@bike4mind/cli 0.15.2 → 0.16.0

package/dist/{tools-j5oGazTr.mjs → tools-D9eSRR7Q.mjs}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
-import { $ as ProjectEvents, A as GenerateImageToolCallSchema, At as dayjsConfig_default, B as InviteEvents, Bt as resolveNavigationIntents, C as ElabsEvents, Ct as UnauthorizedError, D as ForbiddenError, Dt as VideoModels, E as FileEvents, Et as VideoGenerationUsageTransaction, F as ImageEditUsageTransaction, Ft as isGPTImage2Model, G as ModalEvents, H as KnowledgeType, Ht as secureParameters, I as ImageGenerationUsageTransaction, It as isGPTImageModel, J as OpenAIEmbeddingModel, Jt as isNearLimit, K as ModelBackend, Kt as buildRateLimitLogEntry, L as ImageModels, Lt as isSupportedEmbeddingModel, M as GenericCreditDeductTransaction, Mt as getDataLakeTags, N as HTTPError, Nt as getMcpProviderMetadata, O as FriendshipEvents, Ot as XAI_IMAGE_MODELS, P as HttpStatus, Pt as getViewById, Q as ProfileEvents, R as InboxEvents, Rt as isZodError, S as DashboardParamsSchema, St as UiNavigationEvents, T as FeedbackEvents, Tt as VIDEO_SIZE_CONSTRAINTS, U as LLMEvents, Ut as settingsMap, V as InviteType, Vt as sanitizeTelemetryError, W as MiscEvents, X as Permission, Xt as CollectionType, Y as OpenAIImageGenerationInput, Yt as parseRateLimitHeaders, Z as PermissionDeniedError, _ as ChatCompletionCreateInputSchema, _t as TaskScheduleHandler, a as ALERT_THRESHOLDS, at as ReceivedCreditTransaction, b as CompletionApiUsageTransaction, bt as ToolUsageTransaction, c as ApiKeyScope, ct as ResearchModeParamsSchema, d as ArtifactTypeSchema, dt as ResearchTaskType, et as PromptIntentSchema, f as AuthEvents, ft as SessionEvents, gt as TagType, h as BadRequestError, ht as SupportedFabFileMimeTypes, it as RealtimeVoiceUsageTransaction, j as GenericCreditAddTransaction, jt as getAccessibleDataLakes, k as GEMINI_IMAGE_MODELS, kt as b4mLLMTools, l as ApiKeyType, lt as ResearchTaskExecutionType, m as BFL_SAFETY_TOLERANCE, mt as SubscriptionCreditTransaction, n as logger, nt as PurchaseTransaction, o as AiEvents, ot as RechartsChartTypeList, p as BFL_IMAGE_MODELS, pt as SpeechToTextUsageTransaction, q as NotFoundError, qt as extractSnippetMeta, rt as QuestMasterParamsSchema, s as ApiKeyEvents, st as RegInviteEvents, t as ConfigStore, tt as PromptMetaZodSchema, u as AppFileEvents, ut as ResearchTaskPeriodicFrequencyType, v as ChatModels, vt as TextGenerationUsageTransaction, w as FavoriteDocumentType, wt as UnprocessableEntityError, x as CorruptedFileError, xt as TransferCreditTransaction, y as ClaudeArtifactMimeTypes, yt as TooManyRequestsError, z as InternalServerError, zt as obfuscateApiKey } from "./ConfigStore-w0o_0xs0.mjs";
+import { $ as ProjectEvents, A as GenerateImageToolCallSchema, At as dayjsConfig_default, B as InviteEvents, Bt as resolveNavigationIntents, C as ElabsEvents, Ct as UnauthorizedError, D as ForbiddenError, Dt as VideoModels, E as FileEvents, Et as VideoGenerationUsageTransaction, F as ImageEditUsageTransaction, Ft as isGPTImage2Model, G as ModalEvents, H as KnowledgeType, Ht as secureParameters, I as ImageGenerationUsageTransaction, It as isGPTImageModel, J as OpenAIEmbeddingModel, Jt as isNearLimit, K as ModelBackend, Kt as buildRateLimitLogEntry, L as ImageModels, Lt as isSupportedEmbeddingModel, M as GenericCreditDeductTransaction, Mt as getDataLakeTags, N as HTTPError, Nt as getMcpProviderMetadata, O as FriendshipEvents, Ot as XAI_IMAGE_MODELS, P as HttpStatus, Pt as getViewById, Q as ProfileEvents, R as InboxEvents, Rt as isZodError, S as DashboardParamsSchema, St as UiNavigationEvents, T as FeedbackEvents, Tt as VIDEO_SIZE_CONSTRAINTS, U as LLMEvents, Ut as settingsMap, V as InviteType, Vt as sanitizeTelemetryError, W as MiscEvents, X as Permission, Xt as CollectionType, Y as OpenAIImageGenerationInput, Yt as parseRateLimitHeaders, Z as PermissionDeniedError, _ as ChatCompletionCreateInputSchema, _t as TaskScheduleHandler, a as ALERT_THRESHOLDS, at as ReceivedCreditTransaction, b as CompletionApiUsageTransaction, bt as ToolUsageTransaction, c as ApiKeyScope, ct as ResearchModeParamsSchema, d as ArtifactTypeSchema, dt as ResearchTaskType, et as PromptIntentSchema, f as AuthEvents, ft as SessionEvents, gt as TagType, h as BadRequestError, ht as SupportedFabFileMimeTypes, it as RealtimeVoiceUsageTransaction, j as GenericCreditAddTransaction, jt as getAccessibleDataLakes, k as GEMINI_IMAGE_MODELS, kt as b4mLLMTools, l as ApiKeyType, lt as ResearchTaskExecutionType, m as BFL_SAFETY_TOLERANCE, mt as SubscriptionCreditTransaction, n as logger, nt as PurchaseTransaction, o as AiEvents, ot as RechartsChartTypeList, p as BFL_IMAGE_MODELS, pt as SpeechToTextUsageTransaction, q as NotFoundError, qt as extractSnippetMeta, rt as QuestMasterParamsSchema, s as ApiKeyEvents, st as RegInviteEvents, t as ConfigStore, tt as PromptMetaZodSchema, u as AppFileEvents, ut as ResearchTaskPeriodicFrequencyType, v as ChatModels, vt as TextGenerationUsageTransaction, w as FavoriteDocumentType, wt as UnprocessableEntityError, x as CorruptedFileError, xt as TransferCreditTransaction, y as ClaudeArtifactMimeTypes, yt as TooManyRequestsError, z as InternalServerError, zt as obfuscateApiKey } from "./ConfigStore-CtGc4fF2.mjs";
