@tokenfactory/acc-runner 0.41.7 → 0.42.0

package/dist/user-auth/session.js

@@ -0,0 +1,172 @@
+/**
+ * The PERSON's CLI session (AX-G1 DEVICE-FLOW-GENERALIZE, gap G-16).
+ *
+ * `acc-runner login` enrols a MACHINE: it ends holding an ACC-signed JWT that
+ * impersonates its owner, plus a runner row in the fleet. This module is the
+ * other thing a terminal might want to be — a human, signed in as themselves,
+ * with no runner attached. It is the credential AX-G2 acts under.
+ *
+ * WHAT THE CREDENTIAL IS
+ * ----------------------------------------------------------------------------
+ * An ordinary Supabase session: the same access/refresh pair the user's browser
+ * holds, obtained by spending the one-time grant /api/auth/device-code hands
+ * back (see that file for why the CLI, not the server, spends it). Everything
+ * follows from that choice:
+ *
+ *   * REFRESH is GoTrue's, not ACC's. `/auth/v1/token?grant_type=refresh_token`,
+ *     with rotation — so the successor MUST be written back to the keychain on
+ *     every refresh, or the next start replays a spent token.
+ *   * REVOCATION is real and it is not ours. The session is a row in
+ *     `auth.sessions`; Settings → Sessions deletes it and the delete cascades
+ *     the refresh-token family. The next refresh here fails, and `signedOut`
+ *     below is how that becomes "you were signed out" rather than a stack trace.
+ *   * STORAGE is the OS keychain and nothing else. Its own account slot, so it
+ *     cannot disturb the runner session's frozen entry.
+ *
+ * The USER AGENT is stamped deliberately. GoTrue records it on the session row,
+ * and api/auth/sessions-core.ts turns it into the device label on the sessions
+ * surface — so this string is the difference between "Unknown device" and
+ * "acc CLI · my-laptop" when the user decides what to revoke.
+ */
+import os from "node:os";
+import { clearSlot, loadSlot, saveSlot } from "../keychain.js";
+import { signInCommand } from "../cli-name.js";
+import { PACKAGE_VERSION } from "../pkg-version.js";
+/** Keychain account for the person session. The runner's is "default". */
+export const USER_SESSION_SLOT = "user";
+/** Refresh this far ahead of expiry, so a long RPC never straddles it. */
+export const REFRESH_SKEW_SECONDS = 120;
+/**
+ * `acc-cli/1.2.3 (darwin; my-laptop)`. The hostname is filtered to header-safe
+ * characters — a hostname with a stray byte must not make an auth call throw
+ * where it would otherwise have succeeded.
+ */
+export function cliUserAgent(hostname = os.hostname()) {
+    const host = hostname.replace(/[^\w.-]+/g, "-").slice(0, 63) || "unknown-host";
+    return `acc-cli/${PACKAGE_VERSION} (${process.platform}; ${host})`;
+}
+/** Raised when the session is gone for good — revoked, expired, or never there. */
+export class SignedOutError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "SignedOutError";
+    }
+}
+// ── Keychain ───────────────────────────────────────────────────────────────
+export function saveUserSession(session) {
+    return saveSlot(USER_SESSION_SLOT, session);
+}
+export function loadUserSession() {
+    return loadSlot(USER_SESSION_SLOT);
+}
+export function clearUserSession() {
+    return clearSlot(USER_SESSION_SLOT);
+}
+async function postGoTrue(target, path, body, deps) {
+    const doFetch = deps.fetch ?? fetch;
+    const res = await doFetch(`${target.supabaseUrl.replace(/\/+$/, "")}${path}`, {
+        method: "POST",
+        headers: {
+            "Content-Type": "application/json",
+            apikey: target.anonKey,
+            // Recorded on auth.sessions.user_agent — this is the device label.
+            "User-Agent": deps.userAgent ?? cliUserAgent(),
+        },
+        body: JSON.stringify(body),
+    });
+    let json = {};
+    try {
+        json = (await res.json());
+    }
+    catch {
+        /* a non-JSON body is handled by the shape check below */
+    }
+    return { status: res.status, json };
+}
+/**
+ * Fold a token response into a session, or fail loudly. A response missing
+ * either token, or the user id, is not a session however cheerful its status
+ * code was — better to refuse than to persist a credential we cannot refresh.
+ */
+export function toStoredSession(json, target, now) {
+    const access = json.access_token;
+    const refresh = json.refresh_token;
+    const userId = json.user?.id;
+    if (!access || !refresh || !userId) {
+        throw new Error("auth response did not contain a usable session");
+    }
+    const expiresAt = typeof json.expires_at === "number"
+        ? json.expires_at * 1000
+        : now + (typeof json.expires_in === "number" ? json.expires_in : 3600) * 1000;
+    return {
+        access_token: access,
+        refresh_token: refresh,
+        access_expires_at: new Date(expiresAt).toISOString(),
+        user_id: userId,
+        email: json.user?.email ?? null,
+        supabase_url: target.supabaseUrl,
+        anon_key: target.anonKey,
+    };
+}
+/** Spend the one-time grant from /api/auth/device-code for a real session. */
+export async function verifyEmailOtp(target, params, deps = {}) {
+    const { status, json } = await postGoTrue(target, "/auth/v1/verify", { type: "email", email: params.email, token: params.token }, deps);
+    if (status !== 200) {
+        throw new Error(`sign-in grant was rejected (HTTP ${status})`);
+    }
+    return toStoredSession(json, target, deps.now?.() ?? Date.now());
+}
+/**
+ * Trade the refresh token for a fresh pair. A 4xx here is the revocation path,
+ * not an outage: GoTrue answers 400/401 for a token that was revoked (the
+ * sessions surface deleted the row) or already rotated, and both mean the same
+ * thing to the operator — sign in again.
+ */
+export async function refreshUserSession(session, deps = {}) {
+    const target = { supabaseUrl: session.supabase_url, anonKey: session.anon_key };
+    const { status, json } = await postGoTrue(target, "/auth/v1/token?grant_type=refresh_token", { refresh_token: session.refresh_token }, deps);
+    if (status >= 400 && status < 500) {
+        throw new SignedOutError(`This CLI session was revoked or expired. Run \`${signInCommand()}\`.`);
+    }
+    if (status !== 200) {
+        throw new Error(`token refresh failed (HTTP ${status})`);
+    }
+    return toStoredSession(json, target, deps.now?.() ?? Date.now());
+}
+export function accessTokenIsFresh(session, now = Date.now()) {
+    const expiry = new Date(session.access_expires_at).getTime();
+    if (!Number.isFinite(expiry))
+        return false;
+    return expiry - now > REFRESH_SKEW_SECONDS * 1000;
+}
+/**
+ * The accessor everything downstream should use: a live access token for the
+ * signed-in human, refreshed and re-persisted when it is close to expiry.
+ *
+ * The rotated successor is written back BEFORE the token is returned, because a
+ * caller that used a token whose refresh partner never landed would be one crash
+ * away from replaying a spent token — which GoTrue treats as reuse.
+ *
+ * A revoked session clears the keychain slot on the way out. Leaving a dead
+ * credential in the keychain would make every later command fail the same way
+ * with nothing to show for it; removing it makes `auth status` honest.
+ */
+export async function getUserAccessToken(deps = {}) {
+    const session = await loadUserSession();
+    if (!session) {
+        throw new SignedOutError(`Not signed in. Run \`${signInCommand()}\`.`);
+    }
+    if (accessTokenIsFresh(session, deps.now?.() ?? Date.now()))
+        return session.access_token;
+    try {
+        const rotated = await refreshUserSession(session, deps);
+        await saveUserSession(rotated);
+        return rotated.access_token;
+    }
+    catch (err) {
+        if (err instanceof SignedOutError)
+            await clearUserSession();
+        throw err;
+    }
+}
+//# sourceMappingURL=session.js.map

