@bike4mind/cli 3.1.0 → 3.3.0

package/dist/commands/mcpCommand.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { t as ConfigStore } from "../ConfigStore-RHqyXcSS.mjs";
-import { t as version } from "../package-DsG8Tgvs.mjs";
+import { t as ConfigStore } from "../ConfigStore-DUATzLxB.mjs";
+import { t as version } from "../package-DYPVrada.mjs";
 //#region src/commands/mcpCommand.ts
 /**
 * External MCP commands (b4m mcp list, b4m mcp add, etc.)
@@ -70,7 +70,7 @@ async function handleMcpCommand(subcommand, argv) {
 			await handleDisable(config, argv.name, configStore);
 			break;
 		case "serve": {
-			const { handleMcpServeCommand } = await import("../serve-CAfCQose.mjs");
+			const { handleMcpServeCommand } = await import("../serve-w6v3rZiR.mjs");
 			await handleMcpServeCommand({
 				http: Boolean(argv.http),
 				port: typeof argv.port === "number" ? argv.port : void 0,

package/dist/commands/pluginCommand.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as ConfigStore } from "../ConfigStore-RHqyXcSS.mjs";
+import { t as ConfigStore } from "../ConfigStore-DUATzLxB.mjs";
 import { n as getDefaultPluginsDir, r as isFeatureEnabled, t as PluginStore } from "../PluginStore-DwvOJ-G3.mjs";
 import { promises } from "fs";
 import path from "path";

package/dist/commands/updateCommand.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as version } from "../package-DsG8Tgvs.mjs";
+import { t as version } from "../package-DYPVrada.mjs";
 import { a as forceCheckForUpdate, c as isNpmPrefixWritable, d as shouldAttemptAutoUpdate, l as readCachedUpdate, n as REEXEC_GUARD_ENV, o as getAutoUpdatePreference, t as INSTALL_CMD, u as setAutoUpdatePreference } from "../updateChecker-CCLVVdH0.mjs";
 import { t as checkRipgrep } from "../ripgrepCheck-BmkyTK2i.mjs";
 import { execSync, spawnSync } from "child_process";

package/dist/{dist-B1bGf-yn.mjs → dist-DPP7UmK9.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { _ as logger, f as AuthenticatedApiClient, p as DeviceFlowClient, t as ConfigStore } from "./ConfigStore-RHqyXcSS.mjs";
-import { t as version } from "./package-DsG8Tgvs.mjs";
+import { b as logger, g as DeviceFlowClient, h as AuthenticatedApiClient, t as ConfigStore } from "./ConfigStore-DUATzLxB.mjs";
+import { t as version } from "./package-DYPVrada.mjs";
 import { isAxiosError } from "axios";
 import { Readable } from "node:stream";
 import { createParser } from "eventsource-parser";

package/dist/index.mjs

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
