@leemour/max-cli 0.1.0

package/dist/spec/operations/messages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"messages.js","sourceRoot":"","sources":["../../../src/spec/operations/messages.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC7D,OAAO,EAAE,EAAE,EAAE,MAAM,eAAe,CAAA;AAElC,MAAM,CAAC,MAAM,YAAY,GAAG,eAAe,CAAC;IAC1C,IAAI,EAAE,eAAe;IACrB,QAAQ,EAAE,UAAU;IACpB,MAAM,EAAE,EAAE;IACV,IAAI,EAAE,IAAI;IACV,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC;QACtB,MAAM,EAAE,EAAE,EAAE;QACZ,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC;YACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;YAChB;;;eAGG;YACH,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;YACpC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YAC9B,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;SAC/B,CAAC;QACF,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;KACpB,CAAC;IACF,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IACnE,UAAU,EAAE;QACV,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE,CAAC,0FAA0F,CAAC;QACrG,KAAK,EAAE,oGAAoG;KAC5G;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,aAAa,CAAC;IACzC,IAAI,EAAE,iBAAiB;IACvB,QAAQ,EAAE,YAAY;IACtB,MAAM,EAAE,EAAE;IACV,MAAM,EACJ,wJAAwJ;IAC1J,UAAU,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE;CAC3D,CAAC,CAAA"}

package/dist/spec/operations/session.d.ts

@@ -0,0 +1,69 @@
+import * as v from "valibot";
+export declare const sessionInit: import("../define.js").Operation<v.StrictObjectSchema<{
+    readonly userAgent: v.StrictObjectSchema<{
+        readonly deviceType: v.LiteralSchema<"WEB", undefined>;
+        readonly pushDeviceType: v.LiteralSchema<"WEBPUSH", undefined>;
+        readonly locale: v.StringSchema<undefined>;
+        readonly deviceLocale: v.StringSchema<undefined>;
+        readonly osVersion: v.StringSchema<undefined>;
+        readonly deviceName: v.StringSchema<undefined>;
+        readonly headerUserAgent: v.StringSchema<undefined>;
+        readonly appVersion: v.StringSchema<undefined>;
+        readonly screen: v.StringSchema<undefined>;
+        readonly timezone: v.StringSchema<undefined>;
+    }, undefined>;
+    readonly deviceId: v.StringSchema<undefined>;
+}, undefined>, v.LooseObjectSchema<{}, undefined>>;
+export declare const sessionLogin: import("../define.js").Operation<v.StrictObjectSchema<{
+    readonly token: v.StringSchema<undefined>;
+    /**
+     * False, always. The web client sends true because a person is looking at it; we are a script
+     * reading, and claiming a human is present is the small lie that becomes a side effect nobody
+     * can trace (`RES-5`).
+     */
+    readonly interactive: v.LiteralSchema<false, undefined>;
+    readonly chatsCount: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, 100, undefined>]>;
+    /**
+     * **Delta markers, not flags** — measured 2026-09-20. Each is a moment in time, and MAX
+     * returns only what changed in that collection since it. `0` means "everything", which is what
+     * `src/session/handshake.ts` sends and is why every command re-fetches the whole list.
+     *
+     * The measurement, on a real account: `0` returned 6 contacts and 25 chats; the `time` the
+     * previous login answered with returned 0 and 0; a week earlier returned 1 and 11. The last of
+     * those is the one that matters — without it, "nothing came back" would equally have meant
+     * "any non-zero value suppresses the collection".
+     *
+     * Feeding them back is `MAX-10`, and it needs somewhere to keep the marker per profile.
+     */
+    readonly chatsSync: v.NumberSchema<undefined>;
+    readonly contactsSync: v.NumberSchema<undefined>;
+    readonly presenceSync: v.NumberSchema<undefined>;
+    readonly draftsSync: v.NumberSchema<undefined>;
+}, undefined>, v.LooseObjectSchema<{
+    readonly profile: v.OptionalSchema<v.LooseObjectSchema<{}, undefined>, undefined>;
+    readonly chats: v.OptionalSchema<v.ArraySchema<v.LooseObjectSchema<{}, undefined>, undefined>, undefined>;
+    readonly contacts: v.OptionalSchema<v.ArraySchema<v.LooseObjectSchema<{}, undefined>, undefined>, undefined>;
+    /**
+     * ⚠ **Shape unknown, and this field is why the response check exists.**
+     *
+     * It was declared as an array here and MAX sends an **object** — found 2026-09-20 by routing
+     * the handshake through the checked path. Nothing broke, because the reader is tolerant; what
+     * happened instead is that every message the login carries has been silently discarded since
+     * the specification was written, after we paid a request for them.
+     *
+     * The reference documents no top-level `messages` on this response at all — each chat carries
+     * its own `lastMessage` (`max-api-docs/protocol/chats.md:61`). So the array was **invented**,
+     * not misread, which is the failure `REQUIREMENTS.md` §10 exists to prevent: an unsourced
+     * shape stated with the same confidence as a measured one.
+     *
+     * Left as `unknown` until somebody looks (`PROTO-6`). `pnpm probe:ids` reports its type and key count.
+     */
+    readonly messages: v.OptionalSchema<v.UnknownSchema, undefined>;
+    readonly presence: v.OptionalSchema<v.UnknownSchema, undefined>;
+    readonly time: v.OptionalSchema<v.NumberSchema<undefined>, undefined>;
+    readonly chatMarker: v.OptionalSchema<v.UnknownSchema, undefined>;
+    readonly config: v.OptionalSchema<v.UnknownSchema, undefined>;
+    readonly videoChatHistory: v.OptionalSchema<v.UnknownSchema, undefined>;
+}, undefined>>;
+export declare const logout: import("../define.js").Reservation;
+//# sourceMappingURL=session.d.ts.map

