@leemour/max-cli 0.4.0 → 0.6.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@leemour/max-cli",
-  "version": "0.4.0",
+  "version": "0.6.0",
   "description": "A local command line interface for a personal MAX Messenger account, built for agents and scripts",
   "license": "MIT",
   "author": "Viacheslav Ptsarev",
@@ -12,6 +12,7 @@
   "engines": {
     "node": ">=22"
   },
+  "packageManager": "pnpm@11.20.0",
   "bin": {
     "max": "dist/bin/max.js"
   },
@@ -21,10 +22,37 @@
     "README.md",
     "LICENSE"
   ],
+  "scripts": {
+    "build": "tsc --build",
+    "generate": "pnpm build && node --experimental-strip-types scripts/generate.ts && node --experimental-strip-types scripts/commands.ts",
+    "typecheck": "tsc --build --force --emitDeclarationOnly && tsc -p tsconfig.test.json && tsc -p tsconfig.scripts.json",
+    "lint": "biome check .",
+    "lint:fix": "biome check --write .",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "smoke:bun": "bun run scripts/smoke.ts",
+    "version:check": "node --experimental-strip-types scripts/version.ts",
+    "version:sync": "node --experimental-strip-types scripts/version.ts --sync",
+    "probe:ids": "pnpm build && node --experimental-strip-types scripts/id-shape.ts",
+    "probe:download": "pnpm build && node --experimental-strip-types scripts/probe-download.ts",
+    "probe:reply": "pnpm build && node --experimental-strip-types scripts/probe-reply.ts",
+    "probe:edits": "pnpm build && node --experimental-strip-types scripts/probe-edits.ts",
+    "probe:attachments": "pnpm build && node --experimental-strip-types scripts/probe-attachments.ts",
+    "verify:live": "pnpm build && node --experimental-strip-types scripts/verify-commands.ts",
+    "prepare": "lefthook install || true",
+    "secrets:scan": "gitleaks git --no-banner --redact .",
+    "prepublishOnly": "pnpm build",
+    "probe:contacts": "pnpm build && node --experimental-strip-types scripts/probe-contacts.ts",
+    "probe:reactions": "pnpm build && node --experimental-strip-types scripts/probe-reactions.ts",
+    "probe:message-shapes": "pnpm build && node --experimental-strip-types scripts/probe-message-shapes.ts",
+    "probe:token": "pnpm build && node --experimental-strip-types scripts/probe-token.ts",
+    "probe:inbox": "pnpm build && node --experimental-strip-types scripts/probe-inbox.ts"
+  },
   "dependencies": {
-    "@leemour/cli-core": "^0.1.0",
+    "@leemour/cli-core": "^0.2.0",
     "commander": "^15.0.0",
     "lossless-json": "^4.3.1",
+    "qrcode-generator": "2.0.4",
     "string-width": "^8.2.2",
     "valibot": "^1.5.0",
     "wrap-ansi": "^10.0.2",
@@ -40,24 +68,5 @@
   },
   "publishConfig": {
     "access": "public"
-  },
-  "scripts": {
-    "build": "tsc --build",
-    "generate": "pnpm build && node --experimental-strip-types scripts/generate.ts && node --experimental-strip-types scripts/commands.ts",
-    "typecheck": "tsc --build --force --emitDeclarationOnly && tsc -p tsconfig.test.json && tsc -p tsconfig.scripts.json",
-    "lint": "biome check .",
-    "lint:fix": "biome check --write .",
-    "test": "vitest run",
-    "test:watch": "vitest",
-    "smoke:bun": "bun run scripts/smoke.ts",
-    "version:check": "node --experimental-strip-types scripts/version.ts",
-    "version:sync": "node --experimental-strip-types scripts/version.ts --sync",
-    "probe:ids": "pnpm build && node --experimental-strip-types scripts/id-shape.ts",
-    "probe:edits": "pnpm build && node --experimental-strip-types scripts/probe-edits.ts",
-    "probe:attachments": "pnpm build && node --experimental-strip-types scripts/probe-attachments.ts",
-    "verify:live": "pnpm build && node --experimental-strip-types scripts/verify-commands.ts",
-    "secrets:scan": "gitleaks git --no-banner --redact .",
-    "probe:contacts": "pnpm build && node --experimental-strip-types scripts/probe-contacts.ts",
-    "probe:token": "pnpm build && node --experimental-strip-types scripts/probe-token.ts"
   }
-}
+}

