@wirecat/max-cli 0.0.0-stage → 0.42.0

package/dist/session/store.d.ts

@@ -0,0 +1,76 @@
+import { type CredentialSource, type KeyringStore } from "@wirecat/cli-core";
+/**
+ * What a MAX session actually is: a token, and an identity for this installation.
+ *
+ * **The token lives in the OS keyring; the rest lives in a file.** The split is not decoration —
+ * the token is the credential, and the device identity is merely identifying, but it must be
+ * *stable*: a client that presents a new device on every command is not imitating a real client
+ * (REQUIREMENTS §34), and MAX ties sessions to it.
+ */
+export interface SessionState {
+    deviceId: string;
+    /** Set once the account is known; only used to tell our own messages from other people's. */
+    viewerId?: string;
+    /** Counts logins so a token that stops working can be explained rather than guessed at (NEED-8). */
+    logins: number;
+    lastLoginAt?: string;
+    /** Where `max inbox` starts next time: the newest message it has read (`NEED-162`). */
+    lastCheckAt?: string;
+    /** Legacy moderation checkpoints, copied once into the rules file by the shared CLI. */
+    checkedUntil?: Record<string, string>;
+    /** Logins MAX refused for too many attempts in a row; a login that succeeds clears it (`MAX-38`). */
+    loginRefusals?: number;
+    /** No login before this time, ISO 8601. */
+    loginPausedUntil?: string;
+}
+/**
+ * **How long a profile stays out after each refusal in a row** (owner, `NEED-265`). In PyMax a
+ * login retried after the limit error kept the account locked (PyMax #106), so the wait grows.
+ */
+export declare const LOGIN_PAUSES_MS: number[];
+/** When the pause ends, or `undefined` if a login may go out now. */
+export declare const loginPausedUntil: (state: SessionState, now?: number) => string | undefined;
+export declare const withLoginRefused: (state: SessionState, now?: number) => SessionState;
+export declare const withoutLoginPause: ({ loginRefusals, loginPausedUntil, ...state }: SessionState) => SessionState;
+export interface SessionStoreOptions {
+    profile?: string;
+    env?: NodeJS.ProcessEnv;
+    keyring?: KeyringStore;
+    /** Overrides the config and state directories; tests pass a temporary one. */
+    configDir?: string;
+    stateDir?: string;
+}
+export declare class SessionStore {
+    #private;
+    readonly profile: string;
+    constructor({ profile, env, keyring, configDir, stateDir }?: SessionStoreOptions);
+    /** `undefined` means nobody has logged in on this profile. */
+    readToken(): string | undefined;
+    /** Where `readToken` found it: `MAX_TOKEN`, the keyring, or the file that stands in for one. */
+    tokenSource(): CredentialSource | undefined;
+    writeToken(token: string): void;
+    /**
+     * Reads the state, inventing a device identity the first time and keeping it thereafter.
+     *
+     * **A new identity is written out immediately, before it is used for anything.** Returning one
+     * without saving it looks harmless and is not: a login that fails, or simply a second call,
+     * would then present MAX with a different device every time — which is the "new device on every
+     * command" that §34 exists to prevent. Found by a test, not by a user.
+     */
+    readState(): SessionState;
+    /** The same name holds a bot (`bots/<profile>.json`, written by `max <p> bot auth set`). Files only. */
+    isBot(): boolean;
+    /** Whether this profile has logged in on this machine. Reads only: unlike `readState`, never creates the file. */
+    hasLoggedIn(): boolean;
+    writeState(state: SessionState): void;
+    /** Forgets everything about this profile. Returns whether there was a token to forget. */
+    forget(): boolean;
+    /**
+     * Where `max serve` listens for this profile. Beside the state file, so a sandbox moves both. On
+     * Windows a socket cannot be a file, so it is a named pipe named after the state directory.
+     */
+    socketPath(): string;
+    /** A file of the server's beside the state file: `<profile>.sock.refused`, `<profile>.serve.log`. */
+    serverFile(suffix: string): string;
+}
+//# sourceMappingURL=store.d.ts.map

package/dist/session/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/session/store.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,KAAK,gBAAgB,EAErB,KAAK,YAAY,EAIlB,MAAM,mBAAmB,CAAA;AAE1B;;;;;;;GAOG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAA;IAChB,6FAA6F;IAC7F,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,oGAAoG;IACpG,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,uFAAuF;IACvF,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,wFAAwF;IACxF,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACrC,qGAAqG;IACrG,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,2CAA2C;IAC3C,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B;AAED;;;GAGG;AACH,eAAO,MAAM,eAAe,UAAqE,CAAA;AAEjG,qEAAqE;AACrE,eAAO,MAAM,gBAAgB,UAAW,YAAY,mBAAqB,MAAM,GAAG,SACqC,CAAA;AAEvH,eAAO,MAAM,gBAAgB,UAAW,YAAY,mBAAqB,YAIxE,CAAA;AAED,eAAO,MAAM,iBAAiB,kDAAmD,YAAY,KAAG,YAAqB,CAAA;AAErH,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;IACvB,OAAO,CAAC,EAAE,YAAY,CAAA;IACtB,8EAA8E;IAC9E,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAID,qBAAa,YAAY;;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IAIxB,YAAY,EAAE,OAAmB,EAAE,GAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAE,mBAAwB,EAa7G;IAED,8DAA8D;IAC9D,SAAS,IAAI,MAAM,GAAG,SAAS,CAE9B;IAED,gGAAgG;IAChG,WAAW,IAAI,gBAAgB,GAAG,SAAS,CAE1C;IAED,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAE9B;IAED;;;;;;;OAOG;IACH,SAAS,IAAI,YAAY,CAaxB;IAED,wGAAwG;IACxG,KAAK,IAAI,OAAO,CAEf;IAED,kHAAkH;IAClH,WAAW,IAAI,OAAO,CAOrB;IAED,UAAU,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAEpC;IAED,0FAA0F;IAC1F,MAAM,IAAI,OAAO,CAShB;IAED;;;OAGG;IACH,UAAU,IAAI,MAAM,CAMnB;IAED,qGAAqG;IACrG,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEjC;CAKF"}

