@martenhq/cli 0.1.0 → 0.1.1

package/CHANGELOG.md

@@ -0,0 +1,23 @@
+# Changelog
+
+## 0.1.1
+
+- `marten login --scope` adds to the default scopes (`martens`, `tasks`, `registry`) instead of replacing them, and
+  signing in again as the same person keeps what this machine's key could already do; `--reset-scopes` narrows it
+  back to the defaults. Another person signing in on the machine starts from the defaults.
+- Signing in doesn't wait on the previous key's server: asking it the old key's scopes and revoking it give up after
+  5 seconds.
+- Signing in again writes the new key first, then revokes the old one; a revoke that fails is a warning, not a
+  failed login. When the key can't be made (`too_many_keys`), the sign-in's session is ended anyway.
+- A key `marten login` stored is only sent to the server it was made on: `MARTEN_API_URL` applies with
+  `MARTEN_API_KEY`, or when signing in.
+- The credentials file is written to a new file and renamed into place (never through a link at its path), 0600, in
+  a folder that is set to 0700 even if it was there before. On Windows it's written as is.
+- `marten mcp` answers `null`, non-object lines and batches with Invalid Request (-32600), and a line that fails can
+  no longer stop the server.
+- Task statuses are `todo`, `in_progress` and `done` (`needs_review` is gone).
+
+## 0.1.0
+
+- First release: `login`/`logout`/`whoami`, `martens`, `ask`, `chats`, `chat read`/`send`, `task list`/`add`/
+  `update`, `registry list`/`show`/`install`, `mcp`, `setup claude|codex`, `--json` everywhere.

package/README.md

@@ -22,17 +22,34 @@ marten login
 
 It asks for your Marten email and sends the same sign-in email as the apps: type the 6-digit code here, or open the
 link on any device. Then it keeps an API key named after this machine ("Nina's MacBook · CLI") in
-`~/.config/marten/credentials` (readable only by you). `marten logout` revokes it; signing in again replaces it.
+`~/.config/marten/credentials` (readable only by you; on Windows, by your user profile's permissions). `marten
+logout` revokes it; signing in again replaces it and revokes the old one.
 
-A key has scopes. By default: `martens` (your Martens and their 1:1s with you), `tasks` and `registry`. For your
-groups, ask for more:
+A key has scopes:
+
+| Scope | Lets it |
+|---|---|
+| `martens` (default) | list your Martens, read and post in their 1:1s with you, `ask` them |
+| `tasks` (default) | tasks in your Martens' 1:1s (with `chats:read`, groups' tasks too) |
+| `registry` (default) | browse the registry and install Martens for you |
+| `chats:read` | read your groups and their tasks |
+| `chats:write` | post as you in your groups, add or change tasks there, add Martens to them |
+
+`--scope` adds to the defaults, and signing in again as the same person keeps what this machine's key could already
+do. `--reset-scopes` starts from the defaults (plus any `--scope`), to narrow a key:
 
 ```sh
-marten login --scope martens --scope tasks --scope registry --scope chats:read --scope chats:write
+marten login --scope chats:read --scope chats:write
+marten login --reset-scopes
 ```
 
-In CI or for another agent, set `MARTEN_API_KEY` instead (and `MARTEN_API_URL` for a server other than
-https://api.marten.sh).
+Scopes limit what the key does, not what your Martens do: a key with `martens` talks to your own Martens, and they act
+for you as they do when you ask them in the apps (they can read and post in groups you share with them, and use the
+apps you've connected for them).
+
+In CI or for another agent, set `MARTEN_API_KEY` instead, with `MARTEN_API_URL` for a server other than
+https://api.marten.sh. A key `marten login` stored is only ever sent to the server it was made on (`MARTEN_API_URL`
+applies to it only when signing in).
 
