@bike4mind/cli 0.18.4 → 0.18.5

package/LICENSE

@@ -33,7 +33,21 @@ Additional Use Grant: You may make production use of the Licensed Work,
                       provider — is expressly permitted and is not a Bike4Mind
                       Service.
 
-Change Date:          Four years from the date a given version of the Licensed
+                      Nominative name use (an additional grant): notwithstanding
+                      the trademark reservation in the Terms below, you may use
+                      the name "Bike4Mind" solely to state accurately that your
+                      product or service is built on, forked from, or derived
+                      from the Licensed Work. This permission does not extend to
+                      using "Bike4Mind" as the name of your own product or
+                      service, or in any manner that implies sponsorship or
+                      endorsement by Bike4Mind, Inc. Retaining the NOTICE file
+                      provided with the Licensed Work is encouraged; and when you
+                      distribute a version on or after its Change Date, retaining
+                      it is required by the Change License (Apache-2.0, Section
+                      4(d)). That obligation attaches to distribution, not to
+                      hosted use.
+
+Change Date:          Two years from the date a given version of the Licensed
                       Work is first made publicly available. Each version
                       carries its own Change Date (see Terms). Bike4Mind, Inc.
                       may, at its discretion, designate an earlier Change Date
@@ -57,7 +71,7 @@ works, redistribute, and make non-production use of the Licensed Work. The
 Licensor may make an Additional Use Grant, above, permitting limited production
 use.
 
-Effective on the Change Date, or the fourth anniversary of the first publicly
+Effective on the Change Date, or the second anniversary of the first publicly
 available distribution of a specific version of the Licensed Work under this
 License, whichever comes first, the Licensor hereby grants you rights under
 the terms of the Change License, and the rights granted in the paragraph

