@bike4mind/cli 1.0.0 → 1.2.0

package/dist/commands/acpCommand.mjs

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
-import { $ as RemoteSkillSource, A as FallbackLlmBackend, C as createWriteTodosTool, D as createResumeAgentTool, E as createCoordinateTaskTool, I as PermissionManager, J as setWebSocketToolExecutor, O as createBackgroundAgentTools, Q as isReadOnlyTool, S as createTodoStore, et as CustomCommandStore, k as createAgentDelegateTool, nt as SessionStore, tt as CheckpointStore, w as createSkillTool, x as createFindDefinitionTool, y as createGetFileStructureTool } from "../AgentHistoryStore-CrRb8cMt.mjs";
-import { c as requireApiUrl, n as logger, t as ConfigStore } from "../ConfigStore-DHNgFdOu.mjs";
-import { t as ApiClient } from "../ApiClient-EUTyn5yu.mjs";
-import { a as createToolSearchTool, i as buildLlmBackend, n as buildSupportingStores, o as deferredToolRegistry, r as buildSandbox, s as NotifyingLlmBackend, t as buildAgent } from "../buildAgent-CJrkEG0M.mjs";
+import { $ as CustomCommandStore, A as createAgentDelegateTool, C as createTodoStore, D as createCoordinateTaskTool, F as PermissionManager, J as setWebSocketToolExecutor, L as wrapTools, O as createResumeAgentTool, Q as RemoteSkillSource, S as createFindDefinitionTool, T as createSkillTool, b as createGetFileStructureTool, et as CheckpointStore, j as FallbackLlmBackend, k as createBackgroundAgentTools, s as buildSandbox, tt as SessionStore, w as createWriteTodosTool } from "../AgentHistoryStore-B2NEOvSW.mjs";
+import { h as requireApiUrl, n as logger, s as isReadOnlyTool, t as ConfigStore } from "../ConfigStore-qV7NrCgZ.mjs";
+import { a as deferredToolRegistry, i as createToolSearchTool, n as buildSupportingStores, o as NotifyingLlmBackend, r as buildLlmBackend, t as buildAgent } from "../buildAgent-C-C-VGff.mjs";
+import { t as ApiClient } from "../ApiClient-D0fQ2FT6.mjs";
 import { randomUUID } from "crypto";
 import { existsSync, realpathSync, statSync } from "fs";
 import { isAbsolute } from "path";
@@ -634,7 +634,12 @@ var AcpServer = class {
 			agentStore,
 			backgroundManager,
 			historyStore,
-			sessionId: stackSessionId
+			sessionId: stackSessionId,
+			permissionManager,
+			agentContext,
+			apiClient,
+			sandboxOrchestrator: sandboxOrchestrator ?? void 0,
+			allowedDirectories: additionalDirectories
 		});
 		const agentToolsRef = { current: null };
 		const toolSearchTool = deferredToolRegistry.size() > 0 ? createToolSearchTool(() => {
@@ -678,24 +683,42 @@ var AcpServer = class {
 		};
 	}
 	buildCliTools(input) {
-		const { config, orchestrator, agentStore, backgroundManager, historyStore, sessionId } = input;
+		const { config, orchestrator, agentStore, backgroundManager, historyStore, sessionId, permissionManager, agentContext, apiClient, sandboxOrchestrator, allowedDirectories } = input;
+		const cliWrapDeps = {
+			permissionManager,
+			showPermissionPrompt: this.promptFn,
+			agentContext,
+			configStore: this.configStore,
+			apiClient,
+			sandboxOrchestrator,
+			allowedDirectories
+		};
+		const wrappedSecurityTools = wrapTools([
+			createFindDefinitionTool(allowedDirectories),
+			createGetFileStructureTool(allowedDirectories),
+			...config.preferences.enableSkillTool !== false ? [createSkillTool({
+				customCommandStore: this.customCommandStore,
+				subagentOrchestrator: orchestrator,
+				sessionId,
+				permission: {
+					permissionManager,
+					promptFn: this.promptFn
+				},
+				allowedDirectories
+			})] : []
+		], cliWrapDeps);
 		const tools = [
 			createAgentDelegateTool(orchestrator, agentStore, sessionId, backgroundManager),
 			...createBackgroundAgentTools(backgroundManager),
 			createResumeAgentTool(orchestrator, historyStore, backgroundManager),
 			createWriteTodosTool(createTodoStore()),
-			createFindDefinitionTool(),
-			createGetFileStructureTool()
+			...wrappedSecurityTools
 		];
-		if (config.preferences.enableSkillTool !== false) tools.push(createSkillTool({
-			customCommandStore: this.customCommandStore,
-			subagentOrchestrator: orchestrator,
-			sessionId
-		}));
 		if (config.preferences.enableCoordinatorMode === true) tools.push(createCoordinateTaskTool(orchestrator, agentStore, sessionId));
 		return tools;
 	}
 	async loadCustomCommands() {
+		this.customCommandStore.setProjectTrusted(this.configStore.isProjectTrusted());
 		try {
 			await this.customCommandStore.loadCommands();
 		} catch {}

