@bike4mind/cli 0.2.5-citables-display-web-search.17093 → 0.2.5-cli-bash-tools.17096

package/README.md

@@ -160,6 +160,7 @@ export SERPER_API_KEY="your-key-here"
 - ✅ `math_evaluate` - No API key needed
 - ✅ `current_datetime` - No API key needed
 - ✅ `prompt_enhancement` - No API key needed
+- ✅ `bash_execute` - No API key needed
 - 🔑 `weather_info` - Requires `toolApiKeys.openweather`
 - 🔑 `web_search` - Requires `toolApiKeys.serper`
 - 🔑 `deep_research` - Requires `toolApiKeys.serper`

package/dist/{artifactExtractor-MBEOLUST.js → artifactExtractor-Y7Y4GJCZ.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   CurationArtifactType
-} from "./chunk-MVGLS65O.js";
+} from "./chunk-KUMTSAUN.js";
 import "./chunk-PDX44BCA.js";
 
 // ../../b4m-core/packages/services/dist/src/notebookCurationService/artifactExtractor.js

package/dist/{chunk-2R6BM6L6.js → chunk-BNFSIXHY.js}

@@ -2,7 +2,7 @@
 import {
   BadRequestError,
   secureParameters
-} from "./chunk-MV6KQD6A.js";
+} from "./chunk-TQUGMSCZ.js";
 import {
   GenericCreditDeductTransaction,
   ImageEditUsageTransaction,
@@ -10,7 +10,7 @@ import {
   RealtimeVoiceUsageTransaction,
   TextGenerationUsageTransaction,
   TransferCreditTransaction
-} from "./chunk-MVGLS65O.js";
+} from "./chunk-KUMTSAUN.js";
 
 // ../../b4m-core/packages/services/dist/src/creditService/subtractCredits.js
 import { z } from "zod";

package/dist/{chunk-KXHWFSYD.js → chunk-FJ6BRMJD.js}

@@ -7,11 +7,11 @@ import {
   getSettingsMap,
   getSettingsValue,
   secureParameters
-} from "./chunk-MV6KQD6A.js";
+} from "./chunk-TQUGMSCZ.js";
 import {
   KnowledgeType,
   SupportedFabFileMimeTypes
-} from "./chunk-MVGLS65O.js";
+} from "./chunk-KUMTSAUN.js";
 
 // ../../b4m-core/packages/services/dist/src/fabFileService/create.js
 import { z } from "zod";

package/dist/{chunk-MVGLS65O.js → chunk-KUMTSAUN.js}

@@ -230,7 +230,9 @@ var b4mLLMTools = z3.enum([
   "create_file",
   "glob_files",
   "grep_search",
-  "delete_file"
+  "delete_file",
+  // Shell execution
+  "bash_execute"
 ]);
 var B4MLLMToolsList = b4mLLMTools.options.map((tool) => tool);
 var RechartsChartTypeSchema = z3.enum([
@@ -3745,35 +3747,6 @@ var ToolHealthSchema = z21.object({
   lastExecutionTime: z21.number().optional(),
   successRate: z21.number().optional()
 });
-var CitableSourceSchema = z21.object({
-  /** Unique identifier - can be URL, UUID, or composite key */
-  id: z21.string(),
-  /** Source classification for UI rendering */
-  type: z21.enum(["web_url", "document", "dataset", "mcp"]),
-  /** Human-readable title/name */
-  title: z21.string(),
-  /** Navigation target (external URL, deep link, or hash route) */
-  url: z21.string().optional(),
-  /** Brief description or excerpt (1-2 sentences) */
-  description: z21.string().optional(),
-  /** ISO 8601 timestamp for freshness indication */
-  timestamp: z21.string().optional(),
-  /** Attribution for non-report sources */
-  author: z21.string().optional(),
-  /** Processing status for real-time updates */
-  status: z21.enum(["pending", "processing", "complete", "error"]).optional(),
-  /** Extensibility metadata */
-  metadata: z21.object({
-    sourceSystem: z21.string().optional(),
-    icon: z21.string().optional(),
-    tags: z21.array(z21.string()).optional(),
-    confidence: z21.number().optional(),
-    practiceAreas: z21.array(z21.string()).optional(),
-    chunkId: z21.string().optional(),
-    relevanceScore: z21.number().optional(),
-    fullContext: z21.string().optional()
-  }).passthrough().optional()
-});
 var PromptMetaZodSchema = z21.object({
   model: PromptMetaModelSchema.optional(),
   tokenUsage: PromptMetaTokenUsageSchema.optional(),
@@ -3816,9 +3789,7 @@ var PromptMetaZodSchema = z21.object({
     failedSteps: z21.array(z21.string()).optional()
   }).optional(),
   // Phase 2: Tool health tracking
-  toolHealth: z21.array(ToolHealthSchema).optional(),
-  // Citable sources referenced in AI responses (from web_search, deep_research, RAG, MCP)
-  citables: z21.array(CitableSourceSchema).optional()
+  toolHealth: z21.array(ToolHealthSchema).optional()
 });
 
