@bike4mind/cli 0.2.29-feat-cli-sandbox.18843 → 0.2.29-feat-cli-websocket-streaming.18841

package/dist/{llmMarkdownGenerator-IJKJYJ3U.js → llmMarkdownGenerator-JPDNDGE4.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   CurationArtifactType
-} from "./chunk-5GSDPBTM.js";
+} from "./chunk-KPOK6V6E.js";
 
 // ../../b4m-core/packages/services/dist/src/notebookCurationService/llmMarkdownGenerator.js
 var DEFAULT_OPTIONS = {

package/dist/{markdownGenerator-SJT7AXLT.js → markdownGenerator-NHN4MNEA.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   CurationArtifactType
-} from "./chunk-5GSDPBTM.js";
+} from "./chunk-KPOK6V6E.js";
 
 // ../../b4m-core/packages/services/dist/src/notebookCurationService/markdownGenerator.js
 var DEFAULT_OPTIONS = {

package/dist/{mementoService-PKCNMN4V.js → mementoService-EN7FZK7B.js}

@@ -2,9 +2,9 @@
 import {
   findMostSimilarMemento,
   getRelevantMementos
-} from "./chunk-BCOGDPUB.js";
-import "./chunk-S7BPPS33.js";
-import "./chunk-5GSDPBTM.js";
+} from "./chunk-QQL3OBKL.js";
+import "./chunk-TY6Z2UV2.js";
+import "./chunk-KPOK6V6E.js";
 import "./chunk-OCYRD7D6.js";
 export {
   findMostSimilarMemento,

package/dist/{src-GRO5NIC3.js → src-36AL3BJR.js}

@@ -41,6 +41,12 @@ import {
   ChatModels,
   CitableSourceSchema,
   ClaudeArtifactMimeTypes,
+  CliCompletionChunkAction,
+  CliCompletionDoneAction,
+  CliCompletionErrorAction,
+  CliCompletionRequestAction,
+  CliToolRequestAction,
+  CliToolResponseAction,
   CollectionType,
   CompletionApiUsageTransaction,
   CompletionRequestSchema,
@@ -340,7 +346,7 @@ import {
   validateReactArtifactV2,
   validateSvgArtifactV2,
   wikiMarkupToAdf
-} from "./chunk-5GSDPBTM.js";
+} from "./chunk-KPOK6V6E.js";
 export {
   ALL_IMAGE_MODELS,
   ALL_IMAGE_SIZES,
@@ -384,6 +390,12 @@ export {
   ChatModels,
   CitableSourceSchema,
   ClaudeArtifactMimeTypes,
+  CliCompletionChunkAction,
+  CliCompletionDoneAction,
+  CliCompletionErrorAction,
+  CliCompletionRequestAction,
+  CliToolRequestAction,
+  CliToolResponseAction,
   CollectionType,
   CompletionApiUsageTransaction,
   CompletionRequestSchema,

package/dist/{src-C5CZFXVM.js → src-JZN5O6F3.js}

@@ -134,8 +134,8 @@ import {
   validateMermaidSyntax,
   warmUpSettingsCache,
   withRetry
-} from "./chunk-S7BPPS33.js";
-import "./chunk-5GSDPBTM.js";
+} from "./chunk-TY6Z2UV2.js";
+import "./chunk-KPOK6V6E.js";
 import {
   Logger,
   NotificationDeduplicator,