package/dist/spec/operations/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../../src/spec/operations/session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAsB5B,eAAO,MAAM,WAAW;;;;;;;;;;;;;;kDAYtB,CAAA;AAEF,eAAO,MAAM,YAAY;;IAOrB;;;;OAIG;;;IAKH;;;;;;;;;;;OAWG;;;;;;;;;IAUH;;;;;;;;;;;;;;OAcG;;;;;;;cAcL,CAAA;AAEF,eAAO,MAAM,MAAM,oCAOjB,CAAA"}

package/dist/spec/operations/session.js

@@ -0,0 +1,106 @@
+import * as v from "valibot";
+import { defineOperation, reserveOpcode } from "../define.js";
+/**
+ * What we claim to be, as a shape rather than a constant.
+ *
+ * Declaring it strictly is the point: every field here is one the official web client sends
+ * (`REQUIREMENTS.md` §34), and a field we invented would be refused before it reached the socket.
+ */
+const WebUserAgent = v.strictObject({
+    deviceType: v.literal("WEB"),
+    pushDeviceType: v.literal("WEBPUSH"),
+    locale: v.string(),
+    deviceLocale: v.string(),
+    osVersion: v.string(),
+    deviceName: v.string(),
+    headerUserAgent: v.string(),
+    appVersion: v.string(),
+    screen: v.string(),
+    timezone: v.string(),
+});
+export const sessionInit = defineOperation({
+    name: "session.init",
+    constant: "SESSION_INIT",
+    opcode: 6,
+    auth: false,
+    request: v.strictObject({ userAgent: WebUserAgent, deviceId: v.string() }),
+    response: v.looseObject({}),
+    provenance: {
+        confidence: "measured",
+        sources: ["measured against MAX 2026-09-19", "max-api-docs/protocol/auth.md", "tsmax createWebAgent"],
+        notes: "MAX answers nothing before this and LOGIN, in that order.",
+    },
+});
+export const sessionLogin = defineOperation({
+    name: "session.login",
+    constant: "LOGIN",
+    opcode: 19,
+    auth: false,
+    request: v.strictObject({
+        token: v.string(),
+        /**
+         * False, always. The web client sends true because a person is looking at it; we are a script
+         * reading, and claiming a human is present is the small lie that becomes a side effect nobody
+         * can trace (`RES-5`).
+         */
+        interactive: v.literal(false),
+        // 100 works and 200 comes back `'chatsCount' out of range`; refusing locally beats a round
+        // trip that only tells us what we already know. The real boundary is `PROTO-3`.
+        chatsCount: v.pipe(v.number(), v.integer(), v.minValue(1), v.maxValue(100)),
+        /**
+         * **Delta markers, not flags** — measured 2026-09-20. Each is a moment in time, and MAX
+         * returns only what changed in that collection since it. `0` means "everything", which is what
+         * `src/session/handshake.ts` sends and is why every command re-fetches the whole list.
+         *
+         * The measurement, on a real account: `0` returned 6 contacts and 25 chats; the `time` the
+         * previous login answered with returned 0 and 0; a week earlier returned 1 and 11. The last of
+         * those is the one that matters — without it, "nothing came back" would equally have meant
+         * "any non-zero value suppresses the collection".
+         *
+         * Feeding them back is `MAX-10`, and it needs somewhere to keep the marker per profile.
+         */
+        chatsSync: v.number(),
+        contactsSync: v.number(),
+        presenceSync: v.number(),
+        draftsSync: v.number(),
+    }),
+    response: v.looseObject({
+        profile: v.optional(v.looseObject({})),
+        chats: v.optional(v.array(v.looseObject({}))),
+        contacts: v.optional(v.array(v.looseObject({}))),
+        /**
+         * ⚠ **Shape unknown, and this field is why the response check exists.**
+         *
+         * It was declared as an array here and MAX sends an **object** — found 2026-09-20 by routing
+         * the handshake through the checked path. Nothing broke, because the reader is tolerant; what
+         * happened instead is that every message the login carries has been silently discarded since
+         * the specification was written, after we paid a request for them.
+         *
