@jini-ai/cli 0.1.0

package/dist/redact.js

@@ -0,0 +1,134 @@
+/**
+ * @module redact
+ *
+ * Bounded, redacted rendering of text that ultimately traces back to an
+ * untrusted network peer — a daemon's error body, a `fetch()` rejection's
+ * cause message — rather than to this process's own code. Three problems
+ * are addressed together because a hostile or merely buggy daemon can
+ * combine them: an unbounded body can be enormous, an arbitrary body can
+ * contain terminal control/ANSI escape sequences that manipulate the
+ * user's terminal when printed verbatim, and it can echo back secrets (an
+ * `Authorization` header, an API key, a bearer/refresh token) that were
+ * present in the request or in an upstream provider's own error.
+ *
+ * Added per CR-004 / SEC-RB-009 (`ADS-memory/reports/code-review/CR-remaining-backend-audit-2026-07-21.md`,
+ * `ADS-memory/reports/security/SEC-remaining-backend-audit-2026-07-21.md`):
+ * `http.ts` and `errors.ts` previously wrote raw fetch-cause messages,
+ * arbitrary daemon JSON, or complete non-JSON response bodies straight to
+ * the terminal.
+ */
+/** Hard cap on how much untrusted text {@link sanitizeUntrustedText} will ever return, absent an override. */
+const DEFAULT_MAX_EXCERPT_LENGTH = 500;
+/** Recursion/branching caps for {@link sanitizeUnknownDeep} — bounds the work done on an arbitrary parsed-JSON tree. */
+const MAX_SANITIZE_DEPTH = 4;
+const MAX_SANITIZE_ENTRIES = 50;
+const ESC = 0x1b;
+const BEL = 0x07;
+const BACKSLASH = 0x5c;
+const OSC_OPEN = 0x5d; // ']'
+const CSI_OPEN = 0x5b; // '['
+function isCsiFinalByte(code) {
+    return code >= 0x40 && code <= 0x7e; // '@'..'~'
+}
+function isOtherControlCode(code) {
+    if (code === 0x09 || code === 0x0a || code === 0x0d)
+        return false; // tab / LF / CR pass through
+    if (code <= 0x1f)
+        return true; // remaining C0 controls (ESC itself is handled separately)
+    if (code === 0x7f)
+        return true; // DEL
+    if (code >= 0x80 && code <= 0x9f)
+        return true; // C1 controls
+    return false;
+}
+/**
+ * Strip ANSI/terminal escape sequences (CSI `ESC [ ... final-byte`, OSC `ESC ] ... BEL-or-ST`,
+ * and bare ESC-prefixed bytes) plus other C0/C1 control characters from `text`. Written as an
+ * explicit char-code scanner rather than a regex literal with hex escapes, so the pattern is
+ * plain ASCII source with no embedded control bytes.
+ */
+export function stripControlSequences(text) {
+    let out = '';
+    for (let i = 0; i < text.length; i++) {
+        const code = text.charCodeAt(i);
+        if (code === ESC) {
+            const next = text.charCodeAt(i + 1);
+            if (next === CSI_OPEN) {
+                let j = i + 2;
+                while (j < text.length && !isCsiFinalByte(text.charCodeAt(j)))
+                    j++;
+                i = j; // land on the final byte; the outer loop's i++ steps past it
+                continue;
+            }
+            if (next === OSC_OPEN) {
+                let j = i + 2;
+                while (j < text.length &&
+                    text.charCodeAt(j) !== BEL &&
+                    !(text.charCodeAt(j) === ESC && text.charCodeAt(j + 1) === BACKSLASH)) {
+                    j++;
+                }
+                if (j < text.length && text.charCodeAt(j) === BEL)
+                    i = j;
+                else
+                    i = Math.min(j + 1, text.length - 1);
+                continue;
+            }
+            continue; // bare ESC (or an unrecognized ESC-prefixed byte): drop just the ESC byte
+        }
+        if (isOtherControlCode(code))
+            continue;
+        out += text[i];
+    }
+    return out;
+}
+// A labeled credential (`Authorization: ...`, `api-key=...`) has everything after the label
+// redacted. A bare run of 20+ base64url/hex-alphabet characters is treated as a possible
+// opaque token/secret and redacted outright, even with no label.
+const LABELED_SECRET_RE = /\b(authorization|bearer|api[-_]?key|access[-_]?token|refresh[-_]?token|client[-_]?secret|password|secret|cookie)\b\s*[:=]\s*\S+/gi;
+const OPAQUE_TOKEN_RE = /[A-Za-z0-9_-]{20,}/g;
+/** Redact labeled credentials and long opaque-token-looking substrings from `text`. */
+export function redactSecretLike(text) {
+    return text
+        .replace(LABELED_SECRET_RE, (match) => match.replace(/\S+$/, '[redacted]'))
+        .replace(OPAQUE_TOKEN_RE, '[redacted]');
+}
+/**
+ * Strip terminal control sequences, redact anything that looks like a secret, and cap the
+ * length of `text` — the one function every boundary that surfaces daemon/network-derived text
+ * to stderr/stdout should route through first.
+ */
+export function sanitizeUntrustedText(text, options = {}) {
+    const maxLength = options.maxLength ?? DEFAULT_MAX_EXCERPT_LENGTH;
+    const sanitized = redactSecretLike(stripControlSequences(text));
+    if (sanitized.length <= maxLength)
+        return sanitized;
+    const omitted = sanitized.length - maxLength;
+    return `${sanitized.slice(0, maxLength)}… [truncated ${omitted} more characters]`;
+}
+/**
+ * Recursively sanitize an arbitrary parsed-JSON value (the shape a daemon error envelope's
+ * `data`/`details` field can legitimately be): every string leaf is passed through
+ * {@link sanitizeUntrustedText}, and both array length and object key count are capped per
+ * level so a maliciously wide or deep payload can't blow up the work done here. Depth beyond
+ * the cap is replaced with a placeholder rather than silently dropped, so truncation is visible
+ * instead of looking like an empty/missing value.
+ */
+export function sanitizeUnknownDeep(value, depth = 0) {
+    if (depth > MAX_SANITIZE_DEPTH)
+        return '[omitted: nested too deeply]';
+    if (typeof value === 'string')
+        return sanitizeUntrustedText(value);
+    if (Array.isArray(value)) {
+        return value.slice(0, MAX_SANITIZE_ENTRIES).map((item) => sanitizeUnknownDeep(item, depth + 1));
+    }
+    if (value !== null && typeof value === 'object') {
+        const out = {};
+        for (const [key, val] of Object.entries(value).slice(0, MAX_SANITIZE_ENTRIES)) {
+            out[sanitizeUntrustedText(key, { maxLength: 100 })] = sanitizeUnknownDeep(val, depth + 1);
+        }
+        return out;
+    }
+    // numbers, booleans, null, undefined: nothing to sanitize.
+    return value;
+}
+//# sourceMappingURL=redact.js.map