 import { a as isUserLockedOut, c as userCanDisableMFA, d as userRequiresMFA, f as verifyBackupCode, i as getLockoutTimeRemaining, l as userEligibleForMFA, n as generateBackupCodes, o as recordFailedAttempt, p as verifyTOTPToken, r as generateTOTPSetup, s as shouldResetFailedAttempts, t as clearFailedAttempts, u as userHasMFAConfigured } from "./utils-PpNti-tY.mjs";
 import { n as isPathAllowed, t as assertPathAllowed } from "./pathValidation-D8tjkQXE-1HwvsuYT.mjs";
-import { t as version } from "./package-C9MYdYCP.mjs";
+import { t as version } from "./package-3pouvthv.mjs";
 import { execFile, execFileSync, spawn } from "child_process";
 import crypto, { createHash, randomBytes, randomUUID } from "crypto";
 import { existsSync, promises, readFileSync, readdirSync, rmSync, statSync, unlinkSync, writeFileSync } from "fs";
@@ -70,6 +70,7 @@ import { Mutex } from "async-mutex";
 import "zod-validation-error";
 import { homedir as homedir$1 } from "node:os";
 import { StdioClientTransport } from "@modelcontextprotocol/sdk/client/stdio.js";
+import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
 import { Client } from "@modelcontextprotocol/sdk/client/index.js";
 import { fileURLToPath } from "url";
 import WsWebSocket from "ws";
@@ -1902,6 +1903,18 @@ function shouldUseParallelExecution(toolsUsed, isReadOnly = defaultIsReadOnlyToo
 	return toolsUsed.filter((tool) => isReadOnly(tool.name)).length >= 2;
 }
 /**
+* True when an error is an abort/cancellation (user stop or execution timeout)
+* rather than a real failure. Aborts are benign and must NOT be logged at error
+* severity — error logs trip the CloudWatch ERROR→LiveOps/Slack alert path and
+* page on routine cancellations (#8947, #8669).
+*/
+function isAbortError(error, signal) {
+	if (signal?.aborted) return true;
+	if (!(error instanceof Error)) return false;
+	if (error.name === "AbortError") return true;
+	return error.message.toLowerCase().includes("aborted");
+}
+/**
 * ReAct (Reasoning and Acting) Agent
 *
 * This agent uses the ReAct pattern to solve problems by:
@@ -2051,6 +2064,9 @@ var ReActAgent = class extends EventEmitter {
 				let currentText = "";
 				const processedToolIds = /* @__PURE__ */ new Set();
 				let hadToolCalls = false;
+				let thoughtEmitted = false;
+				const iterStartInputTokens = this.totalInputTokens;
+				const iterStartOutputTokens = this.totalOutputTokens;
 				if (maxHistoryIterations > 0 && iterations > 1) {
 					trimConversationHistory(messages, maxHistoryIterations, this.initialMessageCount);
 					trimSteps(this.steps, maxHistoryIterations);
@@ -2092,35 +2108,18 @@ var ReActAgent = class extends EventEmitter {
 							this.totalCacheWriteTokens += completionInfo.cacheStats.cacheWriteTokens || 0;
 						}
 						if (completionInfo.creditsUsed) this.totalCredits += completionInfo.creditsUsed;
-						if (currentText.trim() && completionInfo.toolsUsed?.length) {
-							const thoughtStep = {
-								type: "thought",
-								content: currentText.trim(),
-								metadata: { timestamp: Date.now() }
-							};
-							this.steps.push(thoughtStep);
-							this.emit("thought", thoughtStep);
-						}
-						if (!completionInfo.toolsUsed?.length && currentText.trim()) {
-							finalAnswer = currentText.trim();
-							const finalStep = {
-								type: "final_answer",
-								content: finalAnswer,
-								metadata: {
-									timestamp: Date.now(),
-									tokenUsage: {
-										prompt: inputTokens,
-										completion: outputTokens,
-										total: inputTokens + outputTokens
-									}
-								}
-							};
-							this.steps.push(finalStep);
-							this.emit("final_answer", finalStep);
-							iterationComplete = true;
-						}
 						if (completionInfo.toolsUsed && completionInfo.toolsUsed.length > 0) {
 							hadToolCalls = true;
+							if (!thoughtEmitted && currentText.trim()) {
+								const thoughtStep = {
+									type: "thought",
+									content: currentText.trim(),
+									metadata: { timestamp: Date.now() }
+								};
+								this.steps.push(thoughtStep);
+								this.emit("thought", thoughtStep);
+								thoughtEmitted = true;
+							}
 							const thinkingBlocks = completionInfo.thinking || [];
 							const unprocessedTools = [];
