5-flash";
@@ -420,7 +421,10 @@ const REASONING_SUPPORTED_MODELS = new Set([
 	"gpt-5-mini",
 	"gpt-5-nano",
 	"gpt-5.1",
-	"gpt-5.2"
+	"gpt-5.2",
+	"gpt-5.4",
+	"gpt-5.4-mini",
+	"gpt-5.4-nano"
 ]);
 new Set([
 	...Array.from(REASONING_SUPPORTED_MODELS),
@@ -648,7 +652,8 @@ const ArtifactTypeSchema = z.enum([
 	"quest",
 	"file",
 	"questmaster",
-	"lattice"
+	"lattice",
+	"blog-draft"
 ]);
 [...new Set(Object.values({
 	mermaid: {
@@ -722,6 +727,12 @@ const ArtifactTypeSchema = z.enum([
 		description: "Interactive chess board with move validation and AI opponent",
 		category: "interactive",
 		mimeType: "application/json"
+	},
+	"blog-draft": {
+		name: "Blog Draft",
+		description: "Drafted blog/social content ready for review and publishing",
+		category: "document",
+		mimeType: "application/json"
 	}
 }).map((info) => info.category))];
 const ArtifactSchema = z.object({
@@ -891,7 +902,8 @@ const ClaudeArtifactMimeTypes = {
 	CODE: "application/vnd.ant.code",
 	MARKDOWN: "text/markdown",
 	LATTICE: "application/vnd.b4m.lattice",
-	PYTHON: "application/vnd.ant.python"
+	PYTHON: "application/vnd.ant.python",
+	BLOG_DRAFT: "application/vnd.b4m.blog-draft"
 };
 let KnowledgeType = /* @__PURE__ */ function(KnowledgeType) {
 	/**
@@ -1091,7 +1103,8 @@ const GenericCreditDeductTransaction = BaseCreditTransaction.extend({
 		"notebook_curation",
 		"manual",
 		"admin_adjustment",
-		"refund_adjustment"
+		"refund_adjustment",
+		"qwork_reservation"
 	]).optional(),
 	/**
 	* Stripe dispute ID — set for dispute clawback transactions.
@@ -1452,6 +1465,7 @@ const SecopsTriageConfigSchema = z.object({
 let SupportedFabFileMimeTypes = /* @__PURE__ */ function(SupportedFabFileMimeTypes) {
 	SupportedFabFileMimeTypes["PDF"] = "application/pdf";
 	SupportedFabFileMimeTypes["DOCX"] = "application/vnd.openxmlformats-officedocument.wordprocessingml.document";
+	SupportedFabFileMimeTypes["PPTX"] = "application/vnd.openxmlformats-officedocument.presentationml.presentation";
 	SupportedFabFileMimeTypes["XLS"] = "application/vnd.ms-excel";
 	SupportedFabFileMimeTypes["XLSX"] = "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet";
 	SupportedFabFileMimeTypes["TXT_PLAIN"] = "text/plain";
@@ -1493,6 +1507,27 @@ let SupportedFabFileMimeTypes = /* @__PURE__ */ function(SupportedFabFileMimeTyp
 	return SupportedFabFileMimeTypes;
 }({});
 /**
+* Canonical agent execution status tuple. Shared between the database model
+* (`AgentExecutionModel`), the client store (`useAgentExecutionStore`), and
+* wire schemas (`ChildExecutionSnapshotSchema`, etc.) so the value space can't
+* drift across boundaries. Previously declared in two places — moving it here
+* lets the Zod schemas type `status` as `z.enum(AGENT_EXECUTION_STATUSES)`
+* instead of `z.string()`, removing the runtime narrowing the client used to
+* compensate for the loose contract.
+*/
+const AGENT_EXECUTION_STATUSES = [
+	"pending",
+	"running",
+	"continuing",
+	"awaiting_permission",
+	"awaiting_subagent",
+	"awaiting_dag_children",
+	"paused",
+	"completed",
+	"failed",
+	"aborted"
+];
+/**
 * ========================================
 * Client to Server Actions
 * ========================================
@@ -2206,6 +2241,10 @@ const SceneCommandSchema = z.discriminatedUnion("type", [
 		type: z.literal("update_metadata"),
 		id: z.string(),
 		patch: z.record(z.string(), z.unknown())
+	}),
+	z.object({
+		type: z.literal("dungeon_expired"),
+		dungeonId: z.string()
 	})
 ]);
 /** Client → Server: send scene commands to broadcast to all HUD clients */
@@ -2666,6 +2705,21 @@ const SubagentIterationStepAction = z.object({
 	iteration: z.number(),
 	step: AgentStepSchema
 });
+/**
+* Incremental token delta emitted while the subagent's LLM call is streaming
+* mid-iteration (#8774). Lets the parent UI render partial responses live
+* instead of waiting 3–5s for the full step to land. The client appends
+* `delta` to a per-(childExecutionId, iteration) buffer and clears it when
+* the iteration's terminal step arrives via `subagent_iteration_step`.