package/dist/{BackgroundAgentManager-DOesheMD.mjs → BackgroundAgentManager-D-xsWd3C.mjs}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
-import { $ as Permission, A as ForbiddenError, At as VideoModels, B as ImageModels, Bt as isModelAccessible, C as CompletionApiUsageTransaction, Ct as ToolUsageTransaction, D as FavoriteDocumentType, Dt as UnprocessableEntityError, E as ElabsEvents, Et as UnauthorizedError, F as GenericCreditDeductTransaction, Ft as getMcpProviderMetadata, G as KnowledgeType, Gt as parseSkillArguments, H as InternalServerError, Ht as isZodError, I as HTTPError, It as getViewById, J as ModalEvents, Jt as secureParameters, K as LLMEvents, Kt as resolveNavigationIntents, L as HttpStatus, Lt as intersectAllowedTools, M as GEMINI_IMAGE_MODELS, Mt as b4mLLMTools, N as GenerateImageToolCallSchema, Nt as dayjsConfig_default, O as FeedbackEvents, Ot as VIDEO_SIZE_CONSTRAINTS, P as GenericCreditAddTransaction, Pt as getAccessibleDataLakes, Q as OpenAIImageGenerationInput, Qt as usdToCredits, R as ImageEditUsageTransaction, Rt as isGPTImage2Model, S as ClaudeArtifactMimeTypes, St as TooManyRequestsError, T as DashboardParamsSchema, Tt as UiNavigationEvents, U as InviteEvents, Ut as mapMimeTypeToArtifactType, V as InboxEvents, Vt as isSupportedEmbeddingModel, W as InviteType, Wt as obfuscateApiKey, X as NotFoundError, Xt as substituteArguments$1, Y as ModelBackend, Yt as settingsMap, Z as OpenAIEmbeddingModel, Zt as toDataLakeConfig, _ as BFL_SAFETY_TOLERANCE, _t as SubscriptionCreditTransaction, an as parseRateLimitHeaders, at as PurchaseTransaction, b as ChatCompletionCreateInputSchema, bt as TaskScheduleHandler, c as AiEvents, ct as ReceivedCreditTransaction, d as ApiKeyType, dt as ResearchModeParamsSchema, et as PermissionDeniedError, f as AppFileEvents, ft as ResearchTaskExecutionType, g as BFL_IMAGE_MODELS, gt as SpeechToTextUsageTransaction, h as BFLSafetyToleranceSchema, ht as SessionEvents, in as isNearLimit, it as PromptMetaZodSchema, j as FriendshipEvents, jt as XAI_IMAGE_MODELS, k as FileEvents, kt as VideoGenerationUsageTransaction, l as ApiKeyEvents, lt as RechartsChartTypeList, m as AuthEvents, mt as ResearchTaskType, n as logger, nn as buildRateLimitLogEntry, nt as ProjectEvents, on as CollectionType, ot as QuestMasterParamsSchema, p as ArtifactTypeSchema, pt as ResearchTaskPeriodicFrequencyType, q as MiscEvents, qt as sanitizeTelemetryError, rn as extractSnippetMeta, rt as PromptIntentSchema, s as ALERT_THRESHOLDS, st as RealtimeVoiceUsageTransaction, t as ConfigStore, tn as wrapUntrustedSkillBody, tt as ProfileEvents, u as ApiKeyScope, ut as RegInviteEvents, v as BadRequestError, vt as SupportedFabFileMimeTypes, w as CorruptedFileError, wt as TransferCreditTransaction, x as ChatModels, xt as TextGenerationUsageTransaction, yt as TagType, z as ImageGenerationUsageTransaction, zt as isGPTImageModel } from "./ConfigStore-Cq20962p.mjs";
+import { $ as Permission, $t as toDataLakeConfig, A as ForbiddenError, At as VideoModels, B as ImageModels, Bt as isImageServeable, C as CompletionApiUsageTransaction, Ct as ToolUsageTransaction, D as FavoriteDocumentType, Dt as UnprocessableEntityError, E as ElabsEvents, Et as UnauthorizedError, F as GenericCreditDeductTransaction, Ft as getMcpProviderMetadata, G as KnowledgeType, Gt as mapMimeTypeToArtifactType, H as InternalServerError, Ht as isSupportedEmbeddingModel, I as HTTPError, It as getViewById, J as ModalEvents, Jt as resolveNavigationIntents, K as LLMEvents, Kt as obfuscateApiKey, L as HttpStatus, Lt as intersectAllowedTools, M as GEMINI_IMAGE_MODELS, Mt as b4mLLMTools, N as GenerateImageToolCallSchema, Nt as dayjsConfig_default, O as FeedbackEvents, Ot as VIDEO_SIZE_CONSTRAINTS, P as GenericCreditAddTransaction, Pt as getAccessibleDataLakes, Q as OpenAIImageGenerationInput, Qt as substituteArguments$1, R as ImageEditUsageTransaction, Rt as isGPTImage2Model, S as ClaudeArtifactMimeTypes, St as TooManyRequestsError, T as DashboardParamsSchema, Tt as UiNavigationEvents, U as InviteEvents, Ut as isSupportedFabFileMimeType, V as InboxEvents, Vt as isModelAccessible, W as InviteType, Wt as isZodError, X as NotFoundError, Xt as secureParameters, Y as ModelBackend, Yt as sanitizeTelemetryError, Z as OpenAIEmbeddingModel, Zt as settingsMap, _ as BFL_SAFETY_TOLERANCE, _t as SubscriptionCreditTransaction, an as extractSnippetMeta, at as PurchaseTransaction, b as ChatCompletionCreateInputSchema, bt as TaskScheduleHandler, c as AiEvents, cn as CollectionType, ct as ReceivedCreditTransaction, d as ApiKeyType, dt as ResearchModeParamsSchema, en as usdToCredits, et as PermissionDeniedError, f as AppFileEvents, ft as ResearchTaskExecutionType, g as BFL_IMAGE_MODELS, gt as SpeechToTextUsageTransaction, h as BFLSafetyToleranceSchema, ht as SessionEvents, in as buildRateLimitLogEntry, it as PromptMetaZodSchema, j as FriendshipEvents, jt as XAI_IMAGE_MODELS, k as FileEvents, kt as VideoGenerationUsageTransaction, l as ApiKeyEvents, lt as RechartsChartTypeList, m as AuthEvents, mt as ResearchTaskType, n as logger, nt as ProjectEvents, on as isNearLimit, ot as QuestMasterParamsSchema, p as ArtifactTypeSchema, pt as ResearchTaskPeriodicFrequencyType, q as MiscEvents, qt as parseSkillArguments, rn as wrapUntrustedSkillBody, rt as PromptIntentSchema, s as ALERT_THRESHOLDS, sn as parseRateLimitHeaders, st as RealtimeVoiceUsageTransaction, t as ConfigStore, tt as ProfileEvents, u as ApiKeyScope, ut as RegInviteEvents, v as BadRequestError, vt as SupportedFabFileMimeTypes, w as CorruptedFileError, wt as TransferCreditTransaction, x as ChatModels, xt as TextGenerationUsageTransaction, yt as TagType, z as ImageGenerationUsageTransaction, zt as isGPTImageModel } from "./ConfigStore-D39UqFnY.mjs";
 import { a as hashBackupCode, c as shouldResetFailedAttempts, d as userHasMFAConfigured, f as userRequiresMFA, i as getLockoutTimeRemaining, l as userCanDisableMFA, m as verifyTOTPToken, n as generateBackupCodes, o as isUserLockedOut, p as verifyBackupCode, r as generateTOTPSetup, s as recordFailedAttempt, t as clearFailedAttempts, u as userEligibleForMFA } from "./utils-Cdktpk_k.mjs";
 import { n as isPathAllowed, t as assertPathAllowed } from "./pathValidation-D8tjkQXE-1HwvsuYT.mjs";
-import { t as version } from "./package-CBaK53NX.mjs";
+import { t as version } from "./package-I_v_WFUn.mjs";
 import { execFile, execFileSync, spawn } from "child_process";
 import crypto, { createHash, randomBytes, randomUUID } from "crypto";
 import { existsSync, promises, readFileSync, readdirSync, rmSync, statSync, unlinkSync, writeFileSync } from "fs";
@@ -36,7 +36,7 @@ import * as zlib from "node:zlib";
 import { SQSClient, SendMessageCommand } from "@aws-sdk/client-sqs";
 import { ApiGatewayManagementApiClient, PostToConnectionCommand } from "@aws-sdk/client-apigatewaymanagementapi";
 import OpenAI from "openai";
-import { DetectModerationLabelsCommand, RekognitionClient } from "@aws-sdk/client-rekognition";
+import { DetectModerationLabelsCommand, InvalidImageFormatException, RekognitionClient } from "@aws-sdk/client-rekognition";
 import { InvokeCommand, LambdaClient } from "@aws-sdk/client-lambda";
 import { GoogleGenAI } from "@google/genai";
 import FirecrawlApp, { FirecrawlError } from "@mendable/firecrawl-js";
@@ -3288,11 +3288,38 @@ const getMimeTypeByExtension = (ext) => {
 		"conf"
 	].includes(lowerExt)) return SupportedFabFileMimeTypes.TXT_PLAIN;
 	if (lowerExt === "tsx" || lowerExt === "ts") return SupportedFabFileMimeTypes.TS;
+	if (lowerExt === "mdx") return SupportedFabFileMimeTypes.TXT_MARKDOWN;
