@bike4mind/cli 1.0.0 → 1.1.0

package/dist/{SandboxOrchestrator-BFPVpmB5.mjs → SandboxOrchestrator-BbMDgjzr.mjs}

@@ -1,3 +1,3 @@
 #!/usr/bin/env node
-import { t as SandboxOrchestrator } from "./SandboxOrchestrator-C8uleDn2.mjs";
+import { t as SandboxOrchestrator } from "./SandboxOrchestrator-CIegJrCj.mjs";
 export { SandboxOrchestrator };

package/dist/{SandboxOrchestrator-C8uleDn2.mjs → SandboxOrchestrator-CIegJrCj.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as DEFAULT_SANDBOX_CONFIG } from "./types-LyRNHOiS.mjs";
+import { t as DEFAULT_SANDBOX_CONFIG } from "./types-F61_hxmG.mjs";
 //#region src/sandbox/SandboxOrchestrator.ts
 var SandboxOrchestrator = class {
 	constructor(config, runtime, proxyManager) {

package/dist/{buildAgent-CJrkEG0M.mjs → buildAgent-B_kArQ_Y.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { F as loadContextFiles, J as setWebSocketToolExecutor, L as generateCliTools, M as ReActAgent, X as buildSystemPrompt, Y as getPlanModeFilePath, a as McpManager, i as AgentStore, l as OllamaBackend, n as BackgroundAgentManager, o as createSseBackend, r as SubagentOrchestrator, s as ServerLlmBackend, t as AgentHistoryStore } from "./AgentHistoryStore-CrRb8cMt.mjs";
-import { n as logger } from "./ConfigStore-DHNgFdOu.mjs";
+import { I as generateCliTools, J as setWebSocketToolExecutor, L as wrapTools, N as ReActAgent, X as buildSystemPrompt, Y as getPlanModeFilePath, a as loadProjectContext, c as ServerLlmBackend, i as buildProjectAgentStore, n as BackgroundAgentManager, o as McpManager, r as SubagentOrchestrator, s as createSseBackend, t as AgentHistoryStore, u as OllamaBackend } from "./AgentHistoryStore-kT9eNMRO.mjs";
+import { n as logger } from "./ConfigStore-DdHHCH2t.mjs";
 import { z as z$1 } from "zod";
 import WebSocket from "ws";
 //#region src/llm/NotifyingLlmBackend.ts
@@ -657,8 +657,8 @@ async function buildSandbox(input) {
 	const { config, sessionId, permissionManager, checkpointStore } = input;
 	const [{ createSandboxRuntime }, { SandboxOrchestrator }, { DEFAULT_SANDBOX_CONFIG }, { ProxyManager }, { ViolationLogStore }] = await Promise.all([
 		import("./SandboxRuntimeAdapter-CKelGICD.mjs"),
-		import("./SandboxOrchestrator-BFPVpmB5.mjs"),
-		import("./types-CqscS34o.mjs"),
+		import("./SandboxOrchestrator-BbMDgjzr.mjs"),
+		import("./types-CdIKgWWe.mjs"),
 		import("./ProxyManager-B1jFWL7b.mjs"),
 		import("./ViolationLogStore-byEhxa2A.mjs")
 	]);
@@ -712,14 +712,21 @@ async function buildSupportingStores(input) {
 	const { tools: b4mTools } = await generateCliTools(config.userId, llm, modelId, permissionManager, promptFn, agentContext, configStore, apiClient, void 0, userQuestionFn, checkpointStore, sandboxOrchestrator, additionalDirectories);
 	const mcpManager = new McpManager(config);
 	const builtinAgentsDir = new URL("../agents/defaults/", import.meta.url).pathname;
-	const agentProjectDir = configStore.getProjectConfigDir();
-	const agentStore = new AgentStore(builtinAgentsDir, agentProjectDir || process.cwd());
+	const agentStore = buildProjectAgentStore(builtinAgentsDir, configStore);
 	const [, , contextResult] = await Promise.all([
 		mcpManager.initialize(),
 		agentStore.loadAgents(),
-		loadContextFiles(agentProjectDir)
+		loadProjectContext(configStore)
 	]);
-	const mcpTools = mcpManager.getTools();
+	const mcpTools = wrapTools(mcpManager.getTools(), {
+		permissionManager,
+		showPermissionPrompt: promptFn,
+		agentContext,
+		configStore,
+		apiClient,
+		sandboxOrchestrator,
+		allowedDirectories: additionalDirectories
+	});
 	const deferredB4mToolNames = /* @__PURE__ */ new Set([
 		"math_evaluate",
 		"dice_roll",
@@ -754,7 +761,9 @@ async function buildSupportingStores(input) {
 		showUserQuestion: userQuestionFn,
 		checkpointStore,
 		onSubagentUsage,
-		historyStore
+		historyStore,
+		sandboxOrchestrator,
+		additionalDirectories
 	});
 	const backgroundManager = new BackgroundAgentManager(orchestrator);
 	backgroundManager.setOnStatusChange(onBackgroundStatusChange);

