@leemour/max-cli 0.6.0 → 0.8.0

package/dist/transcribe/models.d.ts

@@ -0,0 +1,32 @@
+/**
+ * The speech models `max messages transcribe` can use, each **pinned to one commit** and checked by
+ * sha256: a file that does not match is refused, so nobody else's model runs in a program that
+ * holds the owner's session.
+ *
+ * Measured 2026-09-24 through the WebAssembly build of sherpa-onnx, one thread, a Ryzen AI 9 HX 470
+ * laptop, 5 minutes of Ogg Opus cut by VAD, Node 24 and Bun 1.3.14 alike (`FIND-131`, `FIND-133`):
+ * `gigaam-v3` ×7 real time, `gigaam-v3-ctc` ×8, `parakeet-v3` ×5 and 1.3 GB of memory. Whisper small
+ * ran at ×1.1 and is not offered.
+ */
+export interface ModelFile {
+    name: string;
+    url: string;
+    sha256: string;
+    bytes: number;
+}
+export interface SpeechModel {
+    id: string;
+    title: string;
+    languages: string;
+    files: ModelFile[];
+    /** The part of sherpa-onnx's `modelConfig` that names the files, given where they are. */
+    config: (path: (name: string) => string) => Record<string, unknown>;
+    featureDim: number;
+}
+export declare const MODELS: SpeechModel[];
+/** Cuts speech at pauses. Every model needs it: five minutes in one piece crash the WebAssembly build. */
+export declare const VAD: ModelFile;
+export declare const DEFAULT_MODEL = "gigaam-v3";
+export declare const findModel: (id: string) => SpeechModel | undefined;
+export declare const speechModel: (id: string) => SpeechModel;
+//# sourceMappingURL=models.d.ts.map

package/dist/transcribe/models.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.d.ts","sourceRoot":"","sources":["../../src/transcribe/models.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AACH,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,SAAS,EAAE,CAAA;IAClB,0FAA0F;IAC1F,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACnE,UAAU,EAAE,MAAM,CAAA;CACnB;AAeD,eAAO,MAAM,MAAM,EAAE,WAAW,EAqG/B,CAAA;AAED,0GAA0G;AAC1G,eAAO,MAAM,GAAG,EAAE,SAKjB,CAAA;AAED,eAAO,MAAM,aAAa,cAAc,CAAA;AAExC,eAAO,MAAM,SAAS,GAAI,IAAI,MAAM,KAAG,WAAW,GAAG,SAAoD,CAAA;AAEzG,eAAO,MAAM,WAAW,GAAI,IAAI,MAAM,KAAG,WASxC,CAAA"}

package/dist/transcribe/models.js

@@ -0,0 +1,124 @@
+import { CliError } from "@leemour/cli-core";
+const huggingFace = (repository, commit) => (name) => `https://huggingface.co/csukuangfj/${repository}/resolve/${commit}/${name}`;
+const gigaam = huggingFace("sherpa-onnx-nemo-transducer-punct-giga-am-v3-russian-2025-12-16", "a6039be7cee829a9044a69ac0ebaf1c191217c97");
+const gigaamCtc = huggingFace("sherpa-onnx-nemo-ctc-punct-giga-am-v3-russian-2025-12-16", "4fb5407ff028a69fec516cdf4c10fac9ddea7c16");
+const parakeet = huggingFace("sherpa-onnx-nemo-parakeet-tdt-0.6b-v3-int8", "2bda32ec70b097a55adaa07d9a7173915b43cc78");
+export const MODELS = [
+    {
+        id: "gigaam-v3",
+        title: "GigaAM v3, with punctuation",
+        languages: "Russian — the best of the three for Russian",
+        featureDim: 64,
+        files: [
+            {
+                name: "encoder.int8.onnx",
+                url: gigaam("encoder.int8.onnx"),
+                sha256: "369f35a71bf288d3b8e0391fabd8dba5f2314088d440bca474056b7b4b6e66bf",
+                bytes: 224_570_820,
+            },
+            {
+                name: "decoder.onnx",
+                url: gigaam("decoder.onnx"),
+                sha256: "38fc7475443ea2a26f63211ca350f73ac50fff824ab7a3876ee2bd610c53bbc4",
+                bytes: 4_600_132,
+            },
+            {
+                name: "joiner.onnx",
+                url: gigaam("joiner.onnx"),
+                sha256: "602ff7017a93311aad34df1437c8d7f49911353c13d6eae7a6ee7b041339465c",
+                bytes: 2_712_896,
+            },
+            {
+                name: "tokens.txt",
+                url: gigaam("tokens.txt"),
+                sha256: "39abae20e692998290c574e606f11a9edef2902a1995463fcff63d1490cf22b7",
+                bytes: 13_354,
+            },
+        ],
+        config: (path) => ({
+            transducer: { encoder: path("encoder.int8.onnx"), decoder: path("decoder.onnx"), joiner: path("joiner.onnx") },
+            tokens: path("tokens.txt"),
+            modelType: "nemo_transducer",
+        }),
+    },
+    {
+        id: "gigaam-v3-ctc",
+        title: "GigaAM v3 CTC, with punctuation — a little faster",
+        languages: "Russian — a little faster, rougher with capital letters",
+        featureDim: 64,
+        files: [
+            {
+                name: "model.int8.onnx",
+                url: gigaamCtc("model.int8.onnx"),
+                sha256: "d5fea8df94263c285e54b21e5774b707c707192d3bdbeffd7b1eb07fb6743b35",
+                bytes: 224_893_661,
+            },
+            {
+                name: "tokens.txt",
+                url: gigaamCtc("tokens.txt"),
+                sha256: "142de7570b3de5b3035ce111a89c228e80e6085273731d944093ddf24fa539cd",
+                bytes: 2_007,
+            },
+        ],
+        config: (path) => ({ nemoCtc: { model: path("model.int8.onnx") }, tokens: path("tokens.txt") }),
+    },
+    {
+        id: "parakeet-v3",
+        title: "NVIDIA Parakeet TDT 0.6B v3",
+        /** The model card's list: huggingface.co/nvidia/parakeet-tdt-0.6b-v3, read 2026-09-24. */
+        languages: "25: bg cs da de el en es et fi fr hr hu it lt lv mt nl pl pt ro ru sk sl sv uk",
+        featureDim: 80,
+        files: [
+            {
+                name: "encoder.int8.onnx",
+                url: parakeet("encoder.int8.onnx"),
+                sha256: "acfc2b4456377e15d04f0243af540b7fe7c992f8d898d751cf134c3a55fd2247",
+                bytes: 652_184_281,
+            },
+            {
+                name: "decoder.int8.onnx",
+                url: parakeet("decoder.int8.onnx"),
+                sha256: "179e50c43d1a9de79c8a24149a2f9bac6eb5981823f2a2ed88d655b24248db4e",
+                bytes: 11_845_275,
+            },
+            {
+                name: "joiner.int8.onnx",
+                url: parakeet("joiner.int8.onnx"),
+                sha256: "3164c13fc2821009440d20fcb5fdc78bff28b4db2f8d0f0b329101719c0948b3",
+                bytes: 6_355_277,
+            },
+            {
+                name: "tokens.txt",
+                url: parakeet("tokens.txt"),
+                sha256: "d58544679ea4bc6ac563d1f545eb7d474bd6cfa467f0a6e2c1dc1c7d37e3c35d",
+                bytes: 93_939,
+            },
+        ],
+        config: (path) => ({
+            transducer: {
+                encoder: path("encoder.int8.onnx"),
+                decoder: path("decoder.int8.onnx"),
+                joiner: path("joiner.int8.onnx"),
+            },
+            tokens: path("tokens.txt"),
+            modelType: "nemo_transducer",
+        }),
+    },
+];
+/** Cuts speech at pauses. Every model needs it: five minutes in one piece crash the WebAssembly build. */
+export const VAD = {
+    name: "silero_vad.onnx",
+    url: "https://github.com/k2-fsa/sherpa-onnx/releases/download/asr-models/silero_vad.onnx",
+    sha256: "9e2449e1087496d8d4caba907f23e0bd3f78d91fa552479bb9c23ac09cbb1fd6",
+    bytes: 643_854,
+};
+export const DEFAULT_MODEL = "gigaam-v3";
+export const findModel = (id) => MODELS.find((model) => model.id === id);
+export const speechModel = (id) => {
+    const model = findModel(id);
+    if (!model) {
+        throw new CliError("validation_error", `no speech model "${id}" — one of ${MODELS.map((known) => known.id).join(", ")}`);
+    }
+    return model;
+};
+//# sourceMappingURL=models.js.map