package/dist/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../src/redact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,8GAA8G;AAC9G,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAEvC,wHAAwH;AACxH,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAC7B,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEhC,MAAM,GAAG,GAAG,IAAI,CAAC;AACjB,MAAM,GAAG,GAAG,IAAI,CAAC;AACjB,MAAM,SAAS,GAAG,IAAI,CAAC;AACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,MAAM;AAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,MAAM;AAE7B,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,CAAC,WAAW;AAClD,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY;IACtC,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC,CAAC,6BAA6B;IAChG,IAAI,IAAI,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,2DAA2D;IAC1F,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,MAAM;IACtC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,cAAc;IAC7D,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACpC,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACd,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;oBAAE,CAAC,EAAE,CAAC;gBACnE,CAAC,GAAG,CAAC,CAAC,CAAC,6DAA6D;gBACpE,SAAS;YACX,CAAC;YACD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACd,OACE,CAAC,GAAG,IAAI,CAAC,MAAM;oBACf,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG;oBAC1B,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS,CAAC,EACrE,CAAC;oBACD,CAAC,EAAE,CAAC;gBACN,CAAC;gBACD,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG;oBAAE,CAAC,GAAG,CAAC,CAAC;;oBACpD,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gBAC1C,SAAS;YACX,CAAC;YACD,SAAS,CAAC,0EAA0E;QACtF,CAAC;QACD,IAAI,kBAAkB,CAAC,IAAI,CAAC;YAAE,SAAS;QACvC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,4FAA4F;AAC5F,yFAAyF;AACzF,iEAAiE;AACjE,MAAM,iBAAiB,GACrB,mIAAmI,CAAC;AACtI,MAAM,eAAe,GAAG,qBAAqB,CAAC;AAE9C,uFAAuF;AACvF,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,IAAI;SACR,OAAO,CAAC,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;SAC1E,OAAO,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;AAC5C,CAAC;AAOD;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAY,EAAE,UAA+B,EAAE;IACnF,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,0BAA0B,CAAC;IAClE,MAAM,SAAS,GAAG,gBAAgB,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC;IAChE,IAAI,SAAS,CAAC,MAAM,IAAI,SAAS;QAAE,OAAO,SAAS,CAAC;IACpD,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC;IAC7C,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,gBAAgB,OAAO,mBAAmB,CAAC;AACpF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IAC3D,IAAI,KAAK,GAAG,kBAAkB;QAAE,OAAO,8BAA8B,CAAC;IACtE,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,qBAAqB,CAAC,KAAK,CAAC,CAAC;IACnE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,EAAE,CAAC;YAC9E,GAAG,CAAC,qBAAqB,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,mBAAmB,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAC5F,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,2DAA2D;IAC3D,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/run-command.d.ts