package/dist/{subtractCredits-WZZAP57N.js → subtractCredits-FCBMFPIP.js}

@@ -2,9 +2,9 @@
 import {
   SubtractCreditsSchema,
   subtractCredits
-} from "./chunk-PKKJ44C5.js";
-import "./chunk-S7BPPS33.js";
-import "./chunk-5GSDPBTM.js";
+} from "./chunk-BXCARBUQ.js";
+import "./chunk-TY6Z2UV2.js";
+import "./chunk-KPOK6V6E.js";
 import "./chunk-OCYRD7D6.js";
 export {
   SubtractCreditsSchema,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bike4mind/cli",
-  "version": "0.2.29-feat-cli-sandbox.18843+467f137bc",
+  "version": "0.2.29-feat-cli-websocket-streaming.18841+5c940d031",
   "type": "module",
   "description": "Interactive CLI tool for Bike4Mind with ReAct agents",
   "license": "UNLICENSED",
@@ -110,10 +110,10 @@
   },
   "devDependencies": {
     "@bike4mind/agents": "0.1.0",
-    "@bike4mind/common": "2.50.1-feat-cli-sandbox.18843+467f137bc",
-    "@bike4mind/mcp": "1.29.1-feat-cli-sandbox.18843+467f137bc",
-    "@bike4mind/services": "2.48.1-feat-cli-sandbox.18843+467f137bc",
-    "@bike4mind/utils": "2.5.1-feat-cli-sandbox.18843+467f137bc",
+    "@bike4mind/common": "2.50.1-feat-cli-websocket-streaming.18841+5c940d031",
+    "@bike4mind/mcp": "1.29.1-feat-cli-websocket-streaming.18841+5c940d031",
+    "@bike4mind/services": "2.48.1-feat-cli-websocket-streaming.18841+5c940d031",
+    "@bike4mind/utils": "2.5.1-feat-cli-websocket-streaming.18841+5c940d031",
     "@types/better-sqlite3": "^7.6.13",
     "@types/diff": "^5.0.9",
     "@types/jsonwebtoken": "^9.0.4",
@@ -130,5 +130,5 @@
   "optionalDependencies": {
     "@vscode/ripgrep": "^1.17.0"
   },
-  "gitHead": "467f137bcb738020d1665b78bc7d34de7d846df5"
+  "gitHead": "5c940d031610617c76d3c12cc611b71db8bb4caf"
 }

package/dist/BubblewrapRuntime-HXTR3NQG.js

@@ -1,68 +0,0 @@
-#!/usr/bin/env node
-import {
-  expandPath,
-  isBinaryAvailable
-} from "./chunk-AVAD2PPK.js";
-
-// src/sandbox/runtime/BubblewrapRuntime.ts
-import os from "os";
-var SYSTEM_RO_BINDS = ["/usr", "/bin", "/lib", "/lib64", "/sbin", "/etc"];
-var SPECIAL_MOUNTS = {
-  dev: "/dev",
-  proc: "/proc",
-  tmp: "/tmp"
-};
-var BubblewrapRuntime = class {
-  constructor() {
-    this.platform = "linux";
-    this.name = "bubblewrap";
-  }
-  isAvailable() {
-    return isBinaryAvailable("bwrap");
-  }
-  wrapCommand(options) {
-    const { command, cwd, filesystemConfig, env } = options;
-    const expandedDenied = filesystemConfig.deniedPaths.map(expandPath);
-    const expandedAllowed = filesystemConfig.allowedReadPaths.map(expandPath);
-    const args = [];
-    for (const sysPath of SYSTEM_RO_BINDS) {
-      args.push("--ro-bind-try", sysPath, sysPath);
-    }
-    args.push("--dev", SPECIAL_MOUNTS.dev);
-    args.push("--proc", SPECIAL_MOUNTS.proc);
-    args.push("--tmpfs", SPECIAL_MOUNTS.tmp);
-    args.push("--bind", cwd, cwd);
-    const homeDir = os.homedir();
-    args.push("--ro-bind", homeDir, homeDir);
-    for (const allowedPath of expandedAllowed) {
-      if (!allowedPath.startsWith(homeDir)) {
-        args.push("--ro-bind-try", allowedPath, allowedPath);
-      }
-    }
-    for (const deniedPath of expandedDenied) {
-      args.push("--tmpfs", deniedPath);
-    }
-    args.push("--unshare-all");
-    args.push("--share-net");
-    args.push("--die-with-parent");
-    if (options.seccompProfile) {
-      args.push("--seccomp", options.seccompProfile);
-    }
-    args.push("--chdir", cwd);
-    args.push("bash", "-c", command);
-    const commandString = ["bwrap", ...args.map(shellEscape)].join(" ");
-    return {
-      executable: "bwrap",
-      args,
-      env: env ?? {},
-      commandString
-    };
-  }
-};
-function shellEscape(str) {
-  if (/^[a-zA-Z0-9._/=:-]+$/.test(str)) return str;
-  return `'${str.replace(/'/g, "'\\''")}'`;
-}
-export {
-  BubblewrapRuntime
-};

