@bike4mind/cli 0.6.1 → 0.8.0

package/dist/{tools-BUs_OkJc.mjs → tools-Dg1HL5PO.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { $ as RechartsChartTypeList, A as ImageGenerationUsageTransaction, At as secureParameters, B as NotFoundError, C as FileEvents, Ct as getMcpProviderMetadata, D as GenericCreditAddTransaction, Dt as obfuscateApiKey, E as GenerateImageToolCallSchema, Et as isGPTImageModel, F as KnowledgeType, G as ProfileEvents, H as OpenAIImageGenerationInput, I as LLMEvents, J as PurchaseTransaction, K as ProjectEvents, L as MiscEvents, M as InboxEvents, N as InviteEvents, Nt as CollectionType, O as GenericCreditDeductTransaction, Ot as resolveNavigationIntents, P as InviteType, Q as ReceivedCreditTransaction, R as ModalEvents, S as FeedbackEvents, St as getDataLakeTags, T as GEMINI_IMAGE_MODELS, Tt as isGPTImage2Model, U as Permission, V as OpenAIEmbeddingModel, W as PermissionDeniedError, X as REASONING_SUPPORTED_MODELS, Y as QuestMasterParamsSchema, Z as RealtimeVoiceUsageTransaction, _ as CompletionApiUsageTransaction, _t as VideoModels, a as ApiKeyEvents, at as SessionEvents, b as FIXED_TEMPERATURE_MODELS, bt as b4mLLMTools, c as AppFileEvents, ct as SupportedFabFileMimeTypes, d as BFL_IMAGE_MODELS, dt as TextGenerationUsageTransaction, et as RegInviteEvents, f as BFL_SAFETY_TOLERANCE, ft as ToolUsageTransaction, g as ChatModels, gt as VideoGenerationUsageTransaction, h as ChatCompletionCreateInputSchema, ht as VIDEO_SIZE_CONSTRAINTS, i as AiEvents, it as ResearchTaskType, j as ImageModels, k as ImageEditUsageTransaction, kt as sanitizeTelemetryError, l as ArtifactTypeSchema, lt as TagType, mt as UiNavigationEvents, n as logger, nt as ResearchTaskExecutionType, o as ApiKeyScope, ot as SpeechToTextModels, p as BedrockEmbeddingModel, pt as TransferCreditTransaction, q as PromptMetaZodSchema, r as ALERT_THRESHOLDS, rt as ResearchTaskPeriodicFrequencyType, s as ApiKeyType, st as SubscriptionCreditTransaction, t as ConfigStore, tt as ResearchModeParamsSchema, u as AuthEvents, ut as TaskScheduleHandler, v as DashboardParamsSchema, vt as VoyageAIEmbeddingModel, w as FriendshipEvents, wt as getViewById, x as FavoriteDocumentType, xt as getAccessibleDataLakes, y as ElabsEvents, yt as XAI_IMAGE_MODELS, z as ModelBackend } from "./ConfigStore-Dt6utdSA.mjs";
+import { $ as RechartsChartTypeList, A as ImageGenerationUsageTransaction, At as secureParameters, B as NotFoundError, C as FileEvents, Ct as getMcpProviderMetadata, D as GenericCreditAddTransaction, Dt as obfuscateApiKey, E as GenerateImageToolCallSchema, Et as isGPTImageModel, F as KnowledgeType, G as ProfileEvents, H as OpenAIImageGenerationInput, I as LLMEvents, J as PurchaseTransaction, K as ProjectEvents, L as MiscEvents, M as InboxEvents, N as InviteEvents, Nt as CollectionType, O as GenericCreditDeductTransaction, Ot as resolveNavigationIntents, P as InviteType, Q as ReceivedCreditTransaction, R as ModalEvents, S as FeedbackEvents, St as getDataLakeTags, T as GEMINI_IMAGE_MODELS, Tt as isGPTImage2Model, U as Permission, V as OpenAIEmbeddingModel, W as PermissionDeniedError, X as REASONING_SUPPORTED_MODELS, Y as QuestMasterParamsSchema, Z as RealtimeVoiceUsageTransaction, _ as CompletionApiUsageTransaction, _t as VideoModels, a as ApiKeyEvents, at as SessionEvents, b as FIXED_TEMPERATURE_MODELS, bt as b4mLLMTools, c as AppFileEvents, ct as SupportedFabFileMimeTypes, d as BFL_IMAGE_MODELS, dt as TextGenerationUsageTransaction, et as RegInviteEvents, f as BFL_SAFETY_TOLERANCE, ft as ToolUsageTransaction, g as ChatModels, gt as VideoGenerationUsageTransaction, h as ChatCompletionCreateInputSchema, ht as VIDEO_SIZE_CONSTRAINTS, i as AiEvents, it as ResearchTaskType, j as ImageModels, k as ImageEditUsageTransaction, kt as sanitizeTelemetryError, l as ArtifactTypeSchema, lt as TagType, mt as UiNavigationEvents, n as logger, nt as ResearchTaskExecutionType, o as ApiKeyScope, ot as SpeechToTextModels, p as BedrockEmbeddingModel, pt as TransferCreditTransaction, q as PromptMetaZodSchema, r as ALERT_THRESHOLDS, rt as ResearchTaskPeriodicFrequencyType, s as ApiKeyType, st as SubscriptionCreditTransaction, t as ConfigStore, tt as ResearchModeParamsSchema, u as AuthEvents, ut as TaskScheduleHandler, v as DashboardParamsSchema, vt as VoyageAIEmbeddingModel, w as FriendshipEvents, wt as getViewById, x as FavoriteDocumentType, xt as getAccessibleDataLakes, y as ElabsEvents, yt as XAI_IMAGE_MODELS, z as ModelBackend } from "./ConfigStore-Bj1IOvWn.mjs";
 import { n as isPathAllowed, t as assertPathAllowed } from "./pathValidation-CIytuhr3-Dt5dntLx.mjs";
 import { execFile, execFileSync, spawn } from "child_process";
 import { createHash, randomBytes } from "crypto";
@@ -1906,11 +1906,17 @@ var ReActAgent = class extends EventEmitter {
 	iterations = 0;
 	/** Whether runIteration() has been initialized (messages built, state reset) */
 	iterationInitialized = false;
+	/**
+	* Length of the initial messages array (system + previousMessages + user query)
+	* before any ReAct iteration messages are appended. Used by trimConversationHistory
+	* to protect the conversation prefix from being mistaken for iteration nudges.
