agentic-comments 0.6.0 → 0.7.0

package/dist/{chunk-T77DPNIV.js → chunk-B7LTOLUO.js}

@@ -7,7 +7,7 @@ import {
   textAnchor,
   textOf,
   textRange
-} from "./chunk-VAVKBAHM.js";
+} from "./chunk-6MS4LASK.js";
 
 // src/local-host.ts
 import * as Y from "yjs";

package/dist/{chunk-ES3NZ7SX.js → chunk-EFO5PSJL.js}

@@ -1,6 +1,6 @@
 // src/version.ts
 import { createRequire } from "module";
-var VERSION = true ? "0.6.0" : readPackageVersion();
+var VERSION = true ? "0.7.0" : readPackageVersion();
 
 export {
   VERSION

package/dist/{chunk-2NBFTJ47.js → chunk-M77Q5CWI.js}

@@ -2,7 +2,7 @@ import {
   CommentsError,
   PRINCIPAL_KINDS,
   stamp
-} from "./chunk-VAVKBAHM.js";
+} from "./chunk-6MS4LASK.js";
 
 // src/file-store.ts
 import { createHash } from "crypto";
@@ -248,7 +248,10 @@ import { PrincipalParseError, parsePrincipal } from "agentic-identity";
 function operatorActor(as, scopes) {
   const value = as?.trim();
   const cut = value === void 0 ? -1 : value.indexOf(":");
-  if (value === void 0 || cut < 1 || cut === value.length - 1) {
+  if (value === void 0 || value === "") {
+    throw new CommentsError("INVALID_AUTHOR", `no principal: set AGENTIC_COMMENTS_AS=kind:name (or pass --as), for example agent_of_human:scribe. Kinds: ${PRINCIPAL_KINDS.join(", ")}`);
+  }
+  if (cut < 1 || cut === value.length - 1) {
     throw new CommentsError("INVALID_AUTHOR", `set the principal as kind:name, for example human:ada. Kinds: ${PRINCIPAL_KINDS.join(", ")}`);
   }
   const list = scopes === void 0 || scopes.trim() === "" ? [] : scopes.split(",").map((s) => s.trim());

package/dist/{chunk-SR2A5OZW.js → chunk-OV2GGL3T.js}

@@ -1,12 +1,12 @@
 import {
   VERSION
-} from "./chunk-ES3NZ7SX.js";
+} from "./chunk-EFO5PSJL.js";
 import {
   CommentsService
-} from "./chunk-T77DPNIV.js";
+} from "./chunk-B7LTOLUO.js";
 import {
   CommentsError
-} from "./chunk-VAVKBAHM.js";
+} from "./chunk-6MS4LASK.js";
 
 // src/mcp.ts
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";

