@sentropic/llm-mesh 0.34.0 → 0.35.0

package/dist/node/claude-code-cli-wire.d.ts

@@ -0,0 +1,55 @@
+import type { ClaudeCodeCliEvent, ClaudeCodeCliRequest } from '../transport/claude-code-runtime-client.js';
+/** Deterministic prompt rendering; pinned by unit tests with a fake CLI. */
+export declare const renderClaudeCodeCliPrompt: (request: ClaudeCodeCliRequest) => string;
+export interface QuotaDiagnosis {
+    readonly quota: boolean;
+    readonly retryAfterMs?: number;
+}
+/**
+ * Quota-relevant text out of a CLI error payload: CLI-owned message fields
+ * only (`result`, `message`, `error`, string or numeric `code`). Numeric
+ * telemetry beside them (token usage, costs) is never signal, so a bare
+ * `429` buried in `usage` cannot trip the quota circuit.
+ */
+export declare const extractQuotaText: (payload: unknown) => string | undefined;
+/**
+ * Append a chunk to a byte-capped stderr tail. A non-positive cap keeps
+ * nothing (the caller still drains the pipe, but stores no bytes).
+ */
+export declare const appendCappedTail: (current: Buffer, chunk: Uint8Array, capBytes: number) => Buffer;
+/** Match quota prose in CLI-owned text only (stderr, error payloads). */
+export declare const diagnoseClaudeCodeQuota: (text: unknown) => QuotaDiagnosis;
+export type ClaudeCodeLineOutcome = {
+    type: 'system_init';
+    init: {
+        tools?: unknown;
+        mcpServers?: unknown;
+    };
+} | {
+    type: 'text';
+    text: string;
+} | {
+    type: 'tool_use';
+    event: Extract<ClaudeCodeCliEvent, {
+        type: 'tool_use';
+    }>;
+} | {
+    type: 'stop_reason';
+    reason: unknown;
+} | {
+    type: 'result';
+    result: {
+        finishReason: 'stop' | 'length' | 'tool_calls';
+        usage?: {
+            inputTokens?: number;
+            outputTokens?: number;
+        };
+        resultText?: string;
+    };
+} | {
+    type: 'error_payload';
+    payload: unknown;
+};
+/** Normalize one stream-json line; unknown and noise lines yield nothing. */
+export declare const parseClaudeCodeLine: (line: string) => ClaudeCodeLineOutcome[];
+//# sourceMappingURL=claude-code-cli-wire.d.ts.map

package/dist/node/claude-code-cli-wire.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-code-cli-wire.d.ts","sourceRoot":"","sources":["../../src/node/claude-code-cli-wire.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACV,kBAAkB,EAClB,oBAAoB,EACrB,MAAM,4CAA4C,CAAC;AAEpD,4EAA4E;AAC5E,eAAO,MAAM,yBAAyB,YAAa,oBAAoB,KAAG,MAezE,CAAC;AAEF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAkBD;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,YAAa,OAAO,KAAG,MAAM,GAAG,SAW5D,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,gBAAgB,YAAa,MAAM,SAAS,UAAU,YAAY,MAAM,KAAG,MAIvF,CAAC;AAEF,yEAAyE;AACzE,eAAO,MAAM,uBAAuB,SAAU,OAAO,KAAG,cAKvD,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAC7B;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,IAAI,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,CAAA;CAAE,GACxE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC,kBAAkB,EAAE;QAAE,IAAI,EAAE,UAAU,CAAA;KAAE,CAAC,CAAA;CAAE,GAC9E;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GACxC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE;QAAE,YAAY,EAAE,MAAM,GAAG,QAAQ,GAAG,YAAY,CAAC;QACzE,KAAK,CAAC,EAAE;YAAE,WAAW,CAAC,EAAE,MAAM,CAAC;YAAC,YAAY,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAClF;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC;AAQhD,6EAA6E;AAC7E,eAAO,MAAM,mBAAmB,SAAU,MAAM,KAAG,qBAAqB,EAgDvE,CAAC"}

