@leemour/max-cli 0.1.0

package/dist/domain/models.d.ts

@@ -0,0 +1,57 @@
+/**
+ * What this CLI promises. **Raw MAX objects never reach output** (REQUIREMENTS §16, §25): the wire
+ * shape is undocumented, changes without notice, and carries fields whose meaning nobody knows.
+ * Everything above the adapter speaks these types.
+ */
+/** Every id is a string, never a number: MAX ids are 64-bit and an id is an identifier, not arithmetic. */
+export type Id = string;
+export type ChatKind = "dialog" | "group" | "channel" | "unknown";
+export interface Chat {
+    id: Id;
+    title: string | null;
+    kind: ChatKind;
+    /** `null` means MAX did not say, which is not the same as zero. */
+    unreadCount: number | null;
+    /** ISO 8601, or `null` when the chat has never had a message. */
+    lastMessageAt: string | null;
+    participantsCount: number | null;
+}
+export interface Attachment {
+    /** Lower-cased MAX type: `photo`, `video`, `file`, `share`, `call`, `control`, `sticker`… */
+    kind: string;
+}
+export interface Message {
+    id: Id;
+    chatId: Id;
+    senderId: Id | null;
+    senderName: string | null;
+    /** ISO 8601. */
+    timestamp: string;
+    /**
+     * When MAX last recorded an edit, or `null` for a message nobody has changed.
+     *
+     * Measured 2026-09-20: an edited message comes back carrying `status: "EDITED"` and an
+     * `updateTime` later than its `time`. Surfaced rather than hidden because a reader has no other
+     * way to tell an edited message from the original, and because it is what the cache compares to
+     * decide whether the copy it holds is still current.
+     */
+    editedAt: string | null;
+    text: string;
+    /** Whether this account sent it. `null` when we do not know who we are. */
+    outgoing: boolean | null;
+    attachments: Attachment[];
+}
+export interface Contact {
+    id: Id;
+    name: string | null;
+    /** The @link MAX shows for a person, when they have one. */
+    username: string | null;
+    /** Whatever they wrote about themselves. */
+    description: string | null;
+}
+export interface Profile {
+    id: Id;
+    name: string | null;
+    phone: string | null;
+}
+//# sourceMappingURL=models.d.ts.map

package/dist/domain/models.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.d.ts","sourceRoot":"","sources":["../../src/domain/models.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,2GAA2G;AAC3G,MAAM,MAAM,EAAE,GAAG,MAAM,CAAA;AAEvB,MAAM,MAAM,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,CAAA;AAEjE,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,EAAE,CAAA;IACN,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,IAAI,EAAE,QAAQ,CAAA;IACd,mEAAmE;IACnE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,iEAAiE;IACjE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;CACjC;AAED,MAAM,WAAW,UAAU;IACzB,6FAA6F;IAC7F,IAAI,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,EAAE,CAAA;IACN,MAAM,EAAE,EAAE,CAAA;IACV,QAAQ,EAAE,EAAE,GAAG,IAAI,CAAA;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,gBAAgB;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB;;;;;;;OAOG;IACH,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,IAAI,EAAE,MAAM,CAAA;IACZ,2EAA2E;IAC3E,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAA;IACxB,WAAW,EAAE,UAAU,EAAE,CAAA;CAC1B;AAED,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,EAAE,CAAA;IACN,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,4DAA4D;IAC5D,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,4CAA4C;IAC5C,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAED,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,EAAE,CAAA;IACN,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CACrB"}

package/dist/domain/models.js

@@ -0,0 +1,7 @@
+/**
+ * What this CLI promises. **Raw MAX objects never reach output** (REQUIREMENTS §16, §25): the wire
+ * shape is undocumented, changes without notice, and carries fields whose meaning nobody knows.
+ * Everything above the adapter speaks these types.
+ */
+export {};
+//# sourceMappingURL=models.js.map

package/dist/domain/models.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.js","sourceRoot":"","sources":["../../src/domain/models.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/generated/client.generated.d.ts