-import { $ as processFileReferences, A as createAgentDelegateTool, C as createTodoStore, D as createCoordinateTaskTool, E as parseAgentConfig, F as PermissionManager, G as DEFAULT_THOROUGHNESS, H as DEFAULT_AGENT_MODEL, I as buildCliToolList, J as getPlanModeFilePath, M as substituteArguments, O as createResumeAgentTool, P as findIterationBoundary, Q as CustomCommandStore, S as createFindDefinitionTool, T as createSkillTool, U as DEFAULT_MAX_ITERATIONS, V as ALWAYS_DENIED_FOR_AGENTS, W as DEFAULT_RETRY_CONFIG, X as buildSkillsPromptSection, Y as buildSystemPrompt, Z as RemoteSkillSource, _ as createDecisionLogTool, at as rewireReservedNames, b as createGetFileStructureTool, ct as warmFileCache, d as createReviewGateStore, et as hasFileReferences, f as createReviewGateTool, ft as MAX_PASTE_SIZE, g as formatBlockersOutput, h as createBlockerTools, it as mergeCommands, j as FallbackLlmBackend, k as createBackgroundAgentTools, m as createBlockerStore, nt as SessionStore, ot as formatFileSize, p as formatReviewGatesOutput, q as setWebSocketToolExecutor, rt as searchCommands, s as buildSandbox, st as searchFiles, tt as CheckpointStore, u as isConnectionDrop, ut as COMPACTION_SUMMARY_MARKER, v as createDecisionStore, w as createWriteTodosTool, x as createWorkItemTools, y as formatDecisionsOutput, z as getProcessHooks } from "./AgentHistoryStore-O2gKB5YG.mjs";
+import { $ as CustomCommandStore, A as createAgentDelegateTool, B as DEFAULT_THOROUGHNESS, C as createTodoStore, D as createCoordinateTaskTool, E as parseAgentConfig, G as setWebSocketToolExecutor, H as buildSkillsPromptSection, I as ALWAYS_DENIED_FOR_AGENTS, L as DEFAULT_AGENT_MODEL, M as substituteArguments, N as PermissionManager, O as createResumeAgentTool, P as buildCliToolList, Q as RemoteSkillSource, R as DEFAULT_MAX_ITERATIONS, S as createFindDefinitionTool, T as createSkillTool, V as buildSystemPrompt, W as getProcessHooks, X as createToolSearchTool, Z as findIterationBoundary, _ as createDecisionLogTool, at as mergeCommands, b as createGetFileStructureTool, ct as searchFiles, d as createReviewGateStore, dt as COMPACTION_SUMMARY_MARKER, et as processFileReferences, f as createReviewGateTool, g as formatBlockersOutput, h as createBlockerTools, it as searchCommands, j as FallbackLlmBackend, k as createBackgroundAgentTools, lt as warmFileCache, m as createBlockerStore, nt as CheckpointStore, ot as rewireReservedNames, p as formatReviewGatesOutput, pt as MAX_PASTE_SIZE, q as getPlanModeFilePath, rt as SessionStore, s as buildSandbox, st as formatFileSize, tt as hasFileReferences, u as isConnectionDrop, v as createDecisionStore, w as createWriteTodosTool, x as createWorkItemTools, y as formatDecisionsOutput, z as DEFAULT_RETRY_CONFIG } from "./AgentHistoryStore-CLidbOHG.mjs";
 import { a as selectLiveSubagentTokens, i as selectLiveSubagentCredits, n as selectActiveBackgroundShells, o as useCliStore, r as selectCompletedBackgroundShells, t as selectActiveBackgroundAgents } from "./store-BxmPEI3v.mjs";