 ## Commands
 

package/dist/marten.js

@@ -80,16 +80,20 @@ Usage:
                                a Marten assignee is woken then to remind them
       --repeat <rule>          "every weekday at 9", "every 2 weeks on friday", daily, or an RRULE (at most hourly)
       --tz <zone>              IANA time zone for --due and --repeat (default UTC)
+      --label <name>           tag it (repeat for several): a short word people filter and group tasks by,
+                               like "travel", "bills" or the app it came from ("Gmail")
   marten task list [options]              List the chat's tasks
       --assignee <who>         me (you, this Marten), a person or Marten here by name or id,
                                or none (unassigned)
       --for-owner              assigned to your owner (a person's Marten only)
-      --status <s>             todo, in_progress, needs_review, done or open (not done)
+      --status <s>             todo, in_progress, done or open (not done)
       --due <d>                today, overdue, upcoming or none
+      --label <name>           tagged with it
   marten task show <id>                   A task, with its activity
   marten task update <id> [options]       Change a task: --title, --description, --status,
                                           --assignee (none to clear), --due (none to clear),
-                                          --remind, --repeat (none to stop), --tz
+                                          --remind, --repeat (none to stop), --tz,
+                                          --label <name> to tag it, --unlabel <name> to untag it
   marten task start|done|reopen <id>      Start, finish or reopen a task
   marten task comment <id> <text>         Log progress or a note in the task's activity
   marten task delete <id> [--series]      Delete a task (--series: stop its repeat too)
@@ -189,7 +193,8 @@ var OPTIONS = {
   series: { type: "boolean" },
   app: { type: "string" },
   title: { type: "string" },
-  label: { type: "string" },
+  label: { type: "string", multiple: true },
+  unlabel: { type: "string", multiple: true },
   message: { type: "string" },
   version: { type: "string" },
   width: { type: "string" },
@@ -282,7 +287,11 @@ function parseCommand(argv, now = new Date) {
       throw new UsageError(`Unknown command: ${first}`);
   }
 }
-var STATUSES = ["todo", "in_progress", "needs_review", "done"];
+var STATUSES = ["todo", "in_progress", "done"];
+function labelsOf(given) {
+  const labels = given?.map((l) => l.trim()).filter(Boolean);
+  return labels?.length ? labels : undefined;
+}
 var DUE_FILTERS = ["today", "overdue", "upcoming", "none"];
 function oneOf(value, allowed, option) {
   if (value === undefined)
@@ -309,16 +318,26 @@ function parseTask(sub, rest, values, group) {
     return rest[0];
   };
   switch (sub) {
-    case "add":
-      return { name: "task-add", title: words(rest, "task title"), ...taskFields(values), group };
+    case "add": {
+      const labels = labelsOf(values.label);
+      return { name: "task-add", title: words(rest, "task title"), ...taskFields(values), ...labels ? { labels } : {}, group };
+    }
     case "update": {
       const taskId = id("marten task update <id> [options]");
       if (values.title !== undefined && !values.title.trim())
         throw new UsageError("--title can't be empty");
       const status = oneOf(values.status, STATUSES, "--status");
-      const changes = { ...taskFields(values), ...values.title ? { title: values.title.trim() } : {}, ...status ? { status } : {} };
+      const addLabels = labelsOf(values.label);
+      const removeLabels = labelsOf(values.unlabel);
+      const changes = {
+        ...taskFields(values),
+        ...values.title ? { title: values.title.trim() } : {},
+        ...status ? { status } : {},
+        ...addLabels ? { addLabels } : {},
+        ...removeLabels ? { removeLabels } : {}
+      };
       if (!Object.keys(changes).length)
-        throw new UsageError("Nothing to change: pass --title, --description, --status, --assignee, --due, --remind or --repeat");
+        throw new UsageError("Nothing to change: pass --title, --description, --status, --assignee, --due, --remind, --repeat, --label or --unlabel");
       return { name: "task-update", id: taskId, ...changes, group };
     }
     case "list": {
@@ -326,7 +345,16 @@ function parseTask(sub, rest, values, group) {
       const forOwner = values["for-owner"] === true;
       if (assignee && forOwner)
         throw new UsageError("Pass --assignee or --for-owner, not both");
-      return { name: "task-list", assignee, forOwner, status: oneOf(values.status, [...STATUSES, "open"], "--status"), due: oneOf(values.due, DUE_FILTERS, "--due"), group };
