@bike4mind/cli 0.2.34 → 0.2.35-fix-reply-disappears-on-refresh.20009

package/bin/bike4mind-cli.mjs

@@ -46,6 +46,11 @@ const argv = await yargs(hideBin(process.argv))
     description: 'Disable loading project-specific configuration (.bike4mind/)',
     default: false,
   })
+  .option('add-dir', {
+    type: 'array',
+    description: 'Add additional directories for file access (can be used multiple times)',
+    string: true,
+  })
   .command('mcp', 'Manage MCP (Model Context Protocol) servers', (yargs) => {
     return yargs
       .command('list', 'List configured MCP servers', {}, async () => {
@@ -109,6 +114,12 @@ if (argv['debug-stream']) {
 if (argv['no-project-config']) {
   process.env.B4M_NO_PROJECT_CONFIG = '1';
 }
+if (argv['add-dir'] && argv['add-dir'].length > 0) {
+  // Resolve paths to absolute and pass via environment variable
+  const { resolve } = await import('path');
+  const resolvedDirs = argv['add-dir'].map(d => resolve(d));
+  process.env.B4M_ADDITIONAL_DIRS = JSON.stringify(resolvedDirs);
+}
 
 // Auto-detect environment: prefer production mode when dist exists
 const distPath = join(__dirname, '../dist/index.js');

package/dist/{chunk-RGWBOKBB.js → chunk-552ZZZ6B.js}

@@ -3,7 +3,7 @@
 // package.json
 var package_default = {
   name: "@bike4mind/cli",
-  version: "0.2.34",
+  version: "0.2.35-fix-reply-disappears-on-refresh.20009+3d2fae3ac",
   type: "module",
   description: "Interactive CLI tool for Bike4Mind with ReAct agents",
   license: "UNLICENSED",
@@ -114,10 +114,10 @@ var package_default = {
   },
   devDependencies: {
     "@bike4mind/agents": "0.1.0",
-    "@bike4mind/common": "2.56.0",
-    "@bike4mind/mcp": "1.32.3",
-    "@bike4mind/services": "2.53.0",
-    "@bike4mind/utils": "2.9.1",
+    "@bike4mind/common": "2.56.1-fix-reply-disappears-on-refresh.20009+3d2fae3ac",
+    "@bike4mind/mcp": "1.32.4-fix-reply-disappears-on-refresh.20009+3d2fae3ac",
+    "@bike4mind/services": "2.53.1-fix-reply-disappears-on-refresh.20009+3d2fae3ac",
+    "@bike4mind/utils": "2.9.2-fix-reply-disappears-on-refresh.20009+3d2fae3ac",
     "@types/better-sqlite3": "^7.6.13",
     "@types/diff": "^5.0.9",
     "@types/jsonwebtoken": "^9.0.4",
@@ -138,7 +138,7 @@ var package_default = {
   optionalDependencies: {
     "@vscode/ripgrep": "^1.17.0"
   },
-  gitHead: "541fa130ab03ae992ac54caef18c0aa5858ccc16"
+  gitHead: "3d2fae3ac3f2b2cd7d12279e4f610b073002b96d"
 };
 
 // src/utils/updateChecker.ts

package/dist/{chunk-ZFVDH4DU.js → chunk-PXLQHH5U.js}

@@ -398,7 +398,8 @@ var CliConfigSchema = z.object({
     config: z.record(z.string(), z.any())
   }),
   trustedTools: z.array(z.string()).optional().prefault([]),
-  sandbox: SandboxConfigSchema.optional()
+  sandbox: SandboxConfigSchema.optional(),
+  additionalDirectories: z.array(z.string()).optional().prefault([])
 });
 var ProjectConfigSchema = z.object({
   tools: z.object({
@@ -418,7 +419,8 @@ var ProjectConfigSchema = z.object({
     enableSkillTool: z.boolean().optional(),
     enableDynamicAgentCreation: z.boolean().optional()
   }).optional(),
-  sandbox: PartialSandboxConfigSchema
+  sandbox: PartialSandboxConfigSchema,
+  additionalDirectories: z.array(z.string()).optional()
 });
 var ProjectLocalConfigSchema = z.object({
   trustedTools: z.array(z.string()).optional(),
@@ -465,8 +467,10 @@ var DEFAULT_CONFIG = {
     // Web-only tools
     config: {}
   },
-  trustedTools: []
+  trustedTools: [],
   // No tools trusted by default
+  additionalDirectories: []
+  // No additional directories by default
 };
 function findProjectConfigDir(startDir = process.cwd()) {
   let currentDir = startDir;
@@ -1017,6 +1021,53 @@ ${entryToAdd}
     }
     return loadProjectLocalConfig(this.projectConfigDir);
   }
+  /**
+   * Add a directory to the allowed directories list
+   * Persists to global config
+   */
+  async addDirectory(dirPath) {
+    const config = await this.load();
+    if (!config.additionalDirectories) {
+      config.additionalDirectories = [];
+    }
+    const resolvedPath = path2.resolve(dirPath);
+    if (!config.additionalDirectories.includes(resolvedPath)) {
+      config.additionalDirectories.push(resolvedPath);
+      await this.save(config);
+    }
+  }
+  /**
+   * Remove a directory from the allowed directories list
+   */
+  async removeDirectory(dirPath) {
+    const config = await this.load();
+    if (config.additionalDirectories) {
+      const resolvedPath = path2.resolve(dirPath);
+      config.additionalDirectories = config.additionalDirectories.filter((d) => path2.resolve(d) !== resolvedPath);
+      await this.save(config);
+    }
+  }
+  /**
+   * Get all additional directories (merged from global + project configs)
+   * Returns resolved absolute paths
+   */
+  async getAdditionalDirectories() {
+    const config = await this.load();
+    const dirs = /* @__PURE__ */ new Set();
+    if (config.additionalDirectories) {
+      for (const dir of config.additionalDirectories) {
+        dirs.add(path2.resolve(dir));
+      }
+    }
+    const projectConfig = await this.loadRawProjectConfig();
+    if (projectConfig?.additionalDirectories) {
+      const projectRoot = this.projectConfigDir || process.cwd();
+      for (const dir of projectConfig.additionalDirectories) {
+        dirs.add(path2.resolve(projectRoot, dir));
+      }
+    }
+    return Array.from(dirs);
+  }
 };
 
 export {

package/dist/commands/doctorCommand.js

@@ -3,7 +3,7 @@ import {
   fetchLatestVersion,
   forceCheckForUpdate,
   package_default
-} from "../chunk-RGWBOKBB.js";
+} from "../chunk-552ZZZ6B.js";
 
