@bike4mind/cli 3.0.0 → 3.2.0

package/dist/{WorkItemsClient-BMY0Qq1s.mjs → WorkItemsClient-BZL44N12.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { kt as tokenEstimateMultiplier } from "./ConfigStore-51UaP9pJ.mjs";
+import { Mt as tokenEstimateMultiplier } from "./ConfigStore-v0wgf0_j.mjs";
 import { v4 } from "uuid";
 import { get_encoding } from "tiktoken";
 //#region ../../b4m-core/utils/dist/calibratedTokenizer.mjs

package/dist/{buildAgent-CrSRKYU_.mjs → buildAgent-BZnmDQIr.mjs}

@@ -1,9 +1,8 @@
 #!/usr/bin/env node
-import { J as getPlanModeFilePath, L as generateCliTools, N as ReActAgent, R as wrapTools, Y as buildSystemPrompt, a as loadProjectContext, c as createSseBackend, i as buildProjectAgentStore, l as ServerLlmBackend, lt as Logger, n as BackgroundAgentManager, o as McpManager, q as setWebSocketToolExecutor, r as SubagentOrchestrator, t as AgentHistoryStore } from "./AgentHistoryStore-DVxv1kSO.mjs";
-import { D as ARTIFACT_REMOVED_PLACEHOLDER, Dt as stripToolArtifactMarkup, E as ARTIFACT_DELIVERED_PLACEHOLDER, Et as stripDeliveredArtifactBlocks, F as ChatModels, G as ModelBackend, I as CompletionReasoningEffortSchema, N as CONTEXT_WINDOW_SAFETY_BUFFER_TOKENS, U as MODEL_INFO_FIELD_GROUP_OF, X as PermissionDeniedError, _ as logger, ct as escapeThinkMarkers, ft as getQuestErrorCode, lt as filterToolArtifactMarkup, mt as hasDeliverablePinnedArtifact, st as createThinkMarkerEscaper, vt as isUserInitiatedAbort } from "./ConfigStore-51UaP9pJ.mjs";
+import { F as generateCliTools, G as setWebSocketToolExecutor, J as DeferredToolRegistry, U as wrapTools, V as buildSystemPrompt, Y as ReActAgent, a as loadProjectContext, c as createSseBackend, i as buildProjectAgentStore, l as ServerLlmBackend, n as BackgroundAgentManager, o as McpManager, q as getPlanModeFilePath, r as SubagentOrchestrator, t as AgentHistoryStore, ut as Logger } from "./AgentHistoryStore-BWko6txx.mjs";
+import { $ as PermissionDeniedError, At as stripToolArtifactMarkup, F as CONTEXT_WINDOW_SAFETY_BUFFER_TOKENS, J as ModelBackend, K as MODEL_INFO_FIELD_GROUP_OF, L as ChatModels, O as ARTIFACT_DELIVERED_PLACEHOLDER, R as CompletionReasoningEffortSchema, _t as hasDeliverablePinnedArtifact, dt as escapeThinkMarkers, ft as filterToolArtifactMarkup, ht as getQuestErrorCode, k as ARTIFACT_REMOVED_PLACEHOLDER, kt as stripDeliveredArtifactBlocks, ut as createThinkMarkerEscaper, xt as isUserInitiatedAbort, y as logger } from "./ConfigStore-v0wgf0_j.mjs";
 import "crypto";
 import { v4 } from "uuid";
-import { z as z$1 } from "zod";
 import "axios";
 import "@aws-sdk/client-bedrock-runtime";
 import "openai";
@@ -394,12 +393,17 @@ var AnthropicCachingAdapter = class {
 			}
 		}
 		const tools = modifiedParams.tools;
-		if (strategy.cacheTools && Array.isArray(tools) && tools.length > 0) {
+		const markIndex = Array.isArray(tools) ? tools.findLastIndex((t) => {
+			const tool = t;
+			const isServerTool = typeof tool.type === "string" && !("input_schema" in tool);
+			return tool.defer_loading !== true && !isServerTool;
+		}) : -1;
+		if (strategy.cacheTools && Array.isArray(tools) && markIndex >= 0) {
 			const toolsCopy = [...tools];
-			const lastTool = toolsCopy[toolsCopy.length - 1];
-			if (claim("tools", hasMarker(lastTool))) {
-				toolsCopy[toolsCopy.length - 1] = {
-					...lastTool,
+			const markTool = toolsCopy[markIndex];
+			if (claim("tools", hasMarker(markTool))) {
+				toolsCopy[markIndex] = {
+					...markTool,
 					cache_control: cacheControl
 				};
 				modifiedParams.tools = toolsCopy;
@@ -1430,203 +1434,7 @@ var NotifyingLlmBackend = class {
 };
 //#endregion
 //#region src/tools/deferredToolRegistry.ts
-/**
-* Registry of tool schemas that are NOT loaded into the model's initial tool
-* list. The model sees only the names (via the system prompt directory) and
-* must call the `tool_search` meta-tool to load schemas on demand.
-*
-* This mirrors Claude Code's deferred-tool pattern. The win is large for
-* heavy MCP integrations (e.g. 41 GitHub MCP tools at ~250-350 tokens of
