@runneth/cli 0.0.0-sha.372b2c9d0e4f.production → 0.0.0-sha.41910c2f7cce.production

package/README.md

@@ -4,11 +4,13 @@
 
 ```bash
 npx @runneth/cli open
-npx @runneth/cli send 'cd ~/project && pnpm test'
-npx @runneth/cli send 'git status --short'
-npx @runneth/cli oauth login
-npx @runneth/cli ssh
-npx @runneth/cli close
+runneth send 'cd ~/project && pnpm test'
+runneth send 'git status --short'
+runneth oauth login
+runneth chat --workspace <workspace-id>
+runneth conversation create --workspace <workspace-id> --json
+runneth ssh
+runneth close
 ```
 
 ## npm Usage
@@ -33,28 +35,33 @@ environment variables, and other shell state persist between commands.
 ## Commands
 
 ```bash
-runneth-cli open [--name default] [--cwd <path>] [--shell <path>]
-runneth-cli send [--name default] [--timeout-ms 600000] [--stdin] -- <command...>
-runneth-cli status [--name default]
-runneth-cli list
-runneth-cli close [--name default]
-runneth-cli oauth login [--resource <url>] [--client-name "Runneth MCP"] [--scope <scope>] [--no-open]
-runneth-cli oauth status [--resource <url>]
-runneth-cli oauth logout [--resource <url>]
-runneth-cli ssh target add <name> (--host <host> | --ssh-url <url>) [--resource <url>] [--default]
-runneth-cli ssh target import <file>
-runneth-cli ssh target list
-runneth-cli ssh target use <name>
-runneth-cli ssh [--target <name>] [--unique-key | --identity-file <path>] [-- remote-command]
-runneth-cli ssh stdio [--target <name>] [--unique-key | --identity-file <path>]
-runneth-cli skills install [--agent claude|codex|all]
-runneth-cli shutdown
+runneth open [--name default] [--cwd <path>] [--shell <path>]
+runneth send [--name default] [--timeout-ms 600000] [--stdin] -- <command...>
+runneth status [--name default]
+runneth list
+runneth close [--name default]
+runneth oauth login [--resource <url>] [--client-id|--clientid <id>] [--client-secret|--secret <value>] [--client-name "Runneth MCP"] [--scope <scope>] [--no-open]
+runneth oauth status [--resource <url>]
+runneth oauth logout [--resource <url>]
+runneth chat --workspace <workspace-id> [--api <builder-url>] [--resource <url>] [--auth mondrian|builder] [--conversation <id>]
+runneth conversation create --workspace <workspace-id> --json [--title <title>]
+runneth conversation send --workspace <workspace-id> --conversation <id> --json (--message <text> | --stdin)
+runneth conversation state --workspace <workspace-id> --conversation <id> --json
+runneth conversation session --workspace <workspace-id> --jsonl
+runneth ssh target add <name> (--host <host> | --ssh-url <url>) [--resource <url>] [--default]
+runneth ssh target import <file>
+runneth ssh target list
+runneth ssh target use <name>
+runneth ssh [--conversation <id> --workspace <workspace-id> | --target <name> | --host <host> | --ssh-url <url>] [--api <builder-url>] [--resource <url>] [--unique-key | --identity-file <path>] [-- remote-command]
+runneth ssh stdio [--conversation <id> --workspace <workspace-id> | --target <name> | --host <host> | --ssh-url <url>] [--api <builder-url>] [--resource <url>] [--unique-key | --identity-file <path>]
+runneth skills install [--agent claude|codex|all]
+runneth shutdown
 ```
 
 Use `--stdin` for multi-line commands:
 
 ```bash
-cat <<'SCRIPT' | runneth-cli send --stdin
+cat <<'SCRIPT' | runneth send --stdin
 cd ~/project
 pnpm check
 SCRIPT
@@ -65,37 +72,114 @@ use a different state directory.
 
 ## OAuth
 
-`runneth-cli oauth login` performs OAuth protected-resource discovery, dynamic
-client registration as a public MCP-style client, PKCE authorization, and token
-exchange through a local loopback callback.
+`runneth-cli oauth login` performs OAuth protected-resource discovery, PKCE
+authorization, and token exchange through a local loopback callback. By default
+it uses dynamic client registration as a public MCP-style client. Provide
+`--client-id`/`--clientid` and `--client-secret`/`--secret`, or set
+`RUNNETH_OAUTH_CLIENT_ID` and `RUNNETH_OAUTH_CLIENT_SECRET`, to use a
+pre-registered confidential client instead.
 