package/dist/session/store.js

@@ -0,0 +1,134 @@
+import { createHash, randomUUID } from "node:crypto";
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { Credentials, pathsAreOverridden, resolvePaths, writeSecurely, } from "@wirecat/cli-core";
+/**
+ * **How long a profile stays out after each refusal in a row** (owner, `NEED-265`). In PyMax a
+ * login retried after the limit error kept the account locked (PyMax #106), so the wait grows.
+ */
+export const LOGIN_PAUSES_MS = [1, 5, 30, 60, 6 * 60, 24 * 60].map((minutes) => minutes * 60_000);
+/** When the pause ends, or `undefined` if a login may go out now. */
+export const loginPausedUntil = (state, now = Date.now()) => state.loginPausedUntil !== undefined && Date.parse(state.loginPausedUntil) > now ? state.loginPausedUntil : undefined;
+export const withLoginRefused = (state, now = Date.now()) => {
+    const refusals = (state.loginRefusals ?? 0) + 1;
+    const wait = LOGIN_PAUSES_MS[Math.min(refusals, LOGIN_PAUSES_MS.length) - 1] ?? 0;
+    return { ...state, loginRefusals: refusals, loginPausedUntil: new Date(now + wait).toISOString() };
+};
+export const withoutLoginPause = ({ loginRefusals, loginPausedUntil, ...state }) => state;
+const APP = "max-cli";
+export class SessionStore {
+    profile;
+    #stateDir;
+    #credentials;
+    constructor({ profile = "default", env = process.env, keyring, configDir, stateDir } = {}) {
+        const paths = resolvePaths({ appName: APP, prefix: "MAX", env });
+        this.profile = profile;
+        this.#stateDir = stateDir ?? paths.state;
+        this.#credentials = new Credentials({
+            configDir: configDir ?? paths.config,
+            service: APP,
+            envVar: "MAX_TOKEN",
+            isolated: pathsAreOverridden({ appName: APP, prefix: "MAX", env }),
+            ...(keyring ? { keyring } : {}),
+            env,
+            warn: (message) => process.stderr.write(`${message}\n`),
+        });
+    }
+    /** `undefined` means nobody has logged in on this profile. */
+    readToken() {
+        return this.#credentials.read(this.profile)?.secret;
+    }
+    /** Where `readToken` found it: `MAX_TOKEN`, the keyring, or the file that stands in for one. */
+    tokenSource() {
+        return this.#credentials.read(this.profile)?.source;
+    }
+    writeToken(token) {
+        this.#credentials.write(this.profile, token);
+    }
+    /**
+     * Reads the state, inventing a device identity the first time and keeping it thereafter.
+     *
+     * **A new identity is written out immediately, before it is used for anything.** Returning one
+     * without saving it looks harmless and is not: a login that fails, or simply a second call,
+     * would then present MAX with a different device every time — which is the "new device on every
+     * command" that §34 exists to prevent. Found by a test, not by a user.
+     */
+    readState() {
+        try {
+            const parsed = JSON.parse(readFileSync(this.#statePath(), "utf8"));
+            if (typeof parsed.deviceId === "string" && parsed.deviceId !== "") {
+                return { deviceId: parsed.deviceId, logins: parsed.logins ?? 0, ...pick(parsed) };
+            }
+        }
+        catch {
+            // No state yet, or a file we cannot read: either way the answer is a fresh identity.
+        }
+        const fresh = { deviceId: randomUUID(), logins: 0 };
+        this.writeState(fresh);
+        return fresh;
+    }
+    /** The same name holds a bot (`bots/<profile>.json`, written by `max <p> bot auth set`). Files only. */
+    isBot() {
+        return existsSync(join(this.#stateDir, "bots", `${this.profile}.json`));
+    }
+    /** Whether this profile has logged in on this machine. Reads only: unlike `readState`, never creates the file. */
+    hasLoggedIn() {
+        try {
+            const parsed = JSON.parse(readFileSync(this.#statePath(), "utf8"));
+            return (parsed.logins ?? 0) > 0 || typeof parsed.viewerId === "string";
+        }
+        catch {
+            return false;
+        }
+    }
+    writeState(state) {
+        writeSecurely(this.#statePath(), `${JSON.stringify(state, null, 2)}\n`, 0o600);
+    }
+    /** Forgets everything about this profile. Returns whether there was a token to forget. */
+    forget() {
+        const had = this.readToken() !== undefined;
+        this.#credentials.remove(this.profile);
+        try {
+            writeSecurely(this.#statePath(), `${JSON.stringify({ deviceId: randomUUID(), logins: 0 }, null, 2)}\n`, 0o600);
+        }
+        catch {
+            // Nothing to reset.
+        }
+        return had;
+    }
+    /**
+     * Where `max serve` listens for this profile. Beside the state file, so a sandbox moves both. On
+     * Windows a socket cannot be a file, so it is a named pipe named after the state directory.
+     */
+    socketPath() {
+        if (process.platform === "win32") {
+            const directory = createHash("sha256").update(this.#stateDir).digest("hex").slice(0, 16);
+            return `\\\\.\\pipe\\max-cli-${directory}-${this.profile}`;
+        }
+        return this.serverFile(".sock");
+    }
+    /** A file of the server's beside the state file: `<profile>.sock.refused`, `<profile>.serve.log`. */
+    serverFile(suffix) {
+        return join(this.#stateDir, "profiles", `${this.profile}${suffix}`);
+    }
+    #statePath() {
+        return join(this.#stateDir, "profiles", `${this.profile}.json`);
+    }
+}
+const pick = (state) => {
+    const extra = {};
+    if (typeof state.viewerId === "string")
+        extra.viewerId = state.viewerId;
+    if (typeof state.lastLoginAt === "string")
+        extra.lastLoginAt = state.lastLoginAt;
+    if (typeof state.lastCheckAt === "string")
+        extra.lastCheckAt = state.lastCheckAt;
+    if (state.checkedUntil && typeof state.checkedUntil === "object")
+        extra.checkedUntil = state.checkedUntil;
+    if (typeof state.loginRefusals === "number")
+        extra.loginRefusals = state.loginRefusals;
+    if (typeof state.loginPausedUntil === "string")
+        extra.loginPausedUntil = state.loginPausedUntil;
+    return extra;
+};
+//# sourceMappingURL=store.js.map