+      const label = labelsOf(values.label)?.at(-1);
+      return {
+        name: "task-list",
+        assignee,
+        forOwner,
+        status: oneOf(values.status, [...STATUSES, "open"], "--status"),
+        due: oneOf(values.due, DUE_FILTERS, "--due"),
+        ...label ? { label } : {},
+        group
+      };
     }
     case "show":
       return { name: "task-show", id: id("marten task show <id>"), group };
@@ -354,7 +382,7 @@ function parseApp(sub, rest, values, group) {
         throw new UsageError("Missing what to publish: marten sketch publish <file.jsx|file.html|folder>");
       if (values.title !== undefined && !values.title.trim())
         throw new UsageError("--title can't be empty");
-      return { name: "app-publish", path: rest[0], app: values.app, title: values.title?.trim(), label: values.label?.trim(), group };
+      return { name: "app-publish", path: rest[0], app: values.app, title: values.title?.trim(), label: values.label?.at(-1)?.trim(), group };
     }
     case "list":
       return { name: "app-list", group };
@@ -809,10 +837,11 @@ function withQuery(path, group, params = {}) {
   const text = query.toString();
   return text ? `${path}?${text}` : path;
 }
-var STATUS_MARK = { todo: "[ ]", in_progress: "[~]", needs_review: "[?]", done: "[x]" };
+var STATUS_MARK = { todo: "[ ]", in_progress: "[~]", done: "[x]" };
 function formatTask(t) {
   const time = t.scheduledAt && `${t.remind ? "remind" : "at"} ${when(t.scheduledAt)} UTC`;
-  const details = [t.due && `due ${t.due}`, time, t.repeat && t.repeat.toLowerCase(), t.assignee && `@${t.assignee}`].filter(Boolean);
+  const labels = (t.labels ?? []).map((l) => `#${l}`);
+  const details = [t.due && `due ${t.due}`, time, t.repeat && t.repeat.toLowerCase(), t.assignee && `@${t.assignee}`, ...labels].filter(Boolean);
   return `${t.id}  ${STATUS_MARK[t.status]} ${t.title}${details.length ? ` (${details.join(", ")})` : ""}`;
 }
 var SHOWN_OPTIONS = 25;
@@ -892,7 +921,7 @@ async function runCommand(command, api, stdin = readStdin, agentDir = AGENT_DIR)
       return `${command.verb === "start" ? "Started" : command.verb === "done" ? "Done" : "Reopened"} ${formatTask(res.task)}`;
     }
     case "task-list": {
-      const query = { assignee: command.assignee, forOwner: command.forOwner ? "1" : undefined, status: command.status, due: command.due };
+      const query = { assignee: command.assignee, forOwner: command.forOwner ? "1" : undefined, status: command.status, due: command.due, label: command.label };
       const { tasks } = await api("GET", withQuery("/cli/tasks", command.group, query));
       return tasks.map(formatTask).join(`
 `) || "No tasks.";
@@ -1275,7 +1304,8 @@ function pick(list, wanted, name, what) {
   throw new MartenError(404, "not_found", `No ${what} called "${wanted}"${list.length ? ` (yours: ${list.map(name).join(", ")})` : ""}`);
 }
 // src/credentials/credentials.ts
-import { chmod, mkdir as mkdir5, readFile as readFile4, rm, writeFile as writeFile5 } from "node:fs/promises";
+import { randomBytes } from "node:crypto";
+import { chmod, mkdir as mkdir5, readFile as readFile4, rename, rm, writeFile as writeFile5 } from "node:fs/promises";
 import { dirname as dirname4, join as join5 } from "node:path";
 var DEFAULT_API_URL = "https://api.marten.sh";
 function credentialsPath(env2, home) {
@@ -1292,20 +1322,32 @@ async function readCredentials(path) {
     return null;
   }
 }
-async function writeCredentials(path, credentials) {
-  await mkdir5(dirname4(path), { recursive: true, mode: 448 });
-  await writeFile5(path, `${JSON.stringify(credentials, null, 2)}
-`, { mode: 384 });
-  await chmod(path, 384);
+async function writeCredentials(path, credentials, platform = process.platform) {
+  const dir = dirname4(path);
+  const text = `${JSON.stringify(credentials, null, 2)}
+`;
+  await mkdir5(dir, { recursive: true, mode: 448 });
+  if (platform === "win32") {
+    await writeFile5(path, text);
+    return;
+  }
+  await chmod(dir, 448);
+  const temp = join5(dir, `.credentials-${randomBytes(6).toString("hex")}.tmp`);
+  try {
+    await writeFile5(temp, text, { mode: 384, flag: "wx" });
+    await rename(temp, path);
+  } catch (err) {
+    await rm(temp, { force: true });
+    throw err;
+  }
 }
 async function removeCredentials(path) {
   await rm(path, { force: true });
 }
 function resolveAuth(env2, stored) {
-  const apiKey = env2.MARTEN_API_KEY || stored?.apiKey;
-  if (!apiKey)
-    return null;
-  return { apiKey, apiUrl: env2.MARTEN_API_URL || stored?.apiUrl || DEFAULT_API_URL };
+  if (env2.MARTEN_API_KEY)
+    return { apiKey: env2.MARTEN_API_KEY, apiUrl: env2.MARTEN_API_URL || DEFAULT_API_URL };
+  return stored ? { apiKey: stored.apiKey, apiUrl: stored.apiUrl } : null;
 }
 
