@wirecat/cli-core 0.20.0 → 0.263.0

package/dist/replies/template.js

@@ -0,0 +1,167 @@
+import { CliError } from "@wirecat/cli-base";
+import { Context, Liquid, Tag, } from "liquidjs";
+export const TEMPLATE_LIMITS = {
+    parse: 32_768,
+    renders: 2_000,
+    memory: 65_536,
+    milliseconds: 100,
+    output: 4_096,
+    aiOutput: 1_024,
+    calls: 4,
+};
+export const renderReplyTemplate = async (reply, input) => {
+    const limits = { ...TEMPLATE_LIMITS, ...input.limits };
+    const blocks = [];
+    const warnings = [];
+    let source = reply.template;
+    const legacy = /(?<!\{)\{(firstName|name)\}(?!\})/g;
+    if (legacy.test(source)) {
+        warnings.push("legacy reply placeholders: use {{ sender.firstName }} and {{ sender.name }}");
+        source = source.replace(legacy, (_, name) => `{{ sender.${name} }}`);
+    }
+    if (reply.model === "may-reword") {
+        warnings.push("legacy may-reword: use an ai block with an explicit fallback");
+        if (!/\{%[-]?\s*ai\b/.test(source))
+            source = `{% ai %}${source}{% else %}${source}{% endai %}`;
+    }
+    let missing;
+    let calls = 0;
+    let paused = 0;
+    let parsingAI = false;
+    try {
+        const zone = input.timezone ?? "UTC";
+        const parts = Object.fromEntries(new Intl.DateTimeFormat("en-CA", {
+            timeZone: zone,
+            year: "numeric",
+            month: "2-digit",
+            day: "2-digit",
+            hour: "2-digit",
+            minute: "2-digit",
+            second: "2-digit",
+            timeZoneName: "longOffset",
+            hourCycle: "h23",
+        })
+            .formatToParts(input.now)
+            .map(({ type, value }) => [type, value]));
+        const localTime = `${parts.year}-${parts.month}-${parts.day}T${parts.hour}:${parts.minute}:${parts.second}${parts.timeZoneName?.replace("GMT", "") || "+00:00"}`;
+        const engine = new Liquid({
+            ownPropertyOnly: true,
+            strictVariables: true,
+            strictFilters: true,
+            lenientIf: false,
+            parseLimit: limits.parse,
+            renderLimit: limits.milliseconds,
+            memoryLimit: limits.memory,
+            preserveTimezones: true,
+        });
+        for (const name of ["include", "render", "layout"]) {
+            engine.registerTag(name, class extends Tag {
+                constructor(token, tokens, liquid) {
+                    super(token, tokens, liquid);
+                    throw new Error("reply templates cannot read files");
+                }
+                render() {
+                    return "";
+                }
+            });
+        }
+        engine.registerTag("ai", class extends Tag {
+            body = [];
+            fallback = null;
+            constructor(token, tokens, liquid, parser) {
+                super(token, tokens, liquid);
+                if (parsingAI || token.args.trim())
+                    throw new Error("nested ai blocks and ai arguments are not supported");
+                parsingAI = true;
+                try {
+                    let active = this.body;
+                    while (tokens.length) {
+                        const next = tokens.shift();
+                        if ("name" in next && next.name === "endai")
+                            return;
+                        if ("name" in next && next.name === "else") {
+                            if (this.fallback !== null)
+                                throw new Error("duplicate ai fallback");
+                            this.fallback = [];
+                            active = this.fallback;
+                        }
+                        else
+                            active.push(parser.parseToken(next, tokens));
+                    }
+                    throw new Error("ai block is not closed");
+                }
+                finally {
+                    parsingAI = false;
+                }
+            }
+            async render(context, emitter) {
+                const instruction = String(await engine.render(this.body, context));
+                const fallback = this.fallback === null ? null : String(await engine.render(this.fallback, context));
+                blocks.push({ instruction, fallback });
+                let text;
+                let reason = input.preview
+                    ? "AI preview only; add --ai to call the configured model"
+                    : "no reply model configured";
+                if (input.allowAI && input.complete) {
+                    const started = performance.now();
+                    try {
+                        if (++calls > limits.calls)
+                            throw new Error("model call limit");
+                        const answer = await input.complete(instruction, input.data);
+                        const data = input.data.trim();
+                        if (!answer.text.trim() ||
+                            answer.text.length > limits.aiOutput ||
+                            (data && answer.text.toLowerCase().includes(data.toLowerCase())))
+                            throw new Error("invalid model output");
+                        text = answer.text;
+                    }
+                    catch (error) {
+                        reason =
+                            error instanceof CliError && error.code === "permission_error"
+                                ? "reply model consent missing or revoked — check replies consents show; use replies consents grant or replies consents allow"
+                                : error instanceof CliError && error.code === "configuration_error"
+                                    ? "reply model not configured — set models.replies.provider and models.replies.model"
+                                    : "reply model unavailable, call limit reached or output refused";
+                    }
+                    finally {
+                        paused += performance.now() - started;
+                    }
+                }
+                if (text === undefined) {
+                    if (fallback === null) {
+                        missing = reason;
+                        text = "";
+                    }
+                    else
+                        text = fallback;
+                }
+                emitter.write(text);
+            }
+        });
+        const templates = engine.parse(source);
+        const name = input.senderName?.trim() ?? "";
+        const context = new Context({
+            sender: { firstName: name.split(/\s+/)[0] ?? "", name },
+            chat: { title: input.chat.title ?? "", kind: input.chat.kind },
+            now: localTime,
+        }, engine.options, { templateLimit: limits.renders }, { liquid: engine });
+        const check = context.renderLimit.check.bind(context.renderLimit);
+        let renders = 0;
+        // LiquidJS 10.30 types templateLimit but does not enforce it; share this bound across nested renders.
+        context.renderLimit.check = (at) => {
+            if (++renders > limits.renders)
+                throw new Error("template render count limit");
+            check(at - paused);
+        };
+        const text = String(await engine.render(templates, context));
+        if (missing)
+            return { text: null, warnings, blocks, reason: missing };
+        if (!text.trim() || text.length > limits.output)
+            return { text: null, warnings, blocks, reason: "reply template output is empty or too long" };
+        return { text, warnings, blocks };
+    }
+    catch {
+        return { text: null, warnings, blocks, reason: "reply template is invalid or exceeds its rendering limits" };
+    }
+};
+//# sourceMappingURL=template.js.map