package/dist/session/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/session/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAClD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAEL,WAAW,EAEX,kBAAkB,EAClB,YAAY,EACZ,aAAa,GACd,MAAM,mBAAmB,CAAA;AA2B1B;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,GAAG,MAAM,CAAC,CAAA;AAEjG,qEAAqE;AACrE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAmB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAsB,EAAE,CAC5F,KAAK,CAAC,gBAAgB,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAA;AAEvH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAmB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAgB,EAAE;IACtF,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;IAC/C,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAA;IACjF,OAAO,EAAE,GAAG,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,gBAAgB,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAA;AACpG,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,EAAE,aAAa,EAAE,gBAAgB,EAAE,GAAG,KAAK,EAAgB,EAAgB,EAAE,CAAC,KAAK,CAAA;AAWrH,MAAM,GAAG,GAAG,SAAS,CAAA;AAErB,MAAM,OAAO,YAAY;IACd,OAAO,CAAQ;IACf,SAAS,CAAQ;IACjB,YAAY,CAAa;IAElC,YAAY,EAAE,OAAO,GAAG,SAAS,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAwB,EAAE;QAC5G,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;QAChE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,SAAS,GAAG,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAA;QACxC,IAAI,CAAC,YAAY,GAAG,IAAI,WAAW,CAAC;YAClC,SAAS,EAAE,SAAS,IAAI,KAAK,CAAC,MAAM;YACpC,OAAO,EAAE,GAAG;YACZ,MAAM,EAAE,WAAW;YACnB,QAAQ,EAAE,kBAAkB,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;YAClE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/B,GAAG;YACH,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC;SACxD,CAAC,CAAA;IACJ,CAAC;IAED,8DAA8D;IAC9D,SAAS;QACP,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACrD,CAAC;IAED,gGAAgG;IAChG,WAAW;QACT,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACrD,CAAC;IAED,UAAU,CAAC,KAAa;QACtB,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;IAC9C,CAAC;IAED;;;;;;;OAOG;IACH,SAAS;QACP,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,CAA0B,CAAA;YAC3F,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;gBAClE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAA;YACnF,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,qFAAqF;QACvF,CAAC;QAED,MAAM,KAAK,GAAiB,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAA;QACjE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;QACtB,OAAO,KAAK,CAAA;IACd,CAAC;IAED,wGAAwG;IACxG,KAAK;QACH,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,OAAO,CAAC,CAAC,CAAA;IACzE,CAAC;IAED,kHAAkH;IAClH,WAAW;QACT,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,CAA0B,CAAA;YAC3F,OAAO,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAA;QACxE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IAED,UAAU,CAAC,KAAmB;QAC5B,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IAChF,CAAC;IAED,0FAA0F;IAC1F,MAAM;QACJ,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,SAAS,CAAA;QAC1C,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACtC,IAAI,CAAC;YACH,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QAChH,CAAC;QAAC,MAAM,CAAC;YACP,oBAAoB;QACtB,CAAC;QACD,OAAO,GAAG,CAAA;IACZ,CAAC;IAED;;;OAGG;IACH,UAAU;QACR,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;YACxF,OAAO,wBAAwB,SAAS,IAAI,IAAI,CAAC,OAAO,EAAE,CAAA;QAC5D,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;IACjC,CAAC;IAED,qGAAqG;IACrG,UAAU,CAAC,MAAc;QACvB,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,OAAO,GAAG,MAAM,EAAE,CAAC,CAAA;IACrE,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,OAAO,OAAO,CAAC,CAAA;IACjE,CAAC;CACF;AAED,MAAM,IAAI,GAAG,CAAC,KAA4B,EAAE,EAAE;IAC5C,MAAM,KAAK,GAA0B,EAAE,CAAA;IACvC,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAAE,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAA;IACvE,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;QAAE,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAA;IAChF,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;QAAE,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAA;IAChF,IAAI,KAAK,CAAC,YAAY,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;QAAE,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAA;IACzG,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;QAAE,KAAK,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAA;IACtF,IAAI,OAAO,KAAK,CAAC,gBAAgB,KAAK,QAAQ;QAAE,KAAK,CAAC,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,CAAA;IAC/F,OAAO,KAAK,CAAA;AACd,CAAC,CAAA"}