 							for (const toolUse of completionInfo.toolsUsed) {
@@ -2159,6 +2158,26 @@ var ReActAgent = class extends EventEmitter {
 						}
 					}
 				});
+				if (!hadToolCalls && currentText.trim()) {
+					finalAnswer = currentText.trim();
+					const iterInputTokens = this.totalInputTokens - iterStartInputTokens;
+					const iterOutputTokens = this.totalOutputTokens - iterStartOutputTokens;
+					const finalStep = {
+						type: "final_answer",
+						content: finalAnswer,
+						metadata: {
+							timestamp: Date.now(),
+							tokenUsage: {
+								prompt: iterInputTokens,
+								completion: iterOutputTokens,
+								total: iterInputTokens + iterOutputTokens
+							}
+						}
+					};
+					this.steps.push(finalStep);
+					this.emit("final_answer", finalStep);
+					iterationComplete = true;
+				}
 				if (iterationComplete && finalAnswer) break;
 				if (hadToolCalls && options.confidenceGate && this.iterationConfidences.length > 0) {
 					const iterAvg = this.iterationConfidences.reduce((a, b) => a + b, 0) / this.iterationConfidences.length;
@@ -2258,7 +2277,8 @@ var ReActAgent = class extends EventEmitter {
 				this.emit("complete", result);
 				return result;
 			}
-			this.context.logger.error("[ReActAgent] Error during execution:", error);
+			if (isAbortError(error, options.signal)) this.context.logger.warn("[ReActAgent] Execution aborted (user cancel or timeout):", error);
+			else this.context.logger.error("[ReActAgent] Error during execution:", error);
 			this.emit("error", error);
 			throw error;
 		}
@@ -2530,6 +2550,9 @@ Remember: You are an autonomous AGENT. Act independently and solve problems proa
 			let finalAnswer = "";
 			const processedToolIds = /* @__PURE__ */ new Set();
 			let hadToolCalls = false;
+			let thoughtEmitted = false;
+			const iterStartInputTokens = this.totalInputTokens;
+			const iterStartOutputTokens = this.totalOutputTokens;
 			const cacheStrategy = options.enableCaching ? {
 				enableCaching: true,
 				cacheSystemPrompt: true,
@@ -2567,41 +2590,22 @@ Remember: You are an autonomous AGENT. Act independently and solve problems proa
 						this.totalCacheWriteTokens += completionInfo.cacheStats.cacheWriteTokens || 0;
 					}
 					if (completionInfo.creditsUsed) this.totalCredits += completionInfo.creditsUsed;
-					if (currentText.trim() && completionInfo.toolsUsed?.length) {
-						const thoughtStep = {
-							type: "thought",
-							content: currentText.trim(),
-							metadata: {
-								timestamp: Date.now(),
-								iteration: this.iterations - 1
-							}
-						};
-						this.steps.push(thoughtStep);
-						iterationSteps.push(thoughtStep);
-						this.emit("thought", thoughtStep);
-					}
-					if (!completionInfo.toolsUsed?.length && currentText.trim()) {
-						finalAnswer = currentText.trim();
-						const finalStep = {
-							type: "final_answer",
-							content: finalAnswer,
-							metadata: {
-								timestamp: Date.now(),
-								iteration: this.iterations - 1,
-								tokenUsage: {
-									prompt: inputTokens,
-									completion: outputTokens,
-									total: inputTokens + outputTokens
-								}
-							}
-						};
-						this.steps.push(finalStep);
-						iterationSteps.push(finalStep);
-						this.emit("final_answer", finalStep);
-						iterationComplete = true;
-					}
 					if (completionInfo.toolsUsed && completionInfo.toolsUsed.length > 0) {
 						hadToolCalls = true;
+						if (!thoughtEmitted && currentText.trim()) {
+							const thoughtStep = {
+								type: "thought",
+								content: currentText.trim(),
+								metadata: {
+									timestamp: Date.now(),
+									iteration: this.iterations - 1
+								}
+							};
+							this.steps.push(thoughtStep);
+							iterationSteps.push(thoughtStep);
+							this.emit("thought", thoughtStep);
+							thoughtEmitted = true;
+						}
 						const thinkingBlocks = completionInfo.thinking || [];
 						const unprocessedTools = [];
 						for (const toolUse of completionInfo.toolsUsed) {
@@ -2645,6 +2649,28 @@ Remember: You are an autonomous AGENT. Act independently and solve problems proa
 					}
 				}
 			});
+			if (!hadToolCalls && currentText.trim()) {
+				finalAnswer = currentText.trim();
+				const iterInputTokens = this.totalInputTokens - iterStartInputTokens;
+				const iterOutputTokens = this.totalOutputTokens - iterStartOutputTokens;
+				const finalStep = {
+					type: "final_answer",
+					content: finalAnswer,
+					metadata: {
+						timestamp: Date.now(),
+						iteration: this.iterations - 1,
+						tokenUsage: {
+							prompt: iterInputTokens,
+							completion: iterOutputTokens,
+							total: iterInputTokens + iterOutputTokens
+						}
+					}
+				};
+				this.steps.push(finalStep);
+				iterationSteps.push(finalStep);
