npm - @vendoai/vendo - Versions diffs - 0.4.0 - Mend

@vendoai/vendo 0.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (212) hide show

package/LICENSE +202 -0
package/README.md +28 -0
package/bin/vendo.mjs +4 -0
package/dist/ai-sdk.d.ts +35 -0
package/dist/ai-sdk.js +62 -0
package/dist/auth-presets/auth-js.d.ts +14 -0
package/dist/auth-presets/auth-js.js +91 -0
package/dist/auth-presets/auth0.d.ts +23 -0
package/dist/auth-presets/auth0.js +98 -0
package/dist/auth-presets/clerk.d.ts +23 -0
package/dist/auth-presets/clerk.js +65 -0
package/dist/auth-presets/conformance.d.ts +42 -0
package/dist/auth-presets/conformance.js +139 -0
package/dist/auth-presets/identity.d.ts +56 -0
package/dist/auth-presets/identity.js +152 -0
package/dist/auth-presets/index.d.ts +14 -0
package/dist/auth-presets/index.js +12 -0
package/dist/auth-presets/jwt.d.ts +16 -0
package/dist/auth-presets/jwt.js +54 -0
package/dist/auth-presets/shared.d.ts +35 -0
package/dist/auth-presets/shared.js +1 -0
package/dist/auth-presets/supabase.d.ts +42 -0
package/dist/auth-presets/supabase.js +229 -0
package/dist/byo-approvals.d.ts +37 -0
package/dist/byo-approvals.js +189 -0
package/dist/capability-misses.d.ts +38 -0
package/dist/capability-misses.js +172 -0
package/dist/catalog.d.ts +19 -0
package/dist/catalog.js +152 -0
package/dist/cli/cloud/args.d.ts +3 -0
package/dist/cli/cloud/args.js +32 -0
package/dist/cli/cloud/auth.d.ts +17 -0
package/dist/cli/cloud/auth.js +123 -0
package/dist/cli/cloud/client.d.ts +28 -0
package/dist/cli/cloud/client.js +133 -0
package/dist/cli/cloud/command.d.ts +22 -0
package/dist/cli/cloud/command.js +73 -0
package/dist/cli/cloud/deploy.d.ts +26 -0
package/dist/cli/cloud/deploy.js +187 -0
package/dist/cli/cloud/device-login.d.ts +32 -0
package/dist/cli/cloud/device-login.js +259 -0
package/dist/cli/cloud/index.d.ts +5 -0
package/dist/cli/cloud/index.js +59 -0
package/dist/cli/cloud/keys.d.ts +2 -0
package/dist/cli/cloud/keys.js +31 -0
package/dist/cli/cloud/members.d.ts +3 -0
package/dist/cli/cloud/members.js +25 -0
package/dist/cli/cloud/output.d.ts +4 -0
package/dist/cli/cloud/output.js +12 -0
package/dist/cli/cloud/pending-claim.d.ts +29 -0
package/dist/cli/cloud/pending-claim.js +38 -0
package/dist/cli/cloud/read.d.ts +3 -0
package/dist/cli/cloud/read.js +12 -0
package/dist/cli/cloud/services.d.ts +2 -0
package/dist/cli/cloud/services.js +9 -0
package/dist/cli/cloud/session.d.ts +13 -0
package/dist/cli/cloud/session.js +41 -0
package/dist/cli/cloud-init.d.ts +60 -0
package/dist/cli/cloud-init.js +149 -0
package/dist/cli/dep-versions.d.ts +26 -0
package/dist/cli/dep-versions.js +77 -0
package/dist/cli/doctor-codes.d.ts +58 -0
package/dist/cli/doctor-codes.js +60 -0
package/dist/cli/doctor-live.d.ts +67 -0
package/dist/cli/doctor-live.js +169 -0
package/dist/cli/doctor.d.ts +52 -0
package/dist/cli/doctor.js +467 -0
package/dist/cli/eject.d.ts +29 -0
package/dist/cli/eject.js +141 -0
package/dist/cli/extract/apply.d.ts +26 -0
package/dist/cli/extract/apply.js +123 -0
package/dist/cli/extract/claude-cli-harness.d.ts +18 -0
package/dist/cli/extract/claude-cli-harness.js +132 -0
package/dist/cli/extract/claude-harness.d.ts +14 -0
package/dist/cli/extract/claude-harness.js +127 -0
package/dist/cli/extract/codex-cli-harness.d.ts +31 -0
package/dist/cli/extract/codex-cli-harness.js +154 -0
package/dist/cli/extract/delegate.d.ts +21 -0
package/dist/cli/extract/delegate.js +77 -0
package/dist/cli/extract/extraction.d.ts +65 -0
package/dist/cli/extract/extraction.js +300 -0
package/dist/cli/extract/gateway-fuel.d.ts +69 -0
package/dist/cli/extract/gateway-fuel.js +69 -0