package/dist/commands/apiCommand.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { l as resolveApiEndpoint, s as parseApiUrl, t as ConfigStore } from "../ConfigStore-DHNgFdOu.mjs";
+import { g as resolveApiEndpoint, m as parseApiUrl, t as ConfigStore } from "../ConfigStore-qV7NrCgZ.mjs";
 //#region src/commands/apiCommand.ts
 /**
 * External API config command (--api-url / --reset-api)

package/dist/commands/doctorCommand.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as version } from "../package-7a45-Svr.mjs";
+import { t as version } from "../package-CGZIoxcs.mjs";
 import { a as fetchLatestVersion, c as isNpmPrefixWritable, i as compareSemver } from "../updateChecker-CQW8bxo6.mjs";
 import { t as checkRipgrep } from "../ripgrepCheck-BmkyTK2i.mjs";
 import { execSync } from "child_process";

package/dist/commands/envCommand.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as ConfigStore } from "../ConfigStore-DHNgFdOu.mjs";
+import { t as ConfigStore } from "../ConfigStore-qV7NrCgZ.mjs";
 //#region src/commands/envCommand.ts
 /**
 * Environment switching for the `--dev` / `--prod` launch flags.

package/dist/commands/headlessCommand.mjs

@@ -1,12 +1,8 @@
 #!/usr/bin/env node
-import { $ as RemoteSkillSource, A as FallbackLlmBackend, B as classifyCommandRisk, C as createWriteTodosTool, D as createResumeAgentTool, E as createCoordinateTaskTool, F as loadContextFiles, I as PermissionManager, J as setWebSocketToolExecutor, L as generateCliTools, M as ReActAgent, O as createBackgroundAgentTools, Q as isReadOnlyTool, S as createTodoStore, X as buildSystemPrompt, a as McpManager, b as createWorkItemTools, et as CustomCommandStore, i as AgentStore, k as createAgentDelegateTool, n as BackgroundAgentManager, nt as SessionStore, o as createSseBackend, r as SubagentOrchestrator, t as AgentHistoryStore, tt as CheckpointStore, w as createSkillTool, x as createFindDefinitionTool, y as createGetFileStructureTool, z as SHELL_LIKE_TOOL_COMMAND_FIELDS } from "../AgentHistoryStore-CrRb8cMt.mjs";
-import { c as requireApiUrl, n as logger, t as ConfigStore } from "../ConfigStore-DHNgFdOu.mjs";
-import { t as ApiClient } from "../ApiClient-EUTyn5yu.mjs";
-import { t as DEFAULT_SANDBOX_CONFIG } from "../types-LyRNHOiS.mjs";
+import { $ as CustomCommandStore, A as createAgentDelegateTool, C as createTodoStore, D as createCoordinateTaskTool, F as PermissionManager, G as classifyCommandRisk, I as generateCliTools, J as setWebSocketToolExecutor, L as wrapTools, N as ReActAgent, O as createResumeAgentTool, Q as RemoteSkillSource, S as createFindDefinitionTool, T as createSkillTool, X as buildSystemPrompt, a as loadProjectContext, b as createGetFileStructureTool, c as createSseBackend, et as CheckpointStore, i as buildProjectAgentStore, j as FallbackLlmBackend, k as createBackgroundAgentTools, n as BackgroundAgentManager, o as McpManager, r as SubagentOrchestrator, s as buildSandbox, t as AgentHistoryStore, tt as SessionStore, w as createWriteTodosTool, x as createWorkItemTools, z as SHELL_LIKE_TOOL_COMMAND_FIELDS } from "../AgentHistoryStore-B2NEOvSW.mjs";
+import { h as requireApiUrl, n as logger, s as isReadOnlyTool, t as ConfigStore } from "../ConfigStore-qV7NrCgZ.mjs";
+import { t as ApiClient } from "../ApiClient-D0fQ2FT6.mjs";
 import { r as reconstructTurnBlocks, t as WorkItemsClient } from "../WorkItemsClient-Cow6nXx7.mjs";
-import { t as createSandboxRuntime } from "../SandboxRuntimeAdapter-ChGlxSGQ.mjs";
-import { t as SandboxOrchestrator } from "../SandboxOrchestrator-C8uleDn2.mjs";
-import { t as ProxyManager } from "../ProxyManager-C1-lgzEU.mjs";
 import { randomBytes } from "crypto";
 import { v4 } from "uuid";
 import { readFile } from "fs/promises";
@@ -120,8 +116,9 @@ const HEADLESS_PERMISSION_POLICY_KEYS = [
 ];
 const RISK_RANK = {
 	low: 0,
-	medium: 1,
-	high: 2
+	unclassified: 1,
+	medium: 2,
+	high: 3
 };
 function readOptionalStringArray(value, label) {
 	if (value === void 0) return [];
@@ -174,6 +171,39 @@ function evaluatePermissionPolicy(policy, toolName, riskLevel) {
 		reason: `policy default (${policy.defaultAction})`
 	};
 }
+/**
+* Resolve a headless permission decision from the fixed precedence ladder:
+*   --dangerously-skip-permissions -> allow-once (explicit blanket override)
+*   a directory-grant request       -> deny (widening the filesystem allow-list is
