@m8t-stack/cli 0.2.81 → 0.2.83

package/dist/cli.js

@@ -229,10 +229,77 @@ var init_agent_roster = __esm({
 });
 
 // ../../packages/api-contract/dist/esm/ui-directive.js
-var DECISION_REFUSAL_REASONS, decisionRefusalReasons;
+function parseArgs(input) {
+  if (!isRecord(input) || !nonEmpty(input.title) || !Array.isArray(input.options))
+    return null;
+  const { options } = input;
+  if (options.length < MIN_OPTIONS || options.length > MAX_OPTIONS)
+    return null;
+  const parsed = [];
+  for (const option of options) {
+    if (!isRecord(option) || !nonEmpty(option.label) || !nonEmpty(option.detail))
+      return null;
+    parsed.push({ label: option.label, detail: option.detail });
+  }
+  return { title: input.title, options: parsed };
+}
+function parseState(input, optionCount) {
+  if (!isRecord(input))
+    return null;
+  switch (input.status) {
+    case "pending":
+      return { status: "pending" };
+    case "dismissed":
+      return { status: "dismissed" };
+    case "submitting":
+      return inRange(input.optionIndex, optionCount) ? { status: "submitting", optionIndex: input.optionIndex } : null;
+    case "selected":
+      if (!inRange(input.optionIndex, optionCount))
+        return null;
+      return input.acknowledgement === "pending" || input.acknowledgement === "complete" || input.acknowledgement === "error" ? { status: "selected", optionIndex: input.optionIndex, acknowledgement: input.acknowledgement } : null;
+    case "error":
+      return nonEmpty(input.message) ? { status: "error", message: input.message } : null;
+    default:
+      return null;
+  }
+}
+function parseUiDirectiveFrame(input) {
+  if (!isRecord(input))
+    return null;
+  if (input.source !== "voice" && input.source !== "text")
+    return null;
+  const directive = input.directive;
+  if (!isRecord(directive))
+    return null;
+  if (directive.version !== 1 || directive.name !== "present_decision")
+    return null;
+  if (!nonEmpty(directive.callId))
+    return null;
+  const args = parseArgs(directive.args);
+  if (!args)
+    return null;
+  const state = parseState(directive.state, args.options.length);
+  if (!state)
+    return null;
+  return {
+    directive: { version: 1, name: "present_decision", callId: directive.callId, args, state },
+    source: input.source
+  };
+}
+function isDecisionRefusalReason(value) {
+  return typeof value === "string" && decisionRefusalReasons.includes(value);
+}
+var UI_DIRECTIVE_PART_TYPE, MIN_OPTIONS, MAX_OPTIONS, isRecord, nonEmpty, inRange, UI_DIRECTIVE_RESULT_PART_TYPE, DECISION_REFUSAL_REASONS, decisionRefusalReasons;
 var init_ui_directive = __esm({
   "../../packages/api-contract/dist/esm/ui-directive.js"() {
     "use strict";
+    UI_DIRECTIVE_PART_TYPE = "data-ui-directive";
+    MIN_OPTIONS = 2;
+    MAX_OPTIONS = 4;
+    isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+    nonEmpty = (value) => typeof value === "string" && value.trim().length > 0;
+    inRange = (value, count) => typeof value === "number" && Number.isInteger(value) && value >= 0 && value < count;
+    UI_DIRECTIVE_RESULT_PART_TYPE = "data-ui-result";
     DECISION_REFUSAL_REASONS = {
       /** 409 — no live call with that `callId`. Answered twice, or talked past and dismissed. */
       notPending: "decision_not_pending",
@@ -1400,7 +1467,7 @@ var init_enable_hosted_brain = __esm({
 import { Builtins, Cli } from "clipanion";
 
 // src/lib/package-version.ts
-var CLI_VERSION = "0.2.81";
+var CLI_VERSION = "0.2.83";
 
 // src/lib/render-error.ts
 init_errors();
@@ -12728,6 +12795,25 @@ function classifyFoundryError(err) {
   return { category: "unknown", retryable: false, status, message };
 }
 
+// ../../packages/foundry-invoke/dist/esm/artifacts.js
+var FENCE_RE = /```json m8t:artifacts\s*\n([\s\S]*?)\n```/;
+function parseArtifacts(raw) {
+  const text = raw;
+  const m = FENCE_RE.exec(text);
+  if (!m)
+    return { text: text.trimEnd(), artifacts: [] };
+  let artifacts = [];
+  try {
+    const parsed = JSON.parse(m[1]);
+    if (Array.isArray(parsed))
+      artifacts = parsed;
+  } catch {
+    artifacts = [];
+  }
+  const clean2 = text.slice(0, m.index).trimEnd();
+  return { text: clean2, artifacts };
+}
+
 // src/lib/render-error.ts
 function renderHint(hint) {
   return hint.split("\n").join("\n        ");
@@ -26708,7 +26794,7 @@ var str3 = (v) => {
   return "";
 };
 var req = (v, fallback = "") => str3(v) ?? fallback;
-function parseArtifacts(v) {
+function parseArtifacts2(v) {
   if (typeof v !== "string" || v === "")
     return void 0;
   try {
@@ -26742,7 +26828,7 @@ function mapEntity(e) {
     delegationId: str3(e.delegationId),
     parentEventId: str3(e.parentEventId),
     depth: e.depth == null ? void 0 : Number(e.depth),
-    artifacts: parseArtifacts(e.artifacts)
+    artifacts: parseArtifacts2(e.artifacts)
   };
 }
 var rank = (o) => o === "ok" ? 0 : 1;
@@ -28806,21 +28892,28 @@ var ARM4 = "https://management.azure.com";
 var ARM_SCOPE8 = "https://management.azure.com/.default";
 var STORAGE_API2 = "2023-05-01";
 var LA_API = "2023-09-01";
+var tagOf = (a, key2) => a.tags?.[key2] ?? a.properties?.tags?.[key2];
+function selectLedgerAccount(accounts, storageAccount) {
+  if (storageAccount) return accounts.find((a) => a.name === storageAccount);
+  const managed = accounts.filter((a) => tagOf(a, "managedBy") === "m8t");
+  return managed.find((a) => tagOf(a, "m8t") === "storage") ?? managed.at(0) ?? accounts.find((a) => tagOf(a, "m8t:role") === "ledger") ?? (accounts.length === 1 ? accounts[0] : void 0);
+}
 async function discoverLedgerResources(opts) {
-  const { credential: credential2, subscriptionId, resourceGroup } = opts;
+  const { credential: credential2, subscriptionId, resourceGroup, storageAccount } = opts;
   const storage = await authedJsonPagedValues({
     credential: credential2,
     scope: ARM_SCOPE8,
