@bike4mind/cli 0.2.8-feat-cli-session-resume.17148 → 0.2.10-dowgrade-mcp-sdk.17228

package/README.md

@@ -10,6 +10,7 @@ Interactive command-line interface for Bike4Mind with ReAct agents.
 - 🛠️ B4M tools + MCP integration
 - 🎨 Rich terminal UI with Ink
 - 🐛 Debug logging with `--verbose` flag
+- 📄 Context file loading (CLAUDE.md, AGENTS.md, AI.md)
 
 ## Installation
 
@@ -160,6 +161,7 @@ export SERPER_API_KEY="your-key-here"
 - ✅ `math_evaluate` - No API key needed
 - ✅ `current_datetime` - No API key needed
 - ✅ `prompt_enhancement` - No API key needed
+- ✅ `bash_execute` - No API key needed
 - 🔑 `weather_info` - Requires `toolApiKeys.openweather`
 - 🔑 `web_search` - Requires `toolApiKeys.serper`
 - 🔑 `deep_research` - Requires `toolApiKeys.serper`
@@ -241,6 +243,51 @@ You can also run any MCP server via npx or custom executables:
 
 **Note:** Internal MCP servers must be built and available in the `b4m-core/packages/mcp/dist/src/` directory. The CLI will automatically find them if you're running from the monorepo. For Docker-based servers, ensure Docker is installed and the image is accessible.
 
+## Context Files
+
+The CLI supports loading project-specific instructions from context files, similar to CLAUDE.md in Claude Code. These files provide persistent instructions that are automatically included in the agent's system prompt.
+
+### Supported Files
+
+**Project-level** (in your project directory, checked in priority order):
+1. `CLAUDE.local.md` - Personal/gitignored instructions (highest priority)
+2. `CLAUDE.md` - Project instructions
+3. `AGENTS.md` - Cross-tool standard
+4. `AI.local.md` - Personal/gitignored instructions
+5. `AI.md` - Project instructions
+6. `INSTRUCTIONS.md` - Project instructions (lowest priority)
+
+**Global** (in `~/.bike4mind/`):
+1. `AI.local.md` - Personal global instructions
+2. `AI.md` - Global instructions
+
+### How It Works
+
+- The CLI loads the **first matching file** from each layer (global and project)
+- Project files take precedence over global files
+- `.local.md` variants are intended to be gitignored for personal preferences
+- Files must be under 100KB
+- Symlinks are rejected for security
+
+### Example
+
+Create a `CLAUDE.md` in your project:
+
+```markdown
+# Project Instructions
+
+- Always use TypeScript strict mode
+- Prefer functional components with hooks
+- Run tests before committing
+```
+
+On startup, you'll see:
+```
+📄 Project context: CLAUDE.md
+```
+
+The agent will follow these instructions for all interactions in that project.
+
 ## Session Storage
 
 Sessions are saved to `~/.bike4mind/sessions/`
@@ -338,6 +385,7 @@ Current implementation includes:
 ✅ B4M tools integration
 ✅ MCP tools support
 ✅ Debug logging with --verbose flag
+✅ Context file loading (CLAUDE.md, AGENTS.md, AI.md)
 
 Coming soon:
 

package/dist/{artifactExtractor-DNE5C6DY.js → artifactExtractor-JAGU7QRL.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   CurationArtifactType
-} from "./chunk-H6SHASMZ.js";
+} from "./chunk-DJPXSSP4.js";
 import "./chunk-PDX44BCA.js";
 
 // ../../b4m-core/packages/services/dist/src/notebookCurationService/artifactExtractor.js

package/dist/{chunk-YXHQN7SK.js → chunk-AQBZVAYO.js}

@@ -7,11 +7,11 @@ import {
   getSettingsMap,
   getSettingsValue,
   secureParameters
-} from "./chunk-DNSBC3LO.js";
+} from "./chunk-GCVIRGIN.js";
 import {
   KnowledgeType,
   SupportedFabFileMimeTypes
-} from "./chunk-H6SHASMZ.js";
+} from "./chunk-DJPXSSP4.js";
 
 // ../../b4m-core/packages/services/dist/src/fabFileService/create.js
 import { z } from "zod";

package/dist/{chunk-H6SHASMZ.js → chunk-DJPXSSP4.js}

@@ -230,7 +230,9 @@ var b4mLLMTools = z3.enum([
   "create_file",
   "glob_files",
   "grep_search",
-  "delete_file"
+  "delete_file",
+  // Shell execution
+  "bash_execute"
 ]);
 var B4MLLMToolsList = b4mLLMTools.options.map((tool) => tool);
 var RechartsChartTypeSchema = z3.enum([
@@ -4038,6 +4040,15 @@ var UserApiKeyEvents;
   UserApiKeyEvents2["DELETED"] = "User API Key Deleted";
 })(UserApiKeyEvents || (UserApiKeyEvents = {}));
 
+// ../../b4m-core/packages/common/dist/src/schemas/analytics/events/slack.js
+var SlackEvents;
+(function(SlackEvents2) {
+  SlackEvents2["SLACK_COMMAND_RECEIVED"] = "Slack Command Received";
+  SlackEvents2["SLACK_COMMAND_COMPLETED"] = "Slack Command Completed";
+  SlackEvents2["SLACK_MCP_TOOL_INVOKED"] = "Slack MCP Tool Invoked";
+  SlackEvents2["SLACK_BULK_OPERATION"] = "Slack Bulk Operation Executed";
+})(SlackEvents || (SlackEvents = {}));
+
 // ../../b4m-core/packages/common/dist/src/schemas/team.js
 import { z as z22 } from "zod";
 var InternalTeamMemberSchema = z22.object({
@@ -6114,6 +6125,7 @@ export {
   FriendshipEvents,
   OrganizationEvents,
   UserApiKeyEvents,
+  SlackEvents,
   InternalTeamMemberSchema,
   InternalTeamMemberListSchema,
   PREDEFINED_USER_TAGS,

package/dist/{chunk-DNSBC3LO.js → chunk-GCVIRGIN.js}

@@ -16,7 +16,7 @@ import {
   dayjsConfig_default,
   extractSnippetMeta,
   settingsMap
-} from "./chunk-H6SHASMZ.js";
+} from "./chunk-DJPXSSP4.js";
 
 // ../../b4m-core/packages/utils/dist/src/storage/S3Storage.js
 import { S3Client, PutObjectCommand, DeleteObjectCommand, GetObjectCommand, HeadObjectCommand } from "@aws-sdk/client-s3";

package/dist/{chunk-3CCBDIFR.js → chunk-GO75FMLY.js}

@@ -6,12 +6,12 @@ import {
   getSettingsByNames,
   obfuscateApiKey,
   secureParameters
-} from "./chunk-DNSBC3LO.js";
+} from "./chunk-GCVIRGIN.js";
 import {
   ApiKeyType,
   MementoTier,
   isSupportedEmbeddingModel
-} from "./chunk-H6SHASMZ.js";
+} from "./chunk-DJPXSSP4.js";
 
 // ../../b4m-core/packages/services/dist/src/apiKeyService/get.js
 import { z } from "zod";

package/dist/{chunk-LIRY24M5.js → chunk-VZU4Z7WI.js}

@@ -2,7 +2,7 @@
 import {
   BadRequestError,
   secureParameters
-} from "./chunk-DNSBC3LO.js";
+} from "./chunk-GCVIRGIN.js";
 import {
   GenericCreditDeductTransaction,
   ImageEditUsageTransaction,
@@ -10,7 +10,7 @@ import {
   RealtimeVoiceUsageTransaction,
   TextGenerationUsageTransaction,
   TransferCreditTransaction
-} from "./chunk-H6SHASMZ.js";
+} from "./chunk-DJPXSSP4.js";
 