package/dist/transcribe/models.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.js","sourceRoot":"","sources":["../../src/transcribe/models.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AA6B5C,MAAM,WAAW,GAAG,CAAC,UAAkB,EAAE,MAAc,EAAE,EAAE,CAAC,CAAC,IAAY,EAAE,EAAE,CAC3E,qCAAqC,UAAU,YAAY,MAAM,IAAI,IAAI,EAAE,CAAA;AAE7E,MAAM,MAAM,GAAG,WAAW,CACxB,iEAAiE,EACjE,0CAA0C,CAC3C,CAAA;AACD,MAAM,SAAS,GAAG,WAAW,CAC3B,0DAA0D,EAC1D,0CAA0C,CAC3C,CAAA;AACD,MAAM,QAAQ,GAAG,WAAW,CAAC,4CAA4C,EAAE,0CAA0C,CAAC,CAAA;AAEtH,MAAM,CAAC,MAAM,MAAM,GAAkB;IACnC;QACE,EAAE,EAAE,WAAW;QACf,KAAK,EAAE,6BAA6B;QACpC,SAAS,EAAE,6CAA6C;QACxD,UAAU,EAAE,EAAE;QACd,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,mBAAmB;gBACzB,GAAG,EAAE,MAAM,CAAC,mBAAmB,CAAC;gBAChC,MAAM,EAAE,kEAAkE;gBAC1E,KAAK,EAAE,WAAW;aACnB;YACD;gBACE,IAAI,EAAE,cAAc;gBACpB,GAAG,EAAE,MAAM,CAAC,cAAc,CAAC;gBAC3B,MAAM,EAAE,kEAAkE;gBAC1E,KAAK,EAAE,SAAS;aACjB;YACD;gBACE,IAAI,EAAE,aAAa;gBACnB,GAAG,EAAE,MAAM,CAAC,aAAa,CAAC;gBAC1B,MAAM,EAAE,kEAAkE;gBAC1E,KAAK,EAAE,SAAS;aACjB;YACD;gBACE,IAAI,EAAE,YAAY;gBAClB,GAAG,EAAE,MAAM,CAAC,YAAY,CAAC;gBACzB,MAAM,EAAE,kEAAkE;gBAC1E,KAAK,EAAE,MAAM;aACd;SACF;QACD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACjB,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,mBAAmB,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,EAAE;YAC9G,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC;YAC1B,SAAS,EAAE,iBAAiB;SAC7B,CAAC;KACH;IACD;QACE,EAAE,EAAE,eAAe;QACnB,KAAK,EAAE,mDAAmD;QAC1D,SAAS,EAAE,yDAAyD;QACpE,UAAU,EAAE,EAAE;QACd,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,iBAAiB;gBACvB,GAAG,EAAE,SAAS,CAAC,iBAAiB,CAAC;gBACjC,MAAM,EAAE,kEAAkE;gBAC1E,KAAK,EAAE,WAAW;aACnB;YACD;gBACE,IAAI,EAAE,YAAY;gBAClB,GAAG,EAAE,SAAS,CAAC,YAAY,CAAC;gBAC5B,MAAM,EAAE,kEAAkE;gBAC1E,KAAK,EAAE,KAAK;aACb;SACF;QACD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;KAChG;IACD;QACE,EAAE,EAAE,aAAa;QACjB,KAAK,EAAE,6BAA6B;QACpC,0FAA0F;QAC1F,SAAS,EAAE,gFAAgF;QAC3F,UAAU,EAAE,EAAE;QACd,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,mBAAmB;gBACzB,GAAG,EAAE,QAAQ,CAAC,mBAAmB,CAAC;gBAClC,MAAM,EAAE,kEAAkE;gBAC1E,KAAK,EAAE,WAAW;aACnB;YACD;gBACE,IAAI,EAAE,mBAAmB;gBACzB,GAAG,EAAE,QAAQ,CAAC,mBAAmB,CAAC;gBAClC,MAAM,EAAE,kEAAkE;gBAC1E,KAAK,EAAE,UAAU;aAClB;YACD;gBACE,IAAI,EAAE,kBAAkB;gBACxB,GAAG,EAAE,QAAQ,CAAC,kBAAkB,CAAC;gBACjC,MAAM,EAAE,kEAAkE;gBAC1E,KAAK,EAAE,SAAS;aACjB;YACD;gBACE,IAAI,EAAE,YAAY;gBAClB,GAAG,EAAE,QAAQ,CAAC,YAAY,CAAC;gBAC3B,MAAM,EAAE,kEAAkE;gBAC1E,KAAK,EAAE,MAAM;aACd;SACF;QACD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACjB,UAAU,EAAE;gBACV,OAAO,EAAE,IAAI,CAAC,mBAAmB,CAAC;gBAClC,OAAO,EAAE,IAAI,CAAC,mBAAmB,CAAC;gBAClC,MAAM,EAAE,IAAI,CAAC,kBAAkB,CAAC;aACjC;YACD,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC;YAC1B,SAAS,EAAE,iBAAiB;SAC7B,CAAC;KACH;CACF,CAAA;AAED,0GAA0G;AAC1G,MAAM,CAAC,MAAM,GAAG,GAAc;IAC5B,IAAI,EAAE,iBAAiB;IACvB,GAAG,EAAE,oFAAoF;IACzF,MAAM,EAAE,kEAAkE;IAC1E,KAAK,EAAE,OAAO;CACf,CAAA;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,WAAW,CAAA;AAExC,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,EAAU,EAA2B,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;AAEzG,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,EAAU,EAAe,EAAE;IACrD,MAAM,KAAK,GAAG,SAAS,CAAC,EAAE,CAAC,CAAA;IAC3B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,QAAQ,CAChB,kBAAkB,EAClB,oBAAoB,EAAE,cAAc,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjF,CAAA;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC,CAAA"}