package/dist/skill.d.ts

@@ -0,0 +1,7 @@
+import { type SkillApp } from "@wirecat/cli-core/skill";
+/** Beside `dist/` in the package and in a checkout alike, so the skill is always this version's. */
+export declare const SKILL: import("url").URL;
+export declare const SKILL_APP: SkillApp;
+/** `max://skill` for both MCP servers, and the line their instructions end with. */
+export declare const SKILL_RESOURCE: import("@wirecat/cli-core/skill").SkillResource;
+//# sourceMappingURL=skill.d.ts.map

package/dist/skill.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill.d.ts","sourceRoot":"","sources":["../src/skill.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,QAAQ,EAAiB,MAAM,yBAAyB,CAAA;AAGtE,oGAAoG;AACpG,eAAO,MAAM,KAAK,mBAAyD,CAAA;AAE3E,eAAO,MAAM,SAAS,EAAE,QAAmE,CAAA;AAE3F,oFAAoF;AACpF,eAAO,MAAM,cAAc,iDAAkC,CAAA"}

package/dist/skill.js

@@ -0,0 +1,8 @@
+import { skillResource } from "@wirecat/cli-core/skill";
+import { VERSION } from "./version.js";
+/** Beside `dist/` in the package and in a checkout alike, so the skill is always this version's. */
+export const SKILL = new URL("../skills/max-cli/SKILL.md", import.meta.url);
+export const SKILL_APP = { command: "max", appName: "max-cli", version: VERSION };
+/** `max://skill` for both MCP servers, and the line their instructions end with. */
+export const SKILL_RESOURCE = skillResource(SKILL_APP, SKILL);
+//# sourceMappingURL=skill.js.map

package/dist/skill.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill.js","sourceRoot":"","sources":["../src/skill.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACtE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAEtC,oGAAoG;AACpG,MAAM,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,4BAA4B,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAA;AAE3E,MAAM,CAAC,MAAM,SAAS,GAAa,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,CAAA;AAE3F,oFAAoF;AACpF,MAAM,CAAC,MAAM,cAAc,GAAG,aAAa,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA"}

package/dist/spec/check.d.ts

@@ -0,0 +1,16 @@
+import type { Payload } from "../protocol/frame.js";
+import { type Operation } from "./define.js";
+/**
+ * Compares MAX's answer with what we declared, and **reports without deciding**.
+ *
+ * Checking is not enforcing. An unofficial protocol changes without telling anyone, so a response
+ * never fails a command, never changes an exit code and never alters what the caller gets back
+ * (`NEED-35`). Unknown fields are not mismatches at all — response shapes are loose, and a field
+ * MAX adds passes straight through.
+ *
+ * What is left is the case worth hearing about: a field we said we rely on stopped being what it
+ * was. The failure this prevents is the quiet one — `max chats` printing a column of blanks
+ * because something was renamed, and nobody learning why for a week.
+ */
+export declare const checkResponse: (operation: Operation, payload: Payload) => string | undefined;
+//# sourceMappingURL=check.d.ts.map

package/dist/spec/check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../../src/spec/check.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AACnD,OAAO,EAAa,KAAK,SAAS,EAAE,MAAM,aAAa,CAAA;AAEvD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,aAAa,cAAe,SAAS,WAAW,OAAO,KAAG,MAAM,GAAG,SAgB/E,CAAA"}

package/dist/spec/check.js

@@ -0,0 +1,44 @@
+import * as v from "valibot";
+import { fieldPath } from "./define.js";
+/**
+ * Compares MAX's answer with what we declared, and **reports without deciding**.
+ *
+ * Checking is not enforcing. An unofficial protocol changes without telling anyone, so a response
+ * never fails a command, never changes an exit code and never alters what the caller gets back
+ * (`NEED-35`). Unknown fields are not mismatches at all — response shapes are loose, and a field
+ * MAX adds passes straight through.
+ *
+ * What is left is the case worth hearing about: a field we said we rely on stopped being what it
+ * was. The failure this prevents is the quiet one — `max chats` printing a column of blanks
+ * because something was renamed, and nobody learning why for a week.
+ */
+export const checkResponse = (operation, payload) => {
+    try {
+        const result = v.safeParse(operation.response, payload);
+        if (result.success)
+            return undefined;
+        const shown = result.issues.slice(0, MOST);
+        const rest = result.issues.length - shown.length;
+        const detail = shown.map(describe).join("; ");
+        return `${operation.name}: MAX answered with something we did not expect — ${detail}${rest > 0 ? ` (and ${rest} more)` : ""}`;
+    }
+    catch {
+        // A diagnostic that breaks the command it was describing is worse than no diagnostic.
+        return undefined;
+    }
+};
+const MOST = 3;
+/**
+ * ⚠ **Built by hand, never from `issue.message`.** Valibot's own text quotes the value it saw —
+ * `Invalid type: Expected number but received "…"` — and the value may be somebody's message. Only
+ * the field path, the expected type and the *kind* of what arrived leave this function.
+ */
+const describe = (issue) => `${fieldPath(issue)} — expected ${issue.expected ?? "something else"}, got ${kindOf(issue.input)}`;
+const kindOf = (value) => {
+    if (value === null)
+        return "null";
+    if (Array.isArray(value))
+        return "a list";
+    return typeof value;
+};
+//# sourceMappingURL=check.js.map

