@wirecat/mail-cli 0.0.0-stage → 0.1.0

package/dist/bundle/chunk-7SXGLT6T.js

@@ -0,0 +1,444 @@
+import { createRequire as __bundleRequire } from "node:module";
+const require = __bundleRequire(import.meta.url);
+import {
+  isContentKey
+} from "./chunk-J3QXTBD2.js";
+import {
+  errorCodes
+} from "./chunk-5BVIWP3S.js";
+import {
+  __name
+} from "./chunk-ZVVMGPBJ.js";
+
+// node_modules/.pnpm/@wirecat+cli-core@0.507.0_@wirecat+cli-base@0.68.1_commander@15.0.0_esbuild@0.28.2_type_d5beb0101c7a90701cc33879a5be8d28/node_modules/@wirecat/cli-core/dist/runs/run-context.js
+import { AsyncLocalStorage } from "node:async_hooks";
+import { createHash } from "node:crypto";
+
+// node_modules/.pnpm/@wirecat+cli-core@0.507.0_@wirecat+cli-base@0.68.1_commander@15.0.0_esbuild@0.28.2_type_d5beb0101c7a90701cc33879a5be8d28/node_modules/@wirecat/cli-core/dist/runs/error-detail.js
+import { homedir } from "node:os";
+
+// node_modules/.pnpm/@wirecat+cli-core@0.507.0_@wirecat+cli-base@0.68.1_commander@15.0.0_esbuild@0.28.2_type_d5beb0101c7a90701cc33879a5be8d28/node_modules/@wirecat/cli-core/dist/errors/failures.js
+var isCliFailure = /* @__PURE__ */ __name((value) => value instanceof Error && value.name === "CliError" && errorCodes.includes(value.code), "isCliFailure");
+var isCommanderFailure = /* @__PURE__ */ __name((value) => {
+  const { code, exitCode } = value ?? {};
+  return value instanceof Error && typeof code === "string" && code.startsWith("commander.") && typeof exitCode === "number";
+}, "isCommanderFailure");
+var failureKey = /* @__PURE__ */ __name((error) => isCliFailure(error) ? error.code : error instanceof Error ? error.name : "error", "failureKey");
+
+// node_modules/.pnpm/@wirecat+cli-core@0.507.0_@wirecat+cli-base@0.68.1_commander@15.0.0_esbuild@0.28.2_type_d5beb0101c7a90701cc33879a5be8d28/node_modules/@wirecat/cli-core/dist/runs/events.js
+var providerErrorKey = /* @__PURE__ */ __name((value) => typeof value === "string" && /^[A-Za-z][A-Za-z0-9._-]{0,63}$/.test(value) ? value : void 0, "providerErrorKey");
+var renderEvent = /* @__PURE__ */ __name((event) => {
+  if (event.event === "warning") {
+    const counts = Object.entries(event.counts ?? {}).map(([field, count]) => `${count} ${field}`);
+    return [`${MARK.warning} ${(event.operation ?? "").padEnd(16)} ${event.code}`, ...counts, event.detail].filter(Boolean).join("  ");
+  }
+  const parts = [];
+  if (event.event === "cache") {
+    parts.push(event.reason);
+    if (event.ageMs !== void 0)
+      parts.push(`cached ${age(event.ageMs)}`);
+  } else {
+    if (event.opcode !== void 0)
+      parts.push(`op ${event.opcode}`, `seq ${event.seq}`);
+    if (event.method !== void 0 || event.endpointTemplate !== void 0)
+      parts.push([event.method, event.endpointTemplate].filter(Boolean).join(" "));
+    if (event.status !== void 0)
+      parts.push(`${event.status}`);
+    if (event.attempt !== void 0 && event.attempt > 1)
+      parts.push(`attempt ${event.attempt}`);
+    if (event.waitMs !== void 0)
+      parts.push(`waited ${age(event.waitMs)}`);
+  }
+  if (event.ids)
+    for (const [name, value] of Object.entries(event.ids))