 	if (lowerExt === "xls") return SupportedFabFileMimeTypes.XLS;
 	if (lowerExt === "xlsx") return SupportedFabFileMimeTypes.XLSX;
 	if (lowerExt === "docx") return SupportedFabFileMimeTypes.DOCX;
+	if (lowerExt === "pptx") return SupportedFabFileMimeTypes.PPTX;
+	if (lowerExt === "jpeg") return SupportedFabFileMimeTypes.JPG;
 	return EXT_TO_MIME[lowerExt] ?? "";
 };
+/**
+* Resolve the effective, supported MIME type for an uploaded file.
+*
+* Browsers frequently report an empty or generic (`application/octet-stream`)
+* MIME type — even for supported code/text files (e.g. `.py`, `.ts`). We trust
+* a claimed type only if it's already supported; otherwise we derive the type
+* from the file extension. The returned `mimeType` is what should be persisted
+* (so the chunker keys on a type it can actually process), and `supported`
+* gates ingest so unsupported/binary files (e.g. `.exe`) are rejected. (#9836)
+*
+* @param fileName - Original file name (used to derive the extension).
+* @param claimedMimeType - The browser/client-provided MIME type, if any.
+*/
+function resolveSupportedMimeType(fileName, claimedMimeType) {
+	if (isSupportedFabFileMimeType(claimedMimeType)) return {
+		mimeType: claimedMimeType,
+		supported: true
+	};
+	const byExtension = getMimeTypeByExtension(getFileExtension(fileName));
+	return {
+		mimeType: byExtension,
+		supported: isSupportedFabFileMimeType(byExtension)
+	};
+}
 const MIME_TO_EXT = {
 	[SupportedFabFileMimeTypes.TXT_PLAIN]: "txt",
 	[SupportedFabFileMimeTypes.TXT_MARKDOWN]: "md",
@@ -3301,9 +3328,14 @@ const MIME_TO_EXT = {
 	[SupportedFabFileMimeTypes.CSV]: "csv",
 	[SupportedFabFileMimeTypes.JPG]: "jpg",
 	[SupportedFabFileMimeTypes.PNG]: "png",
+	[SupportedFabFileMimeTypes.GIF]: "gif",
+	[SupportedFabFileMimeTypes.SVG]: "svg",
+	[SupportedFabFileMimeTypes.WEBP]: "webp",
 	[SupportedFabFileMimeTypes.PDF]: "pdf",
 	[SupportedFabFileMimeTypes.JSON]: "json",
+	[SupportedFabFileMimeTypes.XML]: "xml",
 	[SupportedFabFileMimeTypes.DOCX]: "docx",
+	[SupportedFabFileMimeTypes.PPTX]: "pptx",
 	[SupportedFabFileMimeTypes.XLSX]: "xlsx",
 	[SupportedFabFileMimeTypes.XLS]: "xls",
 	[SupportedFabFileMimeTypes.JS]: "js",
@@ -3790,6 +3822,10 @@ async function processFabFilesServer(embeddingFactory, fabFiles, userPrompt, max
 	const processFileInParallel = async (file) => {
 		try {
 			if (supportsVision && file.mimeType.startsWith("image/")) {
+				if (!isImageServeable(file)) {
+					logger.warn(`[processFabFilesServer] Skipping image file ${file.fileName} — held pending moderation or blocked (#9776 Q2b).`);
+					return;
+				}
 				sendStatusUpdate(`Processing image file ${file.fileName}...`);
 				const fileUrl = file.filePath ? await getCachedSignedUrl(file.filePath, storage, db) : void 0;
 				if (!fileUrl) throw new Error(`Failed to get signed URL for file ${file.fileName}`);
@@ -4868,6 +4904,19 @@ var ClientMessageSender = class {
 		this.connectionCache.delete(userId);
 	}
 };
+/**
+* Thrown by {@link ModerationService.checkPrompt} when a prompt is flagged. Carries the
+* flagged category labels so callers can record a per-user moderation hit (#9778) before
+* surfacing the block to the user. The `message` stays user-facing and unchanged.
+*/
+var FlaggedContentError = class extends Error {
+	categories;
+	constructor(message, categories) {
+		super(message);
+		this.categories = categories;
+		this.name = "FlaggedContentError";
+	}
+};
 var OpenaiModerationsService = class {
 	apiKey;
 	logger;
@@ -4893,7 +4942,7 @@ var OpenaiModerationsService = class {
 				return acc;
 			}, []);
 			this.logger.error(`Prompt has been flagged for potential harmful content:`, JSON.stringify(moderation, null, 2));
-			throw new Error(`We're sorry, your prompt has been flagged for potential harmful content on the following categories: ${flaggedCategories.join(", ")}`);
+			throw new FlaggedContentError(`We're sorry, your prompt has been flagged for potential harmful content on the following categories: ${flaggedCategories.join(", ")}`, flaggedCategories);
 		}
 	}
 };
@@ -4935,6 +4984,25 @@ var ImageModerationBlockedError = class extends Error {
 		this.labels = labels;
 	}
 };
+/**
+* Thrown by `checkImage` when the image bytes are a format Rekognition's
+* `DetectModerationLabels` cannot process (`InvalidImageFormatException` — it only accepts
+* JPEG/PNG, and WEBP in some regions) AND jimp cannot decode/transcode them into something
+* it can (e.g. HEIC, SVG) — #9776 P1-4.
+*
+* Deliberately distinct from both `ImageModerationBlockedError` (a confirmed explicit-
+* content match, with `labels`) and a bare `Error` (a transient/retryable failure like
+* throttling): this is a deterministic, non-retryable "we structurally cannot scan this"
+* outcome. The caller (`moderateUploadedFile`) maps it to a terminal 'blocked' verdict
+* instead of rethrowing for S3 to redeliver forever — an unscannable image must fail closed
+* (not served) rather than get stuck 'pending' indefinitely.
+*/
+var UnsupportedImageFormatError = class extends Error {
+	constructor(message) {
+		super(message);
+		this.name = "UnsupportedImageFormatError";
+	}
+};
 var RekognitionImageModerationService = class {
 	client;
 	logger;
@@ -4945,12 +5013,38 @@ var RekognitionImageModerationService = class {
 			maxAttempts: 1
 		});
 	}
-	/** Downscale buffers that exceed Rekognition's inline 5 MB limit so the check still runs. */
+	/**
+	* Downscale buffers that exceed Rekognition's inline 5 MB limit so the check still runs.
+	*
+	* Split into two try/catches deliberately (#9776 Q2b): a `Jimp.read()` failure means jimp
+	* could not even decode the format — the SAME condition `transcodeToJpeg`'s catch below
+	* treats as a confirmed unsupported format — so it's terminal via `UnsupportedImageFormatError`
+	* right here. Without this, an oversized+undecodable buffer (e.g. HEIC from an iPhone, which
+	* is both large and a format jimp can't read) would fall through with the ORIGINAL oversized
+	* bytes; Rekognition would then likely throw `ImageTooLargeException` rather than
+	* `InvalidImageFormatException` (it never gets far enough to inspect the format), which isn't
+	* caught by the reactive transcode branch in `checkImage` — so it would burn the
+	* transient-retry budget and get stuck 'pending' until DLQ instead of terminating cleanly.
+	* `Jimp.read()` is a synchronous local decode with no I/O, so unlike the Rekognition call
+	* there is no throttling/5xx-style transient failure mode to preserve here — any read failure
+	* is safely treated as terminal.
+	*
+	* A failure in the SECOND try (resize/re-encode, after a successful decode) is NOT a format
+	* problem — jimp already proved it can read these bytes — so that one keeps the original
+	* fall-through-with-original-bytes behavior: the Rekognition call will fail-closed (block)
+	* rather than silently skip, which is the safe direction.
+	*/
 	async fitForInlineDetection(bytes) {
 		if (bytes.length <= MAX_INLINE_IMAGE_BYTES) return bytes;
+		const { Jimp } = await import("jimp");
+		let image;
+		try {
+			image = await Jimp.read(bytes);
+		} catch (err) {
+			this.logger.warn(`[ImageModeration] oversized image (${bytes.length}B) could not be decoded for downscaling, unsupported format: ${err.message}`);
+			throw new UnsupportedImageFormatError(`Oversized image (${bytes.length}B) could not be decoded for downscaling: ${err.message}`);
+		}
 		try {
-			const { Jimp } = await import("jimp");
-			const image = await Jimp.read(bytes);