package/dist/spec/check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.js","sourceRoot":"","sources":["../../src/spec/check.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAE5B,OAAO,EAAE,SAAS,EAAkB,MAAM,aAAa,CAAA;AAEvD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,SAAoB,EAAE,OAAgB,EAAsB,EAAE;IAC1F,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QACvD,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,SAAS,CAAA;QAEpC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;QAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAA;QAChD,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAE7C,OAAO,GAAG,SAAS,CAAC,IAAI,qDAAqD,MAAM,GACjF,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,QAAQ,CAAC,CAAC,CAAC,EACrC,EAAE,CAAA;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,sFAAsF;QACtF,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC,CAAA;AAED,MAAM,IAAI,GAAG,CAAC,CAAA;AAEd;;;;GAIG;AACH,MAAM,QAAQ,GAAG,CAAC,KAAoE,EAAU,EAAE,CAChG,GAAG,SAAS,CAAC,KAAK,CAAC,eAAe,KAAK,CAAC,QAAQ,IAAI,gBAAgB,SAAS,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAA;AAEpG,MAAM,MAAM,GAAG,CAAC,KAAc,EAAU,EAAE;IACxC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAA;IACjC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAA;IACzC,OAAO,OAAO,KAAK,CAAA;AACrB,CAAC,CAAA"}

package/dist/spec/define.d.ts

@@ -0,0 +1,108 @@
+import type { SendEntry } from "@wirecat/cli-messaging/sends";
+import * as v from "valibot";
+import type { Payload } from "../protocol/frame.js";
+/**
+ * How much we actually know about a shape.
+ *
+ * `REQUIREMENTS.md` §10 asks for four levels. There are five, because most of what this CLI sends
+ * is stronger than all four of them: we watched MAX answer it. A claim in a README, a line in
+ * somebody's source and a frame we captured are three different things, and flattening the third
+ * into "confirmed" loses the one distinction the field exists for.
+ *
+ * The case this has to express: opcode 36 is `CONTACT_LIST` in two clients and `GET_BLOCKED` in
+ * the documentation. "Two sources agree" and "one client does this" must not be the same value.
+ */
+export type Confidence = 
+/** We sent it and read the answer. The source says when. */
+"measured"
+/** Two or more independent implementations agree, and we have not run it. */
+ | "confirmed"
+/** One implementation does this. */
+ | "observed"
+/** Nobody states it; it follows from something next to it. */
+ | "inferred"
+/** Named here so that a gap is recorded rather than implied. */
+ | "unknown";
+export interface Provenance {
+    confidence: Confidence;
+    /** Where it came from: a file in another project, a document, or a dated measurement. */
+    sources: [string, ...string[]];
+    /** Anything a reader needs that the sources do not say. */
+    notes?: string;
+}
+export interface Operation<TRequest extends v.GenericSchema = v.GenericSchema, TResponse extends v.GenericSchema = v.GenericSchema> {
+    readonly kind: "operation";
+    /** Dotted and grouped by subject: `chats.list`, `messages.send`. The generator splits on the dot. */
+    readonly name: string;
+    /**
+     * MAX's own name for the number, as captured traffic and other clients spell it — `MSG_SEND`,
+     * not `MESSAGES_SEND`. Written out rather than derived from `name`, because the two vocabularies
+     * are not the same one: ours groups by subject, MAX's has to match what a frame is called
+     * everywhere else (`CONVENTIONS.md`, wire names below the adapter).
+     */
+    readonly constant: string;
+    readonly opcode: number;
+    /** Whether it may only be sent after LOGIN. */
+    readonly auth: boolean;
+    /** Strict: a request must not carry a field nobody has seen. */
+    readonly request: TRequest;
+    /** Loose: a response that gained a field must not break a command (§29). */
+    readonly response: TResponse;
+    /**
+     * What the send guard is asked before this goes to MAX, read from the request as it goes on the
+     * wire — or `null` for an operation nobody else sees. Required, so a new operation cannot reach
+     * `max serve`'s socket unguarded because somebody forgot to say it writes.
+     */
+    readonly guard: ((request: Payload) => Guarded) | null;
+    readonly provenance: Provenance;
+}
+/** One guarded write as the journal will record it; the outcome comes after. */
+export type Guarded = Omit<SendEntry, "at" | "profile" | "outcome" | "errorCode" | "kind"> & Required<Pick<SendEntry, "kind">> & {
+    /** Who a new group or an added member is: the recipient list is asked about each. Not journaled. */
+    key?: string;
+    personIds?: string[];
+};
+/**
+ * A number we know and will not send.
+ *
+ * Not a `callable: false` flag on an operation, because a reserved opcode has no request shape and
+ * half an empty operation invites somebody to fill it in. The generator gives these a registry
+ * entry and no method, which is what turns "never call an opcode because it is in the enum" from a
+ * rule somebody has to remember into a property of the generated code.
+ */
+export interface Reservation {
+    readonly kind: "reservation";
+    readonly name: string;
+    readonly constant: string;
+    readonly opcode: number;
+    /** Why it is known and still never sent. This is the whole value of the entry. */
+    readonly reason: string;
+    readonly provenance: Provenance;
+}
+export type Entry = Operation | Reservation;
+export declare const defineOperation: <TRequest extends v.GenericSchema, TResponse extends v.GenericSchema>(operation: Omit<Operation<TRequest, TResponse>, "kind">) => Operation<TRequest, TResponse>;
+export declare const reserveOpcode: (reservation: Omit<Reservation, "kind">) => Reservation;
+/** What a caller passes: a domain string for an id, not a `bigint`. */
+export type RequestOf<TOperation extends Operation> = v.InferInput<TOperation["request"]>;
+/** What goes on the wire once the schema has encoded it. */
+export type WireRequestOf<TOperation extends Operation> = v.InferOutput<TOperation["request"]>;
+export type ResponseOf<TOperation extends Operation> = v.InferOutput<TOperation["response"]>;
+/**
+ * Checks and encodes in one step, so a conversion cannot be forgotten in a second place.
+ *
+ * A refusal here is ours, before anything reaches the socket. **The message names the field and
+ * never the value** — a request carries message text, and a validation error is not a place for
+ * it to appear.
+ */
+export declare const buildRequest: <TOperation extends Operation>(operation: TOperation, input: RequestOf<TOperation>) => Payload;
+/**
+ * The dotted path of the field an issue is about, and nothing else.
+ *
+ * ⚠ **Never `issue.message` and never `issue.received`.** Valibot's own text quotes the value it
+ * saw — `Invalid type: Expected number but received "…"` — so printing it puts a message body on
+ * the screen and into any log that collects the stream (`REQUIREMENTS.md` §14, §24).
+ */
+export declare const fieldPath: (issue: {
+    path?: unknown;
+}) => string;
+//# sourceMappingURL=define.d.ts.map