 // ../../b4m-core/packages/common/dist/src/schemas/analytics/events/ai.js
@@ -6090,7 +6061,6 @@ export {
   API_SERVICE_GROUPS,
   settingsMap,
   StringBooleanSchema,
-  CitableSourceSchema,
   PromptMetaZodSchema,
   AiEvents,
   ApiKeyEvents,

package/dist/{chunk-4PHLXSN3.js → chunk-L2Q4BSIU.js}

@@ -6,12 +6,12 @@ import {
   getSettingsByNames,
   obfuscateApiKey,
   secureParameters
-} from "./chunk-MV6KQD6A.js";
+} from "./chunk-TQUGMSCZ.js";
 import {
   ApiKeyType,
   MementoTier,
   isSupportedEmbeddingModel
-} from "./chunk-MVGLS65O.js";
+} from "./chunk-KUMTSAUN.js";
 
 // ../../b4m-core/packages/services/dist/src/apiKeyService/get.js
 import { z } from "zod";

package/dist/{chunk-MV6KQD6A.js → chunk-TQUGMSCZ.js}

@@ -16,7 +16,7 @@ import {
   dayjsConfig_default,
   extractSnippetMeta,
   settingsMap
-} from "./chunk-MVGLS65O.js";
+} from "./chunk-KUMTSAUN.js";
 
 // ../../b4m-core/packages/utils/dist/src/storage/S3Storage.js
 import { S3Client, PutObjectCommand, DeleteObjectCommand, GetObjectCommand, HeadObjectCommand } from "@aws-sdk/client-s3";

package/dist/{create-F7PTEPBR.js → create-CMCLR2VE.js}

@@ -2,10 +2,10 @@
 import {
   createFabFile,
   createFabFileSchema
-} from "./chunk-KXHWFSYD.js";
-import "./chunk-MV6KQD6A.js";
+} from "./chunk-FJ6BRMJD.js";
+import "./chunk-TQUGMSCZ.js";
 import "./chunk-AMDXHL6S.js";
-import "./chunk-MVGLS65O.js";
+import "./chunk-KUMTSAUN.js";
 import "./chunk-PDX44BCA.js";
 export {
   createFabFile,

package/dist/index.js

@@ -4,9 +4,9 @@ import {
   getEffectiveApiKey,
   getOpenWeatherKey,
   getSerperKey
-} from "./chunk-4PHLXSN3.js";
-import "./chunk-2R6BM6L6.js";
-import "./chunk-KXHWFSYD.js";
+} from "./chunk-L2Q4BSIU.js";
+import "./chunk-BNFSIXHY.js";
+import "./chunk-FJ6BRMJD.js";
 import {
   BFLImageService,
   BaseStorage,
@@ -15,7 +15,7 @@ import {
   OpenAIBackend,
   OpenAIImageService,
   XAIImageService
-} from "./chunk-MV6KQD6A.js";
+} from "./chunk-TQUGMSCZ.js";
 import {
   Logger
 } from "./chunk-AMDXHL6S.js";
@@ -73,7 +73,7 @@ import {
   XAI_IMAGE_MODELS,
   b4mLLMTools,
   getMcpProviderMetadata
-} from "./chunk-MVGLS65O.js";
+} from "./chunk-KUMTSAUN.js";
 import {
   __require
 } from "./chunk-PDX44BCA.js";
@@ -4281,8 +4281,8 @@ async function processAndStoreImages(images, context) {
     const buffer = await downloadImage(image);
     const fileType = await fileTypeFromBuffer2(buffer);
     const filename = `${uuidv45()}.${fileType?.ext}`;
-    const path13 = await context.imageGenerateStorage.upload(buffer, filename, {});
-    return path13;
+    const path14 = await context.imageGenerateStorage.upload(buffer, filename, {});
+    return path14;
   }));
 }
 async function updateQuestAndReturnMarkdown(storedImageUrls, context) {
@@ -4471,30 +4471,13 @@ async function performWebSearch(adapters, params) {
       link: result.link,
       snippet: result.snippet
     })) || [];
-    const citables = results.map((result, index) => ({
-      id: result.link,
-      // Use URL as unique identifier
-      type: "web_url",
-      title: result.title,
-      url: result.link,
-      description: result.snippet,
-      timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-      status: "complete",
-      metadata: {
-        sourceSystem: "web_search",
-        relevanceScore: 1 - index * 0.1,
-        // Higher relevance for earlier results
-        fullContext: result.snippet
-      }
-    }));
     const formattedResults = results.map((result, index) => `${index + 1}. **${result.title}**
 ${result.snippet}
 Source: [${new URL(result.link).hostname}](${result.link})
 `).join("\n");
-    const formattedOutput = formattedResults ? `Here's what I found from searching the web:
+    return formattedResults ? `Here's what I found from searching the web:
 