@@ -0,0 +1,39 @@
+import { type ExitCodeTable } from './errors.js';
+import type { CommandRegistry } from './command-registry.js';
+export interface RunCommandDeps {
+    /** Resolves the daemon HTTP base URL once per command invocation (e.g. wraps `resolveDaemonUrl`). */
+    resolveBaseUrl: () => Promise<string> | string;
+    /** Defaults to `process.stdout.write`; inject for tests. Used for successful command output. */
+    write?: (text: string) => void;
+    /** Defaults to `process.stderr.write`; inject for tests. Used for usage/validation errors. */
+    writeErr?: (text: string) => void;
+    /** Defaults to the global `fetch`; inject for tests. */
+    fetchImpl?: typeof fetch;
+    /** Defaults to `process.exit`; inject for tests (must not return). */
+    exit?: (code: number) => never;
+    /** Extra/overriding `code -> exitCode` entries layered on the package default table. */
+    exitCodes?: ExitCodeTable;
+}
+/** `run start --context-ref <ref> [--agent-id <id>] [--idempotency-key <key>]` */
+export declare function runStartCommand(args: readonly string[], deps: RunCommandDeps): Promise<void>;
+/** `run list [--context-ref <ref>]` */
+export declare function runListCommand(args: readonly string[], deps: RunCommandDeps): Promise<void>;
+/** `run get <runId>` */
+export declare function runGetCommand(args: readonly string[], deps: RunCommandDeps): Promise<void>;
+/** `run cancel <runId> [--reason <text>]` */
+export declare function runCancelCommand(args: readonly string[], deps: RunCommandDeps): Promise<void>;
+/**
+ * Streams `GET /api/runs/:runId/events` and writes one NDJSON line per event to `deps.write`,
+ * stopping once a terminal `'end'` event arrives (or the stream closes on its own). Each frame's
+ * `data` is stripped of terminal control sequences before being written — it originates from a
+ * prompt-influenced agent run and is not trusted to be safe to print verbatim (same posture as
+ * `redact.ts`'s other daemon-sourced-text handling), though it is not truncated or secret-redacted
+ * the way a diagnostic error message is, since it is the run's actual event payload, not incidental
+ * error detail.
+ */
+export declare function watchRunEvents(baseUrl: string, runId: string, args: readonly string[], deps: RunCommandDeps): Promise<void>;
+/** `run watch <runId> [--after-cursor <cursor>]` */
+export declare function runWatchCommand(args: readonly string[], deps: RunCommandDeps): Promise<void>;
+/** Registers `run` (dispatching `start`/`list`/`cancel`/`watch` on the first remaining token) against `registry`. */
+export declare function registerRunCommands(registry: CommandRegistry, deps: RunCommandDeps): void;
+//# sourceMappingURL=run-command.d.ts.map

package/dist/run-command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-command.d.ts","sourceRoot":"","sources":["../src/run-command.ts"],"names":[],"mappings":"AAsBA,OAAO,EAAkD,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAIjG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D,MAAM,WAAW,cAAc;IAC7B,qGAAqG;IACrG,cAAc,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IAC/C,gGAAgG;IAChG,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,8FAA8F;IAC9F,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,wDAAwD;IACxD,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,sEAAsE;IACtE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,KAAK,CAAC;IAC/B,wFAAwF;IACxF,SAAS,CAAC,EAAE,aAAa,CAAC;CAC3B;AAwFD,kFAAkF;AAClF,wBAAsB,eAAe,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBlG;AAED,uCAAuC;AACvC,wBAAsB,cAAc,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAcjG;AAED,wBAAwB;AACxB,wBAAsB,aAAa,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAahG;AAED,6CAA6C;AAC7C,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAgBnG;AA6DD;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAwBjI;AAED,oDAAoD;AACpD,wBAAsB,eAAe,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAWlG;AAED,qHAAqH;AACrH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,cAAc,GAAG,IAAI,CA2BzF"}