@@ -0,0 +1,30 @@
+import type { Payload } from "../protocol/frame.js";
+import type { Operation, RequestOf } from "../spec/define.js";
+import { OPERATIONS } from "./operations.generated.js";
+export type Invoke = <TOperation extends Operation>(operation: TOperation, request: RequestOf<TOperation>) => Promise<Payload>;
+/**
+ * The wire surface: one typed call per operation, and nothing else.
+ *
+ * **It is internal.** Everything it returns is a raw MAX payload, with none of the rules that make
+ * this tool safe to point at a real account — the resend policy, the name filling, the conversion
+ * that keeps a 64-bit id from being read as a number. `MaxClient` is the only public door
+ * (`NEED-34`).
+ */
+export declare const wireClient: (invoke: Invoke) => {
+    session: {
+        init: (request: RequestOf<(typeof OPERATIONS)["session.init"]>) => Promise<Payload>;
+        login: (request: RequestOf<(typeof OPERATIONS)["session.login"]>) => Promise<Payload>;
+    };
+    contacts: {
+        info: (request: RequestOf<(typeof OPERATIONS)["contacts.info"]>) => Promise<Payload>;
+    };
+    chats: {
+        history: (request: RequestOf<(typeof OPERATIONS)["chats.history"]>) => Promise<Payload>;
+        list: (request: RequestOf<(typeof OPERATIONS)["chats.list"]>) => Promise<Payload>;
+    };
+    messages: {
+        send: (request: RequestOf<(typeof OPERATIONS)["messages.send"]>) => Promise<Payload>;
+    };
+};
+export type WireClient = ReturnType<typeof wireClient>;
+//# sourceMappingURL=client.generated.d.ts.map

package/dist/generated/client.generated.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.generated.d.ts","sourceRoot":"","sources":["../../src/generated/client.generated.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AACnD,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAEtD,MAAM,MAAM,MAAM,GAAG,CAAC,UAAU,SAAS,SAAS,EAChD,SAAS,EAAE,UAAU,EACrB,OAAO,EAAE,SAAS,CAAC,UAAU,CAAC,KAC3B,OAAO,CAAC,OAAO,CAAC,CAAA;AAErB;;;;;;;GAOG;AACH,eAAO,MAAM,UAAU,GAAI,QAAQ,MAAM;;wBAErB,SAAS,CAAC,CAAC,OAAO,UAAU,EAAE,cAAc,CAAC,CAAC;yBAC7C,SAAS,CAAC,CAAC,OAAO,UAAU,EAAE,eAAe,CAAC,CAAC;;;wBAGhD,SAAS,CAAC,CAAC,OAAO,UAAU,EAAE,eAAe,CAAC,CAAC;;;2BAG5C,SAAS,CAAC,CAAC,OAAO,UAAU,EAAE,eAAe,CAAC,CAAC;wBAClD,SAAS,CAAC,CAAC,OAAO,UAAU,EAAE,YAAY,CAAC,CAAC;;;wBAG5C,SAAS,CAAC,CAAC,OAAO,UAAU,EAAE,eAAe,CAAC,CAAC;;CAEjE,CAAA;AAEF,MAAM,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,UAAU,CAAC,CAAA"}

package/dist/generated/client.generated.js

@@ -0,0 +1,26 @@
+import { OPERATIONS } from "./operations.generated.js";
+/**
+ * The wire surface: one typed call per operation, and nothing else.
+ *
+ * **It is internal.** Everything it returns is a raw MAX payload, with none of the rules that make
+ * this tool safe to point at a real account — the resend policy, the name filling, the conversion
+ * that keeps a 64-bit id from being read as a number. `MaxClient` is the only public door
+ * (`NEED-34`).
+ */
+export const wireClient = (invoke) => ({
+    session: {
+        init: (request) => invoke(OPERATIONS["session.init"], request),
+        login: (request) => invoke(OPERATIONS["session.login"], request),
+    },
+    contacts: {
+        info: (request) => invoke(OPERATIONS["contacts.info"], request),
+    },
+    chats: {
+        history: (request) => invoke(OPERATIONS["chats.history"], request),
+        list: (request) => invoke(OPERATIONS["chats.list"], request),
+    },
+    messages: {
+        send: (request) => invoke(OPERATIONS["messages.send"], request),
+    },
+});
+//# sourceMappingURL=client.generated.js.map

package/dist/generated/client.generated.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.generated.js","sourceRoot":"","sources":["../../src/generated/client.generated.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAOtD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,CAAC;IAC7C,OAAO,EAAE;QACP,IAAI,EAAE,CAAC,OAAuD,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;QAC9G,KAAK,EAAE,CAAC,OAAwD,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;KAClH;IACD,QAAQ,EAAE;QACR,IAAI,EAAE,CAAC,OAAwD,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;KACjH;IACD,KAAK,EAAE;QACL,OAAO,EAAE,CAAC,OAAwD,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;QACnH,IAAI,EAAE,CAAC,OAAqD,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;KAC3G;IACD,QAAQ,EAAE;QACR,IAAI,EAAE,CAAC,OAAwD,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;KACjH;CACF,CAAC,CAAA"}