 // src/commands/doctorCommand.ts
 import { execSync } from "child_process";

package/dist/commands/mcpCommand.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   ConfigStore
-} from "../chunk-ZFVDH4DU.js";
+} from "../chunk-PXLQHH5U.js";
 import "../chunk-5W4P24VS.js";
 import "../chunk-4BIBE3J7.js";
 

package/dist/commands/updateCommand.js

@@ -2,7 +2,7 @@
 import {
   forceCheckForUpdate,
   package_default
-} from "../chunk-RGWBOKBB.js";
+} from "../chunk-552ZZZ6B.js";
 
 // src/commands/updateCommand.ts
 import { execSync } from "child_process";

package/dist/index.js

@@ -25,11 +25,11 @@ import "./chunk-BDQBOLYG.js";
 import {
   ConfigStore,
   logger
-} from "./chunk-ZFVDH4DU.js";
+} from "./chunk-PXLQHH5U.js";
 import {
   checkForUpdate,
   package_default
-} from "./chunk-RGWBOKBB.js";
+} from "./chunk-552ZZZ6B.js";
 import {
   selectActiveBackgroundAgents,
   useCliStore
@@ -102,6 +102,9 @@ import React22, { useState as useState11, useEffect as useEffect7, useCallback a
 import { render, Box as Box21, Text as Text21, useApp, useInput as useInput10 } from "ink";
 import { execSync } from "child_process";
 import { randomBytes as randomBytes5 } from "crypto";
+import { existsSync as existsSync13, promises as fs15 } from "fs";
+import { homedir as homedir4 } from "os";
+import path20 from "path";
 import { v4 as uuidv413 } from "uuid";
 
 // src/components/App.tsx
@@ -835,6 +838,20 @@ var COMMANDS = [
   {
     name: "sandbox:violations:clear",
     description: "Clear all recorded sandbox violations"
+  },
+  {
+    name: "add-dir",
+    description: "Add a directory for file access",
+    args: "<path>"
+  },
+  {
+    name: "remove-dir",
+    description: "Remove a directory from file access",
+    args: "<path>"
+  },
+  {
+    name: "dirs",
+    description: "List all accessible directories"
   }
 ];
 function getAllCommandNames() {
@@ -2626,6 +2643,7 @@ import { Box as Box20, Text as Text20 } from "ink";
 import Spinner3 from "ink-spinner";
 import jwt from "jsonwebtoken";
 import open from "open";
+import axios2 from "axios";
 
 // src/auth/OAuthClient.ts
 import axios from "axios";
@@ -2737,6 +2755,33 @@ var OAuthClient = class {
 };
 
 // src/components/LoginFlow.tsx
+function extractErrorMessage(err) {
+  if (axios2.isAxiosError(err)) {
+    if (err.response?.data) {
+      const data = err.response.data;
+      const serverMsg = data.error_description || data.error || data.message;
+      if (serverMsg) {
+        return `${serverMsg} (HTTP ${err.response.status})`;
+      }
+      return `Server returned HTTP ${err.response.status}`;
+    }
+    if (err.code === "ECONNREFUSED") {
+      const url = err.config?.baseURL || "server";
+      return `Could not connect to ${url} - is the server running?`;
+    }
+    if (err.code === "ENOTFOUND") {
+      return `Could not resolve hostname: ${err.config?.baseURL || "unknown"}`;
+    }
+    if (err.code === "ETIMEDOUT" || err.code === "ECONNABORTED") {
+      return "Connection timed out - server may be unreachable";
+    }
+    return err.message || `Network error (${err.code || "unknown"})`;
+  }
+  if (err instanceof Error) {
+    return err.message || "Unknown error occurred";
+  }
+  return "Unknown error occurred";
+}
 function LoginFlow({ apiUrl = "http://localhost:3000", configStore, onSuccess, onError }) {
   const [status, setStatus] = useState10("initiating");
   const [deviceFlow, setDeviceFlow] = useState10(null);
@@ -2770,9 +2815,9 @@ function LoginFlow({ apiUrl = "http://localhost:3000", configStore, onSuccess, o
         setTimeout(() => onSuccess(), 1500);
       } catch (err) {
         setStatus("error");
-        const errorMessage = err instanceof Error ? err.message : "Unknown error occurred";
+        const errorMessage = extractErrorMessage(err);
         setError(errorMessage);
-        onError(err instanceof Error ? err : new Error(errorMessage));
+        onError(new Error(errorMessage));
       }
     };
     runLoginFlow();
@@ -4435,6 +4480,7 @@ function buildCoreSystemPrompt(contextSection, config) {
   let agentDirectoryContext = "";
   let skillsSection = "";
   let dynamicAgentSection = "";
+  let directoriesSection = "";
   if (typeof contextSection === "string") {
     projectContextSection = contextSection;
     if (config) {
@@ -4468,6 +4514,21 @@ ${config.contextContent}`;
     if (config.enableDynamicAgentCreation) {
       dynamicAgentSection = buildDynamicAgentPromptSection();
     }
+    if (config.additionalDirectories && config.additionalDirectories.length > 0) {
+      directoriesSection = `
+
+## Additional Allowed Directories
+
+In addition to the working directory (${process.cwd()}), you have read/write access to these directories:
+${config.additionalDirectories.map((d) => `- ${d}`).join("\n")}
+
+To access files in additional directories, pass the full path to the 'dir_path' parameter of file tools:
+- ${TOOL_GREP_SEARCH}(pattern="...", dir_path="/path/to/additional/dir")
+- ${TOOL_GLOB_FILES}(pattern="**/*.ts", dir_path="/path/to/additional/dir")
+- ${TOOL_FILE_READ}(path="/path/to/additional/dir/file.ts")
+
+When the user asks about content in an additional directory, search there first using the dir_path parameter.`;
+    }
   }
   return `You are an autonomous AI assistant with access to tools. Your job is to help users by taking action and solving problems proactively.
 
@@ -4557,7 +4618,7 @@ EXAMPLES:
 - "what packages installed?" \u2192 ${TOOL_GLOB_FILES} "**/package.json" \u2192 ${TOOL_FILE_READ}
 - "find all components using React hooks" \u2192 ${TOOL_SUBAGENT_DELEGATE}(task="find all components using React hooks", type="explore")
 
-Remember: Use context from previous messages to understand follow-up questions.${projectContextSection}${skillsSection}`;
+Remember: Use context from previous messages to understand follow-up questions.${directoriesSection}${projectContextSection}${skillsSection}`;
 }
 function buildDynamicAgentPromptSection() {
   return `
@@ -4608,7 +4669,7 @@ You have access to the '${TOOL_CREATE_DYNAMIC_AGENT}' tool, which lets you creat
 
 // src/utils/toolsAdapter.ts
 import { rmSync } from "fs";
-import path15 from "path";
+import path14 from "path";
 
 // ../../b4m-core/packages/services/dist/src/referService/generateCodes.js
 import { randomBytes } from "crypto";
@@ -5050,7 +5111,7 @@ var incrementUserCounterSchema = z27.object({
 });
 
 // ../../b4m-core/packages/services/dist/src/countersService/sendSlackReport.js
-import axios2 from "axios";
+import axios3 from "axios";
 
