@bike4mind/cli 2.0.0 → 2.1.0

package/README.md

@@ -395,7 +395,7 @@ You can also run any MCP server via npx or custom executables:
 
 #### Serve Bike4Mind itself as an MCP server (`b4m mcp serve`)
 
-The reverse of adding a server: `b4m mcp serve` exposes your Bike4Mind backend to any MCP client (Claude Desktop, editors, other agents). It advertises ten tools (`list_notebooks`, `get_notebook`, `create_notebook`, `send_message`, `search_knowledge_base`, `list_lakes`, `list_files`, `get_file`, `generate_sound_effect`, `text_to_speech`) plus four resource templates (`b4m://notebook/{id}`, `b4m://file/{id}`, `b4m://project/{id}`, `b4m://artifact/{id}`), each listable and readable as JSON, and `b4m://agent-quest` - the credential-free manifest for The Open Door, the onboarding quest for agents.
+The reverse of adding a server: `b4m mcp serve` exposes your Bike4Mind backend to any MCP client (Claude Desktop, editors, other agents). It advertises seventeen tools (`list_notebooks`, `get_notebook`, `create_notebook`, `rename_notebook`, `clone_notebook`, `delete_notebook`, `list_projects`, `get_project`, `create_project`, `send_message`, `search_knowledge_base`, `list_lakes`, `list_files`, `get_file`, `generate_sound_effect`, `text_to_speech`, `generate_image`) plus four resource templates (`b4m://notebook/{id}`, `b4m://file/{id}`, `b4m://project/{id}`, `b4m://artifact/{id}`), each listable and readable as JSON, and `b4m://agent-quest` - the credential-free manifest for The Open Door, the onboarding quest for agents.
 
 To get answers grounded in a data lake, call `list_lakes`, then `create_notebook { dataLakeId }` with a lake's id, then `send_message { notebookId }` on that notebook: the result carries the `reply` plus the `citables` it was grounded in. `list_lakes` needs a key with `datalake:read` (and data lakes enabled on the instance).
 

package/dist/{AgentHistoryStore-DIMzvf-y.mjs → AgentHistoryStore-DdYKfx7C.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { F as NotFoundError, G as WORK_ITEM_STATUSES, I as OllamaEmbeddingModel, L as OpenAIEmbeddingModel, N as McpServerName, O as ChatModels, Q as googleMapsSearchUrl, T as BedrockEmbeddingModel, U as SupportedFabFileMimeTypes, V as SEARCH_RESULT_CARDS_LANGUAGE, W as VoyageAIEmbeddingModel, X as getMcpProviderMetadata, a as htmlErrorTitle, at as secureParameters, bt as APP_NAME, c as loadContextFiles, d as isReadOnlyTool, i as isValidSessionId, it as obfuscateApiKey, j as LOCATION_MAP_LANGUAGE, l as canTrustTool, mt as withRetry, n as logger, nt as isRetryableError, o as htmlFirstH1, ot as signImageUrl, r as SESSION_ID_PATTERN, st as splitEquals, tt as isPlaceholderImageSigningSecret, u as getToolCategory, w as ApiKeyType, xt as WEBSITE_URL, z as PermissionDeniedError } from "./ConfigStore-DIs-K9oD.mjs";
+import { A as ChatModels, B as NotFoundError, E as BedrockEmbeddingModel, H as OpenAIEmbeddingModel, I as LOCATION_MAP_LANGUAGE, J as SupportedFabFileMimeTypes, K as SEARCH_RESULT_CARDS_LANGUAGE, Mt as APP_NAME, Nt as WEBSITE_URL, R as McpServerName, V as OllamaEmbeddingModel, W as PermissionDeniedError, X as WORK_ITEM_STATUSES, Y as VoyageAIEmbeddingModel, a as htmlErrorTitle, c as loadContextFiles, ct as isRetryableError, d as isReadOnlyTool, dt as obfuscateApiKey, gt as splitEquals, ht as signImageUrl, i as isValidSessionId, it as googleMapsSearchUrl, l as canTrustTool, mt as secureParameters, n as logger, nt as getMcpProviderMetadata, o as htmlFirstH1, r as SESSION_ID_PATTERN, st as isPlaceholderImageSigningSecret, u as getToolCategory, w as ApiKeyType, wt as withRetry } from "./ConfigStore-BygzEI6H.mjs";
 import { n as isPathAllowed, t as assertPathAllowed } from "./pathValidation-BRqf4HFX-CHwtwp3O.mjs";
 import { n as isTerminalShellStatus, t as getShellSessionManager } from "./ShellSessionManager-6o8KZzl1-vrbPAUTq.mjs";
 import { execFile, execFileSync, spawn } from "child_process";
@@ -2210,7 +2210,64 @@ const webFetchTool = {
 	})
 };
 //#endregion
-//#region ../../b4m-core/services/dist/websearch-ClW051tj.mjs
+//#region ../../b4m-core/services/dist/prompts-Df-9fQuz.mjs
+/**
+* Teaches the `b4m_cards` fence, appended to a web_search result ONLY when that search actually
+* returned images (see shouldIncludeImages). Delivering it with the results rather than in the system
+* prompt costs nothing on the turns that will never use it, and arrives exactly when it is actionable.