package/dist/generated/opcodes.generated.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Every opcode this project knows. **A number being here is not permission to send it** — the ones
+ * marked "declared, never sent" exist so the reason they are never sent has a home, and so a test
+ * asserting their absence has something real to compare against.
+ */
+export declare const Opcode: {
+    readonly SESSION_INIT: 6;
+    /**
+     * **Declared, never sent.** It does not read a profile, it updates one, and it refuses an empty payload. Your own
+     * profile arrives with the login response, so nothing needs to send this. It is declared here so that fact keeps a
+     * home.
+     */
+    readonly PROFILE: 16;
+    readonly LOGIN: 19;
+    /**
+     * **Declared, never sent.** `max session end` forgets the token locally and tells MAX nothing. Ending the session
+     * server-side would also end it for the browser tab the token came from, which is not what the command promises.
+     */
+    readonly LOGOUT: 20;
+    readonly CONTACT_INFO: 32;
+    /**
+     * **Declared, never sent.** Nobody agrees what it is: tsmax and PyMax call it `CONTACT_LIST`; the protocol
+     * documentation calls it `GET_BLOCKED`. Sent once with the owner's permission on 2026-09-20 and it exists — but it
+     * refuses every payload we can guess, and one guess closed the connection. It stays unsent until somebody watches a
+     * real client send it (`PROTO-1`).
+     */
+    readonly UNIDENTIFIED_36: 36;
+    readonly CHAT_HISTORY: 49;
+    /**
+     * **Declared, never sent.** Reading is observational by construction. Marking a conversation read is a change to
+     * somebody's account that no read command asked for, so 50 is declared here and never sent — and
+     * `src/client.test.ts` asserts its absence from everything the client sent.
+     */
+    readonly CHAT_MARK: 50;
+    readonly CHATS_LIST: 53;
+    readonly MSG_SEND: 64;
+    /**
+     * **Declared, never sent.** Deliberately never called. Giving this tool the ability to destroy somebody's messages,
+     * in order to tidy up after a test, is a poor trade (`NEED-32`).
+     */
+    readonly MSG_DELETE: 66;
+};
+export type Opcode = (typeof Opcode)[keyof typeof Opcode];
+//# sourceMappingURL=opcodes.generated.d.ts.map

package/dist/generated/opcodes.generated.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"opcodes.generated.d.ts","sourceRoot":"","sources":["../../src/generated/opcodes.generated.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,eAAO,MAAM,MAAM;;IAEjB;;;;OAIG;;;IAGH;;;OAGG;;;IAGH;;;;;OAKG;;;IAGH;;;;OAIG;;;;IAIH;;;OAGG;;CAEK,CAAA;AAEV,MAAM,MAAM,MAAM,GAAG,CAAC,OAAO,MAAM,CAAC,CAAC,MAAM,OAAO,MAAM,CAAC,CAAA"}

package/dist/generated/opcodes.generated.js

@@ -0,0 +1,44 @@
+// Generated from src/spec/ by scripts/generate.ts. Do not edit; run `pnpm generate`.
+/**
+ * Every opcode this project knows. **A number being here is not permission to send it** — the ones
+ * marked "declared, never sent" exist so the reason they are never sent has a home, and so a test
+ * asserting their absence has something real to compare against.
+ */
+export const Opcode = {
+    SESSION_INIT: 6,
+    /**
+     * **Declared, never sent.** It does not read a profile, it updates one, and it refuses an empty payload. Your own
+     * profile arrives with the login response, so nothing needs to send this. It is declared here so that fact keeps a
+     * home.
+     */
+    PROFILE: 16,
+    LOGIN: 19,
+    /**
+     * **Declared, never sent.** `max session end` forgets the token locally and tells MAX nothing. Ending the session
+     * server-side would also end it for the browser tab the token came from, which is not what the command promises.
+     */
+    LOGOUT: 20,
+    CONTACT_INFO: 32,
+    /**
+     * **Declared, never sent.** Nobody agrees what it is: tsmax and PyMax call it `CONTACT_LIST`; the protocol
+     * documentation calls it `GET_BLOCKED`. Sent once with the owner's permission on 2026-09-20 and it exists — but it
+     * refuses every payload we can guess, and one guess closed the connection. It stays unsent until somebody watches a
+     * real client send it (`PROTO-1`).
+     */
+    UNIDENTIFIED_36: 36,
+    CHAT_HISTORY: 49,
+    /**
+     * **Declared, never sent.** Reading is observational by construction. Marking a conversation read is a change to
+     * somebody's account that no read command asked for, so 50 is declared here and never sent — and
+     * `src/client.test.ts` asserts its absence from everything the client sent.
+     */
+    CHAT_MARK: 50,
+    CHATS_LIST: 53,
+    MSG_SEND: 64,
+    /**
+     * **Declared, never sent.** Deliberately never called. Giving this tool the ability to destroy somebody's messages,
+     * in order to tidy up after a test, is a poor trade (`NEED-32`).
+     */
+    MSG_DELETE: 66,
+};
+//# sourceMappingURL=opcodes.generated.js.map