 // ../../b4m-core/packages/services/dist/src/creditService/subtractCredits.js
 import { z } from "zod";

package/dist/{create-PNU64QSF.js → create-ZDOTF7XD.js}

@@ -2,10 +2,10 @@
 import {
   createFabFile,
   createFabFileSchema
-} from "./chunk-YXHQN7SK.js";
-import "./chunk-DNSBC3LO.js";
+} from "./chunk-AQBZVAYO.js";
+import "./chunk-GCVIRGIN.js";
 import "./chunk-AMDXHL6S.js";
-import "./chunk-H6SHASMZ.js";
+import "./chunk-DJPXSSP4.js";
 import "./chunk-PDX44BCA.js";
 export {
   createFabFile,

package/dist/index.js

@@ -4,9 +4,9 @@ import {
   getEffectiveApiKey,
   getOpenWeatherKey,
   getSerperKey
-} from "./chunk-3CCBDIFR.js";
-import "./chunk-LIRY24M5.js";
-import "./chunk-YXHQN7SK.js";
+} from "./chunk-GO75FMLY.js";
+import "./chunk-VZU4Z7WI.js";
+import "./chunk-AQBZVAYO.js";
 import {
   BFLImageService,
   BaseStorage,
@@ -15,7 +15,7 @@ import {
   OpenAIBackend,
   OpenAIImageService,
   XAIImageService
-} from "./chunk-DNSBC3LO.js";
+} from "./chunk-GCVIRGIN.js";
 import {
   Logger
 } from "./chunk-AMDXHL6S.js";
@@ -73,7 +73,7 @@ import {
   XAI_IMAGE_MODELS,
   b4mLLMTools,
   getMcpProviderMetadata
-} from "./chunk-H6SHASMZ.js";
+} from "./chunk-DJPXSSP4.js";
 import {
   __require
 } from "./chunk-PDX44BCA.js";
@@ -85,7 +85,7 @@ import { v4 as uuidv49 } from "uuid";
 
 // src/components/App.tsx
 import React10 from "react";
-import { Box as Box9, Text as Text9, Static } from "ink";
+import { Box as Box9, Text as Text9 } from "ink";
 
 // src/components/StatusBar.tsx
 import React from "react";
@@ -742,6 +742,7 @@ function InputPrompt({
   const [selectedIndex, setSelectedIndex] = useState2(0);
   const [historyIndex, setHistoryIndex] = useState2(-1);
   const [tempInput, setTempInput] = useState2("");
+  const [inputKey, setInputKey] = useState2(0);
   useEffect(() => {
     if (prefillInput) {
       setValue(prefillInput);
@@ -889,10 +890,11 @@ function InputPrompt({
   return /* @__PURE__ */ React5.createElement(Box4, { flexDirection: "column" }, /* @__PURE__ */ React5.createElement(Box4, null, /* @__PURE__ */ React5.createElement(Text5, { bold: true, color: "cyan" }, "> "), /* @__PURE__ */ React5.createElement(
     CustomTextInput,
     {
+      key: inputKey,
       value,
       onChange: handleChange,
       onSubmit: handleSubmit,
-      placeholder: disabled ? "Thinking..." : "Type your message, /help for commands, or @file to reference",
+      placeholder: disabled ? "" : "Type your message, /help for commands, or @file to reference",
       showCursor: !disabled
     }
   )), shouldShowCommandAutocomplete && /* @__PURE__ */ React5.createElement(CommandAutocomplete, { commands: filteredCommands, selectedIndex }), fileAutocomplete?.active && /* @__PURE__ */ React5.createElement(FileAutocomplete, { files: filteredFiles, selectedIndex: fileSelectedIndex, query: fileAutocomplete.query }));
@@ -923,6 +925,7 @@ var useCliStore = create((set) => ({
   addAgentStep: (step) => set((state) => ({
     agentSteps: [...state.agentSteps, step]
   })),
+  setAgentSteps: (steps) => set({ agentSteps: steps }),
   clearAgentSteps: () => set({ agentSteps: [] }),
   // Permission prompt
   permissionPrompt: null,
@@ -942,7 +945,7 @@ var AgentThinking = React7.memo(function AgentThinking2() {
   if (!isThinking) {
     return null;
   }
-  return /* @__PURE__ */ React7.createElement(Box6, { borderStyle: "single", borderColor: "yellow", paddingX: 1, marginY: 1 }, /* @__PURE__ */ React7.createElement(ThoughtStream, { steps: agentSteps }));
+  return /* @__PURE__ */ React7.createElement(Box6, { paddingX: 1, marginBottom: 1 }, /* @__PURE__ */ React7.createElement(ThoughtStream, { steps: agentSteps }));
 });
 