+         * The reference documents no top-level `messages` on this response at all — each chat carries
+         * its own `lastMessage` (`max-api-docs/protocol/chats.md:61`). So the array was **invented**,
+         * not misread, which is the failure `REQUIREMENTS.md` §10 exists to prevent: an unsourced
+         * shape stated with the same confidence as a measured one.
+         *
+         * Left as `unknown` until somebody looks (`PROTO-6`). `pnpm probe:ids` reports its type and key count.
+         */
+        messages: v.optional(v.unknown()),
+        presence: v.optional(v.unknown()),
+        time: v.optional(v.number()),
+        chatMarker: v.optional(v.unknown()),
+        config: v.optional(v.unknown()),
+        videoChatHistory: v.optional(v.unknown()),
+    }),
+    provenance: {
+        confidence: "measured",
+        sources: ["measured against MAX 2026-09-19", "measured against MAX 2026-09-20 (`messages` is an object)"],
+        notes: "Unusually generous: the answer carries the profile, chats, contacts and recent messages, so `me` and `chats` need no further request.",
+    },
+});
+export const logout = reserveOpcode({
+    name: "session.logout",
+    constant: "LOGOUT",
+    opcode: 20,
+    reason: "`max session end` forgets the token locally and tells MAX nothing. Ending the session server-side would also end it for the browser tab the token came from, which is not what the command promises.",
+    provenance: { confidence: "observed", sources: ["max-api-docs/protocol/auth.md"] },
+});
+//# sourceMappingURL=session.js.map

package/dist/spec/operations/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../../src/spec/operations/session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAE7D;;;;;GAKG;AACH,MAAM,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC;IAClC,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAC5B,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IACpC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;CACrB,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,eAAe,CAAC;IACzC,IAAI,EAAE,cAAc;IACpB,QAAQ,EAAE,cAAc;IACxB,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,KAAK;IACX,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC1E,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC;IAC3B,UAAU,EAAE;QACV,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE,CAAC,iCAAiC,EAAE,+BAA+B,EAAE,sBAAsB,CAAC;QACrG,KAAK,EAAE,2DAA2D;KACnE;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,eAAe,CAAC;IAC1C,IAAI,EAAE,eAAe;IACrB,QAAQ,EAAE,OAAO;IACjB,MAAM,EAAE,EAAE;IACV,IAAI,EAAE,KAAK;IACX,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC;QACtB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB;;;;WAIG;QACH,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;QAC7B,2FAA2F;QAC3F,gFAAgF;QAChF,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC3E;;;;;;;;;;;WAWG;QACH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;QACxB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;QACxB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;KACvB,CAAC;IACF,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC;QACtB,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACtC,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7C,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;QAChD;;;;;;;;;;;;;;WAcG;QACH,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACjC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACjC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC5B,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACnC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QAC/B,gBAAgB,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;KAC1C,CAAC;IACF,UAAU,EAAE;QACV,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE,CAAC,iCAAiC,EAAE,2DAA2D,CAAC;QACzG,KAAK,EACH,uIAAuI;KAC1I;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,MAAM,GAAG,aAAa,CAAC;IAClC,IAAI,EAAE,gBAAgB;IACtB,QAAQ,EAAE,QAAQ;IAClB,MAAM,EAAE,EAAE;IACV,MAAM,EACJ,sMAAsM;IACxM,UAAU,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,+BAA+B,CAAC,EAAE;CACnF,CAAC,CAAA"}