package/dist/generated/opcodes.generated.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"opcodes.generated.js","sourceRoot":"","sources":["../../src/generated/opcodes.generated.ts"],"names":[],"mappings":"AAAA,qFAAqF;AAErF;;;;GAIG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,YAAY,EAAE,CAAC;IACf;;;;OAIG;IACH,OAAO,EAAE,EAAE;IACX,KAAK,EAAE,EAAE;IACT;;;OAGG;IACH,MAAM,EAAE,EAAE;IACV,YAAY,EAAE,EAAE;IAChB;;;;;OAKG;IACH,eAAe,EAAE,EAAE;IACnB,YAAY,EAAE,EAAE;IAChB;;;;OAIG;IACH,SAAS,EAAE,EAAE;IACb,UAAU,EAAE,EAAE;IACd,QAAQ,EAAE,EAAE;IACZ;;;OAGG;IACH,UAAU,EAAE,EAAE;CACN,CAAA"}

package/dist/generated/operations.generated.d.ts

@@ -0,0 +1,76 @@
+/** Every operation that may be sent, by the name the client calls it. */
+export declare const OPERATIONS: {
+    readonly "session.init": import("../spec/define.js").Operation<import("valibot").StrictObjectSchema<{
+        readonly userAgent: import("valibot").StrictObjectSchema<{
+            readonly deviceType: import("valibot").LiteralSchema<"WEB", undefined>;
+            readonly pushDeviceType: import("valibot").LiteralSchema<"WEBPUSH", undefined>;
+            readonly locale: import("valibot").StringSchema<undefined>;
+            readonly deviceLocale: import("valibot").StringSchema<undefined>;
+            readonly osVersion: import("valibot").StringSchema<undefined>;
+            readonly deviceName: import("valibot").StringSchema<undefined>;
+            readonly headerUserAgent: import("valibot").StringSchema<undefined>;
+            readonly appVersion: import("valibot").StringSchema<undefined>;
+            readonly screen: import("valibot").StringSchema<undefined>;
+            readonly timezone: import("valibot").StringSchema<undefined>;
+        }, undefined>;
+        readonly deviceId: import("valibot").StringSchema<undefined>;
+    }, undefined>, import("valibot").LooseObjectSchema<{}, undefined>>;
+    readonly "session.login": import("../spec/define.js").Operation<import("valibot").StrictObjectSchema<{
+        readonly token: import("valibot").StringSchema<undefined>;
+        readonly interactive: import("valibot").LiteralSchema<false, undefined>;
+        readonly chatsCount: import("valibot").SchemaWithPipe<readonly [import("valibot").NumberSchema<undefined>, import("valibot").IntegerAction<number, undefined>, import("valibot").MinValueAction<number, 1, undefined>, import("valibot").MaxValueAction<number, 100, undefined>]>;
+        readonly chatsSync: import("valibot").NumberSchema<undefined>;
+        readonly contactsSync: import("valibot").NumberSchema<undefined>;
+        readonly presenceSync: import("valibot").NumberSchema<undefined>;
+        readonly draftsSync: import("valibot").NumberSchema<undefined>;
+    }, undefined>, import("valibot").LooseObjectSchema<{
+        readonly profile: import("valibot").OptionalSchema<import("valibot").LooseObjectSchema<{}, undefined>, undefined>;
+        readonly chats: import("valibot").OptionalSchema<import("valibot").ArraySchema<import("valibot").LooseObjectSchema<{}, undefined>, undefined>, undefined>;
+        readonly contacts: import("valibot").OptionalSchema<import("valibot").ArraySchema<import("valibot").LooseObjectSchema<{}, undefined>, undefined>, undefined>;
+        readonly messages: import("valibot").OptionalSchema<import("valibot").UnknownSchema, undefined>;
+        readonly presence: import("valibot").OptionalSchema<import("valibot").UnknownSchema, undefined>;
+        readonly time: import("valibot").OptionalSchema<import("valibot").NumberSchema<undefined>, undefined>;
+        readonly chatMarker: import("valibot").OptionalSchema<import("valibot").UnknownSchema, undefined>;
+        readonly config: import("valibot").OptionalSchema<import("valibot").UnknownSchema, undefined>;
+        readonly videoChatHistory: import("valibot").OptionalSchema<import("valibot").UnknownSchema, undefined>;
+    }, undefined>>;
+    readonly "contacts.info": import("../spec/define.js").Operation<import("valibot").StrictObjectSchema<{
+        readonly contactIds: import("valibot").ArraySchema<import("valibot").SchemaWithPipe<readonly [import("valibot").StringSchema<undefined>, import("valibot").RegexAction<string, "an id is a whole number written as a string">, import("valibot").TransformAction<string, bigint>]>, undefined>;
+    }, undefined>, import("valibot").LooseObjectSchema<{
+        readonly contacts: import("valibot").OptionalSchema<import("valibot").ArraySchema<import("valibot").LooseObjectSchema<{}, undefined>, undefined>, undefined>;