package/dist/node/claude-code-cli-wire.js

@@ -0,0 +1,144 @@
+// @sentropic/llm-mesh/node/claude-code-cli-wire.ts
+//
+// Pure stream-json wire for the `claude` CLI host: deterministic prompt
+// rendering, quota prose diagnosis, and line normalization to
+// ClaudeCodeCliEvent outcomes. No process, clock, or network access —
+// safe to unit-test without a CLI.
+/** Deterministic prompt rendering; pinned by unit tests with a fake CLI. */
+export const renderClaudeCodeCliPrompt = (request) => {
+    const lines = [];
+    for (const message of request.messages) {
+        for (const part of message.content) {
+            if (part.type === 'text') {
+                lines.push(`${message.role}: ${part.text}`);
+            }
+            else if (part.type === 'tool_use') {
+                lines.push(`${message.role} tool_use ${part.name} ${part.id}: ${JSON.stringify(part.input)}`);
+            }
+            else {
+                lines.push(`${message.role} tool_result ${part.tool_use_id}: ${part.content}`);
+            }
+        }
+        if (message.content.length === 0)
+            lines.push(`${message.role}:`);
+    }
+    return `${lines.join('\n')}\n`;
+};
+const QUOTA_PATTERN = /5-hour|usage.?limit|rate.?limit|too many requests|\b429\b|quota|overloaded/i;
+const STRUCTURED_QUOTA_KEYS = ['result', 'message', 'error'];
+const RETRY_AFTER_PATTERN = /(\d+)\s*(milliseconds?|seconds?|minutes?|hours?)/i;
+const readRetryAfterMs = (text) => {
+    const match = RETRY_AFTER_PATTERN.exec(text);
+    if (!match)
+        return undefined;
+    const amount = Number(match[1]);
+    const unit = match[2].toLowerCase();
+    if (!Number.isSafeInteger(amount) || amount < 0)
+        return undefined;
+    const factor = unit.startsWith('millis') ? 1 : unit.startsWith('s') ? 1_000
+        : unit.startsWith('m') ? 60_000 : 3_600_000;
+    const ms = amount * factor;
+    return Number.isSafeInteger(ms) ? ms : undefined;
+};
+/**
+ * Quota-relevant text out of a CLI error payload: CLI-owned message fields
+ * only (`result`, `message`, `error`, string or numeric `code`). Numeric
+ * telemetry beside them (token usage, costs) is never signal, so a bare
+ * `429` buried in `usage` cannot trip the quota circuit.
+ */
+export const extractQuotaText = (payload) => {
+    if (!isRecord(payload))
+        return undefined;
+    const parts = [];
+    for (const key of STRUCTURED_QUOTA_KEYS) {
+        const value = payload[key];
+        if (typeof value === 'string' && value.length > 0)
+            parts.push(value);
+    }
+    const code = payload['code'];
+    if (typeof code === 'string' && code.length > 0)
+        parts.push(code);
+    else if (typeof code === 'number' && Number.isSafeInteger(code))
+        parts.push(String(code));
+    return parts.length > 0 ? parts.join(' ') : undefined;
+};
+/**
+ * Append a chunk to a byte-capped stderr tail. A non-positive cap keeps
+ * nothing (the caller still drains the pipe, but stores no bytes).
+ */
+export const appendCappedTail = (current, chunk, capBytes) => {
+    if (capBytes <= 0)
+        return Buffer.from('');
+    const next = Buffer.concat([current, Buffer.from(chunk)]);
+    return next.length <= capBytes ? next : Buffer.from(next.subarray(next.length - capBytes));
+};
+/** Match quota prose in CLI-owned text only (stderr, error payloads). */
+export const diagnoseClaudeCodeQuota = (text) => {
+    if (typeof text !== 'string' || text.length === 0)
+        return { quota: false };
+    if (!QUOTA_PATTERN.test(text))
+        return { quota: false };
+    const retryAfterMs = readRetryAfterMs(text);
+    return retryAfterMs === undefined ? { quota: true } : { quota: true, retryAfterMs };
+};
+const isRecord = (value) => !!value && typeof value === 'object' && !Array.isArray(value);
+const safeInt = (value) => typeof value === 'number' && Number.isSafeInteger(value) && value >= 0 ? value : undefined;
+/** Normalize one stream-json line; unknown and noise lines yield nothing. */
+export const parseClaudeCodeLine = (line) => {
+    let parsed;
+    try {
+        parsed = JSON.parse(line);
+    }
+    catch {
+        return [];
+    }
+    if (!isRecord(parsed) || typeof parsed.type !== 'string')
+        return [];
+    if (parsed.type === 'system' && parsed.subtype === 'init') {
+        const init = {};
+        if ('tools' in parsed)
+            init.tools = parsed['tools'];
+        if ('mcp_servers' in parsed)
+            init.mcpServers = parsed['mcp_servers'];
+        else if ('mcpServers' in parsed)
+            init.mcpServers = parsed['mcpServers'];
+        return [{ type: 'system_init', init }];
+    }
+    if (parsed.type === 'assistant') {
+        const message = parsed.message;
+        if (!isRecord(message) || !Array.isArray(message.content))
+            return [];
+        const outcomes = [];
+        for (const block of message.content) {
+            if (!isRecord(block) || typeof block.type !== 'string')
+                continue;
+            if (block.type === 'text' && typeof block.text === 'string' && block.text.length > 0) {
+                outcomes.push({ type: 'text', text: block.text });
+            }
+            else if (block.type === 'tool_use' && typeof block.id === 'string'
+                && typeof block.name === 'string' && isRecord(block.input)) {
+                outcomes.push({ type: 'tool_use',
+                    event: { type: 'tool_use', id: block.id, name: block.name, input: block.input } });
+            }
+        }
+        if (message.stop_reason !== undefined) {
+            outcomes.push({ type: 'stop_reason', reason: message.stop_reason });
+        }
+        return outcomes;
+    }
+    if (parsed.type === 'result') {
+        if (parsed.subtype === 'success' && parsed.is_error !== true) {
+            const usage = isRecord(parsed.usage) ? {
+                ...(safeInt(parsed.usage.input_tokens) !== undefined ? { inputTokens: safeInt(parsed.usage.input_tokens) } : {}),
+                ...(safeInt(parsed.usage.output_tokens) !== undefined ? { outputTokens: safeInt(parsed.usage.output_tokens) } : {}),
+            } : undefined;
+            const resultText = typeof parsed.result === 'string' ? parsed.result : undefined;
+            return [{ type: 'result', result: { finishReason: 'stop',
+                        ...(usage && Object.keys(usage).length ? { usage } : {}),
+                        ...(resultText !== undefined ? { resultText } : {}) } }];
+        }
+        return [{ type: 'error_payload', payload: parsed }];
+    }
+    return [];
+};
+//# sourceMappingURL=claude-code-cli-wire.js.map