package/dist/run-command.js

@@ -0,0 +1,291 @@
+/**
+ * @module run-command
+ *
+ * `run start` / `run list` / `run get` / `run cancel` / `run watch` — the
+ * first concrete commands registered against this package's
+ * `CommandRegistry` (`command-registry.ts`'s own docblock notes none existed
+ * yet because no HTTP-client-mode pack had landed to call). Built directly
+ * against `@jini-ai/http`'s real run transport (`packages/http/src/runs.ts`:
+ * `POST /api/runs`, `GET /api/runs`, `GET /api/runs/:runId`,
+ * `POST /api/runs/:runId/cancel`, `GET /api/runs/:runId/events` SSE) — a
+ * thin HTTP-transport-mode CLI over the kernel's own `Run` noun, with no
+ * project/agent/plugin vocabulary anywhere in this file.
+ *
+ * Every network call goes through this package's already-hardened
+ * `postJsonToDaemon`/`getJsonFromDaemon` (bounded timeout, response-size cap,
+ * structured-error mapping, redaction) — nothing here re-implements that.
+ * `run watch`'s SSE consumption is new (this package's own `source-map.md`
+ * calls the mechanics — GET an SSE endpoint, translate frames to one NDJSON
+ * line per event on stdout, stop at a terminal `'end'` event — a clean
+ * pattern that had no route to call until now).
+ */
+import { parseFlags, positionalArgs } from './flags.js';
+import { exitWithStructuredError, structuredHttpFailure } from './errors.js';
+import { getJsonFromDaemon, postJsonToDaemon } from './http.js';
+import { sanitizeUntrustedText, stripControlSequences } from './redact.js';
+import { renderUsage } from './usage.js';
+function defaultWrite(text) {
+    process.stdout.write(text);
+}
+function defaultWriteErr(text) {
+    process.stderr.write(text);
+}
+const RUN_START_USAGE = renderUsage({
+    usage: ['run start --context-ref <ref> [--agent-id <id>] [--idempotency-key <key>]'],
+    description: 'Starts a new run for the given contextRef.',
+    options: [
+        { flag: '--context-ref', description: 'Opaque caller-supplied identity the run belongs to (required).' },
+        { flag: '--agent-id', description: 'Which registered agent should drive this run.' },
+        { flag: '--idempotency-key', description: 'Starting twice with the same key returns the original run.' },
+    ],
+});
+const RUN_LIST_USAGE = renderUsage({
+    usage: ['run list [--context-ref <ref>]'],
+    description: 'Lists runs, optionally scoped to a contextRef.',
+    options: [{ flag: '--context-ref', description: 'Only list runs belonging to this contextRef.' }],
+});
+const RUN_GET_USAGE = renderUsage({
+    usage: ['run get <runId>'],
+    description: 'Fetches a single run by id.',
+});
+const RUN_CANCEL_USAGE = renderUsage({
+    usage: ['run cancel <runId> [--reason <text>]'],
+    description: 'Requests cancellation of an in-progress run. A no-op on an already-terminal run.',
+    options: [{ flag: '--reason', description: 'Optional human-readable cancellation reason.' }],
+});
+const RUN_WATCH_USAGE = renderUsage({
+    usage: ['run watch <runId> [--after-cursor <cursor>]'],
+    description: 'Streams a run\'s protocol events as one NDJSON line per event on stdout until a terminal event arrives.',
+    options: [{ flag: '--after-cursor', description: 'Resume streaming after this event cursor (reconnect support).' }],
+});
+const RUN_USAGE = renderUsage({
+    usage: ['run <start|list|get|cancel|watch> ...'],
+    description: 'Manage runs against a Jini daemon over HTTP.',
+});
+/** Builds `{write, exit, exitCodes?}` for `errors.ts`'s structured-error helpers, never assigning `exitCodes` when unset (required under `exactOptionalPropertyTypes`). */
+function errorOptions(deps) {
+    return {
+        write: deps.writeErr ?? defaultWriteErr,
+        exit: deps.exit ?? ((code) => process.exit(code)),
+        ...(deps.exitCodes !== undefined ? { exitCodes: deps.exitCodes } : {}),
+    };
+}
+/** Builds the transport-call options object for `postJsonToDaemon`/`getJsonFromDaemon`, only ever including a key when its value is actually set. */
+function transportOptions(deps) {
+    return {
+        ...(deps.fetchImpl !== undefined ? { fetchImpl: deps.fetchImpl } : {}),
+        ...(deps.writeErr !== undefined ? { write: deps.writeErr } : {}),
+        ...(deps.exit !== undefined ? { exit: deps.exit } : {}),
+        ...(deps.exitCodes !== undefined ? { exitCodes: deps.exitCodes } : {}),
+    };
+}
+function missingInput(deps, message) {
+    return exitWithStructuredError({ code: 'missing-input', message }, errorOptions(deps));
+}
+function invalidFlag(deps, message) {
+    return exitWithStructuredError({ code: 'invalid-flag', message }, errorOptions(deps));
+}
+function printJsonResult(deps, value) {
+    (deps.write ?? defaultWrite)(`${JSON.stringify(value)}\n`);
+}
+async function resolveBaseUrl(deps) {
+    return deps.resolveBaseUrl();
+}
+/** `run start --context-ref <ref> [--agent-id <id>] [--idempotency-key <key>]` */
+export async function runStartCommand(args, deps) {
+    if (args.includes('--help') || args.includes('-h')) {
+        (deps.write ?? defaultWrite)(`${RUN_START_USAGE}\n`);
+        return;
+    }
+    const flags = parseFlags(args, { string: new Set(['context-ref', 'agent-id', 'idempotency-key']) });
+    const contextRef = flags['context-ref'];
+    if (typeof contextRef !== 'string' || contextRef.length === 0) {
+        missingInput(deps, '--context-ref is required');
+    }
+    const body = { contextRef };
+    if (typeof flags['agent-id'] === 'string')
+        body.agentId = flags['agent-id'];
+    if (typeof flags['idempotency-key'] === 'string')
+        body.idempotencyKey = flags['idempotency-key'];
+    const baseUrl = await resolveBaseUrl(deps);
+    const result = await postJsonToDaemon(baseUrl, '/api/runs', body, transportOptions(deps));
+    printJsonResult(deps, result);
+}
+/** `run list [--context-ref <ref>]` */
+export async function runListCommand(args, deps) {
+    if (args.includes('--help') || args.includes('-h')) {
+        (deps.write ?? defaultWrite)(`${RUN_LIST_USAGE}\n`);
+        return;
+    }
+    const flags = parseFlags(args, { string: new Set(['context-ref']) });
+    const contextRef = flags['context-ref'];
+    const route = typeof contextRef === 'string' && contextRef.length > 0
+        ? `/api/runs?contextRef=${encodeURIComponent(contextRef)}`
+        : '/api/runs';
+    const baseUrl = await resolveBaseUrl(deps);
+    const result = await getJsonFromDaemon(baseUrl, route, transportOptions(deps));
+    printJsonResult(deps, result);
+}
+/** `run get <runId>` */
+export async function runGetCommand(args, deps) {
+    if (args.includes('--help') || args.includes('-h')) {
+        (deps.write ?? defaultWrite)(`${RUN_GET_USAGE}\n`);
+        return;
+    }
+    const runId = positionalArgs(args)[0];
+    if (typeof runId !== 'string' || runId.length === 0) {