 ${formattedResults}` : "No results found from web search.";
-    return { formattedResults: formattedOutput, citables };
   } catch (error) {
     console.error("\u274C WebSearch Tool: Error during search:", error);
     throw error;
@@ -4505,18 +4488,7 @@ var webSearchTool = {
   implementation: (context) => ({
     toolFn: async (value) => {
       const params = value;
-      const { formattedResults, citables } = await performWebSearch({ db: context.db }, params);
-      if (citables.length > 0) {
-        await context.statusUpdate({
-          // Store citables in promptMeta - statusUpdate will Object.assign this
-          // The receiving code needs to handle merging promptMeta.citables
-          promptMeta: {
-            citables
-          }
-        }, "Web search complete");
-        console.log(`\u{1F4DA} WebSearch Tool: Stored ${citables.length} citables`);
-      }
-      return formattedResults;
+      return performWebSearch({ db: context.db }, params);
     },
     toolSchema: {
       name: "web_search",
@@ -5494,8 +5466,8 @@ async function processAndStoreImage(imageUrl, context) {
   const buffer = await downloadImage2(imageUrl);
   const fileType = await fileTypeFromBuffer3(buffer);
   const filename = `${uuidv46()}.${fileType?.ext}`;
-  const path13 = await context.imageGenerateStorage.upload(buffer, filename, {});
-  return path13;
+  const path14 = await context.imageGenerateStorage.upload(buffer, filename, {});
+  return path14;
 }
 async function updateQuestAndReturnMarkdown2(storedImagePath, context) {
   await context.onFinish?.("edit_image", storedImagePath);
@@ -7907,6 +7879,391 @@ var deleteFileTool = {
   })
 };
 