-import { At as tokenEstimateMultiplier, Bt as delegationPayloadSchema, F as ChatModels, Ft as ACTOR_COLOR_SLOTS, It as DELEGATION_PAYLOAD_SCHEMA_NAME, Lt as actorColorIndex, P as CREDIT_DEDUCT_TRANSACTION_TYPES, Q as REVIEW_GATE_STATUS_VALUES, Rt as actorKindMarker, Vt as selfClaimedActorKindSchema, _ as logger, c as getCreditsUrl, d as resolveApiEndpoint, g as parseApiUrl, gt as isEarlyStop, l as getEnvironmentName, m as LOCAL_DEV_URL, n as extractCompactInstructions, o as isReadOnlyTool, s as ApiEndpointUnconfiguredError, t as ConfigStore, tt as SUBQUEST_STATUS_VALUES, u as requireApiUrl, v as SESSION_ID_PATTERN, y as isValidSessionId, zt as actorKindSchema } from "./ConfigStore-RHqyXcSS.mjs";
+import { Bt as DELEGATION_PAYLOAD_SCHEMA_NAME, Gt as selfClaimedActorKindSchema, Ht as actorKindMarker, L as CREDIT_DEDUCT_TRANSACTION_TYPES, Pt as tokenEstimateMultiplier, R as ChatModels, S as isValidSessionId, Ut as actorKindSchema, Vt as actorColorIndex, Wt as delegationPayloadSchema, _ as LOCAL_DEV_URL, b as logger, bt as isEarlyStop, d as getCreditsUrl, f as getEnvironmentName, i as ToolCatalog, it as SUBQUEST_STATUS_VALUES, m as resolveApiEndpoint, n as extractCompactInstructions, p as requireApiUrl, t as ConfigStore, tt as REVIEW_GATE_STATUS_VALUES, u as ApiEndpointUnconfiguredError, x as SESSION_ID_PATTERN, y as parseApiUrl, zt as ACTOR_COLOR_SLOTS } from "./ConfigStore-DUATzLxB.mjs";
 import { r as isFeatureEnabled, t as PluginStore } from "./PluginStore-DwvOJ-G3.mjs";
-import { i as getTokenCounter, n as ConversationContext, r as reconstructTurnBlocks, t as WorkItemsClient } from "./WorkItemsClient-cmw7WYBy.mjs";
-import { a as deferredToolRegistry, i as createToolSearchTool, n as buildSupportingStores, o as NotifyingLlmBackend, r as buildLlmBackend, t as buildAgent } from "./buildAgent-C0jmyDL4.mjs";
+import { i as getTokenCounter, n as ConversationContext, r as reconstructTurnBlocks, t as WorkItemsClient } from "./WorkItemsClient-BSoOblGp.mjs";
+import { a as NotifyingLlmBackend, i as deferredToolRegistry, n as buildSupportingStores, r as buildLlmBackend, t as buildAgent } from "./buildAgent-DyZWK0LW.mjs";
 import { t as getShellSessionManager } from "./ShellSessionManager-6o8KZzl1-vrbPAUTq.mjs";
-import { a as ApiClient, s as OAuthClient } from "./dist-B1bGf-yn.mjs";
-import { t as version } from "./package-DsG8Tgvs.mjs";
+import { a as ApiClient, s as OAuthClient } from "./dist-DPP7UmK9.mjs";
+import { t as version } from "./package-DYPVrada.mjs";
 import { s as getStartupUpdateStatus } from "./updateChecker-CCLVVdH0.mjs";
 import React, { useCallback, useEffect, useLayoutEffect, useMemo, useReducer, useRef, useState, useSyncExternalStore } from "react";
 import { Box, Static, Text, measureElement, render, useApp, useInput, usePaste, useStdout } from "ink";
@@ -1145,9 +1145,23 @@ const TOOLS_WITH_HIDDEN_ARGS$1 = /* @__PURE__ */ new Set(["edit_local_file", "ba
 * Displays when a tool needs permission before execution.
 * Waits indefinitely for user response (like Claude Code).