+*
+* The field names must stay in sync with the parser in
+* apps/client/app/components/Session/parseSearchResultCards.ts; the fence language is shared.
+*/
+const WEB_SEARCH_CARDS_PROMPT = [
+	"The results above include images, so illustrate your answer - do not wait to be asked. When you name specific",
+	`things the user would want to SEE, emit a \`\`\`${SEARCH_RESULT_CARDS_LANGUAGE} fenced block inline in your reply, placed`,
+	"exactly where the pictures belong - right after the sentence that introduces them, not at the end.",
+	"The block is a single JSON object:",
+	"",
+	`\`\`\`${SEARCH_RESULT_CARDS_LANGUAGE}`,
+	"{\"cards\":[{\"name\":\"Orient Bambino\",\"note\":\"Your own description of this thing, in your voice.\",",
+	"\"meta\":\"~$200\",\"url\":\"https://orientwatch.co/bambino\",\"images\":[",
+	"{\"url\":\"https://example.com/a.jpg\",\"source\":\"orientwatch.co\"},",
+	"{\"url\":\"https://example.com/b.jpg\",\"source\":\"jomashop\"}]}]}",
+	"```",
+	"",
+	"Rules: `name` and at least one `images` entry are required. Every image `url` must be copied verbatim",
+	"from an `image:` or Images line above, never invented or guessed, and `source` is that entry's own",
+	"`source`/hostname, so each picture is attributed. Prefer the \"Images found for this search\" pool:",
+	"those carry their own page and publisher. `note` is YOUR prose about the thing, not the",
+	"search snippet. `meta` is a short footer such as a price or key spec. `url` is where the card links.",
+	"Two to six cards is the useful range. Keep writing normally around the block - it replaces neither",
+	"your explanation nor your citations. Omit the block only if the results genuinely have no images",
+	"worth showing; never tell the user you could show pictures if they asked - just show them."
+].join("\n");
+/**
+* Teaches the `b4m_map` fence, appended to a web_search result ONLY when that search returned places
+* with provider coordinates (see shouldIncludePlaces). The fence names places by id alone, so the
+* model never writes a coordinate - the client resolves each id against the stored place citables.
+*
+* The field names must stay in sync with parseLocationMapFence in
+* b4m-core/common/src/constants/locationMap.ts.
+*/
+const WEB_SEARCH_MAP_PROMPT = [
+	"The results above include places with map locations, so show them on a map - do not wait to be asked.",
+	`Emit one \`\`\`${LOCATION_MAP_LANGUAGE} fenced block inline in your reply, placed where the map belongs - right`,
+	"after the sentence that introduces the places. The block is a single JSON object:",
+	"",
+	`\`\`\`${LOCATION_MAP_LANGUAGE}`,
+	"{\"anchor\":{\"id\":\"<anchor id>\",\"name\":\"citizenM Copenhagen\",\"label\":\"Your hotel\"},",
+	"\"places\":[{\"id\":\"<place id>\",\"name\":\"Barr\",\"note\":\"Your own one-line take on this place.\"}]}",
+	"```",
+	"",
+	"Rules: every `id` must be copied verbatim from an `id:` line above - never invent one, and never write",
+	"coordinates; the map locates each place from its id. `name` is the place name as listed. `note` is",
+	"YOUR short line about why it fits the request. Include `anchor` only when an \"Anchor location\" is listed",
+	"above, with a short `label` for what it is to the user (\"Your hotel\", \"Your office\"). List the places",
+	"worth recommending, three to ten. Keep writing normally around the block - it does not replace your",
+	"explanation or citations. Omit it only if none of the places actually answer the question."