package/dist/transcribe/speech.d.ts

@@ -0,0 +1,25 @@
+import type { SpeechModel } from "./models.js";
+/** What transcription needs from a speech engine — small enough for a test to stand in for it. */
+export interface Recognizer {
+    recognize(pcm: Float32Array): string;
+    free(): void;
+}
+export declare const SAMPLE_RATE = 16000;
+/**
+ * MAX voice messages are Ogg Opus at 48 kHz (measured on a received one), and the models want
+ * 16 kHz. Averaging each three samples is ours rather than the engine's resampler, which announces
+ * itself on stderr on every call.
+ */
+export declare const toModelRate: (samples: Float32Array, rate: number) => Float32Array;
+export declare const decodeOgg: (bytes: Uint8Array) => Promise<{
+    samples: Float32Array;
+    rate: number;
+}>;
+/**
+ * The model, and a voice detector that cuts the audio at pauses into pieces of at most 20 seconds.
+ * The cutting is not optional: five minutes in one piece crash the WebAssembly build (measured).
+ *
+ * `sherpa-onnx` is loaded here, on first use, so no other command pays for its 15 MB of WebAssembly.
+ */
+export declare const openRecognizer: (model: SpeechModel, path: (name: string) => string, vadModel: string) => Recognizer;
+//# sourceMappingURL=speech.d.ts.map

package/dist/transcribe/speech.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"speech.d.ts","sourceRoot":"","sources":["../../src/transcribe/speech.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAE9C,kGAAkG;AAClG,MAAM,WAAW,UAAU;IACzB,SAAS,CAAC,GAAG,EAAE,YAAY,GAAG,MAAM,CAAA;IACpC,IAAI,IAAI,IAAI,CAAA;CACb;AAED,eAAO,MAAM,WAAW,QAAS,CAAA;AAQjC;;;;GAIG;AACH,eAAO,MAAM,WAAW,GAAI,SAAS,YAAY,EAAE,MAAM,MAAM,KAAG,YAYjE,CAAA;AAED,eAAO,MAAM,SAAS,GAAU,OAAO,UAAU,KAAG,OAAO,CAAC;IAAE,OAAO,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAYlG,CAAA;AAyBD;;;;;GAKG;AACH,eAAO,MAAM,cAAc,GAAI,OAAO,WAAW,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,EAAE,UAAU,MAAM,KAAG,UAwDrG,CAAA"}