 */
-function PermissionPrompt({ toolName, toolDescription, args, preview, canBeTrusted, onResponse }) {
+function PermissionPrompt({ toolName, toolDescription, args, preview, canBeTrusted, kind, onResponse }) {
+	const isSandboxEscalation = kind === "sandbox-escalation";
 	const hideArgs = TOOLS_WITH_HIDDEN_ARGS$1.has(toolName);
-	const items = canBeTrusted ? [
+	const items = isSandboxEscalation ? [
+		{
+			label: "✓ Retry once without sandbox",
+			value: "allow-once"
+		},
+		{
+			label: "✓ Allow this command unsandboxed for the session",
+			value: "allow-session"
+		},
+		{
+			label: "✗ Deny",
+			value: "deny"
+		}
+	] : canBeTrusted ? [
 		{
 			label: "✓ Allow once",
 			value: "allow-once"
@@ -1251,7 +1265,7 @@ function PermissionPrompt({ toolName, toolDescription, args, preview, canBeTrust
 		borderColor: "gray",
 		paddingX: 1,
 		flexDirection: "column"
-	}, renderDiffPreview(preview))), !canBeTrusted && /* @__PURE__ */ React.createElement(Box, { marginTop: 1 }, /* @__PURE__ */ React.createElement(Text, {
+	}, renderDiffPreview(preview))), !canBeTrusted && !isSandboxEscalation && /* @__PURE__ */ React.createElement(Box, { marginTop: 1 }, /* @__PURE__ */ React.createElement(Text, {
 		color: "red",
 		dimColor: true
 	}, "Note: This tool cannot be trusted due to its dangerous nature.")), /* @__PURE__ */ React.createElement(Box, {
@@ -2834,6 +2848,7 @@ function App({ onMessage, onBackgroundCompletion, onCommand, onBashCommand, onPe
 		args: permissionPrompt.args,
 		preview: permissionPrompt.preview,
 		canBeTrusted: permissionPrompt.canBeTrusted,
+		kind: permissionPrompt.kind,
 		onResponse: (response) => onPermissionResponse(response, permissionPrompt.id)
 	})), userQuestionPrompt && /* @__PURE__ */ React.createElement(Box, {
 		key: userQuestionPrompt.id,
@@ -5768,7 +5783,7 @@ const HandoffSchema = z$1.object({
 	updatedAt: z$1.string()
 });
 z$1.object({
-	_id: z$1.string(),
+	id: z$1.string(),
 	notebookId: z$1.string(),
 	goal: z$1.string(),
 	quests: z$1.array(QuestDataSchema),
@@ -8405,7 +8420,7 @@ async function runTurn(message, ctx) {
 	}
 }
 async function runHeldTurn(message, ctx) {
-	const { agent, sessionStore, configStore, commandHistoryStore, customCommandStore, messageBuilder, config, availableModels, agentStore, contextContent, additionalDirectories, featureRegistry, backgroundManager, todoStore, decisionStore, blockerStore, postEditDiagnostics, workflowStores, setCommandHistory, setAbortController } = ctx;
+	const { agent, sessionStore, configStore, commandHistoryStore, customCommandStore, messageBuilder, config, availableModels, agentStore, contextContent, additionalDirectories, featureRegistry, backgroundManager, toolCatalog, todoStore, decisionStore, blockerStore, postEditDiagnostics, workflowStores, setCommandHistory, setAbortController } = ctx;
 	const storeSession = useCliStore.getState().session;
 	if (!agent || !storeSession) {
 		console.error("❌ CLI failed to initialize. Try restarting b4m.\n");
@@ -8523,7 +8538,7 @@ async function runHeldTurn(message, ctx) {
 				previousMessages: previousMessages.length > 0 ? previousMessages : void 0,
 				signal: abortController.signal,
 				parallelExecution: cliConfig.preferences.enableParallelToolExecution === true,
-				isReadOnlyTool,
+				isReadOnlyTool: (toolName) => toolCatalog.isReadOnly(toolName),
 				workflowReminder,
 				drainFeedback: diagnostics ? (phase) => diagnostics.drain(DRAIN_BUDGET_MS[phase], abortController.signal) : void 0,