package/dist/spec/scalars.d.ts

@@ -0,0 +1,16 @@
+import * as v from "valibot";
+export declare const toWireId: (value: string) => bigint;
+/**
+ * An id in a request we build: a domain string in, the wire form out.
+ *
+ * The schema is the encoder as well as the check, so there is no second place where a conversion
+ * could be forgotten — `v.parse(request, { chatId: "0" })` yields `{ chatId: 0n }`.
+ */
+export declare const id: () => v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "an id is a whole number written as a string">, v.TransformAction<string, bigint>]>;
+/**
+ * An id in an answer we read. **Not the same as `id()` and not a transform**: a response schema
+ * reports, it does not convert (§4.6 of the plan), and the conversion to our own string form is
+ * the domain mapper's job.
+ */
+export declare const wireId: () => v.UnionSchema<[v.StringSchema<undefined>, v.NumberSchema<undefined>, v.BigintSchema<undefined>], undefined>;
+//# sourceMappingURL=scalars.d.ts.map

package/dist/spec/scalars.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scalars.d.ts","sourceRoot":"","sources":["../../src/spec/scalars.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAgB5B,eAAO,MAAM,QAAQ,GAAI,OAAO,MAAM,KAAG,MAAuB,CAAA;AAEhE;;;;;GAKG;AACH,eAAO,MAAM,EAAE,uKACkG,CAAA;AAEjH;;;;GAIG;AACH,eAAO,MAAM,MAAM,mHAAsD,CAAA"}

package/dist/spec/scalars.js

@@ -0,0 +1,28 @@
+import * as v from "valibot";
+/**
+ * The two directions an id travels, and why they are not the same schema.
+ *
+ * MAX ids are 64-bit. `asId` in `../protocol/frame.ts` is the read direction: whatever arrived —
+ * a number when small, a bigint when not — leaves as a string, because an id is an identifier and
+ * never arithmetic. The write direction did not exist, and `Number(id)` was standing in for it:
+ * `Number("7268926000000000001")` is `7268926000000000000`, which is a different chat.
+ *
+ * `lossless-json` serialises a bigint as a bare number literal, so a `bigint` in a payload reaches
+ * MAX with every digit and an id below 2^53 produces the identical bytes it does today.
+ */
+const WHOLE_NUMBER = /^-?\d+$/;
+export const toWireId = (value) => BigInt(value);
+/**
+ * An id in a request we build: a domain string in, the wire form out.
+ *
+ * The schema is the encoder as well as the check, so there is no second place where a conversion
+ * could be forgotten — `v.parse(request, { chatId: "0" })` yields `{ chatId: 0n }`.
+ */
+export const id = () => v.pipe(v.string(), v.regex(WHOLE_NUMBER, "an id is a whole number written as a string"), v.transform(toWireId));
+/**
+ * An id in an answer we read. **Not the same as `id()` and not a transform**: a response schema
+ * reports, it does not convert (§4.6 of the plan), and the conversion to our own string form is
+ * the domain mapper's job.
+ */
+export const wireId = () => v.union([v.string(), v.number(), v.bigint()]);
+//# sourceMappingURL=scalars.js.map

package/dist/spec/scalars.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scalars.js","sourceRoot":"","sources":["../../src/spec/scalars.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAE5B;;;;;;;;;;GAUG;AAEH,MAAM,YAAY,GAAG,SAAS,CAAA;AAE9B,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAEhE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,EAAE,GAAG,GAAG,EAAE,CACrB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,EAAE,6CAA6C,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAA;AAEjH;;;;GAIG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA"}