package/dist/user-auth/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/user-auth/session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,0EAA0E;AAC1E,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAe,CAAC;AAEjD,0EAA0E;AAC1E,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAcxC;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,WAAmB,EAAE,CAAC,QAAQ,EAAE;IAC3D,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,cAAc,CAAC;IAC/E,OAAO,WAAW,eAAe,KAAK,OAAO,CAAC,QAAQ,KAAK,IAAI,GAAG,CAAC;AACrE,CAAC;AAED,mFAAmF;AACnF,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED,8EAA8E;AAE9E,MAAM,UAAU,eAAe,CAAC,OAA0B;IACxD,OAAO,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,QAAQ,CAAoB,iBAAiB,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,OAAO,SAAS,CAAC,iBAAiB,CAAC,CAAC;AACtC,CAAC;AAyBD,KAAK,UAAU,UAAU,CACvB,MAAoB,EACpB,IAAY,EACZ,IAAa,EACb,IAAgB;IAEhB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;IACpC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE;QAC5E,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,MAAM,EAAE,MAAM,CAAC,OAAO;YACtB,mEAAmE;YACnE,YAAY,EAAE,IAAI,CAAC,SAAS,IAAI,YAAY,EAAE;SAC/C;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;IACH,IAAI,IAAI,GAAwB,EAAE,CAAC;IACnC,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAwB,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,yDAAyD;IAC3D,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;AACtC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAyB,EACzB,MAAoB,EACpB,GAAW;IAEX,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC;IACjC,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;IAC7B,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,SAAS,GACb,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;QACjC,CAAC,CAAC,IAAI,CAAC,UAAU,GAAG,IAAI;QACxB,CAAC,CAAC,GAAG,GAAG,CAAC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAClF,OAAO;QACL,YAAY,EAAE,MAAM;QACpB,aAAa,EAAE,OAAO;QACtB,iBAAiB,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;QACpD,OAAO,EAAE,MAAM;QACf,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,IAAI;QAC/B,YAAY,EAAE,MAAM,CAAC,WAAW;QAChC,QAAQ,EAAE,MAAM,CAAC,OAAO;KACzB,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAoB,EACpB,MAAwC,EACxC,OAAmB,EAAE;IAErB,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,UAAU,CACvC,MAAM,EACN,iBAAiB,EACjB,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAC3D,IAAI,CACL,CAAC;IACF,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,oCAAoC,MAAM,GAAG,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;AACnE,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAA0B,EAC1B,OAAmB,EAAE;IAErB,MAAM,MAAM,GAAG,EAAE,WAAW,EAAE,OAAO,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;IAChF,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,UAAU,CACvC,MAAM,EACN,yCAAyC,EACzC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,EACxC,IAAI,CACL,CAAC;IACF,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;QAClC,MAAM,IAAI,cAAc,CACtB,kDAAkD,aAAa,EAAE,KAAK,CACvE,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,GAAG,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,OAA0B,EAC1B,MAAc,IAAI,CAAC,GAAG,EAAE;IAExB,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE,CAAC;IAC7D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,OAAO,MAAM,GAAG,GAAG,GAAG,oBAAoB,GAAG,IAAI,CAAC;AACpD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAmB,EAAE;IAC5D,MAAM,OAAO,GAAG,MAAM,eAAe,EAAE,CAAC;IACxC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,cAAc,CAAC,wBAAwB,aAAa,EAAE,KAAK,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QAAE,OAAO,OAAO,CAAC,YAAY,CAAC;IACzF,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACxD,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;QAC/B,OAAO,OAAO,CAAC,YAAY,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,cAAc;YAAE,MAAM,gBAAgB,EAAE,CAAC;QAC5D,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/user-cli/chat.d.ts