+    }, undefined>>;
+    readonly "chats.history": import("../spec/define.js").Operation<import("valibot").StrictObjectSchema<{
+        readonly chatId: import("valibot").SchemaWithPipe<readonly [import("valibot").StringSchema<undefined>, import("valibot").RegexAction<string, "an id is a whole number written as a string">, import("valibot").TransformAction<string, bigint>]>;
+        readonly from: import("valibot").NumberSchema<undefined>;
+        readonly forward: import("valibot").NumberSchema<undefined>;
+        readonly backward: import("valibot").NumberSchema<undefined>;
+        readonly forwardTime: import("valibot").NumberSchema<undefined>;
+        readonly backwardTime: import("valibot").NumberSchema<undefined>;
+        readonly itemType: import("valibot").LiteralSchema<"REGULAR", undefined>;
+        readonly getChat: import("valibot").BooleanSchema<undefined>;
+        readonly getMessages: import("valibot").BooleanSchema<undefined>;
+        readonly interactive: import("valibot").LiteralSchema<false, undefined>;
+    }, undefined>, import("valibot").LooseObjectSchema<{
+        readonly messages: import("valibot").OptionalSchema<import("valibot").ArraySchema<import("valibot").LooseObjectSchema<{}, undefined>, undefined>, undefined>;
+    }, undefined>>;
+    readonly "chats.list": import("../spec/define.js").Operation<import("valibot").StrictObjectSchema<{
+        readonly marker: import("valibot").NumberSchema<undefined>;
+        readonly count: import("valibot").OptionalSchema<import("valibot").SchemaWithPipe<readonly [import("valibot").NumberSchema<undefined>, import("valibot").IntegerAction<number, undefined>, import("valibot").MinValueAction<number, 1, undefined>]>, undefined>;
+    }, undefined>, import("valibot").LooseObjectSchema<{
+        readonly chats: import("valibot").OptionalSchema<import("valibot").ArraySchema<import("valibot").LooseObjectSchema<{}, undefined>, undefined>, undefined>;
+    }, undefined>>;
+    readonly "messages.send": import("../spec/define.js").Operation<import("valibot").StrictObjectSchema<{
+        readonly chatId: import("valibot").SchemaWithPipe<readonly [import("valibot").StringSchema<undefined>, import("valibot").RegexAction<string, "an id is a whole number written as a string">, import("valibot").TransformAction<string, bigint>]>;
+        readonly message: import("valibot").StrictObjectSchema<{
+            readonly text: import("valibot").StringSchema<undefined>;
+            readonly cid: import("valibot").SchemaWithPipe<readonly [import("valibot").NumberSchema<undefined>, import("valibot").IntegerAction<number, undefined>]>;
+            readonly elements: import("valibot").ArraySchema<import("valibot").UnknownSchema, undefined>;
+            readonly attaches: import("valibot").ArraySchema<import("valibot").UnknownSchema, undefined>;
+        }, undefined>;
+        readonly notify: import("valibot").BooleanSchema<undefined>;
+    }, undefined>, import("valibot").LooseObjectSchema<{
+        readonly message: import("valibot").OptionalSchema<import("valibot").LooseObjectSchema<{}, undefined>, undefined>;
+    }, undefined>>;
+};
+export type OperationName = keyof typeof OPERATIONS;
+//# sourceMappingURL=operations.generated.d.ts.map

package/dist/generated/operations.generated.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operations.generated.d.ts","sourceRoot":"","sources":["../../src/generated/operations.generated.ts"],"names":[],"mappings":"AAOA,yEAAyE;AACzE,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOb,CAAA;AAEV,MAAM,MAAM,aAAa,GAAG,MAAM,OAAO,UAAU,CAAA"}

package/dist/generated/operations.generated.js

@@ -0,0 +1,15 @@
+// Generated from src/spec/ by scripts/generate.ts. Do not edit; run `pnpm generate`.
+import { chatsHistory, chatsList } from "../spec/operations/chats.js";
+import { contactsInfo } from "../spec/operations/contacts.js";
+import { messagesSend } from "../spec/operations/messages.js";
+import { sessionInit, sessionLogin } from "../spec/operations/session.js";
+/** Every operation that may be sent, by the name the client calls it. */
+export const OPERATIONS = {
+    "session.init": sessionInit,
+    "session.login": sessionLogin,
+    "contacts.info": contactsInfo,
+    "chats.history": chatsHistory,
+    "chats.list": chatsList,
+    "messages.send": messagesSend,
+};
+//# sourceMappingURL=operations.generated.js.map