     url: `${ARM4}/subscriptions/${subscriptionId}/resourceGroups/${resourceGroup}/providers/Microsoft.Storage/storageAccounts?api-version=${STORAGE_API2}`
   });
   const accounts = storage.filter((a) => a.properties?.primaryEndpoints?.table);
-  const ledgerAcct = accounts.find((a) => (a.tags?.["m8t:role"] ?? a.properties?.tags?.["m8t:role"]) === "ledger") ?? (accounts.length === 1 ? accounts[0] : void 0);
+  const ledgerAcct = selectLedgerAccount(accounts, storageAccount);
   const ledgerTableEndpoint = ledgerAcct?.properties?.primaryEndpoints?.table?.replace(/\/$/, "");
   if (!ledgerTableEndpoint) {
+    const found = accounts.map((a) => a.name).join(", ") || "(none)";
     throw new LocalCliError({
       code: "DREAM_LEDGER_STORAGE_NOT_FOUND",
-      message: `No AgentLedger storage account found in resource group ${resourceGroup}.`,
-      hint: `Found: ${accounts.map((a) => a.name).join(", ") || "(none)"}. Tag the ledger account 'm8t:role=ledger'.`
+      message: storageAccount ? `Storage account '${storageAccount}' was not found in resource group ${resourceGroup}, or has no table endpoint.` : `No AgentLedger storage account found in resource group ${resourceGroup}.`,
+      hint: `Found: ${found}. Pass --storage-account <name> to select one explicitly.`
     });
   }
   const ws = await authedJsonPagedValues({
@@ -28862,6 +28955,7 @@ async function resolveDreamContext(opts) {
   });
   const resourceGroup = rgFromScope(project.accountScope);
   const { ledgerTableEndpoint, workspaceId } = await discoverLedgerResources({
+    storageAccount: opts.storageAccount,
     credential: credential2,
     subscriptionId,
     resourceGroup
@@ -28929,6 +29023,9 @@ var DreamRunCommand = class extends M8tCommand {
   });
   subscription = Option49.String("--subscription");
   endpoint = Option49.String("--endpoint");
+  storageAccount = Option49.String("--storage-account", {
+    description: "Ledger storage account name (skips tag-based discovery)"
+  });
   output = Option49.String("--output");
   // Resolution seam — overridden by tests; built lazily at runtime otherwise.
   deps;
@@ -28946,7 +29043,8 @@ var DreamRunCommand = class extends M8tCommand {
       const liveContext = await liveDeps.resolveContext({
         worker,
         subscription: typeof this.subscription === "string" ? this.subscription : void 0,
-        endpoint: typeof this.endpoint === "string" ? this.endpoint : void 0
+        endpoint: typeof this.endpoint === "string" ? this.endpoint : void 0,
+        storageAccount: typeof this.storageAccount === "string" ? this.storageAccount : void 0
       });
       const liveCursor = await liveDeps.readCursor(liveContext.worker);
       const result2 = await liveDeps.runDream({
@@ -28993,7 +29091,8 @@ var DreamRunCommand = class extends M8tCommand {
     const context = await deps.resolveContext({
       worker,
       subscription: typeof this.subscription === "string" ? this.subscription : void 0,
-      endpoint: typeof this.endpoint === "string" ? this.endpoint : void 0
+      endpoint: typeof this.endpoint === "string" ? this.endpoint : void 0,
+      storageAccount: typeof this.storageAccount === "string" ? this.storageAccount : void 0
     });
     const now = /* @__PURE__ */ new Date();
     const cursor = await deps.readCursor(context.worker);
@@ -29343,13 +29442,28 @@ function defaultDeps2() {
       const { ledgerTableEndpoint } = await discoverLedgerResources({
         credential: credential2,
         subscriptionId,
-        resourceGroup: m[1]
+        resourceGroup: m[1],
+        storageAccount: opts.storageAccount
       });
       return { projectEndpoint: project.endpoint, ledgerTableEndpoint };
     },
     async fetchRows(ctx, fromIso, toIso) {
       const client = new TableClient8(ctx.ledgerTableEndpoint, LEDGER_TABLE_NAME2, credential2);
-      return fetchLedgerRows({ workers: [], source: "all", from: fromIso, to: toIso }, client);
+      try {
+        return await fetchLedgerRows({ workers: [], source: "all", from: fromIso, to: toIso }, client);
+      } catch (e) {
+        const msg = e instanceof Error ? e.message : String(e);
+        if (statusOf2(e) === 403 || msg.includes("AuthorizationPermissionMismatch")) {
+          const account = /https:\/\/([^.]+)\./.exec(ctx.ledgerTableEndpoint)?.[1] ?? "the ledger account";
+          throw new LocalCliError({
+            code: "sweep_ledger_forbidden",
+            message: `Not authorized to read the ledger table on '${account}'.`,
+            hint: `Reading table rows needs a data-plane role: grant 'Storage Table Data Reader' on that storage account to the signed-in identity (owning the account is not enough).`,
+            cause: e
+          });
+        }
+        throw e;
+      }
     },
     async retrieveMetadata(ctx, conversationId) {
       try {
@@ -29420,6 +29534,9 @@ var ConversationsSweepCommand = class extends M8tCommand {
   });
   subscription = Option50.String("--subscription", { description: "Azure subscription id override" });
   endpoint = Option50.String("--endpoint", { description: "Foundry project endpoint override" });
+  storageAccount = Option50.String("--storage-account", {
+    description: "Ledger storage account name (skips tag-based discovery)"
+  });
   deps = defaultDeps2();
   async executeCommand() {
     const out = this.context.stdout;
@@ -29436,7 +29553,11 @@ var ConversationsSweepCommand = class extends M8tCommand {
     const cutoffIso = new Date(now - retentionDays * DAY_MS).toISOString();
     const fromIso = new Date(now - lookback * DAY_MS).toISOString();
     const toIso = new Date(now).toISOString();
-    const ctx = await this.deps.resolveContext({ subscription: this.subscription, endpoint: this.endpoint });
+    const ctx = await this.deps.resolveContext({
+      subscription: this.subscription,
+      endpoint: this.endpoint,
+      storageAccount: this.storageAccount
+    });
     out.write(`Scanning ledger activity ${fromIso} \u2192 ${toIso}; retention cutoff ${cutoffIso}.