package/dist/node/claude-code-cli-wire.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-code-cli-wire.js","sourceRoot":"","sources":["../../src/node/claude-code-cli-wire.ts"],"names":[],"mappings":"AAAA,mDAAmD;AACnD,EAAE;AACF,wEAAwE;AACxE,8DAA8D;AAC9D,sEAAsE;AACtE,mCAAmC;AAOnC,4EAA4E;AAC5E,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,OAA6B,EAAU,EAAE;IACjF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACvC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACnC,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBACzB,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9C,CAAC;iBAAM,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBACpC,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,aAAa,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAChG,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,gBAAgB,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;QACD,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC,CAAC;AAOF,MAAM,aAAa,GAAG,6EAA6E,CAAC;AACpG,MAAM,qBAAqB,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAU,CAAC;AACtE,MAAM,mBAAmB,GAAG,mDAAmD,CAAC;AAEhF,MAAM,gBAAgB,GAAG,CAAC,IAAY,EAAsB,EAAE;IAC5D,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAClE,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK;QACzE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9C,MAAM,EAAE,GAAG,MAAM,GAAG,MAAM,CAAC;IAC3B,OAAO,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACnD,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,OAAgB,EAAsB,EAAE;IACvE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,qBAAqB,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,IAAI,GAAY,OAAO,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SAC7D,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1F,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACxD,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,OAAe,EAAE,KAAiB,EAAE,QAAgB,EAAU,EAAE;IAC/F,IAAI,QAAQ,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1D,OAAO,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC;AAC7F,CAAC,CAAC;AAEF,yEAAyE;AACzE,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,IAAa,EAAkB,EAAE;IACvE,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC3E,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACvD,MAAM,YAAY,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC5C,OAAO,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;AACtF,CAAC,CAAC;AAWF,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAoC,EAAE,CACpE,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAEhE,MAAM,OAAO,GAAG,CAAC,KAAc,EAAsB,EAAE,CACrD,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAE7F,6EAA6E;AAC7E,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,IAAY,EAA2B,EAAE;IAC3E,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACpE,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QAC1D,MAAM,IAAI,GAA8C,EAAE,CAAC;QAC3D,IAAI,OAAO,IAAI,MAAM;YAAE,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,aAAa,IAAI,MAAM;YAAE,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;aAChE,IAAI,YAAY,IAAI,MAAM;YAAE,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;QACxE,OAAO,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,CAAC;QACrE,MAAM,QAAQ,GAA4B,EAAE,CAAC;QAC7C,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,SAAS;YACjE,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrF,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACpD,CAAC;iBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;mBAC/D,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC7D,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU;oBAC9B,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;QACD,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACtC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC7D,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBACrC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjH,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrH,CAAC,CAAC,CAAC,SAAS,CAAC;YACd,MAAM,UAAU,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YACjF,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,MAAM;wBACtD,GAAG,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACxD,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC,CAAC"}

package/dist/node/cli/bin.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=bin.d.ts.map

package/dist/node/cli/bin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin.d.ts","sourceRoot":"","sources":["../../../src/node/cli/bin.ts"],"names":[],"mappings":""}

package/dist/node/cli/bin.js

@@ -0,0 +1,15 @@
+#!/usr/bin/env node
+// @sentropic/llm-mesh/node/cli/bin.ts
+//
+// Dedicated executable entry point for the `llm-mesh-enroll` bin
+// (package.json `bin`). It runs unconditionally: npm exposes the bin as a
+// symlink named `llm-mesh-enroll`, so a suffix guard on `argv[1]` would
+// no-op. Library consumers import `run` from `./enroll-cli.js` instead.
+import { argv, exit } from 'node:process';
+import { EXIT_CODES, defaultWriters } from './enroll-args.js';
+import { run } from './enroll-cli.js';
+run(argv.slice(2)).then((code) => exit(code), () => {
+    defaultWriters().err(JSON.stringify({ status: 'error', code: EXIT_CODES.probeFailed }));
+    exit(EXIT_CODES.probeFailed);
+});
+//# sourceMappingURL=bin.js.map