package/dist/replies/template.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"template.js","sourceRoot":"","sources":["../../src/replies/template.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAC5C,OAAO,EACL,OAAO,EAEP,MAAM,EAEN,GAAG,GAIJ,MAAM,UAAU,CAAA;AAGjB,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,KAAK,EAAE,MAAM;IACb,OAAO,EAAE,KAAK;IACd,MAAM,EAAE,MAAM;IACd,YAAY,EAAE,GAAG;IACjB,MAAM,EAAE,KAAK;IACb,QAAQ,EAAE,KAAK;IACf,KAAK,EAAE,CAAC;CACT,CAAA;AAwBD,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EAAE,KAAyB,EAAE,KAAoB,EAA2B,EAAE;IACpH,MAAM,MAAM,GAAG,EAAE,GAAG,eAAe,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,CAAA;IACtD,MAAM,MAAM,GAAoB,EAAE,CAAA;IAClC,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,IAAI,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAA;IAC3B,MAAM,MAAM,GAAG,oCAAoC,CAAA;IACnD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,QAAQ,CAAC,IAAI,CAAC,6EAA6E,CAAC,CAAA;QAC5F,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,IAAY,EAAE,EAAE,CAAC,aAAa,IAAI,KAAK,CAAC,CAAA;IAC9E,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;QACjC,QAAQ,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAA;QAC7E,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,MAAM,GAAG,WAAW,MAAM,aAAa,MAAM,aAAa,CAAA;IAChG,CAAC;IACD,IAAI,OAA2B,CAAA;IAC/B,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,IAAI,SAAS,GAAG,KAAK,CAAA;IACrB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAA;QACpC,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAC9B,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE;YAC/B,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,SAAS;YAChB,GAAG,EAAE,SAAS;YACd,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,SAAS;YACjB,YAAY,EAAE,YAAY;YAC1B,SAAS,EAAE,KAAK;SACjB,CAAC;aACC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC;aACxB,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAC3C,CAAA;QACD,MAAM,SAAS,GAAG,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,QAAQ,EAAE,CAAA;QAChK,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC;YACxB,eAAe,EAAE,IAAI;YACrB,eAAe,EAAE,IAAI;YACrB,aAAa,EAAE,IAAI;YACnB,SAAS,EAAE,KAAK;YAChB,UAAU,EAAE,MAAM,CAAC,KAAK;YACxB,WAAW,EAAE,MAAM,CAAC,YAAY;YAChC,WAAW,EAAE,MAAM,CAAC,MAAM;YAC1B,iBAAiB,EAAE,IAAI;SACxB,CAAC,CAAA;QACF,KAAK,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;YACnD,MAAM,CAAC,WAAW,CAChB,IAAI,EACJ,KAAM,SAAQ,GAAG;gBACf,YAAY,KAAe,EAAE,MAAuB,EAAE,MAAc;oBAClE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;oBAC5B,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;gBACtD,CAAC;gBACD,MAAM;oBACJ,OAAO,EAAE,CAAA;gBACX,CAAC;aACF,CACF,CAAA;QACH,CAAC;QACD,MAAM,CAAC,WAAW,CAChB,IAAI,EACJ,KAAM,SAAQ,GAAG;YACf,IAAI,GAAe,EAAE,CAAA;YACrB,QAAQ,GAAsB,IAAI,CAAA;YAClC,YAAY,KAAe,EAAE,MAAuB,EAAE,MAAc,EAAE,MAAc;gBAClF,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;gBAC5B,IAAI,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;gBAC1G,SAAS,GAAG,IAAI,CAAA;gBAChB,IAAI,CAAC;oBACH,IAAI,MAAM,GAAG,IAAI,CAAC,IAAI,CAAA;oBACtB,OAAO,MAAM,CAAC,MAAM,EAAE,CAAC;wBACrB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAmB,CAAA;wBAC5C,IAAI,MAAM,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;4BAAE,OAAM;wBACnD,IAAI,MAAM,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;4BAC3C,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI;gCAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;4BACpE,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAA;4BAClB,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAA;wBACxB,CAAC;;4BAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;oBACrD,CAAC;oBACD,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;gBAC3C,CAAC;wBAAS,CAAC;oBACT,SAAS,GAAG,KAAK,CAAA;gBACnB,CAAC;YACH,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,OAAgB,EAAE,OAAgB;gBAC7C,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAA;gBACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAA;gBACpG,MAAM,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAA;gBACtC,IAAI,IAAwB,CAAA;gBAC5B,IAAI,MAAM,GAAG,KAAK,CAAC,OAAO;oBACxB,CAAC,CAAC,wDAAwD;oBAC1D,CAAC,CAAC,2BAA2B,CAAA;gBAC/B,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;oBACpC,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,CAAA;oBACjC,IAAI,CAAC;wBACH,IAAI,EAAE,KAAK,GAAG,MAAM,CAAC,KAAK;4BAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAA;wBAC/D,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;wBAC5D,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;wBAC9B,IACE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE;4BACnB,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ;4BACpC,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;4BAEhE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;wBACzC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAA;oBACpB,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM;4BACJ,KAAK,YAAY,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB;gCAC5D,CAAC,CAAC,4HAA4H;gCAC9H,CAAC,CAAC,KAAK,YAAY,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,qBAAqB;oCACjE,CAAC,CAAC,mFAAmF;oCACrF,CAAC,CAAC,+DAA+D,CAAA;oBACzE,CAAC;4BAAS,CAAC;wBACT,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,GAAG,OAAO,CAAA;oBACvC,CAAC;gBACH,CAAC;gBACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;oBACvB,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;wBACtB,OAAO,GAAG,MAAM,CAAA;wBAChB,IAAI,GAAG,EAAE,CAAA;oBACX,CAAC;;wBAAM,IAAI,GAAG,QAAQ,CAAA;gBACxB,CAAC;gBACD,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YACrB,CAAC;SACF,CACF,CAAA;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;QAC3C,MAAM,OAAO,GAAG,IAAI,OAAO,CACzB;YACE,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE;YACvD,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE;YAC9D,GAAG,EAAE,SAAS;SACf,EACD,MAAM,CAAC,OAAO,EACd,EAAE,aAAa,EAAE,MAAM,CAAC,OAAO,EAAE,EACjC,EAAE,MAAM,EAAE,MAAM,EAAE,CACnB,CAAA;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;QACjE,IAAI,OAAO,GAAG,CAAC,CAAA;QACf,sGAAsG;QACtG,OAAO,CAAC,WAAW,CAAC,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE;YACzC,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;YAC9E,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,CAAA;QACpB,CAAC,CAAA;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAA;QAC5D,IAAI,OAAO;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;QACrE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM;YAC7C,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAA;QAC/F,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAA;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,2DAA2D,EAAE,CAAA;IAC9G,CAAC;AACH,CAAC,CAAA"}