package/dist/cli/extract/harness.d.ts +114 -0
package/dist/cli/extract/harness.js +84 -0
package/dist/cli/extract/index.d.ts +9 -0
package/dist/cli/extract/index.js +9 -0
package/dist/cli/extract/npx-engine-harness.d.ts +73 -0
package/dist/cli/extract/npx-engine-harness.js +225 -0
package/dist/cli/extract/stages.d.ts +149 -0
package/dist/cli/extract/stages.js +398 -0
package/dist/cli/framework.d.ts +8 -0
package/dist/cli/framework.js +36 -0
package/dist/cli/init-auth.d.ts +67 -0
package/dist/cli/init-auth.js +142 -0
package/dist/cli/init-scaffolds.d.ts +28 -0
package/dist/cli/init-scaffolds.js +235 -0
package/dist/cli/init.d.ts +115 -0
package/dist/cli/init.js +1008 -0
package/dist/cli/mcp/index.d.ts +7 -0
package/dist/cli/mcp/index.js +59 -0
package/dist/cli/mcp/registry.d.ts +9 -0
package/dist/cli/mcp/registry.js +117 -0
package/dist/cli/mcp/server-json.d.ts +12 -0
package/dist/cli/mcp/server-json.js +65 -0
package/dist/cli/mcp/server.schema.json +574 -0
package/dist/cli/mcp/verify-domain.d.ts +11 -0
package/dist/cli/mcp/verify-domain.js +48 -0
package/dist/cli/playground/app/embed-entry.d.ts +20 -0
package/dist/cli/playground/app/embed-entry.js +46 -0
package/dist/cli/playground/app/fake-client.d.ts +3 -0
package/dist/cli/playground/app/fake-client.js +215 -0
package/dist/cli/playground/app/fixtures.d.ts +47 -0
package/dist/cli/playground/app/fixtures.js +472 -0
package/dist/cli/playground/app/main.d.ts +1 -0
package/dist/cli/playground/app/main.js +108 -0
package/dist/cli/playground/app/scenario-mount.d.ts +13 -0
package/dist/cli/playground/app/scenario-mount.js +48 -0
package/dist/cli/playground/app/scenarios.d.ts +25 -0
package/dist/cli/playground/app/scenarios.js +152 -0
package/dist/cli/playground/app/theme-editor.d.ts +13 -0
package/dist/cli/playground/app/theme-editor.js +149 -0
package/dist/cli/playground/app/theme-state.d.ts +29 -0
package/dist/cli/playground/app/theme-state.js +151 -0
package/dist/cli/playground/bundle.gen.d.ts +2 -0
package/dist/cli/playground/bundle.gen.js +2 -0
package/dist/cli/playground/embed-bundle.gen.d.ts +2 -0
package/dist/cli/playground/embed-bundle.gen.js +2 -0
package/dist/cli/playground.d.ts +33 -0
package/dist/cli/playground.js +120 -0
package/dist/cli/pretty.d.ts +48 -0
package/dist/cli/pretty.js +330 -0
package/dist/cli/refine.d.ts +43 -0
package/dist/cli/refine.js +181 -0
package/dist/cli/semantics.d.ts +31 -0
package/dist/cli/semantics.js +122 -0
package/dist/cli/shared.d.ts +68 -0
package/dist/cli/shared.js +184 -0
package/dist/cli/sync.d.ts +36 -0
package/dist/cli/sync.js +202 -0
package/dist/cli/theme/color.d.ts +15 -0
package/dist/cli/theme/color.js +188 -0
package/dist/cli/theme/css-vars.d.ts +13 -0
package/dist/cli/theme/css-vars.js +40 -0
package/dist/cli/theme/entry-candidates.d.ts +5 -0
package/dist/cli/theme/entry-candidates.js +22 -0
package/dist/cli/theme/extract-theme.d.ts +184 -0
package/dist/cli/theme/extract-theme.js +358 -0
package/dist/cli/theme/walk.d.ts +2 -0
package/dist/cli/theme/walk.js +24 -0
package/dist/cli.d.ts +2 -0
package/dist/cli.js +333 -0
package/dist/cloud-apps.d.ts +17 -0
package/dist/cloud-apps.js +46 -0
package/dist/cloud-console.d.ts +32 -0
package/dist/cloud-console.js +72 -0
package/dist/cloud-tools.d.ts +23 -0
package/dist/cloud-tools.js +196 -0
package/dist/connections.d.ts +71 -0
package/dist/connections.js +192 -0
package/dist/deployment-identity.d.ts +12 -0
package/dist/deployment-identity.js +69 -0
package/dist/dev-creds/model.d.ts +65 -0
package/dist/dev-creds/model.js +159 -0
package/dist/dev-creds/resolve.d.ts +36 -0
package/dist/dev-creds/resolve.js +57 -0
package/dist/hosted-store.d.ts +52 -0