package/dist/spec/define.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"define.d.ts","sourceRoot":"","sources":["../../src/spec/define.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAA;AAC7D,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AAEnD;;;;;;;;;;GAUG;AACH,MAAM,MAAM,UAAU;AACpB,4DAA4D;AAC1D,UAAU;AACZ,6EAA6E;GAC3E,WAAW;AACb,oCAAoC;GAClC,UAAU;AACZ,8DAA8D;GAC5D,UAAU;AACZ,gEAAgE;GAC9D,SAAS,CAAA;AAEb,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,UAAU,CAAA;IACtB,yFAAyF;IACzF,OAAO,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAA;IAC9B,2DAA2D;IAC3D,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,SAAS,CACxB,QAAQ,SAAS,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,aAAa,EAClD,SAAS,SAAS,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,aAAa;IAEnD,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;IAC1B,qGAAqG;IACrG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,+CAA+C;IAC/C,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;IACtB,gEAAgE;IAChE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAA;IAC1B,4EAA4E;IAC5E,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAA;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,GAAG,IAAI,CAAA;IACtD,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAA;CAChC;AAED,gFAAgF;AAChF,MAAM,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,MAAM,CAAC,GACxF,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,GAAG;IAClC,oGAAoG;IACpG,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;CACrB,CAAA;AAEH;;;;;;;GAOG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,kFAAkF;IAClF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAA;CAChC;AAED,MAAM,MAAM,KAAK,GAAG,SAAS,GAAG,WAAW,CAAA;AAE3C,eAAO,MAAM,eAAe,GAAI,QAAQ,SAAS,CAAC,CAAC,aAAa,EAAE,SAAS,SAAS,CAAC,CAAC,aAAa,aACtF,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,KACtD,SAAS,CAAC,QAAQ,EAAE,SAAS,CAA0C,CAAA;AAE1E,eAAO,MAAM,aAAa,gBAAiB,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,KAAG,WAGrE,CAAA;AAEF,uEAAuE;AACvE,MAAM,MAAM,SAAS,CAAC,UAAU,SAAS,SAAS,IAAI,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAA;AAEzF,4DAA4D;AAC5D,MAAM,MAAM,aAAa,CAAC,UAAU,SAAS,SAAS,IAAI,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAA;AAE9F,MAAM,MAAM,UAAU,CAAC,UAAU,SAAS,SAAS,IAAI,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAA;AAE5F;;;;;;GAMG;AACH,eAAO,MAAM,YAAY,GAAI,UAAU,SAAS,SAAS,aAC5C,UAAU,SACd,SAAS,CAAC,UAAU,CAAC,KAC3B,OAQF,CAAA;AAaD;;;;;;GAMG;AACH,eAAO,MAAM,SAAS,UAAW;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,KAAG,MAIrD,CAAA"}

package/dist/spec/define.js

@@ -0,0 +1,47 @@
+import { CliError } from "@wirecat/cli-core";
+import * as v from "valibot";
+export const defineOperation = (operation) => ({ kind: "operation", ...operation });
+export const reserveOpcode = (reservation) => ({
+    kind: "reservation",
+    ...reservation,
+});
+/**
+ * Checks and encodes in one step, so a conversion cannot be forgotten in a second place.
+ *
+ * A refusal here is ours, before anything reaches the socket. **The message names the field and
+ * never the value** — a request carries message text, and a validation error is not a place for
+ * it to appear.
+ */
+export const buildRequest = (operation, input) => {
+    const result = v.safeParse(operation.request, input);
+    if (result.success)
+        return result.output;
+    const fields = closestIssues(operation.request, input, result.issues)
+        .map((issue) => fieldPath(issue))
+        .join(", ");
+    throw new CliError("validation_error", `${operation.name}: cannot send this request — ${fields}`);
+};
+/**
+ * A request with several shapes (`messages.send` is a message or a new group) fails in all of
+ * them, and Valibot reports every shape's complaints at once. The shape nearest to what was
+ * built is the one its author meant, so only its fields are named.
+ */
+const closestIssues = (schema, input, issues) => {
+    if (!("options" in schema) || !Array.isArray(schema.options))
+        return issues;
+    const attempts = schema.options.map((option) => v.safeParse(option, input).issues ?? []);
+    return attempts.reduce((best, attempt) => (attempt.length < best.length ? attempt : best));
+};
+/**
+ * The dotted path of the field an issue is about, and nothing else.
+ *
+ * ⚠ **Never `issue.message` and never `issue.received`.** Valibot's own text quotes the value it
+ * saw — `Invalid type: Expected number but received "…"` — so printing it puts a message body on
+ * the screen and into any log that collects the stream (`REQUIREMENTS.md` §14, §24).
+ */
+export const fieldPath = (issue) => {
+    const path = Array.isArray(issue.path) ? issue.path : [];
+    const segments = path.map((step) => String(step?.key ?? "?"));
+    return segments.length > 0 ? segments.join(".") : "(the payload itself)";
+};
+//# sourceMappingURL=define.js.map