package/dist/resolve.d.ts

@@ -0,0 +1,22 @@
+import type { Chat, Contact, Id } from "./domain/models.js";
+/** The part of a store that `pickPerson` reads. */
+export interface PeopleLookup {
+    get(id: Id): Contact | undefined;
+    /** Everyone known, in any order. */
+    all(): Contact[];
+}
+/** Shaped like a Telegram or MAX id. Another messenger's ids may be any string, so a miss here is not "not an id". */
+export declare const isId: (reference: string) => boolean;
+/**
+ * A name matched as a fragment — and **an ambiguous one is an error, not a guess**: sending to the
+ * wrong conversation is not undoable, so the caller is shown the candidates and asked to be
+ * specific. An exact title does not settle it while another title contains it too: a group named
+ * "Мама" must not quietly take a send meant for "Мама Иванова".
+ */
+export declare const pickChat: (reference: string, chats: Chat[]) => Chat;
+/**
+ * As `pickChat`, over names and @usernames. Matched here rather than in SQL because SQLite's
+ * `lower()` folds ASCII only, and most of these names are Cyrillic.
+ */
+export declare const pickPerson: (reference: string, people: PeopleLookup) => Contact;
+//# sourceMappingURL=resolve.d.ts.map

package/dist/resolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../src/resolve.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,oBAAoB,CAAA;AAE3D,mDAAmD;AACnD,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,GAAG,SAAS,CAAA;IAChC,oCAAoC;IACpC,GAAG,IAAI,OAAO,EAAE,CAAA;CACjB;AAED,sHAAsH;AACtH,eAAO,MAAM,IAAI,cAAe,MAAM,KAAG,OAA2C,CAAA;AAEpF;;;;;GAKG;AACH,eAAO,MAAM,QAAQ,cAAe,MAAM,SAAS,IAAI,EAAE,KAAG,IAY3D,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,UAAU,cAAe,MAAM,UAAU,YAAY,KAAG,OAuBpE,CAAA"}