 `);
     const rows = await this.deps.fetchRows(ctx, fromIso, toIso);
@@ -30728,7 +30849,7 @@ var ONBOARDING_BLOCK_KEYS = [
   "advisor_name",
   "advisor_email"
 ];
-function isRecord(value) {
+function isRecord2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function hasValidUniqueJsonKeys(source) {
@@ -30836,7 +30957,7 @@ var V3_COMPANY_KEYS = ["name", "one_liner"];
 var V3_ADDRESS_KEYS = ["address", "city", "postal_code", "country"];
 var V3_REQUEST_KEYS = ["type", "model", "region", "consent", "company_address"];
 function exactStringRecord(value, keys) {
-  if (!isRecord(value)) return "non-string-value";
+  if (!isRecord2(value)) return "non-string-value";
   const present = new Set(Object.keys(value));
   for (const key2 of keys) if (!present.has(key2)) return "missing-key";
   if (present.size !== keys.length) return "unexpected-key";
@@ -30848,7 +30969,7 @@ function canonicalPendingRequests(value) {
   if (value.length > 1) return { ok: false, reason: "too-many-pending-requests" };
   const requests = [];
   for (const entry of value) {
-    if (!isRecord(entry)) return { ok: false, reason: "non-string-value" };
+    if (!isRecord2(entry)) return { ok: false, reason: "non-string-value" };
     const present = new Set(Object.keys(entry));
     for (const key2 of V3_REQUEST_KEYS) {
       if (!present.has(key2)) return { ok: false, reason: "missing-key" };
@@ -30898,7 +31019,7 @@ function canonicalV3Block(value) {
   };
 }
 function canonicalBlock(value) {
-  if (!isRecord(value)) return { ok: false, reason: "non-string-value" };
+  if (!isRecord2(value)) return { ok: false, reason: "non-string-value" };
   if (value.schema_version === "3") return canonicalV3Block(value);
   if (value.schema_version !== "2") return { ok: false, reason: "unknown-schema-version" };
   const keys = new Set(Object.keys(value));
@@ -30943,7 +31064,7 @@ function parseOnboardingArtifactResult(machineText) {
       if (json.includes("m8t_onboarding")) return { ok: false, reason: "malformed-json" };
       continue;
     }
-    if (!isRecord(parsed) || !Object.hasOwn(parsed, "m8t_onboarding")) continue;
+    if (!isRecord2(parsed) || !Object.hasOwn(parsed, "m8t_onboarding")) continue;
     if (Object.keys(parsed).length !== 1) return { ok: false, reason: "unexpected-key" };
     const outcome = canonicalBlock(parsed.m8t_onboarding);
     if (!outcome.ok) return outcome;
@@ -30989,7 +31110,7 @@ async function readCursorPages(args) {
     } catch {
       return null;
     }
-    if (!isRecord(body) || !Array.isArray(body.data)) return null;
+    if (!isRecord2(body) || !Array.isArray(body.data)) return null;
     const page = body;
     all.push(...page.data);
     if (page.has_more !== true) {
@@ -31010,7 +31131,7 @@ function decodeFoundryUser(token) {
   if (parts.length !== 3 || parts.some((part) => part.length === 0) || !/^[A-Za-z0-9_-]+$/.test(parts[1] ?? "")) return null;
   try {
     const payload = JSON.parse(Buffer.from(parts[1] ?? "", "base64url").toString("utf8"));
-    if (!isRecord(payload)) return null;
+    if (!isRecord2(payload)) return null;
     const claim = payload.upn ?? payload.preferred_username ?? payload.email;
     return typeof claim === "string" && claim.trim().length > 0 ? claim : null;
   } catch {
@@ -31041,7 +31162,7 @@ async function findOnboardingProfile(args) {
   });
   if (!listed) return { ...EMPTY_PROFILE_RESULT };
   const conversations = orderNewest(listed.flatMap((value, ordinal) => {
-    if (!isRecord(value) || typeof value.id !== "string" || value.id.length === 0 || !isRecord(value.metadata)) return [];
+    if (!isRecord2(value) || typeof value.id !== "string" || value.id.length === 0 || !isRecord2(value.metadata)) return [];
     const metadata = value.metadata;
     if (metadata.app !== "m8t-webapp" || metadata.agent !== INTAKE_AGENT_NAME) return [];
     return [{
@@ -31059,7 +31180,7 @@ async function findOnboardingProfile(args) {
   });
   if (!items) return { hadIntake: true, block: null, machineText: null, speechText: null, rejection: null };
   const assistantItems = orderNewest(items.flatMap((value, ordinal) => {
-    if (!isRecord(value) || value.type !== "message" || value.role !== "assistant" || !Array.isArray(value.content)) return [];
+    if (!isRecord2(value) || value.type !== "message" || value.role !== "assistant" || !Array.isArray(value.content)) return [];
     const id = typeof value.id === "string" ? value.id : "";
     return [{ value, id, createdAt: timestamp(value.created_at), ordinal }];
   }));
@@ -31068,7 +31189,7 @@ async function findOnboardingProfile(args) {
   for (const item of assistantItems) {
     const content = item.value.content;
     const machineText = content.flatMap((part) => {
-      if (!isRecord(part)) return [];
+      if (!isRecord2(part)) return [];
       if (typeof part.text === "string" && part.text.length > 0) return [part.text];
       if (typeof part.transcript === "string") return [part.transcript];
       return [];
@@ -34571,6 +34692,14 @@ var COMPANION_HISTORY_LIMIT_MAX = 40;
 var COMPANION_TURN_TEXT_MAX_CODE_POINTS = 32768;
 var COMPANION_REPLY_DELTA_MAX_CODE_POINTS = 4096;
 var COMPANION_TURN_ID_MAX_LENGTH = 256;