 			const { width, height } = image.bitmap;
 			const scale = 2048 / Math.max(width, height);
 			const resized = Buffer.from(await image.resize({
@@ -4964,8 +5058,22 @@ var RekognitionImageModerationService = class {
 			return bytes;
 		}
 	}
+	/**
+	* Re-encode arbitrary jimp-decodable bytes as JPEG (#9776 P1-4). Used reactively when
+	* Rekognition rejects the original format — jimp decodes jpeg/png/webp/gif/bmp/tiff, a
+	* broader set than Rekognition itself accepts (jpeg/png, webp in some regions), so this
+	* recovers formats Rekognition can't parse but jimp can. If jimp ALSO can't decode the
+	* bytes (e.g. HEIC, SVG), it throws and the caller treats that as a confirmed unsupported
+	* format rather than a transient failure.
+	*/
+	async transcodeToJpeg(bytes) {
+		const { Jimp } = await import("jimp");
+		const image = await Jimp.read(bytes);
+		return Buffer.from(await image.getBuffer("image/jpeg"));
+	}
 	async checkImage(bytes, _mimeType) {
-		const image = await this.fitForInlineDetection(bytes);
+		let image = await this.fitForInlineDetection(bytes);
+		let triedTranscode = false;
 		let lastError;
 		for (let attempt = 1; attempt <= MAX_ATTEMPTS; attempt++) try {
 			const hits = ((await this.client.send(new DetectModerationLabelsCommand({
@@ -4980,6 +5088,18 @@ var RekognitionImageModerationService = class {
 			return;
 		} catch (err) {
 			if (err instanceof ImageModerationBlockedError) throw err;
+			if (err instanceof InvalidImageFormatException && !triedTranscode) {
+				triedTranscode = true;
+				try {
+					image = await this.transcodeToJpeg(image);
+					this.logger.warn("[ImageModeration] Rekognition rejected the original format; transcoded to JPEG via jimp and retrying");
+					attempt--;
+					continue;
+				} catch (transcodeErr) {
+					this.logger.warn(`[ImageModeration] unsupported image format, cannot transcode: ${transcodeErr.message}`);
+					throw new UnsupportedImageFormatError(`Rekognition rejected the format (${err.name}) and it could not be transcoded: ${transcodeErr.message}`);
+				}
+			}
 			lastError = err;
 			this.logger.warn(`[ImageModeration] Rekognition attempt ${attempt}/${MAX_ATTEMPTS} failed: ${err.message}`);
 		}
@@ -8091,6 +8211,7 @@ __reExport(/* @__PURE__ */ __exportAll$1({
 	EmbeddingFactory: () => EmbeddingFactory,
 	EmbeddingModelProvider: () => EmbeddingModelProvider,
 	EmbeddingService: () => EmbeddingService,
+	FlaggedContentError: () => FlaggedContentError,
 	ForbiddenError: () => ForbiddenError,
 	FunctionQueueRunner: () => FunctionQueueRunner,
 	GeminiImageService: () => GeminiImageService,
@@ -8127,6 +8248,7 @@ __reExport(/* @__PURE__ */ __exportAll$1({
 	URL_REGEX: () => URL_REGEX,
 	UnauthorizedError: () => UnauthorizedError,
 	UnprocessableEntityError: () => UnprocessableEntityError,
+	UnsupportedImageFormatError: () => UnsupportedImageFormatError,
 	VOYAGEAI_EMBEDDING_MODEL_MAP: () => VOYAGEAI_EMBEDDING_MODEL_MAP,
 	VoyageAIEmbeddingProvider: () => VoyageAIEmbeddingProvider,
 	XAIImageService: () => XAIImageService,
@@ -8202,6 +8324,7 @@ __reExport(/* @__PURE__ */ __exportAll$1({
 	processUrlsFromPrompt: () => processUrlsFromPrompt,
 	registerLambdaErrorHandlers: () => registerLambdaErrorHandlers,
 	registerProcessErrorHandlers: () => registerProcessErrorHandlers,
+	resolveSupportedMimeType: () => resolveSupportedMimeType,
 	secureParameters: () => secureParameters,
 	sendToConnection: () => sendToConnection,
 	shouldTriggerFallback: () => shouldTriggerFallback,
@@ -9005,7 +9128,7 @@ function sanitizeJsonStringWithMeta(jsonStr, options) {
 	};
 }
 //#endregion
-//#region ../../b4m-core/services/dist/tools-BuXYw9Ho.mjs
+//#region ../../b4m-core/services/dist/tools-CVuY-EzZ.mjs
 const createFabFileSchema = z.object({
 	fileName: z.string(),
 	mimeType: z.string(),
@@ -9039,12 +9162,10 @@ const createFabFile = async (userId, parameters, { db, storage }) => {
 	const params = secureParameters(parameters, createFabFileSchema);
 	const user = await db.users.findById(userId);
 	if (!user) throw new BadRequestError("User not found");
-	let ext = "";
-	let mimeType = parameters.mimeType;
-	ext = getFileExtension(params.fileName);
-	mimeType = params.mimeType || getMimeTypeByExtension(ext);
-	if (!mimeType) mimeType = SupportedFabFileMimeTypes.TXT_PLAIN;
-	if (!Object.values(SupportedFabFileMimeTypes).some((type) => type === mimeType)) throw new BadRequestError(`File type ${mimeType} is not supported`);
+	const ext = getFileExtension(params.fileName);
+	let mimeType = params.mimeType || getMimeTypeByExtension(ext);
+	if (!mimeType && !ext) mimeType = SupportedFabFileMimeTypes.TXT_PLAIN;
+	if (!isSupportedFabFileMimeType(mimeType)) throw new BadRequestError(`File type ${mimeType || (ext ? `.${ext}` : "unknown")} is not supported`);
 	let filePath = params.prefix ? `${params.prefix}/` : "";
 	filePath += `${v4()}${ext ? `.${ext}` : ".txt"}`;
 	const maxFileSize = getSettingsValue("MaxFileSize", await getSettingsMap(db), DEFAULT_MAX_FILE_SIZE) * 1024 * 1024;
@@ -9067,8 +9188,10 @@ const createFabFile = async (userId, parameters, { db, storage }) => {
 			ContentType: params.contentType,
 			ContentLength: params.fileSize
 		});
-		buildData.fileUrl = await storage.generateSignedUrl(filePath, DEFAULT_EXPIRE_IN_SECONDS, "get");
-		buildData.fileUrlExpireAt = new Date(Date.now() + DEFAULT_EXPIRE_IN_SECONDS * 1e3);
+		if (!mimeType.startsWith("image/")) {
+			buildData.fileUrl = await storage.generateSignedUrl(filePath, DEFAULT_EXPIRE_IN_SECONDS, "get");
+			buildData.fileUrlExpireAt = new Date(Date.now() + DEFAULT_EXPIRE_IN_SECONDS * 1e3);
+		}
 	} else buildData.presignedUrl = await storage.generateSignedUrl(filePath, 600, "put");
 	return await db.fabFiles.create(buildData);
 };
@@ -10785,6 +10908,7 @@ const editFileTool = {
 				const fabFile = await context.db.fabFiles?.findById(fileId);
 				if (!fabFile) throw new NotFoundError(`File with ID ${fileId} not found`);
 				if (!fabFile || !fabFile.fileUrl && !fabFile.filePath) throw new Error("File has no content to edit");
+				if (fabFile && !isImageServeable(fabFile)) throw new Error("This image is not available.");
 				let contentToEdit = "";
 				if (fabFile.fileUrl) {
 					context.logger.info(`📝 Edit File Tool: Fetching content from URL for file ${fileId}`);
@@ -10942,6 +11066,7 @@ async function getImageFromFileId(fileId, context) {
 	const fabFile = await context.db.fabfiles?.findById(fileId);
 	if (!fabFile) throw new NotFoundError(`File with ID ${fileId} not found`);
 	if (!fabFile.mimeType?.startsWith("image/")) throw new Error(`File ${fileId} is not an image`);
+	if (!isImageServeable(fabFile)) throw new Error("This image is not available.");
 	if (fabFile.filePath) return await context.storage.getSignedUrl(fabFile.filePath);
 	if (fabFile.fileUrl) return fabFile.fileUrl;
 	throw new Error(`File ${fileId} has no accessible URL`);
@@ -17950,7 +18075,13 @@ updateUserSchema.extend({
 		userName: z.string()
 	})).optional(),
 	numReferralsAvailable: z.number().optional(),
-	disputePending: z.boolean().optional()
+	disputePending: z.boolean().optional(),
+	moderationStatus: z.enum([
+		"active",
+		"throttled",
+		"suspend_pending",
+		"suspended"
+	]).optional()
 });
 new Set(disposableDomains);
 z.object({
@@ -18421,6 +18552,7 @@ z.object({
 		dataLakeTags: z.array(z.string()).optional(),
 		dataLakeTagPrefixes: z.array(z.string()).optional(),
 		scopedTagPrefixes: z.array(z.string()).optional(),
+		restrictToDataLake: z.coerce.boolean().optional(),
 		excludeContent: z.coerce.boolean().optional()
 	}).optional()
 });