+].join("\n");
+//#endregion
+//#region ../../b4m-core/services/dist/websearch-BpzP6-Zz.mjs
 /**
 * Per-process cache for web-search results. Keyed on normalized query + result count, with a
 * short TTL so repeated/similar searches within a turn or across back-to-back turns reuse the
@@ -2788,61 +2845,6 @@ async function resolveWebSearchProviders(adapters) {
 	if (lead.name === "serpapi") return [lead, settings.searxngUrl ? createSearxngProvider(settings.searxngUrl) : null];
 	return [lead, settings.serperKey ? createSerpApiProvider(adapters) : null];
 }
-/**
-* Teaches the `b4m_cards` fence, appended to a web_search result ONLY when that search actually
-* returned images (see shouldIncludeImages). Delivering it with the results rather than in the system
-* prompt costs nothing on the turns that will never use it, and arrives exactly when it is actionable.
-*
-* The field names must stay in sync with the parser in
-* apps/client/app/components/Session/parseSearchResultCards.ts; the fence language is shared.
-*/
-const WEB_SEARCH_CARDS_PROMPT = [
-	"The results above include images, so illustrate your answer - do not wait to be asked. When you name specific",
-	`things the user would want to SEE, emit a \`\`\`${SEARCH_RESULT_CARDS_LANGUAGE} fenced block inline in your reply, placed`,
-	"exactly where the pictures belong - right after the sentence that introduces them, not at the end.",
-	"The block is a single JSON object:",
-	"",
-	`\`\`\`${SEARCH_RESULT_CARDS_LANGUAGE}`,
-	"{\"cards\":[{\"name\":\"Orient Bambino\",\"note\":\"Your own description of this thing, in your voice.\",",
-	"\"meta\":\"~$200\",\"url\":\"https://orientwatch.co/bambino\",\"images\":[",
-	"{\"url\":\"https://example.com/a.jpg\",\"source\":\"orientwatch.co\"},",
-	"{\"url\":\"https://example.com/b.jpg\",\"source\":\"jomashop\"}]}]}",
-	"```",
-	"",
-	"Rules: `name` and at least one `images` entry are required. Every image `url` must be copied verbatim",
-	"from an `image:` or Images line above, never invented or guessed, and `source` is that entry's own",
-	"`source`/hostname, so each picture is attributed. Prefer the \"Images found for this search\" pool:",
-	"those carry their own page and publisher. `note` is YOUR prose about the thing, not the",
-	"search snippet. `meta` is a short footer such as a price or key spec. `url` is where the card links.",
-	"Two to six cards is the useful range. Keep writing normally around the block - it replaces neither",
-	"your explanation nor your citations. Omit the block only if the results genuinely have no images",
-	"worth showing; never tell the user you could show pictures if they asked - just show them."
-].join("\n");
-/**
-* Teaches the `b4m_map` fence, appended to a web_search result ONLY when that search returned places
-* with provider coordinates (see shouldIncludePlaces). The fence names places by id alone, so the
-* model never writes a coordinate - the client resolves each id against the stored place citables.
-*
-* The field names must stay in sync with parseLocationMapFence in
-* b4m-core/common/src/constants/locationMap.ts.