+	*/
+	initialMessageCount = 0;
 	constructor(context) {
 		super();
 		this.context = {
 			...context,
-			maxIterations: context.maxIterations ?? 5,
+			maxIterations: context.maxIterations ?? 50,
 			maxTokens: context.maxTokens ?? 4096,
 			temperature: context.temperature ?? .7
 		};
@@ -1933,11 +1939,13 @@ var ReActAgent = class extends EventEmitter {
 		this.toolCallCount = 0;
 		this.confidenceLog = [];
 		this.iterationConfidences = [];
-		const maxIterations = options.maxIterations ?? this.context.maxIterations ?? 5;
+		const maxIterations = options.maxIterations ?? this.context.maxIterations ?? 50;
 		const temperature = options.temperature ?? this.context.temperature ?? .7;
 		const maxTokens = options.maxTokens ?? this.context.maxTokens ?? 4096;
+		const maxTotalTokens = options.maxTotalTokens ?? this.context.maxTotalTokens;
 		const maxHistoryIterations = options.maxHistoryIterations ?? 4;
 		let iterations = 0;
+		let reachedMaxTotalTokens = false;
 		try {
 			const messages = [
 				{
@@ -1951,6 +1959,7 @@ var ReActAgent = class extends EventEmitter {
 				}
 			];
 			this.messages = messages;
+			this.initialMessageCount = messages.length;
 			messages.forEach((msg, i) => {
 				const content = typeof msg.content === "string" ? msg.content : JSON.stringify(msg.content);
 				this.context.logger.debug(`  [${i}] ${msg.role}: ${content.substring(0, 150)}...`);
@@ -1987,7 +1996,7 @@ var ReActAgent = class extends EventEmitter {
 				const processedToolIds = /* @__PURE__ */ new Set();
 				let hadToolCalls = false;
 				if (maxHistoryIterations > 0 && iterations > 1) {
-					trimConversationHistory(messages, maxHistoryIterations);
+					trimConversationHistory(messages, maxHistoryIterations, this.initialMessageCount);
 					trimSteps(this.steps, maxHistoryIterations);
 				}
 				const cacheStrategy = options.enableCaching ? {
@@ -2119,6 +2128,18 @@ var ReActAgent = class extends EventEmitter {
 					role: "user",
 					content: `Based on the tool results above, please provide a complete answer. If I asked for multiple things, make sure to address all of them.`
 				});
+				if (maxTotalTokens !== void 0 && this.totalTokens >= maxTotalTokens && !iterationComplete) {
+					reachedMaxTotalTokens = true;
+					finalAnswer = currentText.trim() || `I stopped after reaching the cumulative token ceiling (${this.totalTokens}/${maxTotalTokens}) without arriving at a final answer.`;
+					const finalStep = {
+						type: "final_answer",
+						content: finalAnswer,
+						metadata: { timestamp: Date.now() }
+					};
+					this.steps.push(finalStep);
+					this.emit("final_answer", finalStep);
+					break;
+				}
 				if (iterations >= maxIterations) {
 					reachedMaxIterations = true;
 					finalAnswer = currentText.trim() || `I reached the maximum number of iterations (${iterations}/${maxIterations}) without arriving at a final answer.`;
@@ -2147,6 +2168,7 @@ var ReActAgent = class extends EventEmitter {
 					iterations,
 					toolCalls: this.toolCallCount,
 					reachedMaxIterations,
+					reachedMaxTotalTokens: reachedMaxTotalTokens || void 0,
 					averageConfidence: avgConfidence,
 					minConfidence,
 					confidenceLog: this.confidenceLog.length > 0 ? this.confidenceLog : void 0
@@ -2265,7 +2287,8 @@ Remember: You are an autonomous AGENT. Act independently and solve problems proa
 			totalCredits: this.totalCredits,
 			toolCallCount: this.toolCallCount,
 			confidenceLog: structuredClone(this.confidenceLog),
-			iterationConfidences: [...this.iterationConfidences]
+			iterationConfidences: [...this.iterationConfidences],
+			initialMessageCount: this.initialMessageCount
 		};
 	}
 	/**
@@ -2290,6 +2313,7 @@ Remember: You are an autonomous AGENT. Act independently and solve problems proa
 		this.toolCallCount = checkpoint.toolCallCount;
 		this.confidenceLog = structuredClone(checkpoint.confidenceLog);
 		this.iterationConfidences = [...checkpoint.iterationConfidences];
+		this.initialMessageCount = checkpoint.initialMessageCount ?? this.messages.length;
 		this.observationQueue = [];
 		this.iterationInitialized = true;
 	}
@@ -2325,9 +2349,10 @@ Remember: You are an autonomous AGENT. Act independently and solve problems proa
 	* regressing the battle-tested run() path in this PR.