+*/
+const SubagentTextDeltaAction = z.object({
+	action: z.literal("subagent_text_delta"),
+	executionId: z.string(),
+	childExecutionId: z.string(),
+	agentName: z.string(),
+	iteration: z.number(),
+	delta: z.string()
+});
 const SubagentCompletedAction = z.object({
 	action: z.literal("subagent_completed"),
 	executionId: z.string(),
@@ -2683,6 +2737,20 @@ const SubagentFailedAction = z.object({
 	isTimeout: z.boolean().optional(),
 	partialAnswer: z.string().optional()
 });
+/**
+* Humanized in-flight status for a subagent (#8775). Emitted by
+* `ServerSubagentOrchestrator` for each `action` step the child agent emits
+* (e.g. "Searching...", "Reading file..."). Lets `SubagentStepNest` show what
+* the child is doing right now instead of a static "N iterations · running"
+* label. The previous wiring routed this string to the parent's `progress`
+* event, which dropped the child correlation — hence a dedicated event.
+*/
+const SubagentProgressAction = z.object({
+	action: z.literal("subagent_progress"),
+	executionId: z.string(),
+	childExecutionId: z.string(),
+	status: z.string().max(120)
+});
 const PermissionRequestAction = z.object({
 	action: z.literal("permission_request"),
 	executionId: z.string(),
@@ -2690,11 +2758,36 @@ const PermissionRequestAction = z.object({
 	toolInput: z.unknown(),
 	iteration: z.number()
 });
+/**
+* Persisted snapshot of a non-background child subagent execution. Replayed on
+* reconnect (#8695) so `SubagentStepNest` can re-render the nested iteration
+* trace under the parent's `delegate_to_agent` action step after a hard refresh
+* or once the parent run has terminated. Background children are excluded —
+* they surface via the header badge + completion toast (#8341), not inline
+* nesting.
+*
+* `agentName` is sourced from the child doc's `subagentConfig` (now persisted
+* at creation time for every subagent — see `agentExecutor.ts` `onStart`). A
+* generic fallback ("Subagent") is used for legacy docs without it. Empty
+* `steps` is valid for an in-flight in-process child whose terminal write
+* hasn't landed yet — the nest renders the agent header alone in that case.
+*/
+const ChildExecutionSnapshotSchema = z.object({
+	executionId: z.string(),
+	agentName: z.string(),
+	model: z.string().optional(),
+	status: z.enum(AGENT_EXECUTION_STATUSES),
+	steps: z.array(AgentStepSchema),
+	totalCredits: z.number().optional(),
+	finalAnswer: z.string().optional(),
+	error: z.string().optional(),
+	isTimeout: z.boolean().optional()
+});
 const ReconnectResultAction = z.object({
 	action: z.literal("reconnect_result"),
 	found: z.boolean(),
 	executionId: z.string().optional(),
-	status: z.string().optional(),
+	status: z.enum(AGENT_EXECUTION_STATUSES).optional(),
 	pendingPermission: z.object({
 		toolName: z.string(),
 		toolInput: z.unknown(),
@@ -2703,7 +2796,9 @@ const ReconnectResultAction = z.object({
 	totalCreditsUsed: z.number().optional(),
 	iterationCount: z.number().optional(),
 	steps: z.array(AgentStepSchema).optional(),
-	stepsTruncated: z.boolean().optional()
+	stepsTruncated: z.boolean().optional(),
+	children: z.array(ChildExecutionSnapshotSchema).optional(),
+	childrenTruncated: z.boolean().optional()
 });
 z.discriminatedUnion("action", [
 	DataSubscribeRequestAction,
