@bike4mind/cli 1.1.0 → 2.0.0

package/dist/commands/acpCommand.mjs

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
-import { $ as CustomCommandStore, A as createAgentDelegateTool, C as createTodoStore, D as createCoordinateTaskTool, F as PermissionManager, J as setWebSocketToolExecutor, L as wrapTools, O as createResumeAgentTool, Q as RemoteSkillSource, S as createFindDefinitionTool, T as createSkillTool, b as createGetFileStructureTool, et as CheckpointStore, j as FallbackLlmBackend, k as createBackgroundAgentTools, tt as SessionStore, w as createWriteTodosTool } from "../AgentHistoryStore-kT9eNMRO.mjs";
-import { n as logger, p as requireApiUrl, s as isReadOnlyTool, t as ConfigStore } from "../ConfigStore-DdHHCH2t.mjs";
-import { t as ApiClient } from "../ApiClient-BOWpVvTq.mjs";
-import { a as createToolSearchTool, i as buildLlmBackend, n as buildSupportingStores, o as deferredToolRegistry, r as buildSandbox, s as NotifyingLlmBackend, t as buildAgent } from "../buildAgent-B_kArQ_Y.mjs";
+import { $ as CustomCommandStore, A as createAgentDelegateTool, C as createTodoStore, D as createCoordinateTaskTool, F as PermissionManager, J as setWebSocketToolExecutor, L as wrapTools, O as createResumeAgentTool, Q as RemoteSkillSource, S as createFindDefinitionTool, T as createSkillTool, b as createGetFileStructureTool, et as CheckpointStore, j as FallbackLlmBackend, k as createBackgroundAgentTools, s as buildSandbox, tt as SessionStore, w as createWriteTodosTool } from "../AgentHistoryStore-DIMzvf-y.mjs";
+import { _ as requireApiUrl, d as isReadOnlyTool, n as logger, t as ConfigStore } from "../ConfigStore-DIs-K9oD.mjs";
+import { a as deferredToolRegistry, i as createToolSearchTool, n as buildSupportingStores, o as NotifyingLlmBackend, r as buildLlmBackend, t as buildAgent } from "../buildAgent-DOvEp92a.mjs";
+import { t as ApiClient } from "../ApiClient-BTI0-m0g.mjs";
 import { randomUUID } from "crypto";
 import { existsSync, realpathSync, statSync } from "fs";
 import { isAbsolute } from "path";
@@ -575,6 +575,7 @@ var AcpServer = class {
 	}
 	async buildStack() {
 		const config = await this.configStore.load();
+		this.configStore.warnPendingMcpApprovals();
 		await this.loadCustomCommands();
 		const authTokens = await this.configStore.getAuthTokens();
 		if (!authTokens) throw RequestError.authRequired(void 0, "Not authenticated. Run `b4m /login` first.");
@@ -700,8 +701,10 @@ var AcpServer = class {
 				customCommandStore: this.customCommandStore,
 				subagentOrchestrator: orchestrator,
 				sessionId,
-				permissionManager,
-				promptFn: this.promptFn,
+				permission: {
+					permissionManager,
+					promptFn: this.promptFn
+				},
 				allowedDirectories
 			})] : []
 		], cliWrapDeps);

package/dist/commands/apiCommand.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { f as parseApiUrl, m as resolveApiEndpoint, t as ConfigStore } from "../ConfigStore-DdHHCH2t.mjs";
+import { g as parseApiUrl, t as ConfigStore, v as resolveApiEndpoint } from "../ConfigStore-DIs-K9oD.mjs";
 //#region src/commands/apiCommand.ts
 /**
 * External API config command (--api-url / --reset-api)

package/dist/commands/doctorCommand.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as version } from "../package-Bqg2LSnH.mjs";
+import { t as version } from "../package-Dl_F2Fah.mjs";
 import { a as fetchLatestVersion, c as isNpmPrefixWritable, i as compareSemver } from "../updateChecker-CQW8bxo6.mjs";
 import { t as checkRipgrep } from "../ripgrepCheck-BmkyTK2i.mjs";
 import { execSync } from "child_process";

package/dist/commands/envCommand.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as ConfigStore } from "../ConfigStore-DdHHCH2t.mjs";
+import { t as ConfigStore } from "../ConfigStore-DIs-K9oD.mjs";
 //#region src/commands/envCommand.ts
 /**
 * Environment switching for the `--dev` / `--prod` launch flags.