+				this.emit("final_answer", finalStep);
+				iterationComplete = true;
+			}
 			if (hadToolCalls && options.confidenceGate && this.iterationConfidences.length > 0) {
 				const iterAvg = this.iterationConfidences.reduce((a, b) => a + b, 0) / this.iterationConfidences.length;
 				const decision = options.confidenceGate(iterAvg, this.iterations);
@@ -2727,7 +2753,7 @@ Remember: You are an autonomous AGENT. Act independently and solve problems proa
 				};
 			}
 			return {
-				step: iterationSteps.find((s) => s.type === "final_answer") || iterationSteps[iterationSteps.length - 1] || {
+				step: iterationSteps.findLast((s) => s.type === "final_answer") || iterationSteps[iterationSteps.length - 1] || {
 					type: "thought",
 					content: currentText.trim() || "No output from this iteration",
 					metadata: { timestamp: Date.now() }
@@ -2761,7 +2787,8 @@ Remember: You are an autonomous AGENT. Act independently and solve problems proa
 					checkpoint: this.toCheckpoint()
 				};
 			}
-			this.context.logger.error("[ReActAgent] Error during runIteration:", error);
+			if (isAbortError(error, options.signal)) this.context.logger.warn("[ReActAgent] Iteration aborted (user cancel or timeout):", error);
+			else this.context.logger.error("[ReActAgent] Error during runIteration:", error);
 			this.emit("error", error);
 			throw error;
 		}
@@ -4117,7 +4144,7 @@ These tools are lightweight — use them naturally as part of your work, not as
 
 ## Working Directory
 
-The current working directory is \`${process.cwd()}\`. All relative paths in tool calls resolve from here. When using \`${TOOL_GLOB_FILES}\` or \`${TOOL_GREP_SEARCH}\` without an explicit \`dir_path\`, they search from this directory.${directoriesSection}${projectContextSection}${skillsSection}${featureModulesSection}${planModeSection}${deferredToolSection}`;
+The current working directory is \`${process.cwd()}\`. All relative paths in tool calls resolve from here. When using \`${TOOL_GLOB_FILES}\` or \`${TOOL_GREP_SEARCH}\` without an explicit \`dir_path\`, they search from this directory.${directoriesSection}${projectContextSection}${skillsSection}${featureModulesSection}${planModeSection}${deferredToolSection}${config?.appendSystemPrompt ? `\n\n${config.appendSystemPrompt}` : ""}`;
 }
 /**
 * Build the minimal-variant system prompt. Reuses the project context,
@@ -4147,7 +4174,7 @@ Guidelines:
 
 ## Working Directory
 
-The current working directory is \`${process.cwd()}\`. All relative paths in tool calls resolve from here. When using \`${TOOL_GLOB_FILES}\` or \`${TOOL_GREP_SEARCH}\` without an explicit \`dir_path\`, they search from this directory.${directoriesSection}${projectContextSection}${skillsSection}${featureModulesSection}${planModeSection}${deferredToolSection}`;
+The current working directory is \`${process.cwd()}\`. All relative paths in tool calls resolve from here. When using \`${TOOL_GLOB_FILES}\` or \`${TOOL_GREP_SEARCH}\` without an explicit \`dir_path\`, they search from this directory.${directoriesSection}${projectContextSection}${skillsSection}${featureModulesSection}${planModeSection}${deferredToolSection}${config?.appendSystemPrompt ? `\n\n${config.appendSystemPrompt}` : ""}`;
 }
 /**
 * Pick a system prompt by variant. The dispatch point for the
@@ -4242,7 +4269,7 @@ function isWriteTargetingPlanFile(toolName, args, cwd = process.cwd()) {
 	return rel === "" || !rel.startsWith("..") && !path.isAbsolute(rel);
 }
 //#endregion
-//#region ../../b4m-core/services/dist/chunk-BBjsoOtd.mjs
+//#region ../../b4m-core/services/dist/rolldown-runtime-BBjsoOtd.mjs
 var __defProp$2 = Object.defineProperty;
 var __getOwnPropDesc$1 = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames$1 = Object.getOwnPropertyNames;
@@ -4268,7 +4295,7 @@ var __copyProps$1 = (to, from, except, desc) => {
 };
 var __reExport$1 = (target, mod, secondTarget) => (__copyProps$1(target, mod, "default"), secondTarget && __copyProps$1(secondTarget, mod, "default"));
 //#endregion
-//#region ../../b4m-core/utils/dist/chunk-BBjsoOtd.mjs
+//#region ../../b4m-core/utils/dist/rolldown-runtime-BBjsoOtd.mjs
 var __defProp$1 = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
@@ -8477,7 +8504,8 @@ var GeminiImageService = class extends AIImageService {
 	async generateImageViaContent(prompt, model = ImageModels.GEMINI_2_5_FLASH_IMAGE) {
 		const response = await this.genAI.models.generateContent({
 			model,
-			contents: [{ text: prompt }]
+			contents: [{ text: prompt }],
+			config: { responseModalities: ["IMAGE", "TEXT"] }
 		});
 		if (!response.candidates || response.candidates.length === 0) throw new Error("No candidates returned from Gemini");
 		const candidate = response.candidates[0];