-*/
-const WEB_SEARCH_MAP_PROMPT = [
-	"The results above include places with map locations, so show them on a map - do not wait to be asked.",
-	`Emit one \`\`\`${LOCATION_MAP_LANGUAGE} fenced block inline in your reply, placed where the map belongs - right`,
-	"after the sentence that introduces the places. The block is a single JSON object:",
-	"",
-	`\`\`\`${LOCATION_MAP_LANGUAGE}`,
-	"{\"anchor\":{\"id\":\"<anchor id>\",\"name\":\"citizenM Copenhagen\",\"label\":\"Your hotel\"},",
-	"\"places\":[{\"id\":\"<place id>\",\"name\":\"Barr\",\"note\":\"Your own one-line take on this place.\"}]}",
-	"```",
-	"",
-	"Rules: every `id` must be copied verbatim from an `id:` line above - never invent one, and never write",
-	"coordinates; the map locates each place from its id. `name` is the place name as listed. `note` is",
-	"YOUR short line about why it fits the request. Include `anchor` only when an \"Anchor location\" is listed",
-	"above, with a short `label` for what it is to the user (\"Your hotel\", \"Your office\"). List the places",
-	"worth recommending, three to ten. Keep writing normally around the block - it does not replace your",
-	"explanation or citations. Omit it only if none of the places actually answer the question."
-].join("\n");
 function safeHostname(url) {
 	try {
 		return new URL(url).hostname;
@@ -3340,7 +3342,7 @@ async function getModelForWrite(user, modelId, deps) {
 	return isModelOwner(model, user) ? model : null;
 }
 //#endregion
-//#region ../../b4m-core/services/dist/toolGenerators-KiYiCRXT.mjs
+//#region ../../b4m-core/services/dist/toolGenerators-DT6OlvUe.mjs
 const diceRoll = async (parameters) => {
 	if (!parameters?.sides || !parameters?.times) throw new Error("Tool dice roll: Missing required parameters");
 	return sum(times(parameters.times, () => random(1, parameters.sides))).toString();
@@ -3930,27 +3932,6 @@ const promptEnhancementTool = {
 		}
 	})
 };
-/**
-* Is this value shaped like something Mongoose can cast to an `_id`?
-*
-* Tool arguments are composed by the model out of conversation text and reach us as unvalidated
-* JSON, so an id parameter routinely holds something that is not an id at all - a filename token,
-* an arXiv number, a bare integer. Mongoose casts `_id` and throws a CastError on those, which a
-* generic catch upstream then reports as an outage rather than the bad argument it is (#2530).
-* Call this before handing a model-supplied id to `findById` and answer a false the same way the
-* surface answers a genuinely missing row.
-*
-* `isObjectIdOrHexString`, not `isValidObjectId`: the latter also accepts a number and casts it to
-* a fabricated id, and a model emitting `{"file_id": 12}` gives us exactly that despite the
-* `string` type. Same choice, same reason, as `usableObjectIds` in @bike4mind/db-core, which is
-* the array-shaped version of this check.
-*
-* NOT usable for artifact ids (`artifact_<...>`), which are matched on a string `id` field rather
-* than `_id` - see `createArtifactId` in @bike4mind/common.
-*/
-function isObjectIdShaped$1(id) {
-	return isObjectIdOrHexString(id);
-}
 let _showUserQuestion = null;
 /**
 * Inject the CLI callback that displays the question UI.
@@ -4070,7 +4051,7 @@ const askUserQuestionTool = {
 * re-export them without pulling the full tool graph. `index.ts` re-exports them
 * so the server barrel's public API is unchanged.