package/skills/max-cli/SKILL.md

@@ -8,14 +8,19 @@ description: Читать и отправлять сообщения в личн
 `max` работает с **настоящим личным аккаунтом** владельца. Ошибка здесь не роняет тест, а пишет
 живому человеку. Один вызов — одно действие: подключиться, сделать, напечатать, выйти.
 
-Полный список команд и флагов — `max --help` и `max <команда> --help`. Здесь — то, что справка не
-скажет: ловушки и границы.
+Полный список команд и флагов — **`max commands --json`**: всё дерево одним ответом — аргументы,
+флаги (берёт ли значение, обязателен ли), коды выхода и пометка `mutates: true` на командах, которые
+что-то меняют в MAX. `max --help` — то же для человека. Здесь — то, что справка не скажет: ловушки и
+границы.
 
 ## Границы
 
 - **Ничего не отправлять без прямой просьбы владельца.** `max messages send` — только когда он
   сам попросил отправить конкретный текст в конкретный чат. Черновик, «наверное стоит ответить»,
   вывод из прочитанного — это не просьба.
+- **Отказ `5`, `7` или `8` на отправке или реакции — это решение владельца, а не сбой.** Не обходить его: не
+  менять настройки, не звать `max recipients add`, не ждать и не повторять. Сказать владельцу, что
+  отправка не прошла и почему.
 - **Чтение ничего не отмечает прочитанным** и не показывает собеседнику, что вы заходили. Читать
   можно свободно.
 - **Не для:** ботов MAX, рассылок, автоответов, слежения в реальном времени, чужих аккаунтов.
@@ -30,7 +35,8 @@ description: Читать и отправлять сообщения в личн
 - **Список — это объект**, а не массив: `{ "items": [...], "page": 1, "limit": 20, "hasMore": true }`.
 - **`--jsonl`** — по объекту на строку, удобно для `jq`. Есть ли ещё, пишется только в stderr.
 - **Ветвиться по коду возврата, а не по тексту**: `0` — успех, `2` — неверный ввод, `4` — нет
-  входа, `6` — не найдено, `14` — **неизвестно, ушло ли сообщение** (см. отправку).
+  входа, `5` — профиль только для чтения, `6` — не найдено, `7` — чата нет в списке разрешённых,
+  `8` — лимит отправок за час, `14` — **неизвестно, ушло ли сообщение** (см. отправку).
 - `-v` и `-vv` добавляют подробности в вывод для человека. Версия — `max -V`. Строки о каждом
   запросе к MAX — `--trace`, в stderr.
 