+        missingInput(deps, 'runId is required: run get <runId>');
+    }
+    const baseUrl = await resolveBaseUrl(deps);
+    const result = await getJsonFromDaemon(baseUrl, `/api/runs/${encodeURIComponent(runId)}`, transportOptions(deps));
+    printJsonResult(deps, result);
+}
+/** `run cancel <runId> [--reason <text>]` */
+export async function runCancelCommand(args, deps) {
+    if (args.includes('--help') || args.includes('-h')) {
+        (deps.write ?? defaultWrite)(`${RUN_CANCEL_USAGE}\n`);
+        return;
+    }
+    const flags = parseFlags(args, { string: new Set(['reason']) });
+    const runId = positionalArgs(args, { string: new Set(['reason']) })[0];
+    if (typeof runId !== 'string' || runId.length === 0) {
+        missingInput(deps, 'runId is required: run cancel <runId>');
+    }
+    const body = {};
+    if (typeof flags.reason === 'string')
+        body.reason = flags.reason;
+    const baseUrl = await resolveBaseUrl(deps);
+    const result = await postJsonToDaemon(baseUrl, `/api/runs/${encodeURIComponent(runId)}/cancel`, body, transportOptions(deps));
+    printJsonResult(deps, result);
+}
+/** Cap on total buffered-but-not-yet-frame-terminated SSE bytes — a daemon that never sends a blank-line frame terminator must not grow this without bound (mirrors `http.ts`'s `readJsonWithLimit` byte cap). */
+const MAX_SSE_BUFFER_BYTES = 10 * 1024 * 1024;
+function parseSseFrame(rawFrame) {
+    let id;
+    let eventName;
+    const dataLines = [];
+    for (const line of rawFrame.split('\n')) {
+        if (line.startsWith('id: '))
+            id = line.slice(4);
+        else if (line.startsWith('event: '))
+            eventName = line.slice(7);
+        else if (line.startsWith('data: '))
+            dataLines.push(line.slice(6));
+    }
+    if (dataLines.length === 0)
+        return null;
+    return { ...(id !== undefined ? { id } : {}), ...(eventName !== undefined ? { event: eventName } : {}), data: dataLines.join('\n') };
+}
+/** Reads `body` as an SSE byte stream and yields one {@link SseFrame} per blank-line-terminated frame. */
+async function* readSseFrames(body) {
+    const reader = body.getReader();
+    const decoder = new TextDecoder();
+    let buffer = '';
+    try {
+        for (;;) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            if (value !== undefined)
+                buffer += decoder.decode(value, { stream: true });
+            if (buffer.length > MAX_SSE_BUFFER_BYTES) {
+                throw new Error(`SSE stream exceeded the ${MAX_SSE_BUFFER_BYTES}-byte unterminated-frame buffer limit`);
+            }
+            let sepIndex;
+            while ((sepIndex = buffer.indexOf('\n\n')) >= 0) {
+                const rawFrame = buffer.slice(0, sepIndex);
+                buffer = buffer.slice(sepIndex + 2);
+                const frame = parseSseFrame(rawFrame);
+                if (frame !== null)
+                    yield frame;
+            }
+        }
+    }
+    finally {
+        reader.releaseLock();
+    }
+}
+/** True when a parsed SSE frame's `data` is the canonical `RunProtocolEvent` terminal `'end'` event. */
+function isTerminalEventFrame(frame) {
+    try {
+        const parsed = JSON.parse(frame.data);
+        return parsed.kind === 'end';
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Streams `GET /api/runs/:runId/events` and writes one NDJSON line per event to `deps.write`,
+ * stopping once a terminal `'end'` event arrives (or the stream closes on its own). Each frame's
+ * `data` is stripped of terminal control sequences before being written — it originates from a
+ * prompt-influenced agent run and is not trusted to be safe to print verbatim (same posture as
+ * `redact.ts`'s other daemon-sourced-text handling), though it is not truncated or secret-redacted
+ * the way a diagnostic error message is, since it is the run's actual event payload, not incidental
+ * error detail.
+ */
+export async function watchRunEvents(baseUrl, runId, args, deps) {
+    const flags = parseFlags(args, { string: new Set(['after-cursor']) });
+    const afterCursor = flags['after-cursor'];
+    const fetchImpl = deps.fetchImpl ?? fetch;
+    const write = deps.write ?? defaultWrite;
+    const headers = {};
+    if (typeof afterCursor === 'string' && afterCursor.length > 0)
+        headers['last-event-id'] = afterCursor;
+    const resp = await fetchImpl(`${baseUrl}/api/runs/${encodeURIComponent(runId)}/events`, { headers });
+    if (!resp.ok || resp.body === null) {
+        return structuredHttpFailure(resp, 'daemon-not-running', errorOptions(deps));
+    }
+    try {
+        for await (const frame of readSseFrames(resp.body)) {
+            write(`${stripControlSequences(frame.data)}\n`);
+            if (isTerminalEventFrame(frame))
+                return;
+        }
+    }
+    catch (error) {
+        // A broken/hostile stream (e.g. the unbounded-buffer guard above) must exit through the same
+        // structured contract as every other failure here, not surface as an unhandled rejection.
+        const message = error instanceof Error ? error.message : String(error);
+        return exitWithStructuredError({ code: 'daemon-not-running', message: sanitizeUntrustedText(message) }, errorOptions(deps));
+    }
+}
+/** `run watch <runId> [--after-cursor <cursor>]` */
+export async function runWatchCommand(args, deps) {
+    if (args.includes('--help') || args.includes('-h')) {
+        (deps.write ?? defaultWrite)(`${RUN_WATCH_USAGE}\n`);
+        return;
+    }
+    const runId = positionalArgs(args, { string: new Set(['after-cursor']) })[0];
+    if (typeof runId !== 'string' || runId.length === 0) {
+        missingInput(deps, 'runId is required: run watch <runId>');
+    }
+    const baseUrl = await resolveBaseUrl(deps);
+    await watchRunEvents(baseUrl, runId, args, deps);
+}
+/** Registers `run` (dispatching `start`/`list`/`cancel`/`watch` on the first remaining token) against `registry`. */
+export function registerRunCommands(registry, deps) {
+    registry.add('run', async (args) => {
+        const [sub, ...rest] = args;
+        switch (sub) {
+            case 'start':
+                return runStartCommand(rest, deps);
+            case 'list':
+                return runListCommand(rest, deps);
+            case 'get':
+                return runGetCommand(rest, deps);
+            case 'cancel':
+                return runCancelCommand(rest, deps);
+            case 'watch':
+                return runWatchCommand(rest, deps);
+            case undefined:
+            case '--help':
+            case '-h':
+                (deps.write ?? defaultWrite)(`${RUN_USAGE}\n`);
+                return;
+            default:
+                invalidFlag(deps, `unknown "run" subcommand: ${sub}`);
+        }
+    }, { usage: RUN_USAGE });
+}
+//# sourceMappingURL=run-command.js.map