+      parts.push(`${name} ${value}`);
+  if (event.event !== "cache") {
+    if (event.durationMs !== void 0)
+      parts.push(`${event.durationMs}ms`);
+    if (event.bytes !== void 0)
+      parts.push(size(event.bytes));
+  }
+  if (event.counts)
+    for (const [field, count] of Object.entries(event.counts))
+      parts.push(`${count} ${field}`);
+  if (event.event !== "cache") {
+    if (event.errorCode)
+      parts.push(event.errorCode);
+    if (event.providerError)
+      parts.push(event.providerError);
+  }
+  return `${MARK[event.event]} ${event.operation.padEnd(16)} ${parts.join("  ")}`.trimEnd();
+}, "renderEvent");
+var MARK = { request: "\u2192", response: "\u2190", cache: "\u2022", warning: "!" };
+var age = /* @__PURE__ */ __name((ms) => ms < 1e3 ? `${ms}ms` : `${Math.round(ms / 1e3)}s`, "age");
+var size = /* @__PURE__ */ __name((bytes) => bytes < 1e3 ? `${bytes} B` : `${(bytes / 1e3).toFixed(1)} kB`, "size");
+
+// node_modules/.pnpm/@wirecat+cli-core@0.507.0_@wirecat+cli-base@0.68.1_commander@15.0.0_esbuild@0.28.2_type_d5beb0101c7a90701cc33879a5be8d28/node_modules/@wirecat/cli-core/dist/runs/secrets.js
+var SECRET_WORDS = /* @__PURE__ */ new Set([
+  "authorization",
+  "cookie",
+  "credential",
+  "credentials",
+  "passphrase",
+  "password",
+  "passwd",
+  "pwd",
+  "pass",
+  "passcode",
+  "pin",
+  "otp",
+  "2fa",
+  "secret",
+  "token",
+  "contrase\xF1a",
+  "contrasena",
+  "clave",
+  "\u043F\u0430\u0440\u043E\u043B\u044C",
+  "\u043F\u0438\u043D",
+  "\u043A\u043E\u0434",
+  ...["api", "auth", "service", "account", "db", "database", "priv", "private", "client"].map((word) => `${word}key`),
+  ...["db", "database", "key"].map((word) => `${word}pass`)
+]);
+var secretNamed = /* @__PURE__ */ __name((name) => {
+  const words = name.replace(/([a-z0-9])([A-Z])/g, "$1 $2").split(/[\s_.-]+/).map((word) => word.toLowerCase());
+  return words.some((word, at) => SECRET_WORDS.has(word) || SECRET_WORDS.has(word + (words[at + 1] ?? "")));
+}, "secretNamed");
+var START = "(?<![A-Za-z0-9_-])";
+var END = "(?![A-Za-z0-9_-])";
+var KNOWN_TOKENS = new RegExp(`${[
+  "gh[pousr]_[A-Za-z0-9]{36,}",
+  "github_pat_[A-Za-z0-9_]{22,}",
+  "sk-[A-Za-z0-9_-]{20,}",
+  "xox[abprs]-[A-Za-z0-9-]{10,}",
+  "(?:AKIA|ASIA)[A-Z0-9]{16}",
+  "AIza[A-Za-z0-9_-]{35}",
+  "(?:sk|rk)_(?:live|test)_[A-Za-z0-9]{10,}",
+  "npm_[A-Za-z0-9]{36}",
+  "eyJ[A-Za-z0-9_-]{5,}\\.eyJ[A-Za-z0-9_-]{5,}\\.[A-Za-z0-9_-]*"
+].map((pattern) => `${START}${pattern}${END}`).join("|")}|(?<!\\d)\\d{8,10}:[A-Za-z0-9_-]{35}${END}`, "g");
+var PRIVATE_KEY = /-----BEGIN[A-Z ]* PRIVATE KEY-----[\s\S]*?(?:-----END[A-Z ]* PRIVATE KEY-----|$)/g;
+var SCHEME = /(?<![A-Za-z])(Bearer|Basic)(\s+)(?![A-Z]?[a-z]+(?![A-Za-z0-9]))[A-Za-z0-9._~+/=-]{8,}/g;
+var NAMED_PAIR = /(?<![\p{L}\p{N}])([\p{L}\p{N}_.-]*(?:token|pass|pwd|pin|otp|2fa|secret|credential|cookie|authorization|key|contrase|clave|пароль|пин|код)[\p{L}\p{N}_.-]*)(["']?\s*(?:=>|[:=])\s*["']?|\s+(?![\p{L}]+(?![\p{L}\p{N}])))((?:Bearer\s+|Basic\s+)?)([^\s"'&,;]+)/giu;
+var looksRandom = /* @__PURE__ */ __name((run) => {
+  if (run.length < 20)
+    return false;
