@anyforge/control 0.5.0 → 0.6.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. package/README.md +14 -4
  2. package/dist/cli.js +113 -105
  3. package/package.json +1 -1
package/README.md CHANGED
@@ -84,9 +84,19 @@ require a later explicit confirmation of the proposed action. Operator actions
84
84
  and external MCP writes additionally require `--approve`. `oracle exec` always
85
85
  remains read only.
86
86
 
87
- Use Shift+Enter for multiline input. Interactive commands include `/new`,
88
- `/resume`, `/context`, `/attach`, `/model`, `/help` and `/exit`. A disconnect
89
- leaves the hosted run active; Ctrl+C requests cancellation of your current run.
87
+ Use Shift+Enter for multiline input. Type `/` for the command palette:
88
+ `/help`, `/status` (session, access, model, last turn, usage and limits),
89
+ `/new`, `/clear`, `/resume`, `/context`, `/attach`, `/copy`, `/files`,
90
+ `/usage`, `/model` and `/exit`. `/design [topic]` and `/catchup` are answered
91
+ by the Oracle itself, as in the web widget; acting on `/catchup` decisions
92
+ needs a session started with `--write --approve`.
93
+
94
+ While Oracle works, a status line shows what it is doing, how long it has
95
+ taken and which step it is on, and each tool appears as it runs. Enter queues
96
+ one follow-up message. Esc or Ctrl+C cancels the current run and keeps the
97
+ conversation open; press Ctrl+C twice, or Ctrl+D on an empty line, to exit.
98
+ Ctrl+O shows or hides finished tool activity; Ctrl+Shift+F searches the
99
+ conversation. A disconnect leaves the hosted run active.
90
100
 
91
101
  Only files explicitly named with `--file` or `/attach` are uploaded: at most
92
102
  10 files, 10 MiB each and 20 MiB total. Piped input is limited to 1 MiB; free-text
@@ -143,7 +153,7 @@ CI gates on these, so they are a contract:
143
153
  | `2` | Usage error |
144
154
  | `3` | Not authenticated — run `init`, or set `ANYFORGE_API_TOKEN` |
145
155
  | `4` | The API refused; its error code prints to stderr |
146
- | `130` | An Oracle run was interrupted with Ctrl+C |
156
+ | `130` | An Oracle run was interrupted: `exec` was cancelled with Ctrl+C, or you left an interactive session whose last answer you cancelled |
147
157
 
148
158
  Errors and progress go to stderr, so a `--json` pipe stays parseable under a failure.
149
159
 
package/dist/cli.js CHANGED
@@ -1,55 +1,55 @@
1
1
  #!/usr/bin/env node
2
- var So=Object.defineProperty;var Eo=(e,t)=>()=>(e&&(t=e(e=0)),t);var Co=(e,t)=>{for(var n in t)So(e,n,{get:t[n],enumerable:!0})};var ho={};Co(ho,{default:()=>Xs});var Xs,wo=Eo(()=>{Xs={name:"@anyforge/control",version:"0.5.0",description:"AnyForge CLI \u2014 hosted Oracle conversations, a governed LLM proxy, and a scriptable client for approvals, crews, work items and workflows.",license:"Apache-2.0",homepage:"https://anyforge.ai",repository:{type:"git",url:"git+https://github.com/pootonline/sovereign-engineering.git",directory:"packages/control/cli"},publishConfig:{access:"public"},type:"module",main:"dist/cli.js",bin:{anyforge:"dist/cli.js",control:"dist/cli.js"},files:["dist","README.md"],scripts:{build:"esbuild src/cli.ts --bundle --minify --platform=node --format=esm --outfile=dist/cli.js --packages=external && chmod +x dist/cli.js","type-check":"tsc --noEmit",test:"npm run build && node scripts/test.mjs",dev:"tsx src/cli.ts",prepublishOnly:"npm run build","publish:beta":"npm publish --access public --tag beta","publish:stable":"npm publish --access public"},engines:{node:">=22.19.0"},dependencies:{"@earendil-works/pi-tui":"^0.87.1",kleur:"^4.1.5",open:"^10.0.0",prompts:"^2.4.2","proper-lockfile":"^4.1.2"},devDependencies:{"@types/node":"^22.20.0","@types/prompts":"^2.4.9","@types/proper-lockfile":"^4.1.4",esbuild:"^0.25.0","node-pty":"^1.1.0",tsx:"^4.7.0",typescript:"^7.0.2"}}});import{red as yo,yellow as Zs,dim as ot,bold as J}from"kleur/colors";import{execFileSync as Gt}from"child_process";import Uo from"open";import Bt from"prompts";import{green as Be,dim as U,bold as re,yellow as Ae,cyan as pt}from"kleur/colors";import{promises as lt}from"fs";import{homedir as To}from"os";import{join as En,dirname as ua}from"path";var Cn=En(To(),".anyforge"),Ut=En(Cn,"credentials");async function Tn(e){await lt.mkdir(Cn,{recursive:!0,mode:448}),await lt.writeFile(Ut,JSON.stringify(e,null,2),{mode:384})}async function we(){try{let e=await lt.readFile(Ut,"utf8");return JSON.parse(e)}catch(e){if(e.code==="ENOENT")return null;throw e}}async function _n(){try{return await lt.unlink(Ut),!0}catch(e){if(e.code==="ENOENT")return!1;throw e}}import{promises as j}from"fs";import{execFileSync as _o}from"child_process";import{homedir as ue}from"os";import{join as B}from"path";import dt from"prompts";import{dim as ne,green as Dt,yellow as ut}from"kleur/colors";var ye="# === AnyForge Control \u2014 added by `anyforge init` ===",De="# === end AnyForge Control ===",be=".anyforge-bak",Po=/claude_(max|pro|team|enterprise)/i,$o=["CLAUDE_CODE_ENABLE_TELEMETRY","OTEL_METRICS_EXPORTER","OTEL_EXPORTER_OTLP_PROTOCOL","OTEL_EXPORTER_OTLP_ENDPOINT","OTEL_EXPORTER_OTLP_HEADERS","OTEL_EXPORTER_OTLP_METRICS_TEMPORALITY_PREFERENCE"];async function Nn(e){let t=[],n=await Lo(e);if(n&&t.push(n),e.scope==="repo"){let r=await Fo(e);return r&&t.push(r),t}for(let r of qo){let o=await r.detect();if(!(!o||!(await dt({type:"confirm",name:"go",message:`Patch ${r.label} via shell rc (${ne(o.path)}) ?`,initial:!0})).go))try{await r.patch(o,e),t.push({label:r.label,path:o.path}),console.log(Dt(" \u2714")+" "+r.label)}catch(s){console.warn(" \u26A0 Skipped "+r.label+": "+s.message)}}return t}async function Lo(e){let t=e.scope==="repo"&&e.repoRoot?{dir:B(e.repoRoot,".claude"),file:"settings.local.json"}:{dir:B(ue(),".claude"),file:"settings.json"},n=B(t.dir,t.file);if(!(await dt({type:"confirm",name:"go",message:`Patch Claude Code config at ${ne(n)} ?`,initial:!0})).go)return null;await j.mkdir(t.dir,{recursive:!0});let o=await j.readFile(n,"utf8").catch(()=>"{}"),i;try{i=JSON.parse(o)}catch{i={}}let s=i.env??{},a=s.ANTHROPIC_BASE_URL;return a&&!a.includes(e.endpoint)&&(a.includes("localhost")||a.includes("127.0.0.1")||a.includes("0.0.0.0"))&&(console.log(),console.log(ut(" \u26A0 Local LLM proxy detected: ")+ne(a)),console.log(ne(" AnyForge only routes Anthropic Claude models. Local models (Ollama,")),console.log(ne(" LM Studio, etc.) will not work in Claude Code after this patch.")),console.log(ne(" To restore: remove ANTHROPIC_BASE_URL and ANTHROPIC_AUTH_TOKEN")),console.log(ne(` from ${n}`)),console.log(),!(await dt({type:"confirm",name:"go",message:"Overwrite existing local LLM proxy config?",initial:!1})).go)?null:(await ie(n)&&!await ie(n+be)&&await j.copyFile(n,n+be),s.ANTHROPIC_BASE_URL=`${e.endpoint}/v1/anthropic`,s.ANTHROPIC_AUTH_TOKEN=e.apiKey,delete s.ANTHROPIC_API_KEY,i.env=s,await j.writeFile(n,JSON.stringify(i,null,2)+`
3
- `),console.log(Dt(" \u2714")+" Claude Code"),{label:e.scope==="repo"?"Claude Code (repo)":"Claude Code (global)",path:n})}async function qn(e){let t=B(ue(),".claude"),n=B(t,"settings.json");await j.mkdir(t,{recursive:!0});let r=await j.readFile(n,"utf8").catch(()=>"{}"),o;try{o=JSON.parse(r)}catch{o={}}let i=o.env??{},s=i.OTEL_EXPORTER_OTLP_ENDPOINT;return s&&!Mt(s,Mn(e.endpoint))?(console.log(ut(" \u26A0 An OpenTelemetry endpoint is already configured: ")+ne(s)),console.log(ne(" Leaving it untouched. To send Claude Code usage to AnyForge, point")),console.log(ne(" OTEL_EXPORTER_OTLP_ENDPOINT at "+e.endpoint+"/api/otel")),null):(await ie(n)&&!await ie(n+be)&&await j.copyFile(n,n+be),i.CLAUDE_CODE_ENABLE_TELEMETRY="1",i.OTEL_METRICS_EXPORTER="otlp",i.OTEL_EXPORTER_OTLP_PROTOCOL="http/json",i.OTEL_EXPORTER_OTLP_ENDPOINT=`${e.endpoint}/api/otel`,i.OTEL_EXPORTER_OTLP_HEADERS=`Authorization=Bearer ${e.apiKey}`,i.OTEL_EXPORTER_OTLP_METRICS_TEMPORALITY_PREFERENCE="delta",o.env=i,await j.writeFile(n,JSON.stringify(o,null,2)+`
4
- `),{label:"Claude Code usage telemetry (global)",path:n})}async function Fo(e){if(!e.repoRoot)return null;let t=B(e.repoRoot,".env");if(!(await dt({type:"confirm",name:"go",message:`Write AnyForge env block to ${ne(t)} ?`,initial:!0})).go)return null;let r=[ye,`ANYFORGE_API_KEY=${e.apiKey}`,`ANTHROPIC_BASE_URL=${e.endpoint}/v1/anthropic`,`ANTHROPIC_AUTH_TOKEN=${e.apiKey}`,`OPENAI_BASE_URL=${e.endpoint}/v1/openai`,`OPENAI_API_KEY=${e.apiKey}`,De,""].join(`
5
- `),o="";try{o=await j.readFile(t,"utf8")}catch{}let i;return o.includes(ye)?i=o.replace(new RegExp(`${ye}[\\s\\S]*?${De}\\n?`),r):o.length===0?i=r:i=o.endsWith(`
2
+ var Ei=Object.defineProperty;var _i=(t,e)=>()=>(t&&(e=t(t=0)),e);var $i=(t,e)=>{for(var n in e)Ei(t,n,{get:e[n],enumerable:!0})};var ir={};$i(ir,{default:()=>pc});var pc,sr=_i(()=>{pc={name:"@anyforge/control",version:"0.6.1",description:"AnyForge CLI \u2014 hosted Oracle conversations, a governed LLM proxy, and a scriptable client for approvals, crews, work items and workflows.",license:"Apache-2.0",homepage:"https://anyforge.ai",repository:{type:"git",url:"git+https://github.com/pootonline/sovereign-engineering.git",directory:"packages/control/cli"},publishConfig:{access:"public"},type:"module",main:"dist/cli.js",bin:{anyforge:"dist/cli.js",control:"dist/cli.js"},files:["dist","README.md"],scripts:{build:"esbuild src/cli.ts --bundle --minify --platform=node --format=esm --outfile=dist/cli.js --packages=external && chmod +x dist/cli.js","type-check":"tsc --noEmit",test:"npm run build && node scripts/test.mjs",dev:"tsx src/cli.ts",prepublishOnly:"npm run build","publish:beta":"npm publish --access public --tag beta","publish:stable":"npm publish --access public"},engines:{node:">=22.19.0"},dependencies:{"@earendil-works/pi-tui":"^0.87.1",kleur:"^4.1.5",open:"^10.0.0",prompts:"^2.4.2","proper-lockfile":"^4.1.2"},devDependencies:{"@types/node":"^22.20.0","@types/prompts":"^2.4.9","@types/proper-lockfile":"^4.1.4",esbuild:"^0.25.0","node-pty":"^1.1.0",tsx:"^4.7.0",typescript:"^7.0.2"}}});import{red as fi,yellow as Nc,dim as xt,bold as B}from"kleur/colors";import{execFileSync as On}from"child_process";import Bi from"open";import vn from"prompts";import{green as et,dim as L,bold as Z,yellow as ke,cyan as Lt}from"kleur/colors";import{promises as _t}from"fs";import{homedir as Pi}from"os";import{join as yr,dirname as Jc}from"path";var vr=yr(Pi(),".anyforge"),hn=yr(vr,"credentials");async function Or(t){await _t.mkdir(vr,{recursive:!0,mode:448}),await _t.writeFile(hn,JSON.stringify(t,null,2),{mode:384})}async function ve(){try{let t=await _t.readFile(hn,"utf8");return JSON.parse(t)}catch(t){if(t.code==="ENOENT")return null;throw t}}async function br(){try{return await _t.unlink(hn),!0}catch(t){if(t.code==="ENOENT")return!1;throw t}}import{promises as P}from"fs";import{execFileSync as Li}from"child_process";import{homedir as le}from"os";import{join as M}from"path";import $t from"prompts";import{dim as X,green as yn,yellow as Pt}from"kleur/colors";var Oe="# === AnyForge Control \u2014 added by `anyforge init` ===",Ze="# === end AnyForge Control ===",xe=".anyforge-bak",Fi=/claude_(max|pro|team|enterprise)/i,Ni=["CLAUDE_CODE_ENABLE_TELEMETRY","OTEL_METRICS_EXPORTER","OTEL_EXPORTER_OTLP_PROTOCOL","OTEL_EXPORTER_OTLP_ENDPOINT","OTEL_EXPORTER_OTLP_HEADERS","OTEL_EXPORTER_OTLP_METRICS_TEMPORALITY_PREFERENCE"];async function Sr(t){let e=[],n=await qi(t);if(n&&e.push(n),t.scope==="repo"){let r=await Mi(t);return r&&e.push(r),e}for(let r of ji){let o=await r.detect();if(!(!o||!(await $t({type:"confirm",name:"go",message:`Patch ${r.label} via shell rc (${X(o.path)}) ?`,initial:!0})).go))try{await r.patch(o,t),e.push({label:r.label,path:o.path}),console.log(yn(" \u2714")+" "+r.label)}catch(s){console.warn(" \u26A0 Skipped "+r.label+": "+s.message)}}return e}async function qi(t){let e=t.scope==="repo"&&t.repoRoot?{dir:M(t.repoRoot,".claude"),file:"settings.local.json"}:{dir:M(le(),".claude"),file:"settings.json"},n=M(e.dir,e.file);if(!(await $t({type:"confirm",name:"go",message:`Patch Claude Code config at ${X(n)} ?`,initial:!0})).go)return null;await P.mkdir(e.dir,{recursive:!0});let o=await P.readFile(n,"utf8").catch(()=>"{}"),i;try{i=JSON.parse(o)}catch{i={}}let s=i.env??{},a=s.ANTHROPIC_BASE_URL;return a&&!a.includes(t.endpoint)&&(a.includes("localhost")||a.includes("127.0.0.1")||a.includes("0.0.0.0"))&&(console.log(),console.log(Pt(" \u26A0 Local LLM proxy detected: ")+X(a)),console.log(X(" AnyForge only routes Anthropic Claude models. Local models (Ollama,")),console.log(X(" LM Studio, etc.) will not work in Claude Code after this patch.")),console.log(X(" To restore: remove ANTHROPIC_BASE_URL and ANTHROPIC_AUTH_TOKEN")),console.log(X(` from ${n}`)),console.log(),!(await $t({type:"confirm",name:"go",message:"Overwrite existing local LLM proxy config?",initial:!1})).go)?null:(await re(n)&&!await re(n+xe)&&await P.copyFile(n,n+xe),s.ANTHROPIC_BASE_URL=`${t.endpoint}/v1/anthropic`,s.ANTHROPIC_AUTH_TOKEN=t.apiKey,delete s.ANTHROPIC_API_KEY,i.env=s,await P.writeFile(n,JSON.stringify(i,null,2)+`
3
+ `),console.log(yn(" \u2714")+" Claude Code"),{label:t.scope==="repo"?"Claude Code (repo)":"Claude Code (global)",path:n})}async function Ir(t){let e=M(le(),".claude"),n=M(e,"settings.json");await P.mkdir(e,{recursive:!0});let r=await P.readFile(n,"utf8").catch(()=>"{}"),o;try{o=JSON.parse(r)}catch{o={}}let i=o.env??{},s=i.OTEL_EXPORTER_OTLP_ENDPOINT;return s&&!wn(s,Er(t.endpoint))?(console.log(Pt(" \u26A0 An OpenTelemetry endpoint is already configured: ")+X(s)),console.log(X(" Leaving it untouched. To send Claude Code usage to AnyForge, point")),console.log(X(" OTEL_EXPORTER_OTLP_ENDPOINT at "+t.endpoint+"/api/otel")),null):(await re(n)&&!await re(n+xe)&&await P.copyFile(n,n+xe),i.CLAUDE_CODE_ENABLE_TELEMETRY="1",i.OTEL_METRICS_EXPORTER="otlp",i.OTEL_EXPORTER_OTLP_PROTOCOL="http/json",i.OTEL_EXPORTER_OTLP_ENDPOINT=`${t.endpoint}/api/otel`,i.OTEL_EXPORTER_OTLP_HEADERS=`Authorization=Bearer ${t.apiKey}`,i.OTEL_EXPORTER_OTLP_METRICS_TEMPORALITY_PREFERENCE="delta",o.env=i,await P.writeFile(n,JSON.stringify(o,null,2)+`
4
+ `),{label:"Claude Code usage telemetry (global)",path:n})}async function Mi(t){if(!t.repoRoot)return null;let e=M(t.repoRoot,".env");if(!(await $t({type:"confirm",name:"go",message:`Write AnyForge env block to ${X(e)} ?`,initial:!0})).go)return null;let r=[Oe,`ANYFORGE_API_KEY=${t.apiKey}`,`ANTHROPIC_BASE_URL=${t.endpoint}/v1/anthropic`,`ANTHROPIC_AUTH_TOKEN=${t.apiKey}`,`OPENAI_BASE_URL=${t.endpoint}/v1/openai`,`OPENAI_API_KEY=${t.apiKey}`,Ze,""].join(`
5
+ `),o="";try{o=await P.readFile(e,"utf8")}catch{}let i;return o.includes(Oe)?i=o.replace(new RegExp(`${Oe}[\\s\\S]*?${Ze}\\n?`),r):o.length===0?i=r:i=o.endsWith(`
6
6
  `)?`${o}${r}`:`${o}
7
- ${r}`,i!==o&&await j.writeFile(t,i),await No(e.repoRoot),console.log(Dt(" \u2714")+" .env"),{label:".env (repo)",path:t}}async function No(e){let t=B(e,".gitignore");try{(await j.readFile(t,"utf8")).split(`
8
- `).map(i=>i.trim()).some(i=>i===".env"||i==="/.env"||i==="*.env")||console.log(ut(" \u26A0 .env is not in .gitignore \u2014 add it before committing."))}catch{console.log(ut(" \u26A0 No .gitignore found \u2014 make sure .env is excluded before committing."))}}var qo=[{label:"Cursor (shell hint)",async detect(){let e=B(ue(),".cursor");return await ie(e)?{path:".cursor (shell hint)"}:null},async patch(e,t){await Pn(t)}},{label:"Cline / Continue (shell hint)",async detect(){let e=await ie(B(ue(),".cline")),t=await ie(B(ue(),".continue"));return e||t?{path:"~/.cline or ~/.continue (shell hint)"}:null},async patch(e,t){await Pn(t)}}];async function Pn(e){let t=[ye,`export ANYFORGE_API_KEY="${e.apiKey}"`,`export ANTHROPIC_BASE_URL="${e.endpoint}/v1/anthropic"`,`export ANTHROPIC_AUTH_TOKEN="${e.apiKey}"`,`export OPENAI_BASE_URL="${e.endpoint}/v1/openai"`,`export OPENAI_API_KEY="${e.apiKey}"`,"unset ANTHROPIC_API_KEY 2>/dev/null || true",De,""].join(`
9
- `);for(let n of[".zshrc",".bashrc"]){let r=B(ue(),n);if(!await ie(r))continue;let o=await j.readFile(r,"utf8"),i;o.includes(ye)?i=o.replace(new RegExp(`${ye}[\\s\\S]*?${De}\\n?`),t):i=o.endsWith(`
7
+ ${r}`,i!==o&&await P.writeFile(e,i),await Ui(t.repoRoot),console.log(yn(" \u2714")+" .env"),{label:".env (repo)",path:e}}async function Ui(t){let e=M(t,".gitignore");try{(await P.readFile(e,"utf8")).split(`
8
+ `).map(i=>i.trim()).some(i=>i===".env"||i==="/.env"||i==="*.env")||console.log(Pt(" \u26A0 .env is not in .gitignore \u2014 add it before committing."))}catch{console.log(Pt(" \u26A0 No .gitignore found \u2014 make sure .env is excluded before committing."))}}var ji=[{label:"Cursor (shell hint)",async detect(){let t=M(le(),".cursor");return await re(t)?{path:".cursor (shell hint)"}:null},async patch(t,e){await Rr(e)}},{label:"Cline / Continue (shell hint)",async detect(){let t=await re(M(le(),".cline")),e=await re(M(le(),".continue"));return t||e?{path:"~/.cline or ~/.continue (shell hint)"}:null},async patch(t,e){await Rr(e)}}];async function Rr(t){let e=[Oe,`export ANYFORGE_API_KEY="${t.apiKey}"`,`export ANTHROPIC_BASE_URL="${t.endpoint}/v1/anthropic"`,`export ANTHROPIC_AUTH_TOKEN="${t.apiKey}"`,`export OPENAI_BASE_URL="${t.endpoint}/v1/openai"`,`export OPENAI_API_KEY="${t.apiKey}"`,"unset ANTHROPIC_API_KEY 2>/dev/null || true",Ze,""].join(`
9
+ `);for(let n of[".zshrc",".bashrc"]){let r=M(le(),n);if(!await re(r))continue;let o=await P.readFile(r,"utf8"),i;o.includes(Oe)?i=o.replace(new RegExp(`${Oe}[\\s\\S]*?${Ze}\\n?`),e):i=o.endsWith(`
10
10
  `)?`${o}
11
- ${t}`:`${o}
11
+ ${e}`:`${o}
12
12
 
13
- ${t}`,i!==o&&await j.writeFile(r,i)}}async function ie(e){try{return await j.access(e),!0}catch{return!1}}async function jn(){try{let e=await j.readFile(B(ue(),".claude.json"),"utf8"),n=JSON.parse(e).oauthAccount,r=n?.organizationType??"";if(n&&Po.test(r))return{isSubscription:!0,plan:/max/i.test(r)?"Max":/pro/i.test(r)?"Pro":/enterprise/i.test(r)?"Enterprise":/team/i.test(r)?"Team":r,email:n.emailAddress??null}}catch{}return{isSubscription:!1,plan:null,email:null}}async function Un(e={}){let t=e.endpoint?Mn(e.endpoint):null,n=[],r=B(ue(),".claude","settings.json");await $n(r,t)&&n.push(r);for(let i of[".zshrc",".bashrc"]){let s=B(ue(),i);await Ln(s)&&n.push(s)}let o=e.repoRoot??jo(process.cwd());if(o){let i=B(o,".claude","settings.local.json");await $n(i,t)&&n.push(i);let s=B(o,".env");await Ln(s)&&n.push(s)}return{reverted:n}}function Mt(e,t){return e?e.includes("anyforge")?!0:t?e.includes(t):!1:!1}async function $n(e,t){if(!await ie(e))return!1;if(await ie(e+be))return await j.copyFile(e+be,e),await j.unlink(e+be).catch(()=>{}),!0;let n;try{n=JSON.parse(await j.readFile(e,"utf8"))}catch{return!1}let r=n.env;if(!r)return!1;let o=!1,i=[["ANTHROPIC_BASE_URL","ANTHROPIC_AUTH_TOKEN"],["OPENAI_BASE_URL","OPENAI_API_KEY"]];for(let[s,a]of i)Mt(r[s],t)&&(delete r[s],delete r[a],o=!0);if(r.ANYFORGE_API_KEY&&(delete r.ANYFORGE_API_KEY,o=!0),Mt(r.OTEL_EXPORTER_OTLP_ENDPOINT,t))for(let s of $o)s in r&&(delete r[s],o=!0);return o?(Object.keys(r).length===0&&delete n.env,await j.writeFile(e,JSON.stringify(n,null,2)+`
14
- `),!0):!1}async function Ln(e){let t;try{t=await j.readFile(e,"utf8")}catch{return!1}if(!t.includes(ye))return!1;let n=t.replace(new RegExp(`\\n?${Fn(ye)}[\\s\\S]*?${Fn(De)}\\n?`),`
13
+ ${e}`,i!==o&&await P.writeFile(r,i)}}async function re(t){try{return await P.access(t),!0}catch{return!1}}async function Cr(){try{let t=await P.readFile(M(le(),".claude.json"),"utf8"),n=JSON.parse(t).oauthAccount,r=n?.organizationType??"";if(n&&Fi.test(r))return{isSubscription:!0,plan:/max/i.test(r)?"Max":/pro/i.test(r)?"Pro":/enterprise/i.test(r)?"Enterprise":/team/i.test(r)?"Team":r,email:n.emailAddress??null}}catch{}return{isSubscription:!1,plan:null,email:null}}async function Tr(t={}){let e=t.endpoint?Er(t.endpoint):null,n=[],r=M(le(),".claude","settings.json");await Ar(r,e)&&n.push(r);for(let i of[".zshrc",".bashrc"]){let s=M(le(),i);await xr(s)&&n.push(s)}let o=t.repoRoot??Di(process.cwd());if(o){let i=M(o,".claude","settings.local.json");await Ar(i,e)&&n.push(i);let s=M(o,".env");await xr(s)&&n.push(s)}return{reverted:n}}function wn(t,e){return t?t.includes("anyforge")?!0:e?t.includes(e):!1:!1}async function Ar(t,e){if(!await re(t))return!1;if(await re(t+xe))return await P.copyFile(t+xe,t),await P.unlink(t+xe).catch(()=>{}),!0;let n;try{n=JSON.parse(await P.readFile(t,"utf8"))}catch{return!1}let r=n.env;if(!r)return!1;let o=!1,i=[["ANTHROPIC_BASE_URL","ANTHROPIC_AUTH_TOKEN"],["OPENAI_BASE_URL","OPENAI_API_KEY"]];for(let[s,a]of i)wn(r[s],e)&&(delete r[s],delete r[a],o=!0);if(r.ANYFORGE_API_KEY&&(delete r.ANYFORGE_API_KEY,o=!0),wn(r.OTEL_EXPORTER_OTLP_ENDPOINT,e))for(let s of Ni)s in r&&(delete r[s],o=!0);return o?(Object.keys(r).length===0&&delete n.env,await P.writeFile(t,JSON.stringify(n,null,2)+`
14
+ `),!0):!1}async function xr(t){let e;try{e=await P.readFile(t,"utf8")}catch{return!1}if(!e.includes(Oe))return!1;let n=e.replace(new RegExp(`\\n?${kr(Oe)}[\\s\\S]*?${kr(Ze)}\\n?`),`
15
15
  `).replace(/\n{3,}/g,`
16
16
 