package/dist/{ConfigStore-Cq20962p.mjs → ConfigStore-D39UqFnY.mjs}

@@ -1261,6 +1261,51 @@ const CREDIT_DEDUCT_TRANSACTION_TYPES = [
 	"transfer_credit",
 	"generic_deduct"
 ];
+z.object({
+	id: z.string().optional(),
+	/** App-level correlation id: questId for chat/image/video, session/run id otherwise. */
+	requestId: z.string(),
+	userId: z.string(),
+	/** Credit holder actually debited (user or organization). */
+	ownerId: z.string(),
+	ownerType: z.enum(CreditHolderType),
+	sessionId: z.string().optional(),
+	feature: z.enum([
+		"chat",
+		"image_generation",
+		"image_edit",
+		"video_generation",
+		"voice",
+		"transcription",
+		"agent_execution",
+		"completion_api",
+		"tool"
+	]),
+	/** Provider/backend, e.g. 'bedrock', 'openai', 'gemini'. */
+	provider: z.string(),
+	/** Exact model id string used for the call. */
+	model: z.string(),
+	inputTokens: z.number().default(0),
+	outputTokens: z.number().default(0),
+	cachedInputTokens: z.number().default(0),
+	cacheWriteTokens: z.number().default(0),
+	providerInputTokens: z.number().optional(),
+	providerOutputTokens: z.number().optional(),
+	/** Images generated / video seconds, for per-unit modalities. */
+	units: z.number().optional(),
+	/** True provider COGS in USD, computed and frozen at write time. */
+	costUsd: z.number(),
+	/** Credits actually debited from the owner for this call. */
+	creditsCharged: z.number(),
+	status: z.enum([
+		"ok",
+		"error",
+		"timeout"
+	]).default("ok"),
+	latencyMs: z.number().optional(),
+	createdAt: z.date(),
+	updatedAt: z.date()
+});
 let ResearchTaskExecutionType = /* @__PURE__ */ function(ResearchTaskExecutionType) {
 	/**
 	* The task is executed on demand
@@ -1647,6 +1692,23 @@ let SupportedFabFileMimeTypes = /* @__PURE__ */ function(SupportedFabFileMimeTyp
 	return SupportedFabFileMimeTypes;
 }({});
 /**
+* The canonical set of MIME types the ingest pipeline can actually chunk +
+* vectorize. Kept in lockstep with the `SmartChunker` switch in
+* `@bike4mind/fab-pipeline`.
+*/
+const SUPPORTED_FAB_FILE_MIME_TYPES = new Set(Object.values(SupportedFabFileMimeTypes));
+/**
+* Type guard: is a claimed MIME type one we actually support ingesting?
+*
+* Used to gate uploads so unsupported/binary files (e.g. `.exe`) are rejected
+* with a clear error instead of being stored and silently "vectorized" into 0
+* chunks. Node-free so it can run on both the client (upload UI) and server
+* (ingest endpoints).
+*/
+function isSupportedFabFileMimeType(mimeType) {
+	return !!mimeType && SUPPORTED_FAB_FILE_MIME_TYPES.has(mimeType);
+}
+/**
 * Canonical agent execution status tuple. Shared between the database model
 * (`AgentExecutionModel`), the client store (`useAgentExecutionStore`), and
 * wire schemas (`ChildExecutionSnapshotSchema`, etc.) so the value space can't
@@ -2090,6 +2152,17 @@ const DataLakeBatchProgressAction = z.object({
 		"cancelled"
 	]).optional()
 });
+/** Verdict for a freshly-uploaded FabFile after the S3-event moderation scan (#9776 Q2b). */
+const ImageModerationStatusAction = z.object({
+	action: z.literal("image_moderation_status"),
+	clientId: z.string().optional(),
+	fabFileId: z.string(),
+	moderationStatus: z.enum([
+		"pending",
+		"clean",
+		"blocked"
+	])
+});
 const UpdateResearchTaskStatusAction = z.object({
 	action: z.literal("update_research_task_status"),
 	clientId: z.string().optional(),
@@ -2988,6 +3061,7 @@ z.discriminatedUnion("action", [
 	TavernStockUpdateAction,
 	JupyterNotebookProgressAction,
 	DataLakeBatchProgressAction,
+	ImageModerationStatusAction,
 	CcAgentCommandAction,
 	QuantumRunUpdatedAction,
 	ExecutionStartedAction,
@@ -4074,6 +4148,7 @@ z.enum([
 	"SlackLiveopsWebhookUrl",
 	"SlackUserActivityWebhookUrl",
 	"SlackFeedbackWebhookUrl",
+	"SlackEmailAuditWebhookUrl",
 	"slackSigningSecret",
 	"slackBotToken",
 	"enforceMFA",
@@ -4084,7 +4159,6 @@ z.enum([
 	"voiceSessionTranscriptionModel",
 	"voiceSessionVadType",
 	"voiceSessionVadEagerness",
-	"pdfjsExpressViewerKey",
 	"EnableEmailAnalysis",
 	"EmailAnalysisModel",
 	"EmailAnalysisTemperature",
@@ -5016,6 +5090,10 @@ const API_SERVICE_GROUPS = {
 				key: "SlackUserActivityWebhookUrl",
 				order: 6
 			},
+			{
+				key: "SlackEmailAuditWebhookUrl",
+				order: 6.5
+			},
 			{
 				key: "FeedbackSendEmailUsername",
 				order: 7
@@ -5421,16 +5499,6 @@ const API_SERVICE_GROUPS = {
 			order: 1
 		}]
 	},
-	PDF_VIEWER: {
-		id: "pdfViewerService",
-		name: "PDF Viewer",
-		description: "PDF.js Express Viewer settings",
-		icon: "PictureAsPdf",
-		settings: [{
-			key: "pdfjsExpressViewerKey",
-			order: 1
-		}]
-	},
 	DATETIME_ASTRONOMY: {
 		id: "datetimeAstronomyService",
 		name: "Time Machine & Night Sky",
@@ -5986,6 +6054,16 @@ const settingsMap = {
 		order: 7,
 		isSensitive: true
 	}),
+	SlackEmailAuditWebhookUrl: makeStringSetting({
+		key: "SlackEmailAuditWebhookUrl",
+		name: "Email Audit Channel Webhook URL",
+		defaultValue: "",
+		description: "Incoming-webhook URL for mirroring a redacted copy of every outbound email to a dedicated audit Slack channel (e.g. #b4m-emails) for real-time visibility (#9872). Use a PRIVATE, need-to-know channel — mirrored copies contain recipient email addresses. Secrets/tokens (reset & verification links) are redacted before posting.",
+		category: "Feedback",
+		group: API_SERVICE_GROUPS.FEEDBACK.id,
+		order: 8,
+		isSensitive: true
+	}),
 	liveFeedbackEmail: makeStringSetting({
 		key: "liveFeedbackEmail",
 		name: "Live Feedback Email",
@@ -6767,16 +6845,6 @@ const settingsMap = {
 		order: 10,
 		schema: RapidReplySettingsSchema
 	}),
-	pdfjsExpressViewerKey: makeStringSetting({
-		key: "pdfjsExpressViewerKey",
-		name: "PDF.js Express Viewer Key",
-		defaultValue: "",
-		description: "The license key for PDF.js Express Viewer for PDF document viewing.",
-		isSensitive: true,
-		category: "Tools",
-		group: API_SERVICE_GROUPS.PDF_VIEWER.id,
-		order: 1
-	}),
 	EnableEmailAnalysis: makeBooleanSetting({
 		key: "EnableEmailAnalysis",
 		name: "Enable Email Analysis",
@@ -8570,6 +8638,7 @@ const PromptBatchQuerySchema = z.object({
 z.object({ queries: z.array(PromptBatchQuerySchema).min(1).max(32).refine((qs) => new Set(qs.map((q) => q.key)).size === qs.length, { message: "Batch query keys must be unique" }) });
 const DATA_LAKES = [{
 	id: "ionq-sales",
+	slug: "ionq-sales",
 	name: "IonQ Sales Intelligence",
 	requiredUserTag: "Opti",
 	requiredEntitlement: "optihashi:pro",
@@ -8577,6 +8646,7 @@ const DATA_LAKES = [{
 	datalakeTag: "datalake:ionq-sales"
 }, {
 	id: "opti-knowledge",
+	slug: "opti-knowledge",
 	name: "Optimization Knowledge Base",
 	requiredUserTag: "Opti",
 	requiredEntitlement: "optihashi:pro",
@@ -8617,6 +8687,7 @@ function lakeMatchesAccess(lake, normalizedUserTags, normalizedKeys) {
 function toDataLakeConfig(dl) {
 	return {
 		id: dl.id,
+		slug: dl.slug,
 		name: dl.name,
 		requiredUserTag: dl.requiredUserTag,
 		requiredEntitlement: dl.requiredEntitlement,
@@ -9547,6 +9618,8 @@ z.object({
 	userId: z.string(),
 	sessionId: z.string().optional(),
 	questId: z.string().optional(),
+	/** Uploaded-image incidents (#9776 Q2b) reference the FabFile instead of a quest/session. */
+	fabFileId: z.string().optional(),
 	provider: z.string(),
 	model: z.string(),
 	labels: z.array(ModerationLabelHitSchema),
@@ -9834,6 +9907,33 @@ function intersectAllowedTools(skillAllowedTools, invokerAllowedTools) {
 	const invokerSet = new Set(invokerAllowedTools);
 	return skillAllowedTools.filter((tool) => invokerSet.has(tool));
 }
+/**