@@ -44,7 +50,9 @@ description: Читать и отправлять сообщения в личн
    алфавите отвергается **как имя** (код `2`), и это не то же самое, что профиль, в который никто
    не входил (код `4`).
 3. **Имя чата, подходящее к нескольким чатам, — ошибка, а не выбор.** В JSON у неё есть
-   `candidates: [{ id, title }]`. Взять оттуда id и повторить с ним, а не угадывать.
+   `candidates: [{ id, title }]`. Взять оттуда id и повторить с ним, а не угадывать. То же у
+   `max contacts show` — человек по id, `@username` или части имени, кандидаты
+   `[{ id, name, username }]`.
 4. **Повтор отправки — только с тем же `--cid`.** Код `14` значит, что сообщение, возможно, ушло.
    В тексте ошибки есть `--cid <n>`; повтор с ним MAX схлопнет, повтор без него — второе сообщение
    человеку.
@@ -55,12 +63,14 @@ description: Читать и отправлять сообщения в личн
    а не пустой список.
 6. **`messages show` и `messages context` требуют и чат, и id сообщения.** Искомое сообщение в
    JSON помечено `"anchor": true`. Если сообщения нет, это `not_found`, а не соседнее сообщение.
-7. **Время сообщения зашито в его id**: `id >> 16` — миллисекунды. Поэтому `--before <id>`
-   работает для любого id, даже не прочитанного раньше.
+7. **Время сообщения зашито в его id**: `id >> 16` — миллисекунды. Поэтому `--before <id>` и
+   `--after <id>` работают для любого id, даже не прочитанного раньше. `--before` включает само
+   сообщение, `--after` — нет. Вместе они — отказ с кодом `2`.
 8. **`MAX_CONFIG_DIR`, `MAX_STATE_DIR`, `MAX_CACHE_DIR` меняют и запись в ключнице.** С ними
    профиль ищет другой токен и может ответить «нет сессии», хотя владелец вошёл. `max config show`
    говорит, заданы ли они, и какой профиль и какие настройки действуют.
 9. **`--offline` отвечает из локальной копии** и не подключается. Если там ничего нет — ошибка.
+   Отправка с `--offline` — всегда отказ.
 10. **Многострочный текст передаётся только через stdin.** Аргумент командной строки перевод
    строки не несёт вовсе, а тело в аргументе видно в `ps` и остаётся в истории оболочки. Последний
    аргумент опускается, и тело читается со входа: `printf 'первая\n\nтретья' | max messages send
@@ -68,6 +78,9 @@ description: Читать и отправлять сообщения в личн
 11. **Номер страницы на живом списке может повторить или пропустить строку.** Сверху самое свежее,
    поэтому сообщение, пришедшее между первой страницей и второй, сдвигает кого-то через границу.
    Для переписки этого нет: `--before` привязан ко времени и точен.
+12. **`max inbox --new` сдвигает место, где владелец остановился.** После него следующий
+   `--new` владельца не покажет того, что уже увидел агент. Без сдвига: просто `max inbox`
+   (непрочитанное) или `max inbox --since <время>`.
 
 ## Типичный путь
 
@@ -75,7 +88,13 @@ Id ниже выдуманные — подставить настоящие и
 
 ```sh
 max chats list --search "проект" --json       # найти чат, взять его id
+max chats list --unread --json                 # где есть непрочитанное
+max inbox --json                               # непрочитанное во всех чатах
+max inbox --new --json                         # что пришло с прошлой проверки, один раз
+max chats show -1000 --json                    # один чат и кто в нём
+max contacts show @ivan --json                 # один человек и общие чаты
 max messages list -1000 --limit 20 --json      # последние сообщения, от старых к новым
+max messages list -1000 --after 100000000000000001 --json   # что было после этого сообщения
 max messages context -1000 100000000000000001 --before 3 --after 3 --json
 ```
 

package/dist/commands/login.d.ts

@@ -1,15 +0,0 @@
-import { Command } from "commander";
-/**
- * For now, importing a token obtained elsewhere — from `web.max.ru`, or from another client.
- *
- * This is not a stopgap: it is the escape hatch that keeps every other command usable when our own
- * login flow meets a captcha or an unusual second factor, and it is how the slice is tested
- * without an SMS per run. The interactive phone-and-code flow lands beside it, not instead of it.
- *
- * **The token is asked for, not passed.** `--token` puts it in `ps` output and shell history, and a
- * file leaves a copy nobody deletes, so with neither given it is read from the terminal without
- * being echoed — or from a pipe, for `pass show max | max login`. From there it goes to the OS
- * keyring and nowhere else.
- */
-export declare const loginCommand: () => Command;
-//# sourceMappingURL=login.d.ts.map

package/dist/commands/login.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAMnC;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,YAAY,QAAO,OA2B1B,CAAA"}

