@wirecat/max-cli 0.0.0-stage → 0.42.0

package/dist/report.js

@@ -0,0 +1,104 @@
+import { createHash, randomBytes } from "node:crypto";
+import { homedir } from "node:os";
+import { basename, join } from "node:path";
+import { CliError } from "@wirecat/cli-core";
+import { findRun, listRuns, readEvents, runtime } from "@wirecat/cli-messaging/cli";
+import { VERSION } from "./version.js";
+/** Where problem reports go (`NEED-267`, changed by the owner to issues). Anybody can read them there. */
+export const REPORT_URL = "https://github.com/WireCatLabs/max-cli/issues/new";
+const RECENT_SENDS = 20;
+/**
+ * **Everything a report holds is already free of content** — the run log and the send journal are
+ * built that way. Two things are added: chat and message ids become labels, and the home directory
+ * is hidden, since the doctor's paths name the person's account on this machine.
+ */
+export const buildReport = ({ profile, doctor, runsDir, runId, sends, now = new Date(), home = homedir(), }) => {
+    const chosen = runId === undefined ? newestFailed(runsDir) : findRun(runsDir, runId);
+    if (runId !== undefined && !chosen)
+        throw new CliError("not_found", `no run ${runId} — \`max runs list\` names them`);
+    const label = labeller();
+    const labelled = labelledEvent(label);
+    const report = {
+        createdAt: now.toISOString(),
+        version: VERSION,
+        runtime: runtime(),
+        platform: process.platform,
+        arch: process.arch,
+        profile,
+        // The shell commands in `fix` quote the path in ways no spelling above matches; `binDir` says it.
+        doctor: { ...doctor, install: { ...doctor.install, fix: [] } },
+        run: chosen ? { metadata: chosen.metadata, events: readEvents(chosen.dir).map(labelled) } : null,
+        sends: sends.slice(-RECENT_SENDS).map((entry) => ({
+            ...entry,
+            chatId: entry.chatId === null ? null : label(entry.chatId),
+            ...(entry.messageId === undefined ? {} : { messageId: label(entry.messageId) }),
+        })),
+    };
+    return JSON.parse(hideHome(JSON.stringify(report), home));
+};
+/**
+ * Inside JSON a Windows home is spelled with doubled backslashes, and a PATH entry keeps whatever
+ * case it was typed in, so the match ignores case — hiding a little too much costs nothing here.
+ */
+const hideHome = (json, home) => {
+    if (home === "")
+        return json;
+    const spellings = [JSON.stringify(home).slice(1, -1), home, home.replaceAll("\\", "/")];
+    return [...new Set(spellings)].reduce((text, spelling) => text.replace(new RegExp(spelling.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"), "gi"), "~"), json);
+};
+/**
+ * The report is posted to a public issue, and a chat id is somebody's conversation with the owner.
+ * Each id becomes a label that is the same everywhere in this report — so a failure can still be
+ * followed from request to journal — and **a new salt per report**, so two reports cannot be joined.
+ */
+const labeller = () => {
+    const salt = randomBytes(16);
+    return (id) => `id:${createHash("sha256").update(salt).update(id).digest("hex").slice(0, 12)}`;
+};
+const labelledEvent = (label) => (event) => {
+    const ids = event.ids;
+    if (typeof ids !== "object" || ids === null)
+        return event;
+    const { chat, message, ...rest } = ids;
+    return {
+        ...event,
+        ids: {
+            ...rest,
+            ...(typeof chat === "string" ? { chat: label(chat) } : {}),
+            ...(typeof message === "string" ? { message: label(message) } : {}),
+        },
+    };
+};
+/**
+ * A new issue with its title and body filled in, through GitHub's `title` and `body` query
+ * parameters. The file cannot travel in a link; the person drags it in. **Only the file's name**
+ * goes into the body — the issue is public, and a full path names the account on this machine.
+ */
+export const issueUrlFor = (report, file) => {
+    const run = report.run?.metadata;
+    const subject = `max ${report.version}: ${run ? `${run.command} — ${run.errorCode ?? "failed"}` : "problem report"}`;
+    const body = [
+        "Что я делал:",
+        "",
+        "Что ожидал:",
+        "",
+        "Что случилось:",
+        "",
+        "---",
+        `max ${report.version}, ${report.runtime}, ${report.platform} ${report.arch}`,
+        ...(run
+            ? [`run ${run.runId}: ${run.errorCode ?? "failed"}${run.providerError ? ` (${run.providerError})` : ""}`]
+            : []),
+        `Файл отчёта: ${basename(file)}`,
+    ].join("\n");
+    return `${REPORT_URL}?title=${encodeURIComponent(subject)}&body=${encodeURIComponent(body)}`;
+};
+export const reportFileName = (now) => `max-report-${now
+    .toISOString()
+    .replace(/[-:]/g, "")
+    .replace(/\.\d+Z$/, "Z")}.json`;
+const newestFailed = (runsDir) => {
+    const failed = listRuns(runsDir).find((run) => run.status === "failed");
+    return failed ? { dir: join(runsDir, failed.startedAt.slice(0, 10), failed.runId), metadata: failed } : undefined;
+};
+//# sourceMappingURL=report.js.map