package/dist/node/cli/bin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin.js","sourceRoot":"","sources":["../../../src/node/cli/bin.ts"],"names":[],"mappings":";AACA,sCAAsC;AACtC,EAAE;AACF,iEAAiE;AACjE,0EAA0E;AAC1E,wEAAwE;AACxE,wEAAwE;AAExE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAEtC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CACrB,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EACpB,GAAG,EAAE;IACH,cAAc,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IACxF,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;AAC/B,CAAC,CACF,CAAC"}

package/dist/node/cli/enroll-args.d.ts

@@ -0,0 +1,41 @@
+import { LocalAccountTransportService } from '../../service/local-account-transport-service.js';
+export declare const EXIT_CODES: {
+    readonly ok: 0;
+    readonly usage: 2;
+    readonly enrollmentFailed: 3;
+    readonly accountNotFound: 4;
+    readonly keyringKey: 5;
+    readonly probeFailed: 6;
+    readonly billingNotConfigured: 7;
+};
+export interface CliWriters {
+    out: (line: string) => void;
+    err: (line: string) => void;
+}
+export interface EnrollCliDeps {
+    fetchFn?: typeof fetch;
+    writers?: CliWriters;
+    env?: Record<string, string | undefined>;
+}
+export interface ParsedArgs {
+    command: 'enroll' | 'probe' | 'help';
+    provider: string;
+    keyringDir?: string;
+    keyringKeyEnv?: string;
+    ownerScope?: string;
+    label?: string;
+    account?: string;
+    model?: string;
+    effort?: string;
+    maxAttempts?: number;
+}
+export declare const parseArgs: (argv: string[]) => ParsedArgs;
+export declare const usageText: () => string;
+export declare const defaultWriters: () => CliWriters;
+export declare const fail: (writers: CliWriters, code: number, message: string) => number;
+export declare const resolveMasterKey: (keyringKeyEnv: string | undefined, env: Record<string, string | undefined>) => {
+    key?: Buffer;
+    error?: string;
+};
+export declare const openService: (keyringDir: string, masterKey: Buffer, fetchFn: typeof fetch) => LocalAccountTransportService;
+//# sourceMappingURL=enroll-args.d.ts.map

package/dist/node/cli/enroll-args.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enroll-args.d.ts","sourceRoot":"","sources":["../../../src/node/cli/enroll-args.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,4BAA4B,EAAE,MAAM,kDAAkD,CAAC;AAEhG,eAAO,MAAM,UAAU;;;;;;;;CAQb,CAAC;AAEX,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IACvB,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CAC1C;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAC;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AA0CD,eAAO,MAAM,SAAS,SAAU,MAAM,EAAE,KAAG,UAsB1C,CAAC;AAEF,eAAO,MAAM,SAAS,QAAO,MAOf,CAAC;AAEf,eAAO,MAAM,cAAc,QAAO,UAGhC,CAAC;AAEH,eAAO,MAAM,IAAI,YAAa,UAAU,QAAQ,MAAM,WAAW,MAAM,KAAG,MAGzE,CAAC;AAEF,eAAO,MAAM,gBAAgB,kBACZ,MAAM,GAAG,SAAS,OAC5B,OAAO,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,KACtC;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAchC,CAAC;AAQF,eAAO,MAAM,WAAW,eACV,MAAM,aACP,MAAM,WACR,YAAY,KACpB,4BAKA,CAAC"}