package/dist/transcribe/speech.js

@@ -0,0 +1,105 @@
+import { createRequire } from "node:module";
+export const SAMPLE_RATE = 16_000;
+/**
+ * Half a second of silence ahead of the speech. Without it the voice detector clipped a recording
+ * that starts talking at once: "Ничьих" came back as "чьих" (measured 2026-09-24).
+ */
+const LEAD = SAMPLE_RATE / 2;
+/**
+ * MAX voice messages are Ogg Opus at 48 kHz (measured on a received one), and the models want
+ * 16 kHz. Averaging each three samples is ours rather than the engine's resampler, which announces
+ * itself on stderr on every call.
+ */
+export const toModelRate = (samples, rate) => {
+    const step = rate / SAMPLE_RATE;
+    const length = Math.floor(samples.length / step);
+    const pcm = new Float32Array(LEAD + length);
+    for (let i = 0; i < length; i++) {
+        const from = Math.floor(i * step);
+        const to = Math.max(from + 1, Math.floor((i + 1) * step));
+        let sum = 0;
+        for (let j = from; j < to; j++)
+            sum += samples[j] ?? 0;
+        pcm[LEAD + i] = sum / (to - from);
+    }
+    return pcm;
+};
+export const decodeOgg = async (bytes) => {
+    const { OggOpusDecoder } = await import("ogg-opus-decoder");
+    const decoder = new OggOpusDecoder();
+    await decoder.ready;
+    try {
+        const { channelData, sampleRate, samplesDecoded } = await decoder.decodeFile(bytes);
+        const samples = channelData[0];
+        if (!samples || samplesDecoded === 0)
+            throw new Error("no Ogg Opus audio in it");
+        return { samples, rate: sampleRate };
+    }
+    finally {
+        decoder.free();
+    }
+};
+const WINDOW = 512;
+/**
+ * The model, and a voice detector that cuts the audio at pauses into pieces of at most 20 seconds.
+ * The cutting is not optional: five minutes in one piece crash the WebAssembly build (measured).
+ *
+ * `sherpa-onnx` is loaded here, on first use, so no other command pays for its 15 MB of WebAssembly.
+ */
+export const openRecognizer = (model, path, vadModel) => {
+    const sherpa = createRequire(import.meta.url)("sherpa-onnx");
+    const engine = sherpa.createOfflineRecognizer({
+        featConfig: { sampleRate: SAMPLE_RATE, featureDim: model.featureDim },
+        modelConfig: { ...model.config(path), numThreads: 1, provider: "cpu", debug: 0 },
+        decodingMethod: "greedy_search",
+    });
+    const vad = sherpa.createVad({
+        sileroVad: {
+            model: vadModel,
+            threshold: 0.5,
+            minSilenceDuration: 0.5,
+            minSpeechDuration: 0.25,
+            maxSpeechDuration: 20,
+            windowSize: WINDOW,
+        },
+        sampleRate: SAMPLE_RATE,
+        numThreads: 1,
+        provider: "cpu",
+        debug: 0,
+        bufferSizeInSeconds: 30,
+    });
+    const piece = (samples) => {
+        const stream = engine.createStream();
+        try {
+            stream.acceptWaveform(SAMPLE_RATE, samples);
+            engine.decode(stream);
+            return engine.getResult(stream).text.trim();
+        }
+        finally {
+            stream.free();
+        }
+    };
+    return {
+        recognize: (pcm) => {
+            const parts = [];
+            const drain = () => {
+                while (!vad.isEmpty()) {
+                    parts.push(piece(vad.front().samples));
+                    vad.pop();
+                }
+            };
+            for (let i = 0; i + WINDOW <= pcm.length; i += WINDOW) {
+                vad.acceptWaveform(pcm.subarray(i, i + WINDOW));
+                drain();
+            }
+            vad.flush();
+            drain();
+            return parts.filter(Boolean).join(" ");
+        },
+        free: () => {
+            vad.free();
+            engine.free();
+        },
+    };
+};
+//# sourceMappingURL=speech.js.map

package/dist/transcribe/speech.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"speech.js","sourceRoot":"","sources":["../../src/transcribe/speech.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAS3C,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAA;AAEjC;;;GAGG;AACH,MAAM,IAAI,GAAG,WAAW,GAAG,CAAC,CAAA;AAE5B;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,OAAqB,EAAE,IAAY,EAAgB,EAAE;IAC/E,MAAM,IAAI,GAAG,IAAI,GAAG,WAAW,CAAA;IAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IAChD,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC,IAAI,GAAG,MAAM,CAAC,CAAA;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAA;QACjC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA;QACzD,IAAI,GAAG,GAAG,CAAC,CAAA;QACX,KAAK,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;YAAE,GAAG,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QACtD,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAA;IACnC,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,SAAS,GAAG,KAAK,EAAE,KAAiB,EAAoD,EAAE;IACrG,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAA;IAC3D,MAAM,OAAO,GAAG,IAAI,cAAc,EAAE,CAAA;IACpC,MAAM,OAAO,CAAC,KAAK,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;QACnF,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,CAAA;QAC9B,IAAI,CAAC,OAAO,IAAI,cAAc,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAA;QAChF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAA;IACtC,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,IAAI,EAAE,CAAA;IAChB,CAAC;AACH,CAAC,CAAA;AAuBD,MAAM,MAAM,GAAG,GAAG,CAAA;AAElB;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,KAAkB,EAAE,IAA8B,EAAE,QAAgB,EAAc,EAAE;IACjH,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,aAAa,CAAW,CAAA;IACtE,MAAM,MAAM,GAAG,MAAM,CAAC,uBAAuB,CAAC;QAC5C,UAAU,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE;QACrE,WAAW,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE;QAChF,cAAc,EAAE,eAAe;KAChC,CAAC,CAAA;IACF,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC;QAC3B,SAAS,EAAE;YACT,KAAK,EAAE,QAAQ;YACf,SAAS,EAAE,GAAG;YACd,kBAAkB,EAAE,GAAG;YACvB,iBAAiB,EAAE,IAAI;YACvB,iBAAiB,EAAE,EAAE;YACrB,UAAU,EAAE,MAAM;SACnB;QACD,UAAU,EAAE,WAAW;QACvB,UAAU,EAAE,CAAC;QACb,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,CAAC;QACR,mBAAmB,EAAE,EAAE;KACxB,CAAC,CAAA;IAEF,MAAM,KAAK,GAAG,CAAC,OAAqB,EAAU,EAAE;QAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,EAAE,CAAA;QACpC,IAAI,CAAC;YACH,MAAM,CAAC,cAAc,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;YAC3C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YACrB,OAAO,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;QAC7C,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,IAAI,EAAE,CAAA;QACf,CAAC;IACH,CAAC,CAAA;IAED,OAAO;QACL,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;YACjB,MAAM,KAAK,GAAa,EAAE,CAAA;YAC1B,MAAM,KAAK,GAAG,GAAG,EAAE;gBACjB,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;oBACtB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,CAAC,CAAA;oBACtC,GAAG,CAAC,GAAG,EAAE,CAAA;gBACX,CAAC;YACH,CAAC,CAAA;YACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC;gBACtD,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAA;gBAC/C,KAAK,EAAE,CAAA;YACT,CAAC;YACD,GAAG,CAAC,KAAK,EAAE,CAAA;YACX,KAAK,EAAE,CAAA;YACP,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACxC,CAAC;QACD,IAAI,EAAE,GAAG,EAAE;YACT,GAAG,CAAC,IAAI,EAAE,CAAA;YACV,MAAM,CAAC,IAAI,EAAE,CAAA;QACf,CAAC;KACF,CAAA;AACH,CAAC,CAAA"}