 // ../../b4m-core/packages/services/dist/src/countersService/aiInsights.js
 import OpenAI from "openai";
@@ -5064,7 +5125,7 @@ import OpenAI2 from "openai";
 // ../../b4m-core/packages/services/dist/src/importHistoryService/index.js
 import fs7, { unlinkSync as unlinkSync2 } from "fs";
 import yauzl from "yauzl";
-import axios3 from "axios";
+import axios4 from "axios";
 
 // ../../b4m-core/packages/services/dist/src/importHistoryService/importOpenaiHistory.js
 import { z as z28 } from "zod";
@@ -6346,7 +6407,7 @@ var researchTaskRetrySchema = z120.object({
 });
 
 // ../../b4m-core/packages/services/dist/src/researchTaskService/processDiscoveredLinks.js
-import axios4 from "axios";
+import axios5 from "axios";
 import { z as z121 } from "zod";
 import plimit from "p-limit";
 import pLimit2 from "p-limit";
@@ -6357,7 +6418,7 @@ var researchTaskProcessDiscoveredLinksSchema = z121.object({
 // ../../b4m-core/packages/services/dist/src/researchTaskService/downloadRelevantLinks.js
 import { z as z122 } from "zod";
 import plimit2 from "p-limit";
-import axios5 from "axios";
+import axios6 from "axios";
 import { fileTypeFromBuffer } from "file-type";
 var researchTaskDownloadRelevantLinksSchema = z122.object({
   id: z122.string()
@@ -6736,7 +6797,7 @@ var weatherTool = {
 };
 
 // ../../b4m-core/packages/services/dist/src/llm/tools/implementation/imageGeneration/index.js
-import axios6 from "axios";
+import axios7 from "axios";
 import { fileTypeFromBuffer as fileTypeFromBuffer2 } from "file-type";
 import { v4 as uuidv45 } from "uuid";
 async function downloadImage(url) {
@@ -6744,7 +6805,7 @@ async function downloadImage(url) {
     const base64Data = url.split(",")[1];
     return Buffer.from(base64Data, "base64");
   }
-  const response = await axios6.get(url, { responseType: "arraybuffer" });
+  const response = await axios7.get(url, { responseType: "arraybuffer" });
   return response.data;
 }
 async function processAndStoreImages(images, context) {
@@ -8135,7 +8196,7 @@ Return only the edited content without any markdown code blocks or explanations.
 };
 