 	*/
 	async runIteration(query, options = {}) {
-		const maxIterations = options.maxIterations ?? this.context.maxIterations ?? 5;
+		const maxIterations = options.maxIterations ?? this.context.maxIterations ?? 50;
 		const temperature = options.temperature ?? this.context.temperature ?? .7;
 		const maxTokens = options.maxTokens ?? this.context.maxTokens ?? 4096;
+		const maxTotalTokens = options.maxTotalTokens ?? this.context.maxTotalTokens;
 		if (!this.iterationInitialized) {
 			if (!query) throw new Error("query is required on the first call to runIteration(). Pass the user query, or call fromCheckpoint() first to resume.");
 			this.steps = [];
@@ -2352,6 +2377,7 @@ Remember: You are an autonomous AGENT. Act independently and solve problems proa
 					content: query
 				}
 			];
+			this.initialMessageCount = this.messages.length;
 			this.iterationInitialized = true;
 		}
 		if (this.iterations >= maxIterations) {
@@ -2393,7 +2419,7 @@ Remember: You are an autonomous AGENT. Act independently and solve problems proa
 			this.context.logger.debug(`[ReActAgent] Starting iteration ${this.iterations}/${maxIterations}`);
 			const maxHistoryIterations = options.maxHistoryIterations ?? 4;
 			if (maxHistoryIterations > 0 && this.iterations > 1) {
-				trimConversationHistory(this.messages, maxHistoryIterations);
+				trimConversationHistory(this.messages, maxHistoryIterations, this.initialMessageCount);
 				trimSteps(this.steps, maxHistoryIterations);
 			}
 			let iterationComplete = false;
@@ -2540,6 +2566,25 @@ Remember: You are an autonomous AGENT. Act independently and solve problems proa
 				role: "user",
 				content: "Based on the tool results above, please provide a complete answer. If I asked for multiple things, make sure to address all of them."
 			});
+			if (!iterationComplete && maxTotalTokens !== void 0 && this.totalTokens >= maxTotalTokens) {
+				finalAnswer = currentText.trim() || `I stopped after reaching the cumulative token ceiling (${this.totalTokens}/${maxTotalTokens}) without arriving at a final answer.`;
+				const ceilingStep = {
+					type: "final_answer",
+					content: finalAnswer,
+					metadata: { timestamp: Date.now() }
+				};
+				this.steps.push(ceilingStep);
+				iterationSteps.push(ceilingStep);
+				this.emit("final_answer", ceilingStep);
+				return {
+					step: ceilingStep,
+					allSteps: iterationSteps,
+					isComplete: true,
+					reachedMaxIterations: false,
+					reachedMaxTotalTokens: true,
+					checkpoint: this.toCheckpoint()
+				};
+			}
 			if (!iterationComplete && this.iterations >= maxIterations) {
 				finalAnswer = currentText.trim() || `I reached the maximum number of iterations (${this.iterations}/${maxIterations}) without arriving at a final answer.`;
 				const maxStep = {
@@ -2671,10 +2716,19 @@ Remember: You are an autonomous AGENT. Act independently and solve problems proa
 		return .7;
 	}
 	/**
-	* Parse tool arguments, handling both string and object forms
+	* Parse tool arguments, handling both string and object forms.
+	*
+	* Recovers from common malformed-JSON patterns models emit before failing:
+	* - Trailing commas before `]` or `}` (frequent across providers)
+	* - Markdown code fences wrapping the JSON (`` ```json ... ``` ``)
+	*
+	* If recovery succeeds, logs at debug level so provider-specific patterns
+	* can be tracked. If recovery fails, re-throws the original parse error
+	* so the failure mode stays visible.
 	*/
 	parseToolArguments(args) {
-		return typeof args === "string" ? JSON.parse(args) : args;
+		if (typeof args !== "string") return args;
+		return parseToolArgsLenient(args, this.context.logger);
 	}
 	/**
 	* Execute a tool and return the result as a string.
@@ -2715,6 +2769,64 @@ Remember: You are an autonomous AGENT. Act independently and solve problems proa
 	}
 };
 /**
+* Parse JSON tool arguments with recovery for common LLM mistakes.
+*
+* Strategy: try standard parse first (the happy path, no allocation). On
+* failure, attempt targeted fixes one at a time and retry. Each recovery
+* step is conservative — it only handles patterns that have a low risk of
+* silently corrupting valid input.
+*
+* Exported for direct use and unit testing.
+*/
+function parseToolArgsLenient(args, logger) {
+	try {
+		return JSON.parse(args);
+	} catch (originalError) {
+		const recoveries = [
+			{
+				name: "strip-code-fence",
+				transform: stripCodeFence
+			},
+			{
+				name: "strip-trailing-commas",
+				transform: stripTrailingCommas
+			},
+			{
+				name: "strip-code-fence+strip-trailing-commas",
+				transform: (s) => stripTrailingCommas(stripCodeFence(s))
+			}
+		];
+		for (const { name, transform } of recoveries) {
+			const candidate = transform(args);
+			if (candidate === args) continue;
+			try {
+				const result = JSON.parse(candidate);
+				logger?.debug?.(`[ReActAgent] Recovered malformed tool args via ${name}`);
+				return result;
+			} catch {}
+		}
+		throw originalError;
+	}
+}
+/**
+* Remove a wrapping markdown code fence, e.g. `` ```json\n{...}\n``` ``.
+* Preserves input if no recognizable fence is found.
+*/
+function stripCodeFence(input) {
+	const fenceMatch = input.trim().match(/^```(?:json|JSON)?\s*\n?([\s\S]*?)\n?```$/);
+	return fenceMatch ? fenceMatch[1].trim() : input;
+}
+/**
+* Strip commas that immediately precede `}` or `]` (with optional whitespace).
+* Conservative: doesn't touch commas inside strings because the regex only
+* matches commas followed by whitespace and a closing bracket.
+*
+* Preserves input if no trailing-comma pattern is found.
+*/
+function stripTrailingCommas(input) {
+	return input.replace(/,(\s*[}\]])/g, "$1");
+}
+/**
 * Trim the steps array to keep only the last N iterations worth of steps.