@@ -2776,8 +2871,10 @@ z.discriminatedUnion("action", [
 	AbortAcknowledgedAction,
 	SubagentStartedAction,
 	SubagentIterationStepAction,
+	SubagentTextDeltaAction,
 	SubagentCompletedAction,
 	SubagentFailedAction,
+	SubagentProgressAction,
 	PermissionRequestAction,
 	ReconnectResultAction
 ]);
@@ -3624,11 +3721,14 @@ let BedrockEmbeddingModel = /* @__PURE__ */ function(BedrockEmbeddingModel) {
 	BedrockEmbeddingModel["TITAN_TEXT_EMBEDDINGS_V2"] = "amazon.titan-embed-text-v2:0";
 	return BedrockEmbeddingModel;
 }({});
-z.union([
+const SupportedEmbeddingModelSchema = z.union([
 	z.enum(OpenAIEmbeddingModel),
 	z.enum(VoyageAIEmbeddingModel),
 	z.enum(BedrockEmbeddingModel)
 ]);
+function isSupportedEmbeddingModel(model) {
+	return SupportedEmbeddingModelSchema.safeParse(model).success;
+}
 z.enum([
 	"openaiDemoKey",
 	"anthropicDemoKey",
@@ -3706,6 +3806,10 @@ z.enum([
 	"PotionQuestApiKey",
 	"EnablePotionQuest",
 	"EnableTavernQuestBoardContext",
+	"EnableDungeonLifecycle",
+	"MaxActiveDungeons",
+	"DungeonSpawnIntervalHeartbeats",
+	"DungeonTTLMinutes",
 	"VectorThreshold",
 	"bflApiKey",
 	"EnableMCPServer",
@@ -3773,6 +3877,7 @@ z.enum([
 	"EnableBmPiJira",
 	"EnableQuantumCanvasser",
 	"EnableQuantumCanvasserDefault",
+	"EnableQworkSubmission",
 	"EnableContextTelemetry",
 	"contextTelemetryAlerts",
 	"sreAgentConfig",
@@ -3787,10 +3892,13 @@ function makeStringSetting(config) {
 	};
 }
 function makeNumberSetting(config) {
+	let numberSchema = z.coerce.number();
+	if (config.min !== void 0) numberSchema = numberSchema.min(config.min);
+	if (config.max !== void 0) numberSchema = numberSchema.max(config.max);
 	return {
 		...config,
 		type: "number",
-		schema: z.coerce.number().prefault(config.defaultValue ?? 0)
+		schema: numberSchema.prefault(config.defaultValue ?? 0)
 	};
 }
 function makeBooleanSetting(config) {
@@ -4281,7 +4389,7 @@ const TriageResultSchema = z.object({
 	matchedClosedIssue: z.object({
 		issueNumber: z.number().int().min(1),
 		title: z.string().min(1).max(TRL.matchesExisting.title.max),
-		closedAt: z.string()
+		closedAt: z.string().nullish()
 	}).nullable().optional(),
 	fingerprint: z.string().length(40).regex(/^[a-f0-9]+$/).optional()
 });
@@ -4699,6 +4807,10 @@ const API_SERVICE_GROUPS = {
 				key: "EnableQuantumCanvasserDefault",
 				order: 81
 			},
+			{
+				key: "EnableQworkSubmission",
+				order: 82
+			},
 			{
 				key: "EnableQuestMaster",
 				order: 90
@@ -4766,6 +4878,22 @@ const API_SERVICE_GROUPS = {
 			{
 				key: "EnableTavernQuestBoardContext",
 				order: 280
+			},
+			{
+				key: "EnableDungeonLifecycle",
+				order: 290
+			},
+			{
+				key: "MaxActiveDungeons",
+				order: 291
+			},
+			{
+				key: "DungeonSpawnIntervalHeartbeats",
+				order: 292
+			},
+			{
+				key: "DungeonTTLMinutes",
+				order: 293
 			}
 		]
 	},
@@ -4975,7 +5103,7 @@ const settingsMap = {
 	DefaultAPIModel: makeStringSetting({
 		key: "DefaultAPIModel",
 		name: "Default API Model",
-		defaultValue: "gpt-5",
+		defaultValue: "claude-sonnet-4-6",
 		description: "The default AI model to use for API requests when no model is specified.",
 		options: CHAT_MODELS,
 		category: "AI",
@@ -5733,6 +5861,47 @@ const settingsMap = {
 		group: API_SERVICE_GROUPS.EXPERIMENTAL.id,