 */
-const generateTools = (userId, user, logger, { db, retrievalFilter, kbScope, inlinedAttachmentIds, fullyInlinedAttachmentIds, suppressLakeArms, sessionRetrievalTags, sessionReaderConsentDatalakeTags, sessionLakeScopeExplicit, sessionPreauthorizedLakeIds, organizationId, apiKeyId, questId, getAbortSignal }, storage, imageGenerateStorage, statusUpdate, onStart, onFinish, llm, config, model, imageProcessorLambdaName, tools, allowedDirectories, entitlementKeys = [], sessionId, codeMinifier, availableModels, onToolLlmUsage) => {
+const generateTools = (userId, user, logger, { db, retrievalFilter, kbScope, inlinedAttachmentIds, attachedFileIds, fullyInlinedAttachmentIds, suppressLakeArms, sessionRetrievalTags, sessionReaderConsentDatalakeTags, sessionLakeScopeExplicit, sessionIncludeLibraryFiles, sessionPreauthorizedLakeIds, organizationId, apiKeyId, questId, getAbortSignal }, storage, imageGenerateStorage, statusUpdate, onStart, onFinish, llm, config, model, imageProcessorLambdaName, tools, allowedDirectories, entitlementKeys = [], sessionId, codeMinifier, availableModels, onToolLlmUsage) => {
 	const context = {
 		userId,
 		user,
@@ -4091,11 +4072,13 @@ const generateTools = (userId, user, logger, { db, retrievalFilter, kbScope, inl
 		retrievalFilter,
 		kbScope,
 		inlinedAttachmentIds,
+		attachedFileIds,
 		fullyInlinedAttachmentIds,
 		suppressLakeArms,
 		sessionRetrievalTags,
 		sessionReaderConsentDatalakeTags,
 		sessionLakeScopeExplicit,
+		sessionIncludeLibraryFiles,
 		sessionPreauthorizedLakeIds,
 		organizationId,
 		apiKeyId,
@@ -4116,16 +4099,34 @@ const generateTools = (userId, user, logger, { db, retrievalFilter, kbScope, inl
 	}, {});
 };
 /**
+* MCP tool args only the confirm-button handlers may set. Those handlers call the MCP host
+* directly, never through these generators, so a model-originated call carrying one is forged.
+* `_executeFromButton` mirrors the button-only keys of `confirmationParams` in
+* b4m-core/mcp/src/shared/schemas.ts (pinned by github/__tests__/helpers/schemas.test.ts there);
+* `_confirmToken` is the preview token tools return.
+*/
+const SERVER_ONLY_MCP_ARG_KEYS = ["_executeFromButton", "_confirmToken"];
+const isPlainObject$1 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+function stripServerOnlyArgs(args) {
+	if (!isPlainObject$1(args)) return args;
+	return Object.fromEntries(Object.entries(args).filter(([key]) => !SERVER_ONLY_MCP_ARG_KEYS.includes(key)));
+}
+/**
 * Normalize MCP tool parameters for OpenAI compatibility.
 * OpenAI requires 'properties' on object schemas - MCP tools like current_user
 * return { type: 'object' } without it, causing 400 errors.
 */
 function normalizeToolParameters(rest) {
 	const rawParameters = rest?.input_schema ?? rest?.inputSchema ?? rest?.parameters;
-	if (rawParameters && typeof rawParameters === "object") return {
-		...rawParameters,
-		properties: rawParameters.properties ?? {}
-	};
+	if (isPlainObject$1(rawParameters)) {
+		const properties = isPlainObject$1(rawParameters.properties) ? stripServerOnlyArgs(rawParameters.properties) : rawParameters.properties ?? {};
+		const required = Array.isArray(rawParameters.required) ? rawParameters.required.filter((key) => typeof key !== "string" || !SERVER_ONLY_MCP_ARG_KEYS.includes(key)) : rawParameters.required;
+		return {
+			...rawParameters,
+			properties,
+			...required !== void 0 ? { required } : {}
+		};
+	}
 	return {
 		type: "object",
 		properties: {},
@@ -4158,7 +4159,7 @@ const generateMcpTools = async (mcpData) => {
 			toolFn: async (args) => {
 				Logger.debug(`Calling ${originalToolName} tool via ${mcpData.serverName}`, args);
 				try {
-					const toolResult = await mcpData.callTool(originalToolName, args);
+					const toolResult = await mcpData.callTool(originalToolName, stripServerOnlyArgs(args));
 					const contentBlocks = toolResult?.content;
 					if (Array.isArray(contentBlocks) && contentBlocks.length > 0) {
 						const normalized = contentBlocks.map((entry) => {
@@ -4210,7 +4211,7 @@ const generateMcpToolsFromCache = (serverName, cachedTools, callTool) => {
 			toolFn: async (args) => {
 				Logger.debug(`Calling ${originalToolName} tool via ${serverName}`, args);
 				try {
-					const toolResult = await callTool(originalToolName, args);
+					const toolResult = await callTool(originalToolName, stripServerOnlyArgs(args));
 					const contentBlocks = toolResult?.content;
 					if (Array.isArray(contentBlocks) && contentBlocks.length > 0) {
 						const normalized = contentBlocks.map((entry) => {
@@ -4247,6 +4248,29 @@ const generateMcpToolsFromCache = (serverName, cachedTools, callTool) => {
 	return result;
 };
 //#endregion
+//#region ../../b4m-core/services/dist/objectId-DTad97PS.mjs
+/**
+* Is this value shaped like something Mongoose can cast to an `_id`?