 // ../../b4m-core/packages/services/dist/src/llm/tools/implementation/imageEdit/index.js
-import axios7 from "axios";
+import axios8 from "axios";
 import { fileTypeFromBuffer as fileTypeFromBuffer3 } from "file-type";
 import { v4 as uuidv46 } from "uuid";
 var EDIT_SUPPORTED_MODELS = [
@@ -8152,10 +8213,10 @@ async function downloadImage2(url) {
     return Buffer.from(base64Data, "base64");
   }
   try {
-    const response = await axios7.get(url, { responseType: "arraybuffer", timeout: 3e4 });
+    const response = await axios8.get(url, { responseType: "arraybuffer", timeout: 3e4 });
     return response.data;
   } catch (error) {
-    if (axios7.isAxiosError(error)) {
+    if (axios8.isAxiosError(error)) {
       if (error.response?.status === 403 || error.response?.status === 404) {
         throw new Error(`Image URL is expired or inaccessible. Please use a file ID from the workbench or a recently generated image URL. Original error: ${error.message}`);
       }
@@ -8313,7 +8374,7 @@ Please select a supported edit model in your image settings modal.`;
         } catch (error) {
           console.error("[ERROR] BFL image editing failed:", error);
           const errorMessage = error instanceof Error ? error.message : "Unknown error";
-          if (axios7.isAxiosError(error)) {
+          if (axios8.isAxiosError(error)) {
             const status = error.response?.status;
             const responseData = error.response?.data;
             if (status === 403) {
@@ -8353,7 +8414,7 @@ Please check your BFL API key in settings and ensure it is configured correctly.
         } catch (error) {
           console.error("[ERROR] Gemini image editing failed:", error);
           const errorMessage = error instanceof Error ? error.message : "Unknown error";
-          if (axios7.isAxiosError(error)) {
+          if (axios8.isAxiosError(error)) {
             const status = error.response?.status;
             const responseData = error.response?.data;
             if (status === 403 || status === 401) {
@@ -8387,7 +8448,7 @@ Please check your BFL API key in settings and ensure it is configured correctly.
         } catch (error) {
           console.error("[ERROR] OpenAI image editing failed:", error);
           const errorMessage = error instanceof Error ? error.message : "Unknown error";
-          if (axios7.isAxiosError(error)) {
+          if (axios8.isAxiosError(error)) {
             const status = error.response?.status;
             const responseData = error.response?.data;
             if (status === 403 || status === 401) {
@@ -10134,16 +10195,50 @@ var planetVisibilityTool = {
 // ../../b4m-core/packages/services/dist/src/llm/tools/implementation/fileRead/index.js
 import { promises as fs8 } from "fs";
 import { existsSync as existsSync5, statSync as statSync4 } from "fs";
+
+// ../../b4m-core/packages/services/dist/src/llm/tools/utils/pathValidation.js
 import path8 from "path";
-var MAX_FILE_SIZE3 = 10 * 1024 * 1024;
-async function readFileContent(params) {
-  const { path: filePath, encoding = "utf-8", offset = 0, limit } = params;
+import { realpathSync as realpathSync2 } from "fs";
+function resolveRealPath(filePath) {
+  try {
+    return realpathSync2(filePath);
+  } catch {
+    const parentDir = path8.dirname(filePath);
+    const basename2 = path8.basename(filePath);
+    if (parentDir === filePath) {
+      return filePath;
+    }
+    return path8.join(resolveRealPath(parentDir), basename2);
+  }
+}
+function isPathAllowed(filePath, allowedDirectories) {
+  const cwd = resolveRealPath(process.cwd());
+  const allAllowed = [cwd, ...(allowedDirectories || []).map((d) => resolveRealPath(d))];
   const normalizedPath = path8.normalize(filePath);
-  const resolvedPath = path8.resolve(process.cwd(), normalizedPath);
-  const cwd = path8.resolve(process.cwd());
-  if (!resolvedPath.startsWith(cwd)) {
-    throw new Error(`Access denied: Cannot read files outside of current working directory`);
+  const logicalPath = path8.isAbsolute(normalizedPath) ? normalizedPath : path8.resolve(cwd, normalizedPath);
+  const resolvedPath = resolveRealPath(logicalPath);
+  for (const dir of allAllowed) {
+    if (resolvedPath === dir || resolvedPath.startsWith(dir + path8.sep)) {
+      return { allowed: true, resolvedPath, matchedDirectory: dir };
+    }
   }
+  return { allowed: false, resolvedPath };
+}
+function assertPathAllowed(filePath, allowedDirectories, operation = "access") {
+  const result = isPathAllowed(filePath, allowedDirectories);
+  if (!result.allowed) {
+    const cwd = process.cwd();
+    const dirsMsg = allowedDirectories && allowedDirectories.length > 0 ? `Allowed directories: ${[cwd, ...allowedDirectories].join(", ")}` : `Working directory: ${cwd}`;
+    throw new Error(`Access denied: Cannot ${operation} files outside allowed directories. ${dirsMsg}`);
+  }
+  return result.resolvedPath;
+}
+
+// ../../b4m-core/packages/services/dist/src/llm/tools/implementation/fileRead/index.js
+var MAX_FILE_SIZE3 = 10 * 1024 * 1024;
+async function readFileContent(params, allowedDirectories) {
+  const { path: filePath, encoding = "utf-8", offset = 0, limit } = params;
+  const resolvedPath = assertPathAllowed(filePath, allowedDirectories, "read");
   if (!existsSync5(resolvedPath)) {
     throw new Error(`File not found: ${filePath}`);
   }
@@ -10212,8 +10307,9 @@ var fileReadTool = {
       const params = value;
       context.logger.info("\u{1F4C4} FileRead: Reading file", { path: params.path });
       try {
-        const content = await readFileContent(params);
-        const stats = statSync4(path8.resolve(process.cwd(), path8.normalize(params.path)));
+        const content = await readFileContent(params, context.allowedDirectories);
+        const { resolvedPath: validatedPath } = isPathAllowed(params.path, context.allowedDirectories);
+        const stats = statSync4(validatedPath);
         context.logger.info("\u2705 FileRead: Success", {
           path: params.path,
           size: stats.size,
@@ -10260,14 +10356,9 @@ var fileReadTool = {
 import { promises as fs9 } from "fs";
 import { existsSync as existsSync6 } from "fs";
 import path9 from "path";
-async function createFile(params) {
+async function createFile(params, allowedDirectories) {
   const { path: filePath, content, createDirectories = true } = params;
-  const normalizedPath = path9.normalize(filePath);
-  const resolvedPath = path9.resolve(process.cwd(), normalizedPath);
-  const cwd = path9.resolve(process.cwd());
-  if (!resolvedPath.startsWith(cwd)) {
-    throw new Error(`Access denied: Cannot create files outside of current working directory`);
-  }
+  const resolvedPath = assertPathAllowed(filePath, allowedDirectories, "create");
   const fileExists = existsSync6(resolvedPath);
   const action = fileExists ? "overwritten" : "created";
   if (createDirectories) {
@@ -10292,7 +10383,7 @@ var createFileTool = {
         size: params.content.length
       });
       try {
-        const result = await createFile(params);
+        const result = await createFile(params, context.allowedDirectories);
         context.logger.info("\u2705 CreateFile: Success", { path: params.path });
         return result;
       } catch (error) {
@@ -10341,12 +10432,14 @@ var DEFAULT_IGNORE_PATTERNS = [
   "**/*.min.js",
   "**/*.min.css"
 ];
-async function findFiles(params) {
+async function findFiles(params, allowedDirectories) {
   const { pattern, dir_path, case_sensitive = true, respect_git_ignore = true } = params;
   const baseCwd = process.cwd();
   const targetDir = dir_path ? path10.resolve(baseCwd, path10.normalize(dir_path)) : baseCwd;
-  if (!targetDir.startsWith(baseCwd)) {
-    throw new Error(`Access denied: Cannot search outside of current working directory`);
+  const validation = isPathAllowed(targetDir, allowedDirectories);
+  if (!validation.allowed) {
+    const dirsMsg = allowedDirectories && allowedDirectories.length > 0 ? `Allowed directories: ${[baseCwd, ...allowedDirectories].join(", ")}` : `Working directory: ${baseCwd}`;
+    throw new Error(`Access denied: Cannot search outside allowed directories. ${dirsMsg}`);
   }
   const ignorePatterns = respect_git_ignore ? DEFAULT_IGNORE_PATTERNS : [];
   const matches = await glob(pattern, {
@@ -10399,7 +10492,7 @@ var globFilesTool = {
         dir_path: params.dir_path || "."
       });
       try {
-        const result = await findFiles(params);
+        const result = await findFiles(params, context.allowedDirectories);
         context.logger.info("\u2705 GlobFiles: Success");
         return result;
       } catch (error) {
@@ -10475,12 +10568,6 @@ function getRipgrepPath() {
     throw new Error("ripgrep is not available. Please install @vscode/ripgrep: pnpm add @vscode/ripgrep --filter @bike4mind/services");
   }
 }
-function isPathWithinWorkspace(targetPath, baseCwd) {
-  const resolvedTarget = path11.resolve(targetPath);
-  const resolvedBase = path11.resolve(baseCwd);
-  const relativePath = path11.relative(resolvedBase, resolvedTarget);
-  return !relativePath.startsWith("..") && !path11.isAbsolute(relativePath);
-}
 function convertGlobToRipgrepGlobs(globPattern) {
   if (!globPattern || globPattern === "**/*") {
     return [];
@@ -10492,12 +10579,14 @@ function convertGlobToRipgrepGlobs(globPattern) {
   }
   return [globPattern];
 }
-async function searchFiles2(params) {
+async function searchFiles2(params, allowedDirectories) {
   const { pattern, dir_path, include } = params;
   const baseCwd = process.cwd();
   const targetDir = dir_path ? path11.resolve(baseCwd, dir_path) : baseCwd;
-  if (!isPathWithinWorkspace(targetDir, baseCwd)) {
-    throw new Error(`Path validation failed: "${dir_path}" resolves outside the allowed workspace directory`);
+  const validation = isPathAllowed(targetDir, allowedDirectories);
+  if (!validation.allowed) {
+    const dirsMsg = allowedDirectories && allowedDirectories.length > 0 ? `Allowed directories: ${[baseCwd, ...allowedDirectories].join(", ")}` : `Working directory: ${baseCwd}`;
+    throw new Error(`Path validation failed: "${dir_path}" resolves outside allowed directories. ${dirsMsg}`);
   }
   try {
     const stats = await stat2(targetDir);
@@ -10616,7 +10705,7 @@ var grepSearchTool = {
         include: params.include || "**/*"
       });
       try {
-        const result = await searchFiles2(params);
+        const result = await searchFiles2(params, context.allowedDirectories);
         context.logger.info("\u2705 GrepSearch: Success");
         return result;
       } catch (error) {
@@ -10653,14 +10742,9 @@ var grepSearchTool = {
 import { promises as fs10 } from "fs";
 import { existsSync as existsSync8, statSync as statSync5 } from "fs";
 import path12 from "path";
-async function deleteFile(params) {
+async function deleteFile(params, allowedDirectories) {
   const { path: filePath, recursive = false } = params;
-  const normalizedPath = path12.normalize(filePath);
-  const resolvedPath = path12.resolve(process.cwd(), normalizedPath);
-  const cwd = path12.resolve(process.cwd());
-  if (!resolvedPath.startsWith(cwd)) {
-    throw new Error(`Access denied: Cannot delete files outside of current working directory`);
-  }
+  const resolvedPath = assertPathAllowed(filePath, allowedDirectories, "delete");
   if (!existsSync8(resolvedPath)) {
     throw new Error(`File or directory not found: ${filePath}`);
   }
@@ -10691,7 +10775,7 @@ var deleteFileTool = {
         recursive: params.recursive
       });
       try {
-        const result = await deleteFile(params);
+        const result = await deleteFile(params, context.allowedDirectories);
         context.logger.info("\u2705 DeleteFile: Success", { path: params.path });
         return result;
       } catch (error) {
@@ -14555,7 +14639,6 @@ function parseQuery(query) {
 // ../../b4m-core/packages/services/dist/src/llm/tools/implementation/editLocalFile/index.js
 import { promises as fs11 } from "fs";
 import { existsSync as existsSync9 } from "fs";
-import path14 from "path";
 import { diffLines as diffLines3 } from "diff";
 function generateDiff(original, modified) {
   const differences = diffLines3(original, modified);
@@ -14577,14 +14660,9 @@ function generateDiff(original, modified) {
   });
   return { additions, deletions, diff: diffString.trim() };
 }
-async function editLocalFile(params) {
+async function editLocalFile(params, allowedDirectories) {
   const { path: filePath, old_string, new_string } = params;
-  const normalizedPath = path14.normalize(filePath);
-  const resolvedPath = path14.resolve(process.cwd(), normalizedPath);
-  const cwd = path14.resolve(process.cwd());
-  if (!resolvedPath.startsWith(cwd)) {
-    throw new Error(`Access denied: Cannot edit files outside of current working directory`);
-  }
+  const resolvedPath = assertPathAllowed(filePath, allowedDirectories, "edit");
   if (!existsSync9(resolvedPath)) {
     throw new Error(`File not found: ${filePath}`);
   }
@@ -14617,7 +14695,7 @@ var editLocalFileTool = {
         newStringLength: params.new_string.length
       });
       try {
-        const result = await editLocalFile(params);
+        const result = await editLocalFile(params, context.allowedDirectories);
         context.logger.info("\u2705 EditLocalFile: Success", { path: params.path });
         return result;
       } catch (error) {
@@ -15170,7 +15248,7 @@ var cliOnlyTools = {
   // Interactive tools
   ask_user_question: askUserQuestionTool
 };
-var generateTools = (userId, user, logger2, { db }, storage, imageGenerateStorage, statusUpdate, onStart, onFinish, llm, config, model, imageProcessorLambdaName, tools = b4mTools) => {
+var generateTools = (userId, user, logger2, { db }, storage, imageGenerateStorage, statusUpdate, onStart, onFinish, llm, config, model, imageProcessorLambdaName, tools = b4mTools, allowedDirectories) => {
   const context = {
     userId,
     user,
@@ -15183,7 +15261,8 @@ var generateTools = (userId, user, logger2, { db }, storage, imageGenerateStorag
     onFinish,
     llm,
     model,
-    imageProcessorLambdaName
+    imageProcessorLambdaName,
+    allowedDirectories
   };
   return Object.entries(tools).reduce((acc, [key, tool]) => ({
     ...acc,
@@ -16041,7 +16120,7 @@ import { fromZodError } from "zod-validation-error";
 var BUILT_IN_TOOL_SET = new Set(b4mLLMTools.options);
 