package/dist/commands/acpCommand.mjs

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
-import { $ as RemoteSkillSource, A as FallbackLlmBackend, C as createWriteTodosTool, D as createResumeAgentTool, E as createCoordinateTaskTool, I as PermissionManager, J as setWebSocketToolExecutor, O as createBackgroundAgentTools, Q as isReadOnlyTool, S as createTodoStore, et as CustomCommandStore, k as createAgentDelegateTool, nt as SessionStore, tt as CheckpointStore, w as createSkillTool, x as createFindDefinitionTool, y as createGetFileStructureTool } from "../AgentHistoryStore-CrRb8cMt.mjs";
-import { c as requireApiUrl, n as logger, t as ConfigStore } from "../ConfigStore-DHNgFdOu.mjs";
-import { t as ApiClient } from "../ApiClient-EUTyn5yu.mjs";
-import { a as createToolSearchTool, i as buildLlmBackend, n as buildSupportingStores, o as deferredToolRegistry, r as buildSandbox, s as NotifyingLlmBackend, t as buildAgent } from "../buildAgent-CJrkEG0M.mjs";
+import { $ as CustomCommandStore, A as createAgentDelegateTool, C as createTodoStore, D as createCoordinateTaskTool, F as PermissionManager, J as setWebSocketToolExecutor, L as wrapTools, O as createResumeAgentTool, Q as RemoteSkillSource, S as createFindDefinitionTool, T as createSkillTool, b as createGetFileStructureTool, et as CheckpointStore, j as FallbackLlmBackend, k as createBackgroundAgentTools, tt as SessionStore, w as createWriteTodosTool } from "../AgentHistoryStore-kT9eNMRO.mjs";
+import { n as logger, p as requireApiUrl, s as isReadOnlyTool, t as ConfigStore } from "../ConfigStore-DdHHCH2t.mjs";
+import { t as ApiClient } from "../ApiClient-BOWpVvTq.mjs";
+import { a as createToolSearchTool, i as buildLlmBackend, n as buildSupportingStores, o as deferredToolRegistry, r as buildSandbox, s as NotifyingLlmBackend, t as buildAgent } from "../buildAgent-B_kArQ_Y.mjs";
 import { randomUUID } from "crypto";
 import { existsSync, realpathSync, statSync } from "fs";
 import { isAbsolute } from "path";
@@ -634,7 +634,12 @@ var AcpServer = class {
 			agentStore,
 			backgroundManager,
 			historyStore,
-			sessionId: stackSessionId
+			sessionId: stackSessionId,
+			permissionManager,
+			agentContext,
+			apiClient,
+			sandboxOrchestrator: sandboxOrchestrator ?? void 0,
+			allowedDirectories: additionalDirectories
 		});
 		const agentToolsRef = { current: null };
 		const toolSearchTool = deferredToolRegistry.size() > 0 ? createToolSearchTool(() => {
@@ -678,24 +683,40 @@ var AcpServer = class {
 		};
 	}
 	buildCliTools(input) {
-		const { config, orchestrator, agentStore, backgroundManager, historyStore, sessionId } = input;
+		const { config, orchestrator, agentStore, backgroundManager, historyStore, sessionId, permissionManager, agentContext, apiClient, sandboxOrchestrator, allowedDirectories } = input;
+		const cliWrapDeps = {
+			permissionManager,
+			showPermissionPrompt: this.promptFn,
+			agentContext,
+			configStore: this.configStore,
+			apiClient,
+			sandboxOrchestrator,
+			allowedDirectories
+		};
+		const wrappedSecurityTools = wrapTools([
+			createFindDefinitionTool(allowedDirectories),
+			createGetFileStructureTool(allowedDirectories),
+			...config.preferences.enableSkillTool !== false ? [createSkillTool({
+				customCommandStore: this.customCommandStore,
+				subagentOrchestrator: orchestrator,
+				sessionId,
+				permissionManager,
+				promptFn: this.promptFn,
+				allowedDirectories
+			})] : []
+		], cliWrapDeps);
 		const tools = [
 			createAgentDelegateTool(orchestrator, agentStore, sessionId, backgroundManager),
 			...createBackgroundAgentTools(backgroundManager),
 			createResumeAgentTool(orchestrator, historyStore, backgroundManager),
 			createWriteTodosTool(createTodoStore()),
-			createFindDefinitionTool(),
-			createGetFileStructureTool()
+			...wrappedSecurityTools
 		];
-		if (config.preferences.enableSkillTool !== false) tools.push(createSkillTool({
-			customCommandStore: this.customCommandStore,
-			subagentOrchestrator: orchestrator,
-			sessionId
-		}));
 		if (config.preferences.enableCoordinatorMode === true) tools.push(createCoordinateTaskTool(orchestrator, agentStore, sessionId));
 		return tools;
 	}
 	async loadCustomCommands() {
+		this.customCommandStore.setProjectTrusted(this.configStore.isProjectTrusted());
 		try {
 			await this.customCommandStore.loadCommands();
 		} catch {}