package/dist/resolve.js

@@ -0,0 +1,47 @@
+import { CliError, singleLine } from "@wirecat/cli-base";
+/** Shaped like a Telegram or MAX id. Another messenger's ids may be any string, so a miss here is not "not an id". */
+export const isId = (reference) => /^-?\d+$/.test(reference.trim());
+/**
+ * A name matched as a fragment — and **an ambiguous one is an error, not a guess**: sending to the
+ * wrong conversation is not undoable, so the caller is shown the candidates and asked to be
+ * specific. An exact title does not settle it while another title contains it too: a group named
+ * "Мама" must not quietly take a send meant for "Мама Иванова".
+ */
+export const pickChat = (reference, chats) => {
+    const wanted = reference.trim().toLowerCase();
+    const matches = chats.filter((chat) => chat.title?.toLowerCase().includes(wanted));
+    if (matches.length === 1 && matches[0])
+        return matches[0];
+    if (matches.length === 0)
+        throw new CliError("not_found", `no chat matches "${reference}"`);
+    throw ambiguous(reference, "chats", matches.map((chat) => ({ id: chat.id, title: chat.title })), ({ title }) => singleLine(String(title)));
+};
+/**
+ * As `pickChat`, over names and @usernames. Matched here rather than in SQL because SQLite's
+ * `lower()` folds ASCII only, and most of these names are Cyrillic.
+ */
+export const pickPerson = (reference, people) => {
+    const trimmed = reference.trim();
+    const known = people.get(trimmed);
+    if (known)
+        return known;
+    if (isId(trimmed))
+        throw new CliError("not_found", `no person ${trimmed} in what this account has seen`);
+    const wanted = trimmed.replace(/^@/, "").toLowerCase();
+    const everyone = people.all().toSorted((a, b) => (a.name ?? "").localeCompare(b.name ?? ""));
+    const fields = (person) => [person.alias, person.name, person.username].filter(isPresent).map((one) => one.toLowerCase());
+    const exact = everyone.filter((person) => fields(person).includes(wanted));
+    const matches = exact.length > 0 ? exact : everyone.filter((person) => fields(person).some((one) => one.includes(wanted)));
+    if (matches.length === 1 && matches[0])
+        return matches[0];
+    if (matches.length === 0)
+        throw new CliError("not_found", `nobody matches "${reference}"`);
+    throw ambiguous(reference, "people", matches.map(({ id, name, username }) => ({ id, name, username })), ({ name, username }) => singleLine([name, username && `@${username}`].filter(isPresent).join("  ")));
+};
+const ambiguous = (reference, what, candidates, label) => {
+    const width = Math.max(...candidates.map(({ id }) => id.length));
+    const lines = candidates.map((candidate) => `  ${candidate.id.padEnd(width)}  ${label(candidate)}`).join("\n");
+    return new CliError("validation_error", `"${singleLine(reference)}" matches ${candidates.length} ${what} — name one by its id:\n${lines}`, { candidates });
+};
+const isPresent = (value) => value !== null && value !== undefined;
+//# sourceMappingURL=resolve.js.map

package/dist/resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../src/resolve.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAUxD,sHAAsH;AACtH,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,SAAiB,EAAW,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAA;AAEpF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,SAAiB,EAAE,KAAa,EAAQ,EAAE;IACjE,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;IAElF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC,CAAC,CAAC,CAAA;IACzD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,WAAW,EAAE,oBAAoB,SAAS,GAAG,CAAC,CAAA;IAC3F,MAAM,SAAS,CACb,SAAS,EACT,OAAO,EACP,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,EAC3D,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CACzC,CAAA;AACH,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,SAAiB,EAAE,MAAoB,EAAW,EAAE;IAC7E,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,CAAA;IAChC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IACjC,IAAI,KAAK;QAAE,OAAO,KAAK,CAAA;IACvB,IAAI,IAAI,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,WAAW,EAAE,aAAa,OAAO,gCAAgC,CAAC,CAAA;IAExG,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;IACtD,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAA;IAC5F,MAAM,MAAM,GAAG,CAAC,MAAe,EAAE,EAAE,CACjC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAA;IAEhG,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;IAC1E,MAAM,OAAO,GACX,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;IAE5G,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC,CAAC,CAAC,CAAA;IACzD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,WAAW,EAAE,mBAAmB,SAAS,GAAG,CAAC,CAAA;IAC1F,MAAM,SAAS,CACb,SAAS,EACT,QAAQ,EACR,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,EACjE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,QAAQ,IAAI,IAAI,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CACpG,CAAA;AACH,CAAC,CAAA;AAED,MAAM,SAAS,GAAG,CAChB,SAAiB,EACjB,IAAY,EACZ,UAAe,EACf,KAA+B,EACrB,EAAE;IACZ,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;IAChE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,KAAK,SAAS,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC9G,OAAO,IAAI,QAAQ,CACjB,kBAAkB,EAClB,IAAI,UAAU,CAAC,SAAS,CAAC,aAAa,UAAU,CAAC,MAAM,IAAI,IAAI,2BAA2B,KAAK,EAAE,EACjG,EAAE,UAAU,EAAE,CACf,CAAA;AACH,CAAC,CAAA;AAED,MAAM,SAAS,GAAG,CAAI,KAA2B,EAAc,EAAE,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,CAAA"}