+  const classes = [/[a-z]/, /[A-Z]/, /\d/, /[^A-Za-z0-9]/].filter((kind) => kind.test(run)).length;
+  if (classes < 3)
+    return false;
+  let switches = 0;
+  for (let at = 1; at < run.length; at++) {
+    const [before, after] = [run[at - 1], run[at]];
+    if (/[a-z]/.test(before) && /[A-Z]/.test(after) || /[A-Z]/.test(before) && /[a-z]/.test(after))
+      switches += 1;
+  }
+  if (switches / run.length < 0.15)
+    return false;
+  const pieces = run.match(/[A-Z]?[a-z]+|[A-Z]+(?![a-z])|\d+/g) ?? [];
+  if (pieces.join("").length / Math.max(pieces.length, 1) >= 2.75)
+    return false;
+  return entropy(run) >= 3.5;
+}, "looksRandom");
+var entropy = /* @__PURE__ */ __name((text) => {
+  const counts = /* @__PURE__ */ new Map();
+  for (const char of text)
+    counts.set(char, (counts.get(char) ?? 0) + 1);
+  let bits = 0;
+  for (const count of counts.values())
+    bits -= count / text.length * Math.log2(count / text.length);
+  return bits;
+}, "entropy");
+var withoutSecrets = /* @__PURE__ */ __name((text, mark = "[redacted]") => text.replace(PRIVATE_KEY, mark).replace(KNOWN_TOKENS, mark).replace(SCHEME, `$1$2${mark}`).replace(NAMED_PAIR, (whole, name, separator, scheme) => secretNamed(name) ? `${name}${separator}${scheme}${mark}` : whole).replace(/[!-~]{20,}/g, (token) => (
+  // A URL or a path is somebody's address, not a key; a credential in one is caught by the rules above.
+  token.includes("://") || /^(?:\/|~\/|\.\.?\/)/.test(token) ? token : token.replace(RUN, (run) => looksRandom(run) ? mark : run.replace(HEX, (hex) => entropy(hex) >= 3 ? mark : hex))
+)), "withoutSecrets");
+var RUN = /(?<![A-Za-z0-9_+/-])[A-Za-z0-9_+/-]{20,}/g;
+var HEX = /(?<![A-Za-z0-9])(?=[0-9]*[a-f])[0-9a-f]{20,}(?![A-Za-z0-9])/g;
+
+// node_modules/.pnpm/@wirecat+cli-core@0.507.0_@wirecat+cli-base@0.68.1_commander@15.0.0_esbuild@0.28.2_type_d5beb0101c7a90701cc33879a5be8d28/node_modules/@wirecat/cli-core/dist/runs/error-detail.js
+var MESSAGE_AT_MOST = 500;
+var CAUSES_AT_MOST = 5;
+var FRAMES_AT_MOST = 15;
+var errorDetailOf = /* @__PURE__ */ __name((error, response) => {
+  const details = isCliFailure(error) ? { ...error.details } : {};
+  const thrown = error instanceof Error ? error : void 0;
+  const code = isCliFailure(error) ? error.code : codeOf(error);
+  const reason = typeof details.reason === "string" ? details.reason : void 0;
+  const causeCode = typeof details.cause_code === "string" && /^[A-Za-z0-9_.-]{1,40}$/.test(details.cause_code) ? details.cause_code : void 0;
+  const message = thrown ? redactText(thrown.message) : void 0;
+  const operation = stringOf(details.operation) ?? response?.operation;
+  const status = numberOf(details.status) ?? response?.status;
+  const method = stringOf(details.method) ?? response?.method;
+  const endpoint = stringOf(details.endpoint) ?? response?.endpointTemplate;
+  const key = providerErrorKey(details.provider_error) ?? providerErrorKey(response?.providerError);
+  const protocol = key !== void 0 && method === void 0 && endpoint === void 0;
+  const http = method !== void 0 || endpoint !== void 0 || status !== void 0 && !protocol ? {
+    ...method === void 0 ? {} : { method: method.toUpperCase().slice(0, 16) },