 // src/components/PermissionPrompt.tsx
@@ -1397,7 +1400,7 @@ ${errorBlock}`;
       canBeTrusted: permissionPrompt.canBeTrusted,
       onResponse: onPermissionResponse
     }
-  )) : /* @__PURE__ */ React10.createElement(React10.Fragment, null, /* @__PURE__ */ React10.createElement(Static, { items: messages }, (message, index) => /* @__PURE__ */ React10.createElement(Box9, { key: index, flexDirection: "column", paddingX: 1 }, /* @__PURE__ */ React10.createElement(MessageItem, { message }))), /* @__PURE__ */ React10.createElement(AgentThinking, null), exitRequested && /* @__PURE__ */ React10.createElement(Box9, { paddingX: 1, marginBottom: 1 }, /* @__PURE__ */ React10.createElement(Text9, { color: "yellow", bold: true }, "Press Ctrl+C again to exit")), /* @__PURE__ */ React10.createElement(Box9, { borderStyle: "single", borderColor: "cyan", paddingX: 1 }, /* @__PURE__ */ React10.createElement(
+  )) : /* @__PURE__ */ React10.createElement(React10.Fragment, null, /* @__PURE__ */ React10.createElement(Box9, { flexDirection: "column" }, messages.map((message, index) => /* @__PURE__ */ React10.createElement(Box9, { key: `${message.timestamp}-${message.role}-${index}`, flexDirection: "column", paddingX: 1 }, /* @__PURE__ */ React10.createElement(MessageItem, { message })))), /* @__PURE__ */ React10.createElement(AgentThinking, null), exitRequested && /* @__PURE__ */ React10.createElement(Box9, { paddingX: 1, marginBottom: 1 }, /* @__PURE__ */ React10.createElement(Text9, { color: "yellow", bold: true }, "Press Ctrl+C again to exit")), /* @__PURE__ */ React10.createElement(Box9, { borderStyle: "single", borderColor: "cyan", paddingX: 1 }, /* @__PURE__ */ React10.createElement(
     InputPrompt,
     {
       onSubmit: handleSubmit,
@@ -1410,7 +1413,8 @@ ${errorBlock}`;
   ))));
 }
 function MessageItem({ message }) {
-  return /* @__PURE__ */ React10.createElement(Box9, { flexDirection: "column", marginBottom: 1 }, /* @__PURE__ */ React10.createElement(Box9, null, /* @__PURE__ */ React10.createElement(Text9, { bold: true, color: message.role === "user" ? "cyan" : "green" }, message.role === "user" ? "\u{1F464} You" : "\u{1F916} Assistant"), /* @__PURE__ */ React10.createElement(Text9, { dimColor: true }, " \u2022 ", new Date(message.timestamp).toLocaleTimeString())), /* @__PURE__ */ React10.createElement(Box9, { paddingLeft: 2 }, message.metadata?.permissionDenied ? /* @__PURE__ */ React10.createElement(Text9, { color: "yellow" }, "\u26A0\uFE0F ", message.content) : /* @__PURE__ */ React10.createElement(Text9, null, message.content)), message.metadata?.steps && message.metadata.steps.length > 0 && /* @__PURE__ */ React10.createElement(Box9, { paddingLeft: 2, marginTop: 1, flexDirection: "column" }, /* @__PURE__ */ React10.createElement(Text9, { dimColor: true, bold: true }, "\u{1F527} Agent Reasoning Trace (", message.metadata.steps.filter((s) => s.type === "action").length, " ", "tools used, ", message.metadata.steps.length, " total steps)", message.metadata.tokenUsage && ` \u2022 ${message.metadata.tokenUsage.total} tokens`), /* @__PURE__ */ React10.createElement(Text9, { dimColor: true }, "Step types: ", message.metadata.steps.map((s) => s.type).join(", ")), message.metadata.steps.map((step, idx) => {
+  const isUser = message.role === "user";
+  return /* @__PURE__ */ React10.createElement(Box9, { flexDirection: "column", marginBottom: 1 }, /* @__PURE__ */ React10.createElement(Box9, null, /* @__PURE__ */ React10.createElement(Text9, { bold: true, color: isUser ? "cyan" : "green" }, isUser ? "\u{1F464} You" : "\u{1F916} Assistant"), /* @__PURE__ */ React10.createElement(Text9, { dimColor: true }, " \u2022 ", new Date(message.timestamp).toLocaleTimeString())), isUser && message.content && /* @__PURE__ */ React10.createElement(Box9, { paddingLeft: 2 }, /* @__PURE__ */ React10.createElement(Text9, { backgroundColor: "whiteBright", color: "black" }, " ", message.content, " ")), !isUser && message.metadata?.steps && message.metadata.steps.length > 0 && /* @__PURE__ */ React10.createElement(Box9, { paddingLeft: 2, marginTop: 1, flexDirection: "column" }, /* @__PURE__ */ React10.createElement(Text9, { dimColor: true, bold: true }, "\u{1F527} Agent Reasoning Trace (", message.metadata.steps.filter((s) => s.type === "action").length, " ", "tools used, ", message.metadata.steps.length, " total steps)", message.metadata.tokenUsage && ` \u2022 ${message.metadata.tokenUsage.total} tokens`), /* @__PURE__ */ React10.createElement(Text9, { dimColor: true }, "Step types: ", message.metadata.steps.map((s) => s.type).join(", ")), message.metadata.steps.map((step, idx) => {
     if (step.type === "thought") {
       return /* @__PURE__ */ React10.createElement(Box9, { key: idx, paddingLeft: 2, marginTop: 1, flexDirection: "column" }, /* @__PURE__ */ React10.createElement(Text9, { color: "blue" }, "\u{1F4AD} Thought:"), /* @__PURE__ */ React10.createElement(Text9, { dimColor: true }, `   ${step.content.slice(0, 200)}${step.content.length > 200 ? "..." : ""}`));
     }
@@ -1422,7 +1426,7 @@ function MessageItem({ message }) {
       return /* @__PURE__ */ React10.createElement(Box9, { key: idx, paddingLeft: 2, marginTop: 1, flexDirection: "column" }, /* @__PURE__ */ React10.createElement(Text9, { color: "yellow" }, "\u{1F527} Action: ", toolName), toolInput && /* @__PURE__ */ React10.createElement(Text9, { dimColor: true }, `   Input: ${typeof toolInput === "string" ? toolInput : JSON.stringify(toolInput).slice(0, 100)}`), result && /* @__PURE__ */ React10.createElement(Text9, { dimColor: true }, `   Result: ${typeof result === "string" ? result.slice(0, 200) : JSON.stringify(result).slice(0, 200)}${(typeof result === "string" ? result.length : JSON.stringify(result).length) > 200 ? "..." : ""}`));
     }
     return null;
-  }).filter(Boolean)), message.metadata?.tokenUsage && (!message.metadata.steps || message.metadata.steps.length === 0) && /* @__PURE__ */ React10.createElement(Box9, { paddingLeft: 2 }, /* @__PURE__ */ React10.createElement(Text9, { dimColor: true }, `${message.metadata.tokenUsage.total} tokens`)));
+  }).filter(Boolean)), !isUser && message.content !== "..." && /* @__PURE__ */ React10.createElement(Box9, { paddingLeft: 2, marginTop: message.metadata?.steps?.length ? 1 : 0 }, message.metadata?.permissionDenied ? /* @__PURE__ */ React10.createElement(Text9, { color: "yellow" }, "\u26A0\uFE0F ", message.content) : /* @__PURE__ */ React10.createElement(Text9, null, message.content)), message.metadata?.tokenUsage && (!message.metadata.steps || message.metadata.steps.length === 0) && /* @__PURE__ */ React10.createElement(Box9, { paddingLeft: 2 }, /* @__PURE__ */ React10.createElement(Text9, { dimColor: true }, `${message.metadata.tokenUsage.total} tokens`)));
 }
 
 // src/components/MessageList.tsx
@@ -2688,10 +2692,9 @@ ${options.context}` : this.getSystemPrompt()
           content: query
         }
       ];
-      console.log("[DEBUG ReActAgent] Messages array being sent to LLM:");
       messages.forEach((msg, i) => {
         const content = typeof msg.content === "string" ? msg.content : JSON.stringify(msg.content);
-        console.log(`  [${i}] ${msg.role}: ${content.substring(0, 150)}...`);
+        this.context.logger.debug(`  [${i}] ${msg.role}: ${content.substring(0, 150)}...`);
       });
       let finalAnswer = "";
       let reachedMaxIterations = false;
@@ -5084,8 +5087,8 @@ async function processAndStoreImages(images, context) {
     const buffer = await downloadImage(image);
     const fileType = await fileTypeFromBuffer2(buffer);
     const filename = `${uuidv45()}.${fileType?.ext}`;
-    const path13 = await context.imageGenerateStorage.upload(buffer, filename, {});
-    return path13;
+    const path15 = await context.imageGenerateStorage.upload(buffer, filename, {});
+    return path15;
   }));
 }
 async function updateQuestAndReturnMarkdown(storedImageUrls, context) {
@@ -6297,8 +6300,8 @@ async function processAndStoreImage(imageUrl, context) {
   const buffer = await downloadImage2(imageUrl);
   const fileType = await fileTypeFromBuffer3(buffer);
   const filename = `${uuidv46()}.${fileType?.ext}`;
-  const path13 = await context.imageGenerateStorage.upload(buffer, filename, {});
-  return path13;
+  const path15 = await context.imageGenerateStorage.upload(buffer, filename, {});
+  return path15;
 }
 async function updateQuestAndReturnMarkdown2(storedImagePath, context) {
   await context.onFinish?.("edit_image", storedImagePath);
@@ -8710,6 +8713,381 @@ var deleteFileTool = {
   })
 };
 