 		order: 280
 	}),
+	EnableDungeonLifecycle: makeBooleanSetting({
+		key: "EnableDungeonLifecycle",
+		name: "Enable Dungeon Lifecycle",
+		defaultValue: false,
+		description: "Kill-switch for the dungeon spawn/expire lifecycle. When disabled, new dungeons cannot be spawned. Active dungeons can always be dismissed and expiration cleanup always runs regardless of this setting.",
+		category: "Experimental",
+		group: API_SERVICE_GROUPS.EXPERIMENTAL.id,
+		order: 290
+	}),
+	MaxActiveDungeons: makeNumberSetting({
+		key: "MaxActiveDungeons",
+		name: "Max Active Dungeons Per Map",
+		defaultValue: 1,
+		min: 1,
+		max: 10,
+		description: "Maximum number of simultaneously active dungeons per map. Defaults to 1 for M4.5. Increase once multi-dungeon navigation is supported.",
+		category: "Experimental",
+		group: API_SERVICE_GROUPS.EXPERIMENTAL.id,
+		order: 291
+	}),
+	DungeonSpawnIntervalHeartbeats: makeNumberSetting({
+		key: "DungeonSpawnIntervalHeartbeats",
+		name: "Dungeon Auto-Spawn Interval (Heartbeats)",
+		defaultValue: 6,
+		min: 1,
+		description: "Number of heartbeats between automatic dungeon spawns (future auto-spawn feature). Must be at least 1. Has no effect in M4.5 where dungeons are spawned manually by the DM.",
+		category: "Experimental",
+		group: API_SERVICE_GROUPS.EXPERIMENTAL.id,
+		order: 292
+	}),
+	DungeonTTLMinutes: makeNumberSetting({
+		key: "DungeonTTLMinutes",
+		name: "Dungeon Lifetime (Minutes)",
+		defaultValue: 1440,
+		min: 1,
+		max: 43200,
+		description: "How long a dungeon remains active before the heartbeat cron expires it. Default is 1440 minutes (24 hours). Must be between 1 and 43200 (30 days).",
+		category: "Experimental",
+		group: API_SERVICE_GROUPS.EXPERIMENTAL.id,
+		order: 293
+	}),
 	VectorThreshold: makeNumberSetting({
 		key: "VectorThreshold",
 		name: "Vector Threshold",
@@ -6354,6 +6523,16 @@ const settingsMap = {
 		order: 81,
 		dependsOn: "EnableQuantumCanvasser"
 	}),
+	EnableQworkSubmission: makeBooleanSetting({
+		key: "EnableQworkSubmission",
+		name: "Enable Q/Work Submission",
+		defaultValue: false,
+		description: "Enable submitting QAOA scheduler runs to Q/Work for cloud-based quantum computation. Requires \"Enable OptiHashi\" to be on.",
+		category: "Experimental",
+		group: API_SERVICE_GROUPS.EXPERIMENTAL.id,
+		order: 82,
+		dependsOn: "EnableQuantumCanvasser"
+	}),
 	EnableContextTelemetry: makeBooleanSetting({
 		key: "EnableContextTelemetry",
 		name: "Enable Context Telemetry",
@@ -6975,6 +7154,8 @@ const PromptMetaZodSchema = z.object({
 	performance: PromptMetaPerformanceSchema.optional(),
 	session: PromptMetaSessionSchema.optional(),
 	questId: z.string().optional(),
+	/** ISO 8601 timestamp of when this completion's data was finalized (set at completion end). */
+	generatedAt: z.string().optional(),
 	promptId: z.string().optional(),
 	prompt: z.string().optional(),
 	replyIds: z.array(z.string()).optional(),
@@ -8105,6 +8286,12 @@ z.object({
 });
 z.object({
 	search: z.string().optional(),
+	/**
+	* Optional product-surface filter for session listing. When omitted, list
+	* queries return only default sessions (those with no surface); when set,
+	* they return only sessions for that surface (e.g. 'libreoncology').