+    ...endpoint === void 0 ? {} : { endpoint_template: endpointTemplate(endpoint) },
+    ...status === void 0 ? {} : { status }
+  } : void 0;
+  const causes = causesOf(thrown?.cause ?? details.cause);
+  const stack = framesOf(thrown);
+  return {
+    class: classOf(error),
+    ...code === void 0 ? {} : { code },
+    ...reason === void 0 ? {} : { reason },
+    ...causeCode === void 0 ? {} : { cause_code: causeCode },
+    ...message ? { message } : {},
+    ...operation === void 0 ? {} : { operation },
+    ...http ? { http } : {},
+    ...key === void 0 ? {} : { provider: { key, ...protocol && status !== void 0 ? { code: status } : {} } },
+    ...causes.length > 0 ? { causes } : {},
+    ...stack.length > 0 ? { stack } : {}
+  };
+}, "errorDetailOf");
+var stringOf = /* @__PURE__ */ __name((value) => typeof value === "string" && value.trim() !== "" ? value.trim() : void 0, "stringOf");
+var numberOf = /* @__PURE__ */ __name((value) => typeof value === "number" && Number.isInteger(value) ? value : void 0, "numberOf");
+var classOf = /* @__PURE__ */ __name((error) => {
+  if (!(error instanceof Error))
+    return error === null ? "null" : typeof error;
+  const constructed = error.constructor?.name;
+  return constructed && constructed !== "Error" && constructed !== error.name ? constructed : error.name;
+}, "classOf");
+var codeOf = /* @__PURE__ */ __name((error) => {
+  const code = error?.code;
+  return typeof code === "string" && /^[A-Za-z][A-Za-z0-9._-]{0,63}$/.test(code) ? code : void 0;
+}, "codeOf");
+var causesOf = /* @__PURE__ */ __name((first) => {
+  const causes = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (let cause = first; cause !== void 0 && cause !== null && causes.length < CAUSES_AT_MOST; ) {
+    if (seen.has(cause))
+      break;
+    seen.add(cause);
+    const message = cause instanceof Error ? redactText(cause.message) : void 0;
+    causes.push({ class: classOf(cause), ...message ? { message } : {} });
+    cause = cause instanceof Error ? cause.cause : void 0;
+  }
+  return causes;
+}, "causesOf");
+var framesOf = /* @__PURE__ */ __name((error, limit = FRAMES_AT_MOST) => {
+  const stack = error instanceof Error && typeof error.stack === "string" ? error.stack : "";
+  return stack.split("\n").filter((line) => line.trimStart().startsWith("at ")).flatMap((line) => {
+    const match = /^\s*at (?:async )?(?:(.+?) \()?(.+?):(\d+):\d+\)?$/.exec(line);
+    if (!match)
+      return [];
+    const [, fn, path = "", lineNumber] = match;
+    if (path.startsWith("node:"))
+      return [];
+    return [`${fn ?? "<anonymous>"} ${fileOf(path)}:${lineNumber}`];
+  }).slice(0, limit);
+}, "framesOf");
+var fileOf = /* @__PURE__ */ __name((path) => {
+  const plain = path.replace(/^file:\/\//, "");
+  const packaged = /\/node_modules\/((?:@[^/]+\/)?[^/]+\/.+)$/.exec(plain)?.[1];
+  if (packaged)
+    return packaged.replace(/\/(?:dist|src)\//, "/");
+  return /(?:^|\/)(?:dist|src)\/(.+)$/.exec(plain)?.[1] ?? plain.split("/").at(-1) ?? "?";
+}, "fileOf");
+var endpointTemplate = /* @__PURE__ */ __name((raw) => {
+  const trimmed = raw.trim().split(/[?#]/)[0] ?? "";