package/dist/node/cli/enroll-args.js

@@ -0,0 +1,118 @@
+// @sentropic/llm-mesh/node/cli/enroll-args.ts
+//
+// Shared argument parsing, exit codes, and keyring opening for the
+// llm-mesh-enroll CLI. Secrets never enter error messages: only the env
+// var NAME is quoted, never its value.
+import { stderr, stdout } from 'node:process';
+import { CodexEnrollmentProvider } from '../../enrollment/codex.js';
+import { MuseCodeEnrollmentProvider } from '../../enrollment/muse-code.js';
+import { deriveKeyringMasterKey, EncryptedFileKeyring, } from '../keyring/encrypted-file-keyring.js';
+import { LocalAccountTransportService } from '../../service/local-account-transport-service.js';
+export const EXIT_CODES = {
+    ok: 0,
+    usage: 2,
+    enrollmentFailed: 3,
+    accountNotFound: 4,
+    keyringKey: 5,
+    probeFailed: 6,
+    billingNotConfigured: 7,
+};
+const KNOWN_FLAGS = new Set([
+    'provider',
+    'keyring-dir',
+    'keyring-key-env',
+    'owner-scope',
+    'label',
+    'account',
+    'model',
+    'effort',
+    'max-attempts',
+    'help',
+]);
+const flagValue = (argv, name) => {
+    for (let i = 0; i < argv.length; i += 1) {
+        const arg = argv[i];
+        if (arg === `--${name}`) {
+            const next = argv[i + 1];
+            if (next === undefined || next.startsWith('--'))
+                return undefined;
+            return next;
+        }
+        if (arg.startsWith(`--${name}=`)) {
+            const value = arg.slice(name.length + 3);
+            return value.length > 0 ? value : undefined;
+        }
+    }
+    return undefined;
+};
+const hasFlag = (argv, name) => argv.includes(`--${name}`) || argv.some((arg) => arg.startsWith(`--${name}=`));
+const rejectUnknownFlags = (argv) => {
+    for (const arg of argv) {
+        if (!arg.startsWith('--'))
+            continue;
+        const name = arg.slice(2).split('=', 1)[0];
+        if (!KNOWN_FLAGS.has(name))
+            throw new Error(`unknown flag '--${name}'`);
+    }
+};
+export const parseArgs = (argv) => {
+    const [command, ...rest] = argv;
+    if (!command || command === 'help' || hasFlag(argv, 'help')) {
+        return { command: 'help', provider: 'muse-code' };
+    }
+    if (command !== 'enroll' && command !== 'probe') {
+        throw new Error(`unknown command '${command}'; expected 'enroll' or 'probe'`);
+    }
+    rejectUnknownFlags(rest);
+    const maxAttemptsRaw = flagValue(rest, 'max-attempts');
+    return {
+        command,
+        provider: flagValue(rest, 'provider') ?? 'muse-code',
+        keyringDir: flagValue(rest, 'keyring-dir'),
+        keyringKeyEnv: flagValue(rest, 'keyring-key-env'),
+        ownerScope: flagValue(rest, 'owner-scope'),
+        label: flagValue(rest, 'label'),
+        account: flagValue(rest, 'account'),
+        model: flagValue(rest, 'model') ?? 'muse-wonder-1.0',
+        effort: flagValue(rest, 'effort') ?? 'low',
+        ...(maxAttemptsRaw !== undefined ? { maxAttempts: Number(maxAttemptsRaw) } : {}),
+    };
+};
+export const usageText = () => [
+    'llm-mesh-enroll enroll --provider muse-code --keyring-dir <dir>',
+    '  --owner-scope <ref> [--label <label>] --keyring-key-env <NAME>',
+    '  [--max-attempts <n>]',
+    'llm-mesh-enroll probe --provider muse-code --keyring-dir <dir>',
+    '  --account <id> --model muse-wonder-1.0 --effort low --keyring-key-env <NAME>',
+].join('\n');
+export const defaultWriters = () => ({
+    out: (line) => stdout.write(`${line}\n`),
+    err: (line) => stderr.write(`${line}\n`),
+});
+export const fail = (writers, code, message) => {
+    writers.err(JSON.stringify({ status: 'error', code, message }));
+    return code;
+};
+export const resolveMasterKey = (keyringKeyEnv, env) => {
+    if (!keyringKeyEnv)
+        return { error: 'missing --keyring-key-env <NAME>' };
+    if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(keyringKeyEnv)) {
+        return { error: `invalid --keyring-key-env name '${keyringKeyEnv}'` };
+    }
+    const raw = env[keyringKeyEnv];
+    if (typeof raw !== 'string' || raw.length === 0) {
+        return { error: `keyring key env var '${keyringKeyEnv}' is missing or empty` };
+    }
+    try {
+        return { key: deriveKeyringMasterKey(raw) };
+    }
+    catch {
+        return { error: `keyring key env var '${keyringKeyEnv}' must hold 32 bytes as 64 hex chars or 44/43-char base64` };
+    }
+};
+const buildProviders = (fetchFn) => new Map([
+    ['muse-code', new MuseCodeEnrollmentProvider({ fetchFn })],
+    ['codex', new CodexEnrollmentProvider({ fetchFn })],
+]);
+export const openService = (keyringDir, masterKey, fetchFn) => new LocalAccountTransportService(new EncryptedFileKeyring(keyringDir, masterKey), buildProviders(fetchFn), { resolveConfig: async () => ({}) });
+//# sourceMappingURL=enroll-args.js.map