 // src/login/login.ts
@@ -1377,12 +1419,17 @@ async function login(opts) {
     stop.abort();
   }
   const keyName = `${opts.machine} · CLI`;
-  const made = await call(doFetch, `${base}/api-keys`, { name: keyName, ...opts.scopes?.length ? { scopes: opts.scopes } : {} }, session.sessionToken);
+  let made;
+  try {
+    const scopes = typeof opts.scopes === "function" ? opts.scopes(session.user.email) : opts.scopes;
+    made = await call(doFetch, `${base}/api-keys`, { name: keyName, ...scopes?.length ? { scopes } : {} }, session.sessionToken);
+  } finally {
+    await call(doFetch, `${base}/auth/logout`, undefined, session.sessionToken).catch(() => {
+      return;
+    });
+  }
   if (made.status !== 201)
     throw refused(made.status, made.data);
-  await call(doFetch, `${base}/auth/logout`, undefined, session.sessionToken).catch(() => {
-    return;
-  });
   return { apiUrl: base, apiKey: made.data.token, keyId: made.data.key.id, keyName: made.data.key.name, email: session.user.email };
 }
 
@@ -1434,7 +1481,7 @@ var TOOLS = [
   {
     name: "marten_list_tasks",
     description: "List tasks in the person's chats (open ones and those done in the last 30 days).",
-    inputSchema: { type: "object", properties: { chat: { type: "string" }, status: { type: "string", enum: ["todo", "in_progress", "needs_review", "done", "open"] } } },
+    inputSchema: { type: "object", properties: { chat: { type: "string" }, status: { type: "string", enum: ["todo", "in_progress", "done", "open"] } } },
     command: (a) => ({ name: "task-list", ...defined({ chat: str(a, "chat"), status: str(a, "status") }) })
   },
   {
@@ -1446,7 +1493,7 @@ var TOOLS = [
   {
     name: "marten_update_task",
     description: "Change a task: its title, status, assignee, time or repeat.",
-    inputSchema: { type: "object", properties: { id: { type: "string" }, title: { type: "string" }, status: { type: "string", enum: ["todo", "in_progress", "needs_review", "done"] }, ...taskProps }, required: ["id"] },
+    inputSchema: { type: "object", properties: { id: { type: "string" }, title: { type: "string" }, status: { type: "string", enum: ["todo", "in_progress", "done"] }, ...taskProps }, required: ["id"] },
     command: (a) => ({ name: "task-update", id: need(a, "id"), ...defined({ title: str(a, "title"), status: str(a, "status") }), ...taskOptions(a) })
   },
   { name: "marten_registry_list", description: "List the Martens anyone can install from the registry.", inputSchema: { type: "object", properties: {} }, command: () => ({ name: "registry-list" }) },
@@ -1466,12 +1513,17 @@ var TOOLS = [
 var reply = (id, result) => ({ jsonrpc: "2.0", id: id ?? null, result });
 var fail = (id, code, message) => ({ jsonrpc: "2.0", id: id ?? null, error: { code, message } });
 async function handleMcp(raw, run, serverVersion) {
-  let request;
+  let parsed;
   try {
-    request = JSON.parse(raw);
+    parsed = JSON.parse(raw);
   } catch {
     return fail(null, -32700, "Parse error");
   }
+  if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed) || typeof parsed.method !== "string") {
+    const id = parsed?.id;
+    return fail(typeof id === "string" || typeof id === "number" ? id : null, -32600, "Invalid Request");
+  }
+  const request = parsed;
   const isNotification = request.id === undefined;
   switch (request.method) {
     case "initialize":
@@ -1505,9 +1557,11 @@ async function serveMcp(lines, write, run, serverVersion) {
   for await (const line of lines) {
     if (!line.trim())
       continue;
-    const answering = handleMcp(line, run, serverVersion).then((answer) => {
+    const answering = handleMcp(line, run, serverVersion).catch((err) => fail(null, -32603, `Internal error: ${err?.message ?? String(err)}`)).then((answer) => {
       if (answer)
         write(JSON.stringify(answer));
+    }).catch(() => {
+      return;
     });
     inFlight.add(answering);
     answering.finally(() => inFlight.delete(answering));
@@ -1519,7 +1573,7 @@ async function serveMcp(lines, write, run, serverVersion) {
 import { parseArgs as parseArgs2 } from "node:util";
 var SCOPES = ["martens", "chats:read", "chats:write", "tasks", "registry"];
 var TASK_USAGE = `  marten task list [--chat <chat>] [--status <s>] [--tz <zone>]
-                                          Your chats' tasks (--status todo, in_progress, needs_review, done or open);
+                                          Your chats' tasks (--status todo, in_progress, done or open);
                                           times in --tz (default: this machine's zone)
   marten task add <title> [--chat <chat>] [options]
                                           Add a task (--chat may be left out when you have one 1:1)
@@ -1534,7 +1588,7 @@ var REGISTRY_USAGE = `  marten registry list                    Martens anyone c
 var OUTSIDE_HELP = `marten — talk to your Martens from your terminal and your other agents
 