package/dist/hosted-store.js +322 -0
package/dist/index.d.ts +13 -0
package/dist/index.js +1 -0
package/dist/mastra.d.ts +46 -0
package/dist/mastra.js +88 -0
package/dist/react.d.ts +10 -0
package/dist/react.js +32 -0
package/dist/refine.d.ts +244 -0
package/dist/refine.js +599 -0
package/dist/remixable.d.ts +18 -0
package/dist/remixable.js +42 -0
package/dist/runtime-capture.d.ts +18 -0
package/dist/runtime-capture.js +111 -0
package/dist/sandbox-wire.d.ts +101 -0
package/dist/sandbox-wire.js +101 -0
package/dist/sandbox.d.ts +38 -0
package/dist/sandbox.js +389 -0
package/dist/server.d.ts +216 -0
package/dist/server.js +1320 -0
package/dist/sync-impact.d.ts +14 -0
package/dist/sync-impact.js +75 -0
package/dist/turn-liveness.d.ts +33 -0
package/dist/turn-liveness.js +105 -0
package/dist/wire/approvals.d.ts +10 -0
package/dist/wire/approvals.js +59 -0
package/dist/wire/apps.d.ts +5 -0
package/dist/wire/apps.js +155 -0
package/dist/wire/automations.d.ts +5 -0
package/dist/wire/automations.js +57 -0
package/dist/wire/box.d.ts +3 -0
package/dist/wire/box.js +268 -0
package/dist/wire/connections.d.ts +5 -0
package/dist/wire/connections.js +47 -0
package/dist/wire/context.d.ts +22 -0
package/dist/wire/context.js +190 -0
package/dist/wire/doctor.d.ts +19 -0
package/dist/wire/doctor.js +116 -0
package/dist/wire/misc.d.ts +18 -0
package/dist/wire/misc.js +227 -0
package/dist/wire/shared.d.ts +158 -0
package/dist/wire/shared.js +134 -0
package/dist/wire/threads.d.ts +3 -0
package/dist/wire/threads.js +68 -0
package/package.json +151 -0
package/skills/vendo-setup/SKILL.md +128 -0

package/dist/cli/playground.d.ts ADDED Viewed

@@ -0,0 +1,33 @@
+import { type Output, type TelemetryOptions } from "./shared.js";
+/**
+ * `vendo playground` — a local page rendering every shipped Vendo surface
+ * against scripted (director-mode) data: no model key, no database, no host
+ * app. install-dx design §8; the page itself ships in ./playground/.
+ */
+export interface PlaygroundServer {
+    url: string;
+    close(): Promise<void>;
+}
+export declare function startPlaygroundServer(options: {
+    port?: number;
+}): Promise<PlaygroundServer>;
+export interface PlaygroundOptions {
+    port?: number;
+    /** When false (`--no-open`), print the URL without launching the browser. */
+    open?: boolean;
+    output?: Output;
+    /** Test seams. */
+    openBrowser?: (url: string) => void;
+    /** When false, return right after startup instead of blocking until Ctrl+C. */
+    wait?: boolean;
+    /** Injectable telemetry deps (matches init/doctor). */
+    telemetry?: TelemetryOptions;
+}
+/** Windows' `start` is a cmd built-in, not an executable — execFile can only
+ *  reach it through `cmd /c start "" <url>` (the empty string is the window
+ *  title, so a URL is never mistaken for one). */
+export declare function browserOpenCommand(platform: NodeJS.Platform, url: string): {
+    command: string;
+    args: string[];
+};
+export declare function runPlayground(options?: PlaygroundOptions): Promise<number>;

package/dist/cli/playground.js ADDED Viewed

@@ -0,0 +1,120 @@
+import { execFile } from "node:child_process";
+import { createServer } from "node:http";
+import { PLAYGROUND_BUNDLE_SOURCE } from "./playground/bundle.gen.js";
+import { EMBED_BUNDLE_SOURCE } from "./playground/embed-bundle.gen.js";
+import { consoleOutput, withCommandRun } from "./shared.js";
+function pageHtml() {
+    // Cache-busting is belt and braces: no-store headers do the real work, and
+    // the length-keyed ?v= keeps even a heuristically-cached HTML copy from
+    // pairing with a mismatched bundle after most rebuilds.