+// ../../b4m-core/packages/services/dist/src/llm/tools/implementation/bashExecute/index.js
+import { spawn } from "child_process";
+import path11 from "path";
+var DEFAULT_TIMEOUT_MS = 6e4;
+var MAX_OUTPUT_SIZE = 100 * 1024;
+var DANGEROUS_PATTERNS = [
+  // Destructive file operations
+  {
+    pattern: /\brm\s+(-[a-zA-Z]*r[a-zA-Z]*\s+|.*\s+-[a-zA-Z]*r).*\//i,
+    reason: "Recursive delete with path",
+    block: true
+  },
+  {
+    pattern: /\brm\s+(-[a-zA-Z]*f[a-zA-Z]*\s+|.*\s+-[a-zA-Z]*f).*--no-preserve-root/i,
+    reason: "Force delete without preserve root",
+    block: true
+  },
+  {
+    pattern: /\brm\s+-[a-zA-Z]*r[a-zA-Z]*f[a-zA-Z]*\s+\//i,
+    reason: "Recursive force delete on root paths",
+    block: true
+  },
+  {
+    pattern: /\brm\s+-[a-zA-Z]*f[a-zA-Z]*r[a-zA-Z]*\s+\//i,
+    reason: "Force recursive delete on root paths",
+    block: true
+  },
+  // System-level dangerous commands
+  { pattern: /\bsudo\b/i, reason: "Elevated privileges (sudo)", block: true },
+  { pattern: /\bsu\s+(-|root)/i, reason: "Switch to root user", block: true },
+  { pattern: /\bchmod\s+777\b/i, reason: "Overly permissive chmod", block: false },
+  { pattern: /\bchown\s+-R\s+root/i, reason: "Recursive chown to root", block: true },
+  // Disk/partition operations
+  { pattern: /\bmkfs\b/i, reason: "Filesystem creation", block: true },
+  { pattern: /\bfdisk\b/i, reason: "Disk partitioning", block: true },
+  { pattern: /\bdd\s+.*of=\/dev\//i, reason: "Direct disk write", block: true },
+  // Network attacks
+  { pattern: /\b(nc|netcat)\s+.*-e\s+\/bin\/(ba)?sh/i, reason: "Reverse shell attempt", block: true },
+  { pattern: /\bcurl\s+.*\|\s*(ba)?sh/i, reason: "Piping remote script to shell", block: true },
+  { pattern: /\bwget\s+.*\|\s*(ba)?sh/i, reason: "Piping remote script to shell", block: true },
+  // Fork bombs and resource exhaustion
+  { pattern: /:\(\)\s*\{\s*:\|:&\s*\}\s*;/i, reason: "Fork bomb", block: true },
+  { pattern: /\bwhile\s+true.*do.*done.*&/i, reason: "Infinite loop in background", block: false },
+  // Credential/sensitive data access
+  { pattern: /\/etc\/shadow/i, reason: "Access to shadow file", block: true },
+  { pattern: /\/etc\/passwd.*>/i, reason: "Modifying passwd file", block: true },
+  { pattern: /\baws\s+.*--profile\s+/i, reason: "AWS profile access", block: false },
+  // History/log manipulation
+  { pattern: /\bhistory\s+-c\b/i, reason: "Clearing shell history", block: false },
+  { pattern: />\s*\/var\/log\//i, reason: "Overwriting system logs", block: true },
+  // Dangerous redirects
+  { pattern: />\s*\/dev\/sda/i, reason: "Writing to block device", block: true },
+  { pattern: />\s*\/dev\/null.*2>&1.*</i, reason: "Potentially hiding output", block: false },
+  // Environment manipulation
+  { pattern: /\bexport\s+PATH\s*=\s*[^$]/i, reason: "Overwriting PATH", block: false },
+  { pattern: /\bexport\s+LD_PRELOAD/i, reason: "LD_PRELOAD manipulation", block: true },
+  // Process/system control
+  { pattern: /\bkill\s+-9\s+(-1|1)\b/i, reason: "Killing all processes", block: true },
+  { pattern: /\bkillall\s+-9\b/i, reason: "Force killing processes", block: false },
+  { pattern: /\bshutdown\b/i, reason: "System shutdown", block: true },
+  { pattern: /\breboot\b/i, reason: "System reboot", block: true },
+  { pattern: /\binit\s+[06]\b/i, reason: "System runlevel change", block: true }
+];
+var SAFE_COMMAND_PREFIXES = [
+  "ls",
+  "cat",
+  "head",
+  "tail",
+  "grep",
+  "find",
+  "echo",
+  "pwd",
+  "whoami",
+  "date",
+  "cal",
+  "wc",
+  "sort",
+  "uniq",
+  "cut",
+  "tr",
+  "sed",
+  "awk",
+  "git",
+  "npm",
+  "pnpm",
+  "yarn",
+  "node",
+  "npx",
+  "tsx",
+  "ts-node",
+  "python",
+  "python3",
+  "pip",
+  "pip3",
+  "docker",
+  "docker-compose",
+  "curl",
+  "wget",
+  // These are safe for fetching, blocked when piped to shell
+  "mkdir",
+  "touch",
+  "cp",
+  "mv",
+  // File operations (still require permission)
+  "which",
+  "whereis",
+  "type",
+  "file",
+  "stat",
+  "env",
+  "printenv",
+  "set",
+  "man",
+  "help",
+  "info",
+  "diff",
+  "comm",
+  "cmp",
+  "tar",
+  "zip",
+  "unzip",
+  "gzip",
+  "gunzip",
+  "ssh",
+  "scp",
+  "rsync",
+  // Network tools
+  "make",
+  "cmake",
+  "cargo",
+  "go",
+  "rustc",
+  "gcc",
+  "g++",
+  // Build tools
+  "jest",
+  "vitest",
+  "mocha",
+  "pytest",
+  // Test runners
+  "eslint",
+  "prettier",
+  "tsc"
+  // Linters/formatters
+];
+function checkDangerousPatterns(command) {
+  for (const { pattern, reason, block } of DANGEROUS_PATTERNS) {
+    if (pattern.test(command)) {
+      return { blocked: block, reason };
+    }
+  }
+  return { blocked: false };
+}
+function getBaseCommand(command) {
+  const trimmed = command.trim();
+  const match = trimmed.match(/^(\S+)/);
+  return match ? match[1] : "";
+}
+function isSafeCommandPrefix(command) {
+  const baseCommand = getBaseCommand(command);
+  return SAFE_COMMAND_PREFIXES.some((safe) => baseCommand === safe || baseCommand.endsWith(`/${safe}`));
+}
+async function executeBashCommand(params) {
+  const { command, cwd: relativeCwd, timeout = DEFAULT_TIMEOUT_MS } = params;
+  if (!command || command.trim().length === 0) {
+    return {
+      stdout: "",
+      stderr: "Error: Command cannot be empty",
+      exitCode: 1,
+      timedOut: false,
+      blocked: true,
+      blockedReason: "Empty command"
+    };
+  }
+  const dangerCheck = checkDangerousPatterns(command);
+  if (dangerCheck.blocked) {
+    return {
+      stdout: "",
+      stderr: `Command blocked for safety: ${dangerCheck.reason}`,
+      exitCode: 1,
+      timedOut: false,
+      blocked: true,
+      blockedReason: dangerCheck.reason
+    };
+  }
+  const baseCwd = process.cwd();
+  const targetCwd = relativeCwd ? path11.resolve(baseCwd, relativeCwd) : baseCwd;
+  const effectiveTimeout = Math.min(timeout, 5 * 60 * 1e3);
+  return new Promise((resolve3) => {
+    let stdout = "";
+    let stderr = "";
+    let timedOut = false;
+    const proc = spawn("bash", ["-c", command], {
+      cwd: targetCwd,
+      env: {
+        ...process.env,
+        // Prevent color codes that might be hard to read
+        NO_COLOR: "1",
+        FORCE_COLOR: "0"
+      },
+      stdio: ["ignore", "pipe", "pipe"]
+    });
+    const timeoutId = setTimeout(() => {
+      timedOut = true;
+      proc.kill("SIGTERM");
+      setTimeout(() => {