 Usage:
-  marten login [--email <you@…>] [--scope <scope>…]
+  marten login [--email <you@…>] [--scope <scope>…] [--reset-scopes]
                                           Sign in (an email with a link and a 6-digit code); keeps an API key for
                                           this machine in ~/.config/marten/credentials. Scopes: martens, tasks and
                                           registry by default; add chats:read and chats:write for your groups
@@ -1562,6 +1616,7 @@ var OPTIONS2 = {
   version: { type: "boolean", short: "v" },
   email: { type: "string" },
   scope: { type: "string", multiple: true },
+  "reset-scopes": { type: "boolean" },
   timeout: { type: "string" },
   limit: { type: "string" },
   chat: { type: "string" },
@@ -1575,7 +1630,7 @@ var OPTIONS2 = {
   description: { type: "string" },
   remind: { type: "boolean" }
 };
-var STATUSES2 = ["todo", "in_progress", "needs_review", "done"];
+var STATUSES2 = ["todo", "in_progress", "done"];
 var MAX_ASK_SECONDS = 120;
 function argsProblem(err) {
   const message = err.message;
@@ -1626,12 +1681,17 @@ function parseOutside(argv) {
     return done({ name: "help" });
   switch (first) {
     case "login": {
-      none([second], "marten login [--email <address>] [--scope <scope>…]");
+      none([second], "marten login [--email <address>] [--scope <scope>…] [--reset-scopes]");
       const scopes = values.scope?.map((s) => s.trim()).filter(Boolean);
       const unknown = scopes?.find((s) => !SCOPES.includes(s));
       if (unknown)
         throw new UsageError(`Unknown scope ${unknown}: use ${SCOPES.join(", ")}`);
-      return done({ name: "login", ...values.email?.trim() ? { email: values.email.trim() } : {}, ...scopes?.length ? { scopes } : {} });
+      return done({
+        name: "login",
+        ...values.email?.trim() ? { email: values.email.trim() } : {},
+        ...scopes?.length ? { scopes } : {},
+        ...values["reset-scopes"] ? { resetScopes: true } : {}
+      });
     }
     case "logout":
     case "whoami":
@@ -1997,10 +2057,13 @@ ${content}${next}`, data: { path: wrote, content } };
     case "login": {
       const previous = await readCredentials(path);
       const apiUrl = io.env.MARTEN_API_URL || previous?.apiUrl || DEFAULT_API_URL;
-      const credentials = await login({ apiUrl, email: command.email, scopes: command.scopes, machine: io.machine, io, fetch: io.fetch });
-      if (previous && previous.apiKey !== credentials.apiKey)
-        await revoke(io, previous);
+      const had = previous && !command.resetScopes ? await scopesOf(io, previous) : null;
+      const scopes = (email) => [...new Set([...DEFAULT_SCOPES, ...had && had.email.toLowerCase() === email.toLowerCase() ? had.scopes : [], ...command.scopes ?? []])];
+      const credentials = await login({ apiUrl, email: command.email, scopes, machine: io.machine, io, fetch: io.fetch });
       await writeCredentials(path, credentials);
+      if (previous && previous.apiKey !== credentials.apiKey) {
+        await revoke(io, previous).catch((err) => io.stderr(`marten: signed in, but couldn't revoke the previous key "${previous.keyName}" (${err.message}); revoke it from another signed-in machine with marten logout, or ask support`));
+      }
       return { text: `Signed in as ${credentials.email}. This machine's key, "${credentials.keyName}", is in ${path}.`, data: { email: credentials.email, keyId: credentials.keyId, keyName: credentials.keyName, path } };
     }
     case "logout": {
@@ -2021,8 +2084,19 @@ ${content}${next}`, data: { path: wrote, content } };
       return runApi(command, { marten: client(io, await readCredentials(path)), readStdin: io.readStdin, timeZone: io.timeZone });
   }
 }
+var DEFAULT_SCOPES = ["martens", "tasks", "registry"];
+var PREVIOUS_KEY_TIMEOUT_MS = 5000;
+var previousClient = (io, stored) => new Marten({
+  apiKey: stored.apiKey,
+  baseUrl: stored.apiUrl,
+  fetch: (url, init) => (io.fetch ?? fetch)(url, { ...init, signal: AbortSignal.timeout(PREVIOUS_KEY_TIMEOUT_MS) })
+});
+async function scopesOf(io, stored) {
+  const me = await previousClient(io, stored).me().catch(() => null);
+  return me ? { email: me.user.email, scopes: me.key.scopes } : null;
+}
 async function revoke(io, stored) {
-  await new Marten({ apiKey: stored.apiKey, baseUrl: stored.apiUrl, fetch: io.fetch }).revokeKey().catch((err) => {
+  await previousClient(io, stored).revokeKey().catch((err) => {
     if (!(err instanceof MartenError && err.status === 401))
       throw err;
   });
@@ -2050,7 +2124,7 @@ function client(io, stored) {
 // package.json
 var package_default = {
   name: "@martenhq/cli",
-  version: "0.1.0",
+  version: "0.1.1",
   description: "marten: talk to your Martens from your terminal, scripts and other agents (Claude Code, Codex), and the CLI Martens use inside their boxes.",
   license: "MIT",
   type: "module",
@@ -2059,7 +2133,7 @@ var package_default = {
   keywords: ["marten", "cli", "agents", "mcp"],
   engines: { node: ">=20" },
   bin: { marten: "dist/marten.js" },
-  files: ["dist/marten.js", "README.md", "LICENSE"],
+  files: ["dist/marten.js", "README.md", "CHANGELOG.md", "LICENSE"],
   publishConfig: { access: "public" },
   scripts: {
     build: "bun build.ts",