+	*/
+	surface: z.string().optional(),
 	pagination: z.object({
 		page: z.coerce.number().int().positive(),
 		limit: z.coerce.number().int().positive()
@@ -10025,6 +10212,7 @@ const CliConfigSchema = z.object({
 		temperature: z.number(),
 		autoSave: z.boolean(),
 		autoCompact: z.boolean().optional().prefault(true),
+		autoUpdate: z.boolean().optional(),
 		theme: z.enum(["light", "dark"]),
 		exportFormat: z.enum(["markdown", "json"]),
 		maxIterations: z.number().nullable().prefault(10),
@@ -10757,4 +10945,4 @@ var ConfigStore = class {
 	}
 };
 //#endregion
-export { ProjectEvents as $, GenerateImageToolCallSchema as A, dayjsConfig_default as At, InviteEvents as B, sanitizeTelemetryError as Bt, ElabsEvents as C, UnauthorizedError as Ct, ForbiddenError as D, VideoModels as Dt, FileEvents as E, VideoGenerationUsageTransaction as Et, ImageEditUsageTransaction as F, isGPTImage2Model as Ft, ModalEvents as G, buildRateLimitLogEntry as Gt, KnowledgeType as H, settingsMap as Ht, ImageGenerationUsageTransaction as I, isGPTImageModel as It, OpenAIEmbeddingModel as J, parseRateLimitHeaders as Jt, ModelBackend as K, extractSnippetMeta as Kt, ImageModels as L, isZodError as Lt, GenericCreditDeductTransaction as M, getDataLakeTags as Mt, HTTPError as N, getMcpProviderMetadata as Nt, FriendshipEvents as O, XAI_IMAGE_MODELS as Ot, HttpStatus as P, getViewById as Pt, ProfileEvents as Q, InboxEvents as R, obfuscateApiKey as Rt, DashboardParamsSchema as S, UiNavigationEvents as St, FeedbackEvents as T, VIDEO_SIZE_CONSTRAINTS as Tt, LLMEvents as U, validateJupyterKernelName as Ut, InviteType as V, secureParameters as Vt, MiscEvents as W, validateNotebookPath as Wt, Permission as X, OpenAIImageGenerationInput as Y, CollectionType as Yt, PermissionDeniedError as Z, ChatCompletionCreateInputSchema as _, TaskScheduleHandler as _t, ALERT_THRESHOLDS as a, ReceivedCreditTransaction as at, CompletionApiUsageTransaction as b, ToolUsageTransaction as bt, ApiKeyScope as c, ResearchModeParamsSchema as ct, ArtifactTypeSchema as d, ResearchTaskType as dt, PromptIntentSchema as et, AuthEvents as f, SessionEvents as ft, CREDIT_DEDUCT_TRANSACTION_TYPES as g, TagType as gt, BadRequestError as h, SupportedFabFileMimeTypes as ht, getEnvironmentName as i, RealtimeVoiceUsageTransaction as it, GenericCreditAddTransaction as j, getAccessibleDataLakes as jt, GEMINI_IMAGE_MODELS as k, b4mLLMTools as kt, ApiKeyType as l, ResearchTaskExecutionType as lt, BFL_SAFETY_TOLERANCE as m, SubscriptionCreditTransaction as mt, logger as n, PurchaseTransaction as nt, AiEvents as o, RechartsChartTypeList as ot, BFL_IMAGE_MODELS as p, SpeechToTextUsageTransaction as pt, NotFoundError as q, isNearLimit as qt, getApiUrl as r, QuestMasterParamsSchema as rt, ApiKeyEvents as s, RegInviteEvents as st, ConfigStore as t, PromptMetaZodSchema as tt, AppFileEvents as u, ResearchTaskPeriodicFrequencyType as ut, ChatModels as v, TextGenerationUsageTransaction as vt, FavoriteDocumentType as w, UnprocessableEntityError as wt, CorruptedFileError as x, TransferCreditTransaction as xt, ClaudeArtifactMimeTypes as y, TooManyRequestsError as yt, InternalServerError as z, resolveNavigationIntents as zt };
+export { ProjectEvents as $, GenerateImageToolCallSchema as A, dayjsConfig_default as At, InviteEvents as B, resolveNavigationIntents as Bt, ElabsEvents as C, UnauthorizedError as Ct, ForbiddenError as D, VideoModels as Dt, FileEvents as E, VideoGenerationUsageTransaction as Et, ImageEditUsageTransaction as F, isGPTImage2Model as Ft, ModalEvents as G, validateNotebookPath as Gt, KnowledgeType as H, secureParameters as Ht, ImageGenerationUsageTransaction as I, isGPTImageModel as It, OpenAIEmbeddingModel as J, isNearLimit as Jt, ModelBackend as K, buildRateLimitLogEntry as Kt, ImageModels as L, isSupportedEmbeddingModel as Lt, GenericCreditDeductTransaction as M, getDataLakeTags as Mt, HTTPError as N, getMcpProviderMetadata as Nt, FriendshipEvents as O, XAI_IMAGE_MODELS as Ot, HttpStatus as P, getViewById