-* JSONSchema each = ~10-15k tokens per turn that's now ~1-1.5k of names).
-*/
-var DeferredToolRegistry = class {
-	constructor() {
-		this.byName = /* @__PURE__ */ new Map();
-		this.directoryNames = [];
-	}
-	/** Replace registry contents with the supplied tools. Idempotent. */
-	register(tools) {
-		this.byName.clear();
-		for (const tool of tools) this.byName.set(tool.toolSchema.name, tool);
-		this.directoryNames = Object.freeze([...this.byName.keys()].sort());
-		logger.debug(`[DeferredToolRegistry] Registered ${tools.length} deferred tool(s)`);
-	}
-	clear() {
-		this.byName.clear();
-		this.directoryNames = Object.freeze([]);
-	}
-	size() {
-		return this.byName.size;
-	}
-	has(name) {
-		return this.byName.has(name);
-	}
-	get(name) {
-		return this.byName.get(name);
-	}
-	getAll() {
-		return Array.from(this.byName.values());
-	}
-	/** Return tools whose names appear in the supplied list, in input order. */
-	getByNames(names) {
-		const found = [];
-		for (const name of names) {
-			const tool = this.byName.get(name);
-			if (tool) found.push(tool);
-		}
-		return found;
-	}
-	/**
-	* Rank-search deferred tools by query terms. Name matches outrank
-	* description matches; exact substring on name wins ties.
-	*/
-	searchByKeywords(query, maxResults) {
-		const terms = query.toLowerCase().split(/\s+/).filter((t) => t.length > 0);
-		if (terms.length === 0) return [];
-		const scored = [];
-		for (const tool of this.byName.values()) {
-			const name = tool.toolSchema.name.toLowerCase();
-			const desc = (tool.toolSchema.description || "").toLowerCase();
-			let score = 0;
-			for (const term of terms) {
-				if (name.includes(term)) score += 10;
-				if (desc.includes(term)) score += 1;
-			}
-			if (score > 0) scored.push({
-				tool,
-				score
-			});
-		}
-		scored.sort((a, b) => b.score - a.score);
-		return scored.slice(0, maxResults).map((s) => s.tool);
-	}
-	/**
-	* Directory entries rendered into the cache-stamped system-prompt reminder.
-	* Returns the frozen snapshot captured at `register()`, NOT live `byName`
-	* keys, so loading a tool mid-session can never change a byte of the cached
-	* system block (issue #213). A loaded tool remaining listed here is
-	* harmless: re-selecting it via `tool_search` is an idempotent no-op.
-	*/
-	getDirectoryNames() {
-		return [...this.directoryNames];
-	}
-};
-const deferredToolRegistry = new DeferredToolRegistry();
-//#endregion
-//#region src/tools/toolSearchTool.ts
-/**
-* Default number of tools returned for a keyword search. Matches Claude
-* Code's ToolSearch convention. 5 keeps the response payload small while
-* surfacing enough alternatives for the model to refine its query.
-*/
-const DEFAULT_MAX_RESULTS = 5;
-/**
-* Runtime validation for tool_search params. The LLM produces these
-* values, so we validate at this boundary rather than trusting the
-* shape. Coerces `max_results` from string->number for models that emit
-* numeric-looking strings.
-*/
-const ToolSearchParamsSchema = z$1.object({
-	query: z$1.string().min(1, "query must be a non-empty string"),
-	max_results: z$1.coerce.number().int().min(1).max(20).optional()
-});
-/**
-* Parse the query string. Two forms:
-*   - `select:name1,name2,...` - exact-name selection
-*   - free text - keyword search across name + description
-*/
-function parseQuery(query) {
-	const trimmed = query.trim();
-	const selectMatch = trimmed.match(/^select:(.+)$/i);
-	if (selectMatch) return {
-		mode: "select",
-		names: selectMatch[1].split(",").map((n) => n.trim()).filter((n) => n.length > 0)
-	};
-	return {
-		mode: "search",
-		text: trimmed
-	};
-}
-/**
-* Format the loaded-tools response. Mirrors Claude Code's convention:
-* one <function>{...}</function> line per matched tool. The model has
-* already seen this format in its tool-registration system messages, so
-* it parses without additional explanation.
-*
-* Note: the schemas are *also* injected into context.tools by the caller,
-* so on the next iteration the model gets them as native tool definitions.