+  const origin = /^[a-z][a-z0-9+.-]*:\/\/(?:[^@/]*@)?([^/]*)/i.exec(trimmed);
+  const path = origin ? trimmed.slice(origin[0].length) : trimmed;
+  const scheme = origin ? `${trimmed.slice(0, trimmed.indexOf("://"))}://${origin[1]}` : "";
+  const segments = path.split("/").map((segment) => {
+    if (segment === "" || /^[:{].+/.test(segment))
+      return segment;
+    if (/^bot\d+:/.test(segment) || /^\d{6,}:[\w-]{20,}$/.test(segment))
+      return ":token";
+    if (/^-?\d+$/.test(segment) || /^[0-9a-f-]{16,}$/i.test(segment))
+      return ":id";
+    if (!/^[A-Za-z0-9._~-]{1,40}$/.test(segment))
+      return ":value";
+    return segment;
+  });
+  return `${scheme}${segments.join("/")}`.slice(0, 300);
+}, "endpointTemplate");
+var INTERNATIONAL_PHONE = /\+\d[\d\s()-]{6,}\d/.source;
+var BARE_PHONE = /(^|[^\w-])\d{11,15}\b/.source;
+var redactText = /* @__PURE__ */ __name((text) => {
+  const home = homedir();
+  let out = home && home !== "/" ? text.split(home).join("~") : text;
+  out = withoutSecrets(out.replace(/"[^"\n]*"|“[^”\n]*”|«[^»\n]*»/g, '"[redacted]"')).replace(/\b(bearer|basic|token|key|password|secret)(\s*[:=]\s*|\s+)[^\s'"]+/gi, "$1$2[redacted]").replace(/[\w.+-]+@[\w-]+\.[\w.-]+/g, "[email]").replace(new RegExp(INTERNATIONAL_PHONE, "g"), "[number]").replace(new RegExp(BARE_PHONE, "g"), "$1[number]").replace(/\bbot\d+:[\w-]+/g, "bot[token]").replace(/\b\d{6,}:[\w-]{20,}\b/g, "[token]").replace(/(\?|&)[^\s#]*/g, "$1[redacted]").replace(/\b[A-Za-z0-9_-]{40,}\b/g, "[redacted]");
+  return out.length > MESSAGE_AT_MOST ? `${out.slice(0, MESSAGE_AT_MOST)}\u2026` : out;
+}, "redactText");
+
+// node_modules/.pnpm/@wirecat+cli-core@0.507.0_@wirecat+cli-base@0.68.1_commander@15.0.0_esbuild@0.28.2_type_d5beb0101c7a90701cc33879a5be8d28/node_modules/@wirecat/cli-core/dist/runs/run-context.js
+var REDACTED = "[redacted]";
+var keepsSuccess = /* @__PURE__ */ __name(({ record, fromFlag, env, caller, persistent = false }) => {
+  if (!record)
+    return false;
+  if (fromFlag)
+    return true;
+  if (persistent)
+    return false;
+  return caller !== void 0 || viaOf(env) !== "desktop";
+}, "keepsSuccess");
+var calls = new AsyncLocalStorage();
+var withCaller = /* @__PURE__ */ __name((caller, work) => calls.run(caller, work), "withCaller");
+var currentCaller = /* @__PURE__ */ __name(() => calls.getStore(), "currentCaller");
+var clientHash = /* @__PURE__ */ __name((id) => createHash("sha256").update(id).digest("hex").slice(0, 8), "clientHash");
+var viaOf = /* @__PURE__ */ __name((env) => env.WIRECAT_CALLER?.trim() === "desktop" ? "desktop" : "cli", "viaOf");
+var agentOf = /* @__PURE__ */ __name((env) => {
+  const named = env.AI_AGENT?.trim().split("_")[0];
+  const kind = (named && plainWord(named) ? named.toLowerCase() : void 0) ?? (env.CLAUDECODE ? "claude-code" : void 0) ?? (env.CODEX_THREAD_ID || env.CODEX_SESSION_ID || env.CODEX_SANDBOX ? "codex" : void 0) ?? (env.GEMINI_CLI ? "gemini-cli" : void 0) ?? (env.OPENCODE ? "opencode" : void 0) ?? (env.CURSOR_AGENT ? "cursor" : void 0) ?? // Only `exec` is the agent's own command: OpenClaw also sets `tui-local` for what the owner types in its TUI.