package/dist/chunk-UEQL27KF.js

@@ -0,0 +1,148 @@
+// src/client.ts
+var CODES = {
+  INVALID_AUTHOR: true,
+  INVALID_INPUT: true,
+  INVALID_ANCHOR: true,
+  NO_THREAD: true,
+  NO_MESSAGE: true,
+  THREAD_RESOLVED: true,
+  CORRUPT: true,
+  NO_SUGGESTION: true,
+  FORBIDDEN: true,
+  ALREADY_DECIDED: true,
+  APPLY_FAILED: true,
+  RELOCATE_FAILED: true,
+  STORE_MISSING: true,
+  STORE_EXISTS: true,
+  STORE_CORRUPT: true,
+  STORE_LOCKED: true,
+  STORE_FULL: true,
+  NO_DOCUMENT: true,
+  DOCUMENT_EXISTS: true,
+  CONFLICT: true,
+  MISCONFIGURED: true,
+  USAGE: true,
+  UNAUTHENTICATED: true,
+  NOT_FOUND: true,
+  INTERNAL: true,
+  UNKNOWN: true
+};
+var isKnownCode = (v) => typeof v === "string" && Object.hasOwn(CODES, v);
+var CommentsApiError = class extends Error {
+  code;
+  status;
+  constructor(code, status, message) {
+    super(message);
+    this.name = "CommentsApiError";
+    this.code = code;
+    this.status = status;
+  }
+};
+var KINDS = { human: true, agent_of_human: true, agent_of_agent: true, agent: true, user_token: true };
+var isObject = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+var isString = (v) => typeof v === "string";
+var isAuthor = (v) => isObject(v) && typeof v.kind === "string" && Object.hasOwn(KINDS, v.kind) && isString(v.name);
+var personThread = (v) => isObject(v) && isString(v.threadId) && isObject(v.anchor) && Array.isArray(v.messages) && v.messages.every(SHAPES.message) && (v.statusChange === void 0 || isObject(v.statusChange) && (v.statusChange.status === "open" || v.statusChange.status === "resolved") && isString(v.statusChange.at) && isAuthor(v.statusChange.by));
+var SHAPES = {
+  me: (v) => isObject(v) && (typeof v.kind === "string" && Object.hasOwn(KINDS, v.kind)) && isString(v.name) && Array.isArray(v.scopes) && v.scopes.every(isString),
+  created: (v) => isObject(v) && isString(v.id),
+  document: (v) => isObject(v) && isString(v.id) && isString(v.text),
+  thread: (v) => isObject(v) && isString(v.id) && isObject(v.anchor) && isObject(v.anchorState) && isString(v.anchorState.state) && (v.status === "open" || v.status === "resolved") && isAuthor(v.statusBy) && isString(v.statusAt) && Array.isArray(v.messages) && v.messages.every(SHAPES.message) && typeof v.skipped === "number",
+  threads: (v) => Array.isArray(v) && v.every(SHAPES.thread),
+  message: (v) => isObject(v) && isString(v.id) && isString(v.at) && isString(v.body) && Array.isArray(v.mentions) && v.mentions.every(isString) && isAuthor(v.author) && (v.editedAt === void 0 || isString(v.editedAt)) && (v.editedBy === void 0 || isAuthor(v.editedBy)),
+  suggestion: (v) => isObject(v) && isString(v.id) && isObject(v.anchor) && isObject(v.anchorState) && isString(v.anchorState.state) && (v.status === "pending" || v.status === "accepted" || v.status === "rejected") && isAuthor(v.author) && isString(v.createdAt) && "change" in v && (v.summary === void 0 || isString(v.summary)) && (v.decidedBy === void 0 || isAuthor(v.decidedBy)) && (v.decidedAt === void 0 || isString(v.decidedAt)),
+  suggestions: (v) => Array.isArray(v) && v.every(SHAPES.suggestion),
+  deletedMessage: (v) => isObject(v) && isString(v.threadId) && isString(v.messageId),
+  deletedThread: (v) => isObject(v) && isString(v.threadId),
+  person: (v) => isObject(v) && isString(v.person) && isString(v.exportedAt) && Array.isArray(v.threads) && v.threads.every(personThread) && Array.isArray(v.edits) && v.edits.every((e) => isObject(e) && isString(e.threadId) && isString(e.messageId) && isString(e.at)) && typeof v.unread === "number" && isObject(v.suggestions) && Array.isArray(v.suggestions.authored) && v.suggestions.authored.every(SHAPES.suggestion) && Array.isArray(v.suggestions.decided) && v.suggestions.decided.every((d) => isObject(d) && isString(d.id) && (d.status === "accepted" || d.status === "rejected") && isString(d.at)) && typeof v.suggestions.unread === "number",
+  erased: (v) => isObject(v) && ["messages", "statuses", "edits", "suggestions", "decisions"].every((k) => typeof v[k] === "number")
+};
+function createClient(options) {
+  if (typeof options.baseUrl !== "string" || options.baseUrl === "") throw new TypeError("createClient needs a baseUrl");
+  if (typeof options.token !== "string" || options.token === "") throw new TypeError("createClient needs a token");
+  let origin;
+  try {
+    origin = new URL(options.baseUrl);
+  } catch {
+    throw new TypeError("baseUrl must be an absolute URL");
+  }
+  if (origin.protocol !== "https:" && origin.protocol !== "http:") throw new TypeError("baseUrl must be an http or https URL");
+  if (origin.search !== "" || origin.hash !== "" || origin.username !== "" || origin.password !== "") {
+    throw new TypeError("baseUrl must have no query, hash, or credentials");
+  }
+  const root = `${origin.origin}${origin.pathname.replace(/\/+$/, "")}/api/v1`;
+  const token = options.token;
+  const send = (input, init) => {
+    const run = options.fetch ?? globalThis.fetch;
+    return run(input, init);
+  };
+  const seg = (value) => {
+    if (typeof value !== "string" || /^(?:\.|%2e){0,2}$/i.test(value)) throw new TypeError("an id must be a non-empty string that is not . or ..");
+    return encodeURIComponent(value);
+  };
+  const query = (filter) => {
+    const params = new URLSearchParams();
+    for (const [key, value] of Object.entries(filter ?? {})) if (value !== void 0) params.set(key, String(value));
+    const text = params.toString();
+    return text === "" ? "" : `?${text}`;
+  };
+  async function call(method, path, body, callOptions, shape) {
+    const headers = { authorization: `Bearer ${token}` };
+    if (body !== void 0) headers["content-type"] = "application/json";
+    const response = await send(`${root}${path}`, {
+      method,
+      headers,
+      body: body === void 0 ? void 0 : JSON.stringify(body),
+      signal: callOptions?.signal,
+      // Never follow a redirect: it would send a write to another host.
+      redirect: "manual"
+    });
+    const text = await response.text();
+    let parsed;
+    try {
+      parsed = text === "" ? void 0 : JSON.parse(text);
+    } catch {
+      parsed = void 0;
+    }
+    if (!response.ok) {
+      const error = parsed?.error;
+      const code = isKnownCode(error?.code) ? error.code : "UNKNOWN";
+      const message = typeof error?.message === "string" ? error.message : `HTTP ${response.status}`;
+      throw new CommentsApiError(code, response.status, message);
+    }
+    if (!SHAPES[shape](parsed)) throw new CommentsApiError("UNKNOWN", response.status, `the reply is not a ${shape}`);
+    return parsed;
+  }
+  const doc = (id) => `/docs/${seg(id)}`;
+  const thread = (id, threadId) => `${doc(id)}/threads/${seg(threadId)}`;
+  const suggestion = (id, suggestionId) => `${doc(id)}/suggestions/${seg(suggestionId)}`;
+  const methods = {
+    me: (o) => call("GET", "/me", void 0, o, "me"),
+    createDocument: (input, o) => call("POST", "/docs", input, o, "created"),
+    getDocument: (id, o) => call("GET", doc(id), void 0, o, "document"),
+    listThreads: (id, filter, o) => call("GET", `${doc(id)}/threads${query(filter)}`, void 0, o, "threads"),
+    getThread: (id, threadId, o) => call("GET", thread(id, threadId), void 0, o, "thread"),
+    addThread: (id, input, o) => call("POST", `${doc(id)}/threads`, input, o, "thread"),
+    reply: (id, threadId, input, o) => call("POST", `${thread(id, threadId)}/replies`, input, o, "message"),
+    resolve: (id, threadId, o) => call("POST", `${thread(id, threadId)}/resolve`, void 0, o, "thread"),
+    reopen: (id, threadId, o) => call("POST", `${thread(id, threadId)}/reopen`, void 0, o, "thread"),
+    relocate: (id, threadId, o) => call("POST", `${thread(id, threadId)}/relocate`, void 0, o, "thread"),
+    editMessage: (id, threadId, messageId, input, o) => call("PATCH", `${thread(id, threadId)}/messages/${seg(messageId)}`, input, o, "message"),
+    deleteMessage: (id, threadId, messageId, o) => call("DELETE", `${thread(id, threadId)}/messages/${seg(messageId)}`, void 0, o, "deletedMessage"),
+    deleteThread: (id, threadId, o) => call("DELETE", thread(id, threadId), void 0, o, "deletedThread"),
+    exportPerson: (id, person, o) => call("GET", `${doc(id)}/people/${seg(person)}/export`, void 0, o, "person"),
+    erasePerson: (id, person, o) => call("DELETE", `${doc(id)}/people/${seg(person)}`, void 0, o, "erased"),
+    listSuggestions: (id, filter, o) => call("GET", `${doc(id)}/suggestions${query(filter)}`, void 0, o, "suggestions"),
+    suggest: (id, input, o) => call("POST", `${doc(id)}/suggestions`, input, o, "suggestion"),
+    accept: (id, suggestionId, o) => call("POST", `${suggestion(id, suggestionId)}/accept`, void 0, o, "suggestion"),
+    reject: (id, suggestionId, o) => call("POST", `${suggestion(id, suggestionId)}/reject`, void 0, o, "suggestion")
+  };
+  return Object.fromEntries(
+    Object.entries(methods).map(([name, method]) => [name, async (...args) => method(...args)])
+  );
+}
+
+export {
+  CommentsApiError,
+  createClient
+};