-* The text response here is for in-turn awareness and audit trail.
-*/
-function renderToolsBlock(tools) {
-	if (tools.length === 0) return "";
-	return `<functions>\n${tools.map((tool) => {
-		const schema = {
-			description: tool.toolSchema.description,
-			name: tool.toolSchema.name,
-			parameters: tool.toolSchema.parameters
-		};
-		return `<function>${JSON.stringify(schema)}</function>`;
-	}).join("\n")}\n</functions>`;
-}
-/**
-* Build the tool_search meta-tool. The returned tool has a closure over
-* the supplied `toolListAccessor`, which it uses to push newly-resolved
-* tool schemas into the live agent context.
-*
-* Idempotent: re-loading a tool that's already in the context is a no-op.
-*/
-function createToolSearchTool(toolListAccessor) {
-	return {
-		toolSchema: {
-			name: "tool_search",
-			description: "Fetches full schema definitions for deferred tools so they can be called. Deferred tools appear by name only in a system reminder; their parameter schemas are NOT loaded by default. Use this tool to load schemas on demand. Query forms: 'select:name1,name2' for exact selection, or free-text keywords to search by name and description. Once a tool's schema is returned, it becomes callable in subsequent turns.",
-			parameters: {
-				type: "object",
-				properties: {
-					query: {
-						type: "string",
-						description: "Either 'select:<comma-separated names>' to fetch specific tools, or free-text keywords (e.g. 'github pull request') to rank-search deferred tools."
-					},
-					max_results: {
-						type: "number",
-						description: `Maximum number of tools to return for keyword search. Defaults to ${DEFAULT_MAX_RESULTS}. Ignored for 'select:' queries.`
-					}
-				},
-				required: ["query"]
-			}
-		},
-		toolFn: async (params) => {
-			const parsedParams = ToolSearchParamsSchema.safeParse(params ?? {});
-			if (!parsedParams.success) {
-				const issue = parsedParams.error.issues[0];
-				return `tool_search: invalid parameters — ${issue.path.join(".") || "params"}: ${issue.message}`;
-			}
-			const { query, max_results } = parsedParams.data;
-			const parsed = parseQuery(query);
-			let matched;
-			let unmatched = [];
-			if (parsed.mode === "select") {
-				matched = deferredToolRegistry.getByNames(parsed.names);
-				const foundNames = new Set(matched.map((t) => t.toolSchema.name));
-				unmatched = parsed.names.filter((n) => !foundNames.has(n));
-			} else {
-				const max = max_results ?? DEFAULT_MAX_RESULTS;
-				matched = deferredToolRegistry.searchByKeywords(parsed.text, max);
-			}
-			if (matched.length === 0) return parsed.mode === "select" ? `tool_search: no deferred tools matched ${parsed.names.join(", ")}. Use a free-text query to search.` : `tool_search: no deferred tools matched query "${parsed.text}".`;
-			const liveTools = toolListAccessor();
-			const liveNames = new Set(liveTools.map((t) => t.toolSchema.name));
-			let added = 0;
-			for (const tool of matched) if (!liveNames.has(tool.toolSchema.name)) {
-				liveTools.push(tool);
-				added++;
-			}
-			logger.debug(`[tool_search] query="${query}" matched=${matched.length} added=${added} alreadyLoaded=${matched.length - added}`);
-			const block = renderToolsBlock(matched);
-			return `${`Loaded ${added} new tool schema(s)${added < matched.length ? ` (${matched.length - added} already loaded)` : ""}. These are now callable in your next message.${unmatched.length > 0 ? `\n\nNot found: ${unmatched.join(", ")}` : ""}`}\n\n${block}`;
-		}
-	};
-}
+const deferredToolRegistry = new DeferredToolRegistry({ logger });
 //#endregion
 //#region src/llm/MultiLlmBackend.ts
 /**
@@ -2166,4 +1974,4 @@ function buildAgent(input) {
 	};
 }
 //#endregion
-export { deferredToolRegistry as a, createToolSearchTool as i, buildSupportingStores as n, NotifyingLlmBackend as o, buildLlmBackend as r, buildAgent as t };
+export { NotifyingLlmBackend as a, deferredToolRegistry as i, buildSupportingStores as n, buildLlmBackend as r, buildAgent as t };