package/dist/run-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-command.js","sourceRoot":"","sources":["../src/run-command.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAsB,MAAM,aAAa,CAAC;AACjG,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAkBzC,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,eAAe,GAAG,WAAW,CAAC;IAClC,KAAK,EAAE,CAAC,2EAA2E,CAAC;IACpF,WAAW,EAAE,4CAA4C;IACzD,OAAO,EAAE;QACP,EAAE,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,gEAAgE,EAAE;QACxG,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,+CAA+C,EAAE;QACpF,EAAE,IAAI,EAAE,mBAAmB,EAAE,WAAW,EAAE,4DAA4D,EAAE;KACzG;CACF,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,WAAW,CAAC;IACjC,KAAK,EAAE,CAAC,gCAAgC,CAAC;IACzC,WAAW,EAAE,gDAAgD;IAC7D,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,8CAA8C,EAAE,CAAC;CAClG,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,WAAW,CAAC;IAChC,KAAK,EAAE,CAAC,iBAAiB,CAAC;IAC1B,WAAW,EAAE,6BAA6B;CAC3C,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,WAAW,CAAC;IACnC,KAAK,EAAE,CAAC,sCAAsC,CAAC;IAC/C,WAAW,EAAE,kFAAkF;IAC/F,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,8CAA8C,EAAE,CAAC;CAC7F,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,WAAW,CAAC;IAClC,KAAK,EAAE,CAAC,6CAA6C,CAAC;IACtD,WAAW,EAAE,yGAAyG;IACtH,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE,+DAA+D,EAAE,CAAC;CACpH,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,WAAW,CAAC;IAC5B,KAAK,EAAE,CAAC,uCAAuC,CAAC;IAChD,WAAW,EAAE,8CAA8C;CAC5D,CAAC,CAAC;AAEH,2KAA2K;AAC3K,SAAS,YAAY,CAAC,IAAoB;IACxC,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,QAAQ,IAAI,eAAe;QACvC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvE,CAAC;AACJ,CAAC;AAED,qJAAqJ;AACrJ,SAAS,gBAAgB,CAAC,IAAoB;IAM5C,OAAO;QACL,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvE,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,IAAoB,EAAE,OAAe;IACzD,OAAO,uBAAuB,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;AACzF,CAAC;AAED,SAAS,WAAW,CAAC,IAAoB,EAAE,OAAe;IACxD,OAAO,uBAAuB,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,SAAS,eAAe,CAAC,IAAoB,EAAE,KAAc;IAC3D,CAAC,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7D,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAoB;IAChD,OAAO,IAAI,CAAC,cAAc,EAAE,CAAC;AAC/B,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAuB,EAAE,IAAoB;IACjF,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,CAAC,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC,CAAC,GAAG,eAAe,IAAI,CAAC,CAAC;QACrD,OAAO;IACT,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC,EAAE,CAAC,CAAC;IACpG,MAAM,UAAU,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC;IACxC,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9D,YAAY,CAAC,IAAI,EAAE,2BAA2B,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,IAAI,GAA4B,EAAE,UAAU,EAAE,CAAC;IACrD,IAAI,OAAO,KAAK,CAAC,UAAU,CAAC,KAAK,QAAQ;QAAE,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;IAC5E,IAAI,OAAO,KAAK,CAAC,iBAAiB,CAAC,KAAK,QAAQ;QAAE,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAEjG,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1F,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAChC,CAAC;AAED,uCAAuC;AACvC,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAuB,EAAE,IAAoB;IAChF,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,CAAC,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC,CAAC,GAAG,cAAc,IAAI,CAAC,CAAC;QACpD,OAAO;IACT,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC;IACrE,MAAM,UAAU,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QACnE,CAAC,CAAC,wBAAwB,kBAAkB,CAAC,UAAU,CAAC,EAAE;QAC1D,CAAC,CAAC,WAAW,CAAC;IAEhB,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,KAAK,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/E,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAChC,CAAC;AAED,wBAAwB;AACxB,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAuB,EAAE,IAAoB;IAC/E,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,CAAC,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC,CAAC,GAAG,aAAa,IAAI,CAAC,CAAC;QACnD,OAAO;IACT,CAAC;IACD,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,YAAY,CAAC,IAAI,EAAE,oCAAoC,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,aAAa,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;IAClH,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAChC,CAAC;AAED,6CAA6C;AAC7C,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAuB,EAAE,IAAoB;IAClF,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,CAAC,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC,CAAC,GAAG,gBAAgB,IAAI,CAAC,CAAC;QACtD,OAAO;IACT,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,YAAY,CAAC,IAAI,EAAE,uCAAuC,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,IAAI,GAA4B,EAAE,CAAC;IACzC,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;QAAE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAEjE,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,aAAa,kBAAkB,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9H,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAChC,CAAC;AAED,kNAAkN;AAClN,MAAM,oBAAoB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAS9C,SAAS,aAAa,CAAC,QAAgB;IACrC,IAAI,EAAsB,CAAC;IAC3B,IAAI,SAA6B,CAAC;IAClC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;aAC3C,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;aAC1D,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,OAAO,EAAE,GAAG,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AACvI,CAAC;AAED,0GAA0G;AAC1G,KAAK,SAAS,CAAC,CAAC,aAAa,CAAC,IAAgC;IAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,CAAC;QACH,SAAS,CAAC;YACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAChB,IAAI,KAAK,KAAK,SAAS;gBAAE,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3E,IAAI,MAAM,CAAC,MAAM,GAAG,oBAAoB,EAAE,CAAC;gBACzC,MAAM,IAAI,KAAK,CAAC,2BAA2B,oBAAoB,uCAAuC,CAAC,CAAC;YAC1G,CAAC;YACD,IAAI,QAAgB,CAAC;YACrB,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;gBAC3C,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;gBACpC,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;gBACtC,IAAI,KAAK,KAAK,IAAI;oBAAE,MAAM,KAAK,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,wGAAwG;AACxG,SAAS,oBAAoB,CAAC,KAAe;IAC3C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAuB,CAAC;QAC5D,OAAO,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAe,EAAE,KAAa,EAAE,IAAuB,EAAE,IAAoB;IAChH,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC;IACtE,MAAM,WAAW,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC;IAEzC,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,eAAe,CAAC,GAAG,WAAW,CAAC;IAEtG,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,OAAO,aAAa,kBAAkB,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IACrG,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACnC,OAAO,qBAAqB,CAAC,IAAI,EAAE,oBAAoB,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,CAAC;QACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,KAAK,CAAC,GAAG,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChD,IAAI,oBAAoB,CAAC,KAAK,CAAC;gBAAE,OAAO;QAC1C,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,6FAA6F;QAC7F,0FAA0F;QAC1F,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,uBAAuB,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,qBAAqB,CAAC,OAAO,CAAC,EAAE,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9H,CAAC;AACH,CAAC;AAED,oDAAoD;AACpD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAuB,EAAE,IAAoB;IACjF,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,CAAC,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC,CAAC,GAAG,eAAe,IAAI,CAAC,CAAC;QACrD,OAAO;IACT,CAAC;IACD,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,YAAY,CAAC,IAAI,EAAE,sCAAsC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACnD,CAAC;AAED,qHAAqH;AACrH,MAAM,UAAU,mBAAmB,CAAC,QAAyB,EAAE,IAAoB;IACjF,QAAQ,CAAC,GAAG,CACV,KAAK,EACL,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;QAC5B,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,OAAO;gBACV,OAAO,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACrC,KAAK,MAAM;gBACT,OAAO,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACpC,KAAK,KAAK;gBACR,OAAO,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACnC,KAAK,QAAQ;gBACX,OAAO,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACtC,KAAK,OAAO;gBACV,OAAO,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACrC,KAAK,SAAS,CAAC;YACf,KAAK,QAAQ,CAAC;YACd,KAAK,IAAI;gBACP,CAAC,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC,CAAC,GAAG,SAAS,IAAI,CAAC,CAAC;gBAC/C,OAAO;YACT;gBACE,WAAW,CAAC,IAAI,EAAE,6BAA6B,GAAG,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC,EACD,EAAE,KAAK,EAAE,SAAS,EAAE,CACrB,CAAC;AACJ,CAAC"}