+*                                       its own decision; headless has no human to
+*                                       grant it, so fail closed - never inherit the
+*                                       originating tool's policy verdict)
+*   a --permission-policy            -> its per-tool/per-risk verdict
+*   otherwise                        -> deny (safe default, no silent auto-approve)
+* Extracted from the headless prompt closure so the ladder is unit-testable.
+*/
+function resolveHeadlessPermissionDecision(params) {
+	const { dangerouslySkipPermissions, isDirectoryGrant, toolName, riskLevel, permissionPolicy } = params;
+	if (dangerouslySkipPermissions) return {
+		action: "allow-once",
+		reason: "dangerously-skip-permissions"
+	};
+	if (isDirectoryGrant) return {
+		action: "deny",
+		reason: "directory access not granted in headless mode"
+	};
+	if (permissionPolicy) {
+		const verdict = evaluatePermissionPolicy(permissionPolicy, toolName, riskLevel);
+		return {
+			action: verdict.action === "allow" ? "allow-once" : "deny",
+			reason: verdict.reason
+		};
+	}
+	return {
+		action: "deny",
+		reason: "no permission policy; default deny"
+	};
+}
 //#endregion
 //#region src/commands/headlessCommand.ts
 /**
@@ -182,6 +212,16 @@ function evaluatePermissionPolicy(policy, toolName, riskLevel) {
 * Enables non-interactive execution for CI/CD pipelines, scripting, and automation.
 * Runs the agent once with the given prompt and exits with an appropriate exit code.
 */
+/**
+* Sandbox status/warning sink for headless mode. Headless emits its NDJSON protocol
+* on stdout, so BOTH info and warn must go to stderr - routing either to stdout would
+* corrupt the protocol stream. Exported so this invariant is unit-tested (see
+* headlessSandboxLog.test.ts) rather than left as an inline lambda nothing pins.
+*/
+const headlessSandboxLog = {
+	info: (line) => void process.stderr.write(`${line}\n`),
+	warn: (line) => void process.stderr.write(`${line}\n`)
+};
 /** Read all data from stdin if it's being piped (non-TTY). Returns empty string if no piped data. */
 async function readStdin() {
 	if (process.stdin.isTTY) return "";
@@ -227,6 +267,7 @@ async function handleHeadlessCommand(options) {
 			}
 			permissionPolicy = parsePermissionPolicy(policyRaw);
 		}
+		customCommandStore.setProjectTrusted(configStore.isProjectTrusted());
 		try {
 			await customCommandStore.loadCommands();
 		} catch {}
@@ -280,28 +321,20 @@ async function handleHeadlessCommand(options) {
 		const permissionManager = new PermissionManager(config.trustedTools ?? [], void 0, config.tools.disabled);
 		const emit = createHeadlessEmitter(runId, (line) => process.stdout.write(line));
 		const streaming = outputFormat === "stream-json";
-		const promptFn = (toolName, args, _preview) => {
+		const promptFn = (toolName, args, _preview, kind) => {
 			const risk = classifyToolRisk(toolName, args, permissionManager.getCategory(toolName));
 			if (streaming) emit({
 				type: "permission_request",
 				toolName,
 				risk
 			});
-			let decision;
-			if (dangerouslySkipPermissions) decision = {
-				action: "allow-once",
-				reason: "dangerously-skip-permissions"
-			};
-			else if (permissionPolicy) {
-				const verdict = evaluatePermissionPolicy(permissionPolicy, toolName, risk.level);
-				decision = {
-					action: verdict.action === "allow" ? "allow-once" : "deny",
-					reason: verdict.reason
-				};
-			} else decision = {
-				action: "deny",
-				reason: "no permission policy; default deny"
-			};
+			const decision = resolveHeadlessPermissionDecision({
+				dangerouslySkipPermissions,
+				isDirectoryGrant: kind === "directory-grant",
+				toolName,
+				riskLevel: risk.level,
+				permissionPolicy
+			});
 			if (streaming) emit({
 				type: "permission_decision",
 				toolName,
@@ -317,28 +350,38 @@ async function handleHeadlessCommand(options) {
 			process.stderr.write("Warning: Agent requested user input; headless mode cannot respond interactively. Answering with empty response.\n");
 			return Promise.resolve({ answers: [] });
 		};
-		const sandboxConfig = config.sandbox ?? DEFAULT_SANDBOX_CONFIG;
 		const checkpointProjectDir = configStore.getProjectConfigDir() ?? process.cwd();
 		const checkpointStore = new CheckpointStore(checkpointProjectDir);