package/dist/report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../src/report.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAC5C,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAoB,UAAU,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAA;AAGrG,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAEtC,0GAA0G;AAC1G,MAAM,CAAC,MAAM,UAAU,GAAG,mDAAmD,CAAA;AAE7E,MAAM,YAAY,GAAG,EAAE,CAAA;AAgBvB;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,EAC1B,OAAO,EACP,MAAM,EACN,OAAO,EACP,KAAK,EACL,KAAK,EACL,GAAG,GAAG,IAAI,IAAI,EAAE,EAChB,IAAI,GAAG,OAAO,EAAE,GASjB,EAAU,EAAE;IACX,MAAM,MAAM,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;IACpF,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,QAAQ,CAAC,WAAW,EAAE,UAAU,KAAK,iCAAiC,CAAC,CAAA;IAErH,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAA;IACxB,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,CAAA;IACrC,MAAM,MAAM,GAAW;QACrB,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;QAC5B,OAAO,EAAE,OAAO;QAChB,OAAO,EAAE,OAAO,EAAE;QAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO;QACP,kGAAkG;QAClG,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE;QAC9D,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI;QAChG,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAChD,GAAG,KAAK;YACR,MAAM,EAAE,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;YAC1D,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;SAChF,CAAC,CAAC;KACJ,CAAA;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAW,CAAA;AACrE,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,IAAY,EAAU,EAAE;IACtD,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,IAAI,CAAA;IAC5B,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;IACvF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CACnC,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,EAAE,GAAG,CAAC,EACxG,IAAI,CACL,CAAA;AACH,CAAC,CAAA;AAED;;;;GAIG;AACH,MAAM,QAAQ,GAAG,GAAG,EAAE;IACpB,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAA;IAC5B,OAAO,CAAC,EAAU,EAAU,EAAE,CAAC,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;AAChH,CAAC,CAAA;AAED,MAAM,aAAa,GACjB,CAAC,KAA6B,EAAE,EAAE,CAClC,CAAC,KAA8B,EAA2B,EAAE;IAC1D,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAA;IACrB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IACzD,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,GAA8B,CAAA;IACjE,OAAO;QACL,GAAG,KAAK;QACR,GAAG,EAAE;YACH,GAAG,IAAI;YACP,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,GAAG,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpE;KACF,CAAA;AACH,CAAC,CAAA;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,MAAc,EAAE,IAAY,EAAU,EAAE;IAClE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAA;IAChC,MAAM,OAAO,GAAG,OAAO,MAAM,CAAC,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,OAAO,MAAM,GAAG,CAAC,SAAS,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAA;IACpH,MAAM,IAAI,GAAG;QACX,cAAc;QACd,EAAE;QACF,aAAa;QACb,EAAE;QACF,gBAAgB;QAChB,EAAE;QACF,KAAK;QACL,OAAO,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE;QAC7E,GAAG,CAAC,GAAG;YACL,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,SAAS,IAAI,QAAQ,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACzG,CAAC,CAAC,EAAE,CAAC;QACP,gBAAgB,QAAQ,CAAC,IAAI,CAAC,EAAE;KACjC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACZ,OAAO,GAAG,UAAU,UAAU,kBAAkB,CAAC,OAAO,CAAC,SAAS,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAA;AAC9F,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,GAAS,EAAU,EAAE,CAClD,cAAc,GAAG;KACd,WAAW,EAAE;KACb,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;KACpB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,CAAA;AAEnC,MAAM,YAAY,GAAG,CAAC,OAAe,EAAsD,EAAE;IAC3F,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAA;IACvE,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;AACnH,CAAC,CAAA"}

package/dist/resolve.d.ts

@@ -0,0 +1,6 @@
+import { isId } from "@wirecat/cli-messaging";
+import type { Chat } from "./domain/models.js";
+export { isId };
+/** cli-messaging's `pickChat`, typed with max-cli's `Chat`: it answers one of the chats it is given. */
+export declare const pickChat: (reference: string, chats: Chat[]) => Chat;
+//# sourceMappingURL=resolve.d.ts.map

package/dist/resolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../src/resolve.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAA4B,MAAM,wBAAwB,CAAA;AACvE,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAA;AAE9C,OAAO,EAAE,IAAI,EAAE,CAAA;AAEf,wGAAwG;AACxG,eAAO,MAAM,QAAQ,cAAe,MAAM,SAAS,IAAI,EAAE,KAAG,IAA8C,CAAA"}

package/dist/resolve.js

@@ -0,0 +1,5 @@
+import { isId, pickChat as pickChatFrom } from "@wirecat/cli-messaging";
+export { isId };
+/** cli-messaging's `pickChat`, typed with max-cli's `Chat`: it answers one of the chats it is given. */
+export const pickChat = (reference, chats) => pickChatFrom(reference, chats);
+//# sourceMappingURL=resolve.js.map

package/dist/resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../src/resolve.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,YAAY,EAAE,MAAM,wBAAwB,CAAA;AAGvE,OAAO,EAAE,IAAI,EAAE,CAAA;AAEf,wGAAwG;AACxG,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,SAAiB,EAAE,KAAa,EAAQ,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,KAAK,CAAS,CAAA"}

package/dist/sends.d.ts

@@ -0,0 +1,17 @@
+import { type Asker, RecipientList, type SendGuard } from "@wirecat/cli-messaging/sends";
+import { type Settings } from "./config.js";
+export declare const sendsPathFor: (profile: string, env?: NodeJS.ProcessEnv) => string;
+export declare const recipientsPathFor: (profile: string, env?: NodeJS.ProcessEnv) => string;
+export declare const recipientListFor: (profile: string, env?: NodeJS.ProcessEnv) => RecipientList;
+/**
+ * Every line one write leaves in the journal carries the same `operationId`, minted at its check;
+ * a send's is its send id. A write a shared service started keeps the service's. `MaxClient` checks before each write and records after it, one at a
+ * time, and the server builds a guard per request, so one guard never holds two writes at once.
+ */
+export declare const operating: (guard: SendGuard, key?: string) => SendGuard;
+/**
+ * The guard a profile's configuration asks for — the command's, and `max serve`'s for every write
+ * it forwards. Built per request in the server, so `config set readOnly true` needs no restart.
+ */
+export declare const guardFor: (settings: Settings, warn: (message: string) => void, ask?: Asker, key?: string) => SendGuard;
+//# sourceMappingURL=sends.d.ts.map