+    return `<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8" />
+<meta name="viewport" content="width=device-width, initial-scale=1" />
+<title>Vendo Playground</title>
+</head>
+<body>
+<div id="root"></div>
+<script src="/playground.js?v=${PLAYGROUND_BUNDLE_SOURCE.length.toString(36)}"></script>
+</body>
+</html>
+`;
+}
+export async function startPlaygroundServer(options) {
+    const server = createServer((request, response) => {
+        if (request.method !== "GET") {
+            response.writeHead(405).end();
+            return;
+        }
+        const path = new URL(request.url ?? "/", "http://localhost").pathname;
+        if (path === "/playground.js") {
+            response.writeHead(200, { "content-type": "application/javascript; charset=utf-8", "cache-control": "no-store" });
+            response.end(PLAYGROUND_BUNDLE_SOURCE);
+            return;
+        }
+        // The docs inline-embed bundle (window.VendoDocsEmbed) — served here so
+        // self-hosted docs/pages can mount surfaces without vendo.run. CORS-open:
+        // it's a public static script by design.
+        if (path === "/embed.js") {
+            response.writeHead(200, {
+                "content-type": "application/javascript; charset=utf-8",
+                "cache-control": "no-store",
+                "access-control-allow-origin": "*",
+            });
+            response.end(EMBED_BUNDLE_SOURCE);
+            return;
+        }
+        if (path === "/favicon.ico") {
+            response.writeHead(204).end();
+            return;
+        }
+        if (path !== "/" && path !== "/index.html") {
+            response.writeHead(404, { "content-type": "text/plain" }).end("Not found");
+            return;
+        }
+        response.writeHead(200, { "content-type": "text/html; charset=utf-8", "cache-control": "no-store" });
+        response.end(pageHtml());
+    });
+    await new Promise((resolve, reject) => {
+        server.once("error", reject);
+        server.listen(options.port ?? 0, "127.0.0.1", () => {
+            // Detach the bind-failure handler so a later runtime error is not
+            // swallowed by rejecting an already-settled promise.
+            server.removeListener("error", reject);
+            resolve();
+        });
+    });
+    const { port } = server.address();
+    return {
+        url: `http://127.0.0.1:${port}`,
+        close: () => new Promise((resolve, reject) => {
+            server.closeAllConnections();
+            server.close((error) => (error ? reject(error) : resolve()));
+        }),
+    };
+}
+/** Windows' `start` is a cmd built-in, not an executable — execFile can only
+ *  reach it through `cmd /c start "" <url>` (the empty string is the window
+ *  title, so a URL is never mistaken for one). */
+export function browserOpenCommand(platform, url) {
+    if (platform === "darwin")
+        return { command: "open", args: [url] };
+    if (platform === "win32")
+        return { command: "cmd", args: ["/c", "start", "", url] };
+    return { command: "xdg-open", args: [url] };
+}
+function defaultOpenBrowser(url) {
+    const { command, args } = browserOpenCommand(process.platform, url);
+    execFile(command, args, () => undefined);
+}
+export async function runPlayground(options = {}) {
+    const output = options.output ?? consoleOutput;
+    return withCommandRun({
+        command: "playground",
+        ...(options.telemetry === undefined ? {} : { telemetry: options.telemetry }),
+    }, (failure) => playground(options, output, failure));
+}
+async function playground(options, output, failure) {
+    let server;
+    try {
+        server = await startPlaygroundServer({ port: options.port });
+    }
+    catch (error) {
+        const detail = error instanceof Error ? error.message : "unknown error";
+        failure.failedStep = "listen";
+        output.error(`vendo playground: could not listen on port ${options.port ?? 0} (${detail}) — pass a different --port`);
+        return 1;
+    }
+    output.log(`Vendo playground running at ${server.url}`);
+    output.log("Every surface, scripted data, no model key. Press Ctrl+C to stop.");
+    if (options.open !== false)
+        (options.openBrowser ?? defaultOpenBrowser)(server.url);
+    if (options.wait === false) {
+        await server.close();
+        return 0;
+    }
+    await new Promise((resolve) => process.once("SIGINT", resolve));
+    await server.close();
+    return 0;
+}

package/dist/cli/pretty.d.ts ADDED Viewed

@@ -0,0 +1,48 @@
+import type { Output } from "./shared.js";
+/** TTY + no opt-outs → the pretty renderer; anything else keeps plain output.