17
- `);return await j.writeFile(e,n),!0}function Fn(e){return e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}function Mn(e){try{return new URL(e).host}catch{return null}}function jo(e){try{return _o("git",["rev-parse","--show-toplevel"],{cwd:e,encoding:"utf8",stdio:["pipe","pipe","pipe"]}).trim()}catch{return null}}var Mo=2e3,Do=900*1e3;async function Bn(e){let{endpoint:t}=e;console.log(re("AnyForge Control \u2014 device authorisation")),console.log(U(` endpoint: ${t}`));let n=process.cwd(),r=Dn(n),o=r?Wo(r):null,s=await(await fetch(`${t}/api/cli/init`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({repo:o})})).json();if(!s.ok||!s.data)throw new Error(`Could not start the authorisation flow: ${s.error??"unknown error"}`);let{code:a,authUrl:l,pollUrl:c}=s.data;console.log(),console.log("Open this URL in your browser to authorise:"),console.log(` ${pt(l)}`),console.log(U(` Code: ${a}`)),console.log();try{await Uo(l)}catch{}let d=await Bo({pollUrl:c,endpoint:t});await Tn(d),console.log(Be("\u2714")+" API key saved to "+U("~/.anyforge/credentials"));let g=await jn();if(g.isSubscription&&!e.force){await Go(g,t,d.apiKey);return}let h=process.cwd(),k=Dn(h),R=await zo(k),v=await Nn({endpoint:t,apiKey:d.apiKey,scope:R,repoRoot:k});v.length===0?(console.log(Ae("No agent configs were patched.")),console.log(U(" Set ANTHROPIC_BASE_URL="+t+"/v1/anthropic and")),console.log(U(" ANTHROPIC_AUTH_TOKEN=<your AnyForge key> manually if needed."))):Ko(v),console.log(),g.isSubscription&&e.force&&(console.log(Ae(` \u26A0 --force: your Claude ${g.plan??""} subscription login is now shadowed`)),console.log(Ae(" by the AnyForge token \u2014 Claude Code will use the BYOK proxy, which")),console.log(Ae(" needs an Anthropic API key on your company. Run ")+re("anyforge logout")),console.log(Ae(" to revert and restore your subscription."))),R==="repo"&&(console.log(U(" Re-run this command in another repo to patch it too,")),console.log(U(' or run from any directory and choose "global" to install system-wide.'))),console.log(re("Done.")+" Visit "+pt(`${t}/usage`)+" to see your traffic.")}async function Bo(e){let t=Date.now();process.stdout.write("Waiting for browser authorisation\u2026 ");let n=0;for(;Date.now()-t<Do;){await new Promise(i=>setTimeout(i,Mo)),process.stdout.write("."),n+=1,n>40&&(process.stdout.write(`
18
- `),n=0);let o=await(await fetch(e.pollUrl)).json();if(o.status==="authorized"&&o.data)return process.stdout.write(" "+Be("done")+`
19
- `),{apiKey:o.data.apiKey,companyId:o.data.companyId,endpoint:e.endpoint,savedAt:new Date().toISOString()};if(o.status==="expired"||o.status==="not_found")throw process.stdout.write(`
20
- `),new Error(`Authorisation ${o.status}. Re-run \`anyforge init\`.`)}throw new Error("Authorisation timed out (15 min). Re-run `anyforge init`.")}async function Go(e,t,n){let r=e.email?` (${e.email})`:"";console.log(),console.log(Ae(` \u26A0 Claude ${e.plan??""} subscription login detected${r}.`)),console.log(),console.log(" AnyForge Control\u2019s inference proxy is "+re("BYOK-only")+" \u2014 it routes"),console.log(" Claude Code through your own Anthropic API key for metering and"),console.log(" governance. Pointing Claude Code at the proxy would "+re("override and")),console.log(" "+re("disable your subscription login")+", so we did NOT patch your config."),console.log(),console.log(" Instead, use your subscription for inference and add the "+re("AnyForge")),console.log(" "+re("MCP server")+" for control (HIL approvals, work items, crews):"),console.log();let o=`claude mcp add anyforge --env ANYFORGE_API_KEY=${n} -- npx -y @anyforge/mcp-server`;if((await Bt({type:"confirm",name:"go",message:"Add the AnyForge MCP server to Claude Code now?",initial:!0})).go)try{Gt("claude",["mcp","add","anyforge","--env",`ANYFORGE_API_KEY=${n}`,"--","npx","-y","@anyforge/mcp-server"],{stdio:"inherit"}),console.log(Be(" \u2714")+" AnyForge MCP server added to Claude Code.")}catch{console.log(Ae(" Could not run `claude mcp add` automatically (is the `claude` CLI on PATH?).")),console.log(U(" Add it manually:")),console.log(" "+o)}else console.log(U(" Add it later with:")),console.log(" "+o);if(console.log(),(await Bt({type:"confirm",name:"go",message:"Send Claude Code usage to your AnyForge dashboard? (token counts only \u2014 no prompt content)",initial:!0})).go){let a=await qn({endpoint:t,apiKey:n});a&&(console.log(Be(" \u2714")+" Usage telemetry enabled \u2014 view it at "+pt(`${t}/usage`)),console.log(U(" (written to "+a.path+"; `anyforge logout` removes it)")))}else console.log(U(" Skipped \u2014 your subscription usage stays local to Claude Code."));console.log(),console.log(U(" Want the metered BYOK proxy instead? Re-run with ")+re("--force")+U(" using an")),console.log(U(" Anthropic API key on your company (this disables your subscription in")),console.log(U(" Claude Code; ")+re("anyforge logout")+U(" reverts it).")),console.log(),console.log(re("Done.")+" Visit "+pt(`${t}/usage`)+" to see your traffic.")}function Dn(e){try{return Gt("git",["rev-parse","--show-toplevel"],{cwd:e,encoding:"utf8",stdio:["pipe","pipe","pipe"]}).trim()}catch{return null}}async function zo(e){return e?(await Bt({type:"select",name:"scope",message:"Where should AnyForge patch Claude Code?",choices:[{title:`This repo only (${e}/.claude/settings.local.json + .env)`,value:"repo"},{title:"Globally (~/.claude/settings.json)",value:"global"}],initial:0})).scope??"repo":(console.log(U(" Not a git repo root \u2014 installing globally.")),console.log(U(" Run this from a repo root if you want a per-repo install instead.")),"global")}function Ko(e){console.log(Be("\u2714")+" Patched "+e.length+" agent config"+(e.length===1?"":"s")+":");for(let t of e)console.log(` ${U("\u2022")} ${t.label} ${U("("+t.path+")")}`)}function Wo(e){try{let t=Gt("git",["remote","get-url","origin"],{cwd:e,encoding:"utf8",stdio:["pipe","pipe","pipe"]}).trim(),n=t.match(/^git@[\w.-]+:([\w.-]+\/[\w.-]+?)(?:\.git)?$/);if(n)return n[1];let r=t.match(/^https?:\/\/[\w.-]+\/([\w.-]+\/[\w.-]+?)(?:\.git)?$/);return r?r[1]:null}catch{return null}}import{dim as Kt,yellow as Qo,bold as Vo}from"kleur/colors";var p={OK:0,FAILURE:1,USAGE:2,NO_CREDENTIALS:3,API_ERROR:4,INTERRUPTED:130},u=class extends Error{exitCode;hint;constructor(t,n=p.FAILURE,r){super(t),this.name="CliError",this.exitCode=n,this.hint=r}},w=class extends u{constructor(t,n){super(t,p.USAGE,n),this.name="UsageError"}},se=class extends u{constructor(){super("Not authenticated \u2014 no ANYFORGE_API_TOKEN and no saved credential.",p.NO_CREDENTIALS,"Run `npx @anyforge/control init`, or set ANYFORGE_API_TOKEN for unattended use."),this.name="NotAuthenticatedError"}},Oe=class extends u{code;status;constructor(t,n,r){super(r?`${t}: ${r}`:t,p.API_ERROR,Ho(t,n)),this.name="ControlApiError",this.code=t,this.status=n}};function Ho(e,t){if(e==="missing_api_key"||e==="invalid_api_key"||e==="invalid_token"||t===401)return"The key was rejected. Re-run `npx @anyforge/control init`.";if(e==="insufficient_scope"||t===403)return"This key lacks the scope for that command. Run `anyforge whoami` to see its scopes.";if(t===404)return"No such id in this company. Check it with the matching list command.";if(t===429)return"Rate limited. Retry after a short pause."}var Gn="https://crew.anyforge.ai";async function Ce(e){let t=process.env.ANYFORGE_API_TOKEN,n=e||process.env.ANYFORGE_API_URL;if(t)return{apiKey:t,endpoint:n||Gn};let r=await we();if(r?.apiKey)return{apiKey:r.apiKey,endpoint:n||r.endpoint||Gn};throw new se}async function $(e,t,n,r){let o=`${e.endpoint.replace(/\/$/,"")}/api/v1/control${n}`,i;try{i=await fetch(o,{method:t,headers:{"Content-Type":"application/json",Authorization:`Bearer ${e.apiKey}`},...r!==void 0?{body:JSON.stringify(r)}:{}})}catch(a){throw new u(`Cannot reach ${e.endpoint}: ${a instanceof Error?a.message:String(a)}`,p.FAILURE,"Check your network, or pass --endpoint if this workspace is self-hosted.")}let s;try{s=await i.json()}catch{throw new u(`Non-JSON response from ${o} (HTTP ${i.status}).`,p.FAILURE)}if(!i.ok||s.ok===!1){let a=typeof s.error=="string"?s.error:`http_${i.status}`,l=typeof s.message=="string"?s.message:typeof s.detail=="string"?s.detail:void 0;throw new Oe(a,i.status,l)}return s.data}function X(e){let t=Object.entries(e).filter(([,n])=>n!==void 0&&n!=="").map(([n,r])=>`${encodeURIComponent(n)}=${encodeURIComponent(String(r))}`);return t.length?`?${t.join("&")}`:""}async function Ge(e){return $(e,"GET","/me")}function zt(e,t,n,r){let o=e?.entityLabels?.[t]?.[n];return typeof o=="string"&&o.trim()?o:r}async function zn(e){try{return await Ge(e)}catch{return null}}function Kn(e){return[...e].length}function Te(e,t){if(t<=0)return"";let n=[...e];return n.length<=t?e:t===1?"\u2026":`${n.slice(0,t-1).join("")}\u2026`}function Q(e,t){if(e.length===0)return"";let n=e.map(i=>t.map(s=>{let a=s.value(i)??"";return s.max?Te(a,s.max):a})),r=t.map((i,s)=>Math.max(Kn(i.header),...n.map(a=>Kn(a[s])))),o=i=>i.map((s,a)=>a===i.length-1?s:s.padEnd(r[a]+2)).join("").replace(/\s+$/,"");return[o(t.map(i=>i.header)),...n.map(o)].join(`
21
- `)}function _(e){return JSON.stringify(e,null,2)}function Wn(e,t=Date.now()){let n=Jo(e);if(n===null)return"\u2014";let r=Math.max(0,Math.floor((t-n)/1e3));if(r<60)return`${r}s`;let o=Math.floor(r/60);if(o<60)return`${o}m`;let i=Math.floor(o/60);return i<48?`${i}h`:`${Math.floor(i/24)}d`}function Jo(e){if(typeof e=="number")return Number.isFinite(e)?e:null;if(typeof e=="string"){let t=Date.parse(e);return Number.isNaN(t)?null:t}return null}function P(e,t,n="\u2014"){let r=e[t];return typeof r=="string"&&r.trim()?r:typeof r=="number"&&Number.isFinite(r)?String(r):n}function W(e,t,n="\u2014"){for(let r of t){let o=e[r];if(typeof o=="string"&&o.trim())return o}return n}function ae(e){let t=Array.isArray(e)?e:e&&typeof e=="object"?Yo(e):null;return t?t.filter(n=>!!n&&typeof n=="object"&&!Array.isArray(n)):[]}function Yo(e){for(let t of["items","results","rows","data"])if(Array.isArray(e[t]))return e[t];return null}function ft(e,t,n){let r=e?`last ${e}d`:"all time";return!t||!n?r:`last ${Math.max(1,Math.round((Date.now()-n)/864e5))}d of ${e?`${e}d`:"all time"} \u2014 read cap`}async function Hn(e){let t=await Ce(e.endpoint),n=await Ge(t);if(e.json){console.log(_(n));return}console.log(`Company: ${Vo(n.companyName??n.companyId)}${n.companyName?Kt(` (${n.companyId})`):""}`),console.log(`Endpoint: ${t.endpoint}`),console.log(`Scopes: ${n.scopes.length?n.scopes.join(", "):Qo("none")}`),n.userId&&console.log(`User: ${n.userId}`);let r=await we();console.log(r?Kt(`Key tail: \u2026${r.apiKey.slice(-4)} \xB7 saved ${new Date(r.savedAt).toLocaleString()}`):Kt("Key from: ANYFORGE_API_TOKEN (no saved credential file)"))}import{green as Jn,dim as gt,yellow as Xo}from"kleur/colors";async function Yn(){let e=await we(),t=await _n(),{reverted:n}=await Un({endpoint:e?.endpoint??null});if(console.log(t?Jn("\u2714")+" Local credentials cleared.":Xo("No credentials were saved on this machine.")),n.length){console.log(Jn("\u2714")+" Reverted patched configs:");for(let r of n)console.log(` ${gt("\u2022")} ${r}`);console.log(gt(" Your previous Claude Code login (if any) is restored."))}else console.log(gt(" No AnyForge config patches found to revert."));console.log(gt(" Revoke the key server-side at /settings \u2192 API keys."))}import{green as Zo,red as mt,yellow as ei,dim as ht}from"kleur/colors";async function Qn(e){let t=await we();if(!t){console.log(ei("Not logged in.")+" Run "+ht("npx @anyforge/control init")+" first.");return}let n=e.endpoint||t.endpoint;console.log(`Endpoint: ${n}`),console.log(`Company: ${t.companyId}`);let r={model:"claude-3-5-haiku-20241022",max_tokens:1,messages:[{role:"user",content:"Hi"}]},o;try{o=await fetch(`${n}/v1/anthropic/v1/messages`,{method:"POST",headers:{"Content-Type":"application/json","anthropic-version":"2023-06-01",Authorization:`Bearer ${t.apiKey}`},body:JSON.stringify(r)})}catch(i){console.log(mt("\u2717 Proxy unreachable: ")+i.message),process.exit(1)}o.status===401&&(console.log(mt("\u2717 API key rejected.")+" Re-run "+ht("npx @anyforge/control init")+"."),process.exit(1)),o.status===502&&(console.log(mt("\u2717 No BYOK Anthropic key configured for your company.")),console.log(ht(" Add one at ")+n+ht("/settings \u2192 API keys.")),process.exit(1)),o.ok||(console.log(mt(`\u2717 Proxy returned ${o.status}: `)+(await o.text()).slice(0,200)),process.exit(1)),console.log(Zo("\u2714 Proxy reachable, key valid, BYOK configured."))}import{spawn as ti}from"node:child_process";import{readFile as ni}from"node:fs/promises";import{red as ze,green as Wt,yellow as ri,dim as Ke,bold as Vn}from"kleur/colors";async function Xn(e){let t=await oi(e.patchFile);t.trim()||(process.stderr.write(ze(`Empty patch \u2014 nothing to apply.
22
- `)),process.exit(1));let n=ii(t);process.stderr.write(Ke(`Patch: ${n.files} ${n.files===1?"file":"files"}, `)+Wt(`+${n.added}`)+" "+ze(`-${n.removed}`)+`
23
- `);let r=await Ht(["apply","--check"],t);if(r.code!==0){if(e.threeWay){let i=await Ht(["apply","--3way"],t);i.code!==0&&(process.stderr.write(ze(`3-way apply failed:
17
+ `);return await P.writeFile(t,n),!0}function kr(t){return t.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}function Er(t){try{return new URL(t).host}catch{return null}}function Di(t){try{return Li("git",["rev-parse","--show-toplevel"],{cwd:t,encoding:"utf8",stdio:["pipe","pipe","pipe"]}).trim()}catch{return null}}var Gi=2e3,zi=900*1e3;async function $r(t){let{endpoint:e}=t;console.log(Z("AnyForge Control \u2014 device authorisation")),console.log(L(` endpoint: ${e}`));let n=process.cwd(),r=_r(n),o=r?Yi(r):null,s=await(await fetch(`${e}/api/cli/init`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({repo:o})})).json();if(!s.ok||!s.data)throw new Error(`Could not start the authorisation flow: ${s.error??"unknown error"}`);let{code:a,authUrl:c,pollUrl:p}=s.data;console.log(),console.log("Open this URL in your browser to authorise:"),console.log(` ${Lt(c)}`),console.log(L(` Code: ${a}`)),console.log();try{await Bi(c)}catch{}let l=await Wi({pollUrl:p,endpoint:e});await Or(l),console.log(et("\u2714")+" API key saved to "+L("~/.anyforge/credentials"));let u=await Cr();if(u.isSubscription&&!t.force){await Ki(u,e,l.apiKey);return}let v=process.cwd(),k=_r(v),x=await Hi(k),b=await Sr({endpoint:e,apiKey:l.apiKey,scope:x,repoRoot:k});b.length===0?(console.log(ke("No agent configs were patched.")),console.log(L(" Set ANTHROPIC_BASE_URL="+e+"/v1/anthropic and")),console.log(L(" ANTHROPIC_AUTH_TOKEN=<your AnyForge key> manually if needed."))):Ji(b),console.log(),u.isSubscription&&t.force&&(console.log(ke(` \u26A0 --force: your Claude ${u.plan??""} subscription login is now shadowed`)),console.log(ke(" by the AnyForge token \u2014 Claude Code will use the BYOK proxy, which")),console.log(ke(" needs an Anthropic API key on your company. Run ")+Z("anyforge logout")),console.log(ke(" to revert and restore your subscription."))),x==="repo"&&(console.log(L(" Re-run this command in another repo to patch it too,")),console.log(L(' or run from any directory and choose "global" to install system-wide.'))),console.log(Z("Done.")+" Visit "+Lt(`${e}/usage`)+" to see your traffic.")}async function Wi(t){let e=Date.now();process.stdout.write("Waiting for browser authorisation\u2026 ");let n=0;for(;Date.now()-e<zi;){await new Promise(i=>setTimeout(i,Gi)),process.stdout.write("."),n+=1,n>40&&(process.stdout.write(`
18
+ `),n=0);let o=await(await fetch(t.pollUrl)).json();if(o.status==="authorized"&&o.data)return process.stdout.write(" "+et("done")+`
19
+ `),{apiKey:o.data.apiKey,companyId:o.data.companyId,endpoint:t.endpoint,savedAt:new Date().toISOString()};if(o.status==="expired"||o.status==="not_found")throw process.stdout.write(`
20
+ `),new Error(`Authorisation ${o.status}. Re-run \`anyforge init\`.`)}throw new Error("Authorisation timed out (15 min). Re-run `anyforge init`.")}async function Ki(t,e,n){let r=t.email?` (${t.email})`:"";console.log(),console.log(ke(` \u26A0 Claude ${t.plan??""} subscription login detected${r}.`)),console.log(),console.log(" AnyForge Control\u2019s inference proxy is "+Z("BYOK-only")+" \u2014 it routes"),console.log(" Claude Code through your own Anthropic API key for metering and"),console.log(" governance. Pointing Claude Code at the proxy would "+Z("override and")),console.log(" "+Z("disable your subscription login")+", so we did NOT patch your config."),console.log(),console.log(" Instead, use your subscription for inference and add the "+Z("AnyForge")),console.log(" "+Z("MCP server")+" for control (HIL approvals, work items, crews):"),console.log();let o=`claude mcp add anyforge --env ANYFORGE_API_KEY=${n} -- npx -y @anyforge/mcp-server`;if((await vn({type:"confirm",name:"go",message:"Add the AnyForge MCP server to Claude Code now?",initial:!0})).go)try{On("claude",["mcp","add","anyforge","--env",`ANYFORGE_API_KEY=${n}`,"--","npx","-y","@anyforge/mcp-server"],{stdio:"inherit"}),console.log(et(" \u2714")+" AnyForge MCP server added to Claude Code.")}catch{console.log(ke(" Could not run `claude mcp add` automatically (is the `claude` CLI on PATH?).")),console.log(L(" Add it manually:")),console.log(" "+o)}else console.log(L(" Add it later with:")),console.log(" "+o);if(console.log(),(await vn({type:"confirm",name:"go",message:"Send Claude Code usage to your AnyForge dashboard? (token counts only \u2014 no prompt content)",initial:!0})).go){let a=await Ir({endpoint:e,apiKey:n});a&&(console.log(et(" \u2714")+" Usage telemetry enabled \u2014 view it at "+Lt(`${e}/usage`)),console.log(L(" (written to "+a.path+"; `anyforge logout` removes it)")))}else console.log(L(" Skipped \u2014 your subscription usage stays local to Claude Code."));console.log(),console.log(L(" Want the metered BYOK proxy instead? Re-run with ")+Z("--force")+L(" using an")),console.log(L(" Anthropic API key on your company (this disables your subscription in")),console.log(L(" Claude Code; ")+Z("anyforge logout")+L(" reverts it).")),console.log(),console.log(Z("Done.")+" Visit "+Lt(`${e}/usage`)+" to see your traffic.")}function _r(t){try{return On("git",["rev-parse","--show-toplevel"],{cwd:t,encoding:"utf8",stdio:["pipe","pipe","pipe"]}).trim()}catch{return null}}async function Hi(t){return t?(await vn({type:"select",name:"scope",message:"Where should AnyForge patch Claude Code?",choices:[{title:`This repo only (${t}/.claude/settings.local.json + .env)`,value:"repo"},{title:"Globally (~/.claude/settings.json)",value:"global"}],initial:0})).scope??"repo":(console.log(L(" Not a git repo root \u2014 installing globally.")),console.log(L(" Run this from a repo root if you want a per-repo install instead.")),"global")}function Ji(t){console.log(et("\u2714")+" Patched "+t.length+" agent config"+(t.length===1?"":"s")+":");for(let e of t)console.log(` ${L("\u2022")} ${e.label} ${L("("+e.path+")")}`)}function Yi(t){try{let e=On("git",["remote","get-url","origin"],{cwd:t,encoding:"utf8",stdio:["pipe","pipe","pipe"]}).trim(),n=e.match(/^git@[\w.-]+:([\w.-]+\/[\w.-]+?)(?:\.git)?$/);if(n)return n[1];let r=e.match(/^https?:\/\/[\w.-]+\/([\w.-]+\/[\w.-]+?)(?:\.git)?$/);return r?r[1]:null}catch{return null}}import{dim as Rn,yellow as Zi,bold as es}from"kleur/colors";var m={OK:0,FAILURE:1,USAGE:2,NO_CREDENTIALS:3,API_ERROR:4,INTERRUPTED:130},f=class extends Error{exitCode;hint;constructor(e,n=m.FAILURE,r){super(e),this.name="CliError",this.exitCode=n,this.hint=r}},y=class extends f{constructor(e,n){super(e,m.USAGE,n),this.name="UsageError"}},oe=class extends f{constructor(){super("Not authenticated \u2014 no ANYFORGE_API_TOKEN and no saved credential.",m.NO_CREDENTIALS,"Run `npx @anyforge/control init`, or set ANYFORGE_API_TOKEN for unattended use."),this.name="NotAuthenticatedError"}},be=class extends f{code;status;constructor(e,n,r){super(r?`${e}: ${r}`:e,m.API_ERROR,Qi(e,n)),this.name="ControlApiError",this.code=e,this.status=n}};function Qi(t,e){if(t==="missing_api_key"||t==="invalid_api_key"||t==="invalid_token"||e===401)return"The key was rejected. Re-run `npx @anyforge/control init`.";if(t==="insufficient_scope"||e===403)return"This key lacks the scope for that command. Run `anyforge whoami` to see its scopes.";if(e===404)return"No such id in this company. Check it with the matching list command.";if(e===429)return"Rate limited. Retry after a short pause."}var Pr="https://crew.anyforge.ai";async function Fe(t){let e=process.env.ANYFORGE_API_TOKEN,n=t||process.env.ANYFORGE_API_URL;if(e)return{apiKey:e,endpoint:n||Pr};let r=await ve();if(r?.apiKey)return{apiKey:r.apiKey,endpoint:n||r.endpoint||Pr};throw new oe}async function E(t,e,n,r){let o=`${t.endpoint.replace(/\/$/,"")}/api/v1/control${n}`,i;try{i=await fetch(o,{method:e,headers:{"Content-Type":"application/json",Authorization:`Bearer ${t.apiKey}`},...r!==void 0?{body:JSON.stringify(r)}:{}})}catch(a){throw new f(`Cannot reach ${t.endpoint}: ${a instanceof Error?a.message:String(a)}`,m.FAILURE,"Check your network, or pass --endpoint if this workspace is self-hosted.")}let s;try{s=await i.json()}catch{throw new f(`Non-JSON response from ${o} (HTTP ${i.status}).`,m.FAILURE)}if(!i.ok||s.ok===!1){let a=typeof s.error=="string"?s.error:`http_${i.status}`,c=typeof s.message=="string"?s.message:typeof s.detail=="string"?s.detail:void 0;throw new be(a,i.status,c)}return s.data}function H(t){let e=Object.entries(t).filter(([,n])=>n!==void 0&&n!=="").map(([n,r])=>`${encodeURIComponent(n)}=${encodeURIComponent(String(r))}`);return e.length?`?${e.join("&")}`:""}async function tt(t){return E(t,"GET","/me")}function bn(t,e,n,r){let o=t?.entityLabels?.[e]?.[n];return typeof o=="string"&&o.trim()?o:r}async function Lr(t){try{return await tt(t)}catch{return null}}function Fr(t){return[...t].length}function Ne(t,e){if(e<=0)return"";let n=[...t];return n.length<=e?t:e===1?"\u2026":`${n.slice(0,e-1).join("")}\u2026`}function z(t,e){if(t.length===0)return"";let n=t.map(i=>e.map(s=>{let a=s.value(i)??"";return s.max?Ne(a,s.max):a})),r=e.map((i,s)=>Math.max(Fr(i.header),...n.map(a=>Fr(a[s])))),o=i=>i.map((s,a)=>a===i.length-1?s:s.padEnd(r[a]+2)).join("").replace(/\s+$/,"");return[o(e.map(i=>i.header)),...n.map(o)].join(`
21
+ `)}function C(t){return JSON.stringify(t,null,2)}function Nr(t,e=Date.now()){let n=Vi(t);if(n===null)return"\u2014";let r=Math.max(0,Math.floor((e-n)/1e3));if(r<60)return`${r}s`;let o=Math.floor(r/60);if(o<60)return`${o}m`;let i=Math.floor(o/60);return i<48?`${i}h`:`${Math.floor(i/24)}d`}function Vi(t){if(typeof t=="number")return Number.isFinite(t)?t:null;if(typeof t=="string"){let e=Date.parse(t);return Number.isNaN(e)?null:e}return null}function T(t,e,n="\u2014"){let r=t[e];return typeof r=="string"&&r.trim()?r:typeof r=="number"&&Number.isFinite(r)?String(r):n}function G(t,e,n="\u2014"){for(let r of e){let o=t[r];if(typeof o=="string"&&o.trim())return o}return n}function ie(t){let e=Array.isArray(t)?t:t&&typeof t=="object"?Xi(t):null;return e?e.filter(n=>!!n&&typeof n=="object"&&!Array.isArray(n)):[]}function Xi(t){for(let e of["items","results","rows","data"])if(Array.isArray(t[e]))return t[e];return null}function Ft(t,e,n){let r=t?`last ${t}d`:"all time";return!e||!n?r:`last ${Math.max(1,Math.round((Date.now()-n)/864e5))}d of ${t?`${t}d`:"all time"} \u2014 read cap`}async function qr(t){let e=await Fe(t.endpoint),n=await tt(e);if(t.json){console.log(C(n));return}console.log(`Company: ${es(n.companyName??n.companyId)}${n.companyName?Rn(` (${n.companyId})`):""}`),console.log(`Endpoint: ${e.endpoint}`),console.log(`Scopes: ${n.scopes.length?n.scopes.join(", "):Zi("none")}`),n.userId&&console.log(`User: ${n.userId}`);let r=await ve();console.log(r?Rn(`Key tail: \u2026${r.apiKey.slice(-4)} \xB7 saved ${new Date(r.savedAt).toLocaleString()}`):Rn("Key from: ANYFORGE_API_TOKEN (no saved credential file)"))}import{green as Mr,dim as Nt,yellow as ts}from"kleur/colors";async function Ur(){let t=await ve(),e=await br(),{reverted:n}=await Tr({endpoint:t?.endpoint??null});if(console.log(e?Mr("\u2714")+" Local credentials cleared.":ts("No credentials were saved on this machine.")),n.length){console.log(Mr("\u2714")+" Reverted patched configs:");for(let r of n)console.log(` ${Nt("\u2022")} ${r}`);console.log(Nt(" Your previous Claude Code login (if any) is restored."))}else console.log(Nt(" No AnyForge config patches found to revert."));console.log(Nt(" Revoke the key server-side at /settings \u2192 API keys."))}import{green as ns,red as qt,yellow as rs,dim as Mt}from"kleur/colors";async function jr(t){let e=await ve();if(!e){console.log(rs("Not logged in.")+" Run "+Mt("npx @anyforge/control init")+" first.");return}let n=t.endpoint||e.endpoint;console.log(`Endpoint: ${n}`),console.log(`Company: ${e.companyId}`);let r={model:"claude-3-5-haiku-20241022",max_tokens:1,messages:[{role:"user",content:"Hi"}]},o;try{o=await fetch(`${n}/v1/anthropic/v1/messages`,{method:"POST",headers:{"Content-Type":"application/json","anthropic-version":"2023-06-01",Authorization:`Bearer ${e.apiKey}`},body:JSON.stringify(r)})}catch(i){console.log(qt("\u2717 Proxy unreachable: ")+i.message),process.exit(1)}o.status===401&&(console.log(qt("\u2717 API key rejected.")+" Re-run "+Mt("npx @anyforge/control init")+"."),process.exit(1)),o.status===502&&(console.log(qt("\u2717 No BYOK Anthropic key configured for your company.")),console.log(Mt(" Add one at ")+n+Mt("/settings \u2192 API keys.")),process.exit(1)),o.ok||(console.log(qt(`\u2717 Proxy returned ${o.status}: `)+(await o.text()).slice(0,200)),process.exit(1)),console.log(ns("\u2714 Proxy reachable, key valid, BYOK configured."))}import{spawn as os}from"node:child_process";import{readFile as is}from"node:fs/promises";import{red as nt,green as An,yellow as ss,dim as rt,bold as Dr}from"kleur/colors";async function Br(t){let e=await as(t.patchFile);e.trim()||(process.stderr.write(nt(`Empty patch \u2014 nothing to apply.
22
+ `)),process.exit(1));let n=cs(e);process.stderr.write(rt(`Patch: ${n.files} ${n.files===1?"file":"files"}, `)+An(`+${n.added}`)+" "+nt(`-${n.removed}`)+`
23
+ `);let r=await xn(["apply","--check"],e);if(r.code!==0){if(t.threeWay){let i=await xn(["apply","--3way"],e);i.code!==0&&(process.stderr.write(nt(`3-way apply failed:
24
24
  `)+i.stderr+`
25
- `),process.exit(1)),process.stderr.write(ri(`\u2713 Applied via 3-way merge \u2014 review conflicts before committing.
26
- `));return}process.stderr.write(ze(`Patch does not apply cleanly:
25
+ `),process.exit(1)),process.stderr.write(ss(`\u2713 Applied via 3-way merge \u2014 review conflicts before committing.
26
+ `));return}process.stderr.write(nt(`Patch does not apply cleanly:
27
27
  `)+r.stderr+`
28
- `),process.stderr.write(Ke("Try ")+Vn("--3way")+Ke(` to attempt a 3-way merge against the index.
29
- `)),process.exit(1)}if(e.dryRun){process.stderr.write(Wt(`\u2713 Patch would apply cleanly.
30
- `));return}let o=await Ht(["apply"],t);o.code!==0&&(process.stderr.write(ze(`git apply failed:
28
+ `),process.stderr.write(rt("Try ")+Dr("--3way")+rt(` to attempt a 3-way merge against the index.
29
+ `)),process.exit(1)}if(t.dryRun){process.stderr.write(An(`\u2713 Patch would apply cleanly.
30
+ `));return}let o=await xn(["apply"],e);o.code!==0&&(process.stderr.write(nt(`git apply failed:
31
31
  `)+o.stderr+`
32
- `),process.exit(1)),process.stderr.write(Wt(`\u2713 Applied.
33
- `)),n.files>0&&process.stderr.write(Ke(" Run ")+Vn("git diff --stat")+Ke(` to review.
34
- `))}async function oi(e){if(e)return await ni(e,"utf8");let t=[];for await(let n of process.stdin)t.push(n);return Buffer.concat(t).toString("utf8")}function Ht(e,t){return new Promise((n,r)=>{let o=ti("git",e,{stdio:["pipe","pipe","pipe"]}),i="",s="";o.stdout.on("data",a=>{i+=a.toString()}),o.stderr.on("data",a=>{s+=a.toString()}),o.on("error",r),o.on("close",a=>n({code:a??0,stdout:i,stderr:s})),o.stdin.write(t),o.stdin.end()})}function ii(e){let t=0,n=0,r=0;for(let o of e.split(`
35
- `))if(o.startsWith("diff --git"))t+=1;else{if(o.startsWith("+++")||o.startsWith("---"))continue;o.startsWith("+")?n+=1:o.startsWith("-")&&(r+=1)}return t===0&&(n>0||r>0)&&(t=(e.match(/^\+\+\+ /gm)??[]).length),{files:t,added:n,removed:r}}import{bold as si,dim as Jt,green as ai,red as ci}from"kleur/colors";async function Zn(e){let t=await $(e.creds,"GET",`/hil${X({limit:e.limit})}`);if(e.json){console.log(_(t));return}let n=ae(t);if(n.length===0){console.log(Jt("No approvals pending."));return}console.log(Q(n,[{header:"ID",value:r=>P(r,"id")},{header:"CREW",value:r=>P(r,"crewId"),max:24},{header:"AGE",value:r=>Wn(r.requestedAt)},{header:"SUMMARY",value:r=>W(r,["planSummary","summary","title","description"]),max:60}])),console.log(Jt(`
36
- ${n.length} pending \xB7 approve with `)+si("anyforge approve <id>"))}async function Yt(e){if(!e.approvalId)throw new w(`${e.decision==="APPROVED"?"approve":"reject"} requires an approval id.`,"List them with `anyforge approvals`.");let t=await $(e.creds,"POST",`/hil/${encodeURIComponent(e.approvalId)}`,{decision:e.decision,...e.notes?{notes:e.notes}:{}});if(e.json){console.log(_(t));return}let n=e.decision==="APPROVED"?ai("Approved"):ci("Rejected");console.log(`${n} ${e.approvalId}`);let r=t&&typeof t=="object"?t.signature:void 0;typeof r=="string"&&r&&console.log(Jt(`Audit signature: ${r}`))}import{bold as li,dim as Qt}from"kleur/colors";async function er(e){let t=await $(e.creds,"GET",`/crews${X({status:e.status,activeOnly:e.activeOnly,limit:e.limit})}`);if(e.json){console.log(_(t));return}let n=ae(t);if(n.length===0){console.log(Qt(e.activeOnly?"No active crews.":"No crews."));return}console.log(Q(n,[{header:"ID",value:r=>P(r,"id")},{header:"STATUS",value:r=>P(r,"status")},{header:"TASK",value:r=>W(r,["task"],"\u2014"),max:52},{header:"NOTE",value:r=>W(r,["errorMessage"],""),max:40}]))}async function tr(e){if(!e.crewId)throw new w("crew requires a crew id.","List them with `anyforge crews`.");let t=await $(e.creds,"GET",`/crews/${encodeURIComponent(e.crewId)}${X({messages:e.messages})}`);if(e.json){console.log(_(t));return}let n=t?.crew&&typeof t.crew=="object"?t.crew:t;console.log(`${li(di(W(n,["taskDescription"],P(n,"id"))))}`),console.log(`Status: ${P(n,"status")}`),console.log(`Repo: ${W(n,["githubRepo"])}`);let r=P(n,"prUrl","");r&&console.log(`PR: ${r}`);let o=P(n,"url","");o&&console.log(`Console: ${o}`);let i=ae(t?.chat);if(i.length>0){console.log(Qt(`
37
- Last ${i.length} messages:`));for(let s of i){let a=W(s,["agentRole","role","author","agent","type"],"?"),l=W(s,["content","body","text","summary"],"");l&&console.log(`${Qt(`[${a}]`)} ${Te(l.replace(/\s+/g," "),160)}`)}}}async function Vt(e){if(!e.crewId)throw new w(`${e.action} requires a crew id.`,"List them with `anyforge crews`.");let t=await $(e.creds,"POST",`/crews/${encodeURIComponent(e.crewId)}/${e.action}`);if(e.json){console.log(_(t));return}console.log(`${e.action==="halt"?"Halted":"Resumed"} ${e.crewId}`)}function di(e){return Te(e.split(/\r?\n/).find(t=>t.trim())?.trim()??e,80)}import{bold as ui,dim as _e,red as nr,yellow as or}from"kleur/colors";var pi=new Set(["COMPLETE","HALTED","REJECTED","CANCELLED"]),fi=new Set(["HIL_PENDING","HIL_SHIP","PERMISSION_PENDING","PAUSED"]),gi={HIL_PENDING:"Decide it with `anyforge approvals`, or from the Slack alert.",HIL_SHIP:"Decide it with `anyforge approvals`, or from the Slack alert.",PERMISSION_PENDING:"The agent asked for a tool outside its profile. Allow or deny it in the Console.",PAUSED:"Restart it with `anyforge resume <id>`."};async function ir(e){if(!e.workItemId)throw new w("crew start requires a work item id.","Find one with `anyforge work --status READY`.");let t=await $(e.creds,"PATCH",`/work/${encodeURIComponent(e.workItemId)}`,{action:"dispatch",...e.profileId?{runProfileId:e.profileId}:{}});if(e.json&&!e.follow){console.log(_(t));return}let n=typeof t?.crewId=="string"?t.crewId:"";if(!n)throw new u("Dispatch was accepted but returned no crew id.",p.FAILURE,"Check `anyforge crews --active` to see whether one started.");for(let r of t?.warnings??[])console.error(or(`warning: ${r}`));if(!e.follow){console.log(`Started ${ui(n)} on ${e.workItemId}`),console.log(_e(`Follow it with \`anyforge crew follow ${n}\``));return}await Xt({creds:e.creds,json:e.json,crewId:n,intervalSeconds:e.intervalSeconds})}var mi=5,hi=10,wi=120,rr=30;async function Xt(e){if(!e.crewId)throw new w("crew follow requires a crew id.","List them with `anyforge crews --active`.");let t=Math.min(Math.max(e.intervalSeconds??hi,mi),wi)*1e3,n=Date.now()+rr*6e4,r=new Set,o="",i=!1;for(;;){let s=await $(e.creds,"GET",`/crews/${encodeURIComponent(e.crewId)}?messages=50`),a=s?.crew??{},l=P(a,"status","");for(let c of s?.chat??[]){let d=P(c,"id","");!d||r.has(d)||(r.add(d),i&&!e.json&&yi(c))}if(i=!0,l&&l!==o&&(e.json||console.log(_e(`\u2500\u2500 ${l}`)),o=l),fi.has(l)){if(e.json)console.log(_({crewId:e.crewId,status:l,waiting:!0,url:P(a,"url","")}));else{console.log(or(`
38
- ${l} \u2014 this crew is waiting on a person.`));let c=gi[l];c&&console.log(_e(c));let d=P(a,"url","");d&&console.log(_e(d))}return}if(pi.has(l)){if(e.json)console.log(_({crewId:e.crewId,status:l,waiting:!1,url:P(a,"url","")}));else{let c=`
39
- ${l}`;console.log(l==="COMPLETE"?c:nr(c));let d=P(a,"prUrl","");d&&console.log(_e(d));let g=P(a,"errorMessage","");g&&console.log(nr(g))}if(l!=="COMPLETE")throw new u(`Crew ${e.crewId} ended ${l}.`,p.FAILURE);return}if(Date.now()>=n)throw new u(`Still ${l||"running"} after ${rr} minutes \u2014 giving up watching.`,p.FAILURE,`The crew is unaffected. Check it with \`anyforge crew ${e.crewId}\`.`);await vi(t)}}function yi(e){let t=P(e,"agentRole","")||P(e,"type","?"),n=Oi(e,["content","text","summary"]);n&&console.log(`${_e(`[${t}]`)} ${Te(n.replace(/\s+/g," "),160)}`)}function Oi(e,t){for(let n of t){let r=e[n];if(typeof r=="string"&&r.trim())return r.trim()}return""}function vi(e){return new Promise(t=>{setTimeout(t,e)})}import{dim as wt}from"kleur/colors";var ar=100;function sr(e){let t=e&&typeof e=="object"?e:{};return{total:typeof t.total=="number"?t.total:null,hasMore:t.hasMore===!0,cursor:typeof t.nextCursor=="string"?t.nextCursor:null}}async function Ri(e){let t=s=>`/work${X({status:e.status,type:e.type,priority:e.priority,initiative:e.initiative,program:e.program,search:e.search,assignee:e.assignee,includeArchived:e.includeArchived,limit:e.limit,cursor:s})}`,n=await $(e.creds,"GET",t()),r=ae(n),o=sr(n),i=1;if(!e.all)return{rows:r,total:o.total,hasMore:o.hasMore,raw:n,pagesFetched:i};for(;o.hasMore&&o.cursor&&i<ar;){let s=await $(e.creds,"GET",t(o.cursor));r.push(...ae(s)),o=sr(s),i+=1}return{rows:r,total:o.total,hasMore:o.hasMore,raw:n,pagesFetched:i}}async function cr(e){let t=await Ri(e);if(e.json){console.log(_(e.all?{items:t.rows,total:t.total,hasMore:t.hasMore,nextCursor:null}:t.raw));return}let n=t.rows,r=await zn(e.creds),o=zt(r,"work_item","plural","Work items");if(n.length===0){console.log(wt(`No ${o.toLowerCase()} match that filter.`));return}console.log(Q(n,[{header:"ID",value:l=>P(l,"id")},{header:"PRI",value:l=>P(l,"priority","")},{header:"TYPE",value:l=>P(l,"type","")},{header:"STATUS",value:l=>P(l,"status")},{header:"TITLE",value:l=>W(l,["title","name","summary"]),max:58}]));let i=(n.length===1?zt(r,"work_item","singular","work item"):o).toLowerCase(),s=t.total!==null&&t.total!==n.length?`${n.length} of ${t.total} ${o.toLowerCase()}`:`${n.length} ${i}`,a=t.hasMore?e.all?wt(` \u2014 stopped after ${ar} pages; narrow the filter`):wt(" \u2014 pass --all for the rest"):"";console.log(`${wt(`
40
- ${s}`)}${a}`)}import{bold as bi,dim as yt}from"kleur/colors";async function lr(e){let t=await $(e.creds,"GET","/workflows");if(e.json){console.log(_(t));return}let n=ae(t);if(n.length===0){console.log(yt("No workflows defined."));return}console.log(Q(n,[{header:"ID",value:r=>P(r,"id")},{header:"STATUS",value:r=>W(r,["status","state"],"")},{header:"NAME",value:r=>W(r,["name","title"]),max:58}])),console.log(yt(`
41
- Dispatch with `)+bi("anyforge run <id>"))}async function dr(e){if(!e.workflowId)throw new w("run requires a workflow id.","List them with `anyforge workflows`.");let t;if(e.input!==void 0){try{t=JSON.parse(e.input)}catch(o){throw new w(`--input is not valid JSON: ${o instanceof Error?o.message:String(o)}`,`Example: --input '{"repo":"acme/web"}'`)}if(!t||typeof t!="object"||Array.isArray(t))throw new w("--input must be a JSON object.",`Example: --input '{"repo":"acme/web"}'`)}let n=await $(e.creds,"POST",`/workflows/${encodeURIComponent(e.workflowId)}/run`,t===void 0?void 0:{inputs:t});if(e.json){console.log(_(n));return}let r=W(n??{},["id","runId"],"");console.log(`Queued run ${r||yt("(id not returned)")}`),console.log(yt("Runs pause at gate steps for an operator decision."))}import{dim as Ai}from"kleur/colors";async function ur(e){let t=e.question?.trim();if(!t)throw new w("ask requires a question.",'Example: anyforge ask "which initiatives slipped this cycle?"');!e.json&&process.stderr.isTTY&&process.stderr.write(Ai(`Asking the Oracle (this can take a few minutes)\u2026
42
- `));let n=await $(e.creds,"POST","/oracle",{question:t,...e.context?{context:e.context}:{}});if(e.json){console.log(_(n));return}let r=n&&typeof n=="object"?["answer","text","content","response"].map(o=>n[o]).find(o=>typeof o=="string"&&o.trim()):void 0;console.log(typeof r=="string"?r:_(n))}import{bold as Zt,dim as pr,green as ki,yellow as xi}from"kleur/colors";function Ii(e){return typeof e=="number"?`${Math.round(e*100)}%`:"\u2014"}async function fr(e){let t=await $(e.creds,"GET",`/backtest-corpus${X({days:e.days})}`);if(e.json){console.log(_(t));return}let n=t.incidentsInWindow??0,r=t.backTestable??0,o=t.windowDays?`last ${t.windowDays}d`:"all time";console.log(`${Zt(String(r))} of ${Zt(String(n))} incidents are back-testable `+pr(`(${Ii(t.coverage)} \xB7 ${o})`)),t.viable?console.log(ki("Enough to run a back-test.")):console.log(xi(`Not yet viable \u2014 ${t.shortfall??0} more needed.`));let i=(t.excluded??[]).filter(s=>s.count>0);i.length>0&&console.log(Q(i,[{header:"EXCLUDED",value:s=>String(s.count)},{header:"REASON",value:s=>s.label,max:56}])),t.biggestGap&&console.log(pr(`
43
- Biggest fixable gap: `)+Zt(`${t.biggestGap.label} (${t.biggestGap.count})`))}import{bold as Ot,dim as We,green as Si,yellow as gr}from"kleur/colors";var en=e=>typeof e=="number"?`${Math.round(e*1e3)/10}%`:"\u2014";async function mr(e){let t=await $(e.creds,"GET",`/review-interception${X({days:e.days})}`);if(e.json){console.log(_(t));return}let n=ft(t.windowDays,t.truncated,t.oldestReviewMs),r=i=>{console.log(i)};if(r(`${Ot(String(t.seriousRaised??0))} serious findings raised across ${Ot(String(t.prsReviewed??0))} pull requests ${We(`(${n})`)}`),t.verdict==="measured")r(`${Si(String(t.disappearedSerious??0))} no longer raised by the next round \u2014 ${Ot(en(t.interceptionFloor))} to ${Ot(en(t.interceptionCeiling))}`),r(We(`floor counts every unmeasured finding as unresolved \xB7 ceiling is over the ${t.measurableSerious??0} that had a later round`));else{r(gr("Not enough findings had a later round to measure a rate."));for(let i of t.inconclusiveReasons??[])r(We(` ${i}`))}let o=(t.byLens??[]).filter(i=>i.serious>0);if(o.length>0&&r(Q(o,[{header:"LENS",value:i=>i.lens,max:16},{header:"RAISED",value:i=>String(i.raised)},{header:"SERIOUS",value:i=>String(i.serious)},{header:"CHECKED",value:i=>String(i.measurable)},{header:"GONE",value:i=>String(i.disappeared)}])),t.truncated){let i=t.oldestReviewMs?new Date(t.oldestReviewMs).toISOString().slice(0,10):null;r(gr(`
44
- Read cap reached \u2014 these are the most recent reviews${i?` (back to ${i})`:""}, not the whole window. Every count is a lower bound.`))}t.reviews&&t.skippedShare!=null&&t.skippedShare>0&&r(We(`
45
- ${t.reviews.skipped} of ${t.reviews.total} reviews were skipped (${en(t.skippedShare)}) \u2014 drafts, size caps or path policy.`));for(let i of t.caveats??[])r(We(`
46
- ${i}`))}import{bold as He,dim as ke,green as Ei,red as Ci,yellow as tn}from"kleur/colors";var Ti=e=>typeof e=="number"?`${Math.round(e*1e3)/10}%`:"\u2014";function nn(e){if(typeof e!="number")return"\u2014";if(e<60)return`${e}m`;if(e<1440){let n=Math.floor(e/60);return`${n}h ${Math.round(e-n*60)}m`}let t=Math.floor(e/1440);return`${t}d ${Math.round((e-t*1440)/60)}h`}var _i={capacity:"a limit fired",policy:"configured off",by_design:"correctly declined",unclassified:"reason not recognised"};async function hr(e){let t=await $(e.creds,"GET",`/review-coverage${X({days:e.days})}`);if(e.json){console.log(_(t));return}let n=s=>{console.log(s)},r=ft(t.windowDays,t.truncated,t.oldestRecordMs);n(`${He(String(t.pullRequestsReviewed??0))} of ${He(String(t.pullRequestsSeen??0))} recorded pull requests reviewed ${t.coverageRate!=null?He(`(${Ti(t.coverageRate)})`):""} ${ke(`(${r})`)}`),t.repositoriesReviewed&&n(`across ${He(String(t.repositoriesReviewed))} repositories`),n(ke("recorded = pull requests AnyForge was enabled to watch, not every pull request you opened")),t.medianLatencyMinutes!=null?(n(`
47
- Feedback reached the author in ${Ei(nn(t.medianLatencyMinutes))} median, ${He(nn(t.p90LatencyMinutes))} at p90 ${ke(`(${t.latencySamples??0} reviews)`)}`),t.medianOnOpenLatencyMinutes!=null&&n(ke(` ${nn(t.medianOnOpenLatencyMinutes)} median on pull-request open (${t.onOpenSamples??0} reviews, no quiet period in the way)`))):n(tn(`
48
- Not enough timed reviews to report a latency figure.`));let o=t.capacityGapPullRequests??0;o>0&&n(`
49
- ${Ci(String(o))} pull requests went unreviewed because a limit fired `+ke("\u2014 a cap or a diff over the size ceiling, not a decision anyone made"));let i=t.bySkipClass??[];i.length>0&&n(Q(i,[{header:"WHY UNREVIEWED",value:s=>_i[s.skipClass]??s.skipClass,max:24},{header:"PRS",value:s=>String(s.pullRequests)},{header:"REASONS",value:s=>s.reasons.join(", "),max:46}])),t.failedOnlyPullRequests&&n(ke(`${t.failedOnlyPullRequests} pull requests had every review attempt error out.`));for(let s of t.inconclusiveReasons??[])n(tn(`
50
- ${s}`));if(t.truncated){let s=t.oldestRecordMs?new Date(t.oldestRecordMs).toISOString().slice(0,10):null;n(tn(`
51
- Read cap reached \u2014 these are the most recent records${s?` (back to ${s})`:""}, not the whole window. Every count is a lower bound.`))}for(let s of t.caveats??[])n(ke(`
52
- ${s}`))}import{promises as Je}from"node:fs";import{homedir as Fi}from"node:os";import{dirname as yr,join as xe}from"node:path";import{dim as Or,green as Ni,yellow as qi}from"kleur/colors";var ce="anyforge-platform",Pi="Orient an agent to AnyForge's structure, delivery model, surfaces, live control tools, and safety boundaries.",wr="anyforge://guide/platform",$i="text/markdown";var vt={"SKILL.md":`---
32
+ `),process.exit(1)),process.stderr.write(An(`\u2713 Applied.
33
+ `)),n.files>0&&process.stderr.write(rt(" Run ")+Dr("git diff --stat")+rt(` to review.
34
+ `))}async function as(t){if(t)return await is(t,"utf8");let e=[];for await(let n of process.stdin)e.push(n);return Buffer.concat(e).toString("utf8")}function xn(t,e){return new Promise((n,r)=>{let o=os("git",t,{stdio:["pipe","pipe","pipe"]}),i="",s="";o.stdout.on("data",a=>{i+=a.toString()}),o.stderr.on("data",a=>{s+=a.toString()}),o.on("error",r),o.on("close",a=>n({code:a??0,stdout:i,stderr:s})),o.stdin.write(e),o.stdin.end()})}function cs(t){let e=0,n=0,r=0;for(let o of t.split(`