+* Serve gate for uploaded FabFiles (#9776 Q2b, hold-until-scanned; P1-1 fail-closed on ALL
+* mime types, not just images). A file is serveable only once moderation has run to
+* completion on it — REGARDLESS of its declared `mimeType`.
+*
+* Why gate non-images too: `mimeType` is client-declared at upload time and is only
+* corrected by the S3 scan ~1-2s later (see `moderateUploadedFile`'s byte-sniffing). If this
+* gate special-cased "non-images always serveable" based on that same untrusted declared
+* mimeType, a file uploaded as `application/pdf` but actually a PNG (or vice versa) would be
+* served during that window before the sniff/scan ever runs. Gating on `moderationStatus`
+* alone closes that window for every file, image or not.
+*
+* `moderationStatus` semantics:
+*  - 'clean'                      -> serveable
+*  - 'pending' | 'scanning'       -> NOT serveable (not yet through the scan)
+*  - 'blocked'                    -> NOT serveable (confirmed block / unscannable format)
+*  - null | undefined             -> NOT serveable (fail-closed; legacy pre-Q2b rows are
+*                                    backfilled to 'clean', see backfill-fabfile-moderation-status.ts)
+*
+* Non-image files (PDFs, docs, text, ...) are NOT scanned by Rekognition, but they still
+* pass through `moderateUploadedFile`/`objectCreated`, which resolves them to 'clean'
+* immediately (no image bytes to hold on) — so the hold is brief (one S3 event round trip),
+* not an indefinite block.
+*/
+function isImageServeable(f) {
+	return f.moderationStatus === "clean";
+}
 const VIEW_REGISTRY = [
 	{
 		id: "opti.root",
@@ -12012,4 +12112,4 @@ var ConfigStore = class {
 	}
 };
 //#endregion
-export { Permission as $, validateJupyterKernelName as $t, ForbiddenError as A, VideoModels as At, ImageModels as B, isModelAccessible as Bt, CompletionApiUsageTransaction as C, ToolUsageTransaction as Ct, FavoriteDocumentType as D, UnprocessableEntityError as Dt, ElabsEvents as E, UnauthorizedError as Et, GenericCreditDeductTransaction as F, getMcpProviderMetadata as Ft, KnowledgeType as G, parseSkillArguments as Gt, InternalServerError as H, isZodError as Ht, HTTPError as I, getViewById as It, ModalEvents as J, secureParameters as Jt, LLMEvents as K, resolveNavigationIntents as Kt, HttpStatus as L, intersectAllowedTools as Lt, GEMINI_IMAGE_MODELS as M, b4mLLMTools as Mt, GenerateImageToolCallSchema as N, dayjsConfig_default as Nt, FeedbackEvents as O, VIDEO_SIZE_CONSTRAINTS as Ot, GenericCreditAddTransaction as P, getAccessibleDataLakes as Pt, OpenAIImageGenerationInput as Q, usdToCredits as Qt, ImageEditUsageTransaction as R, isGPTImage2Model as Rt, ClaudeArtifactMimeTypes as S, TooManyRequestsError as St, DashboardParamsSchema as T, UiNavigationEvents as Tt, InviteEvents as U, mapMimeTypeToArtifactType as Ut, InboxEvents as V, isSupportedEmbeddingModel as Vt, InviteType as W, obfuscateApiKey as Wt, NotFoundError as X, substituteArguments as Xt, ModelBackend as Y, settingsMap as Yt, OpenAIEmbeddingModel as Z, toDataLakeConfig as Zt, BFL_SAFETY_TOLERANCE as _, SubscriptionCreditTransaction as _t, getDefaultApiUrl as a, parseRateLimitHeaders as an, PurchaseTransaction as at, ChatCompletionCreateInputSchema as b, TaskScheduleHandler as bt, AiEvents as c, ReceivedCreditTransaction as ct, ApiKeyType as d, ResearchModeParamsSchema as dt, validateNotebookPath as en, PermissionDeniedError as et, AppFileEvents as f, ResearchTaskExecutionType as ft, BFL_IMAGE_MODELS as g, SpeechToTextUsageTransaction as gt, BFLSafetyToleranceSchema as h, SessionEvents as ht, getCreditsUrl as i, isNearLimit as in, PromptMetaZodSchema as it, FriendshipEvents as j, XAI_IMAGE_MODELS as jt, FileEvents as k, VideoGenerationUsageTransaction as kt, ApiKeyEvents as l, RechartsChartTypeList as lt, AuthEvents as m, ResearchTaskType as mt, logger as n, buildRateLimitLogEntry as nn, ProjectEvents as nt, getEnvironmentName as o, CollectionType as on, QuestMasterParamsSchema as ot, ArtifactTypeSchema as p, ResearchTaskPeriodicFrequencyType as pt, MiscEvents as q, sanitizeTelemetryError as qt, getApiUrl as r, extractSnippetMeta as rn, PromptIntentSchema as rt, ALERT_THRESHOLDS as s, RealtimeVoiceUsageTransaction as st, ConfigStore as t, wrapUntrustedSkillBody as tn, ProfileEvents as tt, ApiKeyScope as u, RegInviteEvents as ut, BadRequestError as v, SupportedFabFileMimeTypes as vt, CorruptedFileError as w, TransferCreditTransaction as wt, ChatModels as x, TextGenerationUsageTransaction as xt, CREDIT_DEDUCT_TRANSACTION_TYPES as y, TagType as yt, ImageGenerationUsageTransaction as z, isGPTImageModel as zt };
+export { Permission as $, toDataLakeConfig as $t, ForbiddenError as A, VideoModels as At, ImageModels as B, isImageServeable as Bt, CompletionApiUsageTransaction as C, ToolUsageTransaction as Ct, FavoriteDocumentType as D, UnprocessableEntityError as Dt, ElabsEvents as E, UnauthorizedError as Et, GenericCreditDeductTransaction as F, getMcpProviderMetadata as Ft, KnowledgeType as G, mapMimeTypeToArtifactType as Gt, InternalServerError as H, isSupportedEmbeddingModel as Ht, HTTPError as I, getViewById as It, ModalEvents as J, resolveNavigationIntents as Jt, LLMEvents as K, obfuscateApiKey as Kt, HttpStatus as L, intersectAllowedTools as Lt, GEMINI_IMAGE_MODELS as M, b4mLLMTools as Mt, GenerateImageToolCallSchema as N, dayjsConfig_default as Nt, FeedbackEvents as O, VIDEO_SIZE_CONSTRAINTS as Ot, GenericCreditAddTransaction as P, getAccessibleDataLakes as Pt, OpenAIImageGenerationInput as Q, substituteArguments as Qt, ImageEditUsageTransaction as R, isGPTImage2Model as Rt, ClaudeArtifactMimeTypes as S, TooManyRequestsError as St, DashboardParamsSchema as T, UiNavigationEvents as Tt, InviteEvents as U, isSupportedFabFileMimeType as Ut, InboxEvents as V, isModelAccessible as Vt, InviteType as W, isZodError as Wt, NotFoundError as X, secureParameters as Xt, ModelBackend as Y, sanitizeTelemetryError as Yt, OpenAIEmbeddingModel as Z, settingsMap as Zt, BFL_SAFETY_TOLERANCE as _, SubscriptionCreditTransaction as _t, getDefaultApiUrl as a, extractSnippetMeta as an, PurchaseTransaction as at, ChatCompletionCreateInputSchema as b, TaskScheduleHandler as bt, AiEvents as c, CollectionType as cn, ReceivedCreditTransaction as ct, ApiKeyType as d, ResearchModeParamsSchema as dt, usdToCredits as en, PermissionDeniedError as et, AppFileEvents as f, ResearchTaskExecutionType as ft, BFL_IMAGE_MODELS as g, SpeechToTextUsageTransaction as gt, BFLSafetyToleranceSchema as h, SessionEvents as ht, getCreditsUrl as i, buildRateLimitLogEntry as in, PromptMetaZodSchema as it, FriendshipEvents as j, XAI_IMAGE_MODELS as jt, FileEvents as k, VideoGenerationUsageTransaction as kt, ApiKeyEvents as l, RechartsChartTypeList as lt, AuthEvents as m, ResearchTaskType as mt, logger as n, validateNotebookPath as nn, ProjectEvents as nt, getEnvironmentName as o, isNearLimit as on, QuestMasterParamsSchema as ot, ArtifactTypeSchema as p, ResearchTaskPeriodicFrequencyType as pt, MiscEvents as q, parseSkillArguments as qt, getApiUrl as r, wrapUntrustedSkillBody as rn, PromptIntentSchema as rt, ALERT_THRESHOLDS as s, parseRateLimitHeaders as sn, RealtimeVoiceUsageTransaction as st, ConfigStore as t, validateJupyterKernelName as tn, ProfileEvents as tt, ApiKeyScope as u, RegInviteEvents as ut, BadRequestError as v, SupportedFabFileMimeTypes as vt, CorruptedFileError as w, TransferCreditTransaction as wt, ChatModels as x, TextGenerationUsageTransaction as xt, CREDIT_DEDUCT_TRANSACTION_TYPES as y, TagType as yt, ImageGenerationUsageTransaction as z, isGPTImageModel as zt };