package/dist/node/cli/enroll-args.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enroll-args.js","sourceRoot":"","sources":["../../../src/node/cli/enroll-args.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C,EAAE;AACF,mEAAmE;AACnE,wEAAwE;AACxE,uCAAuC;AAEvC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAEpE,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EACL,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,4BAA4B,EAAE,MAAM,kDAAkD,CAAC;AAEhG,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,EAAE,EAAE,CAAC;IACL,KAAK,EAAE,CAAC;IACR,gBAAgB,EAAE,CAAC;IACnB,eAAe,EAAE,CAAC;IAClB,UAAU,EAAE,CAAC;IACb,WAAW,EAAE,CAAC;IACd,oBAAoB,EAAE,CAAC;CACf,CAAC;AA0BX,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,UAAU;IACV,aAAa;IACb,iBAAiB;IACjB,aAAa;IACb,OAAO;IACP,SAAS;IACT,OAAO;IACP,QAAQ;IACR,cAAc;IACd,MAAM;CACP,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,CAAC,IAAc,EAAE,IAAY,EAAsB,EAAE;IACrE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,KAAK,IAAI,EAAE,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACzB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAC;YAClE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACzC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9C,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF,MAAM,OAAO,GAAG,CAAC,IAAc,EAAE,IAAY,EAAW,EAAE,CACxD,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC;AAEjF,MAAM,kBAAkB,GAAG,CAAC,IAAc,EAAQ,EAAE;IAClD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACpC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,GAAG,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAc,EAAc,EAAE;IACtD,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAChC,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;QAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;IACpD,CAAC;IACD,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,iCAAiC,CAAC,CAAC;IAChF,CAAC;IACD,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACzB,MAAM,cAAc,GAAG,SAAS,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IACvD,OAAO;QACL,OAAO;QACP,QAAQ,EAAE,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,WAAW;QACpD,UAAU,EAAE,SAAS,CAAC,IAAI,EAAE,aAAa,CAAC;QAC1C,aAAa,EAAE,SAAS,CAAC,IAAI,EAAE,iBAAiB,CAAC;QACjD,UAAU,EAAE,SAAS,CAAC,IAAI,EAAE,aAAa,CAAC;QAC1C,KAAK,EAAE,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC;QAC/B,OAAO,EAAE,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC;QACnC,KAAK,EAAE,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,iBAAiB;QACpD,MAAM,EAAE,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,KAAK;QAC1C,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,SAAS,GAAG,GAAW,EAAE,CACpC;IACE,iEAAiE;IACjE,kEAAkE;IAClE,wBAAwB;IACxB,gEAAgE;IAChE,gFAAgF;CACjF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEf,MAAM,CAAC,MAAM,cAAc,GAAG,GAAe,EAAE,CAAC,CAAC;IAC/C,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC;IACxC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC;CACzC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,OAAmB,EAAE,IAAY,EAAE,OAAe,EAAU,EAAE;IACjF,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAChE,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,aAAiC,EACjC,GAAuC,EACL,EAAE;IACpC,IAAI,CAAC,aAAa;QAAE,OAAO,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC;IACzE,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;QACpD,OAAO,EAAE,KAAK,EAAE,mCAAmC,aAAa,GAAG,EAAE,CAAC;IACxE,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC;IAC/B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO,EAAE,KAAK,EAAE,wBAAwB,aAAa,uBAAuB,EAAE,CAAC;IACjF,CAAC;IACD,IAAI,CAAC;QACH,OAAO,EAAE,GAAG,EAAE,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,wBAAwB,aAAa,2DAA2D,EAAE,CAAC;IACrH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,OAAqB,EAAmC,EAAE,CAChF,IAAI,GAAG,CAA6B;IAClC,CAAC,WAAW,EAAE,IAAI,0BAA0B,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1D,CAAC,OAAO,EAAE,IAAI,uBAAuB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;CACpD,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,UAAkB,EAClB,SAAiB,EACjB,OAAqB,EACS,EAAE,CAChC,IAAI,4BAA4B,CAC9B,IAAI,oBAAoB,CAAC,UAAU,EAAE,SAAS,CAAC,EAC/C,cAAc,CAAC,OAAO,CAAC,EACvB,EAAE,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CACpC,CAAC"}

package/dist/node/cli/enroll-cli.d.ts

@@ -0,0 +1,4 @@
+import { type EnrollCliDeps, type ParsedArgs } from './enroll-args.js';
+export declare const runProbe: (args: ParsedArgs, deps?: EnrollCliDeps) => Promise<number>;
+export declare const run: (argv: string[], deps?: EnrollCliDeps) => Promise<number>;
+//# sourceMappingURL=enroll-cli.d.ts.map

package/dist/node/cli/enroll-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enroll-cli.d.ts","sourceRoot":"","sources":["../../../src/node/cli/enroll-cli.ts"],"names":[],"mappings":"AAQA,OAAO,EAOL,KAAK,aAAa,EAClB,KAAK,UAAU,EAChB,MAAM,kBAAkB,CAAC;AAK1B,eAAO,MAAM,QAAQ,SACb,UAAU,SACV,aAAa,KAClB,QAAQ,MAAM,CAyFhB,CAAC;AAEF,eAAO,MAAM,GAAG,SAAgB,MAAM,EAAE,SAAQ,aAAa,KAAQ,QAAQ,MAAM,CAclF,CAAC"}