+    NO_COLOR and CI follow the "present and non-empty" convention. */
+export declare function usePrettyOutput(stream?: {
+    isTTY?: boolean;
+}, env?: Record<string, string | undefined>): boolean;
+export interface SelectOption {
+    value: string;
+    label: string;
+    /** Dim parenthetical after the label (e.g. what detection found). */
+    hint?: string;
+}
+/** The slice of a readable TTY stream the select loop needs (injectable for
+    tests — a plain emitter drives the keypress parser without a PTY). */
+export interface SelectInput {
+    isTTY?: boolean;
+    setRawMode?(mode: boolean): unknown;
+    resume?(): unknown;
+    pause?(): unknown;
+    on(event: "data", listener: (chunk: Buffer | string) => void): unknown;
+    off(event: "data", listener: (chunk: Buffer | string) => void): unknown;
+}
+export interface PrettyOutput extends Output {
+    /** Dots spinner for a slow phase; any log/error line clears the frame. */
+    spin(label: string): void;
+    stopSpin(): void;
+    /** The styled [Y/n] confirm — Enter accepts the default, answer echoed. */
+    confirm(question: string, defaultYes?: boolean): Promise<boolean>;
+    /** The styled select — arrows move, Enter accepts, number keys pick
+        directly; collapses to the chosen answer. Number keys cover options
+        1-9 only: keep lists at nine options or fewer (a longer list stays
+        arrow-navigable, but two-digit entry is deliberately not built). */
+    select(question: string, options: SelectOption[], defaultIndex?: number): Promise<string>;
+    /** The `└ Done in Xs` footer (red `Failed` when init exits non-zero). */
+    done(durationMs: number, ok: boolean): void;
+}
+/** The plain-terminal select for non-pretty interactive runs: numbered list +
+    readline. Non-TTY runs never prompt — the default option stands; an
+    empty, garbage, or out-of-range answer also settles on the default.
+    Streams are injectable for tests only; call sites use the defaults. */
+export declare function plainSelect(question: string, options: SelectOption[], defaultIndex?: number, input?: NodeJS.ReadableStream & {
+    isTTY?: boolean;
+}, output?: NodeJS.WritableStream & {
+    isTTY?: boolean;
+}): Promise<string>;
+export declare function createPrettyOutput(write?: (chunk: string) => void, input?: SelectInput, promptOutput?: NodeJS.WritableStream & {
+    isTTY?: boolean;
+}): PrettyOutput;

package/dist/cli/pretty.js ADDED Viewed

@@ -0,0 +1,330 @@
+import { stdin, stdout } from "node:process";
+import { createInterface } from "node:readline/promises";
+/**
+ * The vendo CLI's TTY visual system (init first; doctor/sync can adopt the
+ * same primitives later). Clack-style vertical-bar layout: one `┌ vendo init`
+ * header, `◇`/`◆` section markers on a dim `│` rail, colored diff markers,
+ * a dots spinner for the slow phases, and ONE deliberately emphasized block —
+ * Vendo Cloud — in the brand accent (blue/cyan family, calm not neon).
+ *
+ * Degradation contract: this module is only selected when stdout is a real
+ * TTY and none of NO_COLOR / CI / TERM=dumb opt out (see usePrettyOutput).
+ * Every other run — tests, pipes, CI — keeps today's exact plain strings,
+ * because runInit's emissions are unchanged: this is a renderer over the
+ * existing Output seam, not a second copy of the copy.
+ */
+const ESC = "\u001b";
+const style = (open, close) => (text) => `${ESC}[${open}m${text}${ESC}[${close}m`;
+const bold = style("1", "22");
+const dim = style("2", "22");
+const red = style("31", "39");
+const green = style("32", "39");
+const yellow = style("33", "39");
+const blue = style("34", "39");
+const cyan = style("36", "39");
+const brightCyan = style("96", "39");
+/** TTY + no opt-outs → the pretty renderer; anything else keeps plain output.