35
+ `))if(o.startsWith("diff --git"))e+=1;else{if(o.startsWith("+++")||o.startsWith("---"))continue;o.startsWith("+")?n+=1:o.startsWith("-")&&(r+=1)}return e===0&&(n>0||r>0)&&(e=(t.match(/^\+\+\+ /gm)??[]).length),{files:e,added:n,removed:r}}import{bold as ls,dim as kn,green as ds,red as us}from"kleur/colors";async function Gr(t){let e=await E(t.creds,"GET",`/hil${H({limit:t.limit})}`);if(t.json){console.log(C(e));return}let n=ie(e);if(n.length===0){console.log(kn("No approvals pending."));return}console.log(z(n,[{header:"ID",value:r=>T(r,"id")},{header:"CREW",value:r=>T(r,"crewId"),max:24},{header:"AGE",value:r=>Nr(r.requestedAt)},{header:"SUMMARY",value:r=>G(r,["planSummary","summary","title","description"]),max:60}])),console.log(kn(`
36
+ ${n.length} pending \xB7 approve with `)+ls("anyforge approve <id>"))}async function Sn(t){if(!t.approvalId)throw new y(`${t.decision==="APPROVED"?"approve":"reject"} requires an approval id.`,"List them with `anyforge approvals`.");let e=await E(t.creds,"POST",`/hil/${encodeURIComponent(t.approvalId)}`,{decision:t.decision,...t.notes?{notes:t.notes}:{}});if(t.json){console.log(C(e));return}let n=t.decision==="APPROVED"?ds("Approved"):us("Rejected");console.log(`${n} ${t.approvalId}`);let r=e&&typeof e=="object"?e.signature:void 0;typeof r=="string"&&r&&console.log(kn(`Audit signature: ${r}`))}import{bold as ps,dim as In}from"kleur/colors";async function zr(t){let e=await E(t.creds,"GET",`/crews${H({status:t.status,activeOnly:t.activeOnly,limit:t.limit})}`);if(t.json){console.log(C(e));return}let n=ie(e);if(n.length===0){console.log(In(t.activeOnly?"No active crews.":"No crews."));return}console.log(z(n,[{header:"ID",value:r=>T(r,"id")},{header:"STATUS",value:r=>T(r,"status")},{header:"TASK",value:r=>G(r,["task"],"\u2014"),max:52},{header:"NOTE",value:r=>G(r,["errorMessage"],""),max:40}]))}async function Wr(t){if(!t.crewId)throw new y("crew requires a crew id.","List them with `anyforge crews`.");let e=await E(t.creds,"GET",`/crews/${encodeURIComponent(t.crewId)}${H({messages:t.messages})}`);if(t.json){console.log(C(e));return}let n=e?.crew&&typeof e.crew=="object"?e.crew:e;console.log(`${ps(fs(G(n,["taskDescription"],T(n,"id"))))}`),console.log(`Status: ${T(n,"status")}`),console.log(`Repo: ${G(n,["githubRepo"])}`);let r=T(n,"prUrl","");r&&console.log(`PR: ${r}`);let o=T(n,"url","");o&&console.log(`Console: ${o}`);let i=ie(e?.chat);if(i.length>0){console.log(In(`
37
+ Last ${i.length} messages:`));for(let s of i){let a=G(s,["agentRole","role","author","agent","type"],"?"),c=G(s,["content","body","text","summary"],"");c&&console.log(`${In(`[${a}]`)} ${Ne(c.replace(/\s+/g," "),160)}`)}}}async function Cn(t){if(!t.crewId)throw new y(`${t.action} requires a crew id.`,"List them with `anyforge crews`.");let e=await E(t.creds,"POST",`/crews/${encodeURIComponent(t.crewId)}/${t.action}`);if(t.json){console.log(C(e));return}console.log(`${t.action==="halt"?"Halted":"Resumed"} ${t.crewId}`)}function fs(t){return Ne(t.split(/\r?\n/).find(e=>e.trim())?.trim()??t,80)}import{bold as ms,dim as qe,red as Kr,yellow as Jr}from"kleur/colors";var gs=new Set(["COMPLETE","HALTED","REJECTED","CANCELLED"]),hs=new Set(["HIL_PENDING","HIL_SHIP","PERMISSION_PENDING","PAUSED"]),ws={HIL_PENDING:"Decide it with `anyforge approvals`, or from the Slack alert.",HIL_SHIP:"Decide it with `anyforge approvals`, or from the Slack alert.",PERMISSION_PENDING:"The agent asked for a tool outside its profile. Allow or deny it in the Console.",PAUSED:"Restart it with `anyforge resume <id>`."};async function Yr(t){if(!t.workItemId)throw new y("crew start requires a work item id.","Find one with `anyforge work --status READY`.");let e=await E(t.creds,"PATCH",`/work/${encodeURIComponent(t.workItemId)}`,{action:"dispatch",...t.profileId?{runProfileId:t.profileId}:{}});if(t.json&&!t.follow){console.log(C(e));return}let n=typeof e?.crewId=="string"?e.crewId:"";if(!n)throw new f("Dispatch was accepted but returned no crew id.",m.FAILURE,"Check `anyforge crews --active` to see whether one started.");for(let r of e?.warnings??[])console.error(Jr(`warning: ${r}`));if(!t.follow){console.log(`Started ${ms(n)} on ${t.workItemId}`),console.log(qe(`Follow it with \`anyforge crew follow ${n}\``));return}await Tn({creds:t.creds,json:t.json,crewId:n,intervalSeconds:t.intervalSeconds})}var ys=5,vs=10,Os=120,Hr=30;async function Tn(t){if(!t.crewId)throw new y("crew follow requires a crew id.","List them with `anyforge crews --active`.");let e=Math.min(Math.max(t.intervalSeconds??vs,ys),Os)*1e3,n=Date.now()+Hr*6e4,r=new Set,o="",i=!1;for(;;){let s=await E(t.creds,"GET",`/crews/${encodeURIComponent(t.crewId)}?messages=50`),a=s?.crew??{},c=T(a,"status","");for(let p of s?.chat??[]){let l=T(p,"id","");!l||r.has(l)||(r.add(l),i&&!t.json&&bs(p))}if(i=!0,c&&c!==o&&(t.json||console.log(qe(`\u2500\u2500 ${c}`)),o=c),hs.has(c)){if(t.json)console.log(C({crewId:t.crewId,status:c,waiting:!0,url:T(a,"url","")}));else{console.log(Jr(`
38
+ ${c} \u2014 this crew is waiting on a person.`));let p=ws[c];p&&console.log(qe(p));let l=T(a,"url","");l&&console.log(qe(l))}return}if(gs.has(c)){if(t.json)console.log(C({crewId:t.crewId,status:c,waiting:!1,url:T(a,"url","")}));else{let p=`
39
+ ${c}`;console.log(c==="COMPLETE"?p:Kr(p));let l=T(a,"prUrl","");l&&console.log(qe(l));let u=T(a,"errorMessage","");u&&console.log(Kr(u))}if(c!=="COMPLETE")throw new f(`Crew ${t.crewId} ended ${c}.`,m.FAILURE);return}if(Date.now()>=n)throw new f(`Still ${c||"running"} after ${Hr} minutes \u2014 giving up watching.`,m.FAILURE,`The crew is unaffected. Check it with \`anyforge crew ${t.crewId}\`.`);await As(e)}}function bs(t){let e=T(t,"agentRole","")||T(t,"type","?"),n=Rs(t,["content","text","summary"]);n&&console.log(`${qe(`[${e}]`)} ${Ne(n.replace(/\s+/g," "),160)}`)}function Rs(t,e){for(let n of e){let r=t[n];if(typeof r=="string"&&r.trim())return r.trim()}return""}function As(t){return new Promise(e=>{setTimeout(e,t)})}import{dim as Ut}from"kleur/colors";var Vr=100;function Qr(t){let e=t&&typeof t=="object"?t:{};return{total:typeof e.total=="number"?e.total:null,hasMore:e.hasMore===!0,cursor:typeof e.nextCursor=="string"?e.nextCursor:null}}async function xs(t){let e=s=>`/work${H({status:t.status,type:t.type,priority:t.priority,initiative:t.initiative,program:t.program,search:t.search,assignee:t.assignee,includeArchived:t.includeArchived,limit:t.limit,cursor:s})}`,n=await E(t.creds,"GET",e()),r=ie(n),o=Qr(n),i=1;if(!t.all)return{rows:r,total:o.total,hasMore:o.hasMore,raw:n,pagesFetched:i};for(;o.hasMore&&o.cursor&&i<Vr;){let s=await E(t.creds,"GET",e(o.cursor));r.push(...ie(s)),o=Qr(s),i+=1}return{rows:r,total:o.total,hasMore:o.hasMore,raw:n,pagesFetched:i}}async function Xr(t){let e=await xs(t);if(t.json){console.log(C(t.all?{items:e.rows,total:e.total,hasMore:e.hasMore,nextCursor:null}:e.raw));return}let n=e.rows,r=await Lr(t.creds),o=bn(r,"work_item","plural","Work items");if(n.length===0){console.log(Ut(`No ${o.toLowerCase()} match that filter.`));return}console.log(z(n,[{header:"ID",value:c=>T(c,"id")},{header:"PRI",value:c=>T(c,"priority","")},{header:"TYPE",value:c=>T(c,"type","")},{header:"STATUS",value:c=>T(c,"status")},{header:"TITLE",value:c=>G(c,["title","name","summary"]),max:58}]));let i=(n.length===1?bn(r,"work_item","singular","work item"):o).toLowerCase(),s=e.total!==null&&e.total!==n.length?`${n.length} of ${e.total} ${o.toLowerCase()}`:`${n.length} ${i}`,a=e.hasMore?t.all?Ut(` \u2014 stopped after ${Vr} pages; narrow the filter`):Ut(" \u2014 pass --all for the rest"):"";console.log(`${Ut(`
40
+ ${s}`)}${a}`)}import{bold as ks,dim as jt}from"kleur/colors";async function Zr(t){let e=await E(t.creds,"GET","/workflows");if(t.json){console.log(C(e));return}let n=ie(e);if(n.length===0){console.log(jt("No workflows defined."));return}console.log(z(n,[{header:"ID",value:r=>T(r,"id")},{header:"STATUS",value:r=>G(r,["status","state"],"")},{header:"NAME",value:r=>G(r,["name","title"]),max:58}])),console.log(jt(`
41
+ Dispatch with `)+ks("anyforge run <id>"))}async function eo(t){if(!t.workflowId)throw new y("run requires a workflow id.","List them with `anyforge workflows`.");let e;if(t.input!==void 0){try{e=JSON.parse(t.input)}catch(o){throw new y(`--input is not valid JSON: ${o instanceof Error?o.message:String(o)}`,`Example: --input '{"repo":"acme/web"}'`)}if(!e||typeof e!="object"||Array.isArray(e))throw new y("--input must be a JSON object.",`Example: --input '{"repo":"acme/web"}'`)}let n=await E(t.creds,"POST",`/workflows/${encodeURIComponent(t.workflowId)}/run`,e===void 0?void 0:{inputs:e});if(t.json){console.log(C(n));return}let r=G(n??{},["id","runId"],"");console.log(`Queued run ${r||jt("(id not returned)")}`),console.log(jt("Runs pause at gate steps for an operator decision."))}import{dim as Ss}from"kleur/colors";async function to(t){let e=t.question?.trim();if(!e)throw new y("ask requires a question.",'Example: anyforge ask "which initiatives slipped this cycle?"');!t.json&&process.stderr.isTTY&&process.stderr.write(Ss(`Asking the Oracle (this can take a few minutes)\u2026
42
+ `));let n=await E(t.creds,"POST","/oracle",{question:e,...t.context?{context:t.context}:{}});if(t.json){console.log(C(n));return}let r=n&&typeof n=="object"?["answer","text","content","response"].map(o=>n[o]).find(o=>typeof o=="string"&&o.trim()):void 0;console.log(typeof r=="string"?r:C(n))}import{bold as En,dim as no,green as Is,yellow as Cs}from"kleur/colors";function Ts(t){return typeof t=="number"?`${Math.round(t*100)}%`:"\u2014"}async function ro(t){let e=await E(t.creds,"GET",`/backtest-corpus${H({days:t.days})}`);if(t.json){console.log(C(e));return}let n=e.incidentsInWindow??0,r=e.backTestable??0,o=e.windowDays?`last ${e.windowDays}d`:"all time";console.log(`${En(String(r))} of ${En(String(n))} incidents are back-testable `+no(`(${Ts(e.coverage)} \xB7 ${o})`)),e.viable?console.log(Is("Enough to run a back-test.")):console.log(Cs(`Not yet viable \u2014 ${e.shortfall??0} more needed.`));let i=(e.excluded??[]).filter(s=>s.count>0);i.length>0&&console.log(z(i,[{header:"EXCLUDED",value:s=>String(s.count)},{header:"REASON",value:s=>s.label,max:56}])),e.biggestGap&&console.log(no(`
43
+ Biggest fixable gap: `)+En(`${e.biggestGap.label} (${e.biggestGap.count})`))}import{bold as Dt,dim as ot,green as Es,yellow as oo}from"kleur/colors";var _n=t=>typeof t=="number"?`${Math.round(t*1e3)/10}%`:"\u2014";async function io(t){let e=await E(t.creds,"GET",`/review-interception${H({days:t.days})}`);if(t.json){console.log(C(e));return}let n=Ft(e.windowDays,e.truncated,e.oldestReviewMs),r=i=>{console.log(i)};if(r(`${Dt(String(e.seriousRaised??0))} serious findings raised across ${Dt(String(e.prsReviewed??0))} pull requests ${ot(`(${n})`)}`),e.verdict==="measured")r(`${Es(String(e.disappearedSerious??0))} no longer raised by the next round \u2014 ${Dt(_n(e.interceptionFloor))} to ${Dt(_n(e.interceptionCeiling))}`),r(ot(`floor counts every unmeasured finding as unresolved \xB7 ceiling is over the ${e.measurableSerious??0} that had a later round`));else{r(oo("Not enough findings had a later round to measure a rate."));for(let i of e.inconclusiveReasons??[])r(ot(` ${i}`))}let o=(e.byLens??[]).filter(i=>i.serious>0);if(o.length>0&&r(z(o,[{header:"LENS",value:i=>i.lens,max:16},{header:"RAISED",value:i=>String(i.raised)},{header:"SERIOUS",value:i=>String(i.serious)},{header:"CHECKED",value:i=>String(i.measurable)},{header:"GONE",value:i=>String(i.disappeared)}])),e.truncated){let i=e.oldestReviewMs?new Date(e.oldestReviewMs).toISOString().slice(0,10):null;r(oo(`
44
+ Read cap reached \u2014 these are the most recent reviews${i?` (back to ${i})`:""}, not the whole window. Every count is a lower bound.`))}e.reviews&&e.skippedShare!=null&&e.skippedShare>0&&r(ot(`
45
+ ${e.reviews.skipped} of ${e.reviews.total} reviews were skipped (${_n(e.skippedShare)}) \u2014 drafts, size caps or path policy.`));for(let i of e.caveats??[])r(ot(`
46
+ ${i}`))}import{bold as it,dim as Se,green as _s,red as $s,yellow as $n}from"kleur/colors";var Ps=t=>typeof t=="number"?`${Math.round(t*1e3)/10}%`:"\u2014";function Pn(t){if(typeof t!="number")return"\u2014";if(t<60)return`${t}m`;if(t<1440){let n=Math.floor(t/60);return`${n}h ${Math.round(t-n*60)}m`}let e=Math.floor(t/1440);return`${e}d ${Math.round((t-e*1440)/60)}h`}var Ls={capacity:"a limit fired",policy:"configured off",by_design:"correctly declined",unclassified:"reason not recognised"};async function so(t){let e=await E(t.creds,"GET",`/review-coverage${H({days:t.days})}`);if(t.json){console.log(C(e));return}let n=s=>{console.log(s)},r=Ft(e.windowDays,e.truncated,e.oldestRecordMs);n(`${it(String(e.pullRequestsReviewed??0))} of ${it(String(e.pullRequestsSeen??0))} recorded pull requests reviewed ${e.coverageRate!=null?it(`(${Ps(e.coverageRate)})`):""} ${Se(`(${r})`)}`),e.repositoriesReviewed&&n(`across ${it(String(e.repositoriesReviewed))} repositories`),n(Se("recorded = pull requests AnyForge was enabled to watch, not every pull request you opened")),e.medianLatencyMinutes!=null?(n(`
47
+ Feedback reached the author in ${_s(Pn(e.medianLatencyMinutes))} median, ${it(Pn(e.p90LatencyMinutes))} at p90 ${Se(`(${e.latencySamples??0} reviews)`)}`),e.medianOnOpenLatencyMinutes!=null&&n(Se(` ${Pn(e.medianOnOpenLatencyMinutes)} median on pull-request open (${e.onOpenSamples??0} reviews, no quiet period in the way)`))):n($n(`
48
+ Not enough timed reviews to report a latency figure.`));let o=e.capacityGapPullRequests??0;o>0&&n(`
49
+ ${$s(String(o))} pull requests went unreviewed because a limit fired `+Se("\u2014 a cap or a diff over the size ceiling, not a decision anyone made"));let i=e.bySkipClass??[];i.length>0&&n(z(i,[{header:"WHY UNREVIEWED",value:s=>Ls[s.skipClass]??s.skipClass,max:24},{header:"PRS",value:s=>String(s.pullRequests)},{header:"REASONS",value:s=>s.reasons.join(", "),max:46}])),e.failedOnlyPullRequests&&n(Se(`${e.failedOnlyPullRequests} pull requests had every review attempt error out.`));for(let s of e.inconclusiveReasons??[])n($n(`
50
+ ${s}`));if(e.truncated){let s=e.oldestRecordMs?new Date(e.oldestRecordMs).toISOString().slice(0,10):null;n($n(`
51
+ Read cap reached \u2014 these are the most recent records${s?` (back to ${s})`:""}, not the whole window. Every count is a lower bound.`))}for(let s of e.caveats??[])n(Se(`
52
+ ${s}`))}import{promises as st}from"node:fs";import{homedir as Ms}from"node:os";import{dirname as co,join as Ie}from"node:path";import{dim as lo,green as Us,yellow as js}from"kleur/colors";var se="anyforge-platform",Fs="Orient an agent to AnyForge's structure, delivery model, surfaces, live control tools, and safety boundaries.",ao="anyforge://guide/platform",Ns="text/markdown";var Bt={"SKILL.md":`---
53
53
  name: anyforge-platform
54
54
  description: >
55
55
  Orient an agent to AnyForge's structure, delivery model, surfaces, live control
@@ -256,67 +256,63 @@ these sources can grant network, filesystem, tool, or approval authority.
256
256
  Do not place API keys, tokens, credentials, private tenant records, or customer
257
257
  data in a reusable skill, prompt, log, or generated example. Use the client's
258
258
  credential mechanism and let the server enforce access.
259
- `},Uc=Object.entries(vt).map(([e,t])=>({uri:e==="SKILL.md"?wr:`${wr}/${e}`,name:e==="SKILL.md"?ce:`${ce}/${e.replace(/^references\//,"")}`,title:e==="SKILL.md"?"AnyForge platform guide":e,description:e==="SKILL.md"?Pi:`Reference for the ${ce} skill: ${e}`,mimeType:$i,size:new TextEncoder().encode(t).byteLength}));var Li=vt["SKILL.md"],Mc=Li.replace(/^---[\s\S]*?\r?\n---[ \t]*(?:\r?\n|$)/,"");var vr={agents:".agents/skills",claude:".claude/skills",codex:".codex/skills"};function ji(e){let t=e.scope==="user"?e.homeDir??Fi():e.cwd??process.cwd();if(e.scope==="user"&&e.client==="codex"){let n=e.codexHome??process.env.CODEX_HOME??xe(t,".codex");return xe(n,"skills",ce)}return xe(t,vr[e.client],ce)}function Ui(e){if(e.scope!=="project"&&e.scope!=="user")throw new w(`--scope must be project or user, got "${e.scope}".`);if(!Object.hasOwn(vr,e.client))throw new w(`--client must be agents, claude, or codex, got "${e.client}".`)}async function rn(e){try{return(await Je.lstat(e)).isSymbolicLink()}catch(t){if(t.code==="ENOENT")return!1;throw t}}async function Mi(e){Ui(e);let t=ji(e),n=Object.entries(vt),r=n.map(([s])=>xe(t,s));if(await rn(t))throw new w(`Refusing to install through the symbolic link ${t}.`);let o=new Set(n.map(([s])=>yr(s)).filter(s=>s!=="."));for(let s of o)if(await rn(xe(t,s)))throw new w(`Refusing to install through the symbolic link ${xe(t,s)}.`);if(!e.force){let s=[];for(let a of r)try{await Je.access(a),s.push(a)}catch(l){if(l.code!=="ENOENT")throw l}if(s.length>0)throw new w(`The ${ce} skill already exists at ${t}.`,"Use --force only if you want to replace AnyForge-managed files in that directory.")}await Je.mkdir(t,{recursive:!0});let i=[];for(let[s,a]of n){let l=xe(t,s);if(await Je.mkdir(yr(l),{recursive:!0}),await rn(l))throw new w(`Refusing to replace the symbolic link ${l}.`);await Je.writeFile(l,a,{encoding:"utf8",mode:420}),i.push(s)}return{name:ce,scope:e.scope,client:e.client,directory:t,files:i}}async function Rr(e){if(e.subcommand!=="install")throw new w(`Unknown skill command${e.subcommand?`: ${e.subcommand}`:""}.`,"Use `anyforge skill install anyforge-platform`.");if(e.name!==ce)throw new w(`Unknown skill${e.name?`: ${e.name}`:""}.`,`The only portable platform skill is ${ce}.`);let t=e.scope??"project",n=e.client??"agents";if(!["project","user"].includes(t))throw new w(`--scope must be project or user, got "${t}".`);if(!["agents","claude","codex"].includes(n))throw new w(`--client must be agents, claude, or codex, got "${n}".`);let r=await Mi({scope:t,client:n,force:e.force});if(e.json){process.stdout.write(JSON.stringify(r)+`
260
- `);return}console.log(Ni("Installed ")+`${r.name} ${Or(`(${r.scope}, ${r.client})`)}`),console.log(` ${r.directory}`),console.log(Or(` ${r.files.length} files installed. Re-run with --force to refresh them.`)),r.scope==="project"&&r.client==="agents"&&console.log(qi(" This portable location is detected by AnyForge repository analysis."))}import{randomUUID as oo}from"node:crypto";import{createReadStream as Rs}from"node:fs";import{open as bs,realpath as As,stat as io}from"node:fs/promises";import{basename as so,join as ks,resolve as xs}from"node:path";import{setTimeout as Hr}from"node:timers/promises";import{bold as nt,cyan as _t,dim as F,red as Jr,yellow as ao}from"kleur/colors";import{Container as Is,Editor as Ss,ProcessTerminal as co,ScrollView as Es,SelectList as lo,Text as et,TuiAltScreen as uo,VStack as Cs,matchesKey as Ts}from"@earendil-works/pi-tui";var br={txt:"text/plain",log:"text/plain",md:"text/markdown",markdown:"text/markdown",csv:"text/csv",json:"application/json",pdf:"application/pdf",ts:"text/plain",tsx:"text/plain",js:"text/plain",jsx:"text/plain",mjs:"text/plain",cjs:"text/plain",py:"text/plain",go:"text/plain",rs:"text/plain",yaml:"text/plain",yml:"text/plain",toml:"text/plain",xml:"text/plain",html:"text/plain",css:"text/plain",sh:"text/plain",sql:"text/plain",java:"text/plain",kt:"text/plain",swift:"text/plain",c:"text/plain",h:"text/plain",cpp:"text/plain",rb:"text/plain",php:"text/plain",tf:"text/plain",diff:"text/plain",patch:"text/plain",png:"image/png",jpg:"image/jpeg",jpeg:"image/jpeg",gif:"image/gif",webp:"image/webp",docx:"application/vnd.openxmlformats-officedocument.wordprocessingml.document",pptx:"application/vnd.openxmlformats-officedocument.presentationml.presentation",xlsx:"application/vnd.openxmlformats-officedocument.spreadsheetml.sheet"};function Ar(e){let t=e.slice(e.lastIndexOf(".")+1).toLowerCase();return Object.hasOwn(br,t)?br[t]:null}import{bold as Qe,cyan as Ye,dim as Re,green as Gi,italic as Ir,strikethrough as zi,underline as Sr,yellow as Ki}from"kleur/colors";import{Markdown as Wi,Text as Zc}from"@earendil-works/pi-tui";var Di=/\x1B(?:\[[0-?]*[ -/]*[@-~]|\][^\x07]*(?:\x07|\x1B\\)|[PX^_][\s\S]*?\x1B\\|[@-_])/g,Bi=/[\u0000-\u0008\u000B\u000C\u000E-\u001F\u007F-\u009F]/g;function f(e){return e.replace(Di,"").replace(Bi,"")}function on(e){try{let t=new URL(e);return t.protocol!=="https:"&&t.protocol!=="http:"||!t.hostname||t.username||t.password?null:t.toString()}catch{return null}}function kr(e){return e.replace(/\x1B\]8;;([^\x1B\x07]*)(?:\x07|\x1B\\)/g,(t,n)=>on(n)?t:"\x1B]8;;\x07")}function xr(e){let n=f(e).replace(/(!?)\[([^\]\n]+)\]\((<[^>\n]*>|[^\s)]+)(?:\s+[^)]*)?\)/g,(i,s,a,l)=>{let c=l.startsWith("<")&&l.endsWith(">")?l.slice(1,-1):l,d=on(c);return d?`${s}[${a}](${d})`:a}),r=new Map,o=n.replace(/^(\s{0,3}\[([^\]]+)\]:\s*)(\S+)(.*)$/gm,(i,s,a,l,c)=>{let d=on(l);return r.set(a.trim().toLowerCase(),d),d?`${s}${d}${c}`:""});return r.size===0?o:o.replace(/(!?)\[([^\]\n]+)\](?:\[([^\]\n]*)\])?/g,(i,s,a,l)=>{let c=(l||a).trim().toLowerCase();return!r.has(c)||r.get(c)?i:a})}function ve(e){return typeof e=="string"?f(e):Array.isArray(e)?e.map(t=>ve(t)):e&&typeof e=="object"?Object.fromEntries(Object.entries(e).map(([t,n])=>[f(t),ve(n)])):e}var Hi={heading:e=>Qe(Ye(e)),link:e=>Sr(Ye(e)),linkUrl:e=>Re(e),code:e=>Ki(e),codeBlock:e=>e,codeBlockBorder:e=>Re(e),quote:e=>Ir(e),quoteBorder:e=>Re(e),hr:e=>Re(e),listBullet:e=>Ye(e),bold:e=>Qe(e),italic:e=>Ir(e),strikethrough:e=>zi(e),underline:e=>Sr(e)},Ji={selectedPrefix:e=>Ye(e),selectedText:e=>Qe(e),description:e=>Re(e),scrollInfo:e=>Re(e),noMatch:e=>Re(e)},Er={borderColor:e=>Re(e),selectList:Ji};function Yi(e,t){return new Wi(xr(e),0,0,Hi).render(Math.max(12,t)).map(kr)}var Rt=class{content;constructor(t){this.content=f(t)}setText(t){this.content=f(t)}invalidate(){}render(t){return Yi(this.content,t)}};function Cr(e,t){return e==="user"?`${Qe(Gi(t?f(t):"You"))}`:`${Qe(Ye("Oracle"))}`}function Pe(e){return e.shared||e.visibility==="company"?`Shared with the company${e.entityKey?` \xB7 ${f(e.entityKey)}`:""}`:"Private to you"}var sn="/api/v1/oracle";function fe(e){let t;try{t=new URL(e)}catch{throw new u(`Invalid Oracle endpoint: ${e}`,p.USAGE)}if(!["http:","https:"].includes(t.protocol)||t.username||t.password)throw new u("Oracle endpoint must be an http or https URL without embedded credentials.",p.USAGE);if(t.pathname!=="/"||t.search||t.hash)throw new u("Oracle endpoint must be the workspace origin, without a path, query or fragment.",p.USAGE);return t.origin}function pe(e,t){return`${fe(e)}${sn}${t}`}function Qi(e,t,n){let r;try{r=new URL(e)}catch{throw new u(`Oracle server returned an invalid ${n} endpoint.`,p.API_ERROR)}let o=new URL(fe(t));if(r.origin!==o.origin||!r.pathname.startsWith("/api/oauth/")||r.search||r.hash||r.username||r.password)throw new u(`Oracle server returned an unsafe ${n} endpoint.`,p.API_ERROR);return r.toString()}function Vi(e,t){if(!e||typeof e!="object")throw new u("Oracle server omitted OAuth endpoints.",p.API_ERROR);let n=e,r=["registration","authorization","token","revocation"],o={};for(let i of r){if(typeof n[i]!="string")throw new u(`Oracle server omitted its OAuth ${i} endpoint.`,p.API_ERROR);o[i]=Qi(n[i],t,i)}return o}async function Ne(e,t=fetch,n){let r=fe(e),o;try{o=await t(pe(r,"/config"),{headers:{Accept:"application/json",...n?{Authorization:`Bearer ${n}`}:{}},redirect:"error",signal:AbortSignal.timeout(2e4)})}catch(d){throw new u(`Cannot reach ${r}: ${d instanceof Error?d.message:String(d)}`,p.FAILURE,"Check your network, or pass --endpoint for a self-hosted workspace.")}let i=await Fe(o,pe(r,"/config")),s=N(Le(i,o.status)),a=`${r}${sn}`;if(s.protocolVersion!==1)throw new u(`Oracle protocol mismatch: this CLI supports ${1}, and the server reports ${String(s.protocolVersion)}.`,p.API_ERROR,"Update @anyforge/control to a version supported by this workspace.");if(s.resource!==a)throw new u("Oracle server resource does not match this workspace origin.",p.API_ERROR);let l=Array.isArray(s.scopes)?s.scopes:null;if(!l||!l.every(d=>d==="read"||d==="write"||d==="approve"))throw new u("Oracle server returned an invalid scope list.",p.API_ERROR);let c={protocolVersion:1,resource:a,scopes:l,oauth:Vi(s.oauth,r)};if(s.identity!==void 0){let d=N(s.identity);if(typeof d.uid!="string"||typeof d.companyId!="string")throw new u("Oracle server returned an invalid identity.",p.API_ERROR);c.identity={uid:f(d.uid),companyId:f(d.companyId)}}if(s.capabilities!==void 0){let d=N(s.capabilities);if(![d.read,d.write,d.approve].every(g=>typeof g=="boolean"))throw new u("Oracle server returned invalid capabilities.",p.API_ERROR);c.capabilities={read:d.read,write:d.write,approve:d.approve}}if(s.model!==void 0){let d=N(s.model);if(typeof d.id!="string"||typeof d.provider!="string")throw new u("Oracle server returned invalid model metadata.",p.API_ERROR);c.model={id:f(d.id),provider:f(d.provider)}}if(s.limits!==void 0){let d=N(s.limits);if(Object.values(d).some(g=>!["string","number","boolean"].includes(typeof g)&&g!==null))throw new u("Oracle server returned invalid limits metadata.",p.API_ERROR);c.limits=Object.fromEntries(Object.entries(d).map(([g,h])=>[f(g),typeof h=="string"?f(h):h]))}return c}var kt=class{endpoint;scopes;source;#e;#t;cachedConfig;constructor(t,n=fetch){this.endpoint=fe(t.endpoint),this.#e=t.getAccessToken??(async()=>t.accessToken),this.#t=n,this.scopes=new Set(t.scopes),this.source=t.source}async config(){if(!this.cachedConfig){let t=await this.#e();try{this.cachedConfig=await Ne(this.endpoint,this.#t,t)}catch(n){if(this.source!=="oauth"||!(n instanceof Oe)||n.status!==401)throw n;let r=await this.#e(t);if(r===t)throw n;this.cachedConfig=await Ne(this.endpoint,this.#t,r)}}return this.cachedConfig}async listSessions(){let t=await this.json("GET","/sessions"),n=Array.isArray(t)?t:N(t).sessions;if(!Array.isArray(n))throw new u("Oracle server returned an invalid sessions list.",p.API_ERROR);return n.map(Pr)}async createSession(t={}){let n=await this.json("POST","/sessions",t),r=N(n);return!Array.isArray(r.messages)&&typeof r.sessionId=="string"?this.getSession(r.sessionId):Tr(n)}async getSession(t){return Tr(await this.json("GET",`/sessions/${encodeURIComponent(t)}`))}async submitTurn(t,n,r,o){let i,s=pe(this.endpoint,`/sessions/${encodeURIComponent(t)}/turns`),a=async c=>this.#t(s,{method:"POST",headers:{Authorization:`Bearer ${c}`,Accept:"text/event-stream, application/json","Content-Type":"application/json"},redirect:"error",body:JSON.stringify(n),...r?{signal:r}:{}});try{let c=await this.#e();if(i=await a(c),i.status===401&&this.source==="oauth"){let d=await this.#e(c);d!==c&&(i=await a(d))}}catch(c){throw c instanceof u||r?.aborted?c:new u(`Oracle connection was interrupted: ${c instanceof Error?c.message:String(c)}`,p.FAILURE,"The server may still be working. Resume this session to replay its saved stream.")}if(o?.(i),i.ok||await $e(i),!(i.headers.get("content-type")?.toLowerCase()??"").includes("text/event-stream")){let c=await Fe(i,pe(this.endpoint,`/sessions/${t}/turns`)),d=Le(c,i.status);throw new u(`Oracle server did not start a stream (${Xi(d)}).`,p.API_ERROR)}return i}async replayEvents(t,n,r){let o=[];for await(let i of this.streamReplayEvents(t,n,r))o.push(i);return o}async*streamReplayEvents(t,n,r){let o=`/sessions/${encodeURIComponent(t)}/events?streamId=${encodeURIComponent(n)}&from=${Math.max(0,r)}`,i=await this.authenticatedFetch("GET",o,{headers:{Accept:"text/event-stream, application/json"}},0);if(i.ok||await $e(i),(i.headers.get("content-type")?.toLowerCase()??"").includes("text/event-stream")){yield*Ve(i);return}let a=Le(await Fe(i,pe(this.endpoint,o)),i.status),l=Array.isArray(a)?a:N(a).events;if(!Array.isArray(l))throw new u("Oracle replay response did not contain events.",p.API_ERROR);for(let c of l)yield an(c)}async*streamRequestEvents(t,n,r=-1){let o=`/sessions/${encodeURIComponent(t)}/events?requestId=${encodeURIComponent(n)}&from=${r}`,i=await this.authenticatedFetch("GET",o,{headers:{Accept:"text/event-stream, application/json"}},0);if(i.ok||await $e(i),(i.headers.get("content-type")?.toLowerCase()??"").includes("text/event-stream")){yield*Ve(i);return}let a=Le(await Fe(i,pe(this.endpoint,o)),i.status),l=Array.isArray(a)?a:N(a).events;if(!Array.isArray(l))throw new u("Oracle request replay response did not contain events.",p.API_ERROR);for(let c of l)yield an(c)}async cancelTurn(t,n){return this.json("POST",`/sessions/${encodeURIComponent(t)}/cancel`,{streamId:n})}async cancelRequest(t,n){return this.json("POST",`/sessions/${encodeURIComponent(t)}/cancel`,{requestId:n})}async upload(t,n){let r=new FormData;r.set("sessionId",t),r.set("file",n,n.name);let o=await this.authenticatedFetch("POST","/uploads",{method:"POST",body:r,headers:{Accept:"application/json"}});return o.ok||await $e(o),Zi(Le(await Fe(o,pe(this.endpoint,"/uploads")),o.status))}async download(t,n){let r=await this.authenticatedFetch("GET",`/sessions/${encodeURIComponent(t)}/files/${encodeURIComponent(n)}`,{headers:{Accept:"application/octet-stream, application/json"}});return r.ok||await $e(r),r}async json(t,n,r){let o=await this.authenticatedFetch(t,n,{headers:{Accept:"application/json",...r!==void 0?{"Content-Type":"application/json"}:{}},...r!==void 0?{body:JSON.stringify(r)}:{}});return o.ok||await $e(o),Le(await Fe(o,pe(this.endpoint,n)),o.status)}async authenticatedFetch(t,n,r={},o=2e4){try{let i=pe(this.endpoint,n),s=Object.fromEntries(new Headers(r.headers).entries()),a=r.signal||o<=0?void 0:AbortSignal.timeout(o),l=h=>this.#t(i,{...r,method:t,headers:{...s,Authorization:`Bearer ${h}`},redirect:"error",...a?{signal:a}:{}}),c=await this.#e(),d=await l(c),g=r.body===void 0||typeof r.body=="string"||r.body===null;if(d.status===401&&this.source==="oauth"){let h=await this.#e(c);h!==c&&g&&(d=await l(h))}return d}catch(i){throw i instanceof u?i:new u(`Cannot reach ${this.endpoint}: ${i instanceof Error?i.message:String(i)}`,p.FAILURE,"Check your network, or pass --endpoint for a self-hosted workspace.")}}};async function*Ve(e){if(!e.body)throw new u("Oracle stream has no response body.",p.FAILURE);let t=e.body.getReader(),n=new TextDecoder,r="",o=0,i=[],s=0,a=-1,l=()=>{if(i.length===0)return null;let c=i.join(`
261
- `);if(i=[],s=0,c==="[DONE]")return null;let d;try{d=JSON.parse(c)}catch{throw new u("Oracle stream returned invalid JSON.",p.API_ERROR)}let g=an(d);return g.idx<=a?null:(a=g.idx,g)};try{for(;;){let{value:d,done:g}=await t.read(),h=n.decode(d,{stream:!g});if(r+=h,o+=bt(h),o>2*1024*1024)throw new u("Oracle stream event exceeded the 2 MiB protocol limit.",p.API_ERROR);let k=0,R=r.indexOf(`
262
- `,k);for(;R>=0;){let v=r.slice(k,R).replace(/\r$/,"");if(o-=bt(r.slice(k,R+1)),k=R+1,v===""){let C=l();C&&(yield C)}else if(!v.startsWith(":")){let C=v.indexOf(":"),O=C<0?v:v.slice(0,C),K=C<0?"":v.slice(C+1).replace(/^ /,"");if(O==="data"&&(i.push(K),s+=bt(K)+1,s>2*1024*1024))throw new u("Oracle stream event exceeded the 2 MiB protocol limit.",p.API_ERROR)}R=r.indexOf(`
263
- `,k)}if(r=r.slice(k),g)break}if(r.trim()){let d=r.replace(/\r$/,"");if(d.startsWith("data:")&&(i.push(d.slice(5).replace(/^ /,"")),s+=bt(i[i.length-1]??"")+1,s>2*1024*1024))throw new u("Oracle stream event exceeded the 2 MiB protocol limit.",p.API_ERROR)}let c=l();c&&(yield c)}catch(c){throw await t.cancel("Invalid or oversized Oracle event stream.").catch(()=>{}),c}finally{t.releaseLock()}}function bt(e){return Buffer.byteLength(e,"utf8")}function cn(e){let t=["program","initiative","codebase"].filter(o=>typeof e[o]=="string");if(t.length>1)throw new u("Choose only one of --program, --initiative or --codebase.",p.USAGE);let n=t[0];if(!n)return;let r=e[n];if(typeof r!="string"||!r.trim())throw new u(`--${n} needs an id.`,p.USAGE);return{kind:n,id:r.trim()}}function N(e){return!e||typeof e!="object"||Array.isArray(e)?{}:e}function Xi(e){if(typeof e=="string")return f(e);try{return f(JSON.stringify(e))}catch{return"unexpected response"}}function Le(e,t){let n=N(e);if(n.ok===!1){let r=_r(n.error,t),o=typeof n.message=="string"?f(n.message).slice(0,2e3):void 0;throw new Oe(r,t,o)}return n.ok===!0&&"data"in n?n.data:e}async function Fe(e,t){try{return await e.json()}catch{throw new u(`Non-JSON response from ${t} (HTTP ${e.status}).`,p.FAILURE)}}async function $e(e){let t;try{t=await e.clone().json()}catch{t=null}let n=N(t),r=_r(n.error??n.error_description,e.status),o=typeof n.message=="string"?n.message:typeof n.error_description=="string"?n.error_description:typeof n.detail=="string"?n.detail:void 0;throw new Oe(r,e.status,typeof o=="string"?f(o).slice(0,2e3):void 0)}function _r(e,t){if(typeof e!="string")return`http_${t}`;let n=f(e).slice(0,120);return/^[A-Za-z0-9_.-]+$/.test(n)?n:`http_${t}`}function Pr(e){let t=N(e);if(typeof t.sessionId!="string"||!/^[A-Za-z0-9_-]{1,128}$/.test(t.sessionId)||typeof t.title!="string"||t.visibility!=="private"&&t.visibility!=="company"||typeof t.shared!="boolean")throw new u("Oracle server returned an invalid session summary.",p.API_ERROR);return{sessionId:t.sessionId,title:f(t.title),visibility:t.visibility,shared:t.shared,...typeof t.entityKey=="string"?{entityKey:f(t.entityKey)}:{},...typeof t.updatedAt=="number"||t.updatedAt===null?{updatedAt:t.updatedAt}:{}}}function Tr(e){let t=N(e),n=Pr(t);if(!Array.isArray(t.messages))throw new u("Oracle server returned an invalid session transcript.",p.API_ERROR);let r=t.messages.map((o,i)=>{let s=N(o);if(s.role!=="user"&&s.role!=="assistant"||typeof s.content!="string")throw new u(`Oracle session message ${i+1} is invalid.`,p.API_ERROR);let a=Array.isArray(s.attachments)?s.attachments.map(rs):void 0,l=Array.isArray(s.files)?s.files.map(os):void 0;return{role:s.role,content:f(s.content),...typeof s.id=="string"?{id:s.id}:{},...typeof s.authorName=="string"?{authorName:f(s.authorName)}:{},...s.question&&typeof s.question=="object"?{question:es(s.question)}:{},...s.questionResponse&&typeof s.questionResponse=="object"?{questionResponse:ts(s.questionResponse)}:{},...a?{attachments:a}:{},...l?{files:l}:{}}});return{...n,messages:r,...typeof t.activeStreamId=="string"?{activeStreamId:t.activeStreamId}:{}}}function an(e){let t=N(e);if(t.protocolVersion!==1||typeof t.idx!="number"||!Number.isSafeInteger(t.idx)||t.idx<0||typeof t.type!="string")throw new u("Oracle stream event does not match protocol version 1.",p.API_ERROR);return ve(t)}function Zi(e){let t=N(e);if(typeof t.fileId!="string"||typeof t.name!="string"||typeof t.mediaType!="string")throw new u("Oracle upload response is missing file metadata.",p.API_ERROR);return{fileId:t.fileId,name:f(t.name),mediaType:f(t.mediaType),...typeof t.sizeBytes=="number"?{sizeBytes:t.sizeBytes}:{}}}function es(e){let t=N(e);if(typeof t.id!="string"||!Array.isArray(t.questions))throw new u("Oracle returned an invalid question card.",p.API_ERROR);return{id:f(t.id),questions:t.questions.map((n,r)=>{let o=N(n);if(typeof o.id!="string"||typeof o.header!="string"||typeof o.question!="string"||typeof o.multiSelect!="boolean"||!Array.isArray(o.options))throw new u(`Oracle question ${r+1} is invalid.`,p.API_ERROR);return{id:f(o.id),header:f(o.header),question:f(o.question),multiSelect:o.multiSelect,options:o.options.map((i,s)=>{let a=N(i);if(typeof a.id!="string"||typeof a.label!="string"||typeof a.description!="string")throw new u(`Oracle question option ${s+1} is invalid.`,p.API_ERROR);return{id:f(a.id),label:f(a.label),description:f(a.description),...typeof a.recommended=="boolean"?{recommended:a.recommended}:{},...typeof a.confirms=="boolean"?{confirms:a.confirms}:{}}})}}),optional:t.optional===!0}}function ts(e){let t=N(e);if(typeof t.questionId!="string"||!Array.isArray(t.answers))throw new u("Oracle returned an invalid question response.",p.API_ERROR);return{questionId:f(t.questionId),answers:t.answers.map(ns)}}function ns(e){let t=N(e);if(typeof t.questionId!="string"||!Array.isArray(t.optionIds)||!t.optionIds.every(n=>typeof n=="string"))throw new u("Oracle returned an invalid question answer.",p.API_ERROR);return{questionId:f(t.questionId),optionIds:t.optionIds.map(n=>f(n)),...typeof t.customText=="string"?{customText:f(t.customText).slice(0,8e3)}:{}}}function rs(e){let t=N(e);if(typeof t.fileId!="string"||typeof t.name!="string"||typeof t.mediaType!="string")throw new u("Oracle session attachment metadata is invalid.",p.API_ERROR);return{fileId:f(t.fileId),name:f(t.name),mediaType:f(t.mediaType),...typeof t.sizeBytes=="number"&&Number.isFinite(t.sizeBytes)?{sizeBytes:t.sizeBytes}:{}}}function os(e){let t=N(e);if(typeof t.fileId!="string"||typeof t.filename!="string"||typeof t.mediaType!="string"||typeof t.sizeBytes!="number"||!Number.isFinite(t.sizeBytes))throw new u("Oracle session file metadata is invalid.",p.API_ERROR);return{fileId:f(t.fileId),filename:f(t.filename),mediaType:f(t.mediaType),sizeBytes:t.sizeBytes,...typeof t.format=="string"?{format:f(t.format)}:{}}}import{createHash as cs,randomBytes as qr,timingSafeEqual as ls}from"node:crypto";import{createServer as ds}from"node:http";import us from"open";import{randomUUID as $r}from"node:crypto";import{promises as V}from"node:fs";import{homedir as is}from"node:os";import{join as ln}from"node:path";import*as Lr from"proper-lockfile";var Xe=ln(is(),".anyforge"),ge=ln(Xe,"oracle"),Fr=ln(Xe,"oracle.last-session");function ss(e){if(!e||typeof e!="object"||Array.isArray(e))return null;let t=e;return t.version!==1||typeof t.endpoint!="string"||typeof t.clientId!="string"||typeof t.redirectUri!="string"||typeof t.accessToken!="string"||typeof t.refreshToken!="string"||typeof t.expiresAt!="number"||!Number.isFinite(t.expiresAt)||!Array.isArray(t.scopes)||!t.scopes.every(n=>typeof n=="string")||t.lastSessionId!==void 0&&typeof t.lastSessionId!="string"?null:{version:1,endpoint:t.endpoint,clientId:t.clientId,redirectUri:t.redirectUri,accessToken:t.accessToken,refreshToken:t.refreshToken,expiresAt:t.expiresAt,scopes:t.scopes,...typeof t.lastSessionId=="string"?{lastSessionId:t.lastSessionId}:{}}}async function dn(e){await V.mkdir(Xe,{recursive:!0,mode:448});let t=`${ge}.${$r()}.tmp`;try{await V.writeFile(t,`${JSON.stringify(e,null,2)}
264
- `,{mode:384,flag:"wx"}),await V.rename(t,ge),await V.chmod(ge,384)}finally{await V.rm(t,{force:!0}).catch(()=>{})}}async function xt(){let e;try{e=await V.readFile(ge,"utf8")}catch(r){if(r.code==="ENOENT")return null;throw r}let t;try{t=JSON.parse(e)}catch{throw new Error(`Oracle credentials at ${ge} are invalid JSON; run \`anyforge oracle logout\` and sign in again.`)}let n=ss(t);if(!n)throw new Error(`Oracle credentials at ${ge} have an unsupported format; run \`anyforge oracle logout\` and sign in again.`);return n}async function qe(){try{return await V.unlink(ge),!0}catch(e){if(e.code==="ENOENT")return!1;throw e}}async function Nr(e,t){await as(Fr,{version:1,endpoint:t,sessionId:e})}async function un(e){let t;try{t=await V.readFile(Fr,"utf8")}catch(o){if(o.code==="ENOENT")return;throw o}let n;try{n=JSON.parse(t)}catch{return}if(!n||typeof n!="object"||Array.isArray(n))return;let r=n;return r.version===1&&r.endpoint===e&&typeof r.sessionId=="string"?r.sessionId:void 0}async function as(e,t){await V.mkdir(Xe,{recursive:!0,mode:448});let n=`${e}.${$r()}.tmp`;try{await V.writeFile(n,`${JSON.stringify(t,null,2)}
265
- `,{mode:384,flag:"wx"}),await V.rename(n,e),await V.chmod(e,384)}finally{await V.rm(n,{force:!0}).catch(()=>{})}}async function It(e){await V.mkdir(Xe,{recursive:!0,mode:448});let t=await Lr.lock(ge,{realpath:!1,lockfilePath:`${ge}.refresh-lock`,stale:6e4,update:1e4,retries:{retries:300,minTimeout:100,maxTimeout:100,randomize:!1}});try{return await e()}finally{await t()}}var ps=6e4,fs=5*6e4,St=new Map;async function pn(e){let t=fe(e.endpoint),n=await Ne(t),r=["read"];e.write&&r.push("write"),e.approve&&(r.includes("write")||r.push("write"),r.push("approve"));let o=qr(32).toString("base64url"),i=await hs(o);try{let s={client_name:"AnyForge CLI",redirect_uris:[i.redirectUri],grant_types:["authorization_code","refresh_token"],response_types:["code"],token_endpoint_auth_method:"none"},a=await ws(n.oauth.registration,s);if(typeof a.client_id!="string"||!a.client_id)throw new u("OAuth registration did not return a client id.",p.API_ERROR);let l=qr(32).toString("base64url"),c=cs("sha256").update(l).digest("base64url"),d={client_id:a.client_id,redirect_uri:i.redirectUri,response_type:"code",scope:r.join(" "),state:o,code_challenge:c,code_challenge_method:"S256",resource:n.resource},g=new URL(n.oauth.authorization);for(let[O,K]of Object.entries(d))g.searchParams.set(O,String(K));e.onAuthorizationUrl?.(g.toString());try{e.openBrowser?await e.openBrowser(g.toString()):await us(g.toString())}catch{process.stderr.write(`Open this URL to authorize AnyForge Oracle:
266
- ${g.toString()}
267