package/package.json

@@ -1,33 +1,23 @@
 {
   "name": "@martenhq/cli",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "marten: talk to your Martens from your terminal, scripts and other agents (Claude Code, Codex), and the CLI Martens use inside their boxes.",
   "license": "MIT",
   "type": "module",
   "homepage": "https://marten.sh",
-  "repository": {
-  "type": "git",
-  "url": "git+https://github.com/RedPlanetHQ/marten-app.git",
-  "directory": "packages/cli"
-},
-"keywords": ["marten", "cli", "agents", "mcp"],
-"engines": {
-"node": ">=20"
-},
-"bin": {
-"marten": "dist/marten.js"
-},
-"files": ["dist/marten.js", "README.md", "LICENSE"],
-"publishConfig": {
-"access": "public"
-},
-"scripts": {
-  "build": "bun build.ts",
-  "test": "bun test",
-  "typecheck": "tsc -p tsconfig.json"
-},
-"devDependencies": {
-  "@martenhq/sdk": "0.1.0",
-  "@types/bun": "^1.4.2"
-}
+  "repository": { "type": "git", "url": "git+https://github.com/RedPlanetHQ/marten-app.git", "directory": "packages/cli" },
+  "keywords": ["marten", "cli", "agents", "mcp"],
+  "engines": { "node": ">=20" },
+  "bin": { "marten": "dist/marten.js" },
+  "files": ["dist/marten.js", "README.md", "CHANGELOG.md", "LICENSE"],
+  "publishConfig": { "access": "public" },
+  "scripts": {
+    "build": "bun build.ts",
+    "test": "bun test",
+    "typecheck": "tsc -p tsconfig.json"
+  },
+  "devDependencies": {
+    "@martenhq/sdk": "workspace:*",
+    "@types/bun": "^1.4.2"
+  }
 }