+// ../../b4m-core/packages/services/dist/src/llm/tools/implementation/bashExecute/index.js
+import { spawn } from "child_process";
+import path11 from "path";
+var DEFAULT_TIMEOUT_MS = 6e4;
+var MAX_OUTPUT_SIZE = 100 * 1024;
+var DANGEROUS_PATTERNS = [
+  // Destructive file operations
+  {
+    pattern: /\brm\s+(-[a-zA-Z]*r[a-zA-Z]*\s+|.*\s+-[a-zA-Z]*r).*\//i,
+    reason: "Recursive delete with path",
+    block: true
+  },
+  {
+    pattern: /\brm\s+(-[a-zA-Z]*f[a-zA-Z]*\s+|.*\s+-[a-zA-Z]*f).*--no-preserve-root/i,
+    reason: "Force delete without preserve root",
+    block: true
+  },
+  {
+    pattern: /\brm\s+-[a-zA-Z]*r[a-zA-Z]*f[a-zA-Z]*\s+\//i,
+    reason: "Recursive force delete on root paths",
+    block: true
+  },
+  {
+    pattern: /\brm\s+-[a-zA-Z]*f[a-zA-Z]*r[a-zA-Z]*\s+\//i,
+    reason: "Force recursive delete on root paths",
+    block: true
+  },
+  // System-level dangerous commands
+  { pattern: /\bsudo\b/i, reason: "Elevated privileges (sudo)", block: true },
+  { pattern: /\bsu\s+(-|root)/i, reason: "Switch to root user", block: true },
+  { pattern: /\bchmod\s+777\b/i, reason: "Overly permissive chmod", block: false },
+  { pattern: /\bchown\s+-R\s+root/i, reason: "Recursive chown to root", block: true },
+  // Disk/partition operations
+  { pattern: /\bmkfs\b/i, reason: "Filesystem creation", block: true },
+  { pattern: /\bfdisk\b/i, reason: "Disk partitioning", block: true },
+  { pattern: /\bdd\s+.*of=\/dev\//i, reason: "Direct disk write", block: true },
+  // Network attacks
+  { pattern: /\b(nc|netcat)\s+.*-e\s+\/bin\/(ba)?sh/i, reason: "Reverse shell attempt", block: true },
+  { pattern: /\bcurl\s+.*\|\s*(ba)?sh/i, reason: "Piping remote script to shell", block: true },
+  { pattern: /\bwget\s+.*\|\s*(ba)?sh/i, reason: "Piping remote script to shell", block: true },
+  // Fork bombs and resource exhaustion
+  { pattern: /:\(\)\s*\{\s*:\|:&\s*\}\s*;/i, reason: "Fork bomb", block: true },
+  { pattern: /\bwhile\s+true.*do.*done.*&/i, reason: "Infinite loop in background", block: false },
+  // Credential/sensitive data access
+  { pattern: /\/etc\/shadow/i, reason: "Access to shadow file", block: true },
+  { pattern: /\/etc\/passwd.*>/i, reason: "Modifying passwd file", block: true },
+  { pattern: /\baws\s+.*--profile\s+/i, reason: "AWS profile access", block: false },
+  // History/log manipulation
+  { pattern: /\bhistory\s+-c\b/i, reason: "Clearing shell history", block: false },
+  { pattern: />\s*\/var\/log\//i, reason: "Overwriting system logs", block: true },
+  // Dangerous redirects
+  { pattern: />\s*\/dev\/sda/i, reason: "Writing to block device", block: true },
+  { pattern: />\s*\/dev\/null.*2>&1.*</i, reason: "Potentially hiding output", block: false },
+  // Environment manipulation
+  { pattern: /\bexport\s+PATH\s*=\s*[^$]/i, reason: "Overwriting PATH", block: false },
+  { pattern: /\bexport\s+LD_PRELOAD/i, reason: "LD_PRELOAD manipulation", block: true },
+  // Process/system control
+  { pattern: /\bkill\s+-9\s+(-1|1)\b/i, reason: "Killing all processes", block: true },
+  { pattern: /\bkillall\s+-9\b/i, reason: "Force killing processes", block: false },
+  { pattern: /\bshutdown\b/i, reason: "System shutdown", block: true },
+  { pattern: /\breboot\b/i, reason: "System reboot", block: true },
+  { pattern: /\binit\s+[06]\b/i, reason: "System runlevel change", block: true }
+];
+var SAFE_COMMAND_PREFIXES = [
+  "ls",
+  "cat",
+  "head",
+  "tail",
+  "grep",
+  "find",
+  "echo",
+  "pwd",
+  "whoami",
+  "date",
+  "cal",
+  "wc",
+  "sort",
+  "uniq",
+  "cut",
+  "tr",
+  "sed",
+  "awk",
+  "git",
+  "npm",
+  "pnpm",
+  "yarn",
+  "node",
+  "npx",
+  "tsx",
+  "ts-node",
+  "python",
+  "python3",
+  "pip",
+  "pip3",
+  "docker",
+  "docker-compose",
+  "curl",
+  "wget",
+  // These are safe for fetching, blocked when piped to shell
+  "mkdir",
+  "touch",
+  "cp",
+  "mv",
+  // File operations (still require permission)
+  "which",
+  "whereis",
+  "type",
+  "file",
+  "stat",
+  "env",
+  "printenv",
+  "set",
+  "man",
+  "help",
+  "info",
+  "diff",
+  "comm",
+  "cmp",
+  "tar",
+  "zip",
+  "unzip",
+  "gzip",
+  "gunzip",
+  "ssh",
+  "scp",
+  "rsync",
+  // Network tools
+  "make",
+  "cmake",
+  "cargo",
+  "go",
+  "rustc",
+  "gcc",
+  "g++",
+  // Build tools
+  "jest",
+  "vitest",
+  "mocha",
+  "pytest",
+  // Test runners
+  "eslint",
+  "prettier",
+  "tsc"
+  // Linters/formatters
+];
+function checkDangerousPatterns(command) {
+  for (const { pattern, reason, block } of DANGEROUS_PATTERNS) {
+    if (pattern.test(command)) {
+      return { blocked: block, reason };
+    }
+  }
+  return { blocked: false };
+}
+function getBaseCommand(command) {
+  const trimmed = command.trim();
+  const match = trimmed.match(/^(\S+)/);
+  return match ? match[1] : "";
+}
+function isSafeCommandPrefix(command) {
+  const baseCommand = getBaseCommand(command);
+  return SAFE_COMMAND_PREFIXES.some((safe) => baseCommand === safe || baseCommand.endsWith(`/${safe}`));
