@codespar/cli 0.17.0 → 0.18.0

package/templates/checkout-agent/packages/agent-runtime/src/commands/reconcile.ts

@@ -0,0 +1,42 @@
+/**
+ * `codespar-agent reconcile [--json]`: compares local state with the rail.
+ * Names executions without an outcome, attempts the rail never saw, sealed
+ * outcomes the rail holds that the bundle does not. Read-only unless an
+ * execution is in `executing`, which it closes from what the rail says.
+ */
+import { existsSync } from "node:fs";
+import { join } from "node:path";
+import { stderr, stdout } from "node:process";
+import type { Agent } from "../agent.js";
+import { runsDir, setup } from "../setup.js";
+
+export async function reconcile(agent: Agent, argv: string[]): Promise<number> {
+  const json = argv.includes("--json");
+  const awaitsPayer = agent.settlement === "await-payer";
+  const say = (l: string) => stderr.write(l + "\n");
+  const s = setup(agent, { say, runId: `run_reconcile_${Date.now().toString(36)}` });
+  try {
+    const findings: Array<{ execution_id: string; kind: string; detail: string }> = [];
+    for (const e of s.engine.list()) {
+      if (e.state === "executing") {
+        const closed = await s.engine.reconcile(e.id);
+        const kind = closed.state === "executing" ? (awaitsPayer && closed.reason === "awaiting_settlement" ? "awaiting_payer" : "still_uncertain") : "closed_from_rail";
+        findings.push({ execution_id: e.id, kind, detail: `executing -> ${closed.state}${awaitsPayer && closed.detail ? ` (${closed.detail})` : ""}` });
+        continue;
+      }
+      for (const o of e.outcomes) {
+        if (o.receipt_id && !existsSync(join(runsDir(agent), e.run_id, "receipts", `${o.receipt_id}.json`))) {
+          findings.push({ execution_id: e.id, kind: s.kit.labels.missingReceiptKind, detail: s.kit.labels.missingReceiptDetail(o.receipt_id, e.run_id) });
+        }
+      }
+      const outbox = s.store.getOutbox(e.idempotency_key);
+      if (e.state === "settled" && outbox?.status !== "done") findings.push({ execution_id: e.id, kind: "outbox_mismatch", detail: `settled but outbox is ${outbox?.status ?? "absent"}` });
+    }
+    for (const f of findings) say(`${f.kind} ${f.execution_id}: ${f.detail}`);
+    if (json) stdout.write(JSON.stringify({ executions: s.engine.list().length, findings }) + "\n");
+    else say(findings.length ? `${findings.length} finding(s)` : "local state and rail agree");
+    return 0;
+  } finally {
+    s.close();
+  }
+}

package/templates/checkout-agent/packages/agent-runtime/src/commands/rerun.ts

@@ -0,0 +1,86 @@
+/**
+ * `codespar-agent rerun <run-id> [--json]`: replays a recorded run against
+ * the deterministic provider and the stub rail, with no network, in a fresh
+ * state, and compares the sequence of states with the original bundle. The
+ * model's outputs are the recording; every decision of the core is recomputed.