-		const [sandboxRuntime] = await Promise.all([createSandboxRuntime(), checkpointStore.init(session.id).catch(() => {})]);
-		const proxyManager = new ProxyManager(sandboxConfig.network);
-		const sandboxOrchestrator = new SandboxOrchestrator(sandboxConfig, sandboxRuntime, proxyManager);
-		permissionManager.setSandboxState(sandboxConfig.mode, sandboxOrchestrator.isActive());
+		const { sandboxOrchestrator } = await buildSandbox({
+			config,
+			sessionId: session.id,
+			permissionManager,
+			checkpointStore,
+			log: headlessSandboxLog
+		});
 		const agentContext = {
 			currentAgent: null,
 			observationQueue: []
 		};
 		const { tools: b4mTools } = await generateCliTools(config.userId, llm, modelInfo.id, permissionManager, promptFn, agentContext, configStore, apiClient, void 0, userQuestionFn, checkpointStore, sandboxOrchestrator, additionalDirectories);
 		const mcpManager = new McpManager(config);
-		const projectConfigDir = configStore.getProjectConfigDir();
 		const builtinAgentsDir = new URL("../agents/defaults/", import.meta.url).pathname;
-		const agentStore = new AgentStore(builtinAgentsDir, projectConfigDir ?? process.cwd());
+		const agentStore = buildProjectAgentStore(builtinAgentsDir, configStore);
 		const [, , contextResult] = await Promise.all([
 			mcpManager.initialize(),
 			agentStore.loadAgents(),
-			loadContextFiles(projectConfigDir)
+			loadProjectContext(configStore)
 		]);
-		const mcpTools = mcpManager.getTools();
+		const cliWrapDeps = {
+			permissionManager,
+			showPermissionPrompt: promptFn,
+			agentContext,
+			configStore,
+			apiClient,
+			sandboxOrchestrator,
+			allowedDirectories: additionalDirectories
+		};
+		const mcpTools = wrapTools(mcpManager.getTools(), cliWrapDeps);
 		const historyStore = new AgentHistoryStore(config.preferences.subagentHistoryTtlMs ?? 36e5);
 		const orchestrator = new SubagentOrchestrator({
 			userId: config.userId,
@@ -353,7 +396,9 @@ async function handleHeadlessCommand(options) {
 			enableParallelToolExecution: config.preferences.enableParallelToolExecution === true,
 			showUserQuestion: userQuestionFn,
 			checkpointStore,
-			historyStore
+			historyStore,
+			sandboxOrchestrator,
+			additionalDirectories
 		});
 		const backgroundManager = new BackgroundAgentManager(orchestrator);
 		const agentDelegateTool = createAgentDelegateTool(orchestrator, agentStore, session.id, backgroundManager);
@@ -361,15 +406,20 @@ async function handleHeadlessCommand(options) {
 		const resumeAgentTool = createResumeAgentTool(orchestrator, historyStore, backgroundManager);
 		const todoStore = createTodoStore();
 		const writeTodosTool = createWriteTodosTool(todoStore);
-		const findDefinitionTool = createFindDefinitionTool();
-		const getFileStructureTool = createGetFileStructureTool();
+		const findDefinitionTool = wrapTools([createFindDefinitionTool(additionalDirectories)], cliWrapDeps)[0];
+		const getFileStructureTool = wrapTools([createGetFileStructureTool(additionalDirectories)], cliWrapDeps)[0];
 		const workItemTools = config.preferences.enableWorkItemTools ? createWorkItemTools(new WorkItemsClient(apiClient)) : [];
 		const enableSkillTool = config.preferences.enableSkillTool !== false;
-		const skillTool = enableSkillTool ? createSkillTool({
+		const skillTool = enableSkillTool ? wrapTools([createSkillTool({
 			customCommandStore,
 			subagentOrchestrator: orchestrator,
-			sessionId: session.id
-		}) : null;
+			sessionId: session.id,
+			permission: {
+				permissionManager,
+				promptFn
+			},
+			allowedDirectories: additionalDirectories
+		})], cliWrapDeps)[0] : null;
 		const cliTools = [
 			agentDelegateTool,
 			...backgroundTools,
@@ -392,7 +442,7 @@ async function handleHeadlessCommand(options) {
 		const systemPrompt = buildSystemPrompt(config.preferences.promptVariant ?? "current", {
 			contextContent: contextResult.mergedContent,
 			agentStore,
-			customCommands: customCommandStore.getAllCommands(),
+			customCommands: customCommandStore.getModelReachableCommands(),
 			enableSkillTool,
 			enableDynamicAgentCreation: false,
 			additionalDirectories
@@ -527,4 +577,4 @@ async function handleHeadlessCommand(options) {
 	}
 }
 //#endregion
-export { handleHeadlessCommand };
+export { handleHeadlessCommand, headlessSandboxLog };