package/dist/spec/define.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"define.js","sourceRoot":"","sources":["../../src/spec/define.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAE5C,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AA4F5B,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,SAAuD,EACvB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,SAAS,EAAE,CAAC,CAAA;AAE1E,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,WAAsC,EAAe,EAAE,CAAC,CAAC;IACrF,IAAI,EAAE,aAAa;IACnB,GAAG,WAAW;CACf,CAAC,CAAA;AAUF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,SAAqB,EACrB,KAA4B,EACnB,EAAE;IACX,MAAM,MAAM,GAAG,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;IACpD,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC,MAAiB,CAAA;IAEnD,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;SAClE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;SAChC,IAAI,CAAC,IAAI,CAAC,CAAA;IACb,MAAM,IAAI,QAAQ,CAAC,kBAAkB,EAAE,GAAG,SAAS,CAAC,IAAI,gCAAgC,MAAM,EAAE,CAAC,CAAA;AACnG,CAAC,CAAA;AAED;;;;GAIG;AACH,MAAM,aAAa,GAAG,CAAC,MAAuB,EAAE,KAAc,EAAE,MAAuC,EAAE,EAAE;IACzG,IAAI,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAA;IAC3E,MAAM,QAAQ,GAAI,MAAM,CAAC,OAA6B,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAA;IAC/G,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;AAC5F,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,KAAyB,EAAU,EAAE;IAC7D,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;IACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,IAAuB,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,GAAG,CAAC,CAAC,CAAA;IAChF,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAA;AAC1E,CAAC,CAAA"}

package/dist/spec/guards.d.ts

@@ -0,0 +1,16 @@
+import { type Payload } from "../protocol/frame.js";
+/**
+ * The chat a guarded request goes to. **Missing is a refusal, never `null`**: a `null` chat skips
+ * the recipient list, so only the shapes that create or join a chat may have one.
+ */
+export declare const chatOf: (request: Payload, field?: string) => string;
+export declare const messageOf: (request: Payload, field?: string) => {
+    messageId?: string;
+};
+export declare const objectOf: (value: unknown) => Payload;
+export declare const countOf: (value: unknown) => number;
+/** The people a request puts into a chat; one that cannot be read as an id is refused. */
+export declare const peopleOf: (value: unknown) => string[];
+/** A request that could be read as two different changes is refused rather than guarded as one of them. */
+export declare const ambiguous: (operation: string) => never;
+//# sourceMappingURL=guards.d.ts.map

package/dist/spec/guards.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guards.d.ts","sourceRoot":"","sources":["../../src/spec/guards.ts"],"names":[],"mappings":"AACA,OAAO,EAAQ,KAAK,OAAO,EAAE,MAAM,sBAAsB,CAAA;AAEzD;;;GAGG;AACH,eAAO,MAAM,MAAM,YAAa,OAAO,qBAAqB,MAI3D,CAAA;AAED,eAAO,MAAM,SAAS,YAAa,OAAO,qBAAwB;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAGrF,CAAA;AAED,eAAO,MAAM,QAAQ,UAAW,OAAO,KAAG,OACsD,CAAA;AAEhG,eAAO,MAAM,OAAO,UAAW,OAAO,KAAG,MAAmD,CAAA;AAE5F,0FAA0F;AAC1F,eAAO,MAAM,QAAQ,UAAW,OAAO,KAAG,MAAM,EAM5C,CAAA;AAEJ,2GAA2G;AAC3G,eAAO,MAAM,SAAS,cAAe,MAAM,KAAG,KAE7C,CAAA"}

package/dist/spec/guards.js

@@ -0,0 +1,30 @@
+import { CliError } from "@wirecat/cli-core";
+import { asId } from "../protocol/frame.js";
+/**
+ * The chat a guarded request goes to. **Missing is a refusal, never `null`**: a `null` chat skips
+ * the recipient list, so only the shapes that create or join a chat may have one.
+ */
+export const chatOf = (request, field = "chatId") => {
+    const chatId = asId(request[field]);
+    if (chatId === undefined)
+        throw new CliError("validation_error", `a guarded request without its ${field}`);
+    return chatId;
+};
+export const messageOf = (request, field = "messageId") => {
+    const messageId = asId(request[field]);
+    return messageId === undefined ? {} : { messageId };
+};
+export const objectOf = (value) => typeof value === "object" && value !== null && !Array.isArray(value) ? value : {};
+export const countOf = (value) => (Array.isArray(value) ? value.length : 0);
+/** The people a request puts into a chat; one that cannot be read as an id is refused. */
+export const peopleOf = (value) => (Array.isArray(value) ? value : []).map((one) => {
+    const person = asId(one);
+    if (person === undefined)
+        throw new CliError("validation_error", "a guarded request with a person that is not an id");
+    return person;
+});
+/** A request that could be read as two different changes is refused rather than guarded as one of them. */
+export const ambiguous = (operation) => {
+    throw new CliError("validation_error", `${operation}: one change per request`);
+};
+//# sourceMappingURL=guards.js.map