 *
 * Each iteration produces 1-5 steps (thought, action(s), observation(s), final_answer).
@@ -2731,27 +2843,27 @@ function trimSteps(steps, maxIterations) {
 	}
 }
 /**
-* Trim conversation history to keep only the initial messages (system + user query)
-* plus the last N iterations of assistant/tool/user messages.
+* Trim conversation history to keep the protected prefix (system + previousMessages
+* + current user query) plus the last N iterations of assistant/tool/user messages.
 *
 * Each ReAct iteration adds ~3-5 messages (assistant with tool calls, tool results,
 * user nudge). Keeping all iterations causes input tokens to grow quadratically.
 * Trimming to the last N iterations keeps the agent grounded in recent context
 * while dramatically reducing token accumulation.
+*
+* @param protectedPrefixCount - Length of the initial messages array before any
+*   ReAct iteration messages were appended. Required when previousMessages is
+*   used, otherwise prior-turn user messages get mistaken for iteration nudges
+*   and trimmed away (including, eventually, the current user query itself).
 */
-function trimConversationHistory(messages, maxIterations) {
-	let dynamicStart = 0;
-	for (let i = 0; i < messages.length; i++) if (messages[i].role === "user") {
-		dynamicStart = i + 1;
-		break;
-	}
+function trimConversationHistory(messages, maxIterations, protectedPrefixCount) {
+	const dynamicStart = protectedPrefixCount;
 	const dynamicMessages = messages.slice(dynamicStart);
 	if (dynamicMessages.length === 0) return;
 	const nudgeIndices = [];
 	for (let i = 0; i < dynamicMessages.length; i++) if (dynamicMessages[i].role === "user" && typeof dynamicMessages[i].content === "string") nudgeIndices.push(i);
 	if (nudgeIndices.length <= maxIterations) return;
-	const cutoffNudgeIndex = nudgeIndices[nudgeIndices.length - maxIterations];
-	const keepFrom = dynamicStart + cutoffNudgeIndex;
+	const keepFrom = dynamicStart + nudgeIndices[nudgeIndices.length - maxIterations];
 	messages.splice(dynamicStart, keepFrom - dynamicStart);
 }
 //#endregion
@@ -2911,6 +3023,84 @@ const TOOL_WRITE_TODOS = "write_todos";
 const TOOL_CREATE_DYNAMIC_AGENT = "create_dynamic_agent";
 const EXPLORE_SUBAGENT_TYPE = "explore";
 /**
+* Plan-mode section: tells the model that write tools are blocked and where to put the plan.
+* Appended dynamically when the user cycles into plan mode via Shift+Tab.
+*
+* The phased workflow (understand → clarify → design → present) mirrors Claude Code's
+* plan-mode prompting: research before designing, ask the user before assuming, and only
+* write the plan after ambiguities are resolved.
+*/
+function buildPlanModePromptSection(planModeFilePath) {
+	return `
+
+## PLAN MODE ACTIVE
+
+The user has cycled into plan mode (Shift+Tab). Plan mode restricts WRITING, not READING. You still have a complete read toolkit — use it.
+
+**Tools available in plan mode (use these aggressively):**
+- \`grep_search\` — find symbols, strings, patterns across files
+- \`glob_files\` — list files by pattern (use this instead of \`ls\` / \`find\`)
+- \`file_read\` — read file contents
+- \`find_definition\` — locate where a symbol is defined
+- \`get_file_structure\` — AST overview of a file
+- \`agent_delegate\` — delegate to read-only subagents (e.g. 'explore', 'plan')
+- \`ask_user_question\` — ask the user clarifying questions
+- \`current_datetime\`, \`math_evaluate\`, \`web_search\`, \`web_fetch\` — also fine
+
+**Tools blocked in plan mode:**
+- \`bash_execute\`, \`edit_local_file\`, \`create_file\`, \`delete_file\` — and any other tool that mutates state.
+- Exception: \`create_file\` / \`edit_local_file\` targeting paths under \`${planModeFilePath.replace(/\/plan-[^/]+\.md$/, "/")}\` are allowed (that's where you write the plan).
+
+**Forbidden responses:**
+- ❌ "I can't explore the directory because plan mode blocks shell commands."
+- ❌ "I'd need to run bash to check this."
+- ❌ Any variant of "plan mode prevents me from researching."
+- ✅ Instead: use \`glob_files\`, \`grep_search\`, \`file_read\`, or delegate to the \`explore\` subagent. Bash is not the only way to investigate code.
+
+Ground every claim in files you have actually read. Do not write pseudocode in chat as a substitute for reading the real code.
+
+Follow this phased workflow. Do not skip phases.
+
+### Phase 1 — Understand
+- Read the relevant code before forming opinions. Use grep_search / glob_files / file_read directly for narrow lookups.
+- For broad or uncertain scope, delegate to the 'explore' subagent via agent_delegate so the main context stays focused.
+- Identify what already exists vs. what needs to be built. Reuse existing functions and patterns rather than proposing new ones.
+
+### Phase 2 — Clarify (REQUIRED if anything is ambiguous)
+- If requirements are unclear, if there are multiple reasonable approaches, or if you would otherwise be guessing about user intent, **call the ask_user_question tool BEFORE writing the plan**.
+- Ask about: trade-offs the user should pick between, scope (which files / how broad), behavior on edge cases, naming, dependencies you would add.
+- Do NOT ask "is the plan ready?" or "should I proceed?" — those are decided by the user pressing Shift+Tab. Only ask substantive design questions.
+- If the request is fully unambiguous, skip this phase. Do not invent questions.
+
+### Phase 3 — Design
+- For complex tasks, delegate to the 'plan' subagent via agent_delegate to get a structured implementation plan, then critique its output.
+- For simple tasks, design directly.