package/dist/sends.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sends.d.ts","sourceRoot":"","sources":["../src/sends.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,KAAK,EAMV,aAAa,EACb,KAAK,SAAS,EAKf,MAAM,8BAA8B,CAAA;AAErC,OAAO,EAAE,KAAK,QAAQ,EAAiB,MAAM,aAAa,CAAA;AAG1D,eAAO,MAAM,YAAY,YAAa,MAAM,QAAO,MAAM,CAAC,UAAU,KAAiB,MAC7C,CAAA;AAExC,eAAO,MAAM,iBAAiB,YAAa,MAAM,QAAO,MAAM,CAAC,UAAU,KAAiB,MAC7C,CAAA;AAE7C,eAAO,MAAM,gBAAgB,YAAa,MAAM,QAAO,MAAM,CAAC,UAAU,KAAiB,aACpB,CAAA;AAErE;;;;GAIG;AACH,eAAO,MAAM,SAAS,UAAW,SAAS,QAAQ,MAAM,KAAG,SA2C1D,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,QAAQ,aAAc,QAAQ,QAAQ,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,QAAQ,KAAK,QAAQ,MAAM,KAAG,SAuCzG,CAAA"}

package/dist/sends.js

@@ -0,0 +1,97 @@
+import { CliError } from "@wirecat/cli-core";
+import { currentOperation, keyForWrite, levelFor, newOperationId, RecipientList, SendJournal, sendGuard, recipientsPathFor as sharedRecipientsPath, sendsPathFor as sharedSendsPath, } from "@wirecat/cli-messaging/sends";
+import { MAX_APP } from "./app.js";
+import { setCommandFor } from "./config.js";
+import { approvePermission } from "./permissions.js";
+export const sendsPathFor = (profile, env = process.env) => sharedSendsPath(MAX_APP, profile, env);
+export const recipientsPathFor = (profile, env = process.env) => sharedRecipientsPath(MAX_APP, profile, env);
+export const recipientListFor = (profile, env = process.env) => new RecipientList(recipientsPathFor(profile, env), MAX_APP.command);
+/**
+ * Every line one write leaves in the journal carries the same `operationId`, minted at its check;
+ * a send's is its send id. A write a shared service started keeps the service's. `MaxClient` checks before each write and records after it, one at a
+ * time, and the server builds a guard per request, so one guard never holds two writes at once.
+ */
+export const operating = (guard, key) => {
+    let current;
+    const ask = guard.ask;
+    const requests = new WeakMap();
+    const prepared = (request) => {
+        let found = requests.get(request);
+        const previous = found?.source;
+        const unchanged = previous &&
+            Object.keys(previous).length === Object.keys(request).length &&
+            Object.entries(request).every(([key, value]) => key === "personIds" && Array.isArray(value)
+                ? value.length === previous.personIds?.length &&
+                    value.every((id, index) => id === previous.personIds?.[index])
+                : value === previous[key]);
+        if (!found || !unchanged) {
+            const source = {
+                ...request,
+                ...(request.personIds ? { personIds: [...request.personIds] } : {}),
+            };
+            const value = {
+                ...source,
+                ...(source.key === undefined && key ? { key } : {}),
+                operationId: request.operationId ?? currentOperation() ?? request.sendId ?? newOperationId(),
+            };
+            found = { source, value };
+            requests.set(request, found);
+        }
+        current = found.value.operationId;
+        return found.value;
+    };
+    return {
+        // The shared guard binds confirmation to the request object, not to its operation id.
+        ...(ask ? { ask: (request) => ask.call(guard, prepared(request)) } : {}),
+        check: (request, options) => {
+            guard.check(prepared(request), options);
+        },
+        record: (entry) => {
+            const operationId = entry.operationId ?? entry.sendId ?? current;
+            guard.record(operationId === undefined ? entry : { ...entry, operationId });
+        },
+    };
+};
+/**
+ * The guard a profile's configuration asks for — the command's, and `max serve`'s for every write
+ * it forwards. Built per request in the server, so `config set readOnly true` needs no restart.
+ */
+export const guardFor = (settings, warn, ask, key) => {
+    const guard = operating(sendGuard({
+        profile: settings.profile,
+        command: MAX_APP.command,
+        readOnly: settings.readOnly,
+        readOnlyFrom: settings.sources.readOnly,
+        ...(settings.allow
+            ? {
+                allow: settings.allow,
+                allowFrom: settings.sources.allow,
+                allowFix: setCommandFor(settings.sources.allow, settings.profile, "allow"),
+            }
+            : {}),
+        permissions: settings.permissions,
+        permissionSources: settings.permissionSources,
+        ...(ask ? { ask } : {}),
+        sendsPerHour: settings.sendsPerHour,
+        journal: new SendJournal(sendsPathFor(settings.profile)),
+        recipients: recipientListFor(settings.profile),
+        warn,
+    }), key);
+    return {
+        ...guard,
+        check: (request, options) => {
+            if (request.key === "chats.moderate") {
+                const action = keyForWrite(request.kind ?? "message", request.action);
+                const level = levelFor(settings.permissions, action).level;
+                if (level === "deny" || level === "readonly")
+                    throw new CliError("permission_error", `profile ${settings.profile} does not let ${action} write`, {
+                        permission: action,
+                    });
+            }
+            guard.check(request, options);
+            if (request.key === "chats.moderate")
+                approvePermission(keyForWrite(request.kind ?? "message", request.action));
+        },
+    };
+};
+//# sourceMappingURL=sends.js.map