+        if (!proc.killed) {
+          proc.kill("SIGKILL");
+        }
+      }, 5e3);
+    }, effectiveTimeout);
+    proc.stdout.on("data", (data) => {
+      if (stdout.length < MAX_OUTPUT_SIZE) {
+        stdout += data.toString();
+        if (stdout.length > MAX_OUTPUT_SIZE) {
+          stdout = stdout.slice(0, MAX_OUTPUT_SIZE) + "\n... [output truncated]";
+        }
+      }
+    });
+    proc.stderr.on("data", (data) => {
+      if (stderr.length < MAX_OUTPUT_SIZE) {
+        stderr += data.toString();
+        if (stderr.length > MAX_OUTPUT_SIZE) {
+          stderr = stderr.slice(0, MAX_OUTPUT_SIZE) + "\n... [output truncated]";
+        }
+      }
+    });
+    proc.on("close", (exitCode) => {
+      clearTimeout(timeoutId);
+      resolve3({
+        stdout: stdout.trim(),
+        stderr: stderr.trim(),
+        exitCode,
+        timedOut,
+        blocked: false
+      });
+    });
+    proc.on("error", (error) => {
+      clearTimeout(timeoutId);
+      resolve3({
+        stdout: "",
+        stderr: `Failed to execute command: ${error.message}`,
+        exitCode: 1,
+        timedOut: false,
+        blocked: false
+      });
+    });
+  });
+}
+function formatResult(result, command) {
+  const parts = [];
+  parts.push(`$ ${command}`);
+  parts.push("");
+  if (result.blocked) {
+    parts.push(`BLOCKED: ${result.blockedReason}`);
+    parts.push("");
+    parts.push("This command was blocked for safety reasons.");
+    parts.push("If you believe this is a false positive, please run the command manually.");
+    return parts.join("\n");
+  }
+  if (result.timedOut) {
+    parts.push("WARNING: Command timed out and was terminated.");
+    parts.push("");
+  }
+  if (result.stdout) {
+    parts.push(result.stdout);
+  }
+  if (result.stderr) {
+    if (result.stdout) {
+      parts.push("");
+    }
+    parts.push("STDERR:");
+    parts.push(result.stderr);
+  }
+  if (result.exitCode !== 0 && result.exitCode !== null) {
+    parts.push("");
+    parts.push(`Exit code: ${result.exitCode}`);
+  }
+  if (!result.stdout && !result.stderr && !result.timedOut) {
+    parts.push("(command completed with no output)");
+  }
+  return parts.join("\n");
+}
+var bashExecuteTool = {
+  name: "bash_execute",
+  implementation: (context) => ({
+    toolFn: async (value) => {
+      const params = value;
+      const isSafe = isSafeCommandPrefix(params.command);
+      context.logger.info("Bash: Executing command", {
+        command: params.command,
+        cwd: params.cwd || ".",
+        timeout: params.timeout || DEFAULT_TIMEOUT_MS,
+        isSafeCommand: isSafe
+      });
+      if (context.onStart) {
+        await context.onStart("bash_execute", {
+          command: params.command,
+          cwd: params.cwd
+        });
+      }
+      try {
+        const result = await executeBashCommand(params);
+        const formattedResult = formatResult(result, params.command);
+        context.logger.info("Bash: Command completed", {
+          exitCode: result.exitCode,
+          timedOut: result.timedOut,
+          blocked: result.blocked
+        });
+        if (context.onFinish) {
+          await context.onFinish("bash_execute", {
+            command: params.command,
+            exitCode: result.exitCode,
+            blocked: result.blocked
+          });
+        }
+        return formattedResult;
+      } catch (error) {
+        context.logger.error("Bash: Command failed", error);
+        if (context.onFinish) {
+          await context.onFinish("bash_execute", {
+            command: params.command,
+            error: error instanceof Error ? error.message : "Unknown error"
+          });
+        }
+        throw error;
+      }
+    },
+    toolSchema: {
+      name: "bash_execute",
+      description: `Execute a bash command in the terminal. Use this for running shell commands, scripts, build tools, git operations, and other CLI tasks.
+
+SAFETY NOTES:
+- Commands are executed in the current working directory (or specified cwd)
+- Dangerous commands (sudo, rm -rf /, etc.) are automatically blocked
+- Commands have a default timeout of 60 seconds (max 5 minutes)
+- Output is limited to prevent overwhelming responses
+- This tool ALWAYS requires user permission before execution
+
+COMMON USE CASES:
+- Running build commands: npm run build, make, cargo build
+- Git operations: git status, git log, git diff
+- Viewing system info: ls, pwd, cat, head, tail
+- Running tests: npm test, pytest, cargo test
+- Package management: npm install, pip install
+- File operations: mkdir, cp, mv (with permission)
+
+BLOCKED OPERATIONS:
+- sudo and privilege escalation
+- Recursive deletes on system paths
+- Direct disk operations
+- Fork bombs and resource exhaustion
+- Piping remote scripts to shell`,
+      parameters: {
+        type: "object",
+        properties: {
+          command: {
+            type: "string",
+            description: "The bash command to execute. Can include pipes, redirects, and chained commands."
+          },
+          cwd: {
+            type: "string",
+            description: "Working directory for the command (optional). Can be relative or absolute path. Defaults to current directory."
+          },
+          timeout: {
+            type: "number",
+            description: "Timeout in milliseconds (optional, default: 60000, max: 300000). Command will be terminated if it exceeds this time."
+          }
+        },
+        required: ["command"]
+      }
+    }
+  })
+};
+
 // ../../b4m-core/packages/services/dist/src/llm/tools/index.js
 var tools = {
   dice_roll: diceRollTool,
@@ -8737,7 +9115,9 @@ var tools = {
   create_file: createFileTool,
   glob_files: globFilesTool,
   grep_search: grepSearchTool,
-  delete_file: deleteFileTool
+  delete_file: deleteFileTool,
+  // Shell execution
+  bash_execute: bashExecuteTool
 };
 var generateTools = (userId, user, logger2, { db }, storage, imageGenerateStorage, statusUpdate, onStart, onFinish, llm, config, model) => {
   const context = {
@@ -9012,7 +9392,7 @@ async function generateFileDeletePreview(args) {
     if (!existsSync7(args.path)) {
       return `[File does not exist: ${args.path}]`;
     }
-    const stats = await import("fs/promises").then((fs11) => fs11.stat(args.path));
+    const stats = await import("fs/promises").then((fs12) => fs12.stat(args.path));
     return `[File will be deleted]
 