as Pt, ProfileEvents as Q, InboxEvents as R, isZodError as Rt, DashboardParamsSchema as S, UiNavigationEvents as St, FeedbackEvents as T, VIDEO_SIZE_CONSTRAINTS as Tt, LLMEvents as U, settingsMap as Ut, InviteType as V, sanitizeTelemetryError as Vt, MiscEvents as W, validateJupyterKernelName as Wt, Permission as X, CollectionType as Xt, OpenAIImageGenerationInput as Y, parseRateLimitHeaders as Yt, PermissionDeniedError as Z, ChatCompletionCreateInputSchema as _, TaskScheduleHandler as _t, ALERT_THRESHOLDS as a, ReceivedCreditTransaction as at, CompletionApiUsageTransaction as b, ToolUsageTransaction as bt, ApiKeyScope as c, ResearchModeParamsSchema as ct, ArtifactTypeSchema as d, ResearchTaskType as dt, PromptIntentSchema as et, AuthEvents as f, SessionEvents as ft, CREDIT_DEDUCT_TRANSACTION_TYPES as g, TagType as gt, BadRequestError as h, SupportedFabFileMimeTypes as ht, getEnvironmentName as i, RealtimeVoiceUsageTransaction as it, GenericCreditAddTransaction as j, getAccessibleDataLakes as jt, GEMINI_IMAGE_MODELS as k, b4mLLMTools as kt, ApiKeyType as l, ResearchTaskExecutionType as lt, BFL_SAFETY_TOLERANCE as m, SubscriptionCreditTransaction as mt, logger as n, PurchaseTransaction as nt, AiEvents as o, RechartsChartTypeList as ot, BFL_IMAGE_MODELS as p, SpeechToTextUsageTransaction as pt, NotFoundError as q, extractSnippetMeta as qt, getApiUrl as r, QuestMasterParamsSchema as rt, ApiKeyEvents as s, RegInviteEvents as st, ConfigStore as t, PromptMetaZodSchema as tt, AppFileEvents as u, ResearchTaskPeriodicFrequencyType as ut, ChatModels as v, TextGenerationUsageTransaction as vt, FavoriteDocumentType as w, UnprocessableEntityError as wt, CorruptedFileError as x, TransferCreditTransaction as xt, ClaudeArtifactMimeTypes as y, TooManyRequestsError as yt, InternalServerError as z, obfuscateApiKey as zt };

package/dist/commands/apiCommand.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as ConfigStore } from "../ConfigStore-C3tokQej.mjs";
+import { t as ConfigStore } from "../ConfigStore-HRgwfPBk.mjs";
 //#region src/commands/apiCommand.ts
 /**
 * External API config command (--api-url / --reset-api)

package/dist/commands/doctorCommand.mjs

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
-import { t as version } from "../package-DNcd24qN.mjs";
-import { n as compareSemver, r as fetchLatestVersion } from "../updateChecker-D67NPlS5.mjs";
+import { t as version } from "../package-CaPvuP1F.mjs";
+import { a as fetchLatestVersion, c as isNpmPrefixWritable, i as compareSemver } from "../updateChecker-C8xsNY2L.mjs";
 import { t as checkRipgrep } from "../ripgrepCheck-BmkyTK2i.mjs";
 import { execSync } from "child_process";
-import { constants, existsSync, promises } from "fs";
+import { existsSync } from "fs";
 import { homedir } from "os";
 import path from "path";
 //#region src/commands/doctorCommand.ts
@@ -55,20 +55,16 @@ async function handleDoctorCommand() {
 			encoding: "utf-8",
 			timeout: 1e4
 		}).trim();
-		try {
-			await promises.access(npmPrefix, constants.W_OK);
-			results.push({
-				name: "Global npm path",
-				status: "pass",
-				message: `${npmPrefix} (writable)`
-			});
-		} catch {
-			results.push({
-				name: "Global npm path",
-				status: "warn",
-				message: `${npmPrefix} (not writable — may need sudo for updates)`
-			});
-		}
+		if (await isNpmPrefixWritable(npmPrefix)) results.push({
+			name: "Global npm path",
+			status: "pass",
+			message: `${npmPrefix} (writable)`
+		});
+		else results.push({
+			name: "Global npm path",
+			status: "warn",
+			message: `${npmPrefix} (not writable — may need sudo for updates)`
+		});
 	} catch {
 		results.push({
 			name: "Global npm path",

package/dist/commands/envCommand.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as ConfigStore } from "../ConfigStore-C3tokQej.mjs";
+import { t as ConfigStore } from "../ConfigStore-HRgwfPBk.mjs";
 //#region src/commands/envCommand.ts
 /**
 * Environment switching for the `--dev` / `--prod` launch flags.