@@ -8568,7 +8596,8 @@ var GeminiImageService = class extends AIImageService {
 			});
 			const response = await this.genAI.models.generateContent({
 				model,
-				contents
+				contents,
+				config: { responseModalities: ["IMAGE", "TEXT"] }
 			});
 			if (!response.candidates || response.candidates.length === 0) throw new Error("No candidates returned from Gemini");
 			const candidate = response.candidates[0];
@@ -9769,8 +9798,9 @@ function registerLambdaErrorHandlers(logger) {
 		} else log.error("[Lambda] Unhandled promise rejection", logEntry);
 	});
 	process.on("uncaughtException", (error) => {
-		const logEntry = buildLogEntry(error, "uncaught_exception");
-		log.error("[Lambda] Uncaught exception", logEntry);
+		const category = classifyError(error);
+		if (category.startsWith("network_")) log.warn("[Lambda] Network error (uncaught exception)", buildLogEntry(error, category));
+		else log.error("[Lambda] Uncaught exception", buildLogEntry(error, "uncaught_exception"));
 	});
 }
 /**
@@ -10040,7 +10070,7 @@ z.object({
 	userId: z.string()
 });
 //#endregion
-//#region ../../b4m-core/auth/dist/chunk-D7D4PA-g.mjs
+//#region ../../b4m-core/auth/dist/rolldown-runtime-D7D4PA-g.mjs
 var __defProp = Object.defineProperty;
 var __exportAll = (all, no_symbols) => {
 	let target = {};
@@ -10251,6 +10281,13 @@ var apiKeyService_exports = /* @__PURE__ */ __exportAll$2({});
 __reExport$1(apiKeyService_exports, apiKeyService_exports$1);
 //#endregion
 //#region ../../b4m-core/services/dist/llm/tools/implementation/websearch/index.mjs
+function safeHostname(url) {
+	try {
+		return new URL(url).hostname;
+	} catch {
+		return url;
+	}
+}
 async function serpApiSearch(adapters, query, num_results) {
 	const apiKey = await (0, apiKeyService_exports.getSerperKey)(adapters);
 	const url = new URL("https://serpapi.com/search");
@@ -10317,7 +10354,7 @@ async function performWebSearch(adapters, params) {
 				fullContext: result.snippet
 			}
 		}));
-		const formattedResults = results.map((result, index) => `${index + 1}. **${result.title}**\n${result.snippet}\nSource: [${new URL(result.link).hostname}](${result.link})\n`).join("\n");
+		const formattedResults = results.map((result, index) => `${index + 1}. **${result.title}**\n${result.snippet}\nSource: [${safeHostname(result.link)}](${result.link})\n`).join("\n");
 		return {
 			formattedResults: formattedResults ? `Here's what I found from searching the web:\n\n${formattedResults}` : "No results found from web search.",
 			citables
@@ -19738,13 +19775,19 @@ const updateUserSchema = z.object({
 		scrollbarWidth: z.number().optional(),
 		experimentalFeatures: z.record(z.string(), z.boolean()).optional(),
 		rechartsDisplayMode: z.enum(["inline", "artifact"]).optional(),
+		toolsCatalogCollapsed: z.boolean().optional(),
 		docxTemplateFileId: z.string().nullable().optional(),
 		contextTelemetryLevel: z.enum([
 			"none",
 			"basic",
 			"enhanced"
 		]).optional(),
-		contextTelemetryConsentedAt: z.date().optional()
+		contextTelemetryConsentedAt: z.date().optional(),
+		agentModeDefault: z.enum([
+			"off",
+			"auto",
+			"on"
+		]).optional()
 	}).nullable().optional()
 });
 z.object({
@@ -19787,7 +19830,7 @@ z.object({
 	username: z.string(),
 	email: z.string(),
 	name: z.string(),
-	inviteCode: z.string(),
+	inviteCode: z.string().optional(),
 	password: z.string(),
 	metadata: z.object({
 		loginTime: z.date(),
@@ -19940,6 +19983,7 @@ z.object({
 	disabledTools: z.array(z.string()).optional(),
 	forceKnowledgeRetrieval: z.boolean().optional(),
 	retrievalTags: z.array(z.string()).optional(),
+	citationStyle: z.enum(["named", "indexed"]).optional(),
 	temperature: z.number().optional(),
 	tags: z.array(z.object({
 		name: z.string(),
@@ -21574,6 +21618,30 @@ z.object({
 	text: z.string(),
 	context: z.string().optional()
 });
+`${[
+	"needs_web_search",
+	"needs_current_data",
+	"needs_file_lookup",
+	"needs_calculation",
+	"multi_step_reasoning",
+	"requires_retrieval",
+	"compare_sources",
+	"verify_facts"
+].join(", ")}${[
+	"personal_opinion",
+	"creative_writing",
+	"casual_chat",
+	"self_contained",
+	"definition_only",
+	"follow_up_clarification",
+	"roleplay"
+].join(", ")}`;
+z.object({
+	useAgent: z.boolean(),
+	confidence: z.number().min(0).max(1),
+	reason: z.string(),
+	signals: z.array(z.string())
+});
 const SingleMementoEvalSchema = z.object({
 	importance: z.number().min(1).max(10),
 	summary: z.string(),
@@ -23491,8 +23559,175 @@ const DEFAULT_AGENT_MODEL = ChatModels.CLAUDE_4_5_HAIKU;
 */
 const DEFAULT_THOROUGHNESS = "medium";
 //#endregion
+//#region src/agents/toolFilter.ts
+/**
+* Check if a tool name matches a pattern
+*
+* Supports wildcards (*) that match any sequence of characters.