+}
+async function executeBashCommand(params) {
+  const { command, cwd: relativeCwd, timeout = DEFAULT_TIMEOUT_MS } = params;
+  if (!command || command.trim().length === 0) {
+    return {
+      stdout: "",
+      stderr: "Error: Command cannot be empty",
+      exitCode: 1,
+      timedOut: false,
+      blocked: true,
+      blockedReason: "Empty command"
+    };
+  }
+  const dangerCheck = checkDangerousPatterns(command);
+  if (dangerCheck.blocked) {
+    return {
+      stdout: "",
+      stderr: `Command blocked for safety: ${dangerCheck.reason}`,
+      exitCode: 1,
+      timedOut: false,
+      blocked: true,
+      blockedReason: dangerCheck.reason
+    };
+  }
+  const baseCwd = process.cwd();
+  const targetCwd = relativeCwd ? path11.resolve(baseCwd, path11.normalize(relativeCwd)) : baseCwd;
+  if (!targetCwd.startsWith(baseCwd)) {
+    return {
+      stdout: "",
+      stderr: "Error: Cannot execute commands outside of current working directory",
+      exitCode: 1,
+      timedOut: false,
+      blocked: true,
+      blockedReason: "Path traversal attempt"
+    };
+  }
+  const effectiveTimeout = Math.min(timeout, 5 * 60 * 1e3);
+  return new Promise((resolve3) => {
+    let stdout = "";
+    let stderr = "";
+    let timedOut = false;
+    const proc = spawn("bash", ["-c", command], {
+      cwd: targetCwd,
+      env: {
+        ...process.env,
+        // Prevent color codes that might be hard to read
+        NO_COLOR: "1",
+        FORCE_COLOR: "0"
+      },
+      stdio: ["ignore", "pipe", "pipe"]
+    });
+    const timeoutId = setTimeout(() => {
+      timedOut = true;
+      proc.kill("SIGTERM");
+      setTimeout(() => {
+        if (!proc.killed) {
+          proc.kill("SIGKILL");
+        }
+      }, 5e3);
+    }, effectiveTimeout);
+    proc.stdout.on("data", (data) => {
+      if (stdout.length < MAX_OUTPUT_SIZE) {
+        stdout += data.toString();
+        if (stdout.length > MAX_OUTPUT_SIZE) {
+          stdout = stdout.slice(0, MAX_OUTPUT_SIZE) + "\n... [output truncated]";
+        }
+      }
+    });
+    proc.stderr.on("data", (data) => {
+      if (stderr.length < MAX_OUTPUT_SIZE) {
+        stderr += data.toString();
+        if (stderr.length > MAX_OUTPUT_SIZE) {
+          stderr = stderr.slice(0, MAX_OUTPUT_SIZE) + "\n... [output truncated]";
+        }
+      }
+    });
+    proc.on("close", (exitCode) => {
+      clearTimeout(timeoutId);
+      resolve3({
+        stdout: stdout.trim(),
+        stderr: stderr.trim(),
+        exitCode,
+        timedOut,
+        blocked: false
+      });
+    });
+    proc.on("error", (error) => {
+      clearTimeout(timeoutId);
+      resolve3({
+        stdout: "",
+        stderr: `Failed to execute command: ${error.message}`,
+        exitCode: 1,
+        timedOut: false,
+        blocked: false
+      });
+    });
+  });
+}
+function formatResult(result, command) {
+  const parts = [];
+  parts.push(`$ ${command}`);
+  parts.push("");
+  if (result.blocked) {
+    parts.push(`BLOCKED: ${result.blockedReason}`);
+    parts.push("");
+    parts.push("This command was blocked for safety reasons.");
+    parts.push("If you believe this is a false positive, please run the command manually.");
+    return parts.join("\n");
+  }
+  if (result.timedOut) {
+    parts.push("WARNING: Command timed out and was terminated.");
+    parts.push("");
+  }
+  if (result.stdout) {
+    parts.push(result.stdout);
+  }
+  if (result.stderr) {
+    if (result.stdout) {
+      parts.push("");
+    }
+    parts.push("STDERR:");
+    parts.push(result.stderr);
+  }
+  if (result.exitCode !== 0 && result.exitCode !== null) {
+    parts.push("");
+    parts.push(`Exit code: ${result.exitCode}`);
+  }
+  if (!result.stdout && !result.stderr && !result.timedOut) {
+    parts.push("(command completed with no output)");
+  }
+  return parts.join("\n");
+}
+var bashExecuteTool = {
+  name: "bash_execute",
+  implementation: (context) => ({
+    toolFn: async (value) => {
+      const params = value;
+      const isSafe = isSafeCommandPrefix(params.command);
+      context.logger.info("Bash: Executing command", {
+        command: params.command,
+        cwd: params.cwd || ".",
+        timeout: params.timeout || DEFAULT_TIMEOUT_MS,
+        isSafeCommand: isSafe
+      });
+      if (context.onStart) {
+        await context.onStart("bash_execute", {
+          command: params.command,
+          cwd: params.cwd
+        });
+      }
+      try {
+        const result = await executeBashCommand(params);
+        const formattedResult = formatResult(result, params.command);
+        context.logger.info("Bash: Command completed", {
+          exitCode: result.exitCode,
+          timedOut: result.timedOut,
+          blocked: result.blocked
+        });
+        if (context.onFinish) {
+          await context.onFinish("bash_execute", {
+            command: params.command,
+            exitCode: result.exitCode,
+            blocked: result.blocked