 ```bash
-runneth-cli oauth login --resource http://localhost:4100/mcp
-runneth-cli oauth status --resource http://localhost:4100/mcp
+runneth oauth login --resource http://localhost:4100/mcp
+RUNNETH_OAUTH_CLIENT_ID=client-id RUNNETH_OAUTH_CLIENT_SECRET=client-secret runneth oauth login --resource http://localhost:4100/mcp
+runneth oauth status --resource http://localhost:4100/mcp
 ```
 
 OAuth credentials are stored under `~/.runneth-cli/oauth` with user-only file
 permissions on Unix-like systems. Commands that need an access token refresh it
 internally when the server issued a refresh token.
 
+## Chat
+
+`runneth-cli chat` starts an interactive terminal conversation against Builder's
+canonical Runneth conversation API. Official environment builds carry the
+correct Builder URL in the package; use `--api` only for local or custom Builder
+deployments.
+
+```bash
+runneth chat --workspace "$MONDRIAN_WORKSPACE_ID"
+```
+
+If no stored OAuth credential exists, chat starts the same browser-based OAuth
+flow as SSH and stores the credential under `~/.runneth-cli/oauth`. Use
+`--token`, `RUNNETH_TOKEN`, `MONDRIAN_TOKEN`, or `BUILDER_AGENT_CHAT_TOKEN` only
+for automation and local API mocks that should bypass OAuth.
+
+Inside the terminal UI, use `/state` to redraw the current conversation and
+`/exit` to quit.
+
+## Conversation Commands
+
+`runneth-cli conversation` is the machine-oriented conversation interface for
+agents and scripts. It uses the same auth, workspace scoping, and conversation
+API as `runneth chat`, but avoids terminal banners and ANSI UI output.
+
+```bash
+runneth conversation create --workspace "$MONDRIAN_WORKSPACE_ID" --title "SSH routine setup" --json
+runneth conversation send --workspace "$MONDRIAN_WORKSPACE_ID" --conversation "$CONVERSATION_ID" --message "Create a routine" --json
+runneth conversation state --workspace "$MONDRIAN_WORKSPACE_ID" --conversation "$CONVERSATION_ID" --json
+```
+
+`send` waits for the assistant response by default. `send` and `state` require an
+explicit `--conversation`; the CLI does not track an implicit active
+conversation for machine commands. State reads advertise Runneth stream V2, so
+the same command can inspect read-only task-origin transcripts.
+
+Long-lived agents can keep one authenticated process open with JSONL over
+stdin/stdout:
+
+```bash
+runneth conversation session --workspace "$MONDRIAN_WORKSPACE_ID" --jsonl
+```
+
+The session `ready` frame reports the resolved client target context, not a
+separate active conversation identity. Authoritative user and conversation
+identity comes from the `conversation` object returned by `create` and `state`.
+
+Typical requests:
+
+```jsonl
+{"id":"1","method":"create","params":{"title":"SSH routine setup"}}
+{"id":"2","method":"send","params":{"conversationId":"11111111-1111-4111-8111-111111111111","text":"Create a routine"}}
+{"id":"3","method":"state","params":{"conversationId":"11111111-1111-4111-8111-111111111111"}}
+{"id":"4","method":"close"}
+```
+
+Typical responses:
+
+```jsonl
+{"type":"ready","ok":true,"protocol":"runneth-conversation-stdio","version":1,"authMode":"mondrian","workspaceId":"65cbcb84095884aaf08dc76a"}
+{"id":"1","type":"created","ok":true,"conversation":{"id":"11111111-1111-4111-8111-111111111111"}}
+{"id":"2","type":"sent","ok":true,"send":{"assistantMessageId":"55555555-5555-4555-8555-555555555555"}}
+{"id":"2","type":"state","ok":true,"state":{"conversation":{"id":"11111111-1111-4111-8111-111111111111"}}}
+{"id":"2","type":"complete","ok":true,"assistantMessage":{"id":"55555555-5555-4555-8555-555555555555","status":"completed"}}
+```
+
 ## SSH
 
 `runneth-cli ssh` uses the stored OAuth credential for the resource. If no
-credential exists yet, it starts the OAuth login flow first. The first SSH
-connection for a resource/app pair generates an ed25519 keypair, sends the
-public key to the Runneth SSH app, writes an isolated OpenSSH config, and then
-starts `ssh` through the app tunnel.
+credential exists yet, it starts the OAuth login flow first. Pass a conversation
+and workspace to resolve its public SSH app target from Builder, or pass a
+named, host, or URL target directly. The first SSH connection for a resource/app
+pair generates an ed25519 keypair, sends the public key to the Runneth SSH app,
+writes an isolated OpenSSH config, and then starts `ssh` through the app tunnel.
 