+*
+* @param toolName - The actual tool name to check
+* @param pattern - The pattern to match against (may include * wildcards)
+* @returns true if the tool name matches the pattern
+*
+* @example
+* matchesToolPattern('mcp__github__create_issue', 'mcp__github__*') // true
+* matchesToolPattern('mcp__github__delete_repo', 'mcp__*__delete_*') // true
+* matchesToolPattern('file_read', 'file_read') // true
+* matchesToolPattern('file_read', 'file_*') // true
+* matchesToolPattern('file_read', '*_read') // true
+* matchesToolPattern('bash_execute', 'file_*') // false
+*/
+function matchesToolPattern(toolName, pattern) {
+	const regexPattern = pattern.replace(/[.+?^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*");
+	return new RegExp(`^${regexPattern}$`).test(toolName);
+}
+/**
+* Check if a tool name matches any pattern in a list
+*
+* @param toolName - The tool name to check
+* @param patterns - Array of patterns to match against
+* @returns true if the tool matches any pattern
+*/
+function matchesAnyPattern(toolName, patterns) {
+	return patterns.some((pattern) => matchesToolPattern(toolName, pattern));
+}
+/**
+* Filter tools based on allowed and denied patterns
+*
+* Rules:
+* 1. Denied patterns take precedence over allowed patterns
+* 2. If no allowed patterns specified, all tools are allowed (minus denied)
+* 3. If allowed patterns specified, only matching tools are allowed
+* 4. Supports wildcards in both allowed and denied patterns
+*
+* @param allTools - Complete list of available tools
+* @param allowedPatterns - Whitelist patterns (optional)
+* @param deniedPatterns - Blacklist patterns (optional)
+* @returns Filtered list of tools
+*
+* @example
+* // Allow only specific tools
+* filterToolsByPatterns(tools, ['file_read', 'grep_search'])
+*
+* // Allow all GitHub MCP tools except delete operations
+* filterToolsByPatterns(tools, ['mcp__github__*'], ['mcp__github__delete_*'])
+*
+* // Deny specific tools, allow everything else
+* filterToolsByPatterns(tools, undefined, ['create_file', 'edit_file'])
+*/
+function filterToolsByPatterns(allTools, allowedPatterns, deniedPatterns) {
+	return allTools.filter((tool) => {
+		const toolName = tool.toolSchema.name;
+		if (deniedPatterns && deniedPatterns.length > 0) {
+			if (matchesAnyPattern(toolName, deniedPatterns)) return false;
+		}
+		if (!allowedPatterns || allowedPatterns.length === 0) return true;
+		return matchesAnyPattern(toolName, allowedPatterns);
+	});
+}
+//#endregion
+//#region src/utils/processHooks.ts
+const HOOK_TIMEOUT_MS = 5e3;
+/** Does a group's matcher match the event's matcher value? `*`/empty/undefined match anything. */
+function matcherMatches(groupMatcher, eventMatcher) {
+	if (groupMatcher === void 0 || groupMatcher === "" || groupMatcher === "*") return true;
+	return groupMatcher === eventMatcher;
+}
+var ProcessHooks = class {
+	constructor(hooks) {
+		this.hooks = hooks;
+	}
+	/**
+	* Run every command registered for `event` whose matcher matches `eventMatcher`.
+	* `payload` is written to each command's stdin (then EOF). Best-effort: a failing
+	* command never throws or blocks the caller's lifecycle.
+	*/
+	async fire(event, eventMatcher, payload) {
+		const groups = this.hooks[event];
+		if (!groups || groups.length === 0) return;
+		const stdin = JSON.stringify({
+			hook_event_name: event,
+			...eventMatcher ? { matcher: eventMatcher } : {},
+			...payload
+		});
+		const runs = [];
+		for (const group of groups) {
+			if (!matcherMatches(group.matcher, eventMatcher)) continue;
+			for (const hook of group.hooks ?? []) {
+				if (hook.type !== "command" || !hook.command) continue;
+				runs.push(runShellCommand({
+					command: hook.command,
+					cwd: process.cwd(),
+					timeoutMs: HOOK_TIMEOUT_MS,
+					stdin
+				}).catch(() => void 0));
+			}
+		}
+		await Promise.all(runs);
+	}
+	/** Fired when an interactive permission prompt begins blocking. */
+	fireNotificationPermissionPrompt(toolName) {
+		return this.fire("Notification", "permission_prompt", { tool_name: toolName });
+	}
+	/** Fired after any tool completes. */
+	firePostToolUse(toolName) {
+		return this.fire("PostToolUse", void 0, { tool_name: toolName });
+	}
+	/** Fired at the end of every agent turn. */
+	fireStop() {
+		return this.fire("Stop");
+	}
+	/** Fired when the user submits a new prompt. */
+	fireUserPromptSubmit() {
+		return this.fire("UserPromptSubmit");
+	}
+};
+/**
+* Parse a `--settings` JSON string into a {@link SettingsHooks}. Defensive:
+* malformed JSON or a missing/!-object `hooks` field yields `null` (no hooks),
+* never throws — a bad `--settings` must not brick the launch.
+*/
+function parseSettingsHooks(settingsJson) {
+	if (!settingsJson) return null;
+	try {
+		const parsed = JSON.parse(settingsJson);
+		if (!parsed || typeof parsed !== "object") return null;
+		const hooks = parsed.hooks;
+		if (!hooks || typeof hooks !== "object") return null;
+		return hooks;
+	} catch {
+		return null;
+	}
+}
+let cached;
+/**
+* Lazily-built process-hook singleton from `B4M_SETTINGS_JSON`. Returns null when
+* no hooks are configured, so call sites can `void getProcessHooks()?.fireStop()`.
+*/
+function getProcessHooks() {
+	if (cached !== void 0) return cached;
+	const hooks = parseSettingsHooks(process.env.B4M_SETTINGS_JSON);
+	cached = hooks ? new ProcessHooks(hooks) : null;
+	return cached;
+}
+//#endregion
 //#region src/utils/toolsAdapter.ts
 /**
+* Tool-name patterns auto-approved without a permission prompt, from `--allowedTools`
+* (claude-compat; e.g. `mcp__manifold__*`). Parsed once from B4M_ALLOWED_TOOLS — set by
+* bin/bike4mind-cli.mjs. Returns [] when unset so behaviour is unchanged off-host.