+    NO_COLOR and CI follow the "present and non-empty" convention. */
+export function usePrettyOutput(stream = stdout, env = process.env) {
+    if (stream.isTTY !== true)
+        return false;
+    if ((env.NO_COLOR ?? "") !== "")
+        return false;
+    if ((env.CI ?? "") !== "")
+        return false;
+    if (env.TERM === "dumb")
+        return false;
+    return true;
+}
+const FRAMES = ["⠋", "⠙", "⠹", "⠸", "⠼", "⠴", "⠦", "⠧", "⠇", "⠏"];
+const BAR = dim("│");
+const CLEAR_LINE = `\r${ESC}[2K`;
+/** Inline `code spans` in the calm command color. */
+function styleInline(text) {
+    return text.replace(/`([^`]+)`/g, (_match, code) => bold(cyan(code)));
+}
+/** The plain-terminal select for non-pretty interactive runs: numbered list +
+    readline. Non-TTY runs never prompt — the default option stands; an
+    empty, garbage, or out-of-range answer also settles on the default.
+    Streams are injectable for tests only; call sites use the defaults. */
+export async function plainSelect(question, options, defaultIndex = 0, input = stdin, output = stdout) {
+    const fallback = (options[defaultIndex] ?? options[0]).value;
+    if (input.isTTY !== true || output.isTTY !== true)
+        return fallback;
+    output.write(`${question}\n`);
+    options.forEach((option, index) => {
+        output.write(`  ${index + 1}. ${option.label}${option.hint === undefined ? "" : ` (${option.hint})`}\n`);
+    });
+    const prompt = createInterface({ input, output });
+    try {
+        const answer = (await prompt.question(`Choose [${defaultIndex + 1}]: `)).trim();
+        const number = /^\d+$/.test(answer) ? Number(answer) : NaN;
+        if (Number.isInteger(number) && number >= 1 && number <= options.length) {
+            return options[number - 1].value;
+        }
+        return fallback;
+    }
+    finally {
+        prompt.close();
+    }
+}
+export function createPrettyOutput(write = (chunk) => { stdout.write(chunk); }, input = stdin, promptOutput = stdout) {
+    let headerPrinted = false;
+    let lastWasBar = false;
+    let timer = null;
+    let frame = 0;
+    const line = (text) => {
+        write(`${text}\n`);
+        lastWasBar = text === BAR;
+    };
+    const bar = () => {
+        if (!lastWasBar)
+            line(BAR);
+    };
+    const ensureHeader = () => {
+        if (headerPrinted)
+            return;
+        headerPrinted = true;
+        line(`${dim("┌")}  ${bold("vendo init")}`);
+        line(BAR);
+    };
+    const body = (text) => line(`${BAR}  ${styleInline(text)}`);
+    const section = (marker, title) => {
+        bar();
+        line(`${marker}  ${title}`);
+    };
+    const clearFrame = () => {
+        if (timer !== null)
+            write(CLEAR_LINE);
+    };
+    const stopSpin = () => {
+        if (timer === null)
+            return;
+        clearInterval(timer);
+        timer = null;
+        write(CLEAR_LINE);
+    };
+    /** The emphasized block: brand-blue header + ✦ bullets. */
+    const cloudHeader = () => section(blue("◆"), bold(blue("Vendo Cloud")));
+    const cloudBullet = (text) => body(`${blue("✦")} ${blue(text)}`);
+    const render = (raw) => {
+        if (raw === "") {
+            bar();
+            return;
+        }
+        const wired = raw.match(/^(Wired \(\d+ files?\)):$/);
+        if (wired !== null) {
+            section(cyan("◆"), bold(wired[1]));
+            return;
+        }
+        if (raw === "Already wired — nothing to change.") {
+            section(cyan("◇"), `${bold("Already wired")} — nothing to change`);
+            return;
+        }
+        const marker = raw.match(/^ {2}([+~]) (.+)$/);
+        if (marker !== null) {
+            body(`${marker[1] === "+" ? green("+") : yellow("~")} ${dim(cyan(marker[2]))}`);
+            return;
+        }
+        const theme = raw.match(/^Theme: (.*)$/);
+        if (theme !== null) {
+            section(cyan("◇"), bold("Theme captured"));
+            body(theme[1]);
+            return;
+        }
+        if (raw.startsWith("Theme lives in ")) {
+            body(dim(raw));
+            return;
+        }
+        const cloudAbsent = raw.match(/^Vendo Cloud \(optional\): not configured\. A key unlocks (.+)\.$/);
+        if (cloudAbsent !== null) {
+            cloudHeader();
+            for (const bullet of cloudAbsent[1].split("; "))
+                cloudBullet(bullet);
+            return;
+        }
+        const cloud = raw.match(/^Vendo Cloud: (.+)$/);
+        if (cloud !== null) {
+            cloudHeader();
+            cloudBullet(cloud[1]);
+            return;
+        }
+        if (/`?vendo (cloud )?login`?/.test(raw)) {
+            // The CTA: bright, factual, pointing at the free dev-mode key.