package/dist/commands/login.js

@@ -1,43 +0,0 @@
-import { Command } from "commander";
-import { MaxClient } from "../client.js";
-import { resolveOutput } from "../output.js";
-import { readSecret } from "../session/prompt.js";
-import { SessionStore } from "../session/store.js";
-/**
- * For now, importing a token obtained elsewhere — from `web.max.ru`, or from another client.
- *
- * This is not a stopgap: it is the escape hatch that keeps every other command usable when our own
- * login flow meets a captcha or an unusual second factor, and it is how the slice is tested
- * without an SMS per run. The interactive phone-and-code flow lands beside it, not instead of it.
- *
- * **The token is asked for, not passed.** `--token` puts it in `ps` output and shell history, and a
- * file leaves a copy nobody deletes, so with neither given it is read from the terminal without
- * being echoed — or from a pipe, for `pass show max | max login`. From there it goes to the OS
- * keyring and nowhere else.
- */
-export const loginCommand = () => new Command("login")
-    .description("store a MAX session for this profile")
-    .option("--token <token>", "a session token; prompted for, or read from a pipe, when omitted")
-    .action(async function () {
-    const options = this.optsWithGlobals();
-    const { renderer } = resolveOutput(options);
-    const token = options.token ?? process.env.MAX_TOKEN?.trim() ?? (await readSecret("MAX token: "));
-    if (!token) {
-        renderer.failure("no token given");
-        process.exitCode = 2;
-        return;
-    }
-    const store = new SessionStore({ profile: options.profile });
-    store.writeToken(token);
-    const client = new MaxClient({ store });
-    try {
-        await client.connect();
-        const profile = client.account.me();
-        renderer.result({ profile, stored: true });
-        renderer.success(`logged in as ${profile.name ?? profile.id}`);
-    }
-    finally {
-        await client.close();
-    }
-});
-//# sourceMappingURL=login.js.map

package/dist/commands/login.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAElD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,GAAY,EAAE,CACxC,IAAI,OAAO,CAAC,OAAO,CAAC;KACjB,WAAW,CAAC,sCAAsC,CAAC;KACnD,MAAM,CAAC,iBAAiB,EAAE,kEAAkE,CAAC;KAC7F,MAAM,CAAC,KAAK;IACX,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,EAAE,CAAA;IACtC,MAAM,EAAE,QAAQ,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;IAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,UAAU,CAAC,aAAa,CAAC,CAAC,CAAA;IAEjG,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;QAClC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;QACpB,OAAM;IACR,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;IAC5D,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;IAEvB,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;IACvC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,EAAE,CAAA;QACtB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,CAAA;QACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QAC1C,QAAQ,CAAC,OAAO,CAAC,gBAAgB,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;IAChE,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;IACtB,CAAC;AACH,CAAC,CAAC,CAAA"}

package/dist/commands/logout.d.ts

@@ -1,10 +0,0 @@
-import { Command } from "commander";
-/**
- * Local only, for now: it forgets the token and the device identity on this machine.
- *
- * It does **not** yet send LOGOUT (opcode 20), which would end the session on MAX's side too. That
- * distinction is in the output rather than glossed over: a forgotten token that is still live
- * elsewhere is a different thing from a revoked one.
- */
-export declare const logoutCommand: () => Command;
-//# sourceMappingURL=logout.d.ts.map

package/dist/commands/logout.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"logout.d.ts","sourceRoot":"","sources":["../../src/commands/logout.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAInC;;;;;;GAMG;AACH,eAAO,MAAM,aAAa,QAAO,OAU7B,CAAA"}

package/dist/commands/logout.js

@@ -1,22 +0,0 @@
-import { Command } from "commander";
-import { resolveOutput } from "../output.js";
-import { SessionStore } from "../session/store.js";
-/**
- * Local only, for now: it forgets the token and the device identity on this machine.
- *
- * It does **not** yet send LOGOUT (opcode 20), which would end the session on MAX's side too. That
- * distinction is in the output rather than glossed over: a forgotten token that is still live
- * elsewhere is a different thing from a revoked one.
- */
-export const logoutCommand = () => new Command("logout").description("forget the stored session for this profile").action(function () {
-    const options = this.optsWithGlobals();
-    const { renderer } = resolveOutput(options);
-    const store = new SessionStore({ profile: options.profile });
-    const had = store.forget();
-    renderer.result({ profile: store.profile, forgotten: had, revokedOnServer: false });
-    if (had)
-        renderer.success(`forgot the session for "${store.profile}" on this machine`);
-    else
-        renderer.note(`there was no session for "${store.profile}"`);
-});
-//# sourceMappingURL=logout.js.map