package/dist/commands/headlessCommand.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { C as WebSocketToolExecutor, D as ServerLlmBackend, E as WebSocketLlmBackend, F as generateCliTools, G as buildSystemPrompt, J as ReActAgent, N as loadContextFiles, P as PermissionManager, Q as SessionStore, S as ApiClient, T as FallbackLlmBackend, U as setWebSocketToolExecutor, X as CheckpointStore, Y as CustomCommandStore, _ as createAgentDelegateTool, b as createSkillTool, d as createFindDefinitionTool, f as createTodoStore, g as BackgroundAgentManager, h as createBackgroundAgentTools, k as McpManager, m as createCoordinateTaskTool, p as createWriteTodosTool, q as isReadOnlyTool, u as createGetFileStructureTool, v as AgentStore, w as WebSocketConnectionManager, y as SubagentOrchestrator } from "../tools-BhPOnNo3.mjs";
-import { n as logger, r as getApiUrl, t as ConfigStore } from "../ConfigStore-C3tokQej.mjs";
+import { C as WebSocketToolExecutor, D as ServerLlmBackend, E as WebSocketLlmBackend, F as generateCliTools, G as buildSystemPrompt, J as ReActAgent, N as loadContextFiles, P as PermissionManager, Q as SessionStore, S as ApiClient, T as FallbackLlmBackend, U as setWebSocketToolExecutor, X as CheckpointStore, Y as CustomCommandStore, _ as createAgentDelegateTool, b as createSkillTool, d as createFindDefinitionTool, f as createTodoStore, g as BackgroundAgentManager, h as createBackgroundAgentTools, k as McpManager, m as createCoordinateTaskTool, p as createWriteTodosTool, q as isReadOnlyTool, u as createGetFileStructureTool, v as AgentStore, w as WebSocketConnectionManager, y as SubagentOrchestrator } from "../tools-ChYlNt33.mjs";
+import { n as logger, r as getApiUrl, t as ConfigStore } from "../ConfigStore-HRgwfPBk.mjs";
 import { t as DEFAULT_SANDBOX_CONFIG } from "../types-LyRNHOiS.mjs";
 import { t as createSandboxRuntime } from "../SandboxRuntimeAdapter-ChGlxSGQ.mjs";
 import { t as SandboxOrchestrator } from "../SandboxOrchestrator-BoINxbX4.mjs";

package/dist/commands/mcpCommand.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as ConfigStore } from "../ConfigStore-C3tokQej.mjs";
+import { t as ConfigStore } from "../ConfigStore-HRgwfPBk.mjs";
 //#region src/commands/mcpCommand.ts
 /**
 * External MCP commands (b4m mcp list, b4m mcp add, etc.)

package/dist/commands/updateCommand.mjs

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
-import { t as version } from "../package-DNcd24qN.mjs";
-import { i as forceCheckForUpdate } from "../updateChecker-D67NPlS5.mjs";
+import { t as version } from "../package-CaPvuP1F.mjs";
+import { c as isNpmPrefixWritable, l as setAutoUpdatePreference, n as REEXEC_GUARD_ENV, o as forceCheckForUpdate, r as checkForUpdate, s as getAutoUpdatePreference, t as INSTALL_CMD, u as shouldAttemptAutoUpdate } from "../updateChecker-C8xsNY2L.mjs";
 import { t as checkRipgrep } from "../ripgrepCheck-BmkyTK2i.mjs";
-import { execSync } from "child_process";
+import { execSync, spawnSync } from "child_process";
+import { createInterface } from "readline";
 //#region src/commands/updateCommand.ts
 /**
 * External update command (b4m update)
 * Checks for and installs CLI updates.
 * Runs outside the interactive CLI session.
 */
-const INSTALL_CMD = "npm install -g @bike4mind/cli@latest";
 function runGlobalInstall() {
 	try {
 		execSync(INSTALL_CMD, {
@@ -25,6 +25,121 @@ function runGlobalInstall() {
 		return false;
 	}
 }
+/**
+* Ask the user how to handle an available update (the `'ask'` preference).
+* Plain readline (not Ink) because this runs in the bin bootstrap before the
+* code-split app loads — the only window in which it's safe to install.
+*
+* Maps the [U/a/s/n] keys to a choice; an empty line defaults to `'update'`
+* (capital `U` in the prompt is the default). The interface is fully torn down
+* before returning so a Skip/Never fall-through leaves stdin clean for Ink.