+var COMPANION_DECISION_CALL_ID_MAX_LENGTH = 256;
+var COMPANION_DECISION_TITLE_MAX_LENGTH = 200;
+var COMPANION_DECISION_LABEL_MAX_LENGTH = 100;
+var COMPANION_DECISION_DETAIL_MAX_CODE_POINTS = 400;
+var COMPANION_DECISION_OPTIONS_MIN = 2;
+var COMPANION_DECISION_OPTIONS_MAX = 4;
+var COMPANION_ARTIFACT_NAME_MAX_LENGTH = 200;
+var COMPANION_ARTIFACTS_MAX = 16;
 var PERSONAS = /* @__PURE__ */ new Set([
   "startup-advisor",
   "ezra"
@@ -34580,7 +34709,8 @@ var FAILURE_REASONS = /* @__PURE__ */ new Set([
   "not-authorized",
   "mate-unavailable",
   "busy",
-  "bad-request"
+  "bad-request",
+  "decision-not-pending"
 ]);
 var CONTROL_CHARACTERS = /[\u0000-\u001f\u007f]/u;
 var URL_SAFE_OPAQUE_ID = /^[A-Za-z0-9_-]+$/u;
@@ -34589,7 +34719,7 @@ var VERSION3 = /^[A-Za-z0-9][A-Za-z0-9._+-]{0,63}$/u;
 function isVersionOrNull(value) {
   return value === null || typeof value === "string" && VERSION3.test(value);
 }
-function isRecord2(value) {
+function isRecord3(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function hasExactKeys(value, keys) {
@@ -34613,8 +34743,72 @@ var INSTANT_SHAPE = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,3})?Z$/;
 function isInstantOrNull(value) {
   return value === null || typeof value === "string" && INSTANT_SHAPE.test(value) && Number.isFinite(Date.parse(value));
 }
-function isCompanionTurn(value) {
-  return isRecord2(value) && hasExactKeys(value, ["id", "role", "text", "at"]) && isBoundedPlainString(value.id, COMPANION_TURN_ID_MAX_LENGTH) && (value.role === "user" || value.role === "mate") && isBoundedMessageText(value.text, COMPANION_TURN_TEXT_MAX_CODE_POINTS) && isInstantOrNull(value.at);
+function parseDecision(value) {
+  if (!isRecord3(value) || !isBoundedPlainString(value.callId, COMPANION_DECISION_CALL_ID_MAX_LENGTH) || !isBoundedPlainString(value.title, COMPANION_DECISION_TITLE_MAX_LENGTH) || !Array.isArray(value.options) || value.options.length < COMPANION_DECISION_OPTIONS_MIN || value.options.length > COMPANION_DECISION_OPTIONS_MAX) {
+    return eventError();
+  }
+  const options = value.options.map((option) => {
+    if (!isRecord3(option) || !hasExactKeys(option, ["label", "detail"]) || !isBoundedPlainString(option.label, COMPANION_DECISION_LABEL_MAX_LENGTH) || !isBoundedMessageText(option.detail, COMPANION_DECISION_DETAIL_MAX_CODE_POINTS)) {
+      return eventError();
+    }
+    return { label: option.label, detail: option.detail };
+  });
+  const base = { callId: value.callId, title: value.title, options };
+  if (value.status === "pending" || value.status === "dismissed") {
+    if (!hasExactKeys(value, ["callId", "title", "options", "status"])) {
+      return eventError();
+    }
+    return { ...base, status: value.status };
+  }
+  if (value.status !== "selected" || !hasExactKeys(value, ["callId", "title", "options", "status", "optionIndex"]) || !Number.isSafeInteger(value.optionIndex) || value.optionIndex < 0 || value.optionIndex >= options.length) {
+    return eventError();
+  }
+  return { ...base, status: "selected", optionIndex: value.optionIndex };
+}
+function parseArtifact(value) {
+  if (!isRecord3(value) || !isBoundedPlainString(value.name, COMPANION_ARTIFACT_NAME_MAX_LENGTH)) {
+    return eventError();
+  }
+  if (value.sizeBytes === void 0) {
+    if (!hasExactKeys(value, ["name"])) return eventError();
+    return { name: value.name };
+  }
+  if (!hasExactKeys(value, ["name", "sizeBytes"]) || !Number.isSafeInteger(value.sizeBytes) || value.sizeBytes < 0) {
+    return eventError();
+  }
+  return { name: value.name, sizeBytes: value.sizeBytes };
+}
+function parseTurnArtifacts(value) {
+  if (!Array.isArray(value) || value.length === 0 || value.length > COMPANION_ARTIFACTS_MAX) {
+    return eventError();
+  }
+  return value.map(parseArtifact);
+}
+function parseTurn(value) {
+  if (!isRecord3(value) || !isBoundedPlainString(value.id, COMPANION_TURN_ID_MAX_LENGTH) || value.role !== "user" && value.role !== "mate" || !isInstantOrNull(value.at)) {
+    return eventError();
+  }
+  const keys = [
+    "id",
+    "role",
+    "text",
+    "at",
+    ...value.decision === void 0 ? [] : ["decision"],
+    ...value.artifacts === void 0 ? [] : ["artifacts"]
+  ];
+  if (!hasExactKeys(value, keys)) return eventError();
+  const allowEmptyText = value.decision !== void 0 || value.artifacts !== void 0;
+  if (!(allowEmptyText && value.text === "" || isBoundedMessageText(value.text, COMPANION_TURN_TEXT_MAX_CODE_POINTS))) {
+    return eventError();
+  }
+  return {
+    id: value.id,
+    role: value.role,
+    text: value.text,
+    at: value.at,
+    ...value.decision === void 0 ? {} : { decision: parseDecision(value.decision) },
+    ...value.artifacts === void 0 ? {} : { artifacts: parseTurnArtifacts(value.artifacts) }
+  };
 }
 function isCanonicalInstant(value) {
   if (typeof value !== "string") return false;
@@ -34670,7 +34864,7 @@ function isValidMateRoute(value) {
   }
 }
 function parseRequest(value) {
-  if (!isRecord2(value)) return requestError();
+  if (!isRecord3(value)) return requestError();
   if (value.type === "roster") {
     if (!hasExactKeys(value, ["type"])) return requestError();