@@ -0,0 +1,44 @@
+import { type UserApiDeps } from "./client.js";
+export interface ChatOptions {
+    conversation?: string;
+    json?: boolean;
+}
+export interface SseEvent {
+    event: string;
+    data: unknown;
+}
+/**
+ * Split a raw SSE buffer into whole events, returning the unconsumed tail.
+ *
+ * The tail matters: a chunk boundary lands mid-frame constantly on a token
+ * stream, and an implementation that parsed each chunk independently would drop
+ * every event unlucky enough to straddle one.
+ */
+export declare function drainSseBuffer(buffer: string): {
+    events: SseEvent[];
+    rest: string;
+};
+/** What one completed turn tells the caller, so a REPL can continue the thread. */
+export interface TurnResult {
+    conversationId: string | null;
+    text: string;
+    queued: boolean;
+}
+/**
+ * Send one message and render the reply. Exported separately from the command so
+ * the REPL below can loop over it while holding the conversation id, and so the
+ * tests can drive a whole turn through a fetch double.
+ */
+export declare function streamTurn(message: string, opts: ChatOptions, deps?: UserApiDeps & {
+    write?: (chunk: string) => void;
+}): Promise<TurnResult>;
+/**
+ * `acc chat "question"` for one shot, `echo q | acc chat` for a pipe, and a bare
+ * `acc chat` on a terminal for a REPL that holds the conversation open. The REPL
+ * is not a nicety: without it every follow-up question would need the operator
+ * to copy a conversation id back out of the previous line.
+ */
+export declare function chatCommand(words: string[], opts?: ChatOptions, deps?: UserApiDeps & {
+    write?: (chunk: string) => void;
+}): Promise<void>;
+//# sourceMappingURL=chat.d.ts.map