package/dist/SandboxOrchestrator-Z36SFJ7X.js

@@ -1,110 +0,0 @@
-#!/usr/bin/env node
-import {
-  DEFAULT_SANDBOX_CONFIG
-} from "./chunk-W4TCH4ZT.js";
-
-// src/sandbox/SandboxOrchestrator.ts
-var SandboxOrchestrator = class {
-  constructor(config, runtime) {
-    this.config = config ?? DEFAULT_SANDBOX_CONFIG;
-    this.runtime = runtime ?? null;
-  }
-  /**
-   * Determine whether a command should be sandboxed.
-   *
-   * Decision logic:
-   * 1. If sandbox is disabled → unsandboxed (no permission change)
-   * 2. If command matches an excluded command → unsandboxed (requires permission)
-   * 3. If runtime is not available → unsandboxed with warning
-   * 4. Otherwise → sandbox the command
-   */
-  shouldSandbox(command, cwd) {
-    if (!this.config.enabled || this.config.mode === "disabled") {
-      return { type: "unsandboxed", requiresPermission: true };
-    }
-    const baseCommand = this.getBaseCommand(command);
-    if (this.isExcludedCommand(baseCommand)) {
-      if (!this.config.allowUnsandboxedCommands) {
-        return {
-          type: "blocked",
-          reason: `Command '${baseCommand}' is excluded from sandboxing and unsandboxed commands are not allowed`
-        };
-      }
-      return {
-        type: "unsandboxed",
-        requiresPermission: true,
-        reason: `Command '${baseCommand}' is excluded from sandboxing`
-      };
-    }
-    if (!this.runtime) {
-      return {
-        type: "unsandboxed",
-        requiresPermission: true,
-        reason: "Sandbox runtime not available on this platform"
-      };
-    }
-    const wrappedCommand = this.runtime.wrapCommand({
-      command,
-      cwd,
-      filesystemConfig: this.config.filesystem,
-      ...this.runtime.platform === "linux" && this.config.platform.linux.seccompProfile && {
-        seccompProfile: this.config.platform.linux.seccompProfile
-      }
-    });
-    return { type: "sandbox", wrappedCommand };
-  }
-  /** Get the current sandbox mode */
-  getMode() {
-    return this.config.mode;
-  }
-  /** Set the sandbox mode (does not persist — caller must save config) */
-  setMode(mode) {
-    this.config.mode = mode;
-    this.config.enabled = mode !== "disabled";
-  }
-  /** Check if sandbox is enabled and runtime is available */
-  isAvailable() {
-    return this.runtime !== null && this.runtime.isAvailable();
-  }
-  /** Check if sandbox is currently active (enabled + available) */
-  isActive() {
-    return this.config.enabled && this.config.mode !== "disabled" && this.isAvailable();
-  }
-  /** Get the current sandbox configuration */
-  getConfig() {
-    return this.config;
-  }
-  /** Update config (does not persist — caller must save) */
-  updateConfig(config) {
-    this.config = config;
-  }
-  /** Get full status information for display */
-  getStatus() {
-    return {
-      mode: this.config.mode,
-      enabled: this.config.enabled,
-      platform: this.runtime?.platform ?? null,
-      runtimeAvailable: this.runtime?.isAvailable() ?? false,
-      runtimeName: this.runtime?.name ?? null,
-      config: this.config
-    };
-  }
-  /**
-   * Extract the base command name from a full command string.
-   * e.g., "docker compose up -d" → "docker"
-   */
-  getBaseCommand(command) {
-    const trimmed = command.trim();
-    const withoutEnv = trimmed.replace(/^(\w+=\S+\s+)*/, "");
-    const parts = withoutEnv.split(/\s+/);
-    const first = parts[0] || "";
-    return first.split("/").pop() || first;
-  }
-  /** Check if a command is in the excluded list */
-  isExcludedCommand(baseCommand) {
-    return this.config.excludedCommands.some((excluded) => baseCommand === excluded);
-  }
-};
-export {
-  SandboxOrchestrator
-};