 				onContextLimit: createReactiveCompactionHandler(agent, activeSession)
@@ -8957,6 +8972,7 @@ function CliApp() {
 		agent: null,
 		mcpManager: null,
 		permissionManager: null,
+		toolCatalog: new ToolCatalog(),
 		permissionPrompt: null,
 		trustLocationSelector: null,
 		folderTrustPrompt: null,
@@ -9214,7 +9230,7 @@ function CliApp() {
 				error: () => {},
 				debug: () => {}
 			};
-			const permissionManager = new PermissionManager(config.trustedTools || [], void 0, config.tools.disabled || []);
+			const permissionManager = new PermissionManager(state.toolCatalog, config.trustedTools || [], config.tools.disabled || []);
 			const checkpointProjectDir = state.configStore.getProjectConfigDir() || process.cwd();
 			const checkpointStore = new CheckpointStore(checkpointProjectDir);
 			const { sandboxOrchestrator } = await buildSandbox({
@@ -9224,7 +9240,7 @@ function CliApp() {
 				checkpointStore
 			});
 			let permissionPromptCounter = 0;
-			const promptFn = (toolName, args, preview) => {
+			const promptFn = (toolName, args, preview, kind) => {
 				return new Promise((resolve) => {
 					getProcessHooks()?.fireNotificationPermissionPrompt(toolName);
 					const canBeTrusted = permissionManager.canBeTrusted(toolName);
@@ -9235,6 +9251,7 @@ function CliApp() {
 						args,
 						preview,
 						canBeTrusted,
+						kind,
 						resolve
 					};
 					setState((prev) => ({
@@ -9374,9 +9391,13 @@ function CliApp() {
 			}) : null;
 			const workItemTools = config.preferences.enableWorkItemTools ? createWorkItemTools(new WorkItemsClient(apiClient)) : [];
 			const agentToolsRef = { current: null };
-			const toolSearchTool = deferredToolRegistry.size() > 0 ? createToolSearchTool(() => {
-				if (!agentToolsRef.current) throw new Error("tool_search invoked before agent context was wired");
-				return agentToolsRef.current;
+			const toolSearchTool = deferredToolRegistry.size() > 0 ? createToolSearchTool({
+				registry: deferredToolRegistry,
+				logger,
+				toolListAccessor: () => {
+					if (!agentToolsRef.current) throw new Error("tool_search invoked before agent context was wired");
+					return agentToolsRef.current;
+				}
 			}) : null;
 			const cliTools = buildCliToolList({
 				toolSearchTool,
@@ -9662,7 +9683,7 @@ function CliApp() {
 					previousMessages: previousMessages.length > 0 ? previousMessages : void 0,
 					signal: abortController.signal,
 					parallelExecution: cliConfig.preferences.enableParallelToolExecution === true,
-					isReadOnlyTool,
+					isReadOnlyTool: (toolName) => state.toolCatalog.isReadOnly(toolName),
 					onContextLimit: createReactiveCompactionHandler(state.agent, session)
 				});
 			} finally {
@@ -9797,6 +9818,7 @@ function CliApp() {
 		additionalDirectories: state.additionalDirectories,
 		featureRegistry: state.featureRegistry,
 		backgroundManager: state.backgroundManager,
+		toolCatalog: state.toolCatalog,
 		todoStore: todoStoreRef.current,
 		decisionStore: decisionStoreRef.current,
 		blockerStore: blockerStoreRef.current,
@@ -9864,7 +9886,7 @@ function CliApp() {
 				previousMessages: previousMessages.length > 0 ? previousMessages : void 0,
 				signal: abortController.signal,
 				parallelExecution: cliConfig.preferences.enableParallelToolExecution === true,
-				isReadOnlyTool
+				isReadOnlyTool: (toolName) => state.toolCatalog.isReadOnly(toolName)
 			});
 			const successfulToolCalls = result.steps.filter((s) => s.type === "observation").length;
 			const currentSession = useCliStore.getState().session;