package/dist/commands/apiCommand.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { l as resolveApiEndpoint, s as parseApiUrl, t as ConfigStore } from "../ConfigStore-DHNgFdOu.mjs";
+import { f as parseApiUrl, m as resolveApiEndpoint, t as ConfigStore } from "../ConfigStore-DdHHCH2t.mjs";
 //#region src/commands/apiCommand.ts
 /**
 * External API config command (--api-url / --reset-api)

package/dist/commands/doctorCommand.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as version } from "../package-7a45-Svr.mjs";
+import { t as version } from "../package-Bqg2LSnH.mjs";
 import { a as fetchLatestVersion, c as isNpmPrefixWritable, i as compareSemver } from "../updateChecker-CQW8bxo6.mjs";
 import { t as checkRipgrep } from "../ripgrepCheck-BmkyTK2i.mjs";
 import { execSync } from "child_process";

package/dist/commands/envCommand.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as ConfigStore } from "../ConfigStore-DHNgFdOu.mjs";
+import { t as ConfigStore } from "../ConfigStore-DdHHCH2t.mjs";
 //#region src/commands/envCommand.ts
 /**
 * Environment switching for the `--dev` / `--prod` launch flags.

package/dist/commands/headlessCommand.mjs

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
-import { $ as RemoteSkillSource, A as FallbackLlmBackend, B as classifyCommandRisk, C as createWriteTodosTool, D as createResumeAgentTool, E as createCoordinateTaskTool, F as loadContextFiles, I as PermissionManager, J as setWebSocketToolExecutor, L as generateCliTools, M as ReActAgent, O as createBackgroundAgentTools, Q as isReadOnlyTool, S as createTodoStore, X as buildSystemPrompt, a as McpManager, b as createWorkItemTools, et as CustomCommandStore, i as AgentStore, k as createAgentDelegateTool, n as BackgroundAgentManager, nt as SessionStore, o as createSseBackend, r as SubagentOrchestrator, t as AgentHistoryStore, tt as CheckpointStore, w as createSkillTool, x as createFindDefinitionTool, y as createGetFileStructureTool, z as SHELL_LIKE_TOOL_COMMAND_FIELDS } from "../AgentHistoryStore-CrRb8cMt.mjs";
-import { c as requireApiUrl, n as logger, t as ConfigStore } from "../ConfigStore-DHNgFdOu.mjs";
-import { t as ApiClient } from "../ApiClient-EUTyn5yu.mjs";
-import { t as DEFAULT_SANDBOX_CONFIG } from "../types-LyRNHOiS.mjs";
+import { $ as CustomCommandStore, A as createAgentDelegateTool, C as createTodoStore, D as createCoordinateTaskTool, F as PermissionManager, G as classifyCommandRisk, I as generateCliTools, J as setWebSocketToolExecutor, L as wrapTools, N as ReActAgent, O as createResumeAgentTool, Q as RemoteSkillSource, S as createFindDefinitionTool, T as createSkillTool, X as buildSystemPrompt, a as loadProjectContext, b as createGetFileStructureTool, et as CheckpointStore, i as buildProjectAgentStore, j as FallbackLlmBackend, k as createBackgroundAgentTools, n as BackgroundAgentManager, o as McpManager, r as SubagentOrchestrator, s as createSseBackend, t as AgentHistoryStore, tt as SessionStore, w as createWriteTodosTool, x as createWorkItemTools, z as SHELL_LIKE_TOOL_COMMAND_FIELDS } from "../AgentHistoryStore-kT9eNMRO.mjs";
+import { n as logger, p as requireApiUrl, s as isReadOnlyTool, t as ConfigStore } from "../ConfigStore-DdHHCH2t.mjs";
+import { t as ApiClient } from "../ApiClient-BOWpVvTq.mjs";
+import { t as DEFAULT_SANDBOX_CONFIG } from "../types-F61_hxmG.mjs";
 import { r as reconstructTurnBlocks, t as WorkItemsClient } from "../WorkItemsClient-Cow6nXx7.mjs";
 import { t as createSandboxRuntime } from "../SandboxRuntimeAdapter-ChGlxSGQ.mjs";