package/dist/SandboxRuntimeAdapter-5ZMU25Q3.js

@@ -1,13 +0,0 @@
-#!/usr/bin/env node
-import {
-  createSandboxRuntime,
-  detectPlatform,
-  expandPath,
-  isBinaryAvailable
-} from "./chunk-AVAD2PPK.js";
-export {
-  createSandboxRuntime,
-  detectPlatform,
-  expandPath,
-  isBinaryAvailable
-};

package/dist/SeatbeltRuntime-SL7HVS3J.js

@@ -1,96 +0,0 @@
-#!/usr/bin/env node
-import {
-  expandPath,
-  isBinaryAvailable
-} from "./chunk-AVAD2PPK.js";
-
-// src/sandbox/runtime/SeatbeltRuntime.ts
-import { writeFileSync, mkdtempSync } from "fs";
-import path from "path";
-import os from "os";
-function escapeSeatbeltPath(p) {
-  return p.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
-}
-var SeatbeltRuntime = class {
-  constructor() {
-    this.platform = "darwin";
-    this.name = "seatbelt";
-  }
-  isAvailable() {
-    return isBinaryAvailable("sandbox-exec");
-  }
-  /**
-   * Generate a Seatbelt profile string from the filesystem config.
-   *
-   * Strategy:
-   * - Start with (allow default) to permit most operations
-   * - Deny all file writes globally
-   * - Allow file writes only to the working directory
-   * - Deny all access to explicitly denied paths
-   * - Allow read access to explicitly allowed paths
-   */
-  generateProfile(options) {
-    const { cwd, filesystemConfig } = options;
-    const expandedDenied = filesystemConfig.deniedPaths.map(expandPath);
-    const expandedAllowed = filesystemConfig.allowedReadPaths.map(expandPath);
-    const lines = [
-      "(version 1)",
-      "",
-      "; Start with permissive defaults (process exec, network, sysctl, etc.)",
-      "(allow default)",
-      ""
-    ];
-    if (filesystemConfig.writeOnlyToWorkingDir) {
-      lines.push("; Deny all file writes globally");
-      lines.push("(deny file-write*)");
-      lines.push("");
-      lines.push("; Allow writes to working directory");
-      lines.push(`(allow file-write* (subpath "${escapeSeatbeltPath(cwd)}"))`);
-      lines.push("");
-      lines.push("; Allow writes to temp directories");
-      lines.push(`(allow file-write* (subpath "/tmp"))`);
-      lines.push(`(allow file-write* (subpath "/private/tmp"))`);
-      lines.push(`(allow file-write* (subpath "${escapeSeatbeltPath(os.tmpdir())}"))`);
-      lines.push("");
-    }
-    if (expandedDenied.length > 0) {
-      lines.push("; Deny access to sensitive paths");
-      for (const deniedPath of expandedDenied) {
-        lines.push(`(deny file-read* file-write* (subpath "${escapeSeatbeltPath(deniedPath)}"))`);
-      }
-      lines.push("");
-    }
-    if (expandedAllowed.length > 0) {
-      lines.push("; Explicitly allowed read paths");
-      for (const allowedPath of expandedAllowed) {
-        lines.push(`(allow file-read* (subpath "${escapeSeatbeltPath(allowedPath)}"))`);
-      }
-      lines.push("");
-    }
-    return lines.join("\n");
-  }
-  wrapCommand(options) {
-    try {
-      const profile = this.generateProfile(options);
-      const tmpDir = mkdtempSync(path.join(os.tmpdir(), "b4m-sandbox-"));
-      const profilePath = path.join(tmpDir, "sandbox.sb");
-      writeFileSync(profilePath, profile, "utf-8");
-      const args = ["-f", profilePath, "bash", "-c", options.command];
-      return {
-        executable: "sandbox-exec",
-        args,
-        env: options.env ?? {},
-        commandString: `sandbox-exec -f ${profilePath} bash -c ${shellEscape(options.command)}`,
-        cleanupPaths: [profilePath, tmpDir]
-      };
-    } catch (err) {
-      throw new Error(`Failed to create sandbox profile: ${err instanceof Error ? err.message : String(err)}`);
-    }
-  }
-};
-function shellEscape(str) {
-  return `'${str.replace(/'/g, "'\\''")}'`;
-}
-export {
-  SeatbeltRuntime
-};