package/dist/user-cli/chat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat.d.ts","sourceRoot":"","sources":["../../src/user-cli/chat.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAa,KAAK,WAAW,EAAE,MAAM,aAAa,CAAC;AAG1D,MAAM,WAAW,WAAW;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,OAAO,CAAC;CACf;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAwBnF;AAED,mFAAmF;AACnF,MAAM,WAAW,UAAU;IACzB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;CACjB;AAMD;;;;GAIG;AACH,wBAAsB,UAAU,CAC9B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,WAAW,EACjB,IAAI,GAAE,WAAW,GAAG;IAAE,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAA;CAAO,GAC3D,OAAO,CAAC,UAAU,CAAC,CAkFrB;AASD;;;;;GAKG;AACH,wBAAsB,WAAW,CAC/B,KAAK,EAAE,MAAM,EAAE,EACf,IAAI,GAAE,WAAgB,EACtB,IAAI,GAAE,WAAW,GAAG;IAAE,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAA;CAAO,GAC3D,OAAO,CAAC,IAAI,CAAC,CAoCf"}

package/dist/user-cli/chat.js

@@ -0,0 +1,199 @@
+/**
+ * `acc chat` — Ask-ACC from the terminal.
+ *
+ * Posts to the same `/api/chat/stream` endpoint the browser uses, authenticated
+ * with the operator's own session, and renders the SSE stream as it arrives.
+ * Using the shared endpoint rather than calling a model directly is the whole
+ * point: the tool catalog, the delegation ceiling, the capability manifest, the
+ * per-turn tool cap and the chat audit trail are all server-side, so a terminal
+ * turn is governed exactly like a browser turn and cannot become a side door.
+ *
+ * TWO SHAPES OF ANSWER. With a BYOK key the endpoint streams `token` events and
+ * the reply appears here word by word. Without one, an eligible turn is ENQUEUED
+ * for a companion runner to drain and the stream ends after `queued` — there is
+ * no inline answer to print, so this says so and hands back the conversation id
+ * rather than pretending the turn failed.
+ */
+import chalk from "chalk";
+import { createInterface } from "node:readline/promises";
+import { userFetch } from "./client.js";
+import { cliName } from "../cli-name.js";
+/**
+ * Split a raw SSE buffer into whole events, returning the unconsumed tail.
+ *
+ * The tail matters: a chunk boundary lands mid-frame constantly on a token
+ * stream, and an implementation that parsed each chunk independently would drop
+ * every event unlucky enough to straddle one.
+ */
+export function drainSseBuffer(buffer) {
+    const events = [];
+    let rest = buffer;
+    for (;;) {
+        const boundary = rest.indexOf("\n\n");
+        if (boundary === -1)
+            break;
+        const frame = rest.slice(0, boundary);
+        rest = rest.slice(boundary + 2);
+        let event = "message";
+        const dataLines = [];
+        for (const line of frame.split("\n")) {
+            if (line.startsWith("event:"))
+                event = line.slice(6).trim();
+            else if (line.startsWith("data:"))
+                dataLines.push(line.slice(5).trim());
+        }
+        if (dataLines.length === 0)
+            continue;
+        let data = dataLines.join("\n");
+        try {
+            data = JSON.parse(dataLines.join("\n"));
+        }
+        catch {
+            /* a non-JSON payload is passed through as the raw string */
+        }
+        events.push({ event, data });
+    }
+    return { events, rest };
+}
+function asRecord(data) {
+    return data && typeof data === "object" ? data : {};
+}
+/**
+ * Send one message and render the reply. Exported separately from the command so
+ * the REPL below can loop over it while holding the conversation id, and so the
+ * tests can drive a whole turn through a fetch double.
+ */
+export async function streamTurn(message, opts, deps = {}) {
+    const say = deps.log ?? ((line) => console.log(line));
+    const write = deps.write ?? ((chunk) => process.stdout.write(chunk));
+    const res = await userFetch("/api/chat/stream", { body: { message, conversation_id: opts.conversation } }, deps);
+    if (!res.ok) {
+        // The endpoint's own body carries the actionable reason (no provider, no
+        // membership, rate limit); a bare status code would send the operator to
+        // the logs for something they can read here.
+        let detail = `HTTP ${res.status}`;
+        try {
+            const body = asRecord(await res.json());
+            if (typeof body.error === "string")
+                detail = `${body.error} (HTTP ${res.status})`;
+        }
+        catch {
+            /* keep the status-only detail */
+        }
+        throw new Error(`Chat request failed: ${detail}`);
+    }
+    if (!res.body)