+          });
+        }
+        return formattedResult;
+      } catch (error) {
+        context.logger.error("Bash: Command failed", error);
+        if (context.onFinish) {
+          await context.onFinish("bash_execute", {
+            command: params.command,
+            error: error instanceof Error ? error.message : "Unknown error"
+          });
+        }
+        throw error;
+      }
+    },
+    toolSchema: {
+      name: "bash_execute",
+      description: `Execute a bash command in the terminal. Use this for running shell commands, scripts, build tools, git operations, and other CLI tasks.
+
+SAFETY NOTES:
+- Commands are executed in the current working directory (or specified cwd)
+- Dangerous commands (sudo, rm -rf /, etc.) are automatically blocked
+- Commands have a default timeout of 60 seconds (max 5 minutes)
+- Output is limited to prevent overwhelming responses
+- This tool ALWAYS requires user permission before execution
+
+COMMON USE CASES:
+- Running build commands: npm run build, make, cargo build
+- Git operations: git status, git log, git diff
+- Viewing system info: ls, pwd, cat, head, tail
+- Running tests: npm test, pytest, cargo test
+- Package management: npm install, pip install
+- File operations: mkdir, cp, mv (with permission)
+
+BLOCKED OPERATIONS:
+- sudo and privilege escalation
+- Recursive deletes on system paths
+- Direct disk operations
+- Fork bombs and resource exhaustion
+- Piping remote scripts to shell`,
+      parameters: {
+        type: "object",
+        properties: {
+          command: {
+            type: "string",
+            description: "The bash command to execute. Can include pipes, redirects, and chained commands."
+          },
+          cwd: {
+            type: "string",
+            description: "Working directory for the command, relative to the current directory (optional). Defaults to current directory. Cannot traverse outside project root."
+          },
+          timeout: {
+            type: "number",
+            description: "Timeout in milliseconds (optional, default: 60000, max: 300000). Command will be terminated if it exceeds this time."
+          }
+        },
+        required: ["command"]
+      }
+    }
+  })
+};
+
 // ../../b4m-core/packages/services/dist/src/llm/tools/index.js
 var tools = {
   dice_roll: diceRollTool,
@@ -7934,7 +8291,9 @@ var tools = {
   create_file: createFileTool,
   glob_files: globFilesTool,
   grep_search: grepSearchTool,
-  delete_file: deleteFileTool
+  delete_file: deleteFileTool,
+  // Shell execution
+  bash_execute: bashExecuteTool
 };
 var generateTools = (userId, user, logger2, { db }, storage, imageGenerateStorage, statusUpdate, onStart, onFinish, llm, config, model) => {
   const context = {
@@ -8214,21 +8573,21 @@ var NoOpStorage = class extends BaseStorage {
   async upload(input, destination, options) {
     return `/tmp/${destination}`;
   }
-  async download(path13) {
+  async download(path14) {
     throw new Error("Download not supported in CLI");
   }
-  async delete(path13) {
+  async delete(path14) {
   }
-  async getSignedUrl(path13) {
-    return `/tmp/${path13}`;
+  async getSignedUrl(path14) {
+    return `/tmp/${path14}`;
   }
-  getPublicUrl(path13) {
-    return `/tmp/${path13}`;
+  getPublicUrl(path14) {
+    return `/tmp/${path14}`;
   }
-  async getPreview(path13) {
-    return `/tmp/${path13}`;
+  async getPreview(path14) {
+    return `/tmp/${path14}`;
   }
-  async getMetadata(path13) {
+  async getMetadata(path14) {
     return { size: 0, contentType: "application/octet-stream" };
   }
 };
@@ -8286,6 +8645,10 @@ function wrapToolWithPermission(tool, permissionManager, showPermissionPrompt, a
         } catch (error) {
           preview = `[Could not generate preview: ${error instanceof Error ? error.message : "Unknown error"}]`;
         }
+      } else if (toolName === "bash_execute" && args?.command) {
+        const cwd = args.cwd ? ` (in ${args.cwd})` : "";
+        const timeout = args.timeout ? ` [timeout: ${args.timeout}ms]` : "";
+        preview = `$ ${args.command}${cwd}${timeout}`;
       }
       const response = await showPermissionPrompt(toolName, args, preview);
       if (response.action === "deny") {
@@ -8352,6 +8715,8 @@ function generateCliTools(userId, llm, model, permissionManager, showPermissionP
     glob_files: {},
     grep_search: {},
     delete_file: {},
+    // Shell execution (always requires permission)
+    bash_execute: {},
     // Tools requiring API keys (only include if API key is available)
     ...hasSerperKey && { web_search: {} },
     // Requires SERPER_API_KEY
@@ -8417,6 +8782,7 @@ var DEFAULT_TOOL_CATEGORIES = {
   create_file: "prompt_always",
   delete_file: "prompt_always",
   shell_execute: "prompt_always",
+  bash_execute: "prompt_always",
   git_commit: "prompt_always",
   git_push: "prompt_always",
   // ===== PROMPT DEFAULT (Repository read tools) =====
@@ -8555,7 +8921,7 @@ function getEnvironmentName(configApiConfig) {
 