-import { t as SandboxOrchestrator } from "../SandboxOrchestrator-C8uleDn2.mjs";
+import { t as SandboxOrchestrator } from "../SandboxOrchestrator-CIegJrCj.mjs";
 import { t as ProxyManager } from "../ProxyManager-C1-lgzEU.mjs";
 import { randomBytes } from "crypto";
 import { v4 } from "uuid";
@@ -120,8 +120,9 @@ const HEADLESS_PERMISSION_POLICY_KEYS = [
 ];
 const RISK_RANK = {
 	low: 0,
-	medium: 1,
-	high: 2
+	unclassified: 1,
+	medium: 2,
+	high: 3
 };
 function readOptionalStringArray(value, label) {
 	if (value === void 0) return [];
@@ -174,6 +175,39 @@ function evaluatePermissionPolicy(policy, toolName, riskLevel) {
 		reason: `policy default (${policy.defaultAction})`
 	};
 }
+/**
+* Resolve a headless permission decision from the fixed precedence ladder:
+*   --dangerously-skip-permissions -> allow-once (explicit blanket override)
+*   a directory-grant request       -> deny (widening the filesystem allow-list is
+*                                       its own decision; headless has no human to
+*                                       grant it, so fail closed - never inherit the
+*                                       originating tool's policy verdict)
+*   a --permission-policy            -> its per-tool/per-risk verdict
+*   otherwise                        -> deny (safe default, no silent auto-approve)
+* Extracted from the headless prompt closure so the ladder is unit-testable.
+*/
+function resolveHeadlessPermissionDecision(params) {
+	const { dangerouslySkipPermissions, isDirectoryGrant, toolName, riskLevel, permissionPolicy } = params;
+	if (dangerouslySkipPermissions) return {
+		action: "allow-once",
+		reason: "dangerously-skip-permissions"
+	};
+	if (isDirectoryGrant) return {
+		action: "deny",
+		reason: "directory access not granted in headless mode"
+	};
+	if (permissionPolicy) {
+		const verdict = evaluatePermissionPolicy(permissionPolicy, toolName, riskLevel);
+		return {
+			action: verdict.action === "allow" ? "allow-once" : "deny",
+			reason: verdict.reason
+		};
+	}
+	return {
+		action: "deny",
+		reason: "no permission policy; default deny"
+	};
+}
 //#endregion
 //#region src/commands/headlessCommand.ts
 /**
@@ -227,6 +261,7 @@ async function handleHeadlessCommand(options) {
 			}
 			permissionPolicy = parsePermissionPolicy(policyRaw);
 		}
+		customCommandStore.setProjectTrusted(configStore.isProjectTrusted());
 		try {
 			await customCommandStore.loadCommands();
 		} catch {}
@@ -280,28 +315,20 @@ async function handleHeadlessCommand(options) {
 		const permissionManager = new PermissionManager(config.trustedTools ?? [], void 0, config.tools.disabled);
 		const emit = createHeadlessEmitter(runId, (line) => process.stdout.write(line));
 		const streaming = outputFormat === "stream-json";
-		const promptFn = (toolName, args, _preview) => {
+		const promptFn = (toolName, args, _preview, kind) => {
 			const risk = classifyToolRisk(toolName, args, permissionManager.getCategory(toolName));
 			if (streaming) emit({
 				type: "permission_request",
 				toolName,
 				risk
 			});
-			let decision;
-			if (dangerouslySkipPermissions) decision = {
-				action: "allow-once",
-				reason: "dangerously-skip-permissions"
-			};
-			else if (permissionPolicy) {
-				const verdict = evaluatePermissionPolicy(permissionPolicy, toolName, risk.level);
-				decision = {
-					action: verdict.action === "allow" ? "allow-once" : "deny",
-					reason: verdict.reason
-				};