     return { type: "roster" };
@@ -34679,18 +34873,36 @@ function parseRequest(value) {
     if (!hasExactKeys(value, ["type"])) return requestError();
     return { type: "update" };
   }
-  if (value.type === "history") {
+  if (value.type === "history" || value.type === "recall") {
     if (!hasExactKeys(value, ["type", "requestId", "personaKey", "limit"]) || !isRequestId(value.requestId) || !isPersonaKey(value.personaKey) || !Number.isSafeInteger(value.limit) || value.limit < 1 || value.limit > COMPANION_HISTORY_LIMIT_MAX) {
       return requestError();
     }
     return {
-      type: "history",
+      type: value.type,
       requestId: value.requestId,
       personaKey: value.personaKey,
       limit: value.limit
     };
   }
-  if (value.type !== "send" && value.type !== "converse" || !hasExactKeys(value, [
+  if (value.type === "decide") {
+    if (!hasExactKeys(value, [
+      "type",
+      "requestId",
+      "personaKey",
+      "callId",
+      "optionIndex"
+    ]) || !isRequestId(value.requestId) || !isPersonaKey(value.personaKey) || !isBoundedPlainString(value.callId, COMPANION_DECISION_CALL_ID_MAX_LENGTH) || !Number.isSafeInteger(value.optionIndex) || value.optionIndex < 0 || value.optionIndex >= COMPANION_DECISION_OPTIONS_MAX) {
+      return requestError();
+    }
+    return {
+      type: "decide",
+      requestId: value.requestId,
+      personaKey: value.personaKey,
+      callId: value.callId,
+      optionIndex: value.optionIndex
+    };
+  }
+  if (value.type !== "send" && value.type !== "converse" && value.type !== "chat" || !hasExactKeys(value, [
     "type",
     "requestId",
     "personaKey",
@@ -34718,7 +34930,7 @@ function parseRequestLine(line2) {
   }
 }
 function parseMate(value) {
-  if (!isRecord2(value) || !hasExactKeys(value, [
+  if (!isRecord3(value) || !hasExactKeys(value, [
     "personaKey",
     "agentName",
     "displayName",
@@ -34743,7 +34955,7 @@ function parseMate(value) {
   };
 }
 function parseEvent(value) {
-  if (!isRecord2(value)) return eventError();
+  if (!isRecord3(value)) return eventError();
   if (value.type === "update") {
     if (!hasExactKeys(value, ["type", "installed", "available", "severity"]) || !isVersionOrNull(value.installed) || !isVersionOrNull(value.available) || !(value.severity === null || SEVERITIES2.has(value.severity))) {
       return eventError();
@@ -34786,18 +34998,33 @@ function parseEvent(value) {
     return { type: "completed", requestId: value.requestId };
   }
   if (value.type === "turn") {
-    if (!hasExactKeys(value, ["type", "requestId", "turn"]) || !isRequestId(value.requestId) || !isCompanionTurn(value.turn)) {
+    if (!hasExactKeys(value, ["type", "requestId", "turn"]) || !isRequestId(value.requestId)) {
       return eventError();
     }
     return {
       type: "turn",
       requestId: value.requestId,
-      turn: {
-        id: value.turn.id,
-        role: value.turn.role,
-        text: value.turn.text,
-        at: value.turn.at
-      }
+      turn: parseTurn(value.turn)
+    };
+  }
+  if (value.type === "reply-decision") {
+    if (!hasExactKeys(value, ["type", "requestId", "decision"]) || !isRequestId(value.requestId)) {
+      return eventError();
+    }
+    return {
+      type: "reply-decision",
+      requestId: value.requestId,
+      decision: parseDecision(value.decision)
+    };
+  }
+  if (value.type === "reply-artifacts") {
+    if (!hasExactKeys(value, ["type", "requestId", "artifacts"]) || !isRequestId(value.requestId) || !Array.isArray(value.artifacts) || value.artifacts.length === 0 || value.artifacts.length > COMPANION_ARTIFACTS_MAX) {
+      return eventError();
+    }
+    return {
+      type: "reply-artifacts",
+      requestId: value.requestId,
+      artifacts: value.artifacts.map(parseArtifact)
     };
   }
   if (value.type === "history-end") {
@@ -34854,6 +35081,7 @@ function serializeEvent(value) {
 }
 
 // src/lib/companion-chat-client.ts
+init_esm();
 import { stat as stat4 } from "fs/promises";
 var RESPONSE_MAX_BYTES = 1e6;
 var REQUEST_DEADLINE_MS = 12e4;
@@ -34866,7 +35094,7 @@ var PredispatchFailure = class extends Error {
   }
   reason;
 };
-function isRecord3(value) {
+function isRecord4(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function hasControlCharacter(value) {
@@ -34936,16 +35164,16 @@ async function readJsonEnvelope(response) {
     if (error instanceof PredispatchFailure) throw error;
     throw new PredispatchFailure("not-connected");
   }
-  if (!isRecord3(envelope) || envelope.ok !== true || !("data" in envelope)) {
+  if (!isRecord4(envelope) || envelope.ok !== true || !("data" in envelope)) {
     throw new PredispatchFailure("not-connected");
   }
   return envelope.data;
 }
 function decodeAgents(data) {
-  if (!isRecord3(data) || !Array.isArray(data.agents)) {
+  if (!isRecord4(data) || !Array.isArray(data.agents)) {
     throw new PredispatchFailure("mate-unavailable");
   }
-  return data.agents.filter(isRecord3);
+  return data.agents.filter(isRecord4);
 }
 function resolveAgentName(agents, personaKey) {
   const matches = agents.filter(
@@ -34967,18 +35195,18 @@ function requireAgentName(agents, personaKey) {
   return name;
 }