+*
+* Tool arguments are composed by the model out of conversation text and reach us as unvalidated
+* JSON, so an id parameter routinely holds something that is not an id at all - a filename token,
+* an arXiv number, a bare integer. Mongoose casts `_id` and throws a CastError on those, which a
+* generic catch upstream then reports as an outage rather than the bad argument it is (#2530).
+* Call this before handing a model-supplied id to `findById` and answer a false the same way the
+* surface answers a genuinely missing row.
+*
+* `isObjectIdOrHexString`, not `isValidObjectId`: the latter also accepts a number and casts it to
+* a fabricated id, and a model emitting `{"file_id": 12}` gives us exactly that despite the
+* `string` type. Same choice, same reason, as `usableObjectIds` in @bike4mind/db-core, which is
+* the array-shaped version of this check.
+*
+* NOT usable for artifact ids (`artifact_<...>`), which are matched on a string `id` field rather
+* than `_id` - see `createArtifactId` in @bike4mind/common.
+*/
+function isObjectIdShaped(id) {
+	return isObjectIdOrHexString(id);
+}
+//#endregion
 //#region ../../b4m-core/services/dist/llm/tools/cliTools.mjs
 /**
 * Validated fuzzy fallback for `edit_local_file` string matching.
@@ -5636,7 +5660,7 @@ const latticeAddEntityTool = {
 				createdAt: /* @__PURE__ */ new Date(),
 				updatedAt: /* @__PURE__ */ new Date()
 			};
-			if (context.db.latticeModels && modelId && isObjectIdShaped$1(modelId)) try {
+			if (context.db.latticeModels && modelId && isObjectIdShaped(modelId)) try {
 				const model = await getModelForWrite({
 					id: context.userId,
 					organizationId: context.user?.organizationId
@@ -5780,7 +5804,7 @@ const latticeSetValueTool = {
 			else if (rawValue.toLowerCase() === "true") value = true;
 			else if (rawValue.toLowerCase() === "false") value = false;
 			const entityId = toEntityId(entityName);
-			if (context.db.latticeModels && modelId && isObjectIdShaped$1(modelId)) try {
+			if (context.db.latticeModels && modelId && isObjectIdShaped(modelId)) try {
 				const model = await getModelForWrite({
 					id: context.userId,
 					organizationId: context.user?.organizationId
@@ -5925,7 +5949,7 @@ const latticeCreateRuleTool = {
 			};
 			const outputEntityId = parsedRule.outputEntity.toLowerCase().replace(/\s+/g, "_");
 			let entityCreatedMessage = "";
-			if (context.db.latticeModels && modelId && isObjectIdShaped$1(modelId)) try {
+			if (context.db.latticeModels && modelId && isObjectIdShaped(modelId)) try {
 				const model = await getModelForWrite({
 					id: context.userId,
 					organizationId: context.user?.organizationId
@@ -9254,16 +9278,24 @@ function leadingProgram(args) {
 	return index < args.length ? programName(args[index]) : "";
 }
 /**
-* True if any `>`/`>>` redirection targets a raw block device. Covers the common
-* host shapes: SCSI/SATA (`sd[a-z]`), NVMe, Xen (`xvd[a-z]`, default on many EC2
-* AMIs), virtio (`vd[a-z]`), legacy IDE (`hd[a-z]`), device-mapper/LVM (`dm-N`,
-* `mapper/`), software RAID (`md N`), eMMC/SD (`mmcblkN`), loop, and macOS `diskN`.
+* True if any write redirection (`>`, `>>`, `>|`, `&>`, `&>>`, `<>`) targets a raw block
+* device. Covers the common host shapes: SCSI/SATA (`sd[a-z]`), NVMe, Xen (`xvd[a-z]`,
+* default on many EC2 AMIs), virtio (`vd[a-z]`), legacy IDE (`hd[a-z]`), device-mapper/LVM
+* (`dm-N`, `mapper/`), software RAID (`md N`), eMMC/SD (`mmcblkN`), loop, and macOS `diskN`.