package/dist/commands/mcpCommand.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { t as ConfigStore } from "../ConfigStore-DHNgFdOu.mjs";
-import { t as version } from "../package-7a45-Svr.mjs";
+import { t as ConfigStore } from "../ConfigStore-qV7NrCgZ.mjs";
+import { t as version } from "../package-CGZIoxcs.mjs";
 //#region src/commands/mcpCommand.ts
 /**
 * External MCP commands (b4m mcp list, b4m mcp add, etc.)
@@ -70,7 +70,7 @@ async function handleMcpCommand(subcommand, argv) {
 			await handleDisable(config, argv.name, configStore);
 			break;
 		case "serve": {
-			const { handleMcpServeCommand } = await import("../serve-CavAHPdQ.mjs");
+			const { handleMcpServeCommand } = await import("../serve-CPXqcEZr.mjs");
 			await handleMcpServeCommand({
 				http: Boolean(argv.http),
 				port: typeof argv.port === "number" ? argv.port : void 0,
@@ -146,9 +146,8 @@ async function handleAdd(config, name, command, args, configStore) {
 		env: {},
 		enabled: true
 	};
-	config.mcpServers.push(newServer);
 	try {
-		await configStore.save(config);
+		await configStore.addMcpServer(newServer);
 		console.log(`✅ Added MCP server "${name}"`);
 		console.log("");
 		console.log("Configuration saved to: ~/.bike4mind/config.json");
@@ -163,14 +162,12 @@ async function handleAdd(config, name, command, args, configStore) {
 * Remove an MCP server
 */
 async function handleRemove(config, name, configStore) {
-	const index = config.mcpServers.findIndex((s) => s.name === name);
-	if (index === -1) {
+	if (config.mcpServers.findIndex((s) => s.name === name) === -1) {
 		console.error(`❌ MCP server "${name}" not found.`);
 		process.exit(1);
 	}
-	config.mcpServers.splice(index, 1);
 	try {
-		await configStore.save(config);
+		await configStore.removeMcpServer(name);
 		console.log(`✅ Removed MCP server "${name}"`);
 		console.log("");
 		console.log("Configuration saved to: ~/.bike4mind/config.json");
@@ -192,9 +189,8 @@ async function handleEnable(config, name, configStore) {
 		console.log(`ℹ️  MCP server "${name}" is already enabled.`);
 		return;
 	}
-	server.enabled = true;
 	try {
-		await configStore.save(config);
+		await configStore.toggleMcpServer(name, true);
 		console.log(`✅ Enabled MCP server "${name}"`);
 		console.log("");
 		console.log("The server will connect next time you start the CLI.");
@@ -216,9 +212,8 @@ async function handleDisable(config, name, configStore) {
 		console.log(`ℹ️  MCP server "${name}" is already disabled.`);
 		return;
 	}
-	server.enabled = false;
 	try {
-		await configStore.save(config);
+		await configStore.toggleMcpServer(name, false);
 		console.log(`✅ Disabled MCP server "${name}"`);
 		console.log("");
 		console.log("The server will not connect next time you start the CLI.");