package/dist/commands/apiCommand.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { a as getDefaultApiUrl, t as ConfigStore } from "../ConfigStore-Cq20962p.mjs";
+import { a as getDefaultApiUrl, t as ConfigStore } from "../ConfigStore-D39UqFnY.mjs";
 //#region src/commands/apiCommand.ts
 /**
 * External API config command (--api-url / --reset-api)

package/dist/commands/doctorCommand.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as version } from "../package-CBaK53NX.mjs";
+import { t as version } from "../package-I_v_WFUn.mjs";
 import { a as fetchLatestVersion, c as isNpmPrefixWritable, i as compareSemver } from "../updateChecker-C8xsNY2L.mjs";
 import { t as checkRipgrep } from "../ripgrepCheck-BmkyTK2i.mjs";
 import { execSync } from "child_process";

package/dist/commands/envCommand.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as ConfigStore } from "../ConfigStore-Cq20962p.mjs";
+import { t as ConfigStore } from "../ConfigStore-D39UqFnY.mjs";
 //#region src/commands/envCommand.ts
 /**
 * Environment switching for the `--dev` / `--prod` launch flags.

package/dist/commands/headlessCommand.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { C as createCoordinateTaskTool, D as FallbackLlmBackend, E as ApiClient, F as generateCliTools, G as ReActAgent, N as loadContextFiles, O as ServerLlmBackend, P as PermissionManager, Q as CheckpointStore, T as createAgentDelegateTool, W as setWebSocketToolExecutor, X as RemoteSkillSource, Y as isReadOnlyTool, Z as CustomCommandStore, _ as createGetFileStructureTool, a as WebSocketToolExecutor, b as createWriteTodosTool, et as SessionStore, i as McpManager, n as SubagentOrchestrator, o as WebSocketConnectionManager, q as buildSystemPrompt, r as AgentStore, s as WebSocketLlmBackend, t as BackgroundAgentManager, v as createFindDefinitionTool, w as createBackgroundAgentTools, x as createSkillTool, y as createTodoStore } from "../BackgroundAgentManager-DOesheMD.mjs";
-import { n as logger, r as getApiUrl, t as ConfigStore } from "../ConfigStore-Cq20962p.mjs";
+import { C as createCoordinateTaskTool, D as FallbackLlmBackend, E as ApiClient, F as generateCliTools, G as ReActAgent, N as loadContextFiles, O as ServerLlmBackend, P as PermissionManager, Q as CheckpointStore, T as createAgentDelegateTool, W as setWebSocketToolExecutor, X as RemoteSkillSource, Y as isReadOnlyTool, Z as CustomCommandStore, _ as createGetFileStructureTool, a as WebSocketToolExecutor, b as createWriteTodosTool, et as SessionStore, i as McpManager, n as SubagentOrchestrator, o as WebSocketConnectionManager, q as buildSystemPrompt, r as AgentStore, s as WebSocketLlmBackend, t as BackgroundAgentManager, v as createFindDefinitionTool, w as createBackgroundAgentTools, x as createSkillTool, y as createTodoStore } from "../BackgroundAgentManager-D-xsWd3C.mjs";
+import { n as logger, r as getApiUrl, t as ConfigStore } from "../ConfigStore-D39UqFnY.mjs";
 import { t as DEFAULT_SANDBOX_CONFIG } from "../types-LyRNHOiS.mjs";
 import { t as createSandboxRuntime } from "../SandboxRuntimeAdapter-ChGlxSGQ.mjs";
 import { t as SandboxOrchestrator } from "../SandboxOrchestrator-BoINxbX4.mjs";

package/dist/commands/mcpCommand.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as ConfigStore } from "../ConfigStore-Cq20962p.mjs";
+import { t as ConfigStore } from "../ConfigStore-D39UqFnY.mjs";
 //#region src/commands/mcpCommand.ts
 /**
 * External MCP commands (b4m mcp list, b4m mcp add, etc.)