package/dist/cli.js

@@ -1,19 +1,19 @@
 #!/usr/bin/env node
+import {
+  VERSION
+} from "./chunk-EFO5PSJL.js";
 import {
   FileStore,
   lockTimeoutFrom,
   operatorActor
-} from "./chunk-2NBFTJ47.js";
-import {
-  VERSION
-} from "./chunk-ES3NZ7SX.js";
+} from "./chunk-M77Q5CWI.js";
 import {
   CommentsService,
   TEXT_ROOT
-} from "./chunk-T77DPNIV.js";
+} from "./chunk-B7LTOLUO.js";
 import {
   CommentsError
-} from "./chunk-VAVKBAHM.js";
+} from "./chunk-6MS4LASK.js";
 
 // src/cli.ts
 import { readFileSync, realpathSync } from "fs";
@@ -69,6 +69,8 @@ function parseArgs(argv) {
   if (command === void 0 || command === "--help" || command === "-h") return { command: "help", flags: {}, many: {} };
   if (command === "--version" || command === "-V") return { command: "version", flags: {}, many: {} };
   if (!COMMANDS.includes(command)) throw new UsageError(`unknown command "${command}"`);
+  if (command === "mcp" && rest.some((a) => a === "--help" || a === "-h")) return { command: "help", flags: {}, many: {} };
+  if (command === "mcp" && rest.some((a) => a === "--version" || a === "-V" || a === "-v")) return { command: "version", flags: {}, many: {} };
   const parsed = { command, flags: {}, many: {} };
   for (let i = 0; i < rest.length; i++) {
     const arg = rest[i];
@@ -176,7 +178,7 @@ async function runCli(argv, io) {
       return 0;
     }
     if (p.command === "mcp") {
-      const { startMcp } = await import("./mcp-JX5L6VQW.js");
+      const { startMcp } = await import("./mcp-LP3X55C2.js");
       await startMcp(store, operatorActor(p.flags["--as"] ?? io.env.AGENTIC_COMMENTS_AS, io.env.AGENTIC_COMMENTS_SCOPES));
       return 0;
     }