+        throw new Error("Chat response carried no stream.");
+    let conversationId = opts.conversation ?? null;
+    let text = "";
+    let queued = false;
+    let buffer = "";
+    let wroteAnything = false;
+    const decoder = new TextDecoder();
+    const reader = res.body.getReader();
+    for (;;) {
+        const { done, value } = await reader.read();
+        if (done)
+            break;
+        buffer += decoder.decode(value, { stream: true });
+        const drained = drainSseBuffer(buffer);
+        buffer = drained.rest;
+        for (const { event, data } of drained.events) {
+            const payload = asRecord(data);
+            switch (event) {
+                case "conversation":
+                    if (typeof payload.id === "string")
+                        conversationId = payload.id;
+                    break;
+                case "token": {
+                    const chunk = typeof payload.text === "string" ? payload.text : "";
+                    text += chunk;
+                    if (!opts.json) {
+                        write(chunk);
+                        wroteAnything = wroteAnything || chunk.length > 0;
+                    }
+                    break;
+                }
+                case "tool_call":
+                    if (!opts.json)
+                        say(chalk.gray(`\n  · ${String(payload.name ?? "tool")}…`));
+                    break;
+                case "queued":
+                case "turn":
+                    queued = true;
+                    break;
+                case "error":
+                    throw new Error(String(payload.message ?? "chat stream failed"));
+                case "done":
+                    if (typeof payload.conversation_id === "string")
+                        conversationId = payload.conversation_id;
+                    if (payload.queued === true)
+                        queued = true;
+                    break;
+                default:
+                    break;
+            }
+        }
+    }
+    if (wroteAnything)
+        write("\n");
+    if (opts.json) {
+        say(JSON.stringify({ conversation_id: conversationId, text, queued }, null, 2));
+    }
+    else if (queued && !text) {
+        say(chalk.yellow("· Queued to a companion runner — no inline answer. Open the conversation in ACC to read the reply."));
+    }
+    return { conversationId, text, queued };
+}
+/** Read a piped message when one was not passed as an argument. */
+async function readStdin() {
+    const chunks = [];
+    for await (const chunk of process.stdin)
+        chunks.push(Buffer.from(chunk));
+    return Buffer.concat(chunks).toString("utf8").trim();
+}
+/**
+ * `acc chat "question"` for one shot, `echo q | acc chat` for a pipe, and a bare
+ * `acc chat` on a terminal for a REPL that holds the conversation open. The REPL
+ * is not a nicety: without it every follow-up question would need the operator
+ * to copy a conversation id back out of the previous line.
+ */
+export async function chatCommand(words, opts = {}, deps = {}) {
+    const say = deps.log ?? ((line) => console.log(line));
+    const inline = words.join(" ").trim();
+    if (inline) {
+        const result = await streamTurn(inline, opts, deps);
+        if (!opts.json && result.conversationId) {
+            say(chalk.gray(`\nContinue: ${cliName()} chat --conversation ${result.conversationId}`));
+        }
+        return;
+    }
+    if (!process.stdin.isTTY) {
+        const piped = await readStdin();
+        if (!piped)
+            throw new Error("No message given (pass one as an argument or pipe it in).");
+        await streamTurn(piped, opts, deps);
+        return;
+    }
+    say(chalk.bold("Ask ACC. Blank line or Ctrl-D to exit."));
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    // Ctrl-D closes the input without settling the pending question(), which would
+    // hang the process on an invisible prompt. Racing the close event turns EOF
+    // into the same clean exit a blank line gives.
+    const closed = new Promise((resolve) => rl.once("close", () => resolve(null)));
+    let conversation = opts.conversation;
+    try {
+        for (;;) {
+            const answer = await Promise.race([rl.question(chalk.cyan("\n› ")), closed]);
+            const line = (answer ?? "").trim();
+            if (!line)
+                break;
+            const result = await streamTurn(line, { ...opts, conversation }, deps);
+            conversation = result.conversationId ?? conversation;
+        }
+    }
+    finally {
+        rl.close();
+    }
+}
+//# sourceMappingURL=chat.js.map