package/dist/node/cli/enroll-cli.js

@@ -0,0 +1,124 @@
+// @sentropic/llm-mesh/node/cli/enroll-cli.ts
+//
+// Generic device-flow enrollment CLI (muse-code first):
+// `enroll` stores a seat account, `probe` checks it with one minimal
+// generate through MuseAdapter/MuseRuntimeClient. stdout is a machine
+// contract (one JSON object per line); secrets never printed.
+import { EncryptedFileKeyring } from '../keyring/encrypted-file-keyring.js';
+import { defaultWriters, EXIT_CODES, fail, parseArgs, resolveMasterKey, usageText, } from './enroll-args.js';
+import { runEnroll } from './enroll-command.js';
+const KNOWN_EFFORTS = new Set(['none', 'low', 'medium', 'high', 'xhigh', 'max']);
+export const runProbe = async (args, deps = {}) => {
+    const writers = deps.writers ?? defaultWriters();
+    const env = deps.env ?? process.env;
+    const fetchFn = deps.fetchFn ?? fetch;
+    if (args.provider !== 'muse-code') {
+        return fail(writers, EXIT_CODES.usage, `provider '${args.provider}' has no probe; only 'muse-code' is probed`);
+    }
+    if (!args.keyringDir)
+        return fail(writers, EXIT_CODES.usage, 'missing --keyring-dir <dir>');
+    if (!args.account)
+        return fail(writers, EXIT_CODES.usage, 'missing --account <id>');
+    const effort = args.effort ?? 'low';
+    if (!KNOWN_EFFORTS.has(effort)) {
+        return fail(writers, EXIT_CODES.usage, `unknown --effort '${effort}'`);
+    }
+    const resolved = resolveMasterKey(args.keyringKeyEnv, env);
+    if (!resolved.key)
+        return fail(writers, EXIT_CODES.keyringKey, resolved.error ?? 'key error');
+    const keyring = new EncryptedFileKeyring(args.keyringDir, resolved.key);
+    let raw;
+    let publicRaw;
+    try {
+        raw = await keyring.getSecret(`sentropic-llm-mesh:${args.account}:envelope`);
+        publicRaw = await keyring.getSecret(`sentropic-llm-mesh:${args.account}:public`);
+    }
+    catch {
+        return fail(writers, EXIT_CODES.keyringKey, 'keyring read failed; check the key and permissions');
+    }
+    if (!raw) {
+        return fail(writers, EXIT_CODES.accountNotFound, `account '${args.account}' not found`);
+    }
+    // The envelope carries no provider; the public record does. Refuse any
+    // non-muse account before any token leaves the keyring: a codex OAuth
+    // token must never reach api.meta.ai.
+    try {
+        const record = JSON.parse(publicRaw ?? '');
+        if (record.providerId !== 'muse')
+            throw new Error('bad provider');
+    }
+    catch {
+        return fail(writers, EXIT_CODES.accountNotFound, `account '${args.account}' is not a muse-code seat account`);
+    }
+    let accessToken;
+    try {
+        const envelope = JSON.parse(raw);
+        if (typeof envelope.accessToken !== 'string' || !envelope.accessToken)
+            throw new Error('bad');
+        accessToken = envelope.accessToken;
+    }
+    catch {
+        return fail(writers, EXIT_CODES.probeFailed, `account '${args.account}' credential record is corrupt`);
+    }
+    // The Muse Chat wire takes no reasoning controls (the client refuses a
+    // non-empty reasoning block), so --effort is validated for forward
+    // compatibility but not forwarded.
+    let adapter;
+    try {
+        const { MuseAdapter } = await import('../../adapters.js');
+        const { MuseRuntimeClient } = await import('../../transport/muse-runtime-client.js');
+        adapter = new MuseAdapter({ client: new MuseRuntimeClient({ fetch: fetchFn }) });
+    }
+    catch {
+        return fail(writers, EXIT_CODES.probeFailed, 'probe failed to load the muse runtime');
+    }
+    const modelId = args.model ?? 'muse-wonder-1.0';
+    const startedAt = Date.now();
+    try {
+        const response = await adapter.generate({ providerId: 'muse', modelId, messages: [{ role: 'user', content: 'probe' }], maxOutputTokens: 16 }, {
+            auth: {
+                material: { type: 'account-transport', provider: 'muse', accessToken, accountId: args.account },
+                descriptor: { sourceType: 'account-transport', accountProviderId: 'muse' },
+            },
+        });
+        // Status plus latency plus usage only; the model text stays out.
+        writers.out(JSON.stringify({
+            status: 'ok',
+            latencyMs: Date.now() - startedAt,
+            modelId: response.modelId,
+            ...(response.usage ? { usage: response.usage } : {}),
+        }));
+        return EXIT_CODES.ok;
+    }
+    catch (error) {
+        const status = error.status;
+        if (status === 402) {
+            // Measured non-seat wire: a raw MUSE_API_KEY import (muse.ts direct
+            // path) is not seat-billed, so serving refuses billing_not_configured.
+            // Seat-billed device-flow accounts (muse-code.ts) never hit this.
+            return fail(writers, EXIT_CODES.billingNotConfigured, 'billing_not_configured: non-seat muse.ts direct-key path; re-enroll a seat account');
+        }
+        if (typeof status === 'number') {
+            return fail(writers, EXIT_CODES.probeFailed, `probe failed (status ${status})`);
+        }
+        return fail(writers, EXIT_CODES.probeFailed, 'probe failed');
+    }
+};
+export const run = async (argv, deps = {}) => {
+    const writers = deps.writers ?? defaultWriters();
+    let args;
+    try {
+        args = parseArgs(argv);
+    }
+    catch (error) {
+        return fail(writers, EXIT_CODES.usage, error instanceof Error ? error.message : 'bad usage');
+    }
+    if (args.command === 'help') {
+        writers.out(usageText());
+        return EXIT_CODES.ok;
+    }
+    if (args.command === 'enroll')
+        return runEnroll(args, deps);
+    return runProbe(args, deps);
+};
+//# sourceMappingURL=enroll-cli.js.map