package/dist/client.js

@@ -1,146 +1,7 @@
-// src/client.ts
-var CODES = {
-  INVALID_AUTHOR: true,
-  INVALID_INPUT: true,
-  INVALID_ANCHOR: true,
-  NO_THREAD: true,
-  NO_MESSAGE: true,
-  THREAD_RESOLVED: true,
-  CORRUPT: true,
-  NO_SUGGESTION: true,
-  FORBIDDEN: true,
-  ALREADY_DECIDED: true,
-  APPLY_FAILED: true,
-  RELOCATE_FAILED: true,
-  STORE_MISSING: true,
-  STORE_EXISTS: true,
-  STORE_CORRUPT: true,
-  STORE_LOCKED: true,
-  STORE_FULL: true,
-  NO_DOCUMENT: true,
-  DOCUMENT_EXISTS: true,
-  CONFLICT: true,
-  MISCONFIGURED: true,
-  USAGE: true,
-  UNAUTHENTICATED: true,
-  NOT_FOUND: true,
-  INTERNAL: true,
-  UNKNOWN: true
-};
-var isKnownCode = (v) => typeof v === "string" && Object.hasOwn(CODES, v);
-var CommentsApiError = class extends Error {
-  code;
-  status;
-  constructor(code, status, message) {
-    super(message);
-    this.name = "CommentsApiError";
-    this.code = code;
-    this.status = status;
-  }
-};
-var KINDS = { human: true, agent_of_human: true, agent_of_agent: true, agent: true, user_token: true };
-var isObject = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
-var isString = (v) => typeof v === "string";
-var isAuthor = (v) => isObject(v) && typeof v.kind === "string" && Object.hasOwn(KINDS, v.kind) && isString(v.name);
-var personThread = (v) => isObject(v) && isString(v.threadId) && isObject(v.anchor) && Array.isArray(v.messages) && v.messages.every(SHAPES.message) && (v.statusChange === void 0 || isObject(v.statusChange) && (v.statusChange.status === "open" || v.statusChange.status === "resolved") && isString(v.statusChange.at) && isAuthor(v.statusChange.by));
-var SHAPES = {
-  me: (v) => isObject(v) && (typeof v.kind === "string" && Object.hasOwn(KINDS, v.kind)) && isString(v.name) && Array.isArray(v.scopes) && v.scopes.every(isString),
-  created: (v) => isObject(v) && isString(v.id),
-  document: (v) => isObject(v) && isString(v.id) && isString(v.text),
-  thread: (v) => isObject(v) && isString(v.id) && isObject(v.anchor) && isObject(v.anchorState) && isString(v.anchorState.state) && (v.status === "open" || v.status === "resolved") && isAuthor(v.statusBy) && isString(v.statusAt) && Array.isArray(v.messages) && v.messages.every(SHAPES.message) && typeof v.skipped === "number",
-  threads: (v) => Array.isArray(v) && v.every(SHAPES.thread),
-  message: (v) => isObject(v) && isString(v.id) && isString(v.at) && isString(v.body) && Array.isArray(v.mentions) && v.mentions.every(isString) && isAuthor(v.author) && (v.editedAt === void 0 || isString(v.editedAt)) && (v.editedBy === void 0 || isAuthor(v.editedBy)),
-  suggestion: (v) => isObject(v) && isString(v.id) && isObject(v.anchor) && isObject(v.anchorState) && isString(v.anchorState.state) && (v.status === "pending" || v.status === "accepted" || v.status === "rejected") && isAuthor(v.author) && isString(v.createdAt) && "change" in v && (v.summary === void 0 || isString(v.summary)) && (v.decidedBy === void 0 || isAuthor(v.decidedBy)) && (v.decidedAt === void 0 || isString(v.decidedAt)),
-  suggestions: (v) => Array.isArray(v) && v.every(SHAPES.suggestion),
-  deletedMessage: (v) => isObject(v) && isString(v.threadId) && isString(v.messageId),
-  deletedThread: (v) => isObject(v) && isString(v.threadId),
-  person: (v) => isObject(v) && isString(v.person) && isString(v.exportedAt) && Array.isArray(v.threads) && v.threads.every(personThread) && Array.isArray(v.edits) && v.edits.every((e) => isObject(e) && isString(e.threadId) && isString(e.messageId) && isString(e.at)) && typeof v.unread === "number" && isObject(v.suggestions) && Array.isArray(v.suggestions.authored) && v.suggestions.authored.every(SHAPES.suggestion) && Array.isArray(v.suggestions.decided) && v.suggestions.decided.every((d) => isObject(d) && isString(d.id) && (d.status === "accepted" || d.status === "rejected") && isString(d.at)) && typeof v.suggestions.unread === "number",
-  erased: (v) => isObject(v) && ["messages", "statuses", "edits", "suggestions", "decisions"].every((k) => typeof v[k] === "number")
-};
-function createClient(options) {
-  if (typeof options.baseUrl !== "string" || options.baseUrl === "") throw new TypeError("createClient needs a baseUrl");
-  if (typeof options.token !== "string" || options.token === "") throw new TypeError("createClient needs a token");
-  let origin;
-  try {
-    origin = new URL(options.baseUrl);
-  } catch {
-    throw new TypeError("baseUrl must be an absolute URL");
-  }
-  if (origin.protocol !== "https:" && origin.protocol !== "http:") throw new TypeError("baseUrl must be an http or https URL");