package/dist/generated/operations.generated.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operations.generated.js","sourceRoot":"","sources":["../../src/generated/operations.generated.ts"],"names":[],"mappings":"AAAA,qFAAqF;AAErF,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAA;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAA;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAA;AAC7D,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAA;AAEzE,yEAAyE;AACzE,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,cAAc,EAAE,WAAW;IAC3B,eAAe,EAAE,YAAY;IAC7B,eAAe,EAAE,YAAY;IAC7B,eAAe,EAAE,YAAY;IAC7B,YAAY,EAAE,SAAS;IACvB,eAAe,EAAE,YAAY;CACrB,CAAA"}

package/dist/output.d.ts

@@ -0,0 +1,22 @@
+import { type Renderer, type Streams } from "@leemour/cli-core";
+export interface OutputOptions {
+    json?: boolean;
+    quiet?: boolean;
+    streams?: Streams;
+    /** Whether a person is looking. Defaults to whether stdout is a terminal. */
+    tty?: boolean;
+    color?: boolean;
+}
+/**
+ * One place decides the mode, so no command can disagree with another.
+ *
+ * `--json` forces machine output; otherwise a terminal gets the pretty renderer and a pipe gets
+ * JSON, because a pipe is a script until proven otherwise. In every machine mode **stdout carries
+ * one JSON value and nothing else** — diagnostics are on stderr in all modes, which is what makes
+ * that contract hold by construction rather than by remembering.
+ */
+export declare const resolveOutput: ({ json, quiet, streams, tty, color }?: OutputOptions) => {
+    format: "json" | "pretty";
+    renderer: Renderer;
+};
+//# sourceMappingURL=output.d.ts.map

package/dist/output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../src/output.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,KAAK,QAAQ,EAAqB,KAAK,OAAO,EAAE,MAAM,mBAAmB,CAAA;AAElG,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,6EAA6E;IAC7E,GAAG,CAAC,EAAE,OAAO,CAAA;IACb,KAAK,CAAC,EAAE,OAAO,CAAA;CAChB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa,GAAI,uCAAsC,aAAkB;;;CAUrF,CAAA"}

package/dist/output.js

@@ -0,0 +1,34 @@
+import { createRenderer } from "@leemour/cli-core";
+/**
+ * One place decides the mode, so no command can disagree with another.
+ *
+ * `--json` forces machine output; otherwise a terminal gets the pretty renderer and a pipe gets
+ * JSON, because a pipe is a script until proven otherwise. In every machine mode **stdout carries
+ * one JSON value and nothing else** — diagnostics are on stderr in all modes, which is what makes
+ * that contract hold by construction rather than by remembering.
+ */
+export const resolveOutput = ({ json, quiet, streams, tty, color } = {}) => {
+    const interactive = tty ?? process.stdout.isTTY === true;
+    const format = json || !interactive ? "json" : "pretty";
+    const renderer = createRenderer({
+        format,
+        color: color ?? (format === "pretty" && process.env.NO_COLOR === undefined),
+        ...(streams ? { streams } : {}),
+    });
+    return { format, renderer: quiet ? silence(renderer) : renderer };
+};
+/**
+ * Everything diagnostic, and **not** `failure`: an exit code says which kind of thing went wrong
+ * and nothing about which chat or how long to wait, so silencing the sentence too would leave a
+ * script with a number and a person with nothing.
+ *
+ * The protocol note reaches `note` from the client (`commands/context.ts`), which is what makes
+ * one rule cover it rather than two.
+ */
+const silence = (renderer) => ({
+    ...renderer,
+    note: () => { },
+    success: () => { },
+    warn: () => { },
+});
+//# sourceMappingURL=output.js.map

package/dist/output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../src/output.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAkD,MAAM,mBAAmB,CAAA;AAWlG;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,KAAoB,EAAE,EAAE,EAAE;IACxF,MAAM,WAAW,GAAG,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,CAAA;IACxD,MAAM,MAAM,GAAiB,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAA;IACrE,MAAM,QAAQ,GAAG,cAAc,CAAC;QAC9B,MAAM;QACN,KAAK,EAAE,KAAK,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC;QAC3E,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChC,CAAC,CAAA;IAEF,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;AACnE,CAAC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,GAAG,CAAC,QAAkB,EAAY,EAAE,CAAC,CAAC;IACjD,GAAG,QAAQ;IACX,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;IACd,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;IACjB,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;CACf,CAAC,CAAA"}