package/dist/spec/guards.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guards.js","sourceRoot":"","sources":["../../src/spec/guards.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAC5C,OAAO,EAAE,IAAI,EAAgB,MAAM,sBAAsB,CAAA;AAEzD;;;GAGG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,OAAgB,EAAE,KAAK,GAAG,QAAQ,EAAU,EAAE;IACnE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA;IACnC,IAAI,MAAM,KAAK,SAAS;QAAE,MAAM,IAAI,QAAQ,CAAC,kBAAkB,EAAE,iCAAiC,KAAK,EAAE,CAAC,CAAA;IAC1G,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,OAAgB,EAAE,KAAK,GAAG,WAAW,EAA0B,EAAE;IACzF,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA;IACtC,OAAO,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAA;AACrD,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAW,EAAE,CAClD,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAiB,CAAC,CAAC,CAAC,EAAE,CAAA;AAEhG,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAE5F,0FAA0F;AAC1F,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAY,EAAE,CACnD,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;IAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAA;IACxB,IAAI,MAAM,KAAK,SAAS;QACtB,MAAM,IAAI,QAAQ,CAAC,kBAAkB,EAAE,mDAAmD,CAAC,CAAA;IAC7F,OAAO,MAAM,CAAA;AACf,CAAC,CAAC,CAAA;AAEJ,2GAA2G;AAC3G,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,SAAiB,EAAS,EAAE;IACpD,MAAM,IAAI,QAAQ,CAAC,kBAAkB,EAAE,GAAG,SAAS,0BAA0B,CAAC,CAAA;AAChF,CAAC,CAAA"}

package/dist/spec/identity.d.ts

@@ -0,0 +1,57 @@
+/**
+ * What we claim to be on the wire.
+ *
+ * **We imitate MAX's own web client rather than announcing ourselves** (`REQUIREMENTS.md` §34), so
+ * none of these values names this tool. Fields, their order and the versions are what web.max.ru
+ * sent on 2026-09-25 (`src/testing/fixtures/web-capture-2026-09-25.json`, the INIT frame).
+ *
+ * **Built from this machine, as the web client builds it from the browser** (`MAX-55`): timezone
+ * from `Intl`, the language from the system, the OS and the matching Chrome user agent from the
+ * platform. A fixed value would give every install of a public package the same Madrid-and-Linux
+ * browser. How web.max.ru fills each field: `docs/dev/capture/2026-09-25-web-tab.md`.
+ *
+ * The device identity is deliberately not here: it is generated once per profile and stored,
+ * because a client presenting a new device on every command is not imitating anything.
+ */
+/**
+ * When `APP_VERSION` and `CHROME` were read from a live tab. MAX refuses a client version it has
+ * dropped (PyMax #86), so `max doctor` reports their age (`MAX-39`); a release updates all three.
+ */
+export declare const CLIENT: {
+    readonly appVersion: "26.9.8";
+    readonly chrome: "Chrome/151.0.0.0";
+    readonly readOn: "2026-09-25";
+};
+export interface Host {
+    platform: string;
+    timeZone: string | undefined;
+    locale: string | undefined;
+}
+export declare const thisHost: () => Host;
+export declare const webUserAgent: ({ platform, timeZone, locale }: Host) => {
+    readonly deviceType: "WEB";
+    readonly pushDeviceType: "WEBPUSH";
+    readonly locale: string;
+    readonly deviceLocale: string;
+    readonly osVersion: "Linux" | "Windows" | "macOS";
+    readonly deviceName: "Chrome";
+    readonly headerUserAgent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" | "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" | "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36";
+    readonly isPwa: false;
+    readonly appVersion: "26.9.8";
+    readonly screen: "1080x1920 1.0x" | "900x1440 2.0x";
+    readonly timezone: string;
+};
+export declare const WEB_USER_AGENT: {
+    readonly deviceType: "WEB";
+    readonly pushDeviceType: "WEBPUSH";
+    readonly locale: string;
+    readonly deviceLocale: string;
+    readonly osVersion: "Linux" | "Windows" | "macOS";
+    readonly deviceName: "Chrome";
+    readonly headerUserAgent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" | "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" | "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36";
+    readonly isPwa: false;
+    readonly appVersion: "26.9.8";
+    readonly screen: "1080x1920 1.0x" | "900x1440 2.0x";
+    readonly timezone: string;
+};
+//# sourceMappingURL=identity.d.ts.map

package/dist/spec/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../src/spec/identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH;;;GAGG;AACH,eAAO,MAAM,MAAM;aAAK,UAAU;aAAe,MAAM;aAAU,MAAM,EAAE,YAAY;CAAW,CAAA;AAYhG,MAAM,WAAW,IAAI;IACnB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;CAC3B;AAED,eAAO,MAAM,QAAQ,QAAO,IAG3B,CAAA;AAED,eAAO,MAAM,YAAY,mCAAoC,IAAI;aAI7D,UAAU,EAAE,KAAK;aACjB,cAAc,EAAE,SAAS;aACzB,MAAM;aACN,YAAY;aACZ,SAAS;aACT,UAAU,EAAE,QAAQ;aACpB,eAAe;aACf,KAAK;aACL,UAAU;aACV,MAAM;aACN,QAAQ;CAEX,CAAA;AAED,eAAO,MAAM,cAAc;yBAdX,KAAK;6BACD,SAAS;;;;yBAIb,QAAQ;;;;;;CAS8B,CAAA"}