package/dist/sends.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sends.js","sourceRoot":"","sources":["../src/sends.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAC5C,OAAO,EAEL,gBAAgB,EAEhB,WAAW,EACX,QAAQ,EACR,cAAc,EACd,aAAa,EAEb,WAAW,EACX,SAAS,EACT,iBAAiB,IAAI,oBAAoB,EACzC,YAAY,IAAI,eAAe,GAChC,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAA;AAClC,OAAO,EAAiB,aAAa,EAAE,MAAM,aAAa,CAAA;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAEpD,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,OAAe,EAAE,GAAG,GAAsB,OAAO,CAAC,GAAG,EAAU,EAAE,CAC5F,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,CAAA;AAExC,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,OAAe,EAAE,GAAG,GAAsB,OAAO,CAAC,GAAG,EAAU,EAAE,CACjG,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,CAAA;AAE7C,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,OAAe,EAAE,GAAG,GAAsB,OAAO,CAAC,GAAG,EAAiB,EAAE,CACvG,IAAI,aAAa,CAAC,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAA;AAErE;;;;GAIG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,KAAgB,EAAE,GAAY,EAAa,EAAE;IACrE,IAAI,OAA2B,CAAA;IAC/B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAA;IACrB,MAAM,QAAQ,GAAG,IAAI,OAAO,EAA+D,CAAA;IAC3F,MAAM,QAAQ,GAAG,CAAC,OAAqB,EAAgB,EAAE;QACvD,IAAI,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACjC,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAM,CAAA;QAC9B,MAAM,SAAS,GACb,QAAQ;YACR,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM;YAC5D,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAC7C,GAAG,KAAK,WAAW,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBACzC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,SAAS,EAAE,MAAM;oBAC3C,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,KAAK,QAAQ,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC;gBAChE,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,GAAyB,CAAC,CAClD,CAAA;QACH,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG;gBACb,GAAG,OAAO;gBACV,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpE,CAAA;YACD,MAAM,KAAK,GAAG;gBACZ,GAAG,MAAM;gBACT,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnD,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,gBAAgB,EAAE,IAAI,OAAO,CAAC,MAAM,IAAI,cAAc,EAAE;aAC7F,CAAA;YACD,KAAK,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;YACzB,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAC9B,CAAC;QACD,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,CAAA;QACjC,OAAO,KAAK,CAAC,KAAK,CAAA;IACpB,CAAC,CAAA;IACD,OAAO;QACL,sFAAsF;QACtF,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,OAAqB,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,KAAK,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;YAC1B,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAA;QACzC,CAAC;QACD,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAChB,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,MAAM,IAAI,OAAO,CAAA;YAChE,KAAK,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,WAAW,EAAE,CAAC,CAAA;QAC7E,CAAC;KACF,CAAA;AACH,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,QAAkB,EAAE,IAA+B,EAAE,GAAW,EAAE,GAAY,EAAa,EAAE;IACpH,MAAM,KAAK,GAAG,SAAS,CACrB,SAAS,CAAC;QACR,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,QAAQ;QACvC,GAAG,CAAC,QAAQ,CAAC,KAAK;YAChB,CAAC,CAAC;gBACE,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK;gBACjC,QAAQ,EAAE,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;aAC3E;YACH,CAAC,CAAC,EAAE,CAAC;QACP,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;QAC7C,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvB,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,OAAO,EAAE,IAAI,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACxD,UAAU,EAAE,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC;QAC9C,IAAI;KACL,CAAC,EACF,GAAG,CACJ,CAAA;IACD,OAAO;QACL,GAAG,KAAK;QACR,KAAK,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;YAC1B,IAAI,OAAO,CAAC,GAAG,KAAK,gBAAgB,EAAE,CAAC;gBACrC,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,IAAI,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;gBACrE,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,KAAK,CAAA;gBAC1D,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,UAAU;oBAC1C,MAAM,IAAI,QAAQ,CAAC,kBAAkB,EAAE,WAAW,QAAQ,CAAC,OAAO,iBAAiB,MAAM,QAAQ,EAAE;wBACjG,UAAU,EAAE,MAAM;qBACnB,CAAC,CAAA;YACN,CAAC;YACD,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YAC7B,IAAI,OAAO,CAAC,GAAG,KAAK,gBAAgB;gBAAE,iBAAiB,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,IAAI,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAA;QACjH,CAAC;KACF,CAAA;AACH,CAAC,CAAA"}