+  (env.OPENCLAW_SHELL?.trim() === "exec" ? "openclaw" : void 0);
+  if (!kind)
+    return void 0;
+  const session = sessionOf(kind, env);
+  return {
+    kind,
+    session_id: session && SESSION.test(session) ? session : null,
+    // OpenClaw passes the sender and chat ids of a chat-started run in this variable; only its presence is kept.
+    ...kind === "openclaw" && env.OPENCLAW_CHANNEL_CONTEXT?.trim() ? { from_chat: true } : {}
+  };
+}, "agentOf");
+var SESSION = /^[A-Za-z0-9._:-]{1,128}$/;
+var SESSION_VARIABLE = {
+  "claude-code": "CLAUDE_CODE_SESSION_ID",
+  codex: "CODEX_THREAD_ID",
+  opencode: "OPENCODE_SESSION_ID",
+  "hermes-agent": "HERMES_SESSION_ID"
+};
+var sessionOf = /* @__PURE__ */ __name((kind, env) => {
+  const variable = SESSION_VARIABLE[kind];
+  return (variable === void 0 ? void 0 : env[variable]?.trim()) || void 0;
+}, "sessionOf");
+var plainWord = /* @__PURE__ */ __name((word) => /^[A-Za-z][A-Za-z0-9.-]{0,39}$/.test(word), "plainWord");
+var secretInputs = /* @__PURE__ */ new WeakSet();
+var secretInput = /* @__PURE__ */ __name((input) => {
+  secretInputs.add(input);
+  return input;
+}, "secretInput");
+var secretShaped = /* @__PURE__ */ __name((word) => /:\/\/[^/@\s:]+:[^/@\s]+@/.test(word) || /(^|[^A-Za-z0-9_-])[A-Za-z0-9_-]{40,}($|[^A-Za-z0-9_-])/.test(word), "secretShaped");
+var withoutPhones = /* @__PURE__ */ __name((word) => word.replace(new RegExp(INTERNATIONAL_PHONE, "g"), REDACTED).replace(new RegExp(BARE_PHONE, "g"), `$1${REDACTED}`), "withoutPhones");
+var maskArgv = /* @__PURE__ */ __name((program, words, { keep = false } = {}) => {
+  const argv = [];
+  let unknownCommand;
+  let current = program;
+  let positional = 0;
+  let profileSeen = false;
+  let lost = false;
+  const raw = /* @__PURE__ */ __name((word) => keep && !secretShaped(word) ? withoutPhones(withoutSecrets(word, REDACTED)) : REDACTED, "raw");
+  const keptValue = /* @__PURE__ */ __name((name, value, input) => keep ? input && secretInputs.has(input) || secretNamed(name) ? REDACTED : raw(value) : maskedValue(name, value, input?.argChoices), "keptValue");
+  const optionFor = /* @__PURE__ */ __name((flag) => {
+    for (let at = current; at; at = at.parent) {
+      const found = at.options.find((option) => option.long === flag || option.short === flag);
+      if (found)
+        return found;
+    }
+    return void 0;
+  }, "optionFor");
+  for (let at = 0; at < words.length; at++) {
+    const word = words[at];
+    if (word === "--") {
+      argv.push("--");
+      for (let after = at + 1; after < words.length; after++)
+        argv.push(raw(words[after]));
+      break;
+    }
+    if (word.startsWith("-") && word.length > 1 && !NUMBER.test(word)) {
+      const equals = word.indexOf("=");
+      const flag = equals > 0 ? word.slice(0, equals) : word;
+      if (!/^--?[A-Za-z0-9][A-Za-z0-9-]*$/.test(flag)) {
+        argv.push(raw(word));
+        continue;
+      }
+      const option = optionFor(flag);
+      const name = option?.attributeName() ?? flag.replace(/^-+/, "");
+      if (equals > 0) {
+        argv.push(`${flag}=${keptValue(name, word.slice(equals + 1), option)}`);
+        continue;
+      }
+      argv.push(flag);
+      if (!option && keep && secretNamed(name) && words[at + 1] !== void 0 && !words[at + 1]?.startsWith("-")) {
+        at += 1;
+        argv.push(REDACTED);
+        continue;
+      }
+      if (!option || !(option.required || option.optional))
+        continue;
