coding-friend-cli 1.40.3 → 1.40.4

package/dist/{chunk-2M42TEZC.js → chunk-DVWCO7K4.js}

@@ -6,7 +6,7 @@ import {
 import {
   loadConfig,
   resolveMemoryDir
-} from "./chunk-CGZNFAOB.js";
+} from "./chunk-ZEOWTLWI.js";
 import {
   getMemoryMcpStatus,
   isMemoryMcpRegistered,

package/dist/{chunk-FSQCAHWF.js → chunk-LZPCZAGZ.js}

@@ -348,7 +348,7 @@ async function updateClaudeCommand(opts, mode) {
   }
   let refreshMemoryAfterUpdate = null;
   if (doCli) {
-    ({ refreshMemoryAfterUpdate } = await import("./memory-LBVPVWJQ.js"));
+    ({ refreshMemoryAfterUpdate } = await import("./memory-NAFLQ6NN.js"));
     if (!latestCliVersion) {
       log.warn("Cannot check latest CLI version from npm.");
     } else {

package/dist/{chunk-PIXAQLXQ.js → chunk-SKEWZ2ET.js}

@@ -93,6 +93,37 @@ var STATIC_RULES = [
     category: "Core Utilities",
     recommended: true
   },
+  // The cf-review scope snapshot lives under /tmp/coding-friend/review/<run-id>/.
+  // Only the main agent writes it (gather-diff.sh --snapshot-dir); reviewer
+  // subagents read it. Without these rules a background reviewer can stall for
+  // hours on a write-permission prompt nobody sees.
+  // Read/Edit/Write need a DOUBLE leading slash: a single "/" anchors at the
+  // settings source dir, not the filesystem root. Bash rules take the literal
+  // command text, so mkdir keeps one slash.
+  {
+    rule: "Bash(mkdir -p /tmp/coding-friend/review/*)",
+    description: "[write] Create the review scope snapshot dir \xB7 Used by: /cf-review gather-diff --snapshot-dir",
+    category: "Core Utilities",
+    recommended: true
+  },
+  {
+    rule: "Read(//tmp/coding-friend/review/**)",
+    description: "[read-only] Read the review scope snapshot \xB7 Used by: /cf-review reviewer agents",
+    category: "Core Utilities",
+    recommended: true
+  },
+  {
+    rule: "Edit(//tmp/coding-friend/review/**)",
+    description: "[modify] Update the review scope snapshot \xB7 Used by: /cf-review main agent",
+    category: "Core Utilities",
+    recommended: true
+  },
+  {
+    rule: "Write(//tmp/coding-friend/review/**)",
+    description: "[write] Write the review scope snapshot \xB7 Used by: /cf-review main agent",
+    category: "Core Utilities",
+    recommended: true
+  },
   // Git Operations
   {
     rule: "Bash(git status *)",

package/dist/{chunk-CGZNFAOB.js → chunk-ZEOWTLWI.js}

@@ -102,7 +102,13 @@ var MemoryConfigSchema = z.object({
 });
 var ReviewConfigSchema = z.strictObject({
   withCodex: z.boolean().optional(),
-  maxRounds: z.number().int().min(1).optional()
+  maxRounds: z.number().int().min(1).optional(),
+  // Both timeouts are whole positive seconds: zero, negative and fractional
+  // values cannot be enforced as a deadline, so they are rejected here rather
+  // than coerced somewhere downstream. Deliberately NOT offered in the
+  // interactive `cf config` review menu — they are file-only settings.
+  agentTimeout: z.number().int().min(1).optional(),
+  nativeTimeout: z.number().int().min(1).optional()
 });
 var ConfigSchema = z.strictObject({
   language: z.string().optional(),

package/dist/{clean-S57BNTWM.js → clean-VD6CFY4C.js}

@@ -1,7 +1,7 @@
 import {
   loadConfig,
   resolveMemoryDir
-} from "./chunk-CGZNFAOB.js";
+} from "./chunk-ZEOWTLWI.js";
 import "./chunk-ITI7MXLA.js";
 import "./chunk-5UVDWG5L.js";
 import "./chunk-EVGXUDX4.js";