package/dist/server/lines.d.ts

@@ -0,0 +1,23 @@
+/**
+ * One JSON value per line, **losslessly**: a request or an answer passing through `max serve`
+ * carries MAX's 18-digit message ids, which `JSON` would round into somebody else's message.
+ *
+ * **A `bigint` crosses as a `bigint`, however small.** It is how the codec tells an id from a
+ * count — ids go to MAX wrapped in extension 1, as the web client sends them — and a plain number
+ * literal would come back a `number` for any id that fits one.
+ */
+export declare const toLine: (value: unknown) => string;
+/**
+ * **Bytes cross as bytes**: a voice message's waveform is a `Uint8Array`, which `JSON` makes an
+ * object of indexes, and MAX refuses that send as `proto.payload` (measured 2026-10-01).
+ */
+export declare const fromLine: (line: string) => Record<string, unknown>;
+/**
+ * Calls `onLine` for each complete line `data` finishes, keeping the rest for next time. With
+ * `maxLength`, a line that grows past it calls `onTooLong` instead and nothing more is read.
+ */
+export declare const lineReader: (onLine: (line: string) => void, { maxLength, onTooLong }?: {
+    maxLength?: number;
+    onTooLong?: () => void;
+}) => (data: Buffer | string) => void;
+//# sourceMappingURL=lines.d.ts.map

package/dist/server/lines.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lines.d.ts","sourceRoot":"","sources":["../../src/server/lines.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,eAAO,MAAM,MAAM,UAAW,OAAO,KAAG,MAOjC,CAAA;AAEP;;;GAGG;AACH,eAAO,MAAM,QAAQ,SAAU,MAAM,KAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAUhC,CAAA;AAW9B;;;GAGG;AACH,eAAO,MAAM,UAAU,WACb,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,6BACkC;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,IAAI,CAAA;CAAE,YAIhG,MAAM,GAAG,MAAM,SAgB9B,CAAA"}

package/dist/server/lines.js

@@ -0,0 +1,56 @@
+import { isInteger, isSafeNumber, parse, stringify } from "lossless-json";
+/**
+ * One JSON value per line, **losslessly**: a request or an answer passing through `max serve`
+ * carries MAX's 18-digit message ids, which `JSON` would round into somebody else's message.
+ *
+ * **A `bigint` crosses as a `bigint`, however small.** It is how the codec tells an id from a
+ * count — ids go to MAX wrapped in extension 1, as the web client sends them — and a plain number
+ * literal would come back a `number` for any id that fits one.
+ */
+export const toLine = (value) => `${stringify(value, (_, item) => typeof item === "bigint"
+    ? { [BIGINT]: item.toString() }
+    : item instanceof Uint8Array
+        ? { [BYTES]: Buffer.from(item).toString("base64") }
+        : item)}\n`;
+/**
+ * **Bytes cross as bytes**: a voice message's waveform is a `Uint8Array`, which `JSON` makes an
+ * object of indexes, and MAX refuses that send as `proto.payload` (measured 2026-10-01).
+ */
+export const fromLine = (line) => parse(line, (_, item) => isTagged(item, BIGINT)
+    ? BigInt(item[BIGINT])
+    : isTagged(item, BYTES)
+        ? new Uint8Array(Buffer.from(item[BYTES], "base64"))
+        : item, { parseNumber: (text) => (isInteger(text) && !isSafeNumber(text) ? BigInt(text) : Number(text)) });
+const BIGINT = "$bigint";
+const BYTES = "$bytes";
+const isTagged = (item, tag) => typeof item === "object" &&
+    item !== null &&
+    Object.keys(item).length === 1 &&
+    typeof item[tag] === "string";
+/**
+ * Calls `onLine` for each complete line `data` finishes, keeping the rest for next time. With
+ * `maxLength`, a line that grows past it calls `onTooLong` instead and nothing more is read.
+ */
+export const lineReader = (onLine, { maxLength = Number.POSITIVE_INFINITY, onTooLong = () => { } } = {}) => {
+    let buffered = "";
+    let stopped = false;
+    return (data) => {
+        if (stopped)
+            return;
+        buffered += String(data);
+        let end = buffered.indexOf("\n");
+        while (end >= 0) {
+            const line = buffered.slice(0, end);
+            buffered = buffered.slice(end + 1);
+            if (line.trim() !== "")
+                onLine(line);
+            end = buffered.indexOf("\n");
+        }
+        if (buffered.length > maxLength) {
+            stopped = true;
+            buffered = "";
+            onTooLong();
+        }
+    };
+};
+//# sourceMappingURL=lines.js.map

package/dist/server/lines.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lines.js","sourceRoot":"","sources":["../../src/server/lines.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAEzE;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,KAAc,EAAU,EAAE,CAC/C,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAC9B,OAAO,IAAI,KAAK,QAAQ;IACtB,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE;IAC/B,CAAC,CAAC,IAAI,YAAY,UAAU;QAC1B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;QACnD,CAAC,CAAC,IAAI,CACX,IAAI,CAAA;AAEP;;;GAGG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,IAAY,EAA2B,EAAE,CAChE,KAAK,CACH,IAAI,EACJ,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CACV,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACpB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;QACrB,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,CAAC;QACpD,CAAC,CAAC,IAAI,EACZ,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CACvE,CAAA;AAE9B,MAAM,MAAM,GAAG,SAAS,CAAA;AACxB,MAAM,KAAK,GAAG,QAAQ,CAAA;AAEtB,MAAM,QAAQ,GAAG,CAAmB,IAAa,EAAE,GAAM,EAA6B,EAAE,CACtF,OAAO,IAAI,KAAK,QAAQ;IACxB,IAAI,KAAK,IAAI;IACb,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;IAC9B,OAAQ,IAAgC,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAA;AAE5D;;;GAGG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CACxB,MAA8B,EAC9B,EAAE,SAAS,GAAG,MAAM,CAAC,iBAAiB,EAAE,SAAS,GAAG,GAAG,EAAE,GAAE,CAAC,EAAE,GAAmD,EAAE,EACnH,EAAE;IACF,IAAI,QAAQ,GAAG,EAAE,CAAA;IACjB,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,OAAO,CAAC,IAAqB,EAAE,EAAE;QAC/B,IAAI,OAAO;YAAE,OAAM;QACnB,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,CAAA;QACxB,IAAI,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QAChC,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC;YAChB,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;YACnC,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAA;YAClC,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;gBAAE,MAAM,CAAC,IAAI,CAAC,CAAA;YACpC,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QAC9B,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;YAChC,OAAO,GAAG,IAAI,CAAA;YACd,QAAQ,GAAG,EAAE,CAAA;YACb,SAAS,EAAE,CAAA;QACb,CAAC;IACH,CAAC,CAAA;AACH,CAAC,CAAA"}