 // ../../b4m-core/packages/services/dist/src/llm/ImageGeneration.js
-import axios8 from "axios";
+import axios9 from "axios";
 import { fileTypeFromBuffer as fileTypeFromBuffer4 } from "file-type";
 import { v4 as uuidv47 } from "uuid";
 import { z as z141 } from "zod";
@@ -16063,7 +16142,7 @@ var ImageGenerationBodySchema = OpenAIImageGenerationInput.extend({
 });
 
 // ../../b4m-core/packages/services/dist/src/llm/VideoGeneration.js
-import axios9 from "axios";
+import axios10 from "axios";
 import { v4 as uuidv48 } from "uuid";
 import { z as z142 } from "zod";
 import { fromZodError as fromZodError3 } from "zod-validation-error";
@@ -16079,7 +16158,7 @@ var VideoGenerationBodySchema = z142.object({
 });
 
 // ../../b4m-core/packages/services/dist/src/llm/ImageEdit.js
-import axios10 from "axios";
+import axios11 from "axios";
 import { fileTypeFromBuffer as fileTypeFromBuffer5 } from "file-type";
 import { v4 as uuidv49 } from "uuid";
 import { z as z143 } from "zod";
@@ -16189,7 +16268,7 @@ async function generateFileDeletePreview(args) {
     if (!existsSync10(args.path)) {
       return `[File does not exist: ${args.path}]`;
     }
-    const stats = await import("fs/promises").then((fs15) => fs15.stat(args.path));
+    const stats = await import("fs/promises").then((fs16) => fs16.stat(args.path));
     return `[File will be deleted]
 
 Path: ${args.path}
@@ -16538,7 +16617,7 @@ function wrapToolWithPermission(tool, permissionManager, showPermissionPrompt, a
       let isSandboxed = false;
       let sandboxedArgs = args;
       if (toolName === "bash_execute" && args?.command && sandboxOrchestrator) {
-        const cwd = args.cwd ? path15.resolve(process.cwd(), args.cwd) : process.cwd();
+        const cwd = args.cwd ? path14.resolve(process.cwd(), args.cwd) : process.cwd();
         const decision = sandboxOrchestrator.shouldSandbox(args.command, cwd);
         if (decision.type === "blocked") {
           sandboxOrchestrator.recordBlocked();
@@ -16784,7 +16863,7 @@ function wrapToolWithCheckpointing(tool, checkpointStore) {
       const filePath = args?.path;
       if (filePath) {
         try {
-          await checkpointStore.createCheckpoint(toolName, [filePath], `before-${toolName}-${path15.basename(filePath)}`);
+          await checkpointStore.createCheckpoint(toolName, [filePath], `before-${toolName}-${path14.basename(filePath)}`);
         } catch {
         }
       }
@@ -16816,7 +16895,7 @@ function normalizeToolName(toolName) {
   }
   return TOOL_NAME_MAPPING[toolName] || toolName;
 }
-function generateCliTools(userId, llm, model, permissionManager, showPermissionPrompt, agentContext, configStore, apiClient, toolFilter, showUserQuestion, checkpointStore, sandboxOrchestrator) {
+function generateCliTools(userId, llm, model, permissionManager, showPermissionPrompt, agentContext, configStore, apiClient, toolFilter, showUserQuestion, checkpointStore, sandboxOrchestrator, allowedDirectories) {
   if (showUserQuestion) {
     setShowUserQuestionFn(showUserQuestion);
   }
@@ -16876,7 +16955,8 @@ function generateCliTools(userId, llm, model, permissionManager, showPermissionP
     model,
     void 0,
     // imageProcessorLambdaName (not needed for CLI)
-    tools_to_generate
+    tools_to_generate,
+    allowedDirectories
   );
   let tools = Object.entries(toolsMap).map(([_, tool]) => {
     const permissionWrapped = wrapToolWithPermission(
@@ -17087,7 +17167,7 @@ function getEnvironmentName(configApiConfig) {
 