 function decodeConversationId(data) {
-  if (!isRecord3(data) || typeof data.id !== "string" || !OPAQUE_ID.test(data.id)) {
+  if (!isRecord4(data) || typeof data.id !== "string" || !OPAQUE_ID.test(data.id)) {
     throw new PredispatchFailure("not-connected");
   }
   return data.id;
 }
 function decodeLastMessageId(data) {
-  if (!isRecord3(data) || !Array.isArray(data.messages)) {
+  if (!isRecord4(data) || !Array.isArray(data.messages)) {
     throw new PredispatchFailure("not-connected");
   }
   const messages = data.messages;
   const last = messages.at(-1);
-  if (!isRecord3(last) || typeof last.id !== "string" || !OPAQUE_ID.test(last.id)) {
+  if (!isRecord4(last) || typeof last.id !== "string" || !OPAQUE_ID.test(last.id)) {
     return void 0;
   }
   return last.id;
@@ -35029,13 +35257,61 @@ function boundCodePoints(value, maxCodePoints) {
   }
   return value;
 }
+function boundPlainLine(value, maxLength) {
+  return value.replace(/[\u0000-\u001f\u007f]/gu, " ").trim().slice(0, maxLength);
+}
+var ARTIFACTS_PART_TYPE = "data-artifacts";
+function toCompanionDecision(directive) {
+  const state = directive.state;
+  if (state.status !== "pending" && state.status !== "selected" && state.status !== "dismissed") {
+    return null;
+  }
+  const callId = boundPlainLine(
+    directive.callId,
+    COMPANION_DECISION_CALL_ID_MAX_LENGTH
+  );
+  const title = boundPlainLine(
+    directive.args.title,
+    COMPANION_DECISION_TITLE_MAX_LENGTH
+  );
+  if (callId.length === 0 || title.length === 0) return null;
+  const options = [];
+  for (const option of directive.args.options) {
+    const label = boundPlainLine(option.label, COMPANION_DECISION_LABEL_MAX_LENGTH);
+    const detail = boundCodePoints(
+      sanitizeMessageText(option.detail).trim(),
+      COMPANION_DECISION_DETAIL_MAX_CODE_POINTS
+    );
+    if (label.length === 0 || detail.length === 0) return null;
+    options.push({ label, detail });
+  }
+  const base = { callId, title, options };
+  return state.status === "selected" ? { ...base, status: "selected", optionIndex: state.optionIndex } : { ...base, status: state.status };
+}
+function toCompanionArtifacts(data) {
+  const artifacts = [];
+  for (const entry of data) {
+    if (artifacts.length >= COMPANION_ARTIFACTS_MAX) break;
+    if (!isRecord4(entry) || typeof entry.name !== "string") continue;
+    const name = boundPlainLine(entry.name, COMPANION_ARTIFACT_NAME_MAX_LENGTH);
+    if (name.length === 0) continue;
+    const size = entry.size_bytes;
+    artifacts.push(
+      typeof size === "number" && Number.isSafeInteger(size) && size >= 0 ? { name, sizeBytes: size } : { name }
+    );
+  }
+  return artifacts;
+}
+function decodeMessageInstant(value) {
+  return typeof value === "number" && Number.isFinite(value) && value > 0 && value < EPOCH_SECONDS_LIMIT ? new Date(Math.round(value) * 1e3).toISOString() : null;
+}
 function decodeTurns(data, limit2) {
-  if (!isRecord3(data) || !Array.isArray(data.messages)) {
+  if (!isRecord4(data) || !Array.isArray(data.messages)) {
     throw new PredispatchFailure("not-connected");
   }
   const turns = [];
   for (const entry of data.messages) {
-    if (!isRecord3(entry)) continue;
+    if (!isRecord4(entry)) continue;
     if (entry.role !== "user" && entry.role !== "assistant") continue;
     if (typeof entry.id !== "string" || !OPAQUE_ID.test(entry.id)) continue;
     if (typeof entry.content !== "string") continue;
@@ -35044,12 +35320,52 @@ function decodeTurns(data, limit2) {
       COMPANION_TURN_TEXT_MAX_CODE_POINTS
     );
     if (text.length === 0) continue;
-    const at = typeof entry.createdAt === "number" && Number.isFinite(entry.createdAt) && entry.createdAt > 0 && entry.createdAt < EPOCH_SECONDS_LIMIT ? new Date(Math.round(entry.createdAt) * 1e3).toISOString() : null;
     turns.push({
       id: entry.id,
       role: entry.role === "user" ? "user" : "mate",
       text,
-      at
+      at: decodeMessageInstant(entry.createdAt)
+    });
+  }
+  return turns.slice(-limit2);
+}
+function decodeDurableDecision(entry) {
+  const frame = parseUiDirectiveFrame({
+    directive: entry.uiDirective,
+    source: entry.uiDirectiveSource === "voice" ? "voice" : "text"
+  });
+  if (!frame) return null;
+  return toCompanionDecision(frame.directive);
+}
+function decodeRichTurns(data, limit2) {
+  if (!isRecord4(data) || !Array.isArray(data.messages)) {
+    throw new PredispatchFailure("not-connected");
+  }
+  const turns = [];
+  for (const entry of data.messages) {
+    if (!isRecord4(entry)) continue;
+    if (entry.role !== "user" && entry.role !== "assistant") continue;
+    if (typeof entry.id !== "string" || !OPAQUE_ID.test(entry.id)) continue;
+    if (typeof entry.content !== "string") continue;
+    const parsed = parseArtifacts(entry.content);
+    const artifacts = toCompanionArtifacts(parsed.artifacts);
+    const text = boundCodePoints(
+      sanitizeMessageText(parsed.text),
+      COMPANION_TURN_TEXT_MAX_CODE_POINTS
+    );
+    const at = decodeMessageInstant(entry.createdAt);
+    const decision = entry.uiDirective === void 0 ? null : decodeDurableDecision(entry);
+    if (decision !== null) {