package/dist/commands/headlessCommand.mjs

@@ -1,12 +1,8 @@
 #!/usr/bin/env node
-import { $ as CustomCommandStore, A as createAgentDelegateTool, C as createTodoStore, D as createCoordinateTaskTool, F as PermissionManager, G as classifyCommandRisk, I as generateCliTools, J as setWebSocketToolExecutor, L as wrapTools, N as ReActAgent, O as createResumeAgentTool, Q as RemoteSkillSource, S as createFindDefinitionTool, T as createSkillTool, X as buildSystemPrompt, a as loadProjectContext, b as createGetFileStructureTool, et as CheckpointStore, i as buildProjectAgentStore, j as FallbackLlmBackend, k as createBackgroundAgentTools, n as BackgroundAgentManager, o as McpManager, r as SubagentOrchestrator, s as createSseBackend, t as AgentHistoryStore, tt as SessionStore, w as createWriteTodosTool, x as createWorkItemTools, z as SHELL_LIKE_TOOL_COMMAND_FIELDS } from "../AgentHistoryStore-kT9eNMRO.mjs";
-import { n as logger, p as requireApiUrl, s as isReadOnlyTool, t as ConfigStore } from "../ConfigStore-DdHHCH2t.mjs";
-import { t as ApiClient } from "../ApiClient-BOWpVvTq.mjs";
-import { t as DEFAULT_SANDBOX_CONFIG } from "../types-F61_hxmG.mjs";
+import { $ as CustomCommandStore, A as createAgentDelegateTool, C as createTodoStore, D as createCoordinateTaskTool, F as PermissionManager, G as classifyCommandRisk, I as generateCliTools, J as setWebSocketToolExecutor, L as wrapTools, N as ReActAgent, O as createResumeAgentTool, Q as RemoteSkillSource, S as createFindDefinitionTool, T as createSkillTool, X as buildSystemPrompt, a as loadProjectContext, b as createGetFileStructureTool, c as createSseBackend, et as CheckpointStore, i as buildProjectAgentStore, j as FallbackLlmBackend, k as createBackgroundAgentTools, n as BackgroundAgentManager, o as McpManager, r as SubagentOrchestrator, s as buildSandbox, t as AgentHistoryStore, tt as SessionStore, w as createWriteTodosTool, x as createWorkItemTools, z as SHELL_LIKE_TOOL_COMMAND_FIELDS } from "../AgentHistoryStore-DIMzvf-y.mjs";
+import { _ as requireApiUrl, d as isReadOnlyTool, n as logger, t as ConfigStore } from "../ConfigStore-DIs-K9oD.mjs";
+import { t as ApiClient } from "../ApiClient-BTI0-m0g.mjs";
 import { r as reconstructTurnBlocks, t as WorkItemsClient } from "../WorkItemsClient-Cow6nXx7.mjs";
-import { t as createSandboxRuntime } from "../SandboxRuntimeAdapter-ChGlxSGQ.mjs";
-import { t as SandboxOrchestrator } from "../SandboxOrchestrator-CIegJrCj.mjs";
-import { t as ProxyManager } from "../ProxyManager-C1-lgzEU.mjs";
 import { randomBytes } from "crypto";
 import { v4 } from "uuid";
 import { readFile } from "fs/promises";
@@ -216,6 +212,16 @@ function resolveHeadlessPermissionDecision(params) {
 * Enables non-interactive execution for CI/CD pipelines, scripting, and automation.
 * Runs the agent once with the given prompt and exits with an appropriate exit code.
 */
+/**
+* Sandbox status/warning sink for headless mode. Headless emits its NDJSON protocol
+* on stdout, so BOTH info and warn must go to stderr - routing either to stdout would
+* corrupt the protocol stream. Exported so this invariant is unit-tested (see
+* headlessSandboxLog.test.ts) rather than left as an inline lambda nothing pins.
+*/
+const headlessSandboxLog = {
+	info: (line) => void process.stderr.write(`${line}\n`),
+	warn: (line) => void process.stderr.write(`${line}\n`)
+};
 /** Read all data from stdin if it's being piped (non-TTY). Returns empty string if no piped data. */
 async function readStdin() {
 	if (process.stdin.isTTY) return "";
@@ -244,6 +250,7 @@ async function handleHeadlessCommand(options) {
 	const runId = v4();
 	try {
 		const config = await configStore.load();
+		configStore.warnPendingMcpApprovals();
 		const configDirs = await configStore.getAdditionalDirectories();
 		const flagDirs = process.env.B4M_ADDITIONAL_DIRS ? parseStringArray(process.env.B4M_ADDITIONAL_DIRS, "B4M_ADDITIONAL_DIRS") : [];
 		const additionalDirectories = [.../* @__PURE__ */ new Set([
@@ -344,13 +351,15 @@ async function handleHeadlessCommand(options) {
 			process.stderr.write("Warning: Agent requested user input; headless mode cannot respond interactively. Answering with empty response.\n");
 			return Promise.resolve({ answers: [] });
 		};
-		const sandboxConfig = config.sandbox ?? DEFAULT_SANDBOX_CONFIG;
 		const checkpointProjectDir = configStore.getProjectConfigDir() ?? process.cwd();
 		const checkpointStore = new CheckpointStore(checkpointProjectDir);
-		const [sandboxRuntime] = await Promise.all([createSandboxRuntime(), checkpointStore.init(session.id).catch(() => {})]);
-		const proxyManager = new ProxyManager(sandboxConfig.network);
-		const sandboxOrchestrator = new SandboxOrchestrator(sandboxConfig, sandboxRuntime, proxyManager);
-		permissionManager.setSandboxState(sandboxConfig.mode, sandboxOrchestrator.isActive());
+		const { sandboxOrchestrator } = await buildSandbox({
+			config,
+			sessionId: session.id,
+			permissionManager,
+			checkpointStore,
+			log: headlessSandboxLog
+		});
 		const agentContext = {
 			currentAgent: null,
 			observationQueue: []
@@ -406,8 +415,10 @@ async function handleHeadlessCommand(options) {
 			customCommandStore,
 			subagentOrchestrator: orchestrator,
 			sessionId: session.id,
-			permissionManager,
-			promptFn,
+			permission: {
+				permissionManager,
+				promptFn
+			},
 			allowedDirectories: additionalDirectories
 		})], cliWrapDeps)[0] : null;
 		const cliTools = [
@@ -432,7 +443,7 @@ async function handleHeadlessCommand(options) {
 		const systemPrompt = buildSystemPrompt(config.preferences.promptVariant ?? "current", {
 			contextContent: contextResult.mergedContent,
 			agentStore,
-			customCommands: customCommandStore.getAllCommands(),
+			customCommands: customCommandStore.getModelReachableCommands(),
 			enableSkillTool,
 			enableDynamicAgentCreation: false,
 			additionalDirectories
@@ -567,4 +578,4 @@ async function handleHeadlessCommand(options) {
 	}
 }
 //#endregion
-export { handleHeadlessCommand };
+export { handleHeadlessCommand, headlessSandboxLog };