+ */
+import { mkdtempSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { stderr, stdout } from "node:process";
+import { ProofBundle, type ApprovalMode, type Execution } from "@codespar/agent-core";
+import type { Agent } from "../agent.js";
+import { runsDir, setup } from "../setup.js";
+import { handleExecution } from "../terminal.js";
+
+export async function rerun(agent: Agent, argv: string[]): Promise<number> {
+  const json = argv.includes("--json");
+  const runId = argv.find((a) => !a.startsWith("--"));
+  const say = (l: string) => stderr.write(l + "\n");
+  if (!runId) {
+    say("usage: npm run rerun <run-id> [--json]");
+    return 2;
+  }
+  const original = ProofBundle.open(runsDir(agent), runId);
+  if (!original) {
+    say(`no bundle at runs/${runId}`);
+    return 1;
+  }
+  const meta = original.readMeta() ?? {};
+  const mode = (meta["mode"] as ApprovalMode | undefined) ?? "human";
+  const events = original.readEvents();
+  const originalTrail = events.filter((e) => e["type"] === "execution.transition").map((e) => (e["payload"] as { to: string }).to);
+  const originalDecisions = events.filter((e) => e["type"] === "approval.created").map((e) => ((e["payload"] as { approver: { type: string } }).approver.type === "person" ? "approve" : "mandate"));
+  const userTurns = original.readTranscript().filter((l) => l.kind === "user").map((l) => l["text"] as string);
+  const transcriptPath = join(original.dir, "transcript.jsonl");
+  const plan = agent.kit.rerunPlan?.(events) ?? {};
+
+  const s = setup(agent, {
+    mode,
+    rail: "stub",
+    provider: "replay",
+    transcript: transcriptPath,
+    runId: `${runId}_rerun_${Date.now().toString(36)}`,
+    stateDir: mkdtempSync(join(tmpdir(), `${agent.slug}-rerun-`)),
+    stubRail: plan.stubRail,
+    say,
+  });
+  try {
+    let decisionIndex = 0;
+    const runtime = s.makeRuntime();
+    const loop = s.makeLoop(runtime, (execution: Execution) => {
+      const decision = execution.state === "awaiting_approval" ? (originalDecisions[decisionIndex++] === "approve" ? "approve" : "deny") : "none";
+      return handleExecution(execution, {
+        setup: s,
+        approver: { id: "usr_rerun", channel: "terminal" },
+        decision,
+        say,
+        ...(agent.settlement === "await-payer" ? { tell: () => undefined, simulatePayer: plan.simulatePayer ?? false } : {}),
+      });
+    });
+    for (const text of userTurns) await loop.turn(text);
+    const trail = s.store.listEvents({ run_id: s.runId }).filter((e) => e.type === "execution.transition").map((e) => (e.payload as { to: string }).to);
+    const outcomesOf = (list: Record<string, unknown>[]) => list.filter((e) => e["type"] === "rail.outcome").map((e) => (e["payload"] as { status: string }).status);
+    const originalOutcomes = outcomesOf(events);
+    const rerunOutcomes = outcomesOf(s.bundle.readEvents());
+    const sameTrail = JSON.stringify(trail) === JSON.stringify(originalTrail);
+    const same = agent.kit.rerunComparesOutcomes ? sameTrail && JSON.stringify(rerunOutcomes) === JSON.stringify(originalOutcomes) : sameTrail;
+    if (json) {
+      stdout.write(
+        JSON.stringify({
+          run_id: runId,
+          rerun_id: s.runId,
+          same_states: same,
+          original: originalTrail,
+          rerun: trail,
+          ...(agent.kit.rerunComparesOutcomes ? { original_outcomes: originalOutcomes, rerun_outcomes: rerunOutcomes } : {}),
+          bundle_dir: s.bundle.dir,
+        }) + "\n",
+      );
+    }
+    say(same ? `rerun ok: ${trail.length} transition(s), same sequence as ${runId}` : `rerun DIFFERS: original ${JSON.stringify(originalTrail)} vs rerun ${JSON.stringify(trail)}`);
+    return same ? 0 : 1;
+  } finally {
+    s.close();
+  }
+}

package/templates/checkout-agent/packages/agent-runtime/src/commands/resume.ts

@@ -0,0 +1,49 @@
+/**
+ * `codespar-agent resume [--json]`: after a crash or a restart. Executions
+ * left in `executing` are reconciled against the rail, never repeated: a
+ * lookup presents the same explicit attempt_id, which the API answers from
+ * its record of that attempt without paying again (ent#1671). Stale open
+ * ones expire.
+ */
+import { stderr, stdout } from "node:process";
+import type { Execution } from "@codespar/agent-core";
+import type { Agent } from "../agent.js";
+import { setup } from "../setup.js";
+import { followUp } from "../terminal.js";
+
+export async function resume(agent: Agent, argv: string[]): Promise<number> {
+  const json = argv.includes("--json");
+  const awaitsPayer = agent.settlement === "await-payer";
+  const say = (l: string) => stderr.write(l + "\n");
+  const s = setup(agent, { say, runId: `run_resume_${Date.now().toString(36)}` });
+  try {
+    const closed: Execution[] = [];
+    // Only resume dispatches, and only what the outbox proves was never sent; everything else is reconciled from the rail.