+
+### Phase 4 — Write the plan
+Write the plan to \`${planModeFilePath}\` (writes to this path are permitted in plan mode). Build it incrementally — append sections as you research, do not wait until the end. Structure it as:
+
+\`\`\`markdown
+## Context
+Why this change is being made — the problem, what prompted it, the intended outcome.
+
+## Approach
+The chosen approach in 1-3 sentences. Mention rejected alternatives only if non-obvious.
+
+## Files to change
+- path/to/file.ts — what changes and why
+- path/to/other.ts — what changes and why
+
+## Reused existing code
+- function/module path — how it will be reused
+
+## Verification
+How to confirm the change works end-to-end (commands, tests, manual steps).
+\`\`\`
+
+### Phase 5 — Hand off
+Tell the user the plan is ready and where it lives (\`${planModeFilePath}\`). Summarize in 1-2 sentences. Do not ask for approval — the user will press Shift+Tab to exit plan mode and authorize execution.`;
+}
+/**
 * Build the CLI system prompt with optional project context
 * @param contextSection - Optional project-specific context to append (legacy string) or config object
 * @param config - Configuration object for building context sections (when first param is string)
@@ -2922,6 +3112,7 @@ function buildCoreSystemPrompt(contextSection, config) {
 	let dynamicAgentSection = "";
 	let directoriesSection = "";
 	let featureModulesSection = "";
+	let planModeSection = "";
 	if (typeof contextSection === "string") {
 		projectContextSection = contextSection;
 		if (config) {
@@ -2929,6 +3120,7 @@ function buildCoreSystemPrompt(contextSection, config) {
 			if (config.agentStore) agentDirectoryContext = config.agentStore.getDirectoryContext();
 			if (config.enableDynamicAgentCreation) dynamicAgentSection = buildDynamicAgentPromptSection();
 			if (config.featureModulePrompts) featureModulesSection = config.featureModulePrompts;
+			if (config.planModeFilePath) planModeSection = buildPlanModePromptSection(config.planModeFilePath);
 		}
 	} else if (contextSection && typeof contextSection === "object") {
 		config = contextSection;
@@ -2938,6 +3130,7 @@ function buildCoreSystemPrompt(contextSection, config) {
 		if (config.enableDynamicAgentCreation) dynamicAgentSection = buildDynamicAgentPromptSection();
 		if (config.additionalDirectories && config.additionalDirectories.length > 0) directoriesSection = `\n\n## Additional Allowed Directories\n\nIn addition to the working directory (${process.cwd()}), you have read/write access to these directories:\n${config.additionalDirectories.map((d) => `- ${d}`).join("\n")}\n\nTo access files in additional directories, pass the full path to the 'dir_path' parameter of file tools:\n- ${TOOL_GREP_SEARCH}(pattern="...", dir_path="/path/to/additional/dir")\n- ${TOOL_GLOB_FILES}(pattern="**/*.ts", dir_path="/path/to/additional/dir")\n- ${TOOL_FILE_READ}(path="/path/to/additional/dir/file.ts")\n\nWhen the user asks about content in an additional directory, search there first using the dir_path parameter.`;
 		if (config.featureModulePrompts) featureModulesSection = config.featureModulePrompts;
+		if (config.planModeFilePath) planModeSection = buildPlanModePromptSection(config.planModeFilePath);
 	}
 	return `You are an autonomous AI assistant with access to tools. Your job is to help users by taking action and solving problems proactively.
 
@@ -3030,7 +3223,7 @@ EXAMPLES:
 Remember: Use context from previous messages to understand follow-up questions.
 
 DURABLE WORKFLOW TRACKING:
-You have tools for tracking decisions and blockers during your work. These create an audit trail that persists across sessions, enabling anyone to understand why things were done and what's still outstanding.
+You have tools for tracking decisions, blockers, and human review gates during your work. These create an audit trail that persists across sessions, enabling anyone to understand why things were done and what's still outstanding.
 
 - log_decision: When you make a significant decision (architecture choice, scope narrowing, interpretation of ambiguous requirements, trade-off between alternatives), log it with rationale. Do NOT log trivial decisions. Log decisions that would matter if someone needed to understand WHY you did something or if they needed to resume this work.
 
@@ -3038,7 +3231,40 @@ You have tools for tracking decisions and blockers during your work. These creat
 
 - resolve_blocker: When a blocker is cleared, record how it was resolved. Use the blocker ID from the track_blocker output.
 
-These tools are lightweight — use them naturally as part of your work, not as a ceremony.${directoriesSection}${projectContextSection}${skillsSection}${featureModulesSection}`;
+- request_review_gate: Pause for explicit human approval before crossing a significant decision point — one that affects interpretation, evidence, cost, credentials, platform, or public commitment (e.g., narrowing research scope after synthesis, hard-to-reverse refactors, architectural pivots, dependency swaps). Do NOT use for routine operations or actions already covered by the standard permission system (file edits, bash commands). Treat a rejection as a hard stop — re-plan, do not retry.
+
+These tools are lightweight — use them naturally as part of your work, not as a ceremony.${directoriesSection}${projectContextSection}${skillsSection}${featureModulesSection}${planModeSection}`;
+}
+/**
+* Build the minimal-variant system prompt. Reuses the project context,
+* skills, additional-directories, and feature-module sections from
+* `buildCoreSystemPrompt` — those carry user-specific information the
+* model needs and are independent of the behavioral scaffolding.