package/dist/user-cli/chat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat.js","sourceRoot":"","sources":["../../src/user-cli/chat.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,SAAS,EAAoB,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAYzC;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,MAAM,MAAM,GAAe,EAAE,CAAC;IAC9B,IAAI,IAAI,GAAG,MAAM,CAAC;IAClB,SAAS,CAAC;QACR,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,QAAQ,KAAK,CAAC,CAAC;YAAE,MAAM;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QACtC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;QAChC,IAAI,KAAK,GAAG,SAAS,CAAC;QACtB,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;iBACvD,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;gBAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACrC,IAAI,IAAI,GAAY,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,4DAA4D;QAC9D,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC1B,CAAC;AASD,SAAS,QAAQ,CAAC,IAAa;IAC7B,OAAO,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAgC,CAAC,CAAC,CAAC,EAAE,CAAC;AACnF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,OAAe,EACf,IAAiB,EACjB,OAA0D,EAAE;IAE5D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,MAAM,SAAS,CACzB,kBAAkB,EAClB,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,CAAC,YAAY,EAAE,EAAE,EACzD,IAAI,CACL,CAAC;IACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,yEAAyE;QACzE,yEAAyE;QACzE,6CAA6C;QAC7C,IAAI,MAAM,GAAG,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YACxC,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;gBAAE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,UAAU,GAAG,CAAC,MAAM,GAAG,CAAC;QACpF,CAAC;QAAC,MAAM,CAAC;YACP,iCAAiC;QACnC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,wBAAwB,MAAM,EAAE,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAEnE,IAAI,cAAc,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC;IAC/C,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,aAAa,GAAG,KAAK,CAAC;IAE1B,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,MAAM,GAAI,GAAG,CAAC,IAAmC,CAAC,SAAS,EAAE,CAAC;IACpE,SAAS,CAAC;QACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,IAAI;YAAE,MAAM;QAChB,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;QACtB,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YAC7C,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC/B,QAAQ,KAAK,EAAE,CAAC;gBACd,KAAK,cAAc;oBACjB,IAAI,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ;wBAAE,cAAc,GAAG,OAAO,CAAC,EAAE,CAAC;oBAChE,MAAM;gBACR,KAAK,OAAO,CAAC,CAAC,CAAC;oBACb,MAAM,KAAK,GAAG,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnE,IAAI,IAAI,KAAK,CAAC;oBACd,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;wBACf,KAAK,CAAC,KAAK,CAAC,CAAC;wBACb,aAAa,GAAG,aAAa,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;oBACpD,CAAC;oBACD,MAAM;gBACR,CAAC;gBACD,KAAK,WAAW;oBACd,IAAI,CAAC,IAAI,CAAC,IAAI;wBAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;oBAC5E,MAAM;gBACR,KAAK,QAAQ,CAAC;gBACd,KAAK,MAAM;oBACT,MAAM,GAAG,IAAI,CAAC;oBACd,MAAM;gBACR,KAAK,OAAO;oBACV,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,oBAAoB,CAAC,CAAC,CAAC;gBACnE,KAAK,MAAM;oBACT,IAAI,OAAO,OAAO,CAAC,eAAe,KAAK,QAAQ;wBAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC;oBAC1F,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI;wBAAE,MAAM,GAAG,IAAI,CAAC;oBAC3C,MAAM;gBACR;oBACE,MAAM;YACV,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,aAAa;QAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAE/B,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,eAAe,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAClF,CAAC;SAAM,IAAI,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC3B,GAAG,CACD,KAAK,CAAC,MAAM,CACV,oGAAoG,CACrG,CACF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1C,CAAC;AAED,mEAAmE;AACnE,KAAK,UAAU,SAAS;IACtB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK;QAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;AACvD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,KAAe,EACf,OAAoB,EAAE,EACtB,OAA0D,EAAE;IAE5D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAEtC,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YACxC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,OAAO,EAAE,wBAAwB,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;QAC3F,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QACzF,MAAM,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACpC,OAAO;IACT,CAAC;IAED,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC,CAAC;IAC1D,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,+EAA+E;IAC/E,4EAA4E;IAC5E,+CAA+C;IAC/C,MAAM,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrF,IAAI,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;IACrC,IAAI,CAAC;QACH,SAAS,CAAC;YACR,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;YAC7E,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,CAAC,IAAI;gBAAE,MAAM;YACjB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,YAAY,EAAE,EAAE,IAAI,CAAC,CAAC;YACvE,YAAY,GAAG,MAAM,CAAC,cAAc,IAAI,YAAY,CAAC;QACvD,CAAC;IACH,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC"}