+            body(`${bold(brightCyan("→"))} ${raw.replace(/`?vendo (cloud )?login`?/g, (m) => bold(brightCyan(m.replaceAll("`", ""))))}`);
+            return;
+        }
+        if (raw === "Last steps are yours:") {
+            section(cyan("◇"), bold("Last steps are yours"));
+            return;
+        }
+        // Generic indented detail (paste steps, progress lines): the plain
+        // two-space indent becomes the rail; deeper nesting is preserved.
+        const indented = raw.match(/^ {2}(.*)$/);
+        if (indented !== null) {
+            body(indented[1]);
+            return;
+        }
+        body(raw);
+    };
+    return {
+        log(message) {
+            clearFrame();
+            ensureHeader();
+            if (message.startsWith("\n"))
+                bar();
+            for (const raw of message.replace(/^\n+/, "").split("\n"))
+                render(raw);
+        },
+        error(message) {
+            clearFrame();
+            ensureHeader();
+            if (message.startsWith("\n"))
+                bar();
+            for (const raw of message.replace(/^\n+/, "").split("\n")) {
+                const warning = raw.match(/^\s*warning: (.*)$/);
+                if (warning !== null)
+                    body(yellow(`⚠ ${warning[1]}`));
+                else if (raw.startsWith("Vendo Cloud: ")) {
+                    cloudHeader();
+                    body(yellow(`⚠ ${raw.slice("Vendo Cloud: ".length)}`));
+                }
+                else
+                    body(red(`✖ ${raw}`));
+            }
+        },
+        spin(label) {
+            stopSpin();
+            ensureHeader();
+            const draw = () => {
+                frame = (frame + 1) % FRAMES.length;
+                write(`${CLEAR_LINE}${cyan(FRAMES[frame])}  ${dim(label)}`);
+            };
+            timer = setInterval(draw, 80);
+            timer.unref?.();
+            draw();
+        },
+        stopSpin,
+        async confirm(question, defaultYes = false) {
+            // usePrettyOutput gates on stdout only; a piped/closed stdin can still
+            // reach here (vendo init < file). Never block readline on a non-TTY —
+            // the default stands, mirroring the plain askYesNo guard.
+            if (input.isTTY !== true)
+                return defaultYes;
+            stopSpin();
+            ensureHeader();
+            section(cyan("◇"), bold(question));
+            // SelectInput is the raw-key slice of the same real stream readline
+            // needs; the default (stdin) satisfies both.
+            const prompt = createInterface({
+                input: input,
+                output: promptOutput,
+            });
+            try {
+                const answer = (await prompt.question(`${BAR}  ${dim(defaultYes ? "Y/n" : "y/N")} ${dim("›")} `)).trim().toLowerCase();
+                const accepted = answer === "" ? defaultYes : ["y", "yes"].includes(answer);
+                line(`${BAR}  ${cyan("●")} ${accepted ? "Yes" : "No"}`);
+                return accepted;
+            }
+            finally {
+                prompt.close();
+            }
+        },
+        async select(question, options, defaultIndex = 0) {
+            // Same stdin guard as confirm: no keypress source → the default option.
+            if (input.isTTY !== true)
+                return (options[defaultIndex] ?? options[0]).value;
+            stopSpin();
+            ensureHeader();
+            section(cyan("◇"), bold(question));
+            let index = defaultIndex;
+            const optionLine = (option, at) => {
+                const marker = at === index ? cyan("●") : dim("○");
+                const label = at === index ? option.label : dim(option.label);
+                const hint = option.hint === undefined ? "" : ` ${dim(`(${option.hint})`)}`;
+                return `${BAR}  ${marker} ${label}${hint}`;
+            };
+            for (const [at, option] of options.entries())
+                line(optionLine(option, at));
+            const redraw = () => {
+                write(`${ESC}[${options.length}A`);
+                for (const [at, option] of options.entries())
+                    write(`${ESC}[2K${optionLine(option, at)}\n`);
+            };
+            const chosen = await new Promise((resolveChoice) => {
+                const cleanup = () => {
+                    input.off("data", onData);
+                    input.setRawMode?.(false);
+                    input.pause?.();
+                };
+                // Raw input arrives as arbitrary chunks - a paste ("2\r"), fast
+                // typing, or an escape sequence split across reads. Buffer and
+                // consume COMPLETE key sequences, handling several keys per chunk;
+                // an incomplete escape sequence waits for the next chunk.