package/dist/commands/logout.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"logout.js","sourceRoot":"","sources":["../../src/commands/logout.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAElD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,GAAY,EAAE,CACzC,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,4CAA4C,CAAC,CAAC,MAAM,CAAC;IACrF,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,EAAE,CAAA;IACtC,MAAM,EAAE,QAAQ,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;IAC3C,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;IAC5D,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,EAAE,CAAA;IAE1B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAA;IACnF,IAAI,GAAG;QAAE,QAAQ,CAAC,OAAO,CAAC,2BAA2B,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAA;;QACjF,QAAQ,CAAC,IAAI,CAAC,6BAA6B,KAAK,CAAC,OAAO,GAAG,CAAC,CAAA;AACnE,CAAC,CAAC,CAAA"}

package/dist/commands/me.d.ts

@@ -1,3 +0,0 @@
-import { Command } from "commander";
-export declare const meCommand: () => Command;
-//# sourceMappingURL=me.d.ts.map

package/dist/commands/me.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"me.d.ts","sourceRoot":"","sources":["../../src/commands/me.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAKnC,eAAO,MAAM,SAAS,QAAO,OAazB,CAAA"}

package/dist/commands/me.js

@@ -1,18 +0,0 @@
-import { Command } from "commander";
-import { MaxClient } from "../client.js";
-import { resolveOutput } from "../output.js";
-import { SessionStore } from "../session/store.js";
-export const meCommand = () => new Command("me").description("who this profile is logged in as").action(async function () {
-    const options = this.optsWithGlobals();
-    const { renderer } = resolveOutput(options);
-    const client = new MaxClient({ store: new SessionStore({ profile: options.profile }) });
-    try {
-        await client.connect();
-        renderer.result(client.account.me());
-    }
-    finally {
-        // Nothing below this line: an open socket keeps the process alive after the answer printed.
-        await client.close();
-    }
-});
-//# sourceMappingURL=me.js.map

package/dist/commands/me.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"me.js","sourceRoot":"","sources":["../../src/commands/me.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAElD,MAAM,CAAC,MAAM,SAAS,GAAG,GAAY,EAAE,CACrC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,kCAAkC,CAAC,CAAC,MAAM,CAAC,KAAK;IAC5E,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,EAAE,CAAA;IACtC,MAAM,EAAE,QAAQ,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;IAC3C,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,YAAY,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAA;IAEvF,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,EAAE,CAAA;QACtB,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;IACtC,CAAC;YAAS,CAAC;QACT,4FAA4F;QAC5F,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;IACtB,CAAC;AACH,CAAC,CAAC,CAAA"}

package/dist/commands/send.d.ts

@@ -1,10 +0,0 @@
-import { Command } from "commander";
-/**
- * One message, one command, no retry.
- *
- * There is no `--dry-run` here: the target and the text are both in the line the person typed, so
- * a preview would restate the command back at them (REQUIREMENTS §21). What this command does owe
- * the caller is honesty about an outcome it does not know — see `MaxClient.sendMessage`.
- */
-export declare const sendCommand: () => Command;
-//# sourceMappingURL=send.d.ts.map

package/dist/commands/send.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"send.d.ts","sourceRoot":"","sources":["../../src/commands/send.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAKnC;;;;;;GAMG;AACH,eAAO,MAAM,WAAW,QAAO,OAoBzB,CAAA"}