package/dist/{config-OFGL545F.js → config-7LMHDOGW.js}

@@ -2,13 +2,13 @@ import {
   afterAutoApproveEnabled,
   getAllRules,
   getExistingRules
-} from "./chunk-PIXAQLXQ.js";
+} from "./chunk-SKEWZ2ET.js";
 import {
   listMdFilesRecursive
 } from "./chunk-2DTXVMPQ.js";
 import {
   resolveLearnDir
-} from "./chunk-CGZNFAOB.js";
+} from "./chunk-ZEOWTLWI.js";
 import {
   findStatuslineHookPath,
   getCurrentAccountEmail,
@@ -802,7 +802,7 @@ async function editPermissions() {
     )
   });
   if (choice === BACK) return;
-  const { permissionCommand } = await import("./permission-W3NM7HOL.js");
+  const { permissionCommand } = await import("./permission-TORAVB2Y.js");
   switch (choice) {
     case "interactive":
       await permissionCommand({});

package/dist/{host-7XKH5HLB.js → host-KGUAFN4Y.js}

@@ -1,6 +1,6 @@
 import {
   resolveLearnDir
-} from "./chunk-CGZNFAOB.js";
+} from "./chunk-ZEOWTLWI.js";
 import "./chunk-ITI7MXLA.js";
 import {
   getLibPath