 // src/utils/Logger.ts
 import fs10 from "fs/promises";
-import path11 from "path";
+import path12 from "path";
 import os from "os";
 var Logger2 = class _Logger {
   constructor() {
@@ -8578,9 +8944,9 @@ var Logger2 = class _Logger {
    */
   async initialize(sessionId) {
     this.sessionId = sessionId;
-    const debugDir = path11.join(os.homedir(), ".bike4mind", "debug");
+    const debugDir = path12.join(os.homedir(), ".bike4mind", "debug");
     await fs10.mkdir(debugDir, { recursive: true });
-    this.logFilePath = path11.join(debugDir, `${sessionId}.txt`);
+    this.logFilePath = path12.join(debugDir, `${sessionId}.txt`);
     await this.writeToFile("INFO", "=== CLI SESSION START ===");
   }
   /**
@@ -8790,12 +9156,12 @@ var Logger2 = class _Logger {
   async cleanupOldLogs() {
     if (!this.fileLoggingEnabled) return;
     try {
-      const debugDir = path11.join(os.homedir(), ".bike4mind", "debug");
+      const debugDir = path12.join(os.homedir(), ".bike4mind", "debug");
       const files = await fs10.readdir(debugDir);
       const now = Date.now();
       const thirtyDaysAgo = now - 30 * 24 * 60 * 60 * 1e3;
       for (const file of files) {
-        const filePath = path11.join(debugDir, file);
+        const filePath = path12.join(debugDir, file);
         const stats = await fs10.stat(filePath);
         if (stats.mtime.getTime() < thirtyDaysAgo) {
           await fs10.unlink(filePath);
@@ -8811,7 +9177,7 @@ var logger = Logger2.getInstance();
 // ../../b4m-core/packages/mcp/dist/src/client.js
 import { StdioClientTransport } from "@modelcontextprotocol/sdk/client/stdio.js";
 import { Client as Client2 } from "@modelcontextprotocol/sdk/client/index.js";
-import path12 from "path";
+import path13 from "path";
 import { existsSync as existsSync6, readdirSync as readdirSync3 } from "fs";
 var MCPClient = class {
   // Note: This class handles MCP server communication with repository filtering
@@ -8837,16 +9203,16 @@ var MCPClient = class {
       const root = process.env.INIT_CWD || process.cwd();
       const candidatePaths = [
         // When running from SST Lambda with node_modules structure (copyFiles)
-        path12.join(root, `node_modules/@bike4mind/mcp/dist/src/${this.serverName}/index.js`),
+        path13.join(root, `node_modules/@bike4mind/mcp/dist/src/${this.serverName}/index.js`),
         // When running from SST Lambda deployed environment (/var/task)
-        path12.join(root, `b4m-core/packages/mcp/dist/src/${this.serverName}/index.js`),
+        path13.join(root, `b4m-core/packages/mcp/dist/src/${this.serverName}/index.js`),
         // When running from SST Lambda (.sst/artifacts/mcpHandler-dev), navigate to monorepo root (3 levels up)
-        path12.join(root, `../../../b4m-core/packages/mcp/dist/src/${this.serverName}/index.js`),
+        path13.join(root, `../../../b4m-core/packages/mcp/dist/src/${this.serverName}/index.js`),
         // When running from packages/client (Next.js app), navigate to monorepo root (2 levels up)
-        path12.join(root, `../../b4m-core/packages/mcp/dist/src/${this.serverName}/index.js`),
+        path13.join(root, `../../b4m-core/packages/mcp/dist/src/${this.serverName}/index.js`),
         // Original paths (backward compatibility)
-        path12.join(root, `/b4m-core/packages/mcp/dist/src/${this.serverName}/index.js`),
-        path12.join(root, "core", "mcp", "servers", this.serverName, "dist", "index.js")
+        path13.join(root, `/b4m-core/packages/mcp/dist/src/${this.serverName}/index.js`),
+        path13.join(root, "core", "mcp", "servers", this.serverName, "dist", "index.js")
       ];
       const serverScriptPath = candidatePaths.find((p) => existsSync6(p));
       if (!serverScriptPath) {
@@ -9430,7 +9796,7 @@ import { isAxiosError as isAxiosError2 } from "axios";
 // package.json
 var package_default = {
   name: "@bike4mind/cli",
-  version: "0.2.5-citables-display-web-search.17093+01315691b",
+  version: "0.2.5-cli-bash-tools.17096+f35bd3290",
   type: "module",
   description: "Interactive CLI tool for Bike4Mind with ReAct agents",
   license: "UNLICENSED",
@@ -9532,10 +9898,10 @@ var package_default = {
   },
   devDependencies: {
     "@bike4mind/agents": "0.1.0",
-    "@bike4mind/common": "2.37.1-citables-display-web-search.17093+01315691b",
-    "@bike4mind/mcp": "1.19.6-citables-display-web-search.17093+01315691b",
-    "@bike4mind/services": "2.32.2-citables-display-web-search.17093+01315691b",
-    "@bike4mind/utils": "2.1.1-citables-display-web-search.17093+01315691b",
+    "@bike4mind/common": "2.37.1-cli-bash-tools.17096+f35bd3290",
+    "@bike4mind/mcp": "1.19.6-cli-bash-tools.17096+f35bd3290",
+    "@bike4mind/services": "2.32.2-cli-bash-tools.17096+f35bd3290",
+    "@bike4mind/utils": "2.1.1-cli-bash-tools.17096+f35bd3290",
     "@types/diff": "^5.0.9",
     "@types/jsonwebtoken": "^9.0.4",
     "@types/node": "^22.9.0",
@@ -9547,7 +9913,7 @@ var package_default = {
     typescript: "^5.9.3",
     vitest: "^3.2.4"
   },
-  gitHead: "01315691bda21256368539f634c17c96cafe413b"
+  gitHead: "f35bd3290ab13624a00aae18adbbbb2439bb5bae"
 };
 