package/dist/profile.d.ts

@@ -0,0 +1,33 @@
+import type { Command } from "commander";
+export declare const DEFAULT_PROFILE = "default";
+/** How the command line names this profile: the first word, or nothing at all for the default. */
+export declare const asFirstWord: (profile: string) => string;
+export declare const usableProfileName: (profile: string) => string;
+/**
+ * Every word that means a command at the top level.
+ *
+ * Taken off the built program rather than written out, because a list written out goes stale the
+ * day a command is added — and `help` is in it without being in `program.commands`: commander
+ * answers `max help chats` from an implicit command that is not in that array.
+ */
+export declare const commandWords: (program: Command) => Set<string>;
+/**
+ * **The first word is the profile unless it names a command.** `max personal chats list`, and
+ * `max chats list` on the default profile, with no flag in either.
+ *
+ * An option is never a profile, so `max --json chats list` still works.
+ */
+export declare const liftProfile: (argv: string[], words: Set<string>) => {
+    profile?: string;
+    rest: string[];
+};
+/**
+ * Refused at creation, which is the only moment it can still be explained.
+ *
+ * A profile named after a command breaks silently and in the other direction: `max chats` would
+ * have to mean the command, so the profile called `chats` could never be selected at all.
+ */
+export declare const refuseCommandName: (profile: string, words: Set<string>) => void;
+/** The root of the command tree, from anywhere inside it. */
+export declare const rootOf: (command: Command) => Command;
+//# sourceMappingURL=profile.d.ts.map

package/dist/profile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.d.ts","sourceRoot":"","sources":["../src/profile.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAExC,eAAO,MAAM,eAAe,YAAY,CAAA;AAExC,kGAAkG;AAClG,eAAO,MAAM,WAAW,GAAI,SAAS,MAAM,KAAG,MAA4D,CAAA;AAW1G,eAAO,MAAM,iBAAiB,GAAI,SAAS,MAAM,KAAG,MASnD,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,YAAY,GAAI,SAAS,OAAO,KAAG,GAAG,CAAC,MAAM,CAC2C,CAAA;AAErG;;;;;GAKG;AACH,eAAO,MAAM,WAAW,GAAI,MAAM,MAAM,EAAE,EAAE,OAAO,GAAG,CAAC,MAAM,CAAC,KAAG;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAIlG,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,GAAI,SAAS,MAAM,EAAE,OAAO,GAAG,CAAC,MAAM,CAAC,KAAG,IASvE,CAAA;AAED,6DAA6D;AAC7D,eAAO,MAAM,MAAM,GAAI,SAAS,OAAO,KAAG,OAIzC,CAAA"}

package/dist/profile.js

@@ -0,0 +1,60 @@
+import { CliError } from "@leemour/cli-core";
+export const DEFAULT_PROFILE = "default";
+/** How the command line names this profile: the first word, or nothing at all for the default. */
+export const asFirstWord = (profile) => (profile === DEFAULT_PROFILE ? "" : `${profile} `);
+/**
+ * A profile name becomes a file name — `<state>/profiles/<name>.json` (`session/store.ts:103`) —
+ * and the keyring account is the same string.
+ *
+ * The first word on the command line is now the profile, so a mistyped path arrives here as a
+ * name, and `a/../b` would write that file somewhere nobody would think to look.
+ */
+const PLAIN_NAME = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
+export const usableProfileName = (profile) => {
+    if (!PLAIN_NAME.test(profile)) {
+        throw new CliError("validation_error", `"${profile}" cannot be a profile name — letters, digits, dot, dash and underscore only, ` +
+            "starting with a letter or a digit");
+    }
+    return profile;
+};
+/**
+ * Every word that means a command at the top level.
+ *
+ * Taken off the built program rather than written out, because a list written out goes stale the
+ * day a command is added — and `help` is in it without being in `program.commands`: commander
+ * answers `max help chats` from an implicit command that is not in that array.
+ */
+export const commandWords = (program) => new Set(["help", ...program.commands.flatMap((command) => [command.name(), ...command.aliases()])]);
+/**
+ * **The first word is the profile unless it names a command.** `max personal chats list`, and
+ * `max chats list` on the default profile, with no flag in either.
+ *
+ * An option is never a profile, so `max --json chats list` still works.
+ */
+export const liftProfile = (argv, words) => {
+    const [first, ...rest] = argv;
+    if (first === undefined || first.startsWith("-") || words.has(first))
+        return { rest: argv };
+    return { profile: first, rest };
+};
+/**
+ * Refused at creation, which is the only moment it can still be explained.
+ *
+ * A profile named after a command breaks silently and in the other direction: `max chats` would
+ * have to mean the command, so the profile called `chats` could never be selected at all.
+ */
+export const refuseCommandName = (profile, words) => {
+    if (words.has(profile)) {
+        throw new CliError("validation_error", `"${profile}" is a command, so \`max ${profile} …\` would always mean the command and never ` +
+            "this profile. Pick a name that is not one of: " +
+            [...words].sort().join(", "));
+    }
+};
+/** The root of the command tree, from anywhere inside it. */
+export const rootOf = (command) => {
+    let root = command;
+    while (root.parent)
+        root = root.parent;
+    return root;
+};
+//# sourceMappingURL=profile.js.map