package/dist/index.js

@@ -46,7 +46,7 @@ program.command("install").description("Install the Coding Friend plugin into a
   "--agent <agent>",
   "Operate on host agent: claude, codex, omp, or agy"
 ).option("--codex", "Alias for --agent codex").option("--omp", "Alias for --agent omp").option("--agy", "Shortcut for --agent agy (beta)").action(async (opts) => {
-  const { installCommand } = await import("./install-B3646W7P.js");
+  const { installCommand } = await import("./install-3APP3HXQ.js");
   await installCommand(opts);
 });
 program.command("uninstall").description("Uninstall the Coding Friend plugin from a supported host").option("--user", "Uninstall from user scope (all projects)").option("--global", "Uninstall from user scope (all projects)").option("--project", "Uninstall from project scope").option("--local", "Uninstall from local scope").option(
@@ -80,11 +80,11 @@ program.command("init").description("Initialize coding-friend in current project
   "--trust-project",
   "For Codex, mark the current project trusted in ~/.codex/config.toml"
 ).action(async (opts) => {
-  const { initCommand } = await import("./init-XAWQUS2X.js");
+  const { initCommand } = await import("./init-GL353JQR.js");
   await initCommand(opts);
 });
 program.command("config").description("Manage Coding Friend configuration").action(async () => {
-  const { configCommand } = await import("./config-OFGL545F.js");
+  const { configCommand } = await import("./config-7LMHDOGW.js");
   await configCommand();
 });
 var learn = program.command("learn").description("Manage learning docs \u2014 host as a website or push to git");
@@ -96,25 +96,25 @@ Learn subcommands:
   learn push [path]   Commit and push learning docs (only if learn dir is the git root)`
 );
 learn.command("host").description("Build and serve learning docs as a static website").argument("[path]", "path to docs folder").option("-p, --port <port>", "port number", "3333").action(async (path, opts) => {
-  const { hostCommand } = await import("./host-7XKH5HLB.js");
+  const { hostCommand } = await import("./host-KGUAFN4Y.js");
   await hostCommand(path, opts);
 });
 learn.command("push").description("Commit and push learning docs to origin").argument("[path]", "path to docs folder").action(async (path) => {
-  const { learnPushCommand } = await import("./learn-Q5YHKHQH.js");
+  const { learnPushCommand } = await import("./learn-ZNJ54LRO.js");
   await learnPushCommand(path);
 });
 program.command("host", { hidden: true }).argument("[path]", "path to docs folder").option("-p, --port <port>", "port number", "3333").action(async (path, opts) => {
-  const { hostCommand } = await import("./host-7XKH5HLB.js");
+  const { hostCommand } = await import("./host-KGUAFN4Y.js");
   await hostCommand(path, opts);
 });
 program.command("mcp").description("Setup MCP server for learning docs").action(async () => {
-  const { mcpCommand } = await import("./mcp-ZG56IYLD.js");
+  const { mcpCommand } = await import("./mcp-TS7MOQ3A.js");
   await mcpCommand();
 });
 program.command("mcp-serve").description(
   "Start the cf-memory MCP server (used internally by npx). When memoryDir is omitted, resolves from CLAUDE_PROJECT_DIR at runtime."
 ).argument("[memoryDir]", "path to memory directory (optional)").action(async (memoryDir) => {
-  const { mcpServeCommand } = await import("./mcp-serve-7RWXY3J4.js");
+  const { mcpServeCommand } = await import("./mcp-serve-D6BHVTCY.js");
   await mcpServeCommand(memoryDir);
 });
 program.command("mcp-serve-learn").description("Start the learn MCP server (used internally by npx)").argument("<docsDir>", "path to docs directory").action(async (docsDir) => {
@@ -134,7 +134,7 @@ program.command("permission").description("Manage host permission and approval s
   "--disable-auto-approve",
   "For Codex, disable deterministic Coding Friend auto-approve"
 ).action(async (opts) => {
-  const { permissionCommand } = await import("./permission-W3NM7HOL.js");
+  const { permissionCommand } = await import("./permission-TORAVB2Y.js");
   await permissionCommand(opts);
 });
 program.command("statusline").description("Setup coding-friend statusline in Claude Code").action(async () => {
@@ -145,15 +145,15 @@ program.command("update").description("Update coding-friend plugin, CLI, and sta
   "--agent <agent>",
   "Operate on host agent: claude, codex, omp, or agy"
 ).option("--codex", "Alias for --agent codex").option("--omp", "Alias for --agent omp").option("--agy", "Shortcut for --agent agy (beta)").action(async (opts) => {
-  const { updateCommand } = await import("./update-HGEF46T5.js");
+  const { updateCommand } = await import("./update-NHI4DBZL.js");
   await updateCommand(opts);
 });
 program.command("status").description("Show comprehensive Coding Friend status").action(async () => {
-  const { statusCommand } = await import("./status-GQ3ZDYZ4.js");
+  const { statusCommand } = await import("./status-Z7DB7Y2S.js");
   await statusCommand();
 });
 program.command("clean").description("Clean files generated by Coding Friend in docs/").action(async () => {
-  const { cleanCommand } = await import("./clean-S57BNTWM.js");
+  const { cleanCommand } = await import("./clean-VD6CFY4C.js");
   await cleanCommand();
 });
 var session = program.command("session").description("[beta] Save and load Claude Code sessions across machines");
@@ -168,11 +168,11 @@ session.command("save").description("Save current Claude Code session to sync fo
   "-s, --session-id <id>",
   "session UUID to save (default: auto-detect newest)"
 ).option("-l, --label <label>", "label for this session").action(async (opts) => {
-  const { sessionSaveCommand } = await import("./session-WU5344ZD.js");
+  const { sessionSaveCommand } = await import("./session-AOC37YNH.js");
   await sessionSaveCommand(opts);
 });
 session.command("load").description("Load a saved session from sync folder").action(async () => {
-  const { sessionLoadCommand } = await import("./session-WU5344ZD.js");
+  const { sessionLoadCommand } = await import("./session-AOC37YNH.js");
   await sessionLoadCommand();
 });
 var memory = program.command("memory").description("AI memory system \u2014 store and search project knowledge");
@@ -192,43 +192,43 @@ Memory subcommands:
   memory mcp          Show MCP server setup instructions`
 );
 memory.command("status").description("Show memory system status").action(async () => {
-  const { memoryStatusCommand } = await import("./memory-LBVPVWJQ.js");
+  const { memoryStatusCommand } = await import("./memory-NAFLQ6NN.js");
   await memoryStatusCommand();
 });
 memory.command("search").description("Search memories by query").argument("<query>", "search query").action(async (query) => {
-  const { memorySearchCommand } = await import("./memory-LBVPVWJQ.js");
+  const { memorySearchCommand } = await import("./memory-NAFLQ6NN.js");
   await memorySearchCommand(query);
 });
 memory.command("list").description(
   "List memories in current project, or all projects with --projects"
 ).option("--projects", "List all project databases with size and metadata").action(async (opts) => {
-  const { memoryListCommand } = await import("./memory-LBVPVWJQ.js");
+  const { memoryListCommand } = await import("./memory-NAFLQ6NN.js");
   await memoryListCommand(opts);
 });
 memory.command("init").description(
   "Initialize memory system \u2014 interactive wizard (first time) or config menu"
 ).action(async () => {
-  const { memoryInitCommand } = await import("./memory-LBVPVWJQ.js");
+  const { memoryInitCommand } = await import("./memory-NAFLQ6NN.js");
   await memoryInitCommand();
 });
 memory.command("config").description("Configure memory system settings").action(async () => {
-  const { memoryConfigCommand } = await import("./memory-LBVPVWJQ.js");
+  const { memoryConfigCommand } = await import("./memory-NAFLQ6NN.js");
   await memoryConfigCommand();
 });
 memory.command("start-daemon").description("Start the memory daemon (Tier 2 \u2014 MiniSearch)").action(async () => {
-  const { memoryStartDaemonCommand } = await import("./memory-LBVPVWJQ.js");
+  const { memoryStartDaemonCommand } = await import("./memory-NAFLQ6NN.js");
   await memoryStartDaemonCommand();
 });
 memory.command("stop-daemon").description("Stop the memory daemon").action(async () => {
-  const { memoryStopDaemonCommand } = await import("./memory-LBVPVWJQ.js");
+  const { memoryStopDaemonCommand } = await import("./memory-NAFLQ6NN.js");
   await memoryStopDaemonCommand();
 });
 memory.command("rebuild").description("Rebuild the daemon search index").action(async () => {
-  const { memoryRebuildCommand } = await import("./memory-LBVPVWJQ.js");
+  const { memoryRebuildCommand } = await import("./memory-NAFLQ6NN.js");
   await memoryRebuildCommand();
 });
 memory.command("mcp").description("Show MCP server setup instructions").action(async () => {
-  const { memoryMcpCommand } = await import("./memory-LBVPVWJQ.js");
+  const { memoryMcpCommand } = await import("./memory-NAFLQ6NN.js");
   await memoryMcpCommand();
 });
 memory.command("rm").description("Remove a project database").option("--project-id <id>", "Project ID to remove").option("--all", "Remove all project databases").option(
@@ -236,7 +236,7 @@ memory.command("rm").description("Remove a project database").option("--project-
   "Remove orphaned projects (source dir missing or 0 memories)"
 ).action(
   async (opts) => {
-    const { memoryRmCommand } = await import("./memory-LBVPVWJQ.js");
+    const { memoryRmCommand } = await import("./memory-NAFLQ6NN.js");
     await memoryRmCommand(opts);
   }
 );