package/dist/commands/updateCommand.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as version } from "../package-CBaK53NX.mjs";
+import { t as version } from "../package-I_v_WFUn.mjs";
 import { c as isNpmPrefixWritable, l as setAutoUpdatePreference, n as REEXEC_GUARD_ENV, o as forceCheckForUpdate, r as checkForUpdate, s as getAutoUpdatePreference, t as INSTALL_CMD, u as shouldAttemptAutoUpdate } from "../updateChecker-C8xsNY2L.mjs";
 import { t as checkRipgrep } from "../ripgrepCheck-BmkyTK2i.mjs";
 import { execSync, spawnSync } from "child_process";

package/dist/index.mjs

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
-import { $ as CommandHistoryStore, A as substituteArguments, B as DEFAULT_RETRY_CONFIG, C as createCoordinateTaskTool, D as FallbackLlmBackend, E as ApiClient, F as generateCliTools, G as ReActAgent, H as clearFeatureModuleTools, I as getProcessHooks, J as buildSkillsPromptSection, K as getPlanModeFilePath, L as ALWAYS_DENIED_FOR_AGENTS, M as extractCompactInstructions, N as loadContextFiles, O as ServerLlmBackend, P as PermissionManager, Q as CheckpointStore, R as DEFAULT_AGENT_MODEL, S as parseAgentConfig, T as createAgentDelegateTool, U as registerFeatureModuleTools, V as DEFAULT_THOROUGHNESS, W as setWebSocketToolExecutor, X as RemoteSkillSource, Y as isReadOnlyTool, Z as CustomCommandStore, _ as createGetFileStructureTool, a as WebSocketToolExecutor, at as mergeCommands, b as createWriteTodosTool, c as createReviewGateStore, ct as warmFileCache, d as createBlockerStore, et as SessionStore, f as createBlockerTools, g as formatDecisionsOutput, h as createDecisionStore, i as McpManager, it as searchCommands, j as formatStep, k as isTransientNetworkError, l as createReviewGateTool, m as createDecisionLogTool, n as SubagentOrchestrator, nt as hasFileReferences, o as WebSocketConnectionManager, ot as formatFileSize, p as formatBlockersOutput, q as buildSystemPrompt, r as AgentStore, rt as processFileReferences, s as WebSocketLlmBackend, st as searchFiles, t as BackgroundAgentManager, tt as OAuthClient, u as formatReviewGatesOutput, v as createFindDefinitionTool, w as createBackgroundAgentTools, x as createSkillTool, y as createTodoStore, z as DEFAULT_MAX_ITERATIONS } from "./BackgroundAgentManager-DOesheMD.mjs";
+import { $ as CommandHistoryStore, A as substituteArguments, B as DEFAULT_RETRY_CONFIG, C as createCoordinateTaskTool, D as FallbackLlmBackend, E as ApiClient, F as generateCliTools, G as ReActAgent, H as clearFeatureModuleTools, I as getProcessHooks, J as buildSkillsPromptSection, K as getPlanModeFilePath, L as ALWAYS_DENIED_FOR_AGENTS, M as extractCompactInstructions, N as loadContextFiles, O as ServerLlmBackend, P as PermissionManager, Q as CheckpointStore, R as DEFAULT_AGENT_MODEL, S as parseAgentConfig, T as createAgentDelegateTool, U as registerFeatureModuleTools, V as DEFAULT_THOROUGHNESS, W as setWebSocketToolExecutor, X as RemoteSkillSource, Y as isReadOnlyTool, Z as CustomCommandStore, _ as createGetFileStructureTool, a as WebSocketToolExecutor, at as mergeCommands, b as createWriteTodosTool, c as createReviewGateStore, ct as warmFileCache, d as createBlockerStore, et as SessionStore, f as createBlockerTools, g as formatDecisionsOutput, h as createDecisionStore, i as McpManager, it as searchCommands, j as formatStep, k as isTransientNetworkError, l as createReviewGateTool, m as createDecisionLogTool, n as SubagentOrchestrator, nt as hasFileReferences, o as WebSocketConnectionManager, ot as formatFileSize, p as formatBlockersOutput, q as buildSystemPrompt, r as AgentStore, rt as processFileReferences, s as WebSocketLlmBackend, st as searchFiles, t as BackgroundAgentManager, tt as OAuthClient, u as formatReviewGatesOutput, v as createFindDefinitionTool, w as createBackgroundAgentTools, x as createSkillTool, y as createTodoStore, z as DEFAULT_MAX_ITERATIONS } from "./BackgroundAgentManager-D-xsWd3C.mjs";
 import { n as useCliStore, t as selectActiveBackgroundAgents } from "./store-DV5s-qni.mjs";
-import { $t as validateJupyterKernelName, en as validateNotebookPath$1, i as getCreditsUrl, n as logger, o as getEnvironmentName, r as getApiUrl, t as ConfigStore, x as ChatModels, y as CREDIT_DEDUCT_TRANSACTION_TYPES } from "./ConfigStore-Cq20962p.mjs";
-import { t as version } from "./package-CBaK53NX.mjs";
+import { i as getCreditsUrl, n as logger, nn as validateNotebookPath$1, o as getEnvironmentName, r as getApiUrl, t as ConfigStore, tn as validateJupyterKernelName, x as ChatModels, y as CREDIT_DEDUCT_TRANSACTION_TYPES } from "./ConfigStore-D39UqFnY.mjs";
+import { t as version } from "./package-I_v_WFUn.mjs";
 import { r as checkForUpdate } from "./updateChecker-C8xsNY2L.mjs";
 import React, { useCallback, useEffect, useMemo, useReducer, useRef, useState } from "react";
 import { Box, Static, Text, render, useApp, useInput, usePaste, useStdout } from "ink";

package/dist/{package-CBaK53NX.mjs → package-I_v_WFUn.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
 //#region package.json
-var version = "0.18.4";
+var version = "0.18.5";
 //#endregion
 export { version as t };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bike4mind/cli",
-  "version": "0.18.4",
+  "version": "0.18.5",
   "type": "module",
   "description": "Interactive CLI tool for Bike4Mind with ReAct agents",
   "license": "UNLICENSED",
@@ -107,8 +107,8 @@
     "zod": "^4.4.3",
     "zod-validation-error": "^5.0.0",
     "zustand": "^5.0.13",
-    "@bike4mind/fab-pipeline": "0.4.8",
-    "@bike4mind/llm-adapters": "0.9.0",
+    "@bike4mind/fab-pipeline": "0.5.0",
+    "@bike4mind/llm-adapters": "0.9.1",
     "@bike4mind/observability": "0.2.0"
   },
   "devDependencies": {
@@ -124,11 +124,11 @@
     "tsx": "^4.22.3",
     "typescript": "^5.9.3",
     "vitest": "^4.1.9",
-    "@bike4mind/agents": "0.18.2",
-    "@bike4mind/common": "2.119.0",
-    "@bike4mind/mcp": "1.40.2",
-    "@bike4mind/services": "2.103.0",
-    "@bike4mind/utils": "2.27.0"
+    "@bike4mind/common": "2.120.0",
+    "@bike4mind/agents": "0.18.3",
+    "@bike4mind/mcp": "1.40.3",
+    "@bike4mind/services": "2.104.0",
+    "@bike4mind/utils": "2.28.0"
   },
   "optionalDependencies": {
     "@vscode/ripgrep": "^1.18.0"