- `)}let h=await i.wait();if(!Dr(h.state,o))throw new u("Oracle sign-in callback state did not match; authorization was rejected.",p.API_ERROR);if(h.error)throw new u(`Oracle authorization failed: ${f(h.error)}${h.errorDescription?` (${f(h.errorDescription)})`:""}`,p.API_ERROR);if(!h.code)throw new u("Oracle authorization callback did not include a code.",p.API_ERROR);let k={client_id:a.client_id,grant_type:"authorization_code",code:h.code,redirect_uri:i.redirectUri,code_verifier:l,resource:n.resource},R=await zr(n.oauth.token,k);Gr(R);let v=Br(R.scope);if(!v.includes("read")||v.some(O=>!r.includes(O)))throw await gn(n.oauth.revocation,a.client_id,R.access_token,R.refresh_token).catch(()=>{}),new u("The granted Oracle scopes are invalid for this request.",p.API_ERROR);let C={version:1,endpoint:t,clientId:a.client_id,redirectUri:i.redirectUri,accessToken:R.access_token,refreshToken:R.refresh_token,expiresAt:Date.now()+R.expires_in*1e3,scopes:v};return await It(()=>dn(C)),C}finally{await i.close()}}async function Ur(){let e=await It(async()=>{let t=await xt();if(!t)return{hadCredentials:!1,revoked:!1,revokeFailure:void 0};try{let n=await Ne(t.endpoint);return await gn(n.oauth.revocation,t.clientId,t.accessToken,t.refreshToken),await qe(),{hadCredentials:!0,revoked:!0,revokeFailure:void 0}}catch(n){return await qe(),{hadCredentials:!0,revoked:!1,revokeFailure:n}}});if(e.hadCredentials&&!e.revoked)throw new u(`Local Oracle credentials were cleared, but server revocation failed: ${e.revokeFailure instanceof Error?f(e.revokeFailure.message):"unknown error"}`,p.FAILURE,"Run `anyforge oracle login` again if you still need access. The server will expire this access token automatically.");return{hadCredentials:e.hadCredentials,revoked:e.revoked}}async function Mr(e){let t=e||process.env.ANYFORGE_ENDPOINT;if(process.env.ANYFORGE_API_TOKEN)return jr(t);let n=await xt();if(n&&(!t||fe(t)===n.endpoint)){let r=n.endpoint;return{endpoint:r,accessToken:n.accessToken,scopes:n.scopes.filter(fn),source:"oauth",getAccessToken:async o=>gs(r,o)}}try{return await jr(t)}catch(r){throw n&&t&&fe(t)!==n.endpoint?new se:r instanceof se?new se:r}}async function jr(e){let t=await Ce(e),r=(await Ge({apiKey:t.apiKey,endpoint:t.endpoint})).scopes.filter(fn);return{endpoint:t.endpoint,accessToken:t.apiKey,scopes:r,source:"control"}}async function gs(e,t){let n=fe(e),r=St.get(n);if(r)return r;let o=It(()=>ms(n,t));St.set(n,o);try{return await o}finally{St.get(n)===o&&St.delete(n)}}async function ms(e,t){let n=await xt();if(!n||n.endpoint!==e)throw new se;if(n.expiresAt>Date.now()+ps&&(!t||n.accessToken!==t))return n.accessToken;let r=await Ne(n.endpoint),o;try{let s={client_id:n.clientId,grant_type:"refresh_token",refresh_token:n.refreshToken,resource:r.resource};o=await zr(r.oauth.token,s)}catch(s){throw s instanceof Et&&["invalid_grant","invalid_client","invalid_target"].includes(s.code)?(await qe(),new se):s}Gr(o);let i;try{i=Br(o.scope)}catch(s){throw await qe(),s}if(i.some(s=>!n?.scopes.includes(s)))throw await gn(r.oauth.revocation,n.clientId,o.access_token,o.refresh_token),await qe(),new u("Oracle refresh attempted to widen the saved grant; credentials were cleared.",p.API_ERROR);return n={...n,accessToken:o.access_token,refreshToken:o.refresh_token,expiresAt:Date.now()+o.expires_in*1e3,scopes:i},await dn(n),n.accessToken}var Et=class extends u{constructor(n,r,o){super(`OAuth ${n}: ${r}`,o===401?p.NO_CREDENTIALS:p.API_ERROR);this.code=n;this.name="OAuthResponseError"}};async function hs(e){let t,n,r=!1,o=new Promise((l,c)=>{t=l,n=c});o.catch(()=>{});let i=ds((l,c)=>{if((l.url?.length??0)>8192){c.writeHead(414,{"Content-Type":"text/plain; charset=utf-8"}).end("Authorization response is too large.");return}let d=l.url??"/";if(!d.startsWith("/callback")||d.startsWith("//")){c.writeHead(400,{"Content-Type":"text/plain; charset=utf-8"}).end("Authorization response path is invalid.");return}let g=new URL(d,"http://127.0.0.1");if(l.method!=="GET"||g.pathname!=="/callback"){c.writeHead(404,{"Content-Type":"text/plain; charset=utf-8"}).end("Not found");return}let h=g.searchParams.get("code")?.slice(0,2048)??"",k=g.searchParams.get("state")?.slice(0,256)??"",R=g.searchParams.get("error")?.slice(0,256)??void 0,v=g.searchParams.get("error_description")?.slice(0,1024)??void 0;if(!k){c.writeHead(400,{"Content-Type":"text/plain; charset=utf-8"}).end("Authorization response is missing state.");return}if(!Dr(k,e)){c.writeHead(400,{"Content-Type":"text/plain; charset=utf-8"}).end("Authorization response state did not match.");return}if(r){c.writeHead(409,{"Content-Type":"text/plain; charset=utf-8"}).end("Authorization response already received.");return}r=!0,c.writeHead(200,{"Content-Type":"text/html; charset=utf-8","Cache-Control":"no-store","Referrer-Policy":"no-referrer","Content-Security-Policy":"default-src 'none'; style-src 'unsafe-inline'"}).end('<!doctype html><meta charset="utf-8"><title>AnyForge Oracle</title><p>Sign-in response received. You may close this tab.</p>'),t({code:h,state:k,...R?{error:R}:{},...v?{errorDescription:v}:{}})});await new Promise((l,c)=>{i.once("error",c),i.listen(0,"127.0.0.1",()=>{i.removeListener("error",c),l()})});let s=i.address();if(!s||typeof s=="string")throw new u("Could not bind an Oracle sign-in callback port.",p.FAILURE);let a=setTimeout(()=>{r||(r=!0,n(new u("Oracle sign-in timed out before the browser returned.",p.FAILURE)))},fs);return a.unref(),{redirectUri:`http://127.0.0.1:${s.port}/callback`,wait:()=>o,close:async()=>{clearTimeout(a),i.listening&&(i.closeAllConnections(),await new Promise(l=>i.close(()=>l())))}}}function Dr(e,t){let n=Buffer.from(e),r=Buffer.from(t);return n.length===r.length&&ls(n,r)}function Br(e){let t=e.split(/[\s+]+/).filter(Boolean);if(!t.every(fn))throw new u("OAuth server returned an unknown Oracle scope.",p.API_ERROR);let n=[...new Set(t)];if(!n.includes("read"))throw new u("Oracle OAuth grant is missing the required read scope.",p.API_ERROR);return n}function fn(e){return e==="read"||e==="write"||e==="approve"}function Gr(e){if(!e||typeof e.access_token!="string"||!e.access_token||typeof e.refresh_token!="string"||!e.refresh_token||typeof e.token_type!="string"||e.token_type.toLowerCase()!=="bearer"||typeof e.expires_in!="number"||!Number.isFinite(e.expires_in)||e.expires_in<=0||typeof e.scope!="string")throw new u("OAuth token response did not match the supported format.",p.API_ERROR)}async function ws(e,t){return Kr(e,{method:"POST",headers:{"Content-Type":"application/json",Accept:"application/json"},body:JSON.stringify(t)})}async function zr(e,t){return Kr(e,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded",Accept:"application/json"},body:new URLSearchParams(Object.entries(t).map(([n,r])=>[n,String(r)])).toString()})}async function Kr(e,t){let n;try{n=await fetch(e,{...t,redirect:"error",signal:AbortSignal.timeout(2e4)})}catch(o){throw new u(`OAuth request failed: ${f(o instanceof Error?o.message:String(o))}`,p.FAILURE)}let r=null;try{r=await n.json()}catch{}if(!n.ok){let o=r&&typeof r=="object"?r:{},i=typeof o.error=="string"?o.error:`http_${n.status}`,s=typeof o.error_description=="string"?f(o.error_description):i;throw new Et(i,s,n.status)}if(!r||typeof r!="object"||Array.isArray(r))throw new u(`OAuth endpoint returned invalid JSON (${n.status}).`,p.API_ERROR);return r}async function gn(e,t,n,r){let o=async i=>{let s=await fetch(e,{method:"POST",redirect:"error",signal:AbortSignal.timeout(2e4),headers:{"Content-Type":"application/x-www-form-urlencoded",Accept:"application/json"},body:new URLSearchParams({client_id:t,token:i}).toString()});if(!s.ok){let a=`HTTP ${s.status}`;try{let l=await s.json();typeof l.error_description=="string"&&(a=f(l.error_description))}catch{}throw new u(`OAuth token revocation failed: ${a}`,p.API_ERROR)}};await o(r),n!==r&&await o(n)}import{bold as ys,cyan as Wr,dim as mn,yellow as Os}from"kleur/colors";import{Input as vs,Text as Ie,matchesKey as je}from"@earendil-works/pi-tui";var Ct=class{constructor(t,n,r){this.tui=t;this.question=n;this.onComplete=r;(n.questions[0]?.options.length??0)===0&&(this.mode="custom"),this.customInput.onSubmit=o=>{let i=o.trim().slice(0,8e3);if(!i){this.errorMessage="Enter a short answer before continuing.",this.tui.requestRender();return}this.recordCurrent(i)},this.customInput.onEscape=()=>{this.customInput.setValue(""),this.mode="select",this.tui.setFocus(this),this.tui.requestRender()}}focused=!1;questionIndex=0;optionIndex=0;mode="select";errorMessage="";selected=new Map;answers=[];customInput=new vs({prompt:`${Wr("Your answer: ")} `,placeholder:"Write a short answer and press Enter",placeholderStyle:mn});invalidate(){}render(t){let n=this.question.questions[this.questionIndex];if(!n)return[];this.customInput.focused=this.focused&&this.mode==="custom";let r=[...new Ie(`${ys(Wr(f(n.header)))} \xB7 ${this.questionIndex+1}/${this.question.questions.length}`,0,0).render(t),...new Ie(f(n.question),0,0).render(t),...this.renderOptions(n,t)];return this.mode==="custom"?(r.push(...this.customInput.render(t)),r.push(...new Ie(mn("Enter submits your text \xB7 Escape returns to the choices"),0,0).render(t))):r.push(...new Ie(mn(this.instructions(n)),0,0).render(t)),this.errorMessage&&r.push(...new Ie(Os(this.errorMessage),0,0).render(t)),r}handleInput(t){if(this.mode==="custom"){this.customInput.handleInput(t);return}let n=this.question.questions[this.questionIndex];if(!n)return;let r=this.selectedFor(n);if(n.options.length===0){if(t.toLowerCase()==="s"&&this.question.optional){this.finish(null);return}if(je(t,"escape")){this.question.optional&&this.finish(null);return}this.customInput.handleInput(t);return}if(je(t,"up")){this.optionIndex=Math.max(0,this.optionIndex-1),this.errorMessage="",this.tui.requestRender();return}if(je(t,"down")){this.optionIndex=Math.min(n.options.length-1,this.optionIndex+1),this.errorMessage="",this.tui.requestRender();return}if(je(t,"escape")){this.question.optional&&this.finish(null);return}if(t.toLowerCase()==="s"&&this.question.optional){this.finish(null);return}if(t.toLowerCase()==="o"){this.mode="custom",this.tui.setFocus(this),this.tui.requestRender();return}let o=Number(t);if(Number.isInteger(o)&&o>=1&&o<=n.options.length){let i=n.options[o-1]?.id;i&&(this.optionIndex=o-1,n.multiSelect?r.has(i)?r.delete(i):r.add(i):(r.clear(),r.add(i)),this.tui.requestRender());return}if(je(t,"space")&&n.multiSelect){let i=n.options[this.optionIndex];i&&(r.has(i.id)?r.delete(i.id):r.add(i.id),this.tui.requestRender());return}if(je(t,"enter")){if(r.size===0){this.errorMessage="Select an option explicitly, type a custom answer, or skip if optional.",this.tui.requestRender();return}this.recordCurrent()}}renderOptions(t,n){let r=this.selectedFor(t),o=[];return t.options.forEach((i,s)=>{let a=r.has(i.id),l=t.multiSelect?a?"[x]":"[ ]":a?"(x)":"( )",c=s===this.optionIndex?"\u203A":" ",d=i.recommended?" \xB7 recommended":"",g=i.confirms?" \xB7 confirms the shown action":"",h=`${c} ${s+1}. ${l} ${f(i.label)}${d}${g}`;o.push(...new Ie(h,0,0).render(n)),o.push(...new Ie(` ${f(i.description)}`,0,0).render(n))}),o}instructions(t){return t.options.length===0?`Write a short answer${this.question.optional?" \xB7 s skip card":""}`:`\u2191/\u2193 move \xB7 1\u2013${t.options.length} ${t.multiSelect?"toggle":"select"} \xB7 Enter continue \xB7 o write your own${this.question.optional?" \xB7 s skip card":""}`}selectedFor(t){let n=this.selected.get(t.id);return n||(n=new Set,this.selected.set(t.id,n)),n}recordCurrent(t){let n=this.question.questions[this.questionIndex];if(!n)return;t&&this.selectedFor(n).clear();let r=[...this.selectedFor(n)],o={questionId:n.id,optionIds:r,...t?{customText:t}:{}},i=this.answers.findIndex(s=>s.questionId===n.id);if(i>=0?this.answers.splice(i,1,o):this.answers.push(o),this.customInput.setValue(""),this.mode="select",this.questionIndex<this.question.questions.length-1){this.questionIndex+=1,this.optionIndex=0,this.mode=this.question.questions[this.questionIndex]?.options.length===0?"custom":"select",this.errorMessage="",this.tui.setFocus(this),this.tui.requestRender();return}this.finish({questionId:this.question.id,answers:this.answers.map(s=>({...s}))})}finish(t){this.onComplete(t)}};var _s=1048576,Yr=8192,Qr=10*1048576,Ps=20*1048576,Vr=10,$s=25*1048576,Xr=3;async function po(e){let[t,...n]=e.positional,r=["exec","sessions","resume","login","logout","download"].includes(t??""),o=r?void 0:e.positional.join(" ");if(G(e.flags,"read-only")&&(G(e.flags,"write")||G(e.flags,"approve")))throw new w("--read-only cannot be combined with --write or --approve.");if(!r&&(!process.stdin.isTTY||!process.stdout.isTTY))throw new w("Interactive Oracle needs a terminal.",'Use `anyforge oracle exec "your question"` for scripts and pipes.');if(t==="login"){if(n.length)throw new w("oracle login does not accept positional arguments.");let h=await pn({endpoint:e.endpointOverride??e.endpoint,write:G(e.flags,"write"),approve:G(e.flags,"approve")}),k=h.scopes.join(", "),v=[G(e.flags,"write")?"write":void 0,G(e.flags,"approve")?"approve":void 0].filter(C=>!!C).filter(C=>!h.scopes.includes(C));process.stdout.write(`Connected to ${h.endpoint} with scopes: ${k}.
268
- `),v.length&&process.stderr.write(`This account was granted read only; the server withheld: ${v.join(", ")}.
269
- `);return}if(t==="logout"){if(n.length)throw new w("oracle logout does not accept positional arguments.");let h=await Ur();process.stdout.write(h.hadCredentials?`Oracle credentials cleared and revoked.
259
+ `},Rd=Object.entries(Bt).map(([t,e])=>({uri:t==="SKILL.md"?ao:`${ao}/${t}`,name:t==="SKILL.md"?se:`${se}/${t.replace(/^references\//,"")}`,title:t==="SKILL.md"?"AnyForge platform guide":t,description:t==="SKILL.md"?Fs:`Reference for the ${se} skill: ${t}`,mimeType:Ns,size:new TextEncoder().encode(e).byteLength}));var qs=Bt["SKILL.md"],Ad=qs.replace(/^---[\s\S]*?\r?\n---[ \t]*(?:\r?\n|$)/,"");var uo={agents:".agents/skills",claude:".claude/skills",codex:".codex/skills"};function Ds(t){let e=t.scope==="user"?t.homeDir??Ms():t.cwd??process.cwd();if(t.scope==="user"&&t.client==="codex"){let n=t.codexHome??process.env.CODEX_HOME??Ie(e,".codex");return Ie(n,"skills",se)}return Ie(e,uo[t.client],se)}function Bs(t){if(t.scope!=="project"&&t.scope!=="user")throw new y(`--scope must be project or user, got "${t.scope}".`);if(!Object.hasOwn(uo,t.client))throw new y(`--client must be agents, claude, or codex, got "${t.client}".`)}async function Ln(t){try{return(await st.lstat(t)).isSymbolicLink()}catch(e){if(e.code==="ENOENT")return!1;throw e}}async function Gs(t){Bs(t);let e=Ds(t),n=Object.entries(Bt),r=n.map(([s])=>Ie(e,s));if(await Ln(e))throw new y(`Refusing to install through the symbolic link ${e}.`);let o=new Set(n.map(([s])=>co(s)).filter(s=>s!=="."));for(let s of o)if(await Ln(Ie(e,s)))throw new y(`Refusing to install through the symbolic link ${Ie(e,s)}.`);if(!t.force){let s=[];for(let a of r)try{await st.access(a),s.push(a)}catch(c){if(c.code!=="ENOENT")throw c}if(s.length>0)throw new y(`The ${se} skill already exists at ${e}.`,"Use --force only if you want to replace AnyForge-managed files in that directory.")}await st.mkdir(e,{recursive:!0});let i=[];for(let[s,a]of n){let c=Ie(e,s);if(await st.mkdir(co(c),{recursive:!0}),await Ln(c))throw new y(`Refusing to replace the symbolic link ${c}.`);await st.writeFile(c,a,{encoding:"utf8",mode:420}),i.push(s)}return{name:se,scope:t.scope,client:t.client,directory:e,files:i}}async function po(t){if(t.subcommand!=="install")throw new y(`Unknown skill command${t.subcommand?`: ${t.subcommand}`:""}.`,"Use `anyforge skill install anyforge-platform`.");if(t.name!==se)throw new y(`Unknown skill${t.name?`: ${t.name}`:""}.`,`The only portable platform skill is ${se}.`);let e=t.scope??"project",n=t.client??"agents";if(!["project","user"].includes(e))throw new y(`--scope must be project or user, got "${e}".`);if(!["agents","claude","codex"].includes(n))throw new y(`--client must be agents, claude, or codex, got "${n}".`);let r=await Gs({scope:e,client:n,force:t.force});if(t.json){process.stdout.write(JSON.stringify(r)+`
260
+ `);return}console.log(Us("Installed ")+`${r.name} ${lo(`(${r.scope}, ${r.client})`)}`),console.log(` ${r.directory}`),console.log(lo(` ${r.files.length} files installed. Re-run with --force to refresh them.`)),r.scope==="project"&&r.client==="agents"&&console.log(js(" This portable location is detected by AnyForge repository analysis."))}import{randomUUID as fc}from"node:crypto";import{open as mc,realpath as gc,stat as hc}from"node:fs/promises";import{basename as wc,join as yc,resolve as vc}from"node:path";import{bold as ui,cyan as Oc,dim as At,yellow as cn}from"kleur/colors";import{ProcessTerminal as bc,SelectList as Rc,Text as Ac,TuiAltScreen as xc}from"@earendil-works/pi-tui";var zs=new Set(["find_callers","find_definition","find_imports","trace_path","get_neighbors","graph_stats"]);function Ws(t){return zs.has(t)?"querying the code graph":t==="search_code_semantic"?"searching the code index":t==="search_codebase_docs"?"searching codebase docs":null}function Gt(t){let e=Ws(t);if(e)return e;let n=/^mcp__(.+?)__(.+)$/.exec(t);return n?`${n[1].replace(/[_-]+/g," ")} \xB7 ${n[2].replace(/_/g," ")}`:t.replace(/_/g," ")}var Ks=new Set(["ask_user","present_catch_up_decision","present_memory_candidates"]);function Me(t){return typeof t=="string"&&Ks.has(t)}import{truncateToWidth as Vt,wrapTextWithAnsi as Lo}from"@earendil-works/pi-tui";import{cyan as Fo,dim as Je,green as No,italic as ka,red as Qn,yellow as Vn}from"kleur/colors";import{truncateToWidth as at,visibleWidth as qn,wrapTextWithAnsi as Ys}from"@earendil-works/pi-tui";import{bold as Qs,dim as Vs}from"kleur/colors";var Hs=/\x1B(?:\[[0-?]*[ -/]*[@-~]|\][^\x07]*(?:\x07|\x1B\\)|[PX^_][\s\S]*?\x1B\\|[@-_])/g,Js=/[\u0000-\u0008\u000B\u000C\u000E-\u001F\u007F-\u009F]/g;function d(t){return t.replace(Hs,"").replace(Js,"")}function Fn(t){try{let e=new URL(t);return e.protocol!=="https:"&&e.protocol!=="http:"||!e.hostname||e.username||e.password?null:e.toString()}catch{return null}}function fo(t){return t.replace(/\x1B\]8;;([^\x1B\x07]*)(?:\x07|\x1B\\)/g,(e,n)=>Fn(n)?e:"\x1B]8;;\x07")}function Nn(t){let n=d(t).replace(/(!?)\[([^\]\n]+)\]\((<[^>\n]*>|[^\s)]+)(?:\s+[^)]*)?\)/g,(i,s,a,c)=>{let p=c.startsWith("<")&&c.endsWith(">")?c.slice(1,-1):c,l=Fn(p);return l?`${s}[${a}](${l})`:a}),r=new Map,o=n.replace(/^(\s{0,3}\[([^\]]+)\]:\s*)(\S+)(.*)$/gm,(i,s,a,c,p)=>{let l=Fn(c);return r.set(a.trim().toLowerCase(),l),l?`${s}${l}${p}`:""});return r.size===0?o:o.replace(/(!?)\[([^\]\n]+)\](?:\[([^\]\n]*)\])?/g,(i,s,a,c)=>{let p=(c||a).trim().toLowerCase();return!r.has(p)||r.get(p)?i:a})}function de(t){return typeof t=="string"?d(t):Array.isArray(t)?t.map(e=>de(e)):t&&typeof t=="object"?Object.fromEntries(Object.entries(t).map(([e,n])=>[d(e),de(n)])):t}function N(t){return t<1024?`${t} B`:t<1024*1024?`${ct(t/1024)} KiB`:`${ct(t/(1024*1024))} MiB`}function lt(t){let e=Math.max(0,t);if(e<1e4)return`${ct(e/1e3)}s`;let n=Math.round(e/1e3);if(n<60)return`${n}s`;let r=Math.floor(n/3600),o=Math.floor(n%3600/60),i=n%60;return r?o?`${r}h ${o}m`:`${r}h`:i?`${o}m ${i}s`:`${o}m`}function Mn(t){let e=Math.floor(Math.max(0,t)/1e3);return e<60?`${e}s`:`${Math.floor(e/60)}m ${String(e%60).padStart(2,"0")}s`}function ee(t){return Math.abs(t)<1e3?String(Math.round(t)):Math.abs(t)<1e6?`${ct(t/1e3,t<1e5?1:0)}k`:`${ct(t/1e6)}M`}function ct(t,e=1){return t.toFixed(e).replace(/\.0+$/,"")}function Xs(t){return d(t).replace(/(Ms|Bytes)$/,"").replace(/([a-z0-9])([A-Z])/g,"$1 $2").replace(/[_-]+/g," ").toLowerCase().trim()}function Zs(t,e){return typeof e=="boolean"?e?"on":"off":typeof e=="string"?d(e):/Ms$/.test(t)?lt(e):/Bytes$/.test(t)?N(e):/tokens?/i.test(t)?ee(e):String(e)}function mo(t){return t?Object.entries(t).filter(e=>e[1]!==null).map(([e,n])=>`${Xs(e)} ${Zs(e,n)}`):[]}function Un(t,e,n=2){let r=Math.min(16,Math.max(...t.map(([s])=>qn(s)),0)+2),o=Math.max(10,e-n-r),i=[];for(let[s,a]of t)Ys(a,o).forEach((p,l)=>{let u=l===0?Vs(at(s,r-1).padEnd(r)):" ".repeat(r);i.push(at(`${" ".repeat(n)}${u}${p}`,e))});return i}function go(t,e,n){return[at(Qs(t),n),...Un(e,n)]}function ho(t,e,n){let r=qn(n),o=e.filter(Boolean).join(" \xB7 ");if(r+4>t)return at(o||n,t);let i=t-r-2,s=at(o,i),a=Math.max(2,t-qn(s)-r);return`${s}${" ".repeat(a)}${n}`}import{bold as ut,cyan as dt,dim as Re,green as ea,italic as wo,strikethrough as ta,underline as yo,yellow as na}from"kleur/colors";import{Markdown as ra}from"@earendil-works/pi-tui";var oa={heading:t=>ut(dt(t)),link:t=>yo(dt(t)),linkUrl:t=>Re(t),code:t=>na(t),codeBlock:t=>t,codeBlockBorder:t=>Re(t),quote:t=>wo(t),quoteBorder:t=>Re(t),hr:t=>Re(t),listBullet:t=>dt(t),bold:t=>ut(t),italic:t=>wo(t),strikethrough:t=>ta(t),underline:t=>yo(t)},pt={selectedPrefix:t=>dt(t),selectedText:t=>ut(t),description:t=>Re(t),scrollInfo:t=>Re(t),noMatch:t=>Re(t)},vo={borderColor:t=>Re(t),selectList:pt};var Ue=class{content;markdown;cache;constructor(e){this.content=d(e),this.markdown=new ra(Nn(this.content),0,0,oa)}getText(){return this.content}setText(e){let n=d(e);n!==this.content&&(this.content=n,this.markdown.setText(Nn(n)),this.cache=void 0)}invalidate(){this.markdown.invalidate(),this.cache=void 0}render(e){let n=Math.max(12,e);if(this.cache?.width===n)return this.cache.lines;let r=this.content?this.markdown.render(n).map(fo):[];return this.cache={width:n,lines:r},r}};function ft(t,e){return t==="user"?`${ut(ea(e?d(e):"You"))}`:`${ut(dt("Oracle"))}`}function ue(t){return t.shared||t.visibility==="company"?`Shared with the company${t.entityKey?` \xB7 ${d(t.entityKey)}`:""}`:"Private to you"}function Oo(t){return t.shared||t.visibility==="company"?"shared":"private"}import{createReadStream as ya}from"node:fs";import{stat as va}from"node:fs/promises";import{basename as Oa}from"node:path";import{setTimeout as Eo}from"node:timers/promises";var bo={txt:"text/plain",log:"text/plain",md:"text/markdown",markdown:"text/markdown",csv:"text/csv",json:"application/json",pdf:"application/pdf",ts:"text/plain",tsx:"text/plain",js:"text/plain",jsx:"text/plain",mjs:"text/plain",cjs:"text/plain",py:"text/plain",go:"text/plain",rs:"text/plain",yaml:"text/plain",yml:"text/plain",toml:"text/plain",xml:"text/plain",html:"text/plain",css:"text/plain",sh:"text/plain",sql:"text/plain",java:"text/plain",kt:"text/plain",swift:"text/plain",c:"text/plain",h:"text/plain",cpp:"text/plain",rb:"text/plain",php:"text/plain",tf:"text/plain",diff:"text/plain",patch:"text/plain",png:"image/png",jpg:"image/jpeg",jpeg:"image/jpeg",gif:"image/gif",webp:"image/webp",docx:"application/vnd.openxmlformats-officedocument.wordprocessingml.document",pptx:"application/vnd.openxmlformats-officedocument.presentationml.presentation",xlsx:"application/vnd.openxmlformats-officedocument.spreadsheetml.sheet"};function Ro(t){let e=t.slice(t.lastIndexOf(".")+1).toLowerCase();return Object.hasOwn(bo,e)?bo[e]:null}var jn="/api/v1/oracle";function fe(t){let e;try{e=new URL(t)}catch{throw new f(`Invalid Oracle endpoint: ${t}`,m.USAGE)}if(!["http:","https:"].includes(e.protocol)||e.username||e.password)throw new f("Oracle endpoint must be an http or https URL without embedded credentials.",m.USAGE);if(e.pathname!=="/"||e.search||e.hash)throw new f("Oracle endpoint must be the workspace origin, without a path, query or fragment.",m.USAGE);return e.origin}function pe(t,e){return`${fe(t)}${jn}${e}`}function ia(t,e,n){let r;try{r=new URL(t)}catch{throw new f(`Oracle server returned an invalid ${n} endpoint.`,m.API_ERROR)}let o=new URL(fe(e));if(r.origin!==o.origin||!r.pathname.startsWith("/api/oauth/")||r.search||r.hash||r.username||r.password)throw new f(`Oracle server returned an unsafe ${n} endpoint.`,m.API_ERROR);return r.toString()}function sa(t,e){if(!t||typeof t!="object")throw new f("Oracle server omitted OAuth endpoints.",m.API_ERROR);let n=t,r=["registration","authorization","token","revocation"],o={};for(let i of r){if(typeof n[i]!="string")throw new f(`Oracle server omitted its OAuth ${i} endpoint.`,m.API_ERROR);o[i]=ia(n[i],e,i)}return o}async function ze(t,e=fetch,n){let r=fe(t),o;try{o=await e(pe(r,"/config"),{headers:{Accept:"application/json",...n?{Authorization:`Bearer ${n}`}:{}},redirect:"error",signal:AbortSignal.timeout(2e4)})}catch(l){throw new f(`Cannot reach ${r}: ${l instanceof Error?l.message:String(l)}`,m.FAILURE,"Check your network, or pass --endpoint for a self-hosted workspace.")}let i=await Be(o,pe(r,"/config")),s=$(De(i,o.status)),a=`${r}${jn}`;if(s.protocolVersion!==1)throw new f(`Oracle protocol mismatch: this CLI supports ${1}, and the server reports ${String(s.protocolVersion)}.`,m.API_ERROR,"Update @anyforge/control to a version supported by this workspace.");if(s.resource!==a)throw new f("Oracle server resource does not match this workspace origin.",m.API_ERROR);let c=Array.isArray(s.scopes)?s.scopes:null;if(!c||!c.every(l=>l==="read"||l==="write"||l==="approve"))throw new f("Oracle server returned an invalid scope list.",m.API_ERROR);let p={protocolVersion:1,resource:a,scopes:c,oauth:sa(s.oauth,r)};if(s.identity!==void 0){let l=$(s.identity);if(typeof l.uid!="string"||typeof l.companyId!="string")throw new f("Oracle server returned an invalid identity.",m.API_ERROR);p.identity={uid:d(l.uid),companyId:d(l.companyId)}}if(s.capabilities!==void 0){let l=$(s.capabilities);if(![l.read,l.write,l.approve].every(u=>typeof u=="boolean"))throw new f("Oracle server returned invalid capabilities.",m.API_ERROR);p.capabilities={read:l.read,write:l.write,approve:l.approve}}if(s.model!==void 0){let l=$(s.model);if(typeof l.id!="string"||typeof l.provider!="string")throw new f("Oracle server returned invalid model metadata.",m.API_ERROR);p.model={id:d(l.id),provider:d(l.provider)}}if(s.limits!==void 0){let l=$(s.limits);if(Object.values(l).some(u=>!["string","number","boolean"].includes(typeof u)&&u!==null))throw new f("Oracle server returned invalid limits metadata.",m.API_ERROR);p.limits=Object.fromEntries(Object.entries(l).map(([u,v])=>[d(u),typeof v=="string"?d(v):v]))}return Array.isArray(s.commands)&&(p.commands=aa(s.commands)),p}function aa(t){let e=[];for(let n of t.slice(0,50)){let r=$(n);if(typeof r.name!="string"||!/^[a-z][a-z0-9_-]{0,31}$/.test(r.name)||typeof r.description!="string"||e.some(i=>i.name===r.name))continue;let o=typeof r.args=="string"?d(r.args).slice(0,60).trim():"";e.push({name:r.name,description:d(r.description).slice(0,200),...o?{args:o}:{}})}return e}var Wt=class{endpoint;scopes;source;#e;#t;cachedConfig;constructor(e,n=fetch){this.endpoint=fe(e.endpoint),this.#e=e.getAccessToken??(async()=>e.accessToken),this.#t=n,this.scopes=new Set(e.scopes),this.source=e.source}async config(){if(!this.cachedConfig){let e=await this.#e();try{this.cachedConfig=await ze(this.endpoint,this.#t,e)}catch(n){if(this.source!=="oauth"||!(n instanceof be)||n.status!==401)throw n;let r=await this.#e(e);if(r===e)throw n;this.cachedConfig=await ze(this.endpoint,this.#t,r)}}return this.cachedConfig}async listSessions(){let e=await this.json("GET","/sessions"),n=Array.isArray(e)?e:$(e).sessions;if(!Array.isArray(n))throw new f("Oracle server returned an invalid sessions list.",m.API_ERROR);return n.map(ko)}async createSession(e={}){let n=await this.json("POST","/sessions",e),r=$(n);return!Array.isArray(r.messages)&&typeof r.sessionId=="string"?this.getSession(r.sessionId):Ao(n)}async getSession(e){return Ao(await this.json("GET",`/sessions/${encodeURIComponent(e)}`))}async submitTurn(e,n,r,o){let i,s=pe(this.endpoint,`/sessions/${encodeURIComponent(e)}/turns`),a=async p=>this.#t(s,{method:"POST",headers:{Authorization:`Bearer ${p}`,Accept:"text/event-stream, application/json","Content-Type":"application/json"},redirect:"error",body:JSON.stringify(n),...r?{signal:r}:{}});try{let p=await this.#e();if(i=await a(p),i.status===401&&this.source==="oauth"){let l=await this.#e(p);l!==p&&(i=await a(l))}}catch(p){throw p instanceof f||r?.aborted?p:new f(`Oracle connection was interrupted: ${p instanceof Error?p.message:String(p)}`,m.FAILURE,"The server may still be working. Resume this session to replay its saved stream.")}if(o?.(i),i.ok||await je(i),!(i.headers.get("content-type")?.toLowerCase()??"").includes("text/event-stream")){let p=await Be(i,pe(this.endpoint,`/sessions/${e}/turns`)),l=De(p,i.status);throw new f(`Oracle server did not start a stream (${ca(l)}).`,m.API_ERROR)}return i}async replayEvents(e,n,r){let o=[];for await(let i of this.streamReplayEvents(e,n,r))o.push(i);return o}async*streamReplayEvents(e,n,r,o){let i=`/sessions/${encodeURIComponent(e)}/events?streamId=${encodeURIComponent(n)}&from=${Math.max(0,r)}`,s=await this.authenticatedFetch("GET",i,{headers:{Accept:"text/event-stream, application/json"}},0);if(s.ok||await je(s),(s.headers.get("content-type")?.toLowerCase()??"").includes("text/event-stream")){yield*mt(s,o);return}let c=De(await Be(s,pe(this.endpoint,i)),s.status),p=Array.isArray(c)?c:$(c).events;if(!Array.isArray(p))throw new f("Oracle replay response did not contain events.",m.API_ERROR);for(let l of p)yield Dn(l)}async*streamRequestEvents(e,n,r=-1,o){let i=`/sessions/${encodeURIComponent(e)}/events?requestId=${encodeURIComponent(n)}&from=${r}`,s=await this.authenticatedFetch("GET",i,{headers:{Accept:"text/event-stream, application/json"}},0);if(s.ok||await je(s),(s.headers.get("content-type")?.toLowerCase()??"").includes("text/event-stream")){yield*mt(s,o);return}let c=De(await Be(s,pe(this.endpoint,i)),s.status),p=Array.isArray(c)?c:$(c).events;if(!Array.isArray(p))throw new f("Oracle request replay response did not contain events.",m.API_ERROR);for(let l of p)yield Dn(l)}async cancelTurn(e,n){return this.json("POST",`/sessions/${encodeURIComponent(e)}/cancel`,{streamId:n})}async cancelRequest(e,n){return this.json("POST",`/sessions/${encodeURIComponent(e)}/cancel`,{requestId:n})}async upload(e,n){let r=new FormData;r.set("sessionId",e),r.set("file",n,n.name);let o=await this.authenticatedFetch("POST","/uploads",{method:"POST",body:r,headers:{Accept:"application/json"}});return o.ok||await je(o),la(De(await Be(o,pe(this.endpoint,"/uploads")),o.status))}async download(e,n){let r=await this.authenticatedFetch("GET",`/sessions/${encodeURIComponent(e)}/files/${encodeURIComponent(n)}`,{headers:{Accept:"application/octet-stream, application/json"}});return r.ok||await je(r),r}async json(e,n,r){let o=await this.authenticatedFetch(e,n,{headers:{Accept:"application/json",...r!==void 0?{"Content-Type":"application/json"}:{}},...r!==void 0?{body:JSON.stringify(r)}:{}});return o.ok||await je(o),De(await Be(o,pe(this.endpoint,n)),o.status)}async authenticatedFetch(e,n,r={},o=2e4){try{let i=pe(this.endpoint,n),s=Object.fromEntries(new Headers(r.headers).entries()),a=r.signal||o<=0?void 0:AbortSignal.timeout(o),c=v=>this.#t(i,{...r,method:e,headers:{...s,Authorization:`Bearer ${v}`},redirect:"error",...a?{signal:a}:{}}),p=await this.#e(),l=await c(p),u=r.body===void 0||typeof r.body=="string"||r.body===null;if(l.status===401&&this.source==="oauth"){let v=await this.#e(p);v!==p&&u&&(l=await c(v))}return l}catch(i){throw i instanceof f?i:new f(`Cannot reach ${this.endpoint}: ${i instanceof Error?i.message:String(i)}`,m.FAILURE,"Check your network, or pass --endpoint for a self-hosted workspace.")}}};async function*mt(t,e){if(!t.body)throw new f("Oracle stream has no response body.",m.FAILURE);let n=t.body.getReader(),r=new TextDecoder,o="",i=0,s=[],a=0,c=-1,p=()=>{if(s.length===0)return null;let l=s.join(`
261
+ `);if(s=[],a=0,l==="[DONE]")return null;let u;try{u=JSON.parse(l)}catch{throw new f("Oracle stream returned invalid JSON.",m.API_ERROR)}let v=Dn(u);return v.type==="finalizing"?v:v.idx<=c?null:(c=v.idx,v)};try{for(;;){let{value:u,done:v}=await n.read();u?.byteLength&&e?.();let k=r.decode(u,{stream:!v});if(o+=k,i+=zt(k),i>2*1024*1024)throw new f("Oracle stream event exceeded the 2 MiB protocol limit.",m.API_ERROR);let x=0,b=o.indexOf(`
262
+ `,x);for(;b>=0;){let O=o.slice(x,b).replace(/\r$/,"");if(i-=zt(o.slice(x,b+1)),x=b+1,O===""){let R=p();R&&(yield R)}else if(!O.startsWith(":")){let R=O.indexOf(":"),V=R<0?O:O.slice(0,R),K=R<0?"":O.slice(R+1).replace(/^ /,"");if(V==="data"&&(s.push(K),a+=zt(K)+1,a>2*1024*1024))throw new f("Oracle stream event exceeded the 2 MiB protocol limit.",m.API_ERROR)}b=o.indexOf(`
263
+ `,x)}if(o=o.slice(x),v)break}if(o.trim()){let u=o.replace(/\r$/,"");if(u.startsWith("data:")&&(s.push(u.slice(5).replace(/^ /,"")),a+=zt(s[s.length-1]??"")+1,a>2*1024*1024))throw new f("Oracle stream event exceeded the 2 MiB protocol limit.",m.API_ERROR)}let l=p();l&&(yield l)}catch(l){throw await n.cancel("Invalid or oversized Oracle event stream.").catch(()=>{}),l}finally{n.releaseLock()}}function zt(t){return Buffer.byteLength(t,"utf8")}function Bn(t){let e=["program","initiative","codebase"].filter(o=>typeof t[o]=="string");if(e.length>1)throw new f("Choose only one of --program, --initiative or --codebase.",m.USAGE);let n=e[0];if(!n)return;let r=t[n];if(typeof r!="string"||!r.trim())throw new f(`--${n} needs an id.`,m.USAGE);return{kind:n,id:r.trim()}}function $(t){return!t||typeof t!="object"||Array.isArray(t)?{}:t}function ca(t){if(typeof t=="string")return d(t);try{return d(JSON.stringify(t))}catch{return"unexpected response"}}function De(t,e){let n=$(t);if(n.ok===!1){let r=xo(n.error,e),o=typeof n.message=="string"?d(n.message).slice(0,2e3):void 0;throw new be(r,e,o)}return n.ok===!0&&"data"in n?n.data:t}async function Be(t,e){try{return await t.json()}catch{throw new f(`Non-JSON response from ${e} (HTTP ${t.status}).`,m.FAILURE)}}async function je(t){let e;try{e=await t.clone().json()}catch{e=null}let n=$(e),r=xo(n.error??n.error_description,t.status),o=typeof n.message=="string"?n.message:typeof n.error_description=="string"?n.error_description:typeof n.detail=="string"?n.detail:void 0;throw new be(r,t.status,typeof o=="string"?d(o).slice(0,2e3):void 0)}function xo(t,e){if(typeof t!="string")return`http_${e}`;let n=d(t).slice(0,120);return/^[A-Za-z0-9_.-]+$/.test(n)?n:`http_${e}`}function ko(t){let e=$(t);if(typeof e.sessionId!="string"||!/^[A-Za-z0-9_-]{1,128}$/.test(e.sessionId)||typeof e.title!="string"||e.visibility!=="private"&&e.visibility!=="company"||typeof e.shared!="boolean")throw new f("Oracle server returned an invalid session summary.",m.API_ERROR);return{sessionId:e.sessionId,title:d(e.title),visibility:e.visibility,shared:e.shared,...typeof e.entityKey=="string"?{entityKey:d(e.entityKey)}:{},...typeof e.updatedAt=="number"||e.updatedAt===null?{updatedAt:e.updatedAt}:{}}}function Ao(t){let e=$(t),n=ko(e);if(!Array.isArray(e.messages))throw new f("Oracle server returned an invalid session transcript.",m.API_ERROR);let r=e.messages.map((o,i)=>{let s=$(o);if(s.role!=="user"&&s.role!=="assistant"||typeof s.content!="string")throw new f(`Oracle session message ${i+1} is invalid.`,m.API_ERROR);let a=Array.isArray(s.attachments)?s.attachments.map(fa):void 0,c=Array.isArray(s.files)?s.files.map(ma):void 0;return{role:s.role,content:d(s.content),...typeof s.id=="string"?{id:s.id}:{},...typeof s.authorName=="string"?{authorName:d(s.authorName)}:{},...s.question&&typeof s.question=="object"?{question:da(s.question)}:{},...s.questionResponse&&typeof s.questionResponse=="object"?{questionResponse:ua(s.questionResponse)}:{},...a?{attachments:a}:{},...c?{files:c}:{}}});return{...n,messages:r,...typeof e.activeStreamId=="string"?{activeStreamId:e.activeStreamId}:{}}}function Dn(t){let e=$(t);if(e.protocolVersion!==1||typeof e.idx!="number"||!Number.isSafeInteger(e.idx)||e.idx<0||typeof e.type!="string")throw new f("Oracle stream event does not match protocol version 1.",m.API_ERROR);return de(e)}function la(t){let e=$(t);if(typeof e.fileId!="string"||typeof e.name!="string"||typeof e.mediaType!="string")throw new f("Oracle upload response is missing file metadata.",m.API_ERROR);return{fileId:e.fileId,name:d(e.name),mediaType:d(e.mediaType),...typeof e.sizeBytes=="number"?{sizeBytes:e.sizeBytes}:{}}}function da(t){let e=$(t);if(typeof e.id!="string"||!Array.isArray(e.questions))throw new f("Oracle returned an invalid question card.",m.API_ERROR);return{id:d(e.id),questions:e.questions.map((n,r)=>{let o=$(n);if(typeof o.id!="string"||typeof o.header!="string"||typeof o.question!="string"||typeof o.multiSelect!="boolean"||!Array.isArray(o.options))throw new f(`Oracle question ${r+1} is invalid.`,m.API_ERROR);return{id:d(o.id),header:d(o.header),question:d(o.question),multiSelect:o.multiSelect,options:o.options.map((i,s)=>{let a=$(i);if(typeof a.id!="string"||typeof a.label!="string"||typeof a.description!="string")throw new f(`Oracle question option ${s+1} is invalid.`,m.API_ERROR);return{id:d(a.id),label:d(a.label),description:d(a.description),...typeof a.recommended=="boolean"?{recommended:a.recommended}:{},...typeof a.confirms=="boolean"?{confirms:a.confirms}:{}}})}}),optional:e.optional===!0}}function ua(t){let e=$(t);if(typeof e.questionId!="string"||!Array.isArray(e.answers))throw new f("Oracle returned an invalid question response.",m.API_ERROR);return{questionId:d(e.questionId),answers:e.answers.map(pa)}}function pa(t){let e=$(t);if(typeof e.questionId!="string"||!Array.isArray(e.optionIds)||!e.optionIds.every(n=>typeof n=="string"))throw new f("Oracle returned an invalid question answer.",m.API_ERROR);return{questionId:d(e.questionId),optionIds:e.optionIds.map(n=>d(n)),...typeof e.customText=="string"?{customText:d(e.customText).slice(0,8e3)}:{}}}function fa(t){let e=$(t);if(typeof e.fileId!="string"||typeof e.name!="string"||typeof e.mediaType!="string")throw new f("Oracle session attachment metadata is invalid.",m.API_ERROR);return{fileId:d(e.fileId),name:d(e.name),mediaType:d(e.mediaType),...typeof e.sizeBytes=="number"&&Number.isFinite(e.sizeBytes)?{sizeBytes:e.sizeBytes}:{}}}function ma(t){let e=$(t);if(typeof e.fileId!="string"||typeof e.filename!="string"||typeof e.mediaType!="string"||typeof e.sizeBytes!="number"||!Number.isFinite(e.sizeBytes))throw new f("Oracle session file metadata is invalid.",m.API_ERROR);return{fileId:d(e.fileId),filename:d(e.filename),mediaType:d(e.mediaType),sizeBytes:e.sizeBytes,...typeof e.format=="string"?{format:d(e.format)}:{}}}import{randomUUID as So}from"node:crypto";import{promises as W}from"node:fs";import{homedir as ga}from"node:os";import{join as Gn}from"node:path";import*as Io from"proper-lockfile";var gt=Gn(ga(),".anyforge"),me=Gn(gt,"oracle"),Co=Gn(gt,"oracle.last-session");function ha(t){if(!t||typeof t!="object"||Array.isArray(t))return null;let e=t;return e.version!==1||typeof e.endpoint!="string"||typeof e.clientId!="string"||typeof e.redirectUri!="string"||typeof e.accessToken!="string"||typeof e.refreshToken!="string"||typeof e.expiresAt!="number"||!Number.isFinite(e.expiresAt)||!Array.isArray(e.scopes)||!e.scopes.every(n=>typeof n=="string")||e.lastSessionId!==void 0&&typeof e.lastSessionId!="string"?null:{version:1,endpoint:e.endpoint,clientId:e.clientId,redirectUri:e.redirectUri,accessToken:e.accessToken,refreshToken:e.refreshToken,expiresAt:e.expiresAt,scopes:e.scopes,...typeof e.lastSessionId=="string"?{lastSessionId:e.lastSessionId}:{}}}async function zn(t){await W.mkdir(gt,{recursive:!0,mode:448});let e=`${me}.${So()}.tmp`;try{await W.writeFile(e,`${JSON.stringify(t,null,2)}
264
+ `,{mode:384,flag:"wx"}),await W.rename(e,me),await W.chmod(me,384)}finally{await W.rm(e,{force:!0}).catch(()=>{})}}async function Kt(){let t;try{t=await W.readFile(me,"utf8")}catch(r){if(r.code==="ENOENT")return null;throw r}let e;try{e=JSON.parse(t)}catch{throw new Error(`Oracle credentials at ${me} are invalid JSON; run \`anyforge oracle logout\` and sign in again.`)}let n=ha(e);if(!n)throw new Error(`Oracle credentials at ${me} have an unsupported format; run \`anyforge oracle logout\` and sign in again.`);return n}async function We(){try{return await W.unlink(me),!0}catch(t){if(t.code==="ENOENT")return!1;throw t}}async function To(t,e){await wa(Co,{version:1,endpoint:e,sessionId:t})}async function Ht(t){let e;try{e=await W.readFile(Co,"utf8")}catch(o){if(o.code==="ENOENT")return;throw o}let n;try{n=JSON.parse(e)}catch{return}if(!n||typeof n!="object"||Array.isArray(n))return;let r=n;return r.version===1&&r.endpoint===t&&typeof r.sessionId=="string"?r.sessionId:void 0}async function wa(t,e){await W.mkdir(gt,{recursive:!0,mode:448});let n=`${t}.${So()}.tmp`;try{await W.writeFile(n,`${JSON.stringify(e,null,2)}
265