+      turns.push({ id: entry.id, role: "mate", text, at, decision });
+      continue;
+    }
+    if (text.length === 0 && artifacts.length === 0) continue;
+    turns.push({
+      id: entry.id,
+      role: entry.role === "user" ? "user" : "mate",
+      text,
+      at,
+      ...artifacts.length > 0 ? { artifacts } : {}
     });
   }
   return turns.slice(-limit2);
@@ -35163,7 +35479,7 @@ async function drainAcceptedSse(response) {
       continue;
     }
     const parsed = JSON.parse(data);
-    if (!isRecord3(parsed) || typeof parsed.type !== "string" || parsed.type === "error") {
+    if (!isRecord4(parsed) || typeof parsed.type !== "string" || parsed.type === "error") {
       throw new Error("invalid stream event");
     }
   }
@@ -35185,7 +35501,7 @@ function emitBoundedText(text, emit) {
   }
   if (slice.length > 0) emit(slice);
 }
-async function streamAcceptedSse(response, now, onText) {
+async function streamAcceptedSse(response, now, onText, onData) {
   if (!response.body) throw new Error("response body unavailable");
   const reader = response.body.getReader();
   const decoder = new TextDecoder("utf-8", { fatal: true });
@@ -35211,7 +35527,7 @@ async function streamAcceptedSse(response, now, onText) {
       return;
     }
     const parsed = JSON.parse(data);
-    if (!isRecord3(parsed) || typeof parsed.type !== "string" || parsed.type === "error") {
+    if (!isRecord4(parsed) || typeof parsed.type !== "string" || parsed.type === "error") {
       throw new Error("invalid stream event");
     }
     if (parsed.type === "text-delta" && typeof parsed.delta === "string" && parsed.delta.length > 0) {
@@ -35220,6 +35536,10 @@ async function streamAcceptedSse(response, now, onText) {
         flush();
       }
     }
+    if (onData && parsed.type.startsWith("data-")) {
+      flush();
+      onData(parsed);
+    }
   };
   const drainFrames = () => {
     for (; ; ) {
@@ -35255,7 +35575,7 @@ async function streamAcceptedSse(response, now, onText) {
     throw new Error("stream ended without terminal marker");
   }
 }
-async function dispatchConversation(request, sink, deps, consume, readDesktopMarker) {
+async function dispatchConversation(request, sink, deps, consume, readDesktopMarker, chatBody, classifyRefusal) {
   const { controller, timer } = createDeadline(deps);
   const fetchImpl = deps.fetch ?? fetch;
   let route;
@@ -35301,17 +35621,19 @@ async function dispatchConversation(request, sink, deps, consume, readDesktopMar
       chatResponse = await fetchImpl(`${origin}/api/chat`, {
         method: "POST",
         headers: { ...headers, "content-type": "application/json" },
-        body: JSON.stringify({
-          messages: [{ role: "user", content: request.text }],
-          agentName,
-          conversationId
-        }),
+        body: JSON.stringify(chatBody(agentName, conversationId)),
         signal: controller.signal
       });
     } catch {
       throw new Error("chat dispatch outcome unavailable");
     }
     if (!chatResponse.ok || !chatResponse.body || !(chatResponse.headers.get("content-type") ?? "").toLowerCase().includes("text/event-stream")) {
+      if (!chatResponse.ok && classifyRefusal) {
+        const reason = await classifyRefusal(chatResponse);
+        if (reason !== null) {
+          return emitFailure(sink, reason, request.requestId);
+        }
+      }
       throw new Error("chat response not accepted");
     }
     const acceptedEvent = parseEvent({
@@ -35349,8 +35671,40 @@ async function dispatchConversation(request, sink, deps, consume, readDesktopMar
     clearTimeout(timer);
   }
 }
+function textTurnBody(text) {
+  return (agentName, conversationId) => ({
+    messages: [{ role: "user", content: text }],
+    agentName,
+    conversationId
+  });
+}
+function replyDataForwarder(requestId, sink) {
+  return (part) => {
+    if (part.type === UI_DIRECTIVE_PART_TYPE) {
+      const frame = parseUiDirectiveFrame(part.data);
+      if (!frame) return;
+      const decision = toCompanionDecision(frame.directive);
+      if (decision === null) return;
+      sink(parseEvent({ type: "reply-decision", requestId, decision }));
+      return;
+    }
+    if (part.type === ARTIFACTS_PART_TYPE && Array.isArray(part.data)) {
+      const artifacts = toCompanionArtifacts(part.data);
+      if (artifacts.length > 0) {
+        sink(parseEvent({ type: "reply-artifacts", requestId, artifacts }));
+      }
+    }
+  };
+}
 async function sendCompanionMessage(request, sink, deps = {}) {
-  return dispatchConversation(request, sink, deps, drainAcceptedSse, true);
+  return dispatchConversation(
+    request,
+    sink,
+    deps,
+    drainAcceptedSse,
+    true,
+    textTurnBody(request.text)
+  );
 }
 async function converseCompanionMessage(request, sink, deps = {}) {
   return dispatchConversation(
@@ -35366,10 +35720,101 @@ async function converseCompanionMessage(request, sink, deps = {}) {
         })
       );
     }),
-    false
+    false,
+    textTurnBody(request.text)
+  );
+}
+async function chatCompanionMessage(request, sink, deps = {}) {
+  return dispatchConversation(
+    request,
+    sink,
+    deps,
+    (response) => streamAcceptedSse(