+      const takes = /* @__PURE__ */ __name((next) => next !== void 0 && (option.required || !next.startsWith("-") || NUMBER.test(next)), "takes");
+      if (takes(words[at + 1])) {
+        at += 1;
+        argv.push(keptValue(name, words[at], option));
+        while (option.variadic && words[at + 1] !== void 0 && !words[at + 1].startsWith("-")) {
+          at += 1;
+          argv.push(keptValue(name, words[at], option));
+        }
+      }
+      continue;
+    }
+    if (!lost && positional === 0) {
+      const sub = current.commands.find((one) => one.name() === word || one.aliases().includes(word));
+      if (sub) {
+        argv.push(word);
+        current = sub;
+        continue;
+      }
+      if (current === program && !profileSeen) {
+        profileSeen = true;
+        argv.push(keep ? raw(word) : PROFILE.test(word) && withoutPhones(withoutSecrets(word)) === word ? word : REDACTED);
+        continue;
+      }
+      if (current.commands.length > 0 && current.registeredArguments.length === 0) {
+        lost = true;
+        unknownCommand = commandLike(word);
+        argv.push(keep ? raw(word) : unknownCommand);
+        continue;
+      }
+    }
+    const declared = lost ? void 0 : current.registeredArguments;
+    const argument = declared?.[Math.min(positional, declared.length - 1)];
+    positional += 1;
+    argv.push(secretInputs.has(current) ? REDACTED : argument ? keptValue(argument.name(), word, argument) : raw(word));
+  }
+  return { argv, ...unknownCommand === void 0 ? {} : { unknownCommand } };
+}, "maskArgv");
+var NUMBER = /^-?\d+(\.\d+)?$/;
+var PROFILE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
+var commandLike = /* @__PURE__ */ __name((word) => /^[a-z][a-z0-9-]{0,31}$/i.test(word) && withoutSecrets(word) === word ? word : REDACTED, "commandLike");
+var maskedValue = /* @__PURE__ */ __name((name, value, choices) => {
+  if (isContentKey(name))
+    return REDACTED;
+  if (name === "profile")
+    return PROFILE.test(value) ? value : REDACTED;
+  if (name === "json" || name === "fields")
+    return /^[a-z0-9_.,]{1,200}$/.test(value) ? value : REDACTED;
+  if (choices?.includes(value))
+    return value;
+  return safeShape(value) ? value : REDACTED;
+}, "maskedValue");
+var safeShape = /* @__PURE__ */ __name((value) => NUMBER.test(value) && !/^\d{11,}$/.test(value) || /^\d+(ms|s|m|h|d|w)$/.test(value) || /^\d{4}-\d{2}-\d{2}([T ]\d{2}:\d{2}(:\d{2}(\.\d+)?)?(Z|[+-]\d{2}:?\d{2})?)?$/.test(value) || value === "true" || value === "false", "safeShape");
+var runContextOf = /* @__PURE__ */ __name(({ bin, command, program, argv, env, recordInput = false, caller }) => {
+  const masked = program && argv ? maskArgv(program, argv, { keep: recordInput === true }) : void 0;
+  const ifFailed = program && argv && recordInput === "failed" ? maskArgv(program, argv, { keep: true }) : void 0;
+  const agent = caller ? caller.agent : agentOf(env);
+  return {
+    cliCommand: command ? `${bin} ${command}` : bin,
+    ...masked ? { argv: masked.argv } : {},
+    ...ifFailed ? { argvIfFailed: ifFailed.argv } : {},
+    ...masked?.unknownCommand === void 0 ? {} : { unknownCommand: masked.unknownCommand },
+    ...agent ? { agent } : {},
+    via: caller?.via ?? viaOf(env),
+    ...caller?.mcp ? { mcp: caller.mcp } : {}
+  };
+}, "runContextOf");
+
+export {
+  isCliFailure,
+  isCommanderFailure,
+  failureKey,
+  providerErrorKey,
+  renderEvent,
+  errorDetailOf,
+  framesOf,
+  endpointTemplate,
+  keepsSuccess,
+  withCaller,
+  currentCaller,
+  clientHash,
+  agentOf,
+  secretInput,
+  maskArgv,
+  runContextOf
+};