 // src/config/constants.ts

package/dist/{llmMarkdownGenerator-HUCPAKVC.js → llmMarkdownGenerator-AVU5YXGP.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   CurationArtifactType
-} from "./chunk-MVGLS65O.js";
+} from "./chunk-KUMTSAUN.js";
 import "./chunk-PDX44BCA.js";
 
 // ../../b4m-core/packages/services/dist/src/notebookCurationService/llmMarkdownGenerator.js

package/dist/{markdownGenerator-LSRMH437.js → markdownGenerator-3OLFXESH.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   CurationArtifactType
-} from "./chunk-MVGLS65O.js";
+} from "./chunk-KUMTSAUN.js";
 import "./chunk-PDX44BCA.js";
 
 // ../../b4m-core/packages/services/dist/src/notebookCurationService/markdownGenerator.js

package/dist/{mementoService-U7BNSFB6.js → mementoService-YQPUULSR.js}

@@ -2,10 +2,10 @@
 import {
   findMostSimilarMemento,
   getRelevantMementos
-} from "./chunk-4PHLXSN3.js";
-import "./chunk-MV6KQD6A.js";
+} from "./chunk-L2Q4BSIU.js";
+import "./chunk-TQUGMSCZ.js";
 import "./chunk-AMDXHL6S.js";
-import "./chunk-MVGLS65O.js";
+import "./chunk-KUMTSAUN.js";
 import "./chunk-PDX44BCA.js";
 export {
   findMostSimilarMemento,

package/dist/{src-CYMJQWYI.js → src-RWXFPSIM.js}

@@ -37,7 +37,6 @@ import {
   ChatCompletionInvokeParamsSchema,
   ChatHistoryItemWithArtifactsSchema,
   ChatModels,
-  CitableSourceSchema,
   ClaudeArtifactMimeTypes,
   CollectionType,
   CompletionRequestSchema,
@@ -292,7 +291,7 @@ import {
   validateQuestMasterArtifactV2,
   validateReactArtifactV2,
   validateSvgArtifactV2
-} from "./chunk-MVGLS65O.js";
+} from "./chunk-KUMTSAUN.js";
 import "./chunk-PDX44BCA.js";
 export {
   ALL_IMAGE_MODELS,
@@ -332,7 +331,6 @@ export {
   ChatCompletionInvokeParamsSchema,
   ChatHistoryItemWithArtifactsSchema,
   ChatModels,
-  CitableSourceSchema,
   ClaudeArtifactMimeTypes,
   CollectionType,
   CompletionRequestSchema,

package/dist/{src-OPYFA3MD.js → src-URYXFYJV.js}

@@ -120,7 +120,7 @@ import {
   validateMermaidSyntax,
   warmUpSettingsCache,
   withRetry
-} from "./chunk-MV6KQD6A.js";
+} from "./chunk-TQUGMSCZ.js";
 import {
   Logger,
   NotificationDeduplicator,
@@ -129,7 +129,7 @@ import {
   postLowCreditsNotificationToSlack,
   postMessageToSlack
 } from "./chunk-AMDXHL6S.js";
-import "./chunk-MVGLS65O.js";
+import "./chunk-KUMTSAUN.js";
 import "./chunk-PDX44BCA.js";
 export {
   AWSBackend,

package/dist/{subtractCredits-ZNNRK3E5.js → subtractCredits-CW3R5K34.js}

@@ -2,10 +2,10 @@
 import {
   SubtractCreditsSchema,
   subtractCredits
-} from "./chunk-2R6BM6L6.js";
-import "./chunk-MV6KQD6A.js";
+} from "./chunk-BNFSIXHY.js";
+import "./chunk-TQUGMSCZ.js";
 import "./chunk-AMDXHL6S.js";
-import "./chunk-MVGLS65O.js";
+import "./chunk-KUMTSAUN.js";
 import "./chunk-PDX44BCA.js";
 export {
   SubtractCreditsSchema,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bike4mind/cli",
-  "version": "0.2.5-citables-display-web-search.17093+01315691b",
+  "version": "0.2.5-cli-bash-tools.17096+f35bd3290",
   "type": "module",
   "description": "Interactive CLI tool for Bike4Mind with ReAct agents",
   "license": "UNLICENSED",
@@ -102,10 +102,10 @@
   },
   "devDependencies": {
     "@bike4mind/agents": "0.1.0",
-    "@bike4mind/common": "2.37.1-citables-display-web-search.17093+01315691b",
-    "@bike4mind/mcp": "1.19.6-citables-display-web-search.17093+01315691b",
-    "@bike4mind/services": "2.32.2-citables-display-web-search.17093+01315691b",
-    "@bike4mind/utils": "2.1.1-citables-display-web-search.17093+01315691b",
+    "@bike4mind/common": "2.37.1-cli-bash-tools.17096+f35bd3290",
+    "@bike4mind/mcp": "1.19.6-cli-bash-tools.17096+f35bd3290",
+    "@bike4mind/services": "2.32.2-cli-bash-tools.17096+f35bd3290",
+    "@bike4mind/utils": "2.1.1-cli-bash-tools.17096+f35bd3290",
     "@types/diff": "^5.0.9",
     "@types/jsonwebtoken": "^9.0.4",
     "@types/node": "^22.9.0",
@@ -117,5 +117,5 @@
     "typescript": "^5.9.3",
     "vitest": "^3.2.4"
   },
-  "gitHead": "01315691bda21256368539f634c17c96cafe413b"
+  "gitHead": "f35bd3290ab13624a00aae18adbbbb2439bb5bae"
 }