package/dist/tokens.d.ts

@@ -0,0 +1,3 @@
+import type { CommandRegistry } from './command-registry.js';
+export declare const CommandRegistryToken: import("@jini-ai/core").Token<CommandRegistry, string>;
+//# sourceMappingURL=tokens.d.ts.map

package/dist/tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../src/tokens.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D,eAAO,MAAM,oBAAoB,wDAAqD,CAAC"}

package/dist/tokens.js

@@ -0,0 +1,12 @@
+/**
+ * `@jini-ai/core` DI token for this package's one composable service, per
+ * extraction-plan §2.2 ("Kernel exports only kernel-service tokens... every
+ * other token lives in its owning feature package") and following the
+ * `XToken` naming precedent set by `packages/daemon/src/tokens.ts`. A pack's
+ * `cli` registrar (`Pack['cli']` in `packages/core/src/pack.ts`) resolves
+ * this token to get the concrete `CommandRegistry` it registers its own
+ * subcommands against.
+ */
+import { token } from '@jini-ai/core';
+export const CommandRegistryToken = token('jini.cli.commandRegistry');
+//# sourceMappingURL=tokens.js.map

package/dist/tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../src/tokens.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAGtC,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,CAAkB,0BAA0B,CAAC,CAAC"}

package/dist/usage.d.ts

@@ -0,0 +1,24 @@
+/**
+ * @module usage
+ *
+ * The generic *shape* of every OD `print*Help` function, extracted from
+ * `apps/daemon/src/cli.ts` (see `source-map.md`): one or more usage
+ * invocation lines, an optional prose description, and an optional flat
+ * list of `--option` descriptions. OD's actual help text is 100% product
+ * content and was not ported — only the rendering convention.
+ */
+export interface UsageOption {
+    flag: string;
+    description: string;
+}
+export interface UsageSpec {
+    /** One or more `cmd sub <arg>` invocation lines. */
+    usage: readonly string[];
+    /** Optional prose shown after the usage lines. */
+    description?: string;
+    /** Optional flat `--flag` reference list. */
+    options?: readonly UsageOption[];
+}
+/** Render a {@link UsageSpec} into the "Usage:\n  ...\n\nOptions:\n  ..." text every OD help command used. */
+export declare function renderUsage(spec: UsageSpec): string;
+//# sourceMappingURL=usage.d.ts.map