package/dist/server/replies.d.ts

@@ -0,0 +1,31 @@
+import type { Id } from "@wirecat/cli-messaging";
+import { type SendGuard } from "@wirecat/cli-messaging/sends";
+import type { MaxClient } from "../client.js";
+import type { MessageHit } from "../domain/models.js";
+export interface RepliesOptions {
+    profile: string;
+    env?: NodeJS.ProcessEnv;
+    /** ms: when the server began; what is older came in the catch-up and is never answered. */
+    since: number;
+    owner: () => Id | undefined;
+    client: () => MaxClient | undefined;
+    guard: () => SendGuard;
+    note: (line: string) => void;
+}
+/**
+ * The owner's reply rules over what MAX pushes, through the shared step tg's `serve` uses — so only
+ * senders the rules file's audience allows are answered, and only with `replies.send` at `allow`. One
+ * message at a time: two at once would both read the limits before either counted its reply.
+ */
+export declare const serverReplies: ({ profile, env, since, owner, client, guard, note }: RepliesOptions) => {
+    arrived: (hit: MessageHit) => void;
+    settled: () => Promise<void>;
+    stop: () => void;
+    close: () => Promise<void>;
+    summary: () => {
+        sent: Record<string, number>;
+        skipped: Record<string, number>;
+        tasks?: Record<string, number> | undefined;
+    };
+};
+//# sourceMappingURL=replies.d.ts.map

package/dist/server/replies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"replies.d.ts","sourceRoot":"","sources":["../../src/server/replies.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAY,EAAE,EAAW,MAAM,wBAAwB,CAAA;AAWnE,OAAO,EAA0B,KAAK,SAAS,EAAE,MAAM,8BAA8B,CAAA;AAGrF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAE7C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAErD,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAA;IACf,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;IACvB,2FAA2F;IAC3F,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC3B,MAAM,EAAE,MAAM,SAAS,GAAG,SAAS,CAAA;IACnC,KAAK,EAAE,MAAM,SAAS,CAAA;IACtB,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAC7B;AAED;;;;GAIG;AACH,eAAO,MAAM,aAAa,wDAAuE,cAAc;mBAmE5F,UAAU;;;;;;;;;CAe5B,CAAA"}

package/dist/server/replies.js

@@ -0,0 +1,95 @@
+import { CliError } from "@wirecat/cli-core";
+import { NO_RULES, openRequestTask, repliesPathFor, repliesStatePathFor, replyRenderer, replyTo, senderFacts, } from "@wirecat/cli-messaging/cli";
+import { guardedWrite, levelFor } from "@wirecat/cli-messaging/sends";
+import { openStore } from "@wirecat/cli-messaging/store";
+import { MAX_APP } from "../app.js";
+import { resolveSettings } from "../config.js";
+/**
+ * The owner's reply rules over what MAX pushes, through the shared step tg's `serve` uses — so only
+ * senders the rules file's audience allows are answered, and only with `replies.send` at `allow`. One
+ * message at a time: two at once would both read the limits before either counted its reply.
+ */
+export const serverReplies = ({ profile, env = process.env, since, owner, client, guard, note }) => {
+    let queue = Promise.resolve();
+    const controller = new AbortController();
+    let opened;
+    const sent = {};
+    const skipped = {};
+    const tasks = {};
+    const handle = async (hit) => {
+        const open = client();
+        if (!open || controller.signal.aborted)
+            return;
+        const answer = await replyTo({
+            rulesPath: repliesPathFor(MAX_APP, profile, env),
+            statePath: repliesStatePathFor(MAX_APP, profile, env),
+            provider: "max",
+            owner: { id: owner() ?? null },
+            since,
+            allowed: () => levelFor(resolveSettings({ profile }, { env }).permissions ?? {}, "replies.send").level === "allow",
+            chatOf: async (chat) => {
+                const found = (await open.chats.list()).items.find((one) => one.id === chat);
+                return { id: chat, kind: (found?.kind ?? "unknown"), title: found?.title ?? null };
+            },
+            senderOf: async (person) => {
+                const account = owner();
+                if (account === undefined)
+                    return { isBot: false, isContact: false };
+                opened ??= openStore({ env });
+                const { isContact, botOf } = await senderFacts(await opened, { provider: "max", account });
+                return { isBot: (await botOf(person)) === true, isContact: isContact(person) };
+            },
+            send: ({ chat, text, replyTo: to, sendId, origin }) => guardedWrite(guard(), {
+                chatId: chat,
+                kind: "message",
+                sendId,
+                operationId: sendId,
+                length: text.length,
+                key: "replies.send",
+                origin,
+            }, () => open.messages.send(chat, text, { cid: Number(sendId), ...(to === undefined ? {} : { replyTo: to }) }), (message) => ({ messageId: message.id })),
+            newSendId: () => open.newSendId(),
+            render: replyRenderer(MAX_APP, profile, () => resolveSettings({ profile }, { env }), env, note, {
+                ai: true,
+                signal: controller.signal,
+            }),
+            openTask: async (message) => {
+                const account = owner();
+                if (account === undefined)
+                    throw new CliError("authentication_error", "the account is not known for reply tasks");
+                opened ??= openStore({ env });
+                return openRequestTask(await opened, { provider: "max", account }, message);
+            },
+        }, asShared(hit));
+        if (answer.task !== undefined)
+            tasks[answer.task] = (tasks[answer.task] ?? 0) + 1;
+        if ("sent" in answer)
+            sent[answer.sent] = (sent[answer.sent] ?? 0) + 1;
+        else if (answer.skip !== NO_RULES)
+            skipped[answer.skip] = (skipped[answer.skip] ?? 0) + 1;
+    };
+    return {
+        arrived: (hit) => {
+            if (hit.outgoing !== false)
+                return;
+            queue = queue.then(() => handle(hit).catch(() => note("a reply rule failed; check the replies file and send permissions")));
+        },
+        settled: () => queue,
+        stop: () => controller.abort(),
+        close: async () => {
+            controller.abort();
+            await queue;
+            if (opened)
+                await (await opened).close();
+        },
+        summary: () => ({ sent, skipped, ...(Object.keys(tasks).length ? { tasks } : {}) }),
+    };
+};
+/** The rules read the text, the sender and what it answers — not attachments, which stay MAX's own. */
+const asShared = ({ chatTitle: _title, attachments: _attachments, replyTo, forwardedFrom: _forwarded, ...hit }) => ({
+    ...hit,
+    attachments: [],
+    replyTo: replyTo && { ...replyTo, attachments: [] },
+    forwardedFrom: null,
+});
+//# sourceMappingURL=replies.js.map