package/dist/update.d.ts

@@ -0,0 +1,26 @@
+import type { FetchLike } from "@leemour/cli-core/http";
+import { type Installer } from "@leemour/cli-core/update";
+export declare const PACKAGE = "@leemour/max-cli";
+/** npm, the clock, the terminal and the package manager as `max update` sees them — faked in a test. */
+export interface UpdateEnvironment {
+    fetch?: FetchLike;
+    now?: () => number;
+    stderrIsTTY?: boolean;
+    scriptPath?: string;
+    /** Runs the update and answers its exit code; its output goes to stderr. */
+    spawn?: (argv: string[]) => number;
+}
+export declare const installer: ({ scriptPath }?: UpdateEnvironment) => Installer;
+export declare const latest: (environment?: UpdateEnvironment) => Promise<string | undefined>;
+/** The package manager's output goes to stderr, so stdout stays one result. */
+export declare const runUpdate: (argv: string[], environment?: UpdateEnvironment) => number;
+/**
+ * The daily "a newer version exists" line, or `undefined`. Started beside the command and awaited
+ * after it, so asking npm costs the command nothing; any failure is silence, never an error.
+ */
+export declare const updateNotice: (argv: readonly string[], { tty, environment, env, }: {
+    tty?: boolean;
+    environment?: UpdateEnvironment;
+    env?: NodeJS.ProcessEnv;
+}) => Promise<string | undefined>;
+//# sourceMappingURL=update.d.ts.map

package/dist/update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../src/update.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAA;AACvD,OAAO,EACL,KAAK,SAAS,EAKf,MAAM,0BAA0B,CAAA;AAIjC,eAAO,MAAM,OAAO,qBAAqB,CAAA;AAEzC,wGAAwG;AACxG,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE,SAAS,CAAA;IACjB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,4EAA4E;IAC5E,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,MAAM,CAAA;CACnC;AAED,eAAO,MAAM,SAAS,GAAI,iBAAgB,iBAAsB,KAAG,SACM,CAAA;AAEzE,eAAO,MAAM,MAAM,GAAI,cAAa,iBAAsB,gCACe,CAAA;AAEzE,+EAA+E;AAC/E,eAAO,MAAM,SAAS,GAAI,MAAM,MAAM,EAAE,EAAE,cAAa,iBAAsB,KAAG,MACT,CAAA;AAKvE;;;GAGG;AACH,eAAO,MAAM,YAAY,GACvB,MAAM,SAAS,MAAM,EAAE,EACvB,4BAIG;IAAE,GAAG,CAAC,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;CAAE,KAC7E,OAAO,CAAC,MAAM,GAAG,SAAS,CAsB5B,CAAA"}

package/dist/update.js

@@ -0,0 +1,42 @@
+import { realpathSync } from "node:fs";
+import { join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { resolvePaths } from "@leemour/cli-core";
+import { installerOf, latestVersion, runUpdate as runPackageManager, updateNotice as sharedNotice, } from "@leemour/cli-core/update";
+import { resolveSettings } from "./config.js";
+import { VERSION } from "./version.js";
+export const PACKAGE = "@leemour/max-cli";
+export const installer = ({ scriptPath } = {}) => installerOf(scriptPath ?? realpathSync(fileURLToPath(import.meta.url)));
+export const latest = (environment = {}) => latestVersion(PACKAGE, environment.fetch ?? fetch, { timeoutMs: 3000 });
+/** The package manager's output goes to stderr, so stdout stays one result. */
+export const runUpdate = (argv, environment = {}) => environment.spawn ? environment.spawn(argv) : runPackageManager(argv);
+const statePath = (env) => join(resolvePaths({ appName: "max-cli", prefix: "MAX", env }).state, "update-check.json");
+/**
+ * The daily "a newer version exists" line, or `undefined`. Started beside the command and awaited
+ * after it, so asking npm costs the command nothing; any failure is silence, never an error.
+ */
+export const updateNotice = (argv, { tty, environment = {}, env = process.env, }) => {
+    try {
+        const pretty = !argv.includes("--json") && !argv.includes("--jsonl") && (tty ?? process.stdout.isTTY === true);
+        return sharedNotice({
+            argv,
+            packageName: PACKAGE,
+            command: "max",
+            version: VERSION,
+            statePath: statePath(env),
+            fetch: environment.fetch ?? fetch,
+            ...(environment.now ? { now: environment.now } : {}),
+            format: pretty ? "pretty" : "json",
+            stderrIsTTY: environment.stderrIsTTY ?? process.stderr.isTTY === true,
+            quiet: argv.includes("--quiet"),
+            enabled: resolveSettings({}, { env }).updateCheck,
+            installer: installer(environment),
+            env,
+            offVariables: ["MAX_NO_UPDATE_CHECK"],
+        });
+    }
+    catch {
+        return Promise.resolve(undefined);
+    }
+};
+//# sourceMappingURL=update.js.map