+    for (const stuck of s.engine.list({ state: "executing" })) {
+      const e = await s.engine.resumePending(stuck.id);
+      closed.push(e);
+      say(e.state === "executing" ? s.kit.labels.stillExecuting(e) : `${e.id}: executing -> ${e.state}`);
+    }
+    for (const e of closed) if (e.state !== "executing") await followUp(e, s, say);
+    // What a crash left half-done after an outcome (a service invoice opened and never sent, or sent and never answered).
+    await s.kit.resumeFollowUps?.(s, say);
+    const expired = s.engine.expireStale().map((e) => ({ id: e.id, state: e.state }));
+    for (const e of expired) say(`${e.id}: -> expired`);
+    const open = s.engine.list({ state: ["awaiting_approval", "approved"] }).map((e) => ({ id: e.id, state: e.state }));
+    for (const e of open) say(`${e.id}: still ${e.state}; decide it with npm run approve ${e.id} / npm run deny ${e.id}`);
+    if (json) {
+      const resumed = closed.map((e) => ({
+        id: e.id,
+        state: e.state,
+        ...(awaitsPayer ? { reason: e.reason ?? null } : {}),
+        detail: e.detail ?? null,
+        ...(awaitsPayer ? { charge_ids: e.outcomes.map((o) => o.transaction_id ?? null) } : {}),
+        receipt_ids: e.outcomes.filter((o) => o.receipt_id).map((o) => o.receipt_id),
+      }));
+      stdout.write(JSON.stringify({ resumed, expired, open, bundle_dir: s.bundle.dir }) + "\n");
+    } else say(closed.length || expired.length ? "resume done" : "nothing to resume");
+    return closed.some((e) => e.state === "executing" && (!awaitsPayer || e.reason !== "awaiting_settlement")) ? 3 : 0;
+  } finally {
+    s.close();
+  }
+}

package/templates/checkout-agent/packages/agent-runtime/src/commands/start-whatsapp.ts

@@ -0,0 +1,134 @@
+/**
+ * `codespar-agent start --channel whatsapp`: wiring, and only wiring.
+ *
+ * It picks a backend, binds the conversation, hands the channel the rules the
+ * agent's own guardrails declare, and runs the loop — all of that through
+ * `channels/whatsapp/open.ts`, which `poll --channel whatsapp` goes through
+ * too, so the two commands cannot end up enforcing different rules. The
+ * decisions are elsewhere: the rules in `channels/rules.ts`, the session
+ * window in `channels/whatsapp/session.ts`, the gates in `terminal.ts`, which
+ * this path reuses unchanged so the two channels cannot drift on what may
+ * execute.
+ */
+import { stdout } from "node:process";
+import { relative } from "node:path";
+import type { ConversationScript } from "@codespar/agent-core";
+import type { Agent } from "../agent.js";
+import type { Setup } from "../setup.js";
+import { defaultAsk } from "../terminal.js";
+import { converse } from "../channels/whatsapp/run.js";
+import { buildWhatsApp, simulatedCost, type WhatsAppBackendName } from "../channels/whatsapp/open.js";
+import { EmulatorUnreachableError } from "../channels/whatsapp/emulator.js";
+
+export type { WhatsAppBackendName };
+
+export interface StartWhatsAppOptions {
+  agent: Agent;
+  setup: Setup;
+  script: ConversationScript;
+  backend: WhatsAppBackendName;
+  /** Replay the conversation's turns; otherwise the person is at the keyboard. */
+  scripted: boolean;
+  approver: { id: string; channel: string };
+  json: boolean;
+  startedAt: number;
+  say: (line: string) => void;
+  decision?: "approve" | "deny" | "none";
+  waitSeconds?: number | undefined;
+  simulatePayer?: boolean | undefined;
+  now?: (() => Date) | undefined;
+}
+
+export async function startWhatsApp(options: StartWhatsAppOptions): Promise<number> {
+  const { agent, setup: s, script, say } = options;
+  const now = options.now ?? (() => new Date());
+  const conversation = { contact: script.contact, subject: script.subject };
+
+  // A scripted conversation has nobody at a keyboard, and in `human` mode
+  // somebody has to decide. Refused rather than left waiting on a stdin that
+  // will never answer: a gate that hangs teaches nothing.