package/dist/testing/mock-max.d.ts

@@ -0,0 +1,29 @@
+import type { WebSocket } from "ws";
+import { type Payload } from "../protocol/frame.js";
+export interface MockMaxOptions {
+    /** One answer per opcode. An opcode with no answer is an unexpected call, and the test fails. */
+    /** A function may return `undefined` to stay silent, which is how a timeout is scripted. */
+    answers: Record<number, Payload | (() => Payload | undefined)>;
+    /** Opcodes to refuse, as MAX does: `cmd=3` with an `error` in the payload. */
+    refuse?: Record<number, string>;
+}
+export interface MockMax {
+    createSocket: () => WebSocket;
+    /** Every request sent, in order — what the code under test actually asked MAX for. */
+    sent: {
+        opcode: number;
+        payload: Payload;
+    }[];
+    /** Calls with no scripted answer. A test that ignores these can pass for the wrong reason. */
+    unexpected: number[];
+    closed: boolean;
+}
+/**
+ * MAX, scripted. **No timers, no network, no waiting**: an answer is delivered on the next tick,
+ * so a timeout test costs nothing and a suite cannot reach the real service.
+ *
+ * It records what was sent, which is how "reading history never marks anything read" is a test
+ * rather than a hope: assert that opcode 50 is absent from `sent`.
+ */
+export declare const mockMax: ({ answers, refuse }: MockMaxOptions) => MockMax;
+//# sourceMappingURL=mock-max.d.ts.map

package/dist/testing/mock-max.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-max.d.ts","sourceRoot":"","sources":["../../src/testing/mock-max.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAA;AACnC,OAAO,EAAqC,KAAK,OAAO,EAAE,MAAM,sBAAsB,CAAA;AAEtF,MAAM,WAAW,cAAc;IAC7B,iGAAiG;IACjG,4FAA4F;IAC5F,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,GAAG,CAAC,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAA;IAC9D,8EAA8E;IAC9E,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAChC;AAED,MAAM,WAAW,OAAO;IACtB,YAAY,EAAE,MAAM,SAAS,CAAA;IAC7B,sFAAsF;IACtF,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,EAAE,CAAA;IAC5C,8FAA8F;IAC9F,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,MAAM,EAAE,OAAO,CAAA;CAChB;AAED;;;;;;GAMG;AACH,eAAO,MAAM,OAAO,GAAI,qBAA0B,cAAc,KAAG,OA2ClE,CAAA"}

package/dist/testing/mock-max.js

@@ -0,0 +1,46 @@
+import { EventEmitter } from "node:events";
+import { Command, decodeFrame, encodeFrame } from "../protocol/frame.js";
+/**
+ * MAX, scripted. **No timers, no network, no waiting**: an answer is delivered on the next tick,
+ * so a timeout test costs nothing and a suite cannot reach the real service.
+ *
+ * It records what was sent, which is how "reading history never marks anything read" is a test
+ * rather than a hope: assert that opcode 50 is absent from `sent`.
+ */
+export const mockMax = ({ answers, refuse = {} }) => {
+    const state = { createSocket: () => socket, sent: [], unexpected: [], closed: false };
+    const socket = new (class extends EventEmitter {
+        readyState = 1;
+        OPEN = 1;
+        CONNECTING = 0;
+        CLOSING = 2;
+        send(raw) {
+            const frame = decodeFrame(raw);
+            state.sent.push({ opcode: frame.opcode, payload: frame.payload ?? {} });
+            const refusal = refuse[frame.opcode];
+            if (refusal !== undefined) {
+                this.answer({ seq: frame.seq ?? 0, opcode: frame.opcode, payload: { error: refusal }, cmd: Command.ERROR });
+                return;
+            }
+            const answer = answers[frame.opcode];
+            if (answer === undefined) {
+                state.unexpected.push(frame.opcode);
+                return;
+            }
+            const payload = typeof answer === "function" ? answer() : answer;
+            if (payload === undefined)
+                return; // Silence: the caller will time out, as MAX sometimes does.
+            this.answer({ seq: frame.seq ?? 0, opcode: frame.opcode, payload, cmd: Command.RESPONSE });
+        }
+        answer(frame) {
+            queueMicrotask(() => this.emit("message", encodeFrame(frame)));
+        }
+        close() {
+            state.closed = true;
+            this.readyState = 3;
+        }
+    })();
+    queueMicrotask(() => socket.emit("open"));
+    return state;
+};
+//# sourceMappingURL=mock-max.js.map