+*/
+async function promptUpdateChoice(currentVersion, latestVersion) {
+	if (!process.stdin.isTTY) return "skip";
+	console.log(`\n\x1b[33m  ⬆ Update available: v${currentVersion} → v${latestVersion}\x1b[0m\n`);
+	console.log("  How would you like to handle updates?");
+	console.log("    [U] Update once   (install now)");
+	console.log("    [A] Always        (auto-update silently from now on)");
+	console.log("    [S] Skip          (not now — ask again next launch)");
+	console.log("    [N] Never         (manual `b4m update` only)\n");
+	const rl = createInterface({
+		input: process.stdin,
+		output: process.stdout
+	});
+	let answer;
+	try {
+		answer = await new Promise((resolve) => {
+			rl.on("close", () => resolve(null));
+			rl.question("  Choose [U/a/s/n]: ", resolve);
+		});
+	} finally {
+		rl.close();
+	}
+	if (answer === null) return "skip";
+	switch (answer.trim().toLowerCase()) {
+		case "a": return "always";
+		case "s": return "skip";
+		case "n": return "never";
+		default: return "update";
+	}
+}
+/**
+* Install the latest version and re-exec into it so the session the user just
+* opened runs the new code — zero version skew, no mid-session file-swap risk.
+*
+* spawnSync inherits the TTY so Ink renders normally in the child; the guard
+* env prevents an update loop. npm install overwrites the global package in
+* place, so re-running the same argv[1] bin path picks up the new code. On a
+* successful spawn this never returns (it calls process.exit); it only returns
+* when the install itself fails, so the caller falls through to the current
+* version.
+*/
+function installAndReexec(currentVersion, latestVersion) {
+	console.log(`\x1b[33m  ⬆ Updating v${currentVersion} → v${latestVersion}…\x1b[0m`);
+	if (!runGlobalInstall()) return;
+	const child = spawnSync(process.argv[0], process.argv.slice(1), {
+		stdio: "inherit",
+		env: {
+			...process.env,
+			[REEXEC_GUARD_ENV]: "1"
+		}
+	});
+	if (child.error) {
+		console.error(`\n  Failed to launch the updated version: ${child.error.message}`);
+		console.error("  Re-run b4m to use the newly installed version.");
+		process.exit(1);
+	}
+	process.exit(child.status ?? (child.signal ? 1 : 0));
+}
+/**
+* Auto-update on launch (Claude-Code-style), consent-first.
+*
+* Called from the bin bootstrap on the interactive path *before* the
+* code-split app (`dist/index.mjs`) is imported — the only safe install window
+* (running an install while dist chunks are loaded would crash them).
+*
+* Behaviour by `autoUpdate` preference once an update is available on a
+* writable prefix:
+* - `'auto'`  → install silently and re-exec into the new version.
+* - `'never'` → do nothing (the startup notify banner still informs).
+* - `'ask'`   → prompt the user: Update once / Always (persist `auto`) /
+*               Skip (ask again next launch) / Never (persist `never`).
+*
+* It is a safe no-op (returns without installing) when: already re-exec'd this
+* launch, disabled via `B4M_AUTO_UPDATE=0`, not attached to a TTY, no update is
+* available, the prefix needs sudo (notify banner informs instead), or the
+* user declines the prompt. Any install/network failure is swallowed so the
+* user is never blocked from launching the current version.
+*/
+async function maybeAutoUpdateOnLaunch() {
+	if (!shouldAttemptAutoUpdate({ isTTY: Boolean(process.stdin.isTTY && process.stdout.isTTY) })) return;
+	const preference = await getAutoUpdatePreference();
+	if (preference === "never") return;
+	const currentVersion = version;
+	let result;
+	let timeoutHandle;
+	try {
+		result = await Promise.race([checkForUpdate(currentVersion), new Promise((resolve) => {
+			timeoutHandle = setTimeout(() => resolve(null), 3e3);
+		})]);
+	} catch {
+		return;
+	} finally {
+		if (timeoutHandle) clearTimeout(timeoutHandle);
+	}
+	if (!result?.updateAvailable) return;
+	if (!await isNpmPrefixWritable()) return;
+	if (preference === "ask") {
+		const choice = await promptUpdateChoice(currentVersion, result.latestVersion);
+		if (choice === "skip") return;
+		if (choice === "never") {
+			await setAutoUpdatePreference(false);
+			return;
+		}
+		if (choice === "always") await setAutoUpdatePreference(true);
+	}
+	installAndReexec(currentVersion, result.latestVersion);
+}
 async function handleUpdateCommand() {
 	const currentVersion = version;
 	console.log(`Current version: v${currentVersion}`);
@@ -56,4 +171,4 @@ async function handleUpdateCommand() {
 	else console.log("\nRipgrep restored.");
 }
 //#endregion
-export { handleUpdateCommand };
+export { handleUpdateCommand, maybeAutoUpdateOnLaunch, promptUpdateChoice };