package/dist/{init-XAWQUS2X.js → init-GL353JQR.js}

@@ -7,14 +7,14 @@ import {
   getExistingRules,
   getMissingRules,
   logPluginScriptWarning
-} from "./chunk-PIXAQLXQ.js";
+} from "./chunk-SKEWZ2ET.js";
 import {
   ensureMemoryBuilt,
   isMemoryInitialized,
   memoryInitWizard
-} from "./chunk-2M42TEZC.js";
+} from "./chunk-DVWCO7K4.js";
 import "./chunk-HEVK3OYL.js";
-import "./chunk-CGZNFAOB.js";
+import "./chunk-ZEOWTLWI.js";
 import {
   findStatuslineHookPath,
   getCurrentAccountEmail,

package/dist/{install-B3646W7P.js → install-3APP3HXQ.js}

@@ -1,7 +1,7 @@
 import {
   getLatestVersion,
   semverCompare
-} from "./chunk-FSQCAHWF.js";
+} from "./chunk-LZPCZAGZ.js";
 import {
   getInstalledVersion
 } from "./chunk-FK4SXIF7.js";

package/dist/{learn-Q5YHKHQH.js → learn-ZNJ54LRO.js}

@@ -1,6 +1,6 @@
 import {
   resolveLearnDir
-} from "./chunk-CGZNFAOB.js";
+} from "./chunk-ZEOWTLWI.js";
 import "./chunk-ITI7MXLA.js";
 import {
   readJson