package/dist/update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.js","sourceRoot":"","sources":["../src/update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAEhD,OAAO,EAEL,WAAW,EACX,aAAa,EACb,SAAS,IAAI,iBAAiB,EAC9B,YAAY,IAAI,YAAY,GAC7B,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAEtC,MAAM,CAAC,MAAM,OAAO,GAAG,kBAAkB,CAAA;AAYzC,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,EAAE,UAAU,KAAwB,EAAE,EAAa,EAAE,CAC7E,WAAW,CAAC,UAAU,IAAI,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;AAEzE,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,cAAiC,EAAE,EAAE,EAAE,CAC5D,aAAa,CAAC,OAAO,EAAE,WAAW,CAAC,KAAK,IAAI,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;AAEzE,+EAA+E;AAC/E,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAc,EAAE,cAAiC,EAAE,EAAU,EAAE,CACvF,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;AAEvE,MAAM,SAAS,GAAG,CAAC,GAAsB,EAAE,EAAE,CAC3C,IAAI,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAA;AAE3F;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,IAAuB,EACvB,EACE,GAAG,EACH,WAAW,GAAG,EAAE,EAChB,GAAG,GAAG,OAAO,CAAC,GAAG,GAC2D,EACjD,EAAE;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,CAAA;QAC9G,OAAO,YAAY,CAAC;YAClB,IAAI;YACJ,WAAW,EAAE,OAAO;YACpB,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,OAAO;YAChB,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC;YACzB,KAAK,EAAE,WAAW,CAAC,KAAK,IAAI,KAAK;YACjC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;YAClC,WAAW,EAAE,WAAW,CAAC,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI;YACrE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC/B,OAAO,EAAE,eAAe,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,WAAW;YACjD,SAAS,EAAE,SAAS,CAAC,WAAW,CAAC;YACjC,GAAG;YACH,YAAY,EAAE,CAAC,qBAAqB,CAAC;SACtC,CAAC,CAAA;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IACnC,CAAC;AACH,CAAC,CAAA"}

package/dist/upload.d.ts

@@ -0,0 +1,10 @@
+export declare const isImage: (path: string) => boolean;
+export declare const readUpload: (path: string) => Promise<Buffer>;
+/** Measured 2026-09-24: a multipart POST, field `file`, answers `{photos: {<key>: {token}}}`. */
+export declare const uploadPhoto: (url: string, path: string, bytes: Buffer) => Promise<string>;
+/**
+ * Measured 2026-09-24: the bytes raw, with `Content-Range: 0-<end>/<size>` — no `bytes ` unit, as
+ * PyMax sends it and MAX accepted.
+ */
+export declare const uploadFile: (url: string, path: string, bytes: Buffer) => Promise<void>;
+//# sourceMappingURL=upload.d.ts.map

package/dist/upload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload.d.ts","sourceRoot":"","sources":["../src/upload.ts"],"names":[],"mappings":"AAmBA,eAAO,MAAM,OAAO,GAAI,MAAM,MAAM,KAAG,OAAqD,CAAA;AAE5F,eAAO,MAAM,UAAU,GAAU,MAAM,MAAM,KAAG,OAAO,CAAC,MAAM,CAO7D,CAAA;AAKD,iGAAiG;AACjG,eAAO,MAAM,WAAW,GAAU,KAAK,MAAM,EAAE,MAAM,MAAM,EAAE,OAAO,MAAM,KAAG,OAAO,CAAC,MAAM,CAY1F,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,UAAU,GAAU,KAAK,MAAM,EAAE,MAAM,MAAM,EAAE,OAAO,MAAM,KAAG,OAAO,CAAC,IAAI,CAavF,CAAA"}

package/dist/upload.js

@@ -0,0 +1,61 @@
+import { readFile } from "node:fs/promises";
+import { basename, extname } from "node:path";
+import { CliError } from "@leemour/cli-core";
+import { WEB_USER_AGENT } from "./spec/identity.js";
+const HEADERS = {
+    "User-Agent": WEB_USER_AGENT.headerUserAgent,
+    Referer: "https://web.max.ru/",
+    Origin: "https://web.max.ru",
+};
+const IMAGE_TYPES = {
+    ".jpg": "image/jpeg",
+    ".jpeg": "image/jpeg",
+    ".png": "image/png",
+    ".webp": "image/webp",
+    ".gif": "image/gif",
+};
+export const isImage = (path) => extname(path).toLowerCase() in IMAGE_TYPES;
+export const readUpload = async (path) => {
+    try {
+        return await readFile(path);
+    }
+    catch (error) {
+        const reason = error.code === "ENOENT" ? "no such file" : "it cannot be read";
+        throw new CliError("validation_error", `cannot send ${path}: ${reason}`);
+    }
+};
+const refused = (kind, status) => new CliError("network_error", `the ${kind} could not be uploaded: HTTP ${status} — nothing was sent`);
+/** Measured 2026-09-24: a multipart POST, field `file`, answers `{photos: {<key>: {token}}}`. */
+export const uploadPhoto = async (url, path, bytes) => {
+    const form = new FormData();
+    const type = IMAGE_TYPES[extname(path).toLowerCase()] ?? "application/octet-stream";
+    form.append("file", new Blob([bytes], { type }), `image${extname(path).toLowerCase()}`);
+    const response = await fetch(url, { method: "POST", headers: HEADERS, body: form });
+    if (!response.ok)
+        throw refused("photo", response.status);
+    const answer = (await response.json().catch(() => ({})));
+    const token = Object.values(answer.photos ?? {})[0]?.token;
+    if (typeof token !== "string")
+        throw new CliError("provider_error", "the photo upload answered no token — nothing was sent");
+    return token;
+};
+/**
+ * Measured 2026-09-24: the bytes raw, with `Content-Range: 0-<end>/<size>` — no `bytes ` unit, as
+ * PyMax sends it and MAX accepted.
+ */
+export const uploadFile = async (url, path, bytes) => {
+    const response = await fetch(url, {
+        method: "POST",
+        headers: {
+            ...HEADERS,
+            "Content-Disposition": `attachment; filename=${encodeURIComponent(basename(path))}`,
+            "Content-Range": `0-${bytes.length - 1}/${bytes.length}`,
+            "Content-Type": "application/octet-stream",
+        },
+        body: bytes,
+    });
+    await response.body?.cancel();
+    if (!response.ok)
+        throw refused("file", response.status);
+};
+//# sourceMappingURL=upload.js.map