-  if (origin.search !== "" || origin.hash !== "" || origin.username !== "" || origin.password !== "") {
-    throw new TypeError("baseUrl must have no query, hash, or credentials");
-  }
-  const root = `${origin.origin}${origin.pathname.replace(/\/+$/, "")}/api/v1`;
-  const token = options.token;
-  const send = (input, init) => {
-    const run = options.fetch ?? globalThis.fetch;
-    return run(input, init);
-  };
-  const seg = (value) => {
-    if (typeof value !== "string" || /^(?:\.|%2e){0,2}$/i.test(value)) throw new TypeError("an id must be a non-empty string that is not . or ..");
-    return encodeURIComponent(value);
-  };
-  const query = (filter) => {
-    const params = new URLSearchParams();
-    for (const [key, value] of Object.entries(filter ?? {})) if (value !== void 0) params.set(key, String(value));
-    const text = params.toString();
-    return text === "" ? "" : `?${text}`;
-  };
-  async function call(method, path, body, callOptions, shape) {
-    const headers = { authorization: `Bearer ${token}` };
-    if (body !== void 0) headers["content-type"] = "application/json";
-    const response = await send(`${root}${path}`, {
-      method,
-      headers,
-      body: body === void 0 ? void 0 : JSON.stringify(body),
-      signal: callOptions?.signal,
-      // Never follow a redirect: it would send a write to another host.
-      redirect: "manual"
-    });
-    const text = await response.text();
-    let parsed;
-    try {
-      parsed = text === "" ? void 0 : JSON.parse(text);
-    } catch {
-      parsed = void 0;
-    }
-    if (!response.ok) {
-      const error = parsed?.error;
-      const code = isKnownCode(error?.code) ? error.code : "UNKNOWN";
-      const message = typeof error?.message === "string" ? error.message : `HTTP ${response.status}`;
-      throw new CommentsApiError(code, response.status, message);
-    }
-    if (!SHAPES[shape](parsed)) throw new CommentsApiError("UNKNOWN", response.status, `the reply is not a ${shape}`);
-    return parsed;
-  }
-  const doc = (id) => `/docs/${seg(id)}`;
-  const thread = (id, threadId) => `${doc(id)}/threads/${seg(threadId)}`;
-  const suggestion = (id, suggestionId) => `${doc(id)}/suggestions/${seg(suggestionId)}`;
-  const methods = {
-    me: (o) => call("GET", "/me", void 0, o, "me"),
-    createDocument: (input, o) => call("POST", "/docs", input, o, "created"),
-    getDocument: (id, o) => call("GET", doc(id), void 0, o, "document"),
-    listThreads: (id, filter, o) => call("GET", `${doc(id)}/threads${query(filter)}`, void 0, o, "threads"),
-    getThread: (id, threadId, o) => call("GET", thread(id, threadId), void 0, o, "thread"),
-    addThread: (id, input, o) => call("POST", `${doc(id)}/threads`, input, o, "thread"),
-    reply: (id, threadId, input, o) => call("POST", `${thread(id, threadId)}/replies`, input, o, "message"),
-    resolve: (id, threadId, o) => call("POST", `${thread(id, threadId)}/resolve`, void 0, o, "thread"),
-    reopen: (id, threadId, o) => call("POST", `${thread(id, threadId)}/reopen`, void 0, o, "thread"),
-    relocate: (id, threadId, o) => call("POST", `${thread(id, threadId)}/relocate`, void 0, o, "thread"),
-    editMessage: (id, threadId, messageId, input, o) => call("PATCH", `${thread(id, threadId)}/messages/${seg(messageId)}`, input, o, "message"),
-    deleteMessage: (id, threadId, messageId, o) => call("DELETE", `${thread(id, threadId)}/messages/${seg(messageId)}`, void 0, o, "deletedMessage"),
-    deleteThread: (id, threadId, o) => call("DELETE", thread(id, threadId), void 0, o, "deletedThread"),
-    exportPerson: (id, person, o) => call("GET", `${doc(id)}/people/${seg(person)}/export`, void 0, o, "person"),
-    erasePerson: (id, person, o) => call("DELETE", `${doc(id)}/people/${seg(person)}`, void 0, o, "erased"),
-    listSuggestions: (id, filter, o) => call("GET", `${doc(id)}/suggestions${query(filter)}`, void 0, o, "suggestions"),
-    suggest: (id, input, o) => call("POST", `${doc(id)}/suggestions`, input, o, "suggestion"),
-    accept: (id, suggestionId, o) => call("POST", `${suggestion(id, suggestionId)}/accept`, void 0, o, "suggestion"),
-    reject: (id, suggestionId, o) => call("POST", `${suggestion(id, suggestionId)}/reject`, void 0, o, "suggestion")
-  };
-  return Object.fromEntries(
-    Object.entries(methods).map(([name, method]) => [name, async (...args) => method(...args)])
-  );
-}
+import {
+  CommentsApiError,
+  createClient
+} from "./chunk-UEQL27KF.js";
 export {
   CommentsApiError,
   createClient