package/dist/commands/send.js

@@ -1,30 +0,0 @@
-import { Command } from "commander";
-import { MaxClient } from "../client.js";
-import { resolveOutput } from "../output.js";
-import { SessionStore } from "../session/store.js";
-/**
- * One message, one command, no retry.
- *
- * There is no `--dry-run` here: the target and the text are both in the line the person typed, so
- * a preview would restate the command back at them (REQUIREMENTS §21). What this command does owe
- * the caller is honesty about an outcome it does not know — see `MaxClient.sendMessage`.
- */
-export const sendCommand = () => new Command("send")
-    .argument("<chat>", "chat id, or part of a chat name")
-    .argument("<text>", "what to say")
-    .description("send one text message")
-    .option("--cid <n>", "reuse a client id from an earlier ambiguous send; MAX collapses the duplicate", (value) => Number.parseInt(value, 10))
-    .action(async function (chat, text) {
-    const options = this.optsWithGlobals();
-    const { renderer } = resolveOutput(options);
-    const client = new MaxClient({ store: new SessionStore({ profile: options.profile }) });
-    try {
-        await client.connect();
-        const chatId = await client.chats.resolve(chat);
-        renderer.result(await client.messages.send(chatId, text, options.cid === undefined ? {} : { cid: options.cid }));
-    }
-    finally {
-        await client.close();
-    }
-});
-//# sourceMappingURL=send.js.map

package/dist/commands/send.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"send.js","sourceRoot":"","sources":["../../src/commands/send.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAElD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,GAAY,EAAE,CACvC,IAAI,OAAO,CAAC,MAAM,CAAC;KAChB,QAAQ,CAAC,QAAQ,EAAE,iCAAiC,CAAC;KACrD,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;KACjC,WAAW,CAAC,uBAAuB,CAAC;KACpC,MAAM,CAAC,WAAW,EAAE,+EAA+E,EAAE,CAAC,KAAK,EAAE,EAAE,CAC9G,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAC3B;KACA,MAAM,CAAC,KAAK,WAA0B,IAAY,EAAE,IAAY;IAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,EAAE,CAAA;IACtC,MAAM,EAAE,QAAQ,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;IAC3C,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,YAAY,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAA;IAEvF,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,EAAE,CAAA;QACtB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QAC/C,QAAQ,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;IAClH,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;IACtB,CAAC;AACH,CAAC,CAAC,CAAA"}

package/dist/protocol/session.d.ts

@@ -1,54 +0,0 @@
-import type { Connection } from "./connection.js";
-import type { Payload } from "./frame.js";
-export declare const Opcode: {
-    readonly SESSION_INIT: 6;
-    readonly PROFILE: 16;
-    readonly LOGIN: 19;
-    readonly LOGOUT: 20;
-    /**
-     * Contact details by id. **Sources disagree about its neighbour**: opcode 36 is `CONTACT_LIST` in
-     * tsmax and PyMax, and `GET_BLOCKED` in the protocol documentation. We use 32, which both call the
-     * same thing, and stay away from 36 until somebody has watched what it returns.
-     */
-    readonly CONTACT_INFO: 32;
-    readonly CHAT_HISTORY: 49;
-    readonly CHATS_LIST: 53;
-    readonly MSG_SEND: 64;
-};
-/**
- * What we claim to be. **We imitate MAX's own web client rather than announcing ourselves**
- * (REQUIREMENTS §34), so none of these values names this tool.
- *
- * Shape and field names from `max-api-docs/protocol/auth.md`, cross-checked against tsmax's
- * `createWebAgent`. The device identity is not here: it is generated once per profile and stored,
- * because a client that presents a new device on every command is not imitating anything.
- */
-export declare const WEB_USER_AGENT: {
-    readonly deviceType: "WEB";
-    readonly pushDeviceType: "WEBPUSH";
-    readonly locale: "ru";
-    readonly deviceLocale: "ru";
-    readonly osVersion: "Linux";
-    readonly deviceName: "Chrome";
-    readonly headerUserAgent: "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36";
-    readonly appVersion: "26.5.5";
-    readonly screen: "1080x1920 1.0x";
-    readonly timezone: "Europe/Madrid";
-};
-export interface SessionOptions {
-    token: string;
-    deviceId: string;
-    /** How many chats LOGIN should return with the profile. */
-    chatsCount?: number;
-}
-/**
- * INIT then LOGIN, in that order, before anything else will be answered
- * (`max-api-docs/protocol/auth.md`).
- *
- * **`interactive` is false.** The web client sends true because a person is looking at it; we are
- * a script reading, and whether that flag moves presence or read state is not settled (`RES-5`).
- * Claiming a human is present when none is, is the kind of small lie that turns into a
- * side effect nobody can trace.
- */
-export declare const startSession: (connection: Connection, { token, deviceId, chatsCount }: SessionOptions) => Promise<Payload>;
-//# sourceMappingURL=session.d.ts.map