+ `,{mode:384,flag:"wx"}),await W.rename(n,t),await W.chmod(t,384)}finally{await W.rm(n,{force:!0}).catch(()=>{})}}async function Jt(t){await W.mkdir(gt,{recursive:!0,mode:448});let e=await Io.lock(me,{realpath:!1,lockfilePath:`${me}.refresh-lock`,stale:6e4,update:1e4,retries:{retries:300,minTimeout:100,maxTimeout:100,randomize:!1}});try{return await t()}finally{await e()}}var Wn=8192,_o=10*1048576,ba=20*1048576,$o=10,Po=3;function Kn(t,e){if(t.type!=="tool_call"&&t.type!=="tool_call_start"||typeof t.spawnId=="string")return!1;let n=typeof t.id=="string"?t.id:void 0;if(n){if(e.has(n))return!1;e.add(n)}return!Me(t.name)}var Ce=class{lastIdx=-1;answer="";question;error;done;streamId;files=[];toolIds=new Set;accept(e){return e.type==="finalizing"?!0:e.idx<=this.lastIdx?!1:(this.lastIdx=e.idx,e.type==="stream_start"&&typeof e.streamId=="string"?this.streamId=d(e.streamId):e.type==="delta"&&typeof e.content=="string"?this.answer+=e.content:Kn(e,this.toolIds)?this.answer="":e.type==="question"?this.question=Yn(e):e.type==="error"?this.error=Jn(e):e.type==="done"?this.done=e:e.type==="navigator_file_created"&&Ra(this.files,e.file),!0)}get settled(){return!!(this.done||this.error)}outcome(){return{answer:this.answer,...this.question?{question:this.question}:{},...this.error?{error:this.error}:{},...this.done?{done:this.done}:{},...this.streamId?{streamId:this.streamId}:{},...this.files.length?{files:[...this.files]}:{}}}};async function Yt(t,e,n,r,o,i=new Ce){let s=async u=>{let v=i.streamId;i.accept(u)&&(i.streamId&&i.streamId!==v&&r.onStream?.(i.streamId),await r.onEvent(u))},a=()=>Hn(t,e,i,s,o,r.onActivity),c=async()=>{try{for await(let u of t.streamRequestEvents(e,n.requestId,-1,r.onActivity))await s(u)}catch(u){throw o?.aborted?u:new f("Oracle connection failed and the submitted request could not be recovered by its request id. It was not resubmitted with a new id.",m.FAILURE,`Run anyforge oracle resume ${e} to inspect the saved session.`)}if(i.settled)return i.outcome();if(i.streamId)return a();throw new f("Oracle request lookup returned no stream events. It was not resubmitted with a new id.",m.FAILURE,`Run anyforge oracle resume ${e} to inspect the saved session.`)},p=async()=>{try{let u=await t.submitTurn(e,n,o);for await(let v of mt(u,r.onActivity))await s(v)}catch(u){if(o?.aborted||u instanceof f&&u.exitCode===m.API_ERROR)throw u;return i.streamId?a():c()}return i.settled?i.outcome():i.streamId?a():c()},l;try{l=await t.submitTurn(e,n,o)}catch(u){if(o?.aborted||u instanceof f&&u.exitCode!==m.FAILURE)throw u;return p()}if(!l)throw new f("Oracle did not return a stream response.",m.FAILURE);r.onResponse?.();try{for await(let u of mt(l,r.onActivity))await s(u)}catch(u){if(o?.aborted||u instanceof f)throw u;return i.streamId?a():p()}return i.settled?i.outcome():i.streamId?a():p()}async function Hn(t,e,n,r,o,i){let s=n.streamId;if(!s)throw new f("Oracle stream replay needs a stream id.",m.FAILURE);let a=0;for(;!n.settled&&a<Po;){if(o?.aborted)throw o.reason;try{for await(let c of t.streamReplayEvents(e,s,n.lastIdx+1,i))await r(c);if(!n.settled){if((await t.getSession(e)).activeStreamId!==s)break;await Eo(300,void 0,o?{signal:o}:void 0)}}catch(c){if(o?.aborted||c instanceof f&&c.exitCode===m.API_ERROR||(a+=1,a>=Po))throw c;await Eo(300,void 0,o?{signal:o}:void 0)}}if(!n.settled)throw new f("Oracle stream could not be fully replayed; the turn was not submitted again.",m.FAILURE,`Run anyforge oracle resume ${e} to inspect the session.`);return n.outcome()}function ht(t,e){let n=e.done,r=n?.servedBy,o=Te(n?.tokens),i=U(n?.rounds),s=typeof n?.exitReason=="string"?d(n.exitReason):void 0,a=n?.exitReason==="completed"&&!e.question,c=e.files??(Array.isArray(n?.files)?n.files.map(Ke):void 0),p=e.error?"error":e.question?"awaiting_input":a?"complete":"interrupted";return{protocolVersion:1,sessionId:t,status:p,answer:d(e.answer),partial:!a,...typeof n?.messageId=="string"?{messageId:d(n.messageId)}:typeof n?.answerId=="string"?{messageId:d(n.answerId)}:{},...e.question?{question:e.question}:{},...e.error?{error:d(e.error)}:{},...e.streamId?{streamId:d(e.streamId)}:{},...r?{servedBy:de(r)}:{},...o?{usage:{...o,...i!==void 0?{rounds:i}:{}}}:{},...i!==void 0?{rounds:i}:{},...s?{exitReason:s}:{},...c?.length?{files:de(c)}:{}}}function I(t,e){return typeof t=="string"?d(t).slice(0,e):""}function Jn(t){return typeof t.message=="string"?d(t.message).slice(0,2e3):"Oracle turn failed."}function Q(t){return d(t instanceof Error?t.message:String(t)).slice(0,2e3)}function Yn(t){let e=t.question;if(!e||typeof e!="object")throw new f("Oracle question event omitted its question card.",m.API_ERROR);return Aa(e)}function Ke(t){let e=t&&typeof t=="object"&&!Array.isArray(t)?t:{};if(typeof e.fileId!="string"||!e.fileId||typeof e.filename!="string"||!e.filename||typeof e.mediaType!="string"||!e.mediaType||typeof e.sizeBytes!="number"||!Number.isSafeInteger(e.sizeBytes)||e.sizeBytes<0)throw new f("Oracle generated-file event omitted safe file metadata.",m.API_ERROR);return{fileId:d(e.fileId),filename:d(e.filename),mediaType:d(e.mediaType),sizeBytes:e.sizeBytes,...typeof e.format=="string"?{format:d(e.format)}:{}}}function Ra(t,e){let n=Ke(e);t.some(r=>r.fileId===n.fileId)||t.push(n)}function Aa(t){let e=t;if(typeof e.id!="string"||!Array.isArray(e.questions))throw new f("Oracle returned an invalid question card.",m.API_ERROR);return{id:d(e.id),optional:e.optional===!0,questions:e.questions.map((n,r)=>{let o=n&&typeof n=="object"?n:{};if(typeof o.id!="string"||typeof o.header!="string"||typeof o.question!="string"||typeof o.multiSelect!="boolean"||!Array.isArray(o.options))throw new f(`Oracle question ${r+1} is invalid.`,m.API_ERROR);return{id:d(o.id),header:d(o.header),question:d(o.question),multiSelect:o.multiSelect,options:o.options.map(i=>{let s=i&&typeof i=="object"?i:{};if(typeof s.id!="string"||typeof s.label!="string"||typeof s.description!="string")throw new f("Oracle question option is invalid.",m.API_ERROR);return{id:d(s.id),label:d(s.label),description:d(s.description),...typeof s.recommended=="boolean"?{recommended:s.recommended}:{},...typeof s.confirms=="boolean"?{confirms:s.confirms}:{}}})}})}}function U(t){return typeof t=="number"&&Number.isFinite(t)?t:void 0}function Te(t){if(typeof t=="number"&&Number.isFinite(t))return{totalTokens:t};if(!t||typeof t!="object"||Array.isArray(t))return;let e=t,n=U(e.in)??U(e.input)??U(e.inputTokens),r=U(e.cacheRead),o=U(e.cacheWrite),i=n===void 0?void 0:n+(r??0)+(o??0),s=U(e.out)??U(e.output)??U(e.outputTokens),a=U(e.total)??U(e.totalTokens)??(i!==void 0||s!==void 0?(i??0)+(s??0):void 0);if(!(i===void 0&&s===void 0&&a===void 0))return{...i!==void 0?{inputTokens:i}:{},...r?{cachedInputTokens:r}:{},...s!==void 0?{outputTokens:s}:{},...a!==void 0?{totalTokens:a}:{}}}function He(t){if(t&&typeof t=="object"){let e=t;if(typeof e.accepted=="boolean")return e.accepted?"Oracle server accepted the cancellation request.":"Oracle server did not accept the cancellation request.";if(typeof e.cancelled=="boolean")return e.cancelled?"Oracle server cancelled the active turn.":"Oracle server did not cancel the active turn."}return"Oracle server acknowledged the cancellation request."}function wt(t,e){let n=e&&t&&(t.kind==="program"||t.kind==="initiative")?{kind:t.kind,id:t.id}:void 0;return{...!e&&t?{context:t}:{},...n?{sharedEntity:n}:{},visibility:e?"company":"private"}}async function yt(t,e){await To(t,e).catch(()=>{})}async function Qt(t,e,n,r){if(!n.length)return[];if(n.length>$o)throw new y(`Attach no more than ${$o} files per turn.`);let o=0,i=[];for(let a of n){let c=await va(a);if(!c.isFile())throw new y(`Attachment is not a file: ${a}`);if(c.size>_o)throw new y(`Attachment exceeds the 10 MiB per-file CLI limit: ${a}`);let p=await xa(a,_o);if(o+=p.byteLength,o>ba)throw new y("Attachments exceed the 20 MiB total CLI limit.");let l=Oa(a).replace(/[\u0000-\u001f\u007f/\\]/g,"_").slice(0,200)||"attachment",u=Ro(l)??"";if(!u)throw new y(`Unsupported attachment type: ${a}`);i.push({content:p,name:l,mediaType:u})}let s=[];for(let{content:a,name:c,mediaType:p}of i){await r(d(c),a.byteLength);let l=new ArrayBuffer(a.byteLength);new Uint8Array(l).set(a);let u=new File([l],c,{type:p});s.push(await t.upload(e,u))}return s}async function xa(t,e){let n=[],r=0;for await(let o of ya(t)){let i=Buffer.isBuffer(o)?o:Buffer.from(o);if(r+=i.byteLength,r>e)throw new y(`Attachment exceeds the ${N(e)} limit: ${t}`);n.push(i)}return Buffer.concat(n)}var vt=["\u280B","\u2819","\u2839","\u2838","\u283C","\u2834","\u2826","\u2827","\u2807","\u280F"],Sa=2e4,Ia=6,Ca={lookup:"Looking things up",quick_edit:"Making a quick edit",final_answer:"Composing the answer",follow_up:"Suggesting follow-ups"},Ta={max_rounds:"reached the step limit",max_tokens:"reached the output limit",token_budget:"reached the token budget",deadline:"ran out of time",interrupted:"interrupted",loop_detected:"stopped a repeating loop",cancelled:"cancelled"},Xt=class{constructor(e,n){this.startedAt=e;this.sessionId=n;this.lastSignalAt=e}phase="sending";answer="";tools=[];notices=[];files=[];lastSignalAt;endedAt;end;done;upload;round;maxRounds;serverPhase;agents=new Map;toolIds=new Set;get toolCount(){return this.tools.length}get failedCount(){return this.tools.filter(e=>e.status==="failed").length}get finished(){return this.end!==void 0}setUploading(e,n,r){this.phase="uploading",this.upload=`${e} (${N(n)})`,this.lastSignalAt=r}setPhase(e,n){this.phase=e,this.lastSignalAt=n}touch(e){this.lastSignalAt=e}apply(e,n){if(this.lastSignalAt=n,this.phase==="cancelling")return this.record(e);switch(e.type){case"stream_start":case"thinking":this.phase!=="finishing"&&(this.phase="thinking");break;case"round_start":this.round=U(e.round),this.maxRounds=U(e.maxRounds)??this.maxRounds;for(let r=this.tools.length-1;r>=0;r--)this.tools[r]?.started&&this.tools.splice(r,1);this.phase!=="finishing"&&(this.phase="thinking");break;case"phase":this.serverPhase=typeof e.phase=="string"?e.phase:void 0;break;case"delta":this.phase!=="finishing"&&(this.phase="writing");break;case"tool_result":this.phase!=="finishing"&&(this.phase="thinking");break;case"finalizing":this.phase="finishing";break}this.record(e)}record(e){switch(e.type){case"delta":typeof e.content=="string"&&(this.answer+=e.content);break;case"tool_call_start":case"tool_call":this.recordToolCall(e);break;case"tool_result":{let n=this.tools.find(r=>r.id!==void 0&&r.id===e.toolUseId);n&&(n.status=e.ok===!1?"failed":"ok");break}case"subagent_start":typeof e.spawnId=="string"&&this.agents.set(e.spawnId,"running");break;case"subagent_done":typeof e.spawnId=="string"&&this.agents.set(e.spawnId,"done");break;case"warning":this.notices.push({tone:"warning",text:`Warning: ${I(e.message,500)}`});break;case"navigator_file_error":this.notices.push({tone:"warning",text:`Could not generate ${I(e.filename,200)}: ${I(e.error,500)}`});break;case"attachment_notice":if(Array.isArray(e.notices))for(let n of e.notices){let r=n&&typeof n=="object"?n:{};this.notices.push({tone:"warning",text:`${I(r.name,160)}: ${I(r.message,500)}`})}break;case"provider_fallback":{let n=I(e.from,120),r=I(e.to,120),o=I(e.reason,40).replaceAll("_"," ");this.notices.push({tone:"info",text:`Switched model${n?` from ${n}`:""}${r?` to ${r}`:""}${o?` (${o})`:""}.`});break}case"navigator_file_created":{let n=Ke(e.file);if(this.files.some(r=>r.fileId===n.fileId))break;this.files.push(n),this.notices.push({tone:"info",text:`Generated ${n.filename} (${N(n.sizeBytes)}). Download: anyforge oracle download ${this.sessionId} ${n.fileId} --output .`});break}case"error":this.notices.push({tone:"error",text:Jn(e)});break;case"done":this.done=e;break}}recordToolCall(e){let n=typeof e.id=="string"?e.id:void 0,r=Kn(e,this.toolIds),o=typeof e.name=="string"?e.name:"";if(Me(o))return;let i=I(typeof e.label=="string"?e.label:Gt(o),120)||"tool",s=n?this.tools.find(c=>c.id===n):void 0;if(s){s.label=i,e.type==="tool_call"&&delete s.started;return}let a={label:i,status:"running",...n?{id:n}:{},...typeof e.spawnId=="string"?{spawnId:e.spawnId}:{},...e.type==="tool_call_start"?{started:!0}:{}};r&&this.answer.trim()&&(a.note=d(this.answer.trim()),this.answer=""),this.tools.push(a),this.phase!=="finishing"&&(this.phase="thinking")}note(e,n){this.notices.push({tone:e,text:d(n)})}finish(e,n){this.end=e,this.endedAt=n}label(){if(this.phase==="cancelling")return"Cancelling";if(this.phase==="uploading")return`Uploading ${this.upload??"attachment"}`;if(this.phase==="sending")return"Sending";if(this.phase==="preparing")return"Preparing context";if(this.phase==="finishing")return"Finishing up";let e=[...this.agents.values()].filter(r=>r==="running").length;if(e)return`Researching (${e} agent${e===1?"":"s"})`;let n=this.tools.filter(r=>r.status==="running"&&!r.spawnId);return n.length===1?`Running ${n[0]?.label}`:n.length>1?`Running ${n.length} tools`:this.phase==="writing"?"Writing":this.serverPhase&&Ca[this.serverPhase]||"Thinking"}statusLine(e,n){let r=[this.label(),Mn(e-this.startedAt)];this.round&&r.push(this.maxRounds?`step ${this.round}/${this.maxRounds}`:`step ${this.round}`);let o=e-this.lastSignalAt;return o>=Sa&&this.phase!=="cancelling"&&r.push(`no update for ${Mn(o)}`),n&&e-this.startedAt>=n*.9&&this.phase!=="finishing"&&r.push("wrapping up"),r.join(" \xB7 ")}summaryLine(){let e=[],n=lt((this.endedAt??this.startedAt)-this.startedAt),r=typeof this.done?.exitReason=="string"?this.done.exitReason:void 0,o;this.end==="complete"?o=No("\u2713"):this.end==="awaiting_input"?o=Fo("?")+" Waiting for your answer":this.end==="cancelled"?o=Vn("\u2717")+" Interrupted":this.end==="error"?o=Qn("\u2717")+" Error":o=Vn("\u2717")+` Stopped: ${r&&Ta[r]||"no final answer"}`,e.push(n),this.tools.length&&e.push(`${this.tools.length} tool${this.tools.length===1?"":"s"}`);let i=Te(this.done?.tokens);(i?.inputTokens!==void 0||i?.outputTokens!==void 0)&&e.push(`${ee(i.inputTokens??0)} in${i.cachedInputTokens?` (${ee(i.cachedInputTokens)} cached)`:""} / ${ee(i.outputTokens??0)} out`);let s=Ot(this.done?.servedBy);return s&&e.push(s),`${o} ${Je(e.join(" \xB7 "))}`}};function Ot(t){if(!t||typeof t!="object")return"";let e=t,n=I(e.model??e.id,100);if(!n)return"";let r=e.fallback&&typeof e.fallback=="object"?e.fallback:void 0;if(r&&typeof r.from=="string"){let o=typeof r.reason=="string"?`: ${I(r.reason,40).replaceAll("_"," ")}`:"";return`${n} (fallback from ${I(r.from,100)}${o})`}return n}var Zt=class{constructor(e,n){this.activity=e;this.view=n}answer=new Ue("");getText(){return this.answer.getText()}invalidate(){this.answer.invalidate()}render(e){let n=this.activity;this.answer.setText(n.answer);let r=[ft("assistant")];r.push(...this.renderTools(e)),r.push(...this.answer.render(e));for(let o of n.notices){let i=o.tone==="error"?Qn:o.tone==="warning"?Vn:Je;r.push(...Lo(i(o.text),e))}return n.finished&&r.push(Vt(n.summaryLine(),e)),r}renderTools(e){let{tools:n}=this.activity;if(!n.length)return[];if(this.activity.finished&&!this.view.expanded()){let s=this.activity.failedCount,a=`Used ${n.length} tool${n.length===1?"":"s"}${s?` \xB7 ${s} failed`:""} (ctrl+o to expand)`;return[Vt(Je(` \u23BF ${a}`),e)]}let r=this.activity.finished?n:n.slice(-Ia),o=n.length-r.length,i=[];return o&&i.push(Vt(Je(` \u23BF \u2026 ${o} earlier tool${o===1?"":"s"}`),e)),r.forEach((s,a)=>{if(s.note)for(let u of Lo(s.note,Math.max(10,e-4)).slice(0,3))i.push(` ${Je(ka(u))}`);let c=s.status==="running"?Fo(vt[this.view.frame()%vt.length]??"*"):s.status==="ok"?No("\u2713"):Qn("\u2717"),p=a===0&&!o?" \u23BF ":" ",l=s.spawnId?` ${Je("agent \xB7")} `:"";i.push(Vt(`${p}${l}${c} ${s.label}`,e))}),i}};import{randomUUID as ja}from"node:crypto";import{stat as Da}from"node:fs/promises";import{basename as Wo}from"node:path";import{bold as Ba,cyan as Ko,dim as Ho,red as rn}from"kleur/colors";import{Container as Ga,Editor as za,ProcessTerminal as Wa,ScrollView as Ka,SelectList as Ha,TuiAltScreen as Ja,VStack as Ya,getNativeClipboard as Qa,matchesKey as on,truncateToWidth as Jo,wrapTextWithAnsi as Va}from"@earendil-works/pi-tui";import{truncateToWidth as Pa,visibleWidth as La,wrapTextWithAnsi as jo}from"@earendil-works/pi-tui";import{bold as Fa,cyan as Na,dim as ge}from"kleur/colors";import{CombinedAutocompleteProvider as Ea}from"@earendil-works/pi-tui";var bt=[{name:"help",description:"Show commands and keyboard shortcuts"},{name:"status",description:"Show session, access, model, usage and limits"},{name:"model",description:"Show the workspace model and the model that answered last"},{name:"usage",description:"Show turns and tokens used in this terminal"},{name:"new",args:"[shared]",description:"Start a new conversation",idleOnly:!0,completions:["shared"]},{name:"clear",description:"Clear the screen and start a new private conversation",idleOnly:!0},{name:"resume",args:"[session-id]",description:"Pick or open a saved conversation",idleOnly:!0},{name:"context",args:"[clear|program|initiative|codebase <id>]",description:"Show or change the context for the next message",completions:["clear","program ","initiative ","codebase "]},{name:"attach",args:"<path>",description:"Attach a file to your next message"},{name:"copy",description:"Copy the last answer as Markdown"},{name:"files",description:"List files Oracle generated in this conversation"},{name:"exit",description:"Leave the Oracle",aliases:["quit"]}],_a=[{name:"design",args:"[topic]",description:"Talk through a technical design before anything is created"},{name:"catchup",description:"Catch up on your work: what needs you, what landed, what is running"}];function qo(t){let e=new Set(bt.flatMap(n=>[n.name,...n.aliases??[]]));return(t??_a).filter(n=>!e.has(n.name))}function Mo(t,e){let n=/^\/([A-Za-z][\w-]*)(?:\s+([\s\S]*))?$/.exec(t.trim());if(!n)return null;let r=(n[1]??"").toLowerCase(),o=(n[2]??"").trim(),i=bt.find(a=>a.name===r||a.aliases?.includes(r));if(i)return{kind:"local",command:i,arg:o,args:o?o.split(/\s+/):[]};let s=e.find(a=>a.name===r);return s?{kind:"server",command:s}:{kind:"unknown",name:r}}function Uo(t,e){let n=[...bt.flatMap(i=>[i,...(i.aliases??[]).map(s=>({...i,name:s}))]).map(i=>({name:i.name,description:i.description,...i.args?{argumentHint:i.args}:{},...i.completions?{getArgumentCompletions:s=>$a(i.completions??[],s)}:{}})),...t.map(i=>({name:i.name,description:i.description,...i.args?{argumentHint:i.args}:{}}))],r=new Ea(n,e),o=/^\s*\/attach\s+/;return{async getSuggestions(i,s,a,c){let p=(i[s]??"").slice(0,a);return s!==0||!p.trimStart().startsWith("/")?null:o.test(p)?r.getSuggestions(i,s,a,{...c,force:!0}):r.getSuggestions(i,s,a,c)},applyCompletion(i,s,a,c,p){return r.applyCompletion(i,s,a,c,p)},shouldTriggerFileCompletion(i,s,a){return s===0&&o.test((i[s]??"").slice(0,a))}}}function $a(t,e){let n=t.filter(r=>r.startsWith(e.toLowerCase())&&r!==e).map(r=>({value:r,label:r.trim()}));return n.length?n:null}function en(t,e){return t?e?"write + approve":"write":"read only"}function Ye(t){return t?`${t.kind} ${d(t.id)}`:"no context"}function Do(t,e){let n=[`${Fa(Na("AnyForge Oracle"))}${ge(` \xB7 v${d(t.version)}`)}`,`${ue(t.session)} \xB7 ${t.access} \xB7 ${Ye(t.context)}`,...t.session.messages.length?[`Resumed: ${d(t.session.title)}`]:[],ge("Only your messages and the files you attach leave this terminal."),ge("/help commands \xB7 /status details")];if(e<24)return n.flatMap(s=>jo(s,Math.max(1,e)));let r=Math.min(e,76),o=r-4,i=[ge(`\u256D${"\u2500".repeat(r-2)}\u256E`)];for(let s of n.flatMap(a=>jo(a,o))){let a=Pa(s,o);i.push(`${ge("\u2502")} ${a}${" ".repeat(Math.max(0,o-La(a)))} ${ge("\u2502")}`)}return i.push(ge(`\u2570${"\u2500".repeat(r-2)}\u256F`)),i}function Bo(t){let e=(r,o)=>r?`${ge(r)} ${o}`:o,n=[{title:"Commands",rows:bt.map(r=>[`/${r.name}`,e(r.args,r.aliases?.length?`${r.description} (also /${r.aliases.join(", /")})`:r.description)])}];if(t.server.length){let r=t.server.map(o=>[`/${o.name}`,e(o.args,d(o.description))]);t.server.some(o=>o.name==="catchup")&&!t.canApprove&&r.push(["",ge("Acting on /catchup decisions needs a session started with `anyforge oracle --write --approve`.")]),n.push({title:"Workspace commands (answered by Oracle)",rows:r})}return n.push({title:"Keys",rows:[["Enter","Send. While Oracle works, queues one message for when it finishes"],["Shift+Enter","New line (Ctrl+J also works)"],["Esc","Interrupt the current answer"],["Ctrl+C","Interrupt the answer, or clear the input; press twice to exit"],["Ctrl+D","Exit when the input is empty"],["Ctrl+O","Show or hide tool activity for finished answers"],["Ctrl+Shift+F","Search the conversation"],["Up / Down","Recall messages sent in this terminal"],["Tab","Complete a command, or a file path after /attach"],["PgUp / PgDn","Scroll; Home and End jump to the top and bottom"]]}),n}function Xn(t){let n=[["Model",`workspace default ${t.model?`${d(t.model.provider)}/${d(t.model.id)}`:"chosen by the server"}`]],r=Ot(t.lastServedBy);if(r){let o=t.lastServedBy,i=I(o.routing,40).replaceAll("_"," ");n.push(["Last answer",`${r}${i?` \xB7 ${i}`:""}`])}return n}function Zn(t){return[["This run",t.turns?`${t.turns} turn${t.turns===1?"":"s"} \xB7 ${t.tools} tool${t.tools===1?"":"s"} \xB7 ${ee(t.inputTokens)} in / ${ee(t.outputTokens)} out tokens`:"no turns yet"]]}function er(t){if(!t?.finished)return[];let e=[lt((t.endedAt??t.startedAt)-t.startedAt)];e.push(`${t.toolCount} tool${t.toolCount===1?"":"s"}${t.failedCount?` (${t.failedCount} failed)`:""}`);let n=U(t.done?.rounds);n!==void 0&&e.push(`${n} round${n===1?"":"s"}`);let r=Te(t.done?.tokens);(r?.inputTokens!==void 0||r?.outputTokens!==void 0)&&e.push(`${ee(r.inputTokens??0)} in${r.cachedInputTokens?` (${ee(r.cachedInputTokens)} cached)`:""} / ${ee(r.outputTokens??0)} out tokens`);let o=I(t.done?.exitReason,40);return e.push(o?o.replaceAll("_"," "):t.end??""),[["Last turn",e.filter(Boolean).join(" \xB7 ")]]}function Go(t){let e=t.capabilities?["read","write","approve"].filter(o=>t.capabilities?.[o]).join(", ")||"none":"not reported",n=t.contextText?` \xB7 note ${N(Buffer.byteLength(t.contextText,"utf8"))}`:"",r=mo(t.limits);return[["Session",`${t.session.sessionId} \xB7 ${d(t.session.title)||"Untitled"}`],["Audience",ue(t.session)],["Access",`this session ${en(t.write,t.approve)} \xB7 grant ${t.grantScopes.join(", ")||"none"} \xB7 workspace role ${e}`],["Context",`${Ye(t.context)}${n}`],...Xn(t),...er(t.lastTurn),...Zn(t.totals),["Limits",r.length?r.join(" \xB7 "):"not reported"],...t.identity?[["Workspace",`company ${t.identity.companyId} \xB7 user ${t.identity.uid}`]]:[],["Endpoint",t.endpoint],["Version",`CLI ${d(t.version)} \xB7 protocol ${1}`],["Attached",t.pendingFiles.length?`${t.pendingFiles.map(d).join(", ")} (uploads with your next message)`:"nothing waiting"]]}function zo(t,e){return e.length?e.map((n,r)=>[`${r+1}.`,`${d(n.filename)} (${N(n.sizeBytes)}) \xB7 anyforge oracle download ${t} ${d(n.fileId)} --output .`]):[["Files","Oracle has not generated files in this conversation."]]}import{bold as qa,cyan as tr,dim as tn,yellow as Ma}from"kleur/colors";import{Input as Ua,Text as Ee,matchesKey as Qe}from"@earendil-works/pi-tui";var nn=class{constructor(e,n,r){this.tui=e;this.question=n;this.onComplete=r;(n.questions[0]?.options.length??0)===0&&(this.mode="custom"),this.customInput.onSubmit=o=>{let i=o.trim().slice(0,8e3);if(!i){this.errorMessage="Enter a short answer before continuing.",this.tui.requestRender();return}this.recordCurrent(i)},this.customInput.onEscape=()=>{if(!this.question.questions[this.questionIndex]?.options.length){this.question.optional?this.finish(null):this.requireAnswer();return}this.customInput.setValue(""),this.mode="select",this.tui.setFocus(this),this.tui.requestRender()}}focused=!1;questionIndex=0;optionIndex=0;mode="select";errorMessage="";selected=new Map;answers=[];customInput=new Ua({prompt:`${tr("Your answer: ")} `,placeholder:"Write a short answer and press Enter",placeholderStyle:tn});invalidate(){}render(e){let n=this.question.questions[this.questionIndex];if(!n)return[];this.customInput.focused=this.focused&&this.mode==="custom";let r=Math.max(12,e-2),o=this.question.questions.length>1?` \xB7 ${this.questionIndex+1}/${this.question.questions.length}`:"",i=[...new Ee(`${qa(tr(d(n.header)))}${tn(o)}`,0,0).render(r),...new Ee(d(n.question),0,0).render(r),...this.renderOptions(n,r)];return this.mode==="custom"?(i.push(...this.customInput.render(r)),i.push(...new Ee(tn(`Enter submits your text${n.options.length?" \xB7 Esc back to the choices":this.question.optional?" \xB7 Esc skip":""}`),0,0).render(r))):i.push(...new Ee(tn(this.instructions(n)),0,0).render(r)),this.errorMessage&&i.push(...new Ee(Ma(this.errorMessage),0,0).render(r)),i.map(s=>`${tr("\u2502")} ${s}`)}handleInput(e){if(this.mode==="custom"){this.customInput.handleInput(e);return}let n=this.question.questions[this.questionIndex];if(!n)return;let r=this.selectedFor(n);if(n.options.length===0){if(e.toLowerCase()==="s"&&this.question.optional){this.finish(null);return}if(Qe(e,"escape")){this.question.optional?this.finish(null):this.requireAnswer();return}this.customInput.handleInput(e);return}if(Qe(e,"up")){this.optionIndex=Math.max(0,this.optionIndex-1),this.errorMessage="",this.tui.requestRender();return}if(Qe(e,"down")){this.optionIndex=Math.min(n.options.length-1,this.optionIndex+1),this.errorMessage="",this.tui.requestRender();return}if(Qe(e,"escape")){this.question.optional?this.finish(null):this.requireAnswer();return}if(e.toLowerCase()==="s"&&this.question.optional){this.finish(null);return}if(e.toLowerCase()==="o"){this.mode="custom",this.tui.setFocus(this),this.tui.requestRender();return}let o=Number(e);if(Number.isInteger(o)&&o>=1&&o<=n.options.length){let i=n.options[o-1]?.id;i&&(this.optionIndex=o-1,n.multiSelect?r.has(i)?r.delete(i):r.add(i):(r.clear(),r.add(i)),this.tui.requestRender());return}if(Qe(e,"space")&&n.multiSelect){let i=n.options[this.optionIndex];i&&(r.has(i.id)?r.delete(i.id):r.add(i.id),this.tui.requestRender());return}if(Qe(e,"enter")){if(r.size===0){this.errorMessage="Select an option explicitly, type a custom answer, or skip if optional.",this.tui.requestRender();return}this.recordCurrent()}}renderOptions(e,n){let r=this.selectedFor(e),o=[];return e.options.forEach((i,s)=>{let a=r.has(i.id),c=e.multiSelect?a?"[x]":"[ ]":a?"(x)":"( )",p=s===this.optionIndex?"\u203A":" ",l=i.recommended?" \xB7 recommended":"",u=i.confirms?" \xB7 confirms the shown action":"",v=`${p} ${s+1}. ${c} ${d(i.label)}${l}${u}`;o.push(...new Ee(v,0,0).render(n)),o.push(...new Ee(` ${d(i.description)}`,0,0).render(n))}),o}instructions(e){return e.options.length===0?`Write a short answer${this.question.optional?" \xB7 s or Esc skip card":""}`:`\u2191/\u2193 move \xB7 1\u2013${e.options.length} ${e.multiSelect?"toggle":"select"}${e.multiSelect?" \xB7 Space toggle":""} \xB7 Enter continue \xB7 o write your own${this.question.optional?" \xB7 s or Esc skip card":""}`}requireAnswer(){let e=this.question.questions[this.questionIndex];this.errorMessage=e?.options.length?"Oracle needs an answer to continue: pick an option, or press o to write your own.":"Oracle needs an answer to continue: type it and press Enter.",this.tui.requestRender()}selectedFor(e){let n=this.selected.get(e.id);return n||(n=new Set,this.selected.set(e.id,n)),n}recordCurrent(e){let n=this.question.questions[this.questionIndex];if(!n)return;e&&this.selectedFor(n).clear();let r=[...this.selectedFor(n)],o={questionId:n.id,optionIds:r,...e?{customText:e}:{}},i=this.answers.findIndex(s=>s.questionId===n.id);if(i>=0?this.answers.splice(i,1,o):this.answers.push(o),this.customInput.setValue(""),this.mode="select",this.questionIndex<this.question.questions.length-1){this.questionIndex+=1,this.optionIndex=0,this.mode=this.question.questions[this.questionIndex]?.options.length===0?"custom":"select",this.errorMessage="",this.tui.setFocus(this),this.tui.requestRender();return}this.finish({questionId:this.question.id,answers:this.answers.map(s=>({...s}))})}finish(e){this.onComplete(e)}};var Yo=1500,Xa=100,Za="\x1B]133;A\x07";function Ve(t){return{render:t,invalidate(){}}}function Qo(t,e,n){let r=new Ue(e);return{getText:()=>r.getText(),invalidate:()=>r.invalidate(),render:o=>t==="user"?["",`${Za}${ft("user",n)}`,...r.render(o)]:[ft("assistant"),...r.render(o)]}}async function Vo(t){let{client:e,config:n}=t,r=new Wa,o=new Ja(r,void 0,void 0,{scrollToEndIndicator:()=>" more below \xB7 End to jump "}),i=new Ga,s=new Ka(i,{follow:"end",primary:!0,overscroll:"chain"}),a=new za(o,vo),c=qo(n.commands),p=typeof n.limits?.turnSoftMs=="number"?n.limits.turnSoftMs:void 0,l=t.session,u=t.initialContext,v=t.contextText,k=t.canWrite,x=t.canApprove,b,O,R,V,K=[...t.initialFiles],ae=!1,ln=!1,kt=!1,dn=0,_e,lr=0,Ae="",St,un,$e=[],Pe={turns:0,inputTokens:0,outputTokens:0,tools:0},It=new Map,ce,hi=Ve(g=>{if(b){let w=Ko(vt[dn%vt.length]??"*");return[Jo(`${w} ${b.activity.statusLine(Date.now(),p)}`,g)]}return ce?[Jo(`${Ko("?")} Waiting for your answer to the question above`,g)]:[]}),wi=Ve(g=>{let w=[en(k,x),Ye(u),Oo(l),K.length?`${K.length} file${K.length===1?"":"s"} attached`:"",O!==void 0?"1 message queued":""];return[Ho(ho(g,w,b?"esc to interrupt":"/help \xB7 /status"))]});o.setLayoutRoot(new Ya([{component:s,basis:0,grow:1,minSize:1},{component:hi,basis:"auto",shrink:0},{component:a,basis:"auto",shrink:0,minSize:2},{component:wi,basis:"auto",shrink:0,minSize:1}]));let Y=()=>o.requestRender(),F=g=>o.flash(d(g),3e3),we=g=>{i.addChild(g),Y()},te=(g,w=Ho)=>{let h=d(g);we(Ve(A=>Va(w(h),Math.max(1,A))))},Ct=(g,w)=>{we(Ve(h=>["",...go(g,w,h)]))},yi=()=>{_e||(_e=setInterval(()=>{dn+=1,Y()},Xa),_e.unref())},pn=()=>{_e&&clearInterval(_e),_e=void 0},Xe=()=>{ae||o.hasOverlay()||o.setFocus(ce??a)},dr=g=>{R=g;let w=It.get(g.id);w&&i.removeChild(w);let h=new nn(o,g,A=>{It.delete(g.id),ce===h&&(ce=void 0),i.removeChild(h),bi(A??{questionId:g.id,skipped:!0,answers:[]}),Xe()});It.set(g.id,h),ce=h,we(h)},fn=g=>{i.clear(),It.clear(),ce=void 0,l=g,R=void 0,V=void 0,$e=[],Ae="";let w={version:t.version,session:g,access:en(k,x),context:u};we(Ve(A=>Do(w,A)));let h;for(let A of g.messages){we(Qo(A.role,A.content,A.authorName)),A.role==="assistant"&&(Ae=A.content),A.question&&(h=A.question),A.questionResponse&&(te("A stored response was recorded for this question."),h?.id===A.questionResponse.questionId&&(h=void 0));for(let S of A.files??[])$e.some(q=>q.fileId===S.fileId)||$e.push(S),te(`File: ${S.filename} (${S.mediaType}, ${N(S.sizeBytes)}) \xB7 anyforge oracle download ${g.sessionId} ${S.fileId} --output .`)}h&&dr(h),Xe(),yt(g.sessionId,e.endpoint)},ur,vi=new Promise(g=>{ur=g}),Tt=()=>{ae||(ae=!0,pn(),b?.controller.abort(new Error("Detached from the active Oracle stream.")),o.stop(),ur())},mn=async()=>{let g=b;if(!g||g.cancelling)return;g.cancelling=!0,g.activity.setPhase("cancelling",Date.now()),Y();let{streamId:w,requestId:h}=g;g.controller.abort(new Error("Turn cancelled by user."));let A;if(w)try{A=He(await e.cancelTurn(l.sessionId,w))}catch(S){A=`Could not confirm server cancellation: ${Q(S)}`}else if(h)try{A=He(await e.cancelRequest(l.sessionId,h))}catch(S){A=`Could not confirm server cancellation by request id: ${Q(S)}`}else A="The turn had not reached the server; nothing was sent.";g.activity.note("info",A),Y()},Le=async g=>{if(b||ae)return;if(g.kind==="submit"&&g.response){let _=R;if(!_||_.id!==g.response.questionId){F("That question is no longer active. Resume the session to refresh it.");return}te(ec(_,g.response)),R=void 0}else g.kind==="submit"&&we(Qo("user",g.text));let w=l.sessionId,h=new Xt(Date.now(),w),A=new Zt(h,{expanded:()=>kt,frame:()=>dn}),S={activity:h,view:A,controller:new AbortController,cancelling:!1};b=S,we(A),yi();let q=new Ce,hr=_=>{h.apply(_,Date.now()),_.type==="question"&&(dr(Yn(_)),Xe()),Y()},wr={onEvent:hr,onStream:_=>{S.streamId=_},onResponse:()=>{h.phase==="sending"&&h.setPhase("preparing",Date.now())},onActivity:()=>h.touch(Date.now())},ye="error";try{if(g.kind==="replay"){q.streamId=g.streamId,S.streamId=g.streamId,h.setPhase("thinking",Date.now());let _=await Hn(e,w,q,async ne=>{q.accept(ne)&&hr(ne)},S.controller.signal,wr.onActivity);ye=ht(w,_).status}else{let _=g.response?[]:K.splice(0),ne=await Qt(e,w,_,(gn,Ti)=>{h.setUploading(gn,Ti,Date.now()),Y()});S.controller.signal.throwIfAborted(),h.setPhase("sending",Date.now());let Et=ja();S.requestId=Et;let Ii={requestId:Et,text:g.response?"":g.text,readOnly:!k,...x?{allowApprove:!0}:{},...u?{context:u}:{},...v?{contextText:v}:{},...g.response?{questionResponse:g.response}:{},...ne.length?{attachments:ne.map(gn=>({fileId:gn.fileId}))}:{}},Ci=await Yt(e,w,Ii,wr,S.controller.signal,q);ye=ht(w,Ci).status}}catch(_){if(S.controller.signal.aborted)ye="cancelled";else{ye="error";let ne=_ instanceof f&&_.hint?` ${d(_.hint)}`:"";h.note("error",`${Q(_)}${ne}`)}}finally{h.finish(ye,Date.now()),b=void 0,pn(),ae||(ln=ye==="cancelled"),St=h,h.answer.trim()&&(Ae=h.answer),h.done?.servedBy&&(un=h.done.servedBy);let _=Te(h.done?.tokens);Pe.turns+=1,Pe.tools+=h.toolCount,Pe.inputTokens+=_?.inputTokens??0,Pe.outputTokens+=_?.outputTokens??0;for(let ne of h.files)$e.some(Et=>Et.fileId===ne.fileId)||$e.push(ne);Y()}if(!ae){if(S.streamId&&ye!=="cancelled"){let _=await e.getSession(w).catch(()=>{});_&&_.sessionId===l.sessionId&&(l=_)}Oi(ye)}},Oi=g=>{if(!(ae||b)){if(V){let w=V;V=void 0,Le({kind:"submit",text:"",response:w});return}if(O!==void 0){let w=O;if(O=void 0,g==="complete"&&!ce){Le({kind:"submit",text:w});return}a.getText()||a.setText(w),F("Your queued message is back in the input; press Enter to send it.")}Xe(),Y()}},bi=g=>{if(b){V=g,F("Answer saved; Oracle continues once the current turn settles.");return}Le({kind:"submit",text:"",response:g})},pr=async g=>{try{let w=await e.getSession(g);fn(w),w.activeStreamId&&Le({kind:"replay",streamId:w.activeStreamId}),F(`Resumed ${w.title||w.sessionId}.`)}catch(w){te(Q(w),rn)}},Ri=async()=>{try{let g=await e.listSessions();if(!g.length){F("No saved conversations to resume.");return}let w=new Ha(g.map(q=>({value:q.sessionId,label:q.title,description:ue(q)})),Math.min(12,g.length),pt),h=await Ht(e.endpoint),A=h?g.findIndex(q=>q.sessionId===h):-1;A>=0&&w.setSelectedIndex(A);let S=o.showOverlay(w,{width:"85%",maxHeight:"80%",anchor:"center"});w.onSelect=q=>{S.hide(),pr(q.value)},w.onCancel=()=>{S.hide(),Xe()},S.focus()}catch(g){te(Q(g),rn)}},fr=async g=>{if(g&&(!u||u.kind!=="program"&&u.kind!=="initiative")){F("Use /context program <id> or /context initiative <id> before /new shared.");return}try{let w=await e.createSession(wt(u,g));fn(w),F(`Started a new conversation \xB7 ${ue(w)}.`)}catch(w){te(Q(w),rn)}},Ai=()=>({session:l,write:k,approve:x,grantScopes:[...e.scopes],...n.capabilities?{capabilities:n.capabilities}:{},...u?{context:u}:{},...v?{contextText:v}:{},...n.model?{model:n.model}:{},lastServedBy:un,...St?{lastTurn:St}:{},totals:{...Pe},...n.limits?{limits:n.limits}:{},...n.identity?{identity:n.identity}:{},endpoint:e.endpoint,version:t.version,pendingFiles:K.map(g=>Wo(g))}),xi=async()=>{if(!Ae.trim()){F("There is no answer to copy yet.");return}try{let g=Qa();g?.setText?await g.setText(Ae):r.write(`\x1B]52;c;${Buffer.from(Ae,"utf8").toString("base64")}\x07`),F(`Copied the last answer (${Ae.length} characters).`)}catch(g){F(`Could not copy: ${Q(g)}`)}},ki=async(g,w,h)=>{if(g.idleOnly&&b){F(`Wait for Oracle to finish, or press Esc, before /${g.name}.`);return}switch(g.name){case"help":we(Ve(A=>["",...Bo({server:c,canApprove:x}).flatMap(S=>[Ba(S.title),...Un(S.rows,A)])]));return;case"status":Ct("Status",Go(Ai()));return;case"model":Ct("Model",Xn({...n.model?{model:n.model}:{},lastServedBy:un}));return;case"usage":Ct("Usage",[...er(St),...Zn(Pe)]);return;case"files":Ct("Generated files",zo(l.sessionId,$e));return;case"copy":await xi();return;case"exit":Tt();return;case"new":if(h&&h!=="shared"){F("Usage: /new or /new shared");return}await fr(h==="shared");return;case"clear":await fr(!1);return;case"resume":h?await pr(h):await Ri();return;case"context":{if(!h){te(`Context: ${Ye(u)}${v?" + free-text note":""}. Use /context <program|initiative|codebase> <id> or /context clear.`);return}if(h==="clear")u=void 0;else{let[A,S,...q]=w;if(!["program","initiative","codebase"].includes(A??"")||!S||q.length){F("Usage: /context program <id>, /context initiative <id>, /context codebase <id>, or /context clear");return}u={kind:A,id:S}}te(`Context for your next message: ${Ye(u)}.`);return}case"attach":{if(!h){F("Usage: /attach <file path>");return}let A=await Da(h).catch(()=>{});if(!A?.isFile()){F(`Not a readable file: ${h}`);return}K.push(h),te(`Attached ${Wo(h)} (${N(A.size)}). It uploads with your next message.`);return}}},mr=g=>{let w=g.trim();if(!w)return;a.addToHistory(w);let h=Mo(w,c);if(h?.kind==="local"){ki(h.command,h.args,h.arg).catch(A=>te(Q(A),rn));return}if(h?.kind==="unknown"){a.setText(w),F(`Unknown command /${h.name}. Type /help to see the commands.`);return}if(b){let A=O!==void 0;O=w,F(A?"Replaced your queued message. It sends when Oracle finishes.":"Queued. It sends when Oracle finishes; Esc interrupts instead."),Y();return}Le({kind:"submit",text:w})},Si=o.addInputListener(g=>{if(on(g,"ctrl+c")){if(b)return mn(),{consume:!0};if(o.hasOverlay())return;if(o.getFocusedComponent()===a&&a.getText())return a.setText(""),Y(),{consume:!0};let w=Date.now();return w-lr<=Yo?Tt():(lr=w,o.flash("Press Ctrl+C again to exit",Yo)),{consume:!0}}if(on(g,"escape")){let w=ce!==void 0&&o.getFocusedComponent()===ce;return b&&!a.isShowingAutocomplete()&&!o.hasOverlay()&&!w?(mn(),{consume:!0}):void 0}if(on(g,"ctrl+d"))return o.getFocusedComponent()===a&&!a.getText()?(Tt(),{consume:!0}):void 0;if(on(g,"ctrl+o"))return kt=!kt,F(kt?"Showing tool activity":"Hiding tool activity"),Y(),{consume:!0}}),gr=()=>{let g=!!b;mn().finally(()=>{g&&(ln=!0),Tt()})};process.on("SIGINT",gr),a.onSubmit=mr,a.onChange=()=>Y(),a.setAutocompleteProvider(Uo(c,process.cwd())),fn(t.session),o.start(),l.activeStreamId&&Le({kind:"replay",streamId:l.activeStreamId}),t.initialPrompt&&mr(t.initialPrompt),await vi,Si(),process.off("SIGINT",gr),pn(),b?.controller.abort(),await r.drainInput().catch(()=>{}),ln&&(process.exitCode=130)}function ec(t,e){if(e.skipped)return"Skipped the optional Oracle question.";let n=[];for(let r of e.answers){let o=t.questions.find(i=>i.id===r.questionId);for(let i of r.optionIds){let s=o?.options.find(a=>a.id===i);s&&n.push(s.label)}r.customText&&n.push(r.customText)}return`You answered: ${n.map(d).join("; ")||"no options selected"}`}import{createHash as tc,randomBytes as Xo,timingSafeEqual as nc}from"node:crypto";import{createServer as rc}from"node:http";import oc from"open";var ic=6e4,sc=5*6e4,sn=new Map;async function nr(t){let e=fe(t.endpoint),n=await ze(e),r=["read"];t.write&&r.push("write"),t.approve&&(r.includes("write")||r.push("write"),r.push("approve"));let o=Xo(32).toString("base64url"),i=await lc(o);try{let s={client_name:"AnyForge CLI",redirect_uris:[i.redirectUri],grant_types:["authorization_code","refresh_token"],response_types:["code"],token_endpoint_auth_method:"none"},a=await dc(n.oauth.registration,s);if(typeof a.client_id!="string"||!a.client_id)throw new f("OAuth registration did not return a client id.",m.API_ERROR);let c=Xo(32).toString("base64url"),p=tc("sha256").update(c).digest("base64url"),l={client_id:a.client_id,redirect_uri:i.redirectUri,response_type:"code",scope:r.join(" "),state:o,code_challenge:p,code_challenge_method:"S256",resource:n.resource},u=new URL(n.oauth.authorization);for(let[R,V]of Object.entries(l))u.searchParams.set(R,String(V));t.onAuthorizationUrl?.(u.toString());try{t.openBrowser?await t.openBrowser(u.toString()):await oc(u.toString())}catch{process.stderr.write(`Open this URL to authorize AnyForge Oracle:
266
+ ${u.toString()}
267
+ `)}let v=await i.wait();if(!ni(v.state,o))throw new f("Oracle sign-in callback state did not match; authorization was rejected.",m.API_ERROR);if(v.error)throw new f(`Oracle authorization failed: ${d(v.error)}${v.errorDescription?` (${d(v.errorDescription)})`:""}`,m.API_ERROR);if(!v.code)throw new f("Oracle authorization callback did not include a code.",m.API_ERROR);let k={client_id:a.client_id,grant_type:"authorization_code",code:v.code,redirect_uri:i.redirectUri,code_verifier:c,resource:n.resource},x=await ii(n.oauth.token,k);oi(x);let b=ri(x.scope);if(!b.includes("read")||b.some(R=>!r.includes(R)))throw await or(n.oauth.revocation,a.client_id,x.access_token,x.refresh_token).catch(()=>{}),new f("The granted Oracle scopes are invalid for this request.",m.API_ERROR);let O={version:1,endpoint:e,clientId:a.client_id,redirectUri:i.redirectUri,accessToken:x.access_token,refreshToken:x.refresh_token,expiresAt:Date.now()+x.expires_in*1e3,scopes:b};return await Jt(()=>zn(O)),O}finally{await i.close()}}async function ei(){let t=await Jt(async()=>{let e=await Kt();if(!e)return{hadCredentials:!1,revoked:!1,revokeFailure:void 0};try{let n=await ze(e.endpoint);return await or(n.oauth.revocation,e.clientId,e.accessToken,e.refreshToken),await We(),{hadCredentials:!0,revoked:!0,revokeFailure:void 0}}catch(n){return await We(),{hadCredentials:!0,revoked:!1,revokeFailure:n}}});if(t.hadCredentials&&!t.revoked)throw new f(`Local Oracle credentials were cleared, but server revocation failed: ${t.revokeFailure instanceof Error?d(t.revokeFailure.message):"unknown error"}`,m.FAILURE,"Run `anyforge oracle login` again if you still need access. The server will expire this access token automatically.");return{hadCredentials:t.hadCredentials,revoked:t.revoked}}async function ti(t){let e=t||process.env.ANYFORGE_ENDPOINT;if(process.env.ANYFORGE_API_TOKEN)return Zo(e);let n=await Kt();if(n&&(!e||fe(e)===n.endpoint)){let r=n.endpoint;return{endpoint:r,accessToken:n.accessToken,scopes:n.scopes.filter(rr),source:"oauth",getAccessToken:async o=>ac(r,o)}}try{return await Zo(e)}catch(r){throw n&&e&&fe(e)!==n.endpoint?new oe:r instanceof oe?new oe:r}}async function Zo(t){let e=await Fe(t),r=(await tt({apiKey:e.apiKey,endpoint:e.endpoint})).scopes.filter(rr);return{endpoint:e.endpoint,accessToken:e.apiKey,scopes:r,source:"control"}}async function ac(t,e){let n=fe(t),r=sn.get(n);if(r)return r;let o=Jt(()=>cc(n,e));sn.set(n,o);try{return await o}finally{sn.get(n)===o&&sn.delete(n)}}async function cc(t,e){let n=await Kt();if(!n||n.endpoint!==t)throw new oe;if(n.expiresAt>Date.now()+ic&&(!e||n.accessToken!==e))return n.accessToken;let r=await ze(n.endpoint),o;try{let s={client_id:n.clientId,grant_type:"refresh_token",refresh_token:n.refreshToken,resource:r.resource};o=await ii(r.oauth.token,s)}catch(s){throw s instanceof an&&["invalid_grant","invalid_client","invalid_target"].includes(s.code)?(await We(),new oe):s}oi(o);let i;try{i=ri(o.scope)}catch(s){throw await We(),s}if(i.some(s=>!n?.scopes.includes(s)))throw await or(r.oauth.revocation,n.clientId,o.access_token,o.refresh_token),await We(),new f("Oracle refresh attempted to widen the saved grant; credentials were cleared.",m.API_ERROR);return n={...n,accessToken:o.access_token,refreshToken:o.refresh_token,expiresAt:Date.now()+o.expires_in*1e3,scopes:i},await zn(n),n.accessToken}var an=class extends f{constructor(n,r,o){super(`OAuth ${n}: ${r}`,o===401?m.NO_CREDENTIALS:m.API_ERROR);this.code=n;this.name="OAuthResponseError"}};async function lc(t){let e,n,r=!1,o=new Promise((c,p)=>{e=c,n=p});o.catch(()=>{});let i=rc((c,p)=>{if((c.url?.length??0)>8192){p.writeHead(414,{"Content-Type":"text/plain; charset=utf-8"}).end("Authorization response is too large.");return}let l=c.url??"/";if(!l.startsWith("/callback")||l.startsWith("//")){p.writeHead(400,{"Content-Type":"text/plain; charset=utf-8"}).end("Authorization response path is invalid.");return}let u=new URL(l,"http://127.0.0.1");if(c.method!=="GET"||u.pathname!=="/callback"){p.writeHead(404,{"Content-Type":"text/plain; charset=utf-8"}).end("Not found");return}let v=u.searchParams.get("code")?.slice(0,2048)??"",k=u.searchParams.get("state")?.slice(0,256)??"",x=u.searchParams.get("error")?.slice(0,256)??void 0,b=u.searchParams.get("error_description")?.slice(0,1024)??void 0;if(!k){p.writeHead(400,{"Content-Type":"text/plain; charset=utf-8"}).end("Authorization response is missing state.");return}if(!ni(k,t)){p.writeHead(400,{"Content-Type":"text/plain; charset=utf-8"}).end("Authorization response state did not match.");return}if(r){p.writeHead(409,{"Content-Type":"text/plain; charset=utf-8"}).end("Authorization response already received.");return}r=!0,p.writeHead(200,{"Content-Type":"text/html; charset=utf-8","Cache-Control":"no-store","Referrer-Policy":"no-referrer","Content-Security-Policy":"default-src 'none'; style-src 'unsafe-inline'"}).end('<!doctype html><meta charset="utf-8"><title>AnyForge Oracle</title><p>Sign-in response received. You may close this tab.</p>'),e({code:v,state:k,...x?{error:x}:{},...b?{errorDescription:b}:{}})});await new Promise((c,p)=>{i.once("error",p),i.listen(0,"127.0.0.1",()=>{i.removeListener("error",p),c()})});let s=i.address();if(!s||typeof s=="string")throw new f("Could not bind an Oracle sign-in callback port.",m.FAILURE);let a=setTimeout(()=>{r||(r=!0,n(new f("Oracle sign-in timed out before the browser returned.",m.FAILURE)))},sc);return a.unref(),{redirectUri:`http://127.0.0.1:${s.port}/callback`,wait:()=>o,close:async()=>{clearTimeout(a),i.listening&&(i.closeAllConnections(),await new Promise(c=>i.close(()=>c())))}}}function ni(t,e){let n=Buffer.from(t),r=Buffer.from(e);return n.length===r.length&&nc(n,r)}function ri(t){let e=t.split(/[\s+]+/).filter(Boolean);if(!e.every(rr))throw new f("OAuth server returned an unknown Oracle scope.",m.API_ERROR);let n=[...new Set(e)];if(!n.includes("read"))throw new f("Oracle OAuth grant is missing the required read scope.",m.API_ERROR);return n}function rr(t){return t==="read"||t==="write"||t==="approve"}function oi(t){if(!t||typeof t.access_token!="string"||!t.access_token||typeof t.refresh_token!="string"||!t.refresh_token||typeof t.token_type!="string"||t.token_type.toLowerCase()!=="bearer"||typeof t.expires_in!="number"||!Number.isFinite(t.expires_in)||t.expires_in<=0||typeof t.scope!="string")throw new f("OAuth token response did not match the supported format.",m.API_ERROR)}async function dc(t,e){return si(t,{method:"POST",headers:{"Content-Type":"application/json",Accept:"application/json"},body:JSON.stringify(e)})}async function ii(t,e){return si(t,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded",Accept:"application/json"},body:new URLSearchParams(Object.entries(e).map(([n,r])=>[n,String(r)])).toString()})}async function si(t,e){let n;try{n=await fetch(t,{...e,redirect:"error",signal:AbortSignal.timeout(2e4)})}catch(o){throw new f(`OAuth request failed: ${d(o instanceof Error?o.message:String(o))}`,m.FAILURE)}let r=null;try{r=await n.json()}catch{}if(!n.ok){let o=r&&typeof r=="object"?r:{},i=typeof o.error=="string"?o.error:`http_${n.status}`,s=typeof o.error_description=="string"?d(o.error_description):i;throw new an(i,s,n.status)}if(!r||typeof r!="object"||Array.isArray(r))throw new f(`OAuth endpoint returned invalid JSON (${n.status}).`,m.API_ERROR);return r}async function or(t,e,n,r){let o=async i=>{let s=await fetch(t,{method:"POST",redirect:"error",signal:AbortSignal.timeout(2e4),headers:{"Content-Type":"application/x-www-form-urlencoded",Accept:"application/json"},body:new URLSearchParams({client_id:e,token:i}).toString()});if(!s.ok){let a=`HTTP ${s.status}`;try{let c=await s.json();typeof c.error_description=="string"&&(a=d(c.error_description))}catch{}throw new f(`OAuth token revocation failed: ${a}`,m.API_ERROR)}};await o(r),n!==r&&await o(n)}var kc=1048576,Sc=25*1048576;async function pi(t){let[e,...n]=t.positional,r=["exec","sessions","resume","login","logout","download"].includes(e??""),o=r?void 0:t.positional.join(" ");if(j(t.flags,"read-only")&&(j(t.flags,"write")||j(t.flags,"approve")))throw new y("--read-only cannot be combined with --write or --approve.");if(!r&&(!process.stdin.isTTY||!process.stdout.isTTY))throw new y("Interactive Oracle needs a terminal.",'Use `anyforge oracle exec "your question"` for scripts and pipes.');if(e==="login"){if(n.length)throw new y("oracle login does not accept positional arguments.");let k=await nr({endpoint:t.endpointOverride??t.endpoint,write:j(t.flags,"write"),approve:j(t.flags,"approve")}),x=k.scopes.join(", "),O=[j(t.flags,"write")?"write":void 0,j(t.flags,"approve")?"approve":void 0].filter(R=>!!R).filter(R=>!k.scopes.includes(R));process.stdout.write(`Connected to ${k.endpoint} with scopes: ${x}.