+*/
+function buildMinimalSystemPrompt(config = {}) {
+	let projectContextSection = "";
+	let skillsSection = "";
+	let directoriesSection = "";
+	let featureModulesSection = "";
+	let planModeSection = "";
+	if (config.contextContent) projectContextSection = `\n\n## Project Context\n\nFollow these project-specific instructions:\n\n${config.contextContent}`;
+	if (config.enableSkillTool !== false && config.customCommands && config.customCommands.length > 0) skillsSection = buildSkillsPromptSection(config.customCommands);
+	if (config.additionalDirectories && config.additionalDirectories.length > 0) directoriesSection = `\n\n## Additional Allowed Directories\n\nIn addition to the working directory (${process.cwd()}), you have read/write access to these directories:\n${config.additionalDirectories.map((d) => `- ${d}`).join("\n")}\n\nPass full paths to file tools' \`dir_path\` parameter to access these directories.`;
+	if (config.featureModulePrompts) featureModulesSection = config.featureModulePrompts;
+	if (config.planModeFilePath) planModeSection = buildPlanModePromptSection(config.planModeFilePath);
+	return `You are an expert coding assistant. You help users by reading files, executing commands, editing code, and writing new files using the tools available to you.
+
+Guidelines:
+- Be concise in your responses.
+- Show file paths clearly when working with files.
+- When the task is done, give the user a direct answer — no recap of steps already visible in the tool history.${directoriesSection}${projectContextSection}${skillsSection}${featureModulesSection}${planModeSection}`;
+}
+/**
+* Pick a system prompt by variant. The dispatch point for the
+* production CLI's `promptVariant` preference flag.
+*/
+function buildSystemPrompt(variant, config = {}) {
+	return variant === "minimal" ? buildMinimalSystemPrompt(config) : buildCoreSystemPrompt(config);
 }
 /**
 * Build the dynamic agent creation prompt section
@@ -3091,6 +3317,41 @@ You have access to the '${TOOL_CREATE_DYNAMIC_AGENT}' tool, which lets you creat
    thoroughness: "quick"`;
 }
 //#endregion
+//#region src/utils/planMode.ts
+const PLAN_MODE_DIR = ".b4m-cli/plans";
+const PATH_TOOLS = new Set([
+	"create_file",
+	"edit_local_file",
+	"delete_file"
+]);
+/**
+* Directory plan-mode artifacts are written to (under the working directory).
+* Writes to paths under this directory are permitted while plan mode is active.
+*/
+function getPlanModeFileDir(cwd = process.cwd()) {
+	return path.resolve(cwd, PLAN_MODE_DIR);
+}
+/**
+* Default plan file for the current session. Sessions can override this if needed.
+*/
+function getPlanModeFilePath(sessionId, cwd = process.cwd()) {
+	const safeId = sessionId.replace(/[^a-zA-Z0-9_-]/g, "_");
+	return path.join(getPlanModeFileDir(cwd), `plan-${safeId}.md`);
+}
+/**
+* Whether a write/edit/delete tool call targets a path inside the plan-mode directory.
+* Used to allow incremental plan-file writes while plan mode blocks other writes.
+*/
+function isWriteTargetingPlanFile(toolName, args, cwd = process.cwd()) {
+	if (!PATH_TOOLS.has(toolName)) return false;
+	const argPath = args?.path;
+	if (typeof argPath !== "string" || argPath.length === 0) return false;
+	const resolved = path.resolve(cwd, argPath);
+	const planDir = getPlanModeFileDir(cwd);
+	const rel = path.relative(planDir, resolved);
+	return rel === "" || !rel.startsWith("..") && !path.isAbsolute(rel);
+}
+//#endregion
 //#region ../../b4m-core/utils/dist/imageGeneration/AIImageService.mjs
 /**
 * Abstract class for AI Image Service
@@ -5580,7 +5841,7 @@ z.object({
 * @see https://platform.openai.com/docs/guides/function-calling
 */
 const MAX_GOAL_LENGTH = 1e3;
-const MAX_DESCRIPTION_LENGTH = 2e3;
+const MAX_DESCRIPTION_LENGTH$1 = 2e3;
 ChatModels.GPT5, ChatModels.GPT5_MINI, ChatModels.GPT5_NANO, ChatModels.GPT5_1, ChatModels.GPT5_2, ChatModels.GPT5_4, ChatModels.GPT5_4_MINI, ChatModels.GPT5_4_NANO, ChatModels.GPT5_5;
 /**
 * Invokes the image processor Lambda to convert and resize images
@@ -15061,7 +15322,8 @@ updateUserSchema.extend({
 		note: z.string(),
 		userName: z.string()
 	})).optional(),
-	numReferralsAvailable: z.number().optional()
+	numReferralsAvailable: z.number().optional(),
+	disputePending: z.boolean().optional()
 });
 z.object({
 	username: z.string(),
@@ -15764,7 +16026,7 @@ z.object({
 const questSchema = z.object({
 	id: z.string(),
 	title: z.string().min(1).max(255),
-	description: z.string().max(MAX_DESCRIPTION_LENGTH),
+	description: z.string().max(MAX_DESCRIPTION_LENGTH$1),
 	status: z.enum([
 		"not_started",
 		"in_progress",
@@ -15787,7 +16049,7 @@ const questResourceSchema = z.object({
 });
 z.object({
 	title: z.string().min(1).max(255),
-	description: z.string().max(MAX_DESCRIPTION_LENGTH).optional(),
+	description: z.string().max(MAX_DESCRIPTION_LENGTH$1).optional(),
 	goal: z.string().min(1).max(MAX_GOAL_LENGTH),
 	complexity: z.enum([
 		"beginner",
@@ -18827,9 +19089,18 @@ function wrapToolWithPermission(tool, permissionManager, showPermissionPrompt, a
 				});
 				return result;
 			}
+			const { useCliStore } = await import("./store-44C_Fvdb.mjs");
+			const interactionMode = useCliStore.getState().interactionMode;
+			if (interactionMode === "plan" && !isReadOnlyTool(toolName) && !isWriteTargetingPlanFile(toolName, args)) {
+				const result = `Tool "${toolName}" is blocked while plan mode is active. Plan mode is read-only — research the codebase, then write your plan to a file under ${getPlanModeFileDir()}/. The user will press Shift+Tab to exit plan mode and authorize execution.`;
+				agentContext.observationQueue.push({
+					toolName,
+					result
+				});
+				return result;
+			}
 			if (!permissionManager.needsPermission(toolName, { isSandboxed })) return executeAndRecord();