package/dist/index.js

@@ -1,6 +1,6 @@
 import {
   VERSION
-} from "./chunk-ES3NZ7SX.js";
+} from "./chunk-EFO5PSJL.js";
 import {
   ACCEPT_SCOPE,
   Actor,
@@ -17,7 +17,7 @@ import {
   textAnchor,
   textOf,
   validDate
-} from "./chunk-VAVKBAHM.js";
+} from "./chunk-6MS4LASK.js";
 
 // src/notifications.ts
 import * as Y from "yjs";

package/dist/local.js

@@ -3,14 +3,14 @@ import {
   MAX_FILE,
   lockTimeoutFrom,
   operatorActor
-} from "./chunk-2NBFTJ47.js";
+} from "./chunk-M77Q5CWI.js";
 import {
   CommentsService,
   TEXT_ROOT,
   VALUES_ROOT,
   localHost
-} from "./chunk-T77DPNIV.js";
-import "./chunk-VAVKBAHM.js";
+} from "./chunk-B7LTOLUO.js";
+import "./chunk-6MS4LASK.js";
 export {
   CommentsService,
   FileStore,

package/dist/mcp-LP3X55C2.js

@@ -0,0 +1,11 @@
+import {
+  createMcpServer,
+  startMcp
+} from "./chunk-OV2GGL3T.js";
+import "./chunk-EFO5PSJL.js";
+import "./chunk-B7LTOLUO.js";
+import "./chunk-6MS4LASK.js";
+export {
+  createMcpServer,
+  startMcp
+};

package/dist/mcp-bin.js

@@ -1,17 +1,17 @@
 #!/usr/bin/env node
-import {
-  FileStore,
-  lockTimeoutFrom,
-  operatorActor
-} from "./chunk-2NBFTJ47.js";
 import {
   startMcp
-} from "./chunk-SR2A5OZW.js";
+} from "./chunk-OV2GGL3T.js";
 import {
   VERSION
-} from "./chunk-ES3NZ7SX.js";
-import "./chunk-T77DPNIV.js";
-import "./chunk-VAVKBAHM.js";
+} from "./chunk-EFO5PSJL.js";
+import {
+  FileStore,
+  lockTimeoutFrom,
+  operatorActor
+} from "./chunk-M77Q5CWI.js";
+import "./chunk-B7LTOLUO.js";
+import "./chunk-6MS4LASK.js";
 