 // src/utils/contextLoader.ts
 import * as fs12 from "fs";
-import * as path16 from "path";
+import * as path15 from "path";
 import { homedir as homedir3 } from "os";
 var CONTEXT_FILE_SIZE_LIMIT = 100 * 1024;
 var PROJECT_CONTEXT_FILES = [
@@ -17108,7 +17188,7 @@ function formatFileSize2(bytes) {
   return `${(bytes / (1024 * 1024)).toFixed(1)}MB`;
 }
 function tryReadContextFile(dir, filename, source) {
-  const filePath = path16.join(dir, filename);
+  const filePath = path15.join(dir, filename);
   try {
     const stats = fs12.lstatSync(filePath);
     if (stats.isDirectory()) {
@@ -17176,7 +17256,7 @@ ${project.content}`;
 }
 async function loadContextFiles(projectDir) {
   const errors = [];
-  const globalDir = path16.join(homedir3(), ".bike4mind");
+  const globalDir = path15.join(homedir3(), ".bike4mind");
   const projectDirectory = projectDir || process.cwd();
   const [globalResult, projectResult] = await Promise.all([
     Promise.resolve(findContextFile(globalDir, GLOBAL_CONTEXT_FILES, "global")),
@@ -17447,7 +17527,7 @@ function substituteArguments(template, args) {
 // ../../b4m-core/packages/mcp/dist/src/client.js
 import { StdioClientTransport } from "@modelcontextprotocol/sdk/client/stdio.js";
 import { Client as Client2 } from "@modelcontextprotocol/sdk/client/index.js";
-import path17 from "path";
+import path16 from "path";
 import { existsSync as existsSync11, readdirSync as readdirSync3 } from "fs";
 var MCPClient = class {
   // Note: This class handles MCP server communication with repository filtering
@@ -17489,16 +17569,16 @@ var MCPClient = class {
         const root = process.env.INIT_CWD || process.cwd();
         const candidatePaths = [
           // When running from SST Lambda with node_modules structure (copyFiles)
-          path17.join(root, `node_modules/@bike4mind/mcp/dist/src/${this.serverName}/index.js`),
+          path16.join(root, `node_modules/@bike4mind/mcp/dist/src/${this.serverName}/index.js`),
           // When running from SST Lambda deployed environment (/var/task)
-          path17.join(root, `b4m-core/packages/mcp/dist/src/${this.serverName}/index.js`),
+          path16.join(root, `b4m-core/packages/mcp/dist/src/${this.serverName}/index.js`),
           // When running from SST Lambda (.sst/artifacts/mcpHandler-dev), navigate to monorepo root (3 levels up)
-          path17.join(root, `../../../b4m-core/packages/mcp/dist/src/${this.serverName}/index.js`),
+          path16.join(root, `../../../b4m-core/packages/mcp/dist/src/${this.serverName}/index.js`),
           // When running from packages/client (Next.js app), navigate to monorepo root (2 levels up)
-          path17.join(root, `../../b4m-core/packages/mcp/dist/src/${this.serverName}/index.js`),
+          path16.join(root, `../../b4m-core/packages/mcp/dist/src/${this.serverName}/index.js`),
           // Original paths (backward compatibility)
-          path17.join(root, `/b4m-core/packages/mcp/dist/src/${this.serverName}/index.js`),
-          path17.join(root, "core", "mcp", "servers", this.serverName, "dist", "index.js")
+          path16.join(root, `/b4m-core/packages/mcp/dist/src/${this.serverName}/index.js`),
+          path16.join(root, "core", "mcp", "servers", this.serverName, "dist", "index.js")
         ];
         const serverScriptPath = candidatePaths.find((p) => existsSync11(p));
         if (!serverScriptPath) {
@@ -18842,12 +18922,12 @@ var WebSocketToolExecutor = class {
 };
 
 // src/auth/ApiClient.ts
-import axios11 from "axios";
+import axios12 from "axios";
 var ApiClient = class {
   constructor(baseURL = "http://localhost:3000", configStore) {
     this.configStore = configStore || new ConfigStore();
     this.oauthClient = new OAuthClient(baseURL);
-    this.client = axios11.create({
+    this.client = axios12.create({
       baseURL,
       headers: {
         "Content-Type": "application/json"
@@ -19445,7 +19525,7 @@ var SubagentOrchestrator = class {
 
 // src/agents/AgentStore.ts
 import fs13 from "fs/promises";
-import path18 from "path";
+import path17 from "path";
 import os2 from "os";
 import matter2 from "gray-matter";
 var FULL_MODEL_ID_PREFIXES = [
@@ -19595,10 +19675,10 @@ var AgentStore = class {
     const root = projectRoot || process.cwd();
     const home = os2.homedir();
     this.builtinAgentsDir = builtinDir;
-    this.globalB4MAgentsDir = path18.join(home, ".bike4mind", "agents");
-    this.globalClaudeAgentsDir = path18.join(home, ".claude", "agents");
-    this.projectB4MAgentsDir = path18.join(root, ".bike4mind", "agents");
-    this.projectClaudeAgentsDir = path18.join(root, ".claude", "agents");
+    this.globalB4MAgentsDir = path17.join(home, ".bike4mind", "agents");
+    this.globalClaudeAgentsDir = path17.join(home, ".claude", "agents");
+    this.projectB4MAgentsDir = path17.join(root, ".bike4mind", "agents");
+    this.projectClaudeAgentsDir = path17.join(root, ".claude", "agents");
   }
   /**
    * Load all agents from all directories
@@ -19652,7 +19732,7 @@ var AgentStore = class {
     try {
       const entries = await fs13.readdir(directory, { withFileTypes: true });
       for (const entry of entries) {
-        const fullPath = path18.join(directory, entry.name);
+        const fullPath = path17.join(directory, entry.name);
         if (entry.isDirectory()) {
           const subFiles = await this.findAgentFiles(fullPath);
           files.push(...subFiles);
@@ -19672,7 +19752,7 @@ var AgentStore = class {
     const content = await fs13.readFile(filePath, "utf-8");
     const { data: frontmatter, content: body } = matter2(content);
     const parsed = AgentFrontmatterSchema.parse(frontmatter);
-    const name = path18.basename(filePath, ".md");
+    const name = path17.basename(filePath, ".md");
     const modelInput = parsed.model || DEFAULT_AGENT_MODEL;
     const resolution = resolveModelAlias(modelInput, name, filePath);
     if (!resolution.resolved && resolution.warning) {
@@ -19753,7 +19833,7 @@ var AgentStore = class {
    */
   async createAgentFile(name, isGlobal = false, useClaude = true) {
     const targetDir = isGlobal ? useClaude ? this.globalClaudeAgentsDir : this.globalB4MAgentsDir : useClaude ? this.projectClaudeAgentsDir : this.projectB4MAgentsDir;
-    const filePath = path18.join(targetDir, `${name}.md`);
+    const filePath = path17.join(targetDir, `${name}.md`);
     try {
       await fs13.access(filePath);
       throw new Error(`Agent file already exists: ${filePath}`);
@@ -20582,7 +20662,7 @@ function createTodoStore(onUpdate) {
 