-			} else decision = {
-				action: "deny",
-				reason: "no permission policy; default deny"
-			};
+			const decision = resolveHeadlessPermissionDecision({
+				dangerouslySkipPermissions,
+				isDirectoryGrant: kind === "directory-grant",
+				toolName,
+				riskLevel: risk.level,
+				permissionPolicy
+			});
 			if (streaming) emit({
 				type: "permission_decision",
 				toolName,
@@ -330,15 +357,23 @@ async function handleHeadlessCommand(options) {
 		};
 		const { tools: b4mTools } = await generateCliTools(config.userId, llm, modelInfo.id, permissionManager, promptFn, agentContext, configStore, apiClient, void 0, userQuestionFn, checkpointStore, sandboxOrchestrator, additionalDirectories);
 		const mcpManager = new McpManager(config);
-		const projectConfigDir = configStore.getProjectConfigDir();
 		const builtinAgentsDir = new URL("../agents/defaults/", import.meta.url).pathname;
-		const agentStore = new AgentStore(builtinAgentsDir, projectConfigDir ?? process.cwd());
+		const agentStore = buildProjectAgentStore(builtinAgentsDir, configStore);
 		const [, , contextResult] = await Promise.all([
 			mcpManager.initialize(),
 			agentStore.loadAgents(),
-			loadContextFiles(projectConfigDir)
+			loadProjectContext(configStore)
 		]);
-		const mcpTools = mcpManager.getTools();
+		const cliWrapDeps = {
+			permissionManager,
+			showPermissionPrompt: promptFn,
+			agentContext,
+			configStore,
+			apiClient,
+			sandboxOrchestrator,
+			allowedDirectories: additionalDirectories
+		};
+		const mcpTools = wrapTools(mcpManager.getTools(), cliWrapDeps);
 		const historyStore = new AgentHistoryStore(config.preferences.subagentHistoryTtlMs ?? 36e5);
 		const orchestrator = new SubagentOrchestrator({
 			userId: config.userId,
@@ -353,7 +388,9 @@ async function handleHeadlessCommand(options) {
 			enableParallelToolExecution: config.preferences.enableParallelToolExecution === true,
 			showUserQuestion: userQuestionFn,
 			checkpointStore,
-			historyStore
+			historyStore,
+			sandboxOrchestrator,
+			additionalDirectories
 		});
 		const backgroundManager = new BackgroundAgentManager(orchestrator);
 		const agentDelegateTool = createAgentDelegateTool(orchestrator, agentStore, session.id, backgroundManager);
@@ -361,15 +398,18 @@ async function handleHeadlessCommand(options) {
 		const resumeAgentTool = createResumeAgentTool(orchestrator, historyStore, backgroundManager);
 		const todoStore = createTodoStore();
 		const writeTodosTool = createWriteTodosTool(todoStore);
-		const findDefinitionTool = createFindDefinitionTool();
-		const getFileStructureTool = createGetFileStructureTool();
+		const findDefinitionTool = wrapTools([createFindDefinitionTool(additionalDirectories)], cliWrapDeps)[0];
+		const getFileStructureTool = wrapTools([createGetFileStructureTool(additionalDirectories)], cliWrapDeps)[0];
 		const workItemTools = config.preferences.enableWorkItemTools ? createWorkItemTools(new WorkItemsClient(apiClient)) : [];
 		const enableSkillTool = config.preferences.enableSkillTool !== false;
-		const skillTool = enableSkillTool ? createSkillTool({
+		const skillTool = enableSkillTool ? wrapTools([createSkillTool({
 			customCommandStore,
 			subagentOrchestrator: orchestrator,
-			sessionId: session.id
-		}) : null;
+			sessionId: session.id,
+			permissionManager,
+			promptFn,
+			allowedDirectories: additionalDirectories
+		})], cliWrapDeps)[0] : null;
 		const cliTools = [
 			agentDelegateTool,
 			...backgroundTools,