package/dist/sealed.d.ts

@@ -0,0 +1,39 @@
+import { type Readable } from "node:stream";
+export interface Cost {
+    log2N: number;
+    r: number;
+    p: number;
+}
+/** About half a second and 128 MB on a laptop: slow enough to make guessing a short password costly. */
+export declare const COST: Cost;
+/** What a folder of sealed files keeps to tell, before reading anything, whether a password is the one it was sealed with. */
+export interface PasswordCheck {
+    salt: string;
+    log2N: number;
+    r: number;
+    p: number;
+    /** SHA-256 of the key scrypt derives from the password and this salt — no file uses that key. */
+    hash: string;
+}
+/**
+ * A check for this password. Guessing against it costs the same scrypt work as guessing against
+ * any sealed file, so it makes no password easier to find.
+ */
+export declare const checkFor: (password: string, cost?: Cost) => Promise<PasswordCheck>;
+export declare const passes: (password: string, check: PasswordCheck) => Promise<boolean>;
+/** Whether the file starts as a sealed file does. */
+export declare const isSealed: (path: string) => boolean;
+/** Seals `from` into `to`, a new file readable only by its owner; never overwrites. */
+export declare const sealFile: (from: string, to: string, password: string, cost?: Cost) => Promise<void>;
+/**
+ * Seals what `open` yields into `to`, so what is sealed never lands on disk in the clear. Opened
+ * only once the password is accepted: a stream opened and then refused would be left dangling.
+ */
+export declare const seal: (open: () => Readable, to: string, password: string, cost?: Cost) => Promise<void>;
+/**
+ * Opens `from` into `to`, a new file readable only by its owner. The plain text goes to a file
+ * beside `to` first and takes its name only once the tag checks out, so a wrong password or a
+ * damaged file leaves nothing half-written behind.
+ */
+export declare const unsealFile: (from: string, to: string, password: string) => Promise<void>;
+//# sourceMappingURL=sealed.d.ts.map

package/dist/sealed.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sealed.d.ts","sourceRoot":"","sources":["../src/sealed.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,KAAK,QAAQ,EAAa,MAAM,aAAa,CAAA;AAmBtD,MAAM,WAAW,IAAI;IACnB,KAAK,EAAE,MAAM,CAAA;IACb,CAAC,EAAE,MAAM,CAAA;IACT,CAAC,EAAE,MAAM,CAAA;CACV;AAED,wGAAwG;AACxG,eAAO,MAAM,IAAI,EAAE,IAAgC,CAAA;AASnD,8HAA8H;AAC9H,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,CAAC,EAAE,MAAM,CAAA;IACT,CAAC,EAAE,MAAM,CAAA;IACT,iGAAiG;IACjG,IAAI,EAAE,MAAM,CAAA;CACb;AAED;;;GAGG;AACH,eAAO,MAAM,QAAQ,aAAoB,MAAM,SAAQ,IAAI,KAAU,OAAO,CAAC,aAAa,CAOzF,CAAA;AAED,eAAO,MAAM,MAAM,aAAoB,MAAM,SAAS,aAAa,KAAG,OAAO,CAAC,OAAO,CAIpF,CAAA;AAYD,qDAAqD;AACrD,eAAO,MAAM,QAAQ,SAAU,MAAM,KAAG,OAQvC,CAAA;AAED,uFAAuF;AACvF,eAAO,MAAM,QAAQ,SAAU,MAAM,MAAM,MAAM,YAAY,MAAM,SAAQ,IAAI,KAAU,OAAO,CAAC,IAAI,CAC7C,CAAA;AAExD;;;GAGG;AACH,eAAO,MAAM,IAAI,SAAgB,MAAM,QAAQ,MAAM,MAAM,YAAY,MAAM,SAAQ,IAAI,KAAU,OAAO,CAAC,IAAI,CAuB9G,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,UAAU,SAAgB,MAAM,MAAM,MAAM,YAAY,MAAM,KAAG,OAAO,CAAC,IAAI,CA4CzF,CAAA"}