+  if (options.scripted && s.mode === "human" && !options.decision) {
+    say("--scripted has nobody at the keyboard and approval: human needs a decision: add --approve or --deny, or run --mode mandate");
+    return 2;
+  }
+
+  const built = buildWhatsApp({
+    agent,
+    setup: s,
+    conversation,
+    backend: options.backend,
+    now,
+    say,
+    bundle: s.bundle,
+    ...(options.scripted ? { script } : { ask: defaultAsk }),
+    // A run that STARTS a conversation pins the emulator's clock to its own instant.
+    ...(options.now ? { pinAt: options.now() } : {}),
+  });
+  if ("refusal" in built) {
+    for (const line of built.refusal) say(line);
+    return 1;
+  }
+  const { channel, driver, sessionKey } = built;
+
+  // The channel is opened here, which is where an emulator that is not
+  // running has to be reported: after this the run has already started.
+  try {
+    await channel.open();
+  } catch (err) {
+    if (err instanceof EmulatorUnreachableError) {
+      say(err.message);
+      return 1;
+    }
+    throw err;
+  }
+
+  const result = await converse({
+    setup: s,
+    channel,
+    approver: options.approver,
+    say,
+    ...(options.decision ? { decision: options.decision } : {}),
+    ...(options.scripted ? {} : { ask: defaultAsk }),
+    ...(options.waitSeconds !== undefined ? { waitSeconds: options.waitSeconds } : {}),
+    ...(options.simulatePayer !== undefined ? { simulatePayer: options.simulatePayer } : {}),
+  });
+
+  // What the emulator is actually for, and the one number this repo cannot
+  // compute: what the conversation would have cost under Meta's rules. Read for
+  // the console only — never asserted on, because it is their engine's answer
+  // and not a contract of ours.
+  const cost = await simulatedCost(driver, sessionKey);
+
+  const log = channel.log();
+  const refused = log.filter((l) => l.refused).map((l) => ({ rule: l.refused!.rule, detail: l.refused!.detail }));
+  const channelSummary = {
+    name: "whatsapp",
+    backend: channel.backend,
+    conversation: script.name,
+    turns: result.turns,
+    messages_in: log.filter((l) => l.direction === "in").length,
+    messages_out: log.filter((l) => l.direction === "out" && !l.refused).length,
+    refused,
+    // What the provider reported undelivered after it left, and which outcome each one was telling.
+    delivery_failed: log.filter((l) => l.direction === "status" && l.state === "failed").map((l) => ({ message_id: l.message_id, errors: l.errors ?? [], ...(l.about ? { about: l.about } : {}) })),
+    taps: log.filter((l) => l.kind === "reply").map((l) => ({ id: l.reply?.id ?? null, turn: !l.refused, ...(l.refused ? { refused: l.refused.rule } : {}) })),
+    log: relative(process.cwd(), `${s.bundle.dir}/channel.jsonl`),
+    ...(cost ? { simulated_cost: cost } : {}),
+  };
+
+  if (options.json) {
+    const payload = s.kit.oneShotPayload({
+      setup: s,
+      reply: result.replies[result.replies.length - 1] ?? "",
+      toolCalls: result.toolCalls,
+      executions: result.executions,
+      startedAt: options.startedAt,
+    });
+    stdout.write(JSON.stringify({ ...payload, channel: channelSummary }) + "\n");
+  } else {
+    say(`conversa em ${channelSummary.log} — ${channelSummary.messages_in} recebida(s), ${channelSummary.messages_out} enviada(s)${refused.length ? `, ${refused.length} recusada(s)` : ""}`);
+    if (cost) say(`custo simulado desta conversa nas regras da Meta: ${cost.total.toFixed(4)} ${cost.currency} (conta do emulador, nao nossa)`);
+  }
+
+  return result.executions.some((e) => e.state === "executing") ? 3 : 0;
+}

package/templates/checkout-agent/packages/agent-runtime/src/commands/start.ts

@@ -0,0 +1,248 @@
+/**
+ * `codespar-agent start`                              interactive terminal
+ * `codespar-agent start --input "..."`                one turn, no prompt
+ * `codespar-agent start --scenario happy-path`        a scenario pack, every mode it declares
+ * `codespar-agent start --channel whatsapp`           the conversation channel
+ *
+ * `--json` puts machine data on stdout (valid JSON, nothing else) and the
+ * human messages on stderr.