package/dist/node/cli/enroll-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enroll-cli.js","sourceRoot":"","sources":["../../../src/node/cli/enroll-cli.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,EAAE;AACF,wDAAwD;AACxD,qEAAqE;AACrE,sEAAsE;AACtE,8DAA8D;AAE9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC5E,OAAO,EACL,cAAc,EACd,UAAU,EACV,IAAI,EACJ,SAAS,EACT,gBAAgB,EAChB,SAAS,GAGV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;AAEjF,MAAM,CAAC,MAAM,QAAQ,GAAG,KAAK,EAC3B,IAAgB,EAChB,OAAsB,EAAE,EACP,EAAE;IACnB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,cAAc,EAAE,CAAC;IACjD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;IACtC,IAAI,IAAI,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,KAAK,EAAE,aAAa,IAAI,CAAC,QAAQ,4CAA4C,CAAC,CAAC;IACjH,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,KAAK,EAAE,6BAA6B,CAAC,CAAC;IAC5F,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC;IACpC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,KAAK,EAAE,qBAAqB,MAAM,GAAG,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;IAC3D,IAAI,CAAC,QAAQ,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,UAAU,EAAE,QAAQ,CAAC,KAAK,IAAI,WAAW,CAAC,CAAC;IAC9F,MAAM,OAAO,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;IACxE,IAAI,GAAkB,CAAC;IACvB,IAAI,SAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,sBAAsB,IAAI,CAAC,OAAO,WAAW,CAAC,CAAC;QAC7E,SAAS,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,sBAAsB,IAAI,CAAC,OAAO,SAAS,CAAC,CAAC;IACnF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,UAAU,EAAE,oDAAoD,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,eAAe,EAAE,YAAY,IAAI,CAAC,OAAO,aAAa,CAAC,CAAC;IAC1F,CAAC;IACD,uEAAuE;IACvE,sEAAsE;IACtE,sCAAsC;IACtC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAA6B,CAAC;QACvE,IAAI,MAAM,CAAC,UAAU,KAAK,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,eAAe,EAAE,YAAY,IAAI,CAAC,OAAO,mCAAmC,CAAC,CAAC;IAChH,CAAC;IACD,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA8B,CAAC;QAC9D,IAAI,OAAO,QAAQ,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;QAC9F,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,WAAW,EAAE,YAAY,IAAI,CAAC,OAAO,gCAAgC,CAAC,CAAC;IACzG,CAAC;IACD,uEAAuE;IACvE,mEAAmE;IACnE,mCAAmC;IACnC,IAAI,OAAgD,CAAC;IACrD,IAAI,CAAC;QACH,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAC1D,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,wCAAwC,CAAC,CAAC;QACrF,OAAO,GAAG,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,IAAI,iBAAiB,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IACnF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,WAAW,EAAE,uCAAuC,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,IAAI,iBAAiB,CAAC;IAChD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,CACrC,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,eAAe,EAAE,EAAE,EAAE,EACpG;YACE,IAAI,EAAE;gBACJ,QAAQ,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE;gBAC/F,UAAU,EAAE,EAAE,UAAU,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,EAAE;aAC3E;SACF,CACF,CAAC;QACF,iEAAiE;QACjE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;YACzB,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YACjC,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrD,CAAC,CAAC,CAAC;QACJ,OAAO,UAAU,CAAC,EAAE,CAAC;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAI,KAA8B,CAAC,MAAM,CAAC;QACtD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnB,oEAAoE;YACpE,uEAAuE;YACvE,kEAAkE;YAClE,OAAO,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,oBAAoB,EAClD,oFAAoF,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,WAAW,EAAE,wBAAwB,MAAM,GAAG,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,GAAG,GAAG,KAAK,EAAE,IAAc,EAAE,OAAsB,EAAE,EAAmB,EAAE;IACrF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,cAAc,EAAE,CAAC;IACjD,IAAI,IAAgB,CAAC;IACrB,IAAI,CAAC;QACH,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IAC/F,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;QACzB,OAAO,UAAU,CAAC,EAAE,CAAC;IACvB,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5D,OAAO,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC9B,CAAC,CAAC"}

package/dist/node/cli/enroll-command.d.ts

@@ -0,0 +1,3 @@
+import { type EnrollCliDeps, type ParsedArgs } from './enroll-args.js';
+export declare const runEnroll: (args: ParsedArgs, deps?: EnrollCliDeps) => Promise<number>;
+//# sourceMappingURL=enroll-command.d.ts.map

package/dist/node/cli/enroll-command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enroll-command.d.ts","sourceRoot":"","sources":["../../../src/node/cli/enroll-command.ts"],"names":[],"mappings":"AAOA,OAAO,EAML,KAAK,aAAa,EAClB,KAAK,UAAU,EAChB,MAAM,kBAAkB,CAAC;AA0B1B,eAAO,MAAM,SAAS,SACd,UAAU,SACV,aAAa,KAClB,QAAQ,MAAM,CAsDhB,CAAC"}