package/dist/sealed.js

@@ -0,0 +1,140 @@
+import { createCipheriv, createDecipheriv, createHash, randomBytes, scrypt, timingSafeEqual } from "node:crypto";
+import { closeSync, createReadStream, createWriteStream, existsSync, openSync, readSync, renameSync, rmSync, statSync, } from "node:fs";
+import { Transform } from "node:stream";
+import { pipeline } from "node:stream/promises";
+import { createGunzip, createGzip } from "node:zlib";
+import { CliError } from "@wirecat/cli-base";
+/**
+ * A file compressed and then encrypted with a password, by Node alone — no outside tool, no
+ * dependency (owner's ruling `NEED-567`). The password is never kept: losing it loses the file.
+ *
+ * Layout: `MAGIC`, scrypt's cost as log2 N, r and p (one byte each), a 16-byte salt and a 12-byte
+ * nonce; then the gzip stream under AES-256-GCM, the header bound to it as associated data; then
+ * GCM's 16-byte tag, which makes a wrong password or a changed byte fail instead of yielding garbage.
+ */
+const MAGIC = Buffer.from("CMSEAL01");
+const SALT = 16;
+const NONCE = 12;
+const TAG = 16;
+const HEADER = MAGIC.length + 3 + SALT + NONCE;
+/** About half a second and 128 MB on a laptop: slow enough to make guessing a short password costly. */
+export const COST = { log2N: 17, r: 8, p: 1 };
+const keyOf = (password, salt, { log2N, r, p }) => new Promise((resolve, reject) => scrypt(password, salt, 32, { N: 2 ** log2N, r, p, maxmem: 2 * 128 * r * 2 ** log2N }, (error, key) => error ? reject(error) : resolve(key)));
+/**
+ * A check for this password. Guessing against it costs the same scrypt work as guessing against
+ * any sealed file, so it makes no password easier to find.
+ */
+export const checkFor = async (password, cost = COST) => {
+    refuseEmpty(password);
+    const salt = randomBytes(SALT);
+    const hash = createHash("sha256")
+        .update(await keyOf(password, salt, cost))
+        .digest("hex");
+    return { salt: salt.toString("hex"), ...cost, hash };
+};
+export const passes = async (password, check) => {
+    refuseCost(check);
+    const key = await keyOf(password, Buffer.from(check.salt, "hex"), check);
+    return timingSafeEqual(createHash("sha256").update(key).digest(), Buffer.from(check.hash, "hex"));
+};
+/** A damaged header must not make us reserve a gigabyte or more before the tag can say it is damaged. */
+const refuseCost = ({ log2N, r, p }) => {
+    if (log2N > 20 || r > 8 || p > 4)
+        throw new CliError("validation_error", "asks for a key cost this version does not accept");
+};
+const refuseEmpty = (password) => {
+    if (password.length === 0)
+        throw new CliError("validation_error", "the password is empty");
+};
+/** Whether the file starts as a sealed file does. */
+export const isSealed = (path) => {
+    const fd = openSync(path, "r");
+    try {
+        const start = Buffer.alloc(MAGIC.length);
+        return readSync(fd, start, 0, MAGIC.length, 0) === MAGIC.length && start.equals(MAGIC);
+    }
+    finally {
+        closeSync(fd);
+    }
+};
+/** Seals `from` into `to`, a new file readable only by its owner; never overwrites. */
+export const sealFile = (from, to, password, cost = COST) => seal(() => createReadStream(from), to, password, cost);
+/**
+ * Seals what `open` yields into `to`, so what is sealed never lands on disk in the clear. Opened
+ * only once the password is accepted: a stream opened and then refused would be left dangling.
+ */
+export const seal = async (open, to, password, cost = COST) => {
+    refuseEmpty(password);
+    const salt = randomBytes(SALT);
+    const nonce = randomBytes(NONCE);
+    const cipher = createCipheriv("aes-256-gcm", await keyOf(password, salt, cost), nonce);
+    const header = Buffer.concat([MAGIC, Buffer.from([cost.log2N, cost.r, cost.p]), salt, nonce]);
+    cipher.setAAD(header);
+    const out = createWriteStream(to, { flags: "wx", mode: 0o600 });
+    out.write(header);
+    const tagged = new Transform({
+        transform: (chunk, _encoding, done) => done(null, cipher.update(chunk)),
+        flush: (done) => {
+            const last = cipher.final();
+            done(null, Buffer.concat([last, cipher.getAuthTag()]));
+        },
+    });
+    try {
+        await pipeline(open(), createGzip(), tagged, out);
+    }
+    catch (error) {
+        // `wx` means a file that was there is not ours to remove; one this call created and did not finish is.
+        if (error.code !== "EEXIST")
+            rmSync(to, { force: true });
+        throw error;
+    }
+};
+/**
+ * Opens `from` into `to`, a new file readable only by its owner. The plain text goes to a file
+ * beside `to` first and takes its name only once the tag checks out, so a wrong password or a
+ * damaged file leaves nothing half-written behind.
+ */
+export const unsealFile = async (from, to, password) => {
+    refuseEmpty(password);
+    const size = statSync(from).size;
+    if (size < HEADER + TAG || !isSealed(from)) {
+        throw new CliError("validation_error", `${from} is not a sealed file`);
+    }
+    const fd = openSync(from, "r");
+    const header = Buffer.alloc(HEADER);
+    const tag = Buffer.alloc(TAG);
+    try {
+        readSync(fd, header, 0, HEADER, 0);
+        readSync(fd, tag, 0, TAG, size - TAG);
+    }
+    finally {
+        closeSync(fd);
+    }
+    const at = MAGIC.length;
+    const cost = { log2N: header[at], r: header[at + 1], p: header[at + 2] };
+    refuseCost(cost);
+    if (existsSync(to))
+        throw new CliError("validation_error", `${to} exists — never overwritten`);
+    const salt = header.subarray(at + 3, at + 3 + SALT);
+    const nonce = header.subarray(at + 3 + SALT, HEADER);
+    const decipher = createDecipheriv("aes-256-gcm", await keyOf(password, salt, cost), nonce);
+    decipher.setAuthTag(tag);
+    decipher.setAAD(header);
+    const pending = `${to}.partial`;
+    try {
+        await pipeline(createReadStream(from, { start: HEADER, end: size - TAG - 1 }), decipher, createGunzip(), createWriteStream(pending, { flags: "wx", mode: 0o600 }));
+    }
+    catch (error) {
+        if (error.code === "EEXIST")
+            throw error;
+        rmSync(pending, { force: true });
+        // A wrong key yields noise, which gzip usually refuses before GCM gets to check the tag.
+        const { code, message } = error;
+        if (code === "Z_DATA_ERROR" || code === "Z_BUF_ERROR" || message.includes("unable to authenticate")) {
+            throw new CliError("validation_error", "wrong password, or the file was changed — nothing was written");
+        }
+        throw error;
+    }
+    renameSync(pending, to);
+};
+//# sourceMappingURL=sealed.js.map