268
+ `),O.length&&process.stderr.write(`This account was granted read only; the server withheld: ${O.join(", ")}.
269
+ `);return}if(e==="logout"){if(n.length)throw new y("oracle logout does not accept positional arguments.");let k=await ei();process.stdout.write(k.hadCredentials?`Oracle credentials cleared and revoked.
270
270
  `:`No saved Oracle credentials.
271
- `);return}let i;try{i=await eo(e.endpointOverride)}catch(h){if(!r&&h instanceof u&&h.exitCode===p.NO_CREDENTIALS&&process.stdin.isTTY&&process.stdout.isTTY){let k=(await import("prompts")).default;if((await k({type:"confirm",name:"login",message:"Sign in to AnyForge Oracle now?",initial:!0})).login!==!0)throw h;let v=await pn({endpoint:e.endpointOverride??e.endpoint});process.stderr.write(`Connected to ${v.endpoint} with scopes: ${v.scopes.join(", ")}.
272
- `),i=await eo(e.endpointOverride)}else throw h}if(t==="sessions"){if(n.length)throw new w("oracle sessions does not accept positional arguments.");let h=await i.listSessions();qs(h,e.flags.json===!0);return}if(t==="download"){await Hs(i,n,e.flags);return}if(t==="exec"){if(G(e.flags,"write")||G(e.flags,"approve"))throw new w("oracle exec is read-only. Use interactive `anyforge oracle --write` for authorized actions.");if(e.flags.json===!0&&G(e.flags,"stream-json"))throw new w("Choose either --json or --stream-json.");let h=await Ls(n.join(" ")),k=await i.config();to(i,k),no(tt(e.flags,"context"));let R=cn(e.flags),v=await i.createSession(hn(R,!1));await On(v.sessionId,i.endpoint);let C=await fo(i,v.sessionId,Zr(e.flags),process.stderr),O={requestId:oo(),text:h,readOnly:!0,...R?{context:R}:{},...tt(e.flags,"context")?{contextText:tt(e.flags,"context")}:{},...C.length?{attachments:C.map(K=>({fileId:K.fileId}))}:{}};await Us(i,v.sessionId,O,{json:e.flags.json===!0,streamJson:G(e.flags,"stream-json"),config:k});return}if(t==="resume"&&n.length>1)throw new w("oracle resume accepts at most one session id.");if(t==="resume"&&(!process.stdin.isTTY||!process.stdout.isTTY))throw new w("oracle resume is interactive and needs a terminal.","Use `anyforge oracle sessions` to list sessions, or run `anyforge oracle exec` for a new scripted turn.");let s=await i.config();to(i,s);let a=cn(e.flags),l=tt(e.flags,"context");no(l);let c=G(e.flags,"shared"),d=G(e.flags,"write")||G(e.flags,"approve");if(d&&(!i.scopes.has("write")||s.capabilities?.write!==!0))throw new u("This Oracle grant or current workspace role does not allow write actions.",p.API_ERROR);if(G(e.flags,"approve")&&(!i.scopes.has("approve")||s.capabilities?.approve!==!0))throw new u("This Oracle grant or current workspace role does not allow approval actions.",p.API_ERROR);if(c&&(!a||a.kind!=="program"&&a.kind!=="initiative"))throw new w("--shared requires --program or --initiative.");let g;if(t==="resume"){let k=(n[0]||void 0)??await js(await i.listSessions(),await un(i.endpoint));g=await i.getSession(k)}else g=await i.createSession(hn(a,c));await On(g.sessionId,i.endpoint),await zs({client:i,config:s,session:g,initialPrompt:o,initialContext:a,contextText:l,shared:c,canWrite:d,canApprove:G(e.flags,"approve"),initialFiles:Zr(e.flags)})}function G(e,t){return e[t]===!0}function tt(e,t){let n=e[t];return typeof n=="string"?n:void 0}function Zr(e){let t=e.file;return typeof t=="string"?[t]:Array.isArray(t)?t:[]}async function eo(e){try{return new kt(await Mr(e))}catch(t){throw t instanceof u&&t.exitCode===p.NO_CREDENTIALS?new u("Not authenticated for the hosted Oracle.",p.NO_CREDENTIALS,"Run `anyforge oracle login`, or set ANYFORGE_API_TOKEN for an existing Control grant."):t}}function to(e,t){if(!e.scopes.has("read")||t.capabilities?.read===!1)throw new u("This credential does not have Oracle read access.",p.API_ERROR)}function hn(e,t){let n=t&&e&&(e.kind==="program"||e.kind==="initiative")?{kind:e.kind,id:e.id}:void 0;return{...!t&&e?{context:e}:{},...n?{sharedEntity:n}:{},visibility:t?"company":"private"}}function no(e){if(e&&Buffer.byteLength(e,"utf8")>Yr)throw new w(`--context must be ${Yr/1024} KiB or less.`)}async function Ls(e){let t=e.trim();if(process.stdin.isTTY){if(t)return t;throw new w("oracle exec requires a prompt when stdin is a terminal.",'Example: anyforge oracle exec "summarize this program"')}let n=[],r=0;for await(let i of process.stdin){let s=Buffer.isBuffer(i)?i:Buffer.from(i);if(r+=s.byteLength,r>_s)throw new w("Piped Oracle input exceeds the 1 MiB limit.");n.push(s)}let o=Buffer.concat(n).toString("utf8").trim();if(!t&&!o)throw new w("oracle exec needs a prompt in argv or piped stdin.");return[t,o].filter(Boolean).join(`
273
-
274
- `)}async function fo(e,t,n,r){if(!n.length)return[];if(n.length>Vr)throw new w(`Attach no more than ${Vr} files per turn.`);let o=0,i=[];for(let a of n){let l=await io(a);if(!l.isFile())throw new w(`Attachment is not a file: ${a}`);if(l.size>Qr)throw new w(`Attachment exceeds the 10 MiB per-file CLI limit: ${a}`);let c=await Fs(a,Qr);if(o+=c.byteLength,o>Ps)throw new w("Attachments exceed the 20 MiB total CLI limit.");let d=so(a).replace(/[\u0000-\u001f\u007f/\\]/g,"_").slice(0,200)||"attachment",g=Ns(d);if(!g)throw new w(`Unsupported attachment type: ${a}`);i.push({content:c,name:d,mediaType:g})}let s=[];for(let{content:a,name:l,mediaType:c}of i){await ee(r,`Uploading explicit attachment ${f(l)} (${Se(a.byteLength)}).
275
- `);let d=new ArrayBuffer(a.byteLength);new Uint8Array(d).set(a);let g=new File([d],l,{type:c});s.push(await e.upload(t,g))}return s}async function Fs(e,t){let n=[],r=0;for await(let o of Rs(e)){let i=Buffer.isBuffer(o)?o:Buffer.from(o);if(r+=i.byteLength,r>t)throw new w(`Attachment exceeds the ${Se(t)} limit: ${e}`);n.push(i)}return Buffer.concat(n)}function Ns(e){return Ar(e)??""}function qs(e,t){if(t){process.stdout.write(`${JSON.stringify(e,null,2)}
276
- `);return}if(!e.length){process.stdout.write(`No Oracle sessions are available.
277
- `);return}for(let n of e){let r=Pe(n);process.stdout.write(`${nt(n.sessionId)} ${f(n.title)} ${F(r)}
278
- `)}}async function js(e,t){if(!e.length)throw new u("No accessible Oracle sessions are available.",p.API_ERROR);return new Promise((n,r)=>{let o=new co,i=new uo(o),s=new et(nt("Resume an Oracle session")),a=new lo(e.map(g=>({value:g.sessionId,label:g.title,description:Pe(g)})),12,{selectedPrefix:g=>_t(g),selectedText:g=>nt(g),description:g=>F(g),scrollInfo:g=>F(g),noMatch:g=>F(g)}),l=t?e.findIndex(g=>g.sessionId===t):-1;l>=0&&a.setSelectedIndex(l),i.addChild(s),i.addChild(a),a.onSelect=g=>{d(),n(g.value)},a.onCancel=()=>{d(),r(new u("Session selection cancelled.",p.FAILURE))};let c=()=>{d(),r(new u("Session selection interrupted.",p.INTERRUPTED))},d=()=>{process.off("SIGINT",c),i.stop()};process.once("SIGINT",c),i.start()})}function Se(e){return e<1024?`${e} B`:e<1024*1024?`${(e/1024).toFixed(1)} KiB`:`${(e/(1024*1024)).toFixed(1)} MiB`}function ro(e){if(!e)return"";let t=Object.entries(e).filter(([,n])=>n!==null&&n!==!1).map(([n,r])=>`${f(n)} ${typeof r=="string"?f(r):String(r)}`);return t.length?`Limits: ${t.join(", ")}`:""}function Pt(e){if(e&&typeof e=="object"){let t=e;if(typeof t.accepted=="boolean")return t.accepted?"Oracle server accepted the cancellation request.":"Oracle server did not accept the cancellation request.";if(typeof t.cancelled=="boolean")return t.cancelled?"Oracle server cancelled the active turn.":"Oracle server did not cancel the active turn."}return"Oracle server acknowledged the cancellation request."}async function ee(e,t){e.write(t)||await new Promise(n=>e.once("drain",n))}async function Us(e,t,n,r){let o,i=-1,s="",a,l,c,d=!1,g,h=new AbortController,k=()=>g??=R(),R=async()=>{if(d=!0,process.exitCode=130,h.abort(new Error("Turn cancelled by Ctrl+C.")),o)try{let E=await e.cancelTurn(t,o);await ee(process.stderr,`${Pt(E)}
279
- `)}catch(E){await ee(process.stderr,`Could not confirm server cancellation: ${le(E)}
280
- `)}else try{let E=await e.cancelRequest(t,n.requestId);await ee(process.stderr,`${Pt(E)}
281
- `)}catch(E){await ee(process.stderr,`Could not confirm server cancellation by request id: ${le(E)}
282
- `)}},v=()=>{k().catch(()=>{})};process.on("SIGINT",v);let C=async E=>ee(process.stdout,`${JSON.stringify(ve(E))}
283
- `),O=async E=>{E.idx<=i||(i=E.idx,E.type==="delta"&&typeof E.content=="string"&&(s+=E.content),E.type==="question"&&(a=rt(E)),E.type==="error"&&(l=vn(E)),E.type==="done"&&(c=E),r.streamJson?await C({...E,sessionId:t}):Ms(E))},K=E=>{o=E},q;try{q=await go(e,t,n,{onEvent:O,onStream:K},h.signal)}catch(E){if(!d)throw process.off("SIGINT",v),E;q={answer:s,...a?{question:a}:{},...l?{error:l}:{},...c?{done:c}:{},...o?{streamId:o}:{}}}finally{process.off("SIGINT",v),g&&await g}q||(q={answer:s,...a?{question:a}:{},...c?{done:c}:{},...o?{streamId:o}:{}}),s=q.answer||s,a=q.question??a,l=q.error??l,c=q.done??c,o=q.streamId??o;let M=mo(t,{...q,answer:s,question:a,error:l,done:c,streamId:o});return r.streamJson?await C({protocolVersion:1,type:"result",result:M}):r.json?await ee(process.stdout,`${JSON.stringify(M,null,2)}
284
- `):(M.answer&&await ee(process.stdout,`${M.answer}
285
- `),M.status==="awaiting_input"&&await ee(process.stderr,`Oracle needs a response; resume this session interactively to answer the question.
286
- `),M.status==="interrupted"&&await ee(process.stderr,`Oracle turn ended without a complete final answer.
287
- `),M.status==="error"&&l&&await ee(process.stderr,`Oracle error: ${f(l)}
288
- `),(M.servedBy||M.usage||M.rounds!==void 0)&&await ee(process.stderr,yn(M.servedBy,M.usage,M.rounds))),d?process.exitCode=130:M.status==="error"?process.exitCode=p.API_ERROR:M.status==="interrupted"&&(process.exitCode=p.FAILURE),M}function Ms(e){if(e.type==="tool_call")process.stderr.write(`${F("Oracle is using")} ${_t(H(e.name,100))}
289
- `);else if(e.type==="tool_result")process.stderr.write(F(e.ok===!1?"Oracle tool needs attention.":"Oracle tool completed.")+`
290
- `);else if(e.type==="attachment_notice"&&Array.isArray(e.notices))for(let t of e.notices){let n=t&&typeof t=="object"?t:{};process.stderr.write(`${ao("Attachment")} ${H(n.name,160)}: ${H(n.message,500)}
291
- `)}else e.type==="quick_edit"&&typeof e.message=="string"&&process.stderr.write(`${F("Oracle")} ${H(e.message,500)}
292
- `)}function H(e,t){return typeof e=="string"?f(e).slice(0,t):""}function vn(e){return typeof e.message=="string"?f(e.message).slice(0,2e3):"Oracle turn failed."}function rt(e){let t=e.question;if(!t||typeof t!="object")throw new u("Oracle question event omitted its question card.",p.API_ERROR);return Bs(t)}function $t(e){let t=e&&typeof e=="object"&&!Array.isArray(e)?e:{};if(typeof t.fileId!="string"||!t.fileId||typeof t.filename!="string"||!t.filename||typeof t.mediaType!="string"||!t.mediaType||typeof t.sizeBytes!="number"||!Number.isSafeInteger(t.sizeBytes)||t.sizeBytes<0)throw new u("Oracle generated-file event omitted safe file metadata.",p.API_ERROR);return{fileId:f(t.fileId),filename:f(t.filename),mediaType:f(t.mediaType),sizeBytes:t.sizeBytes,...typeof t.format=="string"?{format:f(t.format)}:{}}}function Ds(e,t){let n=$t(t);e.some(r=>r.fileId===n.fileId)||e.push(n)}function Bs(e){let t=e;if(typeof t.id!="string"||!Array.isArray(t.questions))throw new u("Oracle returned an invalid question card.",p.API_ERROR);return{id:f(t.id),optional:t.optional===!0,questions:t.questions.map((n,r)=>{let o=n&&typeof n=="object"?n:{};if(typeof o.id!="string"||typeof o.header!="string"||typeof o.question!="string"||typeof o.multiSelect!="boolean"||!Array.isArray(o.options))throw new u(`Oracle question ${r+1} is invalid.`,p.API_ERROR);return{id:f(o.id),header:f(o.header),question:f(o.question),multiSelect:o.multiSelect,options:o.options.map(i=>{let s=i&&typeof i=="object"?i:{};if(typeof s.id!="string"||typeof s.label!="string"||typeof s.description!="string")throw new u("Oracle question option is invalid.",p.API_ERROR);return{id:f(s.id),label:f(s.label),description:f(s.description),...typeof s.recommended=="boolean"?{recommended:s.recommended}:{},...typeof s.confirms=="boolean"?{confirms:s.confirms}:{}}})}})}}function oe(e){return typeof e=="number"&&Number.isFinite(e)?e:void 0}function wn(e){if(typeof e=="number"&&Number.isFinite(e))return{totalTokens:e};if(!e||typeof e!="object"||Array.isArray(e))return;let t=e,n=oe(t.in)??oe(t.input)??oe(t.inputTokens),r=oe(t.out)??oe(t.output)??oe(t.outputTokens),o=oe(t.total)??oe(t.totalTokens)??(n!==void 0||r!==void 0?(n??0)+(r??0):void 0);if(!(n===void 0&&r===void 0&&o===void 0))return{...n!==void 0?{inputTokens:n}:{},...r!==void 0?{outputTokens:r}:{},...o!==void 0?{totalTokens:o}:{}}}function yn(e,t,n){let r=[];if(e&&typeof e=="object"){let o=e;if(typeof o.model=="string"){r.push(`model ${H(o.model,100)}`),typeof o.routing=="string"&&r.push(H(o.routing.replaceAll("_"," "),40)),typeof o.configuredModel=="string"&&o.configuredModel!==o.model&&r.push(`configured ${H(o.configuredModel,100)}`);let i=o.fallback&&typeof o.fallback=="object"?o.fallback:void 0;i&&typeof i.from=="string"&&typeof i.reason=="string"&&r.push(`fallback from ${H(i.from,100)} (${H(i.reason.replaceAll("_"," "),40)})`)}else typeof o.id=="string"&&r.push(`model ${H(o.id,100)}`);typeof o.provider=="string"&&r.push(H(o.provider,100))}return t?.inputTokens!==void 0||t?.outputTokens!==void 0?r.push(`${t.inputTokens??0} in / ${t.outputTokens??0} out tokens`):t?.totalTokens!==void 0&&r.push(`${t.totalTokens} tokens`),n!==void 0&&r.push(`${n} rounds`),r.length?`${F(r.join(" \xB7 "))}
293
- `:""}async function go(e,t,n,r,o){let i=-1,s,a="",l,c,d,g=[],h=async O=>{O.idx<=i||(i=O.idx,O.type==="stream_start"&&typeof O.streamId=="string"&&(s=f(O.streamId),r.onStream?.(s)),O.type==="delta"&&typeof O.content=="string"&&(a+=O.content),O.type==="question"&&(l=rt(O)),O.type==="error"&&(c=vn(O)),O.type==="done"&&(d=O),O.type==="navigator_file_created"&&Ds(g,O.file),await r.onEvent(O))},k=()=>({answer:a,...l?{question:l}:{},...c?{error:c}:{},...d?{done:d}:{},...s?{streamId:s}:{},...g.length?{files:[...g]}:{}}),R=async()=>{try{for await(let O of e.streamRequestEvents(t,n.requestId,-1))await h(O)}catch(O){throw o?.aborted?O:new u("Oracle connection failed and the submitted request could not be recovered by its request id. It was not resubmitted with a new id.",p.FAILURE,`Run anyforge oracle resume ${t} to inspect the saved session.`)}if(d||c)return k();if(s)return Ze(e,t,s,i,h,o,{answer:a,question:l,errorMessage:c,done:d,files:g});throw new u("Oracle request lookup returned no stream events. It was not resubmitted with a new id.",p.FAILURE,`Run anyforge oracle resume ${t} to inspect the saved session.`)},v=async()=>{try{let O=await e.submitTurn(t,n,o);for await(let K of Ve(O))await h(K)}catch(O){if(o?.aborted||O instanceof u&&O.exitCode===p.API_ERROR)throw O;return s?Ze(e,t,s,i,h,o,{answer:a,question:l,errorMessage:c,done:d,files:g}):R()}return d||c?k():s?Ze(e,t,s,i,h,o,{answer:a,question:l,errorMessage:c,done:d,files:g}):R()},C;try{C=await e.submitTurn(t,n,o)}catch(O){if(o?.aborted||O instanceof u&&O.exitCode!==p.FAILURE)throw O;return v()}if(!C)throw new u("Oracle did not return a stream response.",p.FAILURE);try{for await(let O of Ve(C))await h(O)}catch(O){if(o?.aborted||O instanceof u)throw O;return s?Ze(e,t,s,i,h,o,{answer:a,question:l,errorMessage:c,done:d,files:g}):v()}return!d&&!c?s?Ze(e,t,s,i,h,o,{answer:a,question:l,errorMessage:c,done:d,files:g}):v():k()}async function Ze(e,t,n,r,o,i,s){let a=r,l=0;for(;!s.done&&!s.errorMessage&&l<Xr;){if(i?.aborted)throw i.reason;try{for await(let c of e.streamReplayEvents(t,n,a+1))c.idx<=a||(a=c.idx,c.type==="delta"&&typeof c.content=="string"&&(s.answer+=c.content),c.type==="question"&&(s.question=rt(c)),c.type==="error"&&(s.errorMessage=vn(c)),c.type==="done"&&(s.done=c),await o(c));if(!s.done&&!s.errorMessage){if((await e.getSession(t)).activeStreamId!==n)break;await Hr(300,void 0,i?{signal:i}:void 0)}}catch(c){if(i?.aborted||c instanceof u&&c.exitCode===p.API_ERROR||(l+=1,l>=Xr))throw c;await Hr(300,void 0,i?{signal:i}:void 0)}}if(!s.done&&!s.errorMessage)throw new u("Oracle stream could not be fully replayed; the turn was not submitted again.",p.FAILURE,`Run anyforge oracle resume ${t} to inspect the session.`);return{answer:s.answer,...s.question?{question:s.question}:{},...s.errorMessage?{error:s.errorMessage}:{},...s.done?{done:s.done}:{},streamId:n,...s.files.length?{files:[...s.files]}:{}}}function Gs(e){return e?.exitReason==="completed"}function mo(e,t){let n=t.done,r=n?.servedBy,o=wn(n?.tokens),i=oe(n?.rounds),s=typeof n?.exitReason=="string"?f(n.exitReason):void 0,a=Gs(n)&&!t.question,l=t.files??(Array.isArray(n?.files)?n.files.map($t):void 0),c=t.error?"error":t.question?"awaiting_input":a?"complete":"interrupted";return{protocolVersion:1,sessionId:e,status:c,answer:f(t.answer),partial:!a,...typeof n?.messageId=="string"?{messageId:f(n.messageId)}:typeof n?.answerId=="string"?{messageId:f(n.answerId)}:{},...t.question?{question:t.question}:{},...t.error?{error:f(t.error)}:{},...t.streamId?{streamId:f(t.streamId)}:{},...r?{servedBy:ve(r)}:{},...o?{usage:{...o,...i!==void 0?{rounds:i}:{}}}:{},...i!==void 0?{rounds:i}:{},...s?{exitReason:s}:{},...l?.length?{files:ve(l)}:{}}}async function zs(e){let t=new co,n=new uo(t),r=new Is,o=new Es(r,{follow:"end",primary:!0,overscroll:"chain"}),i=new Ss(n,Er),s=new et(""),a=new et(""),l=new Cs([{component:s,basis:"auto",shrink:0,minSize:1},{component:o,basis:0,grow:1,minSize:1},{component:a,basis:"auto",shrink:0,minSize:1},{component:i,basis:"auto",shrink:0,minSize:2}]);n.setLayoutRoot(l);let c=e.session,d=e.initialContext,g=e.contextText,h=e.canWrite,k=e.canApprove,R=!1,v,C,O,K,q,M=[...e.initialFiles],E=!1,Lt=!1,it=!1,te=e.config.model,Ee=new Map,de,bn=()=>{},I=m=>{a.setText(`${F("Enter send \xB7 Shift+Enter newline \xB7 /help commands \xB7 Ctrl+C cancel/exit")}
294
- ${m}`),n.requestRender()},Ft=()=>{let m=te?`${te.provider}/${te.id}`:"workspace default",y=h?k?"write + approve":"write":"read only",b=ro(e.config.limits);s.setText(`${nt(_t("AnyForge Oracle"))} ${F(Pe(c))}
295
- ${F(`Model: ${m} \xB7 ${y} \xB7 context: ${d?`${d.kind} ${d.id}`:"none"}${b?` \xB7 ${b}`:""}`)}`),n.requestRender()},st=m=>{r.addChild(m),n.requestRender()},Y=(m,y)=>{st(new et(y?y(f(m)):f(m)))},at=(m,y,b)=>{st(new et(Cr(m,b)));let A=new Rt(y);return st(A),A},Nt=m=>{K=m;let y=Ee.get(m.id);y&&r.removeChild(y);let b=new Ct(n,m,A=>{Ee.delete(m.id),de===b&&(de=void 0),r.removeChild(b),bn(A??{questionId:m.id,skipped:!0,answers:[]})});Ee.set(m.id,b),de=b,st(b)},qt=m=>{r.clear(),Ee.clear(),de=void 0,c=m,C=m.activeStreamId,K=void 0,q=void 0;let y;for(let b of m.messages)if(at(b.role,b.content,b.authorName),b.question&&(y=b.question),b.questionResponse&&(Y("A stored response was recorded for this question.",F),y?.id===b.questionResponse.questionId&&(y=void 0)),b.files?.length)for(let A of b.files)Y(`File: ${A.filename} (${A.mediaType}, ${Se(A.sizeBytes)})`,F);y&&Nt(y),Ft(),On(m.sessionId,e.client.endpoint)};qt(e.session),Y("This Oracle conversation is hosted by your AnyForge workspace. Only the messages and explicit attachments you submit leave this terminal.",F),I("Ready.");let An=async m=>{if(v&&!v.signal.aborted){if(it)return;it=!0,Lt=!0;let y=C,b=O;if(v.abort(new Error("Turn cancelled by user.")),y)try{let A=await e.client.cancelTurn(c.sessionId,y);I(Pt(A))}catch(A){I(`Could not confirm server cancellation: ${le(A)}`)}else if(b)try{let A=await e.client.cancelRequest(c.sessionId,b);I(Pt(A))}catch(A){I(`Could not confirm server cancellation by request id: ${le(A)}`)}else I("No active stream id was available; the connection will detach without resubmitting the turn.");it=!1}m&&(E=!0,n.stop(),ct())},ct,Ro=new Promise(m=>{ct=m}),kn=()=>{An(!0)},bo=n.addInputListener(m=>{if(Ts(m,"ctrl+c"))return v?An(!0):(E=!0,n.stop(),ct()),{consume:!0}});process.on("SIGINT",kn);let Ue=async(m,y)=>{if(R||E||it)return;let b=m.trim();if(!y&&!b)return;if(y){let L=K;if(!L||L.id!==y.questionId){I("The question card is no longer active. Refresh the session before answering.");return}Y(Ks(L,y),F)}else at("user",b);R=!0,i.disableSubmit=!0,v=new AbortController,C=void 0,O=void 0;let A=at("assistant",""),S="";Tt.set(A,S);let x=y?[]:M.splice(0);try{let L=await fo(e.client,c.sessionId,x,process.stderr),he=oo();O=he;let Sn={requestId:he,text:y?"":b,readOnly:!h,...k?{allowApprove:!0}:{},...d?{context:d}:{},...g?{contextText:g}:{},...y?{questionResponse:y}:{},...L.length?{attachments:L.map(T=>({fileId:T.fileId}))}:{}};I(`Oracle is working${te?` \xB7 ${te.provider}/${te.id}`:""}\u2026`);let Z=await go(e.client,c.sessionId,Sn,{onStream:T=>{C=T},onEvent:T=>{if(T.type==="delta"&&typeof T.content=="string")S+=T.content,Tt.set(A,S),A.setText(S);else if(T.type==="tool_call")Y(`Using ${H(T.name,100)}\u2026`,F);else if(T.type==="tool_result")Y(T.ok===!1?"Tool needs attention.":"Tool completed.",F);else if(T.type==="question"){let D=rt(T);Nt(D);let Me=Ee.get(D.id);Me&&n.setFocus(Me)}else if(T.type==="attachment_notice"&&Array.isArray(T.notices))for(let D of T.notices){let Me=D&&typeof D=="object"?D:{};Y(`${H(Me.name,160)}: ${H(Me.message,500)}`,ao)}else if(T.type==="quick_edit"&&typeof T.message=="string")Y(T.message,F);else if(T.type==="navigator_file_created"){let D=$t(T.file);Y(`Generated ${D.filename} (${Se(D.sizeBytes)}). Download explicitly with: anyforge oracle download ${c.sessionId} ${D.fileId} --output ./artifacts`,F)}else if(T.type==="done"){if(typeof T.servedBy=="object"&&T.servedBy){let D=T.servedBy;typeof D.model=="string"?te={id:D.model,provider:typeof D.routing=="string"?D.routing:"workspace"}:typeof D.id=="string"&&(te={id:D.id,provider:typeof D.provider=="string"?D.provider:"workspace"})}I(yn(T.servedBy,wn(T.tokens),oe(T.rounds)).trim()||"Ready for another question."),Ft()}}},v.signal);Z.error&&Y(Z.error,Jr),Z.question&&(K=Z.question);let jt=mo(c.sessionId,Z);jt.status==="interrupted"?I("The response ended without a final answer. Resume this session to replay it."):jt.status==="error"?I("Oracle reported an error. You can retry with a new message."):jt.status==="awaiting_input"?I("Choose an answer above; Oracle will continue after you submit it."):I("Ready for another question.")}catch(L){v?.signal.aborted||(Y(le(L),Jr),I("The turn did not finish. It was not resubmitted automatically."))}finally{if(R=!1,v=void 0,O=void 0,i.disableSubmit=!1,C){let L=await e.client.getSession(c.sessionId).catch(()=>{});L&&(c=L,C=L.activeStreamId)}if(q&&!E&&!Lt){let L=q;q=void 0,Ue("",L)}n.setFocus(de??i),n.requestRender()}};bn=m=>{if(q=m,R)I("Answer saved; Oracle will continue after this turn settles.");else{let y=q;q=void 0,Ue("",y)}};let xn=async m=>{if(R){I("Wait for the active turn to settle before switching sessions.");return}try{let y=await e.client.getSession(m);qt(y),de&&n.setFocus(de),y.activeStreamId&&In(y),I(`Resumed ${y.sessionId}.`)}catch(y){I(le(y))}},Ao=async()=>{try{let m=await e.client.listSessions();if(!m.length){I("No accessible sessions to resume.");return}let y=new lo(m.map(x=>({value:x.sessionId,label:x.title,description:Pe(x)})),Math.min(12,m.length),{selectedPrefix:x=>_t(x),selectedText:x=>nt(x),description:x=>F(x),scrollInfo:x=>F(x),noMatch:x=>F(x)}),b=await un(e.client.endpoint),A=b?m.findIndex(x=>x.sessionId===b):-1;A>=0&&y.setSelectedIndex(A);let S=n.showOverlay(y,{width:"85%",maxHeight:"80%",anchor:"center"});y.onSelect=x=>{S.hide(),xn(x.value)},y.onCancel=()=>S.hide(),S.focus(),I("Choose a session to resume. Escape closes the picker.")}catch(m){I(le(m))}},ko=async(m=!1)=>{if(R){I("Wait for the active turn to settle before starting a new session.");return}if(m&&(!d||d.kind!=="program"&&d.kind!=="initiative")){I("Use /context program <id> or /context initiative <id> before /new shared.");return}try{let y=await e.client.createSession(hn(d,m));qt(y),I(`Started ${Pe(y)}.`)}catch(y){I(le(y))}},xo=async m=>{if(!m.startsWith("/"))return!1;let[y,...b]=m.slice(1).trim().split(/\s+/),A=b.join(" ");switch(y){case"help":return Y("/new [shared] \xB7 /resume [session-id] \xB7 /context [clear|program|initiative|codebase <id>] \xB7 /attach <path> \xB7 /model \xB7 /exit",F),!0;case"exit":return E=!0,v&&v.abort(new Error("Detached from active Oracle stream.")),n.stop(),ct(),!0;case"new":return await ko(A==="shared"),!0;case"resume":return A?await xn(A):await Ao(),!0;case"context":if(!A)return I(`Context: ${d?`${d.kind} ${d.id}`:"none"}${g?" + free-text note":""}. Use /context <kind> <id> or /context clear.`),!0;if(A==="clear")d=void 0;else{let[S,x,...L]=b;if(!["program","initiative","codebase"].includes(S??"")||!x||L.length)return I("Usage: /context program <id>, /context initiative <id>, /context codebase <id>, or /context clear."),!0;d={kind:S,id:x}}return Ft(),I(`Context for the next turn: ${d?`${d.kind} ${d.id}`:"none"}.`),!0;case"attach":return A?(M.push(A),I(`Queued explicit attachment: ${f(A)}. It will upload with your next message.`),!0):(I("Usage: /attach <explicit-file-path>."),!0);case"model":return I(`Workspace model: ${te?`${te.provider}/${te.id}`:"server-selected"}. ${ro(e.config.limits)} Local model overrides are not supported.`),!0;default:return I(`Unknown Oracle command: /${y}. Use /help.`),!0}};async function In(m){if(!m.activeStreamId||R)return;R=!0,v=new AbortController,C=m.activeStreamId;let b=at("assistant",""),A=-1;try{for await(let S of e.client.streamReplayEvents(m.sessionId,m.activeStreamId,0))if(!(S.idx<=A)){if(A=S.idx,S.type==="delta"&&typeof S.content=="string"){let x=`${Ws(b)}${S.content}`;Tt.set(b,x),b.setText(x)}if(S.type==="tool_call"&&Y(`Using ${H(S.name,100)}\u2026`,F),S.type==="question"){let x=rt(S);Nt(x);let L=Ee.get(x.id);L&&n.setFocus(L)}if(S.type==="navigator_file_created"){let x=$t(S.file);Y(`Generated ${x.filename} (${Se(x.sizeBytes)}). Download explicitly with: anyforge oracle download ${m.sessionId} ${x.fileId} --output ./artifacts`,F)}S.type==="done"&&I(yn(S.servedBy,wn(S.tokens),oe(S.rounds)).trim()||"Ready for another question.")}}catch(S){I(`Could not replay the active stream: ${le(S)}`)}finally{if(R=!1,v=void 0,i.disableSubmit=!1,n.setFocus(de??i),n.requestRender(),q){let S=q;q=void 0,Ue("",S)}}}i.onSubmit=m=>{if(R){I("Oracle is still working. Wait for it to finish before sending another turn.");return}(async()=>{await xo(m.trim())||await Ue(m)})().catch(y=>I(le(y)))},i.onChange=()=>n.requestRender();let Io={triggerCharacters:["/"],async getSuggestions(m,y,b,{signal:A}){if(A.aborted)return null;let L=(m[y]??"").slice(0,b).match(/(?:^|\s)(\/[^\s]*)$/);if(!L)return null;let he=L[1];return{prefix:he,items:["help","new","resume","context","attach","model","exit"].map(Z=>`/${Z}`).filter(Z=>Z.startsWith(he)).map(Z=>({value:Z,label:Z}))}},applyCompletion(m,y,b,A,S){let x=[...m],L=x[y]??"",he=Math.max(0,b-S.length);return x[y]=`${L.slice(0,he)}${A.value}${L.slice(b)}`,{lines:x,cursorLine:y,cursorCol:he+A.value.length}}};i.setAutocompleteProvider(Io),n.setFocus(de??i),n.start(),c.activeStreamId&&In(c),e.initialPrompt&&Ue(e.initialPrompt),await Ro,bo(),process.off("SIGINT",kn),v&&!v.signal.aborted&&v.abort(),await t.drainInput().catch(()=>{}),Lt&&(process.exitCode=130)}function Ks(e,t){if(t.skipped)return"Skipped the optional Oracle question.";let n=[];for(let r of t.answers){let o=e.questions.find(i=>i.id===r.questionId);for(let i of r.optionIds){let s=o?.options.find(a=>a.id===i);s&&n.push(s.label)}r.customText&&n.push(r.customText)}return`You answered: ${n.map(f).join("; ")||"no options selected"}`}function Ws(e){return Tt.get(e)??""}var Tt=new WeakMap;async function On(e,t){await Nr(e,t).catch(()=>{})}function le(e){return f(e instanceof Error?e.message:String(e)).slice(0,2e3)}async function Hs(e,t,n){if(t.length!==2)throw new w("oracle download needs exactly a session id and file id.");let[r,o]=t;if(!r||!o)throw new w("oracle download needs a session id and file id.");let i=tt(n,"output");if(!i)throw new w("oracle download requires --output <existing-directory>.");let s=xs(i),a=await As(s);if(!(await io(a)).isDirectory())throw new w("--output must point to an existing directory.");let c=await e.download(r,o),d=Ys(Js(c.headers.get("content-disposition"))),g=ks(a,d),h=await Qs(c,$s),k;try{k=await bs(g,"wx",384),await k.writeFile(h)}catch(R){throw R.code==="EEXIST"?new u(`Refusing to overwrite ${g}.`,p.FAILURE):R}finally{await k?.close()}process.stdout.write(`Downloaded ${f(d)} to ${f(g)} (${Se(h.byteLength)}).
296
- `)}function Js(e){if(!e)return"oracle-file.bin";let t=/filename\*=UTF-8''([^;]+)/i.exec(e)?.[1];if(t)try{return decodeURIComponent(t.replace(/^"|"$/g,""))}catch{return"oracle-file.bin"}let n=/filename="?([^";]+)"?/i.exec(e)?.[1];return n?n.trim():"oracle-file.bin"}function Ys(e){let t=so(e.replace(/\\/g,"/")).replace(/[\u0000-\u001f\u007f/:]/g,"_").replace(/^\.+/,"").trim().slice(0,180);return!t||t==="."||t===".."?"oracle-file.bin":t}async function Qs(e,t){if(!e.body)return Buffer.alloc(0);let n=e.body.getReader(),r=[],o=0;try{for(;;){let{value:i,done:s}=await n.read();if(s)break;let a=Buffer.from(i);if(o+=a.byteLength,o>t)throw new u(`Oracle download exceeds the ${Se(t)} limit.`,p.API_ERROR);r.push(a)}}catch(i){throw await n.cancel("Oracle download exceeded its byte limit.").catch(()=>{}),i}finally{n.releaseLock()}return Buffer.concat(r)}var vo="https://crew.anyforge.ai",ea=new Set(["endpoint","limit","status","type","priority","initiative","program","search","assignee","notes","input","context","messages","scope","client","days","profile","interval","codebase","file","output"]),ta=new Set(["help","version","json","active","archived","all","follow","3way","dry-run","force","shared","write","approve","read-only","stream-json"]);function na(e){let t={positional:[],flags:{}};for(let n=0;n<e.length;n+=1){let r=e[n];if(!r.startsWith("-")){t.command?t.positional.push(r):t.command=r;continue}let o=r==="-h"?"help":r==="-V"?"version":r==="-f"?"force":r.replace(/^--?/,""),[i,s]=o.includes("=")?[o.slice(0,o.indexOf("=")),o.slice(o.indexOf("=")+1)]:[o,void 0];if(ea.has(i)){let a=s??e[++n];if(a===void 0)throw new w(`--${i} needs a value.`);if(i==="file"){let l=t.flags.file;t.flags.file=[...typeof l=="string"?[l]:Array.isArray(l)?l:[],a]}else t.flags[i]=a;continue}if(ta.has(i)){t.flags[i]=s===void 0?!0:s!=="false";continue}throw new w(`Unknown option: ${r}`,"Run `anyforge --help` for the command list.")}return t}function me(e,t){if(e===void 0||typeof e=="boolean")return;let n=Number(e);if(!Number.isFinite(n)||n<=0)throw new w(`--${t} must be a positive number, got "${e}".`);return n}function z(e){return typeof e=="string"?e:void 0}function Rn(e){return e===!0?!0:void 0}function ra(){console.log(`
297
- ${J("AnyForge Control")} \u2014 governed LLM proxy, and a scriptable AnyForge client.
298
-
299
- ${J("USAGE")}
271
+ `);return}let i;try{i=await ci(t.endpointOverride)}catch(k){if(!r&&k instanceof f&&k.exitCode===m.NO_CREDENTIALS&&process.stdin.isTTY&&process.stdout.isTTY){let x=(await import("prompts")).default;if((await x({type:"confirm",name:"login",message:"Sign in to AnyForge Oracle now?",initial:!0})).login!==!0)throw k;let O=await nr({endpoint:t.endpointOverride??t.endpoint});process.stderr.write(`Connected to ${O.endpoint} with scopes: ${O.scopes.join(", ")}.
272
+ `),i=await ci(t.endpointOverride)}else throw k}if(e==="sessions"){if(n.length)throw new y("oracle sessions does not accept positional arguments.");let k=await i.listSessions();Cc(k,t.flags.json===!0);return}if(e==="download"){await $c(i,n,t.flags);return}if(e==="exec"){if(j(t.flags,"write")||j(t.flags,"approve"))throw new y("oracle exec is read-only. Use interactive `anyforge oracle --write` for authorized actions.");if(t.flags.json===!0&&j(t.flags,"stream-json"))throw new y("Choose either --json or --stream-json.");let k=await Ic(n.join(" ")),x=await i.config();li(i,x),di(Rt(t.flags,"context"));let b=Bn(t.flags),O=await i.createSession(wt(b,!1));await yt(O.sessionId,i.endpoint);let R=await Qt(i,O.sessionId,ai(t.flags),(K,ae)=>J(process.stderr,`Uploading explicit attachment ${K} (${N(ae)}).
273
+ `)),V={requestId:fc(),text:k,readOnly:!0,...b?{context:b}:{},...Rt(t.flags,"context")?{contextText:Rt(t.flags,"context")}:{},...R.length?{attachments:R.map(K=>({fileId:K.fileId}))}:{}};await Ec(i,O.sessionId,V,{json:t.flags.json===!0,streamJson:j(t.flags,"stream-json"),config:x});return}if(e==="resume"&&n.length>1)throw new y("oracle resume accepts at most one session id.");if(e==="resume"&&(!process.stdin.isTTY||!process.stdout.isTTY))throw new y("oracle resume is interactive and needs a terminal.","Use `anyforge oracle sessions` to list sessions, or run `anyforge oracle exec` for a new scripted turn.");let s=await i.config();li(i,s);let a=Bn(t.flags),c=Rt(t.flags,"context");di(c);let p=j(t.flags,"shared"),l=j(t.flags,"write")||j(t.flags,"approve");if(l&&(!i.scopes.has("write")||s.capabilities?.write!==!0))throw new f("This Oracle grant or current workspace role does not allow write actions.",m.API_ERROR);if(j(t.flags,"approve")&&(!i.scopes.has("approve")||s.capabilities?.approve!==!0))throw new f("This Oracle grant or current workspace role does not allow approval actions.",m.API_ERROR);if(p&&(!a||a.kind!=="program"&&a.kind!=="initiative"))throw new y("--shared requires --program or --initiative.");let u;if(e==="resume"){let x=(n[0]||void 0)??await Tc(await i.listSessions(),await Ht(i.endpoint));u=await i.getSession(x)}else u=await i.createSession(wt(a,p));await yt(u.sessionId,i.endpoint);let v=await Promise.resolve().then(()=>(sr(),ir));await Vo({version:v.default.version,client:i,config:s,session:u,initialPrompt:o,initialContext:a,contextText:c,shared:p,canWrite:l,canApprove:j(t.flags,"approve"),initialFiles:ai(t.flags)})}function j(t,e){return t[e]===!0}function Rt(t,e){let n=t[e];return typeof n=="string"?n:void 0}function ai(t){let e=t.file;return typeof e=="string"?[e]:Array.isArray(e)?e:[]}async function ci(t){try{return new Wt(await ti(t))}catch(e){throw e instanceof f&&e.exitCode===m.NO_CREDENTIALS?new f("Not authenticated for the hosted Oracle.",m.NO_CREDENTIALS,"Run `anyforge oracle login`, or set ANYFORGE_API_TOKEN for an existing Control grant."):e}}function li(t,e){if(!t.scopes.has("read")||e.capabilities?.read===!1)throw new f("This credential does not have Oracle read access.",m.API_ERROR)}function di(t){if(t&&Buffer.byteLength(t,"utf8")>Wn)throw new y(`--context must be ${Wn/1024} KiB or less.`)}async function Ic(t){let e=t.trim();if(process.stdin.isTTY){if(e)return e;throw new y("oracle exec requires a prompt when stdin is a terminal.",'Example: anyforge oracle exec "summarize this program"')}let n=[],r=0;for await(let i of process.stdin){let s=Buffer.isBuffer(i)?i:Buffer.from(i);if(r+=s.byteLength,r>kc)throw new y("Piped Oracle input exceeds the 1 MiB limit.");n.push(s)}let o=Buffer.concat(n).toString("utf8").trim();if(!e&&!o)throw new y("oracle exec needs a prompt in argv or piped stdin.");return[e,o].filter(Boolean).join(`
274
+
275
+ `)}function Cc(t,e){if(e){process.stdout.write(`${JSON.stringify(t,null,2)}
276
+ `);return}if(!t.length){process.stdout.write(`No Oracle sessions are available.
277
+ `);return}for(let n of t){let r=ue(n);process.stdout.write(`${ui(n.sessionId)} ${d(n.title)} ${At(r)}
278
+ `)}}async function Tc(t,e){if(!t.length)throw new f("No accessible Oracle sessions are available.",m.API_ERROR);return new Promise((n,r)=>{let o=new bc,i=new xc(o),s=new Ac(ui("Resume an Oracle session")),a=new Rc(t.map(u=>({value:u.sessionId,label:u.title,description:ue(u)})),12,pt),c=e?t.findIndex(u=>u.sessionId===e):-1;c>=0&&a.setSelectedIndex(c),i.addChild(s),i.addChild(a),a.onSelect=u=>{l(),n(u.value)},a.onCancel=()=>{l(),r(new f("Session selection cancelled.",m.FAILURE))};let p=()=>{l(),r(new f("Session selection interrupted.",m.INTERRUPTED))},l=()=>{process.off("SIGINT",p),i.stop()};process.once("SIGINT",p),i.start()})}async function J(t,e){t.write(e)||await new Promise(n=>t.once("drain",n))}async function Ec(t,e,n,r){let o=new Ce,i=!1,s,a=new AbortController,c=()=>s??=p(),p=async()=>{if(i=!0,process.exitCode=130,a.abort(new Error("Turn cancelled by Ctrl+C.")),o.streamId)try{let R=await t.cancelTurn(e,o.streamId);await J(process.stderr,`${He(R)}
279
+ `)}catch(R){await J(process.stderr,`Could not confirm server cancellation: ${Q(R)}
280
+ `)}else try{let R=await t.cancelRequest(e,n.requestId);await J(process.stderr,`${He(R)}
281
+ `)}catch(R){await J(process.stderr,`Could not confirm server cancellation by request id: ${Q(R)}
282
+ `)}},l=()=>{c().catch(()=>{})};process.on("SIGINT",l);let u=async R=>J(process.stdout,`${JSON.stringify(de(R))}
283
+ `),v=new ar(e),k=-1,x=async R=>{if(r.streamJson){if(R.idx<=k)return;R.type!=="finalizing"&&(k=R.idx),await u({...R,sessionId:e})}else await v.emit(R)},b;try{b=await Yt(t,e,n,{onEvent:x},a.signal,o)}catch(R){if(!i)throw process.off("SIGINT",l),R;b=o.outcome()}finally{process.off("SIGINT",l),s&&await s}let O=ht(e,b);return r.streamJson?await u({protocolVersion:1,type:"result",result:O}):r.json?await J(process.stdout,`${JSON.stringify(O,null,2)}
284
+ `):(O.answer&&await J(process.stdout,`${O.answer}
285
+ `),O.status==="awaiting_input"&&await J(process.stderr,`Oracle needs a response; resume this session interactively to answer the question.
286
+ `),O.status==="interrupted"&&await J(process.stderr,`Oracle turn ended without a complete final answer.
287
+ `),O.status==="error"&&O.error&&await J(process.stderr,`Oracle error: ${d(O.error)}
288
+ `),(O.servedBy||O.usage||O.rounds!==void 0)&&await J(process.stderr,_c(O.servedBy,O.usage,O.rounds))),i?process.exitCode=130:O.status==="error"?process.exitCode=m.API_ERROR:O.status==="interrupted"&&(process.exitCode=m.FAILURE),O}var ar=class{constructor(e){this.sessionId=e}labels=new Map;announced=new Set;async emit(e){let n=this.describe(e);n&&await J(process.stderr,`${n}
289
+ `)}describe(e){switch(e.type){case"tool_call":{if(Me(e.name))return"";let n=I(typeof e.label=="string"?e.label:Gt(I(e.name,240)),120),r=typeof e.id=="string"?e.id:void 0;if(r){if(this.labels.set(r,n),this.announced.has(r))return"";this.announced.add(r)}return`${At(typeof e.spawnId=="string"?"Oracle \xB7 agent \xB7":"Oracle \xB7")} ${Oc(n)}`}case"tool_result":{if(e.ok!==!1)return"";let n=typeof e.toolUseId=="string"?this.labels.get(e.toolUseId):void 0;return cn(`Oracle \xB7 ${n??"a tool"} failed`)}case"warning":return cn(`Warning: ${I(e.message,500)}`);case"navigator_file_error":return cn(`Could not generate ${I(e.filename,200)}: ${I(e.error,500)}`);case"navigator_file_created":{let n=Ke(e.file);return At(`Generated ${n.filename} (${N(n.sizeBytes)}). Download: anyforge oracle download ${this.sessionId} ${n.fileId} --output .`)}case"provider_fallback":{let n=I(e.from,120),r=I(e.to,120);return At(`Oracle switched model${n?` from ${n}`:""}${r?` to ${r}`:""}.`)}case"attachment_notice":return Array.isArray(e.notices)?e.notices.map(n=>{let r=n&&typeof n=="object"?n:{};return`${cn("Attachment")} ${I(r.name,160)}: ${I(r.message,500)}`}).join(`
290
+ `):"";default:return""}}};function _c(t,e,n){let r=[];if(t&&typeof t=="object"){let o=t,i=Ot(o);i&&r.push(`model ${i}`),typeof o.routing=="string"&&r.push(I(o.routing.replaceAll("_"," "),40)),typeof o.configuredModel=="string"&&o.configuredModel!==o.model&&r.push(`configured ${I(o.configuredModel,100)}`),typeof o.provider=="string"&&r.push(I(o.provider,100))}return e?.inputTokens!==void 0||e?.outputTokens!==void 0?r.push(`${e.inputTokens??0} in${e.cachedInputTokens?` (${e.cachedInputTokens} cached)`:""} / ${e.outputTokens??0} out tokens`):e?.totalTokens!==void 0&&r.push(`${e.totalTokens} tokens`),n!==void 0&&r.push(`${n} rounds`),r.length?`${At(r.join(" \xB7 "))}
291
+ `:""}async function $c(t,e,n){if(e.length!==2)throw new y("oracle download needs exactly a session id and file id.");let[r,o]=e;if(!r||!o)throw new y("oracle download needs a session id and file id.");let i=Rt(n,"output");if(!i)throw new y("oracle download requires --output <existing-directory>.");let s=vc(i),a=await gc(s);if(!(await hc(a)).isDirectory())throw new y("--output must point to an existing directory.");let p=await t.download(r,o),l=Lc(Pc(p.headers.get("content-disposition"))),u=yc(a,l),v=await Fc(p,Sc),k;try{k=await mc(u,"wx",384),await k.writeFile(v)}catch(x){throw x.code==="EEXIST"?new f(`Refusing to overwrite ${u}.`,m.FAILURE):x}finally{await k?.close()}process.stdout.write(`Downloaded ${d(l)} to ${d(u)} (${N(v.byteLength)}).
292
+ `)}function Pc(t){if(!t)return"oracle-file.bin";let e=/filename\*=UTF-8''([^;]+)/i.exec(t)?.[1];if(e)try{return decodeURIComponent(e.replace(/^"|"$/g,""))}catch{return"oracle-file.bin"}let n=/filename="?([^";]+)"?/i.exec(t)?.[1];return n?n.trim():"oracle-file.bin"}function Lc(t){let e=wc(t.replace(/\\/g,"/")).replace(/[\u0000-\u001f\u007f/:]/g,"_").replace(/^\.+/,"").trim().slice(0,180);return!e||e==="."||e===".."?"oracle-file.bin":e}async function Fc(t,e){if(!t.body)return Buffer.alloc(0);let n=t.body.getReader(),r=[],o=0;try{for(;;){let{value:i,done:s}=await n.read();if(s)break;let a=Buffer.from(i);if(o+=a.byteLength,o>e)throw new f(`Oracle download exceeds the ${N(e)} limit.`,m.API_ERROR);r.push(a)}}catch(i){throw await n.cancel("Oracle download exceeded its byte limit.").catch(()=>{}),i}finally{n.releaseLock()}return Buffer.concat(r)}var gi="https://crew.anyforge.ai",qc=new Set(["endpoint","limit","status","type","priority","initiative","program","search","assignee","notes","input","context","messages","scope","client","days","profile","interval","codebase","file","output"]),Mc=new Set(["help","version","json","active","archived","all","follow","3way","dry-run","force","shared","write","approve","read-only","stream-json"]);function Uc(t){let e={positional:[],flags:{}};for(let n=0;n<t.length;n+=1){let r=t[n];if(!r.startsWith("-")){e.command?e.positional.push(r):e.command=r;continue}let o=r==="-h"?"help":r==="-V"?"version":r==="-f"?"force":r.replace(/^--?/,""),[i,s]=o.includes("=")?[o.slice(0,o.indexOf("=")),o.slice(o.indexOf("=")+1)]:[o,void 0];if(qc.has(i)){let a=s??t[++n];if(a===void 0)throw new y(`--${i} needs a value.`);if(i==="file"){let c=e.flags.file;e.flags.file=[...typeof c=="string"?[c]:Array.isArray(c)?c:[],a]}else e.flags[i]=a;continue}if(Mc.has(i)){e.flags[i]=s===void 0?!0:s!=="false";continue}throw new y(`Unknown option: ${r}`,"Run `anyforge --help` for the command list.")}return e}function he(t,e){if(t===void 0||typeof t=="boolean")return;let n=Number(t);if(!Number.isFinite(n)||n<=0)throw new y(`--${e} must be a positive number, got "${t}".`);return n}function D(t){return typeof t=="string"?t:void 0}function cr(t){return t===!0?!0:void 0}function jc(){console.log(`
293
+ ${B("AnyForge Control")} \u2014 governed LLM proxy, and a scriptable AnyForge client.
294
+
295
+ ${B("USAGE")}
300
296
  npx @anyforge/control <command> [options]
301
297
 