+      response,
+      deps.now ?? Date.now,
+      (text) => {
+        sink(
+          parseEvent({
+            type: "reply-delta",
+            requestId: request.requestId,
+            text
+          })
+        );
+      },
+      replyDataForwarder(request.requestId, sink)
+    ),
+    false,
+    textTurnBody(request.text)
+  );
+}
+async function classifyDecideRefusal(response) {
+  let reason;
+  try {
+    const envelope = JSON.parse(await readBoundedText(response));
+    if (isRecord4(envelope) && isRecord4(envelope.error) && isRecord4(envelope.error.details)) {
+      reason = envelope.error.details.reason;
+    }
+  } catch {
+  }
+  if (isDecisionRefusalReason(reason)) {
+    return reason === DECISION_REFUSAL_REASONS.notPending ? "decision-not-pending" : "bad-request";
+  }
+  if (response.status === 401 || response.status === 403) {
+    return "not-authorized";
+  }
+  if (response.status === 400) return "bad-request";
+  if (response.status === 409) return "busy";
+  return null;
+}
+async function decideCompanionMessage(request, sink, deps = {}) {
+  const message = {
+    role: "user",
+    parts: [
+      {
+        type: UI_DIRECTIVE_RESULT_PART_TYPE,
+        data: {
+          version: 1,
+          name: "present_decision",
+          callId: request.callId,
+          result: { status: "selected", optionIndex: request.optionIndex }
+        }
+      }
+    ]
+  };
+  return dispatchConversation(
+    request,
+    sink,
+    deps,
+    (response) => streamAcceptedSse(
+      response,
+      deps.now ?? Date.now,
+      (text) => {
+        sink(
+          parseEvent({
+            type: "reply-delta",
+            requestId: request.requestId,
+            text
+          })
+        );
+      },
+      replyDataForwarder(request.requestId, sink)
+    ),
+    false,
+    (agentName, conversationId) => ({
+      messages: [message],
+      agentName,
+      conversationId
+    }),
+    classifyDecideRefusal
   );
 }
 async function historyCompanionMessages(request, sink, deps = {}) {
+  return fetchConversationTurns(request, sink, deps, decodeTurns);
+}
+async function recallCompanionMessages(request, sink, deps = {}) {
+  return fetchConversationTurns(request, sink, deps, decodeRichTurns);
+}
+async function fetchConversationTurns(request, sink, deps, decode) {
   const { controller, timer } = createDeadline(deps);
   const fetchImpl = deps.fetch ?? fetch;
   try {
@@ -35389,7 +35834,7 @@ async function historyCompanionMessages(request, sink, deps = {}) {
       agentName,
       controller.signal
     );
-    const turns = decodeTurns(
+    const turns = decode(
       await fetchConversationMessages(
         fetchImpl,
         origin,
@@ -35545,7 +35990,10 @@ async function dispatchRequest(request, sink, handlers) {
     return terminal;
   }
   if (request.type === "history") return handlers.history(request, sink);
+  if (request.type === "recall") return handlers.recall(request, sink);
   if (request.type === "converse") return handlers.converse(request, sink);
+  if (request.type === "chat") return handlers.chat(request, sink);
+  if (request.type === "decide") return handlers.decide(request, sink);
   return handlers.send(request, sink);
 }
 async function handleWithContext(request, sink, handlers, context) {
@@ -35581,7 +36029,10 @@ async function runCompanionBridgeServe(stdin, stdout, stderr, deps = {}) {
     roster: (sink2) => rosterCompanions(sink2, chat),
     send: (request, sink2) => sendCompanionMessage(request, sink2, chat),
     converse: (request, sink2) => converseCompanionMessage(request, sink2, chat),
+    chat: (request, sink2) => chatCompanionMessage(request, sink2, chat),
+    decide: (request, sink2) => decideCompanionMessage(request, sink2, chat),
     history: (request, sink2) => historyCompanionMessages(request, sink2, chat),
+    recall: (request, sink2) => recallCompanionMessages(request, sink2, chat),
     update: deps.update ?? (() => checkCompanionUpdate(defaultLocalCompanionInstallOptions()))
   };
   const sink = (event) => {
@@ -35616,7 +36067,10 @@ var defaultDeps4 = {
   roster: rosterCompanions,
   send: sendCompanionMessage,
   converse: converseCompanionMessage,
+  chat: chatCompanionMessage,
+  decide: decideCompanionMessage,
   history: historyCompanionMessages,
+  recall: recallCompanionMessages,
   update: () => checkCompanionUpdate(defaultLocalCompanionInstallOptions())
 };
 async function readSingleRequest(stdin) {
@@ -35667,8 +36121,14 @@ async function runCompanionBridge(stdin, stdout, stderr, deps = defaultDeps4) {
       sink(terminal);
     } else if (request.type === "history") {
       terminal = await deps.history(request, sink);
+    } else if (request.type === "recall") {
+      terminal = await deps.recall(request, sink);
     } else if (request.type === "converse") {
       terminal = await deps.converse(request, sink);
+    } else if (request.type === "chat") {
+      terminal = await deps.chat(request, sink);
+    } else if (request.type === "decide") {
+      terminal = await deps.decide(request, sink);
     } else terminal = await deps.send(request, sink);
     return exitFor(terminal);
   } catch {