package/dist/sealed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sealed.js","sourceRoot":"","sources":["../src/sealed.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAChH,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,iBAAiB,EACjB,UAAU,EACV,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,MAAM,EACN,QAAQ,GACT,MAAM,SAAS,CAAA;AAChB,OAAO,EAAiB,SAAS,EAAE,MAAM,aAAa,CAAA;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAE5C;;;;;;;GAOG;AACH,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;AACrC,MAAM,IAAI,GAAG,EAAE,CAAA;AACf,MAAM,KAAK,GAAG,EAAE,CAAA;AAChB,MAAM,GAAG,GAAG,EAAE,CAAA;AACd,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,KAAK,CAAA;AAQ9C,wGAAwG;AACxG,MAAM,CAAC,MAAM,IAAI,GAAS,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAA;AAEnD,MAAM,KAAK,GAAG,CAAC,QAAgB,EAAE,IAAY,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAQ,EAAmB,EAAE,CACvF,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAC9B,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CACnG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CACrC,CACF,CAAA;AAYH;;;GAGG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,KAAK,EAAE,QAAgB,EAAE,IAAI,GAAS,IAAI,EAA0B,EAAE;IAC5F,WAAW,CAAC,QAAQ,CAAC,CAAA;IACrB,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAA;IAC9B,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC;SAC9B,MAAM,CAAC,MAAM,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;SACzC,MAAM,CAAC,KAAK,CAAC,CAAA;IAChB,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,CAAA;AACtD,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,MAAM,GAAG,KAAK,EAAE,QAAgB,EAAE,KAAoB,EAAoB,EAAE;IACvF,UAAU,CAAC,KAAK,CAAC,CAAA;IACjB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,CAAA;IACxE,OAAO,eAAe,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAA;AACnG,CAAC,CAAA;AAED,yGAAyG;AACzG,MAAM,UAAU,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAQ,EAAE,EAAE;IAC3C,IAAI,KAAK,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC;QAC9B,MAAM,IAAI,QAAQ,CAAC,kBAAkB,EAAE,kDAAkD,CAAC,CAAA;AAC9F,CAAC,CAAA;AAED,MAAM,WAAW,GAAG,CAAC,QAAgB,EAAE,EAAE;IACvC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,kBAAkB,EAAE,uBAAuB,CAAC,CAAA;AAC5F,CAAC,CAAA;AAED,qDAAqD;AACrD,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAW,EAAE;IAChD,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAC9B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACxC,OAAO,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACxF,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAA;IACf,CAAC;AACH,CAAC,CAAA;AAED,uFAAuF;AACvF,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,EAAU,EAAE,QAAgB,EAAE,IAAI,GAAS,IAAI,EAAiB,EAAE,CACvG,IAAI,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAA;AAExD;;;GAGG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG,KAAK,EAAE,IAAoB,EAAE,EAAU,EAAE,QAAgB,EAAE,IAAI,GAAS,IAAI,EAAiB,EAAE;IACjH,WAAW,CAAC,QAAQ,CAAC,CAAA;IACrB,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAA;IAC9B,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,CAAA;IAChC,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,MAAM,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,KAAK,CAAC,CAAA;IACtF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAA;IAC7F,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACrB,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAC/D,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IACjB,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,SAAS,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE;YACd,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,CAAA;YAC3B,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAA;QACxD,CAAC;KACF,CAAC,CAAA;IACF,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,CAAA;IACnD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,uGAAuG;QACvG,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACnF,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,EAAE,IAAY,EAAE,EAAU,EAAE,QAAgB,EAAiB,EAAE;IAC5F,WAAW,CAAC,QAAQ,CAAC,CAAA;IACrB,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAA;IAChC,IAAI,IAAI,GAAG,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,QAAQ,CAAC,kBAAkB,EAAE,GAAG,IAAI,uBAAuB,CAAC,CAAA;IACxE,CAAC;IACD,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IACnC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC7B,IAAI,CAAC;QACH,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAA;QAClC,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,GAAG,GAAG,CAAC,CAAA;IACvC,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAA;IACf,CAAC;IACD,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,CAAA;IACvB,MAAM,IAAI,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,CAAW,EAAE,CAAC,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,CAAW,EAAE,CAAC,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,CAAW,EAAE,CAAA;IACtG,UAAU,CAAC,IAAI,CAAC,CAAA;IAChB,IAAI,UAAU,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE,6BAA6B,CAAC,CAAA;IAC9F,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,CAAA;IACnD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAA;IACpD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,MAAM,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,KAAK,CAAC,CAAA;IAC1F,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;IACxB,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAEvB,MAAM,OAAO,GAAG,GAAG,EAAE,UAAU,CAAA;IAC/B,IAAI,CAAC;QACH,MAAM,QAAQ,CACZ,gBAAgB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,GAAG,GAAG,GAAG,CAAC,EAAE,CAAC,EAC9D,QAAQ,EACR,YAAY,EAAE,EACd,iBAAiB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CACzD,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAA;QACnE,MAAM,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAChC,yFAAyF;QACzF,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAA8B,CAAA;QACxD,IAAI,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,aAAa,IAAI,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,CAAC;YACpG,MAAM,IAAI,QAAQ,CAAC,kBAAkB,EAAE,+DAA+D,CAAC,CAAA;QACzG,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;IACD,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;AACzB,CAAC,CAAA"}