package/dist/usage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage.d.ts","sourceRoot":"","sources":["../src/usage.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,SAAS;IACxB,oDAAoD;IACpD,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,kDAAkD;IAClD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,6CAA6C;IAC7C,OAAO,CAAC,EAAE,SAAS,WAAW,EAAE,CAAC;CAClC;AAED,8GAA8G;AAC9G,wBAAgB,WAAW,CAAC,IAAI,EAAE,SAAS,GAAG,MAAM,CAgBnD"}

package/dist/usage.js

@@ -0,0 +1,25 @@
+/**
+ * @module usage
+ *
+ * The generic *shape* of every OD `print*Help` function, extracted from
+ * `apps/daemon/src/cli.ts` (see `source-map.md`): one or more usage
+ * invocation lines, an optional prose description, and an optional flat
+ * list of `--option` descriptions. OD's actual help text is 100% product
+ * content and was not ported — only the rendering convention.
+ */
+/** Render a {@link UsageSpec} into the "Usage:\n  ...\n\nOptions:\n  ..." text every OD help command used. */
+export function renderUsage(spec) {
+    const lines = ['Usage:', ...spec.usage.map((line) => `  ${line}`)];
+    if (spec.description !== undefined && spec.description.length > 0) {
+        lines.push('', spec.description);
+    }
+    if (spec.options !== undefined && spec.options.length > 0) {
+        const longest = Math.max(...spec.options.map((option) => option.flag.length));
+        lines.push('', 'Options:');
+        for (const option of spec.options) {
+            lines.push(`  ${option.flag.padEnd(longest)}  ${option.description}`);
+        }
+    }
+    return lines.join('\n');
+}
+//# sourceMappingURL=usage.js.map

package/dist/usage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage.js","sourceRoot":"","sources":["../src/usage.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAgBH,8GAA8G;AAC9G,MAAM,UAAU,WAAW,CAAC,IAAe;IACzC,MAAM,KAAK,GAAa,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;IAE7E,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9E,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAC3B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/version-command.d.ts

@@ -0,0 +1,38 @@
+/**
+ * @module version-command
+ *
+ * `version` — prints just the running daemon's version string. Sourced from
+ * `GET /api/daemon/status`'s `version` field (`packages/http/src/daemon-status.ts`,
+ * `DaemonStatusResponse.version`) — the same route `daemon-command.ts`'s `daemon status`
+ * already calls. `packages/cli/source-map.md`'s original UNCLEAR verdict on a standalone
+ * `version` command noted "@jini-ai/http has no version route yet ... nothing to call"; that
+ * blocker never actually required a *separate* route — `daemonStatusRoute`'s response body
+ * already carries a `version` field, so no new HTTP route was added for this command. It just
+ * extracts and prints that one field instead of the full status envelope `daemon status` prints.
+ *
+ * Same DI/testing/`resolveBaseUrl` conventions as `daemon-command.ts`'s `daemon status`/`daemon
+ * stop` (this file duplicates rather than imports their small `errorOptions`/`transportOptions`
+ * helpers, matching that file's own precedent of each command module owning its own copy rather
+ * than sharing a not-otherwise-needed abstraction across files).
+ */
+import { type ExitCodeTable } from './errors.js';
+import type { CommandRegistry } from './command-registry.js';
+export interface VersionCommandDeps {
+    /** Resolves the daemon HTTP base URL once per command invocation (e.g. wraps `resolveDaemonUrl`). */
+    resolveBaseUrl: () => Promise<string> | string;
+    /** Defaults to `process.stdout.write`; inject for tests. Used for the printed version string. */
+    write?: (text: string) => void;
+    /** Defaults to `process.stderr.write`; inject for tests. Used for usage/validation errors. */
+    writeErr?: (text: string) => void;
+    /** Defaults to the global `fetch`; inject for tests. */
+    fetchImpl?: typeof fetch;
+    /** Defaults to `process.exit`; inject for tests (must not return). */
+    exit?: (code: number) => never;
+    /** Extra/overriding `code -> exitCode` entries layered on the package default table. */
+    exitCodes?: ExitCodeTable;
+}
+/** `version` */
+export declare function versionCommand(args: readonly string[], deps: VersionCommandDeps): Promise<void>;
+/** Registers `version` against `registry`. */
+export declare function registerVersionCommand(registry: CommandRegistry, deps: VersionCommandDeps): void;
+//# sourceMappingURL=version-command.d.ts.map

package/dist/version-command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-command.d.ts","sourceRoot":"","sources":["../src/version-command.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAA2B,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAG1E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D,MAAM,WAAW,kBAAkB;IACjC,qGAAqG;IACrG,cAAc,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IAC/C,iGAAiG;IACjG,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,8FAA8F;IAC9F,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,wDAAwD;IACxD,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,sEAAsE;IACtE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,KAAK,CAAC;IAC/B,wFAAwF;IACxF,SAAS,CAAC,EAAE,aAAa,CAAC;CAC3B;AAyDD,gBAAgB;AAChB,wBAAsB,cAAc,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CASrG;AAED,8CAA8C;AAC9C,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,kBAAkB,GAAG,IAAI,CAEhG"}