package/dist/protocol/session.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/protocol/session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAEzC,eAAO,MAAM,MAAM;;;;;IAKjB;;;;OAIG;;;;;CAKK,CAAA;AAEV;;;;;;;GAOG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;CAYjB,CAAA;AAEV,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,MAAM,CAAA;IAChB,2DAA2D;IAC3D,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,YAAY,GACvB,YAAY,UAAU,EACtB,iCAAsC,cAAc,KACnD,OAAO,CAAC,OAAO,CAYjB,CAAA"}

package/dist/protocol/session.js

@@ -1,57 +0,0 @@
-export const Opcode = {
-    SESSION_INIT: 6,
-    PROFILE: 16,
-    LOGIN: 19,
-    LOGOUT: 20,
-    /**
-     * Contact details by id. **Sources disagree about its neighbour**: opcode 36 is `CONTACT_LIST` in
-     * tsmax and PyMax, and `GET_BLOCKED` in the protocol documentation. We use 32, which both call the
-     * same thing, and stay away from 36 until somebody has watched what it returns.
-     */
-    CONTACT_INFO: 32,
-    CHAT_HISTORY: 49,
-    CHATS_LIST: 53,
-    MSG_SEND: 64,
-};
-/**
- * What we claim to be. **We imitate MAX's own web client rather than announcing ourselves**
- * (REQUIREMENTS §34), so none of these values names this tool.
- *
- * Shape and field names from `max-api-docs/protocol/auth.md`, cross-checked against tsmax's
- * `createWebAgent`. The device identity is not here: it is generated once per profile and stored,
- * because a client that presents a new device on every command is not imitating anything.
- */
-export const WEB_USER_AGENT = {
-    deviceType: "WEB",
-    pushDeviceType: "WEBPUSH",
-    locale: "ru",
-    deviceLocale: "ru",
-    osVersion: "Linux",
-    deviceName: "Chrome",
-    headerUserAgent: "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36",
-    appVersion: "26.5.5",
-    screen: "1080x1920 1.0x",
-    timezone: "Europe/Madrid",
-};
-/**
- * INIT then LOGIN, in that order, before anything else will be answered
- * (`max-api-docs/protocol/auth.md`).
- *
- * **`interactive` is false.** The web client sends true because a person is looking at it; we are
- * a script reading, and whether that flag moves presence or read state is not settled (`RES-5`).
- * Claiming a human is present when none is, is the kind of small lie that turns into a
- * side effect nobody can trace.
- */
-export const startSession = async (connection, { token, deviceId, chatsCount = 40 }) => {
-    await connection.invoke(Opcode.SESSION_INIT, { userAgent: WEB_USER_AGENT, deviceId });
-    return await connection.invoke(Opcode.LOGIN, {
-        token,
-        interactive: false,
-        chatsCount,
-        chatsSync: 0,
-        contactsSync: 0,
-        presenceSync: 0,
-        draftsSync: 0,
-    });
-};
-//# sourceMappingURL=session.js.map

package/dist/protocol/session.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/protocol/session.ts"],"names":[],"mappings":"AAGA,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,YAAY,EAAE,CAAC;IACf,OAAO,EAAE,EAAE;IACX,KAAK,EAAE,EAAE;IACT,MAAM,EAAE,EAAE;IACV;;;;OAIG;IACH,YAAY,EAAE,EAAE;IAChB,YAAY,EAAE,EAAE;IAChB,UAAU,EAAE,EAAE;IACd,QAAQ,EAAE,EAAE;CACJ,CAAA;AAEV;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,UAAU,EAAE,KAAK;IACjB,cAAc,EAAE,SAAS;IACzB,MAAM,EAAE,IAAI;IACZ,YAAY,EAAE,IAAI;IAClB,SAAS,EAAE,OAAO;IAClB,UAAU,EAAE,QAAQ;IACpB,eAAe,EACb,uGAAuG;IACzG,UAAU,EAAE,QAAQ;IACpB,MAAM,EAAE,gBAAgB;IACxB,QAAQ,EAAE,eAAe;CACjB,CAAA;AASV;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAC/B,UAAsB,EACtB,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,GAAG,EAAE,EAAkB,EAClC,EAAE;IACpB,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,CAAA;IAErF,OAAO,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE;QAC3C,KAAK;QACL,WAAW,EAAE,KAAK;QAClB,UAAU;QACV,SAAS,EAAE,CAAC;QACZ,YAAY,EAAE,CAAC;QACf,YAAY,EAAE,CAAC;QACf,UAAU,EAAE,CAAC;KACd,CAAC,CAAA;AACJ,CAAC,CAAA"}