 Path: ${args.path}
@@ -9025,7 +9405,7 @@ Last modified: ${stats.mtime.toLocaleString()}`;
 
 // src/utils/Logger.ts
 import fs10 from "fs/promises";
-import path11 from "path";
+import path12 from "path";
 import os from "os";
 var Logger2 = class _Logger {
   constructor() {
@@ -9048,9 +9428,9 @@ var Logger2 = class _Logger {
    */
   async initialize(sessionId) {
     this.sessionId = sessionId;
-    const debugDir = path11.join(os.homedir(), ".bike4mind", "debug");
+    const debugDir = path12.join(os.homedir(), ".bike4mind", "debug");
     await fs10.mkdir(debugDir, { recursive: true });
-    this.logFilePath = path11.join(debugDir, `${sessionId}.txt`);
+    this.logFilePath = path12.join(debugDir, `${sessionId}.txt`);
     await this.writeToFile("INFO", "=== CLI SESSION START ===");
   }
   /**
@@ -9260,12 +9640,12 @@ var Logger2 = class _Logger {
   async cleanupOldLogs() {
     if (!this.fileLoggingEnabled) return;
     try {
-      const debugDir = path11.join(os.homedir(), ".bike4mind", "debug");
+      const debugDir = path12.join(os.homedir(), ".bike4mind", "debug");
       const files = await fs10.readdir(debugDir);
       const now = Date.now();
       const thirtyDaysAgo = now - 30 * 24 * 60 * 60 * 1e3;
       for (const file of files) {
-        const filePath = path11.join(debugDir, file);
+        const filePath = path12.join(debugDir, file);
         const stats = await fs10.stat(filePath);
         if (stats.mtime.getTime() < thirtyDaysAgo) {
           await fs10.unlink(filePath);
@@ -9330,7 +9710,8 @@ var LOCAL_TOOLS = [
   "edit_file",
   "dice_roll",
   "math_evaluate",
-  "current_datetime"
+  "current_datetime",
+  "bash_execute"
 ];
 function isServerTool(toolName) {
   return SERVER_TOOLS.includes(toolName);
@@ -9360,21 +9741,21 @@ var NoOpStorage = class extends BaseStorage {
   async upload(input, destination, options) {
     return `/tmp/${destination}`;
   }
-  async download(path13) {
+  async download(path15) {
     throw new Error("Download not supported in CLI");
   }
-  async delete(path13) {
+  async delete(path15) {
   }
-  async getSignedUrl(path13) {
-    return `/tmp/${path13}`;
+  async getSignedUrl(path15) {
+    return `/tmp/${path15}`;
   }
-  getPublicUrl(path13) {
-    return `/tmp/${path13}`;
+  getPublicUrl(path15) {
+    return `/tmp/${path15}`;
   }
-  async getPreview(path13) {
-    return `/tmp/${path13}`;
+  async getPreview(path15) {
+    return `/tmp/${path15}`;
   }
-  async getMetadata(path13) {
+  async getMetadata(path15) {
     return { size: 0, contentType: "application/octet-stream" };
   }
 };
@@ -9432,6 +9813,10 @@ function wrapToolWithPermission(tool, permissionManager, showPermissionPrompt, a
         } catch (error) {
           preview = `[Could not generate preview: ${error instanceof Error ? error.message : "Unknown error"}]`;
         }
+      } else if (toolName === "bash_execute" && args?.command) {
+        const cwd = args.cwd ? ` (in ${args.cwd})` : "";
+        const timeout = args.timeout ? ` [timeout: ${args.timeout}ms]` : "";
+        preview = `$ ${args.command}${cwd}${timeout}`;
       }
       const response = await showPermissionPrompt(toolName, args, preview);
       if (response.action === "deny") {
@@ -9502,6 +9887,8 @@ function generateCliTools(userId, llm, model, permissionManager, showPermissionP
     glob_files: {},
     grep_search: {},
     delete_file: {},
+    // Shell execution (always requires permission)
+    bash_execute: {},
     // Server-side tools (executed via /api/ai/v1/tools Lambda)
     // Routed by ToolRouter to use B4M company API keys
     weather_info: {},
@@ -9567,6 +9954,7 @@ var DEFAULT_TOOL_CATEGORIES = {
   create_file: "prompt_always",
   delete_file: "prompt_always",
   shell_execute: "prompt_always",
+  bash_execute: "prompt_always",
   git_commit: "prompt_always",
   git_push: "prompt_always",
   // ===== PROMPT DEFAULT (Repository read tools) =====
@@ -9728,10 +10116,122 @@ function getEnvironmentName(configApiConfig) {
   return "Bike4Mind";
 }
 
+// src/utils/contextLoader.ts
+import * as fs11 from "fs";
+import * as path13 from "path";
+import { homedir as homedir4 } from "os";
+var CONTEXT_FILE_SIZE_LIMIT = 100 * 1024;
+var PROJECT_CONTEXT_FILES = [
+  "CLAUDE.local.md",
+  // gitignored, highest priority
+  "CLAUDE.md",
+  "AGENTS.md",
+  // cross-tool standard
+  "AI.local.md",
+  // gitignored
+  "AI.md",
+  "INSTRUCTIONS.md"
+];
+var GLOBAL_CONTEXT_FILES = ["AI.local.md", "AI.md"];
+function formatFileSize2(bytes) {
+  if (bytes < 1024) return `${bytes}B`;
+  if (bytes < 1024 * 1024) return `${(bytes / 1024).toFixed(1)}KB`;
+  return `${(bytes / (1024 * 1024)).toFixed(1)}MB`;
+}
+function tryReadContextFile(dir, filename, source) {
+  const filePath = path13.join(dir, filename);
+  try {
+    const stats = fs11.lstatSync(filePath);
+    if (stats.isDirectory()) {
+      return null;
+    }
+    if (stats.isSymbolicLink()) {
+      return {
+        error: `${source === "global" ? "Global" : "Project"} ${filename} is a symlink (not allowed for security)`
+      };
+    }
+    if (stats.size > CONTEXT_FILE_SIZE_LIMIT) {
+      return {
+        error: `${source === "global" ? "Global" : "Project"} ${filename} exceeds 100KB limit (${formatFileSize2(stats.size)})`
+      };
+    }
+    const content = fs11.readFileSync(filePath, "utf-8");
+    return {
+      filename,
+      content,
+      source,
+      path: filePath
+    };
+  } catch (err) {
+    if (err.code === "ENOENT") {
+      return null;
+    }
+    if (err.code === "EACCES") {
+      return {
+        error: `Cannot read ${source} ${filename}: permission denied`
+      };
+    }
+    return {
+      error: `Cannot read ${source} ${filename}: ${err instanceof Error ? err.message : "Unknown error"}`
+    };
+  }
+}
+function findContextFile(dir, candidates, source) {
+  for (const filename of candidates) {
+    const result = tryReadContextFile(dir, filename, source);
+    if (result === null) {
+      continue;
+    }
+    if ("error" in result) {
+      return { result: null, error: result.error };
+    }
+    return { result, error: null };
+  }
+  return { result: null, error: null };
+}
+function mergeContextContent(global, project) {
+  if (global && project) {
+    return `${global.content}
+
+---
+
+${project.content}`;
+  }
+  if (global) {
+    return global.content;
+  }
+  if (project) {
+    return project.content;
+  }
+  return "";
+}
+async function loadContextFiles(projectDir) {
+  const errors = [];
+  const globalDir = path13.join(homedir4(), ".bike4mind");
+  const projectDirectory = projectDir || process.cwd();
+  const [globalResult, projectResult] = await Promise.all([
+    Promise.resolve(findContextFile(globalDir, GLOBAL_CONTEXT_FILES, "global")),
+    Promise.resolve(findContextFile(projectDirectory, PROJECT_CONTEXT_FILES, "project"))
+  ]);
+  if (globalResult.error) {
+    errors.push(globalResult.error);
+  }
+  if (projectResult.error) {
+    errors.push(projectResult.error);
+  }
+  const mergedContent = mergeContextContent(globalResult.result, projectResult.result);
+  return {
+    globalContext: globalResult.result,
+    projectContext: projectResult.result,
+    mergedContent,
+    errors
+  };
+}
+
 // ../../b4m-core/packages/mcp/dist/src/client.js
 import { StdioClientTransport } from "@modelcontextprotocol/sdk/client/stdio.js";
 import { Client as Client2 } from "@modelcontextprotocol/sdk/client/index.js";
-import path12 from "path";
+import path14 from "path";
 import { existsSync as existsSync8, readdirSync as readdirSync3 } from "fs";
 var MCPClient = class {
   // Note: This class handles MCP server communication with repository filtering
@@ -9772,16 +10272,16 @@ var MCPClient = class {
         const root = process.env.INIT_CWD || process.cwd();
         const candidatePaths = [
           // When running from SST Lambda with node_modules structure (copyFiles)
-          path12.join(root, `node_modules/@bike4mind/mcp/dist/src/${this.serverName}/index.js`),
+          path14.join(root, `node_modules/@bike4mind/mcp/dist/src/${this.serverName}/index.js`),
           // When running from SST Lambda deployed environment (/var/task)
-          path12.join(root, `b4m-core/packages/mcp/dist/src/${this.serverName}/index.js`),
+          path14.join(root, `b4m-core/packages/mcp/dist/src/${this.serverName}/index.js`),
           // When running from SST Lambda (.sst/artifacts/mcpHandler-dev), navigate to monorepo root (3 levels up)
-          path12.join(root, `../../../b4m-core/packages/mcp/dist/src/${this.serverName}/index.js`),
+          path14.join(root, `../../../b4m-core/packages/mcp/dist/src/${this.serverName}/index.js`),
           // When running from packages/client (Next.js app), navigate to monorepo root (2 levels up)
-          path12.join(root, `../../b4m-core/packages/mcp/dist/src/${this.serverName}/index.js`),
+          path14.join(root, `../../b4m-core/packages/mcp/dist/src/${this.serverName}/index.js`),
           // Original paths (backward compatibility)
-          path12.join(root, `/b4m-core/packages/mcp/dist/src/${this.serverName}/index.js`),
-          path12.join(root, "core", "mcp", "servers", this.serverName, "dist", "index.js")
+          path14.join(root, `/b4m-core/packages/mcp/dist/src/${this.serverName}/index.js`),
+          path14.join(root, "core", "mcp", "servers", this.serverName, "dist", "index.js")
         ];
         const serverScriptPath = candidatePaths.find((p) => existsSync8(p));
         if (!serverScriptPath) {
@@ -10585,7 +11085,7 @@ import { isAxiosError as isAxiosError2 } from "axios";
 // package.json
 var package_default = {
   name: "@bike4mind/cli",
-  version: "0.2.8-feat-cli-session-resume.17148+30840381b",
+  version: "0.2.10-dowgrade-mcp-sdk.17228+eeed70576",
   type: "module",
   description: "Interactive CLI tool for Bike4Mind with ReAct agents",
   license: "UNLICENSED",
@@ -10640,7 +11140,7 @@ var package_default = {
     "@google/generative-ai": "^0.21.0",
     "@joplin/turndown-plugin-gfm": "^1.0.62",
     "@mendable/firecrawl-js": "^1.29.3",
-    "@modelcontextprotocol/sdk": "^1.7.0",
+    "@modelcontextprotocol/sdk": "1.20.1",
     "@octokit/rest": "^22.0.0",
     "@opensearch-project/opensearch": "2.11.0",
     "async-mutex": "^0.5.0",
@@ -10688,11 +11188,11 @@ var package_default = {
   },
   devDependencies: {
     "@bike4mind/agents": "0.1.0",
-    "@bike4mind/common": "2.38.2-feat-cli-session-resume.17148+30840381b",
-    "@bike4mind/mcp": "1.20.2-feat-cli-session-resume.17148+30840381b",
-    "@bike4mind/services": "2.33.2-feat-cli-session-resume.17148+30840381b",
-    "@bike4mind/utils": "2.1.3-feat-cli-session-resume.17148+30840381b",
-    "@types/better-sqlite3": "^7.6.12",
+    "@bike4mind/common": "2.39.1-dowgrade-mcp-sdk.17228+eeed70576",
+    "@bike4mind/mcp": "1.20.4-dowgrade-mcp-sdk.17228+eeed70576",
+    "@bike4mind/services": "2.34.2-dowgrade-mcp-sdk.17228+eeed70576",
+    "@bike4mind/utils": "2.1.4-dowgrade-mcp-sdk.17228+eeed70576",
+    "@types/better-sqlite3": "^7.6.13",
     "@types/diff": "^5.0.9",
     "@types/jsonwebtoken": "^9.0.4",
     "@types/node": "^22.9.0",
@@ -10704,7 +11204,7 @@ var package_default = {
     typescript: "^5.9.3",
     vitest: "^3.2.4"
   },
-  gitHead: "30840381b429950872f0bb0c7eb7ea4408179cff"
+  gitHead: "eeed70576ada327d03166880bbd1d1d32f7d4e7c"
 };
 