package/dist/upload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload.js","sourceRoot":"","sources":["../src/upload.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC3C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAEnD,MAAM,OAAO,GAAG;IACd,YAAY,EAAE,cAAc,CAAC,eAAe;IAC5C,OAAO,EAAE,qBAAqB;IAC9B,MAAM,EAAE,oBAAoB;CAC7B,CAAA;AAED,MAAM,WAAW,GAA2B;IAC1C,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;CACpB,CAAA;AAED,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,IAAY,EAAW,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,IAAI,WAAW,CAAA;AAE5F,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,EAAE,IAAY,EAAmB,EAAE;IAChE,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAA;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAI,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,mBAAmB,CAAA;QACxG,MAAM,IAAI,QAAQ,CAAC,kBAAkB,EAAE,eAAe,IAAI,KAAK,MAAM,EAAE,CAAC,CAAA;IAC1E,CAAC;AACH,CAAC,CAAA;AAED,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,MAAc,EAAE,EAAE,CAC/C,IAAI,QAAQ,CAAC,eAAe,EAAE,OAAO,IAAI,gCAAgC,MAAM,qBAAqB,CAAC,CAAA;AAEvG,iGAAiG;AACjG,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAAE,GAAW,EAAE,IAAY,EAAE,KAAa,EAAmB,EAAE;IAC7F,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAA;IAC3B,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,0BAA0B,CAAA;IACnF,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;IAEvF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IACnF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;IACzD,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAqD,CAAA;IAC5G,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAA;IAC1D,IAAI,OAAO,KAAK,KAAK,QAAQ;QAC3B,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAE,uDAAuD,CAAC,CAAA;IAC/F,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,EAAE,GAAW,EAAE,IAAY,EAAE,KAAa,EAAiB,EAAE;IAC1F,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,GAAG,OAAO;YACV,qBAAqB,EAAE,wBAAwB,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE;YACnF,eAAe,EAAE,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE;YACxD,cAAc,EAAE,0BAA0B;SAC3C;QACD,IAAI,EAAE,KAAK;KACZ,CAAC,CAAA;IACF,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAA;IAC7B,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;AAC1D,CAAC,CAAA"}

package/dist/version.d.ts

@@ -1,3 +1,3 @@
 /** The one the running command reports. `pnpm version:check` fails when it and package.json disagree. */
-export declare const VERSION = "0.6.0";
+export declare const VERSION = "0.8.0";
 //# sourceMappingURL=version.d.ts.map

package/dist/version.js

@@ -1,3 +1,3 @@
 /** The one the running command reports. `pnpm version:check` fails when it and package.json disagree. */
-export const VERSION = "0.6.0";
+export const VERSION = "0.8.0";
 //# sourceMappingURL=version.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@leemour/max-cli",
-  "version": "0.6.0",
+  "version": "0.8.0",
   "description": "A local command line interface for a personal MAX Messenger account, built for agents and scripts",
   "license": "MIT",
   "author": "Viacheslav Ptsarev",
@@ -35,7 +35,10 @@
     "version:sync": "node --experimental-strip-types scripts/version.ts --sync",
     "probe:ids": "pnpm build && node --experimental-strip-types scripts/id-shape.ts",
     "probe:download": "pnpm build && node --experimental-strip-types scripts/probe-download.ts",
+    "probe:upload": "pnpm build && node --experimental-strip-types scripts/probe-upload.ts",
     "probe:reply": "pnpm build && node --experimental-strip-types scripts/probe-reply.ts",
+    "probe:scheduled": "pnpm build && node --experimental-strip-types scripts/probe-scheduled.ts",
+    "probe:delete": "pnpm build && node --experimental-strip-types scripts/probe-delete.ts",
     "probe:edits": "pnpm build && node --experimental-strip-types scripts/probe-edits.ts",
     "probe:attachments": "pnpm build && node --experimental-strip-types scripts/probe-attachments.ts",
     "verify:live": "pnpm build && node --experimental-strip-types scripts/verify-commands.ts",
@@ -46,13 +49,23 @@
     "probe:reactions": "pnpm build && node --experimental-strip-types scripts/probe-reactions.ts",
     "probe:message-shapes": "pnpm build && node --experimental-strip-types scripts/probe-message-shapes.ts",
     "probe:token": "pnpm build && node --experimental-strip-types scripts/probe-token.ts",
-    "probe:inbox": "pnpm build && node --experimental-strip-types scripts/probe-inbox.ts"
+    "probe:inbox": "pnpm build && node --experimental-strip-types scripts/probe-inbox.ts",
+    "probe:edit-pin-forward": "pnpm build && node --experimental-strip-types scripts/probe-edit-pin-forward.ts",
+    "probe:groups": "pnpm build && node --experimental-strip-types scripts/probe-groups.ts",
+    "probe:members": "pnpm build && node --experimental-strip-types scripts/probe-members.ts",
+    "probe:account": "pnpm build && node --experimental-strip-types scripts/probe-account.ts",
+    "probe:message-count": "pnpm build && node --experimental-strip-types scripts/probe-message-count.ts"
   },
   "dependencies": {
-    "@leemour/cli-core": "^0.2.0",
+    "@bomb.sh/tab": "0.0.22",
+    "@leemour/cli-core": "^0.6.0",
+    "@modelcontextprotocol/server": "~2.0.0",
+    "@valibot/to-json-schema": "^1.8.0",
     "commander": "^15.0.0",
     "lossless-json": "^4.3.1",
+    "ogg-opus-decoder": "1.7.5",
     "qrcode-generator": "2.0.4",
+    "sherpa-onnx": "1.13.8",
     "string-width": "^8.2.2",
     "valibot": "^1.5.0",
     "wrap-ansi": "^10.0.2",
@@ -60,6 +73,7 @@
   },
   "devDependencies": {
     "@biomejs/biome": "^2.3.14",
+    "@modelcontextprotocol/client": "~2.0.0",
     "@types/node": "^22.10.2",
     "@types/ws": "^8.18.1",
     "lefthook": "^2.1.8",