-			const { useCliStore } = await import("./store-B_ILRSdP.mjs");
-			if (useCliStore.getState().autoAcceptEdits) return executeAndRecord();
+			if (interactionMode === "auto-accept") return executeAndRecord();
 			const response = await showPermissionPrompt(toolName, effectiveArgs, await generateToolPreview(toolName, args, isSandboxed));
 			if (response.action === "deny") throw new PermissionDeniedError(toolName, args);
 			if (response.action === "allow-session") permissionManager.trustToolForSession(toolName);
@@ -23620,7 +23891,7 @@ function createGetFileStructureTool() {
 * Validate log_decision parameters
 * @throws Error if validation fails
 */
-function validateParams(args) {
+function validateParams$1(args) {
 	const params = args;
 	if (typeof params.summary !== "string" || params.summary.trim() === "") throw new Error("log_decision: summary must be a non-empty string");
 	if (typeof params.rationale !== "string" || params.rationale.trim() === "") throw new Error("log_decision: rationale must be a non-empty string");
@@ -23660,7 +23931,7 @@ function formatDecisionsOutput(decisions) {
 function createDecisionLogTool(store) {
 	return {
 		toolFn: async (args) => {
-			const params = validateParams(args);
+			const params = validateParams$1(args);
 			const decision = {
 				id: v4(),
 				timestamp: (/* @__PURE__ */ new Date()).toISOString(),
@@ -23845,4 +24116,146 @@ function createBlockerStore(onUpdate) {
 	};
 }
 //#endregion
-export { processFileReferences as $, getApiUrl as A, registerFeatureModuleTools as B, WebSocketLlmBackend as C, formatStep as D, substituteArguments as E, DEFAULT_AGENT_MODEL as F, isReadOnlyTool as G, OllamaBackend as H, DEFAULT_MAX_ITERATIONS as I, CheckpointStore as J, ReActAgent as K, DEFAULT_RETRY_CONFIG as L, PermissionManager as M, generateCliTools as N, extractCompactInstructions as O, ALWAYS_DENIED_FOR_AGENTS as P, hasFileReferences as Q, DEFAULT_THOROUGHNESS as R, FallbackLlmBackend as S, McpManager as T, buildCoreSystemPrompt as U, setWebSocketToolExecutor as V, buildSkillsPromptSection as W, SessionStore as X, CommandHistoryStore as Y, OAuthClient as Z, createSkillTool as _, createDecisionStore as a, WebSocketToolExecutor as b, createFindDefinitionTool as c, createCoordinateTaskTool as d, searchCommands as et, createBackgroundAgentTools as f, SubagentOrchestrator as g, AgentStore as h, createDecisionLogTool as i, warmFileCache as it, getEnvironmentName as j, loadContextFiles as k, createTodoStore as l, createAgentDelegateTool as m, createBlockerTools as n, formatFileSize$1 as nt, formatDecisionsOutput as o, BackgroundAgentManager as p, CustomCommandStore as q, formatBlockersOutput as r, searchFiles as rt, createGetFileStructureTool as s, createBlockerStore as t, mergeCommands as tt, createWriteTodosTool as u, parseAgentConfig as v, ServerLlmBackend as w, WebSocketConnectionManager as x, ApiClient as y, clearFeatureModuleTools as z };
+//#region src/tools/reviewGateTool.ts
+const MAX_DESCRIPTION_LENGTH = 2e3;
+const MAX_RECOMMENDATION_LENGTH = 1e3;
+const MAX_OPTION_LENGTH = 500;
+const MAX_OPTIONS_COUNT = 10;
+/**
+* Validate request_review_gate parameters
+* @throws Error if validation fails
+*/
+function validateParams(args) {
+	const params = args;
+	if (typeof params.description !== "string" || params.description.trim() === "") throw new Error("request_review_gate: description must be a non-empty string");
+	if (params.description.length > MAX_DESCRIPTION_LENGTH) throw new Error(`request_review_gate: description must be ${MAX_DESCRIPTION_LENGTH} characters or fewer`);
+	if (params.options !== void 0) {
+		if (!Array.isArray(params.options)) throw new Error("request_review_gate: options must be an array of strings");
+		if (params.options.length > MAX_OPTIONS_COUNT) throw new Error(`request_review_gate: options must contain ${MAX_OPTIONS_COUNT} entries or fewer`);
+		for (const opt of params.options) {
+			if (typeof opt !== "string") throw new Error("request_review_gate: each option must be a string");
+			if (opt.length > MAX_OPTION_LENGTH) throw new Error(`request_review_gate: each option must be ${MAX_OPTION_LENGTH} characters or fewer`);
+		}
+	}
+	if (params.recommendation !== void 0) {
+		if (typeof params.recommendation !== "string") throw new Error("request_review_gate: recommendation must be a string");
+		if (params.recommendation.length > MAX_RECOMMENDATION_LENGTH) throw new Error(`request_review_gate: recommendation must be ${MAX_RECOMMENDATION_LENGTH} characters or fewer`);
+	}
+	const options = params.options?.map((o) => o.trim()).filter((o) => o.length > 0);
+	return {
+		description: params.description.trim(),
+		options: options && options.length > 0 ? options : void 0,
+		recommendation: typeof params.recommendation === "string" ? params.recommendation.trim() : void 0
+	};
+}
+/**
+* Format review gates for display output
+*/
+function formatReviewGatesOutput(gates) {
+	if (gates.length === 0) return "No review gates recorded in this session.";
+	return gates.map((gate, index) => {
+		const lines = [`${index + 1}. **${gate.description}**`, `   Status: ${gate.status}`];
+		if (gate.recommendation) lines.push(`   Recommendation: ${gate.recommendation}`);
+		if (gate.options && gate.options.length > 0) {
+			lines.push("   Options:");
+			for (const opt of gate.options) lines.push(`     • ${opt}`);
+		}
+		if (gate.userNote) lines.push(`   Note: ${gate.userNote}`);
+		const requested = new Date(gate.timestamp).toLocaleTimeString();
+		lines.push(`   Requested at: ${requested}`);
+		if (gate.resolvedAt) {
+			const resolved = new Date(gate.resolvedAt).toLocaleTimeString();
+			lines.push(`   Resolved at: ${resolved}`);
+		}
+		return lines.join("\n");
+	}).join("\n\n");
+}
+/**
+* Create the request_review_gate tool.