 // src/config/constants.ts
@@ -10956,6 +11456,24 @@ function CliApp() {
       }
       const allTools = [...b4mTools, ...mcpTools];
       console.log(`\u2705 Total: ${allTools.length} tool(s) available`);
+      const projectDir = state.configStore.getProjectConfigDir();
+      const contextResult = await loadContextFiles(projectDir);
+      if (contextResult.globalContext) {
+        console.log(`\u{1F4C4} Global context: ${contextResult.globalContext.filename}`);
+      }
+      if (contextResult.projectContext) {
+        console.log(`\u{1F4C4} Project context: ${contextResult.projectContext.filename}`);
+      }
+      for (const error of contextResult.errors) {
+        console.log(`\u26A0\uFE0F  Context file error: ${error}`);
+      }
+      const contextSection = contextResult.mergedContent ? `
+
+## Project Context
+
+Follow these project-specific instructions:
+
+${contextResult.mergedContent}` : "";
       const cliSystemPrompt = `You are an autonomous AI assistant with access to tools. Your job is to help users by taking action and solving problems proactively.
 
 CORE BEHAVIOR:
@@ -10985,7 +11503,7 @@ EXAMPLES:
 - "enhance README" \u2192 file_read \u2192 generate \u2192 create_file
 - "what packages installed?" \u2192 glob_files "**/package.json" \u2192 file_read
 
-Remember: Use context from previous messages to understand follow-up questions.`;
+Remember: Use context from previous messages to understand follow-up questions.${contextSection}`;
       const maxIterations = config.preferences.maxIterations === null ? 999999 : config.preferences.maxIterations;
       const agent = new ReActAgent({
         userId: config.userId,
@@ -11040,6 +11558,29 @@ Remember: Use context from previous messages to understand follow-up questions.`
       console.log("\u{1F4A1} Run /login to authenticate with your B4M account.\n");
       return;
     }
+    const currentSteps = [];
+    const stepHandler = (step) => {
+      currentSteps.push(step);
+      const currentSession = useCliStore.getState().session;
+      if (currentSession) {
+        const messages = [...currentSession.messages];
+        const lastMessage = messages[messages.length - 1];
+        if (lastMessage && lastMessage.role === "assistant") {
+          messages[messages.length - 1] = {
+            ...lastMessage,
+            metadata: {
+              ...lastMessage.metadata,
+              steps: [...currentSteps]
+            }
+          };
+          setStoreSession({
+            ...currentSession,
+            messages
+          });
+        }
+      }
+    };
+    state.agent.on("action", stepHandler);
     try {
       let messageContent = message;
       let userMessageContent = message;
@@ -11053,6 +11594,21 @@ Remember: Use context from previous messages to understand follow-up questions.`
         content: userMessageContent,
         timestamp: (/* @__PURE__ */ new Date()).toISOString()
       };
+      const pendingAssistantMessage = {
+        role: "assistant",
+        content: "...",
+        timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+        metadata: {
+          steps: []
+        }
+      };
+      const sessionWithMessages = {
+        ...state.session,
+        messages: [...state.session.messages, userMessage, pendingAssistantMessage],
+        updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+      };
+      setState((prev) => ({ ...prev, session: sessionWithMessages }));
+      setStoreSession(sessionWithMessages);
       const recentMessages = state.session.messages.slice(-20);
       const previousMessages = recentMessages.filter((msg) => msg.role === "user" || msg.role === "assistant").map((msg) => ({
         role: msg.role,
@@ -11066,26 +11622,28 @@ Remember: Use context from previous messages to understand follow-up questions.`
         console.log("\n\u26A0\uFE0F  Action denied by user\n");
       }
       const successfulToolCalls = result.steps.filter((s) => s.type === "observation").length;
-      const assistantMessage = {
+      const currentSession = useCliStore.getState().session;
+      if (!currentSession) return;
+      const finalMessages = [...currentSession.messages];
+      const finalAssistantMessage = {
         role: "assistant",
         content: result.finalAnswer,
-        timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+        timestamp: pendingAssistantMessage.timestamp,
         metadata: {
           tokenUsage: {
             prompt: 0,
-            // TODO: Extract from result
             completion: 0,
             total: result.completionInfo.totalTokens
           },
           steps: result.steps,
           // Complete history: thoughts, actions, observations
           permissionDenied
-          // Mark if this ended due to permission denial
         }
       };
+      finalMessages[finalMessages.length - 1] = finalAssistantMessage;
       const updatedSession = {
-        ...state.session,
-        messages: [...state.session.messages, userMessage, assistantMessage],
+        ...currentSession,
+        messages: finalMessages,
         updatedAt: (/* @__PURE__ */ new Date()).toISOString(),
         metadata: {
           ...state.session.metadata,
@@ -11105,6 +11663,8 @@ Remember: Use context from previous messages to understand follow-up questions.`
         }
       }
       console.error("Error processing message:", error);
+    } finally {
+      state.agent.off("action", stepHandler);
     }
   };
   const handleImageDetected = async (imageData) => {