+*/
+let cachedAllowedTools;
+function getAllowedToolPatterns() {
+	if (cachedAllowedTools === void 0) try {
+		const raw = process.env.B4M_ALLOWED_TOOLS;
+		cachedAllowedTools = raw ? JSON.parse(raw) : [];
+	} catch {
+		cachedAllowedTools = [];
+	}
+	return cachedAllowedTools;
+}
+/**
 * Simple CLI-friendly storage adapter
 * Most methods won't be called for CLI-only tools
 * Silent to avoid interfering with Ink rendering
@@ -23601,6 +23836,7 @@ function wrapToolWithPermission(tool, permissionManager, showPermissionPrompt, a
 					toolName,
 					result
 				});
+				getProcessHooks()?.firePostToolUse(toolName);
 				return result;
 			}
 			const { useCliStore } = await import("./store-DgzCTRkN.mjs");
@@ -23613,6 +23849,8 @@ function wrapToolWithPermission(tool, permissionManager, showPermissionPrompt, a
 				});
 				return result;
 			}
+			const allowedPatterns = getAllowedToolPatterns();
+			if (allowedPatterns.length > 0 && matchesAnyPattern(toolName, allowedPatterns)) return executeAndRecord();
 			if (!permissionManager.needsPermission(toolName, { isSandboxed })) return executeAndRecord();
 			if (interactionMode === "auto-accept") return executeAndRecord();
 			const response = await showPermissionPrompt(toolName, effectiveArgs, await generateToolPreview(toolName, args, isSandboxed));
@@ -24338,9 +24576,11 @@ var MCPClient = class {
 	customArgs;
 	suppressStderr;
 	onStderrLine;
+	url;
+	headers;
 	tools = [];
 	serverName;
-	constructor({ envVariables, name, command, args, suppressStderr = false, onStderrLine }) {
+	constructor({ envVariables, name, command, args, suppressStderr = false, onStderrLine, url, headers }) {
 		this.mcp = new Client({
 			name: "mcp-client-cli",
 			version: "1.0.0"
@@ -24351,9 +24591,26 @@ var MCPClient = class {
 		this.customArgs = args;
 		this.suppressStderr = suppressStderr;
 		this.onStderrLine = onStderrLine;
+		this.url = url;
+		this.headers = headers;
 	}
 	async connectToServer() {
 		try {
+			if (this.url) {
+				const transport = new StreamableHTTPClientTransport(new URL(this.url), { requestInit: this.headers ? { headers: this.headers } : void 0 });
+				transport.onerror = (error) => {
+					console.error(`[MCP] Transport error for ${this.serverName}:`, error);
+				};
+				this.transport = transport;
+				await this.mcp.connect(transport);
+				const toolsResult = await this.mcp.listTools();
+				this.tools = toolsResult.tools.map((tool) => ({
+					name: tool.name,
+					description: tool.description,
+					input_schema: tool.inputSchema
+				}));
+				return;
+			}
 			const envVarsObject = this.envVariables.reduce((acc, env) => ({
 				...acc,
 				[env.key]: env.value
@@ -24378,7 +24635,7 @@ var MCPClient = class {
 				console.log(`[MCP] Using server: ${this.serverName} at ${serverScriptPath}`);
 			}
 			const stderrMode = this.suppressStderr ? "ignore" : this.onStderrLine ? "pipe" : void 0;
-			const transportConfig = {
+			const stdioTransport = new StdioClientTransport({
 				command,
 				args,
 				env: {
@@ -24386,13 +24643,13 @@ var MCPClient = class {
 					...envVarsObject
 				},
 				...stderrMode && { stderr: stderrMode }
-			};
-			this.transport = new StdioClientTransport(transportConfig);
-			this.transport.onerror = (error) => {
+			});
+			this.transport = stdioTransport;
+			stdioTransport.onerror = (error) => {
 				console.error(`[MCP] Transport error for ${this.serverName}:`, error);
 			};
-			await this.mcp.connect(this.transport);
-			if (this.onStderrLine && this.transport.stderr) this.readStderr(this.transport.stderr);
+			await this.mcp.connect(stdioTransport);
+			if (this.onStderrLine && stdioTransport.stderr) this.readStderr(stdioTransport.stderr);
 			await new Promise((resolve) => setTimeout(resolve, 100));
 			const toolsResult = await this.mcp.listTools();
 			this.tools = toolsResult.tools.map((tool) => {
@@ -24614,6 +24871,8 @@ var McpManager = class {
 			name: serverConfig.name,
 			command: serverConfig.command,
 			args: serverConfig.args,
+			url: serverConfig.url,
+			headers: serverConfig.headers,
 			suppressStderr: true
 		});
 		await client.connectToServer();
@@ -24671,6 +24930,7 @@ var McpManager = class {
 		const key = JSON.stringify({
 			command: serverConfig.command,
 			args: serverConfig.args,
+			url: serverConfig.url,
 			env: serverConfig.env
 		});
 		return createHash("sha256").update(key).digest("hex").slice(0, 16);
@@ -25913,73 +26173,6 @@ var ApiClient = class {
 	}
 };
 //#endregion
-//#region src/agents/toolFilter.ts
-/**
-* Check if a tool name matches a pattern
-*
-* Supports wildcards (*) that match any sequence of characters.