package/dist/commands/mcpCommand.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { t as ConfigStore } from "../ConfigStore-DdHHCH2t.mjs";
-import { t as version } from "../package-Bqg2LSnH.mjs";
+import { t as ConfigStore } from "../ConfigStore-DIs-K9oD.mjs";
+import { t as version } from "../package-Dl_F2Fah.mjs";
 //#region src/commands/mcpCommand.ts
 /**
 * External MCP commands (b4m mcp list, b4m mcp add, etc.)
@@ -70,7 +70,7 @@ async function handleMcpCommand(subcommand, argv) {
 			await handleDisable(config, argv.name, configStore);
 			break;
 		case "serve": {
-			const { handleMcpServeCommand } = await import("../serve-DO9Edl5S.mjs");
+			const { handleMcpServeCommand } = await import("../serve-Y2zMbfGs.mjs");
 			await handleMcpServeCommand({
 				http: Boolean(argv.http),
 				port: typeof argv.port === "number" ? argv.port : void 0,

package/dist/commands/pluginCommand.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { n as getDefaultPluginsDir, r as isFeatureEnabled, t as PluginStore } from "../PluginStore-DwvOJ-G3.mjs";
-import { t as ConfigStore } from "../ConfigStore-DdHHCH2t.mjs";
+import { t as ConfigStore } from "../ConfigStore-DIs-K9oD.mjs";
 import { execFileSync } from "child_process";
 import { promises } from "fs";
 import path from "path";

package/dist/commands/updateCommand.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as version } from "../package-Bqg2LSnH.mjs";
+import { t as version } from "../package-Dl_F2Fah.mjs";
 import { c as isNpmPrefixWritable, l as setAutoUpdatePreference, n as REEXEC_GUARD_ENV, o as forceCheckForUpdate, r as checkForUpdate, s as getAutoUpdatePreference, t as INSTALL_CMD, u as shouldAttemptAutoUpdate } from "../updateChecker-CQW8bxo6.mjs";
 import { t as checkRipgrep } from "../ripgrepCheck-BmkyTK2i.mjs";
 import { execSync, spawnSync } from "child_process";