package/dist/commands/pluginCommand.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { n as getDefaultPluginsDir, r as isFeatureEnabled, t as PluginStore } from "../PluginStore-DwvOJ-G3.mjs";
-import { t as ConfigStore } from "../ConfigStore-DHNgFdOu.mjs";
+import { t as ConfigStore } from "../ConfigStore-qV7NrCgZ.mjs";
 import { execFileSync } from "child_process";
 import { promises } from "fs";
 import path from "path";
@@ -152,13 +152,10 @@ async function handleAdd(spec, pluginsDir, configStore) {
 			continue;
 		}
 		const config = await configStore.load();
-		await configStore.save({
-			...config,
-			features: {
-				...config.features,
-				[descriptor.configKey]: true
-			}
-		});
+		await configStore.save({ features: {
+			...config.features,
+			[descriptor.configKey]: true
+		} });
 		console.log(`✅ Installed ${descriptor.name}@${descriptor.version} (plugin key: ${descriptor.configKey})`);
 		console.log(`Enabled feature "${descriptor.configKey}". It will load next time you start b4m.`);
 	}
@@ -186,13 +183,10 @@ async function handleRemove(name, pluginsDir, configStore) {
 	], pluginsDir, "remove", plugin.name);
 	if (plugin.valid) {
 		const config = await configStore.load();
-		await configStore.save({
-			...config,
-			features: {
-				...config.features,
-				[plugin.configKey]: false
-			}
-		});
+		await configStore.save({ features: {
+			...config.features,
+			[plugin.configKey]: false
+		} });
 	}
 	console.log(`✅ Removed plugin ${plugin.name}${plugin.valid ? ` and disabled "${plugin.configKey}"` : ""}.`);
 }

package/dist/commands/updateCommand.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as version } from "../package-7a45-Svr.mjs";
+import { t as version } from "../package-CGZIoxcs.mjs";
 import { c as isNpmPrefixWritable, l as setAutoUpdatePreference, n as REEXEC_GUARD_ENV, o as forceCheckForUpdate, r as checkForUpdate, s as getAutoUpdatePreference, t as INSTALL_CMD, u as shouldAttemptAutoUpdate } from "../updateChecker-CQW8bxo6.mjs";
 import { t as checkRipgrep } from "../ripgrepCheck-BmkyTK2i.mjs";
 import { execSync, spawnSync } from "child_process";