package/dist/server/replies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"replies.js","sourceRoot":"","sources":["../../src/server/replies.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAE5C,OAAO,EACL,QAAQ,EACR,eAAe,EAEf,cAAc,EACd,mBAAmB,EACnB,aAAa,EACb,OAAO,EACP,WAAW,GACZ,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAkB,MAAM,8BAA8B,CAAA;AACrF,OAAO,EAAqB,SAAS,EAAE,MAAM,8BAA8B,CAAA;AAC3E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEnC,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAc9C;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAkB,EAAE,EAAE;IACjH,IAAI,KAAK,GAAG,OAAO,CAAC,OAAO,EAAE,CAAA;IAC7B,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,IAAI,MAAyC,CAAA;IAC7C,MAAM,IAAI,GAA2B,EAAE,CAAA;IACvC,MAAM,OAAO,GAA2B,EAAE,CAAA;IAC1C,MAAM,KAAK,GAA2B,EAAE,CAAA;IAExC,MAAM,MAAM,GAAG,KAAK,EAAE,GAAe,EAAE,EAAE;QACvC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAA;QACrB,IAAI,CAAC,IAAI,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;YAAE,OAAM;QAC9C,MAAM,MAAM,GAAY,MAAM,OAAO,CACnC;YACE,SAAS,EAAE,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC;YAChD,SAAS,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC;YACrD,QAAQ,EAAE,KAAK;YACf,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,IAAI,EAAE;YAC9B,KAAK;YACL,OAAO,EAAE,GAAG,EAAE,CACZ,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,WAAW,IAAI,EAAE,EAAE,cAAc,CAAC,CAAC,KAAK,KAAK,OAAO;YACrG,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACrB,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,CAAA;gBAC5E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,IAAI,SAAS,CAAa,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,IAAI,IAAI,EAAE,CAAA;YAChG,CAAC;YACD,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBACzB,MAAM,OAAO,GAAG,KAAK,EAAE,CAAA;gBACvB,IAAI,OAAO,KAAK,SAAS;oBAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;gBACpE,MAAM,KAAK,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;gBAC7B,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,MAAM,WAAW,CAAC,MAAM,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;gBAC1F,OAAO,EAAE,KAAK,EAAE,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,CAAA;YAChF,CAAC;YACD,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CACpD,YAAY,CACV,KAAK,EAAE,EACP;gBACE,MAAM,EAAE,IAAI;gBACZ,IAAI,EAAE,SAAS;gBACf,MAAM;gBACN,WAAW,EAAE,MAAM;gBACnB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,GAAG,EAAE,cAAc;gBACnB,MAAM;aACP,EACD,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAC3G,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CACzC;YACH,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE;YACjC,MAAM,EAAE,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE;gBAC9F,EAAE,EAAE,IAAI;gBACR,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC;YACF,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;gBAC1B,MAAM,OAAO,GAAG,KAAK,EAAE,CAAA;gBACvB,IAAI,OAAO,KAAK,SAAS;oBACvB,MAAM,IAAI,QAAQ,CAAC,sBAAsB,EAAE,0CAA0C,CAAC,CAAA;gBACxF,MAAM,KAAK,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;gBAC7B,OAAO,eAAe,CAAC,MAAM,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,OAAO,CAAC,CAAA;YAC7E,CAAC;SACF,EACD,QAAQ,CAAC,GAAG,CAAC,CACd,CAAA;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;YAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;QACjF,IAAI,MAAM,IAAI,MAAM;YAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;aACjE,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;IAC3F,CAAC,CAAA;IAED,OAAO;QACL,OAAO,EAAE,CAAC,GAAe,EAAE,EAAE;YAC3B,IAAI,GAAG,CAAC,QAAQ,KAAK,KAAK;gBAAE,OAAM;YAClC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CACtB,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC,CAClG,CAAA;QACH,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK;QACpB,IAAI,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE;QAC9B,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,UAAU,CAAC,KAAK,EAAE,CAAA;YAClB,MAAM,KAAK,CAAA;YACX,IAAI,MAAM;gBAAE,MAAM,CAAC,MAAM,MAAM,CAAC,CAAC,KAAK,EAAE,CAAA;QAC1C,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;KACpF,CAAA;AACH,CAAC,CAAA;AAED,uGAAuG;AACvG,MAAM,QAAQ,GAAG,CAAC,EAChB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,YAAY,EACzB,OAAO,EACP,aAAa,EAAE,UAAU,EACzB,GAAG,GAAG,EACK,EAAW,EAAE,CACxB,CAAC;IACC,GAAG,GAAG;IACN,WAAW,EAAE,EAAE;IACf,OAAO,EAAE,OAAO,IAAI,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE;IACnD,aAAa,EAAE,IAAI;CACpB,CAAY,CAAA"}