+*
+* Pauses agent execution and prompts the user for explicit approval at a
+* significant decision point. The agent halts until the user responds.
+*
+* Decisions are persisted in the session's workflow state (`reviewGates`)
+* for audit trail and cross-session continuity.
+*/
+function createReviewGateTool(store, requestReviewFn) {
+	return {
+		toolFn: async (args) => {
+			const params = validateParams(args);
+			const id = v4();
+			const requestedAt = (/* @__PURE__ */ new Date()).toISOString();
+			const response = await requestReviewFn({
+				id,
+				description: params.description,
+				options: params.options,
+				recommendation: params.recommendation
+			});
+			const trimmedNote = response.note?.trim();
+			const entry = {
+				id,
+				timestamp: requestedAt,
+				description: params.description,
+				status: response.decision,
+				resolvedAt: (/* @__PURE__ */ new Date()).toISOString(),
+				userNote: trimmedNote && trimmedNote.length > 0 ? trimmedNote : void 0,
+				options: params.options,
+				recommendation: params.recommendation
+			};
+			store.reviewGates.push(entry);
+			if (store.onUpdate) store.onUpdate(store.reviewGates);
+			const verdict = response.decision === "approved" ? "APPROVED" : "REJECTED";
+			const noteText = entry.userNote ? `\nUser note: ${entry.userNote}` : "";
+			return `Review gate ${verdict} [${id.slice(0, 8)}]: ${params.description}${noteText}`;
+		},
+		toolSchema: {
+			name: "request_review_gate",
+			description: `Pause execution and request explicit human approval at a significant decision point.
+
+Review gates protect meaning. Stop before crossing decisions that affect interpretation, evidence, cost, credentials, platform, or public commitment.
+
+**When to use:**
+- Synthesizing findings before narrowing research scope
+- Hard-to-reverse decisions (refactors, architectural pivots, dependency swaps)
+- Decisions affecting cost, credentials, or external commitments
+- Major direction changes after exploration
+
+**When NOT to use:**
+- Routine operations (reading files, running tests, listing directories)
+- Operations already covered by the standard permission system (file edits, bash commands)
+- Trivial choices that wouldn't matter to someone resuming this work
+
+The agent will pause until the user explicitly approves or rejects. The user may attach an optional note to their decision (e.g., to redirect or clarify scope). Treat a rejection as a hard stop — re-plan rather than retry.`,
+			parameters: {
+				type: "object",
+				properties: {
+					description: {
+						type: "string",
+						description: "Clear explanation of what the user is being asked to approve, including relevant context"
+					},
+					options: {
+						type: "array",
+						items: { type: "string" },
+						description: "Optional list of alternatives the user can choose between"
+					},
+					recommendation: {
+						type: "string",
+						description: "Optional recommendation from the AI on the preferred path and why"
+					}
+				},
+				required: ["description"]
+			}
+		}
+	};
+}
+/**
+* Create a new empty ReviewGateStore
+*/
+function createReviewGateStore(onUpdate) {
+	return {
+		reviewGates: [],
+		onUpdate
+	};
+}
+//#endregion
+export { CommandHistoryStore as $, formatStep as A, DEFAULT_RETRY_CONFIG as B, WebSocketToolExecutor as C, ServerLlmBackend as D, WebSocketLlmBackend as E, PermissionManager as F, OllamaBackend as G, clearFeatureModuleTools as H, generateCliTools as I, buildSkillsPromptSection as J, getPlanModeFilePath as K, ALWAYS_DENIED_FOR_AGENTS as L, loadContextFiles as M, getApiUrl as N, McpManager as O, getEnvironmentName as P, CheckpointStore as Q, DEFAULT_AGENT_MODEL as R, ApiClient as S, FallbackLlmBackend as T, registerFeatureModuleTools as U, DEFAULT_THOROUGHNESS as V, setWebSocketToolExecutor as W, ReActAgent as X, isReadOnlyTool as Y, CustomCommandStore as Z, createAgentDelegateTool as _, createBlockerTools as a, mergeCommands as at, createSkillTool as b, createDecisionStore as c, warmFileCache as ct, createFindDefinitionTool as d, SessionStore as et, createTodoStore as f, BackgroundAgentManager as g, createBackgroundAgentTools as h, createBlockerStore as i, searchCommands as it, extractCompactInstructions as j, substituteArguments as k, formatDecisionsOutput as l, createCoordinateTaskTool as m, createReviewGateTool as n, hasFileReferences as nt, formatBlockersOutput as o, formatFileSize$1 as ot, createWriteTodosTool as p, buildSystemPrompt as q, formatReviewGatesOutput as r, processFileReferences as rt, createDecisionLogTool as s, searchFiles as st, createReviewGateStore as t, OAuthClient as tt, createGetFileStructureTool as u, AgentStore as v, WebSocketConnectionManager as w, parseAgentConfig as x, SubagentOrchestrator as y, DEFAULT_MAX_ITERATIONS as z };