package/dist/commands/acpCommand.mjs

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
-import { A as createAgentDelegateTool, C as createTodoStore, D as createCoordinateTaskTool, F as PermissionManager, I as buildCliToolList, O as createResumeAgentTool, Q as CustomCommandStore, S as createFindDefinitionTool, T as createSkillTool, Z as RemoteSkillSource, b as createGetFileStructureTool, j as FallbackLlmBackend, k as createBackgroundAgentTools, nt as SessionStore, q as setWebSocketToolExecutor, s as buildSandbox, tt as CheckpointStore, w as createWriteTodosTool } from "../AgentHistoryStore-DVxv1kSO.mjs";
-import { _ as logger, o as isReadOnlyTool, t as ConfigStore, u as requireApiUrl } from "../ConfigStore-51UaP9pJ.mjs";
-import { a as deferredToolRegistry, i as createToolSearchTool, n as buildSupportingStores, o as NotifyingLlmBackend, r as buildLlmBackend, t as buildAgent } from "../buildAgent-CrSRKYU_.mjs";
-import { a as ApiClient } from "../dist-BsG2Hlp-.mjs";
+import { $ as CustomCommandStore, A as createAgentDelegateTool, C as createTodoStore, D as createCoordinateTaskTool, G as setWebSocketToolExecutor, N as PermissionManager, O as createResumeAgentTool, P as buildCliToolList, Q as RemoteSkillSource, S as createFindDefinitionTool, T as createSkillTool, X as createToolSearchTool, b as createGetFileStructureTool, j as FallbackLlmBackend, k as createBackgroundAgentTools, nt as CheckpointStore, rt as SessionStore, s as buildSandbox, w as createWriteTodosTool } from "../AgentHistoryStore-BWko6txx.mjs";
+import { f as requireApiUrl, i as ToolCatalog, t as ConfigStore, y as logger } from "../ConfigStore-v0wgf0_j.mjs";
+import { a as NotifyingLlmBackend, i as deferredToolRegistry, n as buildSupportingStores, r as buildLlmBackend, t as buildAgent } from "../buildAgent-BZnmDQIr.mjs";
+import { a as ApiClient } from "../dist-5DDaX8tB.mjs";
 import { randomUUID } from "crypto";
 import { existsSync, realpathSync, statSync } from "fs";
 import { isAbsolute } from "path";
@@ -424,7 +424,7 @@ var AcpServer = class {
 				result = await stack.agent.run(userText, {
 					signal: abortController.signal,
 					previousMessages: session.history,
-					isReadOnlyTool,
+					isReadOnlyTool: (toolName) => stack.permissionManager.catalog.isReadOnly(toolName),
 					maxHistoryIterations: 4
 				});
 			} catch (error) {
@@ -594,7 +594,7 @@ var AcpServer = class {
 			tokenGetter,
 			startupLog
 		});
-		const permissionManager = new PermissionManager(config.trustedTools ?? [], void 0, config.tools.disabled ?? []);
+		const permissionManager = new PermissionManager(new ToolCatalog(), config.trustedTools ?? [], config.tools.disabled ?? []);
 		const checkpointStore = new CheckpointStore(this.configStore.getProjectConfigDir() ?? process.cwd());
 		const stackSessionId = randomUUID();
 		const { sandboxOrchestrator } = await buildSandbox({
@@ -627,9 +627,13 @@ var AcpServer = class {
 		const llmWithFallback = config.fallbackModels && config.fallbackModels.length > 0 ? new FallbackLlmBackend(llm, config.fallbackModels, (from, to, error) => logger.debug(`[acp] Model "${from}" failed (${error.message}); falling back to "${to}"`)) : llm;
 		const notifyingLlm = new NotifyingLlmBackend(llmWithFallback, backgroundManager);
 		const agentToolsRef = { current: null };
-		const toolSearchTool = deferredToolRegistry.size() > 0 ? createToolSearchTool(() => {
-			if (!agentToolsRef.current) throw new Error("tool_search invoked before agent context was wired");
-			return agentToolsRef.current;
+		const toolSearchTool = deferredToolRegistry.size() > 0 ? createToolSearchTool({
+			registry: deferredToolRegistry,
+			logger,
+			toolListAccessor: () => {
+				if (!agentToolsRef.current) throw new Error("tool_search invoked before agent context was wired");
+				return agentToolsRef.current;
+			}
 		}) : null;
 		const cliTools = this.buildCliTools({
 			config,

package/dist/commands/apiCommand.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { d as resolveApiEndpoint, g as parseApiUrl, t as ConfigStore } from "../ConfigStore-51UaP9pJ.mjs";
+import { p as resolveApiEndpoint, t as ConfigStore, v as parseApiUrl } from "../ConfigStore-v0wgf0_j.mjs";
 //#region src/commands/apiCommand.ts
 /**
 * External API config command (--api-url / --reset-api)

package/dist/commands/doctorCommand.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as version } from "../package-DEsNSP54.mjs";
+import { t as version } from "../package-COr17yKT.mjs";
 import { c as isNpmPrefixWritable, i as fetchLatestVersion, r as compareSemver } from "../updateChecker-CCLVVdH0.mjs";
 import { t as checkRipgrep } from "../ripgrepCheck-BmkyTK2i.mjs";
 import { existsSync } from "fs";

package/dist/commands/envCommand.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as ConfigStore } from "../ConfigStore-51UaP9pJ.mjs";
+import { t as ConfigStore } from "../ConfigStore-v0wgf0_j.mjs";
 //#region src/commands/envCommand.ts
 /**
 * Environment switching for the `--dev` / `--prod` launch flags.