 // src/mcp-bin.ts
 var MCP_HELP = `agentic-comments-mcp ${VERSION}
@@ -27,7 +27,7 @@ Usage: agentic-comments-mcp [--help | --version]`;
 var args = process.argv.slice(2);
 if (args.includes("--help") || args.includes("-h")) {
   console.log(MCP_HELP);
-} else if (args.includes("--version") || args.includes("-v")) {
+} else if (args.includes("--version") || args.includes("-V") || args.includes("-v")) {
   console.log(VERSION);
 } else {
   try {

package/dist/ui.css

@@ -0,0 +1,54 @@
+/* The comments panel. It uses the agentic-design tokens and its own agd-comments classes. */
+.agd-comments {
+  display: grid;
+  grid-template-columns: minmax(0, 1fr);
+  gap: var(--agd-space-16);
+  max-width: 44rem;
+  margin-inline: auto;
+  padding: var(--agd-space-16);
+  color: var(--agd-color-text);
+  font-family: var(--agd-font-family-sans);
+  font-size: var(--agd-font-size-md);
+  line-height: var(--agd-line-height-normal);
+}
+.agd-comments__top { display: flex; flex-wrap: wrap; align-items: center; justify-content: space-between; gap: var(--agd-space-8); }
+.agd-comments__title { margin: 0; font-size: var(--agd-font-size-xl); font-weight: var(--agd-font-weight-semibold); line-height: var(--agd-line-height-tight); }
+.agd-comments__me { display: flex; align-items: center; gap: var(--agd-space-8); margin: 0; color: var(--agd-color-text-muted); font-size: var(--agd-font-size-sm); }
+.agd-comments__section { display: grid; grid-template-columns: minmax(0, 1fr); gap: var(--agd-space-12, 12px); }
+.agd-comments__heading { display: flex; align-items: center; gap: var(--agd-space-8); margin: 0; font-size: var(--agd-font-size-lg); font-weight: var(--agd-font-weight-semibold); }
+.agd-comments__count { min-width: 1.5rem; padding: 0 var(--agd-space-6); border-radius: var(--agd-radius-full); background: var(--agd-color-surface-sunken); color: var(--agd-color-text-muted); font-size: var(--agd-font-size-sm); font-weight: var(--agd-font-weight-medium); text-align: center; }
+.agd-comments__views { display: flex; flex-wrap: wrap; gap: var(--agd-space-8); }
+.agd-comments__list, .agd-comments__messages { display: grid; grid-template-columns: minmax(0, 1fr); gap: var(--agd-space-12, 12px); margin: 0; padding: 0; list-style: none; }
+.agd-comments__thread { display: grid; grid-template-columns: minmax(0, 1fr); gap: var(--agd-space-8); padding: var(--agd-space-16); border: 1px solid var(--agd-color-border); border-radius: var(--agd-radius-lg); background: var(--agd-color-surface); }
+.agd-comments__thread > article { display: grid; grid-template-columns: minmax(0, 1fr); gap: var(--agd-space-8); }
+.agd-comments__item-top { display: flex; flex-wrap: wrap; align-items: center; justify-content: space-between; gap: var(--agd-space-8); }
+.agd-comments__item-title { display: flex; flex-wrap: wrap; align-items: center; gap: var(--agd-space-8); margin: 0; font-size: var(--agd-font-size-md); font-weight: var(--agd-font-weight-semibold); overflow-wrap: anywhere; }
+.agd-comments__status { font-size: var(--agd-font-size-xs); }
+.agd-comments__status--resolved, .agd-comments__status--accepted { background: var(--agd-color-success-subtle); color: var(--agd-color-success-text); }
+.agd-comments__status--rejected { background: var(--agd-color-danger-subtle); color: var(--agd-color-danger-text); }
+.agd-comments__status--pending, .agd-comments__status--open { background: var(--agd-color-accent-subtle); color: var(--agd-color-accent-text); }
+.agd-comments__anchor { margin: 0; }
+.agd-comments__label { color: var(--agd-color-text-muted); font-size: var(--agd-font-size-xs); font-weight: var(--agd-font-weight-medium); letter-spacing: 0.04em; text-transform: uppercase; }
+.agd-comments__quote { margin: var(--agd-space-4) 0 0; padding: var(--agd-space-4) var(--agd-space-12, 12px); border-inline-start: 3px solid var(--agd-color-border-strong); background: var(--agd-color-surface-sunken); border-radius: var(--agd-radius-sm); overflow-wrap: anywhere; }
+.agd-comments__state { margin: 0; padding: var(--agd-space-8) var(--agd-space-12, 12px); border-radius: var(--agd-radius-md); background: var(--agd-color-warning-subtle); color: var(--agd-color-warning-text); font-size: var(--agd-font-size-sm); overflow-wrap: anywhere; }
+.agd-comments__message { display: grid; gap: var(--agd-space-4); padding-top: var(--agd-space-8); border-top: 1px solid var(--agd-color-border); }
+.agd-comments__meta { display: flex; flex-wrap: wrap; align-items: center; gap: var(--agd-space-8); }
+.agd-comments__who { display: inline-flex; align-items: center; gap: var(--agd-space-8); }
+.agd-comments__name { font-weight: var(--agd-font-weight-semibold); overflow-wrap: anywhere; }
+.agd-comments__time { color: var(--agd-color-text-muted); font-size: var(--agd-font-size-sm); }
+.agd-comments__body { margin: 0; white-space: pre-wrap; overflow-wrap: anywhere; }
+.agd-comments__change { display: grid; grid-template-columns: minmax(0, 1fr); gap: var(--agd-space-4); margin: 0; }
+.agd-comments__code { padding: var(--agd-space-4) var(--agd-space-8); border-radius: var(--agd-radius-sm); background: var(--agd-color-surface-sunken); font-family: var(--agd-font-family-mono); font-size: var(--agd-font-size-sm); white-space: pre-wrap; overflow-wrap: anywhere; }
+.agd-comments__note, .agd-comments__empty { margin: 0; color: var(--agd-color-text-muted); font-size: var(--agd-font-size-sm); }
+.agd-comments__reply, .agd-comments__new { display: grid; grid-template-columns: minmax(0, 1fr); gap: var(--agd-space-8); }
+.agd-comments__new { padding: var(--agd-space-16); border: 1px solid var(--agd-color-border); border-radius: var(--agd-radius-lg); background: var(--agd-color-surface-raised); }
+.agd-comments__reply .agd-button, .agd-comments__new .agd-button { justify-self: start; }
+.agd-comments__actions { display: flex; flex-wrap: wrap; gap: var(--agd-space-8); }
+.agd-comments__error { margin: 0; padding: var(--agd-space-8) var(--agd-space-12, 12px); border: 1px solid var(--agd-color-danger); border-radius: var(--agd-radius-md); background: var(--agd-color-danger-subtle); color: var(--agd-color-danger-text); overflow-wrap: anywhere; }
+@media (max-width: 480px) {
+  .agd-comments { padding: var(--agd-space-12, 12px); }
+  .agd-comments__thread { padding: var(--agd-space-12, 12px); }
+}
+/* On a narrow screen the badge wraps, so its words are never cut off. */
+.agd-comments .agd-agent-badge { flex-wrap: wrap; row-gap: 0; }
+.agd-comments .agd-agent-badge__label, .agd-comments .agd-agent-badge__meta { white-space: normal; overflow: visible; overflow-wrap: anywhere; }