package/dist/{mcp-ZG56IYLD.js → mcp-TS7MOQ3A.js}

@@ -4,7 +4,7 @@ import {
 import {
   ensureMemoryBuilt,
   printMemoryMcpConfig
-} from "./chunk-2M42TEZC.js";
+} from "./chunk-DVWCO7K4.js";
 import {
   checkLearnMcpHealth,
   checkMemoryMcpHealth,
@@ -15,7 +15,7 @@ import {
 import {
   resolveLearnDir,
   resolveMemoryDir
-} from "./chunk-CGZNFAOB.js";
+} from "./chunk-ZEOWTLWI.js";
 import "./chunk-ITI7MXLA.js";
 import {
   isLearnMcpRegistered,

package/dist/{mcp-serve-7RWXY3J4.js → mcp-serve-D6BHVTCY.js}

@@ -1,6 +1,6 @@
 import {
   resolveProjectMemoryDir
-} from "./chunk-CGZNFAOB.js";
+} from "./chunk-ZEOWTLWI.js";
 import "./chunk-ITI7MXLA.js";
 import {
   getLibPath

package/dist/{memory-LBVPVWJQ.js → memory-NAFLQ6NN.js}

@@ -14,9 +14,9 @@ import {
   memoryStopDaemonCommand,
   printMemoryMcpConfig,
   refreshMemoryAfterUpdate
-} from "./chunk-2M42TEZC.js";
+} from "./chunk-DVWCO7K4.js";
 import "./chunk-HEVK3OYL.js";
-import "./chunk-CGZNFAOB.js";
+import "./chunk-ZEOWTLWI.js";
 import "./chunk-ITI7MXLA.js";
 import "./chunk-BQ4E66ZV.js";
 import "./chunk-KCBMCHSA.js";

package/dist/{permission-W3NM7HOL.js → permission-TORAVB2Y.js}

@@ -9,7 +9,7 @@ import {
   getExistingRules,
   groupByCategory,
   logPluginScriptWarning
-} from "./chunk-PIXAQLXQ.js";
+} from "./chunk-SKEWZ2ET.js";
 import {
   askScope,
   formatScopeLabel,

package/dist/{session-WU5344ZD.js → session-AOC37YNH.js}

@@ -1,6 +1,6 @@
 import {
   loadConfig
-} from "./chunk-CGZNFAOB.js";
+} from "./chunk-ZEOWTLWI.js";
 import "./chunk-ITI7MXLA.js";
 import {
   readJson,

package/dist/{status-GQ3ZDYZ4.js → status-Z7DB7Y2S.js}

@@ -1,6 +1,6 @@
 import {
   getExistingRules
-} from "./chunk-PIXAQLXQ.js";
+} from "./chunk-SKEWZ2ET.js";
 import {
   listMdFilesRecursive
 } from "./chunk-2DTXVMPQ.js";
@@ -12,13 +12,13 @@ import {
   resolveLearnDir,
   resolveMemoryDir,
   sanitizeRawConfig
-} from "./chunk-CGZNFAOB.js";
+} from "./chunk-ZEOWTLWI.js";
 import {
   getCliVersion,
   getLatestCliVersion,
   getLatestVersion,
   semverCompare
-} from "./chunk-FSQCAHWF.js";
+} from "./chunk-LZPCZAGZ.js";
 import {
   getInstalledVersion
 } from "./chunk-FK4SXIF7.js";

package/dist/{update-HGEF46T5.js → update-NHI4DBZL.js}

@@ -5,7 +5,7 @@ import {
   isCliGlobalLinked,
   semverCompare,
   updateCommand
-} from "./chunk-FSQCAHWF.js";
+} from "./chunk-LZPCZAGZ.js";
 import "./chunk-FK4SXIF7.js";
 import "./chunk-ITI7MXLA.js";
 import "./chunk-667NMPN4.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "coding-friend-cli",
-  "version": "1.40.3",
+  "version": "1.40.4",
   "description": "CLI for coding-friend — host learning docs, setup MCP server, initialize projects",
   "type": "module",
   "bin": {