+ */
+import { stderr, stdout } from "node:process";
+import { relative, resolve } from "node:path";
+import { NotATestKeyError, declaredReplies, isTestKey, loadManifest, resolveFixedClock, type ApprovalMode, type ChannelName } from "@codespar/agent-core";
+import { join } from "node:path";
+import type { Agent } from "../agent.js";
+import type { RailKind } from "../kit.js";
+import { resolveProvider, resolveRailKind, setup, type ProviderKind } from "../setup.js";
+import { checkScenario, listScenarios, loadScenario, runScenario, scenariosDir } from "../scenarios.js";
+import { closeTerminal, defaultAsk, handleExecution, interactive } from "../terminal.js";
+import { loadTemplates, resolveConversation } from "../channels/index.js";
+import { startWhatsApp, type WhatsAppBackendName } from "./start-whatsapp.js";
+
+interface Args {
+  input?: string;
+  scenario?: string;
+  mode?: ApprovalMode;
+  json: boolean;
+  decision?: "approve" | "deny";
+  provider?: ProviderKind;
+  transcript?: string;
+  rail?: RailKind;
+  user?: string;
+  wait?: number;
+  simulatePayer: boolean;
+  payer?: "pays" | "expires" | "never";
+  /** ISO 8601 instant the run is pinned to (the guardrails read it instead of the wall clock). */
+  now?: string;
+  /** Which channel the person is on. `terminal` is every agent's; `whatsapp` needs a conversation. */
+  channel: ChannelName;
+  backend?: WhatsAppBackendName;
+  conversation?: string;
+  /** Replay the conversation's turns instead of reading them from the keyboard. */
+  scripted: boolean;
+  help: boolean;
+}
+
+export function parseArgs(argv: string[], awaitsPayer: boolean): Args {
+  const args: Args = { json: false, simulatePayer: false, help: false, channel: "terminal", scripted: false };
+  for (let i = 0; i < argv.length; i += 1) {
+    const a = argv[i]!;
+    const next = () => {
+      const v = argv[i + 1];
+      if (v === undefined) throw new Error(`${a} needs a value`);
+      i += 1;
+      return v;
+    };
+    if (a === "--input") args.input = next();
+    else if (a === "--scenario") args.scenario = next();
+    else if (a === "--mode") {
+      const v = next();
+      if (v !== "human" && v !== "mandate") throw new Error("--mode must be human or mandate");
+      args.mode = v;
+    } else if (a === "--json") args.json = true;
+    else if (a === "--approve") args.decision = "approve";
+    else if (a === "--deny") args.decision = "deny";
+    else if (a === "--provider") {
+      const v = next();
+      if (v !== "anthropic" && v !== "replay") throw new Error("--provider must be anthropic or replay");
+      args.provider = v;
+    } else if (a === "--transcript") args.transcript = next();
+    else if (a === "--rail") {
+      const v = next();
+      if (v !== "stub" && v !== "api") throw new Error("--rail must be stub or api");
+      args.rail = v;
+    } else if (a === "--user") args.user = next();
+    else if (awaitsPayer && a === "--wait") {
+      const v = Number(next());
+      if (!Number.isFinite(v) || v < 0) throw new Error("--wait must be a number of seconds");
+      args.wait = v;
+    } else if (awaitsPayer && a === "--simulate-payer") args.simulatePayer = true;
+    else if (awaitsPayer && a === "--payer") {
+      const v = next();
+      if (v !== "pays" && v !== "expires" && v !== "never") throw new Error("--payer must be pays, expires or never");
+      args.payer = v;
+    } else if (a === "--now") args.now = next();
+    else if (a === "--channel") {
+      const v = next();
+      if (v !== "terminal" && v !== "whatsapp") throw new Error("--channel must be terminal or whatsapp");