302
- ${J("SETUP")}
298
+ ${B("SETUP")}
303
299
  init Authorise this device and patch local agent configs
304
300
  whoami Show the company, scopes and endpoint this key acts as
305
301
  status Check connectivity to the AnyForge proxy
306
302
  logout Clear the saved API key and revert patched configs
307
303
  apply-patch [file] Apply a unified diff (file or stdin) via git apply
308
304
 
309
- ${J("SKILLS")}
305
+ ${B("SKILLS")}
310
306
  skill install anyforge-platform
311
307
  Install the portable AnyForge platform guide
312
308
  (--scope project|user, --client agents|claude|codex)
313
309
 
314
- ${J("APPROVALS")} ${ot("(the gate that blocks a human)")}
310
+ ${B("APPROVALS")} ${xt("(the gate that blocks a human)")}
315
311
  approvals List HIL approvals awaiting a decision
316
312
  approve <id> Approve one, optionally with --notes
317
313
  reject <id> Reject one, optionally with --notes
318
314
 
319
- ${J("CREWS")}
315
+ ${B("CREWS")}
320
316
  crews List crews (--active for running/paused only)
321
317
  crew <id> Show one crew, its status and recent output
322
318
  crew start <item> Dispatch a crew on a work item (--profile, --follow)
@@ -324,14 +320,14 @@ ${J("CREWS")}
324
320
  halt <id> Stop a crew
325
321
  resume <id> Resume a paused or halted crew
326
322
 