package/dist/user-cli/client.d.ts

@@ -0,0 +1,20 @@
+/** Injectable so the command tests never touch a network or a keychain. */
+export interface UserApiDeps {
+    fetch?: typeof fetch;
+    now?: () => number;
+    log?: (line: string) => void;
+}
+/**
+ * A PostgREST client on the `acc` schema, authenticated as the signed-in human.
+ * Realtime is not configured: these commands are request/response, and pulling
+ * in the ws transport would make every `acc task list` pay for a socket it never
+ * opens.
+ */
+export declare function userClient(deps?: UserApiDeps): Promise<import("@supabase/supabase-js").SupabaseClient<any, "public", "acc", any, any>>;
+/** POST to an ACC API route as the signed-in human. Relative path, e.g. `/api/chat/stream`. */
+export declare function userFetch(path: string, init?: {
+    method?: string;
+    body?: unknown;
+    headers?: Record<string, string>;
+}, deps?: UserApiDeps): Promise<Response>;
+//# sourceMappingURL=client.d.ts.map

package/dist/user-cli/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/user-cli/client.ts"],"names":[],"mappings":"AA8BA,2EAA2E;AAC3E,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED;;;;;GAKG;AACH,wBAAsB,UAAU,CAAC,IAAI,GAAE,WAAgB,2FAWtD;AAED,+FAA+F;AAC/F,wBAAsB,SAAS,CAC7B,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAO,EAChF,IAAI,GAAE,WAAgB,GACrB,OAAO,CAAC,QAAQ,CAAC,CAenB"}

package/dist/user-cli/client.js

@@ -0,0 +1,60 @@
+/**
+ * The two seams every person-lane command talks to the control plane through.
+ *
+ * Both are built from the SAME credential the generalized device flow stored —
+ * the operator's own Supabase session — so a command run here sees exactly what
+ * that human sees in the browser, no more. There is no service-role path and no
+ * runner impersonation JWT anywhere in this lane:
+ *
+ *   * `userClient()` is a PostgREST client scoped to the `acc` schema and
+ *     carrying the user's access token, so RLS (acc.is_member, the repo-scoping
+ *     predicates) does the authorization. A command cannot read a task the
+ *     operator could not open in the UI.
+ *   * `userFetch()` is for the Vercel endpoints, which authenticate the same
+ *     bearer through requireUser.
+ *
+ * Both route through getUserAccessToken(), which refreshes-and-repersists when
+ * the access token is close to expiry and raises SignedOutError when the session
+ * was revoked — so a long-running `chat` session cannot half-expire mid-turn,
+ * and a revoked one fails with an instruction rather than a 401 body.
+ */
+import { createClient } from "@supabase/supabase-js";
+import { loadConfig } from "../config.js";
+import { signInCommand } from "../cli-name.js";
+import { cliUserAgent, getUserAccessToken, loadUserSession, SignedOutError, } from "../user-auth/session.js";
+/**
+ * A PostgREST client on the `acc` schema, authenticated as the signed-in human.
+ * Realtime is not configured: these commands are request/response, and pulling
+ * in the ws transport would make every `acc task list` pay for a socket it never
+ * opens.
+ */
+export async function userClient(deps = {}) {
+    const session = await loadUserSession();
+    if (!session) {
+        throw new SignedOutError(`Not signed in. Run \`${signInCommand()}\`.`);
+    }
+    const token = await getUserAccessToken(deps);
+    return createClient(session.supabase_url, session.anon_key, {
+        db: { schema: "acc" },
+        auth: { persistSession: false, autoRefreshToken: false, detectSessionInUrl: false },
+        global: { headers: { Authorization: `Bearer ${token}` } },
+    });
+}
+/** POST to an ACC API route as the signed-in human. Relative path, e.g. `/api/chat/stream`. */
+export async function userFetch(path, init = {}, deps = {}) {
+    const token = await getUserAccessToken(deps);
+    const doFetch = deps.fetch ?? fetch;
+    const base = loadConfig().publicUrl.replace(/\/+$/, "");
+    return doFetch(`${base}${path}`, {
+        method: init.method ?? "POST",
+        headers: {
+            "Content-Type": "application/json",
+            Accept: "text/event-stream",
+            Authorization: `Bearer ${token}`,
+            "User-Agent": cliUserAgent(),
+            ...(init.headers ?? {}),
+        },
+        body: init.body === undefined ? undefined : JSON.stringify(init.body),
+    });
+}
+//# sourceMappingURL=client.js.map