+      args.channel = v;
+    } else if (a === "--backend") {
+      const v = next();
+      if (v !== "simulator" && v !== "cloud-api") throw new Error("--backend must be simulator or cloud-api");
+      args.backend = v;
+    } else if (a === "--conversation") args.conversation = next();
+    else if (a === "--scripted") args.scripted = true;
+    else if (a === "--help" || a === "-h") args.help = true;
+    else throw new Error(`unknown argument ${a}`);
+  }
+  return args;
+}
+
+export async function start(agent: Agent, argv: string[]): Promise<number> {
+  const awaitsPayer = agent.settlement === "await-payer";
+  const usage = agent.kit.usage(loadManifest(join(agent.dir, "agent.yaml")));
+  let args: Args;
+  try {
+    args = parseArgs(argv, awaitsPayer);
+  } catch (err) {
+    stderr.write(`${err instanceof Error ? err.message : String(err)}\n${usage}\n`);
+    return 2;
+  }
+  if (args.help) {
+    stderr.write(usage + "\n");
+    return 0;
+  }
+  const say = (line: string) => stderr.write(line + "\n");
+
+  // A pinned instant makes the guardrails deterministic: the CI runs the fixture inside the declared hours whatever the hour is.
+  let now: (() => Date) | undefined;
+  try {
+    now = resolveFixedClock(args.now, process.env);
+  } catch (err) {
+    stderr.write(`${err instanceof Error ? err.message : String(err)}\n${usage}\n`);
+    return 2;
+  }
+
+  // Sandbox by construction: a live key dies here, before anything else runs.
+  const railKind = resolveRailKind(process.env, args.rail);
+  if (railKind === "api" && !isTestKey(process.env["CODESPAR_API_KEY"])) {
+    say(new NotATestKeyError().message);
+    return 1;
+  }
+
+  if (args.scenario) return runScenarioCommand(agent, args, railKind, say);
+
+  // A channel is a conversation, so the flags a one-shot and a scenario pack use have no meaning on one.
+  if (args.channel === "whatsapp" && (args.input !== undefined || args.scenario !== undefined)) {
+    say("--channel whatsapp is a conversation: it takes its turns from channels/whatsapp/, not from --input or --scenario");
+    return 2;
+  }
+  if (args.channel !== "whatsapp" && (args.backend !== undefined || args.conversation !== undefined || args.scripted)) {
+    say("--backend, --conversation and --scripted belong to --channel whatsapp");
+    return 2;
+  }
+  if (args.channel === "whatsapp" && !loadManifest(join(agent.dir, "agent.yaml")).manifest.channels.includes("whatsapp")) {
+    say(`${agent.slug} does not declare the whatsapp channel in agent.yaml`);
+    return 2;
+  }
+
+  if (agent.kit.ensureMandate) {
+    const ok = await agent.kit.ensureMandate({ agentDir: agent.dir, argv, say, railKind, oneShot: args.input !== undefined, ask: defaultAsk });
+    if (!ok) return 1;
+  }
+
+  // The first thing the person says: the `--input` of a one-shot, or the first scripted turn of a conversation.
+  let conversationScript;
+  try {
+    conversationScript = args.channel === "whatsapp" ? resolveConversation(agent, args.conversation) : undefined;
+  } catch (err) {
+    say(err instanceof Error ? err.message : String(err));
+    return 2;
+  }
+  // A first turn that is a TAP is looked up by the intent the tap stands for, which is what the model is handed.
+  const firstTurn = args.scripted ? conversationScript?.turns[0] : undefined;
+  const firstInput = args.input ?? firstTurn?.text ?? (firstTurn?.reply ? declaredReplies(loadTemplates(agent)).get(firstTurn.reply.id)?.intent : undefined);
+
+  // No model: replay the recorded scenario whose first turn is what the person said first.