 */
 const BLOCK_DEVICE_RE = /^\/dev\/(sd[a-z]|nvme\d+n\d+|xvd[a-z]|vd[a-z]|hd[a-z]|dm-\d+|md\d+|mmcblk\d+|loop\d+|disk\d+|mapper\/)/;
+const WRITE_REDIRECT_OPS = /* @__PURE__ */ new Set([
+	">",
+	">>",
+	">|",
+	"&>",
+	"&>>",
+	"<>"
+]);
 function writesToBlockDevice(tokens) {
 	for (let i = 0; i < tokens.length; i += 1) {
 		const token = tokens[i];
-		if (isOperator(token) && (token.op === ">" || token.op === ">>")) {
+		if (isOperator(token) && WRITE_REDIRECT_OPS.has(token.op)) {
 			let targetIndex = i + 1;
 			const following = tokens[targetIndex];
 			if (isOperator(following) && following.op === "|") targetIndex += 1;
@@ -15890,6 +15922,10 @@ var StreamAccumulator = class {
 	isEmpty() {
 		return this.accumulatedText.trim().length === 0 && this.toolsUsed.length === 0;
 	}
+	/** The stop reason the stream reported, if any: its presence means the stream ended normally. */
+	get finalStopReason() {
+		return this.stopReason;
+	}
 	get accumulatedLength() {
 		return this.accumulatedText.length;
 	}
@@ -15935,6 +15971,19 @@ var EmptyCompletionError = class extends Error {
 		this.name = "EmptyCompletionError";
 	}
 };
+/**
+* Thrown when a stream finished normally (it carried a stop reason) but produced no reply,
+* e.g. a reasoning model that spent its whole output budget thinking: the server drops
+* reasoning text, so such a turn arrives blank. Not retried - the same request would
+* finish the same way and be billed again.
+*/
+var NoReplyCompletionError = class extends Error {
+	constructor(stopReason) {
+		super(stopReason === "max_tokens" ? "The model used its whole output limit on reasoning and produced no reply. Raise the max tokens setting or ask a narrower question." : `The model finished (stop reason: ${stopReason}) without producing a reply.`);
+		this.stopReason = stopReason;
+		this.name = "NoReplyCompletionError";
+	}
+};
 /** User-facing message when a transient network drop survives all retries. */
 const TRANSIENT_EXHAUSTED_MESSAGE = "The connection dropped mid-response (likely a network timeout during a long thinking step). It was retried automatically but kept failing - type \"continue\" to resume.";
 const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
@@ -15979,12 +16028,13 @@ async function runCompletion(transport, req, callback, policy, signal) {
 				await accumulator.finalize(callback);
 				return;
 			}
+			if (accumulator.finalStopReason) throw new NoReplyCompletionError(accumulator.finalStopReason);
 			lastError = new EmptyCompletionError();
 			logger.warn("[runCompletion] Stream produced no content; treating as retryable.");
 		} catch (error) {
 			lastError = error instanceof Error ? error : new Error(String(error));
 			if (signal?.aborted) return;
-			if (!policy.isRetryable(lastError)) throw lastError;
+			if (lastError instanceof NoReplyCompletionError || !policy.isRetryable(lastError)) throw lastError;
 			logger.warn(`[runCompletion] Transient stream failure (attempt ${attempt + 1}): ${lastError.message}`);
 		}
 		if (attempt < policy.maxRetries && backoffMs > 0) await sleep(backoffMs * (attempt + 1));

package/dist/{ApiClient-BTI0-m0g.mjs → ApiClient-dIB3YQc2.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { n as logger, t as ConfigStore } from "./ConfigStore-DIs-K9oD.mjs";
-import { t as version } from "./package-Dl_F2Fah.mjs";
+import { n as logger, t as ConfigStore } from "./ConfigStore-BygzEI6H.mjs";
+import { t as version } from "./package-CRNnNXxq.mjs";
 import axios, { isAxiosError } from "axios";
 //#region src/auth/OAuthClient.ts
 /**