package/dist/user-cli/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/user-cli/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,eAAe,EACf,cAAc,GACf,MAAM,yBAAyB,CAAC;AASjC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAoB,EAAE;IACrD,MAAM,OAAO,GAAG,MAAM,eAAe,EAAE,CAAC;IACxC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,cAAc,CAAC,wBAAwB,aAAa,EAAE,KAAK,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC7C,OAAO,YAAY,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,QAAQ,EAAE;QAC1D,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;QACrB,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE;QACnF,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,EAAE;KAC1D,CAAC,CAAC;AACL,CAAC;AAED,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,IAAY,EACZ,OAA8E,EAAE,EAChF,OAAoB,EAAE;IAEtB,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;IACpC,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACxD,OAAO,OAAO,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,EAAE;QAC/B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,MAAM;QAC7B,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,MAAM,EAAE,mBAAmB;YAC3B,aAAa,EAAE,UAAU,KAAK,EAAE;YAChC,YAAY,EAAE,YAAY,EAAE;YAC5B,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;SACxB;QACD,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;KACtE,CAAC,CAAC;AACL,CAAC"}

package/dist/user-cli/tasks.d.ts

@@ -0,0 +1,37 @@
+import { type UserApiDeps } from "./client.js";
+export interface TaskListOptions {
+    status?: string;
+    repo?: string;
+    limit?: string | number;
+    json?: boolean;
+}
+interface TaskRow {
+    id: string;
+    title: string | null;
+    status: string | null;
+    priority: string | null;
+    risk: string | null;
+    repo: string | null;
+    branch: string | null;
+    pr_number: number | null;
+    agent_id: string | null;
+    runner_id: string | null;
+    updated_at: string | null;
+    [key: string]: unknown;
+}
+/** 1..100, defaulting to 25 — the same clamp the MCP read tools use. */
+export declare function clampLimit(raw: string | number | undefined, fallback?: number): number;
+/** Colour a status the way the board does: terminal states cool, active states warm. */
+export declare function statusColour(status: string | null): (s: string) => string;
+/**
+ * One task per line, padded to the widest id/status in THIS result set rather
+ * than to a fixed width — a board of short ids should not be indented for the
+ * sake of a long one that is not on screen.
+ */
+export declare function formatTaskRows(rows: TaskRow[]): string[];
+export declare function taskListCommand(opts?: TaskListOptions, deps?: UserApiDeps): Promise<void>;
+export declare function taskShowCommand(taskId: string, opts?: {
+    json?: boolean;
+}, deps?: UserApiDeps): Promise<void>;
+export {};
+//# sourceMappingURL=tasks.d.ts.map

package/dist/user-cli/tasks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tasks.d.ts","sourceRoot":"","sources":["../../src/user-cli/tasks.ts"],"names":[],"mappings":"AAWA,OAAO,EAAc,KAAK,WAAW,EAAE,MAAM,aAAa,CAAC;AAM3D,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,UAAU,OAAO;IACf,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,wEAAwE;AACxE,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,EAAE,QAAQ,SAAK,GAAG,MAAM,CAIlF;AAED,wFAAwF;AACxF,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,CAczE;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,EAAE,CASxD;AAED,wBAAsB,eAAe,CACnC,IAAI,GAAE,eAAoB,EAC1B,IAAI,GAAE,WAAgB,GACrB,OAAO,CAAC,IAAI,CAAC,CA0Bf;AAoBD,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,EACd,IAAI,GAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAO,EAC7B,IAAI,GAAE,WAAgB,GACrB,OAAO,CAAC,IAAI,CAAC,CA8Bf"}