package/dist/{llmMarkdownGenerator-UQXKK2AS.js → llmMarkdownGenerator-LXUGJ7QH.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   CurationArtifactType
-} from "./chunk-H6SHASMZ.js";
+} from "./chunk-DJPXSSP4.js";
 import "./chunk-PDX44BCA.js";
 
 // ../../b4m-core/packages/services/dist/src/notebookCurationService/llmMarkdownGenerator.js

package/dist/{markdownGenerator-FLLZFXMT.js → markdownGenerator-IMDG6OX6.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   CurationArtifactType
-} from "./chunk-H6SHASMZ.js";
+} from "./chunk-DJPXSSP4.js";
 import "./chunk-PDX44BCA.js";
 
 // ../../b4m-core/packages/services/dist/src/notebookCurationService/markdownGenerator.js

package/dist/{mementoService-LVFQ5XAW.js → mementoService-TURUS3OH.js}

@@ -2,10 +2,10 @@
 import {
   findMostSimilarMemento,
   getRelevantMementos
-} from "./chunk-3CCBDIFR.js";
-import "./chunk-DNSBC3LO.js";
+} from "./chunk-GO75FMLY.js";
+import "./chunk-GCVIRGIN.js";
 import "./chunk-AMDXHL6S.js";
-import "./chunk-H6SHASMZ.js";
+import "./chunk-DJPXSSP4.js";
 import "./chunk-PDX44BCA.js";
 export {
   findMostSimilarMemento,

package/dist/{src-OH5AAQEW.js → src-6ZRXGE5J.js}

@@ -120,7 +120,7 @@ import {
   validateMermaidSyntax,
   warmUpSettingsCache,
   withRetry
-} from "./chunk-DNSBC3LO.js";
+} from "./chunk-GCVIRGIN.js";
 import {
   Logger,
   NotificationDeduplicator,
@@ -129,7 +129,7 @@ import {
   postLowCreditsNotificationToSlack,
   postMessageToSlack
 } from "./chunk-AMDXHL6S.js";
-import "./chunk-H6SHASMZ.js";
+import "./chunk-DJPXSSP4.js";
 import "./chunk-PDX44BCA.js";
 export {
   AWSBackend,

package/dist/{src-OYQXRLTM.js → src-YNY32ELR.js}

@@ -186,6 +186,7 @@ import {
   SessionEvents,
   SettingKeySchema,
   SettingTypeSchema,
+  SlackEvents,
   SpeechToTextModels,
   SpiderCompleteAction,
   SpiderErrorAction,
@@ -292,7 +293,7 @@ import {
   validateQuestMasterArtifactV2,
   validateReactArtifactV2,
   validateSvgArtifactV2
-} from "./chunk-H6SHASMZ.js";
+} from "./chunk-DJPXSSP4.js";
 import "./chunk-PDX44BCA.js";
 export {
   ALL_IMAGE_MODELS,
@@ -481,6 +482,7 @@ export {
   SessionEvents,
   SettingKeySchema,
   SettingTypeSchema,
+  SlackEvents,
   SpeechToTextModels,
   SpiderCompleteAction,
   SpiderErrorAction,

package/dist/{subtractCredits-75VT7HP2.js → subtractCredits-GOVKM3IR.js}

@@ -2,10 +2,10 @@
 import {
   SubtractCreditsSchema,
   subtractCredits
-} from "./chunk-LIRY24M5.js";
-import "./chunk-DNSBC3LO.js";
+} from "./chunk-VZU4Z7WI.js";
+import "./chunk-GCVIRGIN.js";
 import "./chunk-AMDXHL6S.js";
-import "./chunk-H6SHASMZ.js";
+import "./chunk-DJPXSSP4.js";
 import "./chunk-PDX44BCA.js";
 export {
   SubtractCreditsSchema,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bike4mind/cli",
-  "version": "0.2.8-feat-cli-session-resume.17148+30840381b",
+  "version": "0.2.10-dowgrade-mcp-sdk.17228+eeed70576",
   "type": "module",
   "description": "Interactive CLI tool for Bike4Mind with ReAct agents",
   "license": "UNLICENSED",
@@ -55,7 +55,7 @@
     "@google/generative-ai": "^0.21.0",
     "@joplin/turndown-plugin-gfm": "^1.0.62",
     "@mendable/firecrawl-js": "^1.29.3",
-    "@modelcontextprotocol/sdk": "^1.7.0",
+    "@modelcontextprotocol/sdk": "1.20.1",
     "@octokit/rest": "^22.0.0",
     "@opensearch-project/opensearch": "2.11.0",
     "async-mutex": "^0.5.0",
@@ -103,11 +103,11 @@
   },
   "devDependencies": {
     "@bike4mind/agents": "0.1.0",
-    "@bike4mind/common": "2.38.2-feat-cli-session-resume.17148+30840381b",
-    "@bike4mind/mcp": "1.20.2-feat-cli-session-resume.17148+30840381b",
-    "@bike4mind/services": "2.33.2-feat-cli-session-resume.17148+30840381b",
-    "@bike4mind/utils": "2.1.3-feat-cli-session-resume.17148+30840381b",
-    "@types/better-sqlite3": "^7.6.12",
+    "@bike4mind/common": "2.39.1-dowgrade-mcp-sdk.17228+eeed70576",
+    "@bike4mind/mcp": "1.20.4-dowgrade-mcp-sdk.17228+eeed70576",
+    "@bike4mind/services": "2.34.2-dowgrade-mcp-sdk.17228+eeed70576",
+    "@bike4mind/utils": "2.1.4-dowgrade-mcp-sdk.17228+eeed70576",
+    "@types/better-sqlite3": "^7.6.13",
     "@types/diff": "^5.0.9",
     "@types/jsonwebtoken": "^9.0.4",
     "@types/node": "^22.9.0",
@@ -119,5 +119,5 @@
     "typescript": "^5.9.3",
     "vitest": "^3.2.4"
   },
-  "gitHead": "30840381b429950872f0bb0c7eb7ea4408179cff"
+  "gitHead": "eeed70576ada327d03166880bbd1d1d32f7d4e7c"
 }