package/dist/search/account-list.d.ts

@@ -0,0 +1,53 @@
+import type { Provider } from "../domain/models.js";
+import { type Kind } from "../domain/providers.js";
+import type { AccountKey, StoredAccount } from "../store/store.js";
+/** Store-wide: every profile, tg, MAX and memo reads the same groups. */
+export declare const ACCOUNT_GROUPS = "accountGroups";
+export type AccountGroups = Record<string, string[]>;
+/** A bare `all` or `telegram` keeps meaning what it always did; a comma or a `:` makes it a list. */
+export declare const isAccountList: (value: string) => boolean;
+export declare const groupName: (name: string) => string;
+/** What `config set accountGroups.<name>` saves: the entries as written, so each app resolves its own profiles. */
+export declare const groupMembers: (value: string) => string[];
+/** Per app command (`tg`, `max`), each profile's account, as the app recorded it on its first save. */
+export type Profiles = Record<string, Record<string, AccountKey>>;
+export interface ListContext {
+    held: readonly StoredAccount[];
+    groups: AccountGroups;
+    profiles: Profiles;
+    /** The provider of the app running, and the command people call it by (`tg` for telegram). */
+    running: {
+        provider: Provider;
+        command?: string;
+    };
+}
+/** An account as `--source` and a hit name it: a notes folder is `notes:<its id>`, never the store's ulid. */
+export interface ListedAccount extends AccountKey {
+    kind: Kind;
+}
+/** One entry of the list as written, a group's member included, and the accounts it named. */
+export interface ListedEntry {
+    entry: string;
+    accounts: ListedAccount[];
+}
+/**
+ * What `--source group:work,tg:tg3,max:Alice,email,notes:4` names, entry by entry, a group's members in its
+ * place. An entry is a group, `provider:account` — the account's id, a profile of any app that recorded it, or
+ * the account's name — a bare provider for all its accounts, or a bare kind for every provider of it.
+ */
+export declare const entriesOfList: (value: string, context: ListContext) => ListedEntry[];
+/** Every account the list names, in order and once each. */
+export declare const accountsOfList: (value: string, context: ListContext) => ListedAccount[];
+export interface SkippedSource {
+    source: string;
+    reason: string;
+}
+/**
+ * The accounts of `kinds` the entries name, and each entry that names none of them with the reason. A search
+ * fails only when nothing fits: `what` names the search in that error.
+ */
+export declare const fitting: (entries: readonly ListedEntry[], kinds: readonly Kind[], what: string, reasonOf?: (kind: Kind) => string) => {
+    accounts: AccountKey[];
+    skipped: SkippedSource[];
+};
+//# sourceMappingURL=account-list.d.ts.map

package/dist/search/account-list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-list.d.ts","sourceRoot":"","sources":["../../src/search/account-list.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAIL,KAAK,IAAI,EAIV,MAAM,wBAAwB,CAAA;AAC/B,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAGlE,yEAAyE;AACzE,eAAO,MAAM,cAAc,kBAAkB,CAAA;AAE7C,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;AAQpD,qGAAqG;AACrG,eAAO,MAAM,aAAa,UAAW,MAAM,KAAG,OAAqD,CAAA;AAQnG,eAAO,MAAM,SAAS,SAAU,MAAM,KAAG,MACwD,CAAA;AAEjG,mHAAmH;AACnH,eAAO,MAAM,YAAY,UAAW,MAAM,KAAG,MAAM,EAOhD,CAAA;AAKH,uGAAuG;AACvG,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAA;AAEjE,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,SAAS,aAAa,EAAE,CAAA;IAC9B,MAAM,EAAE,aAAa,CAAA;IACrB,QAAQ,EAAE,QAAQ,CAAA;IAClB,8FAA8F;IAC9F,OAAO,EAAE;QAAE,QAAQ,EAAE,QAAQ,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAClD;AAED,8GAA8G;AAC9G,MAAM,WAAW,aAAc,SAAQ,UAAU;IAC/C,IAAI,EAAE,IAAI,CAAA;CACX;AAED,8FAA8F;AAC9F,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,aAAa,EAAE,CAAA;CAC1B;AAyED;;;;GAIG;AACH,eAAO,MAAM,aAAa,UAAW,MAAM,WAAW,WAAW,KAAG,WAAW,EAqC9E,CAAA;AAED,4DAA4D;AAC5D,eAAO,MAAM,cAAc,UAAW,MAAM,WAAW,WAAW,KAAG,aAAa,EAKjF,CAAA;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf;AAUD;;;GAGG;AACH,eAAO,MAAM,OAAO,YACT,SAAS,WAAW,EAAE,SACxB,SAAS,IAAI,EAAE,QAChB,MAAM,aACF,CAAC,IAAI,EAAE,IAAI,KAAK,MAAM,KAC/B;IAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;IAAC,OAAO,EAAE,aAAa,EAAE,CAAA;CAgBpD,CAAA"}