 ```bash
-runneth-cli ssh \
+runneth ssh \
+  --conversation 11111111-1111-4111-8111-111111111111 \
+  --workspace 22222222-2222-4222-8222-222222222222 \
   --resource https://projects.motionapp.com/mcp \
-  --host 93c7ca56-debe-4b95-8be2-a873afe72234.app.runneth.com
+  --api https://projects.motionapp.com
 ```
 
 SSH keys, known hosts, and generated config files are stored under
 `~/.runneth-cli/ssh`. The generated OpenSSH config uses an internal
 `ProxyCommand` transport that attaches the OAuth bearer token to the SSH app
-HTTP tunnel.
+tunnel. The CLI reads the target VM's authenticated `/runneth/ssh/api` metadata
+before connecting, independently of app catalog health:
+VMs that advertise `runneth-ssh-v1` use one full-duplex WebSocket, while older
+VMs continue through the HTTPS tunnel. Transport selection is automatic. Capability
+discovery allows 70 seconds for authorization and response delivery.
 
 ### SSH stdio
 
@@ -103,7 +187,7 @@ Use `ssh stdio` when an agent needs to keep one authenticated SSH connection
 open and run multiple commands or remote processes without reconnecting:
 
 ```bash
-runneth-cli ssh stdio --target primary-vm
+runneth ssh stdio --target primary-vm
 ```
 
 The command writes JSONL events to stdout and reads JSONL requests from stdin.

package/dist/build-defaults.d.ts

@@ -1 +1,6 @@
-export declare const resolveBuildDefaultMcpResourceUrl: () => string | undefined;
+//#region src/build-defaults.d.ts
+declare const resolveBuildDefaultMcpResourceUrl: () => string | undefined;
+declare const resolveBuildDefaultMondrianApiUrl: () => string | undefined;
+declare const resolveBuildDefaultRunnethApiUrl: () => string | undefined;
+//#endregion
+export { resolveBuildDefaultMcpResourceUrl, resolveBuildDefaultMondrianApiUrl, resolveBuildDefaultRunnethApiUrl };

package/dist/build-defaults.js

@@ -1,21 +1,36 @@
+//#region src/build-defaults.ts
 const BUILD_DEFAULT_MONDRIAN_API_URL = "https://projects.motionapp.com/";
-const BUILD_DEFAULT_MONDRIAN_API_URL_PLACEHOLDER = "__RUNNETH_CLI_DEFAULT_MONDRIAN_API_URL__";
+const BUILD_DEFAULT_RUNNETH_API_URL = "https://build-be.runneth.com/";
 const appendMcpPath = (url) => {
-    const basePath = url.pathname === "/" ? "" : url.pathname.replace(/\/+$/u, "");
-    url.pathname = `${basePath}/mcp`;
+	url.pathname = `${url.pathname === "/" ? "" : url.pathname.replace(/\/+$/u, "")}/mcp`;
 };
-export const resolveBuildDefaultMcpResourceUrl = () => {
-    const rawApiUrl = BUILD_DEFAULT_MONDRIAN_API_URL.trim();
-    if (rawApiUrl.length === 0 ||
-        rawApiUrl === BUILD_DEFAULT_MONDRIAN_API_URL_PLACEHOLDER) {
-        return undefined;
-    }
-    const url = new URL(rawApiUrl);
-    if (url.protocol !== "http:" && url.protocol !== "https:") {
-        throw new Error("Build default MONDRIAN_API_URL must use http or https");
-    }
-    url.hash = "";
-    url.search = "";
-    appendMcpPath(url);
-    return url.toString();
+const resolveBuildDefaultMcpResourceUrl = () => {
+	const apiUrl = resolveBuildDefaultMondrianApiUrl();
+	if (apiUrl === void 0) return;
+	const url = new URL(apiUrl);
+	appendMcpPath(url);
+	return url.toString();
 };
+const normalizeBuildDefaultUrl = (input) => {
+	const rawApiUrl = input.value.trim();
+	if (rawApiUrl.length === 0 || rawApiUrl.startsWith("__RUNNETH_CLI_DEFAULT_") && rawApiUrl.endsWith("_API_URL__")) return;
+	const url = new URL(rawApiUrl);
+	if (url.protocol !== "http:" && url.protocol !== "https:") throw new Error(`Build default ${input.envName} must use http or https`);
+	url.hash = "";
+	url.search = "";
+	return url.toString().replace(/\/+$/u, "");
+};
+const resolveBuildDefaultMondrianApiUrl = () => {
+	return normalizeBuildDefaultUrl({
+		envName: "MONDRIAN_API_URL",
+		value: BUILD_DEFAULT_MONDRIAN_API_URL
+	});
+};
+const resolveBuildDefaultRunnethApiUrl = () => {
+	return normalizeBuildDefaultUrl({
+		envName: "BACKEND_URL",
+		value: BUILD_DEFAULT_RUNNETH_API_URL
+	});
+};
+//#endregion
+export { resolveBuildDefaultMcpResourceUrl, resolveBuildDefaultMondrianApiUrl, resolveBuildDefaultRunnethApiUrl };

package/dist/cli.d.ts

@@ -1,2 +1 @@
-#!/usr/bin/env node
-export {};
+export { };