package/dist/ui.d.ts

@@ -0,0 +1,46 @@
+import * as react from 'react';
+import { CommentsClient, Me } from './client.js';
+export { createClient } from './client.js';
+import { b as Author, S as Suggestion } from './suggestions-CnkEcTuY.js';
+import './service-BvIE6t5n.js';
+import 'yjs';
+import './errors-C-xvp24-.js';
+import 'agentic-identity';
+
+/** The calls the panel makes. A `CommentsClient` fits, and so does any object with these methods. */
+type PanelClient = Pick<CommentsClient, "me" | "listThreads" | "addThread" | "reply" | "resolve" | "reopen" | "listSuggestions" | "accept" | "reject">;
+interface CommentsPanelProps {
+    client: PanelClient;
+    /** The document whose threads the panel shows. */
+    docId: string;
+    /** The heading. Defaults to "Comments". */
+    title?: string;
+    /** Show the form that starts a thread on a quote. On by default. A page that makes its own anchors turns it off. */
+    newThread?: boolean;
+    /** Name the person an agent acts for, when the host knows. The badge says "for unknown" without it. */
+    actingFor?: (author: Author) => string | undefined;
+}
+/**
+ * A threaded comments panel: thread list, reply box, resolve and reopen, the quote each thread points at, an agent or
+ * person mark on every message, and accept and reject buttons for suggestions. The buttons follow the product rule: an
+ * agent never decides its own suggestion. The server still checks every call, so a hidden button is a help and not a lock.
+ * It needs the `agentic-design/styles.css` and `agentic-comments/ui.css` styles on the page.
+ */
+declare function CommentsPanel({ client, docId, title, newThread, actingFor }: CommentsPanelProps): react.JSX.Element;
+
+type Need = "read" | "comment" | "write";
+/** Whether the principal holds a scope at least as strong as `need`. */
+declare function holds(me: Pick<Me, "scopes"> | undefined, need: Need): boolean;
+interface Decision {
+    allowed: boolean;
+    /** Plain words that say why not. Set when `allowed` is false. */
+    reason?: string;
+}
+/**
+ * Whether the signed-in principal may accept a suggestion, and whether it may reject one. The Worker checks the
+ * same rule, so this only decides what the page offers. A person may decide any suggestion. An agent needs the
+ * `comments:admin` scope or the `comments:accept` right, and never decides its own suggestion.
+ */
+declare function mayDecide(me: Me | undefined, suggestion: Pick<Suggestion, "author" | "status">): Decision;
+
+export { CommentsClient, CommentsPanel, type CommentsPanelProps, type Decision, Me, type Need, type PanelClient, holds, mayDecide };