package/dist/commands/headlessCommand.mjs

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
-import { A as createAgentDelegateTool, B as SHELL_LIKE_TOOL_COMMAND_FIELDS, C as createTodoStore, D as createCoordinateTaskTool, F as PermissionManager, I as buildCliToolList, K as classifyCommandRisk, L as generateCliTools, N as ReActAgent, O as createResumeAgentTool, Q as CustomCommandStore, R as wrapTools, S as createFindDefinitionTool, T as createSkillTool, Y as buildSystemPrompt, Z as RemoteSkillSource, a as loadProjectContext, b as createGetFileStructureTool, c as createSseBackend, i as buildProjectAgentStore, j as FallbackLlmBackend, k as createBackgroundAgentTools, n as BackgroundAgentManager, nt as SessionStore, o as McpManager, q as setWebSocketToolExecutor, r as SubagentOrchestrator, s as buildSandbox, t as AgentHistoryStore, tt as CheckpointStore, w as createWriteTodosTool, x as createWorkItemTools } from "../AgentHistoryStore-DVxv1kSO.mjs";
-import { _ as logger, o as isReadOnlyTool, t as ConfigStore, u as requireApiUrl } from "../ConfigStore-51UaP9pJ.mjs";
-import { r as reconstructTurnBlocks, t as WorkItemsClient } from "../WorkItemsClient-BMY0Qq1s.mjs";
-import { a as ApiClient } from "../dist-BsG2Hlp-.mjs";
+import { $ as CustomCommandStore, A as createAgentDelegateTool, C as createTodoStore, D as createCoordinateTaskTool, F as generateCliTools, G as setWebSocketToolExecutor, K as classifyCommandRisk, N as PermissionManager, O as createResumeAgentTool, P as buildCliToolList, Q as RemoteSkillSource, S as createFindDefinitionTool, T as createSkillTool, U as wrapTools, V as buildSystemPrompt, Y as ReActAgent, a as loadProjectContext, b as createGetFileStructureTool, c as createSseBackend, i as buildProjectAgentStore, j as FallbackLlmBackend, k as createBackgroundAgentTools, n as BackgroundAgentManager, nt as CheckpointStore, o as McpManager, r as SubagentOrchestrator, rt as SessionStore, s as buildSandbox, t as AgentHistoryStore, w as createWriteTodosTool, x as createWorkItemTools } from "../AgentHistoryStore-BWko6txx.mjs";
+import { a as commandTextOf, f as requireApiUrl, i as ToolCatalog, s as toolCategory, t as ConfigStore, y as logger } from "../ConfigStore-v0wgf0_j.mjs";
+import { r as reconstructTurnBlocks, t as WorkItemsClient } from "../WorkItemsClient-BZL44N12.mjs";
+import { a as ApiClient } from "../dist-5DDaX8tB.mjs";
 import { randomBytes } from "crypto";
 import { v4 } from "uuid";
 import { readFile } from "fs/promises";
@@ -87,15 +87,15 @@ function parseStringArray(raw, inputType) {
 }
 /**
 * Classify the risk of a single tool invocation for the permission protocol.
-* Shell-like tools are classified from their actual command text (reusing the
-* shared command-risk tokenizer); every other tool falls back to a level derived
-* from its permission category (auto_approve -> low, prompt_always -> high, else
-* medium). Never throws: a classifier failure fails closed at `high`.
+* Shell-like tools (a descriptor commandArg) are classified from their actual
+* command text, reusing the shared command-risk tokenizer, exactly as the
+* gateway's command-risk stage does; every other tool falls back to a level
+* derived from its permission category (auto_approve -> low, prompt_always ->
+* high, else medium). Never throws: a classifier failure fails closed at `high`.
 */
-function classifyToolRisk(toolName, args, category) {
-	const field = SHELL_LIKE_TOOL_COMMAND_FIELDS[toolName];
-	const command = field && args !== null && typeof args === "object" ? args[field] : void 0;
-	if (typeof command === "string") try {
+function classifyToolRisk(descriptor, args) {
+	const command = commandTextOf(descriptor, args);
+	if (command !== void 0) try {
 		return classifyCommandRisk(command);
 	} catch {
 		return {
@@ -103,6 +103,7 @@ function classifyToolRisk(toolName, args, category) {
 			reasons: ["command risk analysis failed (fail closed)"]
 		};
 	}
+	const category = toolCategory(descriptor);
 	return {
 		level: category === "auto_approve" ? "low" : category === "prompt_always" ? "high" : "medium",
 		reasons: []
@@ -319,11 +320,11 @@ async function handleHeadlessCommand(options) {
 			}
 		};
 		await logger.initialize(session.id);
-		const permissionManager = new PermissionManager(config.trustedTools ?? [], void 0, config.tools.disabled);
+		const permissionManager = new PermissionManager(new ToolCatalog(), config.trustedTools ?? [], config.tools.disabled);
 		const emit = createHeadlessEmitter(runId, (line) => process.stdout.write(line));
 		const streaming = outputFormat === "stream-json";
 		const promptFn = (toolName, args, _preview, kind) => {
-			const risk = classifyToolRisk(toolName, args, permissionManager.getCategory(toolName));
+			const risk = classifyToolRisk(permissionManager.catalog.resolve(toolName), args);
 			if (streaming) emit({
 				type: "permission_request",
 				toolName,
@@ -482,7 +483,7 @@ async function handleHeadlessCommand(options) {
 		try {
 			result = await agent.run(fullPrompt, {
 				parallelExecution: config.preferences.enableParallelToolExecution === true,
-				isReadOnlyTool,
+				isReadOnlyTool: (toolName) => permissionManager.catalog.isReadOnly(toolName),
 				maxHistoryIterations: 4
 			});
 		} finally {