package/dist/commands/mcpCommand.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { t as ConfigStore } from "../ConfigStore-DHNgFdOu.mjs";
-import { t as version } from "../package-7a45-Svr.mjs";
+import { t as ConfigStore } from "../ConfigStore-DdHHCH2t.mjs";
+import { t as version } from "../package-Bqg2LSnH.mjs";
 //#region src/commands/mcpCommand.ts
 /**
 * External MCP commands (b4m mcp list, b4m mcp add, etc.)
@@ -70,7 +70,7 @@ async function handleMcpCommand(subcommand, argv) {
 			await handleDisable(config, argv.name, configStore);
 			break;
 		case "serve": {
-			const { handleMcpServeCommand } = await import("../serve-CavAHPdQ.mjs");
+			const { handleMcpServeCommand } = await import("../serve-DO9Edl5S.mjs");
 			await handleMcpServeCommand({
 				http: Boolean(argv.http),
 				port: typeof argv.port === "number" ? argv.port : void 0,
@@ -146,9 +146,8 @@ async function handleAdd(config, name, command, args, configStore) {
 		env: {},
 		enabled: true
 	};
-	config.mcpServers.push(newServer);
 	try {
-		await configStore.save(config);
+		await configStore.addMcpServer(newServer);
 		console.log(`✅ Added MCP server "${name}"`);
 		console.log("");
 		console.log("Configuration saved to: ~/.bike4mind/config.json");
@@ -163,14 +162,12 @@ async function handleAdd(config, name, command, args, configStore) {
 * Remove an MCP server
 */
 async function handleRemove(config, name, configStore) {
-	const index = config.mcpServers.findIndex((s) => s.name === name);
-	if (index === -1) {
+	if (config.mcpServers.findIndex((s) => s.name === name) === -1) {
 		console.error(`❌ MCP server "${name}" not found.`);
 		process.exit(1);
 	}
-	config.mcpServers.splice(index, 1);
 	try {
-		await configStore.save(config);
+		await configStore.removeMcpServer(name);
 		console.log(`✅ Removed MCP server "${name}"`);
 		console.log("");
 		console.log("Configuration saved to: ~/.bike4mind/config.json");
@@ -192,9 +189,8 @@ async function handleEnable(config, name, configStore) {
 		console.log(`ℹ️  MCP server "${name}" is already enabled.`);
 		return;
 	}
-	server.enabled = true;
 	try {
-		await configStore.save(config);
+		await configStore.toggleMcpServer(name, true);
 		console.log(`✅ Enabled MCP server "${name}"`);
 		console.log("");
 		console.log("The server will connect next time you start the CLI.");
@@ -216,9 +212,8 @@ async function handleDisable(config, name, configStore) {
 		console.log(`ℹ️  MCP server "${name}" is already disabled.`);
 		return;
 	}
-	server.enabled = false;
 	try {
-		await configStore.save(config);
+		await configStore.toggleMcpServer(name, false);
 		console.log(`✅ Disabled MCP server "${name}"`);
 		console.log("");
 		console.log("The server will not connect next time you start the CLI.");