+                let pending = "";
+                const move = (delta) => {
+                    index = (index + options.length + delta) % options.length;
+                    redraw();
+                };
+                const onData = (chunk) => {
+                    pending += String(chunk);
+                    while (pending.length > 0) {
+                        // A full CSI (ESC [ ... final byte) or SS3 (ESC O A-D) sequence.
+                        const sequence = /^\u001b(?:\[[0-9;]*[@-~]|O[A-D])/.exec(pending)?.[0];
+                        if (sequence !== undefined) {
+                            pending = pending.slice(sequence.length);
+                            const final = sequence[sequence.length - 1];
+                            if (final === "A" || final === "D")
+                                move(-1);
+                            else if (final === "B" || final === "C")
+                                move(1);
+                            continue;
+                        }
+                        if (pending.startsWith(ESC)) {
+                            // A prefix of a sequence still in flight waits for more bytes;
+                            // any other escape is dropped.
+                            if (/^\u001b(?:\[[0-9;]*|O)?$/.test(pending))
+                                return;
+                            pending = pending.slice(1);
+                            continue;
+                        }
+                        const key = pending[0];
+                        pending = pending.slice(1);
+                        if (key === "\u0003") { // Ctrl+C
+                            cleanup();
+                            write("\n");
+                            process.exit(130);
+                        }
+                        if (key === "\r" || key === "\n") {
+                            cleanup();
+                            resolveChoice(index);
+                            return;
+                        }
+                        // Number keys pick directly (the arrows-free fallback).
+                        if (/^[1-9]$/.test(key) && Number(key) <= options.length) {
+                            index = Number(key) - 1;
+                            cleanup();
+                            resolveChoice(index);
+                            return;
+                        }
+                        // Other printable bytes are ignored.
+                    }
+                };
+                input.setRawMode?.(true);
+                input.resume?.();
+                input.on("data", onData);
+            });
+            // Collapse the option list to the chosen answer.
+            write(`${ESC}[${options.length}A${ESC}[0J`);
+            line(`${BAR}  ${cyan("●")} ${options[chosen].label}`);
+            return options[chosen].value;
+        },
+        done(durationMs, ok) {
+            stopSpin();
+            ensureHeader();
+            bar();
+            const seconds = `${(durationMs / 1000).toFixed(1)}s`;
+            line(`${dim("└")}  ${ok ? green(`Done in ${seconds}`) : red(`Failed after ${seconds}`)}`);
+        },
+    };
+}

package/dist/cli/refine.d.ts ADDED Viewed

@@ -0,0 +1,43 @@
+import type { LanguageModel } from "ai";
+import { type DevModelOptions } from "../dev-creds/model.js";
+import { type Output, type TelemetryOptions } from "./shared.js";
+/**
+ * `vendo refine` — the CLI surface of the refine engine (ENG-250). Extraction
+ * stays a build step (sync); refine is explicitly a COMMAND: it proposes
+ * agent-layer artifacts as reviewable diffs and applies them only on approval.
+ */
+export interface RefineCommandOptions {
+    targetDir: string;
+    url?: string;
+    modelImport?: string;
+    /** Non-interactive interview answers (`--ask`, repeatable). */
+    asks?: string[];
+    /** Approve every displayed diff without prompting. */
+    yes?: boolean;
+    output?: Output;
+    fetchImpl?: typeof fetch;
+    /** Test seam: skip model resolution. */
+    model?: LanguageModel;
+    confirm?: (change: {
+        path: string;
+        diff: string;
+    }) => Promise<boolean>;
+    interview?: (questions: string[]) => Promise<string[]>;
+    env?: Record<string, string | undefined>;
+    /** Injectable telemetry deps (matches init/doctor). */
+    telemetry?: TelemetryOptions;
+}
+/** BYO key through the existing provider-agnostic seam: `--model-import` loads
+ * the host's own ai-SDK model module; otherwise the shared dev-credential
+ * ladder composes (the same resolver init, doctor, and createVendo ride):
+ * provider env keys first, then VENDO_API_KEY via the Cloud model gateway.
+ * Resolved EAGERLY so a credential problem fails here, with instructions,
+ * instead of mid-run. */
+export declare function resolveRefineModel(options: {
+    root: string;
+    modelImport?: string;
+    env: Record<string, string | undefined>;
+    /** Test seam for host-module resolution (mirrors DevModelOptions). */
+    importModule?: DevModelOptions["importModule"];
+}): Promise<LanguageModel>;
+export declare function runRefineCommand(options: RefineCommandOptions): Promise<number>;