package/dist/commands/mcpCommand.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { t as ConfigStore } from "../ConfigStore-51UaP9pJ.mjs";
-import { t as version } from "../package-DEsNSP54.mjs";
+import { t as ConfigStore } from "../ConfigStore-v0wgf0_j.mjs";
+import { t as version } from "../package-COr17yKT.mjs";
 //#region src/commands/mcpCommand.ts
 /**
 * External MCP commands (b4m mcp list, b4m mcp add, etc.)
@@ -70,7 +70,7 @@ async function handleMcpCommand(subcommand, argv) {
 			await handleDisable(config, argv.name, configStore);
 			break;
 		case "serve": {
-			const { handleMcpServeCommand } = await import("../serve-BaHzVbcm.mjs");
+			const { handleMcpServeCommand } = await import("../serve-D6Eu3oXv.mjs");
 			await handleMcpServeCommand({
 				http: Boolean(argv.http),
 				port: typeof argv.port === "number" ? argv.port : void 0,

package/dist/commands/pluginCommand.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as ConfigStore } from "../ConfigStore-51UaP9pJ.mjs";
+import { t as ConfigStore } from "../ConfigStore-v0wgf0_j.mjs";
 import { n as getDefaultPluginsDir, r as isFeatureEnabled, t as PluginStore } from "../PluginStore-DwvOJ-G3.mjs";
 import { promises } from "fs";
 import path from "path";

package/dist/commands/updateCommand.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as version } from "../package-DEsNSP54.mjs";
+import { t as version } from "../package-COr17yKT.mjs";
 import { a as forceCheckForUpdate, c as isNpmPrefixWritable, d as shouldAttemptAutoUpdate, l as readCachedUpdate, n as REEXEC_GUARD_ENV, o as getAutoUpdatePreference, t as INSTALL_CMD, u as setAutoUpdatePreference } from "../updateChecker-CCLVVdH0.mjs";
 import { t as checkRipgrep } from "../ripgrepCheck-BmkyTK2i.mjs";
 import { execSync, spawnSync } from "child_process";

package/dist/{dist-BsG2Hlp-.mjs → dist-5DDaX8tB.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { _ as logger, f as AuthenticatedApiClient, p as DeviceFlowClient, t as ConfigStore } from "./ConfigStore-51UaP9pJ.mjs";
-import { t as version } from "./package-DEsNSP54.mjs";
+import { h as DeviceFlowClient, m as AuthenticatedApiClient, t as ConfigStore, y as logger } from "./ConfigStore-v0wgf0_j.mjs";
+import { t as version } from "./package-COr17yKT.mjs";
 import { isAxiosError } from "axios";
 import { Readable } from "node:stream";
 import { createParser } from "eventsource-parser";