+  let transcript = args.transcript;
+  const provider = resolveProvider(process.env, args.provider);
+  if (provider === "replay" && !transcript && firstInput) {
+    const match = listScenarios(agent).map((n) => loadScenario(agent, n)).find((s) => s.turns[0].input === firstInput);
+    if (match) transcript = resolve(scenariosDir(agent), match.transcript);
+    else {
+      say(`no ANTHROPIC_API_KEY and no recorded transcript for that input. Set the key, pass --transcript, or use one of: ${listScenarios(agent).map((n) => `"${loadScenario(agent, n).turns[0].input}"`).join(", ")}`);
+      return 1;
+    }
+  }
+
+  const s = setup(agent, { mode: args.mode, rail: railKind, provider, transcript, now, say });
+  if (args.payer) s.payer?.behave(args.payer);
+  const approver = { id: args.user ?? s.kit.labels.defaultUser, channel: "terminal" };
+  const startedAt = Date.now();
+  try {
+    if (args.channel === "whatsapp") {
+      s.conversation = conversationScript;
+      return await startWhatsApp({
+        agent,
+        setup: s,
+        script: conversationScript!,
+        backend: args.backend ?? "simulator",
+        scripted: args.scripted,
+        approver: { id: approver.id, channel: "whatsapp" },
+        json: args.json,
+        startedAt,
+        say,
+        ...(args.decision ? { decision: args.decision } : {}),
+        ...(args.wait !== undefined ? { waitSeconds: args.wait } : {}),
+        simulatePayer: args.simulatePayer,
+        now,
+      });
+    }
+    const runtime = s.makeRuntime();
+    if (!args.input) {
+      await interactive({ setup: s, approver, runtime, say, waitSeconds: args.wait, simulatePayer: args.simulatePayer });
+      return 0;
+    }
+    const loop = s.makeLoop(runtime, (execution) =>
+      handleExecution(execution, { setup: s, approver, decision: args.decision ?? "none", say, waitSeconds: args.wait, simulatePayer: args.simulatePayer, ...(args.json ? { tell: say } : {}) }),
+    );
+    const result = await loop.turn(args.input);
+    const executions = s.engine.list().filter((e) => e.run_id === s.runId);
+    const payload = s.kit.oneShotPayload({ setup: s, reply: result.reply, toolCalls: result.tool_calls, executions, startedAt });
+    if (args.json) stdout.write(JSON.stringify(payload) + "\n");
+    else stdout.write(result.reply + "\n");
+    return executions.some((e) => e.state === "executing") ? 3 : 0;
+  } finally {
+    closeTerminal();
+    s.close();
+  }
+}
+
+async function runScenarioCommand(agent: Agent, args: Args, railKind: RailKind, say: (l: string) => void): Promise<number> {
+  const scenario = loadScenario(agent, args.scenario!);
+  const picksRail = agent.kit.scenarioRail === "requested";
+  const rail: RailKind = picksRail ? railKind : "stub";
+  if (picksRail && !scenario.rails.includes(rail)) {
+    say(`scenario ${scenario.name} runs on ${scenario.rails.join("/")} only (asked: ${rail})`);
+    return 2;
+  }
+  const modes = args.mode ? [args.mode] : scenario.modes;
+  const results = [];
+  for (const mode of modes) {
+    say(`== scenario ${scenario.name} — approval: ${mode}${picksRail ? ` — rail: ${rail}` : ""}`);
+    say(scenario.description);
+    const run = await runScenario(agent, scenario, {
+      mode,
+      rail,
+      say: args.json ? () => undefined : say,
+      ...(picksRail ? { tell: args.json ? () => undefined : (l: string) => void stdout.write(l + "\n") } : {}),
+      waitSeconds: args.wait,
+    });
+    const check = checkScenario(scenario, run);
+    for (const reply of run.replies) say(`agente: ${reply}`);
+    say(check.ok ? `== ok — ${agent.settlement === "await-payer" ? `${run.cycle_seconds}s — ` : ""}bundle em ${relative(process.cwd(), run.bundle_dir)}` : `== FAIL: ${check.failures.join("; ")}`);
+    results.push({ mode, ok: check.ok, failures: check.failures, run });
+  }
+  if (args.json) stdout.write(JSON.stringify({ scenario: scenario.name, ...(picksRail ? { rail } : {}), results }) + "\n");
+  return results.every((r) => r.ok) ? 0 : 1;
+}