package/dist/spec/operations/auth.d.ts

@@ -1,42 +0,0 @@
-import * as v from "valibot";
-export declare const sessionInit: import("../define.js").Operation<v.StrictObjectSchema<{
-    readonly userAgent: v.StrictObjectSchema<{
-        readonly deviceType: v.LiteralSchema<"WEB", undefined>;
-        readonly pushDeviceType: v.LiteralSchema<"WEBPUSH", undefined>;
-        readonly locale: v.StringSchema<undefined>;
-        readonly deviceLocale: v.StringSchema<undefined>;
-        readonly osVersion: v.StringSchema<undefined>;
-        readonly deviceName: v.StringSchema<undefined>;
-        readonly headerUserAgent: v.StringSchema<undefined>;
-        readonly appVersion: v.StringSchema<undefined>;
-        readonly screen: v.StringSchema<undefined>;
-        readonly timezone: v.StringSchema<undefined>;
-    }, undefined>;
-    readonly deviceId: v.StringSchema<undefined>;
-}, undefined>, v.LooseObjectSchema<{}, undefined>>;
-export declare const sessionLogin: import("../define.js").Operation<v.StrictObjectSchema<{
-    readonly token: v.StringSchema<undefined>;
-    /**
-     * False, always. The web client sends true because a person is looking at it; we are a script
-     * reading, and claiming a human is present is the small lie that becomes a side effect nobody
-     * can trace (`RES-5`).
-     */
-    readonly interactive: v.LiteralSchema<false, undefined>;
-    readonly chatsCount: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, 100, undefined>]>;
-    readonly chatsSync: v.NumberSchema<undefined>;
-    readonly contactsSync: v.NumberSchema<undefined>;
-    readonly presenceSync: v.NumberSchema<undefined>;
-    readonly draftsSync: v.NumberSchema<undefined>;
-}, undefined>, v.LooseObjectSchema<{
-    readonly profile: v.OptionalSchema<v.LooseObjectSchema<{}, undefined>, undefined>;
-    readonly chats: v.OptionalSchema<v.ArraySchema<v.LooseObjectSchema<{}, undefined>, undefined>, undefined>;
-    readonly contacts: v.OptionalSchema<v.ArraySchema<v.LooseObjectSchema<{}, undefined>, undefined>, undefined>;
-    readonly messages: v.OptionalSchema<v.ArraySchema<v.LooseObjectSchema<{}, undefined>, undefined>, undefined>;
-    readonly presence: v.OptionalSchema<v.UnknownSchema, undefined>;
-    readonly time: v.OptionalSchema<v.NumberSchema<undefined>, undefined>;
-    readonly chatMarker: v.OptionalSchema<v.UnknownSchema, undefined>;
-    readonly config: v.OptionalSchema<v.UnknownSchema, undefined>;
-    readonly videoChatHistory: v.OptionalSchema<v.UnknownSchema, undefined>;
-}, undefined>>;
-export declare const logout: import("../define.js").Reservation;
-//# sourceMappingURL=auth.d.ts.map

package/dist/spec/operations/auth.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/spec/operations/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAsB5B,eAAO,MAAM,WAAW;;;;;;;;;;;;;;kDAYtB,CAAA;AAEF,eAAO,MAAM,YAAY;;IAOrB;;;;OAIG;;;;;;;;;;;;;;;;;cA2BL,CAAA;AAEF,eAAO,MAAM,MAAM,oCAOjB,CAAA"}