package/dist/index.mjs

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
-import { $ as processFileReferences, A as createAgentDelegateTool, C as createTodoStore, D as createCoordinateTaskTool, E as parseAgentConfig, F as PermissionManager, G as DEFAULT_THOROUGHNESS, H as DEFAULT_AGENT_MODEL, I as buildCliToolList, J as getPlanModeFilePath, M as substituteArguments, O as createResumeAgentTool, P as findIterationBoundary, Q as CustomCommandStore, S as createFindDefinitionTool, T as createSkillTool, U as DEFAULT_MAX_ITERATIONS, V as ALWAYS_DENIED_FOR_AGENTS, W as DEFAULT_RETRY_CONFIG, X as buildSkillsPromptSection, Y as buildSystemPrompt, Z as RemoteSkillSource, _ as createDecisionLogTool, at as rewireReservedNames, b as createGetFileStructureTool, ct as warmFileCache, d as createReviewGateStore, et as hasFileReferences, f as createReviewGateTool, ft as MAX_PASTE_SIZE, g as formatBlockersOutput, h as createBlockerTools, it as mergeCommands, j as FallbackLlmBackend, k as createBackgroundAgentTools, m as createBlockerStore, nt as SessionStore, ot as formatFileSize, p as formatReviewGatesOutput, q as setWebSocketToolExecutor, rt as searchCommands, s as buildSandbox, st as searchFiles, tt as CheckpointStore, u as isConnectionDrop, ut as COMPACTION_SUMMARY_MARKER, v as createDecisionStore, w as createWriteTodosTool, x as createWorkItemTools, y as formatDecisionsOutput, z as getProcessHooks } from "./AgentHistoryStore-DVxv1kSO.mjs";
+import { $ as CustomCommandStore, A as createAgentDelegateTool, B as DEFAULT_THOROUGHNESS, C as createTodoStore, D as createCoordinateTaskTool, E as parseAgentConfig, G as setWebSocketToolExecutor, H as buildSkillsPromptSection, I as ALWAYS_DENIED_FOR_AGENTS, L as DEFAULT_AGENT_MODEL, M as substituteArguments, N as PermissionManager, O as createResumeAgentTool, P as buildCliToolList, Q as RemoteSkillSource, R as DEFAULT_MAX_ITERATIONS, S as createFindDefinitionTool, T as createSkillTool, V as buildSystemPrompt, W as getProcessHooks, X as createToolSearchTool, Z as findIterationBoundary, _ as createDecisionLogTool, at as mergeCommands, b as createGetFileStructureTool, ct as searchFiles, d as createReviewGateStore, dt as COMPACTION_SUMMARY_MARKER, et as processFileReferences, f as createReviewGateTool, g as formatBlockersOutput, h as createBlockerTools, it as searchCommands, j as FallbackLlmBackend, k as createBackgroundAgentTools, lt as warmFileCache, m as createBlockerStore, nt as CheckpointStore, ot as rewireReservedNames, p as formatReviewGatesOutput, pt as MAX_PASTE_SIZE, q as getPlanModeFilePath, rt as SessionStore, s as buildSandbox, st as formatFileSize, tt as hasFileReferences, u as isConnectionDrop, v as createDecisionStore, w as createWriteTodosTool, x as createWorkItemTools, y as formatDecisionsOutput, z as DEFAULT_RETRY_CONFIG } from "./AgentHistoryStore-BWko6txx.mjs";
 import { a as selectLiveSubagentTokens, i as selectLiveSubagentCredits, n as selectActiveBackgroundShells, o as useCliStore, r as selectCompletedBackgroundShells, t as selectActiveBackgroundAgents } from "./store-BxmPEI3v.mjs";
-import { Bt as selfClaimedActorKindSchema, F as ChatModels, Ft as DELEGATION_PAYLOAD_SCHEMA_NAME, It as actorColorIndex, Lt as actorKindMarker, P as CREDIT_DEDUCT_TRANSACTION_TYPES, Pt as ACTOR_COLOR_SLOTS, Rt as actorKindSchema, Z as REVIEW_GATE_STATUS_VALUES, _ as logger, c as getCreditsUrl, d as resolveApiEndpoint, et as SUBQUEST_STATUS_VALUES, g as parseApiUrl, ht as isEarlyStop, kt as tokenEstimateMultiplier, l as getEnvironmentName, m as LOCAL_DEV_URL, n as extractCompactInstructions, o as isReadOnlyTool, s as ApiEndpointUnconfiguredError, t as ConfigStore, u as requireApiUrl, v as SESSION_ID_PATTERN, y as isValidSessionId, zt as delegationPayloadSchema } from "./ConfigStore-51UaP9pJ.mjs";
+import { Bt as actorKindMarker, Ht as delegationPayloadSchema, I as CREDIT_DEDUCT_TRANSACTION_TYPES, L as ChatModels, Lt as ACTOR_COLOR_SLOTS, Mt as tokenEstimateMultiplier, Rt as DELEGATION_PAYLOAD_SCHEMA_NAME, Ut as selfClaimedActorKindSchema, Vt as actorKindSchema, b as SESSION_ID_PATTERN, d as getEnvironmentName, et as REVIEW_GATE_STATUS_VALUES, f as requireApiUrl, g as LOCAL_DEV_URL, i as ToolCatalog, l as ApiEndpointUnconfiguredError, n as extractCompactInstructions, p as resolveApiEndpoint, rt as SUBQUEST_STATUS_VALUES, t as ConfigStore, u as getCreditsUrl, v as parseApiUrl, vt as isEarlyStop, x as isValidSessionId, y as logger, zt as actorColorIndex } from "./ConfigStore-v0wgf0_j.mjs";
 import { r as isFeatureEnabled, t as PluginStore } from "./PluginStore-DwvOJ-G3.mjs";
-import { i as getTokenCounter, n as ConversationContext, r as reconstructTurnBlocks, t as WorkItemsClient } from "./WorkItemsClient-BMY0Qq1s.mjs";
-import { a as deferredToolRegistry, i as createToolSearchTool, n as buildSupportingStores, o as NotifyingLlmBackend, r as buildLlmBackend, t as buildAgent } from "./buildAgent-CrSRKYU_.mjs";
+import { i as getTokenCounter, n as ConversationContext, r as reconstructTurnBlocks, t as WorkItemsClient } from "./WorkItemsClient-BZL44N12.mjs";
+import { a as NotifyingLlmBackend, i as deferredToolRegistry, n as buildSupportingStores, r as buildLlmBackend, t as buildAgent } from "./buildAgent-BZnmDQIr.mjs";
 import { t as getShellSessionManager } from "./ShellSessionManager-6o8KZzl1-vrbPAUTq.mjs";
-import { a as ApiClient, s as OAuthClient } from "./dist-BsG2Hlp-.mjs";