package/dist/chunk-AVAD2PPK.js

@@ -1,44 +0,0 @@
-#!/usr/bin/env node
-
-// src/sandbox/runtime/SandboxRuntimeAdapter.ts
-import os from "os";
-import { execSync } from "child_process";
-function detectPlatform() {
-  const platform = os.platform();
-  if (platform === "darwin") return "darwin";
-  if (platform === "linux") return "linux";
-  return null;
-}
-function isBinaryAvailable(binary) {
-  try {
-    execSync(`which ${binary}`, { stdio: "ignore" });
-    return true;
-  } catch {
-    return false;
-  }
-}
-function expandPath(pathStr) {
-  return pathStr.replace(/\$HOME/g, os.homedir()).replace(/\$USER/g, os.userInfo().username).replace(/~\//g, `${os.homedir()}/`);
-}
-async function createSandboxRuntime() {
-  const platform = detectPlatform();
-  if (!platform) return null;
-  if (platform === "darwin") {
-    const { SeatbeltRuntime } = await import("./SeatbeltRuntime-SL7HVS3J.js");
-    const runtime = new SeatbeltRuntime();
-    return runtime.isAvailable() ? runtime : null;
-  }
-  if (platform === "linux") {
-    const { BubblewrapRuntime } = await import("./BubblewrapRuntime-HXTR3NQG.js");
-    const runtime = new BubblewrapRuntime();
-    return runtime.isAvailable() ? runtime : null;
-  }
-  return null;
-}
-
-export {
-  detectPlatform,
-  isBinaryAvailable,
-  expandPath,
-  createSandboxRuntime
-};

package/dist/chunk-W4TCH4ZT.js

@@ -1,27 +0,0 @@
-#!/usr/bin/env node
-
-// src/sandbox/types.ts
-var DEFAULT_SANDBOX_CONFIG = {
-  enabled: false,
-  mode: "disabled",
-  filesystem: {
-    writeOnlyToWorkingDir: true,
-    allowedReadPaths: ["$HOME/.gitconfig", "$HOME/.npmrc", "$HOME/.node_modules"],
-    deniedPaths: ["$HOME/.ssh", "$HOME/.aws", "$HOME/.gnupg", "$HOME/.env", "/etc/shadow", "/etc/passwd"]
-  },
-  excludedCommands: ["docker", "watchman", "podman"],
-  allowUnsandboxedCommands: true,
-  platform: {
-    linux: {
-      runtime: "bubblewrap"
-    },
-    macos: {
-      runtime: "seatbelt",
-      profileTemplate: "default"
-    }
-  }
-};
-
-export {
-  DEFAULT_SANDBOX_CONFIG
-};

package/dist/types-SMQKWHQK.js

@@ -1,7 +0,0 @@
-#!/usr/bin/env node
-import {
-  DEFAULT_SANDBOX_CONFIG
-} from "./chunk-W4TCH4ZT.js";
-export {
-  DEFAULT_SANDBOX_CONFIG
-};