package/dist/{createFile-DPv180yF-BnWFIxey.mjs → createFile-B8bur5Rb-CVzCarEA.mjs}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
-import { t as assertPathAllowed } from "./pathValidation-D8tjkQXE-1HwvsuYT.mjs";
+import { t as assertPathAllowed } from "./pathValidation-BRqf4HFX-CHwtwp3O.mjs";
 import { existsSync, promises } from "fs";
 import path from "path";
-//#region ../../b4m-core/services/dist/createFile-DPv180yF.mjs
+//#region ../../b4m-core/services/dist/createFile-B8bur5Rb.mjs
 async function createFile(params, allowedDirectories) {
 	const { path: filePath, content, createDirectories = true } = params;
 	const resolvedPath = assertPathAllowed(filePath, allowedDirectories, "create");

package/dist/{deleteFile-BdjUwUQF-B3XOJmg3.mjs → deleteFile-9B3gW_Nb-DG2sovIl.mjs}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
-import { t as assertPathAllowed } from "./pathValidation-D8tjkQXE-1HwvsuYT.mjs";
+import { t as assertPathAllowed } from "./pathValidation-BRqf4HFX-CHwtwp3O.mjs";
 import { existsSync, promises, statSync } from "fs";
 import path from "path";
-//#region ../../b4m-core/services/dist/deleteFile-BdjUwUQF.mjs
+//#region ../../b4m-core/services/dist/deleteFile-9B3gW_Nb.mjs
 async function deleteFile(params, allowedDirectories) {
 	const { path: filePath, recursive = false } = params;
 	const resolvedPath = assertPathAllowed(filePath, allowedDirectories, "delete");

package/dist/{globFiles-DjfDGaUK-CNR8pMRC.mjs → globFiles-CwJ8qmYo-BR5b2KvO.mjs}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
-import { n as isPathAllowed } from "./pathValidation-D8tjkQXE-1HwvsuYT.mjs";
+import { n as isPathAllowed } from "./pathValidation-BRqf4HFX-CHwtwp3O.mjs";
 import path from "path";
 import { stat } from "fs/promises";
 import { glob } from "glob";
-//#region ../../b4m-core/services/dist/globFiles-DjfDGaUK.mjs
+//#region ../../b4m-core/services/dist/globFiles-CwJ8qmYo.mjs
 const DEFAULT_IGNORE_PATTERNS = [
 	"**/node_modules/**",
 	"**/.git/**",
@@ -24,6 +24,7 @@ async function findFiles(params, allowedDirectories) {
 		const dirsMsg = allowedDirectories && allowedDirectories.length > 0 ? `Allowed directories: ${[baseCwd, ...allowedDirectories].join(", ")}` : `Working directory: ${baseCwd}`;
 		throw new Error(`Access denied: Cannot search outside allowed directories. ${dirsMsg}`);
 	}
+	if (path.isAbsolute(pattern) || pattern.split("/").includes("..")) throw new Error("Access denied: Cannot search outside allowed directories. The pattern must be relative to the search directory.");
 	const matches = await glob(pattern, {
 		cwd: targetDir,
 		dot: false,

package/dist/{grepSearch-BaYUfIYs-n0XKoGnL.mjs → grepSearch-BgoOOwGe-DtlV8Gn-.mjs}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
-import { n as isPathAllowed } from "./pathValidation-D8tjkQXE-1HwvsuYT.mjs";
+import { n as isPathAllowed } from "./pathValidation-BRqf4HFX-CHwtwp3O.mjs";
 import { execFile } from "child_process";
 import { existsSync } from "fs";
 import path from "path";
 import { promisify } from "util";
 import { stat } from "fs/promises";
-//#region ../../b4m-core/services/dist/grepSearch-BaYUfIYs.mjs
+//#region ../../b4m-core/services/dist/grepSearch-BgoOOwGe.mjs
 const execFileAsync = promisify(execFile);
 /** Cached ripgrep binary path after first resolution */
 let cachedRgPath = null;
@@ -64,7 +64,7 @@ async function searchFiles(params, allowedDirectories) {
 	if (globs.length > 0) globs.forEach((glob) => {
 		rgArgs.push("--glob", glob);
 	});
-	rgArgs.push(pattern, targetDir);
+	rgArgs.push("--", pattern, targetDir);
 	let stdout;
 	try {
 		stdout = (await execFileAsync(rgPath, rgArgs, { maxBuffer: 52428800 })).stdout;