package/dist/profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.js","sourceRoot":"","sources":["../src/profile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAG5C,MAAM,CAAC,MAAM,eAAe,GAAG,SAAS,CAAA;AAExC,kGAAkG;AAClG,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,OAAe,EAAU,EAAE,CAAC,CAAC,OAAO,KAAK,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,OAAO,GAAG,CAAC,CAAA;AAE1G;;;;;;GAMG;AACH,MAAM,UAAU,GAAG,8BAA8B,CAAA;AAEjD,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,OAAe,EAAU,EAAE;IAC3D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,QAAQ,CAChB,kBAAkB,EAClB,IAAI,OAAO,+EAA+E;YACxF,mCAAmC,CACtC,CAAA;IACH,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,OAAgB,EAAe,EAAE,CAC5D,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;AAErG;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAc,EAAE,KAAkB,EAAwC,EAAE;IACtG,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAA;IAC7B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IAC3F,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;AACjC,CAAC,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,OAAe,EAAE,KAAkB,EAAQ,EAAE;IAC7E,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,QAAQ,CAChB,kBAAkB,EAClB,IAAI,OAAO,4BAA4B,OAAO,+CAA+C;YAC3F,gDAAgD;YAChD,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAC/B,CAAA;IACH,CAAC;AACH,CAAC,CAAA;AAED,6DAA6D;AAC7D,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,OAAgB,EAAW,EAAE;IAClD,IAAI,IAAI,GAAG,OAAO,CAAA;IAClB,OAAO,IAAI,CAAC,MAAM;QAAE,IAAI,GAAG,IAAI,CAAC,MAAM,CAAA;IACtC,OAAO,IAAI,CAAA;AACb,CAAC,CAAA"}

package/dist/program.d.ts

@@ -0,0 +1,29 @@
+import { type Streams } from "@leemour/cli-core";
+import { Command } from "commander";
+export interface RunOptions {
+    streams?: Streams;
+    /** Whether a person is looking. Defaults to whether stdout is a terminal. */
+    tty?: boolean;
+}
+export interface ProgramOptions {
+    /** Where `--version` and `--help` write. Injected so a test reads them instead of the terminal. */
+    out?: (text: string) => void;
+    err?: (text: string) => void;
+}
+/**
+ * The command tree, built fresh on each call.
+ *
+ * Commander is global state by default — `exitOverride` and the write hooks below turn it into a
+ * value a test can drive. A command that calls `process.exit` cannot be tested, and a CLI whose
+ * argument parsing is untested is a CLI that breaks on the day someone adds an option.
+ */
+export declare const createProgram: ({ out, err }?: ProgramOptions) => Command;
+/**
+ * Runs the program and **returns an exit code instead of throwing**.
+ *
+ * A stack trace is not an error message: it puts Node internals on stderr, tells a script nothing
+ * it can branch on, and exits 1 for every kind of failure alike. Here a failure becomes a code an
+ * agent can switch on, and a sentence a person can act on.
+ */
+export declare const run: (argv: string[], options?: RunOptions) => Promise<number>;
+//# sourceMappingURL=program.d.ts.map

package/dist/program.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"program.d.ts","sourceRoot":"","sources":["../src/program.ts"],"names":[],"mappings":"AAAA,OAAO,EAA0D,KAAK,OAAO,EAAE,MAAM,mBAAmB,CAAA;AACxG,OAAO,EAAE,OAAO,EAAkB,MAAM,WAAW,CAAA;AAWnD,MAAM,WAAW,UAAU;IACzB,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,6EAA6E;IAC7E,GAAG,CAAC,EAAE,OAAO,CAAA;CACd;AAED,MAAM,WAAW,cAAc;IAC7B,mGAAmG;IACnG,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC5B,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAC7B;AAED;;;;;;GAMG;AACH,eAAO,MAAM,aAAa,GAAI,eAAc,cAAmB,KAAG,OA4CjE,CAAA;AAOD;;;;;;GAMG;AACH,eAAO,MAAM,GAAG,GAAU,MAAM,MAAM,EAAE,EAAE,UAAS,UAAe,KAAG,OAAO,CAAC,MAAM,CA2DlF,CAAA"}