@oh-hai/cli 0.1.0-beta.0

package/dist/terminal.js

@@ -0,0 +1,18 @@
+// Terminal-output safety. Any string that originated from the Hub — a `user_code`, a verification
+// URL, or a stored `agent id` the Hub chose during device-code login — must be stripped of control
+// characters before it is echoed to the user's terminal, so a malicious/compromised Hub cannot
+// inject ANSI/escape sequences. Shared by `login` (prompts) and `whoami` (a discovered agent id).
+/** Strip terminal control characters (C0/C1 + DEL) from a server-supplied string before echoing it.
+ *  Built by code point to avoid a control-char regex literal. The raw value is kept for lookups and
+ *  the `--json` envelope (JSON.stringify escapes control characters) — only terminal output is
+ *  sanitized. */
+export function sanitizeForTerminal(value) {
+    let out = "";
+    for (const ch of value) {
+        const code = ch.codePointAt(0) ?? 0;
+        if (code > 0x1f && code !== 0x7f && !(code >= 0x80 && code <= 0x9f))
+            out += ch;
+    }
+    return out;
+}
+//# sourceMappingURL=terminal.js.map

package/dist/terminal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal.js","sourceRoot":"","sources":["../src/terminal.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAClG,mGAAmG;AACnG,+FAA+F;AAC/F,kGAAkG;AAElG;;;iBAGiB;AACjB,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC;YAAE,GAAG,IAAI,EAAE,CAAC;IACjF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/version.d.ts

@@ -0,0 +1,8 @@
+/** The MA2H wire protocol version this CLI targets (docs/specs/cli.md §3). */
+export declare const MA2H_WIRE_VERSION = "v0.3";
+/**
+ * The CLI's own version, read from package.json relative to this module. Works both when
+ * run from `dist/version.js` and from `src/version.ts` via tsx — both sit one level under
+ * the package root, so `../package.json` resolves to the manifest either way.
+ */
+export declare function cliVersion(): string;

package/dist/version.js

@@ -0,0 +1,23 @@
+// CLI version (read from the package manifest at runtime) and the MA2H wire version
+// the tool speaks. Kept separate so `--version` works without pulling in the command layer.
+import { readFileSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+/** The MA2H wire protocol version this CLI targets (docs/specs/cli.md §3). */
+export const MA2H_WIRE_VERSION = "v0.3";
+/**
+ * The CLI's own version, read from package.json relative to this module. Works both when
+ * run from `dist/version.js` and from `src/version.ts` via tsx — both sit one level under
+ * the package root, so `../package.json` resolves to the manifest either way.
+ */
+export function cliVersion() {
+    try {
+        const manifestUrl = new URL("../package.json", import.meta.url);
+        const raw = readFileSync(fileURLToPath(manifestUrl), "utf8");
+        const parsed = JSON.parse(raw);
+        return typeof parsed.version === "string" ? parsed.version : "0.0.0";
+    }
+    catch {
+        return "0.0.0";
+    }
+}
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,4FAA4F;AAE5F,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,8EAA8E;AAC9E,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAExC;;;;GAIG;AACH,MAAM,UAAU,UAAU;IACxB,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,GAAG,GAAG,YAAY,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA0B,CAAC;QACxD,OAAO,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC"}

package/package.json

@@ -0,0 +1,38 @@
+{
+  "name": "@oh-hai/cli",
+  "version": "0.1.0-beta.0",
+  "description": "OH HAI — the `oh-hai` CLI: reach a human from your agent through an MA2H Hub (notify / ask / task). Placement + machine contract; command bodies land in #106–#108.",
+  "license": "UNLICENSED",
+  "type": "module",
+  "bin": {
+    "oh-hai": "dist/cli.js"
+  },
+  "exports": {
+    ".": "./dist/cli.js"
+  },
+  "types": "./dist/cli.d.ts",
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "engines": {
+    "node": ">=24"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@oh-hai/ma2h-core": "0.1.0"
+  },
+  "devDependencies": {
+    "@types/node": "^26.1.0",
+    "tsx": "^4.19.2",
+    "typescript": "^6.0.3"
+  },
+  "scripts": {
+    "typecheck": "tsc --noEmit",
+    "build": "tsc -p tsconfig.build.json",
+    "start": "node --import tsx --disable-warning=ExperimentalWarning src/cli.ts",
+    "test": "node --import tsx --disable-warning=ExperimentalWarning --test-concurrency=4 --test \"test/**/*.test.ts\""
+  }
+}