package/dist/server/server-connection.d.ts

@@ -0,0 +1,55 @@
+import { Connection, type Wire, type WireEvent } from "../protocol/connection.js";
+import { type Payload } from "../protocol/frame.js";
+import type { SessionStore } from "../session/store.js";
+import type { Operation } from "../spec/define.js";
+/**
+ * **A command's connection: `max serve`'s, shared** (`MAX-35`, `NEED-229`).
+ *
+ * One connection to MAX per profile, whoever asks — CLI commands, `max mcp`, `max watch`. INIT
+ * and LOGIN are answered by the server's own login; **every other request goes over its
+ * connection, sends included**. The server runs the send guards on every write and journals it;
+ * the command's client checks too, so a refusal comes before an upload, and journals only that.
+ *
+ * Before the first request, `ensure` replaces a server a command started under another build; with
+ * none answering, it starts one and waits for it. A connection of the command's own
+ * is opened only when there is no `ensure` (the owner said `serve: false`) and no server, or for
+ * a token being tried out (`max session start`), which is by definition not the server's.
+ */
+export declare class ServerConnection implements Wire {
+    #private;
+    constructor({ path, store, timeoutMs, direct, ensure, }: {
+        path: string;
+        store: SessionStore;
+        timeoutMs?: number;
+        direct?: () => Connection;
+        /** Starts a server when none answers and waits for it; `false` if it did not come up. */
+        ensure?: () => Promise<boolean>;
+    });
+    open(): Promise<void>;
+    /** Whether the server is the one answering — and so the one writing the send journal. */
+    get journals(): boolean;
+    invoke(opcode: number, payload?: Payload, watch?: (event: WireEvent) => void): Promise<Payload>;
+    close(): Promise<void>;
+}
+/**
+ * The operation the server passes on for this opcode, or `undefined` for one it does not: logging
+ * in is the server's own business, a login by QR or SMS is `max session start` on a connection of
+ * its own, and a reserved number is never sent at all.
+ */
+export declare const forwardedOperation: (opcode: number) => Operation | undefined;
+/**
+ * Which operations this build passes on. Two builds can carry the same version number — a checkout
+ * of main against the published package — so the version alone does not tell a server that
+ * refuses a newer operation from one that does not.
+ */
+export declare const OPERATIONS_FINGERPRINT: string;
+/**
+ * Asks a running server to stop. `"refused"` is a server started by hand, which only Ctrl-C
+ * stops; `"none"` is nobody listening.
+ */
+export declare const stopServer: (path: string, { force }?: {
+    force?: boolean | undefined;
+}) => Promise<"stopped" | "refused" | "none">;
+/** What a running server says about itself, or `undefined` when nobody answers. */
+export declare const serverStatus: (path: string) => Promise<Record<string, unknown> | undefined>;
+//# sourceMappingURL=server-connection.d.ts.map

package/dist/server/server-connection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-connection.d.ts","sourceRoot":"","sources":["../../src/server/server-connection.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,UAAU,EAAiB,KAAK,IAAI,EAAE,KAAK,SAAS,EAAE,MAAM,2BAA2B,CAAA;AAChG,OAAO,EAAQ,KAAK,OAAO,EAAE,MAAM,sBAAsB,CAAA;AACzD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AASlD;;;;;;;;;;;;GAYG;AACH,qBAAa,gBAAiB,YAAW,IAAI;;IAe3C,YAAY,EACV,IAAI,EACJ,KAAK,EACL,SAAkB,EAClB,MAAM,EACN,MAAM,GACP,EAAE;QACD,IAAI,EAAE,MAAM,CAAA;QACZ,KAAK,EAAE,YAAY,CAAA;QACnB,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,MAAM,CAAC,EAAE,MAAM,UAAU,CAAA;QACzB,yFAAyF;QACzF,MAAM,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAA;KAChC,EAMA;IAEK,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAG;IAE9B,yFAAyF;IACzF,IAAI,QAAQ,IAAI,OAAO,CAEtB;IAEK,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,OAAY,EAAE,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CA4BxG;IAmCK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAS3B;CA6EF;AAED;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,WAAY,MAAM,KAAG,SAAS,GAAG,SAI7D,CAAA;AAEH;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,QASpB,CAAA;AAEf;;;GAGG;AACH,eAAO,MAAM,UAAU,SAAU,MAAM;;MAA2B,OAAO,CAAC,SAAS,GAAG,SAAS,GAAG,MAAM,CAyBpG,CAAA;AAEJ,mFAAmF;AACnF,eAAO,MAAM,YAAY,SAAU,MAAM,KAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAenF,CAAA"}