 // src/tools/findDefinitionTool.ts
 import { stat as stat3 } from "fs/promises";
-import path19 from "path";
+import path18 from "path";
 import { execFile as execFile2 } from "child_process";
 import { promisify as promisify2 } from "util";
 import { createRequire as createRequire2 } from "module";
@@ -20603,19 +20683,19 @@ var ALL_KEYWORDS = Object.values(KIND_KEYWORDS).flat();
 function getRipgrepPath2() {
   try {
     const ripgrepPath = require3.resolve("@vscode/ripgrep");
-    const ripgrepDir = path19.dirname(ripgrepPath);
-    return path19.join(ripgrepDir, "..", "bin", "rg" + (process.platform === "win32" ? ".exe" : ""));
+    const ripgrepDir = path18.dirname(ripgrepPath);
+    return path18.join(ripgrepDir, "..", "bin", "rg" + (process.platform === "win32" ? ".exe" : ""));
   } catch {
     throw new Error(
       "ripgrep is not available. Please install @vscode/ripgrep: pnpm add @vscode/ripgrep --filter @bike4mind/services"
     );
   }
 }
-function isPathWithinWorkspace2(targetPath, baseCwd) {
-  const resolvedTarget = path19.resolve(targetPath);
-  const resolvedBase = path19.resolve(baseCwd);
-  const relativePath = path19.relative(resolvedBase, resolvedTarget);
-  return !relativePath.startsWith("..") && !path19.isAbsolute(relativePath);
+function isPathWithinWorkspace(targetPath, baseCwd) {
+  const resolvedTarget = path18.resolve(targetPath);
+  const resolvedBase = path18.resolve(baseCwd);
+  const relativePath = path18.relative(resolvedBase, resolvedTarget);
+  return !relativePath.startsWith("..") && !path18.isAbsolute(relativePath);
 }
 function escapeRegex(str) {
   return str.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
@@ -20648,8 +20728,8 @@ async function findDefinitions(params) {
     throw new Error("symbol_name is required");
   }
   const baseCwd = process.cwd();
-  const targetDir = search_path ? path19.resolve(baseCwd, search_path) : baseCwd;
-  if (!isPathWithinWorkspace2(targetDir, baseCwd)) {
+  const targetDir = search_path ? path18.resolve(baseCwd, search_path) : baseCwd;
+  if (!isPathWithinWorkspace(targetDir, baseCwd)) {
     throw new Error(`Path validation failed: "${search_path}" resolves outside the allowed workspace directory`);
   }
   try {
@@ -20703,7 +20783,7 @@ async function findDefinitions(params) {
         const lineText = match.data.lines.text.trimEnd();
         if (isLikelyDefinition(lineText)) {
           allMatches.push({
-            filePath: path19.relative(targetDir, match.data.path.text) || path19.basename(match.data.path.text),
+            filePath: path18.relative(targetDir, match.data.path.text) || path18.basename(match.data.path.text),
             lineNumber: match.data.line_number,
             line: lineText
           });
@@ -20782,7 +20862,7 @@ function createFindDefinitionTool() {
 
 // src/tools/getFileStructure/index.ts
 import { existsSync as existsSync12, promises as fs14, statSync as statSync6 } from "fs";
-import path20 from "path";
+import path19 from "path";
 