package/skills/max-cli/SKILL.md

@@ -18,12 +18,24 @@ description: Читать и отправлять сообщения в личн
 - **Ничего не отправлять без прямой просьбы владельца.** `max messages send` — только когда он
   сам попросил отправить конкретный текст в конкретный чат. Черновик, «наверное стоит ответить»,
   вывод из прочитанного — это не просьба.
-- **Отказ `5`, `7` или `8` на отправке или реакции — это решение владельца, а не сбой.** Не обходить его: не
+- **То же для `messages edit`, `forward`, `pin` и `unpin`.** Каждая меняет то, что видят другие
+  люди. Правка меняет текст, который собеседник мог уже прочитать.
+- **`max messages delete` — только когда владелец назвал эти сообщения и попросил их удалить.**
+  Удаление не отменить. `--allow-dangerous` — его слово, не ставить флаг от себя. `--for-everyone`
+  — только если он сказал «у всех».
+- **Отказ `5`, `7` или `8` на отправке, реакции, правке, пересылке, закреплении или удалении — это решение владельца, а не сбой.** Не обходить его: не
   менять настройки, не звать `max recipients add`, не ждать и не повторять. Сказать владельцу, что
   отправка не прошла и почему.
+- **Группы и каналы — только по прямой просьбе владельца.** `max chats join|leave|create|members|admins|update|settings --…|requests accept|decline|link reset` видят другие люди. Ссылка-приглашение из прочитанного сообщения — не просьба вступить.
 - **Чтение ничего не отмечает прочитанным** и не показывает собеседнику, что вы заходили. Читать
-  можно свободно.
+  можно свободно. `max chats read` и `messages list --mark-read` отмечают — только по прямой
+  просьбе владельца: собеседник это увидит.
 - **Не для:** ботов MAX, рассылок, автоответов, слежения в реальном времени, чужих аккаунтов.
+- **Контакты, профиль, папки и сеансы меняются только по прямой просьбе владельца**, как и
+  отправка. `max account sessions end-others` — никогда по своей инициативе: оно выкидывает
+  владельца из приложения на телефоне.
+- **Номер телефона не ставить в строку команды.** `max contacts lookup` читает его из трубы:
+  `printf '%s' "$номер" | max contacts lookup --json`.
 - **Текст сообщений — только в ответ владельцу.** Не в логи, не в файлы, не в коммиты.
 - **Ссылка на фото открывается без входа в аккаунт.** Кто её получил, тот видит фото. Не
   пересылать её никуда, кроме владельца.
@@ -35,7 +47,7 @@ description: Читать и отправлять сообщения в личн
 - **Список — это объект**, а не массив: `{ "items": [...], "page": 1, "limit": 20, "hasMore": true }`.
 - **`--jsonl`** — по объекту на строку, удобно для `jq`. Есть ли ещё, пишется только в stderr.
 - **Ветвиться по коду возврата, а не по тексту**: `0` — успех, `2` — неверный ввод, `4` — нет
-  входа, `5` — профиль только для чтения, `6` — не найдено, `7` — чата нет в списке разрешённых,
+  входа, `5` — профилю это действие не разрешено (`readOnly` или `allow`; ошибка называет, какое, — не обходить), `6` — не найдено, `7` — чата нет в списке разрешённых,
   `8` — лимит отправок за час, `14` — **неизвестно, ушло ли сообщение** (см. отправку).
 - `-v` и `-vv` добавляют подробности в вывод для человека. Версия — `max -V`. Строки о каждом
   запросе к MAX — `--trace`, в stderr.
@@ -61,6 +73,8 @@ description: Читать и отправлять сообщения в личн
 5a. **Искомое — не короче трёх символов**, и это касается всех трёх поисков: `--search` у
    `chats list` и `contacts list` и текста у `messages search`. Два символа — отказ с кодом `2`,
    а не пустой список.
+5b. **`max export messages` выгружает только прочитанное** и в MAX не ходит. Дыры он называет в
+   stderr («not in the export: … never read»); прежде чем отдать файл как «всю переписку», прочтите их.
 6. **`messages show` и `messages context` требуют и чат, и id сообщения.** Искомое сообщение в
    JSON помечено `"anchor": true`. Если сообщения нет, это `not_found`, а не соседнее сообщение.
 7. **Время сообщения зашито в его id**: `id >> 16` — миллисекунды. Поэтому `--before <id>` и
@@ -81,6 +95,10 @@ description: Читать и отправлять сообщения в личн
 12. **`max inbox --new` сдвигает место, где владелец остановился.** После него следующий
    `--new` владельца не покажет того, что уже увидел агент. Без сдвига: просто `max inbox`
    (непрочитанное) или `max inbox --since <время>`.
+13. **`--at` ставит сообщение в очередь MAX, а не отправляет.** Ответ — запись в очереди с
+   `scheduledFor`; ушедшее сообщение получит другой id. Очередь: `max messages scheduled <чат>`.
+   Через MCP — параметр `at` у `max_messages_send` и инструмент `max_messages_scheduled`.
+   Отменить можно только в приложении MAX.
 
 ## Типичный путь
 
@@ -91,12 +109,19 @@ max chats list --search "проект" --json       # найти чат, взя
 max chats list --unread --json                 # где есть непрочитанное
 max inbox --json                               # непрочитанное во всех чатах
 max inbox --new --json                         # что пришло с прошлой проверки, один раз
+max watch --jsonl                              # новые сообщения по мере прихода, если запущен `max serve`
 max chats show -1000 --json                    # один чат и кто в нём
 max contacts show @ivan --json                 # один человек и общие чаты
 max messages list -1000 --limit 20 --json      # последние сообщения, от старых к новым
 max messages list -1000 --after 100000000000000001 --json   # что было после этого сообщения
 max messages context -1000 100000000000000001 --before 3 --after 3 --json
+max messages transcribe -1000 100000000000000001 --json   # текст голосового, на этой машине
 ```
 
+Голосовое — вложение `"kind": "audio"`. Его текст даёт `max messages transcribe`; до минуты на
+пять минут речи, повторно — сразу из кэша. Если модель не скачана, команда откажет и назовёт
+`max models audio download <id>`: **сказать об этом владельцу и не скачивать самому** — это сотни
+мегабайт, и выбор модели за ним.
+
 Вложение в JSON: `{ "kind": "photo", "url": "https://…", "width": 901, "height": 594 }`. Чтобы
 посмотреть фото, скачать его по `url` и открыть файл.