package/dist/testing/mock-max.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-max.js","sourceRoot":"","sources":["../../src/testing/mock-max.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAE1C,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAgB,MAAM,sBAAsB,CAAA;AAmBtF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,EAAE,EAAkB,EAAW,EAAE;IAC3E,MAAM,KAAK,GAAY,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,MAA8B,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;IAEtH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAM,SAAQ,YAAY;QAC5C,UAAU,GAAG,CAAC,CAAA;QACL,IAAI,GAAG,CAAC,CAAA;QACR,UAAU,GAAG,CAAC,CAAA;QACd,OAAO,GAAG,CAAC,CAAA;QAEpB,IAAI,CAAC,GAAW;YACd,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;YAC9B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,CAAA;YAEvE,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;YACpC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAA;gBAC3G,OAAM;YACR,CAAC;YAED,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;YACpC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;gBACnC,OAAM;YACR,CAAC;YAED,MAAM,OAAO,GAAG,OAAO,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAA;YAChE,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAM,CAAC,4DAA4D;YAE9F,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAA;QAC5F,CAAC;QAED,MAAM,CAAC,KAAsE;YAC3E,cAAc,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAChE,CAAC;QAED,KAAK;YACH,KAAK,CAAC,MAAM,GAAG,IAAI,CAAA;YACnB,IAAI,CAAC,UAAU,GAAG,CAAC,CAAA;QACrB,CAAC;KACF,CAAC,EAAE,CAAA;IAEJ,cAAc,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;IACzC,OAAO,KAAK,CAAA;AACd,CAAC,CAAA"}

package/dist/version.d.ts

@@ -0,0 +1,3 @@
+/** The one the running command reports. `pnpm version:check` fails when it and package.json disagree. */
+export declare const VERSION = "0.1.0";
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,yGAAyG;AACzG,eAAO,MAAM,OAAO,UAAU,CAAA"}

package/dist/version.js

@@ -0,0 +1,3 @@
+/** The one the running command reports. `pnpm version:check` fails when it and package.json disagree. */
+export const VERSION = "0.1.0";
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,yGAAyG;AACzG,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAA"}

package/package.json

@@ -0,0 +1,58 @@
+{
+  "name": "@leemour/max-cli",
+  "version": "0.1.0",
+  "description": "A local command line interface for a personal MAX Messenger account, built for agents and scripts",
+  "license": "MIT",
+  "author": "Viacheslav Ptsarev",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/leemour/max-cli.git"
+  },
+  "type": "module",
+  "engines": {
+    "node": ">=22"
+  },
+  "bin": {
+    "max": "dist/bin/max.js"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "dependencies": {
+    "@leemour/cli-core": "^0.1.0",
+    "commander": "^15.0.0",
+    "lossless-json": "^4.3.1",
+    "valibot": "^1.5.0",
+    "ws": "^8.19.0"
+  },
+  "devDependencies": {
+    "@biomejs/biome": "^2.3.14",
+    "@types/node": "^22.10.2",
+    "@types/ws": "^8.18.1",
+    "typescript": "^5.9.3",
+    "vitest": "^3.2.4",
+    "lefthook": "^2.1.8"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc --build",
+    "generate": "pnpm build && node --experimental-strip-types scripts/generate.ts && node --experimental-strip-types scripts/commands.ts",
+    "typecheck": "tsc --build --force --emitDeclarationOnly && tsc -p tsconfig.test.json",
+    "lint": "biome check .",
+    "lint:fix": "biome check --write .",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "smoke:bun": "bun run scripts/smoke.ts",
+    "version:check": "node --experimental-strip-types scripts/version.ts",
+    "version:sync": "node --experimental-strip-types scripts/version.ts --sync",
+    "probe:ids": "pnpm build && node --experimental-strip-types scripts/id-shape.ts",
+    "probe:edits": "pnpm build && node --experimental-strip-types scripts/probe-edits.ts",
+    "verify:live": "pnpm build && node --experimental-strip-types scripts/verify-commands.ts",
+    "secrets:scan": "gitleaks git --no-banner --redact .",
+    "probe:contacts": "pnpm build && node --experimental-strip-types scripts/probe-contacts.ts"
+  }
+}