 // src/tools/getFileStructure/formatter.ts
 var SECTIONS = [
@@ -20826,7 +20906,7 @@ function createGetFileStructureTool() {
       const params = value;
       try {
         const cwd = process.cwd();
-        const resolvedPath = path20.resolve(cwd, params.path);
+        const resolvedPath = path19.resolve(cwd, params.path);
         if (!resolvedPath.startsWith(cwd)) {
           return "Error: Access denied - cannot read files outside of current working directory";
         }
@@ -20840,7 +20920,7 @@ function createGetFileStructureTool() {
         if (stats.size > MAX_FILE_SIZE4) {
           return `Error: File too large (${(stats.size / 1024 / 1024).toFixed(2)}MB). Max: ${MAX_FILE_SIZE4 / 1024 / 1024}MB`;
         }
-        const ext = path20.extname(resolvedPath).toLowerCase();
+        const ext = path19.extname(resolvedPath).toLowerCase();
         const { getLanguageForExtension, parseFileStructure, getSupportedLanguages } = await import("./treeSitterEngine-4SGFQDY3.js");
         const languageId = getLanguageForExtension(ext);
         if (!languageId) {
@@ -20911,7 +20991,8 @@ function CliApp() {
     backgroundManager: null,
     sandboxOrchestrator: null,
     wsManager: null,
-    checkpointStore: null
+    checkpointStore: null,
+    additionalDirectories: []
   });
   const [isInitialized, setIsInitialized] = useState11(false);
   const [initError, setInitError] = useState11(null);
@@ -21005,6 +21086,9 @@ function CliApp() {
     try {
       const startupLog = [];
       const config = await state.configStore.load();
+      const configDirs = await state.configStore.getAdditionalDirectories();
+      const flagDirs = process.env.B4M_ADDITIONAL_DIRS ? JSON.parse(process.env.B4M_ADDITIONAL_DIRS) : [];
+      const additionalDirectories = [.../* @__PURE__ */ new Set([...configDirs, ...flagDirs])];
       const history = await state.commandHistoryStore.load();
       setCommandHistory(history);
       try {
@@ -21243,7 +21327,8 @@ function CliApp() {
         // toolFilter
         userQuestionFn,
         checkpointStore,
-        sandboxOrchestrator
+        sandboxOrchestrator,
+        additionalDirectories
       );
       startupLog.push(`\u{1F6E0}\uFE0F Loaded ${b4mTools2.length} B4M tool(s)`);
       const mcpManager = new McpManager(config);
@@ -21315,6 +21400,9 @@ function CliApp() {
       }
       const allTools = [...b4mTools2, ...mcpTools, ...cliTools];
       startupLog.push(`\u{1F4C2} Working directory: ${process.cwd()}`);
+      if (additionalDirectories.length > 0) {
+        startupLog.push(`\u{1F4C1} Additional directories: ${additionalDirectories.length}`);
+      }
       const agentNamesList = agentStore.getAgentNames().join(", ");
       startupLog.push(`\u{1F916} Subagent delegation enabled (${agentNamesList}) + background execution`);
       if (skillTool) {
@@ -21345,7 +21433,8 @@ function CliApp() {
         agentStore,
         customCommands: state.customCommandStore.getAllCommands(),
         enableSkillTool,
-        enableDynamicAgentCreation: config.preferences.enableDynamicAgentCreation === true
+        enableDynamicAgentCreation: config.preferences.enableDynamicAgentCreation === true,
+        additionalDirectories
       });
       const maxIterations = config.preferences.maxIterations === null ? 999999 : config.preferences.maxIterations;
       const agent = new ReActAgent({
@@ -21411,8 +21500,10 @@ function CliApp() {
         // Store sandbox orchestrator for /sandbox commands
         wsManager,
         // WebSocket connection manager (null if using SSE fallback)
-        checkpointStore
+        checkpointStore,
         // File change checkpointing for undo/restore
+        additionalDirectories
+        // Store additional directories for file access
       }));
       setStoreSession(newSession);
       const bannerLines = [
@@ -21688,7 +21779,8 @@ function CliApp() {
         contextContent: state.contextContent,
         agentStore: state.agentStore || void 0,
         customCommands: state.customCommandStore.getAllCommands(),
-        enableSkillTool: config?.preferences.enableSkillTool !== false
+        enableSkillTool: config?.preferences.enableSkillTool !== false,
+        additionalDirectories: state.additionalDirectories
       });
       const contextUsage = tokenCounter2.countSessionTokens(activeSession, systemPrompt);
       if (contextUsage.totalTokens >= threshold) {
@@ -22730,7 +22822,8 @@ No usage data available for the last ${USAGE_DAYS} days.`);
           contextContent: state.contextContent,
           agentStore: state.agentStore || void 0,
           customCommands: commands,
-          enableSkillTool: state.config?.preferences.enableSkillTool !== false
+          enableSkillTool: state.config?.preferences.enableSkillTool !== false,
+          additionalDirectories: state.additionalDirectories
         });
         const usage = tokenCounter2.countSessionTokens(state.session, systemPrompt);
         const totalWithTools = usage.totalTokens + mcpToolsTokens;
@@ -23164,6 +23257,76 @@ Allowed domains (${domains.length}):`);
         console.log("");
         break;
       }
+      case "add-dir": {
+        let dirPath = args.join(" ").trim();
+        if (!dirPath) {
+          console.log("Usage: /add-dir <path>");
+          console.log("\nExample:");
+          console.log("  /add-dir /path/to/directory");
+          console.log("  /add-dir ~/codes/my-project");
+          break;
+        }
+        if (dirPath.startsWith("~/")) {
+          dirPath = path20.join(homedir4(), dirPath.slice(2));
+        } else if (dirPath === "~") {
+          dirPath = homedir4();
+        }
+        const resolvedPath = path20.resolve(dirPath);
+        if (!existsSync13(resolvedPath)) {
+          console.log(`\u274C Directory does not exist: ${resolvedPath}`);
+          break;
+        }
+        const dirStat = await fs15.stat(resolvedPath);
+        if (!dirStat.isDirectory()) {
+          console.log(`\u274C Path is not a directory: ${resolvedPath}`);
+          break;
+        }
+        await state.configStore.addDirectory(resolvedPath);
+        setState((prev) => ({
+          ...prev,
+          additionalDirectories: [...prev.additionalDirectories || [], resolvedPath]
+        }));
+        console.log(`\u2705 Added directory: ${resolvedPath}`);
+        console.log("   File tools now have access to this directory.");
+        break;
+      }
+      case "remove-dir": {
+        let removeDir = args.join(" ").trim();
+        if (!removeDir) {
+          console.log("Usage: /remove-dir <path>");
+          break;
+        }
+        if (removeDir.startsWith("~/")) {
+          removeDir = path20.join(homedir4(), removeDir.slice(2));
+        } else if (removeDir === "~") {
+          removeDir = homedir4();
+        }
+        const resolvedRemovePath = path20.resolve(removeDir);
+        await state.configStore.removeDirectory(resolvedRemovePath);
+        setState((prev) => ({
+          ...prev,
+          additionalDirectories: (prev.additionalDirectories || []).filter((d) => path20.resolve(d) !== resolvedRemovePath)
+        }));
+        console.log(`\u2705 Removed directory: ${resolvedRemovePath}`);
+        break;
+      }
+      case "dirs": {
+        const additionalDirs = await state.configStore.getAdditionalDirectories();
+        const cwd = process.cwd();
+        console.log("\n\u{1F4C2} Accessible Directories:\n");
+        console.log(`  \u{1F4C1} Working directory: ${cwd}`);
+        if (additionalDirs.length > 0) {
+          console.log("\n  \u{1F4C1} Additional directories:");
+          additionalDirs.forEach((d) => {
+            console.log(`     ${d}`);
+          });
+        } else {
+          console.log("\n  No additional directories configured.");
+          console.log("  Use /add-dir <path> or --add-dir <path> flag to add directories.");
+        }
+        console.log("");
+        break;
+      }
       case "sandbox:violations": {
         const vStore = state.sandboxOrchestrator?.getViolationStore();
         if (!vStore) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bike4mind/cli",
-  "version": "0.2.34",
+  "version": "0.2.35-fix-reply-disappears-on-refresh.20009+3d2fae3ac",
   "type": "module",
   "description": "Interactive CLI tool for Bike4Mind with ReAct agents",
   "license": "UNLICENSED",
@@ -111,10 +111,10 @@
   },
   "devDependencies": {
     "@bike4mind/agents": "0.1.0",
-    "@bike4mind/common": "2.56.0",
-    "@bike4mind/mcp": "1.32.3",
-    "@bike4mind/services": "2.53.0",
-    "@bike4mind/utils": "2.9.1",
+    "@bike4mind/common": "2.56.1-fix-reply-disappears-on-refresh.20009+3d2fae3ac",
+    "@bike4mind/mcp": "1.32.4-fix-reply-disappears-on-refresh.20009+3d2fae3ac",
+    "@bike4mind/services": "2.53.1-fix-reply-disappears-on-refresh.20009+3d2fae3ac",
+    "@bike4mind/utils": "2.9.2-fix-reply-disappears-on-refresh.20009+3d2fae3ac",
     "@types/better-sqlite3": "^7.6.13",
     "@types/diff": "^5.0.9",
     "@types/jsonwebtoken": "^9.0.4",
@@ -135,5 +135,5 @@
   "optionalDependencies": {
     "@vscode/ripgrep": "^1.17.0"
   },
-  "gitHead": "541fa130ab03ae992ac54caef18c0aa5858ccc16"
+  "gitHead": "3d2fae3ac3f2b2cd7d12279e4f610b073002b96d"
 }