-import { t as version } from "./package-DEsNSP54.mjs";
+import { a as ApiClient, s as OAuthClient } from "./dist-5DDaX8tB.mjs";
+import { t as version } from "./package-COr17yKT.mjs";
 import { s as getStartupUpdateStatus } from "./updateChecker-CCLVVdH0.mjs";
 import React, { useCallback, useEffect, useLayoutEffect, useMemo, useReducer, useRef, useState, useSyncExternalStore } from "react";
 import { Box, Static, Text, measureElement, render, useApp, useInput, usePaste, useStdout } from "ink";
@@ -5768,7 +5768,7 @@ const HandoffSchema = z$1.object({
 	updatedAt: z$1.string()
 });
 z$1.object({
-	_id: z$1.string(),
+	id: z$1.string(),
 	notebookId: z$1.string(),
 	goal: z$1.string(),
 	quests: z$1.array(QuestDataSchema),
@@ -8405,7 +8405,7 @@ async function runTurn(message, ctx) {
 	}
 }
 async function runHeldTurn(message, ctx) {
-	const { agent, sessionStore, configStore, commandHistoryStore, customCommandStore, messageBuilder, config, availableModels, agentStore, contextContent, additionalDirectories, featureRegistry, backgroundManager, todoStore, decisionStore, blockerStore, postEditDiagnostics, workflowStores, setCommandHistory, setAbortController } = ctx;
+	const { agent, sessionStore, configStore, commandHistoryStore, customCommandStore, messageBuilder, config, availableModels, agentStore, contextContent, additionalDirectories, featureRegistry, backgroundManager, toolCatalog, todoStore, decisionStore, blockerStore, postEditDiagnostics, workflowStores, setCommandHistory, setAbortController } = ctx;
 	const storeSession = useCliStore.getState().session;
 	if (!agent || !storeSession) {
 		console.error("❌ CLI failed to initialize. Try restarting b4m.\n");
@@ -8523,7 +8523,7 @@ async function runHeldTurn(message, ctx) {
 				previousMessages: previousMessages.length > 0 ? previousMessages : void 0,
 				signal: abortController.signal,
 				parallelExecution: cliConfig.preferences.enableParallelToolExecution === true,
-				isReadOnlyTool,
+				isReadOnlyTool: (toolName) => toolCatalog.isReadOnly(toolName),
 				workflowReminder,
 				drainFeedback: diagnostics ? (phase) => diagnostics.drain(DRAIN_BUDGET_MS[phase], abortController.signal) : void 0,
 				onContextLimit: createReactiveCompactionHandler(agent, activeSession)
@@ -8957,6 +8957,7 @@ function CliApp() {
 		agent: null,
 		mcpManager: null,
 		permissionManager: null,
+		toolCatalog: new ToolCatalog(),
 		permissionPrompt: null,
 		trustLocationSelector: null,
 		folderTrustPrompt: null,
@@ -9214,7 +9215,7 @@ function CliApp() {
 				error: () => {},
 				debug: () => {}
 			};
-			const permissionManager = new PermissionManager(config.trustedTools || [], void 0, config.tools.disabled || []);
+			const permissionManager = new PermissionManager(state.toolCatalog, config.trustedTools || [], config.tools.disabled || []);
 			const checkpointProjectDir = state.configStore.getProjectConfigDir() || process.cwd();
 			const checkpointStore = new CheckpointStore(checkpointProjectDir);
 			const { sandboxOrchestrator } = await buildSandbox({
@@ -9374,9 +9375,13 @@ function CliApp() {
 			}) : null;
 			const workItemTools = config.preferences.enableWorkItemTools ? createWorkItemTools(new WorkItemsClient(apiClient)) : [];
 			const agentToolsRef = { current: null };
-			const toolSearchTool = deferredToolRegistry.size() > 0 ? createToolSearchTool(() => {
-				if (!agentToolsRef.current) throw new Error("tool_search invoked before agent context was wired");
-				return agentToolsRef.current;
+			const toolSearchTool = deferredToolRegistry.size() > 0 ? createToolSearchTool({
+				registry: deferredToolRegistry,
+				logger,
+				toolListAccessor: () => {
+					if (!agentToolsRef.current) throw new Error("tool_search invoked before agent context was wired");
+					return agentToolsRef.current;
+				}
 			}) : null;
 			const cliTools = buildCliToolList({
 				toolSearchTool,
@@ -9662,7 +9667,7 @@ function CliApp() {
 					previousMessages: previousMessages.length > 0 ? previousMessages : void 0,
 					signal: abortController.signal,
 					parallelExecution: cliConfig.preferences.enableParallelToolExecution === true,
-					isReadOnlyTool,
+					isReadOnlyTool: (toolName) => state.toolCatalog.isReadOnly(toolName),
 					onContextLimit: createReactiveCompactionHandler(state.agent, session)
 				});
 			} finally {
@@ -9797,6 +9802,7 @@ function CliApp() {
 		additionalDirectories: state.additionalDirectories,
 		featureRegistry: state.featureRegistry,
 		backgroundManager: state.backgroundManager,
+		toolCatalog: state.toolCatalog,
 		todoStore: todoStoreRef.current,
 		decisionStore: decisionStoreRef.current,
 		blockerStore: blockerStoreRef.current,
@@ -9864,7 +9870,7 @@ function CliApp() {
 				previousMessages: previousMessages.length > 0 ? previousMessages : void 0,
 				signal: abortController.signal,
 				parallelExecution: cliConfig.preferences.enableParallelToolExecution === true,
-				isReadOnlyTool
+				isReadOnlyTool: (toolName) => state.toolCatalog.isReadOnly(toolName)
 			});
 			const successfulToolCalls = result.steps.filter((s) => s.type === "observation").length;
 			const currentSession = useCliStore.getState().session;

package/dist/{package-DEsNSP54.mjs → package-COr17yKT.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
 //#region package.json
-var version = "3.0.0";
+var version = "3.2.0";
 //#endregion
 export { version as t };