package/dist/commands/pluginCommand.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { n as getDefaultPluginsDir, r as isFeatureEnabled, t as PluginStore } from "../PluginStore-DwvOJ-G3.mjs";
-import { t as ConfigStore } from "../ConfigStore-DHNgFdOu.mjs";
+import { t as ConfigStore } from "../ConfigStore-DdHHCH2t.mjs";
 import { execFileSync } from "child_process";
 import { promises } from "fs";
 import path from "path";
@@ -152,13 +152,10 @@ async function handleAdd(spec, pluginsDir, configStore) {
 			continue;
 		}
 		const config = await configStore.load();
-		await configStore.save({
-			...config,
-			features: {
-				...config.features,
-				[descriptor.configKey]: true
-			}
-		});
+		await configStore.save({ features: {
+			...config.features,
+			[descriptor.configKey]: true
+		} });
 		console.log(`✅ Installed ${descriptor.name}@${descriptor.version} (plugin key: ${descriptor.configKey})`);
 		console.log(`Enabled feature "${descriptor.configKey}". It will load next time you start b4m.`);
 	}
@@ -186,13 +183,10 @@ async function handleRemove(name, pluginsDir, configStore) {
 	], pluginsDir, "remove", plugin.name);
 	if (plugin.valid) {
 		const config = await configStore.load();
-		await configStore.save({
-			...config,
-			features: {
-				...config.features,
-				[plugin.configKey]: false
-			}
-		});
+		await configStore.save({ features: {
+			...config.features,
+			[plugin.configKey]: false
+		} });
 	}
 	console.log(`✅ Removed plugin ${plugin.name}${plugin.valid ? ` and disabled "${plugin.configKey}"` : ""}.`);
 }

package/dist/commands/updateCommand.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as version } from "../package-7a45-Svr.mjs";
+import { t as version } from "../package-Bqg2LSnH.mjs";
 import { c as isNpmPrefixWritable, l as setAutoUpdatePreference, n as REEXEC_GUARD_ENV, o as forceCheckForUpdate, r as checkForUpdate, s as getAutoUpdatePreference, t as INSTALL_CMD, u as shouldAttemptAutoUpdate } from "../updateChecker-CQW8bxo6.mjs";
 import { t as checkRipgrep } from "../ripgrepCheck-BmkyTK2i.mjs";
 import { execSync, spawnSync } from "child_process";

package/dist/{createFile-DPv180yF-BnWFIxey.mjs → createFile-B8bur5Rb-CVzCarEA.mjs}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
-import { t as assertPathAllowed } from "./pathValidation-D8tjkQXE-1HwvsuYT.mjs";
+import { t as assertPathAllowed } from "./pathValidation-BRqf4HFX-CHwtwp3O.mjs";
 import { existsSync, promises } from "fs";
 import path from "path";
-//#region ../../b4m-core/services/dist/createFile-DPv180yF.mjs
+//#region ../../b4m-core/services/dist/createFile-B8bur5Rb.mjs
 async function createFile(params, allowedDirectories) {
 	const { path: filePath, content, createDirectories = true } = params;
 	const resolvedPath = assertPathAllowed(filePath, allowedDirectories, "create");