-*
-* @param toolName - The actual tool name to check
-* @param pattern - The pattern to match against (may include * wildcards)
-* @returns true if the tool name matches the pattern
-*
-* @example
-* matchesToolPattern('mcp__github__create_issue', 'mcp__github__*') // true
-* matchesToolPattern('mcp__github__delete_repo', 'mcp__*__delete_*') // true
-* matchesToolPattern('file_read', 'file_read') // true
-* matchesToolPattern('file_read', 'file_*') // true
-* matchesToolPattern('file_read', '*_read') // true
-* matchesToolPattern('bash_execute', 'file_*') // false
-*/
-function matchesToolPattern(toolName, pattern) {
-	const regexPattern = pattern.replace(/[.+?^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*");
-	return new RegExp(`^${regexPattern}$`).test(toolName);
-}
-/**
-* Check if a tool name matches any pattern in a list
-*
-* @param toolName - The tool name to check
-* @param patterns - Array of patterns to match against
-* @returns true if the tool matches any pattern
-*/
-function matchesAnyPattern(toolName, patterns) {
-	return patterns.some((pattern) => matchesToolPattern(toolName, pattern));
-}
-/**
-* Filter tools based on allowed and denied patterns
-*
-* Rules:
-* 1. Denied patterns take precedence over allowed patterns
-* 2. If no allowed patterns specified, all tools are allowed (minus denied)
-* 3. If allowed patterns specified, only matching tools are allowed
-* 4. Supports wildcards in both allowed and denied patterns
-*
-* @param allTools - Complete list of available tools
-* @param allowedPatterns - Whitelist patterns (optional)
-* @param deniedPatterns - Blacklist patterns (optional)
-* @returns Filtered list of tools
-*
-* @example
-* // Allow only specific tools
-* filterToolsByPatterns(tools, ['file_read', 'grep_search'])
-*
-* // Allow all GitHub MCP tools except delete operations
-* filterToolsByPatterns(tools, ['mcp__github__*'], ['mcp__github__delete_*'])
-*
-* // Deny specific tools, allow everything else
-* filterToolsByPatterns(tools, undefined, ['create_file', 'edit_file'])
-*/
-function filterToolsByPatterns(allTools, allowedPatterns, deniedPatterns) {
-	return allTools.filter((tool) => {
-		const toolName = tool.toolSchema.name;
-		if (deniedPatterns && deniedPatterns.length > 0) {
-			if (matchesAnyPattern(toolName, deniedPatterns)) return false;
-		}
-		if (!allowedPatterns || allowedPatterns.length === 0) return true;
-		return matchesAnyPattern(toolName, allowedPatterns);
-	});
-}
-//#endregion
 //#region src/tools/skillTool.ts
 /**
 * Execute a lifecycle hook script
@@ -28719,4 +28912,4 @@ function createReviewGateStore(onUpdate) {
 	};
 }
 //#endregion
-export { OAuthClient as $, substituteArguments as A, DEFAULT_THOROUGHNESS as B, WebSocketToolExecutor as C, ServerLlmBackend as D, WebSocketLlmBackend as E, generateCliTools as F, buildSystemPrompt as G, registerFeatureModuleTools as H, ALWAYS_DENIED_FOR_AGENTS as I, ReActAgent as J, buildSkillsPromptSection as K, DEFAULT_AGENT_MODEL as L, extractCompactInstructions as M, loadContextFiles as N, isTransientNetworkError as O, PermissionManager as P, SessionStore as Q, DEFAULT_MAX_ITERATIONS as R, ApiClient as S, FallbackLlmBackend as T, setWebSocketToolExecutor as U, clearFeatureModuleTools as V, getPlanModeFilePath as W, CheckpointStore as X, CustomCommandStore as Y, CommandHistoryStore as Z, createAgentDelegateTool as _, createBlockerTools as a, searchFiles as at, createSkillTool as b, createDecisionStore as c, createFindDefinitionTool as d, hasFileReferences as et, createTodoStore as f, BackgroundAgentManager as g, createBackgroundAgentTools as h, createBlockerStore as i, formatFileSize$1 as it, formatStep as j, McpManager as k, formatDecisionsOutput as l, createCoordinateTaskTool as m, createReviewGateTool as n, searchCommands as nt, formatBlockersOutput as o, warmFileCache as ot, createWriteTodosTool as p, isReadOnlyTool as q, formatReviewGatesOutput as r, mergeCommands as rt, createDecisionLogTool as s, createReviewGateStore as t, processFileReferences as tt, createGetFileStructureTool as u, AgentStore as v, WebSocketConnectionManager as w, parseAgentConfig as x, SubagentOrchestrator as y, DEFAULT_RETRY_CONFIG as z };
+export { SessionStore as $, substituteArguments as A, DEFAULT_RETRY_CONFIG as B, WebSocketToolExecutor as C, ServerLlmBackend as D, WebSocketLlmBackend as E, generateCliTools as F, getPlanModeFilePath as G, clearFeatureModuleTools as H, getProcessHooks as I, isReadOnlyTool as J, buildSystemPrompt as K, ALWAYS_DENIED_FOR_AGENTS as L, extractCompactInstructions as M, loadContextFiles as N, isTransientNetworkError as O, PermissionManager as P, CommandHistoryStore as Q, DEFAULT_AGENT_MODEL as R, ApiClient as S, FallbackLlmBackend as T, registerFeatureModuleTools as U, DEFAULT_THOROUGHNESS as V, setWebSocketToolExecutor as W, CustomCommandStore as X, ReActAgent as Y, CheckpointStore as Z, createAgentDelegateTool as _, createBlockerTools as a, formatFileSize$1 as at, createSkillTool as b, createDecisionStore as c, createFindDefinitionTool as d, OAuthClient as et, createTodoStore as f, BackgroundAgentManager as g, createBackgroundAgentTools as h, createBlockerStore as i, mergeCommands as it, formatStep as j, McpManager as k, formatDecisionsOutput as l, createCoordinateTaskTool as m, createReviewGateTool as n, processFileReferences as nt, formatBlockersOutput as o, searchFiles as ot, createWriteTodosTool as p, buildSkillsPromptSection as q, formatReviewGatesOutput as r, searchCommands as rt, createDecisionLogTool as s, warmFileCache as st, createReviewGateStore as t, hasFileReferences as tt, createGetFileStructureTool as u, AgentStore as v, WebSocketConnectionManager as w, parseAgentConfig as x, SubagentOrchestrator as y, DEFAULT_MAX_ITERATIONS as z };