327
- ${J("WORK & WORKFLOWS")}
323
+ ${B("WORK & WORKFLOWS")}
328
324
  work List work items (--status, --type, --priority, --search).
329
325
  Paged: one page by default, --all walks every page
330
326
  workflows List operator workflows
331
327
  run <id> Dispatch a workflow run, with optional --input JSON
332
328
  ask <question> Ask the Oracle one question
333
329
 
334
- ${J("HOSTED ORACLE")}
330
+ ${B("HOSTED ORACLE")}
335
331
  oracle [prompt] Start an interactive hosted Oracle session
336
332
  oracle exec <text> Submit one read-only turn (--json or --stream-json)
337
333
  oracle resume Resume an Oracle session
@@ -340,7 +336,7 @@ ${J("HOSTED ORACLE")}
340
336
  oracle logout Revoke and clear the saved Oracle grant
341
337
  oracle --help Show Oracle options and slash commands
342
338
 
343
- ${J("MEASUREMENT")}
339
+ ${B("MEASUREMENT")}
344
340
  backtest-corpus Can this workspace be back-tested? Counts the incidents
345
341
  that could become graded replay cases (--days 30|90|180|365)
346
342
  review-interception Serious findings the reviewer raised on your pull requests,
@@ -348,9 +344,9 @@ ${J("MEASUREMENT")}
348
344
  review-coverage How many recorded pull requests got reviewed, how fast the
349
345
  author heard back, and what a limit stopped (--days 7|30|90|180)
350
346
 
351
- ${J("OPTIONS")}
347
+ ${B("OPTIONS")}
352
348
  --json Print the raw API payload instead of a table
353
- --endpoint <url> Override the base URL (default: ${ot(vo)})
349
+ --endpoint <url> Override the base URL (default: ${xt(gi)})
354
350
  --limit <n> Page size on list commands (work: 1-200, default 50)
355
351
  --all work: follow the cursor until the backlog is exhausted
356
352
  --notes <text> approve/reject: reviewer notes, recorded in the audit trail
@@ -368,10 +364,10 @@ ${J("OPTIONS")}
368
364
  --help, -h Show this message
369
365
  --version, -V Print CLI version
370
366
 
371
- ${J("EXIT CODES")}
367
+ ${B("EXIT CODES")}
372
368
  0 ok 1 failure 2 usage 3 not authenticated 4 API error
373
369
 
374
- ${J("EXAMPLES")}
370
+ ${B("EXAMPLES")}
375
371
  anyforge approvals
376
372
  anyforge approve hil_123 --notes "ship it"
377
373
  anyforge crews --active --json | jq -r '.[].id'
@@ -385,10 +381,10 @@ ${J("EXAMPLES")}
385
381
  anyforge review-interception --days 30
386
382
  anyforge review-coverage --days 30
387
383
  anyforge ask "which initiatives slipped this cycle?"
388
- `)}function oa(){console.log(`
389
- ${J("AnyForge Oracle")} \u2014 chat with your hosted, workspace-governed Oracle.
384
+ `)}function Dc(){console.log(`
385
+ ${B("AnyForge Oracle")} \u2014 chat with your hosted, workspace-governed Oracle.
390
386
 
391
- ${J("USAGE")}
387
+ ${B("USAGE")}
392
388
  anyforge oracle [initial prompt] [options] Start an interactive session
393
389
  anyforge oracle exec <prompt|stdin> [options] Submit one read-only turn
394
390
  anyforge oracle resume [session-id] Resume a session in the terminal
@@ -397,7 +393,7 @@ ${J("USAGE")}
397
393
  anyforge oracle logout Revoke and clear Oracle login
398
394
  anyforge oracle download <session> <file> --output <directory>
399
395
 
400
- ${J("OPTIONS")}
396
+ ${B("OPTIONS")}
401
397
  --json Print one final JSON object (exec)
402
398
  --stream-json Print event JSONL followed by a final result (exec)
403
399
  --shared Share with the company (requires --program or --initiative)
@@ -416,8 +412,20 @@ CLI attachment limits are 10 MiB per file and 20 MiB total per turn. Files are
416
412
  uploaded only when named with --file or /attach. Generated files require an
417
413
  explicit \`oracle download\` destination; existing files are never overwritten.
418
414
 
419
- Interactive slash commands: /new [shared], /resume [session-id], /context,
420
- /attach <path>, /model, /help, /exit. Use Shift+Enter for a new line.
415
+ ${B("IN THE CONVERSATION")}
416
+ /help Commands and keys /status Session, model, limits
417
+ /new [shared] Start a conversation /clear Clear and start afresh
418
+ /resume [id] Open a saved conversation /usage Turns and tokens so far
419
+ /context <kind> <id> Change context /files Generated files
420
+ /attach <path> Attach a file /copy Copy the last answer
421
+ /model Model details /exit Leave (also Ctrl+D)
422
+ /design [topic] Talk through a technical design with Oracle
423
+ /catchup What needs you, what landed, what is running
424
+ (acting on its decisions needs --write --approve)
425
+
426
+ Enter sends; while Oracle works it queues one message. Shift+Enter adds a
427
+ line. Esc or Ctrl+C interrupts an answer and keeps the session open; press
428
+ Ctrl+C twice to exit. Ctrl+O shows tool activity; Ctrl+Shift+F searches.
421
429
 
422
430
  Examples:
423
431
  anyforge oracle
@@ -425,8 +433,8 @@ Examples:
425
433
  anyforge oracle --shared --program prog_123
426
434
  anyforge oracle exec "Summarize current risks" --json
427
435
  cat incident.log | anyforge oracle exec "Explain this log" --stream-json
428
- `)}async function ia(e,t,n,r){let o=t.flags.json===!0,[i]=t.positional;if(e==="oracle")return po({positional:t.positional,flags:t.flags,endpointOverride:r,endpoint:n});switch(e){case"init":return Bn({endpoint:n,force:t.flags.force===!0});case"logout":return Yn();case"status":return Qn({endpoint:n});case"whoami":return Hn({endpoint:r,json:o});case"apply-patch":return Xn({patchFile:i,threeWay:t.flags["3way"]===!0,dryRun:t.flags["dry-run"]===!0});case"proxy":console.log(Zs("Local proxy mode is coming in a future release.")),console.log(ot(" Until then, your agents talk directly to the AnyForge proxy."));return;case"skill":return Rr({subcommand:i,name:t.positional[1],scope:z(t.flags.scope),client:z(t.flags.client),force:t.flags.force===!0,json:o})}let s=await Ce(r);switch(e){case"approvals":return Zn({creds:s,json:o,limit:me(t.flags.limit,"limit")});case"approve":return Yt({creds:s,json:o,approvalId:i,decision:"APPROVED",notes:z(t.flags.notes)});case"reject":return Yt({creds:s,json:o,approvalId:i,decision:"REJECTED",notes:z(t.flags.notes)});case"crews":return er({creds:s,json:o,status:z(t.flags.status),activeOnly:Rn(t.flags.active),limit:me(t.flags.limit,"limit")});case"crew":{let[a,l]=t.positional;return a==="start"?ir({creds:s,json:o,workItemId:l,profileId:z(t.flags.profile),follow:t.flags.follow===!0,intervalSeconds:me(t.flags.interval,"interval")}):a==="follow"?Xt({creds:s,json:o,crewId:l,intervalSeconds:me(t.flags.interval,"interval")}):tr({creds:s,json:o,crewId:i,messages:me(t.flags.messages,"messages")})}case"halt":return Vt({creds:s,json:o,crewId:i,action:"halt"});case"resume":return Vt({creds:s,json:o,crewId:i,action:"resume"});case"work":return cr({creds:s,json:o,status:z(t.flags.status),type:z(t.flags.type),priority:z(t.flags.priority),initiative:z(t.flags.initiative),program:z(t.flags.program),search:z(t.flags.search),assignee:z(t.flags.assignee),includeArchived:Rn(t.flags.archived),limit:me(t.flags.limit,"limit"),all:Rn(t.flags.all)});case"workflows":return lr({creds:s,json:o});case"run":return dr({creds:s,json:o,workflowId:i,input:z(t.flags.input)});case"ask":return ur({creds:s,json:o,question:t.positional.join(" "),context:z(t.flags.context)});case"backtest-corpus":return fr({creds:s,json:o,days:me(t.flags.days,"days")});case"review-interception":return mr({creds:s,json:o,days:me(t.flags.days,"days")});case"review-coverage":return hr({creds:s,json:o,days:me(t.flags.days,"days")});default:throw new w(`Unknown command: ${e}`,"Run `anyforge --help` for the command list.")}}async function sa(){let e;try{e=na(process.argv.slice(2))}catch(r){Oo(r);return}if(e.flags.version===!0){let r=await Promise.resolve().then(()=>(wo(),ho));console.log(r.default.version);return}if(e.command==="oracle"&&e.flags.help===!0){oa();return}if(e.flags.help===!0||!e.command){ra();return}let t=z(e.flags.endpoint)??process.env.ANYFORGE_ENDPOINT,n=t??vo;try{if(e.command!=="oracle"){let o=["approve","codebase","file","output","read-only","shared","stream-json","write"].find(i=>e.flags[i]!==void 0);if(o)throw new w(`--${o} is only supported by the oracle command.`)}await ia(e.command,e,n,t)}catch(r){Oo(r)}}function Oo(e){e instanceof u&&(process.stderr.write(yo("Error: ")+f(e.message)+`
429
- `),e.hint?process.stderr.write(ot(f(e.hint))+`
430
- `):e instanceof w&&process.stderr.write(ot("Run `anyforge --help`.")+`
431
- `),process.exit(e.exitCode)),process.stderr.write(yo("Error: ")+f(e instanceof Error?e.message:String(e))+`
432
- `),process.exit(p.FAILURE)}sa();
436
+ `)}async function Bc(t,e,n,r){let o=e.flags.json===!0,[i]=e.positional;if(t==="oracle")return pi({positional:e.positional,flags:e.flags,endpointOverride:r,endpoint:n});switch(t){case"init":return $r({endpoint:n,force:e.flags.force===!0});case"logout":return Ur();case"status":return jr({endpoint:n});case"whoami":return qr({endpoint:r,json:o});case"apply-patch":return Br({patchFile:i,threeWay:e.flags["3way"]===!0,dryRun:e.flags["dry-run"]===!0});case"proxy":console.log(Nc("Local proxy mode is coming in a future release.")),console.log(xt(" Until then, your agents talk directly to the AnyForge proxy."));return;case"skill":return po({subcommand:i,name:e.positional[1],scope:D(e.flags.scope),client:D(e.flags.client),force:e.flags.force===!0,json:o})}let s=await Fe(r);switch(t){case"approvals":return Gr({creds:s,json:o,limit:he(e.flags.limit,"limit")});case"approve":return Sn({creds:s,json:o,approvalId:i,decision:"APPROVED",notes:D(e.flags.notes)});case"reject":return Sn({creds:s,json:o,approvalId:i,decision:"REJECTED",notes:D(e.flags.notes)});case"crews":return zr({creds:s,json:o,status:D(e.flags.status),activeOnly:cr(e.flags.active),limit:he(e.flags.limit,"limit")});case"crew":{let[a,c]=e.positional;return a==="start"?Yr({creds:s,json:o,workItemId:c,profileId:D(e.flags.profile),follow:e.flags.follow===!0,intervalSeconds:he(e.flags.interval,"interval")}):a==="follow"?Tn({creds:s,json:o,crewId:c,intervalSeconds:he(e.flags.interval,"interval")}):Wr({creds:s,json:o,crewId:i,messages:he(e.flags.messages,"messages")})}case"halt":return Cn({creds:s,json:o,crewId:i,action:"halt"});case"resume":return Cn({creds:s,json:o,crewId:i,action:"resume"});case"work":return Xr({creds:s,json:o,status:D(e.flags.status),type:D(e.flags.type),priority:D(e.flags.priority),initiative:D(e.flags.initiative),program:D(e.flags.program),search:D(e.flags.search),assignee:D(e.flags.assignee),includeArchived:cr(e.flags.archived),limit:he(e.flags.limit,"limit"),all:cr(e.flags.all)});case"workflows":return Zr({creds:s,json:o});case"run":return eo({creds:s,json:o,workflowId:i,input:D(e.flags.input)});case"ask":return to({creds:s,json:o,question:e.positional.join(" "),context:D(e.flags.context)});case"backtest-corpus":return ro({creds:s,json:o,days:he(e.flags.days,"days")});case"review-interception":return io({creds:s,json:o,days:he(e.flags.days,"days")});case"review-coverage":return so({creds:s,json:o,days:he(e.flags.days,"days")});default:throw new y(`Unknown command: ${t}`,"Run `anyforge --help` for the command list.")}}async function Gc(){let t;try{t=Uc(process.argv.slice(2))}catch(r){mi(r);return}if(t.flags.version===!0){let r=await Promise.resolve().then(()=>(sr(),ir));console.log(r.default.version);return}if(t.command==="oracle"&&t.flags.help===!0){Dc();return}if(t.flags.help===!0||!t.command){jc();return}let e=D(t.flags.endpoint)??process.env.ANYFORGE_ENDPOINT,n=e??gi;try{if(t.command!=="oracle"){let o=["approve","codebase","file","output","read-only","shared","stream-json","write"].find(i=>t.flags[i]!==void 0);if(o)throw new y(`--${o} is only supported by the oracle command.`)}await Bc(t.command,t,n,e)}catch(r){mi(r)}}function mi(t){t instanceof f&&(process.stderr.write(fi("Error: ")+d(t.message)+`
437
+ `),t.hint?process.stderr.write(xt(d(t.hint))+`
438
+ `):t instanceof y&&process.stderr.write(xt("Run `anyforge --help`.")+`
439
+ `),process.exit(t.exitCode)),process.stderr.write(fi("Error: ")+d(t instanceof Error?t.message:String(t))+`
440
+ `),process.exit(m.FAILURE)}Gc();
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@anyforge/control",
3
- "version": "0.5.0",
3
+ "version": "0.6.1",
4
4
  "description": "AnyForge CLI — hosted Oracle conversations, a governed LLM proxy, and a scriptable client for approvals, crews, work items and workflows.",
5
5
  "license": "Apache-2.0",
6
6
  "homepage": "https://anyforge.ai",