package/dist/{package-DsG8Tgvs.mjs → package-DYPVrada.mjs}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
 //#region package.json
-var version = "3.1.0";
+var version = "3.3.0";
 //#endregion
 export { version as t };

package/dist/{serve-CAfCQose.mjs → serve-w6v3rZiR.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { A as BRIEFCASE_CATALOG_QUERIES, B as GENERATED_IMAGE_EXTENSION_RE, C as AGENT_QUEST_ID, Ct as replacePromptVariables, H as ImagePromptResolutionSchema, L as CreateArtifactRequestSchema, M as BriefcasePromptIdSchema, Mt as ttsRequestSchema, Nt as ttsResponseTooLargeSchema, R as DEFAULT_TTS_PROVIDER, St as questReplyText, T as AGENT_QUEST_MCP_URI, V as ImageModels, X as PROMPT_TEXT_MAX, _ as logger, bt as joinReplySlots, dt as generatedAudioResponseSchema, g as parseApiUrl, h as NotAuthenticatedError, jt as ttsBase64ResponseSchema, k as ArtifactTypeSchema, kt as supportedVoiceGenerationVendor, rt as VisibilitySchema, st as buildPromptContext, t as ConfigStore, u as requireApiUrl, w as AGENT_QUEST_MANIFEST } from "./ConfigStore-RHqyXcSS.mjs";
-import { a as ApiClient, i as parseRetryAfterSeconds, o as isProviderKeyFailure, r as createClient, t as B4mApiError } from "./dist-B1bGf-yn.mjs";
+import { $ as PROMPT_TEXT_MAX, B as CreateArtifactRequestSchema, D as AGENT_QUEST_MANIFEST, Dt as replacePromptVariables, E as AGENT_QUEST_ID, Et as questReplyText, F as BriefcasePromptIdSchema, Ft as ttsBase64ResponseSchema, G as ImagePromptResolutionSchema, It as ttsRequestSchema, Lt as ttsResponseTooLargeSchema, M as ArtifactTypeSchema, N as BRIEFCASE_CATALOG_QUERIES, Nt as supportedVoiceGenerationVendor, O as AGENT_QUEST_MCP_URI, U as GENERATED_IMAGE_EXTENSION_RE, V as DEFAULT_TTS_PROVIDER, W as ImageModels, b as logger, dt as buildPromptContext, ht as generatedAudioResponseSchema, p as requireApiUrl, st as VisibilitySchema, t as ConfigStore, v as NotAuthenticatedError, wt as joinReplySlots, y as parseApiUrl } from "./ConfigStore-DUATzLxB.mjs";
+import { a as ApiClient, i as parseRetryAfterSeconds, o as isProviderKeyFailure, r as createClient, t as B4mApiError } from "./dist-DPP7UmK9.mjs";
 import { z as z$1 } from "zod";
 import { isAxiosError } from "axios";
 import { createHash, randomUUID } from "node:crypto";

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@bike4mind/cli",
-  "version": "3.1.0",
-  "mcpName": "io.github.bike4mind/bike4mind",
+  "version": "3.3.0",
+  "mcpName": "io.github.Bike4Mind/bike4mind",
   "type": "module",
   "description": "Interactive CLI tool for Bike4Mind with ReAct agents",
   "license": "BUSL-1.1",
@@ -124,17 +124,17 @@
     "tsx": "^4.23.0",
     "typescript": "^5.9.3",
     "vitest": "^4.1.11",
-    "@bike4mind/agents": "1.2.1",
-    "@bike4mind/client-auth": "0.2.0",
-    "@bike4mind/common": "15.1.0",
-    "@bike4mind/fab-pipeline": "2.1.1",
-    "@bike4mind/llm-adapters": "1.1.1",
+    "@bike4mind/agents": "1.2.8",
+    "@bike4mind/client-auth": "0.2.1",
+    "@bike4mind/common": "18.0.0",
+    "@bike4mind/fab-pipeline": "2.1.8",
     "@bike4mind/hearth": "0.3.1",
-    "@bike4mind/mcp": "2.1.1",
+    "@bike4mind/llm-adapters": "1.5.0",
+    "@bike4mind/mcp": "2.1.8",
     "@bike4mind/observability": "0.2.3",
-    "@bike4mind/sdk": "1.0.1",
-    "@bike4mind/services": "17.1.0",
-    "@bike4mind/utils": "7.1.1"
+    "@bike4mind/sdk": "1.2.0",
+    "@bike4mind/services": "19.2.0",
+    "@bike4mind/utils": "8.1.3"
   },
   "optionalDependencies": {
     "@vscode/ripgrep": "^1.18.0"