package/dist/{deleteFile-BdjUwUQF-B3XOJmg3.mjs → deleteFile-9B3gW_Nb-DG2sovIl.mjs}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
-import { t as assertPathAllowed } from "./pathValidation-D8tjkQXE-1HwvsuYT.mjs";
+import { t as assertPathAllowed } from "./pathValidation-BRqf4HFX-CHwtwp3O.mjs";
 import { existsSync, promises, statSync } from "fs";
 import path from "path";
-//#region ../../b4m-core/services/dist/deleteFile-BdjUwUQF.mjs
+//#region ../../b4m-core/services/dist/deleteFile-9B3gW_Nb.mjs
 async function deleteFile(params, allowedDirectories) {
 	const { path: filePath, recursive = false } = params;
 	const resolvedPath = assertPathAllowed(filePath, allowedDirectories, "delete");

package/dist/{globFiles-DjfDGaUK-CNR8pMRC.mjs → globFiles-CwJ8qmYo-BR5b2KvO.mjs}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
-import { n as isPathAllowed } from "./pathValidation-D8tjkQXE-1HwvsuYT.mjs";
+import { n as isPathAllowed } from "./pathValidation-BRqf4HFX-CHwtwp3O.mjs";
 import path from "path";
 import { stat } from "fs/promises";
 import { glob } from "glob";
-//#region ../../b4m-core/services/dist/globFiles-DjfDGaUK.mjs
+//#region ../../b4m-core/services/dist/globFiles-CwJ8qmYo.mjs
 const DEFAULT_IGNORE_PATTERNS = [
 	"**/node_modules/**",
 	"**/.git/**",
@@ -24,6 +24,7 @@ async function findFiles(params, allowedDirectories) {
 		const dirsMsg = allowedDirectories && allowedDirectories.length > 0 ? `Allowed directories: ${[baseCwd, ...allowedDirectories].join(", ")}` : `Working directory: ${baseCwd}`;
 		throw new Error(`Access denied: Cannot search outside allowed directories. ${dirsMsg}`);
 	}
+	if (path.isAbsolute(pattern) || pattern.split("/").includes("..")) throw new Error("Access denied: Cannot search outside allowed directories. The pattern must be relative to the search directory.");
 	const matches = await glob(pattern, {
 		cwd: targetDir,
 		dot: false,

package/dist/{grepSearch-BaYUfIYs-n0XKoGnL.mjs → grepSearch-BgoOOwGe-DtlV8Gn-.mjs}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
-import { n as isPathAllowed } from "./pathValidation-D8tjkQXE-1HwvsuYT.mjs";
+import { n as isPathAllowed } from "./pathValidation-BRqf4HFX-CHwtwp3O.mjs";
 import { execFile } from "child_process";
 import { existsSync } from "fs";
 import path from "path";
 import { promisify } from "util";
 import { stat } from "fs/promises";
-//#region ../../b4m-core/services/dist/grepSearch-BaYUfIYs.mjs
+//#region ../../b4m-core/services/dist/grepSearch-BgoOOwGe.mjs
 const execFileAsync = promisify(execFile);
 /** Cached ripgrep binary path after first resolution */
 let cachedRgPath = null;
@@ -64,7 +64,7 @@ async function searchFiles(params, allowedDirectories) {
 	if (globs.length > 0) globs.forEach((glob) => {
 		rgArgs.push("--glob", glob);
 	});
-	rgArgs.push(pattern, targetDir);
+	rgArgs.push("--", pattern, targetDir);
 	let stdout;
 	try {
 		stdout = (await execFileAsync(rgPath, rgArgs, { maxBuffer: 52428800 })).stdout;